File name:

FishTycoonSetup.exe

Full analysis: https://app.any.run/tasks/1de4887d-6bfd-48c3-b751-c2cb07bce9a3
Verdict: Malicious activity
Analysis date: February 16, 2024, 21:35:58
OS: Windows 7 Professional Service Pack 1 (build: 7601, 32 bit)
Indicators:
MIME: application/x-dosexec
File info: PE32 executable (GUI) Intel 80386, for MS Windows
MD5:

667A2513DB4A5DD63A8CA3722613A608

SHA1:

30C18408DF5D6D1B593D0166DBE5C522BBC50072

SHA256:

16273D010DF007D1816919AE88FFBD0A90B638CBE996501DAD5A9CED7A2916A4

SSDEEP:

98304:7jFQMPY9i34wJY3mwdeaPrrplc8W0MwSiQYYqGQum8R0G7pZGQlLm/XJ4bEm4Zy+:rqiHFZHgmnuGil

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.
  • MALICIOUS

    • Drops the executable file immediately after the start

      • FishTycoonSetup.exe (PID: 2840)
      • FishTycoonSetup3442.exe (PID: 3932)
      • is-1AGRG.tmp (PID: 3304)
    • Creates a writable file in the system directory

      • is-1AGRG.tmp (PID: 3304)
  • SUSPICIOUS

    • Executable content was dropped or overwritten

      • FishTycoonSetup.exe (PID: 2840)
      • FishTycoonSetup3442.exe (PID: 3932)
      • is-1AGRG.tmp (PID: 3304)
    • Reads the Windows owner or organization settings

      • is-1AGRG.tmp (PID: 3304)
    • Process drops legitimate windows executable

      • is-1AGRG.tmp (PID: 3304)
    • Reads the BIOS version

      • FishTycoon.exe (PID: 1696)
    • Starts application with an unusual extension

      • FishTycoon.exe (PID: 1696)
    • Reads the Internet Settings

      • FishTycoon.exe (PID: 1696)
  • INFO

    • Checks supported languages

      • FishTycoonSetup.exe (PID: 2840)
      • FishTycoonSetup3442.exe (PID: 3932)
      • is-1AGRG.tmp (PID: 3304)
      • FishTycoon.exe (PID: 1696)
      • RAW_003.wdt (PID: 2692)
      • FishTycoon.RWG (PID: 3964)
    • Create files in a temporary directory

      • FishTycoonSetup.exe (PID: 2840)
      • FishTycoonSetup3442.exe (PID: 3932)
      • is-1AGRG.tmp (PID: 3304)
    • Creates files in the program directory

      • FishTycoonSetup.exe (PID: 2840)
      • is-1AGRG.tmp (PID: 3304)
      • FishTycoon.RWG (PID: 3964)
      • FishTycoon.exe (PID: 1696)
    • Reads the computer name

      • is-1AGRG.tmp (PID: 3304)
      • FishTycoon.exe (PID: 1696)
      • FishTycoon.RWG (PID: 3964)
    • Creates a software uninstall entry

      • is-1AGRG.tmp (PID: 3304)
    • Reads the machine GUID from the registry

      • FishTycoon.exe (PID: 1696)
    • Application launched itself

      • msedge.exe (PID: 1888)
      • msedge.exe (PID: 2888)
    • Manual execution by a user

      • msedge.exe (PID: 2888)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.exe | InstallShield setup (27.1)
.exe | Win32 EXE PECompact compressed (generic) (26.2)
.exe | Win32 Executable MS Visual C++ (generic) (19.6)
.exe | Win64 Executable (generic) (17.4)
.dll | Win32 Dynamic Link Library (generic) (4.1)

EXIF

EXE

MachineType: Intel 386 or later, and compatibles
TimeStamp: 2005:02:04 00:24:30+00:00
ImageFileCharacteristics: No relocs, Executable, No line numbers, No symbols, 32-bit
PEType: PE32
LinkerVersion: 6
CodeSize: 146432
InitializedDataSize: 49152
UninitializedDataSize: -
EntryPoint: 0x1b5f5
OSVersion: 4
ImageVersion: -
SubsystemVersion: 4
Subsystem: Windows GUI
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
74
Monitored processes
35
Malicious processes
4
Suspicious processes
0

Behavior graph

Click at the process to see the details
start fishtycoonsetup.exe fishtycoonsetup3442.exe is-1agrg.tmp fishtycoon.exe no specs fishtycoon.rwg no specs raw_003.wdt no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe msedge.exe no specs msedge.exe no specs msedge.exe msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs fishtycoonsetup.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
1072"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3692 --field-trial-handle=1308,i,15628616317034090419,3757088917485674933,131072 /prefetch:8C:\Program Files\Microsoft\Edge\Application\msedge.exemsedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
LOW
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
1232"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1192 --field-trial-handle=1308,i,15628616317034090419,3757088917485674933,131072 /prefetch:2C:\Program Files\Microsoft\Edge\Application\msedge.exemsedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
LOW
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
1380"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=1516 --field-trial-handle=1308,i,15628616317034090419,3757088917485674933,131072 /prefetch:8C:\Program Files\Microsoft\Edge\Application\msedge.exemsedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
LOW
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
1596"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1488 --field-trial-handle=1308,i,15628616317034090419,3757088917485674933,131072 /prefetch:3C:\Program Files\Microsoft\Edge\Application\msedge.exe
msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
1652"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3580 --field-trial-handle=1308,i,15628616317034090419,3757088917485674933,131072 /prefetch:8C:\Program Files\Microsoft\Edge\Application\msedge.exemsedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
LOW
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
1696"C:\Program Files\Fish Tycoon\FishTycoon.exe"C:\Program Files\Fish Tycoon\FishTycoon.exeis-1AGRG.tmp
User:
admin
Integrity Level:
HIGH
Exit code:
0
Modules
Images
c:\program files\fish tycoon\fishtycoon.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\advapi32.dll
1888"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --single-argument http://arcade.reflexive.com/redirect.aspx?rra&pid=A71433960877207350592369943C:\Program Files\Microsoft\Edge\Application\msedge.exeFishTycoon.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\apphelp.dll
c:\windows\apppatch\acgenral.dll
c:\windows\system32\sechost.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\rpcrt4.dll
1936"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=renderer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2324 --field-trial-handle=1308,i,15628616317034090419,3757088917485674933,131072 /prefetch:1C:\Program Files\Microsoft\Edge\Application\msedge.exemsedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
LOW
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
2120"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3844 --field-trial-handle=1308,i,15628616317034090419,3757088917485674933,131072 /prefetch:8C:\Program Files\Microsoft\Edge\Application\msedge.exemsedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
LOW
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
2160"C:\Users\admin\Desktop\FishTycoonSetup.exe" C:\Users\admin\Desktop\FishTycoonSetup.exeexplorer.exe
User:
admin
Integrity Level:
MEDIUM
Exit code:
3221226540
Modules
Images
c:\users\admin\desktop\fishtycoonsetup.exe
c:\windows\system32\ntdll.dll
Total events
10 950
Read events
10 868
Write events
75
Delete events
7

Modification events

(PID) Process:(2840) FishTycoonSetup.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\ReflexiveArcade\459
Operation:writeName:DownloadID
Value:
1ED4380300000000
(PID) Process:(2840) FishTycoonSetup.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\ReflexiveArcade\459
Operation:writeName:ChannelID
Value:
21555
(PID) Process:(2840) FishTycoonSetup.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\ReflexiveArcade\459
Operation:writeName:ChannelName
Value:
PCGamer2006May
(PID) Process:(3304) is-1AGRG.tmpKey:HKEY_LOCAL_MACHINE\SOFTWARE\FishTycoon
Operation:writeName:ExePath
Value:
C:\Program Files\Fish Tycoon\FishTycoon.exe
(PID) Process:(3304) is-1AGRG.tmpKey:HKEY_LOCAL_MACHINE\SOFTWARE\FishTycoon
Operation:writeName:SavePath
Value:
C:\Program Files\Fish Tycoon\
(PID) Process:(3304) is-1AGRG.tmpKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Fish Tycoon_is1
Operation:writeName:Inno Setup: Setup Version
Value:
5.0.7
(PID) Process:(3304) is-1AGRG.tmpKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Fish Tycoon_is1
Operation:writeName:Inno Setup: App Path
Value:
C:\Program Files\Fish Tycoon
(PID) Process:(3304) is-1AGRG.tmpKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Fish Tycoon_is1
Operation:writeName:InstallLocation
Value:
C:\Program Files\Fish Tycoon\
(PID) Process:(3304) is-1AGRG.tmpKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Fish Tycoon_is1
Operation:writeName:Inno Setup: Icon Group
Value:
Fish Tycoon
(PID) Process:(3304) is-1AGRG.tmpKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Fish Tycoon_is1
Operation:writeName:Inno Setup: User
Value:
admin
Executable files
20
Suspicious files
79
Text files
99
Unknown types
98

Dropped files

PID
Process
Filename
Type
3932FishTycoonSetup3442.exeC:\Users\admin\AppData\Local\Temp\is-G3COL.tmp\is-1AGRG.tmpexecutable
MD5:667555FC8D80C030ED5DE256404DF5C5
SHA256:74EF33E3B3298D8CA7166C2B07A490A74C5A9A26B08B9478A524096208D5600A
3304is-1AGRG.tmpC:\Program Files\Fish Tycoon\FishTycoon.exeexecutable
MD5:D2FE41077D0BAC6D8F0B4D2E704E98C3
SHA256:8A1E9D9C69963871170EEA6C8781C308EEA29369B77F1A0E53F52EC53E7CC7FB
2840FishTycoonSetup.exeC:\Users\admin\AppData\Local\Temp\FishTycoonSetup3442.exeexecutable
MD5:24739028142C55354190CDC1C950E3B4
SHA256:E34E0FF8DF903463295E7E14CB4AFE59B51B046A9CD9B4B0D1A9DAC101B61754
3304is-1AGRG.tmpC:\Users\admin\AppData\Local\Temp\is-CSD7T.tmp\_shfoldr.dllexecutable
MD5:92DC6EF532FBB4A5C3201469A5B5EB63
SHA256:9884E9D1B4F8A873CCBD81F8AD0AE257776D2348D027D811A56475E028360D87
3304is-1AGRG.tmpC:\Program Files\Fish Tycoon\is-NHOTN.tmpexecutable
MD5:D2FE41077D0BAC6D8F0B4D2E704E98C3
SHA256:8A1E9D9C69963871170EEA6C8781C308EEA29369B77F1A0E53F52EC53E7CC7FB
3304is-1AGRG.tmpC:\Program Files\Fish Tycoon\FishTycoon.RWGexecutable
MD5:049B8E745762B706CF2F352100008FF4
SHA256:E9240378DF9F5FE7979EB3FAE49B6DD7AABA74101F1E843E87A1EFDEE0F8E843
2840FishTycoonSetup.exeC:\Program Files\ReflexiveArcade\Channels\21555\Channel.datcompressed
MD5:53F7A71807AE470C4FA828D1FFC4ACF3
SHA256:7824962D765855EBEFA1833B62B6074BEDBDCD5EA35C636D71B4D420C28AE789
3304is-1AGRG.tmpC:\Program Files\Fish Tycoon\Readme.txttext
MD5:A2C631EEB7CB42A718E38F7F525617FD
SHA256:AA3122564AAF814619ABB873D9A13517636E95C70801FA5FBF79C4A82F5B4268
3304is-1AGRG.tmpC:\Program Files\Fish Tycoon\is-4GUR4.tmpxm
MD5:0D912BCBF8F5251374FEAE29B4734531
SHA256:50A4E6B502ED1205922B714A65DB7E83EFF68CE8F4267EAE5A753D86DE4CB2C9
3304is-1AGRG.tmpC:\Program Files\Fish Tycoon\is-T56AM.tmptext
MD5:A2C631EEB7CB42A718E38F7F525617FD
SHA256:AA3122564AAF814619ABB873D9A13517636E95C70801FA5FBF79C4A82F5B4268
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
0
TCP/UDP connections
33
DNS requests
34
Threats
0

HTTP requests

No HTTP requests
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
1080
svchost.exe
224.0.0.252:5355
unknown
4
System
192.168.100.255:137
whitelisted
4
System
192.168.100.255:138
whitelisted
2888
msedge.exe
239.255.255.250:1900
unknown
1596
msedge.exe
13.107.42.16:443
config.edge.skype.com
MICROSOFT-CORP-MSN-AS-BLOCK
US
whitelisted
1596
msedge.exe
184.72.55.36:80
arcade.reflexive.com
AMAZON-02
US
unknown
1596
msedge.exe
204.79.197.239:443
edge.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
US
unknown
1596
msedge.exe
104.126.37.136:443
www.bing.com
Akamai International B.V.
DE
unknown
2888
msedge.exe
224.0.0.251:5353
unknown
1596
msedge.exe
2.19.198.56:443
msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com
Akamai International B.V.
DE
unknown

DNS requests

Domain
IP
Reputation
config.edge.skype.com
  • 13.107.42.16
whitelisted
arcade.reflexive.com
  • 184.72.55.36
unknown
edge.microsoft.com
  • 204.79.197.239
  • 13.107.21.239
whitelisted
www.bing.com
  • 104.126.37.136
  • 104.126.37.129
  • 104.126.37.137
  • 104.126.37.130
  • 104.126.37.139
  • 104.126.37.155
  • 104.126.37.154
  • 104.126.37.145
  • 104.126.37.131
  • 92.123.104.66
  • 92.123.104.63
  • 92.123.104.65
  • 92.123.104.61
  • 92.123.104.53
  • 92.123.104.60
  • 92.123.104.56
  • 92.123.104.58
  • 92.123.104.64
whitelisted
msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com
  • 2.19.198.56
  • 23.32.238.163
whitelisted
aefd.nelreports.net
  • 184.24.77.25
  • 184.24.77.19
whitelisted
r.bing.com
  • 92.123.104.14
  • 92.123.104.7
  • 92.123.104.6
  • 92.123.104.10
  • 92.123.104.13
  • 92.123.104.5
  • 92.123.104.9
  • 92.123.104.12
  • 92.123.104.11
  • 104.126.37.130
  • 104.126.37.136
  • 104.126.37.185
  • 104.126.37.176
  • 104.126.37.137
  • 104.126.37.184
  • 104.126.37.179
  • 104.126.37.177
  • 104.126.37.139
whitelisted
th.bing.com
  • 104.126.37.130
  • 104.126.37.136
  • 104.126.37.185
  • 104.126.37.176
  • 104.126.37.137
  • 104.126.37.184
  • 104.126.37.179
  • 104.126.37.177
  • 104.126.37.139
whitelisted
login.microsoftonline.com
  • 40.126.32.74
  • 40.126.32.140
  • 40.126.32.134
  • 40.126.32.138
  • 20.190.160.17
  • 20.190.160.22
  • 20.190.160.20
  • 40.126.32.133
whitelisted
services.bingapis.com
  • 13.107.5.80
unknown

Threats

No threats detected
No debug info