File name:

Windows-Label Printer Driver Setup_Release_v2.0.0.006.exe

Full analysis: https://app.any.run/tasks/4a6c7fa9-a015-4b3e-b7e5-28d7b38e7dd6
Verdict: Malicious activity
Analysis date: July 25, 2024, 15:51:40
OS: Windows 10 Professional (build: 19045, 64 bit)
Tags:
installer
Indicators:
MIME: application/x-dosexec
File info: PE32 executable (GUI) Intel 80386, for MS Windows
MD5:

70336F36B672AFBB2392E25C422951A7

SHA1:

5B85B28FDD0363AAD2FE7E8A740E4469B014AEDD

SHA256:

39535A54B4BE0893299E4EA288F049AE7E0382C13E8FF7F03529ED5939A6CB6A

SSDEEP:

98304:K+QQm1GnQSWUWKiDUPcyakXcmCO3NHFPhROvHn6/1jiagY5/8L5raMVI/mjGYVQZ:PVPl8/

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    • Drops the executable file immediately after the start

      • Windows-Label Printer Driver Setup_Release_v2.0.0.006.exe (PID: 6524)
      • Windows-Label Printer Driver Setup_Release_v2.0.0.006.exe (PID: 5904)
      • Windows-Label Printer Driver Setup_Release_v2.0.0.006.tmp (PID: 1816)
      • DPInst64.exe (PID: 4216)
      • drvinst.exe (PID: 4152)

  • SUSPICIOUS

    • Executable content was dropped or overwritten

      • Windows-Label Printer Driver Setup_Release_v2.0.0.006.exe (PID: 6524)
      • Windows-Label Printer Driver Setup_Release_v2.0.0.006.exe (PID: 5904)
      • Windows-Label Printer Driver Setup_Release_v2.0.0.006.tmp (PID: 1816)
      • DPInst64.exe (PID: 4216)
      • drvinst.exe (PID: 4152)

    • Reads the Windows owner or organization settings

      • Windows-Label Printer Driver Setup_Release_v2.0.0.006.tmp (PID: 1816)

    • Reads the date of Windows installation

      • Windows-Label Printer Driver Setup_Release_v2.0.0.006.tmp (PID: 5560)

    • Process drops legitimate windows executable

      • Windows-Label Printer Driver Setup_Release_v2.0.0.006.tmp (PID: 1816)

    • Reads security settings of Internet Explorer

      • Windows-Label Printer Driver Setup_Release_v2.0.0.006.tmp (PID: 5560)

    • Checks Windows Trust Settings

      • drvinst.exe (PID: 4152)

    • Creates files in the driver directory

      • drvinst.exe (PID: 4152)

    • Executing commands from ".cmd" file

      • Windows-Label Printer Driver Setup_Release_v2.0.0.006.tmp (PID: 5560)

    • Starts CMD.EXE for commands execution

      • Windows-Label Printer Driver Setup_Release_v2.0.0.006.tmp (PID: 5560)

  • INFO

    • Reads the computer name

      • Windows-Label Printer Driver Setup_Release_v2.0.0.006.tmp (PID: 5560)
      • Windows-Label Printer Driver Setup_Release_v2.0.0.006.tmp (PID: 1816)
      • DPInst64.exe (PID: 4216)
      • drvinst.exe (PID: 4152)

    • Process checks computer location settings

      • Windows-Label Printer Driver Setup_Release_v2.0.0.006.tmp (PID: 5560)

    • Create files in a temporary directory

      • Windows-Label Printer Driver Setup_Release_v2.0.0.006.exe (PID: 6524)
      • Windows-Label Printer Driver Setup_Release_v2.0.0.006.exe (PID: 5904)
      • Windows-Label Printer Driver Setup_Release_v2.0.0.006.tmp (PID: 1816)
      • DPInst64.exe (PID: 4216)

    • Checks supported languages

      • Windows-Label Printer Driver Setup_Release_v2.0.0.006.exe (PID: 5904)
      • Windows-Label Printer Driver Setup_Release_v2.0.0.006.tmp (PID: 1816)
      • Windows-Label Printer Driver Setup_Release_v2.0.0.006.exe (PID: 6524)
      • Windows-Label Printer Driver Setup_Release_v2.0.0.006.tmp (PID: 5560)
      • drvinst.exe (PID: 4152)
      • DPInst64.exe (PID: 4216)

    • Creates files in the program directory

      • Windows-Label Printer Driver Setup_Release_v2.0.0.006.tmp (PID: 1816)

    • Creates a software uninstall entry

      • Windows-Label Printer Driver Setup_Release_v2.0.0.006.tmp (PID: 1816)

    • Reads the machine GUID from the registry

      • drvinst.exe (PID: 4152)

    • Reads security settings of Internet Explorer

      • rundll32.exe (PID: 2136)
      • explorer.exe (PID: 2820)

    • Reads the software policy settings

      • drvinst.exe (PID: 4152)
      • rundll32.exe (PID: 2136)

    • Adds/modifies Windows certificates

      • drvinst.exe (PID: 4152)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.exe | Inno Setup installer (67.7)
.exe | Win32 EXE PECompact compressed (generic) (25.6)
.exe | Win32 Executable (generic) (2.7)
.exe | Win16/32 Executable Delphi generic (1.2)
.exe | Generic Win/DOS Executable (1.2)

EXIF

EXE

MachineType: Intel 386 or later, and compatibles
TimeStamp: 2020:05:21 05:56:23+00:00
ImageFileCharacteristics: No relocs, Executable, No line numbers, No symbols, Bytes reversed lo, 32-bit, Bytes reversed hi
PEType: PE32
LinkerVersion: 2.25
CodeSize: 741376
InitializedDataSize: 139264
UninitializedDataSize: -
EntryPoint: 0xb5eec
OSVersion: 6
ImageVersion: 6
SubsystemVersion: 6
Subsystem: Windows GUI
FileVersionNumber: 2.0.0.0
ProductVersionNumber: 2.0.0.0
FileFlagsMask: 0x003f
FileFlags: (none)
FileOS: Win32
ObjectFileType: Executable application
FileSubtype: -
LanguageCode: Neutral
CharacterSet: Unicode
Comments: This installation was built with Inno Setup.
CompanyName: 珠海趣印科技有限公司
FileDescription: Label PRINTER DRIVER
FileVersion: 2.0.0
LegalCopyright:
OriginalFileName:
ProductName: Label PRINTER DRIVER
ProductVersion: 2.0.0
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
152
Monitored processes
13
Malicious processes
6
Suspicious processes
0

Behavior graph

Click at the process to see the details
start windows-label printer driver setup_release_v2.0.0.006.exe windows-label printer driver setup_release_v2.0.0.006.tmp no specs windows-label printer driver setup_release_v2.0.0.006.exe windows-label printer driver setup_release_v2.0.0.006.tmp slui.exe no specs dpinst64.exe drvinst.exe rundll32.exe no specs cmd.exe no specs conhost.exe no specs control.exe no specs COpenControlPanel no specs explorer.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
188C:\WINDOWS\System32\slui.exe -EmbeddingC:\Windows\System32\slui.exe—svchost.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Windows Activation Client
Version:
10.0.19041.1 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\slui.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\bcrypt.dll
c:\windows\system32\user32.dll
532control printersC:\Windows\System32\control.exe—cmd.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Windows Control Panel
Exit code:
1
Version:
10.0.19041.3636 (WinBuild.160101.0800)
1816"C:\Users\admin\AppData\Local\Temp\is-F2VQA.tmp\Windows-Label Printer Driver Setup_Release_v2.0.0.006.tmp" /SL5="$B018E,2438992,881664,C:\Users\admin\AppData\Local\Temp\Windows-Label Printer Driver Setup_Release_v2.0.0.006.exe" /SPAWNWND=$13027A /NOTIFYWND=$A003A C:\Users\admin\AppData\Local\Temp\is-F2VQA.tmp\Windows-Label Printer Driver Setup_Release_v2.0.0.006.tmp
Windows-Label Printer Driver Setup_Release_v2.0.0.006.exe
User:
admin
Company:
珠海趣印科技有限公司
Integrity Level:
HIGH
Description:
Setup/Uninstall
Exit code:
0
Version:
51.1052.0.0
Modules
Images
c:\users\admin\appdata\local\temp\is-f2vqa.tmp\windows-label printer driver setup_release_v2.0.0.006.tmp
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\comdlg32.dll
2136rundll32.exe C:\WINDOWS\system32\pnpui.dll,InstallSecurityPromptRunDllW 20 Global\{641bed8f-0226-cd4e-a62c-a8805518f40b} Global\{9d856179-618f-3e4e-8fcc-8fee137d6688} C:\WINDOWS\System32\DriverStore\Temp\{28c9716c-f4f1-bd4b-b85f-c8bb3a1cb241}\qy.inf C:\WINDOWS\System32\DriverStore\Temp\{28c9716c-f4f1-bd4b-b85f-c8bb3a1cb241}\qy.catC:\Windows\System32\rundll32.exe—drvinst.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Windows host process (Rundll32)
Exit code:
0
Version:
10.0.19041.1 (WinBuild.160101.0800)
2820C:\WINDOWS\explorer.exe /factory,{5BD95610-9434-43C2-886C-57852CC8A120} -EmbeddingC:\Windows\explorer.exe—svchost.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Windows Explorer
Version:
10.0.19041.3758 (WinBuild.160101.0800)
3164\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1C:\Windows\System32\conhost.exe—cmd.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Console Window Host
Exit code:
0
Version:
10.0.19041.1 (WinBuild.160101.0800)
4152DrvInst.exe "4" "0" "C:\Users\admin\AppData\Local\Temp\{a7de5e49-b0f0-b545-8717-99dcd36ad0e9}\qy.inf" "9" "442e85e7b" "00000000000001D8" "WinSta0\Default" "00000000000001E0" "208" "c:\program files\label printer\label printer\driver"C:\Windows\System32\drvinst.exe
svchost.exe
User:
SYSTEM
Company:
Microsoft Corporation
Integrity Level:
SYSTEM
Description:
Driver Installation Module
Exit code:
0
Version:
10.0.19041.3996 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\crypt32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\cryptsp.dll
c:\windows\system32\rsaenh.dll
c:\windows\system32\cryptbase.dll
c:\windows\system32\bcryptprimitives.dll
c:\windows\system32\wintrust.dll
4216"C:\Program Files\Label Printer\Label Printer\DPInst\dpinst64.exe" /path "C:\Program Files\Label Printer\Label Printer\Driver" /lm /se /sa /fC:\Program Files\Label Printer\Label Printer\DPInst\DPInst64.exe
Windows-Label Printer Driver Setup_Release_v2.0.0.006.tmp
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Driver Package Installer
Exit code:
256
Version:
2.1
5448"C:\WINDOWS\system32\cmd.exe" /C ""C:\Program Files\Label Printer\Label Printer\printers.cmd""C:\Windows\System32\cmd.exe—Windows-Label Printer Driver Setup_Release_v2.0.0.006.tmp
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Windows Command Processor
Exit code:
1
Version:
10.0.19041.1 (WinBuild.160101.0800)
5560"C:\Users\admin\AppData\Local\Temp\is-NPLFG.tmp\Windows-Label Printer Driver Setup_Release_v2.0.0.006.tmp" /SL5="$A003A,2438992,881664,C:\Users\admin\AppData\Local\Temp\Windows-Label Printer Driver Setup_Release_v2.0.0.006.exe" C:\Users\admin\AppData\Local\Temp\is-NPLFG.tmp\Windows-Label Printer Driver Setup_Release_v2.0.0.006.tmp—Windows-Label Printer Driver Setup_Release_v2.0.0.006.exe
User:
admin
Company:
珠海趣印科技有限公司
Integrity Level:
MEDIUM
Description:
Setup/Uninstall
Exit code:
0
Version:
51.1052.0.0
Modules
Images
c:\users\admin\appdata\local\temp\is-nplfg.tmp\windows-label printer driver setup_release_v2.0.0.006.tmp
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\comdlg32.dll
Total events
5 220
Read events
5 217
Write events
3
Delete events
0

Modification events

(PID) Process:(1816) Windows-Label Printer Driver Setup_Release_v2.0.0.006.tmpKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
Operation:writeName:Owner
Value:
18070000133E7590AADEDA01
(PID) Process:(1816) Windows-Label Printer Driver Setup_Release_v2.0.0.006.tmpKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
Operation:writeName:SessionHash
Value:
6911FF0DF8B1423F1A0B9B569A31B7A5F03E6047816F45F23F025E54F0875826
(PID) Process:(1816) Windows-Label Printer Driver Setup_Release_v2.0.0.006.tmpKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
Operation:writeName:Sequence
Value:
1
Executable files
56
Suspicious files
0
Text files
111
Unknown types
8

Dropped files

PID
Process
Filename
Type
6524Windows-Label Printer Driver Setup_Release_v2.0.0.006.exeC:\Users\admin\AppData\Local\Temp\is-NPLFG.tmp\Windows-Label Printer Driver Setup_Release_v2.0.0.006.tmpexecutable
MD5:2E2A273F2F8362A729FA90458D63DCD4
SHA256:E5D6AAD5517EE5E875EF38F97210AD06B25BA33E12F70B5EF94F938FF21B1934
1816Windows-Label Printer Driver Setup_Release_v2.0.0.006.tmpC:\Users\admin\AppData\Local\Temp\is-0DHLU.tmp\connect_wifi.bmpimage
MD5:B626813683B0BB739261742CF4336D87
SHA256:7A9FA2CD14C36DCA11173E3F0244FBA1D038646E6475A5E43F448258C1C9A2B2
1816Windows-Label Printer Driver Setup_Release_v2.0.0.006.tmpC:\Users\admin\AppData\Local\Temp\is-0DHLU.tmp\tip_bth.bmpimage
MD5:FD708DA78010848B37A6F0EC6C63DF37
SHA256:538CFF02D5654D626AC1F81C520CE56D8755B884A542AEC0B870BAF00F5179E3
1816Windows-Label Printer Driver Setup_Release_v2.0.0.006.tmpC:\Users\admin\AppData\Local\Temp\is-0DHLU.tmp\connect_lan.bmpimage
MD5:C80610449534DDB0FC8812415DFEB92D
SHA256:887AAB268B7E92F4B91EA987A177F081A2C7257E8D962C30CA6CA4574A520744
1816Windows-Label Printer Driver Setup_Release_v2.0.0.006.tmpC:\Users\admin\AppData\Local\Temp\is-0DHLU.tmp\tip_usb.bmpimage
MD5:57C5CF9C9BBD4B7006B3B729A34F6EB2
SHA256:55D719B10BBD9A8F98F8076F88D2387F0917211CE7924D828EA6737D4FFE8AA3
1816Windows-Label Printer Driver Setup_Release_v2.0.0.006.tmpC:\Program Files\Label Printer\unins000.exeexecutable
MD5:907A7309F28B730B11F77CFA11F7BFA4
SHA256:E7F3009C432DBF4CADE173BAEB036F7719A3916172CB0A66BF4584E3B39B8C9E
1816Windows-Label Printer Driver Setup_Release_v2.0.0.006.tmpC:\Program Files\Label Printer\Label Printer\DPInst\DPInst64.exeexecutable
MD5:B3766C35B387AE1A624FC5E83A01E224
SHA256:CDD0B13EEFADC1AD1FD815D188C377671C46A6822EE95590ACA19F83B112C5F5
1816Windows-Label Printer Driver Setup_Release_v2.0.0.006.tmpC:\Users\admin\AppData\Local\Temp\is-0DHLU.tmp\connect_bth.bmpimage
MD5:FD708DA78010848B37A6F0EC6C63DF37
SHA256:538CFF02D5654D626AC1F81C520CE56D8755B884A542AEC0B870BAF00F5179E3
1816Windows-Label Printer Driver Setup_Release_v2.0.0.006.tmpC:\Program Files\Label Printer\is-4N5CM.tmpexecutable
MD5:907A7309F28B730B11F77CFA11F7BFA4
SHA256:E7F3009C432DBF4CADE173BAEB036F7719A3916172CB0A66BF4584E3B39B8C9E
1816Windows-Label Printer Driver Setup_Release_v2.0.0.006.tmpC:\Users\admin\AppData\Local\Temp\is-0DHLU.tmp\tip_wifi.bmpimage
MD5:FB6CC1D1FD3EF6251A7D8EE18E0F6540
SHA256:D19214A833ABDAA6CD0C56B162FB53E552588032B2544D4E5B3D523EFB7B1195
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
7
TCP/UDP connections
52
DNS requests
18
Threats
0

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
5272
svchost.exe
GET
200
192.229.221.95:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D
unknown
—
—
whitelisted
504
backgroundTaskHost.exe
GET
200
192.229.221.95:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAn5bsKVVV8kdJ6vHl3O1J0%3D
unknown
—
—
whitelisted
5368
SearchApp.exe
GET
200
192.229.221.95:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrjrydRyt%2BApF3GSPypfHBxR5XtQQUs9tIpPmhxdiuNkHMEWNpYim8S8YCEAI5PUjXAkJafLQcAAsO18o%3D
unknown
—
—
whitelisted
4448
backgroundTaskHost.exe
GET
200
192.229.221.95:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrjrydRyt%2BApF3GSPypfHBxR5XtQQUs9tIpPmhxdiuNkHMEWNpYim8S8YCEAI5PUjXAkJafLQcAAsO18o%3D
unknown
—
—
whitelisted
5272
svchost.exe
GET
200
192.229.221.95:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D
unknown
—
—
whitelisted
5272
svchost.exe
GET
200
192.229.221.95:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D
unknown
—
—
whitelisted
1800
backgroundTaskHost.exe
GET
200
192.229.221.95:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAn5bsKVVV8kdJ6vHl3O1J0%3D
unknown
—
—
whitelisted
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
4
System
192.168.100.255:138
—
—
—
whitelisted
3204
svchost.exe
20.73.194.208:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
6012
MoUsoCoreWorker.exe
20.73.194.208:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
4008
RUXIMICS.exe
20.73.194.208:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
4204
svchost.exe
4.209.33.156:443
—
MICROSOFT-CORP-MSN-AS-BLOCK
US
unknown
3952
svchost.exe
239.255.255.250:1900
—
—
—
whitelisted
4
System
192.168.100.255:137
—
—
—
whitelisted
3204
svchost.exe
4.231.128.59:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
5720
slui.exe
20.83.72.98:443
activation-v2.sls.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
US
whitelisted
5368
SearchApp.exe
184.86.251.26:443
www.bing.com
Akamai International B.V.
DE
unknown

DNS requests

Domain
IP
Reputation
settings-win.data.microsoft.com
  • 20.73.194.208
  • 4.231.128.59
  • 51.104.136.2
whitelisted
google.com
  • 142.250.185.174
whitelisted
activation-v2.sls.microsoft.com
  • 20.83.72.98
whitelisted
www.bing.com
  • 184.86.251.26
  • 184.86.251.28
  • 184.86.251.24
  • 184.86.251.20
  • 184.86.251.29
  • 184.86.251.19
  • 184.86.251.30
  • 184.86.251.18
  • 184.86.251.22
whitelisted
ocsp.digicert.com
  • 192.229.221.95
whitelisted
login.live.com
  • 40.126.32.133
  • 20.190.160.14
  • 40.126.32.76
  • 40.126.32.74
  • 20.190.160.20
  • 40.126.32.136
  • 40.126.32.68
  • 40.126.32.140
whitelisted
client.wns.windows.com
  • 40.113.103.199
whitelisted
arc.msn.com
  • 20.199.58.43
whitelisted
fd.api.iris.microsoft.com
  • 20.199.58.43
whitelisted
go.microsoft.com
  • 184.28.89.167
whitelisted

Threats

No threats detected
No debug info
Interactive malware hunting service ANY.RUN
© 2017-2026 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
Windows-Label Printer Driver Setup_Release_v2.0.0.006.exe