File name:

winzip76-bing.exe

Full analysis: https://app.any.run/tasks/599f997c-7b2e-430d-8a6a-d66b337b972f
Verdict: Malicious activity
Analysis date: November 11, 2024, 14:00:06
OS: Windows 10 Professional (build: 19045, 64 bit)
Indicators:
MIME: application/vnd.microsoft.portable-executable
File info: PE32 executable (GUI) Intel 80386, for MS Windows, 6 sections
MD5:

6AD307F2C4BBD4CEADDEDE2EF728AF34

SHA1:

C2B423C4BC2A379CF3C40809D0230ED88155B331

SHA256:

CD8101EF4FF962026EFFF97EFD7ABE38723D8E0F785C833FFB4E030A4D67650C

SSDEEP:

98304:QDKrqzlJuLRqSYZresjGihx0Rp9dqNuzHl/A1zoKCKh:Ux/

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    No malicious indicators.

  • SUSPICIOUS

    • Starts another process probably with elevated privileges via RUNAS.EXE

      • runas.exe (PID: 3276)

    • Process drops legitimate windows executable

      • winzip76-bing.exe (PID: 4684)
      • MicrosoftEdgeUpdate.exe (PID: 1176)
      • MicrosoftEdgeWebview2Setup.exe (PID: 916)
      • winzip76-bing.exe (PID: 4956)
      • MicrosoftEdgeWebview2Setup.exe (PID: 3964)
      • MicrosoftEdgeUpdate.exe (PID: 6184)

    • Starts a Microsoft application from unusual location

      • MicrosoftEdgeWebview2Setup.exe (PID: 916)
      • MicrosoftEdgeUpdate.exe (PID: 1176)
      • MicrosoftEdgeWebview2Setup.exe (PID: 3964)
      • MicrosoftEdgeUpdate.exe (PID: 6184)

    • Starts itself from another location

      • winzip76-bing.exe (PID: 3108)
      • winzip76-bing.exe (PID: 864)

    • Executable content was dropped or overwritten

      • winzip76-bing.exe (PID: 4684)
      • winzip76-bing.exe (PID: 3108)
      • MicrosoftEdgeWebview2Setup.exe (PID: 916)
      • winzip76-bing.exe (PID: 864)
      • winzip76-bing.exe (PID: 4956)
      • MicrosoftEdgeWebview2Setup.exe (PID: 3964)

  • INFO

    • Manual execution by a user

      • winzip76-bing.exe (PID: 864)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.exe | Win64 Executable (generic) (18)
.exe | Win32 Executable (generic) (2.9)
.exe | Generic Win/DOS Executable (1.3)
.exe | DOS Executable Generic (1.3)

EXIF

EXE

MachineType: Intel 386 or later, and compatibles
TimeStamp: 2024:09:06 17:56:30+00:00
ImageFileCharacteristics: Executable, 32-bit
PEType: PE32
LinkerVersion: 14.29
CodeSize: 2104320
InitializedDataSize: 703488
UninitializedDataSize: -
EntryPoint: 0x18ac30
OSVersion: 6
ImageVersion: -
SubsystemVersion: 6
Subsystem: Windows GUI
FileVersionNumber: 76.9.16251.0
ProductVersionNumber: 76.9.16251.0
FileFlagsMask: 0x003f
FileFlags: (none)
FileOS: Windows NT 32-bit
ObjectFileType: Executable application
FileSubtype: -
LanguageCode: Neutral
CharacterSet: Unicode
CompanyName: WinZip Computing
FileDescription: WinZipStub Installer
FileVersion: 76.9.16251.0
InternalName: WinZipStubInstaller.exe
LegalCopyright: (c) 2015-2024 Corel Corporation All rights reserved.
ProductName: WinZipStub
ProductVersion: 76.9.16251.0
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
141
Monitored processes
12
Malicious processes
5
Suspicious processes
3

Behavior graph

Click at the process to see the details
start runas.exe no specs conhost.exe no specs winzip76-bing.exe winzip76-bing.exe microsoftedgewebview2setup.exe microsoftedgeupdate.exe wermgr.exe winzip76-bing.exe winzip76-bing.exe microsoftedgewebview2setup.exe microsoftedgeupdate.exe wermgr.exe

Process information

PID
CMD
Path
Indicators
Parent process
864"C:\Users\admin\Desktop\winzip76-bing.exe" C:\Users\admin\Desktop\winzip76-bing.exe
explorer.exe
User:
admin
Company:
WinZip Computing
Integrity Level:
HIGH
Description:
WinZipStub Installer
Version:
76.9.16251.0
Modules
Images
c:\users\admin\desktop\winzip76-bing.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\advapi32.dll
916"C:\Users\ADMINI~1\AppData\Local\Temp\MicrosoftEdgeWebview2Setup.exe" /installC:\Users\Administrator\AppData\Local\Temp\MicrosoftEdgeWebview2Setup.exe
winzip76-bing.exe
User:
Administrator
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Microsoft Edge Update Setup
Exit code:
2147747592
Version:
1.3.195.31
Modules
Images
c:\users\administrator\appdata\local\temp\microsoftedgewebview2setup.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\advapi32.dll
c:\windows\syswow64\msvcrt.dll
1176"C:\Program Files (x86)\Microsoft\Temp\EUF3AF.tmp\MicrosoftEdgeUpdate.exe" /install "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers"C:\Program Files (x86)\Microsoft\Temp\EUF3AF.tmp\MicrosoftEdgeUpdate.exe
MicrosoftEdgeWebview2Setup.exe
User:
Administrator
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Microsoft Edge Update
Exit code:
2147747592
Version:
1.3.195.31
Modules
Images
c:\program files (x86)\microsoft\temp\euf3af.tmp\microsoftedgeupdate.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\ole32.dll
c:\windows\syswow64\ucrtbase.dll
2464"C:\WINDOWS\system32\wermgr.exe" "-outproc" "0" "6184" "2144" "2056" "2148" "0" "0" "0" "0" "0" "0" "0" "0" C:\Windows\SysWOW64\wermgr.exe
MicrosoftEdgeUpdate.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Windows Problem Reporting
Exit code:
0
Version:
10.0.19041.3996 (WinBuild.160101.0800)
Modules
Images
c:\windows\syswow64\wermgr.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvcrt.dll
3108C:\Users\admin\Desktop\winzip76-bing.exeC:\Users\admin\Desktop\winzip76-bing.exe
runas.exe
User:
Administrator
Company:
WinZip Computing
Integrity Level:
HIGH
Description:
WinZipStub Installer
Exit code:
0
Version:
76.9.16251.0
Modules
Images
c:\users\admin\desktop\winzip76-bing.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\advapi32.dll
c:\windows\syswow64\msvcrt.dll
3276"C:\Windows\System32\runas.exe" /user:administrator C:\Users\admin\Desktop\winzip76-bing.exeC:\Windows\System32\runas.exe—explorer.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Run As Utility
Exit code:
0
Version:
10.0.19041.1 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\runas.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\bcrypt.dll
c:\windows\system32\user32.dll
3964"C:\Users\admin\AppData\Local\Temp\MicrosoftEdgeWebview2Setup.exe" /installC:\Users\admin\AppData\Local\Temp\MicrosoftEdgeWebview2Setup.exe
winzip76-bing.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Microsoft Edge Update Setup
Exit code:
2147747592
Version:
1.3.195.31
Modules
Images
c:\users\admin\appdata\local\temp\microsoftedgewebview2setup.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\advapi32.dll
4232"C:\WINDOWS\system32\wermgr.exe" "-outproc" "0" "1176" "2188" "720" "2192" "0" "0" "0" "0" "0" "0" "0" "0" C:\Windows\SysWOW64\wermgr.exe
MicrosoftEdgeUpdate.exe
User:
Administrator
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Windows Problem Reporting
Exit code:
0
Version:
10.0.19041.3996 (WinBuild.160101.0800)
Modules
Images
c:\windows\syswow64\wermgr.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\msvcrt.dll
c:\windows\syswow64\combase.dll
4684:\Users\admin\Desktop\winzip76-bing.exe (running as DESKTOP-JGLLJLD\administrator) run=1 shortcut="C:\Users\admin\Desktop\winzip76-bing.exe"C:\Users\Administrator\AppData\Local\Temp\8e5a6\winzip76-bing.exe
winzip76-bing.exe
User:
Administrator
Company:
WinZip Computing
Integrity Level:
HIGH
Description:
WinZipStub Installer
Exit code:
0
Version:
76.9.16251.0
Modules
Images
c:\users\administrator\appdata\local\temp\8e5a6\winzip76-bing.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\advapi32.dll
c:\windows\syswow64\msvcrt.dll
4956 run=1 shortcut="C:\Users\admin\Desktop\winzip76-bing.exe"C:\Users\admin\AppData\Local\Temp\9808e\winzip76-bing.exe
winzip76-bing.exe
User:
admin
Company:
WinZip Computing
Integrity Level:
HIGH
Description:
WinZipStub Installer
Version:
76.9.16251.0
Modules
Images
c:\users\admin\appdata\local\temp\9808e\winzip76-bing.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\advapi32.dll
Total events
10 659
Read events
10 523
Write events
129
Delete events
7

Modification events

(PID) Process:(4684) winzip76-bing.exeKey:HKEY_CURRENT_USER\SOFTWARE\Corel\stubframework\WNZP\76
Operation:writeName:install_language
Value:
English
(PID) Process:(4684) winzip76-bing.exeKey:HKEY_CURRENT_USER\SOFTWARE\Corel\PCU
Operation:writeName:7
Value:
566020524153
(PID) Process:(4684) winzip76-bing.exeKey:HKEY_CURRENT_USER\SOFTWARE\Corel\PCU
Operation:writeName:HFNCv2
Value:
566020524153
(PID) Process:(4684) winzip76-bing.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content
Operation:writeName:CachePrefix
Value:
(PID) Process:(4684) winzip76-bing.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content
Operation:writeName:CacheVersion
Value:
1
(PID) Process:(4684) winzip76-bing.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content
Operation:writeName:CacheLimit
Value:
337920
(PID) Process:(4684) winzip76-bing.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies
Operation:writeName:CachePrefix
Value:
Cookie:
(PID) Process:(4684) winzip76-bing.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies
Operation:writeName:CacheVersion
Value:
1
(PID) Process:(4684) winzip76-bing.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies
Operation:writeName:CacheLimit
Value:
1
(PID) Process:(4684) winzip76-bing.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History
Operation:writeName:CachePrefix
Value:
Visited:
Executable files
309
Suspicious files
49
Text files
106
Unknown types
4

Dropped files

PID
Process
Filename
Type
4684winzip76-bing.exeC:\Users\Administrator\AppData\Local\Temp\8e70d\common\img\button-hover.pngimage
MD5:C3B0E9ED9D0658F1001BBE0C39646E59
SHA256:936A313E370E0CFFB7F92CDBC10DCA11E63798186D8CA29AD66154E81AF4C7A0
4684winzip76-bing.exeC:\Users\Administrator\AppData\Local\Temp\8e70d\common\img\arrow.pngimage
MD5:2A9E7E3FDD66157922465CE189D69AF3
SHA256:FE20166694A729AF85BAF6547ACA4E3A5297888091CA69CD5588EF1E48616E2F
4684winzip76-bing.exeC:\Users\Administrator\AppData\Local\Temp\8e70d\common\css\common.csstext
MD5:33B1C68FFF898CBF19C44E486C856282
SHA256:265D280BAD44060C22A6CAEF0140BB8085B994CDD8D76789F3A43A6E7F2A16EA
3108winzip76-bing.exeC:\Users\Administrator\AppData\Local\Temp\8e5a6\winzip76-bing.exeexecutable
MD5:6AD307F2C4BBD4CEADDEDE2EF728AF34
SHA256:CD8101EF4FF962026EFFF97EFD7ABE38723D8E0F785C833FFB4E030A4D67650C
4684winzip76-bing.exeC:\ProgramData\UniqueId\databinary
MD5:19EC5DFA84BD7DD0406FF92603E540A9
SHA256:44A152153D0D73E772CD3D5553973BA0E328194236D525C794BCDABB0ACE6766
4684winzip76-bing.exeC:\Users\Administrator\AppData\Local\Temp\8e70d\common\img\footerImg.pngimage
MD5:59068C9A357B259A32C5ACF1EAE1B6CA
SHA256:EA52A6F973100CBDD3217A609EF3737DAE42597DD112165FC8A0C42FBD37A517
4684winzip76-bing.exeC:\Users\Administrator\AppData\Local\Temp\8e70d\common\img\headerImg.pngimage
MD5:79F3461A48F669EF914EEFBD83925820
SHA256:A9B420A106ADB6B09E5DD39A864DD00519AADE91CE6F500C179E9E6652B0FC51
4684winzip76-bing.exeC:\Users\Administrator\AppData\Local\Temp\8e70d\common\img\close-normal.pngimage
MD5:C9F970B77486B6C60F583DE55B82EBB2
SHA256:DD727B90F3C6B053FA5B4C8401440E5D120DAC6B93305573CAAEFECEDC5F0C5E
4684winzip76-bing.exeC:\Users\Administrator\AppData\Local\Temp\8e70d\common\img\close-hover.pngimage
MD5:DC25F8EBE54644F4C207F83711EE04AC
SHA256:0B0DF46552E1B95349C2F9D65DBB7379A7535E1A8A3C18C3B27958D0D8308E9B
4684winzip76-bing.exeC:\Users\Administrator\AppData\Local\Temp\8e70d\common\css\jquery-ui.csstext
MD5:57E596746D7AEC182ABD22CCE3E21F48
SHA256:20F5E9ACBA9499E86914DDD950AEB1A33B94142D9C59E61510A91D884BA2BD6F
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
20
TCP/UDP connections
66
DNS requests
40
Threats
0

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
—
—
GET
200
23.53.40.178:80
http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl
unknown
—
—
whitelisted
—
—
GET
200
23.37.237.227:80
http://www.microsoft.com/pkiops/crl/MicSecSerCA2011_2011-10-18.crl
unknown
—
—
whitelisted
6376
svchost.exe
GET
200
192.229.221.95:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D
unknown
—
—
whitelisted
4684
winzip76-bing.exe
GET
200
192.229.221.95:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEApDqVCbATUviZV57HIIulA%3D
unknown
—
—
whitelisted
6660
SIHClient.exe
GET
200
23.37.237.227:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl
unknown
—
—
whitelisted
5944
backgroundTaskHost.exe
GET
200
192.229.221.95:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAn5bsKVVV8kdJ6vHl3O1J0%3D
unknown
—
—
whitelisted
4232
wermgr.exe
GET
200
23.53.40.178:80
http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl
unknown
—
—
whitelisted
6660
SIHClient.exe
GET
200
23.37.237.227:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl
unknown
—
—
whitelisted
4360
SearchApp.exe
GET
200
192.229.221.95:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrjrydRyt%2BApF3GSPypfHBxR5XtQQUs9tIpPmhxdiuNkHMEWNpYim8S8YCEAI5PUjXAkJafLQcAAsO18o%3D
unknown
—
—
whitelisted
4684
winzip76-bing.exe
GET
200
18.66.142.79:80
http://ocsp.rootca1.amazontrust.com/MFQwUjBQME4wTDAJBgUrDgMCGgUABBRPWaOUU8%2B5VZ5%2Fa9jFTaU9pkK3FAQUhBjMhTTsvAyUlC4IWZzHshBOCggCEwdzEkpLy9ROx7U76vGUhC06D6E%3D
unknown
—
—
unknown
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
—
—
20.73.194.208:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
4
System
192.168.100.255:137
—
—
—
whitelisted
5488
MoUsoCoreWorker.exe
20.73.194.208:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
—
—
23.53.40.178:80
crl.microsoft.com
Akamai International B.V.
DE
whitelisted
—
—
23.37.237.227:80
www.microsoft.com
AKAMAI-AS
DE
whitelisted
4
System
192.168.100.255:138
—
—
—
whitelisted
6376
svchost.exe
20.190.159.4:443
login.live.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
4360
SearchApp.exe
2.16.204.161:443
www.bing.com
Akamai International B.V.
DE
whitelisted
6376
svchost.exe
192.229.221.95:80
ocsp.digicert.com
EDGECAST
US
whitelisted
4360
SearchApp.exe
192.229.221.95:80
ocsp.digicert.com
EDGECAST
US
whitelisted

DNS requests

Domain
IP
Reputation
settings-win.data.microsoft.com
  • 20.73.194.208
  • 51.124.78.146
  • 40.127.240.158
whitelisted
crl.microsoft.com
  • 23.53.40.178
  • 23.53.40.176
  • 2.16.164.81
  • 2.16.164.24
  • 2.16.164.51
  • 2.16.164.106
  • 2.16.164.9
whitelisted
www.microsoft.com
  • 23.37.237.227
  • 88.221.169.152
whitelisted
google.com
  • 142.250.181.238
whitelisted
login.live.com
  • 20.190.159.4
  • 20.190.159.23
  • 20.190.159.68
  • 40.126.31.67
  • 40.126.31.69
  • 40.126.31.71
  • 20.190.159.75
  • 20.190.159.2
whitelisted
www.bing.com
  • 2.16.204.161
  • 2.16.204.134
  • 2.16.204.142
  • 2.16.204.138
  • 2.16.204.135
  • 2.16.204.133
  • 2.16.204.137
  • 2.16.204.136
  • 2.16.204.139
whitelisted
ocsp.digicert.com
  • 192.229.221.95
whitelisted
th.bing.com
  • 2.16.204.139
  • 2.16.204.161
  • 2.16.204.134
  • 2.16.204.142
  • 2.16.204.138
  • 2.16.204.135
  • 2.16.204.133
  • 2.16.204.137
  • 2.16.204.136
whitelisted
go.microsoft.com
  • 23.213.170.81
  • 184.28.89.167
whitelisted
www.installportal.com
  • 35.165.40.155
  • 34.216.83.180
unknown

Threats

No threats detected
No debug info
Interactive malware hunting service ANY.RUN
© 2017-2025 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
winzip76-bing.exe