Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

1

Static

static

1

ae466cf969...8.html

windows7-x64

1

ae466cf969...8.html

windows10-2004-x64

1

Analysis

  • max time kernel
    136s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15/06/2024, 11:46 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ae466cf96963049a7d33e038b98dec41_JaffaCakes118.html

  • Size

    69KB

  • MD5

    ae466cf96963049a7d33e038b98dec41

  • SHA1

    b2da72de811d56e4b9b44b78b977518fbd5148c0

  • SHA256

    206aae464fa2388629c30c173b2dc575940560dd9f9849e36dcf8c74bc3e5402

  • SHA512

    73707e1ae3eb30f7ba720a7e3d3a4a80bb229456f5112308d8c44aa621bfaac0dc0d77ee85209ca2fe93623e5e1f5178bf0e796e84f0266ae90901ac025aa660

  • SSDEEP

    1536:KqtgjfLjx9xFBb/kmbWxL0ghNxgefN3MU39DMglNJfXwJ0:bOkmbWxQgeefR9Dt+J0

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ae466cf96963049a7d33e038b98dec41_JaffaCakes118.html
    1⤵
      PID:5112
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=17 --mojo-platform-channel-handle=1412 --field-trial-handle=3084,i,4016110471176367543,14287608422419064331,262144 --variations-seed-version /prefetch:1
      1⤵
        PID:5004
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=18 --mojo-platform-channel-handle=4184 --field-trial-handle=3084,i,4016110471176367543,14287608422419064331,262144 --variations-seed-version /prefetch:1
        1⤵
          PID:2076
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4496 --field-trial-handle=3084,i,4016110471176367543,14287608422419064331,262144 --variations-seed-version /prefetch:8
          1⤵
            PID:2520
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=20 --mojo-platform-channel-handle=5468 --field-trial-handle=3084,i,4016110471176367543,14287608422419064331,262144 --variations-seed-version /prefetch:1
            1⤵
              PID:2128
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --no-appcompat-clear --mojo-platform-channel-handle=4196 --field-trial-handle=3084,i,4016110471176367543,14287608422419064331,262144 --variations-seed-version /prefetch:8
              1⤵
                PID:2172

              Network

              • flag-us
                DNS
                nav-edge.smartscreen.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                nav-edge.smartscreen.microsoft.com
                IN A
                Response
                nav-edge.smartscreen.microsoft.com
                IN CNAME
                tm-prod-wd-csp-edge.trafficmanager.net
                tm-prod-wd-csp-edge.trafficmanager.net
                IN CNAME
                prod-agic-us-2.uksouth.cloudapp.azure.com
                prod-agic-us-2.uksouth.cloudapp.azure.com
                IN A
                172.165.69.228
              • flag-us
                DNS
                nav-edge.smartscreen.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                nav-edge.smartscreen.microsoft.com
                IN Unknown
                Response
                nav-edge.smartscreen.microsoft.com
                IN CNAME
                tm-prod-wd-csp-edge.trafficmanager.net
                tm-prod-wd-csp-edge.trafficmanager.net
                IN CNAME
                prod-agic-uw-3.ukwest.cloudapp.azure.com
              • flag-us
                DNS
                business.bing.com
                Remote address:
                8.8.8.8:53
                Request
                business.bing.com
                IN A
                Response
                business.bing.com
                IN CNAME
                business-bing-com.b-0005.b-msedge.net
                business-bing-com.b-0005.b-msedge.net
                IN CNAME
                b-0005.b-msedge.net
                b-0005.b-msedge.net
                IN A
                13.107.6.158
              • flag-us
                DNS
                business.bing.com
                Remote address:
                8.8.8.8:53
                Request
                business.bing.com
                IN Unknown
                Response
                business.bing.com
                IN CNAME
                business-bing-com.b-0005.b-msedge.net
              • flag-us
                DNS
                domkresy.org
                Remote address:
                8.8.8.8:53
                Request
                domkresy.org
                IN A
                Response
              • flag-us
                DNS
                domkresy.org
                Remote address:
                8.8.8.8:53
                Request
                domkresy.org
                IN Unknown
                Response
              • flag-us
                DNS
                www.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                www.microsoft.com
                IN A
                Response
                www.microsoft.com
                IN CNAME
                www.microsoft.com-c-3.edgekey.net
                www.microsoft.com-c-3.edgekey.net
                IN CNAME
                www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                IN CNAME
                e13678.dscb.akamaiedge.net
                e13678.dscb.akamaiedge.net
                IN A
                23.34.233.128
              • flag-us
                DNS
                domkresy.org
                Remote address:
                8.8.8.8:53
                Request
                domkresy.org
                IN A
                Response
              • flag-us
                DNS
                www.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                www.microsoft.com
                IN A
                Response
                www.microsoft.com
                IN CNAME
                www.microsoft.com-c-3.edgekey.net
                www.microsoft.com-c-3.edgekey.net
                IN CNAME
                www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                IN CNAME
                e13678.dscb.akamaiedge.net
                e13678.dscb.akamaiedge.net
                IN A
                23.34.233.128
              • flag-us
                DNS
                www.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                www.microsoft.com
                IN Unknown
                Response
                www.microsoft.com
                IN CNAME
                www.microsoft.com-c-3.edgekey.net
                www.microsoft.com-c-3.edgekey.net
                IN CNAME
                www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                IN CNAME
                e13678.dscb.akamaiedge.net
              • flag-us
                DNS
                76.234.34.23.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                76.234.34.23.in-addr.arpa
                IN PTR
                Response
                76.234.34.23.in-addr.arpa
                IN PTR
                a23-34-234-76deploystaticakamaitechnologiescom
              • flag-us
                DNS
                228.69.165.172.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                228.69.165.172.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                bzib.nelreports.net
                Remote address:
                8.8.8.8:53
                Request
                bzib.nelreports.net
                IN A
                Response
                bzib.nelreports.net
                IN CNAME
                bzib.nelreports.net.akamaized.net
                bzib.nelreports.net.akamaized.net
                IN CNAME
                a416.dscd.akamai.net
                a416.dscd.akamai.net
                IN A
                184.31.15.35
                a416.dscd.akamai.net
                IN A
                184.31.15.40
              • flag-us
                DNS
                bzib.nelreports.net
                Remote address:
                8.8.8.8:53
                Request
                bzib.nelreports.net
                IN Unknown
                Response
                bzib.nelreports.net
                IN CNAME
                bzib.nelreports.net.akamaized.net
                bzib.nelreports.net.akamaized.net
                IN CNAME
                a416.dscd.akamai.net
              • flag-us
                DNS
                99.201.58.216.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                99.201.58.216.in-addr.arpa
                IN PTR
                Response
                99.201.58.216.in-addr.arpa
                IN PTR
                prg03s02-in-f991e100net
                99.201.58.216.in-addr.arpa
                IN PTR
                prg03s02-in-f3�H
                99.201.58.216.in-addr.arpa
                IN PTR
                lhr48s48-in-f3�H
              • flag-us
                DNS
                35.15.31.184.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                35.15.31.184.in-addr.arpa
                IN PTR
                Response
                35.15.31.184.in-addr.arpa
                IN PTR
                a184-31-15-35deploystaticakamaitechnologiescom
              • flag-us
                DNS
                128.233.34.23.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                128.233.34.23.in-addr.arpa
                IN PTR
                Response
                128.233.34.23.in-addr.arpa
                IN PTR
                a23-34-233-128deploystaticakamaitechnologiescom
              • flag-us
                DNS
                www.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                www.microsoft.com
                IN A
                Response
                www.microsoft.com
                IN CNAME
                www.microsoft.com-c-3.edgekey.net
                www.microsoft.com-c-3.edgekey.net
                IN CNAME
                www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                IN CNAME
                e13678.dscb.akamaiedge.net
                e13678.dscb.akamaiedge.net
                IN A
                23.34.233.128
              • flag-us
                DNS
                c.s-microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                c.s-microsoft.com
                IN A
                Response
                c.s-microsoft.com
                IN CNAME
                c-s.cms.ms.akadns.net
                c-s.cms.ms.akadns.net
                IN CNAME
                c.s-microsoft.com-c.edgekey.net
                c.s-microsoft.com-c.edgekey.net
                IN CNAME
                e13678.dscg.akamaiedge.net
                e13678.dscg.akamaiedge.net
                IN A
                23.34.233.128
              • flag-us
                DNS
                c.s-microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                c.s-microsoft.com
                IN Unknown
                Response
                c.s-microsoft.com
                IN CNAME
                c-s.cms.ms.akadns.net
                c-s.cms.ms.akadns.net
                IN CNAME
                c.s-microsoft.com-c.edgekey.net
                c.s-microsoft.com-c.edgekey.net
                IN CNAME
                e13678.dscg.akamaiedge.net
              • flag-us
                DNS
                edgestatic.azureedge.net
                Remote address:
                8.8.8.8:53
                Request
                edgestatic.azureedge.net
                IN A
                Response
                edgestatic.azureedge.net
                IN CNAME
                edgestatic.afd.azureedge.net
                edgestatic.afd.azureedge.net
                IN CNAME
                azureedge-t-prod.trafficmanager.net
                azureedge-t-prod.trafficmanager.net
                IN CNAME
                shed.dual-low.s-part-0036.t-0009.t-msedge.net
                shed.dual-low.s-part-0036.t-0009.t-msedge.net
                IN CNAME
                s-part-0036.t-0009.t-msedge.net
                s-part-0036.t-0009.t-msedge.net
                IN A
                13.107.246.64
              • flag-us
                DNS
                edgestatic.azureedge.net
                Remote address:
                8.8.8.8:53
                Request
                edgestatic.azureedge.net
                IN Unknown
                Response
                edgestatic.azureedge.net
                IN CNAME
                edgestatic.afd.azureedge.net
                edgestatic.afd.azureedge.net
                IN CNAME
                azureedge-t-prod.trafficmanager.net
                azureedge-t-prod.trafficmanager.net
                IN CNAME
                shed.dual-low.s-part-0036.t-0009.t-msedge.net
              • flag-us
                DNS
                domkresy.org
                Remote address:
                8.8.8.8:53
                Request
                domkresy.org
                IN A
                Response
              • flag-us
                DNS
                domkresy.org
                Remote address:
                8.8.8.8:53
                Request
                domkresy.org
                IN Unknown
                Response
              • flag-us
                DNS
                domkresy.org
                Remote address:
                8.8.8.8:53
                Request
                domkresy.org
                IN A
                Response
              • flag-us
                DNS
                domkresy.org
                Remote address:
                8.8.8.8:53
                Request
                domkresy.org
                IN Unknown
                Response
              • flag-us
                DNS
                domkresy.org
                Remote address:
                8.8.8.8:53
                Request
                domkresy.org
                IN A
                Response
              • flag-us
                DNS
                domkresy.org
                Remote address:
                8.8.8.8:53
                Request
                domkresy.org
                IN Unknown
                Response
              • flag-us
                DNS
                domkresy.org
                Remote address:
                8.8.8.8:53
                Request
                domkresy.org
                IN A
                Response
              • flag-us
                DNS
                domkresy.org
                Remote address:
                8.8.8.8:53
                Request
                domkresy.org
                IN Unknown
                Response
              • flag-us
                DNS
                64.246.107.13.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                64.246.107.13.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                202.187.250.142.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                202.187.250.142.in-addr.arpa
                IN PTR
                Response
                202.187.250.142.in-addr.arpa
                IN PTR
                lhr25s33-in-f101e100net
              • flag-us
                DNS
                241.150.49.20.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                241.150.49.20.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                203.107.17.2.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                203.107.17.2.in-addr.arpa
                IN PTR
                Response
                203.107.17.2.in-addr.arpa
                IN PTR
                a2-17-107-203deploystaticakamaitechnologiescom
              • flag-us
                DNS
                140.32.126.40.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                140.32.126.40.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                95.221.229.192.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                95.221.229.192.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                149.220.183.52.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                149.220.183.52.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                nw-umwatson.events.data.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                nw-umwatson.events.data.microsoft.com
                IN A
                Response
                nw-umwatson.events.data.microsoft.com
                IN CNAME
                blobcollector.events.data.trafficmanager.net
                blobcollector.events.data.trafficmanager.net
                IN CNAME
                onedsblobprdcus16.centralus.cloudapp.azure.com
                onedsblobprdcus16.centralus.cloudapp.azure.com
                IN A
                104.208.16.94
              • flag-us
                POST
                https://nw-umwatson.events.data.microsoft.com/Telemetry.Request
                Remote address:
                104.208.16.94:443
                Request
                POST /Telemetry.Request HTTP/1.1
                Connection: Keep-Alive
                Content-Type: application/xml
                User-Agent: Crashpad/0.8.0 WinHTTP/10.0.19041.1151 Windows_NT/10.0.19041.1202 (x64)
                Content-Length: 3685
                Host: nw-umwatson.events.data.microsoft.com
                Response
                HTTP/1.1 200 200 OK
                Content-Length: 1035
                Content-Type: text/xml
                Server: Microsoft-HTTPAPI/2.0
                Strict-Transport-Security: max-age=31536000
                Date: Sat, 15 Jun 2024 11:46:51 GMT
              • flag-us
                DNS
                94.16.208.104.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                94.16.208.104.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                28.118.140.52.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                28.118.140.52.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                wcpstatic.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                wcpstatic.microsoft.com
                IN A
                Response
                wcpstatic.microsoft.com
                IN CNAME
                consentdeliveryfd.azurefd.net
                consentdeliveryfd.azurefd.net
                IN CNAME
                firstparty-azurefd-prod.trafficmanager.net
                firstparty-azurefd-prod.trafficmanager.net
                IN CNAME
                shed.dual-low.s-part-0036.t-0009.t-msedge.net
                shed.dual-low.s-part-0036.t-0009.t-msedge.net
                IN CNAME
                s-part-0036.t-0009.t-msedge.net
                s-part-0036.t-0009.t-msedge.net
                IN A
                13.107.246.64
              • flag-us
                DNS
                wcpstatic.microsoft.com
                Remote address:
                8.8.8.8:53
                Request
                wcpstatic.microsoft.com
                IN Unknown
                Response
                wcpstatic.microsoft.com
                IN CNAME
                consentdeliveryfd.azurefd.net
                consentdeliveryfd.azurefd.net
                IN CNAME
                firstparty-azurefd-prod.trafficmanager.net
                firstparty-azurefd-prod.trafficmanager.net
                IN CNAME
                shed.dual-low.s-part-0036.t-0009.t-msedge.net
                shed.dual-low.s-part-0036.t-0009.t-msedge.net
                IN CNAME
                s-part-0036.t-0009.t-msedge.net
              • flag-us
                DNS
                domkresy.org
                Remote address:
                8.8.8.8:53
                Request
                domkresy.org
                IN A
                Response
              • flag-us
                DNS
                domkresy.org
                Remote address:
                8.8.8.8:53
                Request
                domkresy.org
                IN Unknown
                Response
              • flag-us
                DNS
                domkresy.org
                Remote address:
                8.8.8.8:53
                Request
                domkresy.org
                IN A
                Response
              • flag-us
                DNS
                domkresy.org
                Remote address:
                8.8.8.8:53
                Request
                domkresy.org
                IN A
                Response
              • flag-us
                DNS
                domkresy.org
                Remote address:
                8.8.8.8:53
                Request
                domkresy.org
                IN Unknown
                Response
              • flag-us
                DNS
                50.23.12.20.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                50.23.12.20.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                198.187.3.20.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                198.187.3.20.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                172.214.232.199.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                172.214.232.199.in-addr.arpa
                IN PTR
                Response
              • flag-us
                DNS
                97.61.62.23.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                97.61.62.23.in-addr.arpa
                IN PTR
                Response
                97.61.62.23.in-addr.arpa
                IN PTR
                a23-62-61-97deploystaticakamaitechnologiescom
              • flag-us
                DNS
                200.131.50.23.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                200.131.50.23.in-addr.arpa
                IN PTR
                Response
                200.131.50.23.in-addr.arpa
                IN PTR
                a23-50-131-200deploystaticakamaitechnologiescom
              • flag-us
                DNS
                171.61.62.23.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                171.61.62.23.in-addr.arpa
                IN PTR
                Response
                171.61.62.23.in-addr.arpa
                IN PTR
                a23-62-61-171deploystaticakamaitechnologiescom
              • flag-us
                DNS
                136.71.105.51.in-addr.arpa
                Remote address:
                8.8.8.8:53
                Request
                136.71.105.51.in-addr.arpa
                IN PTR
                Response
              • 172.165.69.228:443
                nav-edge.smartscreen.microsoft.com
                tls
                10.6kB
                 12.8kB
                 30
                32
              • 13.107.6.158:443
                business.bing.com
                tls
                2.5kB
                 10.1kB
                 17
                23
              • 172.165.69.228:443
                nav-edge.smartscreen.microsoft.com
                98 B
                 52 B
                 2
                1
              • 23.34.233.128:443
                www.microsoft.com
                tls
                2.8kB
                 22.9kB
                 26
                36
              • 13.107.6.158:443
                business.bing.com
                98 B
                 52 B
                 2
                1
              • 184.31.15.35:443
                bzib.nelreports.net
                tls
                2.5kB
                 6.0kB
                 13
                15
              • 13.107.246.64:443
                edgestatic.azureedge.net
                tls
                1.9kB
                 7.8kB
                 12
                13
              • 13.107.246.64:443
                edgestatic.azureedge.net
                tls
                96.1kB
                 4.7MB
                 1941
                3416
              • 13.107.246.64:443
                edgestatic.azureedge.net
                tls
                1.8kB
                 7.9kB
                 13
                14
              • 193.238.46.57:80
                260 B
                 5
              • 193.238.46.57:80
                260 B
                 5
              • 96.16.110.114:80
                260 B
                 5
              • 104.208.16.94:443
                https://nw-umwatson.events.data.microsoft.com/Telemetry.Request
                tls, http
                4.9kB
                 8.0kB
                 13
                11

                HTTP Request

                POST https://nw-umwatson.events.data.microsoft.com/Telemetry.Request

                HTTP Response

                200
              • 13.107.246.64:443
                edgestatic.azureedge.net
                tls
                8.3kB
                 275.2kB
                 129
                214
              • 13.107.246.64:443
                wcpstatic.microsoft.com
                tls
                4.3kB
                 91.1kB
                 53
                79
              • 13.107.253.64:443
                46 B
                 40 B
                 1
                1
              • 23.62.61.97:443
                www.bing.com
                tls
                1.0kB
                 5.1kB
                 9
                11
              • 23.62.61.171:443
                www.bing.com
                tls
                1.2kB
                 906 B
                 7
                7
              • 8.8.8.8:53
                nav-edge.smartscreen.microsoft.com
                dns
                80 B
                 200 B
                 1
                1

                DNS Request

                nav-edge.smartscreen.microsoft.com

                DNS Response

                172.165.69.228

              • 8.8.8.8:53
                nav-edge.smartscreen.microsoft.com
                dns
                80 B
                 243 B
                 1
                1

                DNS Request

                nav-edge.smartscreen.microsoft.com

              • 8.8.8.8:53
                business.bing.com
                dns
                63 B
                 144 B
                 1
                1

                DNS Request

                business.bing.com

                DNS Response

                13.107.6.158

              • 8.8.8.8:53
                business.bing.com
                dns
                63 B
                 171 B
                 1
                1

                DNS Request

                business.bing.com

              • 8.8.8.8:53
                domkresy.org
                dns
                58 B
                 140 B
                 1
                1

                DNS Request

                domkresy.org

              • 8.8.8.8:53
                domkresy.org
                dns
                58 B
                 140 B
                 1
                1

                DNS Request

                domkresy.org

              • 8.8.8.8:53
                www.microsoft.com
                dns
                63 B
                 230 B
                 1
                1

                DNS Request

                www.microsoft.com

                DNS Response

                23.34.233.128

              • 8.8.8.8:53
                domkresy.org
                dns
                58 B
                 140 B
                 1
                1

                DNS Request

                domkresy.org

              • 8.8.8.8:53
                www.microsoft.com
                dns
                63 B
                 230 B
                 1
                1

                DNS Request

                www.microsoft.com

                DNS Response

                23.34.233.128

              • 8.8.8.8:53
                www.microsoft.com
                dns
                63 B
                 275 B
                 1
                1

                DNS Request

                www.microsoft.com

              • 8.8.8.8:53
                76.234.34.23.in-addr.arpa
                dns
                71 B
                 135 B
                 1
                1

                DNS Request

                76.234.34.23.in-addr.arpa

              • 8.8.8.8:53
                228.69.165.172.in-addr.arpa
                dns
                73 B
                 159 B
                 1
                1

                DNS Request

                228.69.165.172.in-addr.arpa

              • 8.8.8.8:53
                bzib.nelreports.net
                dns
                65 B
                 172 B
                 1
                1

                DNS Request

                bzib.nelreports.net

                DNS Response

                184.31.15.35
                184.31.15.40

              • 8.8.8.8:53
                bzib.nelreports.net
                dns
                65 B
                 204 B
                 1
                1

                DNS Request

                bzib.nelreports.net

              • 8.8.8.8:53
                99.201.58.216.in-addr.arpa
                dns
                72 B
                 169 B
                 1
                1

                DNS Request

                99.201.58.216.in-addr.arpa

              • 8.8.8.8:53
                35.15.31.184.in-addr.arpa
                dns
                71 B
                 135 B
                 1
                1

                DNS Request

                35.15.31.184.in-addr.arpa

              • 8.8.8.8:53
                128.233.34.23.in-addr.arpa
                dns
                72 B
                 137 B
                 1
                1

                DNS Request

                128.233.34.23.in-addr.arpa

              • 8.8.8.8:53
                www.microsoft.com
                dns
                63 B
                 230 B
                 1
                1

                DNS Request

                www.microsoft.com

                DNS Response

                23.34.233.128

              • 8.8.8.8:53
                c.s-microsoft.com
                dns
                63 B
                 193 B
                 1
                1

                DNS Request

                c.s-microsoft.com

                DNS Response

                23.34.233.128

              • 8.8.8.8:53
                c.s-microsoft.com
                dns
                63 B
                 238 B
                 1
                1

                DNS Request

                c.s-microsoft.com

              • 8.8.8.8:53
                edgestatic.azureedge.net
                dns
                70 B
                 231 B
                 1
                1

                DNS Request

                edgestatic.azureedge.net

                DNS Response

                13.107.246.64

              • 8.8.8.8:53
                edgestatic.azureedge.net
                dns
                70 B
                 261 B
                 1
                1

                DNS Request

                edgestatic.azureedge.net

              • 8.8.8.8:53
                domkresy.org
                dns
                58 B
                 140 B
                 1
                1

                DNS Request

                domkresy.org

              • 8.8.8.8:53
                domkresy.org
                dns
                58 B
                 140 B
                 1
                1

                DNS Request

                domkresy.org

              • 8.8.8.8:53
                domkresy.org
                dns
                58 B
                 140 B
                 1
                1

                DNS Request

                domkresy.org

              • 8.8.8.8:53
                domkresy.org
                dns
                58 B
                 140 B
                 1
                1

                DNS Request

                domkresy.org

              • 8.8.8.8:53
                domkresy.org
                dns
                58 B
                 140 B
                 1
                1

                DNS Request

                domkresy.org

              • 8.8.8.8:53
                domkresy.org
                dns
                58 B
                 140 B
                 1
                1

                DNS Request

                domkresy.org

              • 8.8.8.8:53
                domkresy.org
                dns
                58 B
                 140 B
                 1
                1

                DNS Request

                domkresy.org

              • 8.8.8.8:53
                domkresy.org
                dns
                58 B
                 140 B
                 1
                1

                DNS Request

                domkresy.org

              • 8.8.8.8:53
                64.246.107.13.in-addr.arpa
                dns
                72 B
                 158 B
                 1
                1

                DNS Request

                64.246.107.13.in-addr.arpa

              • 8.8.8.8:53
                202.187.250.142.in-addr.arpa
                dns
                74 B
                 113 B
                 1
                1

                DNS Request

                202.187.250.142.in-addr.arpa

              • 8.8.8.8:53
                241.150.49.20.in-addr.arpa
                dns
                72 B
                 158 B
                 1
                1

                DNS Request

                241.150.49.20.in-addr.arpa

              • 8.8.8.8:53
                203.107.17.2.in-addr.arpa
                dns
                71 B
                 135 B
                 1
                1

                DNS Request

                203.107.17.2.in-addr.arpa

              • 8.8.8.8:53
                140.32.126.40.in-addr.arpa
                dns
                72 B
                 158 B
                 1
                1

                DNS Request

                140.32.126.40.in-addr.arpa

              • 8.8.8.8:53
                95.221.229.192.in-addr.arpa
                dns
                73 B
                 144 B
                 1
                1

                DNS Request

                95.221.229.192.in-addr.arpa

              • 8.8.8.8:53
                149.220.183.52.in-addr.arpa
                dns
                73 B
                 147 B
                 1
                1

                DNS Request

                149.220.183.52.in-addr.arpa

              • 8.8.8.8:53
                nw-umwatson.events.data.microsoft.com
                dns
                83 B
                 214 B
                 1
                1

                DNS Request

                nw-umwatson.events.data.microsoft.com

                DNS Response

                104.208.16.94

              • 8.8.8.8:53
                94.16.208.104.in-addr.arpa
                dns
                72 B
                 146 B
                 1
                1

                DNS Request

                94.16.208.104.in-addr.arpa

              • 8.8.8.8:53
                28.118.140.52.in-addr.arpa
                dns
                72 B
                 158 B
                 1
                1

                DNS Request

                28.118.140.52.in-addr.arpa

              • 8.8.8.8:53
                wcpstatic.microsoft.com
                dns
                69 B
                 251 B
                 1
                1

                DNS Request

                wcpstatic.microsoft.com

                DNS Response

                13.107.246.64

              • 8.8.8.8:53
                wcpstatic.microsoft.com
                dns
                69 B
                 282 B
                 1
                1

                DNS Request

                wcpstatic.microsoft.com

              • 8.8.8.8:53
                domkresy.org
                dns
                58 B
                 140 B
                 1
                1

                DNS Request

                domkresy.org

              • 8.8.8.8:53
                domkresy.org
                dns
                58 B
                 140 B
                 1
                1

                DNS Request

                domkresy.org

              • 8.8.8.8:53
                domkresy.org
                dns
                58 B
                 140 B
                 1
                1

                DNS Request

                domkresy.org

              • 8.8.8.8:53
                domkresy.org
                dns
                58 B
                 140 B
                 1
                1

                DNS Request

                domkresy.org

              • 8.8.8.8:53
                domkresy.org
                dns
                58 B
                 140 B
                 1
                1

                DNS Request

                domkresy.org

              • 224.0.0.251:5353
                204 B
                 3
              • 8.8.8.8:53
                50.23.12.20.in-addr.arpa
                dns
                70 B
                 156 B
                 1
                1

                DNS Request

                50.23.12.20.in-addr.arpa

              • 8.8.8.8:53
                198.187.3.20.in-addr.arpa
                dns
                71 B
                 157 B
                 1
                1

                DNS Request

                198.187.3.20.in-addr.arpa

              • 8.8.8.8:53
                172.214.232.199.in-addr.arpa
                dns
                74 B
                 128 B
                 1
                1

                DNS Request

                172.214.232.199.in-addr.arpa

              • 8.8.8.8:53
                97.61.62.23.in-addr.arpa
                dns
                70 B
                 133 B
                 1
                1

                DNS Request

                97.61.62.23.in-addr.arpa

              • 8.8.8.8:53
                200.131.50.23.in-addr.arpa
                dns
                72 B
                 137 B
                 1
                1

                DNS Request

                200.131.50.23.in-addr.arpa

              • 8.8.8.8:53
                171.61.62.23.in-addr.arpa
                dns
                71 B
                 135 B
                 1
                1

                DNS Request

                171.61.62.23.in-addr.arpa

              • 8.8.8.8:53
                136.71.105.51.in-addr.arpa
                dns
                72 B
                 158 B
                 1
                1

                DNS Request

                136.71.105.51.in-addr.arpa

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              We care about your privacy.

              This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.