File name:

mirrorto_setup.exe

Full analysis: https://app.any.run/tasks/3f3901e5-1eff-4886-b6d3-8029b184c158
Verdict: Malicious activity
Analysis date: March 20, 2024, 15:07:42
OS: Windows 7 Professional Service Pack 1 (build: 7601, 32 bit)
Indicators:
MIME: application/x-dosexec
File info: PE32 executable (GUI) Intel 80386, for MS Windows
MD5:

D75D8ACC3266E89D6C66FE0E0DF367F4

SHA1:

C0992C765155D911407745ED8304361B829EA2DF

SHA256:

6AECA8FB7A286E161A6CB63E73DE78775D2BF6D031B3D1DB883BF73F6C1E54B0

SSDEEP:

98304:2cRN8MNabS5r31VYsfvIMchLZp4XFO2wYI1BtTOsqjzfRQnBpl0H4PHYqWVkhz9k:k4L

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    • Drops the executable file immediately after the start

      • mirrorto_setup.exe (PID: 4044)

  • SUSPICIOUS

    • Reads the Internet Settings

      • mirrorto_setup.exe (PID: 4044)

  • INFO

    • Checks proxy server information

      • mirrorto_setup.exe (PID: 4044)

    • Checks supported languages

      • mirrorto_setup.exe (PID: 4044)

    • Reads the computer name

      • mirrorto_setup.exe (PID: 4044)

    • Reads product name

      • mirrorto_setup.exe (PID: 4044)

    • Creates files in the program directory

      • mirrorto_setup.exe (PID: 4044)

    • Application launched itself

      • msedge.exe (PID: 848)
      • msedge.exe (PID: 1368)

    • Reads the machine GUID from the registry

      • mirrorto_setup.exe (PID: 4044)

    • Reads Environment values

      • mirrorto_setup.exe (PID: 4044)

    • Manual execution by a user

      • msedge.exe (PID: 1368)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.exe | Win32 Executable MS Visual C++ (generic) (16.3)
.exe | Win64 Executable (generic) (14.5)
.dll | Win32 Dynamic Link Library (generic) (3.4)
.exe | Win32 Executable (generic) (2.3)

EXIF

EXE

MachineType: Intel 386 or later, and compatibles
TimeStamp: 2024:03:13 09:08:47+00:00
ImageFileCharacteristics: Executable, Large address aware, 32-bit
PEType: PE32
LinkerVersion: 12
CodeSize: 2116608
InitializedDataSize: 794112
UninitializedDataSize: -
EntryPoint: 0x1bb374
OSVersion: 5.1
ImageVersion: -
SubsystemVersion: 5.1
Subsystem: Windows GUI
FileVersionNumber: 4.3.0.1
ProductVersionNumber: 4.3.0.1
FileFlagsMask: 0x003f
FileFlags: (none)
FileOS: Windows NT 32-bit
ObjectFileType: Executable application
FileSubtype: -
LanguageCode: English (U.S.)
CharacterSet: Unicode
FileDescription: imyfone-mirrorto_setup.exe
FileVersion: 4.3.0.1
LegalCopyright: Copyright (C) 2024 iMyFone. All rights reserved.
ProductName: iMyFone MirrorTo
ProductVersion: 4.3.0.1
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
65
Monitored processes
26
Malicious processes
1
Suspicious processes
0

Behavior graph

Click at the process to see the details
start mirrorto_setup.exe msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe msedge.exe no specs msedge.exe no specs msedge.exe msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs mirrorto_setup.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
120"C:\Users\admin\Desktop\mirrorto_setup.exe" C:\Users\admin\Desktop\mirrorto_setup.exe—explorer.exe
User:
admin
Integrity Level:
MEDIUM
Description:
imyfone-mirrorto_setup.exe
Exit code:
3221226540
Version:
4.3.0.1
Modules
Images
c:\users\admin\desktop\mirrorto_setup.exe
c:\windows\system32\ntdll.dll
128"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=renderer --first-renderer-process --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2108 --field-trial-handle=1224,i,11375050311904637202,2948316695283247713,131072 /prefetch:1C:\Program Files\Microsoft\Edge\Application\msedge.exe—msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
LOW
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
848"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --single-argument https://apipdm.imyfone.club/producturl?key=license_agreement&pid=370&lang=English&custom=com_englishC:\Program Files\Microsoft\Edge\Application\msedge.exe—mirrorto_setup.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
1172"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3684 --field-trial-handle=1224,i,11375050311904637202,2948316695283247713,131072 /prefetch:8C:\Program Files\Microsoft\Edge\Application\msedge.exe—msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
LOW
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
1268"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3620 --field-trial-handle=1224,i,11375050311904637202,2948316695283247713,131072 /prefetch:8C:\Program Files\Microsoft\Edge\Application\msedge.exe—msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
LOW
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
1288"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2540 --field-trial-handle=1224,i,11375050311904637202,2948316695283247713,131072 /prefetch:8C:\Program Files\Microsoft\Edge\Application\msedge.exe—msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
LOW
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
1336"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=109.0.5414.149 "--annotation=exe=C:\Program Files\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win32 "--annotation=prod=Microsoft Edge" --annotation=ver=109.0.1518.115 --initial-client-data=0xc8,0xcc,0xd0,0x9c,0xd8,0x6bcdf598,0x6bcdf5a8,0x6bcdf5b4C:\Program Files\Microsoft\Edge\Application\msedge.exe—msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
1352"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1272 --field-trial-handle=1368,i,6323513536780411366,17183763405947562397,131072 /prefetch:2C:\Program Files\Microsoft\Edge\Application\msedge.exe—msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
LOW
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
1368"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --flag-switches-begin --flag-switches-end --do-not-de-elevate https://apipdm.imyfone.club/producturl?key=license_agreement&pid=370&lang=English&custom=com_englishC:\Program Files\Microsoft\Edge\Application\msedge.exe
explorer.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
1424"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3696 --field-trial-handle=1224,i,11375050311904637202,2948316695283247713,131072 /prefetch:8C:\Program Files\Microsoft\Edge\Application\msedge.exe—msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
LOW
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
Total events
7 753
Read events
7 692
Write events
50
Delete events
11

Modification events

(PID) Process:(4044) mirrorto_setup.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\iMyfone\iMyfoneDown
Operation:writeName:GUID
Value:
3CF79D66-2A38-44ba-B86D-084B9F791994
(PID) Process:(848) msedge.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Edge\BLBeacon
Operation:writeName:failed_count
Value:
0
(PID) Process:(848) msedge.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Edge\BLBeacon
Operation:writeName:state
Value:
2
(PID) Process:(848) msedge.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Edge\ThirdParty
Operation:writeName:StatusCodes
Value:
(PID) Process:(848) msedge.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Edge\ThirdParty
Operation:writeName:StatusCodes
Value:
01000000
(PID) Process:(848) msedge.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Edge\BLBeacon
Operation:writeName:state
Value:
1
(PID) Process:(848) msedge.exeKey:HKEY_CURRENT_USER\Software\Microsoft\EdgeUpdate\ClientState\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}
Operation:writeName:dr
Value:
1
(PID) Process:(848) msedge.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Edge\StabilityMetrics
Operation:writeName:user_experience_metrics.stability.exited_cleanly
Value:
0
(PID) Process:(848) msedge.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EdgeUpdate\ClientStateMedium\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}\LastWasDefault
Operation:writeName:S-1-5-21-1302019708-1500728564-335382590-1000
Value:
7B98E23FAF722F00
(PID) Process:(848) msedge.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EdgeUpdate\ClientStateMedium\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}\FirstNotDefault
Operation:delete valueName:S-1-5-21-1302019708-1500728564-335382590-1000
Value:
Executable files
4
Suspicious files
81
Text files
155
Unknown types
58

Dropped files

PID
Process
Filename
Type
4044mirrorto_setup.exeC:\Program Files\imyfone_down\mirrorto_setup\language\Arabic\text.initext
MD5:18F0A45B8FEE05F2AD547D483ACF16A6
SHA256:BC4A609A31234A066B449B780B9E0EB2F0B29AA08651191E5DAD98378FCB148C
4044mirrorto_setup.exeC:\Program Files\imyfone_down\mirrorto_setup\language\French\text.initext
MD5:6CE3DAE135C6B7A02AFED123577B2B5B
SHA256:FFCA8E2FA72A7437BE33BCFD53AB85C4BC57A2DF841EC2C0BA5F831F52BEB50C
4044mirrorto_setup.exeC:\Program Files\imyfone_down\mirrorto_setup\language\Dutch\text.initext
MD5:EB91B75E9502088C6A6C15D453ABD834
SHA256:D2F992FB399C47C04A85152BEB3C347FA0921A0985A63DBA886CA49D7CE20AAF
4044mirrorto_setup.exeC:\Program Files\imyfone_down\mirrorto_setup\language\Indonesian\UrlInfo.initext
MD5:200BA93C62FCC0558E56BD287DC59190
SHA256:BA69A7CE13CD7096E555F0EE76A78A33F51DD382647F98BE9CBAAC7039DF1022
4044mirrorto_setup.exeC:\Program Files\imyfone_down\mirrorto_setup\language\Dutch\UrlInfo.initext
MD5:44F12BE424D73AED01CC21F0260B64A9
SHA256:424F010BBC877D24B08484281CAC1F19B91F6B2840C179FF7E06202FB0F1E61A
4044mirrorto_setup.exeC:\Program Files\imyfone_down\mirrorto_setup\language\French\UrlInfo.initext
MD5:168BF2F99E169A748037430BA4701541
SHA256:855DAD90753D9D6E01892352B327944BB52E67C80E6505D9BB35F3C55288AA79
4044mirrorto_setup.exeC:\Program Files\imyfone_down\mirrorto_setup\language\English\UrlInfo.initext
MD5:A7AF9EF96697343DE86553F865358464
SHA256:06DEAD4353E1F7B8C22271997FA211E1E388322181459C2805DE5953605C203A
4044mirrorto_setup.exeC:\Program Files\imyfone_down\mirrorto_setup\language\German\UrlInfo.initext
MD5:E59BA73C4A223A4BF896C844AEAC9816
SHA256:0D78400EE3FB94C414637DF6B275CB35C9D82BD3FDA365A25A6874D09315ADBC
4044mirrorto_setup.exeC:\Program Files\imyfone_down\mirrorto_setup\language\Italian\UrlInfo.initext
MD5:0CF2CCC373EE312E59F142AB797FA39A
SHA256:E11FB2B902EC12890F100AE453E1DE4E25FD21DB7B8F8A92C2749E8F084CC1B6
4044mirrorto_setup.exeC:\Program Files\imyfone_down\mirrorto_setup\language\Indonesian\text.initext
MD5:4C617C9439CE5EEA2F9CFB82A4C228FB
SHA256:76605E5B27790E2F4B6BB56DEEEA159A0532E94BAC7D8722E957DB22DB8F27DD
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
6
TCP/UDP connections
108
DNS requests
109
Threats
1

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
4044
mirrorto_setup.exe
HEAD
200
108.156.2.84:80
http://download.imyfone.com/mirrorto/mirrorto_setup.exe
unknown
—
—
unknown
4044
mirrorto_setup.exe
GET
200
108.156.2.84:80
http://download.imyfone.com/downloaderCarousel/20231120/pd-655b3d384236f.png
unknown
image
154 Kb
unknown
4044
mirrorto_setup.exe
GET
200
47.252.43.235:80
http://apipdm.imyfone.club/downloader/carousel?pid=370&lang=English
unknown
binary
584 b
unknown
4044
mirrorto_setup.exe
GET
200
108.156.2.84:80
http://download.imyfone.com/downloaderCarousel/20231120/pd-655b3d369f96a.png
unknown
image
160 Kb
unknown
4044
mirrorto_setup.exe
GET
200
108.156.2.84:80
http://download.imyfone.com/downloaderCarousel/20231120/pd-655b3d39edd0b.png
unknown
image
208 Kb
unknown
4044
mirrorto_setup.exe
GET
200
108.156.2.84:80
http://download.imyfone.com/downloaderCarousel/20231120/pd-655b3d3b86548.png
unknown
image
151 Kb
unknown
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
4
System
192.168.100.255:137
—
—
—
whitelisted
4
System
192.168.100.255:138
—
—
—
whitelisted
—
—
224.0.0.252:5355
—
—
—
unknown
1080
svchost.exe
224.0.0.252:5355
—
—
—
unknown
1368
msedge.exe
239.255.255.250:1900
—
—
—
unknown
2324
msedge.exe
13.107.42.16:443
config.edge.skype.com
MICROSOFT-CORP-MSN-AS-BLOCK
US
whitelisted
2324
msedge.exe
47.252.43.235:443
apipdm.imyfone.club
Alibaba US Technology Co., Ltd.
US
unknown
2324
msedge.exe
204.79.197.239:443
edge.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
US
unknown
1368
msedge.exe
224.0.0.251:5353
—
—
—
unknown
2324
msedge.exe
108.156.2.100:443
www.imyfone.com
AMAZON-02
US
unknown

DNS requests

Domain
IP
Reputation
config.edge.skype.com
  • 13.107.42.16
whitelisted
apipdm.imyfone.club
  • 47.252.43.235
unknown
edge.microsoft.com
  • 204.79.197.239
whitelisted
www.imyfone.com
  • 108.156.2.100
whitelisted
www.bing.com
  • 92.123.104.31
whitelisted
msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com
  • 152.199.21.175
whitelisted
www.google-analytics.com
  • 142.250.74.206
whitelisted
download.imyfone.com
  • 108.156.2.84
whitelisted
dns.msftncsi.com
  • 131.107.255.255
shared
public.imyfone.com
  • 163.181.92.236
unknown

Threats

PID
Process
Class
Message
—
—
Not Suspicious Traffic
INFO [ANY.RUN] Global content delivery network (unpkg .com)
No debug info
Interactive malware hunting service ANY.RUN
© 2017-2025 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
mirrorto_setup.exe