File name:

Setup(1).exe

Full analysis: https://app.any.run/tasks/c3ccc53b-47ba-447f-baab-729fd31509ae
Verdict: Malicious activity
Analysis date: November 07, 2023, 21:05:42
OS: Windows 7 Professional Service Pack 1 (build: 7601, 32 bit)
Indicators:
MIME: application/x-dosexec
File info: PE32 executable (GUI) Intel 80386, for MS Windows
MD5:

9CC8B23CE0B06F46E5B95867F05C6812

SHA1:

B33567CC39707F2B9770C512B917A2AAC3CAF1CD

SHA256:

5E3CA83379F9A0008088527475D18EDF0D6F072ADC846F9A54E74C432D651355

SSDEEP:

98304:nuD39bdt4weIL+P5C+OAruxOXAkooPqOl9p08IIx8OUbast9YWOsIEgFVgZWya3t:aaNRER58CAUT8

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    • Drops the executable file immediately after the start

      • msiexec.exe (PID: 3472)

  • SUSPICIOUS

    • The process drops C-runtime libraries

      • msiexec.exe (PID: 3472)

    • Process drops legitimate windows executable

      • msiexec.exe (PID: 3472)

    • Starts CMD.EXE for commands execution

      • CloudHttpWin32Server.exe (PID: 3756)

    • Uses TASKKILL.EXE to kill process

      • cmd.exe (PID: 3876)
      • cmd.exe (PID: 3736)

    • Creates/Modifies COM task schedule object

      • msiexec.exe (PID: 3472)

    • Reads the Windows owner or organization settings

      • Setup(1).exe (PID: 3800)

    • Executes as Windows Service

      • CloudHttpWin32Server.exe (PID: 3756)

  • INFO

    • Reads the computer name

      • Setup(1).exe (PID: 3308)
      • msiexec.exe (PID: 3472)
      • msiexec.exe (PID: 3420)
      • msiexec.exe (PID: 3668)
      • CloudHttpWin32Server.exe (PID: 3756)
      • CloudHttpServer.exe (PID: 4064)
      • Setup(1).exe (PID: 3800)
      • CloudHttpWin32Server.exe (PID: 3248)
      • wmpnscfg.exe (PID: 2856)

    • Checks supported languages

      • Setup(1).exe (PID: 3308)
      • msiexec.exe (PID: 3472)
      • msiexec.exe (PID: 3420)
      • msiexec.exe (PID: 3668)
      • CloudHttpWin32Server.exe (PID: 3756)
      • CloudHttpWindowPopup.exe (PID: 4044)
      • CloudHttpServer.exe (PID: 4064)
      • Setup(1).exe (PID: 3800)
      • CloudHttpWindowPopup.exe (PID: 3796)
      • CloudHttpServer.exe (PID: 2500)
      • CloudHttpWin32Server.exe (PID: 3248)
      • CloudHttpWindowPopup.exe (PID: 3056)
      • wmpnscfg.exe (PID: 2856)
      • CloudHttpWindowPopup.exe (PID: 3792)

    • Create files in a temporary directory

      • Setup(1).exe (PID: 3308)
      • msiexec.exe (PID: 3472)
      • Setup(1).exe (PID: 3800)

    • Reads the machine GUID from the registry

      • msiexec.exe (PID: 3472)
      • Setup(1).exe (PID: 3308)
      • msiexec.exe (PID: 3420)
      • msiexec.exe (PID: 3668)
      • Setup(1).exe (PID: 3800)
      • wmpnscfg.exe (PID: 2856)

    • Creates files or folders in the user directory

      • Setup(1).exe (PID: 3308)

    • Application launched itself

      • msiexec.exe (PID: 3472)
      • msedge.exe (PID: 3392)

    • Drops the executable file immediately after the start

      • msiexec.exe (PID: 2900)

    • Creates files in the program directory

      • CloudHttpServer.exe (PID: 4064)

    • Manual execution by a user

      • Setup(1).exe (PID: 3800)
      • CloudHttpWin32Server.exe (PID: 3248)
      • msedge.exe (PID: 3392)
      • CloudHttpWindowPopup.exe (PID: 3056)
      • wmpnscfg.exe (PID: 2856)
      • CloudHttpServer.exe (PID: 2500)

    • Creates a software uninstall entry

      • msiexec.exe (PID: 3472)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.exe | InstallShield setup (36.8)
.exe | Win32 Executable MS Visual C++ (generic) (26.6)
.exe | Win64 Executable (generic) (23.6)
.dll | Win32 Dynamic Link Library (generic) (5.6)
.exe | Win32 Executable (generic) (3.8)

EXIF

EXE

MachineType: Intel 386 or later, and compatibles
TimeStamp: 2013:10:30 07:48:02+01:00
ImageFileCharacteristics: No relocs, Executable, 32-bit
PEType: PE32
LinkerVersion: 9
CodeSize: 715776
InitializedDataSize: 499712
UninitializedDataSize: -
EntryPoint: 0x6b0fb
OSVersion: 5
ImageVersion: -
SubsystemVersion: 5
Subsystem: Windows GUI
FileVersionNumber: 1.21.1.0
ProductVersionNumber: 1.21.1.0
FileFlagsMask: 0x003f
FileFlags: (none)
FileOS: Win32
ObjectFileType: Dynamic link library
FileSubtype: -
LanguageCode: English (U.S.)
CharacterSet: Unicode
CompanyName: Star4Live
FileDescription: Setup Launcher Unicode
FileVersion: 1.21.0001
InternalName: Setup
LegalCopyright: Copyright (c) 2013 Flexera Software LLC. All Rights Reserved.
OriginalFileName: InstallShield Setup.exe
ProductName: Star4Live_P2P
ProductVersion: 1.21.0001
InternalBuildNumber: 134369
ISInternalVersion: 20.0.529
ISInternalDescription: Setup Launcher Unicode
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
84
Monitored processes
31
Malicious processes
1
Suspicious processes
1

Behavior graph

Click at the process to see the details
start setup(1).exe no specs msiexec.exe no specs msiexec.exe no specs msiexec.exe no specs msiexec.exe no specs cloudhttpwin32server.exe no specs cmd.exe no specs taskkill.exe no specs cmd.exe no specs taskkill.exe no specs cloudhttpserver.exe no specs cloudhttpwindowpopup.exe no specs setup(1).exe no specs msiexec.exe no specs cloudhttpwindowpopup.exe no specs cloudhttpserver.exe no specs cloudhttpwin32server.exe no specs cloudhttpwindowpopup.exe no specs msedge.exe msedge.exe no specs msedge.exe no specs msedge.exe msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs wmpnscfg.exe no specs msedge.exe no specs msedge.exe no specs cloudhttpwindowpopup.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
1448"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=renderer --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=1476 --field-trial-handle=1304,i,2769755770854715025,11465290180893009090,131072 /prefetch:1C:\Program Files\Microsoft\Edge\Application\msedge.exe—msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
LOW
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
1628"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1544 --field-trial-handle=1304,i,2769755770854715025,11465290180893009090,131072 /prefetch:2C:\Program Files\Microsoft\Edge\Application\msedge.exe—msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
LOW
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
2164"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=renderer --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=2516 --field-trial-handle=1304,i,2769755770854715025,11465290180893009090,131072 /prefetch:1C:\Program Files\Microsoft\Edge\Application\msedge.exe—msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
LOW
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
2292MSIEXEC.EXE /i "C:\Users\admin\AppData\Local\Downloaded Installations\{97627F2F-448F-4F68-9C59-744F29173474}\Star4Live_P2P.msi" SETUPEXEDIR="C:\Users\admin\Desktop" SETUPEXENAME="Setup(1).exe"C:\Windows\System32\msiexec.exe—Setup(1).exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Windows® installer
Exit code:
0
Version:
5.0.7600.16385 (win7_rtm.090713-1255)
Modules
Images
c:\windows\system32\msiexec.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
2500"C:\Program Files\Star4Live\Star4Live_P2P\CloudHttpServer.exe" C:\Program Files\Star4Live\Star4Live_P2P\CloudHttpServer.exe—explorer.exe
User:
admin
Integrity Level:
MEDIUM
Exit code:
4294967295
Modules
Images
c:\program files\star4live\star4live_p2p\cloudhttpserver.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\star4live\star4live_p2p\msvcp120.dll
c:\program files\star4live\star4live_p2p\msvcr120.dll
c:\program files\star4live\star4live_p2p\libcloudclient.dll
c:\windows\system32\shell32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\shlwapi.dll
2856"C:\Program Files\Windows Media Player\wmpnscfg.exe"C:\Program Files\Windows Media Player\wmpnscfg.exe—explorer.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Windows Media Player Network Sharing Service Configuration Application
Exit code:
0
Version:
12.0.7600.16385 (win7_rtm.090713-1255)
Modules
Images
c:\program files\windows media player\wmpnscfg.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\sspicli.dll
c:\windows\system32\ole32.dll
2900MSIEXEC.EXE /i "C:\Users\admin\AppData\Local\Downloaded Installations\{97627F2F-448F-4F68-9C59-744F29173474}\Star4Live_P2P.msi" SETUPEXEDIR="C:\Users\admin\Desktop" SETUPEXENAME="Setup(1).exe"C:\Windows\System32\msiexec.exe—Setup(1).exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Windows® installer
Exit code:
0
Version:
5.0.7600.16385 (win7_rtm.090713-1255)
Modules
Images
c:\windows\system32\msiexec.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
3056"C:\Program Files\Star4Live\Star4Live_P2P\CloudHttpWindowPopup.exe" C:\Program Files\Star4Live\Star4Live_P2P\CloudHttpWindowPopup.exe—explorer.exe
User:
admin
Integrity Level:
MEDIUM
Exit code:
3221225786
Modules
Images
c:\program files\star4live\star4live_p2p\cloudhttpwindowpopup.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\shell32.dll
3156"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=renderer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2284 --field-trial-handle=1304,i,2769755770854715025,11465290180893009090,131072 /prefetch:1C:\Program Files\Microsoft\Edge\Application\msedge.exe—msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
LOW
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
3248"C:\Program Files\Star4Live\Star4Live_P2P\CloudHttpWin32Server.exe" C:\Program Files\Star4Live\Star4Live_P2P\CloudHttpWin32Server.exe—explorer.exe
User:
admin
Integrity Level:
MEDIUM
Exit code:
0
Modules
Images
c:\program files\star4live\star4live_p2p\cloudhttpwin32server.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\program files\star4live\star4live_p2p\msvcr120.dll
c:\windows\system32\wtsapi32.dll
Total events
7 168
Read events
7 018
Write events
124
Delete events
26

Modification events

(PID) Process:(3472) msiexec.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
Operation:writeName:C:\Windows\system32\msvcr120.dll
Value:
3
(PID) Process:(3472) msiexec.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
Operation:writeName:C:\Windows\system32\msvcp120.dll
Value:
3
(PID) Process:(3472) msiexec.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
Operation:writeName:C:\Windows\system32\vccorlib120.dll
Value:
3
(PID) Process:(3472) msiexec.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
Operation:writeName:C:\Windows\system32\msvcr120.dll
Value:
4
(PID) Process:(3472) msiexec.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
Operation:writeName:C:\Windows\system32\msvcp120.dll
Value:
4
(PID) Process:(3472) msiexec.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
Operation:writeName:C:\Windows\system32\vccorlib120.dll
Value:
4
(PID) Process:(3472) msiexec.exeKey:HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MUI\StringCacheSettings
Operation:writeName:StringCacheGeneration
Value:
378
(PID) Process:(3472) msiexec.exeKey:HKEY_USERS\.DEFAULT\Software\Classes\Local Settings\MuiCache\17A\52C64B7E
Operation:delete keyName:(default)
Value:
(PID) Process:(3472) msiexec.exeKey:HKEY_USERS\.DEFAULT\Software\Classes\Local Settings\MuiCache\17A
Operation:delete keyName:(default)
Value:
(PID) Process:(3472) msiexec.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts
Operation:delete valueName:C:\Config.Msi\169c18.rbs
Value:
31068606
Executable files
27
Suspicious files
53
Text files
49
Unknown types
0

Dropped files

PID
Process
Filename
Type
3308Setup(1).exeC:\Users\admin\AppData\Local\Temp\{F9A60A26-6A34-4E0C-8F67-33B5924AADEC}\Star4Live_P2P.msi —
MD5:—
SHA256:—
3308Setup(1).exeC:\Users\admin\AppData\Local\Downloaded Installations\{97627F2F-448F-4F68-9C59-744F29173474}\Star4Live_P2P.msi —
MD5:—
SHA256:—
3472msiexec.exeC:\Windows\Installer\169c16.msi —
MD5:—
SHA256:—
3308Setup(1).exeC:\Users\admin\AppData\Local\Temp\{F9A60A26-6A34-4E0C-8F67-33B5924AADEC}\_ISMSIDEL.INItext
MD5:3BB041CF7A16CEE1A5A706DE49E0431D
SHA256:949363A1ACBB318840CE34DF0D5692AEF83ECFAB161AC73E947F62178C2187E5
3472msiexec.exeC:\Windows\Installer\169c17.ipibinary
MD5:93998C5DC0FDC43B669D1A3B89EE5C49
SHA256:6E26E6BADF01EFF419E5E18988A65D3E8384898D5BA4E3227F93DD5A7A59B272
3472msiexec.exeC:\Program Files\Star4Live\Star4Live_P2P\CloudHttpServer.exeexecutable
MD5:D98E6D1314BC7412DFE7468423AA8FC7
SHA256:CD952195A42A0EC7A52F1F5172421E3EE67118F3E40AFF43A4186290D105F74B
3308Setup(1).exeC:\Users\admin\AppData\Local\Temp\{F9A60A26-6A34-4E0C-8F67-33B5924AADEC}\Setup.INItext
MD5:655ECC2B3D9522376D06CF0D8F186552
SHA256:9D19597FFF3855859B5FFB9A08431A81FDB714A8267A2B3591E500C97241E744
3472msiexec.exeC:\Windows\Installer\MSI9F62.tmpbinary
MD5:49EABEEBA1B39DAFD2EE3EBDE37AA35B
SHA256:50B1E1D098888A2C49BE789DD9391E36EC80EAB5A8CD9B2DB2AF57023803F41B
3472msiexec.exeC:\Program Files\Star4Live\Star4Live_P2P\CloudHttpWindowPopup.exeexecutable
MD5:C67AA650D57D92A0CF805343593C6AB9
SHA256:3DA18526B80A74BB2D2442CB7C9E5C33D922DA6DC468BBEA38D2E6CB3313252F
3308Setup(1).exeC:\Users\admin\AppData\Local\Temp\~7A36.tmptext
MD5:655ECC2B3D9522376D06CF0D8F186552
SHA256:9D19597FFF3855859B5FFB9A08431A81FDB714A8267A2B3591E500C97241E744
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
0
TCP/UDP connections
12
DNS requests
10
Threats
0

HTTP requests

No HTTP requests
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
4
System
192.168.100.255:138
—
—
—
whitelisted
1080
svchost.exe
224.0.0.252:5355
—
—
—
unknown
4
System
192.168.100.255:137
—
—
—
whitelisted
2588
svchost.exe
239.255.255.250:1900
—
—
—
whitelisted
3392
msedge.exe
239.255.255.250:1900
—
—
—
whitelisted
4016
msedge.exe
13.107.42.16:443
config.edge.skype.com
MICROSOFT-CORP-MSN-AS-BLOCK
US
whitelisted
4016
msedge.exe
204.79.197.239:443
edge.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
US
unknown
4016
msedge.exe
51.104.176.40:443
nav-edge.smartscreen.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
unknown
4016
msedge.exe
204.79.197.200:443
www.bing.com
MICROSOFT-CORP-MSN-AS-BLOCK
US
whitelisted

DNS requests

Domain
IP
Reputation
config.edge.skype.com
  • 13.107.42.16
whitelisted
edge.microsoft.com
  • 204.79.197.239
  • 13.107.21.239
whitelisted
nav-edge.smartscreen.microsoft.com
  • 51.104.176.40
whitelisted
data-edge.smartscreen.microsoft.com
  • 51.104.176.40
whitelisted
www.bing.com
  • 204.79.197.200
  • 13.107.21.200
whitelisted

Threats

No threats detected
No debug info
Interactive malware hunting service ANY.RUN
© 2017-2025 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
Setup(1).exe