download:

/files/driveridentifier_setup.exe

Full analysis: https://app.any.run/tasks/a6c62809-4980-4cb2-b4ba-8a094544a8f3
Verdict: Malicious activity
Analysis date: April 02, 2024, 22:01:15
OS: Windows 7 Professional Service Pack 1 (build: 7601, 32 bit)
Indicators:
MIME: application/x-dosexec
File info: PE32 executable (GUI) Intel 80386, for MS Windows
MD5:

BBB1AB345527B79D388AAF8C413FFE01

SHA1:

7D3C7A62404FA0E2AAD1343D4A2F9C7B06051846

SHA256:

07BB70C93CF1886213C4D89A00C0B88A2FBA8DD86E248765831EC7866CE6F67C

SSDEEP:

98304:a+cD4dnZLlr7OyUXrLQGKe89UqcOQmAWrjTiZ2SHH/KID5kQwV+V8DFP2sWgX674:he2xCHK6K

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    • Drops the executable file immediately after the start

      • driveridentifier_setup.exe (PID: 2340)
      • driveridentifier_setup.exe (PID: 2408)
      • driveridentifier_setup.tmp (PID: 2896)

  • SUSPICIOUS

    • Reads the Windows owner or organization settings

      • driveridentifier_setup.tmp (PID: 2896)

    • Drops 7-zip archiver for unpacking

      • driveridentifier_setup.tmp (PID: 2896)

    • Process drops legitimate windows executable

      • driveridentifier_setup.tmp (PID: 2896)

    • Reads security settings of Internet Explorer

      • driveridentifier_setup.tmp (PID: 2896)
      • DriverIdentifier.exe (PID: 1824)
      • MyDriverUploader.exe (PID: 3456)

    • Reads the Internet Settings

      • driveridentifier_setup.tmp (PID: 2896)
      • DriverIdentifier.exe (PID: 1824)
      • MyDriverUploader.exe (PID: 3456)
      • WMIC.exe (PID: 480)

    • Non-standard symbols in registry

      • driveridentifier_setup.tmp (PID: 2896)

    • Starts CMD.EXE for commands execution

      • php.exe (PID: 3108)

    • Uses WMIC.EXE to obtain operating system information

      • cmd.exe (PID: 696)

  • INFO

    • Create files in a temporary directory

      • driveridentifier_setup.exe (PID: 2340)
      • driveridentifier_setup.exe (PID: 2408)
      • driveridentifier_setup.tmp (PID: 2896)
      • DriverIdentifier.exe (PID: 1824)
      • MyDriverUploader.exe (PID: 3456)
      • php.exe (PID: 3108)

    • Checks supported languages

      • driveridentifier_setup.exe (PID: 2340)
      • driveridentifier_setup.tmp (PID: 3500)
      • driveridentifier_setup.exe (PID: 2408)
      • driveridentifier_setup.tmp (PID: 2896)
      • DriverIdentifier.exe (PID: 1824)
      • MyDriverUploader.exe (PID: 3456)
      • php.exe (PID: 3108)

    • Reads the computer name

      • driveridentifier_setup.tmp (PID: 3500)
      • driveridentifier_setup.tmp (PID: 2896)
      • DriverIdentifier.exe (PID: 1824)
      • MyDriverUploader.exe (PID: 3456)
      • php.exe (PID: 3108)

    • Creates files in the program directory

      • driveridentifier_setup.tmp (PID: 2896)
      • MyDriverUploader.exe (PID: 3456)

    • Creates a software uninstall entry

      • driveridentifier_setup.tmp (PID: 2896)

    • Application launched itself

      • msedge.exe (PID: 1972)
      • msedge.exe (PID: 1264)
      • msedge.exe (PID: 980)
      • msedge.exe (PID: 796)

    • Reads the machine GUID from the registry

      • DriverIdentifier.exe (PID: 1824)
      • php.exe (PID: 3108)

    • Creates files or folders in the user directory

      • DriverIdentifier.exe (PID: 1824)

    • Manual execution by a user

      • msedge.exe (PID: 980)
      • msedge.exe (PID: 796)

    • Checks operating system version

      • php.exe (PID: 3108)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.exe | Inno Setup installer (65.1)
.exe | Win32 EXE PECompact compressed (generic) (24.6)
.dll | Win32 Dynamic Link Library (generic) (3.9)
.exe | Win32 Executable (generic) (2.6)
.exe | Win16/32 Executable Delphi generic (1.2)

EXIF

EXE

MachineType: Intel 386 or later, and compatibles
TimeStamp: 2023:02:15 14:54:16+00:00
ImageFileCharacteristics: No relocs, Executable, No line numbers, No symbols, Bytes reversed lo, 32-bit, Bytes reversed hi
PEType: PE32
LinkerVersion: 2.25
CodeSize: 741888
InitializedDataSize: 35840
UninitializedDataSize: -
EntryPoint: 0xb5eec
OSVersion: 6.1
ImageVersion: 6
SubsystemVersion: 6.1
Subsystem: Windows GUI
FileVersionNumber: 6.1.0.0
ProductVersionNumber: 6.1.0.0
FileFlagsMask: 0x003f
FileFlags: (none)
FileOS: Win32
ObjectFileType: Executable application
FileSubtype: -
LanguageCode: Neutral
CharacterSet: Unicode
Comments: This installation was built with Inno Setup.
CompanyName: DriverIdentifier
FileDescription: DriverIdentifier Setup
FileVersion: 6.1
LegalCopyright:
OriginalFileName:
ProductName: DriverIdentifier
ProductVersion: 6.1
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
98
Monitored processes
58
Malicious processes
4
Suspicious processes
2

Behavior graph

Click at the process to see the details
start driveridentifier_setup.exe no specs driveridentifier_setup.tmp no specs driveridentifier_setup.exe driveridentifier_setup.tmp no specs driveridentifier.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe msedge.exe no specs msedge.exe no specs msedge.exe msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs mydriveruploader.exe no specs php.exe msedge.exe no specs msedge.exe no specs msedge.exe msedge.exe no specs msedge.exe msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs cmd.exe no specs wmic.exe no specs cmd.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
116"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1448 --field-trial-handle=1344,i,12618775965614639021,11789653885598089559,131072 /prefetch:3C:\Program Files\Microsoft\Edge\Application\msedge.exe
msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
268"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3544 --field-trial-handle=1276,i,3457446796927308428,10348999910462012137,131072 /prefetch:8C:\Program Files\Microsoft\Edge\Application\msedge.exe—msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
LOW
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
480wmic OS get OSArchitectureC:\Windows\System32\wbem\WMIC.exe—cmd.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
WMI Commandline Utility
Exit code:
0
Version:
6.1.7600.16385 (win7_rtm.090713-1255)
Modules
Images
c:\windows\system32\wbem\wmic.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\ole32.dll
c:\windows\system32\gdi32.dll
552"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4916 --field-trial-handle=1344,i,12618775965614639021,11789653885598089559,131072 /prefetch:8C:\Program Files\Microsoft\Edge\Application\msedge.exe—msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
LOW
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
568"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1208 --field-trial-handle=1324,i,3328287657083101776,160026525047436443,131072 /prefetch:2C:\Program Files\Microsoft\Edge\Application\msedge.exe—msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
LOW
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
680"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=4596 --field-trial-handle=1344,i,12618775965614639021,11789653885598089559,131072 /prefetch:8C:\Program Files\Microsoft\Edge\Application\msedge.exe—msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
LOW
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
696cmd.exe /c "wmic OS get OSArchitecture"C:\Windows\System32\cmd.exe—php.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Windows Command Processor
Exit code:
0
Version:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
Modules
Images
c:\windows\system32\cmd.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\winbrand.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
764"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=renderer --first-renderer-process --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2228 --field-trial-handle=1276,i,3457446796927308428,10348999910462012137,131072 /prefetch:1C:\Program Files\Microsoft\Edge\Application\msedge.exe—msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
LOW
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
796"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --flag-switches-begin --flag-switches-end --do-not-de-elevate "C:\Users\admin\AppData\Local\Temp\driveridentifier\driver.html"C:\Program Files\Microsoft\Edge\Application\msedge.exe
explorer.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
980"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --flag-switches-begin --flag-switches-end --do-not-de-elevate https://www.driveridentifier.com/?cmd=start&v=6.2&cmd_line=declinedC:\Program Files\Microsoft\Edge\Application\msedge.exe
explorer.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
Total events
24 847
Read events
24 675
Write events
154
Delete events
18

Modification events

(PID) Process:(2896) driveridentifier_setup.tmpKey:HKEY_CURRENT_USER\Software\Microsoft\RestartManager\Session0000
Operation:writeName:Owner
Value:
500B00008E44C54E4985DA01
(PID) Process:(2896) driveridentifier_setup.tmpKey:HKEY_CURRENT_USER\Software\Microsoft\RestartManager\Session0000
Operation:writeName:SessionHash
Value:
ADE5DAF982F26F0B4EDEF2FBEF5F9BD3DE85445F1DE79FC4DEDB405EEA5C1DC5
(PID) Process:(2896) driveridentifier_setup.tmpKey:HKEY_CURRENT_USER\Software\Microsoft\RestartManager\Session0000
Operation:writeName:Sequence
Value:
1
(PID) Process:(2896) driveridentifier_setup.tmpKey:HKEY_CURRENT_USER\Software\Microsoft\RestartManager\Session0000
Operation:writeName:RegFiles0000
Value:
C:\Program Files\Driver Identifier\DriverIdentifier.exe
(PID) Process:(2896) driveridentifier_setup.tmpKey:HKEY_CURRENT_USER\Software\Microsoft\RestartManager\Session0000
Operation:writeName:RegFilesHash
Value:
D11E12B048250980C673FEE12A3E0174CD2DAFD119C9A9D160BDA704A27FC1D2
(PID) Process:(2896) driveridentifier_setup.tmpKey:HKEY_LOCAL_MACHINE\SOFTWARE\Classes\driveruploader
Operation:writeName:URL Protocol
Value:
(PID) Process:(2896) driveridentifier_setup.tmpKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{40A3E5DB-5EF8-4F04-BF3E-7AB87C4AE85A}_is1
Operation:writeName:Inno Setup: Setup Version
Value:
6.2.2
(PID) Process:(2896) driveridentifier_setup.tmpKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{40A3E5DB-5EF8-4F04-BF3E-7AB87C4AE85A}_is1
Operation:writeName:Inno Setup: App Path
Value:
C:\Program Files\Driver Identifier
(PID) Process:(2896) driveridentifier_setup.tmpKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{40A3E5DB-5EF8-4F04-BF3E-7AB87C4AE85A}_is1
Operation:writeName:InstallLocation
Value:
C:\Program Files\Driver Identifier\
(PID) Process:(2896) driveridentifier_setup.tmpKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{40A3E5DB-5EF8-4F04-BF3E-7AB87C4AE85A}_is1
Operation:writeName:Inno Setup: Icon Group
Value:
Driver Identifier
Executable files
35
Suspicious files
33
Text files
84
Unknown types
190

Dropped files

PID
Process
Filename
Type
2340driveridentifier_setup.exeC:\Users\admin\AppData\Local\Temp\is-5EM46.tmp\driveridentifier_setup.tmpexecutable
MD5:—
SHA256:—
2408driveridentifier_setup.exeC:\Users\admin\AppData\Local\Temp\is-DDHCC.tmp\driveridentifier_setup.tmpexecutable
MD5:—
SHA256:—
2896driveridentifier_setup.tmpC:\Users\admin\AppData\Local\Temp\is-MBEH1.tmp\psvince.dllexecutable
MD5:—
SHA256:—
2896driveridentifier_setup.tmpC:\Program Files\Driver Identifier\is-2NE5S.tmpexecutable
MD5:—
SHA256:—
2896driveridentifier_setup.tmpC:\Program Files\Driver Identifier\unins000.exeexecutable
MD5:—
SHA256:—
2896driveridentifier_setup.tmpC:\Program Files\Driver Identifier\is-FKUPC.tmpexecutable
MD5:—
SHA256:—
2896driveridentifier_setup.tmpC:\Program Files\Driver Identifier\DriverIdentifier.exeexecutable
MD5:—
SHA256:—
2896driveridentifier_setup.tmpC:\Program Files\Driver Identifier\is-D3LJ1.tmpexecutable
MD5:—
SHA256:—
2896driveridentifier_setup.tmpC:\Program Files\Driver Identifier\psvince.dllexecutable
MD5:—
SHA256:—
2896driveridentifier_setup.tmpC:\Program Files\Driver Identifier\is-GL2CL.tmpexecutable
MD5:—
SHA256:—
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
1
TCP/UDP connections
111
DNS requests
117
Threats
0

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
3108
php.exe
POST
301
188.114.96.3:80
http://www.driveridentifier.com/uploader/server.php
unknown
—
—
unknown
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
4
System
192.168.100.255:137
—
—
—
whitelisted
—
—
224.0.0.252:5355
—
—
—
unknown
4
System
192.168.100.255:138
—
—
—
whitelisted
1080
svchost.exe
224.0.0.252:5355
—
—
—
unknown
3616
msedge.exe
204.79.197.239:443
edge.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
US
unknown
980
msedge.exe
239.255.255.250:1900
—
—
—
unknown
3616
msedge.exe
188.114.97.3:443
www.driveridentifier.com
CLOUDFLARENET
NL
unknown
3616
msedge.exe
13.107.42.16:443
config.edge.skype.com
MICROSOFT-CORP-MSN-AS-BLOCK
US
whitelisted
3616
msedge.exe
104.126.37.139:443
www.bing.com
Akamai International B.V.
DE
unknown
3616
msedge.exe
13.107.21.239:443
edge.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
US
unknown

DNS requests

Domain
IP
Reputation
www.driveridentifier.com
  • 188.114.97.3
  • 188.114.96.3
unknown
edge.microsoft.com
  • 204.79.197.239
  • 13.107.21.239
whitelisted
config.edge.skype.com
  • 13.107.42.16
whitelisted
www.bing.com
  • 104.126.37.139
  • 104.126.37.146
  • 104.126.37.185
  • 104.126.37.123
  • 104.126.37.186
  • 104.126.37.130
  • 104.126.37.178
  • 104.126.37.131
  • 104.126.37.145
  • 104.126.37.179
  • 104.126.37.171
  • 104.126.37.153
  • 104.126.37.155
  • 104.126.37.184
whitelisted
msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com
  • 152.199.21.175
whitelisted
cdnjs.cloudflare.com
  • 104.17.25.14
  • 104.17.24.14
whitelisted
translate.google.com
  • 142.250.186.110
whitelisted
pagead2.googlesyndication.com
  • 142.250.185.226
whitelisted
www.googletagmanager.com
  • 142.250.184.200
whitelisted
connect.facebook.net
  • 157.240.253.1
whitelisted

Threats

No threats detected
No debug info
Interactive malware hunting service ANY.RUN
© 2017-2025 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
/files/driveridentifier_setup.exe