File name:

vksaver-install.exe

Full analysis: https://app.any.run/tasks/daa9be74-fbe3-4a49-937f-df19bd09dc70
Verdict: Malicious activity
Analysis date: December 26, 2023, 06:27:00
OS: Windows 7 Professional Service Pack 1 (build: 7601, 32 bit)
Tags:
opendir
qrcode
Indicators:
MIME: application/x-dosexec
File info: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
MD5:

B91F2DD6045C808550784DA68C51A095

SHA1:

E0645A346ED117B8774A236042352D7669BD774D

SHA256:

659F32D5C164CD690A387B6886BF22152011827CCC084F333C7D094017B12F7E

SSDEEP:

49152:SNfrGJLMAB3du0MIbOdO4r/5eMqrDNfbbC1VjHSKIacG+zQkJbsIhaXDvDU71yne:FLMABNhAe1r5juj1HJ+zQSbsIwDvDUEs

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    • Actions looks like stealing of personal data

      • vksaver-install.exe (PID: 2420)

  • SUSPICIOUS

    • Reads the Internet Settings

      • vksaver-install.exe (PID: 2040)
      • vksaver-install.exe (PID: 2420)
      • VKSaver.exe (PID: 764)

  • INFO

    • Drops the executable file immediately after the start

      • vksaver-install.exe (PID: 2040)
      • vksaver-install.exe (PID: 2420)

    • Checks supported languages

      • vksaver-install.exe (PID: 2040)
      • vksaver-install.exe (PID: 2420)
      • VKSaver.exe (PID: 764)
      • VKSaver.exe (PID: 1592)

    • Reads the computer name

      • vksaver-install.exe (PID: 2040)
      • vksaver-install.exe (PID: 2420)
      • VKSaver.exe (PID: 764)
      • VKSaver.exe (PID: 1592)

    • Creates files in the program directory

      • vksaver-install.exe (PID: 2040)
      • vksaver-install.exe (PID: 2420)

    • Application launched itself

      • vksaver-install.exe (PID: 2040)
      • msedge.exe (PID: 1504)
      • msedge.exe (PID: 1892)

    • Reads the machine GUID from the registry

      • vksaver-install.exe (PID: 2420)
      • VKSaver.exe (PID: 764)
      • VKSaver.exe (PID: 1592)

    • Checks proxy server information

      • VKSaver.exe (PID: 764)

    • The process executes via Task Scheduler

      • VKSaver.exe (PID: 1592)

    • Manual execution by a user

      • msedge.exe (PID: 1892)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.exe | UPX compressed Win32 Executable (43.5)
.exe | Win32 EXE Yoda's Crypter (42.7)
.exe | Win32 Executable (generic) (7.2)
.exe | Generic Win/DOS Executable (3.2)
.exe | DOS Executable Generic (3.2)

EXIF

EXE

MachineType: Intel 386 or later, and compatibles
TimeStamp: 2022:07:08 10:04:52+02:00
ImageFileCharacteristics: Executable, 32-bit
PEType: PE32
LinkerVersion: 14
CodeSize: 847872
InitializedDataSize: 53248
UninitializedDataSize: 991232
EntryPoint: 0x1c1560
OSVersion: 5.1
ImageVersion: -
SubsystemVersion: 5.1
Subsystem: Windows GUI
FileVersionNumber: 4.2.11496.1649
ProductVersionNumber: 4.2.11496.1649
FileFlagsMask: 0x003f
FileFlags: (none)
FileOS: Windows NT 32-bit
ObjectFileType: Executable application
FileSubtype: -
LanguageCode: Russian
CharacterSet: Unicode
CompanyName: Audiovkontake.ru
FileDescription: VKSaver installation bundle
FileVersion: 4.2.220708.1649
InternalName: VKSaver-Install.exe
LegalCopyright: Copyright (C) 2009-2022 Audiovkontake.ru
OriginalFileName: VKSaver-Install.exe
ProductName: VKSaver
ProductVersion: 4.2.220708.1649
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
76
Monitored processes
40
Malicious processes
2
Suspicious processes
0

Behavior graph

Click at the process to see the details
start vksaver-install.exe no specs vksaver-install.exe msedge.exe no specs msedge.exe no specs vksaver.exe no specs vksaver.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe msedge.exe no specs msedge.exe no specs msedge.exe msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
764"C:\ProgramData\VKSaver\VKSaver.exe"C:\ProgramData\VKSaver\VKSaver.exe—vksaver-install.exe
User:
admin
Company:
AudioVK.com
Integrity Level:
HIGH
Description:
VKSaver tray proxy for saving music from vk.com
Exit code:
0
Version:
4.2.220708.1649
Modules
Images
c:\programdata\vksaver\vksaver.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\user32.dll
1036"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=1640 --field-trial-handle=1224,i,6798819922706635317,17440677832477800004,131072 /prefetch:8C:\Program Files\Microsoft\Edge\Application\msedge.exe—msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
LOW
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
1044"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3468 --field-trial-handle=1224,i,6798819922706635317,17440677832477800004,131072 /prefetch:8C:\Program Files\Microsoft\Edge\Application\msedge.exe—msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
1432"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=4696 --field-trial-handle=1224,i,6798819922706635317,17440677832477800004,131072 /prefetch:8C:\Program Files\Microsoft\Edge\Application\msedge.exe—msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
LOW
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
1504"C:\Program Files\Microsoft\Edge\Application\msedge.exe" https://audiovk.com/vksaver/installed.php?from=installer&yahomepage=false&yaqsearch=false&yabm=false&yabrowser=false&version=4.2&build_date=220708&build=1649&browser=edgeC:\Program Files\Microsoft\Edge\Application\msedge.exe—vksaver-install.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
1560"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1276 --field-trial-handle=1324,i,9701959058598453001,16208056932749169899,131072 /prefetch:2C:\Program Files\Microsoft\Edge\Application\msedge.exe—msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
LOW
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
1592C:\ProgramData\VKSaver\VKSaver.exe -autoupdateC:\ProgramData\VKSaver\VKSaver.exe—taskeng.exe
User:
SYSTEM
Company:
AudioVK.com
Integrity Level:
SYSTEM
Description:
VKSaver tray proxy for saving music from vk.com
Exit code:
0
Version:
4.2.220708.1649
Modules
Images
c:\programdata\vksaver\vksaver.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\user32.dll
1604"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=109.0.5414.149 "--annotation=exe=C:\Program Files\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win32 "--annotation=prod=Microsoft Edge" --annotation=ver=109.0.1518.115 --initial-client-data=0xc8,0xcc,0xd0,0x9c,0xd8,0x6e55f598,0x6e55f5a8,0x6e55f5b4C:\Program Files\Microsoft\Edge\Application\msedge.exe—msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
1644"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3968 --field-trial-handle=1224,i,6798819922706635317,17440677832477800004,131072 /prefetch:8C:\Program Files\Microsoft\Edge\Application\msedge.exe—msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
LOW
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
1892"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --flag-switches-begin --flag-switches-end --do-not-de-elevate https://audiovk.com/vksaver/installed.php?from=installer&yahomepage=false&yaqsearch=false&yabm=false&yabrowser=false&version=4.2&build_date=220708&build=1649&browser=edgeC:\Program Files\Microsoft\Edge\Application\msedge.exe
explorer.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
Total events
4 392
Read events
4 341
Write events
50
Delete events
1

Modification events

(PID) Process:(2040) vksaver-install.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Operation:writeName:ProxyBypass
Value:
1
(PID) Process:(2040) vksaver-install.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Operation:writeName:IntranetName
Value:
1
(PID) Process:(2040) vksaver-install.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Operation:writeName:UNCAsIntranet
Value:
1
(PID) Process:(2040) vksaver-install.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Operation:writeName:AutoDetect
Value:
0
(PID) Process:(2420) vksaver-install.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Operation:writeName:ProxyBypass
Value:
1
(PID) Process:(2420) vksaver-install.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Operation:writeName:IntranetName
Value:
1
(PID) Process:(2420) vksaver-install.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Operation:writeName:UNCAsIntranet
Value:
1
(PID) Process:(2420) vksaver-install.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Operation:writeName:AutoDetect
Value:
0
(PID) Process:(1504) msedge.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Edge\BLBeacon
Operation:writeName:failed_count
Value:
0
(PID) Process:(1504) msedge.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Edge\BLBeacon
Operation:writeName:state
Value:
1
Executable files
4
Suspicious files
157
Text files
86
Unknown types
0

Dropped files

PID
Process
Filename
Type
2336msedge.exe —
MD5:—
SHA256:—
1892msedge.exeC:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\commerce_subscription_db\LOG.old~RFe52fe.TMP —
MD5:—
SHA256:—
1892msedge.exeC:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\commerce_subscription_db\LOG.old —
MD5:—
SHA256:—
2420vksaver-install.exeC:\ProgramData\Microsoft\Windows\Start Menu\Programs\VKSaver\Uninstall.lnkbinary
MD5:D380076E5BC9A3B87389CCC8BD1D0F6C
SHA256:6800C78D41EF359C6E05E7841A6869E377A0B6D06C01D77DDBF4AAB225763BE9
2420vksaver-install.exeC:\ProgramData\Microsoft\Windows\Start Menu\Programs\VKSaver\Launch VKSaver.lnkbinary
MD5:8215B19EDBFC5DCF7EB5E5C3F8644CB3
SHA256:8A29CD3895B7C142D7F33D9506414D5A0EAF6BB05180045565F65D1F8AFDFCF1
1892msedge.exeC:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgePushStorageWithConnectTokenAndKey\LOG.old~RFe531d.TMP —
MD5:—
SHA256:—
1892msedge.exeC:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgePushStorageWithConnectTokenAndKey\LOG.old —
MD5:—
SHA256:—
2420vksaver-install.exeC:\ProgramData\VKSaver\VKSaver.exeexecutable
MD5:8636F12DC9A93E127C7851A97BC652B1
SHA256:F5ABF55B16757E685B982F5BC7B296BE53F6AEC79C1A0169572CCA76723DF49C
1892msedge.exeC:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\LOG.old~RFe53f8.TMP —
MD5:—
SHA256:—
1892msedge.exeC:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Default\LOG.old —
MD5:—
SHA256:—
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
14
TCP/UDP connections
81
DNS requests
102
Threats
0

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
2808
msedge.exe
GET
200
188.127.233.239:80
http://audiovk.com/vksaver/installed.php?from=installer&yahomepage=false&yaqsearch=false&yabm=false&yabrowser=false&version=4.2&build_date=220708&build=1649&browser=edge
unknown
html
4.74 Kb
unknown
2808
msedge.exe
GET
200
188.127.233.239:80
http://audiovk.com/build/css/main.min.3de970c8d5c0904e8705.css
unknown
text
12.8 Kb
unknown
2808
msedge.exe
GET
200
188.127.233.239:80
http://audiovk.com/build/js/installed.bundle.1a20c4187618904c9dbd.js
unknown
text
31.2 Kb
unknown
2808
msedge.exe
GET
—
188.127.233.239:80
http://audiovk.com/images/install_plugin/00_enable_edge.3f4c6f0a62aca1c92dacd46dca7e1f84.png
unknown
—
—
unknown
2808
msedge.exe
GET
—
188.127.233.239:80
http://audiovk.com/images/install_plugin/20_enable_non_firefox.9109240cee4ae15df75e8d39d4a96649.png
unknown
—
—
unknown
2808
msedge.exe
GET
—
188.127.233.239:80
http://audiovk.com/images/install_plugin/30_ready.474156c8ea9bae60bec9bec133ddb3ab.png
unknown
—
—
unknown
2808
msedge.exe
GET
200
188.127.233.239:80
http://audiovk.com/images/logo.9e4ae4fb452afab6e1def5930913524a.svg
unknown
image
265 b
unknown
2808
msedge.exe
GET
200
188.127.233.239:80
http://audiovk.com/build/images/arrow.min.53427027b1d79c3c11323002059f6261.png
unknown
image
507 b
unknown
2808
msedge.exe
GET
—
188.127.233.239:80
http://audiovk.com/favicon.ico
unknown
—
—
unknown
2808
msedge.exe
GET
—
188.127.233.239:80
http://audiovk.com/vksaver/installed.php?plugin_installed=1
unknown
—
—
unknown
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
4
System
192.168.100.255:138
—
—
—
whitelisted
4
System
192.168.100.255:137
—
—
—
whitelisted
1080
svchost.exe
224.0.0.252:5355
—
—
—
unknown
1892
msedge.exe
239.255.255.250:1900
—
—
—
whitelisted
2808
msedge.exe
13.107.42.16:443
config.edge.skype.com
MICROSOFT-CORP-MSN-AS-BLOCK
US
whitelisted
2808
msedge.exe
51.104.176.40:443
nav-edge.smartscreen.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
unknown
2808
msedge.exe
188.127.233.239:443
audiovk.com
LLC Smart Ape
EE
unknown
2808
msedge.exe
204.79.197.239:443
edge.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
US
unknown
2808
msedge.exe
142.250.184.238:443
clients2.google.com
GOOGLE
US
whitelisted
2808
msedge.exe
20.105.95.163:443
data-edge.smartscreen.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
unknown

DNS requests

Domain
IP
Reputation
audiovk.com
  • 188.127.233.239
unknown
config.edge.skype.com
  • 13.107.42.16
whitelisted
nav-edge.smartscreen.microsoft.com
  • 51.104.176.40
whitelisted
edge.microsoft.com
  • 204.79.197.239
  • 13.107.21.239
whitelisted
clients2.google.com
  • 142.250.184.238
whitelisted
data-edge.smartscreen.microsoft.com
  • 20.105.95.163
whitelisted
clients2.googleusercontent.com
  • 142.250.184.193
whitelisted
fonts.googleapis.com
  • 142.250.186.42
whitelisted
fonts.gstatic.com
  • 142.250.184.227
whitelisted
yastatic.net
  • 178.154.131.216
  • 178.154.131.217
  • 178.154.131.215
whitelisted

Threats

No threats detected
No debug info
Interactive malware hunting service ANY.RUN
© 2017-2025 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
vksaver-install.exe