File name:

Setup(1).exe

Full analysis: https://app.any.run/tasks/c3ccc53b-47ba-447f-baab-729fd31509ae
Verdict: Malicious activity
Analysis date: November 07, 2023, 21:05:42
OS: Windows 7 Professional Service Pack 1 (build: 7601, 32 bit)
Indicators:
MIME: application/x-dosexec
File info: PE32 executable (GUI) Intel 80386, for MS Windows
MD5:

9CC8B23CE0B06F46E5B95867F05C6812

SHA1:

B33567CC39707F2B9770C512B917A2AAC3CAF1CD

SHA256:

5E3CA83379F9A0008088527475D18EDF0D6F072ADC846F9A54E74C432D651355

SSDEEP:

98304:nuD39bdt4weIL+P5C+OAruxOXAkooPqOl9p08IIx8OUbast9YWOsIEgFVgZWya3t:aaNRER58CAUT8

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    • Drops the executable file immediately after the start

      • msiexec.exe (PID: 3472)

  • SUSPICIOUS

    • The process drops C-runtime libraries

      • msiexec.exe (PID: 3472)

    • Process drops legitimate windows executable

      • msiexec.exe (PID: 3472)

    • Executes as Windows Service

      • CloudHttpWin32Server.exe (PID: 3756)

    • Starts CMD.EXE for commands execution

      • CloudHttpWin32Server.exe (PID: 3756)

    • Uses TASKKILL.EXE to kill process

      • cmd.exe (PID: 3736)
      • cmd.exe (PID: 3876)

    • Reads the Windows owner or organization settings

      • Setup(1).exe (PID: 3800)

    • Creates/Modifies COM task schedule object

      • msiexec.exe (PID: 3472)

  • INFO

    • Reads the computer name

      • Setup(1).exe (PID: 3308)
      • msiexec.exe (PID: 3472)
      • msiexec.exe (PID: 3420)
      • msiexec.exe (PID: 3668)
      • CloudHttpWin32Server.exe (PID: 3756)
      • CloudHttpServer.exe (PID: 4064)
      • Setup(1).exe (PID: 3800)
      • CloudHttpWin32Server.exe (PID: 3248)
      • wmpnscfg.exe (PID: 2856)

    • Checks supported languages

      • Setup(1).exe (PID: 3308)
      • msiexec.exe (PID: 3472)
      • msiexec.exe (PID: 3420)
      • msiexec.exe (PID: 3668)
      • CloudHttpWindowPopup.exe (PID: 4044)
      • CloudHttpWin32Server.exe (PID: 3756)
      • Setup(1).exe (PID: 3800)
      • CloudHttpWindowPopup.exe (PID: 3796)
      • CloudHttpServer.exe (PID: 2500)
      • CloudHttpWin32Server.exe (PID: 3248)
      • CloudHttpWindowPopup.exe (PID: 3056)
      • wmpnscfg.exe (PID: 2856)
      • CloudHttpWindowPopup.exe (PID: 3792)
      • CloudHttpServer.exe (PID: 4064)

    • Creates files or folders in the user directory

      • Setup(1).exe (PID: 3308)

    • Create files in a temporary directory

      • Setup(1).exe (PID: 3308)
      • msiexec.exe (PID: 3472)
      • Setup(1).exe (PID: 3800)

    • Reads the machine GUID from the registry

      • msiexec.exe (PID: 3472)
      • Setup(1).exe (PID: 3308)
      • msiexec.exe (PID: 3420)
      • msiexec.exe (PID: 3668)
      • Setup(1).exe (PID: 3800)
      • wmpnscfg.exe (PID: 2856)

    • Application launched itself

      • msiexec.exe (PID: 3472)
      • msedge.exe (PID: 3392)

    • Drops the executable file immediately after the start

      • msiexec.exe (PID: 2900)

    • Manual execution by a user

      • Setup(1).exe (PID: 3800)
      • CloudHttpWin32Server.exe (PID: 3248)
      • CloudHttpWindowPopup.exe (PID: 3056)
      • msedge.exe (PID: 3392)
      • wmpnscfg.exe (PID: 2856)
      • CloudHttpServer.exe (PID: 2500)

    • Creates files in the program directory

      • CloudHttpServer.exe (PID: 4064)

    • Creates a software uninstall entry

      • msiexec.exe (PID: 3472)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.exe | InstallShield setup (36.8)
.exe | Win32 Executable MS Visual C++ (generic) (26.6)
.exe | Win64 Executable (generic) (23.6)
.dll | Win32 Dynamic Link Library (generic) (5.6)
.exe | Win32 Executable (generic) (3.8)

EXIF

EXE

MachineType: Intel 386 or later, and compatibles
TimeStamp: 2013:10:30 07:48:02+01:00
ImageFileCharacteristics: No relocs, Executable, 32-bit
PEType: PE32
LinkerVersion: 9
CodeSize: 715776
InitializedDataSize: 499712
UninitializedDataSize: -
EntryPoint: 0x6b0fb
OSVersion: 5
ImageVersion: -
SubsystemVersion: 5
Subsystem: Windows GUI
FileVersionNumber: 1.21.1.0
ProductVersionNumber: 1.21.1.0
FileFlagsMask: 0x003f
FileFlags: (none)
FileOS: Win32
ObjectFileType: Dynamic link library
FileSubtype: -
LanguageCode: English (U.S.)
CharacterSet: Unicode
CompanyName: Star4Live
FileDescription: Setup Launcher Unicode
FileVersion: 1.21.0001
InternalName: Setup
LegalCopyright: Copyright (c) 2013 Flexera Software LLC. All Rights Reserved.
OriginalFileName: InstallShield Setup.exe
ProductName: Star4Live_P2P
ProductVersion: 1.21.0001
InternalBuildNumber: 134369
ISInternalVersion: 20.0.529
ISInternalDescription: Setup Launcher Unicode
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
84
Monitored processes
31
Malicious processes
1
Suspicious processes
1

Behavior graph

Click at the process to see the details
start setup(1).exe no specs msiexec.exe no specs msiexec.exe no specs msiexec.exe no specs msiexec.exe no specs cloudhttpwin32server.exe no specs cmd.exe no specs taskkill.exe no specs cmd.exe no specs taskkill.exe no specs cloudhttpserver.exe no specs cloudhttpwindowpopup.exe no specs setup(1).exe no specs msiexec.exe no specs cloudhttpwindowpopup.exe no specs cloudhttpserver.exe no specs cloudhttpwin32server.exe no specs cloudhttpwindowpopup.exe no specs msedge.exe msedge.exe no specs msedge.exe no specs msedge.exe msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs wmpnscfg.exe no specs msedge.exe no specs msedge.exe no specs cloudhttpwindowpopup.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
1448"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=renderer --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=1476 --field-trial-handle=1304,i,2769755770854715025,11465290180893009090,131072 /prefetch:1C:\Program Files\Microsoft\Edge\Application\msedge.exe—msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
LOW
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
1628"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1544 --field-trial-handle=1304,i,2769755770854715025,11465290180893009090,131072 /prefetch:2C:\Program Files\Microsoft\Edge\Application\msedge.exe—msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
LOW
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
2164"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=renderer --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=2516 --field-trial-handle=1304,i,2769755770854715025,11465290180893009090,131072 /prefetch:1C:\Program Files\Microsoft\Edge\Application\msedge.exe—msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
LOW
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
2292MSIEXEC.EXE /i "C:\Users\admin\AppData\Local\Downloaded Installations\{97627F2F-448F-4F68-9C59-744F29173474}\Star4Live_P2P.msi" SETUPEXEDIR="C:\Users\admin\Desktop" SETUPEXENAME="Setup(1).exe"C:\Windows\System32\msiexec.exe—Setup(1).exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Windows® installer
Exit code:
0
Version:
5.0.7600.16385 (win7_rtm.090713-1255)
Modules
Images
c:\windows\system32\msiexec.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
2500"C:\Program Files\Star4Live\Star4Live_P2P\CloudHttpServer.exe" C:\Program Files\Star4Live\Star4Live_P2P\CloudHttpServer.exe—explorer.exe
User:
admin
Integrity Level:
MEDIUM
Exit code:
4294967295
Modules
Images
c:\program files\star4live\star4live_p2p\cloudhttpserver.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\star4live\star4live_p2p\msvcp120.dll
c:\program files\star4live\star4live_p2p\msvcr120.dll
c:\program files\star4live\star4live_p2p\libcloudclient.dll
c:\windows\system32\shell32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\shlwapi.dll
2856"C:\Program Files\Windows Media Player\wmpnscfg.exe"C:\Program Files\Windows Media Player\wmpnscfg.exe—explorer.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Windows Media Player Network Sharing Service Configuration Application
Exit code:
0
Version:
12.0.7600.16385 (win7_rtm.090713-1255)
Modules
Images
c:\program files\windows media player\wmpnscfg.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\sspicli.dll
c:\windows\system32\ole32.dll
2900MSIEXEC.EXE /i "C:\Users\admin\AppData\Local\Downloaded Installations\{97627F2F-448F-4F68-9C59-744F29173474}\Star4Live_P2P.msi" SETUPEXEDIR="C:\Users\admin\Desktop" SETUPEXENAME="Setup(1).exe"C:\Windows\System32\msiexec.exe—Setup(1).exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Windows® installer
Exit code:
0
Version:
5.0.7600.16385 (win7_rtm.090713-1255)
Modules
Images
c:\windows\system32\msiexec.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
3056"C:\Program Files\Star4Live\Star4Live_P2P\CloudHttpWindowPopup.exe" C:\Program Files\Star4Live\Star4Live_P2P\CloudHttpWindowPopup.exe—explorer.exe
User:
admin
Integrity Level:
MEDIUM
Exit code:
3221225786
Modules
Images
c:\program files\star4live\star4live_p2p\cloudhttpwindowpopup.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\shell32.dll
3156"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=renderer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2284 --field-trial-handle=1304,i,2769755770854715025,11465290180893009090,131072 /prefetch:1C:\Program Files\Microsoft\Edge\Application\msedge.exe—msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
LOW
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
3248"C:\Program Files\Star4Live\Star4Live_P2P\CloudHttpWin32Server.exe" C:\Program Files\Star4Live\Star4Live_P2P\CloudHttpWin32Server.exe—explorer.exe
User:
admin
Integrity Level:
MEDIUM
Exit code:
0
Modules
Images
c:\program files\star4live\star4live_p2p\cloudhttpwin32server.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\program files\star4live\star4live_p2p\msvcr120.dll
c:\windows\system32\wtsapi32.dll
Total events
7 168
Read events
7 018
Write events
124
Delete events
26

Modification events

(PID) Process:(3472) msiexec.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
Operation:writeName:C:\Windows\system32\msvcr120.dll
Value:
3
(PID) Process:(3472) msiexec.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
Operation:writeName:C:\Windows\system32\msvcp120.dll
Value:
3
(PID) Process:(3472) msiexec.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
Operation:writeName:C:\Windows\system32\vccorlib120.dll
Value:
3
(PID) Process:(3472) msiexec.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
Operation:writeName:C:\Windows\system32\msvcr120.dll
Value:
4
(PID) Process:(3472) msiexec.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
Operation:writeName:C:\Windows\system32\msvcp120.dll
Value:
4
(PID) Process:(3472) msiexec.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
Operation:writeName:C:\Windows\system32\vccorlib120.dll
Value:
4
(PID) Process:(3472) msiexec.exeKey:HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MUI\StringCacheSettings
Operation:writeName:StringCacheGeneration
Value:
378
(PID) Process:(3472) msiexec.exeKey:HKEY_USERS\.DEFAULT\Software\Classes\Local Settings\MuiCache\17A\52C64B7E
Operation:delete keyName:(default)
Value:
(PID) Process:(3472) msiexec.exeKey:HKEY_USERS\.DEFAULT\Software\Classes\Local Settings\MuiCache\17A
Operation:delete keyName:(default)
Value:
(PID) Process:(3472) msiexec.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts
Operation:delete valueName:C:\Config.Msi\169c18.rbs
Value:
31068606
Executable files
27
Suspicious files
53
Text files
49
Unknown types
0

Dropped files

PID
Process
Filename
Type
3308Setup(1).exeC:\Users\admin\AppData\Local\Temp\{F9A60A26-6A34-4E0C-8F67-33B5924AADEC}\Star4Live_P2P.msi —
MD5:—
SHA256:—
3308Setup(1).exeC:\Users\admin\AppData\Local\Downloaded Installations\{97627F2F-448F-4F68-9C59-744F29173474}\Star4Live_P2P.msi —
MD5:—
SHA256:—
3472msiexec.exeC:\Windows\Installer\169c16.msi —
MD5:—
SHA256:—
3308Setup(1).exeC:\Users\admin\AppData\Local\Temp\~7A37.tmptext
MD5:655ECC2B3D9522376D06CF0D8F186552
SHA256:9D19597FFF3855859B5FFB9A08431A81FDB714A8267A2B3591E500C97241E744
3308Setup(1).exeC:\Users\admin\AppData\Local\Temp\{F9A60A26-6A34-4E0C-8F67-33B5924AADEC}\_ISMSIDEL.INItext
MD5:3BB041CF7A16CEE1A5A706DE49E0431D
SHA256:949363A1ACBB318840CE34DF0D5692AEF83ECFAB161AC73E947F62178C2187E5
3308Setup(1).exeC:\Users\admin\AppData\Local\Temp\~7C2C.tmptext
MD5:655ECC2B3D9522376D06CF0D8F186552
SHA256:9D19597FFF3855859B5FFB9A08431A81FDB714A8267A2B3591E500C97241E744
3472msiexec.exeC:\Users\admin\AppData\Local\Temp\~DFABA048852F89D618.TMPbinary
MD5:9F73DA8CF78A293CB5C4CDEC6ABB5FCE
SHA256:21B3119F01A510FA3953BF12111940C15BDFE309566ECEBC375D68E596A386D9
3472msiexec.exeC:\Program Files\Star4Live\Star4Live_P2P\CloudHttpServer.exeexecutable
MD5:D98E6D1314BC7412DFE7468423AA8FC7
SHA256:CD952195A42A0EC7A52F1F5172421E3EE67118F3E40AFF43A4186290D105F74B
2900msiexec.exeC:\Users\admin\AppData\Local\Temp\MSI8F06.tmpexecutable
MD5:778D0941FB9B969AB90B81C9B91086D7
SHA256:3A2EB487237D36B6DA8CC21EB39AFDB890A84BF2E29FADF3182E44B1EF114FB8
3308Setup(1).exeC:\Users\admin\AppData\Local\Temp\{F9A60A26-6A34-4E0C-8F67-33B5924AADEC}\0x0409.initext
MD5:BE345D0260AE12C5F2F337B17E07C217
SHA256:E994689A13B9448C074F9B471EDEEC9B524890A0D82925E98AB90B658016D8F3
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
0
TCP/UDP connections
12
DNS requests
10
Threats
0

HTTP requests

No HTTP requests
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
4
System
192.168.100.255:138
—
—
—
whitelisted
1080
svchost.exe
224.0.0.252:5355
—
—
—
unknown
4
System
192.168.100.255:137
—
—
—
whitelisted
2588
svchost.exe
239.255.255.250:1900
—
—
—
whitelisted
3392
msedge.exe
239.255.255.250:1900
—
—
—
whitelisted
4016
msedge.exe
13.107.42.16:443
config.edge.skype.com
MICROSOFT-CORP-MSN-AS-BLOCK
US
whitelisted
4016
msedge.exe
204.79.197.239:443
edge.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
US
unknown
4016
msedge.exe
51.104.176.40:443
nav-edge.smartscreen.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
unknown
4016
msedge.exe
204.79.197.200:443
www.bing.com
MICROSOFT-CORP-MSN-AS-BLOCK
US
whitelisted

DNS requests

Domain
IP
Reputation
config.edge.skype.com
  • 13.107.42.16
whitelisted
edge.microsoft.com
  • 204.79.197.239
  • 13.107.21.239
whitelisted
nav-edge.smartscreen.microsoft.com
  • 51.104.176.40
whitelisted
data-edge.smartscreen.microsoft.com
  • 51.104.176.40
whitelisted
www.bing.com
  • 204.79.197.200
  • 13.107.21.200
whitelisted

Threats

No threats detected
No debug info
Interactive malware hunting service ANY.RUN
© 2017-2026 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
Setup(1).exe