File name:

Intel-Serial-IO-Driver_3MK53_WIN_30.100.2020.7_A06_04.EXE

Full analysis: https://app.any.run/tasks/e63e4914-d2f4-4aa2-a300-1fcb66afaf00
Verdict: Malicious activity
Analysis date: July 14, 2023, 19:43:14
OS: Windows 7 Professional Service Pack 1 (build: 7601, 32 bit)
Indicators:
MIME: application/x-dosexec
File info: PE32 executable (GUI) Intel 80386, for MS Windows
MD5:

2DE598E4B8AC407F34A558CC774E5573

SHA1:

BCBE689337A6D4185652466986AD6E7653C1A2CE

SHA256:

598253A99645FD51D95278719DEE8B0E89E5CD87D819E8887646E228AF6E9E2F

SSDEEP:

196608:Akat80el1xR4RzSmdtxVTsw2E7cRGo8sOgZo0aHiHUimvO/oPhHw:T1xCkU95Hw

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    • Application was dropped or rewritten from another process

      • miniunz.exe (PID: 3112)
      • SetupSerialIO.exe (PID: 3528)
      • Setup.exe (PID: 1344)

    • Loads dropped or rewritten executable

      • miniunz.exe (PID: 3112)
      • Setup.exe (PID: 1344)

  • SUSPICIOUS

    • Executable content was dropped or overwritten

      • Intel-Serial-IO-Driver_3MK53_WIN_30.100.2020.7_A06_04.EXE (PID: 1604)
      • miniunz.exe (PID: 3112)
      • SetupSerialIO.exe (PID: 3528)
      • Setup.exe (PID: 1344)

    • Drops a system driver (possible attempt to evade defenses)

      • miniunz.exe (PID: 3112)

    • Reads the Internet Settings

      • Intel-Serial-IO-Driver_3MK53_WIN_30.100.2020.7_A06_04.EXE (PID: 1604)
      • Setup.exe (PID: 1344)

    • Reads Internet Explorer settings

      • Intel-Serial-IO-Driver_3MK53_WIN_30.100.2020.7_A06_04.EXE (PID: 1604)

    • Reads Microsoft Outlook installation path

      • Intel-Serial-IO-Driver_3MK53_WIN_30.100.2020.7_A06_04.EXE (PID: 1604)

  • INFO

    • Checks supported languages

      • Intel-Serial-IO-Driver_3MK53_WIN_30.100.2020.7_A06_04.EXE (PID: 1604)
      • SetupSerialIO.exe (PID: 3528)
      • Setup.exe (PID: 1344)
      • miniunz.exe (PID: 3112)

    • Checks proxy server information

      • Intel-Serial-IO-Driver_3MK53_WIN_30.100.2020.7_A06_04.EXE (PID: 1604)

    • Creates files or folders in the user directory

      • Intel-Serial-IO-Driver_3MK53_WIN_30.100.2020.7_A06_04.EXE (PID: 1604)

    • Create files in a temporary directory

      • SetupSerialIO.exe (PID: 3528)
      • Setup.exe (PID: 1344)

    • Creates files in the program directory

      • Intel-Serial-IO-Driver_3MK53_WIN_30.100.2020.7_A06_04.EXE (PID: 1604)

    • The process checks LSA protection

      • Setup.exe (PID: 1344)
      • Intel-Serial-IO-Driver_3MK53_WIN_30.100.2020.7_A06_04.EXE (PID: 1604)

    • Reads the machine GUID from the registry

      • Intel-Serial-IO-Driver_3MK53_WIN_30.100.2020.7_A06_04.EXE (PID: 1604)

    • Reads the computer name

      • Intel-Serial-IO-Driver_3MK53_WIN_30.100.2020.7_A06_04.EXE (PID: 1604)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.exe | Win64 Executable (generic) (76.4)
.exe | Win32 Executable (generic) (12.4)
.exe | Generic Win/DOS Executable (5.5)
.exe | DOS Executable Generic (5.5)

EXIF

EXE

ProductVersion: 30.100.2020.7
ProductName: Intel Serial IO Driver, 30.100.2020.7, A06
OriginalFileName: DUPFramework.exe
LegalCopyright: Copyright (C) Dell Inc. 2021. All rights reserved.
InternalName: DUPFramework.exe
FileVersion: 004.008.007.000
FileDescription: Dell Update Package: Intel Serial IO Driver, 30.100.2020.7, A06
CompanyName: Dell Inc.
CharacterSet: Windows, Latin1
LanguageCode: English (U.S.)
FileSubtype: -
ObjectFileType: Executable application
FileOS: Win32
FileFlags: (none)
FileFlagsMask: 0x003f
ProductVersionNumber: 4.8.7.0
FileVersionNumber: 4.8.9.106
Subsystem: Windows GUI
SubsystemVersion: 6
ImageVersion: -
OSVersion: 6
EntryPoint: 0x1fb4a
UninitializedDataSize: -
InitializedDataSize: 3397120
CodeSize: 5544960
LinkerVersion: 14
PEType: PE32
ImageFileCharacteristics: Executable, 32-bit
TimeStamp: 2021:07:29 05:14:55+00:00
MachineType: Intel 386 or later, and compatibles
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
46
Monitored processes
5
Malicious processes
4
Suspicious processes
0

Behavior graph

Click at the process to see the details
drop and start start drop and start intel-serial-io-driver_3mk53_win_30.100.2020.7_a06_04.exe miniunz.exe setupserialio.exe setup.exe intel-serial-io-driver_3mk53_win_30.100.2020.7_a06_04.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
1344C:\Users\admin\AppData\Local\Temp\IIFFFFA.tmp\setup.exe /report C:\ProgramData\dell\drivers\27301600-bb66-49d0-87bd-186624ba93dc\DUPFFAC.tmp C:\Users\admin\AppData\Local\Temp\IIFFFFA.tmp\Setup.exe
SetupSerialIO.exe
User:
admin
Company:
Intel Corporation
Integrity Level:
HIGH
Description:
Intel(R) Serial IO installer
Exit code:
1603
Version:
3.0.2708.5
Modules
Images
c:\users\admin\appdata\local\temp\iiffffa.tmp\setup.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\usp10.dll
c:\windows\system32\lpk.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
1604"C:\Users\admin\AppData\Local\Temp\Intel-Serial-IO-Driver_3MK53_WIN_30.100.2020.7_A06_04.EXE" C:\Users\admin\AppData\Local\Temp\Intel-Serial-IO-Driver_3MK53_WIN_30.100.2020.7_A06_04.EXE
explorer.exe
User:
admin
Company:
Dell Inc.
Integrity Level:
HIGH
Description:
Dell Update Package: Intel Serial IO Driver, 30.100.2020.7, A06
Exit code:
3
Version:
004.008.007.000
Modules
Images
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\wintrust.dll
c:\users\admin\appdata\local\temp\intel-serial-io-driver_3mk53_win_30.100.2020.7_a06_04.exe
c:\windows\system32\msvcrt.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\advapi32.dll
3112 -x C:\Users\admin\AppData\Local\Temp\INTEL-~1.EXE -o -d c:\PROGRA~2\dell\drivers\273016~1C:\ProgramData\Dell\drivers\27301600-bb66-49d0-87bd-186624ba93dc\miniunz.exe
Intel-Serial-IO-Driver_3MK53_WIN_30.100.2020.7_A06_04.EXE
User:
admin
Integrity Level:
HIGH
Exit code:
0
Modules
Images
c:\programdata\dell\drivers\27301600-bb66-49d0-87bd-186624ba93dc\miniunz.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\programdata\dell\drivers\27301600-bb66-49d0-87bd-186624ba93dc\zlibwapi.dll
3264"C:\Users\admin\AppData\Local\Temp\Intel-Serial-IO-Driver_3MK53_WIN_30.100.2020.7_A06_04.EXE" C:\Users\admin\AppData\Local\Temp\Intel-Serial-IO-Driver_3MK53_WIN_30.100.2020.7_A06_04.EXE—explorer.exe
User:
admin
Company:
Dell Inc.
Integrity Level:
MEDIUM
Description:
Dell Update Package: Intel Serial IO Driver, 30.100.2020.7, A06
Exit code:
3221226540
Version:
004.008.007.000
Modules
Images
c:\windows\system32\ntdll.dll
c:\users\admin\appdata\local\temp\intel-serial-io-driver_3mk53_win_30.100.2020.7_a06_04.exe
3528"C:\ProgramData\Dell\drivers\27301600-bb66-49d0-87bd-186624ba93dc\SetupSerialIO.exe" /report "C:\ProgramData\dell\drivers\27301600-bb66-49d0-87bd-186624ba93dc\DUPFFAC.tmp"C:\ProgramData\Dell\drivers\27301600-bb66-49d0-87bd-186624ba93dc\SetupSerialIO.exe
Intel-Serial-IO-Driver_3MK53_WIN_30.100.2020.7_A06_04.EXE
User:
admin
Company:
Intel Corporation
Integrity Level:
HIGH
Description:
Intel(R) Serial IO installer
Exit code:
1603
Version:
3.0.2708.5
Modules
Images
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\programdata\dell\drivers\27301600-bb66-49d0-87bd-186624ba93dc\setupserialio.exe
c:\windows\system32\kernelbase.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\usp10.dll
c:\windows\system32\lpk.dll
c:\windows\system32\user32.dll
c:\windows\system32\msvcrt.dll
Total events
659
Read events
647
Write events
12
Delete events
0

Modification events

(PID) Process:(1604) Intel-Serial-IO-Driver_3MK53_WIN_30.100.2020.7_A06_04.EXEKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Operation:writeName:ProxyBypass
Value:
1
(PID) Process:(1604) Intel-Serial-IO-Driver_3MK53_WIN_30.100.2020.7_A06_04.EXEKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Operation:writeName:IntranetName
Value:
1
(PID) Process:(1604) Intel-Serial-IO-Driver_3MK53_WIN_30.100.2020.7_A06_04.EXEKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Operation:writeName:UNCAsIntranet
Value:
1
(PID) Process:(1604) Intel-Serial-IO-Driver_3MK53_WIN_30.100.2020.7_A06_04.EXEKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Operation:writeName:AutoDetect
Value:
0
(PID) Process:(1604) Intel-Serial-IO-Driver_3MK53_WIN_30.100.2020.7_A06_04.EXEKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies
Operation:writeName:CachePrefix
Value:
Cookie:
(PID) Process:(1604) Intel-Serial-IO-Driver_3MK53_WIN_30.100.2020.7_A06_04.EXEKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History
Operation:writeName:CachePrefix
Value:
Visited:
(PID) Process:(1604) Intel-Serial-IO-Driver_3MK53_WIN_30.100.2020.7_A06_04.EXEKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
Operation:writeName:ProxyEnable
Value:
0
(PID) Process:(1604) Intel-Serial-IO-Driver_3MK53_WIN_30.100.2020.7_A06_04.EXEKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
Operation:writeName:SavedLegacySettings
Value:
4600000040010000090000000000000000000000000000000400000000000000C0E333BBEAB1D3010000000000000000000000000100000002000000C0A8016B000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Executable files
63
Suspicious files
10
Text files
31
Unknown types
0

Dropped files

PID
Process
Filename
Type
1604Intel-Serial-IO-Driver_3MK53_WIN_30.100.2020.7_A06_04.EXEC:\PROGRA~2\dell\drivers\273016~1\AppPackageInstaller.ps1text
MD5:0BD70E6BAA7A77114F1857223BDB36D5
SHA256:8F1CD2B9A6D733019F68244AADB5B7BA0557826E917277BF4A33251BFB14B4D3
1604Intel-Serial-IO-Driver_3MK53_WIN_30.100.2020.7_A06_04.EXEC:\PROGRA~2\dell\drivers\273016~1\miniunz.exeexecutable
MD5:5C3647BEB1347D6D4354C3124079945F
SHA256:3BFD2E6E373CD2214EC50127B4BF1261C39663775E85CBC35C16DE4FADA6DCAC
3112miniunz.exeC:\PROGRA~2\dell\drivers\273016~1\mup.xmlxml
MD5:DEA0325D86BDB9D60069243E6A17899B
SHA256:240BC1F0173A75E0B7FF2FB5BADB330937FEC8D5827F8C5DF5DB83A330EB77CD
1604Intel-Serial-IO-Driver_3MK53_WIN_30.100.2020.7_A06_04.EXEC:\PROGRA~2\dell\drivers\273016~1\AppPackageRollBack.ps1text
MD5:6B06DDD5B01A03CC74C8E1ABBFF1568A
SHA256:18EF204AC8DD572AE3967AEC77317CA265E454E1A849F5FFC505CA4607BDC1DB
3112miniunz.exeC:\PROGRA~2\dell\drivers\273016~1\package.xmlbinary
MD5:5201A87B2890999B6F2E7562BB76C549
SHA256:870F9A2B3BDFF21879AC66834BF4483C5D3D0A4B78FBC853116D168A82ED3467
3112miniunz.exeC:\PROGRA~2\dell\drivers\273016~1\production\Windows10-x64\0\Drivers\WU\iaLPSS2_GPIO2_CNL.infbinary
MD5:64C2D40E7226BFCDA996516B840A4068
SHA256:1CCF3249A8E67519B2ECD2C510C4F9580217529C141B32C87213C0026A406929
3112miniunz.exeC:\PROGRA~2\dell\drivers\273016~1\production\Windows10-x64\0\Drivers\WU\ialpss2_gpio2_cnl.catbinary
MD5:8B4503E4786EE507C17FE95F4534FA8F
SHA256:8D2D1C37AF4F80F856D765E1332F6F75B31D08A40BC41A18F374487A7FAEFCBC
3112miniunz.exeC:\PROGRA~2\dell\drivers\273016~1\production\Windows10-x64\0\Drivers\WU\iaLPSS2_I2C_CNL.infbinary
MD5:57103D528555BDAB927F57CC409B3951
SHA256:D1F2CFBC8B8C90B36868AEF027EC497CE71B90687C81CC127DACE4B26023025B
3112miniunz.exeC:\PROGRA~2\dell\drivers\273016~1\production\Windows10-x64\0\Drivers\WU\ialpss2_i2c_cnl.catbinary
MD5:4024498F1C6CB11614560582178145AD
SHA256:8F9E291C8E758961873D9332E911CE1A830E3A342ED2725838AA1C8B5E236B82
3112miniunz.exeC:\PROGRA~2\dell\drivers\273016~1\production\Windows10-x64\0\Drivers\WU\iaLPSS2_GPIO2_CNL.sysexecutable
MD5:75FB2412D54AB939A349917905BB2A2E
SHA256:03B7F1F6BF593BB804A3604230002EBDB679C7A11BF2F7F34388D3F16CB2FF7E
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
0
TCP/UDP connections
4
DNS requests
0
Threats
0

HTTP requests

No HTTP requests
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
4
System
192.168.100.255:137
—
—
—
whitelisted
1068
svchost.exe
224.0.0.252:5355
—
—
—
unknown
2640
svchost.exe
239.255.255.250:1900
—
—
—
whitelisted
4
System
192.168.100.255:138
—
—
—
whitelisted

DNS requests

No data

Threats

No threats detected
No debug info
Interactive malware hunting service ANY.RUN
© 2017-2025 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
Intel-Serial-IO-Driver_3MK53_WIN_30.100.2020.7_A06_04.EXE