Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/06/2024, 21:22 UTC

General

  • Target

    a69fcb9c9e98c922037d07b29617890e_JaffaCakes118.html

  • Size

    4KB

  • MD5

    a69fcb9c9e98c922037d07b29617890e

  • SHA1

    76d63fbff143fa22a7c6aaf7a3d029b8d15ec638

  • SHA256

    87c71563a526ac205164712b3de5d7d1130865a09cc139711c8498cb52797bbf

  • SHA512

    1f401bad852a095418925f8d72925c9e8d9158222b4d470c75ff3c7c5fea2c24550eccb68d5095b79435449a8d8ba5d8aadcd098d34e8cd9e0743520e25f54b3

  • SSDEEP

    96:Pk7yJozTGknaEFHVKDZTBJl7sNjtXATIQFMA5e3fhrvDJUgwa71D5iJ8otKFd:Pk7yY1aEFHVKtF37sNjtXATIQFM93pDt

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a69fcb9c9e98c922037d07b29617890e_JaffaCakes118.html
    1⤵
      PID:636
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=17 --mojo-platform-channel-handle=4288 --field-trial-handle=2252,i,16022092570067181109,3235558581947505669,262144 --variations-seed-version /prefetch:1
      1⤵
        PID:5028
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=18 --mojo-platform-channel-handle=756 --field-trial-handle=2252,i,16022092570067181109,3235558581947505669,262144 --variations-seed-version /prefetch:1
        1⤵
          PID:64
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=2544 --field-trial-handle=2252,i,16022092570067181109,3235558581947505669,262144 --variations-seed-version /prefetch:8
          1⤵
            PID:5040
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=20 --mojo-platform-channel-handle=5496 --field-trial-handle=2252,i,16022092570067181109,3235558581947505669,262144 --variations-seed-version /prefetch:1
            1⤵
              PID:4484
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --no-appcompat-clear --mojo-platform-channel-handle=5924 --field-trial-handle=2252,i,16022092570067181109,3235558581947505669,262144 --variations-seed-version /prefetch:8
              1⤵
                PID:800

              Network

              • flag-us
                DNS
                business.bing.com
                Remote address:
                8.8.8.8:53
                Request
                business.bing.com
                IN A
                Response
                business.bing.com
                IN CNAME
                business-bing-com.b-0005.b-msedge.net
                business-bing-com.b-0005.b-msedge.net
                IN CNAME
                b-0005.b-msedge.net
                b-0005.b-msedge.net
                IN A
                13.107.6.158
              • flag-us
                DNS
                business.bing.com
                Remote address:
                8.8.8.8:53
                Request
                business.bing.com
                IN Unknown
                Response
                business.bing.com
                IN CNAME
                business-bing-com.b-0005.b-msedge.net
                business-bing-com.b-0005.b-msedge.net
                IN CNAME
                b-0005.b-msedge.net
              • flag-us
                DNS
                www.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                www.microsoft.com
                IN A
                Response
                www.microsoft.com
                IN CNAME
                www.microsoft.com-c-3.edgekey.net
                www.microsoft.com-c-3.edgekey.net
                IN CNAME
                www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                IN CNAME
                e13678.dscb.akamaiedge.net
                e13678.dscb.akamaiedge.net
                IN A
                23.34.233.128
              • flag-us
                DNS
                www.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                www.microsoft.com
                IN Unknown
                Response
                www.microsoft.com
                IN CNAME
                www.microsoft.com-c-3.edgekey.net
                www.microsoft.com-c-3.edgekey.net
                IN CNAME
                www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                IN CNAME
                e13678.dscb.akamaiedge.net
              • flag-us
                DNS
                www.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                www.microsoft.com
                IN A
                Response
                www.microsoft.com
                IN CNAME
                www.microsoft.com-c-3.edgekey.net
                www.microsoft.com-c-3.edgekey.net
                IN CNAME
                www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                IN CNAME
                e13678.dscb.akamaiedge.net
                e13678.dscb.akamaiedge.net
                IN A
                23.34.233.128
              • flag-us
                DNS
                nav-edge.smartscreen.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                nav-edge.smartscreen.microsoft.com
                IN A
                Response
                nav-edge.smartscreen.microsoft.com
                IN CNAME
                tm-prod-wd-csp-edge.trafficmanager.net
                tm-prod-wd-csp-edge.trafficmanager.net
                IN CNAME
                prod-agic-uw-3.ukwest.cloudapp.azure.com
                prod-agic-uw-3.ukwest.cloudapp.azure.com
                IN A
                51.11.108.188
              • flag-us
                DNS
                nav-edge.smartscreen.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                nav-edge.smartscreen.microsoft.com
                IN Unknown
                Response
                nav-edge.smartscreen.microsoft.com
                IN CNAME
                tm-prod-wd-csp-edge.trafficmanager.net
                tm-prod-wd-csp-edge.trafficmanager.net
                IN CNAME
                prod-agic-uw-3.ukwest.cloudapp.azure.com
              • flag-us
                DNS
                bzib.nelreports.net
                Remote address:
                8.8.8.8:53
                Request
                bzib.nelreports.net
                IN A
                Response
                bzib.nelreports.net
                IN CNAME
                bzib.nelreports.net.akamaized.net
                bzib.nelreports.net.akamaized.net
                IN CNAME
                a416.dscd.akamai.net
                a416.dscd.akamai.net
                IN A
                2.20.12.87
                a416.dscd.akamai.net
                IN A
                2.20.12.101
              • flag-us
                DNS
                bzib.nelreports.net
                Remote address:
                8.8.8.8:53
                Request
                bzib.nelreports.net
                IN Unknown
                Response
                bzib.nelreports.net
                IN CNAME
                bzib.nelreports.net.akamaized.net
                bzib.nelreports.net.akamaized.net
                IN CNAME
                a416.dscd.akamai.net
              • flag-us
                DNS
                188.108.11.51.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                188.108.11.51.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                128.233.34.23.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                128.233.34.23.in-addr.arpa
                IN PTR
                Response
                128.233.34.23.in-addr.arpa
                IN PTR
                a23-34-233-128deploystaticakamaitechnologiescom
              • flag-us
                DNS
                76.234.34.23.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                76.234.34.23.in-addr.arpa
                IN PTR
                Response
                76.234.34.23.in-addr.arpa
                IN PTR
                a23-34-234-76deploystaticakamaitechnologiescom
              • flag-us
                DNS
                87.12.20.2.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                87.12.20.2.in-addr.arpa
                IN PTR
                Response
                87.12.20.2.in-addr.arpa
                IN PTR
                a2-20-12-87deploystaticakamaitechnologiescom
              • flag-us
                DNS
                www.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                www.microsoft.com
                IN A
                Response
                www.microsoft.com
                IN CNAME
                www.microsoft.com-c-3.edgekey.net
                www.microsoft.com-c-3.edgekey.net
                IN CNAME
                www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                IN CNAME
                e13678.dscb.akamaiedge.net
                e13678.dscb.akamaiedge.net
                IN A
                23.34.233.128
              • flag-us
                DNS
                cdn-adef.akamaized.net
                Remote address:
                8.8.8.8:53
                Request
                cdn-adef.akamaized.net
                IN A
                Response
                cdn-adef.akamaized.net
                IN CNAME
                a326.d.akamai.net
                a326.d.akamai.net
                IN A
                2.20.12.103
                a326.d.akamai.net
                IN A
                2.20.12.90
              • flag-us
                DNS
                cdn-adef.akamaized.net
                Remote address:
                8.8.8.8:53
                Request
                cdn-adef.akamaized.net
                IN Unknown
                Response
                cdn-adef.akamaized.net
                IN CNAME
                a326.d.akamai.net
              • flag-us
                DNS
                103.12.20.2.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                103.12.20.2.in-addr.arpa
                IN PTR
                Response
                103.12.20.2.in-addr.arpa
                IN PTR
                a2-20-12-103deploystaticakamaitechnologiescom
              • flag-us
                DNS
                edgestatic.azureedge.net
                Remote address:
                8.8.8.8:53
                Request
                edgestatic.azureedge.net
                IN A
                Response
                edgestatic.azureedge.net
                IN CNAME
                edgestatic.afd.azureedge.net
                edgestatic.afd.azureedge.net
                IN CNAME
                azureedge-t-prod.trafficmanager.net
                azureedge-t-prod.trafficmanager.net
                IN CNAME
                shed.dual-low.s-part-0036.t-0009.t-msedge.net
                shed.dual-low.s-part-0036.t-0009.t-msedge.net
                IN CNAME
                s-part-0036.t-0009.t-msedge.net
                s-part-0036.t-0009.t-msedge.net
                IN A
                13.107.246.64
              • flag-us
                DNS
                edgestatic.azureedge.net
                Remote address:
                8.8.8.8:53
                Request
                edgestatic.azureedge.net
                IN Unknown
                Response
                edgestatic.azureedge.net
                IN CNAME
                edgestatic.afd.azureedge.net
                edgestatic.afd.azureedge.net
                IN CNAME
                azureedge-t-prod.trafficmanager.net
                azureedge-t-prod.trafficmanager.net
                IN CNAME
                shed.dual-low.s-part-0036.t-0009.t-msedge.net
                shed.dual-low.s-part-0036.t-0009.t-msedge.net
                IN CNAME
                s-part-0036.t-0009.t-msedge.net
              • flag-us
                DNS
                c.s-microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                c.s-microsoft.com
                IN A
                Response
                c.s-microsoft.com
                IN CNAME
                c-s.cms.ms.akadns.net
                c-s.cms.ms.akadns.net
                IN CNAME
                c.s-microsoft.com-c.edgekey.net
                c.s-microsoft.com-c.edgekey.net
                IN CNAME
                e13678.dscg.akamaiedge.net
                e13678.dscg.akamaiedge.net
                IN A
                23.34.233.128
              • flag-us
                DNS
                c.s-microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                c.s-microsoft.com
                IN Unknown
                Response
                c.s-microsoft.com
                IN CNAME
                c-s.cms.ms.akadns.net
                c-s.cms.ms.akadns.net
                IN CNAME
                c.s-microsoft.com-c.edgekey.net
                c.s-microsoft.com-c.edgekey.net
                IN CNAME
                e13678.dscg.akamaiedge.net
              • flag-us
                DNS
                140.32.126.40.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                140.32.126.40.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                13.86.106.20.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                13.86.106.20.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                95.221.229.192.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                95.221.229.192.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                88.251.17.2.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                88.251.17.2.in-addr.arpa
                IN PTR
                Response
                88.251.17.2.in-addr.arpa
                IN PTR
                a2-17-251-88deploystaticakamaitechnologiescom
              • flag-us
                DNS
                104.219.191.52.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                104.219.191.52.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                nw-umwatson.events.data.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                nw-umwatson.events.data.microsoft.com
                IN A
                Response
                nw-umwatson.events.data.microsoft.com
                IN CNAME
                blobcollector.events.data.trafficmanager.net
                blobcollector.events.data.trafficmanager.net
                IN CNAME
                onedsblobprdcus17.centralus.cloudapp.azure.com
                onedsblobprdcus17.centralus.cloudapp.azure.com
                IN A
                13.89.179.12
              • flag-us
                POST
                https://nw-umwatson.events.data.microsoft.com/Telemetry.Request
                Remote address:
                13.89.179.12:443
                Request
                POST /Telemetry.Request HTTP/1.1
                Connection: Keep-Alive
                Content-Type: application/xml
                User-Agent: Crashpad/0.8.0 WinHTTP/10.0.19041.1151 Windows_NT/10.0.19041.1202 (x64)
                Content-Length: 3685
                Host: nw-umwatson.events.data.microsoft.com
                Response
                HTTP/1.1 200 200 OK
                Content-Length: 1035
                Content-Type: text/xml
                Server: Microsoft-HTTPAPI/2.0
                Strict-Transport-Security: max-age=31536000
                Date: Thu, 13 Jun 2024 21:22:48 GMT
              • flag-us
                DNS
                12.179.89.13.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                12.179.89.13.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                wcpstatic.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                wcpstatic.microsoft.com
                IN A
                Response
                wcpstatic.microsoft.com
                IN CNAME
                consentdeliveryfd.azurefd.net
                consentdeliveryfd.azurefd.net
                IN CNAME
                firstparty-azurefd-prod.trafficmanager.net
                firstparty-azurefd-prod.trafficmanager.net
                IN CNAME
                shed.dual-low.s-part-0036.t-0009.t-msedge.net
                shed.dual-low.s-part-0036.t-0009.t-msedge.net
                IN CNAME
                s-part-0036.t-0009.t-msedge.net
                s-part-0036.t-0009.t-msedge.net
                IN A
                13.107.246.64
              • flag-us
                DNS
                wcpstatic.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                wcpstatic.microsoft.com
                IN Unknown
                Response
                wcpstatic.microsoft.com
                IN CNAME
                consentdeliveryfd.azurefd.net
                consentdeliveryfd.azurefd.net
                IN CNAME
                firstparty-azurefd-prod.trafficmanager.net
                firstparty-azurefd-prod.trafficmanager.net
                IN CNAME
                shed.dual-low.s-part-0036.t-0009.t-msedge.net
                shed.dual-low.s-part-0036.t-0009.t-msedge.net
                IN CNAME
                s-part-0036.t-0009.t-msedge.net
              • flag-us
                DNS
                183.59.114.20.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                183.59.114.20.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                171.39.242.20.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                171.39.242.20.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                98.58.20.217.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                98.58.20.217.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                97.61.62.23.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                97.61.62.23.in-addr.arpa
                IN PTR
                Response
                97.61.62.23.in-addr.arpa
                IN PTR
                a23-62-61-97deploystaticakamaitechnologiescom
              • flag-us
                DNS
                83.210.23.2.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                83.210.23.2.in-addr.arpa
                IN PTR
                Response
                83.210.23.2.in-addr.arpa
                IN PTR
                a2-23-210-83deploystaticakamaitechnologiescom
              • flag-us
                DNS
                14.227.111.52.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                14.227.111.52.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                75.61.62.23.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                75.61.62.23.in-addr.arpa
                IN PTR
                Response
                75.61.62.23.in-addr.arpa
                IN PTR
                a23-62-61-75deploystaticakamaitechnologiescom
              • flag-us
                DNS
                15.173.189.20.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                15.173.189.20.in-addr.arpa
                IN PTR
                Response
              • 13.107.6.158:443
                business.bing.com
                tls
                1.9kB
                9.8kB
                17
                21
              • 23.34.233.128:443
                www.microsoft.com
                tls
                2.7kB
                22.9kB
                26
                36
              • 51.11.108.188:443
                nav-edge.smartscreen.microsoft.com
                tls
                10.6kB
                12.9kB
                30
                34
              • 51.11.108.188:443
                nav-edge.smartscreen.microsoft.com
                tls
                1.2kB
                7.5kB
                11
                12
              • 2.20.12.87:443
                bzib.nelreports.net
                tls
                2.5kB
                6.0kB
                13
                15
              • 2.20.12.103:443
                cdn-adef.akamaized.net
                tls
                1.8kB
                9.6kB
                12
                15
              • 13.107.246.64:443
                edgestatic.azureedge.net
                tls
                86.8kB
                4.7MB
                1818
                3362
              • 13.107.246.64:443
                edgestatic.azureedge.net
                tls
                1.8kB
                7.8kB
                12
                13
              • 13.107.246.64:443
                edgestatic.azureedge.net
                tls
                1.8kB
                7.6kB
                11
                11
              • 13.89.179.12:443
                https://nw-umwatson.events.data.microsoft.com/Telemetry.Request
                tls, http
                4.9kB
                8.0kB
                13
                11

                HTTP Request

                POST https://nw-umwatson.events.data.microsoft.com/Telemetry.Request

                HTTP Response

                200
              • 13.107.246.64:443
                edgestatic.azureedge.net
                tls
                8.0kB
                272.5kB
                124
                214
              • 13.107.246.64:443
                wcpstatic.microsoft.com
                tls
                4.1kB
                91.0kB
                53
                78
              • 23.62.61.97:443
                www.bing.com
                tls
                1.1kB
                5.1kB
                9
                11
              • 23.62.61.75:443
                www.bing.com
                tls
                1.2kB
                898 B
                7
                7
              • 8.8.8.8:53
                business.bing.com
                dns
                63 B
                144 B
                1
                1

                DNS Request

                business.bing.com

                DNS Response

                13.107.6.158

              • 8.8.8.8:53
                business.bing.com
                dns
                63 B
                185 B
                1
                1

                DNS Request

                business.bing.com

              • 8.8.8.8:53
                www.microsoft.com
                dns
                63 B
                230 B
                1
                1

                DNS Request

                www.microsoft.com

                DNS Response

                23.34.233.128

              • 8.8.8.8:53
                www.microsoft.com
                dns
                63 B
                275 B
                1
                1

                DNS Request

                www.microsoft.com

              • 8.8.8.8:53
                www.microsoft.com
                dns
                63 B
                230 B
                1
                1

                DNS Request

                www.microsoft.com

                DNS Response

                23.34.233.128

              • 8.8.8.8:53
                nav-edge.smartscreen.microsoft.com
                dns
                80 B
                199 B
                1
                1

                DNS Request

                nav-edge.smartscreen.microsoft.com

                DNS Response

                51.11.108.188

              • 8.8.8.8:53
                nav-edge.smartscreen.microsoft.com
                dns
                80 B
                243 B
                1
                1

                DNS Request

                nav-edge.smartscreen.microsoft.com

              • 8.8.8.8:53
                bzib.nelreports.net
                dns
                65 B
                172 B
                1
                1

                DNS Request

                bzib.nelreports.net

                DNS Response

                2.20.12.87
                2.20.12.101

              • 8.8.8.8:53
                bzib.nelreports.net
                dns
                65 B
                204 B
                1
                1

                DNS Request

                bzib.nelreports.net

              • 8.8.8.8:53
                188.108.11.51.in-addr.arpa
                dns
                72 B
                158 B
                1
                1

                DNS Request

                188.108.11.51.in-addr.arpa

              • 8.8.8.8:53
                128.233.34.23.in-addr.arpa
                dns
                72 B
                137 B
                1
                1

                DNS Request

                128.233.34.23.in-addr.arpa

              • 8.8.8.8:53
                76.234.34.23.in-addr.arpa
                dns
                71 B
                135 B
                1
                1

                DNS Request

                76.234.34.23.in-addr.arpa

              • 8.8.8.8:53
                87.12.20.2.in-addr.arpa
                dns
                69 B
                131 B
                1
                1

                DNS Request

                87.12.20.2.in-addr.arpa

              • 8.8.8.8:53
                www.microsoft.com
                dns
                63 B
                230 B
                1
                1

                DNS Request

                www.microsoft.com

                DNS Response

                23.34.233.128

              • 8.8.8.8:53
                cdn-adef.akamaized.net
                dns
                68 B
                128 B
                1
                1

                DNS Request

                cdn-adef.akamaized.net

                DNS Response

                2.20.12.103
                2.20.12.90

              • 8.8.8.8:53
                cdn-adef.akamaized.net
                dns
                68 B
                157 B
                1
                1

                DNS Request

                cdn-adef.akamaized.net

              • 8.8.8.8:53
                103.12.20.2.in-addr.arpa
                dns
                70 B
                133 B
                1
                1

                DNS Request

                103.12.20.2.in-addr.arpa

              • 8.8.8.8:53
                edgestatic.azureedge.net
                dns
                70 B
                231 B
                1
                1

                DNS Request

                edgestatic.azureedge.net

                DNS Response

                13.107.246.64

              • 8.8.8.8:53
                edgestatic.azureedge.net
                dns
                70 B
                275 B
                1
                1

                DNS Request

                edgestatic.azureedge.net

              • 8.8.8.8:53
                c.s-microsoft.com
                dns
                63 B
                193 B
                1
                1

                DNS Request

                c.s-microsoft.com

                DNS Response

                23.34.233.128

              • 8.8.8.8:53
                c.s-microsoft.com
                dns
                63 B
                238 B
                1
                1

                DNS Request

                c.s-microsoft.com

              • 224.0.0.251:5353
                204 B
                3
              • 8.8.8.8:53
                140.32.126.40.in-addr.arpa
                dns
                72 B
                158 B
                1
                1

                DNS Request

                140.32.126.40.in-addr.arpa

              • 8.8.8.8:53
                13.86.106.20.in-addr.arpa
                dns
                71 B
                157 B
                1
                1

                DNS Request

                13.86.106.20.in-addr.arpa

              • 8.8.8.8:53
                95.221.229.192.in-addr.arpa
                dns
                73 B
                144 B
                1
                1

                DNS Request

                95.221.229.192.in-addr.arpa

              • 8.8.8.8:53
                88.251.17.2.in-addr.arpa
                dns
                70 B
                133 B
                1
                1

                DNS Request

                88.251.17.2.in-addr.arpa

              • 8.8.8.8:53
                104.219.191.52.in-addr.arpa
                dns
                73 B
                147 B
                1
                1

                DNS Request

                104.219.191.52.in-addr.arpa

              • 8.8.8.8:53
                nw-umwatson.events.data.microsoft.com
                dns
                83 B
                214 B
                1
                1

                DNS Request

                nw-umwatson.events.data.microsoft.com

                DNS Response

                13.89.179.12

              • 8.8.8.8:53
                12.179.89.13.in-addr.arpa
                dns
                71 B
                145 B
                1
                1

                DNS Request

                12.179.89.13.in-addr.arpa

              • 8.8.8.8:53
                wcpstatic.microsoft.com
                dns
                69 B
                251 B
                1
                1

                DNS Request

                wcpstatic.microsoft.com

                DNS Response

                13.107.246.64

              • 8.8.8.8:53
                wcpstatic.microsoft.com
                dns
                69 B
                282 B
                1
                1

                DNS Request

                wcpstatic.microsoft.com

              • 8.8.8.8:53
                183.59.114.20.in-addr.arpa
                dns
                72 B
                158 B
                1
                1

                DNS Request

                183.59.114.20.in-addr.arpa

              • 8.8.8.8:53
                171.39.242.20.in-addr.arpa
                dns
                72 B
                158 B
                1
                1

                DNS Request

                171.39.242.20.in-addr.arpa

              • 8.8.8.8:53
                98.58.20.217.in-addr.arpa
                dns
                71 B
                131 B
                1
                1

                DNS Request

                98.58.20.217.in-addr.arpa

              • 8.8.8.8:53
                97.61.62.23.in-addr.arpa
                dns
                70 B
                133 B
                1
                1

                DNS Request

                97.61.62.23.in-addr.arpa

              • 8.8.8.8:53
                83.210.23.2.in-addr.arpa
                dns
                70 B
                133 B
                1
                1

                DNS Request

                83.210.23.2.in-addr.arpa

              • 8.8.8.8:53
                14.227.111.52.in-addr.arpa
                dns
                72 B
                158 B
                1
                1

                DNS Request

                14.227.111.52.in-addr.arpa

              • 8.8.8.8:53
                75.61.62.23.in-addr.arpa
                dns
                70 B
                133 B
                1
                1

                DNS Request

                75.61.62.23.in-addr.arpa

              • 8.8.8.8:53
                15.173.189.20.in-addr.arpa
                dns
                72 B
                158 B
                1
                1

                DNS Request

                15.173.189.20.in-addr.arpa

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              We care about your privacy.

              This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.