File name:

Splashtop_Wired_XDisplay_Agent_v1.5.8.3.exe

Full analysis: https://app.any.run/tasks/da1e5c1b-5055-4e54-913f-28608e340ded
Verdict: Malicious activity
Analysis date: February 16, 2024, 14:34:20
OS: Windows 7 Professional Service Pack 1 (build: 7601, 32 bit)
Indicators:
MIME: application/x-dosexec
File info: PE32 executable (GUI) Intel 80386, for MS Windows
MD5:

961795E6F576C203ACF26756248B1061

SHA1:

2A1EBF419DE2B5B5E4B7F34BFB9C4FBEB2A060F2

SHA256:

FB7D9A5CF6AE1B52786827AB9357062EC5A7A9B49D1FAAAAEBC4B2E2B1C5F182

SSDEEP:

196608:BozgrggXBBj7QlBWIf+qivj62uKjMaaEusDCB3djS/YP0IAHIWyfuEZLNjdT1c/N:KgkgMMyXivjCKbavsDM3qqFAoW6uEZJ2

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    • Drops the executable file immediately after the start

      • Splashtop_Wired_XDisplay_Agent_v1.5.8.3.exe (PID: 3216)
      • drvinst.exe (PID: 2376)

    • Creates a writable file in the system directory

      • drvinst.exe (PID: 2376)

  • SUSPICIOUS

    • Executes as Windows Service

      • VSSVC.exe (PID: 1040)
      • SSUService.exe (PID: 2592)

    • Reads security settings of Internet Explorer

      • Splashtop_Wired_XDisplay_Agent_v1.5.8.3.exe (PID: 3216)

    • Reads the Internet Settings

      • Splashtop_Wired_XDisplay_Agent_v1.5.8.3.exe (PID: 3216)

    • Executing commands from a ".bat" file

      • Splashtop_Wired_XDisplay_Agent_v1.5.8.3.exe (PID: 3216)

    • Executable content was dropped or overwritten

      • Splashtop_Wired_XDisplay_Agent_v1.5.8.3.exe (PID: 3216)
      • rundll32.exe (PID: 316)
      • drvinst.exe (PID: 2376)

    • Starts CMD.EXE for commands execution

      • Splashtop_Wired_XDisplay_Agent_v1.5.8.3.exe (PID: 3216)
      • cmd.exe (PID: 1816)

    • Starts SC.EXE for service management

      • cmd.exe (PID: 1816)

    • Application launched itself

      • cmd.exe (PID: 1816)

    • Uses TIMEOUT.EXE to delay execution

      • cmd.exe (PID: 1816)

    • Uses RUNDLL32.EXE to load library

      • cmd.exe (PID: 1816)

    • Checks Windows Trust Settings

      • drvinst.exe (PID: 2376)

    • Drops a system driver (possible attempt to evade defenses)

      • drvinst.exe (PID: 2376)
      • rundll32.exe (PID: 316)

    • Creates files in the driver directory

      • drvinst.exe (PID: 2376)

    • The executable file from the user directory is run by the CMD process

      • PreVerCheck.exe (PID: 3848)

  • INFO

    • Checks supported languages

      • Splashtop_Wired_XDisplay_Agent_v1.5.8.3.exe (PID: 3216)
      • PreVerCheck.exe (PID: 3848)
      • drvinst.exe (PID: 2376)
      • SSUService.exe (PID: 2592)

    • Checks operating system version

      • cmd.exe (PID: 1816)

    • Reads the computer name

      • Splashtop_Wired_XDisplay_Agent_v1.5.8.3.exe (PID: 3216)
      • SSUService.exe (PID: 2592)
      • drvinst.exe (PID: 2376)
      • PreVerCheck.exe (PID: 3848)

    • Create files in a temporary directory

      • Splashtop_Wired_XDisplay_Agent_v1.5.8.3.exe (PID: 3216)
      • rundll32.exe (PID: 316)
      • PreVerCheck.exe (PID: 3848)
      • msiexec.exe (PID: 3948)

    • Creates files in the program directory

      • SSUService.exe (PID: 2592)

    • Reads the machine GUID from the registry

      • drvinst.exe (PID: 2376)
      • SSUService.exe (PID: 2592)

    • Reads the software policy settings

      • rundll32.exe (PID: 316)
      • rundll32.exe (PID: 3504)
      • SSUService.exe (PID: 2592)
      • drvinst.exe (PID: 2376)

    • Drops the executable file immediately after the start

      • rundll32.exe (PID: 316)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.exe | NSIS - Nullsoft Scriptable Install System (61.2)
.ax | DirectShow filter (14.5)
.exe | Win32 EXE PECompact compressed (v2.x) (4.2)
.exe | InstallShield setup (3.1)

EXIF

EXE

MachineType: Intel 386 or later, and compatibles
TimeStamp: 2020:12:14 15:13:03+00:00
ImageFileCharacteristics: No relocs, Executable, 32-bit
PEType: PE32
LinkerVersion: 9
CodeSize: 158720
InitializedDataSize: 219136
UninitializedDataSize: -
EntryPoint: 0x105b2
OSVersion: 5
ImageVersion: -
SubsystemVersion: 5
Subsystem: Windows GUI
FileVersionNumber: 1.58.9.6924
ProductVersionNumber: 1.5.8.3
FileFlagsMask: 0x003f
FileFlags: (none)
FileOS: Win32
ObjectFileType: Executable application
FileSubtype: -
LanguageCode: English (U.S.)
CharacterSet: Windows, Latin1
CompanyName: Splashtop Inc.
FileDescription: Splashtop® Wired XDisplay Agent
FileVersion: 1.58.9.6924
LegalCopyright: Copyright © Splashtop Inc. All Rights Reserved.
ProductName: Splashtop® Wired XDisplay - Extend & Mirror
ProductVersion: 1.5.8.3
No data.
screenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
67
Monitored processes
16
Malicious processes
3
Suspicious processes
0

Behavior graph

Click at the process to see the details
start splashtop_wired_xdisplay_agent_v1.5.8.3.exe cmd.exe no specs prevercheck.exe msiexec.exe no specs vssvc.exe no specs ssuservice.exe cmd.exe no specs cmd.exe no specs sc.exe no specs sc.exe no specs sc.exe no specs timeout.exe no specs rundll32.exe drvinst.exe rundll32.exe no specs splashtop_wired_xdisplay_agent_v1.5.8.3.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
316rundll32 x86\my_setup.dll do_install_lci_proxywddmC:\Windows\System32\rundll32.exe
cmd.exe
User:
SYSTEM
Company:
Microsoft Corporation
Integrity Level:
SYSTEM
Description:
Windows host process (Rundll32)
Exit code:
0
Version:
6.1.7600.16385 (win7_rtm.090713-1255)
Modules
Images
c:\windows\system32\rundll32.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\imagehlp.dll
1040C:\Windows\system32\vssvc.exeC:\Windows\System32\VSSVC.exe—services.exe
User:
SYSTEM
Company:
Microsoft Corporation
Integrity Level:
SYSTEM
Description:
Microsoft® Volume Shadow Copy Service
Exit code:
0
Version:
6.1.7600.16385 (win7_rtm.090713-1255)
Modules
Images
c:\windows\system32\vssvc.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
1776"C:\Windows\System32\cmd.exe" /c run.bat > C:\Users\admin\AppData\Local\Temp\unpack.log.txtC:\Windows\System32\cmd.exe—Splashtop_Wired_XDisplay_Agent_v1.5.8.3.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Windows Command Processor
Exit code:
0
Version:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
Modules
Images
c:\windows\system32\cmd.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\winbrand.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
1816"C:\Windows\System32\cmd.exe" /c "C:\Program Files\Splashtop\Splashtop Wired XDisplay\Agent\Driver\install.bat" C:\Windows\System32\cmd.exe—SWXDAgent.exe
User:
SYSTEM
Company:
Microsoft Corporation
Integrity Level:
SYSTEM
Description:
Windows Command Processor
Exit code:
0
Version:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
Modules
Images
c:\windows\system32\cmd.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\winbrand.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
2176C:\Windows\system32\cmd.exe /c verC:\Windows\System32\cmd.exe—cmd.exe
User:
SYSTEM
Company:
Microsoft Corporation
Integrity Level:
SYSTEM
Description:
Windows Command Processor
Exit code:
0
Version:
6.1.7601.17514 (win7sp1_rtm.101119-1850)
Modules
Images
c:\windows\system32\cmd.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\winbrand.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
2376DrvInst.exe "4" "0" "C:\Users\admin\AppData\Local\Temp\{54554f6a-55e8-3def-6bf5-2b25873b4a7a}\lci_proxywddm.inf" "0" "6a8a251e7" "000003EC" "WinSta0\Default" "000005C8" "208" "c:\program files\splashtop\splashtop wired xdisplay\agent\driver\win7"C:\Windows\System32\drvinst.exe
svchost.exe
User:
SYSTEM
Company:
Microsoft Corporation
Integrity Level:
SYSTEM
Description:
Driver Installation Module
Exit code:
0
Version:
6.1.7600.16385 (win7_rtm.090713-1255)
Modules
Images
c:\windows\system32\drvinst.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\setupapi.dll
c:\windows\system32\cfgmgr32.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
2592"C:\Program Files\Splashtop\Splashtop Software Updater\SSUService.exe"C:\Program Files\Splashtop\Splashtop Software Updater\SSUService.exe
services.exe
User:
SYSTEM
Company:
Splashtop Inc.
Integrity Level:
SYSTEM
Description:
Splashtop Software Updater Service
Exit code:
0
Version:
1.5.5.7
Modules
Images
c:\program files\splashtop\splashtop software updater\ssuservice.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\winspool.drv
2668timeout /t 2 /nobreakC:\Windows\System32\timeout.exe—cmd.exe
User:
SYSTEM
Company:
Microsoft Corporation
Integrity Level:
SYSTEM
Description:
timeout - pauses command processing
Exit code:
0
Version:
6.1.7600.16385 (win7_rtm.090713-1255)
Modules
Images
c:\windows\system32\timeout.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\ws2_32.dll
3216"C:\Users\admin\AppData\Local\Temp\Splashtop_Wired_XDisplay_Agent_v1.5.8.3.exe" C:\Users\admin\AppData\Local\Temp\Splashtop_Wired_XDisplay_Agent_v1.5.8.3.exe
explorer.exe
User:
admin
Company:
Splashtop Inc.
Integrity Level:
HIGH
Description:
Splashtop® Wired XDisplay Agent
Exit code:
0
Version:
1.58.9.6924
Modules
Images
c:\users\admin\appdata\local\temp\splashtop_wired_xdisplay_agent_v1.5.8.3.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\comdlg32.dll
3240"C:\Users\admin\AppData\Local\Temp\Splashtop_Wired_XDisplay_Agent_v1.5.8.3.exe" C:\Users\admin\AppData\Local\Temp\Splashtop_Wired_XDisplay_Agent_v1.5.8.3.exe—explorer.exe
User:
admin
Company:
Splashtop Inc.
Integrity Level:
MEDIUM
Description:
Splashtop® Wired XDisplay Agent
Exit code:
3221226540
Version:
1.58.9.6924
Modules
Images
c:\users\admin\appdata\local\temp\splashtop_wired_xdisplay_agent_v1.5.8.3.exe
c:\windows\system32\ntdll.dll
Total events
16 158
Read events
15 942
Write events
213
Delete events
3

Modification events

(PID) Process:(3216) Splashtop_Wired_XDisplay_Agent_v1.5.8.3.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Operation:writeName:ProxyBypass
Value:
1
(PID) Process:(3216) Splashtop_Wired_XDisplay_Agent_v1.5.8.3.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Operation:writeName:IntranetName
Value:
1
(PID) Process:(3216) Splashtop_Wired_XDisplay_Agent_v1.5.8.3.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Operation:writeName:UNCAsIntranet
Value:
1
(PID) Process:(3216) Splashtop_Wired_XDisplay_Agent_v1.5.8.3.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Operation:writeName:AutoDetect
Value:
0
(PID) Process:(1040) VSSVC.exeKey:HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\Shadow Copy Optimization Writer
Operation:writeName:IDENTIFY (Enter)
Value:
40000000000000008AFFF440E560DA01100400008C090000E8030000010000000100000000000000000000000000000000000000000000000000000000000000
(PID) Process:(1040) VSSVC.exeKey:HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\COM+ REGDB Writer
Operation:writeName:IDENTIFY (Enter)
Value:
40000000000000008AFFF440E560DA0110040000400A0000E8030000010000000100000000000000000000000000000000000000000000000000000000000000
(PID) Process:(1040) VSSVC.exeKey:HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\Registry Writer
Operation:writeName:IDENTIFY (Enter)
Value:
40000000000000008AFFF440E560DA01100400002C070000E8030000010000000100000000000000000000000000000000000000000000000000000000000000
(PID) Process:(1040) VSSVC.exeKey:HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\ASR Writer
Operation:writeName:IDENTIFY (Enter)
Value:
40000000000000008AFFF440E560DA0110040000B8080000E8030000010000000100000000000000000000000000000000000000000000000000000000000000
(PID) Process:(1040) VSSVC.exeKey:HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\COM+ REGDB Writer
Operation:writeName:IDENTIFY (Leave)
Value:
40000000000000008AFFF440E560DA0110040000400A0000E8030000000000000100000000000000000000000000000000000000000000000000000000000000
(PID) Process:(1040) VSSVC.exeKey:HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\Registry Writer
Operation:writeName:IDENTIFY (Leave)
Value:
4000000000000000E461F740E560DA01100400002C070000E8030000000000000100000000000000000000000000000000000000000000000000000000000000
Executable files
11
Suspicious files
7
Text files
9
Unknown types
2

Dropped files

PID
Process
Filename
Type
3216Splashtop_Wired_XDisplay_Agent_v1.5.8.3.exeC:\Users\admin\AppData\Local\Temp\unpack\setup.msi —
MD5:—
SHA256:—
3216Splashtop_Wired_XDisplay_Agent_v1.5.8.3.exeC:\Users\admin\AppData\Local\Temp\unpack\setup.iniini
MD5:CE3FB3221DF283E1B86F1D6E448907F7
SHA256:253D4FECB0901274851EC461A555A5AB4CCB2718EFB1E4650AD8FAC63F4A3C1E
316rundll32.exeC:\Windows\INF\setupapi.app.logtext
MD5:E4346E25AB358B690CFAF2214D06C93A
SHA256:4C1A346A546C9959EE88BB9ECB0FB2213816EC39A6DDD05DF794035158C5F8AD
3216Splashtop_Wired_XDisplay_Agent_v1.5.8.3.exeC:\Users\admin\AppData\Local\Temp\unpack.logini
MD5:5067C73CCBDA05A46C053C8400E4F8DC
SHA256:DF11BEB94DA313F968D35F242E1295B38C9A8751CB7FD6D30D3A6640B6E4FA19
3848PreVerCheck.exeC:\Users\admin\AppData\Local\Temp\PreVerC.logini
MD5:54C89E01C24718DDBB57420B555F5C42
SHA256:6680A9F39B5A433E32BEA4475902CBA5E443DE543DFAA95D2A49513EF82D3D69
2376drvinst.exeC:\Windows\System32\DriverStore\Temp\{78164d54-2cb9-2378-7068-07442bbde212}\x86\lci_proxyumd.dllexecutable
MD5:F67D8A541D407C6886D6358248014B8E
SHA256:919ACBEDDCBFE27D12EE44ECD38044D880A68622D7BC412FF81B089746C79E5F
2376drvinst.exeC:\Windows\System32\DriverStore\Temp\{78164d54-2cb9-2378-7068-07442bbde212}\x86\SET44E4.tmpexecutable
MD5:F67D8A541D407C6886D6358248014B8E
SHA256:919ACBEDDCBFE27D12EE44ECD38044D880A68622D7BC412FF81B089746C79E5F
2376drvinst.exeC:\Windows\System32\DriverStore\Temp\{78164d54-2cb9-2378-7068-07442bbde212}\x86\SET44E5.tmpexecutable
MD5:B36B39A2AA5C15D0167A7D8454AE71A6
SHA256:01871A132386F81DFD4894E9DAEB9433C4BE2A99EBE8FEC954E5182A43E96AF0
316rundll32.exeC:\Users\admin\AppData\Local\Temp\{54554f6a-55e8-3def-6bf5-2b25873b4a7a}\SET4498.tmpbinary
MD5:07DC873615C74141FB8A646F6FE1D378
SHA256:F97F4A79BF9ACB0D7FFB257CB3E16687F6281B8687C79361B680764F3427EF61
316rundll32.exeC:\Users\admin\AppData\Local\Temp\{54554f6a-55e8-3def-6bf5-2b25873b4a7a}\x86\lci_proxywddm.sysexecutable
MD5:B36B39A2AA5C15D0167A7D8454AE71A6
SHA256:01871A132386F81DFD4894E9DAEB9433C4BE2A99EBE8FEC954E5182A43E96AF0
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
1
TCP/UDP connections
7
DNS requests
3
Threats
2

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
2592
SSUService.exe
GET
301
107.23.150.199:80
http://sn.splashtop.com/file_system/apt_repository/dists/ProtoSSU01/released/binary-i386/Packages.gz
unknown
html
134 b
unknown
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
4
System
192.168.100.255:138
—
—
—
whitelisted
4
System
192.168.100.255:137
—
—
—
whitelisted
1080
svchost.exe
224.0.0.252:5355
—
—
—
unknown
2592
SSUService.exe
107.23.150.199:80
sn.splashtop.com
AMAZON-AES
US
unknown
2592
SSUService.exe
107.23.150.199:443
sn.splashtop.com
AMAZON-AES
US
unknown
2592
SSUService.exe
107.22.247.100:80
ds1.devicevm.com
AMAZON-AES
US
unknown

DNS requests

Domain
IP
Reputation
sn.splashtop.com
  • 107.23.150.199
  • 44.206.129.162
  • 54.152.172.150
unknown
ds1.devicevm.com
  • 107.22.247.100
unknown
dns.msftncsi.com
  • 131.107.255.255
shared

Threats

PID
Process
Class
Message
1080
svchost.exe
Misc activity
ET INFO Splashtop Domain in DNS Lookup (splashtop .com)
2592
SSUService.exe
Misc activity
ET INFO Splashtop Domain (splashtop .com) in TLS SNI
Process
Message
Splashtop_Wired_XDisplay_Agent_v1.5.8.3.exe
[3216]2024-02-16 14:34:30 [CUtility::OSInfo] OS 6.1(7601) Service Pack 1 x64:0 Err:0
Splashtop_Wired_XDisplay_Agent_v1.5.8.3.exe
[3216]2024-02-16 14:34:30 [CUnPack::FindHeader] Name:C:\Users\admin\AppData\Local\Temp\Splashtop_Wired_XDisplay_Agent_v1.5.8.3.exe Err:0
Splashtop_Wired_XDisplay_Agent_v1.5.8.3.exe
[3216]2024-02-16 14:34:30 [CUnPack::FindHeader] Sign Size:6096 Err:0
Splashtop_Wired_XDisplay_Agent_v1.5.8.3.exe
[3216]2024-02-16 14:34:30 [CUnPack::FindHeader] Header offset:378880 Err:183
Splashtop_Wired_XDisplay_Agent_v1.5.8.3.exe
[3216]2024-02-16 14:34:30 [CUnPack::UnPackFiles] FreeSpace:232989581312 FileSize:11297280 Err:0
Splashtop_Wired_XDisplay_Agent_v1.5.8.3.exe
[3216]2024-02-16 14:34:30 [CUnPack::UnPackFiles] (1/4)UnPack file name:C:\Users\admin\AppData\Local\Temp\unpack\setup.msi (11297280) Err:2
Splashtop_Wired_XDisplay_Agent_v1.5.8.3.exe
[3216]2024-02-16 14:34:31 [CUnPack::UnPackFiles] UnPack count:1 len:11297280 File:(null) Err:0
Splashtop_Wired_XDisplay_Agent_v1.5.8.3.exe
[3216]2024-02-16 14:34:31 [CUnPack::UnPackFiles] FreeSpace:232978280448 FileSize:15 Err:183
Splashtop_Wired_XDisplay_Agent_v1.5.8.3.exe
[3216]2024-02-16 14:34:31 [CUnPack::UnPackFiles] (2/4)UnPack file name:C:\Users\admin\AppData\Local\Temp\unpack\run.bat (15) Err:122
Splashtop_Wired_XDisplay_Agent_v1.5.8.3.exe
[3216]2024-02-16 14:34:31 [CUnPack::UnPackFiles] UnPack count:2 len:15 File:(null) Err:0
Interactive malware hunting service ANY.RUN
© 2017-2025 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
Splashtop_Wired_XDisplay_Agent_v1.5.8.3.exe