General Info Watch the FULL Interactive Analysis at ANY.RUN!

File name

s.exe

Verdict
Malicious activity
Analysis date
11/8/2018, 21:01:04
OS:
Windows 7 Professional Service Pack 1 (build: 7601, 32 bit)
Indicators:

MIME:
application/x-dosexec
File info:
PE32 executable (GUI) Intel 80386, for MS Windows
MD5

95a8a99f7de8614f592e9c24b0c7a617

SHA1

9b15f7e1741832560e001e439fc1f30a9107d2e3

SHA256

fd69eb8fdee169d6770e2b9ae2d5e762650e400ce0f2c00f610af83bf0f4dccb

SSDEEP

192:ej/F/nAOCDQCzv5Cg4BTaSiAVPbZ6UdgNxvKhgTcCSO3KdH6oONx8P1oyn5Uf3Fu:ew4g4Z5Pc7shG2ENxC1/Uf1WWSdj

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distored by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

Software environment set and analysis options

Launch configuration

Task duration
60 seconds
Additional time used
none
Fakenet option
off
Heavy Evaision option
off
MITM proxy
off
Route via Tor
off
Network geolocation
off
Privacy
Public submission
Autoconfirmation of UAC
on

Software preset

  • Internet Explorer 8.0.7601.17514
  • Adobe Acrobat Reader DC MUI (15.023.20070)
  • Adobe Flash Player 26 ActiveX (26.0.0.131)
  • Adobe Flash Player 26 NPAPI (26.0.0.131)
  • Adobe Flash Player 26 PPAPI (26.0.0.131)
  • Adobe Refresh Manager (1.8.0)
  • CCleaner (5.35)
  • FileZilla Client 3.36.0 (3.36.0)
  • Google Chrome (68.0.3440.106)
  • Google Update Helper (1.3.33.17)
  • Java 8 Update 92 (8.0.920.14)
  • Java Auto Updater (2.8.92.14)
  • Microsoft .NET Framework 4.6.1 (4.6.01055)
  • Microsoft Office Access MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Office Access Setup Metadata MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Office Excel MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Office OneNote MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Office Outlook MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Office PowerPoint MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Office Professional 2010 (14.0.6029.1000)
  • Microsoft Office Proof (English) 2010 (14.0.6029.1000)
  • Microsoft Office Proof (French) 2010 (14.0.6029.1000)
  • Microsoft Office Proof (Spanish) 2010 (14.0.6029.1000)
  • Microsoft Office Proofing (English) 2010 (14.0.6029.1000)
  • Microsoft Office Publisher MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Office Shared MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Office Shared Setup Metadata MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Office Single Image 2010 (14.0.6029.1000)
  • Microsoft Office Word MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (9.0.30729.6161)
  • Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (10.0.40219)
  • Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (12.0.30501.0)
  • Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (12.0.21005)
  • Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (12.0.21005)
  • Microsoft Visual C++ 2017 Redistributable (x86) - 14.15.26706 (14.15.26706.0)
  • Microsoft Visual C++ 2017 x86 Additional Runtime - 14.15.26706 (14.15.26706)
  • Microsoft Visual C++ 2017 x86 Minimum Runtime - 14.15.26706 (14.15.26706)
  • Mozilla Firefox 61.0.2 (x86 en-US) (61.0.2)
  • Notepad++ (32-bit x86) (7.5.1)
  • Opera 12.15 (12.15.1748)
  • Skype version 8.29 (8.29)
  • VLC media player (2.2.6)
  • WinRAR 5.60 (32-bit) (5.60.0)

Hotfixes

  • Client LanguagePack Package
  • Client Refresh LanguagePack Package
  • CodecPack Basic Package
  • Foundation Package
  • IE Troubleshooters Package
  • InternetExplorer Optional Package
  • KB2534111
  • KB2999226
  • KB976902
  • LocalPack AU Package
  • LocalPack CA Package
  • LocalPack GB Package
  • LocalPack US Package
  • LocalPack ZA Package
  • ProfessionalEdition
  • UltimateEdition

Behavior activities

MALICIOUS SUSPICIOUS INFO
Changes the autorun value in the registry
  • s.exe (PID: 2788)
Executable content was dropped or overwritten
  • s.exe (PID: 2788)
Starts itself from another location
  • s.exe (PID: 2788)
Connects to unusual port
  • winupd32cfg.exe (PID: 3424)

No info indicators.

Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report

Static information

TRiD
.exe
|   Win64 Executable (generic) (64.6%)
.dll
|   Win32 Dynamic Link Library (generic) (15.4%)
.exe
|   Win32 Executable (generic) (10.5%)
.exe
|   Generic Win/DOS Executable (4.6%)
.exe
|   DOS Executable Generic (4.6%)
EXIF
EXE
MachineType:
Intel 386 or later, and compatibles
TimeStamp:
2018:09:17 10:58:13+02:00
PEType:
PE32
LinkerVersion:
9
CodeSize:
11776
InitializedDataSize:
8192
UninitializedDataSize:
null
EntryPoint:
0x3c56
OSVersion:
5
ImageVersion:
null
SubsystemVersion:
5
Subsystem:
Windows GUI
Summary
Architecture:
IMAGE_FILE_MACHINE_I386
Subsystem:
IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date:
17-Sep-2018 08:58:13
Detected languages
English - United States
DOS Header
Magic number:
MZ
Bytes on last page of file:
0x0090
Pages in file:
0x0003
Relocations:
0x0000
Size of header:
0x0004
Min extra paragraphs:
0x0000
Max extra paragraphs:
0xFFFF
Initial SS value:
0x0000
Initial SP value:
0x00B8
Checksum:
0x0000
Initial IP value:
0x0000
Initial CS value:
0x0000
Overlay number:
0x0000
OEM identifier:
0x0000
OEM information:
0x0000
Address of NE header:
0x000000E0
PE Headers
Signature:
PE
Machine:
IMAGE_FILE_MACHINE_I386
Number of sections:
4
Time date stamp:
17-Sep-2018 08:58:13
Pointer to Symbol Table:
0x00000000
Number of symbols:
0
Size of Optional Header:
0x00E0
Characteristics
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_RELOCS_STRIPPED
Sections
Name Virtual Address Virtual Size Raw Size Charateristics Entropy
.text 0x00001000 0x00002DEC 0x00002E00 IMAGE_SCN_CNT_CODE,IMAGE_SCN_MEM_EXECUTE,IMAGE_SCN_MEM_READ 5.80828
.rdata 0x00004000 0x0000121A 0x00001400 IMAGE_SCN_CNT_INITIALIZED_DATA,IMAGE_SCN_MEM_READ 4.23272
.data 0x00006000 0x00000BFC 0x00000A00 IMAGE_SCN_CNT_INITIALIZED_DATA,IMAGE_SCN_MEM_READ,IMAGE_SCN_MEM_WRITE 3.22355
.rsrc 0x00007000 0x000001B4 0x00000200 IMAGE_SCN_CNT_INITIALIZED_DATA,IMAGE_SCN_MEM_READ 5.13483
Resources
1

Imports
    MSVCRT.dll

    WS2_32.dll

    SHELL32.dll

    WININET.dll

    SHLWAPI.dll

    KERNEL32.dll

    ADVAPI32.dll

Exports

    No exports.

Screenshots

Processes

Total processes
32
Monitored processes
2
Malicious processes
2
Suspicious processes
0

Behavior graph

+
drop and start start s.exe winupd32cfg.exe
Specs description
Program did not start
Integrity level elevation
Task сontains an error or was rebooted
Process has crashed
Task contains several apps running
Executable file was dropped
Debug information is available
Process was injected
Network attacks were detected
Application downloaded the executable file
Actions similar to stealing personal data
Behavior similar to exploiting the vulnerability
Inspected object has sucpicious PE structure
File is detected by antivirus software
CPU overrun
RAM overrun
Process starts the services
Process was added to the startup
Behavior similar to spam
Low-level access to the HDD
Probably Tor was used
System was rebooted
Connects to the network
Known threat

Process information

Click at the process to see the details.

PID
2788
CMD
"C:\Users\admin\AppData\Local\Temp\s.exe"
Path
C:\Users\admin\AppData\Local\Temp\s.exe
Indicators
Parent process
––
User
admin
Integrity Level
MEDIUM
Exit code
0
Version:
Company
Description
Version
Modules
Image
c:\users\admin\appdata\local\temp\s.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\ws2_32.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\nsi.dll
c:\windows\system32\shell32.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\user32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\wininet.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
c:\windows\system32\urlmon.dll
c:\windows\system32\ole32.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\iertutil.dll
c:\windows\system32\imm32.dll
c:\windows\system32\msctf.dll
c:\users\admin\97595057599559797\winupd32cfg.exe
c:\windows\system32\apphelp.dll

PID
3424
CMD
C:\Users\admin\97595057599559797\winupd32cfg.exe
Path
C:\Users\admin\97595057599559797\winupd32cfg.exe
Indicators
Parent process
s.exe
User
admin
Integrity Level
MEDIUM
Version:
Company
Description
Version
Modules
Image
c:\users\admin\97595057599559797\winupd32cfg.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\ws2_32.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\nsi.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\shell32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\user32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\wininet.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
c:\windows\system32\urlmon.dll
c:\windows\system32\ole32.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\iertutil.dll
c:\windows\system32\imm32.dll
c:\windows\system32\msctf.dll
c:\windows\system32\mswsock.dll
c:\windows\system32\wshtcpip.dll

Registry activity

Total events
14
Read events
13
Write events
1
Delete events
0

Modification events

PID
Process
Operation
Key
Name
Value
2788
s.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
Windows Update Services
C:\Users\admin\97595057599559797\winupd32cfg.exe

Files activity

Executable files
1
Suspicious files
0
Text files
0
Unknown types
0

Dropped files

PID Process Filename Type
2788 s.exe C:\Users\admin\97595057599559797\winupd32cfg.exe executable

Find more information of the staic content and download it at the full report

Network activity

HTTP(S) requests
0
TCP/UDP connections
435
DNS requests
0
Threats
5

HTTP requests

No HTTP requests.

Connections

PID Process IP ASN CN Reputation
3424 winupd32cfg.exe 168.105.85.50:5900 University of Hawaii US unknown
3424 winupd32cfg.exe 47.205.42.39:5900 Frontier Communications of America, Inc. US unknown
3424 winupd32cfg.exe 52.29.138.8:5900 Amazon.com, Inc. DE unknown
3424 winupd32cfg.exe 178.9.112.3:5900 Vodafone GmbH DE unknown
3424 winupd32cfg.exe 131.180.217.116:5900 SURFnet bv NL unknown
3424 winupd32cfg.exe 158.123.205.230:5900 Rhode Island Network for Educ. Technology US unknown
3424 winupd32cfg.exe 34.156.63.94:5900 US unknown
3424 winupd32cfg.exe 78.231.76.142:5900 Free SAS FR unknown
3424 winupd32cfg.exe 183.81.70.39:5900 The Corporation for Financing & Promoting Technology VN unknown
3424 winupd32cfg.exe 151.217.77.248:5900 –– unknown
3424 winupd32cfg.exe 27.91.185.179:5900 KDDI CORPORATION JP unknown
3424 winupd32cfg.exe 60.237.207.99:5900 BIGLOBE Inc. JP unknown
3424 winupd32cfg.exe 33.126.141.133:5900 US unknown
3424 winupd32cfg.exe 75.30.78.255:5900 AT&T Services, Inc. US unknown
3424 winupd32cfg.exe 65.42.3.17:5900 AT&T Services, Inc. US unknown
3424 winupd32cfg.exe 118.101.113.195:5900 TM Net, Internet Service Provider MY unknown
3424 winupd32cfg.exe 158.120.35.34:5900 US unknown
3424 winupd32cfg.exe 173.25.203.128:5900 Mediacom Communications Corp US unknown
3424 winupd32cfg.exe 44.239.255.50:5900 University of California, San Diego US unknown
3424 winupd32cfg.exe 46.220.122.42:5900 Hutchison Drei Austria GmbH AT unknown
3424 winupd32cfg.exe 88.117.237.50:5900 A1 Telekom Austria AG AT unknown
3424 winupd32cfg.exe 190.179.108.112:5900 Telefonica de Argentina AR unknown
3424 winupd32cfg.exe 162.173.93.243:5900 T-Mobile USA, Inc. US unknown
3424 winupd32cfg.exe 165.40.220.92:5900 US unknown
3424 winupd32cfg.exe 22.88.136.26:5900 US unknown
3424 winupd32cfg.exe 88.72.115.236:5900 Vodafone GmbH DE unknown
3424 winupd32cfg.exe 96.234.197.205:5900 MCI Communications Services, Inc. d/b/a Verizon Business US unknown
3424 winupd32cfg.exe 138.71.122.94:5900 AU unknown
3424 winupd32cfg.exe 49.227.184.87:5900 Vodafone NZ Ltd. NZ unknown
3424 winupd32cfg.exe 78.167.17.16:5900 Turk Telekom TR unknown
3424 winupd32cfg.exe 188.56.78.53:5900 TR unknown
3424 winupd32cfg.exe 124.27.108.229:5900 FUJITSU LIMITED JP unknown
3424 winupd32cfg.exe 70.19.114.141:5900 MCI Communications Services, Inc. d/b/a Verizon Business US unknown
3424 winupd32cfg.exe 185.217.175.76:5900 Syrian Telecom SY unknown
3424 winupd32cfg.exe 87.190.202.165:5900 Deutsche Telekom AG DE unknown
3424 winupd32cfg.exe 171.182.186.132:5900 US unknown
3424 winupd32cfg.exe 183.246.156.51:5900 China Mobile communications corporation CN unknown
3424 winupd32cfg.exe 155.2.75.158:5900 AT&T Data Communications Services US unknown
3424 winupd32cfg.exe 43.136.122.201:5900 JP unknown
3424 winupd32cfg.exe 65.121.209.101:5900 Qwest Communications Company, LLC US unknown
3424 winupd32cfg.exe 194.209.141.251:5900 Swisscom (Switzerland) Ltd CH unknown
3424 winupd32cfg.exe 128.225.19.6:5900 US unknown
3424 winupd32cfg.exe 153.236.165.128:5900 NTT Communications Corporation JP unknown
3424 winupd32cfg.exe 161.183.107.21:5900 US unknown
3424 winupd32cfg.exe 41.178.174.79:5900 LINKdotNET EG unknown
3424 winupd32cfg.exe 54.204.53.207:5900 Amazon.com, Inc. US unknown
3424 winupd32cfg.exe 100.124.234.233:5900 –– unknown
3424 winupd32cfg.exe 54.154.57.114:5900 Amazon.com, Inc. IE unknown
3424 winupd32cfg.exe 78.128.120.62:5900 BG unknown
3424 winupd32cfg.exe 190.245.2.83:5900 CABLEVISION S.A. AR suspicious
3424 winupd32cfg.exe 26.18.119.56:5900 US unknown
3424 winupd32cfg.exe 188.137.5.31:5900 Leon Sp. z o.o. PL unknown
3424 winupd32cfg.exe 95.242.174.202:5900 Telecom Italia IT unknown
3424 winupd32cfg.exe 101.250.154.95:5900 Piranha Systems KR unknown
3424 winupd32cfg.exe 132.97.84.167:5900 DoD Network Information Center US unknown
3424 winupd32cfg.exe 85.47.245.76:5900 Telecom Italia IT unknown
3424 winupd32cfg.exe 129.122.14.99:5900 KNUST- GH unknown
3424 winupd32cfg.exe 34.168.120.152:5900 US unknown
3424 winupd32cfg.exe 101.138.226.27:5900 Ambit Microsystem Corporation TW unknown
3424 winupd32cfg.exe 168.35.188.69:5900 General Services Commission US unknown
3424 winupd32cfg.exe 135.35.108.41:5900 Avaya Inc. US unknown
3424 winupd32cfg.exe 106.48.147.187:5900 CN unknown
3424 winupd32cfg.exe 52.26.75.40:5900 Amazon.com, Inc. US unknown
3424 winupd32cfg.exe 103.198.80.185:5900 ApnaTeleLink pvt. Ltd. IN unknown
3424 winupd32cfg.exe 145.218.165.131:5900 DSV A/S –– unknown
3424 winupd32cfg.exe 39.64.20.134:5900 CHINA UNICOM China169 Backbone CN suspicious
3424 winupd32cfg.exe 49.170.19.189:5900 LG POWERCOMM KR unknown
3424 winupd32cfg.exe 149.230.23.2:5900 MCI Communications Services, Inc. d/b/a Verizon Business DE unknown
3424 winupd32cfg.exe 89.238.251.202:5900 Euroweb Romania S.A. RO unknown
3424 winupd32cfg.exe 80.65.2.2:5900 NL unknown
3424 winupd32cfg.exe 118.139.88.12:5900 Monash University AU unknown
3424 winupd32cfg.exe 122.42.100.45:5900 LG POWERCOMM KR unknown
3424 winupd32cfg.exe 39.9.62.238:5900 Far EastTone Telecommunication Co., Ltd. TW unknown
3424 winupd32cfg.exe 106.77.13.169:5900 Idea Cellular Limited IN unknown
3424 winupd32cfg.exe 171.253.198.81:5900 Viettel Corporation VN unknown
3424 winupd32cfg.exe 104.241.115.50:5900 Servpac Inc. US unknown
3424 winupd32cfg.exe 78.194.251.52:5900 Free SAS FR unknown
3424 winupd32cfg.exe 99.151.169.225:5900 AT&T Services, Inc. US unknown
3424 winupd32cfg.exe 32.228.232.230:5900 AT&T Global Network Services, LLC US unknown
3424 winupd32cfg.exe 72.115.212.52:5900 Cellco Partnership DBA Verizon Wireless US unknown
3424 winupd32cfg.exe 116.196.69.98:5900 China Unicom Beijing Province Network CN unknown
3424 winupd32cfg.exe 158.128.161.142:5900 CA unknown
3424 winupd32cfg.exe 180.224.159.243:5900 LG POWERCOMM KR unknown
3424 winupd32cfg.exe 30.45.221.224:5900 US unknown
3424 winupd32cfg.exe 26.210.245.82:5900 US unknown
3424 winupd32cfg.exe 86.134.213.32:5900 British Telecommunications PLC GB unknown
3424 winupd32cfg.exe 183.210.113.157:5900 China Mobile communications corporation CN unknown
3424 winupd32cfg.exe 103.43.130.230:5900 PT Rekajasa Akses ID unknown
3424 winupd32cfg.exe 120.215.5.125:5900 Henan Mobile Communications Co.,Ltd CN unknown
3424 winupd32cfg.exe 155.26.161.169:5900 US unknown
3424 winupd32cfg.exe 22.252.161.220:5900 US unknown
3424 winupd32cfg.exe 118.65.199.63:5900 BEIJING SHENZHOU GREATWALL COMMUNICATION CN unknown
3424 winupd32cfg.exe 49.255.214.14:5900 Vocus Connect International Backbone AU unknown
3424 winupd32cfg.exe 54.106.27.106:5900 US unknown
3424 winupd32cfg.exe 150.72.215.69:5900 JP unknown
3424 winupd32cfg.exe 153.18.105.98:5900 Foothill-DeAnza Community College District US unknown
3424 winupd32cfg.exe 73.166.215.129:5900 Comcast Cable Communications, LLC US unknown
3424 winupd32cfg.exe 23.87.143.194:5900 US unknown
3424 winupd32cfg.exe 68.229.159.203:5900 Cox Communications Inc. US unknown
3424 winupd32cfg.exe 98.97.202.96:5900 AT&T Services, Inc. US unknown
3424 winupd32cfg.exe 41.144.20.67:5900 Telkom-Internet ZA unknown
3424 winupd32cfg.exe 91.39.120.186:5900 Deutsche Telekom AG DE unknown
3424 winupd32cfg.exe 97.116.148.89:5900 Qwest Communications Company, LLC US suspicious
3424 winupd32cfg.exe 62.164.161.254:5900 KCOM Group PLC GB unknown
3424 winupd32cfg.exe 132.82.212.136:5900 DoD Network Information Center US unknown
3424 winupd32cfg.exe 94.20.167.200:5900 AZ unknown
3424 winupd32cfg.exe 131.217.38.104:5900 The University of Tasmania AU unknown
3424 winupd32cfg.exe 133.64.98.255:5900 Osaka Sangyo University JP unknown
3424 winupd32cfg.exe 175.189.195.218:5900 Computer Network Information Center CN unknown
3424 winupd32cfg.exe 145.118.6.34:5900 SURFnet bv NL unknown
3424 winupd32cfg.exe 155.166.106.109:5900 AT&T Mobility LLC US unknown
3424 winupd32cfg.exe 171.112.98.132:5900 No.31,Jin-rong Street CN unknown
3424 winupd32cfg.exe 114.214.196.221:5900 China Education and Research Network Center CN unknown
3424 winupd32cfg.exe 169.83.63.85:5900 US unknown
3424 winupd32cfg.exe 94.105.208.255:5900 Orange Belgium SA BE unknown
3424 winupd32cfg.exe 123.150.248.159:5900 ASN for TIANJIN Provincial Net of CT CN unknown
3424 winupd32cfg.exe 107.64.11.11:5900 US unknown
3424 winupd32cfg.exe 108.237.119.179:5900 AT&T Services, Inc. US unknown
3424 winupd32cfg.exe 81.176.37.202:5900 JSC RTComm.RU RU unknown
3424 winupd32cfg.exe 121.20.156.244:5900 CHINA UNICOM China169 Backbone CN unknown
3424 winupd32cfg.exe 176.184.35.237:5900 Bouygues Telecom SA FR unknown
3424 winupd32cfg.exe 58.247.241.55:5900 China Unicom Shanghai network CN unknown
3424 winupd32cfg.exe 113.68.141.3:5900 No.31,Jin-rong Street CN unknown
3424 winupd32cfg.exe 186.26.228.228:5900 Telecomunicaciones MOVILNET VE unknown
3424 winupd32cfg.exe 196.139.6.160:5900 Vodafone- EG unknown
3424 winupd32cfg.exe 20.126.9.188:5900 US unknown
3424 winupd32cfg.exe 159.201.1.187:5900 Northrop Grumman US unknown
3424 winupd32cfg.exe 185.59.46.211:5900 Mustafa Akin trading as NETIYI TELEKOM TR unknown
3424 winupd32cfg.exe 60.110.199.54:5900 Softbank BB Corp. JP unknown
3424 winupd32cfg.exe 44.10.42.65:5900 University of California, San Diego US unknown
3424 winupd32cfg.exe 115.156.76.189:5900 China Education and Research Network Center CN unknown
3424 winupd32cfg.exe 132.243.44.83:5900 NCR Corporation US unknown
3424 winupd32cfg.exe 92.175.196.248:5900 Orange FR unknown
3424 winupd32cfg.exe 117.201.56.155:5900 National Internet Backbone IN unknown
3424 winupd32cfg.exe 141.133.16.191:5900 Bentley University US unknown
3424 winupd32cfg.exe 23.65.175.93:5900 Uninet S.A. de C.V. US unknown
3424 winupd32cfg.exe 58.33.219.131:5900 China Telecom (Group) CN unknown
3424 winupd32cfg.exe 114.28.217.138:5900 CN unknown
3424 winupd32cfg.exe 27.71.57.38:5900 Viettel Corporation VN unknown
3424 winupd32cfg.exe 166.111.155.56:5900 China Education and Research Network Center CN unknown
3424 winupd32cfg.exe 92.251.74.10:5900 Melita plc. MT unknown
3424 winupd32cfg.exe 119.38.201.70:5900 Union Life Insurance Co.,Ltd. CN unknown
3424 winupd32cfg.exe 91.125.240.25:5900 British Telecommunications PLC GB unknown
3424 winupd32cfg.exe 153.217.70.121:5900 NTT Communications Corporation JP unknown
3424 winupd32cfg.exe 184.117.87.239:5900 Comcast Cable Communications, LLC US unknown
3424 winupd32cfg.exe 22.94.38.144:5900 US unknown
3424 winupd32cfg.exe 81.28.150.176:5900 GB unknown
3424 winupd32cfg.exe 144.45.144.61:5900 General Services Commission US unknown
3424 winupd32cfg.exe 198.40.47.23:5900 Tomales Bay LAN, LLC US unknown
3424 winupd32cfg.exe 171.31.67.195:5900 MOL Nyrt. HU unknown
3424 winupd32cfg.exe 193.43.220.60:5900 Wissenschaftsladen Dortmund e.V. DE unknown
3424 winupd32cfg.exe 31.250.19.127:5900 Deutsche Telekom AG DE unknown
3424 winupd32cfg.exe 84.249.1.238:5900 Telia Finland Oyj FI unknown
3424 winupd32cfg.exe 99.181.120.101:5900 AT&T Services, Inc. US unknown
3424 winupd32cfg.exe 22.108.167.166:5900 US unknown
3424 winupd32cfg.exe 29.218.8.29:5900 US unknown
3424 winupd32cfg.exe 32.130.53.187:5900 AT&T Global Network Services, LLC US unknown
3424 winupd32cfg.exe 63.114.113.177:5900 MCI Communications Services, Inc. d/b/a Verizon Business US unknown
3424 winupd32cfg.exe 157.70.63.101:5900 JP unknown
3424 winupd32cfg.exe 108.223.150.185:5900 AT&T Services, Inc. US unknown
3424 winupd32cfg.exe 153.185.125.48:5900 NTT Communications Corporation JP unknown
3424 winupd32cfg.exe 31.88.88.117:5900 EE Limited GB unknown
3424 winupd32cfg.exe 144.121.57.164:5900 Lightower Fiber Networks I, LLC US unknown
3424 winupd32cfg.exe 71.61.246.100:5900 Comcast Cable Communications, LLC US unknown
3424 winupd32cfg.exe 176.19.225.63:5900 Bayanat Al-Oula For Network Services SA unknown
3424 winupd32cfg.exe 68.235.117.165:5900 Paul Bunyan Communications US unknown
3424 winupd32cfg.exe 154.28.64.16:5900 Cogent Communications US unknown
3424 winupd32cfg.exe 183.225.118.207:5900 Guangdong Mobile Communication Co.Ltd. CN unknown
3424 winupd32cfg.exe 43.157.71.25:5900 JP unknown
3424 winupd32cfg.exe 31.56.38.42:5900 Aria Shatel Company Ltd IR unknown
3424 winupd32cfg.exe 60.250.22.28:5900 Data Communication Business Group TW unknown
3424 winupd32cfg.exe 49.57.140.30:5900 Korea Telecom KR unknown
3424 winupd32cfg.exe 187.166.232.50:5900 Axtel, S.A.B. de C.V. MX unknown
3424 winupd32cfg.exe 52.77.140.242:5900 Amazon.com, Inc. SG unknown
3424 winupd32cfg.exe 108.45.102.28:5900 MCI Communications Services, Inc. d/b/a Verizon Business US unknown
3424 winupd32cfg.exe 153.54.175.117:5900 NCR Corporation US unknown
3424 winupd32cfg.exe 30.105.80.57:5900 US unknown
3424 winupd32cfg.exe 171.176.169.34:5900 US unknown
3424 winupd32cfg.exe 155.156.18.81:5900 US unknown
3424 winupd32cfg.exe 69.106.32.12:5900 AT&T Services, Inc. US unknown
3424 winupd32cfg.exe 186.136.156.97:5900 CABLEVISION S.A. AR unknown
3424 winupd32cfg.exe 196.255.63.107:5900 UOFS ZA unknown
3424 winupd32cfg.exe 152.30.132.119:5900 MCNC US unknown
3424 winupd32cfg.exe 137.205.119.137:5900 University of Warwick GB unknown
3424 winupd32cfg.exe 162.19.186.185:5900 US unknown
3424 winupd32cfg.exe 111.124.129.219:5900 No.31,Jin-rong Street CN unknown
3424 winupd32cfg.exe 124.215.253.250:5900 KDDI CORPORATION JP unknown
3424 winupd32cfg.exe 125.164.74.6:5900 PT Telekomunikasi Indonesia ID unknown
3424 winupd32cfg.exe 184.206.84.173:5900 Sprint US unknown
3424 winupd32cfg.exe 103.199.89.56:5900 GULBARGA MEGA SPEED PRIVATE LIMITED IN unknown
3424 winupd32cfg.exe 63.10.115.229:5900 MCI Communications Services, Inc. d/b/a Verizon Business US unknown
3424 winupd32cfg.exe 144.207.196.146:5900 US unknown
3424 winupd32cfg.exe 190.227.83.188:5900 Telecom Argentina S.A. AR unknown
3424 winupd32cfg.exe 23.22.226.42:5900 Amazon.com, Inc. US unknown
3424 winupd32cfg.exe 190.46.189.42:5900 VTR BANDA ANCHA S.A. CL unknown
3424 winupd32cfg.exe 199.236.105.119:5900 NTT America, Inc. US unknown
3424 winupd32cfg.exe 113.250.150.170:5900 No.31,Jin-rong Street CN unknown
3424 winupd32cfg.exe 44.251.141.125:5900 University of California, San Diego US unknown
3424 winupd32cfg.exe 84.37.190.57:5900 EASYNET Easynet Global Services FR unknown
3424 winupd32cfg.exe 77.72.122.51:5900 Chaika Telecom Petersburg Limited Company RU unknown
3424 winupd32cfg.exe 87.233.198.47:5900 True B.V. NL unknown
3424 winupd32cfg.exe 138.184.166.124:5900 US unknown
3424 winupd32cfg.exe 30.9.88.185:5900 US unknown
3424 winupd32cfg.exe 105.54.211.170:5900 SAFARICOM-LIMITED KE unknown
3424 winupd32cfg.exe 169.123.161.95:5900 US unknown
3424 winupd32cfg.exe 147.25.173.119:5900 US unknown
3424 winupd32cfg.exe 122.244.180.167:5900 No.31,Jin-rong Street CN unknown
3424 winupd32cfg.exe 187.137.11.143:5900 Uninet S.A. de C.V. MX unknown
3424 winupd32cfg.exe 72.21.116.232:5900 Education Service Center Region XV US unknown
3424 winupd32cfg.exe 117.150.28.231:5900 Guangdong Mobile Communication Co.Ltd. CN unknown
3424 winupd32cfg.exe 170.128.163.73:5900 Huntington National Bank US unknown
3424 winupd32cfg.exe 98.63.214.80:5900 Comcast Cable Communications, LLC US unknown
3424 winupd32cfg.exe 126.170.221.68:5900 Softbank BB Corp. JP unknown
3424 winupd32cfg.exe 135.204.207.28:5900 US unknown
3424 winupd32cfg.exe 191.107.73.38:5900 CO unknown
3424 winupd32cfg.exe 77.80.199.56:5900 SE unknown
3424 winupd32cfg.exe 166.145.169.182:5900 Cellco Partnership DBA Verizon Wireless US unknown
3424 winupd32cfg.exe 109.55.3.85:5900 Telecom Italia IT unknown
3424 winupd32cfg.exe 139.255.205.137:5900 Linknet-Fastnet ASN ID unknown
3424 winupd32cfg.exe 90.216.179.115:5900 Sky UK Limited GB unknown
3424 winupd32cfg.exe 198.116.13.103:5900 National Aeronautics and Space Administration US unknown
3424 winupd32cfg.exe 120.159.14.98:5900 Telstra Pty Ltd AU unknown
3424 winupd32cfg.exe 186.198.53.137:5900 Tim Celular S.A. BR unknown
3424 winupd32cfg.exe 29.182.194.21:5900 US unknown
3424 winupd32cfg.exe 138.215.56.253:5900 SE unknown
3424 winupd32cfg.exe 197.66.164.193:5900 TICSA-ASN ZA unknown
3424 winupd32cfg.exe 168.126.198.1:5900 Korea Telecom KR unknown
3424 winupd32cfg.exe 116.31.39.130:5900 No.31,Jin-rong Street CN unknown
3424 winupd32cfg.exe 179.161.60.85:5900 TELEFÔNICA BRASIL S.A BR unknown
3424 winupd32cfg.exe 34.163.25.27:5900 US unknown
3424 winupd32cfg.exe 100.54.115.3:5900 Sprint Personal Communications Systems US unknown
3424 winupd32cfg.exe 70.102.100.184:5900 Integra Telecom, Inc. US unknown
3424 winupd32cfg.exe 77.38.86.16:5900 Telemach d.o.o. SI unknown
3424 winupd32cfg.exe 105.177.184.203:5900 ZA unknown
3424 winupd32cfg.exe 166.154.99.77:5900 Cellco Partnership DBA Verizon Wireless US unknown
3424 winupd32cfg.exe 169.193.212.250:5900 US unknown
3424 winupd32cfg.exe 147.183.72.36:5900 US unknown
3424 winupd32cfg.exe 184.31.227.41:5900 Telia Company AB US unknown
3424 winupd32cfg.exe 197.152.196.238:5900 airtel-tz-as TZ unknown
3424 winupd32cfg.exe 111.115.175.155:5900 China Education and Research Network Center CN unknown
3424 winupd32cfg.exe 161.186.34.237:5900 US unknown
3424 winupd32cfg.exe 21.240.95.149:5900 US unknown
3424 winupd32cfg.exe 40.204.157.41:5900 Eli Lilly and Company US unknown
3424 winupd32cfg.exe 79.8.221.55:5900 Telecom Italia IT unknown
3424 winupd32cfg.exe 32.174.21.61:5900 AT&T Global Network Services, LLC US unknown
3424 winupd32cfg.exe 108.71.14.139:5900 AT&T Services, Inc. US unknown
3424 winupd32cfg.exe 20.14.37.8:5900 US unknown
3424 winupd32cfg.exe 54.36.203.59:5900 OVH SAS FR unknown
3424 winupd32cfg.exe 85.199.65.105:5900 e.discom Telekommunikation GmbH DE unknown
3424 winupd32cfg.exe 111.90.207.54:5900 EZNETWORKING SOLUTIONS PTE. LTD. SG unknown
3424 winupd32cfg.exe 131.209.177.162:5900 US unknown
3424 winupd32cfg.exe 97.94.23.68:5900 Charter Communications US unknown
3424 winupd32cfg.exe 157.242.9.93:5900 Loyola Marymount University US unknown
3424 winupd32cfg.exe 125.28.87.192:5900 KDDI CORPORATION JP unknown
3424 winupd32cfg.exe 173.185.108.149:5900 Windstream Communications Inc US unknown
3424 winupd32cfg.exe 65.65.112.255:5900 AT&T Services, Inc. US unknown
3424 winupd32cfg.exe 117.222.13.8:5900 National Internet Backbone IN unknown
3424 winupd32cfg.exe 80.114.92.170:5900 Ziggo NL unknown
3424 winupd32cfg.exe 152.42.188.216:5900 MCNC US unknown
3424 winupd32cfg.exe 174.182.58.88:5900 Comcast Cable Communications, LLC US unknown
3424 winupd32cfg.exe 161.227.15.151:5900 Newmarket Corporation US unknown
3424 winupd32cfg.exe 176.175.186.244:5900 Bouygues Telecom SA FR unknown
3424 winupd32cfg.exe 142.30.45.243:5900 Province of British Columbia CA unknown
3424 winupd32cfg.exe 65.141.106.14:5900 Qwest Communications Company, LLC US unknown
3424 winupd32cfg.exe 65.85.145.112:5900 MegaPath Networks Inc. US unknown
3424 winupd32cfg.exe 80.85.160.175:5900 VWE Bureau voor Voertuigdocumentatie en -informatie B.V. NL unknown
3424 winupd32cfg.exe 45.214.137.71:5900 ZAIN-ZAMBIA ZM unknown
3424 winupd32cfg.exe 33.118.219.58:5900 US unknown
3424 winupd32cfg.exe 82.85.21.209:5900 Tiscali SpA IT unknown
3424 winupd32cfg.exe 69.90.3.162:5900 Peer 1 Network (USA) Inc. CA unknown
3424 winupd32cfg.exe 99.91.83.89:5900 AT&T Services, Inc. US unknown
3424 winupd32cfg.exe 91.53.107.94:5900 Deutsche Telekom AG DE unknown
3424 winupd32cfg.exe 52.254.189.69:5900 Microsoft Corporation US unknown
3424 winupd32cfg.exe 20.255.129.197:5900 US unknown
3424 winupd32cfg.exe 30.167.62.16:5900 US unknown
3424 winupd32cfg.exe 66.162.38.154:5900 Level 3 Communications, Inc. US unknown
3424 winupd32cfg.exe 163.16.142.69:5900 Taiwan Academic Network (TANet) Information Center TW unknown
3424 winupd32cfg.exe 183.11.244.106:5900 No.31,Jin-rong Street CN unknown
3424 winupd32cfg.exe 199.236.229.181:5900 NTT America, Inc. US unknown
3424 winupd32cfg.exe 85.87.151.4:5900 Euskaltel S.A. ES unknown
3424 winupd32cfg.exe 156.240.105.18:5900 MacroLAN ZA unknown
3424 winupd32cfg.exe 161.51.41.91:5900 Amnet IT Services Pty Ltd US unknown
3424 winupd32cfg.exe 96.237.115.215:5900 MCI Communications Services, Inc. d/b/a Verizon Business US unknown
3424 winupd32cfg.exe 144.79.241.255:5900 –– unknown
3424 winupd32cfg.exe 182.11.41.161:5900 PT. Telekomunikasi Selular ID unknown
3424 winupd32cfg.exe 134.58.12.253:5900 BELNET BE unknown
3424 winupd32cfg.exe 74.208.93.144:5900 1&1 Internet SE US unknown
3424 winupd32cfg.exe 154.15.101.16:5900 Interoute Communications Limited GB unknown
3424 winupd32cfg.exe 64.161.218.139:5900 AT&T Internet Services US unknown
3424 winupd32cfg.exe 57.244.9.101:5900 Societe Internationale de Telecommunications Aeronautiques BE unknown
3424 winupd32cfg.exe 153.67.185.99:5900 NCR Corporation US unknown
3424 winupd32cfg.exe 185.22.43.74:5900 FR unknown
3424 winupd32cfg.exe 163.233.110.219:5900 Macquarie Telecom AU unknown
3424 winupd32cfg.exe 167.100.209.226:5900 US unknown
3424 winupd32cfg.exe 134.48.232.168:5900 Marquette University US unknown
3424 winupd32cfg.exe 196.250.80.126:5900 CanalBox-Benin-AS BJ unknown
3424 winupd32cfg.exe 42.60.176.21:5900 Singtel Fibre Broadband SG unknown
3424 winupd32cfg.exe 86.19.173.59:5900 Virgin Media Limited GB unknown
3424 winupd32cfg.exe 120.242.23.119:5900 Guangdong Mobile Communication Co.Ltd. CN unknown
–– –– 82.111.70.153:5900 EASYNET Easynet Global Services GB unknown
3424 winupd32cfg.exe 182.143.228.38:5900 No.31,Jin-rong Street CN unknown
–– –– 177.58.50.5:5900 Claro S/A BR unknown
–– –– 178.122.87.117:5900 Republican Unitary Telecommunication Enterprise Beltelecom BY unknown
–– –– 108.217.10.10:5900 AT&T Services, Inc. US unknown
–– –– 135.185.194.105:5900 Alcatel-Lucent US unknown
3424 winupd32cfg.exe 137.115.177.110:5900 MW unknown
3424 winupd32cfg.exe 105.254.3.174:5900 ZA unknown
3424 winupd32cfg.exe 79.205.117.208:5900 Deutsche Telekom AG DE unknown
3424 winupd32cfg.exe 116.97.176.100:5900 Viettel Corporation VN unknown
3424 winupd32cfg.exe 163.101.111.116:5900 FR unknown
3424 winupd32cfg.exe 105.17.203.35:5900 SEACOM-AS MU unknown
3424 winupd32cfg.exe 23.121.32.203:5900 AT&T Services, Inc. US unknown
3424 winupd32cfg.exe 37.246.91.188:5900 S.H.A. Trans S.R.L. MD unknown
3424 winupd32cfg.exe 114.203.72.7:5900 SK Broadband Co Ltd KR suspicious
3424 winupd32cfg.exe 65.9.114.193:5900 AT&T Services, Inc. US unknown
3424 winupd32cfg.exe 40.13.81.228:5900 Eli Lilly and Company US unknown
3424 winupd32cfg.exe 84.220.156.214:5900 Tiscali SpA IT unknown
3424 winupd32cfg.exe 173.103.221.144:5900 Sprint US unknown
3424 winupd32cfg.exe 108.116.247.234:5900 Sprint US unknown
3424 winupd32cfg.exe 142.33.151.215:5900 Province of British Columbia CA unknown
3424 winupd32cfg.exe 149.30.6.169:5900 Cogent Communications US unknown
3424 winupd32cfg.exe 155.118.126.223:5900 The Procter and Gamble Company US unknown
3424 winupd32cfg.exe 58.64.102.42:5900 AIS Fibre TH unknown
3424 winupd32cfg.exe 45.251.189.54:5900 CN unknown
3424 winupd32cfg.exe 136.128.122.35:5900 US unknown
3424 winupd32cfg.exe 141.22.142.110:5900 Verein zur Foerderung eines Deutschen Forschungsnetzes e.V. DE unknown
–– –– 164.142.214.189:5900 IT unknown
–– –– 60.178.179.21:5900 No.31,Jin-rong Street CN unknown
–– –– 76.240.29.88:5900 AT&T Services, Inc. US unknown
–– –– 171.233.223.145:5900 Viettel Corporation VN unknown
–– –– 122.125.136.123:5900 Data Communication Business Group TW unknown
3424 winupd32cfg.exe 81.60.45.153:5900 Vodafone Ono, S.A. ES unknown
3424 winupd32cfg.exe 195.228.141.97:5900 Magyar Telekom plc. HU unknown
3424 winupd32cfg.exe 61.76.174.172:5900 Korea Telecom KR unknown
3424 winupd32cfg.exe 120.104.151.87:5900 Taiwan Academic Network (TANet) Information Center TW unknown
3424 winupd32cfg.exe 22.85.253.21:5900 US unknown
3424 winupd32cfg.exe 134.239.181.101:5900 SA unknown
3424 winupd32cfg.exe 151.141.87.161:5900 BellSouth.net Inc. US unknown
3424 winupd32cfg.exe 29.235.241.207:5900 US unknown
3424 winupd32cfg.exe 130.234.230.93:5900 Tieteen tietotekniikan keskus Oy FI unknown
3424 winupd32cfg.exe 116.142.182.225:5900 CN unknown
3424 winupd32cfg.exe 169.208.29.46:5900 KR unknown
3424 winupd32cfg.exe 22.169.17.15:5900 US unknown
3424 winupd32cfg.exe 129.240.104.72:5900 UNINETT AS NO unknown
3424 winupd32cfg.exe 182.163.51.147:5900 FreeBit Co.,Ltd. JP unknown
–– –– 126.47.145.82:5900 Softbank BB Corp. JP unknown
3424 winupd32cfg.exe 129.69.149.78:5900 Universitaet Stuttgart DE unknown
–– –– 195.63.53.187:5900 ecotel communication ag DE unknown
–– –– 130.70.143.172:5900 University of Louisiana at Lafayette US unknown
3424 winupd32cfg.exe 129.111.207.226:5900 University of Texas US unknown
3424 winupd32cfg.exe 163.176.15.43:5900 US unknown
3424 winupd32cfg.exe 58.177.210.74:5900 Hong Kong Broadband Network Ltd. HK unknown
3424 winupd32cfg.exe 132.95.62.222:5900 DoD Network Information Center US unknown
3424 winupd32cfg.exe 164.118.178.18:5900 US unknown
3424 winupd32cfg.exe 36.38.217.32:5900 CJ-HELLOVISION KR unknown
3424 winupd32cfg.exe 55.96.40.208:5900 DoD Network Information Center US unknown
3424 winupd32cfg.exe 179.44.7.242:5900 VE unknown
3424 winupd32cfg.exe 108.233.86.11:5900 AT&T Services, Inc. US unknown
3424 winupd32cfg.exe 187.123.251.121:5900 BR unknown
3424 winupd32cfg.exe 57.82.248.173:5900 Societe Internationale de Telecommunications Aeronautiques ZA unknown
3424 winupd32cfg.exe 125.228.177.7:5900 Data Communication Business Group TW unknown
3424 winupd32cfg.exe 20.97.237.192:5900 US unknown
3424 winupd32cfg.exe 28.167.225.145:5900 US unknown
3424 winupd32cfg.exe 105.154.35.46:5900 MT-MPLS MA unknown
3424 winupd32cfg.exe 130.24.135.67:5900 GB unknown
3424 winupd32cfg.exe 176.87.87.159:5900 Telefonica De Espana ES unknown
3424 winupd32cfg.exe 47.32.30.177:5900 Charter Communications US unknown
3424 winupd32cfg.exe 107.221.223.132:5900 AT&T Services, Inc. US unknown
3424 winupd32cfg.exe 111.107.48.54:5900 KDDI CORPORATION JP unknown
3424 winupd32cfg.exe 89.147.26.3:5900 SA unknown
3424 winupd32cfg.exe 126.230.130.5:5900 Softbank BB Corp. JP unknown
3424 winupd32cfg.exe 97.125.44.131:5900 Qwest Communications Company, LLC US unknown
3424 winupd32cfg.exe 156.187.228.199:5900 Etisalat Misr EG unknown
3424 winupd32cfg.exe 156.213.205.90:5900 TE-AS EG unknown
3424 winupd32cfg.exe 21.92.234.130:5900 US unknown
3424 winupd32cfg.exe 84.135.130.134:5900 Deutsche Telekom AG DE unknown
3424 winupd32cfg.exe 167.41.23.181:5900 CA unknown
3424 winupd32cfg.exe 41.159.223.105:5900 Gabon-Telecom GA unknown
3424 winupd32cfg.exe 38.46.206.13:5900 Cogent Communications US unknown
3424 winupd32cfg.exe 39.91.178.18:5900 CHINA UNICOM China169 Backbone CN unknown
3424 winupd32cfg.exe 193.63.153.83:5900 Jisc Services Limited GB unknown
3424 winupd32cfg.exe 135.229.243.98:5900 Alcatel-Lucent US unknown
3424 winupd32cfg.exe 105.35.30.56:5900 MOBINIL EG unknown
3424 winupd32cfg.exe 84.51.29.125:5900 Tellcom Iletisim Hizmetleri A.s. TR unknown
3424 winupd32cfg.exe 99.33.108.114:5900 AT&T Services, Inc. US unknown
3424 winupd32cfg.exe 162.138.214.7:5900 U.S. Securities & Exchange Commission US unknown
3424 winupd32cfg.exe 48.165.15.209:5900 US unknown
3424 winupd32cfg.exe 71.50.250.130:5900 Qwest Communications Company, LLC US unknown
3424 winupd32cfg.exe 34.187.225.251:5900 US unknown
3424 winupd32cfg.exe 100.199.118.178:5900 T-Mobile USA, Inc. US unknown
3424 winupd32cfg.exe 135.218.115.245:5900 US unknown
3424 winupd32cfg.exe 72.249.52.201:5900 Colo4, LLC US unknown
3424 winupd32cfg.exe 100.45.3.29:5900 Wayport, Inc. US unknown
3424 winupd32cfg.exe 136.131.4.120:5900 US unknown
3424 winupd32cfg.exe 162.143.30.109:5900 US unknown
3424 winupd32cfg.exe 155.180.41.127:5900 US unknown
3424 winupd32cfg.exe 175.126.45.212:5900 SK Broadband Co Ltd KR unknown
3424 winupd32cfg.exe 178.41.250.200:5900 Slovak Telecom, a. s. SK unknown
3424 winupd32cfg.exe 179.94.46.174:5900 TELEFÔNICA BRASIL S.A BR unknown
3424 winupd32cfg.exe 190.170.12.222:5900 Universidad del Zulia VE unknown
3424 winupd32cfg.exe 42.207.216.243:5900 China Broadcasting TV Net CN unknown
3424 winupd32cfg.exe 107.191.241.238:5900 Root Level Technology, LLC US unknown
3424 winupd32cfg.exe 182.26.109.141:5900 INDOSATM2 ASN ID unknown
3424 winupd32cfg.exe 118.203.38.198:5900 China Education and Research Network Center CN unknown
3424 winupd32cfg.exe 145.126.19.171:5900 NL unknown
3424 winupd32cfg.exe 152.240.106.54:5900 TELEFÔNICA BRASIL S.A BR unknown
3424 winupd32cfg.exe 68.74.113.63:5900 AT&T Services, Inc. US unknown
3424 winupd32cfg.exe 107.70.48.68:5900 US unknown
3424 winupd32cfg.exe 166.92.159.170:5900 US unknown
3424 winupd32cfg.exe 92.129.161.179:5900 Orange FR unknown
3424 winupd32cfg.exe 101.212.38.115:5900 Aircel Ltd. IN unknown
3424 winupd32cfg.exe 122.180.150.23:5900 Bharti Airtel Ltd., Telemedia Services IN unknown
3424 winupd32cfg.exe 163.18.29.168:5900 Taiwan Academic Network (TANet) Information Center TW unknown
3424 winupd32cfg.exe 184.182.113.35:5900 Cox Communications Inc. US unknown
3424 winupd32cfg.exe 150.124.234.10:5900 Compucom Systems US unknown
3424 winupd32cfg.exe 47.3.237.148:5900 CA unknown
3424 winupd32cfg.exe 58.8.153.215:5900 TRUE INTERNET Co.,Ltd. TH unknown
3424 winupd32cfg.exe 161.87.180.206:5900 NL unknown
3424 winupd32cfg.exe 169.60.201.126:5900 US unknown
3424 winupd32cfg.exe 184.214.254.138:5900 US unknown
3424 winupd32cfg.exe 137.72.1.72:5900 US unknown
3424 winupd32cfg.exe 158.72.73.253:5900 U.S. Dept. of Health and Human Services US unknown
3424 winupd32cfg.exe 188.17.5.58:5900 PJSC Rostelecom RU unknown
3424 winupd32cfg.exe 103.200.215.254:5900 Fivenetwork Solution India Pvt Ltd Internet IN unknown
3424 winupd32cfg.exe 108.71.255.87:5900 AT&T Services, Inc. US unknown
3424 winupd32cfg.exe 153.86.5.33:5900 NCR Corporation US unknown
3424 winupd32cfg.exe 33.95.87.223:5900 US unknown
3424 winupd32cfg.exe 96.158.126.230:5900 Comcast Cable Communications, LLC US unknown
3424 winupd32cfg.exe 143.194.218.62:5900 US unknown
3424 winupd32cfg.exe 71.164.208.116:5900 Frontier Communications of America, Inc. US unknown
3424 winupd32cfg.exe 29.55.68.199:5900 US unknown
3424 winupd32cfg.exe 72.100.178.129:5900 Cellco Partnership DBA Verizon Wireless US unknown
3424 winupd32cfg.exe 87.25.149.125:5900 Telecom Italia IT unknown
–– –– 27.68.145.43:5900 Viettel Corporation VN unknown
3424 winupd32cfg.exe 39.180.167.120:5900 China Mobile communications corporation CN unknown

DNS requests

No DNS requests.

Threats

No threats detected.

Debug output strings

No debug info.