File name:

downloadsound.cloud-Setup-0.0.17.exe

Full analysis: https://app.any.run/tasks/2a3573c6-fdf1-4c53-972e-6060ce89eaca
Verdict: Malicious activity
Analysis date: April 19, 2025, 18:25:48
OS: Windows 10 Professional (build: 19044, 64 bit)
Tags:
electron-js
Indicators:
MIME: application/vnd.microsoft.portable-executable
File info: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive, 5 sections
MD5:

A3C4F869048328DB963ADF06D06CEA11

SHA1:

52EBD08B2FA44AE1ED7AD7E068EDD920376C0A12

SHA256:

937780F6A34E62CDFFFA5FB8347B06CA5BC1546238C99937DB2706FC776638F6

SSDEEP:

786432:dt3+jsZhtHuNt0su2ofgswy9tKr15IlUeiotIODXGAZm:dt3ssZhtun0p2of5wy9Q5EUjotIuXGAE

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    No malicious indicators.

  • SUSPICIOUS

    • Malware-specific behavior (creating "System.dll" in Temp)

      • downloadsound.cloud-Setup-0.0.17.exe (PID: 6584)

    • The process creates files with name similar to system file names

      • downloadsound.cloud-Setup-0.0.17.exe (PID: 6584)

    • Drops 7-zip archiver for unpacking

      • downloadsound.cloud-Setup-0.0.17.exe (PID: 6584)

    • Executable content was dropped or overwritten

      • downloadsound.cloud-Setup-0.0.17.exe (PID: 6584)
      • downloadsound.cloud.exe (PID: 6700)

    • Process drops legitimate windows executable

      • downloadsound.cloud-Setup-0.0.17.exe (PID: 6584)

    • Reads security settings of Internet Explorer

      • downloadsound.cloud-Setup-0.0.17.exe (PID: 6584)

    • There is functionality for taking screenshot (YARA)

      • downloadsound.cloud-Setup-0.0.17.exe (PID: 6584)

    • Creates a software uninstall entry

      • downloadsound.cloud-Setup-0.0.17.exe (PID: 6584)

    • Application launched itself

      • downloadsound.cloud.exe (PID: 6700)

  • INFO

    • The sample compiled with english language support

      • downloadsound.cloud-Setup-0.0.17.exe (PID: 6584)

    • Checks supported languages

      • downloadsound.cloud-Setup-0.0.17.exe (PID: 6584)
      • downloadsound.cloud.exe (PID: 6700)
      • downloadsound.cloud.exe (PID: 1188)
      • downloadsound.cloud.exe (PID: 6540)
      • downloadsound.cloud.exe (PID: 1180)

    • Reads the computer name

      • downloadsound.cloud-Setup-0.0.17.exe (PID: 6584)
      • downloadsound.cloud.exe (PID: 6700)
      • downloadsound.cloud.exe (PID: 1188)
      • downloadsound.cloud.exe (PID: 6540)

    • ELECTRON JS mutex has been found

      • downloadsound.cloud.exe (PID: 6700)

    • Creates files or folders in the user directory

      • downloadsound.cloud-Setup-0.0.17.exe (PID: 6584)
      • downloadsound.cloud.exe (PID: 6700)
      • downloadsound.cloud.exe (PID: 6540)

    • Create files in a temporary directory

      • downloadsound.cloud-Setup-0.0.17.exe (PID: 6584)
      • downloadsound.cloud.exe (PID: 6700)

    • Manual execution by a user

      • downloadsound.cloud.exe (PID: 6700)

    • Reads Environment values

      • downloadsound.cloud.exe (PID: 6700)
      • downloadsound.cloud.exe (PID: 1180)

    • Reads product name

      • downloadsound.cloud.exe (PID: 6700)
      • downloadsound.cloud.exe (PID: 1180)

    • Checks proxy server information

      • downloadsound.cloud.exe (PID: 6700)
      • slui.exe (PID: 4152)

    • Process checks computer location settings

      • downloadsound.cloud.exe (PID: 6700)
      • downloadsound.cloud.exe (PID: 1180)

    • Reads the machine GUID from the registry

      • downloadsound.cloud.exe (PID: 6540)

    • Reads the software policy settings

      • downloadsound.cloud.exe (PID: 6540)
      • slui.exe (PID: 4152)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.exe | Win32 Executable MS Visual C++ (generic) (67.4)
.dll | Win32 Dynamic Link Library (generic) (14.2)
.exe | Win32 Executable (generic) (9.7)
.exe | Generic Win/DOS Executable (4.3)
.exe | DOS Executable Generic (4.3)

EXIF

EXE

MachineType: Intel 386 or later, and compatibles
TimeStamp: 2018:12:15 22:26:14+00:00
ImageFileCharacteristics: No relocs, Executable, No line numbers, No symbols, 32-bit
PEType: PE32
LinkerVersion: 6
CodeSize: 26624
InitializedDataSize: 473088
UninitializedDataSize: 16384
EntryPoint: 0x338f
OSVersion: 4
ImageVersion: 6
SubsystemVersion: 4
Subsystem: Windows GUI
FileVersionNumber: 0.0.17.0
ProductVersionNumber: 0.0.17.0
FileFlagsMask: 0x0000
FileFlags: (none)
FileOS: Win32
ObjectFileType: Executable application
FileSubtype: -
LanguageCode: English (U.S.)
CharacterSet: Windows, Latin1
CompanyName: downloadsound.cloud
FileDescription: Electron application boilerplate based on React, React Router, Webpack, React Hot Loader for rapid application development
FileVersion: 0.0.17
LegalCopyright: Copyright © 2021 downloadsound.cloud
ProductName: downloadsound.cloud
ProductVersion: 0.0.17
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
136
Monitored processes
7
Malicious processes
1
Suspicious processes
1

Behavior graph

Click at the process to see the details
start downloadsound.cloud-setup-0.0.17.exe downloadsound.cloud.exe downloadsound.cloud.exe no specs downloadsound.cloud.exe downloadsound.cloud.exe no specs comppkgsrv.exe no specs slui.exe

Process information

PID
CMD
Path
Indicators
Parent process
1180"C:\Users\admin\AppData\Local\Programs\downloadsoundcloud\downloadsound.cloud.exe" --type=renderer --field-trial-handle=1584,15067022751152923441,17623896491048528138,131072 --enable-features=WebComponentsV0Enabled --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess --lang=en-US --app-path="C:\Users\admin\AppData\Local\Programs\downloadsoundcloud\resources\app.asar" --node-integration --node-integration-in-worker --no-sandbox --no-zygote --native-window-open --enable-remote-module --background-color=#fff --enable-spellcheck --enable-websql --disable-electron-site-instance-overrides --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=4 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2372 /prefetch:1C:\Users\admin\AppData\Local\Programs\downloadsoundcloud\downloadsound.cloud.exe—downloadsound.cloud.exe
User:
admin
Company:
downloadsound.cloud
Integrity Level:
MEDIUM
Description:
downloadsound.cloud
Version:
0.0.17
Modules
Images
c:\users\admin\appdata\local\programs\downloadsoundcloud\downloadsound.cloud.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\apphelp.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\combase.dll
c:\windows\system32\rpcrt4.dll
1188"C:\Users\admin\AppData\Local\Programs\downloadsoundcloud\downloadsound.cloud.exe" --type=gpu-process --field-trial-handle=1584,15067022751152923441,17623896491048528138,131072 --enable-features=WebComponentsV0Enabled --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess --gpu-preferences=MAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAQAAAAAAAAAAAAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAA= --mojo-platform-channel-handle=1612 /prefetch:2C:\Users\admin\AppData\Local\Programs\downloadsoundcloud\downloadsound.cloud.exe—downloadsound.cloud.exe
User:
admin
Company:
downloadsound.cloud
Integrity Level:
LOW
Description:
downloadsound.cloud
Version:
0.0.17
Modules
Images
c:\users\admin\appdata\local\programs\downloadsoundcloud\downloadsound.cloud.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\apphelp.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\combase.dll
c:\windows\system32\rpcrt4.dll
4152C:\WINDOWS\System32\slui.exe -EmbeddingC:\Windows\System32\slui.exe
svchost.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Windows Activation Client
Exit code:
0
Version:
10.0.19041.1 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\slui.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\bcrypt.dll
c:\windows\system32\user32.dll
4188C:\Windows\System32\CompPkgSrv.exe -EmbeddingC:\Windows\System32\CompPkgSrv.exe—svchost.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
LOW
Description:
Component Package Support Server
Exit code:
0
Version:
10.0.19041.3636 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\comppkgsrv.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\combase.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\kernel.appcore.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\bcryptprimitives.dll
6540"C:\Users\admin\AppData\Local\Programs\downloadsoundcloud\downloadsound.cloud.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1584,15067022751152923441,17623896491048528138,131072 --enable-features=WebComponentsV0Enabled --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess --lang=en-US --service-sandbox-type=network --mojo-platform-channel-handle=2008 /prefetch:8C:\Users\admin\AppData\Local\Programs\downloadsoundcloud\downloadsound.cloud.exe
downloadsound.cloud.exe
User:
admin
Company:
downloadsound.cloud
Integrity Level:
MEDIUM
Description:
downloadsound.cloud
Version:
0.0.17
Modules
Images
c:\users\admin\appdata\local\programs\downloadsoundcloud\downloadsound.cloud.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\apphelp.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\combase.dll
c:\windows\system32\rpcrt4.dll
6584"C:\Users\admin\AppData\Local\Temp\downloadsound.cloud-Setup-0.0.17.exe" C:\Users\admin\AppData\Local\Temp\downloadsound.cloud-Setup-0.0.17.exe
explorer.exe
User:
admin
Company:
downloadsound.cloud
Integrity Level:
MEDIUM
Description:
Electron application boilerplate based on React, React Router, Webpack, React Hot Loader for rapid application development
Exit code:
0
Version:
0.0.17
Modules
Images
c:\users\admin\appdata\local\temp\downloadsound.cloud-setup-0.0.17.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\user32.dll
6700"C:\Users\admin\AppData\Local\Programs\downloadsoundcloud\downloadsound.cloud.exe" C:\Users\admin\AppData\Local\Programs\downloadsoundcloud\downloadsound.cloud.exe
explorer.exe
User:
admin
Company:
downloadsound.cloud
Integrity Level:
MEDIUM
Description:
downloadsound.cloud
Version:
0.0.17
Modules
Images
c:\users\admin\appdata\local\programs\downloadsoundcloud\downloadsound.cloud.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\apphelp.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\uiautomationcore.dll
c:\windows\system32\rpcrt4.dll
Total events
5 239
Read events
5 207
Write events
14
Delete events
18

Modification events

(PID) Process:(6584) downloadsound.cloud-Setup-0.0.17.exeKey:HKEY_CURRENT_USER\SOFTWARE\5817ce28-a780-5523-99fc-af6b28ad550b
Operation:writeName:InstallLocation
Value:
C:\Users\admin\AppData\Local\Programs\downloadsoundcloud
(PID) Process:(6584) downloadsound.cloud-Setup-0.0.17.exeKey:HKEY_CURRENT_USER\SOFTWARE\5817ce28-a780-5523-99fc-af6b28ad550b
Operation:writeName:KeepShortcuts
Value:
true
(PID) Process:(6584) downloadsound.cloud-Setup-0.0.17.exeKey:HKEY_CURRENT_USER\SOFTWARE\5817ce28-a780-5523-99fc-af6b28ad550b
Operation:writeName:ShortcutName
Value:
downloadsound.cloud
(PID) Process:(6584) downloadsound.cloud-Setup-0.0.17.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\5817ce28-a780-5523-99fc-af6b28ad550b
Operation:writeName:DisplayName
Value:
downloadsound.cloud 0.0.17
(PID) Process:(6584) downloadsound.cloud-Setup-0.0.17.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\5817ce28-a780-5523-99fc-af6b28ad550b
Operation:writeName:UninstallString
Value:
"C:\Users\admin\AppData\Local\Programs\downloadsoundcloud\Uninstall downloadsound.cloud.exe" /currentuser
(PID) Process:(6584) downloadsound.cloud-Setup-0.0.17.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\5817ce28-a780-5523-99fc-af6b28ad550b
Operation:writeName:QuietUninstallString
Value:
"C:\Users\admin\AppData\Local\Programs\downloadsoundcloud\Uninstall downloadsound.cloud.exe" /currentuser /S
(PID) Process:(6584) downloadsound.cloud-Setup-0.0.17.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\5817ce28-a780-5523-99fc-af6b28ad550b
Operation:writeName:DisplayVersion
Value:
0.0.17
(PID) Process:(6584) downloadsound.cloud-Setup-0.0.17.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\5817ce28-a780-5523-99fc-af6b28ad550b
Operation:writeName:DisplayIcon
Value:
C:\Users\admin\AppData\Local\Programs\downloadsoundcloud\downloadsound.cloud.exe,0
(PID) Process:(6584) downloadsound.cloud-Setup-0.0.17.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\5817ce28-a780-5523-99fc-af6b28ad550b
Operation:writeName:Publisher
Value:
downloadsound.cloud
(PID) Process:(6584) downloadsound.cloud-Setup-0.0.17.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\5817ce28-a780-5523-99fc-af6b28ad550b
Operation:writeName:NoModify
Value:
1
Executable files
18
Suspicious files
98
Text files
15
Unknown types
0

Dropped files

PID
Process
Filename
Type
6584downloadsound.cloud-Setup-0.0.17.exeC:\Users\admin\AppData\Local\Temp\nseCE9D.tmp\app-64.7z —
MD5:—
SHA256:—
6584downloadsound.cloud-Setup-0.0.17.exeC:\Users\admin\AppData\Local\Programs\downloadsoundcloud\LICENSES.chromium.html —
MD5:—
SHA256:—
6584downloadsound.cloud-Setup-0.0.17.exeC:\Users\admin\AppData\Local\Programs\downloadsoundcloud\icudtl.dat —
MD5:—
SHA256:—
6584downloadsound.cloud-Setup-0.0.17.exeC:\Users\admin\AppData\Local\Temp\nseCE9D.tmp\StdUtils.dllexecutable
MD5:C6A6E03F77C313B267498515488C5740
SHA256:B72E9013A6204E9F01076DC38DABBF30870D44DFC66962ADBF73619D4331601E
6584downloadsound.cloud-Setup-0.0.17.exeC:\Users\admin\AppData\Local\Programs\downloadsoundcloud\chrome_100_percent.pakbinary
MD5:06BAF0AD34E0231BD76651203DBA8326
SHA256:5AE14147992A92548BCAD76867DD88CDFCDB69D951C8720920CCE6FB135E3189
6584downloadsound.cloud-Setup-0.0.17.exeC:\Users\admin\AppData\Local\Programs\downloadsoundcloud\chrome_200_percent.pakbinary
MD5:57C27201E7CD33471DA7EC205FE9973C
SHA256:DD8146B2EE289E4D54A4A0F1FD3B2F61B979C6A2BAABA96A406D96C3F4FDB33B
6584downloadsound.cloud-Setup-0.0.17.exeC:\Users\admin\AppData\Local\Temp\nseCE9D.tmp\SpiderBanner.dllexecutable
MD5:17309E33B596BA3A5693B4D3E85CF8D7
SHA256:996A259E53CA18B89EC36D038C40148957C978C0FD600A268497D4C92F882A93
6584downloadsound.cloud-Setup-0.0.17.exeC:\Users\admin\AppData\Local\Temp\nseCE9D.tmp\nsProcess.dllexecutable
MD5:F0438A894F3A7E01A4AAE8D1B5DD0289
SHA256:30C6C3DD3CC7FCEA6E6081CE821ADC7B2888542DAE30BF00E881C0A105EB4D11
6584downloadsound.cloud-Setup-0.0.17.exeC:\Users\admin\AppData\Local\Temp\nseCE9D.tmp\System.dllexecutable
MD5:0D7AD4F45DC6F5AA87F606D0331C6901
SHA256:3EB38AE99653A7DBC724132EE240F6E5C4AF4BFE7C01D31D23FAF373F9F2EACA
6584downloadsound.cloud-Setup-0.0.17.exeC:\Users\admin\AppData\Local\Programs\downloadsoundcloud\locales\bg.pakbinary
MD5:26A0431FF9F22716C55F68F7E164C595
SHA256:1BB8C5CE9215D42BA9CEEC52F86FBFF46DF668CE48FF56BD1CBE96ADADF4922C
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
4
TCP/UDP connections
24
DNS requests
17
Threats
0

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
5496
MoUsoCoreWorker.exe
GET
200
23.216.77.16:80
http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl
unknown
—
—
whitelisted
5964
SIHClient.exe
GET
200
23.215.121.133:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl
unknown
—
—
whitelisted
6544
svchost.exe
GET
200
2.17.190.73:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D
unknown
—
—
whitelisted
5964
SIHClient.exe
GET
200
23.215.121.133:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl
unknown
—
—
whitelisted
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
5352
RUXIMICS.exe
51.104.136.2:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
4
System
192.168.100.255:138
—
—
—
whitelisted
2104
svchost.exe
51.104.136.2:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
—
—
51.104.136.2:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
5496
MoUsoCoreWorker.exe
23.216.77.16:80
crl.microsoft.com
Akamai International B.V.
DE
whitelisted
—
—
172.211.123.250:443
client.wns.windows.com
MICROSOFT-CORP-MSN-AS-BLOCK
FR
whitelisted
6544
svchost.exe
20.190.159.4:443
login.live.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
6544
svchost.exe
2.17.190.73:80
ocsp.digicert.com
AKAMAI-AS
DE
whitelisted
4
System
192.168.100.255:137
—
—
—
whitelisted
6540
downloadsound.cloud.exe
172.217.18.10:443
fonts.googleapis.com
GOOGLE
US
whitelisted

DNS requests

Domain
IP
Reputation
google.com
  • 172.217.18.14
whitelisted
crl.microsoft.com
  • 23.216.77.16
  • 23.216.77.19
  • 23.216.77.18
  • 23.216.77.25
  • 23.216.77.17
  • 23.216.77.12
  • 23.216.77.23
  • 23.216.77.26
  • 23.216.77.21
whitelisted
client.wns.windows.com
  • 172.211.123.250
whitelisted
login.live.com
  • 20.190.159.4
  • 40.126.31.71
  • 20.190.159.2
  • 40.126.31.1
  • 20.190.159.64
  • 40.126.31.129
  • 40.126.31.0
  • 20.190.159.68
whitelisted
ocsp.digicert.com
  • 2.17.190.73
whitelisted
settings-win.data.microsoft.com
  • 51.104.136.2
whitelisted
fonts.googleapis.com
  • 172.217.18.10
whitelisted
ph-files.imgix.net
  • 151.101.2.208
  • 151.101.130.208
  • 151.101.66.208
  • 151.101.194.208
whitelisted
fonts.gstatic.com
  • 172.217.18.99
whitelisted
www.googleapis.com
  • 172.217.16.138
  • 142.250.185.234
  • 142.250.185.202
  • 142.250.184.202
  • 142.250.184.234
  • 172.217.18.10
  • 172.217.18.106
  • 216.58.206.74
  • 142.250.185.74
  • 142.250.185.138
  • 142.250.185.106
  • 172.217.16.202
  • 172.217.23.106
  • 142.250.185.170
  • 216.58.206.42
  • 142.250.181.234
whitelisted

Threats

No threats detected
No debug info
Interactive malware hunting service ANY.RUN
© 2017-2025 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
downloadsound.cloud-Setup-0.0.17.exe