Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

1

Static

static

1

31367477ec...8.html

windows7-x64

1

31367477ec...8.html

windows10-2004-x64

1

Analysis

  • max time kernel
    128s
  • max time network
    138s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/05/2024, 21:53 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    31367477ec425b5f7c7d7c3b8a04bd4a_JaffaCakes118.html

  • Size

    50KB

  • MD5

    31367477ec425b5f7c7d7c3b8a04bd4a

  • SHA1

    9b12842568d1880bebba9d5a75764950dead7ce2

  • SHA256

    94dd01a249f67f6a2ce22eb1b4abbe41b4fa332196b682fc089f5b634553b5a6

  • SHA512

    eee082d556018f13af87f28fe1eb15345206cac5da078303e5539786f98c726dd0551c635b792b40752c2974f993832fa2290693fe8a5f39c2f7d62ac5515ab2

  • SSDEEP

    1536:NIRIOITIwIgIiKZgNDfIwIGI5IVJ7SqIRIOITIwIgIiKZgNDfIwIGI5IVJ7SZO0l:AO0iPivlMnUSLJltm

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\31367477ec425b5f7c7d7c3b8a04bd4a_JaffaCakes118.html
    1⤵
      PID:2836
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=16 --field-trial-handle=4744,i,11746347647270949551,7786733067759450703,262144 --variations-seed-version --mojo-platform-channel-handle=3988 /prefetch:1
      1⤵
        PID:2076
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=15 --field-trial-handle=756,i,11746347647270949551,7786733067759450703,262144 --variations-seed-version --mojo-platform-channel-handle=3744 /prefetch:1
        1⤵
          PID:2284
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=17 --field-trial-handle=5244,i,11746347647270949551,7786733067759450703,262144 --variations-seed-version --mojo-platform-channel-handle=5268 /prefetch:1
          1⤵
            PID:1408
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=5276,i,11746347647270949551,7786733067759450703,262144 --variations-seed-version --mojo-platform-channel-handle=5300 /prefetch:8
            1⤵
              PID:4400
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --no-appcompat-clear --field-trial-handle=5440,i,11746347647270949551,7786733067759450703,262144 --variations-seed-version --mojo-platform-channel-handle=5640 /prefetch:8
              1⤵
                PID:4824
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=20 --field-trial-handle=5248,i,11746347647270949551,7786733067759450703,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:1
                1⤵
                  PID:4148
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --no-appcompat-clear --field-trial-handle=6500,i,11746347647270949551,7786733067759450703,262144 --variations-seed-version --mojo-platform-channel-handle=6480 /prefetch:8
                  1⤵
                    PID:1304

                  Network

                  • flag-us
                    DNS
                    api.edgeoffer.microsoft.com
                    Remote address:
                    8.8.8.8:53
                    Request
                    api.edgeoffer.microsoft.com
                    IN A
                    Response
                    api.edgeoffer.microsoft.com
                    IN CNAME
                    bingadsedgeextension-prod.trafficmanager.net
                    bingadsedgeextension-prod.trafficmanager.net
                    IN CNAME
                    bingadsedgeextension-prod-europe.azurewebsites.net
                    bingadsedgeextension-prod-europe.azurewebsites.net
                    IN CNAME
                    ssl.bingadsedgeextension-prod-europe.azurewebsites.net
                    ssl.bingadsedgeextension-prod-europe.azurewebsites.net
                    IN A
                    94.245.104.56
                  • flag-us
                    DNS
                    api.edgeoffer.microsoft.com
                    Remote address:
                    8.8.8.8:53
                    Request
                    api.edgeoffer.microsoft.com
                    IN Unknown
                    Response
                    api.edgeoffer.microsoft.com
                    IN CNAME
                    bingadsedgeextension-prod.trafficmanager.net
                    bingadsedgeextension-prod.trafficmanager.net
                    IN CNAME
                    bingadsedgeextension-prod-europe.azurewebsites.net
                    bingadsedgeextension-prod-europe.azurewebsites.net
                    IN CNAME
                    ssl.bingadsedgeextension-prod-europe.azurewebsites.net
                  • flag-us
                    DNS
                    business.bing.com
                    Remote address:
                    8.8.8.8:53
                    Request
                    business.bing.com
                    IN A
                    Response
                    business.bing.com
                    IN CNAME
                    business-bing-com.b-0005.b-msedge.net
                    business-bing-com.b-0005.b-msedge.net
                    IN CNAME
                    b-0005.b-msedge.net
                    b-0005.b-msedge.net
                    IN A
                    13.107.6.158
                  • flag-us
                    DNS
                    business.bing.com
                    Remote address:
                    8.8.8.8:53
                    Request
                    business.bing.com
                    IN Unknown
                    Response
                    business.bing.com
                    IN CNAME
                    business-bing-com.b-0005.b-msedge.net
                    business-bing-com.b-0005.b-msedge.net
                    IN CNAME
                    b-0005.b-msedge.net
                  • flag-us
                    DNS
                    bzib.nelreports.net
                    Remote address:
                    8.8.8.8:53
                    Request
                    bzib.nelreports.net
                    IN A
                    Response
                    bzib.nelreports.net
                    IN CNAME
                    bzib.nelreports.net.akamaized.net
                    bzib.nelreports.net.akamaized.net
                    IN CNAME
                    a416.dscd.akamai.net
                    a416.dscd.akamai.net
                    IN A
                    2.18.121.23
                    a416.dscd.akamai.net
                    IN A
                    2.18.121.10
                  • flag-us
                    DNS
                    bzib.nelreports.net
                    Remote address:
                    8.8.8.8:53
                    Request
                    bzib.nelreports.net
                    IN Unknown
                    Response
                    bzib.nelreports.net
                    IN CNAME
                    bzib.nelreports.net.akamaized.net
                    bzib.nelreports.net.akamaized.net
                    IN CNAME
                    a416.dscd.akamai.net
                  • flag-us
                    DNS
                    ajax.googleapis.com
                    Remote address:
                    8.8.8.8:53
                    Request
                    ajax.googleapis.com
                    IN A
                    Response
                    ajax.googleapis.com
                    IN A
                    216.58.206.74
                  • flag-us
                    DNS
                    ajax.googleapis.com
                    Remote address:
                    8.8.8.8:53
                    Request
                    ajax.googleapis.com
                    IN Unknown
                    Response
                  • flag-us
                    DNS
                    www.microsoft.com
                    Remote address:
                    8.8.8.8:53
                    Request
                    www.microsoft.com
                    IN A
                    Response
                    www.microsoft.com
                    IN CNAME
                    www.microsoft.com-c-3.edgekey.net
                    www.microsoft.com-c-3.edgekey.net
                    IN CNAME
                    www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                    www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                    IN CNAME
                    e13678.dscb.akamaiedge.net
                    e13678.dscb.akamaiedge.net
                    IN A
                    2.21.17.194
                  • flag-us
                    DNS
                    screenshots.en.sftcdn.net
                    Remote address:
                    8.8.8.8:53
                    Request
                    screenshots.en.sftcdn.net
                    IN A
                    Response
                    screenshots.en.sftcdn.net
                    IN CNAME
                    d15g6ew41vodt5.cloudfront.net
                    d15g6ew41vodt5.cloudfront.net
                    IN A
                    13.32.110.79
                    d15g6ew41vodt5.cloudfront.net
                    IN A
                    13.32.110.119
                    d15g6ew41vodt5.cloudfront.net
                    IN A
                    13.32.110.31
                    d15g6ew41vodt5.cloudfront.net
                    IN A
                    13.32.110.103
                  • flag-us
                    DNS
                    screenshots.en.sftcdn.net
                    Remote address:
                    8.8.8.8:53
                    Request
                    screenshots.en.sftcdn.net
                    IN Unknown
                    Response
                    screenshots.en.sftcdn.net
                    IN CNAME
                    d15g6ew41vodt5.cloudfront.net
                  • flag-us
                    DNS
                    www.microsoft.com
                    Remote address:
                    8.8.8.8:53
                    Request
                    www.microsoft.com
                    IN A
                    Response
                    www.microsoft.com
                    IN CNAME
                    www.microsoft.com-c-3.edgekey.net
                    www.microsoft.com-c-3.edgekey.net
                    IN CNAME
                    www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                    www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                    IN CNAME
                    e13678.dscb.akamaiedge.net
                    e13678.dscb.akamaiedge.net
                    IN A
                    2.21.17.194
                  • flag-us
                    DNS
                    www.microsoft.com
                    Remote address:
                    8.8.8.8:53
                    Request
                    www.microsoft.com
                    IN Unknown
                    Response
                    www.microsoft.com
                    IN CNAME
                    www.microsoft.com-c-3.edgekey.net
                    www.microsoft.com-c-3.edgekey.net
                    IN CNAME
                    www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                    www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                    IN CNAME
                    e13678.dscb.akamaiedge.net
                  • flag-us
                    DNS
                    cdn2.editmysite.com
                    Remote address:
                    8.8.8.8:53
                    Request
                    cdn2.editmysite.com
                    IN A
                    Response
                    cdn2.editmysite.com
                    IN CNAME
                    weebly.map.fastly.net
                    weebly.map.fastly.net
                    IN A
                    151.101.1.46
                    weebly.map.fastly.net
                    IN A
                    151.101.65.46
                    weebly.map.fastly.net
                    IN A
                    151.101.129.46
                    weebly.map.fastly.net
                    IN A
                    151.101.193.46
                  • flag-us
                    DNS
                    nav-edge.smartscreen.microsoft.com
                    Remote address:
                    8.8.8.8:53
                    Request
                    nav-edge.smartscreen.microsoft.com
                    IN A
                    Response
                    nav-edge.smartscreen.microsoft.com
                    IN CNAME
                    tm-prod-wd-csp-edge.trafficmanager.net
                    tm-prod-wd-csp-edge.trafficmanager.net
                    IN CNAME
                    prod-agic-uw-2.ukwest.cloudapp.azure.com
                    prod-agic-uw-2.ukwest.cloudapp.azure.com
                    IN A
                    51.140.244.186
                  • flag-us
                    DNS
                    nav-edge.smartscreen.microsoft.com
                    Remote address:
                    8.8.8.8:53
                    Request
                    nav-edge.smartscreen.microsoft.com
                    IN Unknown
                    Response
                    nav-edge.smartscreen.microsoft.com
                    IN CNAME
                    tm-prod-wd-csp-edge.trafficmanager.net
                    tm-prod-wd-csp-edge.trafficmanager.net
                    IN CNAME
                    prod-agic-uw-1.ukwest.cloudapp.azure.com
                  • flag-us
                    DNS
                    www.microsoft.com
                    Remote address:
                    8.8.8.8:53
                    Request
                    www.microsoft.com
                    IN A
                    Response
                    www.microsoft.com
                    IN CNAME
                    www.microsoft.com-c-3.edgekey.net
                    www.microsoft.com-c-3.edgekey.net
                    IN CNAME
                    www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                    www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                    IN CNAME
                    e13678.dscb.akamaiedge.net
                    e13678.dscb.akamaiedge.net
                    IN A
                    2.21.17.194
                  • flag-us
                    DNS
                    23.121.18.2.in-addr.arpa
                    Remote address:
                    8.8.8.8:53
                    Request
                    23.121.18.2.in-addr.arpa
                    IN PTR
                    Response
                    23.121.18.2.in-addr.arpa
                    IN PTR
                    a2-18-121-23deploystaticakamaitechnologiescom
                  • flag-us
                    DNS
                    56.104.245.94.in-addr.arpa
                    Remote address:
                    8.8.8.8:53
                    Request
                    56.104.245.94.in-addr.arpa
                    IN PTR
                    Response
                  • flag-us
                    DNS
                    194.17.21.2.in-addr.arpa
                    Remote address:
                    8.8.8.8:53
                    Request
                    194.17.21.2.in-addr.arpa
                    IN PTR
                    Response
                    194.17.21.2.in-addr.arpa
                    IN PTR
                    a2-21-17-194deploystaticakamaitechnologiescom
                  • flag-us
                    DNS
                    74.206.58.216.in-addr.arpa
                    Remote address:
                    8.8.8.8:53
                    Request
                    74.206.58.216.in-addr.arpa
                    IN PTR
                    Response
                    74.206.58.216.in-addr.arpa
                    IN PTR
                    mil07s08-in-f101e100net
                    74.206.58.216.in-addr.arpa
                    IN PTR
                    lhr35s11-in-f10�H
                    74.206.58.216.in-addr.arpa
                    IN PTR
                    tzfraa-aa-in-f10�H
                  • flag-us
                    DNS
                    2.159.190.20.in-addr.arpa
                    Remote address:
                    8.8.8.8:53
                    Request
                    2.159.190.20.in-addr.arpa
                    IN PTR
                    Response
                  • flag-us
                    DNS
                    79.110.32.13.in-addr.arpa
                    Remote address:
                    8.8.8.8:53
                    Request
                    79.110.32.13.in-addr.arpa
                    IN PTR
                    Response
                    79.110.32.13.in-addr.arpa
                    IN PTR
                    server-13-32-110-79vie50r cloudfrontnet
                  • flag-us
                    DNS
                    186.244.140.51.in-addr.arpa
                    Remote address:
                    8.8.8.8:53
                    Request
                    186.244.140.51.in-addr.arpa
                    IN PTR
                    Response
                  • flag-us
                    DNS
                    cdn2.editmysite.com
                    Remote address:
                    8.8.8.8:53
                    Request
                    cdn2.editmysite.com
                    IN A
                    Response
                    cdn2.editmysite.com
                    IN CNAME
                    weebly.map.fastly.net
                    weebly.map.fastly.net
                    IN A
                    151.101.1.46
                    weebly.map.fastly.net
                    IN A
                    151.101.65.46
                    weebly.map.fastly.net
                    IN A
                    151.101.129.46
                    weebly.map.fastly.net
                    IN A
                    151.101.193.46
                  • flag-us
                    DNS
                    edgestatic.azureedge.net
                    Remote address:
                    8.8.8.8:53
                    Request
                    edgestatic.azureedge.net
                    IN A
                    Response
                    edgestatic.azureedge.net
                    IN CNAME
                    edgestatic.afd.azureedge.net
                    edgestatic.afd.azureedge.net
                    IN CNAME
                    azureedge-t-prod.trafficmanager.net
                    azureedge-t-prod.trafficmanager.net
                    IN CNAME
                    shed.dual-low.part-0036.t-0009.t-msedge.net
                    shed.dual-low.part-0036.t-0009.t-msedge.net
                    IN CNAME
                    part-0036.t-0009.t-msedge.net
                    part-0036.t-0009.t-msedge.net
                    IN A
                    13.107.246.64
                    part-0036.t-0009.t-msedge.net
                    IN A
                    13.107.213.64
                  • flag-us
                    DNS
                    edgestatic.azureedge.net
                    Remote address:
                    8.8.8.8:53
                    Request
                    edgestatic.azureedge.net
                    IN Unknown
                    Response
                    edgestatic.azureedge.net
                    IN CNAME
                    edgestatic.afd.azureedge.net
                    edgestatic.afd.azureedge.net
                    IN CNAME
                    azureedge-t-prod.trafficmanager.net
                    azureedge-t-prod.trafficmanager.net
                    IN CNAME
                    shed.dual-low.part-0036.t-0009.t-msedge.net
                    shed.dual-low.part-0036.t-0009.t-msedge.net
                    IN CNAME
                    part-0036.t-0009.t-msedge.net
                  • flag-us
                    DNS
                    c.s-microsoft.com
                    Remote address:
                    8.8.8.8:53
                    Request
                    c.s-microsoft.com
                    IN A
                    Response
                    c.s-microsoft.com
                    IN CNAME
                    c-s.cms.ms.akadns.net
                    c-s.cms.ms.akadns.net
                    IN CNAME
                    c.s-microsoft.com-c.edgekey.net
                    c.s-microsoft.com-c.edgekey.net
                    IN CNAME
                    e13678.dscg.akamaiedge.net
                    e13678.dscg.akamaiedge.net
                    IN A
                    23.53.113.225
                  • flag-us
                    DNS
                    c.s-microsoft.com
                    Remote address:
                    8.8.8.8:53
                    Request
                    c.s-microsoft.com
                    IN Unknown
                    Response
                    c.s-microsoft.com
                    IN CNAME
                    c-s.cms.ms.akadns.net
                    c-s.cms.ms.akadns.net
                    IN CNAME
                    c.s-microsoft.com-c.edgekey.net
                    c.s-microsoft.com-c.edgekey.net
                    IN CNAME
                    e13678.dscg.akamaiedge.net
                  • flag-us
                    DNS
                    77.190.18.2.in-addr.arpa
                    Remote address:
                    8.8.8.8:53
                    Request
                    77.190.18.2.in-addr.arpa
                    IN PTR
                    Response
                    77.190.18.2.in-addr.arpa
                    IN PTR
                    a2-18-190-77deploystaticakamaitechnologiescom
                  • flag-us
                    DNS
                    43.58.199.20.in-addr.arpa
                    Remote address:
                    8.8.8.8:53
                    Request
                    43.58.199.20.in-addr.arpa
                    IN PTR
                    Response
                  • flag-nl
                    GET
                    https://www.bing.com/th?id=OADD2.10239359720591_10PHTLBML42K6TRZO&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=24&h=24&dynsize=1&qlt=90
                    Remote address:
                    23.62.61.152:443
                    Request
                    GET /th?id=OADD2.10239359720591_10PHTLBML42K6TRZO&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=24&h=24&dynsize=1&qlt=90 HTTP/2.0
                    host: www.bing.com
                    accept: */*
                    accept-encoding: gzip, deflate, br
                    user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                    Response
                    HTTP/2.0 200
                    cache-control: public, max-age=2592000
                    content-type: image/png
                    access-control-allow-origin: *
                    access-control-allow-headers: *
                    access-control-allow-methods: GET, POST, OPTIONS
                    timing-allow-origin: *
                    report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QWthbWFp"}]}
                    nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                    content-length: 1107
                    date: Fri, 10 May 2024 21:54:03 GMT
                    alt-svc: h3=":443"; ma=93600
                    x-cdn-traceid: 0.943d3e17.1715378043.3063e3b
                  • flag-us
                    DNS
                    wcpstatic.microsoft.com
                    Remote address:
                    8.8.8.8:53
                    Request
                    wcpstatic.microsoft.com
                    IN A
                    Response
                    wcpstatic.microsoft.com
                    IN CNAME
                    consentdeliveryfd.azurefd.net
                    consentdeliveryfd.azurefd.net
                    IN CNAME
                    firstparty-azurefd-prod.trafficmanager.net
                    firstparty-azurefd-prod.trafficmanager.net
                    IN CNAME
                    shed.dual-low.part-0036.t-0009.t-msedge.net
                    shed.dual-low.part-0036.t-0009.t-msedge.net
                    IN CNAME
                    part-0036.t-0009.t-msedge.net
                    part-0036.t-0009.t-msedge.net
                    IN A
                    13.107.246.64
                    part-0036.t-0009.t-msedge.net
                    IN A
                    13.107.213.64
                  • flag-us
                    DNS
                    wcpstatic.microsoft.com
                    Remote address:
                    8.8.8.8:53
                    Request
                    wcpstatic.microsoft.com
                    IN Unknown
                    Response
                    wcpstatic.microsoft.com
                    IN CNAME
                    consentdeliveryfd.azurefd.net
                    consentdeliveryfd.azurefd.net
                    IN CNAME
                    firstparty-azurefd-prod.trafficmanager.net
                    firstparty-azurefd-prod.trafficmanager.net
                    IN CNAME
                    shed.dual-low.part-0036.t-0009.t-msedge.net
                    shed.dual-low.part-0036.t-0009.t-msedge.net
                    IN CNAME
                    part-0036.t-0009.t-msedge.net
                  • flag-us
                    DNS
                    152.61.62.23.in-addr.arpa
                    Remote address:
                    8.8.8.8:53
                    Request
                    152.61.62.23.in-addr.arpa
                    IN PTR
                    Response
                    152.61.62.23.in-addr.arpa
                    IN PTR
                    a23-62-61-152deploystaticakamaitechnologiescom
                  • flag-us
                    DNS
                    183.59.114.20.in-addr.arpa
                    Remote address:
                    8.8.8.8:53
                    Request
                    183.59.114.20.in-addr.arpa
                    IN PTR
                    Response
                  • flag-us
                    DNS
                    171.39.242.20.in-addr.arpa
                    Remote address:
                    8.8.8.8:53
                    Request
                    171.39.242.20.in-addr.arpa
                    IN PTR
                    Response
                  • flag-us
                    DNS
                    24.121.18.2.in-addr.arpa
                    Remote address:
                    8.8.8.8:53
                    Request
                    24.121.18.2.in-addr.arpa
                    IN PTR
                    Response
                    24.121.18.2.in-addr.arpa
                    IN PTR
                    a2-18-121-24deploystaticakamaitechnologiescom
                  • flag-us
                    DNS
                    14.227.111.52.in-addr.arpa
                    Remote address:
                    8.8.8.8:53
                    Request
                    14.227.111.52.in-addr.arpa
                    IN PTR
                    Response
                  • flag-us
                    DNS
                    142.212.58.216.in-addr.arpa
                    Remote address:
                    8.8.8.8:53
                    Request
                    142.212.58.216.in-addr.arpa
                    IN PTR
                    Response
                    142.212.58.216.in-addr.arpa
                    IN PTR
                    ams15s21-in-f141e100net
                    142.212.58.216.in-addr.arpa
                    IN PTR
                    ams15s21-in-f142�I
                    142.212.58.216.in-addr.arpa
                    IN PTR
                    fra16s46-in-f14�I
                  • flag-us
                    DNS
                    172.210.232.199.in-addr.arpa
                    Remote address:
                    8.8.8.8:53
                    Request
                    172.210.232.199.in-addr.arpa
                    IN PTR
                    Response
                  • flag-us
                    DNS
                    98.61.62.23.in-addr.arpa
                    Remote address:
                    8.8.8.8:53
                    Request
                    98.61.62.23.in-addr.arpa
                    IN PTR
                    Response
                    98.61.62.23.in-addr.arpa
                    IN PTR
                    a23-62-61-98deploystaticakamaitechnologiescom
                  • flag-us
                    DNS
                    211.143.182.52.in-addr.arpa
                    Remote address:
                    8.8.8.8:53
                    Request
                    211.143.182.52.in-addr.arpa
                    IN PTR
                    Response
                  • 94.245.104.56:443
                    api.edgeoffer.microsoft.com
                    tls
                    3.5kB
                     7.6kB
                     14
                    14
                  • 13.107.6.158:443
                    business.bing.com
                    tls
                    3.3kB
                     9.7kB
                     18
                    22
                  • 2.18.121.23:443
                    bzib.nelreports.net
                    tls
                    3.8kB
                     6.1kB
                     14
                    16
                  • 216.58.206.74:443
                    ajax.googleapis.com
                    tls
                    4.2kB
                     43.5kB
                     39
                    41
                  • 2.21.17.194:443
                    www.microsoft.com
                    tls
                    4.1kB
                     23.3kB
                     27
                    36
                  • 13.32.110.79:443
                    screenshots.en.sftcdn.net
                    tls
                    3.1kB
                     7.5kB
                     15
                    18
                  • 151.101.1.46:445
                    cdn2.editmysite.com
                    260 B
                     5
                  • 51.140.244.186:443
                    nav-edge.smartscreen.microsoft.com
                    tls
                    11.8kB
                     12.7kB
                     30
                    31
                  • 51.140.244.186:443
                    nav-edge.smartscreen.microsoft.com
                    tls
                    2.2kB
                     6.7kB
                     9
                    8
                  • 151.101.65.46:445
                    cdn2.editmysite.com
                    260 B
                     5
                  • 151.101.129.46:445
                    cdn2.editmysite.com
                    260 B
                     5
                  • 151.101.193.46:445
                    cdn2.editmysite.com
                    260 B
                     5
                  • 13.107.246.64:443
                    edgestatic.azureedge.net
                    tls
                    3.1kB
                     7.8kB
                     13
                    14
                  • 13.107.246.64:443
                    edgestatic.azureedge.net
                    tls
                    120.1kB
                     6.0MB
                     2468
                    4299
                  • 13.107.246.64:443
                    edgestatic.azureedge.net
                    tls
                    3.0kB
                     7.8kB
                     13
                    14
                  • 151.101.1.46:139
                    cdn2.editmysite.com
                    260 B
                     5
                  • 23.62.61.152:443
                    https://www.bing.com/th?id=OADD2.10239359720591_10PHTLBML42K6TRZO&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=24&h=24&dynsize=1&qlt=90
                    tls, http2
                    1.4kB
                     6.4kB
                     16
                    12

                    HTTP Request

                    GET https://www.bing.com/th?id=OADD2.10239359720591_10PHTLBML42K6TRZO&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=24&h=24&dynsize=1&qlt=90

                    HTTP Response

                    200
                  • 13.107.246.64:443
                    edgestatic.azureedge.net
                    tls
                    9.3kB
                     274.9kB
                     122
                    217
                  • 13.107.246.64:443
                    wcpstatic.microsoft.com
                    tls
                    5.4kB
                     91.0kB
                     53
                    78
                  • 23.62.61.152:443
                    www.bing.com
                    tls
                    2.3kB
                     5.2kB
                     10
                    12
                  • 216.58.204.74:445
                    fonts.googleapis.com
                    260 B
                     5
                  • 216.58.204.74:139
                    fonts.googleapis.com
                    260 B
                     5
                  • 23.62.61.98:443
                    www.bing.com
                    tls
                    2.6kB
                     986 B
                     9
                    9
                  • 8.8.8.8:53
                    api.edgeoffer.microsoft.com
                    dns
                    73 B
                     226 B
                     1
                    1

                    DNS Request

                    api.edgeoffer.microsoft.com

                    DNS Response

                    94.245.104.56

                  • 8.8.8.8:53
                    api.edgeoffer.microsoft.com
                    dns
                    73 B
                     271 B
                     1
                    1

                    DNS Request

                    api.edgeoffer.microsoft.com

                  • 8.8.8.8:53
                    business.bing.com
                    dns
                    63 B
                     144 B
                     1
                    1

                    DNS Request

                    business.bing.com

                    DNS Response

                    13.107.6.158

                  • 8.8.8.8:53
                    business.bing.com
                    dns
                    63 B
                     185 B
                     1
                    1

                    DNS Request

                    business.bing.com

                  • 8.8.8.8:53
                    bzib.nelreports.net
                    dns
                    65 B
                     172 B
                     1
                    1

                    DNS Request

                    bzib.nelreports.net

                    DNS Response

                    2.18.121.23
                    2.18.121.10

                  • 8.8.8.8:53
                    bzib.nelreports.net
                    dns
                    65 B
                     204 B
                     1
                    1

                    DNS Request

                    bzib.nelreports.net

                  • 8.8.8.8:53
                    ajax.googleapis.com
                    dns
                    65 B
                     81 B
                     1
                    1

                    DNS Request

                    ajax.googleapis.com

                    DNS Response

                    216.58.206.74

                  • 8.8.8.8:53
                    ajax.googleapis.com
                    dns
                    65 B
                     122 B
                     1
                    1

                    DNS Request

                    ajax.googleapis.com

                  • 8.8.8.8:53
                    www.microsoft.com
                    dns
                    63 B
                     230 B
                     1
                    1

                    DNS Request

                    www.microsoft.com

                    DNS Response

                    2.21.17.194

                  • 8.8.8.8:53
                    screenshots.en.sftcdn.net
                    dns
                    71 B
                     175 B
                     1
                    1

                    DNS Request

                    screenshots.en.sftcdn.net

                    DNS Response

                    13.32.110.79
                    13.32.110.119
                    13.32.110.31
                    13.32.110.103

                  • 8.8.8.8:53
                    screenshots.en.sftcdn.net
                    dns
                    71 B
                     191 B
                     1
                    1

                    DNS Request

                    screenshots.en.sftcdn.net

                  • 8.8.8.8:53
                    www.microsoft.com
                    dns
                    63 B
                     230 B
                     1
                    1

                    DNS Request

                    www.microsoft.com

                    DNS Response

                    2.21.17.194

                  • 8.8.8.8:53
                    www.microsoft.com
                    dns
                    63 B
                     275 B
                     1
                    1

                    DNS Request

                    www.microsoft.com

                  • 8.8.8.8:53
                    cdn2.editmysite.com
                    dns
                    65 B
                     164 B
                     1
                    1

                    DNS Request

                    cdn2.editmysite.com

                    DNS Response

                    151.101.1.46
                    151.101.65.46
                    151.101.129.46
                    151.101.193.46

                  • 8.8.8.8:53
                    nav-edge.smartscreen.microsoft.com
                    dns
                    80 B
                     199 B
                     1
                    1

                    DNS Request

                    nav-edge.smartscreen.microsoft.com

                    DNS Response

                    51.140.244.186

                  • 8.8.8.8:53
                    nav-edge.smartscreen.microsoft.com
                    dns
                    80 B
                     243 B
                     1
                    1

                    DNS Request

                    nav-edge.smartscreen.microsoft.com

                  • 8.8.8.8:53
                    www.microsoft.com
                    dns
                    63 B
                     230 B
                     1
                    1

                    DNS Request

                    www.microsoft.com

                    DNS Response

                    2.21.17.194

                  • 8.8.8.8:53
                    23.121.18.2.in-addr.arpa
                    dns
                    70 B
                     133 B
                     1
                    1

                    DNS Request

                    23.121.18.2.in-addr.arpa

                  • 8.8.8.8:53
                    56.104.245.94.in-addr.arpa
                    dns
                    72 B
                     146 B
                     1
                    1

                    DNS Request

                    56.104.245.94.in-addr.arpa

                  • 8.8.8.8:53
                    194.17.21.2.in-addr.arpa
                    dns
                    70 B
                     133 B
                     1
                    1

                    DNS Request

                    194.17.21.2.in-addr.arpa

                  • 8.8.8.8:53
                    74.206.58.216.in-addr.arpa
                    dns
                    72 B
                     172 B
                     1
                    1

                    DNS Request

                    74.206.58.216.in-addr.arpa

                  • 8.8.8.8:53
                    2.159.190.20.in-addr.arpa
                    dns
                    71 B
                     157 B
                     1
                    1

                    DNS Request

                    2.159.190.20.in-addr.arpa

                  • 8.8.8.8:53
                    79.110.32.13.in-addr.arpa
                    dns
                    71 B
                     127 B
                     1
                    1

                    DNS Request

                    79.110.32.13.in-addr.arpa

                  • 8.8.8.8:53
                    186.244.140.51.in-addr.arpa
                    dns
                    73 B
                     147 B
                     1
                    1

                    DNS Request

                    186.244.140.51.in-addr.arpa

                  • 8.8.8.8:53
                    cdn2.editmysite.com
                    dns
                    65 B
                     164 B
                     1
                    1

                    DNS Request

                    cdn2.editmysite.com

                    DNS Response

                    151.101.1.46
                    151.101.65.46
                    151.101.129.46
                    151.101.193.46

                  • 8.8.8.8:53
                    edgestatic.azureedge.net
                    dns
                    70 B
                     245 B
                     1
                    1

                    DNS Request

                    edgestatic.azureedge.net

                    DNS Response

                    13.107.246.64
                    13.107.213.64

                  • 8.8.8.8:53
                    edgestatic.azureedge.net
                    dns
                    70 B
                     273 B
                     1
                    1

                    DNS Request

                    edgestatic.azureedge.net

                  • 8.8.8.8:53
                    c.s-microsoft.com
                    dns
                    63 B
                     193 B
                     1
                    1

                    DNS Request

                    c.s-microsoft.com

                    DNS Response

                    23.53.113.225

                  • 8.8.8.8:53
                    c.s-microsoft.com
                    dns
                    63 B
                     238 B
                     1
                    1

                    DNS Request

                    c.s-microsoft.com

                  • 8.8.8.8:53
                    77.190.18.2.in-addr.arpa
                    dns
                    70 B
                     133 B
                     1
                    1

                    DNS Request

                    77.190.18.2.in-addr.arpa

                  • 8.8.8.8:53
                    43.58.199.20.in-addr.arpa
                    dns
                    71 B
                     157 B
                     1
                    1

                    DNS Request

                    43.58.199.20.in-addr.arpa

                  • 8.8.8.8:53
                    wcpstatic.microsoft.com
                    dns
                    69 B
                     265 B
                     1
                    1

                    DNS Request

                    wcpstatic.microsoft.com

                    DNS Response

                    13.107.246.64
                    13.107.213.64

                  • 8.8.8.8:53
                    wcpstatic.microsoft.com
                    dns
                    69 B
                     280 B
                     1
                    1

                    DNS Request

                    wcpstatic.microsoft.com

                  • 8.8.8.8:53
                    152.61.62.23.in-addr.arpa
                    dns
                    71 B
                     135 B
                     1
                    1

                    DNS Request

                    152.61.62.23.in-addr.arpa

                  • 8.8.8.8:53
                    183.59.114.20.in-addr.arpa
                    dns
                    72 B
                     158 B
                     1
                    1

                    DNS Request

                    183.59.114.20.in-addr.arpa

                  • 8.8.8.8:53
                    171.39.242.20.in-addr.arpa
                    dns
                    72 B
                     158 B
                     1
                    1

                    DNS Request

                    171.39.242.20.in-addr.arpa

                  • 8.8.8.8:53
                    24.121.18.2.in-addr.arpa
                    dns
                    70 B
                     133 B
                     1
                    1

                    DNS Request

                    24.121.18.2.in-addr.arpa

                  • 8.8.8.8:53
                    14.227.111.52.in-addr.arpa
                    dns
                    72 B
                     158 B
                     1
                    1

                    DNS Request

                    14.227.111.52.in-addr.arpa

                  • 8.8.8.8:53
                    142.212.58.216.in-addr.arpa
                    dns
                    73 B
                     173 B
                     1
                    1

                    DNS Request

                    142.212.58.216.in-addr.arpa

                  • 224.0.0.251:5353
                    204 B
                     3
                  • 8.8.8.8:53
                    172.210.232.199.in-addr.arpa
                    dns
                    74 B
                     128 B
                     1
                    1

                    DNS Request

                    172.210.232.199.in-addr.arpa

                  • 8.8.8.8:53
                    98.61.62.23.in-addr.arpa
                    dns
                    70 B
                     133 B
                     1
                    1

                    DNS Request

                    98.61.62.23.in-addr.arpa

                  • 8.8.8.8:53
                    211.143.182.52.in-addr.arpa
                    dns
                    73 B
                     147 B
                     1
                    1

                    DNS Request

                    211.143.182.52.in-addr.arpa

                  MITRE ATT&CK Matrix

                  Replay Monitor

                  Loading Replay Monitor...

                  Downloads

                  We care about your privacy.

                  This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.