Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

3

5e9ac544c4...18.exe

windows7-x64

6

5e9ac544c4...18.exe

windows10-2004-x64

6

Analysis

  • max time kernel
    150s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/07/2024, 01:59 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe

  • Size

    261KB

  • MD5

    5e9ac544c472baef4057017a306b5a92

  • SHA1

    3a93c266702acbcce4f08c6de1c27fabe1cf55af

  • SHA256

    f1b4bc1d473efbcc74db7cf0b8ad026c10371afca7f5d4dd0cff6e67d3337787

  • SHA512

    082eb956096fc7ca4d6dd690d1c98b07aaac6be2848fecd481dac0adc75758ffe2c77d2cbd3e9cda1eeae2780c6d29617d61111c7db6797d8dd54fdb934c52ad

  • SSDEEP

    3072:1WMoTLbAyxLnX2aKidNy/MQKI3adATsHSRh+gnTchZNQsnOGT0RJiyDyCjntuFjO:mdGkHKdRhTIG3hDyCj8FyVrd

Score
6/10
persistence

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Suspicious behavior: RenamesItself 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe"
    1⤵
    • Adds Run key to start application
    • Suspicious behavior: RenamesItself
    PID:4996

Network

  • flag-us
    DNS
    app2.winsoft1.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft1.com
    IN A
    Response
  • flag-us
    DNS
    g.bing.com
    Remote address:
    8.8.8.8:53
    Request
    g.bing.com
    IN A
    Response
    g.bing.com
    IN CNAME
    g-bing-com.dual-a-0034.a-msedge.net
    g-bing-com.dual-a-0034.a-msedge.net
    IN CNAME
    dual-a-0034.a-msedge.net
    dual-a-0034.a-msedge.net
    IN A
    13.107.21.237
    dual-a-0034.a-msedge.net
    IN A
    204.79.197.237
  • flag-us
    GET
    https://g.bing.com/neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=af18eb51cb1c44fb8ede6b55eca766ff&localId=w:29030E6B-39D2-65A0-5B93-B1D2300B7E50&deviceId=6825836757756773&anid=
    Remote address:
    13.107.21.237:443
    Request
    GET /neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=af18eb51cb1c44fb8ede6b55eca766ff&localId=w:29030E6B-39D2-65A0-5B93-B1D2300B7E50&deviceId=6825836757756773&anid= HTTP/2.0
    host: g.bing.com
    accept-encoding: gzip, deflate
    user-agent: WindowsShellClient/9.0.40929.0 (Windows)
    Response
    HTTP/2.0 204
    cache-control: no-cache, must-revalidate
    pragma: no-cache
    expires: Fri, 01 Jan 1990 00:00:00 GMT
    set-cookie: MUID=26EFD9EAE8A46FB83CCFCD28E9836E7C; domain=.bing.com; expires=Thu, 14-Aug-2025 02:00:00 GMT; path=/; SameSite=None; Secure; Priority=High;
    strict-transport-security: max-age=31536000; includeSubDomains; preload
    access-control-allow-origin: *
    x-cache: CONFIG_NOCACHE
    accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
    x-msedge-ref: Ref A: E2FD813B2ED4466AB4C157CF76432AAA Ref B: LON04EDGE0608 Ref C: 2024-07-20T02:00:00Z
    date: Sat, 20 Jul 2024 02:00:00 GMT
  • flag-us
    GET
    https://g.bing.com/neg/0?action=emptycreative&adUnitId=11730597&publisherId=251978541&rid=af18eb51cb1c44fb8ede6b55eca766ff&localId=w:29030E6B-39D2-65A0-5B93-B1D2300B7E50&deviceId=6825836757756773&anid=
    Remote address:
    13.107.21.237:443
    Request
    GET /neg/0?action=emptycreative&adUnitId=11730597&publisherId=251978541&rid=af18eb51cb1c44fb8ede6b55eca766ff&localId=w:29030E6B-39D2-65A0-5B93-B1D2300B7E50&deviceId=6825836757756773&anid= HTTP/2.0
    host: g.bing.com
    accept-encoding: gzip, deflate
    user-agent: WindowsShellClient/9.0.40929.0 (Windows)
    cookie: MUID=26EFD9EAE8A46FB83CCFCD28E9836E7C
    Response
    HTTP/2.0 204
    cache-control: no-cache, must-revalidate
    pragma: no-cache
    expires: Fri, 01 Jan 1990 00:00:00 GMT
    set-cookie: MSPTC=EIdCLeophI4zVv_9BWEY8mv3iYs92GjkzhzqLW4q4J4; domain=.bing.com; expires=Thu, 14-Aug-2025 02:00:00 GMT; path=/; Partitioned; secure; SameSite=None
    strict-transport-security: max-age=31536000; includeSubDomains; preload
    access-control-allow-origin: *
    x-cache: CONFIG_NOCACHE
    accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
    x-msedge-ref: Ref A: 6C0DD6686E304337A2CE02E8BDEC2B38 Ref B: LON04EDGE0608 Ref C: 2024-07-20T02:00:00Z
    date: Sat, 20 Jul 2024 02:00:00 GMT
  • flag-us
    GET
    https://g.bing.com/neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=af18eb51cb1c44fb8ede6b55eca766ff&localId=w:29030E6B-39D2-65A0-5B93-B1D2300B7E50&deviceId=6825836757756773&anid=
    Remote address:
    13.107.21.237:443
    Request
    GET /neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=af18eb51cb1c44fb8ede6b55eca766ff&localId=w:29030E6B-39D2-65A0-5B93-B1D2300B7E50&deviceId=6825836757756773&anid= HTTP/2.0
    host: g.bing.com
    accept-encoding: gzip, deflate
    user-agent: WindowsShellClient/9.0.40929.0 (Windows)
    cookie: MUID=26EFD9EAE8A46FB83CCFCD28E9836E7C; MSPTC=EIdCLeophI4zVv_9BWEY8mv3iYs92GjkzhzqLW4q4J4
    Response
    HTTP/2.0 204
    cache-control: no-cache, must-revalidate
    pragma: no-cache
    expires: Fri, 01 Jan 1990 00:00:00 GMT
    strict-transport-security: max-age=31536000; includeSubDomains; preload
    access-control-allow-origin: *
    x-cache: CONFIG_NOCACHE
    accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
    x-msedge-ref: Ref A: 4262E7D8D0D34098BD45084F0163C20D Ref B: LON04EDGE0608 Ref C: 2024-07-20T02:00:00Z
    date: Sat, 20 Jul 2024 02:00:00 GMT
  • flag-us
    DNS
    app2.winsoft2.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft2.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft3.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft3.com
    IN A
    Response
  • flag-us
    DNS
    172.210.232.199.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    172.210.232.199.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    232.168.11.51.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    232.168.11.51.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    15.164.165.52.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    15.164.165.52.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    237.21.107.13.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    237.21.107.13.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    73.31.126.40.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    73.31.126.40.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    app2.winsoft4.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft4.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft5.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft5.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft5.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft5.com
    IN A
  • flag-us
    DNS
    app2.winsoft5.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft5.com
    IN A
  • flag-us
    DNS
    26.35.223.20.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    26.35.223.20.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    app2.winsoft6.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft6.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft6.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft6.com
    IN A
  • flag-us
    DNS
    app2.winsoft7.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft7.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft8.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft8.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft9.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft9.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft10.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft10.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft11.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft11.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft12.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft12.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft13.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft13.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft14.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft14.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft15.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft15.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft16.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft16.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft17.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft17.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft18.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft18.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft19.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft19.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft20.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft20.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft21.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft21.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft22.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft22.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft23.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft23.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft24.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft24.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft25.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft25.com
    IN A
    Response
  • flag-us
    DNS
    183.142.211.20.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    183.142.211.20.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    app2.winsoft26.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft26.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft27.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft27.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft28.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft28.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft29.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft29.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft30.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft30.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft31.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft31.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft32.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft32.com
    IN A
    Response
    app2.winsoft32.com
    IN A
    91.195.240.13
  • flag-us
    DNS
    app2.winsoft32.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft32.com
    IN A
    Response
    app2.winsoft32.com
    IN A
    91.195.240.13
  • flag-us
    DNS
    app2.winsoft32.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft32.com
    IN A
  • flag-us
    DNS
    app2.winsoft33.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft33.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft34.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft34.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft35.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft35.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft36.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft36.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft37.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft37.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft38.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft38.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft39.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft39.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft40.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft40.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft41.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft41.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft42.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft42.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft43.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft43.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft44.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft44.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft45.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft45.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft46.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft46.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft47.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft47.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft48.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft48.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft49.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft49.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft50.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft50.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft51.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft51.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft52.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft52.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft53.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft53.com
    IN A
    Response
  • flag-us
    DNS
    183.59.114.20.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    183.59.114.20.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    app2.winsoft54.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft54.com
    IN A
    Response
  • flag-us
    DNS
    tse1.mm.bing.net
    Remote address:
    8.8.8.8:53
    Request
    tse1.mm.bing.net
    IN A
    Response
    tse1.mm.bing.net
    IN CNAME
    mm-mm.bing.net.trafficmanager.net
    mm-mm.bing.net.trafficmanager.net
    IN CNAME
    ax-0001.ax-msedge.net
    ax-0001.ax-msedge.net
    IN A
    150.171.27.10
    ax-0001.ax-msedge.net
    IN A
    150.171.28.10
  • flag-us
    GET
    https://tse1.mm.bing.net/th?id=OADD2.10239339388084_14BR1HNZO7MDFJS4B&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90
    Remote address:
    150.171.27.10:443
    Request
    GET /th?id=OADD2.10239339388084_14BR1HNZO7MDFJS4B&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/2.0
    host: tse1.mm.bing.net
    accept: */*
    accept-encoding: gzip, deflate, br
    user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
    Response
    HTTP/2.0 200
    cache-control: public, max-age=2592000
    content-length: 586896
    content-type: image/jpeg
    x-cache: TCP_HIT
    access-control-allow-origin: *
    access-control-allow-headers: *
    access-control-allow-methods: GET, POST, OPTIONS
    timing-allow-origin: *
    report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
    nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
    accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
    x-msedge-ref: Ref A: 42690A2716B64A0081E3B6CC7247A1B0 Ref B: LON04EDGE0810 Ref C: 2024-07-20T02:00:31Z
    date: Sat, 20 Jul 2024 02:00:30 GMT
  • flag-us
    GET
    https://tse1.mm.bing.net/th?id=OADD2.10239317301469_1CI9E0AG3RDYG5DMG&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90
    Remote address:
    150.171.27.10:443
    Request
    GET /th?id=OADD2.10239317301469_1CI9E0AG3RDYG5DMG&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/2.0
    host: tse1.mm.bing.net
    accept: */*
    accept-encoding: gzip, deflate, br
    user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
    Response
    HTTP/2.0 200
    cache-control: public, max-age=2592000
    content-length: 443603
    content-type: image/jpeg
    x-cache: TCP_HIT
    access-control-allow-origin: *
    access-control-allow-headers: *
    access-control-allow-methods: GET, POST, OPTIONS
    timing-allow-origin: *
    report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
    nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
    accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
    x-msedge-ref: Ref A: BAC720FCEB6A4179B5A8463108932A01 Ref B: LON04EDGE0810 Ref C: 2024-07-20T02:00:31Z
    date: Sat, 20 Jul 2024 02:00:30 GMT
  • flag-us
    GET
    https://tse1.mm.bing.net/th?id=OADD2.10239317301036_1G9CB801VBJIYBSI0&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90
    Remote address:
    150.171.27.10:443
    Request
    GET /th?id=OADD2.10239317301036_1G9CB801VBJIYBSI0&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/2.0
    host: tse1.mm.bing.net
    accept: */*
    accept-encoding: gzip, deflate, br
    user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
    Response
    HTTP/2.0 200
    cache-control: public, max-age=2592000
    content-length: 347802
    content-type: image/jpeg
    x-cache: TCP_HIT
    access-control-allow-origin: *
    access-control-allow-headers: *
    access-control-allow-methods: GET, POST, OPTIONS
    timing-allow-origin: *
    report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
    nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
    accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
    x-msedge-ref: Ref A: 79F1E0CEC21E47C4B872FB986B6FD12F Ref B: LON04EDGE0810 Ref C: 2024-07-20T02:00:31Z
    date: Sat, 20 Jul 2024 02:00:30 GMT
  • flag-us
    GET
    https://tse1.mm.bing.net/th?id=OADD2.10239339388083_1LK8GG0XUINT2UANS&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90
    Remote address:
    150.171.27.10:443
    Request
    GET /th?id=OADD2.10239339388083_1LK8GG0XUINT2UANS&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/2.0
    host: tse1.mm.bing.net
    accept: */*
    accept-encoding: gzip, deflate, br
    user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
    Response
    HTTP/2.0 200
    cache-control: public, max-age=2592000
    content-length: 705144
    content-type: image/jpeg
    x-cache: TCP_HIT
    access-control-allow-origin: *
    access-control-allow-headers: *
    access-control-allow-methods: GET, POST, OPTIONS
    timing-allow-origin: *
    report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
    nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
    accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
    x-msedge-ref: Ref A: B31F7CF073D447C1AA913FDC9B8C6593 Ref B: LON04EDGE0810 Ref C: 2024-07-20T02:00:31Z
    date: Sat, 20 Jul 2024 02:00:30 GMT
  • flag-us
    DNS
    app2.winsoft55.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft55.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft56.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft56.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft56.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft56.com
    IN A
  • flag-us
    DNS
    app2.winsoft57.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft57.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft58.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft58.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft59.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft59.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft60.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft60.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft61.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft61.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft62.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft62.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft63.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft63.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft64.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft64.com
    IN A
    Response
    app2.winsoft64.com
    IN A
    91.195.240.13
  • flag-us
    DNS
    app2.winsoft64.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft64.com
    IN A
    Response
    app2.winsoft64.com
    IN A
    91.195.240.13
  • flag-us
    DNS
    app2.winsoft65.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft65.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft66.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft66.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft67.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft67.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft68.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft68.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft69.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft69.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft70.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft70.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft71.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft71.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft72.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft72.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft73.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft73.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft73.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft73.com
    IN A
  • flag-us
    DNS
    app2.winsoft73.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft73.com
    IN A
  • flag-us
    DNS
    app2.winsoft74.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft74.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft74.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft74.com
    IN A
  • flag-us
    DNS
    app2.winsoft75.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft75.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft76.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft76.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft77.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft77.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft78.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft78.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft79.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft79.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft80.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft80.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft81.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft81.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft82.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft82.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft83.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft83.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft84.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft84.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft85.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft85.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft86.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft86.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft87.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft87.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft88.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft88.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft89.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft89.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft90.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft90.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft91.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft91.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft92.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft92.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft93.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft93.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft94.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft94.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft95.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft95.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft96.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft96.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft97.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft97.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft98.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft98.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft98.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft98.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft98.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft98.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft98.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft98.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft99.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft99.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft99.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft99.com
    IN A
  • flag-us
    DNS
    app2.winsoft100.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft100.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft0.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft0.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft1.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft1.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft2.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft2.com
    IN A
    Response
  • flag-us
    DNS
    app2.winsoft3.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    app2.winsoft3.com
    IN A
    Response
  • flag-us
    DNS
    p2.winsoft3.com
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    p2.winsoft3.com
    IN A
    Response
  • flag-us
    DNS
    240.221.184.93.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    240.221.184.93.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    48.229.111.52.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    48.229.111.52.in-addr.arpa
    IN PTR
    Response
  • 13.107.21.237:443
    https://g.bing.com/neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=af18eb51cb1c44fb8ede6b55eca766ff&localId=w:29030E6B-39D2-65A0-5B93-B1D2300B7E50&deviceId=6825836757756773&anid=
    tls, http2
    2.0kB
     9.3kB
     21
    19

    HTTP Request

    GET https://g.bing.com/neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=af18eb51cb1c44fb8ede6b55eca766ff&localId=w:29030E6B-39D2-65A0-5B93-B1D2300B7E50&deviceId=6825836757756773&anid=

    HTTP Response

    204

    HTTP Request

    GET https://g.bing.com/neg/0?action=emptycreative&adUnitId=11730597&publisherId=251978541&rid=af18eb51cb1c44fb8ede6b55eca766ff&localId=w:29030E6B-39D2-65A0-5B93-B1D2300B7E50&deviceId=6825836757756773&anid=

    HTTP Response

    204

    HTTP Request

    GET https://g.bing.com/neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=af18eb51cb1c44fb8ede6b55eca766ff&localId=w:29030E6B-39D2-65A0-5B93-B1D2300B7E50&deviceId=6825836757756773&anid=

    HTTP Response

    204
  • 150.171.27.10:443
    https://tse1.mm.bing.net/th?id=OADD2.10239339388083_1LK8GG0XUINT2UANS&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90
    tls, http2
    76.9kB
     2.2MB
     1588
    1582

    HTTP Request

    GET https://tse1.mm.bing.net/th?id=OADD2.10239339388084_14BR1HNZO7MDFJS4B&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90

    HTTP Request

    GET https://tse1.mm.bing.net/th?id=OADD2.10239317301469_1CI9E0AG3RDYG5DMG&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90

    HTTP Request

    GET https://tse1.mm.bing.net/th?id=OADD2.10239317301036_1G9CB801VBJIYBSI0&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90

    HTTP Request

    GET https://tse1.mm.bing.net/th?id=OADD2.10239339388083_1LK8GG0XUINT2UANS&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90

    HTTP Response

    200

    HTTP Response

    200

    HTTP Response

    200

    HTTP Response

    200
  • 150.171.27.10:443
    tse1.mm.bing.net
    tls, http2
    1.2kB
     6.9kB
     15
    13
  • 150.171.27.10:443
    tse1.mm.bing.net
    tls, http2
    1.2kB
     6.9kB
     15
    13
  • 150.171.27.10:443
    tse1.mm.bing.net
    tls, http2
    1.2kB
     6.9kB
     15
    13
  • 52.111.236.23:443
    322 B
     7
  • 8.8.8.8:53
    app2.winsoft1.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    63 B
     136 B
     1
    1

    DNS Request

    app2.winsoft1.com

  • 8.8.8.8:53
    g.bing.com
    dns
    56 B
     151 B
     1
    1

    DNS Request

    g.bing.com

    DNS Response

    13.107.21.237
    204.79.197.237

  • 8.8.8.8:53
    app2.winsoft2.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    63 B
     136 B
     1
    1

    DNS Request

    app2.winsoft2.com

  • 8.8.8.8:53
    app2.winsoft3.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    63 B
     136 B
     1
    1

    DNS Request

    app2.winsoft3.com

  • 8.8.8.8:53
    172.210.232.199.in-addr.arpa
    dns
    74 B
     128 B
     1
    1

    DNS Request

    172.210.232.199.in-addr.arpa

  • 8.8.8.8:53
    232.168.11.51.in-addr.arpa
    dns
    144 B
     304 B
     2
    2

    DNS Request

    232.168.11.51.in-addr.arpa

    DNS Request

    15.164.165.52.in-addr.arpa

  • 8.8.8.8:53
    237.21.107.13.in-addr.arpa
    dns
    72 B
     158 B
     1
    1

    DNS Request

    237.21.107.13.in-addr.arpa

  • 8.8.8.8:53
    73.31.126.40.in-addr.arpa
    dns
    71 B
     157 B
     1
    1

    DNS Request

    73.31.126.40.in-addr.arpa

  • 8.8.8.8:53
    app2.winsoft4.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    63 B
     136 B
     1
    1

    DNS Request

    app2.winsoft4.com

  • 8.8.8.8:53
    app2.winsoft5.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    189 B
     136 B
     3
    1

    DNS Request

    app2.winsoft5.com

    DNS Request

    app2.winsoft5.com

    DNS Request

    app2.winsoft5.com

  • 8.8.8.8:53
    26.35.223.20.in-addr.arpa
    dns
    71 B
     157 B
     1
    1

    DNS Request

    26.35.223.20.in-addr.arpa

  • 8.8.8.8:53
    app2.winsoft6.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    126 B
     136 B
     2
    1

    DNS Request

    app2.winsoft6.com

    DNS Request

    app2.winsoft6.com

  • 8.8.8.8:53
    app2.winsoft7.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    63 B
     136 B
     1
    1

    DNS Request

    app2.winsoft7.com

  • 8.8.8.8:53
    app2.winsoft8.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    63 B
     136 B
     1
    1

    DNS Request

    app2.winsoft8.com

  • 8.8.8.8:53
    app2.winsoft9.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    63 B
     136 B
     1
    1

    DNS Request

    app2.winsoft9.com

  • 8.8.8.8:53
    app2.winsoft10.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft10.com

  • 8.8.8.8:53
    app2.winsoft11.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft11.com

  • 8.8.8.8:53
    app2.winsoft12.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft12.com

  • 8.8.8.8:53
    app2.winsoft13.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft13.com

  • 8.8.8.8:53
    app2.winsoft14.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft14.com

  • 8.8.8.8:53
    app2.winsoft15.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft15.com

  • 8.8.8.8:53
    app2.winsoft16.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft16.com

  • 8.8.8.8:53
    app2.winsoft17.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft17.com

  • 8.8.8.8:53
    app2.winsoft18.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft18.com

  • 8.8.8.8:53
    app2.winsoft19.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft19.com

  • 8.8.8.8:53
    app2.winsoft20.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft20.com

  • 8.8.8.8:53
    app2.winsoft21.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft21.com

  • 8.8.8.8:53
    app2.winsoft22.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft22.com

  • 8.8.8.8:53
    app2.winsoft23.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft23.com

  • 8.8.8.8:53
    app2.winsoft24.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft24.com

  • 8.8.8.8:53
    app2.winsoft25.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft25.com

  • 8.8.8.8:53
    183.142.211.20.in-addr.arpa
    dns
    73 B
     159 B
     1
    1

    DNS Request

    183.142.211.20.in-addr.arpa

  • 8.8.8.8:53
    app2.winsoft26.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft26.com

  • 8.8.8.8:53
    app2.winsoft27.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft27.com

  • 8.8.8.8:53
    app2.winsoft28.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft28.com

  • 8.8.8.8:53
    app2.winsoft29.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft29.com

  • 8.8.8.8:53
    app2.winsoft30.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft30.com

  • 8.8.8.8:53
    app2.winsoft31.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft31.com

  • 8.8.8.8:53
    app2.winsoft32.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    192 B
     160 B
     3
    2

    DNS Request

    app2.winsoft32.com

    DNS Request

    app2.winsoft32.com

    DNS Request

    app2.winsoft32.com

    DNS Response

    91.195.240.13

    DNS Response

    91.195.240.13

  • 8.8.8.8:53
    app2.winsoft33.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft33.com

  • 8.8.8.8:53
    app2.winsoft34.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft34.com

  • 8.8.8.8:53
    app2.winsoft35.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft35.com

  • 8.8.8.8:53
    app2.winsoft36.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft36.com

  • 8.8.8.8:53
    app2.winsoft37.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft37.com

  • 8.8.8.8:53
    app2.winsoft38.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft38.com

  • 8.8.8.8:53
    app2.winsoft39.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft39.com

  • 8.8.8.8:53
    app2.winsoft40.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft40.com

  • 8.8.8.8:53
    app2.winsoft41.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft41.com

  • 8.8.8.8:53
    app2.winsoft42.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft42.com

  • 8.8.8.8:53
    app2.winsoft43.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft43.com

  • 8.8.8.8:53
    app2.winsoft44.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft44.com

  • 8.8.8.8:53
    app2.winsoft45.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft45.com

  • 8.8.8.8:53
    app2.winsoft46.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft46.com

  • 8.8.8.8:53
    app2.winsoft47.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft47.com

  • 8.8.8.8:53
    app2.winsoft48.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft48.com

  • 8.8.8.8:53
    app2.winsoft49.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft49.com

  • 8.8.8.8:53
    app2.winsoft50.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft50.com

  • 8.8.8.8:53
    app2.winsoft51.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft51.com

  • 8.8.8.8:53
    app2.winsoft52.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft52.com

  • 8.8.8.8:53
    app2.winsoft53.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft53.com

  • 8.8.8.8:53
    183.59.114.20.in-addr.arpa
    dns
    72 B
     158 B
     1
    1

    DNS Request

    183.59.114.20.in-addr.arpa

  • 8.8.8.8:53
    app2.winsoft54.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft54.com

  • 8.8.8.8:53
    tse1.mm.bing.net
    dns
    62 B
     170 B
     1
    1

    DNS Request

    tse1.mm.bing.net

    DNS Response

    150.171.27.10
    150.171.28.10

  • 8.8.8.8:53
    app2.winsoft55.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft55.com

  • 8.8.8.8:53
    app2.winsoft56.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    128 B
     137 B
     2
    1

    DNS Request

    app2.winsoft56.com

    DNS Request

    app2.winsoft56.com

  • 8.8.8.8:53
    app2.winsoft57.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft57.com

  • 8.8.8.8:53
    app2.winsoft58.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft58.com

  • 8.8.8.8:53
    app2.winsoft59.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft59.com

  • 8.8.8.8:53
    app2.winsoft60.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft60.com

  • 8.8.8.8:53
    app2.winsoft61.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft61.com

  • 8.8.8.8:53
    app2.winsoft62.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft62.com

  • 8.8.8.8:53
    app2.winsoft63.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft63.com

  • 8.8.8.8:53
    app2.winsoft64.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    128 B
     160 B
     2
    2

    DNS Request

    app2.winsoft64.com

    DNS Request

    app2.winsoft64.com

    DNS Response

    91.195.240.13

    DNS Response

    91.195.240.13

  • 8.8.8.8:53
    app2.winsoft65.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft65.com

  • 8.8.8.8:53
    app2.winsoft66.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft66.com

  • 8.8.8.8:53
    app2.winsoft67.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft67.com

  • 8.8.8.8:53
    app2.winsoft68.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft68.com

  • 8.8.8.8:53
    app2.winsoft69.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft69.com

  • 8.8.8.8:53
    app2.winsoft70.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft70.com

  • 8.8.8.8:53
    app2.winsoft71.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft71.com

  • 8.8.8.8:53
    app2.winsoft72.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft72.com

  • 8.8.8.8:53
    app2.winsoft73.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    192 B
     137 B
     3
    1

    DNS Request

    app2.winsoft73.com

    DNS Request

    app2.winsoft73.com

    DNS Request

    app2.winsoft73.com

  • 8.8.8.8:53
    app2.winsoft74.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    128 B
     137 B
     2
    1

    DNS Request

    app2.winsoft74.com

    DNS Request

    app2.winsoft74.com

  • 8.8.8.8:53
    app2.winsoft75.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft75.com

  • 8.8.8.8:53
    app2.winsoft76.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft76.com

  • 8.8.8.8:53
    app2.winsoft77.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft77.com

  • 8.8.8.8:53
    app2.winsoft78.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft78.com

  • 8.8.8.8:53
    app2.winsoft79.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft79.com

  • 8.8.8.8:53
    app2.winsoft80.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft80.com

  • 8.8.8.8:53
    app2.winsoft81.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft81.com

  • 8.8.8.8:53
    app2.winsoft82.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft82.com

  • 8.8.8.8:53
    app2.winsoft83.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft83.com

  • 8.8.8.8:53
    app2.winsoft84.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft84.com

  • 8.8.8.8:53
    app2.winsoft85.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft85.com

  • 8.8.8.8:53
    app2.winsoft86.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft86.com

  • 8.8.8.8:53
    app2.winsoft87.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft87.com

  • 8.8.8.8:53
    app2.winsoft88.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft88.com

  • 8.8.8.8:53
    app2.winsoft89.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft89.com

  • 8.8.8.8:53
    app2.winsoft90.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft90.com

  • 8.8.8.8:53
    app2.winsoft91.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft91.com

  • 8.8.8.8:53
    app2.winsoft92.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft92.com

  • 8.8.8.8:53
    app2.winsoft93.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft93.com

  • 8.8.8.8:53
    app2.winsoft94.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft94.com

  • 8.8.8.8:53
    app2.winsoft95.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft95.com

  • 8.8.8.8:53
    app2.winsoft96.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft96.com

  • 8.8.8.8:53
    app2.winsoft97.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    64 B
     137 B
     1
    1

    DNS Request

    app2.winsoft97.com

  • 8.8.8.8:53
    app2.winsoft98.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    256 B
     256 B
     4
    4

    DNS Request

    app2.winsoft98.com

    DNS Request

    app2.winsoft98.com

    DNS Request

    app2.winsoft98.com

    DNS Request

    app2.winsoft98.com

  • 8.8.8.8:53
    app2.winsoft99.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    128 B
     137 B
     2
    1

    DNS Request

    app2.winsoft99.com

    DNS Request

    app2.winsoft99.com

  • 8.8.8.8:53
    app2.winsoft100.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    65 B
     138 B
     1
    1

    DNS Request

    app2.winsoft100.com

  • 8.8.8.8:53
    app2.winsoft0.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    63 B
     136 B
     1
    1

    DNS Request

    app2.winsoft0.com

  • 8.8.8.8:53
    app2.winsoft1.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    63 B
     136 B
     1
    1

    DNS Request

    app2.winsoft1.com

  • 8.8.8.8:53
    app2.winsoft2.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    63 B
     136 B
     1
    1

    DNS Request

    app2.winsoft2.com

  • 8.8.8.8:53
    app2.winsoft3.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    63 B
     136 B
     1
    1

    DNS Request

    app2.winsoft3.com

  • 8.8.8.8:53
    p2.winsoft3.com
    dns
    5e9ac544c472baef4057017a306b5a92_JaffaCakes118.exe
    61 B
     134 B
     1
    1

    DNS Request

    p2.winsoft3.com

  • 8.8.8.8:53
    240.221.184.93.in-addr.arpa
    dns
    73 B
     144 B
     1
    1

    DNS Request

    240.221.184.93.in-addr.arpa

  • 8.8.8.8:53
    48.229.111.52.in-addr.arpa
    dns
    72 B
     158 B
     1
    1

    DNS Request

    48.229.111.52.in-addr.arpa

  • 8.8.8.8:53

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4996-0-0x0000000000400000-0x0000000000447000-memory.dmp

    Filesize

    284KB

    Download

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.