File name:

VBCABLE_Driver_Pack43.zip

Full analysis: https://app.any.run/tasks/a243b998-c318-4606-9c79-e144c379f819
Verdict: Malicious activity
Analysis date: April 03, 2020, 04:57:23
OS: Windows 7 Professional Service Pack 1 (build: 7601, 32 bit)
Indicators:
MIME: application/zip
File info: Zip archive data, at least v2.0 to extract
MD5:

3E2F6DDF5A06C66DC4DAED708F8BB2A6

SHA1:

0FC70FD364B76B3DBDF6C9780369A834ED9EFD3E

SHA256:

66FD0A4D9F4896FF41632B7E3D53892C085C4561F53E8AE8D0F0BC10EEDD1CDD

SSDEEP:

24576:dqtBKwfPZ5JLfG/Dtl27gdahBUV1G7h4si2KRayG81atW8:dsKwZ5ZfG/Bo72aQVeh4siZaA4tW8

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    • Application was dropped or rewritten from another process

      • VBCABLE_Setup.exe (PID: 1028)
      • VBCABLE_Setup.exe (PID: 3968)
      • VBCABLE_ControlPanel.exe (PID: 1268)
      • VBCABLE_ControlPanel.exe (PID: 3544)

    • Changes settings of System certificates

      • VBCABLE_Setup.exe (PID: 3968)

  • SUSPICIOUS

    • Executable content was dropped or overwritten

      • WinRAR.exe (PID: 3312)
      • VBCABLE_Setup.exe (PID: 3968)
      • DrvInst.exe (PID: 3608)
      • DrvInst.exe (PID: 2520)

    • Creates files in the driver directory

      • DrvInst.exe (PID: 3608)
      • DrvInst.exe (PID: 2520)

    • Uses RUNDLL32.EXE to load library

      • DrvInst.exe (PID: 3608)

    • Executed via COM

      • DrvInst.exe (PID: 3608)
      • DrvInst.exe (PID: 2520)

    • Creates files in the Windows directory

      • DrvInst.exe (PID: 3608)
      • DrvInst.exe (PID: 2520)

    • Executed as Windows Service

      • vssvc.exe (PID: 2892)

    • Creates files in the program directory

      • VBCABLE_Setup.exe (PID: 3968)

    • Removes files from Windows directory

      • DrvInst.exe (PID: 2520)
      • DrvInst.exe (PID: 3608)

    • Starts Internet Explorer

      • VBCABLE_Setup.exe (PID: 3968)

    • Creates a software uninstall entry

      • VBCABLE_Setup.exe (PID: 3968)

    • Application launched itself

      • SndVol.exe (PID: 4032)

    • Adds / modifies Windows certificates

      • VBCABLE_Setup.exe (PID: 3968)

  • INFO

    • Manual execution by user

      • VBCABLE_Setup.exe (PID: 1028)
      • VBCABLE_Setup.exe (PID: 3968)
      • VBCABLE_ControlPanel.exe (PID: 1268)
      • SoundRecorder.exe (PID: 4040)
      • SndVol.exe (PID: 4032)
      • VBCABLE_ControlPanel.exe (PID: 3544)

    • Dropped object may contain Bitcoin addresses

      • WinRAR.exe (PID: 3312)
      • VBCABLE_Setup.exe (PID: 3968)

    • Reads settings of System Certificates

      • VBCABLE_Setup.exe (PID: 3968)
      • iexplore.exe (PID: 3456)
      • iexplore.exe (PID: 2492)

    • Low-level read access rights to disk partition

      • vssvc.exe (PID: 2892)

    • Searches for installed software

      • DrvInst.exe (PID: 3608)

    • Changes internet zones settings

      • iexplore.exe (PID: 2492)

    • Reads internet explorer settings

      • iexplore.exe (PID: 3456)

    • Changes settings of System certificates

      • iexplore.exe (PID: 3456)
      • iexplore.exe (PID: 2492)

    • Adds / modifies Windows certificates

      • iexplore.exe (PID: 3456)
      • iexplore.exe (PID: 2492)

    • Reads Internet Cache Settings

      • iexplore.exe (PID: 2492)
      • iexplore.exe (PID: 3456)

    • Creates files in the user directory

      • iexplore.exe (PID: 3456)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.zip | ZIP compressed archive (100)

EXIF

ZIP

ZipRequiredVersion: 20
ZipBitFlag: -
ZipCompression: Deflated
ZipModifyDate: 2014:09:02 17:16:17
ZipCRC: 0xe613802d
ZipCompressedSize: 1275
ZipUncompressedSize: 4146
ZipFileName: vbMmeCable64_win7.inf
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
60
Monitored processes
14
Malicious processes
4
Suspicious processes
0

Behavior graph

Click at the process to see the details
start winrar.exe vbcable_setup.exe no specs vbcable_setup.exe drvinst.exe rundll32.exe no specs vssvc.exe no specs drvinst.exe iexplore.exe iexplore.exe vbcable_controlpanel.exe no specs vbcable_controlpanel.exe soundrecorder.exe no specs sndvol.exe no specs sndvol.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
1028"C:\Users\admin\Desktop\vb\VBCABLE_Setup.exe" C:\Users\admin\Desktop\vb\VBCABLE_Setup.exe—explorer.exe
User:
admin
Company:
VB-AUDIO Software
Integrity Level:
MEDIUM
Description:
VB-AUDIO Virtual Cable Installer
Exit code:
3221226540
Version:
1, 0, 3, 8
Modules
Images
c:\users\admin\desktop\vb\vbcable_setup.exe
c:\systemroot\system32\ntdll.dll
1268"C:\Users\admin\Desktop\vb\VBCABLE_ControlPanel.exe" C:\Users\admin\Desktop\vb\VBCABLE_ControlPanel.exe
explorer.exe
User:
admin
Company:
VB-AUDIO Software
Integrity Level:
HIGH
Description:
VB-AUDIO Virtual Cable Control Panel
Exit code:
0
Version:
1, 0, 3, 5
Modules
Images
c:\users\admin\desktop\vb\vbcable_controlpanel.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\advapi32.dll
2492"C:\Program Files\Internet Explorer\iexplore.exe" http://vb-audio.pagesperso-orange.fr/Services/ThankYou.htmC:\Program Files\Internet Explorer\iexplore.exe
VBCABLE_Setup.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Internet Explorer
Exit code:
1
Version:
11.00.9600.16428 (winblue_gdr.131013-1700)
Modules
Images
c:\program files\internet explorer\iexplore.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\iertutil.dll
2520DrvInst.exe "2" "211" "ROOT\MEDIA\0000" "C:\Windows\INF\oem4.inf" "vbmmecable_win7.inf:VBCable:VBCableInst:1.0.3.5:vbaudiovacwdm" "612cfd737" "00000554" "000005D0" "00000064"C:\Windows\system32\DrvInst.exe
svchost.exe
User:
SYSTEM
Company:
Microsoft Corporation
Integrity Level:
SYSTEM
Description:
Driver Installation Module
Exit code:
0
Version:
6.1.7600.16385 (win7_rtm.090713-1255)
Modules
Images
c:\windows\system32\drvinst.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\setupapi.dll
c:\windows\system32\cfgmgr32.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
2892C:\Windows\system32\vssvc.exeC:\Windows\system32\vssvc.exe—services.exe
User:
SYSTEM
Company:
Microsoft Corporation
Integrity Level:
SYSTEM
Description:
Microsoft® Volume Shadow Copy Service
Exit code:
0
Version:
6.1.7600.16385 (win7_rtm.090713-1255)
Modules
Images
c:\windows\system32\vssvc.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
3228SndVol.exe -r 45745284 0 {0.0.0.00000000}.{1a48e0ed-9f2f-4d65-bb8a-742835bdd0ef}C:\Windows\system32\SndVol.exe—SndVol.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Volume Mixer
Exit code:
0
Version:
6.1.7600.16385 (win7_rtm.090713-1255)
Modules
Images
c:\windows\system32\sndvol.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\user32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\msvcrt.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
3312"C:\Program Files\WinRAR\WinRAR.exe" "C:\Users\admin\AppData\Local\Temp\VBCABLE_Driver_Pack43.zip"C:\Program Files\WinRAR\WinRAR.exe
explorer.exe
User:
admin
Company:
Alexander Roshal
Integrity Level:
MEDIUM
Description:
WinRAR archiver
Exit code:
0
Version:
5.60.0
Modules
Images
c:\program files\winrar\winrar.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\comdlg32.dll
3364rundll32.exe C:\Windows\system32\pnpui.dll,InstallSecurityPromptRunDllW 20 Global\{152c8a29-4da5-05ef-513a-69058d003811} Global\{4c5ee015-6721-520c-9db8-6f58b9f80454} C:\Windows\System32\DriverStore\Temp\{28139f51-d511-3b0d-3811-374e38e55254}\vbmmecable_win7.inf C:\Windows\System32\DriverStore\Temp\{28139f51-d511-3b0d-3811-374e38e55254}\vbaudio_cable_win7.catC:\Windows\system32\rundll32.exe—DrvInst.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Windows host process (Rundll32)
Exit code:
0
Version:
6.1.7600.16385 (win7_rtm.090713-1255)
Modules
Images
c:\windows\system32\rundll32.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\imagehlp.dll
3456"C:\Program Files\Internet Explorer\iexplore.exe" SCODEF:2492 CREDAT:275457 /prefetch:2C:\Program Files\Internet Explorer\iexplore.exe
iexplore.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Internet Explorer
Exit code:
0
Version:
11.00.9600.16428 (winblue_gdr.131013-1700)
Modules
Images
c:\program files\internet explorer\iexplore.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\iertutil.dll
3544"C:\Users\admin\Desktop\vb\VBCABLE_ControlPanel.exe" C:\Users\admin\Desktop\vb\VBCABLE_ControlPanel.exe—explorer.exe
User:
admin
Company:
VB-AUDIO Software
Integrity Level:
MEDIUM
Description:
VB-AUDIO Virtual Cable Control Panel
Exit code:
3221226540
Version:
1, 0, 3, 5
Modules
Images
c:\users\admin\desktop\vb\vbcable_controlpanel.exe
c:\systemroot\system32\ntdll.dll
Total events
3 605
Read events
1 764
Write events
1 834
Delete events
7

Modification events

(PID) Process:(3312) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\Interface\Themes
Operation:writeName:ShellExtBMP
Value:
(PID) Process:(3312) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\Interface\Themes
Operation:writeName:ShellExtIcon
Value:
(PID) Process:(3312) WinRAR.exeKey:HKEY_CLASSES_ROOT\Local Settings\MuiCache\12B\52C64B7E
Operation:writeName:LanguageList
Value:
en-US
(PID) Process:(3312) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\ArcHistory
Operation:writeName:0
Value:
C:\Users\admin\AppData\Local\Temp\VBCABLE_Driver_Pack43.zip
(PID) Process:(3312) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\FileList\FileColumnWidths
Operation:writeName:name
Value:
120
(PID) Process:(3312) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\FileList\FileColumnWidths
Operation:writeName:size
Value:
80
(PID) Process:(3312) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\FileList\FileColumnWidths
Operation:writeName:type
Value:
120
(PID) Process:(3312) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\FileList\FileColumnWidths
Operation:writeName:mtime
Value:
100
(PID) Process:(3312) WinRAR.exeKey:HKEY_CLASSES_ROOT\Local Settings\MuiCache\12B\52C64B7E
Operation:writeName:@cryptext.dll,-6145
Value:
Security Catalog
(PID) Process:(3312) WinRAR.exeKey:HKEY_CURRENT_USER\Software\WinRAR\DialogEditHistory\ExtrPath
Operation:writeName:0
Value:
C:\Users\admin\Desktop\vb
Executable files
15
Suspicious files
39
Text files
196
Unknown types
22

Dropped files

PID
Process
Filename
Type
3312WinRAR.exeC:\Users\admin\Desktop\vb\readme.txttext
MD5:67DE05DF45E547B434294B954C2DB7C4
SHA256:C802624D64DEA7F7B333E4464D3EC9B8BB2C6DA2CC1BD2D3A56889CF60ED77A7
3312WinRAR.exeC:\Users\admin\Desktop\vb\vbaudio_cable64_2003.catcat
MD5:1A938E376ABA87FD3D4285A261146923
SHA256:70F88E34C857C999367EB5B0303E23F5676B15A79ED4054F374749232BAA0E3A
3312WinRAR.exeC:\Users\admin\Desktop\vb\vbaudio_cable64_2003.sysexecutable
MD5:326FAB289623BCF815C38FCD71330F3B
SHA256:5A726F3F1616F587C9F118BF337FD359DF3F7CB9FC967A14229D59A31F2A9720
3312WinRAR.exeC:\Users\admin\Desktop\vb\vbaudio_cable_vista.catcat
MD5:40401678D0272A448795432615F8B762
SHA256:810B30193A400B1559302C23F81EF8AAADF038B3CAF3AFF9BF200B59688A2DEF
3312WinRAR.exeC:\Users\admin\Desktop\vb\vbaudio_cable64_win7.sysexecutable
MD5:E7204D7FD7362F0EFAA502A4CB91CA1E
SHA256:C7F3BE383C81AB9AA642479F95872E40E19A4CFD72D4C8D7DE80ABC11B713E21
3312WinRAR.exeC:\Users\admin\Desktop\vb\vbaudio_cable_2003.sysexecutable
MD5:AF264799CA75A33DB63F3761BAD046FF
SHA256:9650E20C38429D4680A7E603ECBE6601914EC4C94F8473112F21515BF53B84CF
3312WinRAR.exeC:\Users\admin\Desktop\vb\pin_out.icoimage
MD5:235559DE67569EBC8FDCF5D51D753B57
SHA256:E8728A811E1F1AF7D2BA31F77E47D449D5BBA091E3E89A0DF325AC7A3E67652C
3312WinRAR.exeC:\Users\admin\Desktop\vb\vbaudio_cable64_vista.sysexecutable
MD5:96B795DE860F111144632A3AAE5422C5
SHA256:703572FA9E8AA1616E6B2ABD36B91A4718DE77EADC02AE05ED2C8F304D058AFC
3312WinRAR.exeC:\Users\admin\Desktop\vb\vbMmeCable64_win7.infini
MD5:498FAEE2DE63C1C428900920203FDF9B
SHA256:DA35387CCFE813F5C553BB7E0CAF4E67ADBB4429E742C2BD3C2014F80E6EC516
3312WinRAR.exeC:\Users\admin\Desktop\vb\vbaudio_cable_xp.catcat
MD5:F548E80F9A5DF41B91B1F6A51C9C362A
SHA256:51434EBBDA13CAF3C7617EF3035126BAACCA3E523FEAF6828B398D52503D70D2
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
14
TCP/UDP connections
28
DNS requests
13
Threats
0

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
3456
iexplore.exe
GET
200
72.21.91.29:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQQX6Z6gAidtSefNc6DC0OInqPHDQQUD4BhHIIxYdUvKOeNRji0LOHG2eICEAfHxhHnkMBjFmx7tQC%2B5yg%3D
US
der
471 b
whitelisted
3456
iexplore.exe
GET
200
72.21.91.29:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQQX6Z6gAidtSefNc6DC0OInqPHDQQUD4BhHIIxYdUvKOeNRji0LOHG2eICEAL2JkUQasIQbzfM%2F0VVMQI%3D
US
der
471 b
whitelisted
3456
iexplore.exe
GET
200
72.247.178.27:80
http://isrg.trustid.ocsp.identrust.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRv9GhNQxLSSGKBnMArPUcsHYovpgQUxKexpHsscfrb4UuQdf%2FEFWCFiRACEAoBQUIAAAFThXNqC4Xspwg%3D
NL
der
1.37 Kb
whitelisted
3456
iexplore.exe
GET
200
72.21.91.29:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAH9o%2BtuynXIiEOLckvPvJE%3D
US
der
471 b
whitelisted
3456
iexplore.exe
GET
301
193.252.121.241:80
http://pages.perso.orange.fr/php/compteur.php?url=vb-audio&df=ThankYou&dd=E&frgb=noir&ft=0&tr=Oui&pad=Non&comma=Oui
FR
html
352 b
unknown
1052
svchost.exe
GET
200
216.58.208.35:80
http://ocsp.pki.goog/gsr2/ME4wTDBKMEgwRjAJBgUrDgMCGgUABBTgXIsxbvr2lBkPpoIEVRE6gHlCnAQUm%2BIHV2ccHsBqBt5ZtJot39wZhi4CDQHjqTAc%2FHIGOD%2BaUx0%3D
US
der
492 b
whitelisted
2492
iexplore.exe
GET
200
204.79.197.200:80
http://www.bing.com/favicon.ico
US
image
237 b
whitelisted
3456
iexplore.exe
GET
200
72.21.91.29:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQQX6Z6gAidtSefNc6DC0OInqPHDQQUD4BhHIIxYdUvKOeNRji0LOHG2eICEAyEjWbgb3fYdv3f6E81lXM%3D
US
der
471 b
whitelisted
3456
iexplore.exe
GET
200
72.247.178.41:80
http://isrg.trustid.ocsp.identrust.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRv9GhNQxLSSGKBnMArPUcsHYovpgQUxKexpHsscfrb4UuQdf%2FEFWCFiRACEAoBQUIAAAFThXNqC4Xspwg%3D
NL
der
1.37 Kb
whitelisted
2492
iexplore.exe
GET
200
72.21.91.29:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEA8sEMlbBsCTf7jUSfg%2BhWk%3D
US
der
1.47 Kb
whitelisted
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
3456
iexplore.exe
193.252.121.242:443
vb-audio.pagesperso-orange.fr
Orange
FR
suspicious
3456
iexplore.exe
193.252.121.242:80
vb-audio.pagesperso-orange.fr
Orange
FR
suspicious
3456
iexplore.exe
51.38.42.138:443
shop.vb-audio.com
—
GB
unknown
3456
iexplore.exe
72.247.178.41:80
isrg.trustid.ocsp.identrust.com
Akamai International B.V.
NL
whitelisted
1052
svchost.exe
216.58.208.35:80
ocsp.pki.goog
Google Inc.
US
whitelisted
3456
iexplore.exe
72.247.178.27:80
isrg.trustid.ocsp.identrust.com
Akamai International B.V.
NL
whitelisted
2492
iexplore.exe
152.199.19.161:443
iecvlist.microsoft.com
MCI Communications Services, Inc. d/b/a Verizon Business
US
whitelisted
3456
iexplore.exe
193.252.121.241:80
pages.perso.orange.fr
Orange
FR
unknown
3456
iexplore.exe
193.252.121.241:443
pages.perso.orange.fr
Orange
FR
unknown
3456
iexplore.exe
72.21.91.29:80
ocsp.digicert.com
MCI Communications Services, Inc. d/b/a Verizon Business
US
whitelisted

DNS requests

Domain
IP
Reputation
vb-audio.pagesperso-orange.fr
  • 193.252.121.242
suspicious
ocsp.digicert.com
  • 72.21.91.29
whitelisted
shop.vb-audio.com
  • 51.38.42.138
unknown
pages.perso.orange.fr
  • 193.252.121.241
unknown
isrg.trustid.ocsp.identrust.com
  • 72.247.178.27
  • 72.247.178.41
whitelisted
s.gstat.orange.fr
  • 81.52.142.216
suspicious
api.bing.com
  • 13.107.5.80
whitelisted
www.bing.com
  • 204.79.197.200
  • 13.107.21.200
whitelisted
iecvlist.microsoft.com
  • 152.199.19.161
whitelisted
r20swj13mr.microsoft.com
  • 152.199.19.161
whitelisted

Threats

No threats detected
No debug info
Interactive malware hunting service ANY.RUN
© 2017-2026 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
VBCABLE_Driver_Pack43.zip