Overview

overview

1

Static

static

1

0405027fc7...8.html

windows7-x64

1

0405027fc7...8.html

windows10-2004-x64

1

Analysis

  • max time kernel
    143s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/04/2024, 00:53 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    0405027fc7d332b36191bfe5c8a33f4f_JaffaCakes118.html

  • Size

    138KB

  • MD5

    0405027fc7d332b36191bfe5c8a33f4f

  • SHA1

    fcd40a609767ae2dd94033c37f5d7fec40cef8fe

  • SHA256

    3e6ae0996aa23b1e140dd76d7e1656d7f552fa463b4342819d90eba095b5e1b0

  • SHA512

    5502caa6a697e7b32fd76821ac34a60b4d3f3918dc8f224af7de195d51442fcd6323cfcf710f0711957ca6eef935717d4ffe1bab8eb19a27c2dea4ea617e6721

  • SSDEEP

    1536:s8F9K0/qyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy+:s8WyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\0405027fc7d332b36191bfe5c8a33f4f_JaffaCakes118.html
    1⤵
      PID:2320
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=17 --mojo-platform-channel-handle=5204 --field-trial-handle=2236,i,5367110156796017614,12594004256180761011,262144 --variations-seed-version /prefetch:1
      1⤵
        PID:3928
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=18 --mojo-platform-channel-handle=3656 --field-trial-handle=2236,i,5367110156796017614,12594004256180761011,262144 --variations-seed-version /prefetch:1
        1⤵
          PID:3344
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=5996 --field-trial-handle=2236,i,5367110156796017614,12594004256180761011,262144 --variations-seed-version /prefetch:8
          1⤵
            PID:628
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=20 --mojo-platform-channel-handle=1344 --field-trial-handle=2236,i,5367110156796017614,12594004256180761011,262144 --variations-seed-version /prefetch:1
            1⤵
              PID:4908
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --no-appcompat-clear --mojo-platform-channel-handle=5472 --field-trial-handle=2236,i,5367110156796017614,12594004256180761011,262144 --variations-seed-version /prefetch:8
              1⤵
                PID:4556

              Network

              • flag-us
                DNS
                nav-edge.smartscreen.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                nav-edge.smartscreen.microsoft.com
                IN A
                Response
                nav-edge.smartscreen.microsoft.com
                IN CNAME
                tm-prod-wd-csp-edge.trafficmanager.net
                tm-prod-wd-csp-edge.trafficmanager.net
                IN CNAME
                prod-agic-uw-2.ukwest.cloudapp.azure.com
                prod-agic-uw-2.ukwest.cloudapp.azure.com
                IN A
                51.140.244.186
              • flag-us
                DNS
                nav-edge.smartscreen.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                nav-edge.smartscreen.microsoft.com
                IN Unknown
                Response
                nav-edge.smartscreen.microsoft.com
                IN CNAME
                tm-prod-wd-csp-edge.trafficmanager.net
                tm-prod-wd-csp-edge.trafficmanager.net
                IN CNAME
                prod-agic-uw-1.ukwest.cloudapp.azure.com
              • flag-us
                DNS
                business.bing.com
                Remote address:
                8.8.8.8:53
                Request
                business.bing.com
                IN A
                Response
                business.bing.com
                IN CNAME
                business-bing-com.b-0005.b-msedge.net
                business-bing-com.b-0005.b-msedge.net
                IN CNAME
                b-0005.b-msedge.net
                b-0005.b-msedge.net
                IN A
                13.107.6.158
              • flag-us
                DNS
                business.bing.com
                Remote address:
                8.8.8.8:53
                Request
                business.bing.com
                IN Unknown
                Response
                business.bing.com
                IN CNAME
                business-bing-com.b-0005.b-msedge.net
                business-bing-com.b-0005.b-msedge.net
                IN CNAME
                b-0005.b-msedge.net
              • flag-us
                DNS
                www.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                www.microsoft.com
                IN A
                Response
                www.microsoft.com
                IN CNAME
                www.microsoft.com-c-3.edgekey.net
                www.microsoft.com-c-3.edgekey.net
                IN CNAME
                www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                IN CNAME
                e13678.dscb.akamaiedge.net
                e13678.dscb.akamaiedge.net
                IN A
                23.55.97.181
              • flag-us
                DNS
                www.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                www.microsoft.com
                IN A
              • flag-us
                DNS
                www.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                www.microsoft.com
                IN Unknown
              • flag-us
                DNS
                186.244.140.51.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                186.244.140.51.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                186.244.140.51.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                186.244.140.51.in-addr.arpa
                IN PTR
              • flag-us
                DNS
                186.244.140.51.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                186.244.140.51.in-addr.arpa
                IN PTR
              • flag-us
                DNS
                159.113.53.23.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                159.113.53.23.in-addr.arpa
                IN PTR
                Response
                159.113.53.23.in-addr.arpa
                IN PTR
                a23-53-113-159deploystaticakamaitechnologiescom
              • flag-us
                DNS
                159.113.53.23.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                159.113.53.23.in-addr.arpa
                IN PTR
              • flag-us
                DNS
                159.113.53.23.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                159.113.53.23.in-addr.arpa
                IN PTR
              • flag-us
                DNS
                www.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                www.microsoft.com
                IN A
              • flag-us
                DNS
                www.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                www.microsoft.com
                IN Unknown
              • flag-us
                DNS
                241.150.49.20.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                241.150.49.20.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                bzib.nelreports.net
                Remote address:
                8.8.8.8:53
                Request
                bzib.nelreports.net
                IN A
                Response
                bzib.nelreports.net
                IN CNAME
                bzib.nelreports.net.akamaized.net
                bzib.nelreports.net.akamaized.net
                IN CNAME
                a416.dscd.akamai.net
                a416.dscd.akamai.net
                IN A
                104.109.143.150
                a416.dscd.akamai.net
                IN A
                104.109.143.158
              • flag-us
                DNS
                bzib.nelreports.net
                Remote address:
                8.8.8.8:53
                Request
                bzib.nelreports.net
                IN Unknown
                Response
                bzib.nelreports.net
                IN CNAME
                bzib.nelreports.net.akamaized.net
                bzib.nelreports.net.akamaized.net
                IN CNAME
                a416.dscd.akamai.net
              • flag-us
                DNS
                227.66.18.2.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                227.66.18.2.in-addr.arpa
                IN PTR
                Response
                227.66.18.2.in-addr.arpa
                IN PTR
                a2-18-66-227deploystaticakamaitechnologiescom
              • flag-us
                DNS
                www.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                www.microsoft.com
                IN A
                Response
                www.microsoft.com
                IN CNAME
                www.microsoft.com-c-3.edgekey.net
                www.microsoft.com-c-3.edgekey.net
                IN CNAME
                www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                IN CNAME
                e13678.dscb.akamaiedge.net
                e13678.dscb.akamaiedge.net
                IN A
                23.55.97.181
              • flag-us
                DNS
                www.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                www.microsoft.com
                IN A
              • flag-us
                DNS
                150.143.109.104.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                150.143.109.104.in-addr.arpa
                IN PTR
                Response
                150.143.109.104.in-addr.arpa
                IN PTR
                a104-109-143-150deploystaticakamaitechnologiescom
              • flag-us
                DNS
                181.97.55.23.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                181.97.55.23.in-addr.arpa
                IN PTR
                Response
                181.97.55.23.in-addr.arpa
                IN PTR
                a23-55-97-181deploystaticakamaitechnologiescom
              • flag-us
                DNS
                www.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                www.microsoft.com
                IN A
                Response
                www.microsoft.com
                IN CNAME
                www.microsoft.com-c-3.edgekey.net
                www.microsoft.com-c-3.edgekey.net
                IN CNAME
                www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                IN CNAME
                e13678.dscb.akamaiedge.net
                e13678.dscb.akamaiedge.net
                IN A
                23.55.97.181
              • flag-us
                DNS
                67.31.126.40.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                67.31.126.40.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                nw-umwatson.events.data.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                nw-umwatson.events.data.microsoft.com
                IN A
                Response
                nw-umwatson.events.data.microsoft.com
                IN CNAME
                blobcollector.events.data.trafficmanager.net
                blobcollector.events.data.trafficmanager.net
                IN CNAME
                onedsblobprdcus15.centralus.cloudapp.azure.com
                onedsblobprdcus15.centralus.cloudapp.azure.com
                IN A
                52.182.143.212
              • flag-us
                POST
                https://nw-umwatson.events.data.microsoft.com/Telemetry.Request
                Remote address:
                52.182.143.212:443
                Request
                POST /Telemetry.Request HTTP/1.1
                Connection: Keep-Alive
                Content-Type: application/xml
                User-Agent: Crashpad/0.8.0 WinHTTP/10.0.19041.1151 Windows_NT/10.0.19041.1202 (x64)
                Content-Length: 3685
                Host: nw-umwatson.events.data.microsoft.com
                Response
                HTTP/1.1 200 200 OK
                Content-Length: 634
                Content-Type: text/xml
                Server: Microsoft-HTTPAPI/2.0
                Strict-Transport-Security: max-age=31536000
                Date: Sun, 28 Apr 2024 00:53:34 GMT
              • flag-us
                DNS
                212.143.182.52.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                212.143.182.52.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                58.55.71.13.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                58.55.71.13.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                edgestatic.azureedge.net
                Remote address:
                8.8.8.8:53
                Request
                edgestatic.azureedge.net
                IN A
                Response
                edgestatic.azureedge.net
                IN CNAME
                edgestatic.afd.azureedge.net
                edgestatic.afd.azureedge.net
                IN CNAME
                azureedge-t-prod.trafficmanager.net
                azureedge-t-prod.trafficmanager.net
                IN CNAME
                shed.dual-low.part-0036.t-0009.t-msedge.net
                shed.dual-low.part-0036.t-0009.t-msedge.net
                IN CNAME
                part-0036.t-0009.t-msedge.net
                part-0036.t-0009.t-msedge.net
                IN A
                13.107.246.64
                part-0036.t-0009.t-msedge.net
                IN A
                13.107.213.64
              • flag-us
                DNS
                edgestatic.azureedge.net
                Remote address:
                8.8.8.8:53
                Request
                edgestatic.azureedge.net
                IN Unknown
                Response
                edgestatic.azureedge.net
                IN CNAME
                edgestatic.afd.azureedge.net
                edgestatic.afd.azureedge.net
                IN CNAME
                azureedge-t-prod.trafficmanager.net
                azureedge-t-prod.trafficmanager.net
                IN CNAME
                shed.dual-low.part-0036.t-0009.t-msedge.net
                shed.dual-low.part-0036.t-0009.t-msedge.net
                IN CNAME
                part-0036.t-0009.t-msedge.net
              • flag-us
                DNS
                c.s-microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                c.s-microsoft.com
                IN A
                Response
                c.s-microsoft.com
                IN CNAME
                c-s.cms.ms.akadns.net
                c-s.cms.ms.akadns.net
                IN CNAME
                c.s-microsoft.com-c.edgekey.net
                c.s-microsoft.com-c.edgekey.net
                IN CNAME
                e13678.dscg.akamaiedge.net
                e13678.dscg.akamaiedge.net
                IN A
                23.53.113.225
              • flag-us
                DNS
                c.s-microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                c.s-microsoft.com
                IN Unknown
                Response
                c.s-microsoft.com
                IN CNAME
                c-s.cms.ms.akadns.net
                c-s.cms.ms.akadns.net
                IN CNAME
                c.s-microsoft.com-c.edgekey.net
                c.s-microsoft.com-c.edgekey.net
                IN CNAME
                e13678.dscg.akamaiedge.net
              • flag-us
                DNS
                wcpstatic.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                wcpstatic.microsoft.com
                IN A
                Response
                wcpstatic.microsoft.com
                IN CNAME
                consentdeliveryfd.azurefd.net
                consentdeliveryfd.azurefd.net
                IN CNAME
                firstparty-azurefd-prod.trafficmanager.net
                firstparty-azurefd-prod.trafficmanager.net
                IN CNAME
                shed.dual-low.part-0036.t-0009.t-msedge.net
                shed.dual-low.part-0036.t-0009.t-msedge.net
                IN CNAME
                part-0036.t-0009.t-msedge.net
                part-0036.t-0009.t-msedge.net
                IN A
                13.107.246.64
                part-0036.t-0009.t-msedge.net
                IN A
                13.107.213.64
              • flag-us
                DNS
                wcpstatic.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                wcpstatic.microsoft.com
                IN Unknown
                Response
                wcpstatic.microsoft.com
                IN CNAME
                consentdeliveryfd.azurefd.net
                consentdeliveryfd.azurefd.net
                IN CNAME
                firstparty-azurefd-prod.trafficmanager.net
                firstparty-azurefd-prod.trafficmanager.net
                IN CNAME
                shed.dual-low.part-0036.t-0009.t-msedge.net
                shed.dual-low.part-0036.t-0009.t-msedge.net
                IN CNAME
                part-0036.t-0009.t-msedge.net
              • flag-us
                DNS
                50.23.12.20.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                50.23.12.20.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                18.31.95.13.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                18.31.95.13.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                228.249.119.40.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                228.249.119.40.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                194.61.62.23.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                194.61.62.23.in-addr.arpa
                IN PTR
                Response
                194.61.62.23.in-addr.arpa
                IN PTR
                a23-62-61-194deploystaticakamaitechnologiescom
              • flag-us
                DNS
                249.197.17.2.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                249.197.17.2.in-addr.arpa
                IN PTR
                Response
                249.197.17.2.in-addr.arpa
                IN PTR
                a2-17-197-249deploystaticakamaitechnologiescom
              • flag-us
                DNS
                30.243.111.52.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                30.243.111.52.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                24.73.42.20.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                24.73.42.20.in-addr.arpa
                IN PTR
                Response
              • 51.140.244.186:443
                nav-edge.smartscreen.microsoft.com
                tls
                1.2kB
                 7.6kB
                 13
                13
              • 13.107.6.158:443
                business.bing.com
                52 B
                 1
              • 51.140.244.186:443
                nav-edge.smartscreen.microsoft.com
                tls
                12.9kB
                 12.8kB
                 32
                30
              • 13.107.6.158:443
                business.bing.com
                tls
                1.9kB
                 9.8kB
                 17
                22
              • 13.107.6.158:443
                business.bing.com
                tls
                1.2kB
                 8.1kB
                 11
                14
              • 104.109.143.150:443
                bzib.nelreports.net
                tls
                2.6kB
                 6.7kB
                 13
                16
              • 23.55.97.181:443
                www.microsoft.com
                tls
                3.9kB
                 22.9kB
                 37
                39
              • 20.231.121.79:80
                46 B
                 1
              • 52.182.143.212:443
                https://nw-umwatson.events.data.microsoft.com/Telemetry.Request
                tls, http
                4.9kB
                 7.6kB
                 13
                11

                HTTP Request

                POST https://nw-umwatson.events.data.microsoft.com/Telemetry.Request

                HTTP Response

                200
              • 13.107.246.64:443
                edgestatic.azureedge.net
                tls
                86.5kB
                 4.6MB
                 1813
                3287
              • 13.107.246.64:443
                edgestatic.azureedge.net
                tls
                1.8kB
                 7.9kB
                 13
                14
              • 13.107.246.64:443
                edgestatic.azureedge.net
                tls
                1.8kB
                 7.9kB
                 13
                14
              • 13.107.246.64:443
                edgestatic.azureedge.net
                tls
                7.9kB
                 272.5kB
                 125
                213
              • 13.107.246.64:443
                wcpstatic.microsoft.com
                tls
                4.3kB
                 91.0kB
                 53
                78
              • 13.107.246.64:443
                wcpstatic.microsoft.com
                46 B
                 40 B
                 1
                1
              • 23.62.61.194:443
                www.bing.com
                tls
                1.0kB
                 5.1kB
                 9
                11
              • 23.62.61.194:443
                www.bing.com
                tls
                1.3kB
                 906 B
                 7
                7
              • 8.8.8.8:53
                nav-edge.smartscreen.microsoft.com
                dns
                80 B
                 199 B
                 1
                1

                DNS Request

                nav-edge.smartscreen.microsoft.com

                DNS Response

                51.140.244.186

              • 8.8.8.8:53
                nav-edge.smartscreen.microsoft.com
                dns
                80 B
                 243 B
                 1
                1

                DNS Request

                nav-edge.smartscreen.microsoft.com

              • 8.8.8.8:53
                business.bing.com
                dns
                63 B
                 144 B
                 1
                1

                DNS Request

                business.bing.com

                DNS Response

                13.107.6.158

              • 8.8.8.8:53
                business.bing.com
                dns
                63 B
                 185 B
                 1
                1

                DNS Request

                business.bing.com

              • 8.8.8.8:53
                www.microsoft.com
                dns
                63 B
                 230 B
                 1
                1

                DNS Request

                www.microsoft.com

                DNS Response

                23.55.97.181

              • 8.8.8.8:53
                www.microsoft.com
                dns
                63 B
                 1

                DNS Request

                www.microsoft.com

              • 8.8.8.8:53
                www.microsoft.com
                dns
                63 B
                 1

                DNS Request

                www.microsoft.com

              • 8.8.8.8:53
                186.244.140.51.in-addr.arpa
                dns
                219 B
                 147 B
                 3
                1

                DNS Request

                186.244.140.51.in-addr.arpa

                DNS Request

                186.244.140.51.in-addr.arpa

                DNS Request

                186.244.140.51.in-addr.arpa

              • 8.8.8.8:53
                159.113.53.23.in-addr.arpa
                dns
                216 B
                 137 B
                 3
                1

                DNS Request

                159.113.53.23.in-addr.arpa

                DNS Request

                159.113.53.23.in-addr.arpa

                DNS Request

                159.113.53.23.in-addr.arpa

              • 8.8.8.8:53
                www.microsoft.com
                dns
                63 B
                 1

                DNS Request

                www.microsoft.com

              • 8.8.8.8:53
                www.microsoft.com
                dns
                63 B
                 1

                DNS Request

                www.microsoft.com

              • 8.8.8.8:53
                241.150.49.20.in-addr.arpa
                dns
                72 B
                 158 B
                 1
                1

                DNS Request

                241.150.49.20.in-addr.arpa

              • 8.8.8.8:53
                bzib.nelreports.net
                dns
                65 B
                 172 B
                 1
                1

                DNS Request

                bzib.nelreports.net

                DNS Response

                104.109.143.150
                104.109.143.158

              • 8.8.8.8:53
                bzib.nelreports.net
                dns
                65 B
                 204 B
                 1
                1

                DNS Request

                bzib.nelreports.net

              • 8.8.8.8:53
                227.66.18.2.in-addr.arpa
                dns
                70 B
                 133 B
                 1
                1

                DNS Request

                227.66.18.2.in-addr.arpa

              • 8.8.8.8:53
                www.microsoft.com
                dns
                63 B
                 230 B
                 1
                1

                DNS Request

                www.microsoft.com

                DNS Response

                23.55.97.181

              • 8.8.8.8:53
                www.microsoft.com
                dns
                63 B
                 1

                DNS Request

                www.microsoft.com

              • 8.8.8.8:53
                150.143.109.104.in-addr.arpa
                dns
                74 B
                 141 B
                 1
                1

                DNS Request

                150.143.109.104.in-addr.arpa

              • 8.8.8.8:53
                181.97.55.23.in-addr.arpa
                dns
                71 B
                 135 B
                 1
                1

                DNS Request

                181.97.55.23.in-addr.arpa

              • 8.8.8.8:53
                www.microsoft.com
                dns
                63 B
                 230 B
                 1
                1

                DNS Request

                www.microsoft.com

                DNS Response

                23.55.97.181

              • 8.8.8.8:53
                tls
                73 B
                 144 B
                 1
                1
              • 8.8.8.8:53
                67.31.126.40.in-addr.arpa
                dns
                71 B
                 157 B
                 1
                1

                DNS Request

                67.31.126.40.in-addr.arpa

              • 8.8.8.8:53
                nw-umwatson.events.data.microsoft.com
                dns
                83 B
                 214 B
                 1
                1

                DNS Request

                nw-umwatson.events.data.microsoft.com

                DNS Response

                52.182.143.212

              • 8.8.8.8:53
                212.143.182.52.in-addr.arpa
                dns
                73 B
                 147 B
                 1
                1

                DNS Request

                212.143.182.52.in-addr.arpa

              • 8.8.8.8:53
                58.55.71.13.in-addr.arpa
                dns
                70 B
                 144 B
                 1
                1

                DNS Request

                58.55.71.13.in-addr.arpa

              • 8.8.8.8:53
                edgestatic.azureedge.net
                dns
                70 B
                 245 B
                 1
                1

                DNS Request

                edgestatic.azureedge.net

                DNS Response

                13.107.246.64
                13.107.213.64

              • 8.8.8.8:53
                edgestatic.azureedge.net
                dns
                70 B
                 273 B
                 1
                1

                DNS Request

                edgestatic.azureedge.net

              • 8.8.8.8:53
                c.s-microsoft.com
                dns
                63 B
                 193 B
                 1
                1

                DNS Request

                c.s-microsoft.com

                DNS Response

                23.53.113.225

              • 8.8.8.8:53
                c.s-microsoft.com
                dns
                63 B
                 238 B
                 1
                1

                DNS Request

                c.s-microsoft.com

              • 224.0.0.251:5353
                204 B
                 3
              • 8.8.8.8:53
                wcpstatic.microsoft.com
                dns
                69 B
                 265 B
                 1
                1

                DNS Request

                wcpstatic.microsoft.com

                DNS Response

                13.107.246.64
                13.107.213.64

              • 8.8.8.8:53
                wcpstatic.microsoft.com
                dns
                69 B
                 280 B
                 1
                1

                DNS Request

                wcpstatic.microsoft.com

              • 8.8.8.8:53
                50.23.12.20.in-addr.arpa
                dns
                70 B
                 156 B
                 1
                1

                DNS Request

                50.23.12.20.in-addr.arpa

              • 8.8.8.8:53
                18.31.95.13.in-addr.arpa
                dns
                70 B
                 144 B
                 1
                1

                DNS Request

                18.31.95.13.in-addr.arpa

              • 8.8.8.8:53
                228.249.119.40.in-addr.arpa
                dns
                73 B
                 159 B
                 1
                1

                DNS Request

                228.249.119.40.in-addr.arpa

              • 8.8.8.8:53
                194.61.62.23.in-addr.arpa
                dns
                71 B
                 135 B
                 1
                1

                DNS Request

                194.61.62.23.in-addr.arpa

              • 8.8.8.8:53
                249.197.17.2.in-addr.arpa
                dns
                71 B
                 135 B
                 1
                1

                DNS Request

                249.197.17.2.in-addr.arpa

              • 8.8.8.8:53
                30.243.111.52.in-addr.arpa
                dns
                72 B
                 158 B
                 1
                1

                DNS Request

                30.243.111.52.in-addr.arpa

              • 8.8.8.8:53
                24.73.42.20.in-addr.arpa
                dns
                70 B
                 156 B
                 1
                1

                DNS Request

                24.73.42.20.in-addr.arpa

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              We care about your privacy.

              This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.