File name:

GarminTrainerSetup_31030.exe

Full analysis: https://app.any.run/tasks/be25c1a4-3a2f-4d33-8d7f-6fd0445d3459
Verdict: Malicious activity
Analysis date: August 01, 2025, 06:08:25
OS: Windows 10 Professional (build: 19044, 64 bit)
Indicators:
MIME: application/vnd.microsoft.portable-executable
File info: PE32 executable (GUI) Intel 80386, for MS Windows, 6 sections
MD5:

55EAE9AFB4242DDBAC4A11734BADCADE

SHA1:

C47A969850B7C25F20555740E6CD044A48325042

SHA256:

998E75D03DE65BDAB041BB348426FF8A0D48547A3F883E8E48E6736A27FDAF48

SSDEEP:

98304:VLbkHLWqniKHqvQDzNAJI0PkbdFeFk/aNzNMC/Uk6yeb0R900nDcY9Lv/2B9yXPP:++Sq

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    • Changes the autorun value in the registry

      • GarminTrainerSetup.exe (PID: 1040)

  • SUSPICIOUS

    • Starts itself from another location

      • GarminTrainerSetup_31030.exe (PID: 5952)
      • GarminTrainerSetup_31030.exe (PID: 1668)

    • The process creates files with name similar to system file names

      • GarminTrainerSetup_31030.exe (PID: 1668)

    • Executable content was dropped or overwritten

      • GarminTrainerSetup_31030.exe (PID: 5952)
      • GarminTrainerSetup_31030.exe (PID: 1668)
      • GarminTrainerSetup.exe (PID: 1040)

    • Process drops legitimate windows executable

      • GarminTrainerSetup_31030.exe (PID: 1668)

    • Searches for installed software

      • GarminTrainerSetup_31030.exe (PID: 1668)
      • dllhost.exe (PID: 620)

    • Reads security settings of Internet Explorer

      • GarminTrainerSetup_31030.exe (PID: 1668)
      • GarminTrainerSetup.exe (PID: 1040)

    • Creates a software uninstall entry

      • GarminTrainerSetup.exe (PID: 1040)

    • Executes as Windows Service

      • VSSVC.exe (PID: 6980)

  • INFO

    • Create files in a temporary directory

      • GarminTrainerSetup_31030.exe (PID: 5952)
      • GarminTrainerSetup_31030.exe (PID: 1668)

    • Checks supported languages

      • GarminTrainerSetup_31030.exe (PID: 5952)
      • GarminTrainerSetup_31030.exe (PID: 1668)
      • GarminTrainerSetup.exe (PID: 1040)

    • The sample compiled with english language support

      • GarminTrainerSetup_31030.exe (PID: 5952)
      • GarminTrainerSetup_31030.exe (PID: 1668)
      • GarminTrainerSetup.exe (PID: 1040)

    • Reads the computer name

      • GarminTrainerSetup_31030.exe (PID: 1668)
      • GarminTrainerSetup.exe (PID: 1040)

    • Reads the machine GUID from the registry

      • GarminTrainerSetup_31030.exe (PID: 1668)
      • GarminTrainerSetup.exe (PID: 1040)

    • Creates files in the program directory

      • GarminTrainerSetup_31030.exe (PID: 1668)
      • GarminTrainerSetup.exe (PID: 1040)

    • Process checks computer location settings

      • GarminTrainerSetup_31030.exe (PID: 1668)

    • Manages system restore points

      • SrTasks.exe (PID: 5644)

    • Launching a file from a Registry key

      • GarminTrainerSetup.exe (PID: 1040)

    • Reads the software policy settings

      • GarminTrainerSetup_31030.exe (PID: 1668)
      • GarminTrainerSetup.exe (PID: 1040)

    • Checks proxy server information

      • GarminTrainerSetup_31030.exe (PID: 1668)
      • GarminTrainerSetup.exe (PID: 1040)

    • Creates files or folders in the user directory

      • GarminTrainerSetup.exe (PID: 1040)
      • GarminTrainerSetup_31030.exe (PID: 1668)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.exe | Win64 Executable (generic) (76.4)
.exe | Win32 Executable (generic) (12.4)
.exe | Generic Win/DOS Executable (5.5)
.exe | DOS Executable Generic (5.5)

EXIF

EXE

MachineType: Intel 386 or later, and compatibles
TimeStamp: 2019:09:17 05:33:38+00:00
ImageFileCharacteristics: Executable, 32-bit, Removable run from swap, Net run from swap
PEType: PE32
LinkerVersion: 14.16
CodeSize: 299008
InitializedDataSize: 287232
UninitializedDataSize: -
EntryPoint: 0x2df71
OSVersion: 5.1
ImageVersion: -
SubsystemVersion: 5.1
Subsystem: Windows GUI
FileVersionNumber: 3.10.3.0
ProductVersionNumber: 3.10.3.0
FileFlagsMask: 0x003f
FileFlags: (none)
FileOS: Win32
ObjectFileType: Executable application
FileSubtype: -
LanguageCode: English (U.S.)
CharacterSet: Windows, Latin1
CompanyName: Garmin
FileDescription: Garmin Aviation Trainers
FileVersion: 3.10.3.0
InternalName: setup
LegalCopyright: Copyright (c) Garmin. All rights reserved.
OriginalFileName: GarminTrainerSetup.exe
ProductName: Garmin Aviation Trainers
ProductVersion: 3.10.3.0
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
147
Monitored processes
8
Malicious processes
4
Suspicious processes
0

Behavior graph

Click at the process to see the details
start garmintrainersetup_31030.exe garmintrainersetup_31030.exe garmintrainersetup.exe SPPSurrogate no specs vssvc.exe no specs srtasks.exe no specs conhost.exe no specs slui.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
620C:\WINDOWS\system32\DllHost.exe /Processid:{F32D97DF-E3E5-4CB9-9E3E-0EB5B4E49801}C:\Windows\System32\dllhost.exe—svchost.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
COM Surrogate
Exit code:
0
Version:
10.0.19041.3636 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\dllhost.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\apphelp.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\combase.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\kernel.appcore.dll
c:\windows\system32\msvcrt.dll
1040"C:\Users\admin\AppData\Local\Temp\{5C92D512-B1FF-47BD-8A6C-BBF26E020488}\.be\GarminTrainerSetup.exe" -q -burn.elevated BurnPipe.{50DAF358-290C-433F-BC51-0BB97C09C906} {A85036C7-A6F0-428A-ACF8-464396EB0B64} 1668C:\Users\admin\AppData\Local\Temp\{5C92D512-B1FF-47BD-8A6C-BBF26E020488}\.be\GarminTrainerSetup.exe
GarminTrainerSetup_31030.exe
User:
admin
Company:
Garmin
Integrity Level:
HIGH
Description:
Garmin Aviation Trainers
Version:
3.10.3.0
Modules
Images
c:\users\admin\appdata\local\temp\{5c92d512-b1ff-47bd-8a6c-bbf26e020488}\.be\garmintrainersetup.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\advapi32.dll
1668"C:\Users\admin\AppData\Local\Temp\{5D0C862A-F9BA-4436-A97E-32A0055B55DC}\.cr\GarminTrainerSetup_31030.exe" -burn.clean.room="C:\Users\admin\AppData\Local\Temp\GarminTrainerSetup_31030.exe" -burn.filehandle.attached=572 -burn.filehandle.self=592 C:\Users\admin\AppData\Local\Temp\{5D0C862A-F9BA-4436-A97E-32A0055B55DC}\.cr\GarminTrainerSetup_31030.exe
GarminTrainerSetup_31030.exe
User:
admin
Company:
Garmin
Integrity Level:
MEDIUM
Description:
Garmin Aviation Trainers
Version:
3.10.3.0
Modules
Images
c:\users\admin\appdata\local\temp\{5d0c862a-f9ba-4436-a97e-32a0055b55dc}\.cr\garmintrainersetup_31030.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\advapi32.dll
2324C:\WINDOWS\System32\slui.exe -EmbeddingC:\Windows\System32\slui.exe—svchost.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Windows Activation Client
Version:
10.0.19041.1 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\slui.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\bcrypt.dll
c:\windows\system32\user32.dll
5644C:\WINDOWS\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:11C:\Windows\System32\SrTasks.exe—dllhost.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Microsoft® Windows System Protection background tasks.
Version:
10.0.19041.1 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\srtasks.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\bcrypt.dll
c:\windows\system32\user32.dll
5952"C:\Users\admin\AppData\Local\Temp\GarminTrainerSetup_31030.exe" C:\Users\admin\AppData\Local\Temp\GarminTrainerSetup_31030.exe
explorer.exe
User:
admin
Company:
Garmin
Integrity Level:
MEDIUM
Description:
Garmin Aviation Trainers
Version:
3.10.3.0
Modules
Images
c:\users\admin\appdata\local\temp\garmintrainersetup_31030.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\advapi32.dll
6840\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1C:\Windows\System32\conhost.exe—SrTasks.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Console Window Host
Version:
10.0.19041.1 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\conhost.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\shcore.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\combase.dll
c:\windows\system32\rpcrt4.dll
6980C:\WINDOWS\system32\vssvc.exeC:\Windows\System32\VSSVC.exe—services.exe
User:
SYSTEM
Company:
Microsoft Corporation
Integrity Level:
SYSTEM
Description:
Microsoft® Volume Shadow Copy Service
Version:
10.0.19041.1 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\vssvc.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\combase.dll
c:\windows\system32\rpcrt4.dll
Total events
7 249
Read events
7 032
Write events
197
Delete events
20

Modification events

(PID) Process:(620) dllhost.exeKey:HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\VSS\Diag\SPP
Operation:writeName:SppGetSnapshots (Enter)
Value:
480000000000000009ED37C8AA02DC016C0200007C170000D20700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
(PID) Process:(620) dllhost.exeKey:HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\VSS\Diag\SPP
Operation:writeName:SppCreate (Enter)
Value:
4800000000000000B6DB5EC8AA02DC016C0200007C170000D00700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
(PID) Process:(6980) VSSVC.exeKey:HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\VSS\Diag\Registry Writer
Operation:writeName:IDENTIFY (Leave)
Value:
48000000000000003F7BA1C8AA02DC01441B0000F8070000E80300000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000
(PID) Process:(6980) VSSVC.exeKey:HKEY_LOCAL_MACHINE\BCD00000000\Objects\{a5a30fa2-3d06-4e9f-b5f4-a01df9d1fcba}\Elements\24000001
Operation:writeName:Element
Value:
{5b970157-8568-11eb-b45c-806e6f6e6963}
(PID) Process:(6980) VSSVC.exeKey:HKEY_LOCAL_MACHINE\BCD00000000\Objects\{a5a30fa2-3d06-4e9f-b5f4-a01df9d1fcba}\Elements\25000004
Operation:writeName:Element
Value:
0000000000000000
(PID) Process:(1040) GarminTrainerSetup.exeKey:HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\VSS\Diag\SystemRestore
Operation:writeName:SrCreateRp (Enter)
Value:
4000000000000000833437C8AA02DC0110040000B8070000D5070000000000000000000000000000000000000000000000000000000000000000000000000000
(PID) Process:(620) dllhost.exeKey:HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\VSS\Diag\SPP
Operation:writeName:SppGetSnapshots (Leave)
Value:
4800000000000000C41F57C8AA02DC016C0200007C170000D20700000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000
(PID) Process:(620) dllhost.exeKey:HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\VSS\Diag\SPP
Operation:writeName:SppEnumGroups (Enter)
Value:
48000000000000005E4757C8AA02DC016C0200007C170000D10700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
(PID) Process:(620) dllhost.exeKey:HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\VSS\Diag\SPP
Operation:writeName:SppEnumGroups (Leave)
Value:
4800000000000000C7DF58C8AA02DC016C0200007C170000D10700000100000000000000010000000000000000000000000000000000000000000000000000000000000000000000
(PID) Process:(620) dllhost.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SPP
Operation:writeName:LastIndex
Value:
11
Executable files
38
Suspicious files
13
Text files
30
Unknown types
6

Dropped files

PID
Process
Filename
Type
5952GarminTrainerSetup_31030.exeC:\Users\admin\AppData\Local\Temp\{5D0C862A-F9BA-4436-A97E-32A0055B55DC}\.cr\GarminTrainerSetup_31030.exeexecutable
MD5:55EAE9AFB4242DDBAC4A11734BADCADE
SHA256:998E75D03DE65BDAB041BB348426FF8A0D48547A3F883E8E48E6736A27FDAF48
1668GarminTrainerSetup_31030.exeC:\Users\admin\AppData\Local\Temp\{5C92D512-B1FF-47BD-8A6C-BBF26E020488}\.ba\mbahost.dllexecutable
MD5:C59832217903CE88793A6C40888E3CAE
SHA256:9DFA1BC5D2AB4C652304976978749141B8C312784B05CB577F338A0AA91330DB
1668GarminTrainerSetup_31030.exeC:\Users\admin\AppData\Local\Temp\{5C92D512-B1FF-47BD-8A6C-BBF26E020488}\.ba\ManagedBootstrapperUI.dllexecutable
MD5:6F29273C6696558599DB95B23CC2E66E
SHA256:EC3C4522ABFF3A2FCD6B2C8A89D715AEF3ED5A8FB3F46C96AEFFAE96814BF44A
1668GarminTrainerSetup_31030.exeC:\Users\admin\AppData\Local\Temp\{5C92D512-B1FF-47BD-8A6C-BBF26E020488}\.ba\mbapreq.dllexecutable
MD5:FE7E0BD53F52E6630473C31299A49FDD
SHA256:2BEA14D70943A42D344E09B7C9DE5562FA7E109946E1C615DD584DA30D06CC80
1668GarminTrainerSetup_31030.exeC:\Users\admin\AppData\Local\Temp\{5C92D512-B1FF-47BD-8A6C-BBF26E020488}\.ba\System.Threading.Tasks.Extensions.dllexecutable
MD5:0F384AFCF671483188B9019D3B7457A7
SHA256:2C9CAD6410E37E44FA73CCCB576F418184F1AE5A0A257E165A136BDAA941A0C6
1668GarminTrainerSetup_31030.exeC:\Users\admin\AppData\Local\Temp\{5C92D512-B1FF-47BD-8A6C-BBF26E020488}\.ba\mbapreq.pngimage
MD5:A356956FD269567B8F4612A33802637B
SHA256:A401A225ADDAF89110B4B0F6E8CF94779E7C0640BCDD2D670FFCF05AAB0DAD03
1668GarminTrainerSetup_31030.exeC:\Users\admin\AppData\Local\Temp\{5C92D512-B1FF-47BD-8A6C-BBF26E020488}\.ba\TrainerFeedbackLib.dllexecutable
MD5:9AA784430AA38EA4D06594D0D3C0176D
SHA256:E220E20E91F573DBE9BC9D57CA0676715A896DDAB4D18EDC1D8AD12FD6209174
1668GarminTrainerSetup_31030.exeC:\Users\admin\AppData\Local\Temp\{5C92D512-B1FF-47BD-8A6C-BBF26E020488}\.ba\mbapreq.thmxml
MD5:A20778EC90A094A62A6C3A6AB2A6DC7D
SHA256:F8C3A03F47F0B9B3C20F0522A2481DA28C77FECDBB302F8DD8FBED87758CBAEA
1668GarminTrainerSetup_31030.exeC:\Users\admin\AppData\Local\Temp\{5C92D512-B1FF-47BD-8A6C-BBF26E020488}\.ba\1030\mbapreq.wxlxml
MD5:7C6E4CE87870B3B5E71D3EF4555500F8
SHA256:CAC263E0E90A4087446A290055257B1C39F17E11F065598CB2286DF4332C7696
1668GarminTrainerSetup_31030.exeC:\Users\admin\AppData\Local\Temp\{5C92D512-B1FF-47BD-8A6C-BBF26E020488}\.ba\1029\mbapreq.wxlxml
MD5:CC8C6D04DC707B38E0F0C08BA16FE49B
SHA256:DC445E2457ED31ABF536871F90FF7CC96800A40B6BC033F37D45E3156A3B4FA9
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
11
TCP/UDP connections
36
DNS requests
24
Threats
0

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
1668
GarminTrainerSetup_31030.exe
GET
200
192.124.249.41:80
http://ocsp.godaddy.com//MEIwQDA%2BMDwwOjAJBgUrDgMCGgUABBQdI2%2BOBkuXH93foRUj4a7lAr4rGwQUOpqFBxBnKLbv9r0FQW4gwZTaD94CAQc%3D
unknown
—
—
whitelisted
1268
svchost.exe
GET
200
23.216.77.25:80
http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl
unknown
—
—
whitelisted
4224
svchost.exe
GET
200
184.30.131.245:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D
unknown
—
—
whitelisted
1268
svchost.exe
GET
200
23.3.109.244:80
http://www.microsoft.com/pkiops/crl/MicSecSerCA2011_2011-10-18.crl
unknown
—
—
whitelisted
3556
SIHClient.exe
GET
200
95.101.149.131:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl
unknown
—
—
whitelisted
3556
SIHClient.exe
GET
200
95.101.149.131:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl
unknown
—
—
whitelisted
1668
GarminTrainerSetup_31030.exe
GET
200
184.30.131.245:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrjrydRyt%2BApF3GSPypfHBxR5XtQQUs9tIpPmhxdiuNkHMEWNpYim8S8YCEAI5PUjXAkJafLQcAAsO18o%3D
unknown
—
—
whitelisted
1040
GarminTrainerSetup.exe
GET
200
95.101.149.131:80
http://www.microsoft.com/pkiops/crl/MicCodSigPCA2011_2011-07-08.crl
unknown
—
—
whitelisted
1040
GarminTrainerSetup.exe
GET
200
2.16.241.14:80
http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl
unknown
—
—
whitelisted
1040
GarminTrainerSetup.exe
GET
200
95.101.149.131:80
http://www.microsoft.com/pkiops/crl/Microsoft%20Time-Stamp%20PCA%202010(1).crl
unknown
—
—
whitelisted
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
5944
MoUsoCoreWorker.exe
20.73.194.208:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
4
System
192.168.100.255:137
—
—
—
whitelisted
1268
svchost.exe
20.73.194.208:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
5288
RUXIMICS.exe
20.73.194.208:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
4
System
192.168.100.255:138
—
—
—
whitelisted
1268
svchost.exe
51.124.78.146:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
1268
svchost.exe
23.216.77.25:80
crl.microsoft.com
Akamai International B.V.
DE
whitelisted
1268
svchost.exe
23.3.109.244:80
www.microsoft.com
AKAMAI-AS
DE
whitelisted
4224
svchost.exe
20.190.160.67:443
login.live.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
4224
svchost.exe
184.30.131.245:80
ocsp.digicert.com
AKAMAI-AS
US
whitelisted

DNS requests

Domain
IP
Reputation
settings-win.data.microsoft.com
  • 20.73.194.208
  • 51.124.78.146
whitelisted
google.com
  • 172.217.16.206
whitelisted
crl.microsoft.com
  • 23.216.77.25
  • 23.216.77.20
  • 23.216.77.42
  • 23.216.77.6
  • 23.216.77.28
  • 2.16.241.14
  • 2.16.241.12
whitelisted
www.microsoft.com
  • 23.3.109.244
  • 95.101.149.131
whitelisted
login.live.com
  • 20.190.160.67
  • 20.190.160.130
  • 40.126.32.74
  • 40.126.32.134
  • 20.190.160.20
  • 20.190.160.64
  • 20.190.160.4
  • 40.126.32.138
whitelisted
ocsp.digicert.com
  • 184.30.131.245
whitelisted
slscr.update.microsoft.com
  • 20.165.94.63
whitelisted
fe3cr.delivery.mp.microsoft.com
  • 20.242.39.171
whitelisted
client.wns.windows.com
  • 20.59.87.226
whitelisted
go.microsoft.com
  • 184.28.89.167
whitelisted

Threats

No threats detected
Process
Message
GarminTrainerSetup_31030.exe
Info
GarminTrainerSetup_31030.exe
:
GarminTrainerSetup_31030.exe
MBA: MBA RUNNING: 3.10.3.0
GarminTrainerSetup_31030.exe
GarminTrainerSetup_31030.exe
Info
GarminTrainerSetup_31030.exe
:
GarminTrainerSetup_31030.exe
MBA: Command: Action:Install Display:Full Restart:Prompt CommandLine:null LayoutDirectory:null Resume:None SplashScreen:0 Relation:None Passthrough:False CommandLineArray:
GarminTrainerSetup_31030.exe
GarminTrainerSetup_31030.exe
Info
GarminTrainerSetup_31030.exe
:
Interactive malware hunting service ANY.RUN
© 2017-2026 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
GarminTrainerSetup_31030.exe