URL:

http://dl.360safe.com/software_installer_download/flashfxp_1001_aefa7.exe

Full analysis: https://app.any.run/tasks/dcd51441-0512-45b4-ad83-f25453a5734d
Verdict: Malicious activity
Threats:

A loader is malicious software that infiltrates devices to deliver malicious payloads. This malware is capable of infecting victims’ computers, analyzing their system information, and installing other types of threats, such as trojans or stealers. Criminals usually deliver loaders through phishing emails and links by relying on social engineering to trick users into downloading and running their executables. Loaders employ advanced evasion and persistence tactics to avoid detection.

Malware Trends Tracker     >>>
Analysis date: April 12, 2024, 17:09:26
OS: Windows 7 Professional Service Pack 1 (build: 7601, 32 bit)
Tags:
loader
Indicators:
MD5:

6896C200FAB70058FEE80049DD6E5B33

SHA1:

38F4BD247E4E757AB38C3FA3FD1B068C4C0F69B5

SHA256:

D3BB0B2A9B4481FC660F37B9913C9BCDF5B661A6D5C63CC670EAA9E2D0F48A70

SSDEEP:

3:N1KaJwVoLwKdMXJOXxSCFQUVFtV:CaJcuMZOXxZjFr

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    • Drops the executable file immediately after the start

      • flashfxp_1001_aefa7.exe (PID: 3256)

  • SUSPICIOUS

    • Process requests binary or script from the Internet

      • explorer.exe (PID: 1164)

    • Reads security settings of Internet Explorer

      • flashfxp_1001_aefa7.exe (PID: 3256)

    • Reads the Internet Settings

      • flashfxp_1001_aefa7.exe (PID: 3256)

    • The process verifies whether the antivirus software is installed

      • flashfxp_1001_aefa7.exe (PID: 3256)

    • Executable content was dropped or overwritten

      • flashfxp_1001_aefa7.exe (PID: 3256)

  • INFO

    • Reads security settings of Internet Explorer

      • explorer.exe (PID: 1164)

    • Executable content was dropped or overwritten

      • chrome.exe (PID: 120)

    • Reads the computer name

      • flashfxp_1001_aefa7.exe (PID: 3256)
      • wmpnscfg.exe (PID: 3572)

    • Checks proxy server information

      • flashfxp_1001_aefa7.exe (PID: 3256)
      • explorer.exe (PID: 1164)

    • Drops the executable file immediately after the start

      • chrome.exe (PID: 120)

    • Application launched itself

      • chrome.exe (PID: 120)

    • Reads the machine GUID from the registry

      • flashfxp_1001_aefa7.exe (PID: 3256)

    • Creates files or folders in the user directory

      • flashfxp_1001_aefa7.exe (PID: 3256)

    • The process uses the downloaded file

      • chrome.exe (PID: 120)
      • chrome.exe (PID: 1596)

    • Checks supported languages

      • flashfxp_1001_aefa7.exe (PID: 3256)
      • wmpnscfg.exe (PID: 3572)

    • Create files in a temporary directory

      • flashfxp_1001_aefa7.exe (PID: 3256)
      • explorer.exe (PID: 1164)

    • Reads the Internet Settings

      • explorer.exe (PID: 1164)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
58
Monitored processes
18
Malicious processes
1
Suspicious processes
2

Behavior graph

Click at the process to see the details
start chrome.exe chrome.exe no specs chrome.exe chrome.exe no specs chrome.exe no specs chrome.exe no specs chrome.exe no specs chrome.exe no specs chrome.exe no specs chrome.exe no specs chrome.exe no specs chrome.exe no specs chrome.exe no specs chrome.exe no specs flashfxp_1001_aefa7.exe no specs flashfxp_1001_aefa7.exe explorer.exe wmpnscfg.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
120"C:\Program Files\Google\Chrome\Application\chrome.exe" --disk-cache-dir=null --disk-cache-size=1 --media-cache-size=1 --disable-gpu-shader-disk-cache --disable-background-networking --disable-features=OptimizationGuideModelDownloading,OptimizationHintsFetching,OptimizationTargetPrediction,OptimizationHints "http://dl.360safe.com/software_installer_download/flashfxp_1001_aefa7.exe"C:\Program Files\Google\Chrome\Application\chrome.exe
explorer.exe
User:
admin
Company:
Google LLC
Integrity Level:
MEDIUM
Description:
Google Chrome
Exit code:
0
Version:
109.0.5414.120
Modules
Images
c:\program files\google\chrome\application\chrome.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\google\chrome\application\109.0.5414.120\chrome_elf.dll
c:\windows\system32\version.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
680"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgACAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1328 --field-trial-handle=1148,i,2554266307810238065,3833392754331759930,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:2C:\Program Files\Google\Chrome\Application\chrome.exe—chrome.exe
User:
admin
Company:
Google LLC
Integrity Level:
LOW
Description:
Google Chrome
Exit code:
0
Version:
109.0.5414.120
Modules
Images
c:\program files\google\chrome\application\chrome.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\google\chrome\application\109.0.5414.120\chrome_elf.dll
c:\windows\system32\version.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
844"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --disable-quic --mojo-platform-channel-handle=3540 --field-trial-handle=1148,i,2554266307810238065,3833392754331759930,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8C:\Program Files\Google\Chrome\Application\chrome.exe—chrome.exe
User:
admin
Company:
Google LLC
Integrity Level:
MEDIUM
Description:
Google Chrome
Exit code:
0
Version:
109.0.5414.120
Modules
Images
c:\program files\google\chrome\application\chrome.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\google\chrome\application\109.0.5414.120\chrome_elf.dll
c:\windows\system32\version.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
920"C:\Users\admin\Downloads\flashfxp_1001_aefa7.exe" C:\Users\admin\Downloads\flashfxp_1001_aefa7.exe—chrome.exe
User:
admin
Company:
360.cn
Integrity Level:
MEDIUM
Description:
InstallSoft.exe
Exit code:
3221226540
Version:
2, 0, 0, 1021
Modules
Images
c:\users\admin\downloads\flashfxp_1001_aefa7.exe
c:\windows\system32\ntdll.dll
1164C:\Windows\Explorer.EXEC:\Windows\explorer.exe
—
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Windows Explorer
Version:
6.1.7600.16385 (win7_rtm.090713-1255)
Modules
Images
c:\windows\system32\sfc.dll
c:\windows\system32\sfc_os.dll
c:\program files\google\chrome\application\chrome.exe
c:\windows\explorer.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
1348"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --disable-quic --mojo-platform-channel-handle=1500 --field-trial-handle=1148,i,2554266307810238065,3833392754331759930,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8C:\Program Files\Google\Chrome\Application\chrome.exe—chrome.exe
User:
admin
Company:
Google LLC
Integrity Level:
LOW
Description:
Google Chrome
Exit code:
0
Version:
109.0.5414.120
Modules
Images
c:\program files\google\chrome\application\chrome.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\google\chrome\application\109.0.5414.120\chrome_elf.dll
c:\windows\system32\version.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
1596"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --disable-quic --mojo-platform-channel-handle=3784 --field-trial-handle=1148,i,2554266307810238065,3833392754331759930,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8C:\Program Files\Google\Chrome\Application\chrome.exe—chrome.exe
User:
admin
Company:
Google LLC
Integrity Level:
MEDIUM
Description:
Google Chrome
Exit code:
0
Version:
109.0.5414.120
Modules
Images
c:\program files\google\chrome\application\chrome.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\google\chrome\application\109.0.5414.120\chrome_elf.dll
c:\windows\system32\version.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
1992"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2016 --field-trial-handle=1148,i,2554266307810238065,3833392754331759930,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:1C:\Program Files\Google\Chrome\Application\chrome.exe—chrome.exe
User:
admin
Company:
Google LLC
Integrity Level:
LOW
Description:
Google Chrome
Exit code:
0
Version:
109.0.5414.120
Modules
Images
c:\program files\google\chrome\application\chrome.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\google\chrome\application\109.0.5414.120\chrome_elf.dll
c:\windows\system32\version.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
2124"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\admin\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win32 --annotation=prod=Chrome --annotation=ver=109.0.5414.120 --initial-client-data=0xc8,0xcc,0xd0,0x9c,0xd4,0x6bcd8b38,0x6bcd8b48,0x6bcd8b54C:\Program Files\Google\Chrome\Application\chrome.exe—chrome.exe
User:
admin
Company:
Google LLC
Integrity Level:
MEDIUM
Description:
Google Chrome
Exit code:
0
Version:
109.0.5414.120
Modules
Images
c:\program files\google\chrome\application\chrome.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\google\chrome\application\109.0.5414.120\chrome_elf.dll
c:\windows\system32\version.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
2404"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --disable-quic --mojo-platform-channel-handle=3888 --field-trial-handle=1148,i,2554266307810238065,3833392754331759930,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8C:\Program Files\Google\Chrome\Application\chrome.exe—chrome.exe
User:
admin
Company:
Google LLC
Integrity Level:
LOW
Description:
Google Chrome
Exit code:
0
Version:
109.0.5414.120
Modules
Images
c:\program files\google\chrome\application\chrome.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\google\chrome\application\109.0.5414.120\chrome_elf.dll
c:\windows\system32\version.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
Total events
10 206
Read events
10 050
Write events
135
Delete events
21

Modification events

(PID) Process:(120) chrome.exeKey:HKEY_CURRENT_USER\Software\Google\Chrome\BLBeacon
Operation:writeName:failed_count
Value:
0
(PID) Process:(120) chrome.exeKey:HKEY_CURRENT_USER\Software\Google\Chrome\BLBeacon
Operation:writeName:state
Value:
2
(PID) Process:(120) chrome.exeKey:HKEY_CURRENT_USER\Software\Google\Chrome\ThirdParty
Operation:writeName:StatusCodes
Value:
(PID) Process:(120) chrome.exeKey:HKEY_CURRENT_USER\Software\Google\Chrome\ThirdParty
Operation:writeName:StatusCodes
Value:
01000000
(PID) Process:(120) chrome.exeKey:HKEY_CURRENT_USER\Software\Google\Chrome\BLBeacon
Operation:writeName:state
Value:
1
(PID) Process:(1164) explorer.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Action Center\Checks\{C8E6F269-B90A-4053-A3BE-499AFCEC98C4}.check.0
Operation:writeName:CheckSetting
Value:
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
(PID) Process:(120) chrome.exeKey:HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}
Operation:writeName:dr
Value:
1
(PID) Process:(120) chrome.exeKey:HKEY_CURRENT_USER\Software\Google\Chrome\StabilityMetrics
Operation:writeName:user_experience_metrics.stability.exited_cleanly
Value:
0
(PID) Process:(120) chrome.exeKey:HKEY_CURRENT_USER\Software\Google\Chrome
Operation:writeName:UsageStatsInSample
Value:
0
(PID) Process:(120) chrome.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Google\Update\ClientStateMedium\{8A69D345-D564-463C-AFF1-A69D9E530F96}
Operation:writeName:usagestats
Value:
0
Executable files
4
Suspicious files
22
Text files
37
Unknown types
46

Dropped files

PID
Process
Filename
Type
120chrome.exeC:\Users\admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.datbinary
MD5:—
SHA256:—
120chrome.exeC:\Users\admin\AppData\Local\Google\Chrome\User Data\Variationsbinary
MD5:—
SHA256:—
120chrome.exeC:\Users\admin\AppData\Local\Google\Chrome\User Data\Last Versiontext
MD5:—
SHA256:—
120chrome.exeC:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\commerce_subscription_db\LOG.old~RF182064.TMP —
MD5:—
SHA256:—
120chrome.exeC:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\commerce_subscription_db\LOG.old —
MD5:—
SHA256:—
120chrome.exeC:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG.old~RF182064.TMPtext
MD5:—
SHA256:—
120chrome.exeC:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG.oldtext
MD5:—
SHA256:—
120chrome.exeC:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG.old~RF182093.TMPtext
MD5:—
SHA256:—
120chrome.exeC:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG.oldtext
MD5:—
SHA256:—
120chrome.exeC:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\4f5b6779-7f67-4d53-bf98-70e1601fe354.tmpbinary
MD5:—
SHA256:—
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
32
TCP/UDP connections
41
DNS requests
19
Threats
2

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
3256
flashfxp_1001_aefa7.exe
HEAD
200
104.192.108.21:80
http://dl.360safe.com/gf/360ini.cab
unknown
—
—
unknown
3256
flashfxp_1001_aefa7.exe
GET
200
180.163.251.231:80
http://s.360.cn/safe/instcomp.htm?soft=2023040419&status=1&pid=3112803&mid=b8c075ec50c0ffb37ec9c97cc27794fb&m2=011b00cdbd9e1c1f7684abbec64ea951322b71672b6b
unknown
—
—
unknown
3256
flashfxp_1001_aefa7.exe
GET
200
101.198.193.210:80
http://baoku.360.cn/tools/downloadSoftware?filename=%66%6c%61%73%68%66%78%70%5f%31%30%30%31%5f%61%65%66%61%37&m2=011b00cdbd9e1c1f7684abbec64ea951322b71672b6b&mid=b8c075ec50c0ffb37ec9c97cc27794fb&rand=1712941780&ver=2.0.0.1021&sign=e6db3548f5e822f1ef5e0db10cc232ec
unknown
—
—
unknown
3256
flashfxp_1001_aefa7.exe
GET
200
101.198.2.147:80
http://s.360.cn/hips/update/inst.htm?m=b8c075ec50c0ffb37ec9c97cc27794fb&m2=011b00cdbd9e1c1f7684abbec64ea951322b71672b6b&v=2001307&s=700&r=0&d=99990001
unknown
—
—
unknown
3256
flashfxp_1001_aefa7.exe
GET
200
104.192.108.21:80
http://dl.360safe.com/gf/360ini.cab
unknown
—
—
unknown
2672
chrome.exe
GET
200
104.192.108.21:80
http://dl.360safe.com/software_installer_download/flashfxp_1001_aefa7.exe
unknown
—
—
unknown
3256
flashfxp_1001_aefa7.exe
GET
200
101.198.2.147:80
http://s.360.cn/hips/update/inst.htm?m=b8c075ec50c0ffb37ec9c97cc27794fb&m2=011b00cdbd9e1c1f7684abbec64ea951322b71672b6b&v=2001307&s=705&r=0&d=99990001
unknown
—
—
unknown
3256
flashfxp_1001_aefa7.exe
GET
200
101.198.2.147:80
http://s.360.cn/hips/update/inst.htm?m=b8c075ec50c0ffb37ec9c97cc27794fb&m2=011b00cdbd9e1c1f7684abbec64ea951322b71672b6b&v=2001307&s=3000&r=0&d=0
unknown
—
—
unknown
3256
flashfxp_1001_aefa7.exe
GET
200
180.163.247.35:80
http://grow.safe.360.cn/conf/item/info?m2=011b00cdbd9e1c1f7684abbec64ea951322b71672b6b&mid=b8c075ec50c0ffb37ec9c97cc27794fb&position=360ini&q=%6f%62%5a%37%52%55%6b%59%76%33%56%36%55%56%59%6b%45%34%74%58%36%72%31%4e%65%2b%47%35%4a%6f%47%4e%4c%59%6a%77%54%49%46%31%46%78%73%77%6a%4c%49%63%4c%53%74%2f%59%64%53%79%65%5a%5a%35%58%64%53%33%78%47%52%2b%43%2b%43%50%62%48%41%68%33%63%69%59%52%73%47%31%52%74%32%4c%4a%76%61%77%52%30%44%42%36%4d%4a%50%67%30%77%50%2b%32%48%46%53%2b%64%61%52%2b%54%32%62%37%67%46%2f%44%58%33%49%6a%45%61%74%64%39%58%63%37%58%4f%41%61%2f%51%57%53%56%6a%47%4c%6e%68%4d%6b%36%47%55%4e%6a%41%2b%65%4c%30%45%38%2b%2f%2b%78%2f%50%4a%56%49%3d&rand=120362&timestamp=1712941845&ver=2.0.0.1021&sign=ac5b00156c2d14e67c9ddcc2604f976c
unknown
—
—
unknown
3256
flashfxp_1001_aefa7.exe
GET
200
101.198.2.147:80
http://s.360.cn/hips/update/inst.htm?m=b8c075ec50c0ffb37ec9c97cc27794fb&m2=011b00cdbd9e1c1f7684abbec64ea951322b71672b6b&v=2001307&s=3001&r=0&d=0
unknown
—
—
unknown
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
4
System
192.168.100.255:138
—
—
—
whitelisted
4
System
192.168.100.255:137
—
—
—
whitelisted
1080
svchost.exe
224.0.0.252:5355
—
—
—
unknown
2672
chrome.exe
142.250.147.84:443
accounts.google.com
GOOGLE
US
unknown
120
chrome.exe
239.255.255.250:1900
—
—
—
unknown
2672
chrome.exe
104.192.108.21:80
dl.360safe.com
Beijing Qihu Technology Company Limited
US
unknown
120
chrome.exe
224.0.0.251:5353
—
—
—
unknown
2672
chrome.exe
142.250.184.238:443
sb-ssl.google.com
GOOGLE
US
whitelisted
2672
chrome.exe
142.250.185.196:443
www.google.com
GOOGLE
US
whitelisted
3256
flashfxp_1001_aefa7.exe
101.198.193.210:443
baoku.360.cn
Beijing Qihu Technology Company Limited
CN
unknown

DNS requests

Domain
IP
Reputation
dl.360safe.com
  • 104.192.108.21
  • 104.192.108.20
  • 104.192.108.17
whitelisted
accounts.google.com
  • 142.250.147.84
shared
sb-ssl.google.com
  • 142.250.184.238
whitelisted
www.google.com
  • 142.250.185.196
whitelisted
baoku.360.cn
  • 101.198.193.210
unknown
s.360.cn
  • 180.163.251.231
  • 101.198.2.147
  • 171.8.167.90
  • 180.163.251.230
whitelisted
grow.safe.360.cn
  • 180.163.247.35
  • 101.198.3.25
unknown
inf.safe.360.cn
  • 180.163.237.185
unknown
wsdl.360safe.com
  • 156.251.65.9
  • 156.251.70.36
  • 156.251.65.6
  • 156.251.70.35
unknown
dns.msftncsi.com
  • 131.107.255.255
shared

Threats

PID
Process
Class
Message
2672
chrome.exe
Potential Corporate Privacy Violation
ET POLICY PE EXE or DLL Windows file download HTTP
—
—
Potential Corporate Privacy Violation
ET POLICY PE EXE or DLL Windows file download HTTP
No debug info
Interactive malware hunting service ANY.RUN
© 2017-2025 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
http://dl.360safe.com/software_installer_download/flashfxp_1001_aefa7.exe