Overview

overview

1

Static

static

1

4cc60db191...8.html

windows7-x64

1

4cc60db191...8.html

windows10-2004-x64

1

Analysis

  • max time kernel
    139s
  • max time network
    164s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16/05/2024, 19:51 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    4cc60db191b50d95fde26b3dae601acb_JaffaCakes118.html

  • Size

    463KB

  • MD5

    4cc60db191b50d95fde26b3dae601acb

  • SHA1

    318d86c9d093e5f8117dfcdd4ed4be77c023d12e

  • SHA256

    bd85ad35e15ed0ba9d519b4f0e7ad072a8d70bb8ba6f1825d3d00f890b97771d

  • SHA512

    7c298c98ea1dad96fa1bff69d25a0f387402c99fe36f43463dfba4f6654e863a20a49b444cd0807c711bb4d77dec116b1cec09be3150da9d8178f7fd6bda21d9

  • SSDEEP

    6144:S5sMYod+X3oI+Y5QrsMYod+X3oI+YySsMYod+X3oI+YLsMYod+X3oI+YQ:k5d+X3s5d+X355d+X315d+X3+

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\4cc60db191b50d95fde26b3dae601acb_JaffaCakes118.html
    1⤵
      PID:4292
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=17 --mojo-platform-channel-handle=4036 --field-trial-handle=2328,i,5873823382323802923,13134441441264702821,262144 --variations-seed-version /prefetch:1
      1⤵
        PID:4416
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=18 --mojo-platform-channel-handle=4868 --field-trial-handle=2328,i,5873823382323802923,13134441441264702821,262144 --variations-seed-version /prefetch:1
        1⤵
          PID:4556
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=5816 --field-trial-handle=2328,i,5873823382323802923,13134441441264702821,262144 --variations-seed-version /prefetch:8
          1⤵
            PID:3552
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=20 --mojo-platform-channel-handle=5828 --field-trial-handle=2328,i,5873823382323802923,13134441441264702821,262144 --variations-seed-version /prefetch:1
            1⤵
              PID:1992
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --no-appcompat-clear --mojo-platform-channel-handle=4916 --field-trial-handle=2328,i,5873823382323802923,13134441441264702821,262144 --variations-seed-version /prefetch:8
              1⤵
                PID:2764

              Network

              • flag-us
                DNS
                81.171.91.138.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                81.171.91.138.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                business.bing.com
                Remote address:
                8.8.8.8:53
                Request
                business.bing.com
                IN A
                Response
                business.bing.com
                IN CNAME
                business-bing-com.b-0005.b-msedge.net
                business-bing-com.b-0005.b-msedge.net
                IN CNAME
                b-0005.b-msedge.net
                b-0005.b-msedge.net
                IN A
                13.107.6.158
              • flag-us
                DNS
                business.bing.com
                Remote address:
                8.8.8.8:53
                Request
                business.bing.com
                IN Unknown
                Response
                business.bing.com
                IN CNAME
                business-bing-com.b-0005.b-msedge.net
                business-bing-com.b-0005.b-msedge.net
                IN CNAME
                b-0005.b-msedge.net
              • flag-us
                DNS
                76.234.34.23.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                76.234.34.23.in-addr.arpa
                IN PTR
                Response
                76.234.34.23.in-addr.arpa
                IN PTR
                a23-34-234-76deploystaticakamaitechnologiescom
              • flag-us
                DNS
                nav-edge.smartscreen.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                nav-edge.smartscreen.microsoft.com
                IN A
                Response
                nav-edge.smartscreen.microsoft.com
                IN CNAME
                tm-prod-wd-csp-edge.trafficmanager.net
                tm-prod-wd-csp-edge.trafficmanager.net
                IN CNAME
                prod-agic-uw-2.ukwest.cloudapp.azure.com
                prod-agic-uw-2.ukwest.cloudapp.azure.com
                IN A
                51.140.244.186
              • flag-us
                DNS
                nav-edge.smartscreen.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                nav-edge.smartscreen.microsoft.com
                IN Unknown
                Response
                nav-edge.smartscreen.microsoft.com
                IN CNAME
                tm-prod-wd-csp-edge.trafficmanager.net
                tm-prod-wd-csp-edge.trafficmanager.net
                IN CNAME
                prod-agic-us-3.uksouth.cloudapp.azure.com
              • flag-us
                DNS
                www.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                www.microsoft.com
                IN A
                Response
                www.microsoft.com
                IN CNAME
                www.microsoft.com-c-3.edgekey.net
                www.microsoft.com-c-3.edgekey.net
                IN CNAME
                www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                IN CNAME
                e13678.dscb.akamaiedge.net
                e13678.dscb.akamaiedge.net
                IN A
                23.34.233.128
              • flag-us
                DNS
                www.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                www.microsoft.com
                IN A
                Response
                www.microsoft.com
                IN CNAME
                www.microsoft.com-c-3.edgekey.net
                www.microsoft.com-c-3.edgekey.net
                IN CNAME
                www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                IN CNAME
                e13678.dscb.akamaiedge.net
                e13678.dscb.akamaiedge.net
                IN A
                23.34.233.128
              • flag-us
                DNS
                www.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                www.microsoft.com
                IN Unknown
                Response
                www.microsoft.com
                IN CNAME
                www.microsoft.com-c-3.edgekey.net
                www.microsoft.com-c-3.edgekey.net
                IN CNAME
                www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                IN CNAME
                e13678.dscb.akamaiedge.net
              • flag-us
                DNS
                bzib.nelreports.net
                Remote address:
                8.8.8.8:53
                Request
                bzib.nelreports.net
                IN A
                Response
                bzib.nelreports.net
                IN CNAME
                bzib.nelreports.net.akamaized.net
                bzib.nelreports.net.akamaized.net
                IN CNAME
                a416.dscd.akamai.net
                a416.dscd.akamai.net
                IN A
                96.16.53.162
                a416.dscd.akamai.net
                IN A
                96.16.53.149
              • flag-us
                DNS
                bzib.nelreports.net
                Remote address:
                8.8.8.8:53
                Request
                bzib.nelreports.net
                IN Unknown
                Response
                bzib.nelreports.net
                IN CNAME
                bzib.nelreports.net.akamaized.net
                bzib.nelreports.net.akamaized.net
                IN CNAME
                a416.dscd.akamai.net
              • flag-us
                DNS
                ag8aq.cn
                Remote address:
                8.8.8.8:53
                Request
                ag8aq.cn
                IN A
                Response
              • flag-us
                DNS
                ag8aq.cn
                Remote address:
                8.8.8.8:53
                Request
                ag8aq.cn
                IN Unknown
                Response
              • flag-us
                DNS
                ag8aq.cn
                Remote address:
                8.8.8.8:53
                Request
                ag8aq.cn
                IN A
                Response
              • flag-us
                DNS
                www.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                www.microsoft.com
                IN A
                Response
                www.microsoft.com
                IN CNAME
                www.microsoft.com-c-3.edgekey.net
                www.microsoft.com-c-3.edgekey.net
                IN CNAME
                www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                IN CNAME
                e13678.dscb.akamaiedge.net
                e13678.dscb.akamaiedge.net
                IN A
                23.34.233.128
              • flag-us
                DNS
                128.233.34.23.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                128.233.34.23.in-addr.arpa
                IN PTR
                Response
                128.233.34.23.in-addr.arpa
                IN PTR
                a23-34-233-128deploystaticakamaitechnologiescom
              • flag-us
                DNS
                128.233.34.23.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                128.233.34.23.in-addr.arpa
                IN PTR
              • flag-us
                DNS
                162.53.16.96.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                162.53.16.96.in-addr.arpa
                IN PTR
                Response
                162.53.16.96.in-addr.arpa
                IN PTR
                a96-16-53-162deploystaticakamaitechnologiescom
              • flag-us
                DNS
                162.53.16.96.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                162.53.16.96.in-addr.arpa
                IN PTR
              • flag-us
                DNS
                28.118.140.52.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                28.118.140.52.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                95.221.229.192.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                95.221.229.192.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                68.159.190.20.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                68.159.190.20.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                88.90.14.23.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                88.90.14.23.in-addr.arpa
                IN PTR
                Response
                88.90.14.23.in-addr.arpa
                IN PTR
                a23-14-90-88deploystaticakamaitechnologiescom
              • flag-us
                DNS
                nw-umwatson.events.data.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                nw-umwatson.events.data.microsoft.com
                IN A
                Response
                nw-umwatson.events.data.microsoft.com
                IN CNAME
                blobcollector.events.data.trafficmanager.net
                blobcollector.events.data.trafficmanager.net
                IN CNAME
                onedsblobprdcus16.centralus.cloudapp.azure.com
                onedsblobprdcus16.centralus.cloudapp.azure.com
                IN A
                104.208.16.94
              • flag-us
                POST
                https://nw-umwatson.events.data.microsoft.com/Telemetry.Request
                Remote address:
                104.208.16.94:443
                Request
                POST /Telemetry.Request HTTP/1.1
                Connection: Keep-Alive
                Content-Type: application/xml
                User-Agent: Crashpad/0.8.0 WinHTTP/10.0.19041.1151 Windows_NT/10.0.19041.1202 (x64)
                Content-Length: 3685
                Host: nw-umwatson.events.data.microsoft.com
                Response
                HTTP/1.1 200 200 OK
                Content-Length: 634
                Content-Type: text/xml
                Server: Microsoft-HTTPAPI/2.0
                Strict-Transport-Security: max-age=31536000
                Date: Thu, 16 May 2024 19:51:57 GMT
              • flag-us
                DNS
                104.219.191.52.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                104.219.191.52.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                15.164.165.52.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                15.164.165.52.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                183.59.114.20.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                183.59.114.20.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                94.16.208.104.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                94.16.208.104.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                chromewebstore.googleapis.com
                Remote address:
                8.8.8.8:53
                Request
                chromewebstore.googleapis.com
                IN A
                Response
                chromewebstore.googleapis.com
                IN A
                142.250.178.10
                chromewebstore.googleapis.com
                IN A
                172.217.16.234
                chromewebstore.googleapis.com
                IN A
                142.250.200.10
                chromewebstore.googleapis.com
                IN A
                142.250.200.42
                chromewebstore.googleapis.com
                IN A
                216.58.201.106
                chromewebstore.googleapis.com
                IN A
                216.58.204.74
                chromewebstore.googleapis.com
                IN A
                216.58.213.10
                chromewebstore.googleapis.com
                IN A
                172.217.169.10
                chromewebstore.googleapis.com
                IN A
                216.58.212.202
                chromewebstore.googleapis.com
                IN A
                172.217.169.74
                chromewebstore.googleapis.com
                IN A
                142.250.179.234
                chromewebstore.googleapis.com
                IN A
                142.250.180.10
                chromewebstore.googleapis.com
                IN A
                142.250.187.202
                chromewebstore.googleapis.com
                IN A
                142.250.187.234
              • flag-us
                DNS
                chromewebstore.googleapis.com
                Remote address:
                8.8.8.8:53
                Request
                chromewebstore.googleapis.com
                IN Unknown
                Response
              • flag-us
                DNS
                edgestatic.azureedge.net
                Remote address:
                8.8.8.8:53
                Request
                edgestatic.azureedge.net
                IN A
                Response
                edgestatic.azureedge.net
                IN CNAME
                edgestatic.afd.azureedge.net
                edgestatic.afd.azureedge.net
                IN CNAME
                azureedge-t-prod.trafficmanager.net
                azureedge-t-prod.trafficmanager.net
                IN CNAME
                shed.dual-low.part-0036.t-0009.t-msedge.net
                shed.dual-low.part-0036.t-0009.t-msedge.net
                IN CNAME
                part-0036.t-0009.t-msedge.net
                part-0036.t-0009.t-msedge.net
                IN A
                13.107.246.64
                part-0036.t-0009.t-msedge.net
                IN A
                13.107.213.64
              • flag-us
                DNS
                edgestatic.azureedge.net
                Remote address:
                8.8.8.8:53
                Request
                edgestatic.azureedge.net
                IN Unknown
                Response
                edgestatic.azureedge.net
                IN CNAME
                edgestatic.afd.azureedge.net
                edgestatic.afd.azureedge.net
                IN CNAME
                azureedge-t-prod.trafficmanager.net
                azureedge-t-prod.trafficmanager.net
                IN CNAME
                shed.dual-low.part-0036.t-0009.t-msedge.net
                shed.dual-low.part-0036.t-0009.t-msedge.net
                IN CNAME
                part-0036.t-0009.t-msedge.net
              • flag-us
                DNS
                c.s-microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                c.s-microsoft.com
                IN A
                Response
                c.s-microsoft.com
                IN CNAME
                c-s.cms.ms.akadns.net
                c-s.cms.ms.akadns.net
                IN CNAME
                c.s-microsoft.com-c.edgekey.net
                c.s-microsoft.com-c.edgekey.net
                IN CNAME
                e13678.dscg.akamaiedge.net
                e13678.dscg.akamaiedge.net
                IN A
                23.34.233.128
              • flag-us
                DNS
                c.s-microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                c.s-microsoft.com
                IN Unknown
                Response
                c.s-microsoft.com
                IN CNAME
                c-s.cms.ms.akadns.net
                c-s.cms.ms.akadns.net
                IN CNAME
                c.s-microsoft.com-c.edgekey.net
                c.s-microsoft.com-c.edgekey.net
                IN CNAME
                e13678.dscg.akamaiedge.net
              • flag-us
                DNS
                88.61.62.23.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                88.61.62.23.in-addr.arpa
                IN PTR
                Response
                88.61.62.23.in-addr.arpa
                IN PTR
                a23-62-61-88deploystaticakamaitechnologiescom
              • flag-us
                DNS
                10.178.250.142.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                10.178.250.142.in-addr.arpa
                IN PTR
                Response
                10.178.250.142.in-addr.arpa
                IN PTR
                lhr48s27-in-f101e100net
              • flag-us
                DNS
                64.246.107.13.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                64.246.107.13.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                wcpstatic.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                wcpstatic.microsoft.com
                IN A
                Response
                wcpstatic.microsoft.com
                IN CNAME
                consentdeliveryfd.azurefd.net
                consentdeliveryfd.azurefd.net
                IN CNAME
                firstparty-azurefd-prod.trafficmanager.net
                firstparty-azurefd-prod.trafficmanager.net
                IN CNAME
                shed.dual-low.part-0036.t-0009.t-msedge.net
                shed.dual-low.part-0036.t-0009.t-msedge.net
                IN CNAME
                part-0036.t-0009.t-msedge.net
                part-0036.t-0009.t-msedge.net
                IN A
                13.107.246.64
                part-0036.t-0009.t-msedge.net
                IN A
                13.107.213.64
              • flag-us
                DNS
                wcpstatic.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                wcpstatic.microsoft.com
                IN Unknown
                Response
                wcpstatic.microsoft.com
                IN CNAME
                consentdeliveryfd.azurefd.net
                consentdeliveryfd.azurefd.net
                IN CNAME
                firstparty-azurefd-prod.trafficmanager.net
                firstparty-azurefd-prod.trafficmanager.net
                IN CNAME
                shed.dual-low.part-0036.t-0009.t-msedge.net
                shed.dual-low.part-0036.t-0009.t-msedge.net
                IN CNAME
                part-0036.t-0009.t-msedge.net
              • flag-us
                DNS
                81.90.14.23.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                81.90.14.23.in-addr.arpa
                IN PTR
                Response
                81.90.14.23.in-addr.arpa
                IN PTR
                a23-14-90-81deploystaticakamaitechnologiescom
              • flag-us
                DNS
                14.227.111.52.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                14.227.111.52.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                14.227.111.52.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                14.227.111.52.in-addr.arpa
                IN PTR
              • flag-us
                DNS
                105.193.132.51.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                105.193.132.51.in-addr.arpa
                IN PTR
                Response
              • 13.107.6.158:443
                business.bing.com
                tls
                2.0kB
                 9.8kB
                 17
                22
              • 51.140.244.186:443
                nav-edge.smartscreen.microsoft.com
                tls
                10.7kB
                 13.2kB
                 33
                39
              • 13.107.6.158:443
                business.bing.com
                tls
                1.2kB
                 8.0kB
                 10
                13
              • 23.34.233.128:443
                www.microsoft.com
                tls
                2.9kB
                 22.9kB
                 29
                37
              • 96.16.53.162:443
                bzib.nelreports.net
                tls
                2.5kB
                 6.1kB
                 14
                16
              • 13.107.253.64:443
                46 B
                 40 B
                 1
                1
              • 104.208.16.94:443
                https://nw-umwatson.events.data.microsoft.com/Telemetry.Request
                tls, http
                4.9kB
                 7.6kB
                 13
                10

                HTTP Request

                POST https://nw-umwatson.events.data.microsoft.com/Telemetry.Request

                HTTP Response

                200
              • 142.250.178.10:443
                chromewebstore.googleapis.com
                tls
                1.9kB
                 7.9kB
                 16
                17
              • 23.62.61.88:443
                www.bing.com
                tls
                1.1kB
                 5.2kB
                 10
                12
              • 13.107.246.64:443
                edgestatic.azureedge.net
                tls
                94.1kB
                 4.6MB
                 1947
                3343
              • 13.107.246.64:443
                edgestatic.azureedge.net
                tls
                852 B
                 271 B
                 6
                4
              • 13.107.246.64:443
                edgestatic.azureedge.net
                tls
                820 B
                 271 B
                 6
                4
              • 13.107.246.64:443
                edgestatic.azureedge.net
                tls
                7.7kB
                 272.6kB
                 119
                216
              • 13.107.246.64:443
                wcpstatic.microsoft.com
                tls
                4.2kB
                 91.0kB
                 51
                77
              • 23.62.61.88:443
                www.bing.com
                tls
                1.4kB
                 1.3kB
                 9
                9
              • 8.8.8.8:53
                81.171.91.138.in-addr.arpa
                dns
                72 B
                 146 B
                 1
                1

                DNS Request

                81.171.91.138.in-addr.arpa

              • 8.8.8.8:53
                business.bing.com
                dns
                63 B
                 144 B
                 1
                1

                DNS Request

                business.bing.com

                DNS Response

                13.107.6.158

              • 8.8.8.8:53
                business.bing.com
                dns
                63 B
                 185 B
                 1
                1

                DNS Request

                business.bing.com

              • 8.8.8.8:53
                76.234.34.23.in-addr.arpa
                dns
                71 B
                 135 B
                 1
                1

                DNS Request

                76.234.34.23.in-addr.arpa

              • 8.8.8.8:53
                nav-edge.smartscreen.microsoft.com
                dns
                80 B
                 199 B
                 1
                1

                DNS Request

                nav-edge.smartscreen.microsoft.com

                DNS Response

                51.140.244.186

              • 8.8.8.8:53
                nav-edge.smartscreen.microsoft.com
                dns
                80 B
                 244 B
                 1
                1

                DNS Request

                nav-edge.smartscreen.microsoft.com

              • 8.8.8.8:53
                www.microsoft.com
                dns
                63 B
                 230 B
                 1
                1

                DNS Request

                www.microsoft.com

                DNS Response

                23.34.233.128

              • 8.8.8.8:53
                www.microsoft.com
                dns
                63 B
                 230 B
                 1
                1

                DNS Request

                www.microsoft.com

                DNS Response

                23.34.233.128

              • 8.8.8.8:53
                www.microsoft.com
                dns
                63 B
                 275 B
                 1
                1

                DNS Request

                www.microsoft.com

              • 8.8.8.8:53
                bzib.nelreports.net
                dns
                65 B
                 172 B
                 1
                1

                DNS Request

                bzib.nelreports.net

                DNS Response

                96.16.53.162
                96.16.53.149

              • 8.8.8.8:53
                bzib.nelreports.net
                dns
                65 B
                 204 B
                 1
                1

                DNS Request

                bzib.nelreports.net

              • 8.8.8.8:53
                ag8aq.cn
                dns
                54 B
                 107 B
                 1
                1

                DNS Request

                ag8aq.cn

              • 8.8.8.8:53
                ag8aq.cn
                dns
                54 B
                 107 B
                 1
                1

                DNS Request

                ag8aq.cn

              • 8.8.8.8:53
                ag8aq.cn
                dns
                54 B
                 107 B
                 1
                1

                DNS Request

                ag8aq.cn

              • 8.8.8.8:53
                www.microsoft.com
                dns
                63 B
                 230 B
                 1
                1

                DNS Request

                www.microsoft.com

                DNS Response

                23.34.233.128

              • 8.8.8.8:53
                128.233.34.23.in-addr.arpa
                dns
                144 B
                 137 B
                 2
                1

                DNS Request

                128.233.34.23.in-addr.arpa

                DNS Request

                128.233.34.23.in-addr.arpa

              • 8.8.8.8:53
                162.53.16.96.in-addr.arpa
                dns
                142 B
                 135 B
                 2
                1

                DNS Request

                162.53.16.96.in-addr.arpa

                DNS Request

                162.53.16.96.in-addr.arpa

              • 8.8.8.8:53
                28.118.140.52.in-addr.arpa
                dns
                72 B
                 158 B
                 1
                1

                DNS Request

                28.118.140.52.in-addr.arpa

              • 8.8.8.8:53
                95.221.229.192.in-addr.arpa
                dns
                73 B
                 144 B
                 1
                1

                DNS Request

                95.221.229.192.in-addr.arpa

              • 8.8.8.8:53
                68.159.190.20.in-addr.arpa
                dns
                72 B
                 158 B
                 1
                1

                DNS Request

                68.159.190.20.in-addr.arpa

              • 8.8.8.8:53
                88.90.14.23.in-addr.arpa
                dns
                70 B
                 133 B
                 1
                1

                DNS Request

                88.90.14.23.in-addr.arpa

              • 8.8.8.8:53
                nw-umwatson.events.data.microsoft.com
                dns
                83 B
                 214 B
                 1
                1

                DNS Request

                nw-umwatson.events.data.microsoft.com

                DNS Response

                104.208.16.94

              • 8.8.8.8:53
                104.219.191.52.in-addr.arpa
                dns
                73 B
                 147 B
                 1
                1

                DNS Request

                104.219.191.52.in-addr.arpa

              • 8.8.8.8:53
                15.164.165.52.in-addr.arpa
                dns
                72 B
                 146 B
                 1
                1

                DNS Request

                15.164.165.52.in-addr.arpa

              • 8.8.8.8:53
                183.59.114.20.in-addr.arpa
                dns
                72 B
                 158 B
                 1
                1

                DNS Request

                183.59.114.20.in-addr.arpa

              • 8.8.8.8:53
                94.16.208.104.in-addr.arpa
                dns
                72 B
                 146 B
                 1
                1

                DNS Request

                94.16.208.104.in-addr.arpa

              • 8.8.8.8:53
                chromewebstore.googleapis.com
                dns
                75 B
                 299 B
                 1
                1

                DNS Request

                chromewebstore.googleapis.com

                DNS Response

                142.250.178.10
                172.217.16.234
                142.250.200.10
                142.250.200.42
                216.58.201.106
                216.58.204.74
                216.58.213.10
                172.217.169.10
                216.58.212.202
                172.217.169.74
                142.250.179.234
                142.250.180.10
                142.250.187.202
                142.250.187.234

              • 8.8.8.8:53
                chromewebstore.googleapis.com
                dns
                75 B
                 132 B
                 1
                1

                DNS Request

                chromewebstore.googleapis.com

              • 8.8.8.8:53
                edgestatic.azureedge.net
                dns
                70 B
                 245 B
                 1
                1

                DNS Request

                edgestatic.azureedge.net

                DNS Response

                13.107.246.64
                13.107.213.64

              • 8.8.8.8:53
                edgestatic.azureedge.net
                dns
                70 B
                 273 B
                 1
                1

                DNS Request

                edgestatic.azureedge.net

              • 8.8.8.8:53
                c.s-microsoft.com
                dns
                63 B
                 193 B
                 1
                1

                DNS Request

                c.s-microsoft.com

                DNS Response

                23.34.233.128

              • 8.8.8.8:53
                c.s-microsoft.com
                dns
                63 B
                 238 B
                 1
                1

                DNS Request

                c.s-microsoft.com

              • 8.8.8.8:53
                88.61.62.23.in-addr.arpa
                dns
                70 B
                 133 B
                 1
                1

                DNS Request

                88.61.62.23.in-addr.arpa

              • 8.8.8.8:53
                10.178.250.142.in-addr.arpa
                dns
                73 B
                 112 B
                 1
                1

                DNS Request

                10.178.250.142.in-addr.arpa

              • 8.8.8.8:53
                64.246.107.13.in-addr.arpa
                dns
                72 B
                 158 B
                 1
                1

                DNS Request

                64.246.107.13.in-addr.arpa

              • 8.8.8.8:53
                wcpstatic.microsoft.com
                dns
                69 B
                 265 B
                 1
                1

                DNS Request

                wcpstatic.microsoft.com

                DNS Response

                13.107.246.64
                13.107.213.64

              • 8.8.8.8:53
                wcpstatic.microsoft.com
                dns
                69 B
                 280 B
                 1
                1

                DNS Request

                wcpstatic.microsoft.com

              • 224.0.0.251:5353
                204 B
                 3
              • 8.8.8.8:53
                81.90.14.23.in-addr.arpa
                dns
                70 B
                 133 B
                 1
                1

                DNS Request

                81.90.14.23.in-addr.arpa

              • 8.8.8.8:53
                14.227.111.52.in-addr.arpa
                dns
                144 B
                 158 B
                 2
                1

                DNS Request

                14.227.111.52.in-addr.arpa

                DNS Request

                14.227.111.52.in-addr.arpa

              • 8.8.8.8:53
                105.193.132.51.in-addr.arpa
                dns
                73 B
                 159 B
                 1
                1

                DNS Request

                105.193.132.51.in-addr.arpa

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              We care about your privacy.

              This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.