Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/04/2024, 05:30 UTC

General

  • Target

    06ecea4b7681e749565c4d3adf40aeec_JaffaCakes118.html

  • Size

    3KB

  • MD5

    06ecea4b7681e749565c4d3adf40aeec

  • SHA1

    b8269768da17cb80c7b531c4f1ed7d45a403df5a

  • SHA256

    79a7b58efe109f3933708760c30fb50c1859a47e1e38e4cd1a19523c60cf60d6

  • SHA512

    7fa4997155f1028f64065d8f7351c77074b00f794d258dc7739a8478feaa356792f5135b86b0031da82064193d8e744d61f07b5c2a292ff4f3549098f7b414bd

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\06ecea4b7681e749565c4d3adf40aeec_JaffaCakes118.html
    1⤵
      PID:4140
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=17 --mojo-platform-channel-handle=4880 --field-trial-handle=2252,i,16504368816373493055,9578615028378602855,262144 --variations-seed-version /prefetch:1
      1⤵
        PID:2368
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=18 --mojo-platform-channel-handle=5444 --field-trial-handle=2252,i,16504368816373493055,9578615028378602855,262144 --variations-seed-version /prefetch:1
        1⤵
          PID:4000
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=5388 --field-trial-handle=2252,i,16504368816373493055,9578615028378602855,262144 --variations-seed-version /prefetch:8
          1⤵
            PID:4128
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=20 --mojo-platform-channel-handle=5908 --field-trial-handle=2252,i,16504368816373493055,9578615028378602855,262144 --variations-seed-version /prefetch:1
            1⤵
              PID:3900
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --no-appcompat-clear --mojo-platform-channel-handle=3600 --field-trial-handle=2252,i,16504368816373493055,9578615028378602855,262144 --variations-seed-version /prefetch:8
              1⤵
                PID:1712

              Network

              • flag-us
                DNS
                nav-edge.smartscreen.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                nav-edge.smartscreen.microsoft.com
                IN A
                Response
                nav-edge.smartscreen.microsoft.com
                IN CNAME
                tm-prod-wd-csp-edge.trafficmanager.net
                tm-prod-wd-csp-edge.trafficmanager.net
                IN CNAME
                prod-agic-us-2.uksouth.cloudapp.azure.com
                prod-agic-us-2.uksouth.cloudapp.azure.com
                IN A
                172.165.69.228
              • flag-us
                DNS
                nav-edge.smartscreen.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                nav-edge.smartscreen.microsoft.com
                IN Unknown
                Response
                nav-edge.smartscreen.microsoft.com
                IN CNAME
                tm-prod-wd-csp-edge.trafficmanager.net
                tm-prod-wd-csp-edge.trafficmanager.net
                IN CNAME
                prod-agic-uw-2.ukwest.cloudapp.azure.com
              • flag-us
                DNS
                business.bing.com
                Remote address:
                8.8.8.8:53
                Request
                business.bing.com
                IN A
                Response
                business.bing.com
                IN CNAME
                business-bing-com.b-0005.b-msedge.net
                business-bing-com.b-0005.b-msedge.net
                IN CNAME
                b-0005.b-msedge.net
                b-0005.b-msedge.net
                IN A
                13.107.6.158
              • flag-us
                DNS
                business.bing.com
                Remote address:
                8.8.8.8:53
                Request
                business.bing.com
                IN Unknown
                Response
                business.bing.com
                IN CNAME
                business-bing-com.b-0005.b-msedge.net
                business-bing-com.b-0005.b-msedge.net
                IN CNAME
                b-0005.b-msedge.net
              • flag-us
                DNS
                www.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                www.microsoft.com
                IN A
                Response
                www.microsoft.com
                IN CNAME
                www.microsoft.com-c-3.edgekey.net
                www.microsoft.com-c-3.edgekey.net
                IN CNAME
                www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                IN CNAME
                e13678.dscb.akamaiedge.net
                e13678.dscb.akamaiedge.net
                IN A
                23.55.97.181
              • flag-us
                DNS
                bzib.nelreports.net
                Remote address:
                8.8.8.8:53
                Request
                bzib.nelreports.net
                IN A
                Response
                bzib.nelreports.net
                IN CNAME
                bzib.nelreports.net.akamaized.net
                bzib.nelreports.net.akamaized.net
                IN CNAME
                a416.dscd.akamai.net
                a416.dscd.akamai.net
                IN A
                23.73.139.27
                a416.dscd.akamai.net
                IN A
                23.73.139.50
              • flag-us
                DNS
                bzib.nelreports.net
                Remote address:
                8.8.8.8:53
                Request
                bzib.nelreports.net
                IN Unknown
                Response
                bzib.nelreports.net
                IN CNAME
                bzib.nelreports.net.akamaized.net
                bzib.nelreports.net.akamaized.net
                IN CNAME
                a416.dscd.akamai.net
              • flag-us
                DNS
                party-nwvqdtumtz.now.sh
                Remote address:
                8.8.8.8:53
                Request
                party-nwvqdtumtz.now.sh
                IN A
                Response
                party-nwvqdtumtz.now.sh
                IN A
                76.76.21.123
                party-nwvqdtumtz.now.sh
                IN A
                76.76.21.93
              • flag-us
                DNS
                party-nwvqdtumtz.now.sh
                Remote address:
                8.8.8.8:53
                Request
                party-nwvqdtumtz.now.sh
                IN Unknown
                Response
              • flag-us
                DNS
                www.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                www.microsoft.com
                IN A
                Response
                www.microsoft.com
                IN CNAME
                www.microsoft.com-c-3.edgekey.net
                www.microsoft.com-c-3.edgekey.net
                IN CNAME
                www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                IN CNAME
                e13678.dscb.akamaiedge.net
                e13678.dscb.akamaiedge.net
                IN A
                23.55.97.181
              • flag-us
                DNS
                www.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                www.microsoft.com
                IN Unknown
                Response
                www.microsoft.com
                IN CNAME
                www.microsoft.com-c-3.edgekey.net
                www.microsoft.com-c-3.edgekey.net
                IN CNAME
                www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                IN CNAME
                e13678.dscb.akamaiedge.net
              • flag-us
                DNS
                party-nwvqdtumtz.vercel.app
                Remote address:
                8.8.8.8:53
                Request
                party-nwvqdtumtz.vercel.app
                IN A
                Response
                party-nwvqdtumtz.vercel.app
                IN A
                76.76.21.142
                party-nwvqdtumtz.vercel.app
                IN A
                76.76.21.9
              • flag-us
                DNS
                party-nwvqdtumtz.vercel.app
                Remote address:
                8.8.8.8:53
                Request
                party-nwvqdtumtz.vercel.app
                IN Unknown
                Response
              • flag-us
                DNS
                www.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                www.microsoft.com
                IN A
                Response
                www.microsoft.com
                IN CNAME
                www.microsoft.com-c-3.edgekey.net
                www.microsoft.com-c-3.edgekey.net
                IN CNAME
                www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                IN CNAME
                e13678.dscb.akamaiedge.net
                e13678.dscb.akamaiedge.net
                IN A
                23.55.97.181
              • flag-us
                DNS
                159.113.53.23.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                159.113.53.23.in-addr.arpa
                IN PTR
                Response
                159.113.53.23.in-addr.arpa
                IN PTR
                a23-53-113-159deploystaticakamaitechnologiescom
              • flag-us
                DNS
                228.69.165.172.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                228.69.165.172.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                123.21.76.76.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                123.21.76.76.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                181.97.55.23.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                181.97.55.23.in-addr.arpa
                IN PTR
                Response
                181.97.55.23.in-addr.arpa
                IN PTR
                a23-55-97-181deploystaticakamaitechnologiescom
              • flag-us
                DNS
                27.139.73.23.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                27.139.73.23.in-addr.arpa
                IN PTR
                Response
                27.139.73.23.in-addr.arpa
                IN PTR
                a23-73-139-27deploystaticakamaitechnologiescom
              • flag-us
                DNS
                142.21.76.76.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                142.21.76.76.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                edgestatic.azureedge.net
                Remote address:
                8.8.8.8:53
                Request
                edgestatic.azureedge.net
                IN A
                Response
                edgestatic.azureedge.net
                IN CNAME
                edgestatic.afd.azureedge.net
                edgestatic.afd.azureedge.net
                IN CNAME
                azureedge-t-prod.trafficmanager.net
                azureedge-t-prod.trafficmanager.net
                IN CNAME
                shed.dual-low.part-0036.t-0009.t-msedge.net
                shed.dual-low.part-0036.t-0009.t-msedge.net
                IN CNAME
                part-0036.t-0009.t-msedge.net
                part-0036.t-0009.t-msedge.net
                IN A
                13.107.246.64
                part-0036.t-0009.t-msedge.net
                IN A
                13.107.213.64
              • flag-us
                DNS
                edgestatic.azureedge.net
                Remote address:
                8.8.8.8:53
                Request
                edgestatic.azureedge.net
                IN Unknown
                Response
                edgestatic.azureedge.net
                IN CNAME
                edgestatic.afd.azureedge.net
                edgestatic.afd.azureedge.net
                IN CNAME
                azureedge-t-prod.trafficmanager.net
                azureedge-t-prod.trafficmanager.net
                IN CNAME
                shed.dual-low.part-0036.t-0009.t-msedge.net
                shed.dual-low.part-0036.t-0009.t-msedge.net
                IN CNAME
                part-0036.t-0009.t-msedge.net
              • flag-us
                DNS
                c.s-microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                c.s-microsoft.com
                IN A
                Response
                c.s-microsoft.com
                IN CNAME
                c-s.cms.ms.akadns.net
                c-s.cms.ms.akadns.net
                IN CNAME
                c.s-microsoft.com-c.edgekey.net
                c.s-microsoft.com-c.edgekey.net
                IN CNAME
                e13678.dscg.akamaiedge.net
                e13678.dscg.akamaiedge.net
                IN A
                23.53.113.225
              • flag-us
                DNS
                c.s-microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                c.s-microsoft.com
                IN Unknown
                Response
                c.s-microsoft.com
                IN CNAME
                c-s.cms.ms.akadns.net
                c-s.cms.ms.akadns.net
                IN CNAME
                c.s-microsoft.com-c.edgekey.net
                c.s-microsoft.com-c.edgekey.net
                IN CNAME
                e13678.dscg.akamaiedge.net
              • flag-us
                DNS
                97.17.167.52.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                97.17.167.52.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                64.246.107.13.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                64.246.107.13.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                wcpstatic.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                wcpstatic.microsoft.com
                IN A
                Response
                wcpstatic.microsoft.com
                IN CNAME
                consentdeliveryfd.azurefd.net
                consentdeliveryfd.azurefd.net
                IN CNAME
                firstparty-azurefd-prod.trafficmanager.net
                firstparty-azurefd-prod.trafficmanager.net
                IN CNAME
                shed.dual-low.part-0036.t-0009.t-msedge.net
                shed.dual-low.part-0036.t-0009.t-msedge.net
                IN CNAME
                part-0036.t-0009.t-msedge.net
                part-0036.t-0009.t-msedge.net
                IN A
                13.107.246.64
                part-0036.t-0009.t-msedge.net
                IN A
                13.107.213.64
              • flag-us
                DNS
                wcpstatic.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                wcpstatic.microsoft.com
                IN Unknown
                Response
                wcpstatic.microsoft.com
                IN CNAME
                consentdeliveryfd.azurefd.net
                consentdeliveryfd.azurefd.net
                IN CNAME
                firstparty-azurefd-prod.trafficmanager.net
                firstparty-azurefd-prod.trafficmanager.net
                IN CNAME
                shed.dual-low.part-0036.t-0009.t-msedge.net
                shed.dual-low.part-0036.t-0009.t-msedge.net
                IN CNAME
                part-0036.t-0009.t-msedge.net
              • flag-us
                DNS
                23.159.190.20.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                23.159.190.20.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                95.221.229.192.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                95.221.229.192.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                nw-umwatson.events.data.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                nw-umwatson.events.data.microsoft.com
                IN A
                Response
                nw-umwatson.events.data.microsoft.com
                IN CNAME
                blobcollector.events.data.trafficmanager.net
                blobcollector.events.data.trafficmanager.net
                IN CNAME
                onedsblobprdwus16.westus.cloudapp.azure.com
                onedsblobprdwus16.westus.cloudapp.azure.com
                IN A
                20.189.173.21
              • flag-us
                POST
                https://nw-umwatson.events.data.microsoft.com/Telemetry.Request
                Remote address:
                20.189.173.21:443
                Request
                POST /Telemetry.Request HTTP/1.1
                Connection: Keep-Alive
                Content-Type: application/xml
                User-Agent: Crashpad/0.8.0 WinHTTP/10.0.19041.1151 Windows_NT/10.0.19041.1202 (x64)
                Content-Length: 3685
                Host: nw-umwatson.events.data.microsoft.com
                Response
                HTTP/1.1 200 200 OK
                Content-Length: 634
                Content-Type: text/xml
                Server: Microsoft-HTTPAPI/2.0
                Strict-Transport-Security: max-age=31536000
                Date: Mon, 29 Apr 2024 05:30:56 GMT
              • flag-us
                DNS
                209.205.72.20.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                209.205.72.20.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                21.173.189.20.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                21.173.189.20.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                50.23.12.20.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                50.23.12.20.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                15.164.165.52.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                15.164.165.52.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                133.211.185.52.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                133.211.185.52.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                24.139.73.23.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                24.139.73.23.in-addr.arpa
                IN PTR
                Response
                24.139.73.23.in-addr.arpa
                IN PTR
                a23-73-139-24deploystaticakamaitechnologiescom
              • flag-us
                DNS
                97.61.62.23.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                97.61.62.23.in-addr.arpa
                IN PTR
                Response
                97.61.62.23.in-addr.arpa
                IN PTR
                a23-62-61-97deploystaticakamaitechnologiescom
              • flag-us
                DNS
                172.210.232.199.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                172.210.232.199.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                19.229.111.52.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                19.229.111.52.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                194.61.62.23.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                194.61.62.23.in-addr.arpa
                IN PTR
                Response
                194.61.62.23.in-addr.arpa
                IN PTR
                a23-62-61-194deploystaticakamaitechnologiescom
              • flag-us
                DNS
                208.143.182.52.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                208.143.182.52.in-addr.arpa
                IN PTR
                Response
              • 172.165.69.228:443
                nav-edge.smartscreen.microsoft.com
                tls
                10.5kB
                13.0kB
                30
                35
              • 13.107.6.158:443
                business.bing.com
                tls
                1.9kB
                9.8kB
                17
                23
              • 23.73.139.27:443
                bzib.nelreports.net
                tls
                2.5kB
                6.0kB
                13
                15
              • 76.76.21.123:443
                party-nwvqdtumtz.now.sh
                tls
                1.8kB
                5.4kB
                16
                19
              • 23.55.97.181:443
                www.microsoft.com
                tls
                2.7kB
                22.8kB
                26
                36
              • 76.76.21.142:443
                party-nwvqdtumtz.vercel.app
                tls
                1.9kB
                5.3kB
                17
                19
              • 13.107.246.64:443
                edgestatic.azureedge.net
                tls
                85.8kB
                4.6MB
                1795
                3286
              • 13.107.246.64:443
                edgestatic.azureedge.net
                tls
                1.9kB
                7.9kB
                12
                13
              • 13.107.246.64:443
                edgestatic.azureedge.net
                tls
                1.8kB
                7.9kB
                13
                14
              • 13.107.246.64:443
                edgestatic.azureedge.net
                tls
                8.1kB
                272.4kB
                126
                212
              • 13.107.246.64:443
                wcpstatic.microsoft.com
                tls
                4.2kB
                91.0kB
                52
                77
              • 20.189.173.21:443
                https://nw-umwatson.events.data.microsoft.com/Telemetry.Request
                tls, http
                4.9kB
                7.6kB
                13
                11

                HTTP Request

                POST https://nw-umwatson.events.data.microsoft.com/Telemetry.Request

                HTTP Response

                200
              • 13.107.253.64:443
                46 B
                40 B
                1
                1
              • 23.62.61.97:443
                www.bing.com
                tls
                1.0kB
                5.1kB
                9
                11
              • 23.62.61.194:443
                www.bing.com
                tls
                1.3kB
                906 B
                7
                7
              • 8.8.8.8:53
                nav-edge.smartscreen.microsoft.com
                dns
                80 B
                200 B
                1
                1

                DNS Request

                nav-edge.smartscreen.microsoft.com

                DNS Response

                172.165.69.228

              • 8.8.8.8:53
                nav-edge.smartscreen.microsoft.com
                dns
                80 B
                243 B
                1
                1

                DNS Request

                nav-edge.smartscreen.microsoft.com

              • 8.8.8.8:53
                business.bing.com
                dns
                63 B
                144 B
                1
                1

                DNS Request

                business.bing.com

                DNS Response

                13.107.6.158

              • 8.8.8.8:53
                business.bing.com
                dns
                63 B
                185 B
                1
                1

                DNS Request

                business.bing.com

              • 8.8.8.8:53
                www.microsoft.com
                dns
                63 B
                230 B
                1
                1

                DNS Request

                www.microsoft.com

                DNS Response

                23.55.97.181

              • 8.8.8.8:53
                bzib.nelreports.net
                dns
                65 B
                172 B
                1
                1

                DNS Request

                bzib.nelreports.net

                DNS Response

                23.73.139.27
                23.73.139.50

              • 8.8.8.8:53
                bzib.nelreports.net
                dns
                65 B
                204 B
                1
                1

                DNS Request

                bzib.nelreports.net

              • 8.8.8.8:53
                party-nwvqdtumtz.now.sh
                dns
                69 B
                101 B
                1
                1

                DNS Request

                party-nwvqdtumtz.now.sh

                DNS Response

                76.76.21.123
                76.76.21.93

              • 8.8.8.8:53
                party-nwvqdtumtz.now.sh
                dns
                69 B
                134 B
                1
                1

                DNS Request

                party-nwvqdtumtz.now.sh

              • 8.8.8.8:53
                www.microsoft.com
                dns
                63 B
                230 B
                1
                1

                DNS Request

                www.microsoft.com

                DNS Response

                23.55.97.181

              • 8.8.8.8:53
                www.microsoft.com
                dns
                63 B
                275 B
                1
                1

                DNS Request

                www.microsoft.com

              • 8.8.8.8:53
                party-nwvqdtumtz.vercel.app
                dns
                73 B
                105 B
                1
                1

                DNS Request

                party-nwvqdtumtz.vercel.app

                DNS Response

                76.76.21.142
                76.76.21.9

              • 8.8.8.8:53
                party-nwvqdtumtz.vercel.app
                dns
                73 B
                147 B
                1
                1

                DNS Request

                party-nwvqdtumtz.vercel.app

              • 8.8.8.8:53
                www.microsoft.com
                dns
                63 B
                230 B
                1
                1

                DNS Request

                www.microsoft.com

                DNS Response

                23.55.97.181

              • 8.8.8.8:53
                159.113.53.23.in-addr.arpa
                dns
                72 B
                137 B
                1
                1

                DNS Request

                159.113.53.23.in-addr.arpa

              • 8.8.8.8:53
                228.69.165.172.in-addr.arpa
                dns
                73 B
                159 B
                1
                1

                DNS Request

                228.69.165.172.in-addr.arpa

              • 8.8.8.8:53
                123.21.76.76.in-addr.arpa
                dns
                71 B
                125 B
                1
                1

                DNS Request

                123.21.76.76.in-addr.arpa

              • 8.8.8.8:53
                181.97.55.23.in-addr.arpa
                dns
                71 B
                135 B
                1
                1

                DNS Request

                181.97.55.23.in-addr.arpa

              • 8.8.8.8:53
                27.139.73.23.in-addr.arpa
                dns
                71 B
                135 B
                1
                1

                DNS Request

                27.139.73.23.in-addr.arpa

              • 8.8.8.8:53
                142.21.76.76.in-addr.arpa
                dns
                71 B
                125 B
                1
                1

                DNS Request

                142.21.76.76.in-addr.arpa

              • 8.8.8.8:53
                edgestatic.azureedge.net
                dns
                70 B
                245 B
                1
                1

                DNS Request

                edgestatic.azureedge.net

                DNS Response

                13.107.246.64
                13.107.213.64

              • 8.8.8.8:53
                edgestatic.azureedge.net
                dns
                70 B
                273 B
                1
                1

                DNS Request

                edgestatic.azureedge.net

              • 8.8.8.8:53
                c.s-microsoft.com
                dns
                63 B
                193 B
                1
                1

                DNS Request

                c.s-microsoft.com

                DNS Response

                23.53.113.225

              • 8.8.8.8:53
                c.s-microsoft.com
                dns
                63 B
                238 B
                1
                1

                DNS Request

                c.s-microsoft.com

              • 8.8.8.8:53
                97.17.167.52.in-addr.arpa
                dns
                71 B
                145 B
                1
                1

                DNS Request

                97.17.167.52.in-addr.arpa

              • 8.8.8.8:53
                64.246.107.13.in-addr.arpa
                dns
                72 B
                158 B
                1
                1

                DNS Request

                64.246.107.13.in-addr.arpa

              • 8.8.8.8:53
                wcpstatic.microsoft.com
                dns
                69 B
                265 B
                1
                1

                DNS Request

                wcpstatic.microsoft.com

                DNS Response

                13.107.246.64
                13.107.213.64

              • 8.8.8.8:53
                wcpstatic.microsoft.com
                dns
                69 B
                280 B
                1
                1

                DNS Request

                wcpstatic.microsoft.com

              • 8.8.8.8:53
                23.159.190.20.in-addr.arpa
                dns
                72 B
                158 B
                1
                1

                DNS Request

                23.159.190.20.in-addr.arpa

              • 8.8.8.8:53
                95.221.229.192.in-addr.arpa
                dns
                73 B
                144 B
                1
                1

                DNS Request

                95.221.229.192.in-addr.arpa

              • 8.8.8.8:53
                nw-umwatson.events.data.microsoft.com
                dns
                83 B
                211 B
                1
                1

                DNS Request

                nw-umwatson.events.data.microsoft.com

                DNS Response

                20.189.173.21

              • 8.8.8.8:53
                209.205.72.20.in-addr.arpa
                dns
                72 B
                158 B
                1
                1

                DNS Request

                209.205.72.20.in-addr.arpa

              • 8.8.8.8:53
                21.173.189.20.in-addr.arpa
                dns
                72 B
                158 B
                1
                1

                DNS Request

                21.173.189.20.in-addr.arpa

              • 224.0.0.251:5353
                204 B
                3
              • 8.8.8.8:53
                50.23.12.20.in-addr.arpa
                dns
                70 B
                156 B
                1
                1

                DNS Request

                50.23.12.20.in-addr.arpa

              • 8.8.8.8:53
                15.164.165.52.in-addr.arpa
                dns
                72 B
                146 B
                1
                1

                DNS Request

                15.164.165.52.in-addr.arpa

              • 8.8.8.8:53
                133.211.185.52.in-addr.arpa
                dns
                73 B
                147 B
                1
                1

                DNS Request

                133.211.185.52.in-addr.arpa

              • 8.8.8.8:53
                24.139.73.23.in-addr.arpa
                dns
                71 B
                135 B
                1
                1

                DNS Request

                24.139.73.23.in-addr.arpa

              • 8.8.8.8:53
                97.61.62.23.in-addr.arpa
                dns
                70 B
                133 B
                1
                1

                DNS Request

                97.61.62.23.in-addr.arpa

              • 8.8.8.8:53
                172.210.232.199.in-addr.arpa
                dns
                74 B
                128 B
                1
                1

                DNS Request

                172.210.232.199.in-addr.arpa

              • 8.8.8.8:53
                19.229.111.52.in-addr.arpa
                dns
                72 B
                158 B
                1
                1

                DNS Request

                19.229.111.52.in-addr.arpa

              • 8.8.8.8:53
                194.61.62.23.in-addr.arpa
                dns
                71 B
                135 B
                1
                1

                DNS Request

                194.61.62.23.in-addr.arpa

              • 8.8.8.8:53
                208.143.182.52.in-addr.arpa
                dns
                73 B
                147 B
                1
                1

                DNS Request

                208.143.182.52.in-addr.arpa

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              We care about your privacy.

              This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.