Analysis

  • max time kernel
    145s
  • max time network
    127s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15/06/2024, 21:08 UTC

General

  • Target

    b01744e28b5e69b787c126b0eb32028f_JaffaCakes118.html

  • Size

    58KB

  • MD5

    b01744e28b5e69b787c126b0eb32028f

  • SHA1

    0df27996ac39e0518fdf7c6201eddaa59d5e0f0a

  • SHA256

    f3c3f914d553e6fac14d65bb7f412d2fa3413121d6c93a072cdead465772f12d

  • SHA512

    121b30ef5b8c4ee9886e5b442a829f323d0344942974e76a004df7807938fa5b1dc9da9073fcd974be6064e7af7eced97e435cb617ae1cea605cfe7c4a6c5e22

  • SSDEEP

    1536:9VcTupBf5o+qb24oKrK1KvOjW9j+dPR+nynwQG:xpBf8240jWSP6ynq

Score
1/10

Malware Config

Signatures

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs
  • Suspicious use of FindShellTrayWindow 25 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\b01744e28b5e69b787c126b0eb32028f_JaffaCakes118.html
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4472
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9b3c846f8,0x7ff9b3c84708,0x7ff9b3c84718
      2⤵
        PID:2576
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2032,2976817427447429128,7410384014631880470,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2060 /prefetch:2
        2⤵
          PID:3736
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2032,2976817427447429128,7410384014631880470,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2560 /prefetch:3
          2⤵
          • Suspicious behavior: EnumeratesProcesses
          PID:384
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2032,2976817427447429128,7410384014631880470,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2896 /prefetch:8
          2⤵
            PID:1600
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,2976817427447429128,7410384014631880470,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3308 /prefetch:1
            2⤵
              PID:1220
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,2976817427447429128,7410384014631880470,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3352 /prefetch:1
              2⤵
                PID:512
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,2976817427447429128,7410384014631880470,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4608 /prefetch:1
                2⤵
                  PID:3836
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,2976817427447429128,7410384014631880470,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5116 /prefetch:1
                  2⤵
                    PID:2424
                  • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2032,2976817427447429128,7410384014631880470,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6092 /prefetch:8
                    2⤵
                      PID:3448
                    • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2032,2976817427447429128,7410384014631880470,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6092 /prefetch:8
                      2⤵
                      • Suspicious behavior: EnumeratesProcesses
                      PID:1516
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,2976817427447429128,7410384014631880470,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4828 /prefetch:1
                      2⤵
                        PID:3244
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,2976817427447429128,7410384014631880470,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5184 /prefetch:1
                        2⤵
                          PID:3900
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,2976817427447429128,7410384014631880470,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4084 /prefetch:1
                          2⤵
                            PID:2744
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,2976817427447429128,7410384014631880470,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4560 /prefetch:1
                            2⤵
                              PID:2172
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2032,2976817427447429128,7410384014631880470,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1996 /prefetch:2
                              2⤵
                              • Suspicious behavior: EnumeratesProcesses
                              PID:2012
                          • C:\Windows\System32\CompPkgSrv.exe
                            C:\Windows\System32\CompPkgSrv.exe -Embedding
                            1⤵
                              PID:2560
                            • C:\Windows\System32\CompPkgSrv.exe
                              C:\Windows\System32\CompPkgSrv.exe -Embedding
                              1⤵
                                PID:2496

                              Network

                              • flag-us
                                DNS
                                apis.google.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                apis.google.com
                                IN A
                              • flag-us
                                DNS
                                apis.google.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                apis.google.com
                                IN A
                              • flag-us
                                DNS
                                apis.google.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                apis.google.com
                                IN A
                              • flag-us
                                DNS
                                apis.google.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                apis.google.com
                                IN A
                              • flag-us
                                DNS
                                apis.google.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                apis.google.com
                                IN A
                              • flag-us
                                DNS
                                www.blogger.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                www.blogger.com
                                IN A
                              • flag-us
                                DNS
                                www.blogger.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                www.blogger.com
                                IN A
                              • flag-us
                                DNS
                                www.blogger.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                www.blogger.com
                                IN A
                              • flag-us
                                DNS
                                www.blogger.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                www.blogger.com
                                IN A
                              • flag-us
                                DNS
                                www.blogger.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                www.blogger.com
                                IN A
                              • flag-us
                                DNS
                                www.blogger.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                www.blogger.com
                                IN A
                              • flag-us
                                DNS
                                www.blogger.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                www.blogger.com
                                IN A
                              • flag-us
                                DNS
                                www.blogger.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                www.blogger.com
                                IN A
                              • flag-us
                                DNS
                                www.blogger.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                www.blogger.com
                                IN A
                              • flag-us
                                DNS
                                www.blogger.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                www.blogger.com
                                IN A
                              • flag-us
                                DNS
                                lostwebtracker.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                lostwebtracker.com
                                IN A
                              • flag-us
                                DNS
                                lostwebtracker.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                lostwebtracker.com
                                IN A
                              • flag-us
                                DNS
                                lostwebtracker.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                lostwebtracker.com
                                IN A
                              • flag-us
                                DNS
                                lostwebtracker.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                lostwebtracker.com
                                IN A
                              • flag-us
                                DNS
                                lostwebtracker.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                lostwebtracker.com
                                IN A
                              • flag-us
                                DNS
                                green-tracker.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                green-tracker.com
                                IN A
                              • flag-us
                                DNS
                                green-tracker.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                green-tracker.com
                                IN A
                              • flag-us
                                DNS
                                green-tracker.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                green-tracker.com
                                IN A
                              • flag-us
                                DNS
                                green-tracker.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                green-tracker.com
                                IN A
                              • flag-us
                                DNS
                                green-tracker.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                green-tracker.com
                                IN A
                              • flag-us
                                DNS
                                projectjaguar.files.wordpress.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                projectjaguar.files.wordpress.com
                                IN A
                              • flag-us
                                DNS
                                projectjaguar.files.wordpress.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                projectjaguar.files.wordpress.com
                                IN A
                              • flag-us
                                DNS
                                projectjaguar.files.wordpress.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                projectjaguar.files.wordpress.com
                                IN A
                              • flag-us
                                DNS
                                projectjaguar.files.wordpress.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                projectjaguar.files.wordpress.com
                                IN A
                              • flag-us
                                DNS
                                projectjaguar.files.wordpress.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                projectjaguar.files.wordpress.com
                                IN A
                              • flag-us
                                DNS
                                www.adclassix.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                www.adclassix.com
                                IN A
                              • flag-us
                                DNS
                                www.adclassix.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                www.adclassix.com
                                IN A
                              • flag-us
                                DNS
                                www.adclassix.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                www.adclassix.com
                                IN A
                              • flag-us
                                DNS
                                www.adclassix.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                www.adclassix.com
                                IN A
                              • flag-us
                                DNS
                                www.adclassix.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                www.adclassix.com
                                IN A
                              • flag-us
                                DNS
                                images.forum-auto.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                images.forum-auto.com
                                IN A
                              • flag-us
                                DNS
                                images.forum-auto.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                images.forum-auto.com
                                IN A
                              • flag-us
                                DNS
                                images.forum-auto.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                images.forum-auto.com
                                IN A
                              • flag-us
                                DNS
                                images.forum-auto.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                images.forum-auto.com
                                IN A
                              • flag-us
                                DNS
                                images.forum-auto.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                images.forum-auto.com
                                IN A
                              • flag-us
                                DNS
                                www.ilovecars.tk
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                www.ilovecars.tk
                                IN A
                              • flag-us
                                DNS
                                www.ilovecars.tk
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                www.ilovecars.tk
                                IN A
                              • flag-us
                                DNS
                                www.ilovecars.tk
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                www.ilovecars.tk
                                IN A
                              • flag-us
                                DNS
                                www.ilovecars.tk
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                www.ilovecars.tk
                                IN A
                              • flag-us
                                DNS
                                www.ilovecars.tk
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                www.ilovecars.tk
                                IN A
                              • flag-us
                                DNS
                                www.ch300imp.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                www.ch300imp.com
                                IN A
                              • flag-us
                                DNS
                                www.ch300imp.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                www.ch300imp.com
                                IN A
                              • flag-us
                                DNS
                                www.ch300imp.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                www.ch300imp.com
                                IN A
                              • flag-us
                                DNS
                                www.ch300imp.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                www.ch300imp.com
                                IN A
                              • flag-us
                                DNS
                                www.ch300imp.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                www.ch300imp.com
                                IN A
                              • flag-us
                                DNS
                                www.packardaustralia.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                www.packardaustralia.com
                                IN A
                              • flag-us
                                DNS
                                www.packardaustralia.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                www.packardaustralia.com
                                IN A
                              • flag-us
                                DNS
                                www.packardaustralia.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                www.packardaustralia.com
                                IN A
                              • flag-us
                                DNS
                                www.packardaustralia.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                www.packardaustralia.com
                                IN A
                              • flag-us
                                DNS
                                www.packardaustralia.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                www.packardaustralia.com
                                IN A
                              • flag-us
                                DNS
                                image.automotive.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                image.automotive.com
                                IN A
                              • flag-us
                                DNS
                                image.automotive.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                image.automotive.com
                                IN A
                              • flag-us
                                DNS
                                image.automotive.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                image.automotive.com
                                IN A
                              • flag-us
                                DNS
                                image.automotive.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                image.automotive.com
                                IN A
                              • flag-us
                                DNS
                                image.automotive.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                image.automotive.com
                                IN A
                              • flag-us
                                DNS
                                farm1.static.flickr.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                farm1.static.flickr.com
                                IN A
                              • flag-us
                                DNS
                                farm1.static.flickr.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                farm1.static.flickr.com
                                IN A
                              • flag-us
                                DNS
                                farm1.static.flickr.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                farm1.static.flickr.com
                                IN A
                              • flag-us
                                DNS
                                farm1.static.flickr.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                farm1.static.flickr.com
                                IN A
                              • flag-us
                                DNS
                                farm1.static.flickr.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                farm1.static.flickr.com
                                IN A
                              • flag-us
                                DNS
                                kosfic.chonnam.ac.kr
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                kosfic.chonnam.ac.kr
                                IN A
                              • flag-us
                                DNS
                                kosfic.chonnam.ac.kr
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                kosfic.chonnam.ac.kr
                                IN A
                              • flag-us
                                DNS
                                kosfic.chonnam.ac.kr
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                kosfic.chonnam.ac.kr
                                IN A
                              • flag-us
                                DNS
                                kosfic.chonnam.ac.kr
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                kosfic.chonnam.ac.kr
                                IN A
                              • flag-us
                                DNS
                                kosfic.chonnam.ac.kr
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                kosfic.chonnam.ac.kr
                                IN A
                              • flag-us
                                DNS
                                www.autospectator.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                www.autospectator.com
                                IN A
                              • flag-us
                                DNS
                                www.autospectator.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                www.autospectator.com
                                IN A
                              • flag-us
                                DNS
                                www.autospectator.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                www.autospectator.com
                                IN A
                              • flag-us
                                DNS
                                www.autospectator.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                www.autospectator.com
                                IN A
                              • flag-us
                                DNS
                                www.autospectator.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                www.autospectator.com
                                IN A
                              • flag-us
                                DNS
                                images03.olx.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                images03.olx.com
                                IN A
                              • flag-us
                                DNS
                                images03.olx.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                images03.olx.com
                                IN A
                              • flag-us
                                DNS
                                images03.olx.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                images03.olx.com
                                IN A
                              • flag-us
                                DNS
                                images03.olx.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                images03.olx.com
                                IN A
                              • flag-us
                                DNS
                                images03.olx.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                images03.olx.com
                                IN A
                              • flag-us
                                DNS
                                www.carstyling.ru
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                www.carstyling.ru
                                IN A
                              • flag-us
                                DNS
                                www.carstyling.ru
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                www.carstyling.ru
                                IN A
                              • flag-us
                                DNS
                                www.carstyling.ru
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                www.carstyling.ru
                                IN A
                              • flag-us
                                DNS
                                www.carstyling.ru
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                www.carstyling.ru
                                IN A
                              • flag-us
                                DNS
                                www.carstyling.ru
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                www.carstyling.ru
                                IN A
                              • flag-us
                                DNS
                                farm3.static.flickr.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                farm3.static.flickr.com
                                IN A
                              • flag-us
                                DNS
                                farm3.static.flickr.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                farm3.static.flickr.com
                                IN A
                              • flag-us
                                DNS
                                farm3.static.flickr.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                farm3.static.flickr.com
                                IN A
                              • flag-us
                                DNS
                                farm3.static.flickr.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                farm3.static.flickr.com
                                IN A
                              • flag-us
                                DNS
                                farm3.static.flickr.com
                                msedge.exe
                                Remote address:
                                8.8.8.8:53
                                Request
                                farm3.static.flickr.com
                                IN A
                              No results found
                              • 8.8.8.8:53
                                apis.google.com
                                dns
                                msedge.exe
                                305 B
                                5

                                DNS Request

                                apis.google.com

                                DNS Request

                                apis.google.com

                                DNS Request

                                apis.google.com

                                DNS Request

                                apis.google.com

                                DNS Request

                                apis.google.com

                              • 8.8.8.8:53
                                www.blogger.com
                                dns
                                msedge.exe
                                305 B
                                5

                                DNS Request

                                www.blogger.com

                                DNS Request

                                www.blogger.com

                                DNS Request

                                www.blogger.com

                                DNS Request

                                www.blogger.com

                                DNS Request

                                www.blogger.com

                              • 224.0.0.251:5353
                                msedge.exe
                                596 B
                                9
                              • 8.8.8.8:53
                                www.blogger.com
                                dns
                                msedge.exe
                                305 B
                                5

                                DNS Request

                                www.blogger.com

                                DNS Request

                                www.blogger.com

                                DNS Request

                                www.blogger.com

                                DNS Request

                                www.blogger.com

                                DNS Request

                                www.blogger.com

                              • 8.8.8.8:53
                                lostwebtracker.com
                                dns
                                msedge.exe
                                320 B
                                5

                                DNS Request

                                lostwebtracker.com

                                DNS Request

                                lostwebtracker.com

                                DNS Request

                                lostwebtracker.com

                                DNS Request

                                lostwebtracker.com

                                DNS Request

                                lostwebtracker.com

                              • 8.8.8.8:53
                                green-tracker.com
                                dns
                                msedge.exe
                                315 B
                                5

                                DNS Request

                                green-tracker.com

                                DNS Request

                                green-tracker.com

                                DNS Request

                                green-tracker.com

                                DNS Request

                                green-tracker.com

                                DNS Request

                                green-tracker.com

                              • 8.8.8.8:53
                                projectjaguar.files.wordpress.com
                                dns
                                msedge.exe
                                395 B
                                5

                                DNS Request

                                projectjaguar.files.wordpress.com

                                DNS Request

                                projectjaguar.files.wordpress.com

                                DNS Request

                                projectjaguar.files.wordpress.com

                                DNS Request

                                projectjaguar.files.wordpress.com

                                DNS Request

                                projectjaguar.files.wordpress.com

                              • 8.8.8.8:53
                                www.adclassix.com
                                dns
                                msedge.exe
                                315 B
                                5

                                DNS Request

                                www.adclassix.com

                                DNS Request

                                www.adclassix.com

                                DNS Request

                                www.adclassix.com

                                DNS Request

                                www.adclassix.com

                                DNS Request

                                www.adclassix.com

                              • 8.8.8.8:53
                                images.forum-auto.com
                                dns
                                msedge.exe
                                335 B
                                5

                                DNS Request

                                images.forum-auto.com

                                DNS Request

                                images.forum-auto.com

                                DNS Request

                                images.forum-auto.com

                                DNS Request

                                images.forum-auto.com

                                DNS Request

                                images.forum-auto.com

                              • 8.8.8.8:53
                                www.ilovecars.tk
                                dns
                                msedge.exe
                                310 B
                                5

                                DNS Request

                                www.ilovecars.tk

                                DNS Request

                                www.ilovecars.tk

                                DNS Request

                                www.ilovecars.tk

                                DNS Request

                                www.ilovecars.tk

                                DNS Request

                                www.ilovecars.tk

                              • 8.8.8.8:53
                                www.ch300imp.com
                                dns
                                msedge.exe
                                310 B
                                5

                                DNS Request

                                www.ch300imp.com

                                DNS Request

                                www.ch300imp.com

                                DNS Request

                                www.ch300imp.com

                                DNS Request

                                www.ch300imp.com

                                DNS Request

                                www.ch300imp.com

                              • 8.8.8.8:53
                                www.packardaustralia.com
                                dns
                                msedge.exe
                                350 B
                                5

                                DNS Request

                                www.packardaustralia.com

                                DNS Request

                                www.packardaustralia.com

                                DNS Request

                                www.packardaustralia.com

                                DNS Request

                                www.packardaustralia.com

                                DNS Request

                                www.packardaustralia.com

                              • 8.8.8.8:53
                                image.automotive.com
                                dns
                                msedge.exe
                                330 B
                                5

                                DNS Request

                                image.automotive.com

                                DNS Request

                                image.automotive.com

                                DNS Request

                                image.automotive.com

                                DNS Request

                                image.automotive.com

                                DNS Request

                                image.automotive.com

                              • 8.8.8.8:53
                                farm1.static.flickr.com
                                dns
                                msedge.exe
                                345 B
                                5

                                DNS Request

                                farm1.static.flickr.com

                                DNS Request

                                farm1.static.flickr.com

                                DNS Request

                                farm1.static.flickr.com

                                DNS Request

                                farm1.static.flickr.com

                                DNS Request

                                farm1.static.flickr.com

                              • 8.8.8.8:53
                                kosfic.chonnam.ac.kr
                                dns
                                msedge.exe
                                330 B
                                5

                                DNS Request

                                kosfic.chonnam.ac.kr

                                DNS Request

                                kosfic.chonnam.ac.kr

                                DNS Request

                                kosfic.chonnam.ac.kr

                                DNS Request

                                kosfic.chonnam.ac.kr

                                DNS Request

                                kosfic.chonnam.ac.kr

                              • 8.8.8.8:53
                                www.autospectator.com
                                dns
                                msedge.exe
                                335 B
                                5

                                DNS Request

                                www.autospectator.com

                                DNS Request

                                www.autospectator.com

                                DNS Request

                                www.autospectator.com

                                DNS Request

                                www.autospectator.com

                                DNS Request

                                www.autospectator.com

                              • 8.8.8.8:53
                                images03.olx.com
                                dns
                                msedge.exe
                                310 B
                                5

                                DNS Request

                                images03.olx.com

                                DNS Request

                                images03.olx.com

                                DNS Request

                                images03.olx.com

                                DNS Request

                                images03.olx.com

                                DNS Request

                                images03.olx.com

                              • 8.8.8.8:53
                                www.carstyling.ru
                                dns
                                msedge.exe
                                315 B
                                5

                                DNS Request

                                www.carstyling.ru

                                DNS Request

                                www.carstyling.ru

                                DNS Request

                                www.carstyling.ru

                                DNS Request

                                www.carstyling.ru

                                DNS Request

                                www.carstyling.ru

                              • 8.8.8.8:53
                                farm3.static.flickr.com
                                dns
                                msedge.exe
                                345 B
                                5

                                DNS Request

                                farm3.static.flickr.com

                                DNS Request

                                farm3.static.flickr.com

                                DNS Request

                                farm3.static.flickr.com

                                DNS Request

                                farm3.static.flickr.com

                                DNS Request

                                farm3.static.flickr.com

                              MITRE ATT&CK Enterprise v15

                              Replay Monitor

                              Loading Replay Monitor...

                              Downloads

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                Filesize

                                152B

                                MD5

                                56641592f6e69f5f5fb06f2319384490

                                SHA1

                                6a86be42e2c6d26b7830ad9f4e2627995fd91069

                                SHA256

                                02d4984e590e947265474d592e64edde840fdca7eb881eebde3e220a1d883455

                                SHA512

                                c75e689b2bbbe07ebf72baf75c56f19c39f45d5593cf47535eb722f95002b3ee418027047c0ee8d63800f499038db5e2c24aff9705d830c7b6eaa290d9adc868

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                Filesize

                                152B

                                MD5

                                612a6c4247ef652299b376221c984213

                                SHA1

                                d306f3b16bde39708aa862aee372345feb559750

                                SHA256

                                9d8e24c91cff338e56b518a533cb2e49a2803356bbf6e04892fb168a7ce2844a

                                SHA512

                                34a14d63abb1e3fe0f9927a94393043d458fe0624843e108d290266f554018e6379cba924cb5388735abdd6c5f1e2e318478a673f3f9b762815a758866d10973

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                Filesize

                                5KB

                                MD5

                                b82838176af58233ee5b0bf5857692a2

                                SHA1

                                5f7b1894ddfc03c66ccc7faf4c76e904810b9a68

                                SHA256

                                9f7a8f23c666ff973c1ee25564bcb94cdb5055b2de60d9361a6146b927ff2246

                                SHA512

                                789b26f524862d442faa78ad393d6af5449cb5c0903a7d563ea645410069c3852a0f8e7485a2543141ffb98a4bfc5c9cd594f1bcf0e671a99ffc720d91b4df4f

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                Filesize

                                16B

                                MD5

                                6752a1d65b201c13b62ea44016eb221f

                                SHA1

                                58ecf154d01a62233ed7fb494ace3c3d4ffce08b

                                SHA256

                                0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

                                SHA512

                                9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

                              • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                Filesize

                                8KB

                                MD5

                                22d798582abdc6a06a9ce317b96d756b

                                SHA1

                                852516a26f3a19f1a51cee7a016cc4cb0ca75962

                                SHA256

                                d6bfee09f246345e82d17287eb3db331561667c27020622132409b175700a304

                                SHA512

                                cbecb3a049ddc5b6a91085f9565c3a9d3c74d118b9a99059546cc423ea8e1ecba0b658edf2d743015c36198d26100bf068dc132f81bbd90ba2726ccd9e63a80f

                              We care about your privacy.

                              This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.