ChipLogin Support Tool

This address relays attended remote-support sessions for ChipLogin. A customer runs the Support Tool and reads a session code and password to a ChipLogin technician; the technician (or their AI assistant) then works on the machine while the customer watches.

What it does

• Runs commands and reads, writes and transfers files.
• Takes screenshots when asked.
• Every action is shown on the customer's screen, requires the customer's on-screen approval, and is written to a signed log. The customer has a Stop button at all times.

What it does not do

• No install: a single portable executable. No service, no autostart, no registry persistence. It lives only while its window is open.
• No code injection, no packing or obfuscation, no AMSI bypass. It calls PowerShell normally, so it appears in your script-block logs.
• The relay you are looking at cannot read the traffic and never sees the session password.

Where it connects

Outbound only, to this host over TLS on port 443 (honouring your system proxy). The connection between the customer's tool and the technician is end-to-end encrypted; this relay forwards only opaque frames it cannot decrypt.