Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
143s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
29/04/2024, 05:30 UTC
Static task
static1
Behavioral task
behavioral1
Sample
06ecea4b7681e749565c4d3adf40aeec_JaffaCakes118.html
Resource
win7-20240220-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
06ecea4b7681e749565c4d3adf40aeec_JaffaCakes118.html
Resource
win10v2004-20240226-en
0 signatures
150 seconds
General
-
Target
06ecea4b7681e749565c4d3adf40aeec_JaffaCakes118.html
-
Size
3KB
-
MD5
06ecea4b7681e749565c4d3adf40aeec
-
SHA1
b8269768da17cb80c7b531c4f1ed7d45a403df5a
-
SHA256
79a7b58efe109f3933708760c30fb50c1859a47e1e38e4cd1a19523c60cf60d6
-
SHA512
7fa4997155f1028f64065d8f7351c77074b00f794d258dc7739a8478feaa356792f5135b86b0031da82064193d8e744d61f07b5c2a292ff4f3549098f7b414bd
Score
1/10
Malware Config
Signatures
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\06ecea4b7681e749565c4d3adf40aeec_JaffaCakes118.html1⤵PID:4140
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=17 --mojo-platform-channel-handle=4880 --field-trial-handle=2252,i,16504368816373493055,9578615028378602855,262144 --variations-seed-version /prefetch:11⤵PID:2368
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=18 --mojo-platform-channel-handle=5444 --field-trial-handle=2252,i,16504368816373493055,9578615028378602855,262144 --variations-seed-version /prefetch:11⤵PID:4000
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=5388 --field-trial-handle=2252,i,16504368816373493055,9578615028378602855,262144 --variations-seed-version /prefetch:81⤵PID:4128
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=20 --mojo-platform-channel-handle=5908 --field-trial-handle=2252,i,16504368816373493055,9578615028378602855,262144 --variations-seed-version /prefetch:11⤵PID:3900
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --no-appcompat-clear --mojo-platform-channel-handle=3600 --field-trial-handle=2252,i,16504368816373493055,9578615028378602855,262144 --variations-seed-version /prefetch:81⤵PID:1712
Network
-
Remote address:8.8.8.8:53Requestnav-edge.smartscreen.microsoft.comIN AResponsenav-edge.smartscreen.microsoft.comIN CNAMEtm-prod-wd-csp-edge.trafficmanager.nettm-prod-wd-csp-edge.trafficmanager.netIN CNAMEprod-agic-us-2.uksouth.cloudapp.azure.comprod-agic-us-2.uksouth.cloudapp.azure.comIN A172.165.69.228
-
Remote address:8.8.8.8:53Requestnav-edge.smartscreen.microsoft.comIN UnknownResponsenav-edge.smartscreen.microsoft.comIN CNAMEtm-prod-wd-csp-edge.trafficmanager.nettm-prod-wd-csp-edge.trafficmanager.netIN CNAMEprod-agic-uw-2.ukwest.cloudapp.azure.com
-
Remote address:8.8.8.8:53Requestbusiness.bing.comIN AResponsebusiness.bing.comIN CNAMEbusiness-bing-com.b-0005.b-msedge.netbusiness-bing-com.b-0005.b-msedge.netIN CNAMEb-0005.b-msedge.netb-0005.b-msedge.netIN A13.107.6.158
-
Remote address:8.8.8.8:53Requestbusiness.bing.comIN UnknownResponsebusiness.bing.comIN CNAMEbusiness-bing-com.b-0005.b-msedge.netbusiness-bing-com.b-0005.b-msedge.netIN CNAMEb-0005.b-msedge.net
-
Remote address:8.8.8.8:53Requestwww.microsoft.comIN AResponsewww.microsoft.comIN CNAMEwww.microsoft.com-c-3.edgekey.netwww.microsoft.com-c-3.edgekey.netIN CNAMEwww.microsoft.com-c-3.edgekey.net.globalredir.akadns.netwww.microsoft.com-c-3.edgekey.net.globalredir.akadns.netIN CNAMEe13678.dscb.akamaiedge.nete13678.dscb.akamaiedge.netIN A23.55.97.181
-
Remote address:8.8.8.8:53Requestbzib.nelreports.netIN AResponsebzib.nelreports.netIN CNAMEbzib.nelreports.net.akamaized.netbzib.nelreports.net.akamaized.netIN CNAMEa416.dscd.akamai.neta416.dscd.akamai.netIN A23.73.139.27a416.dscd.akamai.netIN A23.73.139.50
-
Remote address:8.8.8.8:53Requestbzib.nelreports.netIN UnknownResponsebzib.nelreports.netIN CNAMEbzib.nelreports.net.akamaized.netbzib.nelreports.net.akamaized.netIN CNAMEa416.dscd.akamai.net
-
Remote address:8.8.8.8:53Requestparty-nwvqdtumtz.now.shIN AResponseparty-nwvqdtumtz.now.shIN A76.76.21.123party-nwvqdtumtz.now.shIN A76.76.21.93
-
Remote address:8.8.8.8:53Requestparty-nwvqdtumtz.now.shIN UnknownResponse
-
Remote address:8.8.8.8:53Requestwww.microsoft.comIN AResponsewww.microsoft.comIN CNAMEwww.microsoft.com-c-3.edgekey.netwww.microsoft.com-c-3.edgekey.netIN CNAMEwww.microsoft.com-c-3.edgekey.net.globalredir.akadns.netwww.microsoft.com-c-3.edgekey.net.globalredir.akadns.netIN CNAMEe13678.dscb.akamaiedge.nete13678.dscb.akamaiedge.netIN A23.55.97.181
-
Remote address:8.8.8.8:53Requestwww.microsoft.comIN UnknownResponsewww.microsoft.comIN CNAMEwww.microsoft.com-c-3.edgekey.netwww.microsoft.com-c-3.edgekey.netIN CNAMEwww.microsoft.com-c-3.edgekey.net.globalredir.akadns.netwww.microsoft.com-c-3.edgekey.net.globalredir.akadns.netIN CNAMEe13678.dscb.akamaiedge.net
-
Remote address:8.8.8.8:53Requestparty-nwvqdtumtz.vercel.appIN AResponseparty-nwvqdtumtz.vercel.appIN A76.76.21.142party-nwvqdtumtz.vercel.appIN A76.76.21.9
-
Remote address:8.8.8.8:53Requestparty-nwvqdtumtz.vercel.appIN UnknownResponse
-
Remote address:8.8.8.8:53Requestwww.microsoft.comIN AResponsewww.microsoft.comIN CNAMEwww.microsoft.com-c-3.edgekey.netwww.microsoft.com-c-3.edgekey.netIN CNAMEwww.microsoft.com-c-3.edgekey.net.globalredir.akadns.netwww.microsoft.com-c-3.edgekey.net.globalredir.akadns.netIN CNAMEe13678.dscb.akamaiedge.nete13678.dscb.akamaiedge.netIN A23.55.97.181
-
Remote address:8.8.8.8:53Request159.113.53.23.in-addr.arpaIN PTRResponse159.113.53.23.in-addr.arpaIN PTRa23-53-113-159deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request228.69.165.172.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request123.21.76.76.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request181.97.55.23.in-addr.arpaIN PTRResponse181.97.55.23.in-addr.arpaIN PTRa23-55-97-181deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request27.139.73.23.in-addr.arpaIN PTRResponse27.139.73.23.in-addr.arpaIN PTRa23-73-139-27deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request142.21.76.76.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Requestedgestatic.azureedge.netIN AResponseedgestatic.azureedge.netIN CNAMEedgestatic.afd.azureedge.netedgestatic.afd.azureedge.netIN CNAMEazureedge-t-prod.trafficmanager.netazureedge-t-prod.trafficmanager.netIN CNAMEshed.dual-low.part-0036.t-0009.t-msedge.netshed.dual-low.part-0036.t-0009.t-msedge.netIN CNAMEpart-0036.t-0009.t-msedge.netpart-0036.t-0009.t-msedge.netIN A13.107.246.64part-0036.t-0009.t-msedge.netIN A13.107.213.64
-
Remote address:8.8.8.8:53Requestedgestatic.azureedge.netIN UnknownResponseedgestatic.azureedge.netIN CNAMEedgestatic.afd.azureedge.netedgestatic.afd.azureedge.netIN CNAMEazureedge-t-prod.trafficmanager.netazureedge-t-prod.trafficmanager.netIN CNAMEshed.dual-low.part-0036.t-0009.t-msedge.netshed.dual-low.part-0036.t-0009.t-msedge.netIN CNAMEpart-0036.t-0009.t-msedge.net
-
Remote address:8.8.8.8:53Requestc.s-microsoft.comIN AResponsec.s-microsoft.comIN CNAMEc-s.cms.ms.akadns.netc-s.cms.ms.akadns.netIN CNAMEc.s-microsoft.com-c.edgekey.netc.s-microsoft.com-c.edgekey.netIN CNAMEe13678.dscg.akamaiedge.nete13678.dscg.akamaiedge.netIN A23.53.113.225
-
Remote address:8.8.8.8:53Requestc.s-microsoft.comIN UnknownResponsec.s-microsoft.comIN CNAMEc-s.cms.ms.akadns.netc-s.cms.ms.akadns.netIN CNAMEc.s-microsoft.com-c.edgekey.netc.s-microsoft.com-c.edgekey.netIN CNAMEe13678.dscg.akamaiedge.net
-
Remote address:8.8.8.8:53Request97.17.167.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request64.246.107.13.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Requestwcpstatic.microsoft.comIN AResponsewcpstatic.microsoft.comIN CNAMEconsentdeliveryfd.azurefd.netconsentdeliveryfd.azurefd.netIN CNAMEfirstparty-azurefd-prod.trafficmanager.netfirstparty-azurefd-prod.trafficmanager.netIN CNAMEshed.dual-low.part-0036.t-0009.t-msedge.netshed.dual-low.part-0036.t-0009.t-msedge.netIN CNAMEpart-0036.t-0009.t-msedge.netpart-0036.t-0009.t-msedge.netIN A13.107.246.64part-0036.t-0009.t-msedge.netIN A13.107.213.64
-
Remote address:8.8.8.8:53Requestwcpstatic.microsoft.comIN UnknownResponsewcpstatic.microsoft.comIN CNAMEconsentdeliveryfd.azurefd.netconsentdeliveryfd.azurefd.netIN CNAMEfirstparty-azurefd-prod.trafficmanager.netfirstparty-azurefd-prod.trafficmanager.netIN CNAMEshed.dual-low.part-0036.t-0009.t-msedge.netshed.dual-low.part-0036.t-0009.t-msedge.netIN CNAMEpart-0036.t-0009.t-msedge.net
-
Remote address:8.8.8.8:53Request23.159.190.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request95.221.229.192.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Requestnw-umwatson.events.data.microsoft.comIN AResponsenw-umwatson.events.data.microsoft.comIN CNAMEblobcollector.events.data.trafficmanager.netblobcollector.events.data.trafficmanager.netIN CNAMEonedsblobprdwus16.westus.cloudapp.azure.comonedsblobprdwus16.westus.cloudapp.azure.comIN A20.189.173.21
-
Remote address:20.189.173.21:443RequestPOST /Telemetry.Request HTTP/1.1
Connection: Keep-Alive
Content-Type: application/xml
User-Agent: Crashpad/0.8.0 WinHTTP/10.0.19041.1151 Windows_NT/10.0.19041.1202 (x64)
Content-Length: 3685
Host: nw-umwatson.events.data.microsoft.com
ResponseHTTP/1.1 200 200 OK
Content-Type: text/xml
Server: Microsoft-HTTPAPI/2.0
Strict-Transport-Security: max-age=31536000
Date: Mon, 29 Apr 2024 05:30:56 GMT
-
Remote address:8.8.8.8:53Request209.205.72.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request21.173.189.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request50.23.12.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request15.164.165.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request133.211.185.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request24.139.73.23.in-addr.arpaIN PTRResponse24.139.73.23.in-addr.arpaIN PTRa23-73-139-24deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request97.61.62.23.in-addr.arpaIN PTRResponse97.61.62.23.in-addr.arpaIN PTRa23-62-61-97deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request172.210.232.199.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request19.229.111.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request194.61.62.23.in-addr.arpaIN PTRResponse194.61.62.23.in-addr.arpaIN PTRa23-62-61-194deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request208.143.182.52.in-addr.arpaIN PTRResponse
-
10.5kB 13.0kB 30 35
-
1.9kB 9.8kB 17 23
-
2.5kB 6.0kB 13 15
-
1.8kB 5.4kB 16 19
-
2.7kB 22.8kB 26 36
-
1.9kB 5.3kB 17 19
-
85.8kB 4.6MB 1795 3286
-
1.9kB 7.9kB 12 13
-
1.8kB 7.9kB 13 14
-
8.1kB 272.4kB 126 212
-
4.2kB 91.0kB 52 77
-
4.9kB 7.6kB 13 11
HTTP Request
POST https://nw-umwatson.events.data.microsoft.com/Telemetry.RequestHTTP Response
200 -
46 B 40 B 1 1
-
1.0kB 5.1kB 9 11
-
1.3kB 906 B 7 7
-
80 B 200 B 1 1
DNS Request
nav-edge.smartscreen.microsoft.com
DNS Response
172.165.69.228
-
80 B 243 B 1 1
DNS Request
nav-edge.smartscreen.microsoft.com
-
63 B 144 B 1 1
DNS Request
business.bing.com
DNS Response
13.107.6.158
-
63 B 185 B 1 1
DNS Request
business.bing.com
-
63 B 230 B 1 1
DNS Request
www.microsoft.com
DNS Response
23.55.97.181
-
65 B 172 B 1 1
DNS Request
bzib.nelreports.net
DNS Response
23.73.139.2723.73.139.50
-
65 B 204 B 1 1
DNS Request
bzib.nelreports.net
-
69 B 101 B 1 1
DNS Request
party-nwvqdtumtz.now.sh
DNS Response
76.76.21.12376.76.21.93
-
69 B 134 B 1 1
DNS Request
party-nwvqdtumtz.now.sh
-
63 B 230 B 1 1
DNS Request
www.microsoft.com
DNS Response
23.55.97.181
-
63 B 275 B 1 1
DNS Request
www.microsoft.com
-
73 B 105 B 1 1
DNS Request
party-nwvqdtumtz.vercel.app
DNS Response
76.76.21.14276.76.21.9
-
73 B 147 B 1 1
DNS Request
party-nwvqdtumtz.vercel.app
-
63 B 230 B 1 1
DNS Request
www.microsoft.com
DNS Response
23.55.97.181
-
72 B 137 B 1 1
DNS Request
159.113.53.23.in-addr.arpa
-
73 B 159 B 1 1
DNS Request
228.69.165.172.in-addr.arpa
-
71 B 125 B 1 1
DNS Request
123.21.76.76.in-addr.arpa
-
71 B 135 B 1 1
DNS Request
181.97.55.23.in-addr.arpa
-
71 B 135 B 1 1
DNS Request
27.139.73.23.in-addr.arpa
-
71 B 125 B 1 1
DNS Request
142.21.76.76.in-addr.arpa
-
70 B 245 B 1 1
DNS Request
edgestatic.azureedge.net
DNS Response
13.107.246.6413.107.213.64
-
70 B 273 B 1 1
DNS Request
edgestatic.azureedge.net
-
63 B 193 B 1 1
DNS Request
c.s-microsoft.com
DNS Response
23.53.113.225
-
63 B 238 B 1 1
DNS Request
c.s-microsoft.com
-
71 B 145 B 1 1
DNS Request
97.17.167.52.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
64.246.107.13.in-addr.arpa
-
69 B 265 B 1 1
DNS Request
wcpstatic.microsoft.com
DNS Response
13.107.246.6413.107.213.64
-
69 B 280 B 1 1
DNS Request
wcpstatic.microsoft.com
-
72 B 158 B 1 1
DNS Request
23.159.190.20.in-addr.arpa
-
73 B 144 B 1 1
DNS Request
95.221.229.192.in-addr.arpa
-
83 B 211 B 1 1
DNS Request
nw-umwatson.events.data.microsoft.com
DNS Response
20.189.173.21
-
72 B 158 B 1 1
DNS Request
209.205.72.20.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
21.173.189.20.in-addr.arpa
-
204 B 3
-
70 B 156 B 1 1
DNS Request
50.23.12.20.in-addr.arpa
-
72 B 146 B 1 1
DNS Request
15.164.165.52.in-addr.arpa
-
73 B 147 B 1 1
DNS Request
133.211.185.52.in-addr.arpa
-
71 B 135 B 1 1
DNS Request
24.139.73.23.in-addr.arpa
-
70 B 133 B 1 1
DNS Request
97.61.62.23.in-addr.arpa
-
74 B 128 B 1 1
DNS Request
172.210.232.199.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
19.229.111.52.in-addr.arpa
-
71 B 135 B 1 1
DNS Request
194.61.62.23.in-addr.arpa
-
73 B 147 B 1 1
DNS Request
208.143.182.52.in-addr.arpa