Update.exe is malicious or no

Question

Good morning,

I detect file update.exe with hash https://www.virustotal.com/gui/file/e1832d3d09623ba759fa89028200c359b6d03d80a05e54d6fccd48e3801cbd5f in my company and i found ip traffic cnc in behavior update.exe and hash malicious in virus total

UDP a83f:8110:8000:0:0:0:8000:0:53

UDP 192.168.0.47:137

TCP 20.99.185.48:443

TCP 52.154.209.174:443

TCP 23.44.252.205:80 (www.microsoft.com)

TCP 152.195.19.97:443 (res.public.onecdn.static.microsoft)

TCP 20.99.186.246:443

This is legitimate or malicious? Because i found ip microsoft

*** Moved from Windows / Other/Unknown / Security and privacy / Security and privacy ***

Answer 1

Hello

Thank you for posting in Microsoft Community forum.

Based on the description, I understand your question is related to security and virus.

Since there are no engineers dedicated to security and virus in this forum. in order to be able to get a quick and effective handling of your issue, I recommend that you repost your question in the Q&A forum, where there will be a dedicated engineer to give you a professional and effective reply.

Here is the link for Q&A forum.

Questions - Microsoft Q&A

Click the "Ask a Question" button in the upper right corner to post your question and select any tags related to your productions.

Thank you for your understanding and support. If you have any question or concern, please feel free to let us know.

Have a nice day.

Best Regards,

Molly