Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    13/09/2024, 05:48 UTC

General

  • Target

    ddcb0dfe88540e6970300ec0630ddf5b_JaffaCakes118.dll

  • Size

    5.0MB

  • MD5

    ddcb0dfe88540e6970300ec0630ddf5b

  • SHA1

    cfc57a371695de380053066c51c4257336ee8d72

  • SHA256

    f4e8357d77381a2d15d71d4309261236bfb78b53ab127162dad943cb897a0e4b

  • SHA512

    04d18398871d010e505a025abfb3d5af242c28e77bef0356ab2e6dcb3c3aa6fd1e8037159613c14cd6caecf8bba0f9277706ab507921a9543406a388047d6bf7

  • SSDEEP

    49152:tnAQqMSPbcBVthnvxJM0H9PAMEcaEau3R8yAH1plAHa:hDqPoBXhvxWa9P593R8yAVp2Ha

Malware Config

Signatures

  • Wannacry

    WannaCry is a ransomware cryptoworm.

  • Contacts a large (3139) amount of remote hosts 1 TTPs

    This may indicate a network scan to discover remotely running services.

  • Executes dropped EXE 2 IoCs
  • Creates a large amount of network flows 1 TTPs

    This may indicate a network scan to discover remotely running services.

  • Drops file in System32 directory 1 IoCs
  • Drops file in Windows directory 2 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies data under HKEY_USERS 24 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: MapViewOfSection 43 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Windows\system32\wininit.exe
    wininit.exe
    1⤵
      PID:380
      • C:\Windows\system32\services.exe
        C:\Windows\system32\services.exe
        2⤵
          PID:476
          • C:\Windows\system32\svchost.exe
            C:\Windows\system32\svchost.exe -k DcomLaunch
            3⤵
              PID:596
              • C:\Windows\system32\DllHost.exe
                C:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
                4⤵
                  PID:1448
              • C:\Windows\system32\svchost.exe
                C:\Windows\system32\svchost.exe -k RPCSS
                3⤵
                  PID:672
                • C:\Windows\System32\svchost.exe
                  C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
                  3⤵
                    PID:748
                  • C:\Windows\System32\svchost.exe
                    C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
                    3⤵
                      PID:812
                      • C:\Windows\system32\Dwm.exe
                        "C:\Windows\system32\Dwm.exe"
                        4⤵
                          PID:1164
                      • C:\Windows\system32\svchost.exe
                        C:\Windows\system32\svchost.exe -k netsvcs
                        3⤵
                          PID:852
                        • C:\Windows\system32\svchost.exe
                          C:\Windows\system32\svchost.exe -k LocalService
                          3⤵
                            PID:964
                          • C:\Windows\system32\svchost.exe
                            C:\Windows\system32\svchost.exe -k NetworkService
                            3⤵
                              PID:280
                            • C:\Windows\System32\spoolsv.exe
                              C:\Windows\System32\spoolsv.exe
                              3⤵
                                PID:340
                              • C:\Windows\system32\svchost.exe
                                C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
                                3⤵
                                  PID:1072
                                • C:\Windows\system32\taskhost.exe
                                  "taskhost.exe"
                                  3⤵
                                    PID:1108
                                  • C:\Windows\system32\svchost.exe
                                    C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
                                    3⤵
                                      PID:1580
                                    • C:\Windows\system32\sppsvc.exe
                                      C:\Windows\system32\sppsvc.exe
                                      3⤵
                                        PID:1756
                                      • C:\WINDOWS\mssecsvc.exe
                                        C:\WINDOWS\mssecsvc.exe -m security
                                        3⤵
                                        • Executes dropped EXE
                                        • Drops file in System32 directory
                                        • System Location Discovery: System Language Discovery
                                        • Modifies data under HKEY_USERS
                                        • Suspicious behavior: EnumeratesProcesses
                                        • Suspicious behavior: MapViewOfSection
                                        • Suspicious use of AdjustPrivilegeToken
                                        PID:2776
                                    • C:\Windows\system32\lsass.exe
                                      C:\Windows\system32\lsass.exe
                                      2⤵
                                        PID:484
                                      • C:\Windows\system32\lsm.exe
                                        C:\Windows\system32\lsm.exe
                                        2⤵
                                          PID:492
                                      • C:\Windows\system32\csrss.exe
                                        %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
                                        1⤵
                                          PID:388
                                        • C:\Windows\system32\winlogon.exe
                                          winlogon.exe
                                          1⤵
                                            PID:428
                                          • C:\Windows\Explorer.EXE
                                            C:\Windows\Explorer.EXE
                                            1⤵
                                              PID:1212
                                              • C:\Windows\system32\rundll32.exe
                                                rundll32.exe C:\Users\Admin\AppData\Local\Temp\ddcb0dfe88540e6970300ec0630ddf5b_JaffaCakes118.dll,#1
                                                2⤵
                                                • Suspicious use of WriteProcessMemory
                                                PID:2232
                                                • C:\Windows\SysWOW64\rundll32.exe
                                                  rundll32.exe C:\Users\Admin\AppData\Local\Temp\ddcb0dfe88540e6970300ec0630ddf5b_JaffaCakes118.dll,#1
                                                  3⤵
                                                  • Drops file in Windows directory
                                                  • System Location Discovery: System Language Discovery
                                                  • Suspicious use of WriteProcessMemory
                                                  PID:2228
                                                  • C:\WINDOWS\mssecsvc.exe
                                                    C:\WINDOWS\mssecsvc.exe
                                                    4⤵
                                                    • Executes dropped EXE
                                                    • Drops file in Windows directory
                                                    • System Location Discovery: System Language Discovery
                                                    • Suspicious behavior: EnumeratesProcesses
                                                    • Suspicious behavior: MapViewOfSection
                                                    • Suspicious use of AdjustPrivilegeToken
                                                    • Suspicious use of WriteProcessMemory
                                                    PID:2236

                                            Network

                                            • flag-us
                                              DNS
                                              www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com
                                              mssecsvc.exe
                                              Remote address:
                                              8.8.8.8:53
                                              Request
                                              www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com
                                              IN A
                                              Response
                                              www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com
                                              IN A
                                              104.16.167.228
                                              www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com
                                              IN A
                                              104.16.166.228
                                            • flag-us
                                              GET
                                              http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com/
                                              mssecsvc.exe
                                              Remote address:
                                              104.16.167.228:80
                                              Request
                                              GET / HTTP/1.1
                                              Host: www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com
                                              Cache-Control: no-cache
                                              Response
                                              HTTP/1.1 200 OK
                                              Date: Fri, 13 Sep 2024 05:48:42 GMT
                                              Content-Type: text/html
                                              Content-Length: 607
                                              Connection: close
                                              Server: cloudflare
                                              CF-RAY: 8c25d98f0ae7cd19-LHR
                                            • flag-us
                                              GET
                                              http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com/
                                              mssecsvc.exe
                                              Remote address:
                                              104.16.167.228:80
                                              Request
                                              GET / HTTP/1.1
                                              Host: www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com
                                              Cache-Control: no-cache
                                              Response
                                              HTTP/1.1 200 OK
                                              Date: Fri, 13 Sep 2024 05:48:43 GMT
                                              Content-Type: text/html
                                              Content-Length: 607
                                              Connection: close
                                              Server: cloudflare
                                              CF-RAY: 8c25d9919831cdbe-LHR
                                            • 104.16.167.228:80
                                              http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com/
                                              http
                                              mssecsvc.exe
                                              330 B
                                              990 B
                                              5
                                              5

                                              HTTP Request

                                              GET http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com/

                                              HTTP Response

                                              200
                                            • 104.16.167.228:80
                                              http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com/
                                              http
                                              mssecsvc.exe
                                              330 B
                                              990 B
                                              5
                                              5

                                              HTTP Request

                                              GET http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com/

                                              HTTP Response

                                              200
                                            • 35.230.163.99:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.0.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.1.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.2.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.3.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.8.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.6.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.7.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.10.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 15.239.173.170:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.9.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.5.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.4.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.12.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.11.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.13.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.14.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.15.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.16.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.17.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.18.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.19.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.20.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.21.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 104.47.122.224:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.22.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 44.135.201.20:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.23.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.24.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.28.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.25.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.32.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.30.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.29.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.26.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.31.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.27.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 191.40.202.140:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 214.225.194.132:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.33.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.34.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.35.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.36.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.37.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.38.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.39.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.40.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.41.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.42.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.43.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 71.44.63.10:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.44.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 89.217.120.242:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.47.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 13.105.180.74:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.45.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.48.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.46.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.54.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.51.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 214.207.169.20:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.49.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.50.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.57.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.52.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 114.128.113.242:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.59.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.53.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.55.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.56.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.58.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.60.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.61.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 159.63.207.25:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.62.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.63.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.64.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.65.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 103.189.111.178:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 17.178.50.163:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.67.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.68.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.66.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 216.193.171.227:445
                                              mssecsvc.exe
                                              104 B
                                              80 B
                                              2
                                              2
                                            • 10.127.70.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.72.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 198.227.86.227:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.75.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.71.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.74.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 93.122.18.254:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.77.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.69.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.73.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 145.237.123.87:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.76.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.81.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.78.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.79.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.80.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.82.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.83.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 164.131.89.51:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.84.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.85.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.86.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.87.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 20.116.26.46:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 219.8.233.226:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.88.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 181.171.197.249:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.89.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 3.107.101.191:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.91.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.92.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 64.232.14.162:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.94.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.90.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 185.241.104.106:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.98.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.93.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.95.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 74.49.240.248:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.97.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.96.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 121.188.24.162:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.99.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.100.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.101.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.102.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.103.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.104.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.105.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 5.214.199.71:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.106.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.107.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.108.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 162.199.253.168:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.109.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 9.70.185.38:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 155.216.170.105:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.110.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 86.130.94.126:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.111.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.112.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 140.188.21.93:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 214.214.159.77:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.116.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.114.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.120.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.119.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 98.191.39.217:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.117.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.113.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 2.76.71.199:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 108.71.147.172:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.115.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 170.26.75.76:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.118.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.121.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.122.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.123.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.124.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.125.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.126.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 36.39.107.204:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.127.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.128.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.129.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.130.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 218.65.213.138:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.131.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 29.23.104.25:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 113.183.144.196:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 19.72.14.24:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 63.182.47.80:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 115.11.224.79:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.134.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.135.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.132.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 157.218.43.167:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.138.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.133.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.137.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 202.160.105.120:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.140.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 79.134.191.180:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 42.37.1.168:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.139.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 143.77.117.97:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 119.103.97.192:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.146.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 66.172.7.27:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.136.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.141.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.142.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.143.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.144.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.145.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.147.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.148.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.149.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.150.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.151.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.152.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 192.146.95.232:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.153.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 53.231.227.27:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 130.67.35.54:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 68.62.251.3:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 134.151.27.248:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.155.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 198.189.7.208:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 171.111.40.152:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.158.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.154.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 3.137.252.97:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.160.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 129.219.179.95:445
                                              mssecsvc.exe
                                              52 B
                                              40 B
                                              1
                                              1
                                            • 10.127.156.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 187.186.107.17:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.157.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.162.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 106.6.139.38:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.159.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.165.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 114.100.57.142:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 53.86.28.15:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.161.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.163.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.164.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.169.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 173.252.43.34:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.166.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.167.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.168.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.170.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.171.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 45.85.149.146:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.172.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.173.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.174.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 171.134.117.192:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.175.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 166.186.112.157:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 187.152.30.244:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 54.44.194.124:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 165.29.5.148:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.176.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.177.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 69.244.192.29:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 190.122.183.87:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.178.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 118.154.123.206:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.185.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 64.77.74.122:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 9.3.129.7:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.180.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.186.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 191.234.196.230:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.179.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.183.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.184.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.181.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.182.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 144.196.63.157:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 110.181.17.131:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.191.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.192.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 180.221.10.11:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 53.9.103.252:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.189.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.187.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.188.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.190.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.193.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.194.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.195.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 64.155.116.26:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.196.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 112.60.190.105:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.197.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 94.248.111.112:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 161.240.212.0:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 11.172.115.248:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 108.143.244.108:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 104.22.149.35:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 190.200.205.45:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.201.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.200.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 181.190.254.51:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 16.221.127.63:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.198.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.204.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.203.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 85.84.88.35:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 153.239.246.20:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.206.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.199.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.202.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 50.183.172.157:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.205.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 24.95.99.78:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 103.34.89.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.208.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.207.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 76.52.184.145:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 72.129.151.36:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 86.22.65.193:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.209.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.210.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.211.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.212.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.213.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.214.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.215.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.216.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.217.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 167.146.46.117:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.218.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 188.149.183.224:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.219.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 95.126.123.149:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 22.165.45.104:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 101.241.28.190:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 184.253.187.30:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 81.144.56.203:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.221.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 73.91.121.212:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 76.52.81.254:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.224.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.220.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 48.173.214.95:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 35.252.119.221:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.222.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.223.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 88.168.16.201:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 132.158.72.59:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.226.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.228.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.230.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 92.244.4.107:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 115.212.93.9:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 82.228.138.54:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.227.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.225.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 111.154.66.195:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.229.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 27.8.248.69:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.231.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 11.80.113.95:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.235.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.236.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.233.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 4.65.98.131:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.232.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.234.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.237.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.238.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.239.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 187.5.127.27:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.240.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 33.86.235.219:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.241.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 103.24.69.120:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 3.176.110.212:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 98.127.46.142:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 103.167.132.97:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 2.159.67.38:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 53.107.189.177:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.242.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 55.213.42.63:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 2.13.110.118:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.243.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.247.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.246.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 133.61.134.173:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 172.156.24.176:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.248.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.250.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 90.27.83.153:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 22.137.235.189:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.252.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 217.148.172.198:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.244.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.245.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 34.77.248.57:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 102.2.215.64:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.249.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 218.132.244.171:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.251.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 143.152.238.125:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 145.234.55.26:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 202.71.139.208:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 222.166.187.226:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.255.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.253.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.254.1:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.0.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.1.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.2.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.3.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.4.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.5.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 22.193.186.232:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 160.71.150.187:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.6.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.7.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 215.72.240.254:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 67.16.104.49:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 143.104.69.172:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 103.2.6.189:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 109.192.155.8:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 75.171.132.57:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 80.24.188.145:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 183.190.10.154:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 193.202.67.119:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.12.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 155.63.227.251:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 44.236.124.36:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.8.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.11.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 4.35.254.50:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.18.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 133.23.199.244:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.16.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.9.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 117.204.8.155:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 101.152.55.99:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.15.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.10.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 173.107.148.246:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.17.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.13.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 164.70.72.237:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 19.176.64.235:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 166.121.203.122:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.14.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.19.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 173.79.78.183:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 220.182.5.66:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 34.104.118.8:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.20.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.21.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.22.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.23.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.24.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.25.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.26.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 52.197.173.33:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.27.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 131.171.157.246:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.28.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 20.213.72.169:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 183.230.214.250:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 34.85.141.230:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.29.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 99.0.244.207:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 181.222.32.137:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 93.19.96.240:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 120.93.71.159:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 85.131.234.105:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.33.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.32.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 7.186.109.68:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 182.175.109.178:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 120.204.96.167:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.30.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.34.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 74.62.135.186:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 153.191.45.29:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.31.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 129.119.53.185:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.35.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 158.152.147.85:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.39.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 203.202.113.4:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 110.214.17.39:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.36.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.37.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.41.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 199.58.176.104:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.38.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 195.22.47.223:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 1.111.118.139:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.44.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 182.225.64.114:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 217.222.223.200:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 169.188.233.220:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.40.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.42.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 19.202.100.143:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.43.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.45.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.46.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.47.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 10.127.48.2:445
                                              mssecsvc.exe
                                              52 B
                                              1
                                            • 8.8.8.8:53
                                              www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com
                                              dns
                                              mssecsvc.exe
                                              95 B
                                              127 B
                                              1
                                              1

                                              DNS Request

                                              www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com

                                              DNS Response

                                              104.16.167.228
                                              104.16.166.228

                                            MITRE ATT&CK Enterprise v15

                                            Replay Monitor

                                            Loading Replay Monitor...

                                            Downloads

                                            • C:\Windows\mssecsvc.exe

                                              Filesize

                                              3.6MB

                                              MD5

                                              a3a942b5aba5c168676f41cd729db6d9

                                              SHA1

                                              2c75155cd090b855354223a721664ca18500891f

                                              SHA256

                                              42bf79ebe6e637af104a5bad217838b9fcaf8bffaae3b6117417d21e33913dce

                                              SHA512

                                              adab67103cc873b1ea5f516280c0069f9c2fd0cb144ab2089e4ca8f91fec820293439874827d962ff46ba1980a701370fd205c1d682e007055cf7c0c97adeedf

                                            • memory/2228-6-0x0000000002180000-0x00000000027F3000-memory.dmp

                                              Filesize

                                              6.4MB

                                            • memory/2236-8-0x0000000077730000-0x0000000077731000-memory.dmp

                                              Filesize

                                              4KB

                                            • memory/2236-9-0x000000007772F000-0x0000000077730000-memory.dmp

                                              Filesize

                                              4KB

                                            • memory/2236-7-0x0000000000400000-0x0000000000A73000-memory.dmp

                                              Filesize

                                              6.4MB

                                            • memory/2236-15-0x000000007772F000-0x0000000077730000-memory.dmp

                                              Filesize

                                              4KB

                                            • memory/2236-14-0x000000007EF70000-0x000000007EF7C000-memory.dmp

                                              Filesize

                                              48KB

                                            • memory/2236-13-0x0000000077730000-0x0000000077731000-memory.dmp

                                              Filesize

                                              4KB

                                            • memory/2236-16-0x0000000000400000-0x0000000000A73000-memory.dmp

                                              Filesize

                                              6.4MB

                                            • memory/2776-11-0x0000000000400000-0x0000000000A73000-memory.dmp

                                              Filesize

                                              6.4MB

                                            • memory/2776-18-0x0000000000400000-0x0000000000A73000-memory.dmp

                                              Filesize

                                              6.4MB

                                            We care about your privacy.

                                            This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.