Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

1

Static

static

1

b01e9e5ca7...8.html

windows7-x64

1

b01e9e5ca7...8.html

windows10-2004-x64

1

Analysis

  • max time kernel
    143s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15/06/2024, 21:15 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    b01e9e5ca7324d1f0ee39b0b23d7c1bd_JaffaCakes118.html

  • Size

    113KB

  • MD5

    b01e9e5ca7324d1f0ee39b0b23d7c1bd

  • SHA1

    72cb923af8d04b58f76b377be5e8511983a34185

  • SHA256

    5022d6dae4c2977f5016070f52839ec57b402b418ddddb0f941a0f153bf1ecf1

  • SHA512

    597918c2de92da2da468d8d447f35a308d4bb4f4d74b0b2ff790a4faff423bc610845697d1e33c87db88d34e7f9bc31d4c2783e802875faa430d2813f8bf2cff

  • SSDEEP

    1536:0yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGCsQSz:0yfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\b01e9e5ca7324d1f0ee39b0b23d7c1bd_JaffaCakes118.html
    1⤵
      PID:4964
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=17 --mojo-platform-channel-handle=5012 --field-trial-handle=2692,i,8678872182442199182,12502579059484928042,262144 --variations-seed-version /prefetch:1
      1⤵
        PID:1152
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=18 --mojo-platform-channel-handle=4132 --field-trial-handle=2692,i,8678872182442199182,12502579059484928042,262144 --variations-seed-version /prefetch:1
        1⤵
          PID:4068
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=5348 --field-trial-handle=2692,i,8678872182442199182,12502579059484928042,262144 --variations-seed-version /prefetch:8
          1⤵
            PID:5084
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=20 --mojo-platform-channel-handle=5776 --field-trial-handle=2692,i,8678872182442199182,12502579059484928042,262144 --variations-seed-version /prefetch:1
            1⤵
              PID:4304
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --no-appcompat-clear --mojo-platform-channel-handle=5712 --field-trial-handle=2692,i,8678872182442199182,12502579059484928042,262144 --variations-seed-version /prefetch:8
              1⤵
                PID:1888
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=5952 --field-trial-handle=2692,i,8678872182442199182,12502579059484928042,262144 --variations-seed-version /prefetch:8
                1⤵
                  PID:4388
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=2016 --field-trial-handle=2692,i,8678872182442199182,12502579059484928042,262144 --variations-seed-version /prefetch:8
                  1⤵
                    PID:908
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4080 --field-trial-handle=2692,i,8678872182442199182,12502579059484928042,262144 --variations-seed-version /prefetch:8
                    1⤵
                      PID:2280

                    Network

                    • flag-us
                      DNS
                      business.bing.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      business.bing.com
                      IN A
                      Response
                      business.bing.com
                      IN CNAME
                      business-bing-com.b-0005.b-msedge.net
                      business-bing-com.b-0005.b-msedge.net
                      IN CNAME
                      b-0005.b-msedge.net
                      b-0005.b-msedge.net
                      IN A
                      13.107.6.158
                    • flag-us
                      DNS
                      business.bing.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      business.bing.com
                      IN Unknown
                      Response
                      business.bing.com
                      IN CNAME
                      business-bing-com.b-0005.b-msedge.net
                      business-bing-com.b-0005.b-msedge.net
                      IN CNAME
                      b-0005.b-msedge.net
                    • flag-us
                      DNS
                      nav-edge.smartscreen.microsoft.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      nav-edge.smartscreen.microsoft.com
                      IN A
                      Response
                      nav-edge.smartscreen.microsoft.com
                      IN CNAME
                      tm-prod-wd-csp-edge.trafficmanager.net
                      tm-prod-wd-csp-edge.trafficmanager.net
                      IN CNAME
                      prod-agic-us-2.uksouth.cloudapp.azure.com
                      prod-agic-us-2.uksouth.cloudapp.azure.com
                      IN A
                      172.165.69.228
                    • flag-us
                      DNS
                      nav-edge.smartscreen.microsoft.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      nav-edge.smartscreen.microsoft.com
                      IN Unknown
                      Response
                      nav-edge.smartscreen.microsoft.com
                      IN CNAME
                      tm-prod-wd-csp-edge.trafficmanager.net
                      tm-prod-wd-csp-edge.trafficmanager.net
                      IN CNAME
                      prod-agic-us-3.uksouth.cloudapp.azure.com
                    • flag-us
                      DNS
                      159.113.53.23.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      159.113.53.23.in-addr.arpa
                      IN PTR
                      Response
                      159.113.53.23.in-addr.arpa
                      IN PTR
                      a23-53-113-159deploystaticakamaitechnologiescom
                    • flag-us
                      DNS
                      www.microsoft.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      www.microsoft.com
                      IN A
                      Response
                      www.microsoft.com
                      IN CNAME
                      www.microsoft.com-c-3.edgekey.net
                      www.microsoft.com-c-3.edgekey.net
                      IN CNAME
                      www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                      www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                      IN CNAME
                      e13678.dscb.akamaiedge.net
                      e13678.dscb.akamaiedge.net
                      IN A
                      104.90.25.175
                    • flag-us
                      DNS
                      www.microsoft.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      www.microsoft.com
                      IN A
                      Response
                      www.microsoft.com
                      IN CNAME
                      www.microsoft.com-c-3.edgekey.net
                      www.microsoft.com-c-3.edgekey.net
                      IN CNAME
                      www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                      www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                      IN CNAME
                      e13678.dscb.akamaiedge.net
                      e13678.dscb.akamaiedge.net
                      IN A
                      104.90.25.175
                    • flag-us
                      DNS
                      www.microsoft.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      www.microsoft.com
                      IN Unknown
                      Response
                      www.microsoft.com
                      IN CNAME
                      www.microsoft.com-c-3.edgekey.net
                      www.microsoft.com-c-3.edgekey.net
                      IN CNAME
                      www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                      www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                      IN CNAME
                      e13678.dscb.akamaiedge.net
                    • flag-us
                      DNS
                      228.69.165.172.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      228.69.165.172.in-addr.arpa
                      IN PTR
                      Response
                    • flag-us
                      DNS
                      175.25.90.104.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      175.25.90.104.in-addr.arpa
                      IN PTR
                      Response
                      175.25.90.104.in-addr.arpa
                      IN PTR
                      a104-90-25-175deploystaticakamaitechnologiescom
                    • flag-us
                      DNS
                      www.microsoft.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      www.microsoft.com
                      IN A
                      Response
                      www.microsoft.com
                      IN CNAME
                      www.microsoft.com-c-3.edgekey.net
                      www.microsoft.com-c-3.edgekey.net
                      IN CNAME
                      www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                      www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                      IN CNAME
                      e13678.dscb.akamaiedge.net
                      e13678.dscb.akamaiedge.net
                      IN A
                      104.90.25.175
                    • flag-us
                      DNS
                      bzib.nelreports.net
                      Remote address:
                      8.8.8.8:53
                      Request
                      bzib.nelreports.net
                      IN A
                      Response
                      bzib.nelreports.net
                      IN CNAME
                      bzib.nelreports.net.akamaized.net
                      bzib.nelreports.net.akamaized.net
                      IN CNAME
                      a416.dscd.akamai.net
                      a416.dscd.akamai.net
                      IN A
                      2.18.121.10
                      a416.dscd.akamai.net
                      IN A
                      2.18.121.23
                    • flag-us
                      DNS
                      bzib.nelreports.net
                      Remote address:
                      8.8.8.8:53
                      Request
                      bzib.nelreports.net
                      IN Unknown
                      Response
                      bzib.nelreports.net
                      IN CNAME
                      bzib.nelreports.net.akamaized.net
                      bzib.nelreports.net.akamaized.net
                      IN CNAME
                      a416.dscd.akamai.net
                    • flag-us
                      DNS
                      edgestatic.azureedge.net
                      Remote address:
                      8.8.8.8:53
                      Request
                      edgestatic.azureedge.net
                      IN A
                      Response
                      edgestatic.azureedge.net
                      IN CNAME
                      edgestatic.afd.azureedge.net
                      edgestatic.afd.azureedge.net
                      IN CNAME
                      azureedge-t-prod.trafficmanager.net
                      azureedge-t-prod.trafficmanager.net
                      IN CNAME
                      shed.dual-low.s-part-0036.t-0009.t-msedge.net
                      shed.dual-low.s-part-0036.t-0009.t-msedge.net
                      IN CNAME
                      s-part-0036.t-0009.t-msedge.net
                      s-part-0036.t-0009.t-msedge.net
                      IN A
                      13.107.246.64
                    • flag-us
                      DNS
                      edgestatic.azureedge.net
                      Remote address:
                      8.8.8.8:53
                      Request
                      edgestatic.azureedge.net
                      IN Unknown
                      Response
                      edgestatic.azureedge.net
                      IN CNAME
                      edgestatic.afd.azureedge.net
                      edgestatic.afd.azureedge.net
                      IN CNAME
                      azureedge-t-prod.trafficmanager.net
                      azureedge-t-prod.trafficmanager.net
                      IN CNAME
                      shed.dual-low.s-part-0036.t-0009.t-msedge.net
                      shed.dual-low.s-part-0036.t-0009.t-msedge.net
                      IN CNAME
                      s-part-0036.t-0009.t-msedge.net
                    • flag-us
                      DNS
                      c.s-microsoft.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      c.s-microsoft.com
                      IN A
                      Response
                      c.s-microsoft.com
                      IN CNAME
                      c-s.cms.ms.akadns.net
                      c-s.cms.ms.akadns.net
                      IN CNAME
                      c.s-microsoft.com-c.edgekey.net
                      c.s-microsoft.com-c.edgekey.net
                      IN CNAME
                      e13678.dscg.akamaiedge.net
                      e13678.dscg.akamaiedge.net
                      IN A
                      23.53.113.225
                    • flag-us
                      DNS
                      c.s-microsoft.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      c.s-microsoft.com
                      IN Unknown
                      Response
                      c.s-microsoft.com
                      IN CNAME
                      c-s.cms.ms.akadns.net
                      c-s.cms.ms.akadns.net
                      IN CNAME
                      c.s-microsoft.com-c.edgekey.net
                      c.s-microsoft.com-c.edgekey.net
                      IN CNAME
                      e13678.dscg.akamaiedge.net
                    • flag-us
                      DNS
                      10.121.18.2.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      10.121.18.2.in-addr.arpa
                      IN PTR
                      Response
                      10.121.18.2.in-addr.arpa
                      IN PTR
                      a2-18-121-10deploystaticakamaitechnologiescom
                    • flag-us
                      DNS
                      71.31.126.40.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      71.31.126.40.in-addr.arpa
                      IN PTR
                      Response
                    • flag-us
                      DNS
                      95.221.229.192.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      95.221.229.192.in-addr.arpa
                      IN PTR
                      Response
                    • flag-us
                      DNS
                      249.197.17.2.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      249.197.17.2.in-addr.arpa
                      IN PTR
                      Response
                      249.197.17.2.in-addr.arpa
                      IN PTR
                      a2-17-197-249deploystaticakamaitechnologiescom
                    • flag-us
                      DNS
                      209.205.72.20.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      209.205.72.20.in-addr.arpa
                      IN PTR
                      Response
                    • flag-us
                      DNS
                      nw-umwatson.events.data.microsoft.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      nw-umwatson.events.data.microsoft.com
                      IN A
                      Response
                      nw-umwatson.events.data.microsoft.com
                      IN CNAME
                      blobcollector.events.data.trafficmanager.net
                      blobcollector.events.data.trafficmanager.net
                      IN CNAME
                      onedsblobprdwus17.westus.cloudapp.azure.com
                      onedsblobprdwus17.westus.cloudapp.azure.com
                      IN A
                      20.189.173.22
                    • flag-us
                      POST
                      https://nw-umwatson.events.data.microsoft.com/Telemetry.Request
                      Remote address:
                      20.189.173.22:443
                      Request
                      POST /Telemetry.Request HTTP/1.1
                      Connection: Keep-Alive
                      Content-Type: application/xml
                      User-Agent: Crashpad/0.8.0 WinHTTP/10.0.19041.1151 Windows_NT/10.0.19041.1202 (x64)
                      Content-Length: 3685
                      Host: nw-umwatson.events.data.microsoft.com
                      Response
                      HTTP/1.1 200 200 OK
                      Content-Length: 1035
                      Content-Type: text/xml
                      Server: Microsoft-HTTPAPI/2.0
                      Strict-Transport-Security: max-age=31536000
                      Date: Sat, 15 Jun 2024 21:15:48 GMT
                    • flag-us
                      DNS
                      22.173.189.20.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      22.173.189.20.in-addr.arpa
                      IN PTR
                      Response
                    • flag-us
                      DNS
                      wcpstatic.microsoft.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      wcpstatic.microsoft.com
                      IN A
                      Response
                      wcpstatic.microsoft.com
                      IN CNAME
                      consentdeliveryfd.azurefd.net
                      consentdeliveryfd.azurefd.net
                      IN CNAME
                      firstparty-azurefd-prod.trafficmanager.net
                      firstparty-azurefd-prod.trafficmanager.net
                      IN CNAME
                      shed.dual-low.s-part-0036.t-0009.t-msedge.net
                      shed.dual-low.s-part-0036.t-0009.t-msedge.net
                      IN CNAME
                      s-part-0036.t-0009.t-msedge.net
                      s-part-0036.t-0009.t-msedge.net
                      IN A
                      13.107.246.64
                    • flag-us
                      DNS
                      wcpstatic.microsoft.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      wcpstatic.microsoft.com
                      IN Unknown
                      Response
                      wcpstatic.microsoft.com
                      IN CNAME
                      consentdeliveryfd.azurefd.net
                      consentdeliveryfd.azurefd.net
                      IN CNAME
                      firstparty-azurefd-prod.trafficmanager.net
                      firstparty-azurefd-prod.trafficmanager.net
                      IN CNAME
                      shed.dual-low.s-part-0036.t-0009.t-msedge.net
                      shed.dual-low.s-part-0036.t-0009.t-msedge.net
                      IN CNAME
                      s-part-0036.t-0009.t-msedge.net
                    • flag-us
                      DNS
                      86.23.85.13.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      86.23.85.13.in-addr.arpa
                      IN PTR
                      Response
                    • flag-us
                      DNS
                      198.187.3.20.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      198.187.3.20.in-addr.arpa
                      IN PTR
                      Response
                    • flag-us
                      DNS
                      31.121.18.2.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      31.121.18.2.in-addr.arpa
                      IN PTR
                      Response
                      31.121.18.2.in-addr.arpa
                      IN PTR
                      a2-18-121-31deploystaticakamaitechnologiescom
                    • flag-us
                      DNS
                      97.17.167.52.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      97.17.167.52.in-addr.arpa
                      IN PTR
                      Response
                    • flag-us
                      DNS
                      133.211.185.52.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      133.211.185.52.in-addr.arpa
                      IN PTR
                      Response
                    • flag-us
                      DNS
                      194.61.62.23.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      194.61.62.23.in-addr.arpa
                      IN PTR
                      Response
                      194.61.62.23.in-addr.arpa
                      IN PTR
                      a23-62-61-194deploystaticakamaitechnologiescom
                    • flag-us
                      DNS
                      chromewebstore.googleapis.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      chromewebstore.googleapis.com
                      IN A
                      Response
                      chromewebstore.googleapis.com
                      IN A
                      142.250.200.42
                      chromewebstore.googleapis.com
                      IN A
                      142.250.187.234
                      chromewebstore.googleapis.com
                      IN A
                      142.250.200.10
                      chromewebstore.googleapis.com
                      IN A
                      142.250.179.234
                      chromewebstore.googleapis.com
                      IN A
                      216.58.201.106
                      chromewebstore.googleapis.com
                      IN A
                      142.250.187.202
                      chromewebstore.googleapis.com
                      IN A
                      172.217.16.234
                      chromewebstore.googleapis.com
                      IN A
                      216.58.204.74
                      chromewebstore.googleapis.com
                      IN A
                      142.250.180.10
                      chromewebstore.googleapis.com
                      IN A
                      172.217.169.10
                      chromewebstore.googleapis.com
                      IN A
                      142.250.178.10
                    • flag-us
                      DNS
                      chromewebstore.googleapis.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      chromewebstore.googleapis.com
                      IN Unknown
                      Response
                    • flag-us
                      DNS
                      42.200.250.142.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      42.200.250.142.in-addr.arpa
                      IN PTR
                      Response
                      42.200.250.142.in-addr.arpa
                      IN PTR
                      lhr48s30-in-f101e100net
                    • flag-us
                      DNS
                      240.221.184.93.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      240.221.184.93.in-addr.arpa
                      IN PTR
                      Response
                    • flag-us
                      DNS
                      11.227.111.52.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      11.227.111.52.in-addr.arpa
                      IN PTR
                      Response
                    • flag-us
                      DNS
                      97.61.62.23.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      97.61.62.23.in-addr.arpa
                      IN PTR
                      Response
                      97.61.62.23.in-addr.arpa
                      IN PTR
                      a23-62-61-97deploystaticakamaitechnologiescom
                    • flag-us
                      DNS
                      25.173.189.20.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      25.173.189.20.in-addr.arpa
                      IN PTR
                      Response
                    • 13.107.6.158:443
                      business.bing.com
                      tls
                      2.4kB
                       10.1kB
                       18
                      24
                    • 172.165.69.228:443
                      nav-edge.smartscreen.microsoft.com
                      tls
                      10.6kB
                       13.0kB
                       31
                      36
                    • 13.107.6.158:443
                      business.bing.com
                      tls
                      1.7kB
                       8.4kB
                       12
                      15
                    • 104.90.25.175:443
                      www.microsoft.com
                      tls
                      2.8kB
                       22.9kB
                       26
                      36
                    • 2.18.121.10:443
                      bzib.nelreports.net
                      tls
                      2.5kB
                       6.0kB
                       13
                      15
                    • 13.107.246.64:443
                      edgestatic.azureedge.net
                      tls
                      89.4kB
                       4.7MB
                       1844
                      3420
                    • 13.107.246.64:443
                      edgestatic.azureedge.net
                      tls
                      1.4kB
                       323 B
                       7
                      5
                    • 13.107.246.64:443
                      edgestatic.azureedge.net
                      tls
                      1.6kB
                       4.6kB
                       10
                      9
                    • 20.189.173.22:443
                      https://nw-umwatson.events.data.microsoft.com/Telemetry.Request
                      tls, http
                      4.9kB
                       8.0kB
                       13
                      11

                      HTTP Request

                      POST https://nw-umwatson.events.data.microsoft.com/Telemetry.Request

                      HTTP Response

                      200
                    • 13.107.246.64:443
                      edgestatic.azureedge.net
                      tls
                      8.0kB
                       272.4kB
                       126
                      212
                    • 13.107.246.64:443
                      wcpstatic.microsoft.com
                      tls
                      4.1kB
                       91.0kB
                       53
                      78
                    • 23.62.61.194:443
                      www.bing.com
                      tls
                      1.0kB
                       5.1kB
                       9
                      11
                    • 142.250.200.42:443
                      chromewebstore.googleapis.com
                      tls
                      2.1kB
                       8.0kB
                       18
                      18
                    • 23.62.61.97:443
                      www.bing.com
                      tls
                      1.4kB
                       1.3kB
                       10
                      10
                    • 8.8.8.8:53
                      business.bing.com
                      dns
                      63 B
                       144 B
                       1
                      1

                      DNS Request

                      business.bing.com

                      DNS Response

                      13.107.6.158

                    • 8.8.8.8:53
                      business.bing.com
                      dns
                      63 B
                       185 B
                       1
                      1

                      DNS Request

                      business.bing.com

                    • 8.8.8.8:53
                      nav-edge.smartscreen.microsoft.com
                      dns
                      80 B
                       200 B
                       1
                      1

                      DNS Request

                      nav-edge.smartscreen.microsoft.com

                      DNS Response

                      172.165.69.228

                    • 8.8.8.8:53
                      nav-edge.smartscreen.microsoft.com
                      dns
                      80 B
                       244 B
                       1
                      1

                      DNS Request

                      nav-edge.smartscreen.microsoft.com

                    • 8.8.8.8:53
                      159.113.53.23.in-addr.arpa
                      dns
                      72 B
                       137 B
                       1
                      1

                      DNS Request

                      159.113.53.23.in-addr.arpa

                    • 8.8.8.8:53
                      www.microsoft.com
                      dns
                      63 B
                       230 B
                       1
                      1

                      DNS Request

                      www.microsoft.com

                      DNS Response

                      104.90.25.175

                    • 8.8.8.8:53
                      www.microsoft.com
                      dns
                      63 B
                       230 B
                       1
                      1

                      DNS Request

                      www.microsoft.com

                      DNS Response

                      104.90.25.175

                    • 8.8.8.8:53
                      www.microsoft.com
                      dns
                      63 B
                       275 B
                       1
                      1

                      DNS Request

                      www.microsoft.com

                    • 8.8.8.8:53
                      228.69.165.172.in-addr.arpa
                      dns
                      73 B
                       159 B
                       1
                      1

                      DNS Request

                      228.69.165.172.in-addr.arpa

                    • 8.8.8.8:53
                      175.25.90.104.in-addr.arpa
                      dns
                      72 B
                       137 B
                       1
                      1

                      DNS Request

                      175.25.90.104.in-addr.arpa

                    • 8.8.8.8:53
                      www.microsoft.com
                      dns
                      63 B
                       230 B
                       1
                      1

                      DNS Request

                      www.microsoft.com

                      DNS Response

                      104.90.25.175

                    • 8.8.8.8:53
                      bzib.nelreports.net
                      dns
                      65 B
                       172 B
                       1
                      1

                      DNS Request

                      bzib.nelreports.net

                      DNS Response

                      2.18.121.10
                      2.18.121.23

                    • 8.8.8.8:53
                      bzib.nelreports.net
                      dns
                      65 B
                       204 B
                       1
                      1

                      DNS Request

                      bzib.nelreports.net

                    • 8.8.8.8:53
                      edgestatic.azureedge.net
                      dns
                      70 B
                       231 B
                       1
                      1

                      DNS Request

                      edgestatic.azureedge.net

                      DNS Response

                      13.107.246.64

                    • 8.8.8.8:53
                      edgestatic.azureedge.net
                      dns
                      70 B
                       275 B
                       1
                      1

                      DNS Request

                      edgestatic.azureedge.net

                    • 8.8.8.8:53
                      c.s-microsoft.com
                      dns
                      63 B
                       193 B
                       1
                      1

                      DNS Request

                      c.s-microsoft.com

                      DNS Response

                      23.53.113.225

                    • 8.8.8.8:53
                      c.s-microsoft.com
                      dns
                      63 B
                       238 B
                       1
                      1

                      DNS Request

                      c.s-microsoft.com

                    • 8.8.8.8:53
                      10.121.18.2.in-addr.arpa
                      dns
                      70 B
                       133 B
                       1
                      1

                      DNS Request

                      10.121.18.2.in-addr.arpa

                    • 8.8.8.8:53
                      71.31.126.40.in-addr.arpa
                      dns
                      71 B
                       157 B
                       1
                      1

                      DNS Request

                      71.31.126.40.in-addr.arpa

                    • 8.8.8.8:53
                      95.221.229.192.in-addr.arpa
                      dns
                      73 B
                       144 B
                       1
                      1

                      DNS Request

                      95.221.229.192.in-addr.arpa

                    • 8.8.8.8:53
                      249.197.17.2.in-addr.arpa
                      dns
                      71 B
                       135 B
                       1
                      1

                      DNS Request

                      249.197.17.2.in-addr.arpa

                    • 8.8.8.8:53
                      209.205.72.20.in-addr.arpa
                      dns
                      72 B
                       158 B
                       1
                      1

                      DNS Request

                      209.205.72.20.in-addr.arpa

                    • 8.8.8.8:53
                      nw-umwatson.events.data.microsoft.com
                      dns
                      83 B
                       211 B
                       1
                      1

                      DNS Request

                      nw-umwatson.events.data.microsoft.com

                      DNS Response

                      20.189.173.22

                    • 8.8.8.8:53
                      22.173.189.20.in-addr.arpa
                      dns
                      72 B
                       158 B
                       1
                      1

                      DNS Request

                      22.173.189.20.in-addr.arpa

                    • 224.0.0.251:5353
                      204 B
                       3
                    • 8.8.8.8:53
                      wcpstatic.microsoft.com
                      dns
                      69 B
                       251 B
                       1
                      1

                      DNS Request

                      wcpstatic.microsoft.com

                      DNS Response

                      13.107.246.64

                    • 8.8.8.8:53
                      wcpstatic.microsoft.com
                      dns
                      69 B
                       282 B
                       1
                      1

                      DNS Request

                      wcpstatic.microsoft.com

                    • 8.8.8.8:53
                      86.23.85.13.in-addr.arpa
                      dns
                      70 B
                       144 B
                       1
                      1

                      DNS Request

                      86.23.85.13.in-addr.arpa

                    • 8.8.8.8:53
                      198.187.3.20.in-addr.arpa
                      dns
                      71 B
                       157 B
                       1
                      1

                      DNS Request

                      198.187.3.20.in-addr.arpa

                    • 8.8.8.8:53
                      31.121.18.2.in-addr.arpa
                      dns
                      70 B
                       133 B
                       1
                      1

                      DNS Request

                      31.121.18.2.in-addr.arpa

                    • 8.8.8.8:53
                      97.17.167.52.in-addr.arpa
                      dns
                      71 B
                       145 B
                       1
                      1

                      DNS Request

                      97.17.167.52.in-addr.arpa

                    • 8.8.8.8:53
                      133.211.185.52.in-addr.arpa
                      dns
                      73 B
                       147 B
                       1
                      1

                      DNS Request

                      133.211.185.52.in-addr.arpa

                    • 8.8.8.8:53
                      194.61.62.23.in-addr.arpa
                      dns
                      71 B
                       135 B
                       1
                      1

                      DNS Request

                      194.61.62.23.in-addr.arpa

                    • 8.8.8.8:53
                      chromewebstore.googleapis.com
                      dns
                      75 B
                       251 B
                       1
                      1

                      DNS Request

                      chromewebstore.googleapis.com

                      DNS Response

                      142.250.200.42
                      142.250.187.234
                      142.250.200.10
                      142.250.179.234
                      216.58.201.106
                      142.250.187.202
                      172.217.16.234
                      216.58.204.74
                      142.250.180.10
                      172.217.169.10
                      142.250.178.10

                    • 8.8.8.8:53
                      chromewebstore.googleapis.com
                      dns
                      75 B
                       132 B
                       1
                      1

                      DNS Request

                      chromewebstore.googleapis.com

                    • 8.8.8.8:53
                      42.200.250.142.in-addr.arpa
                      dns
                      73 B
                       112 B
                       1
                      1

                      DNS Request

                      42.200.250.142.in-addr.arpa

                    • 8.8.8.8:53
                      240.221.184.93.in-addr.arpa
                      dns
                      73 B
                       144 B
                       1
                      1

                      DNS Request

                      240.221.184.93.in-addr.arpa

                    • 8.8.8.8:53
                      11.227.111.52.in-addr.arpa
                      dns
                      72 B
                       158 B
                       1
                      1

                      DNS Request

                      11.227.111.52.in-addr.arpa

                    • 8.8.8.8:53
                      97.61.62.23.in-addr.arpa
                      dns
                      70 B
                       133 B
                       1
                      1

                      DNS Request

                      97.61.62.23.in-addr.arpa

                    • 8.8.8.8:53
                      25.173.189.20.in-addr.arpa
                      dns
                      72 B
                       158 B
                       1
                      1

                      DNS Request

                      25.173.189.20.in-addr.arpa

                    MITRE ATT&CK Matrix

                    Replay Monitor

                    Loading Replay Monitor...

                    Downloads

                    We care about your privacy.

                    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.