File name:

LeapFrogConnectSetup_MyPals.exe

Full analysis: https://app.any.run/tasks/cc2ee951-dee5-4f4f-8173-9bd5337111ad
Verdict: Malicious activity
Analysis date: December 25, 2023, 23:04:45
OS: Windows 7 Professional Service Pack 1 (build: 7601, 32 bit)
Indicators:
MIME: application/x-dosexec
File info: PE32 executable (GUI) Intel 80386, for MS Windows
MD5:

AC18B200EC0070D96A45E6400E040CBD

SHA1:

F713B56CDB1D34E7025526335AB009DDB3EF8B66

SHA256:

5620E1330B0D3CA7598D48230DE20F3462E86BA919A40CCEAE293EE1ADCE6BF2

SSDEEP:

98304:0znqtIeGnN3jzfOy8wB0Cr5G13rGr7P3yPKlcyB5w/kfHH8ykbpA/YnxmZVRRRRv:2rWrGH4EKEK1FuepqL

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    • Creates a writable file in the system directory

      • msiexec.exe (PID: 1804)

  • SUSPICIOUS

    • Reads settings of System Certificates

      • LeapFrogConnectSetup_MyPals.exe (PID: 2268)
      • LeapFrogConnect.exe (PID: 2760)

    • Uses ICACLS.EXE to modify access control lists

      • LeapFrogConnectSetup_MyPals.exe (PID: 2268)

    • Uses TASKKILL.EXE to kill process

      • LeapFrogConnectSetup_MyPals.exe (PID: 2268)

    • Reads the Windows owner or organization settings

      • msiexec.exe (PID: 1804)

    • Reads the Internet Settings

      • LeapFrogConnect.exe (PID: 2760)
      • control.exe (PID: 2028)
      • rundll32.exe (PID: 3956)

    • Checks for Java to be installed

      • LeapFrogConnect.exe (PID: 2760)

    • Reads Microsoft Outlook installation path

      • rundll32.exe (PID: 3956)

    • Uses RUNDLL32.EXE to load library

      • control.exe (PID: 2028)

  • INFO

    • Checks supported languages

      • LeapFrogConnectSetup_MyPals.exe (PID: 2268)
      • msiexec.exe (PID: 1804)
      • msiexec.exe (PID: 2340)
      • CommandService.exe (PID: 1748)
      • msiexec.exe (PID: 2572)
      • WiseCustomCalla.exe (PID: 2428)
      • LeapFrogConnect.exe (PID: 2760)
      • Monitor.exe (PID: 984)

    • Drops the executable file immediately after the start

      • LeapFrogConnectSetup_MyPals.exe (PID: 2268)
      • msiexec.exe (PID: 1804)
      • msiexec.exe (PID: 2572)
      • WiseCustomCalla.exe (PID: 2428)

    • Reads the computer name

      • LeapFrogConnectSetup_MyPals.exe (PID: 2268)
      • msiexec.exe (PID: 1804)
      • msiexec.exe (PID: 2340)
      • msiexec.exe (PID: 2572)
      • CommandService.exe (PID: 1748)
      • Monitor.exe (PID: 984)
      • LeapFrogConnect.exe (PID: 2760)

    • Create files in a temporary directory

      • LeapFrogConnectSetup_MyPals.exe (PID: 2268)
      • msiexec.exe (PID: 1804)
      • WiseCustomCalla.exe (PID: 2428)
      • LeapFrogConnect.exe (PID: 2760)
      • Monitor.exe (PID: 984)

    • Reads the machine GUID from the registry

      • LeapFrogConnectSetup_MyPals.exe (PID: 2268)
      • msiexec.exe (PID: 1804)
      • msiexec.exe (PID: 2340)
      • msiexec.exe (PID: 2572)
      • Monitor.exe (PID: 984)
      • LeapFrogConnect.exe (PID: 2760)

    • Creates files in the program directory

      • LeapFrogConnectSetup_MyPals.exe (PID: 2268)
      • LeapFrogConnect.exe (PID: 2760)
      • Monitor.exe (PID: 984)

    • Application launched itself

      • msiexec.exe (PID: 1804)
      • msedge.exe (PID: 2860)
      • msedge.exe (PID: 3212)

    • Process drops legitimate windows executable

      • msiexec.exe (PID: 1804)

    • Executes as Windows Service

      • CommandService.exe (PID: 1748)

    • Manual execution by a user

      • WINWORD.EXE (PID: 2100)
      • msedge.exe (PID: 3212)
      • control.exe (PID: 2028)
      • powershell.exe (PID: 2508)
      • powershell.exe (PID: 2580)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.exe | Win64 Executable (generic) (64.6)
.dll | Win32 Dynamic Link Library (generic) (15.4)
.exe | Win32 Executable (generic) (10.5)
.exe | Generic Win/DOS Executable (4.6)
.exe | DOS Executable Generic (4.6)

EXIF

EXE

MachineType: Intel 386 or later, and compatibles
TimeStamp: 2018:06:29 02:08:01+02:00
ImageFileCharacteristics: Executable, 32-bit
PEType: PE32
LinkerVersion: 10
CodeSize: 8184320
InitializedDataSize: 6117376
UninitializedDataSize: -
EntryPoint: 0x5e9331
OSVersion: 5.1
ImageVersion: -
SubsystemVersion: 5.1
Subsystem: Windows GUI
FileVersionNumber: 9.0.7.0
ProductVersionNumber: 9.0.7.0
FileFlagsMask: 0x0017
FileFlags: (none)
FileOS: Win32
ObjectFileType: Executable application
FileSubtype: -
LanguageCode: English (U.S.)
CharacterSet: Unicode
CompanyName: LeapFrog Enterprises, Inc.
FileDescription: Sniffer Application
FileVersion: 9,0,7,0
InternalName: Sniffer
LegalCopyright: ©2008 – 2018 LeapFrog Enterprises, Inc. All rights reserved.
OriginalFileName: Sniffer.exe
ProductName: Sniffer Application
ProductVersion: 9,0,7,0
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
86
Monitored processes
39
Malicious processes
2
Suspicious processes
1

Behavior graph

Click at the process to see the details
start leapfrogconnectsetup_mypals.exe cacls.exe no specs cacls.exe no specs taskkill.exe no specs msiexec.exe no specs msiexec.exe no specs commandservice.exe no specs msiexec.exe wisecustomcalla.exe no specs leapfrogconnect.exe monitor.exe no specs winword.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe msedge.exe no specs msedge.exe msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs control.exe no specs rundll32.exe no specs powershell.exe no specs wininit.exe no specs powershell.exe leapfrogconnectsetup_mypals.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
668"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3632 --field-trial-handle=1236,i,13539298431662500854,1905407503122928827,131072 /prefetch:8C:\Program Files\Microsoft\Edge\Application\msedge.exe—msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
LOW
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
712"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3688 --field-trial-handle=1236,i,13539298431662500854,1905407503122928827,131072 /prefetch:8C:\Program Files\Microsoft\Edge\Application\msedge.exe—msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
984Monitor LaunchedByUPCShellC:\Program Files\LeapFrog\LeapFrog Connect\Monitor.exe—LeapFrogConnect.exe
User:
admin
Company:
LeapFrog Enterprises, Inc.
Integrity Level:
HIGH
Description:
Monitor Application
Exit code:
0
Version:
9,0,14,0
Modules
Images
c:\program files\leapfrog\leapfrog connect\monitor.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\leapfrog\leapfrog connect\qt5core.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\msvcrt.dll
1056"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3596 --field-trial-handle=1236,i,13539298431662500854,1905407503122928827,131072 /prefetch:8C:\Program Files\Microsoft\Edge\Application\msedge.exe—msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
LOW
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
1576taskkill /f /im Monitor.exe /im LeapFrogConnect.exeC:\Windows\System32\taskkill.exe—LeapFrogConnectSetup_MyPals.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Terminates Processes
Exit code:
128
Version:
6.1.7600.16385 (win7_rtm.090713-1255)
Modules
Images
c:\windows\system32\taskkill.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\version.dll
c:\windows\system32\user32.dll
1644"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1552 --field-trial-handle=1236,i,13539298431662500854,1905407503122928827,131072 /prefetch:3C:\Program Files\Microsoft\Edge\Application\msedge.exe
msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
1748"C:\Program Files\LeapFrog\LeapFrog Connect\CommandService.exe"C:\Program Files\LeapFrog\LeapFrog Connect\CommandService.exe—services.exe
User:
SYSTEM
Company:
LeapFrog Enterprises, Inc.
Integrity Level:
SYSTEM
Description:
CommandService Application
Exit code:
0
Version:
9,0,14,0
Modules
Images
c:\program files\leapfrog\leapfrog connect\commandservice.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\setupapi.dll
c:\windows\system32\cfgmgr32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
1804C:\Windows\system32\msiexec.exe /VC:\Windows\System32\msiexec.exe—services.exe
User:
SYSTEM
Company:
Microsoft Corporation
Integrity Level:
SYSTEM
Description:
Windows® installer
Exit code:
0
Version:
5.0.7600.16385 (win7_rtm.090713-1255)
Modules
Images
c:\windows\system32\msiexec.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
1864cacls "C:\ProgramData/Leapfrog/LeapFrog Connect" /E /T /C /G Users:CC:\Windows\System32\cacls.exe—LeapFrogConnectSetup_MyPals.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Control ACLs Program
Exit code:
0
Version:
6.1.7600.16385 (win7_rtm.090713-1255)
Modules
Images
c:\windows\system32\cacls.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
2016cacls "C:\ProgramData/Leapfrog/LeapFrog Connect" /E /T /C /G Users:CC:\Windows\System32\cacls.exe—LeapFrogConnectSetup_MyPals.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Control ACLs Program
Exit code:
0
Version:
6.1.7600.16385 (win7_rtm.090713-1255)
Modules
Images
c:\windows\system32\cacls.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
Total events
13 849
Read events
13 499
Write events
190
Delete events
160

Modification events

(PID) Process:(1804) msiexec.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
Operation:writeName:C:\Windows\system32\atl100.dll
Value:
1
(PID) Process:(1804) msiexec.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
Operation:writeName:C:\Windows\system32\msvcr100.dll
Value:
2
(PID) Process:(1804) msiexec.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
Operation:writeName:C:\Windows\system32\msvcp100.dll
Value:
2
(PID) Process:(1804) msiexec.exeKey:HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MUI\StringCacheSettings
Operation:writeName:StringCacheGeneration
Value:
386
(PID) Process:(1804) msiexec.exeKey:HKEY_USERS\.DEFAULT\Software\Classes\Local Settings\MuiCache\182\52C64B7E
Operation:delete keyName:(default)
Value:
(PID) Process:(1804) msiexec.exeKey:HKEY_USERS\.DEFAULT\Software\Classes\Local Settings\MuiCache\182
Operation:delete keyName:(default)
Value:
(PID) Process:(2268) LeapFrogConnectSetup_MyPals.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
Operation:writeName:GlobalAssocChangedCounter
Value:
115
(PID) Process:(1804) msiexec.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts
Operation:delete valueName:C:\Config.Msi\ec87f.rbs
Value:
31078278
(PID) Process:(1804) msiexec.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts
Operation:delete keyName:(default)
Value:
(PID) Process:(1804) msiexec.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Rollback
Operation:delete keyName:(default)
Value:
Executable files
64
Suspicious files
198
Text files
231
Unknown types
0

Dropped files

PID
Process
Filename
Type
2268LeapFrogConnectSetup_MyPals.exeC:\ProgramData\Leapfrog\LeapFrog Connect\DownloadCache\Installer\8177c677da6500a521395d78d612cfe7.dat —
MD5:—
SHA256:—
2268LeapFrogConnectSetup_MyPals.exeC:\ProgramData\Leapfrog\LeapFrog Connect\Updates\UPCInstaller.msi —
MD5:—
SHA256:—
1804msiexec.exeC:\Windows\Installer\ec87c.msi —
MD5:—
SHA256:—
2268LeapFrogConnectSetup_MyPals.exeC:\ProgramData\Leapfrog\LeapFrog Connect\DownloadCache\Installer\ddc2abd48a416cfd2944ba036b464403.datexecutable
MD5:36AC9154DC167EBAD2F7F3C265879EB1
SHA256:64214282406024F9D96D28B4EA363BCDAB4781C7904B5BD8A3D7DC1710263875
2268LeapFrogConnectSetup_MyPals.exeC:\ProgramData\Leapfrog\LeapFrog Connect\Updates\LfConnect.xmlxml
MD5:4B946EA012C0E9041B85342F11A277A1
SHA256:59F8F35C780D6305EFC3FE5CB041193E1CE273FC7C1BEB426BCF6B2629662314
2268LeapFrogConnectSetup_MyPals.exeC:\ProgramData\Leapfrog\LeapFrog Connect\DownloadCache\Installer\2542c265007cbe43f896577b48a634a6.datxml
MD5:4B946EA012C0E9041B85342F11A277A1
SHA256:59F8F35C780D6305EFC3FE5CB041193E1CE273FC7C1BEB426BCF6B2629662314
1804msiexec.exeC:\Users\admin\AppData\Local\Temp\~DF6CBA107AB9821574.TMPbinary
MD5:6F9FD28521807E78B50F078EF1FDB165
SHA256:7D6333AB200FB919D97160B5191F1602FAC656545E9B9C8DB6E20C219D11ABBE
2268LeapFrogConnectSetup_MyPals.exeC:\ProgramData\Leapfrog\LeapFrog Connect\Updates\MyPalsPlugin.msiexecutable
MD5:36AC9154DC167EBAD2F7F3C265879EB1
SHA256:64214282406024F9D96D28B4EA363BCDAB4781C7904B5BD8A3D7DC1710263875
1804msiexec.exeC:\Windows\Installer\ec87e.ipibinary
MD5:1A8827965CCB8061DADFF320272AF890
SHA256:C92A75E617BA5C90C037453A59076D2CA049E2B9AA165E11B104E69A6DFF5606
1804msiexec.exeC:\Windows\Installer\MSIC9E4.tmpexecutable
MD5:1784F93D75B7BB91D6D0F8B58DC4C8A5
SHA256:12E19E33CAC72FC0BC613DE6B971075596DF231EC52C063711EDFF4672DA530C
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
1
TCP/UDP connections
70
DNS requests
38
Threats
1

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
2268
LeapFrogConnectSetup_MyPals.exe
HEAD
404
18.65.39.9:80
http://lfcdownload.leapfrog.com/leapfrogconnect/tracking/installation?Origin=ScoutStatic&Version=9.0.14.20230&newComponents=Shell,MyPal&updateComponents=&installedComponents=&OS=Microsoft_Windows_7_,_32-bit_Service_Pack_1(build_7601)&UPCShellLocale=en_US
unknown
—
—
unknown
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
4
System
192.168.100.255:137
—
—
—
whitelisted
4
System
192.168.100.255:138
—
—
—
whitelisted
1080
svchost.exe
224.0.0.252:5355
—
—
—
unknown
2268
LeapFrogConnectSetup_MyPals.exe
18.65.39.9:443
lfcdownload.leapfrog.com
AMAZON-02
US
unknown
2268
LeapFrogConnectSetup_MyPals.exe
18.65.39.9:80
lfcdownload.leapfrog.com
AMAZON-02
US
unknown
2760
LeapFrogConnect.exe
18.65.39.9:443
lfcdownload.leapfrog.com
AMAZON-02
US
unknown
2760
LeapFrogConnect.exe
149.97.185.82:80
www.leapfrog.com
EQUINIX-EC-SV
US
unknown
2760
LeapFrogConnect.exe
50.112.90.223:443
secservices.leapfrog.com
AMAZON-02
US
unknown
2760
LeapFrogConnect.exe
52.222.139.64:443
digitalcontent.leapfrog.com
AMAZON-02
US
unknown
3212
msedge.exe
239.255.255.250:1900
—
—
—
whitelisted

DNS requests

Domain
IP
Reputation
lfcdownload.leapfrog.com
  • 18.65.39.9
  • 18.65.39.75
  • 18.65.39.69
  • 18.65.39.38
unknown
www.leapfrog.com
  • 149.97.185.82
unknown
secservices.leapfrog.com
  • 50.112.90.223
unknown
digitalcontent.leapfrog.com
  • 52.222.139.64
  • 52.222.139.103
  • 52.222.139.30
  • 52.222.139.85
unknown
config.edge.skype.com
  • 13.107.42.16
whitelisted
nav-edge.smartscreen.microsoft.com
  • 20.103.180.120
whitelisted
store.leapfrog.com
  • 35.164.115.112
unknown
edge.microsoft.com
  • 204.79.197.239
  • 13.107.21.239
whitelisted
data-edge.smartscreen.microsoft.com
  • 20.105.95.163
whitelisted
shared.leapfrog.com
  • 65.9.86.14
  • 65.9.86.6
  • 65.9.86.55
  • 65.9.86.90
unknown

Threats

Found threats are available for the paid subscriptions
1 ETPRO signatures available at the full report
Process
Message
LeapFrogConnectSetup_MyPals.exe
Unspecified-- [AbtQtBridge.h:68 @abtQtBridge::loadPlugins] Path of AbtQt.dll: C:/Users/admin/AppData/Local/Temp/AbtQt.dll
LeapFrogConnectSetup_MyPals.exe
Unspecified-- [AbtQtBridge.h:67 @abtQtBridge::loadPlugins] ***************** start: Mon Dec 25 23:04:57 2023
LeapFrogConnectSetup_MyPals.exe
Unspecified-- [AbtQtBridge.h:41 @abtQtBridge::abtQtBridge] Can't loading AbtQt.dll
LeapFrogConnectSetup_MyPals.exe
Unspecified-- [AbtQtBridge.h:70 @abtQtBridge::loadPlugins] AbtQt.dll doesn't exist.
msiexec.exe
UpgradeCheck: Begin...
msiexec.exe
UpgradeCheck: ...End
Interactive malware hunting service ANY.RUN
© 2017-2025 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
LeapFrogConnectSetup_MyPals.exe