File name:

pcsx2-v1.6.0-windows-32bit-installer.exe

Full analysis: https://app.any.run/tasks/148597fc-bb94-47fa-8c8d-748afcb9d86c
Verdict: Malicious activity
Analysis date: May 22, 2024, 14:11:54
OS: Windows 7 Professional Service Pack 1 (build: 7601, 32 bit)
Indicators:
MIME: application/x-dosexec
File info: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
MD5:

C6AFD2FF3059B840EE2FB939694EFAFB

SHA1:

405C4D526AC498FD61658D94F24426AFA8AC4525

SHA256:

FBE07D1AFD27AB353DAA2AFACC2DE87D8F5EC69F64BBD9246F31EBFE1731DE9B

SSDEEP:

98304:4v4Oljv5EagKCwruQGHxUez1PTWuT5d/PJk8SZ/jSRp8B8745W360r4mdKozA7LH:RJmhOaLCw8emGMm

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    • Drops the executable file immediately after the start

      • pcsx2-v1.6.0-windows-32bit-installer.exe (PID: 3964)

  • SUSPICIOUS

    • Malware-specific behavior (creating "System.dll" in Temp)

      • pcsx2-v1.6.0-windows-32bit-installer.exe (PID: 3964)

    • Executable content was dropped or overwritten

      • pcsx2-v1.6.0-windows-32bit-installer.exe (PID: 3964)

    • The process creates files with name similar to system file names

      • pcsx2-v1.6.0-windows-32bit-installer.exe (PID: 3964)

    • Reads security settings of Internet Explorer

      • pcsx2-v1.6.0-windows-32bit-installer.exe (PID: 3964)

    • Reads the Internet Settings

      • pcsx2-v1.6.0-windows-32bit-installer.exe (PID: 3964)

  • INFO

    • Creates files or folders in the user directory

      • pcsx2-v1.6.0-windows-32bit-installer.exe (PID: 3964)

    • Checks supported languages

      • pcsx2.exe (PID: 552)
      • pcsx2-v1.6.0-windows-32bit-installer.exe (PID: 3964)
      • wmpnscfg.exe (PID: 1036)
      • pcsx2.exe (PID: 1764)

    • Manual execution by a user

      • pcsx2.exe (PID: 552)
      • msedge.exe (PID: 1660)
      • wmpnscfg.exe (PID: 1036)

    • Reads the computer name

      • pcsx2.exe (PID: 552)
      • pcsx2-v1.6.0-windows-32bit-installer.exe (PID: 3964)
      • wmpnscfg.exe (PID: 1036)
      • pcsx2.exe (PID: 1764)

    • Create files in a temporary directory

      • pcsx2-v1.6.0-windows-32bit-installer.exe (PID: 3964)

    • Checks proxy server information

      • pcsx2-v1.6.0-windows-32bit-installer.exe (PID: 3964)

    • Reads the machine GUID from the registry

      • pcsx2-v1.6.0-windows-32bit-installer.exe (PID: 3964)

    • Application launched itself

      • msedge.exe (PID: 1660)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.exe | Win32 Executable MS Visual C++ (generic) (42.2)
.exe | Win64 Executable (generic) (37.3)
.dll | Win32 Dynamic Link Library (generic) (8.8)
.exe | Win32 Executable (generic) (6)
.exe | Generic Win/DOS Executable (2.7)

EXIF

EXE

MachineType: Intel 386 or later, and compatibles
TimeStamp: 2019:12:16 00:50:53+00:00
ImageFileCharacteristics: No relocs, Executable, No line numbers, No symbols, 32-bit
PEType: PE32
LinkerVersion: 6
CodeSize: 26112
InitializedDataSize: 141824
UninitializedDataSize: 2048
EntryPoint: 0x350d
OSVersion: 4
ImageVersion: 6
SubsystemVersion: 4
Subsystem: Windows GUI
FileVersionNumber: 1.6.0.0
ProductVersionNumber: 1.6.0.0
FileFlagsMask: 0x0000
FileFlags: (none)
FileOS: Win32
ObjectFileType: Executable application
FileSubtype: -
LanguageCode: English (U.S.)
CharacterSet: Windows, Latin1
FileDescription: Installs PCSX2, a Playstation 2 Emulator for the PC.
FileVersion: 1.6.0
LegalCopyright: Copyright 2019 PCSX2 Dev Team
ProductName: PCSX2 1.6.0
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
50
Monitored processes
12
Malicious processes
1
Suspicious processes
0

Behavior graph

Click at the process to see the details
start pcsx2-v1.6.0-windows-32bit-installer.exe wmpnscfg.exe no specs pcsx2.exe no specs pcsx2.exe no specs msedge.exe msedge.exe no specs msedge.exe no specs msedge.exe msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
552"C:\Users\admin\Documents\PCSX2 1.6.0\pcsx2.exe" C:\Users\admin\Documents\PCSX2 1.6.0\pcsx2.exe—explorer.exe
User:
admin
Integrity Level:
MEDIUM
Exit code:
4294967295
Modules
Images
c:\users\admin\documents\pcsx2 1.6.0\pcsx2.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\msvcp140.dll
1036"C:\Program Files\Windows Media Player\wmpnscfg.exe"C:\Program Files\Windows Media Player\wmpnscfg.exe—explorer.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Windows Media Player Network Sharing Service Configuration Application
Exit code:
0
Version:
12.0.7600.16385 (win7_rtm.090713-1255)
Modules
Images
c:\program files\windows media player\wmpnscfg.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
1588"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=109.0.5414.149 "--annotation=exe=C:\Program Files\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win32 "--annotation=prod=Microsoft Edge" --annotation=ver=109.0.1518.115 --initial-client-data=0xc8,0xcc,0xd0,0x9c,0xd8,0x6949f598,0x6949f5a8,0x6949f5b4C:\Program Files\Microsoft\Edge\Application\msedge.exe—msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
1660"C:\Program Files\Microsoft\Edge\Application\msedge.exe" C:\Program Files\Microsoft\Edge\Application\msedge.exe
explorer.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
1764"C:\Users\admin\Documents\PCSX2 1.6.0\pcsx2.exe"C:\Users\admin\Documents\PCSX2 1.6.0\pcsx2.exe—pcsx2-v1.6.0-windows-32bit-installer.exe
User:
admin
Integrity Level:
MEDIUM
Exit code:
4294967295
Modules
Images
c:\users\admin\documents\pcsx2 1.6.0\pcsx2.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\msvcp140.dll
1884"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=1656 --field-trial-handle=1260,i,7216507759407964766,5923320503355839214,131072 /prefetch:8C:\Program Files\Microsoft\Edge\Application\msedge.exe—msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
LOW
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
2256"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1268 --field-trial-handle=1260,i,7216507759407964766,5923320503355839214,131072 /prefetch:3C:\Program Files\Microsoft\Edge\Application\msedge.exe
msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
2264"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1320 --field-trial-handle=1260,i,7216507759407964766,5923320503355839214,131072 /prefetch:2C:\Program Files\Microsoft\Edge\Application\msedge.exe—msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
LOW
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
2548"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1448 --field-trial-handle=1260,i,7216507759407964766,5923320503355839214,131072 /prefetch:2C:\Program Files\Microsoft\Edge\Application\msedge.exe—msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
LOW
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
2600"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=renderer --first-renderer-process --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2232 --field-trial-handle=1260,i,7216507759407964766,5923320503355839214,131072 /prefetch:1C:\Program Files\Microsoft\Edge\Application\msedge.exe—msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
LOW
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
Total events
9 972
Read events
9 914
Write events
49
Delete events
9

Modification events

(PID) Process:(3964) pcsx2-v1.6.0-windows-32bit-installer.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
Operation:writeName:ProxyEnable
Value:
0
(PID) Process:(3964) pcsx2-v1.6.0-windows-32bit-installer.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
Operation:delete valueName:ProxyServer
Value:
(PID) Process:(3964) pcsx2-v1.6.0-windows-32bit-installer.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
Operation:delete valueName:ProxyOverride
Value:
(PID) Process:(3964) pcsx2-v1.6.0-windows-32bit-installer.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
Operation:delete valueName:AutoConfigURL
Value:
(PID) Process:(3964) pcsx2-v1.6.0-windows-32bit-installer.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
Operation:delete valueName:AutoDetect
Value:
(PID) Process:(3964) pcsx2-v1.6.0-windows-32bit-installer.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
Operation:writeName:SavedLegacySettings
Value:
460000005D010000090000000000000000000000000000000400000000000000C0E333BBEAB1D3010000000000000000000000000100000002000000C0A8016B000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
(PID) Process:(3964) pcsx2-v1.6.0-windows-32bit-installer.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Operation:writeName:ProxyBypass
Value:
1
(PID) Process:(3964) pcsx2-v1.6.0-windows-32bit-installer.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Operation:writeName:IntranetName
Value:
1
(PID) Process:(3964) pcsx2-v1.6.0-windows-32bit-installer.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Operation:writeName:UNCAsIntranet
Value:
1
(PID) Process:(3964) pcsx2-v1.6.0-windows-32bit-installer.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Operation:writeName:AutoDetect
Value:
0
Executable files
25
Suspicious files
154
Text files
60
Unknown types
0

Dropped files

PID
Process
Filename
Type
3964pcsx2-v1.6.0-windows-32bit-installer.exeC:\Users\admin\AppData\Local\Temp\nst65C3.tmp\modern-header.bmpimage
MD5:93CBFCE0BA7C31F9FEDFEAC3307A719D
SHA256:2296FBD4FC1DFCFFD4C00549F1CB89F01553173695DB9D593C0CBED31F748984
3964pcsx2-v1.6.0-windows-32bit-installer.exeC:\Users\admin\AppData\Local\Temp\nst65C3.tmp\UserInfo.dllexecutable
MD5:DC90F96B169DCC9151EE6E93B47446EA
SHA256:AFC939EBFD66A6C972D2D6BBCB978559AB3427D1582935E45392F9912EF186AD
3964pcsx2-v1.6.0-windows-32bit-installer.exeC:\Users\admin\AppData\Local\Temp\nst65C3.tmp\System.dllexecutable
MD5:8CF2AC271D7679B1D68EEFC1AE0C5618
SHA256:6950991102462D84FDC0E3B0AE30C95AF8C192F77CE3D78E8D54E6B22F7C09BA
3964pcsx2-v1.6.0-windows-32bit-installer.exeC:\Users\admin\AppData\Local\Temp\nst65C3.tmp\nsDialogs.dllexecutable
MD5:EC9640B70E07141FEBBE2CD4CC42510F
SHA256:C5BA017732597A82F695B084D1AA7FE3B356168CC66105B9392A9C5B06BE5188
3964pcsx2-v1.6.0-windows-32bit-installer.exeC:\Users\admin\AppData\Local\Temp\nst65C3.tmp\modern-wizard.bmpimage
MD5:CBE40FD2B1EC96DAEDC65DA172D90022
SHA256:3AD2DC318056D0A2024AF1804EA741146CFC18CC404649A44610CBF8B2056CF2
3964pcsx2-v1.6.0-windows-32bit-installer.exeC:\Users\admin\AppData\Local\Temp\PCSX2 1.6.0\GameIndex.dbftext
MD5:24336A8659637F7BA99A0835ACA499BA
SHA256:037369B6D406AF82FE1E63559DC7737295C0E9EC8CE1679045DEFA595F7DA218
3964pcsx2-v1.6.0-windows-32bit-installer.exeC:\Users\admin\AppData\Local\Temp\PCSX2 1.6.0\cheats_ws.zipcompressed
MD5:1A22E8C89C15028031662DAAA1D43D99
SHA256:961CCD502C6C7F9C16E0F2AE7989171F06E267671DC3B1A859566274DCC6CE30
3964pcsx2-v1.6.0-windows-32bit-installer.exeC:\Users\admin\AppData\Local\Temp\PCSX2 1.6.0\Docs\PCSX2.1text
MD5:24CF5617157814100E3CB4BABA6E16A0
SHA256:41CD5BEAB6ECAB92EDA8AB97AFF4A8059B6E48AA4039068E6CC4B9D2F6F33B4F
3964pcsx2-v1.6.0-windows-32bit-installer.exeC:\Users\admin\AppData\Local\Temp\PCSX2 1.6.0\Docs\debugger.txttext
MD5:FE02B7E29DAB57731164BE428502DB91
SHA256:07719B1A0FFA92ED9DA1AF63E85BB08AD4F89F85CC4BBF78CAA8132EB8005B5A
3964pcsx2-v1.6.0-windows-32bit-installer.exeC:\Users\admin\AppData\Local\Temp\PCSX2 1.6.0\Shaders\GSdx.fxtext
MD5:13DAEFD1FE4B57671D0715710BCB1D24
SHA256:181E521AD3FFE18F9CDA0CDB037F9AD785FE55C411B154E18B4DF022550EC863
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
0
TCP/UDP connections
11
DNS requests
11
Threats
0

HTTP requests

No HTTP requests
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
4
System
192.168.100.255:138
—
—
—
whitelisted
4
System
192.168.100.255:137
—
—
—
unknown
—
—
224.0.0.252:5355
—
—
—
unknown
3964
pcsx2-v1.6.0-windows-32bit-installer.exe
95.100.245.121:443
download.microsoft.com
AKAMAI-AS
NL
unknown
2256
msedge.exe
13.107.43.16:443
config.edge.skype.com
MICROSOFT-CORP-MSN-AS-BLOCK
US
whitelisted
2256
msedge.exe
204.79.197.239:443
edge.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
US
unknown
1660
msedge.exe
239.255.255.250:1900
—
—
—
unknown
2256
msedge.exe
204.79.197.203:443
ntp.msn.com
MICROSOFT-CORP-MSN-AS-BLOCK
US
whitelisted
2256
msedge.exe
2.16.100.66:443
www.bing.com
Akamai International B.V.
DE
unknown

DNS requests

Domain
IP
Reputation
download.microsoft.com
  • 95.100.245.121
whitelisted
dns.msftncsi.com
  • 131.107.255.255
shared
ntp.msn.com
  • 204.79.197.203
whitelisted
config.edge.skype.com
  • 13.107.43.16
whitelisted
edge.microsoft.com
  • 204.79.197.239
  • 13.107.21.239
whitelisted
www.bing.com
  • 2.16.100.66
  • 2.16.100.48
  • 2.16.100.49
  • 2.16.100.56
  • 2.16.100.42
  • 2.16.100.59
  • 2.16.100.43
  • 2.16.100.128
  • 2.16.100.58
whitelisted

Threats

No threats detected
No debug info
Interactive malware hunting service ANY.RUN
© 2017-2025 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
pcsx2-v1.6.0-windows-32bit-installer.exe