File name:

free-virtual-serial-port-tools(1).exe

Full analysis: https://app.any.run/tasks/0274c31b-53c4-4161-b6fe-7261b5c0bb90
Verdict: Malicious activity
Analysis date: September 18, 2024, 07:51:40
OS: Windows 10 Professional (build: 19045, 64 bit)
Indicators:
MIME: application/x-dosexec
File info: PE32 executable (GUI) Intel 80386, for MS Windows
MD5:

65ECF5996DB6D672826D98D4658EDEF5

SHA1:

C3633162C6C7B7A64DD5F04D165D324C25AE36A9

SHA256:

79F235B457ECB489FE9499485BE50D09A51FD25ABB51C1AFADF8D59B2FC80B46

SSDEEP:

98304:3uhicp9GarsEfBX3P6KgRywIvjOCON/dyBLjSVaBg+uPRqgODIyhWwoZy2vFRXad:OB4wKxVtvv4gjpK/WVWx

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    No malicious indicators.

  • SUSPICIOUS

    • Executable content was dropped or overwritten

      • drvinst.exe (PID: 5552)
      • free-virtual-serial-port-tools(1).exe (PID: 6356)
      • setup.exe (PID: 4976)

    • Application launched itself

      • setup.exe (PID: 6856)

  • INFO

    • Application launched itself

      • msedge.exe (PID: 5104)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.exe | Win64 Executable (generic) (64.6)
.dll | Win32 Dynamic Link Library (generic) (15.4)
.exe | Win32 Executable (generic) (10.5)
.exe | Generic Win/DOS Executable (4.6)
.exe | DOS Executable Generic (4.6)

EXIF

EXE

MachineType: Intel 386 or later, and compatibles
TimeStamp: 2023:07:03 11:36:59+00:00
ImageFileCharacteristics: Executable, 32-bit
PEType: PE32
LinkerVersion: 14.16
CodeSize: 70144
InitializedDataSize: 68096
UninitializedDataSize: -
EntryPoint: 0x7de0
OSVersion: 5.1
ImageVersion: -
SubsystemVersion: 5.1
Subsystem: Windows GUI
FileVersionNumber: 6.3.0.1321
ProductVersionNumber: 6.3.0.1321
FileFlagsMask: 0x003f
FileFlags: (none)
FileOS: Win32
ObjectFileType: Executable application
FileSubtype: -
LanguageCode: English (U.S.)
CharacterSet: Windows, Latin1
CompanyName: HHD Software Ltd.
FileDescription: Virtual Serial Port Tools Installation Package
FileVersion: 6.03.00.1321
LegalCopyright: © 2018 - 2024 by HHD Software Ltd. All rights reserved.
InternalName: setup.exe
OriginalFileName: setup.exe
ProductName: Virtual Serial Port Tools
ProductVersion: 6.03.00.1321
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
172
Monitored processes
40
Malicious processes
2
Suspicious processes
1

Behavior graph

Click at the process to see the details
start free-virtual-serial-port-tools(1).exe setup.exe no specs setup.exe vssvc.exe no specs SPPSurrogate no specs srtasks.exe no specs conhost.exe no specs drvinst.exe ps_server.exe no specs psip_server.exe no specs vspcfg.exe no specs vspcfg.exe msedge.exe msedge.exe no specs msedge.exe no specs msedge.exe msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs identity_helper.exe no specs identity_helper.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
1048"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3636 --field-trial-handle=2388,i,18275769241577326399,2890648372876365517,262144 --variations-seed-version /prefetch:1C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe—msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
LOW
Description:
Microsoft Edge
Version:
122.0.2365.59
Modules
Images
c:\program files (x86)\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files (x86)\microsoft\edge\application\122.0.2365.59\msedge_elf.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\combase.dll
c:\windows\system32\rpcrt4.dll
1076"C:\Program Files\HHD Software\Virtual Serial Port Tools\vspcfg.exe" C:\Program Files\HHD Software\Virtual Serial Port Tools\vspcfg.exe
setup.exe
User:
admin
Company:
HHD Software Ltd.
Integrity Level:
HIGH
Description:
Virtual Serial Port Tools Configuration Utility
Version:
6.03.00.1321
Modules
Images
c:\program files\hhd software\virtual serial port tools\vspcfg.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\apphelp.dll
c:\windows\system32\user32.dll
c:\windows\system32\win32u.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\gdi32full.dll
c:\windows\system32\msvcp_win.dll
1776"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.70 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=122.0.2365.59 --initial-client-data=0x2ec,0x2f0,0x2f4,0x2e8,0x2fc,0x7fffd3df5fd8,0x7fffd3df5fe4,0x7fffd3df5ff0C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe—msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Microsoft Edge
Version:
122.0.2365.59
Modules
Images
c:\program files (x86)\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files (x86)\microsoft\edge\application\122.0.2365.59\msedge_elf.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\combase.dll
c:\windows\system32\rpcrt4.dll
2264C:\WINDOWS\system32\vssvc.exeC:\Windows\System32\VSSVC.exe—services.exe
User:
SYSTEM
Company:
Microsoft Corporation
Integrity Level:
SYSTEM
Description:
Microsoft® Volume Shadow Copy Service
Version:
10.0.19041.1 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\vssvc.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\combase.dll
c:\windows\system32\rpcrt4.dll
2376"C:\Program Files\HHD Software\Virtual Serial Port Tools\psip_server.exe"C:\Program Files\HHD Software\Virtual Serial Port Tools\psip_server.exe—services.exe
User:
LOCAL SERVICE
Company:
HHD Software Ltd.
Integrity Level:
SYSTEM
Description:
TCP/IP Serial Ports Server Application
Version:
6.03.00.1321
Modules
Images
c:\program files\hhd software\virtual serial port tools\psip_server.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\apphelp.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\bcrypt.dll
2976\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1C:\Windows\System32\conhost.exe—SrTasks.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Console Window Host
Exit code:
0
Version:
10.0.19041.1 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\conhost.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\shcore.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\combase.dll
c:\windows\system32\rpcrt4.dll
3316"C:\Program Files\HHD Software\Virtual Serial Port Tools\vspcfg.exe" C:\Program Files\HHD Software\Virtual Serial Port Tools\vspcfg.exe—setup.exe
User:
admin
Company:
HHD Software Ltd.
Integrity Level:
MEDIUM
Description:
Virtual Serial Port Tools Configuration Utility
Exit code:
3221226540
Version:
6.03.00.1321
Modules
Images
c:\program files\hhd software\virtual serial port tools\vspcfg.exe
c:\windows\system32\ntdll.dll
4976"C:\Users\admin\AppData\Local\Temp\7zFC43C8D4\setup.exe" -machine -silent --allow-error --type 1 --server {C128E9BE-00D7-4693-9A85-F0462AF7533E} --source "C:\Users\admin\AppData\Local\Temp\7zFC43C8D4"C:\Users\admin\AppData\Local\Temp\7zFC43C8D4\setup.exe
setup.exe
User:
admin
Company:
HHD Software Ltd.
Integrity Level:
HIGH
Description:
Virtual Serial Port Tools Installation Package
Exit code:
0
Version:
6.03.00.1321
Modules
Images
c:\users\admin\appdata\local\temp\7zfc43c8d4\setup.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\apphelp.dll
c:\windows\system32\user32.dll
c:\windows\system32\win32u.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\gdi32full.dll
c:\windows\system32\msvcp_win.dll
5000"C:\Program Files\HHD Software\Virtual Serial Port Tools\ps_server.exe"C:\Program Files\HHD Software\Virtual Serial Port Tools\ps_server.exe—services.exe
User:
LOCAL SERVICE
Company:
HHD Software Ltd.
Integrity Level:
SYSTEM
Description:
Remote Serial Ports Server Application
Version:
6.03.00.1321
Modules
Images
c:\program files\hhd software\virtual serial port tools\ps_server.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\apphelp.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\bcrypt.dll
5104"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.hhdsoftware.com/dispatch/vspt/release-notes?version=6.03.00.01321C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
setup.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Microsoft Edge
Version:
122.0.2365.59
Modules
Images
c:\program files (x86)\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files (x86)\microsoft\edge\application\122.0.2365.59\msedge_elf.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\combase.dll
c:\windows\system32\rpcrt4.dll
Total events
11 112
Read events
10 659
Write events
426
Delete events
27

Modification events

(PID) Process:(4976) setup.exeKey:HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\VSS\Diag\SystemRestore
Operation:writeName:SrCreateRp (Enter)
Value:
4800000000000000AF322AA09F09DB0170130000C00F0000D50700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
(PID) Process:(4976) setup.exeKey:HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\VSS\Diag\SPP
Operation:writeName:SppGetSnapshots (Enter)
Value:
4800000000000000AF322AA09F09DB0170130000C00F0000D20700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
(PID) Process:(4976) setup.exeKey:HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\VSS\Diag\SPP
Operation:writeName:SppGetSnapshots (Leave)
Value:
4800000000000000079E9CA09F09DB0170130000C00F0000D20700000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000
(PID) Process:(4976) setup.exeKey:HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\VSS\Diag\SPP
Operation:writeName:SppEnumGroups (Enter)
Value:
4800000000000000079E9CA09F09DB0170130000C00F0000D10700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
(PID) Process:(4976) setup.exeKey:HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\VSS\Diag\SPP
Operation:writeName:SppEnumGroups (Leave)
Value:
48000000000000008F2CA6A09F09DB0170130000C00F0000D10700000100000000000000010000000000000000000000000000000000000000000000000000000000000000000000
(PID) Process:(4976) setup.exeKey:HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\VSS\Diag\SPP
Operation:writeName:SppCreate (Enter)
Value:
4800000000000000BA90A8A09F09DB0170130000C00F0000D00700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
(PID) Process:(4976) setup.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SPP
Operation:writeName:LastIndex
Value:
11
(PID) Process:(4976) setup.exeKey:HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\VSS\Diag\SPP
Operation:writeName:SppGatherWriterMetadata (Enter)
Value:
4800000000000000EFC13EA19F09DB0170130000C00F0000D30700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
(PID) Process:(4976) setup.exeKey:HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\VSS\Diag\VssapiPublisher
Operation:writeName:IDENTIFY (Enter)
Value:
4800000000000000D68943A19F09DB017013000088150000E80300000100000000000000000000008BA0ED69F1AA464994A0767EC65616F100000000000000000000000000000000
(PID) Process:(2264) VSSVC.exeKey:HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\VSS\Diag\ASR Writer
Operation:writeName:IDENTIFY (Enter)
Value:
48000000000000001D6A4FA19F09DB01D80800008C1B0000E80300000100000001000000000000000000000000000000000000000000000000000000000000000000000000000000
Executable files
84
Suspicious files
235
Text files
64
Unknown types
4

Dropped files

PID
Process
Filename
Type
6356free-virtual-serial-port-tools(1).exeC:\Users\admin\AppData\Local\Temp\7zFC43C8D4\{150A905B-EF26-4780-9315-63DE2CA08DD6}.7z —
MD5:—
SHA256:—
4976setup.exeC:\Users\admin\AppData\Local\Temp\{6555B11C-1702-4BDD-895D-46D723BBDBFB}\Components\drvreg_win8\psharedrv.infbinary
MD5:7D51E4868D171E97FEE74FEF35D34B7D
SHA256:8C17ABDC3392218E57E8B39046761D317EF1FCF10FE0DE0A52E9C455665D9572
4976setup.exeC:\Users\admin\AppData\Local\Temp\{6555B11C-1702-4BDD-895D-46D723BBDBFB}\Components\drvreg_win10\psharedrv_x86.catbinary
MD5:17643B24390D0771D9D564FCDFE660BA
SHA256:E157D765A07B6DAA4FD406692E482A27F9CCD8E6938FD1AC7542004C294072CE
4976setup.exeC:\Users\admin\AppData\Local\Temp\{6555B11C-1702-4BDD-895D-46D723BBDBFB}\Components\drvreg_win8\psharedrv_x64.catbinary
MD5:2D62575DF2FB756B0881E46341E6B834
SHA256:E34BFD51D136317909167E0BEAEB3834BA3B60BE090509760748CF4DA24A7C1E
4976setup.exeC:\Users\admin\AppData\Local\Temp\{6555B11C-1702-4BDD-895D-46D723BBDBFB}\Components\drvreg_win8\psharedrv_arm64.catbinary
MD5:C3D798FB507A4AC45C02418D0152B0EB
SHA256:F54E4D9D20F0342E9517D706792A2F1B5F60A860013632A0ED19F307B65B76EE
6356free-virtual-serial-port-tools(1).exeC:\Users\admin\AppData\Local\Temp\7zFC43C8D4\xp.urltext
MD5:57A82C02A8C57AA84EAE2B69A3749A18
SHA256:1B11912F7649E45BC495673707AE5B1070CCB6959918DC9018082033542E39B0
4976setup.exeC:\Users\admin\AppData\Local\Temp\{6555B11C-1702-4BDD-895D-46D723BBDBFB}\Components\drvreg_win8\psharedrv_x86.catbinary
MD5:3020CA44A54C53C7C241C76D9655EF15
SHA256:BEAD42421AC27D12739FA8F808D2B41863B74BE2301D04C56FA97846C501F34C
4976setup.exeC:\Users\admin\AppData\Local\Temp\{6555B11C-1702-4BDD-895D-46D723BBDBFB}\Components\french\fr.100000001.lpackbinary
MD5:7DFFC8B3C3690BE4DFBF51B54DF4CD87
SHA256:77B50335AE86F21B37B2D904E3DDB1DFEA39C2FCC99B1DBD4D3671C69499F165
4976setup.exeC:\Users\admin\AppData\Local\Temp\{6555B11C-1702-4BDD-895D-46D723BBDBFB}\Components\hhdvspkit.d.ts\hhdvspkit.d.tstext
MD5:B7DD5478C03B1456D8B3BDD7881AED6C
SHA256:F8B0B7C27ECE8A27EA3D98B01034744640E052ECF9A5A78F025D3E15E3966D44
4976setup.exeC:\Users\admin\AppData\Local\Temp\{6555B11C-1702-4BDD-895D-46D723BBDBFB}\Components\hhdvspkit64.dll\hhdvspkit.dll.rgstext
MD5:BE845D1C6949B7012BE53BF891F4283E
SHA256:C2A7F07BB48DDD79F9FE1642A63CF9D9F73B8804163FF0CCD56E79DFD15F8130
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
7
TCP/UDP connections
57
DNS requests
51
Threats
0

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
1076
vspcfg.exe
GET
200
104.18.38.233:80
http://ocsp.usertrust.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTNMNJMNDqCqx8FcBWK16EHdimS6QQUU3m%2FWqorSs9UgOHYm8Cd8rIDZssCEBN9U5yqfDGppDNwGWiEeo0%3D
unknown
—
—
whitelisted
5336
SearchApp.exe
GET
200
192.229.221.95:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrjrydRyt%2BApF3GSPypfHBxR5XtQQUs9tIpPmhxdiuNkHMEWNpYim8S8YCEAI5PUjXAkJafLQcAAsO18o%3D
unknown
—
—
whitelisted
1076
vspcfg.exe
GET
200
172.64.149.23:80
http://ocsp.comodoca.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTtU9uFqgVGHhJwXZyWCNXmVR5ngQUoBEKIz6W8Qfs4q8p74Klf9AwpLQCEDlyRDr5IrdR19NsEN0xNZU%3D
unknown
—
—
whitelisted
2120
MoUsoCoreWorker.exe
GET
200
184.30.21.171:80
http://www.microsoft.com/pkiops/crl/MicSecSerCA2011_2011-10-18.crl
unknown
—
—
whitelisted
6264
svchost.exe
GET
200
192.229.221.95:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D
unknown
—
—
whitelisted
6840
SIHClient.exe
GET
200
88.221.169.152:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl
unknown
—
—
whitelisted
6840
SIHClient.exe
GET
200
88.221.169.152:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl
unknown
—
—
whitelisted
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
3888
svchost.exe
239.255.255.250:1900
—
—
—
whitelisted
4
System
192.168.100.255:137
—
—
—
whitelisted
368
svchost.exe
20.73.194.208:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
4200
RUXIMICS.exe
20.73.194.208:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
—
—
20.73.194.208:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
2120
MoUsoCoreWorker.exe
184.30.21.171:80
www.microsoft.com
AKAMAI-AS
DE
whitelisted
—
—
20.189.173.16:443
—
MICROSOFT-CORP-MSN-AS-BLOCK
US
unknown
—
—
2.23.209.191:443
—
Akamai International B.V.
GB
unknown
4
System
192.168.100.255:138
—
—
—
whitelisted
4324
svchost.exe
20.73.194.208:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted

DNS requests

Domain
IP
Reputation
settings-win.data.microsoft.com
  • 20.73.194.208
  • 51.104.136.2
whitelisted
www.microsoft.com
  • 184.30.21.171
  • 88.221.169.152
whitelisted
google.com
  • 142.250.184.206
whitelisted
login.live.com
  • 40.126.32.140
  • 40.126.32.72
  • 20.190.160.22
  • 40.126.32.138
  • 40.126.32.74
  • 20.190.160.17
  • 40.126.32.133
  • 40.126.32.68
whitelisted
ocsp.digicert.com
  • 192.229.221.95
whitelisted
go.microsoft.com
  • 184.28.89.167
whitelisted
slscr.update.microsoft.com
  • 20.12.23.50
whitelisted
fe3cr.delivery.mp.microsoft.com
  • 20.3.187.198
whitelisted
browser.pipe.aria.microsoft.com
  • 52.168.117.170
whitelisted
www.hhdsoftware.com
  • 46.4.88.174
unknown

Threats

No threats detected
No debug info
Interactive malware hunting service ANY.RUN
© 2017-2025 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
free-virtual-serial-port-tools(1).exe