File name:

Draftkings Sportsbook NH Player Location Check.exe

Full analysis: https://app.any.run/tasks/99b17d22-1470-4da1-98af-ae8c421ee540
Verdict: Malicious activity
Analysis date: January 02, 2024, 03:22:09
OS: Windows 7 Professional Service Pack 1 (build: 7601, 32 bit)
Indicators:
MIME: application/x-dosexec
File info: PE32 executable (GUI) Intel 80386, for MS Windows
MD5:

D685A72B4FDD7587AF233FCA094160A5

SHA1:

9F70F83E6F233A0FD36FE1F958D813C4B302DCFA

SHA256:

6208895DB73913AC2EB22CF2BB6CF0D90F6D642E5E4987571097C12F91DC9EEC

SSDEEP:

98304:We0TQxiTKK2O+NB23sH83yroBBYz70pbaGDSMPZw6JYiPtE5lCpjtmvBj4Wrys/2:H78JWzteu0BeXc

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    • Uses Task Scheduler to run other applications

      • Draftkings Sportsbook NH Player Location Check.exe (PID: 492)

  • SUSPICIOUS

    • Reads the BIOS version

      • Draftkings Sportsbook NH Player Location Check.exe (PID: 2036)
      • Draftkings Sportsbook NH Player Location Check.exe (PID: 492)
      • com.geocomply.process-scanner-microservice.exe (PID: 2312)
      • com.geocomply.vm-detector-microservice.exe (PID: 2488)
      • com.geocomply.wifi-scanner-microservice.exe (PID: 1628)
      • com.geocomply.internal-updater-microservice.exe (PID: 3908)
      • service.exe (PID: 3812)
      • PlayerLocationIcon.exe (PID: 3400)
      • service.exe (PID: 4276)

  • INFO

    • Checks supported languages

      • Draftkings Sportsbook NH Player Location Check.exe (PID: 2036)
      • Draftkings Sportsbook NH Player Location Check.exe (PID: 492)
      • crash_handler.exe (PID: 2904)
      • com.geocomply.vm-detector-microservice.exe (PID: 2488)
      • wmpnscfg.exe (PID: 1544)
      • com.geocomply.process-scanner-microservice.exe (PID: 2312)
      • com.geocomply.wifi-scanner-microservice.exe (PID: 1628)
      • crash_handler.exe (PID: 3860)
      • com.geocomply.internal-updater-microservice.exe (PID: 3908)
      • crash_handler.exe (PID: 1124)
      • crash_handler.exe (PID: 2092)
      • service.exe (PID: 3812)
      • PlayerLocationIcon.exe (PID: 3400)
      • crash_handler.exe (PID: 3316)
      • service.exe (PID: 4276)

    • Application launched itself

      • Draftkings Sportsbook NH Player Location Check.exe (PID: 2036)

    • Drops the executable file immediately after the start

      • Draftkings Sportsbook NH Player Location Check.exe (PID: 2036)
      • Draftkings Sportsbook NH Player Location Check.exe (PID: 492)

    • Reads the computer name

      • Draftkings Sportsbook NH Player Location Check.exe (PID: 2036)
      • Draftkings Sportsbook NH Player Location Check.exe (PID: 492)
      • com.geocomply.process-scanner-microservice.exe (PID: 2312)
      • com.geocomply.vm-detector-microservice.exe (PID: 2488)
      • wmpnscfg.exe (PID: 1544)
      • com.geocomply.wifi-scanner-microservice.exe (PID: 1628)
      • com.geocomply.internal-updater-microservice.exe (PID: 3908)
      • service.exe (PID: 3812)
      • PlayerLocationIcon.exe (PID: 3400)

    • Creates files in the program directory

      • Draftkings Sportsbook NH Player Location Check.exe (PID: 2036)
      • com.geocomply.process-scanner-microservice.exe (PID: 2312)
      • crash_handler.exe (PID: 2904)
      • Draftkings Sportsbook NH Player Location Check.exe (PID: 492)
      • crash_handler.exe (PID: 1124)
      • com.geocomply.internal-updater-microservice.exe (PID: 3908)
      • com.geocomply.wifi-scanner-microservice.exe (PID: 1628)
      • crash_handler.exe (PID: 3860)
      • com.geocomply.vm-detector-microservice.exe (PID: 2488)
      • crash_handler.exe (PID: 2092)
      • service.exe (PID: 3812)
      • crash_handler.exe (PID: 3316)

    • Process checks are UAC notifies on

      • Draftkings Sportsbook NH Player Location Check.exe (PID: 492)
      • com.geocomply.vm-detector-microservice.exe (PID: 2488)
      • com.geocomply.process-scanner-microservice.exe (PID: 2312)
      • com.geocomply.wifi-scanner-microservice.exe (PID: 1628)
      • com.geocomply.internal-updater-microservice.exe (PID: 3908)
      • service.exe (PID: 3812)
      • service.exe (PID: 4276)

    • Reads the machine GUID from the registry

      • Draftkings Sportsbook NH Player Location Check.exe (PID: 492)
      • com.geocomply.process-scanner-microservice.exe (PID: 2312)
      • com.geocomply.vm-detector-microservice.exe (PID: 2488)
      • com.geocomply.wifi-scanner-microservice.exe (PID: 1628)
      • com.geocomply.internal-updater-microservice.exe (PID: 3908)
      • service.exe (PID: 3812)

    • Executes as Windows Service

      • com.geocomply.vm-detector-microservice.exe (PID: 2488)
      • com.geocomply.process-scanner-microservice.exe (PID: 2312)
      • com.geocomply.wifi-scanner-microservice.exe (PID: 1628)
      • com.geocomply.internal-updater-microservice.exe (PID: 3908)
      • service.exe (PID: 3812)

    • Create files in a temporary directory

      • Draftkings Sportsbook NH Player Location Check.exe (PID: 492)

    • Manual execution by a user

      • wmpnscfg.exe (PID: 1544)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.exe | Win32 Executable (generic) (52.9)
.exe | Generic Win/DOS Executable (23.5)
.exe | DOS Executable Generic (23.5)

EXIF

EXE

MachineType: Intel 386 or later, and compatibles
TimeStamp: 2022:04:22 01:18:54+02:00
ImageFileCharacteristics: Executable, 32-bit
PEType: PE32
LinkerVersion: 14.29
CodeSize: 3717120
InitializedDataSize: 1586688
UninitializedDataSize: -
EntryPoint: 0xaa9058
OSVersion: 6
ImageVersion: -
SubsystemVersion: 6
Subsystem: Windows GUI
FileVersionNumber: 3.0.2.59
ProductVersionNumber: 3.0.2.8
FileFlagsMask: 0x003f
FileFlags: (none)
FileOS: Windows NT 32-bit
ObjectFileType: Unknown
FileSubtype: -
LanguageCode: English (U.S.)
CharacterSet: Unicode
CompanyName: GeoComply
FileDescription: Player Location Check
FileVersion: 4.0.0.4
InternalName: Player Location Check
LegalCopyright: © 2021 GeoComply Solutions Inc.
OriginalFileName: Player Location Check.exe
ProductName: Player Location Check
ProductVersion: 4.0.0.4
Website: https://www.geocomply.com
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
61
Monitored processes
19
Malicious processes
7
Suspicious processes
2

Behavior graph

Click at the process to see the details
start draftkings sportsbook nh player location check.exe no specs draftkings sportsbook nh player location check.exe wmpnscfg.exe no specs com.geocomply.process-scanner-microservice.exe no specs crash_handler.exe no specs com.geocomply.vm-detector-microservice.exe no specs crash_handler.exe no specs com.geocomply.wifi-scanner-microservice.exe no specs crash_handler.exe no specs com.geocomply.internal-updater-microservice.exe no specs crash_handler.exe no specs service.exe no specs playerlocationicon.exe no specs crash_handler.exe no specs service.exe no specs schtasks.exe no specs schtasks.exe no specs schtasks.exe no specs schtasks.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
492"C:\Users\admin\AppData\Local\Temp\Draftkings Sportsbook NH Player Location Check.exe" /runasadminC:\Users\admin\AppData\Local\Temp\Draftkings Sportsbook NH Player Location Check.exe
Draftkings Sportsbook NH Player Location Check.exe
User:
admin
Company:
GeoComply
Integrity Level:
HIGH
Description:
Player Location Check
Exit code:
0
Version:
4.0.0.4
Modules
Images
c:\users\admin\appdata\local\temp\draftkings sportsbook nh player location check.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\ws2_32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\nsi.dll
c:\windows\system32\version.dll
c:\windows\system32\iphlpapi.dll
1124"C:\Program Files\GeoComply\PlayerLocationCheck\crash_handler.exe" --no-rate-limit "--database=C:\ProgramData\GeoComply\Player Location Check\4.0.0.4\com.geocomply.vm-detector-microservice\crash_dumps" "--metrics-dir=C:\ProgramData\GeoComply\Player Location Check\4.0.0.4\com.geocomply.vm-detector-microservice\crash_dumps" --url=https://sentry.geocomply.com/api/4/minidump/?sentry_key=fe16c1a9523e4ab0b3707ad66b0217dc --annotation=device_uuid=122F93F2-EE307E06-10FDE9D5-274888D7-DFB83596-13C4E568 "--annotation=os=Microsoft Windows 7 Professional Service Pack 1 (build 7601), 32-bit" "--annotation=solution=Windows SDK CPP v.4.0.0.4" --initial-client-data=0x218,0x224,0x220,0x21c,0x274,0x2a1a638,0x2a1a610,0x2a1a61cC:\Program Files\GeoComply\PlayerLocationCheck\crash_handler.exe—com.geocomply.vm-detector-microservice.exe
User:
SYSTEM
Integrity Level:
SYSTEM
Exit code:
0
Modules
Images
c:\program files\geocomply\playerlocationcheck\crash_handler.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
1544"C:\Program Files\Windows Media Player\wmpnscfg.exe"C:\Program Files\Windows Media Player\wmpnscfg.exe—explorer.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Windows Media Player Network Sharing Service Configuration Application
Exit code:
0
Version:
12.0.7600.16385 (win7_rtm.090713-1255)
Modules
Images
c:\program files\windows media player\wmpnscfg.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
1628"C:\Program Files\GeoComply\//PlayerLocationCheck///Application/com.geocomply.wifi-scanner-microservice.exe"C:\Program Files\GeoComply\PlayerLocationCheck\Application\com.geocomply.wifi-scanner-microservice.exe—services.exe
User:
SYSTEM
Integrity Level:
SYSTEM
Exit code:
0
Modules
Images
c:\program files\geocomply\playerlocationcheck\application\com.geocomply.wifi-scanner-microservice.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\ws2_32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\nsi.dll
c:\windows\system32\version.dll
c:\windows\system32\crypt32.dll
2036"C:\Users\admin\AppData\Local\Temp\Draftkings Sportsbook NH Player Location Check.exe" C:\Users\admin\AppData\Local\Temp\Draftkings Sportsbook NH Player Location Check.exe—explorer.exe
User:
admin
Company:
GeoComply
Integrity Level:
MEDIUM
Description:
Player Location Check
Exit code:
0
Version:
4.0.0.4
Modules
Images
c:\users\admin\appdata\local\temp\draftkings sportsbook nh player location check.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\ws2_32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\nsi.dll
c:\windows\system32\version.dll
c:\windows\system32\iphlpapi.dll
2092"C:\Program Files\GeoComply\PlayerLocationCheck\crash_handler.exe" --no-rate-limit "--database=C:\ProgramData\GeoComply\Player Location Check\4.0.0.4\com.geocomply.internal-updater-microservice\crash_dumps" "--metrics-dir=C:\ProgramData\GeoComply\Player Location Check\4.0.0.4\com.geocomply.internal-updater-microservice\crash_dumps" --url=https://sentry.geocomply.com/api/4/minidump/?sentry_key=fe16c1a9523e4ab0b3707ad66b0217dc --annotation=device_uuid=122F93F2-EE307E06-10FDE9D5-274888D7-DFB83596-13C4E568 "--annotation=os=Microsoft Windows 7 Professional Service Pack 1 (build 7601), 32-bit" "--annotation=solution=Windows SDK CPP v.4.0.0.4" --initial-client-data=0x230,0x23c,0x238,0x234,0x27c,0x20ea628,0x20ea600,0x20ea60cC:\Program Files\GeoComply\PlayerLocationCheck\crash_handler.exe—com.geocomply.internal-updater-microservice.exe
User:
SYSTEM
Integrity Level:
SYSTEM
Exit code:
0
Modules
Images
c:\program files\geocomply\playerlocationcheck\crash_handler.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
2312"C:\Program Files\GeoComply\//PlayerLocationCheck///Application/com.geocomply.process-scanner-microservice.exe"C:\Program Files\GeoComply\PlayerLocationCheck\Application\com.geocomply.process-scanner-microservice.exe—services.exe
User:
SYSTEM
Integrity Level:
SYSTEM
Exit code:
0
Modules
Images
c:\program files\geocomply\playerlocationcheck\application\com.geocomply.process-scanner-microservice.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\ws2_32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\nsi.dll
c:\windows\system32\version.dll
c:\windows\system32\crypt32.dll
2488"C:\Program Files\GeoComply\//PlayerLocationCheck///Application/com.geocomply.vm-detector-microservice.exe"C:\Program Files\GeoComply\PlayerLocationCheck\Application\com.geocomply.vm-detector-microservice.exe—services.exe
User:
SYSTEM
Integrity Level:
SYSTEM
Exit code:
0
Modules
Images
c:\program files\geocomply\playerlocationcheck\application\com.geocomply.vm-detector-microservice.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\ws2_32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\nsi.dll
c:\windows\system32\version.dll
c:\windows\system32\crypt32.dll
2904"C:\Program Files\GeoComply\PlayerLocationCheck\crash_handler.exe" --no-rate-limit "--database=C:\ProgramData\GeoComply\Player Location Check\4.0.0.4\com.geocomply.process-scanner-microservice\crash_dumps" "--metrics-dir=C:\ProgramData\GeoComply\Player Location Check\4.0.0.4\com.geocomply.process-scanner-microservice\crash_dumps" --url=https://sentry.geocomply.com/api/4/minidump/?sentry_key=fe16c1a9523e4ab0b3707ad66b0217dc --annotation=device_uuid=122F93F2-EE307E06-10FDE9D5-274888D7-DFB83596-13C4E568 "--annotation=os=Microsoft Windows 7 Professional Service Pack 1 (build 7601), 32-bit" "--annotation=solution=Windows SDK CPP v.4.0.0.4" --initial-client-data=0x250,0x248,0x258,0x244,0x254,0x20aa638,0x20aa610,0x20aa61cC:\Program Files\GeoComply\PlayerLocationCheck\crash_handler.exe—com.geocomply.process-scanner-microservice.exe
User:
SYSTEM
Integrity Level:
SYSTEM
Exit code:
0
Modules
Images
c:\program files\geocomply\playerlocationcheck\crash_handler.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
3316"C:\Program Files\GeoComply\PlayerLocationCheck\crash_handler.exe" --no-rate-limit "--database=C:\ProgramData\GeoComply\Player Location Check\4.0.0.4\service\crash_dumps" "--metrics-dir=C:\ProgramData\GeoComply\Player Location Check\4.0.0.4\service\crash_dumps" --url=https://sentry.geocomply.com/api/4/minidump/?sentry_key=fe16c1a9523e4ab0b3707ad66b0217dc --annotation=device_uuid=122F93F2-EE307E06-10FDE9D5-274888D7-DFB83596-13C4E568 "--annotation=os=Microsoft Windows 7 Professional Service Pack 1 (build 7601), 32-bit" "--annotation=solution=Windows SDK CPP v.4.0.0.4" --initial-client-data=0x268,0x264,0x270,0x260,0x26c,0x27e41e4,0x27e41bc,0x27e41c8C:\Program Files\GeoComply\PlayerLocationCheck\crash_handler.exe—service.exe
User:
SYSTEM
Integrity Level:
SYSTEM
Exit code:
0
Modules
Images
c:\program files\geocomply\playerlocationcheck\crash_handler.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
Total events
2 984
Read events
2 984
Write events
0
Delete events
0

Modification events

No data
Executable files
31
Suspicious files
30
Text files
17
Unknown types
0

Dropped files

PID
Process
Filename
Type
492Draftkings Sportsbook NH Player Location Check.exeC:\Users\admin\AppData\Local\Temp\tmp492aaaaaa —
MD5:—
SHA256:—
492Draftkings Sportsbook NH Player Location Check.exeC:\Users\admin\AppData\Local\Temp\tmp492baaaaa\PlayerLocationCheck\Application\com.geocomply.wifi-scanner-microservice.exeexecutable
MD5:8042CEE36314F66DB8B0D53BE48DC6B9
SHA256:EC18A2E87AA8221E90025F5C8101357FA1C41165C431B9CFCF34CE045EB03292
492Draftkings Sportsbook NH Player Location Check.exeC:\Users\admin\AppData\Local\Temp\tmp492baaaaa\PlayerLocationCheck\Application\com.geocomply.internal-updater-microservice.exeexecutable
MD5:CA929175116C19D8E622E4C60686CBD6
SHA256:E341FC653EAB281CDC36530F296433E4CCA4E8E86D089076A1FA2CB67786F5BD
492Draftkings Sportsbook NH Player Location Check.exeC:\Users\admin\AppData\Local\Temp\tmp492baaaaa\PlayerLocationCheck\Application\com.geocomply.vm-detector-microservice.exeexecutable
MD5:3528A56EBF61EC5194AC7F394D6AE481
SHA256:DC0B888A56A430EB9823A795187C8EA99280F3A73C64E4C8D0652E1865ECF90D
492Draftkings Sportsbook NH Player Location Check.exeC:\Users\admin\AppData\Local\Temp\tmp492baaaaa\PlayerLocationCheck\Application\com.geocomply.process-scanner-microservice.exeexecutable
MD5:097936B1BB498F956D5A74E14B93918B
SHA256:BB9E9E45CCD5379E3E586626FA5943987D58CD03A8BF75E391F16FED81541639
492Draftkings Sportsbook NH Player Location Check.exeC:\Users\admin\AppData\Local\Temp\tmp492baaaaa\PlayerLocationCheck\Application\PlayerLocationCheck.exeexecutable
MD5:DFFD1E8EDB7E8CCDF67151829DBF640D
SHA256:6C7B762DB04C70D286C9FBA229383CA55818C09E70DD53FF8174570214A772DE
492Draftkings Sportsbook NH Player Location Check.exeC:\Users\admin\AppData\Local\Temp\tmp492baaaaa\PlayerLocationCheck\Application\config.xmltext
MD5:7C8E915D0297E26BC8134794696B40F8
SHA256:456753786166CD116FAB7CCDF491790D250CB5671B9DCED1E87921E3DFA81EB1
2036Draftkings Sportsbook NH Player Location Check.exeC:\ProgramData\mntemptext
MD5:2A42CCA7229309CA9288F524FF2166EF
SHA256:66A0D2D3E61F822D8F71AA72716D08A81E743D96B052C1CEB8729B5133A96063
492Draftkings Sportsbook NH Player Location Check.exeC:\Users\admin\AppData\Local\Temp\tmp492baaaaa\PlayerLocationCheck\Application\PlayerLocationCheckTask.cmdtext
MD5:9E1677796425F3670C9123F151E82D11
SHA256:15D4CC61616CACFB37DBDB4C568127C2748C65EA42205EB552CFCB51D7046EF2
492Draftkings Sportsbook NH Player Location Check.exeC:\Users\admin\AppData\Local\Temp\tmp492baaaaa\PlayerLocationCheck\Application\PlayerLocationIcon.exeexecutable
MD5:5656D36BE9900B1C56B6919396FC1A92
SHA256:2CD55A700A1722BA59CCF2003E56BE8BA62B3F949EEFA4C8816A2C4AE5C18501
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
0
TCP/UDP connections
26
DNS requests
13
Threats
0

HTTP requests

No HTTP requests
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
4
System
192.168.100.255:137
—
—
—
unknown
4
System
192.168.100.255:138
—
—
—
unknown
1080
svchost.exe
224.0.0.252:5355
—
—
—
unknown
492
Draftkings Sportsbook NH Player Location Check.exe
52.2.40.53:443
logger.geocomply.net
AMAZON-AES
US
unknown
492
Draftkings Sportsbook NH Player Location Check.exe
34.195.184.53:443
ums.geocomply.com
AMAZON-AES
US
unknown
492
Draftkings Sportsbook NH Player Location Check.exe
18.66.122.41:443
prod-downloads.geocomply.com
AMAZON-02
US
unknown
492
Draftkings Sportsbook NH Player Location Check.exe
18.66.122.29:443
prod-downloads.geocomply.com
AMAZON-02
US
unknown
492
Draftkings Sportsbook NH Player Location Check.exe
18.66.122.84:443
prod-downloads.geocomply.com
AMAZON-02
US
unknown
492
Draftkings Sportsbook NH Player Location Check.exe
18.66.122.49:443
prod-downloads.geocomply.com
AMAZON-02
US
unknown
492
Draftkings Sportsbook NH Player Location Check.exe
34.194.204.84:443
ums.geocomply.com
AMAZON-AES
US
unknown

DNS requests

Domain
IP
Reputation
logger.geocomply.net
  • 52.2.40.53
unknown
ums.geocomply.com
  • 34.195.184.53
  • 34.194.204.84
unknown
prod-downloads.geocomply.com
  • 18.66.122.49
  • 18.66.122.29
  • 18.66.122.41
  • 18.66.122.84
unknown

Threats

No threats detected
No debug info
Interactive malware hunting service ANY.RUN
© 2017-2025 ANY.RUN LLC. ALL RIGHTS RESERVED
ANY.RUN
Reports
Draftkings Sportsbook NH Player Location Check.exe