Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

e784d58fef...18.dll

windows7-x64

10

e784d58fef...18.dll

windows10-2004-x64

10

Analysis

  • max time kernel
    150s
  • max time network
    158s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17/09/2024, 19:11 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    e784d58fef062a471c059c9a07a2e29c_JaffaCakes118.dll

  • Size

    5.0MB

  • MD5

    e784d58fef062a471c059c9a07a2e29c

  • SHA1

    21b57ff4886df68dd401aea1bdce2b423021613c

  • SHA256

    7cd6d125eea23cbc42e1a242ad2c91db2e4e79a26266f00f3d7ef88720763ae5

  • SHA512

    a727d2156ea9c5237e60c91dcd0574e231617c8b4625b492b95cd582bf12a57f93a1f4a66ec75332c022804edf4e37774476c218ed93f6569a360d1f076151ee

  • SSDEEP

    98304:+DqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2:+DqPe1Cxcxk3ZAEUadzR8yc4

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Signatures

  • Wannacry

    WannaCry is a ransomware cryptoworm.

    ransomwarewormwannacry
  • Contacts a large (3218) amount of remote hosts 1 TTPs

    This may indicate a network scan to discover remotely running services.

    discovery
  • Executes dropped EXE 3 IoCs
  • Creates a large amount of network flows 1 TTPs

    This may indicate a network scan to discover remotely running services.

    discovery
  • Drops file in Windows directory 2 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies data under HKEY_USERS 5 IoCs
  • Suspicious use of WriteProcessMemory 6 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\e784d58fef062a471c059c9a07a2e29c_JaffaCakes118.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4648
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\e784d58fef062a471c059c9a07a2e29c_JaffaCakes118.dll,#1
      2⤵
      • Drops file in Windows directory
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:4120
      • C:\WINDOWS\mssecsvc.exe
        C:\WINDOWS\mssecsvc.exe
        3⤵
        • Executes dropped EXE
        • Drops file in Windows directory
        • System Location Discovery: System Language Discovery
        PID:4396
        • C:\WINDOWS\tasksche.exe
          C:\WINDOWS\tasksche.exe /i
          4⤵
          • Executes dropped EXE
          PID:4572
  • C:\WINDOWS\mssecsvc.exe
    C:\WINDOWS\mssecsvc.exe -m security
    1⤵
    • Executes dropped EXE
    • System Location Discovery: System Language Discovery
    • Modifies data under HKEY_USERS
    PID:4380

Network

  • flag-us
    DNS
    www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com
    mssecsvc.exe
    Remote address:
    8.8.8.8:53
    Request
    www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com
    IN A
    Response
    www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com
    IN A
    104.16.167.228
    www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com
    IN A
    104.16.166.228
  • flag-us
    GET
    http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com/
    mssecsvc.exe
    Remote address:
    104.16.167.228:80
    Request
    GET / HTTP/1.1
    Host: www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com
    Cache-Control: no-cache
    Response
    HTTP/1.1 200 OK
    Date: Tue, 17 Sep 2024 19:12:03 GMT
    Content-Type: text/html
    Content-Length: 607
    Connection: close
    Server: cloudflare
    CF-RAY: 8c4b67d7cfcd93f0-LHR
  • flag-us
    GET
    http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com/
    mssecsvc.exe
    Remote address:
    104.16.167.228:80
    Request
    GET / HTTP/1.1
    Host: www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com
    Cache-Control: no-cache
    Response
    HTTP/1.1 200 OK
    Date: Tue, 17 Sep 2024 19:12:04 GMT
    Content-Type: text/html
    Content-Length: 607
    Connection: close
    Server: cloudflare
    CF-RAY: 8c4b67d8dda806fd-LHR
  • flag-us
    DNS
    196.249.167.52.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    196.249.167.52.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    172.210.232.199.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    172.210.232.199.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    228.167.16.104.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    228.167.16.104.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    95.221.229.192.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    95.221.229.192.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    20.160.190.20.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    20.160.190.20.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    217.106.137.52.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    217.106.137.52.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    228.249.119.40.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    228.249.119.40.in-addr.arpa
    IN PTR
    Response
  • DNS
    103.169.127.40.in-addr.arpa
    Request
    103.169.127.40.in-addr.arpa
    IN PTR
    Response
  • DNS
    15.164.165.52.in-addr.arpa
    Request
    15.164.165.52.in-addr.arpa
    IN PTR
    Response
  • DNS
    59.170.16.2.in-addr.arpa
    Request
    59.170.16.2.in-addr.arpa
    IN PTR
    Response
    59.170.16.2.in-addr.arpa
    IN PTR
    a2-16-170-59deploystaticakamaitechnologiescom
  • DNS
    1.9.162.69.in-addr.arpa
    Request
    1.9.162.69.in-addr.arpa
    IN PTR
    Response
  • DNS
    52.9.162.69.in-addr.arpa
    Request
    52.9.162.69.in-addr.arpa
    IN PTR
    Response
  • DNS
    172.214.232.199.in-addr.arpa
    Request
    172.214.232.199.in-addr.arpa
    IN PTR
    Response
  • DNS
    2.9.162.69.in-addr.arpa
    Request
    2.9.162.69.in-addr.arpa
    IN PTR
    Response
  • DNS
    240.143.123.92.in-addr.arpa
    Request
    240.143.123.92.in-addr.arpa
    IN PTR
    Response
    240.143.123.92.in-addr.arpa
    IN PTR
    a92-123-143-240deploystaticakamaitechnologiescom
  • DNS
    23.236.111.52.in-addr.arpa
    Request
    23.236.111.52.in-addr.arpa
    IN PTR
    Response
  • DNS
    3.175.6.200.in-addr.arpa
    Request
    3.175.6.200.in-addr.arpa
    IN PTR
    Response
    3.175.6.200.in-addr.arpa
    IN PTR
    ic-corporativo-200-6-175-3 intercablenetco
  • DNS
    173.115.113.176.in-addr.arpa
    Request
    173.115.113.176.in-addr.arpa
    IN PTR
    Response
  • DNS
    3.9.162.69.in-addr.arpa
    Request
    3.9.162.69.in-addr.arpa
    IN PTR
    Response
  • DNS
    1.77.56.192.in-addr.arpa
    Request
    1.77.56.192.in-addr.arpa
    IN PTR
    Response
  • DNS
    170.77.56.192.in-addr.arpa
    Request
    170.77.56.192.in-addr.arpa
    IN PTR
    Response
  • DNS
    170.77.56.192.in-addr.arpa
    Request
    170.77.56.192.in-addr.arpa
    IN PTR
    Response
  • DNS
    1.62.65.172.in-addr.arpa
    Request
    1.62.65.172.in-addr.arpa
    IN PTR
    Response
  • DNS
    65.62.65.172.in-addr.arpa
    Request
    65.62.65.172.in-addr.arpa
    IN PTR
    Response
  • DNS
    10.115.113.176.in-addr.arpa
    Request
    10.115.113.176.in-addr.arpa
    IN PTR
    Response
  • DNS
    2.62.65.172.in-addr.arpa
    Request
    2.62.65.172.in-addr.arpa
    IN PTR
    Response
  • DNS
    11.115.113.176.in-addr.arpa
    Request
    11.115.113.176.in-addr.arpa
    IN PTR
    Response
  • DNS
    3.62.65.172.in-addr.arpa
    Request
    3.62.65.172.in-addr.arpa
    IN PTR
    Response
  • DNS
    12.115.113.176.in-addr.arpa
    Request
    12.115.113.176.in-addr.arpa
    IN PTR
    Response
  • DNS
    4.62.65.172.in-addr.arpa
    Request
    4.62.65.172.in-addr.arpa
    IN PTR
    Response
  • DNS
    5.62.65.172.in-addr.arpa
    Request
    5.62.65.172.in-addr.arpa
    IN PTR
    Response
  • DNS
    6.62.65.172.in-addr.arpa
    Request
    6.62.65.172.in-addr.arpa
    IN PTR
    Response
  • DNS
    154.139.225.67.in-addr.arpa
    Request
    154.139.225.67.in-addr.arpa
    IN PTR
    Response
    154.139.225.67.in-addr.arpa
    IN PTR
    host1wpcu0-lwsitescom
  • DNS
    7.62.65.172.in-addr.arpa
    Request
    7.62.65.172.in-addr.arpa
    IN PTR
    Response
  • DNS
    7.62.65.172.in-addr.arpa
    Request
    7.62.65.172.in-addr.arpa
    IN PTR
    Response
  • DNS
    8.62.65.172.in-addr.arpa
    Request
    8.62.65.172.in-addr.arpa
    IN PTR
    Response
  • DNS
    8.62.65.172.in-addr.arpa
    Request
    8.62.65.172.in-addr.arpa
    IN PTR
    Response
  • DNS
    4.9.162.69.in-addr.arpa
    Request
    4.9.162.69.in-addr.arpa
    IN PTR
    Response
  • DNS
    9.62.65.172.in-addr.arpa
    Request
    9.62.65.172.in-addr.arpa
    IN PTR
    Response
  • DNS
    9.62.65.172.in-addr.arpa
    Request
    9.62.65.172.in-addr.arpa
    IN PTR
    Response
  • DNS
    10.62.65.172.in-addr.arpa
    Request
    10.62.65.172.in-addr.arpa
    IN PTR
    Response
  • DNS
    10.62.65.172.in-addr.arpa
    Request
    10.62.65.172.in-addr.arpa
    IN PTR
    Response
  • 104.16.167.228:80
    http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com/
    http
    mssecsvc.exe
    376 B
     990 B
     6
    5

    HTTP Request

    GET http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com/

    HTTP Response

    200
  • 104.16.167.228:80
    http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com/
    http
    mssecsvc.exe
    376 B
     990 B
     6
    5

    HTTP Request

    GET http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com/

    HTTP Response

    200
  • 118.84.16.50:445
    mssecsvc.exe
    52 B
     1
  • 10.127.0.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.1.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.2.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.3.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.4.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.5.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.6.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.7.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.8.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.9.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.10.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.11.1:445
    mssecsvc.exe
    52 B
     1
  • 61.91.161.196:445
    mssecsvc.exe
    104 B
     2
  • 10.127.12.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.17.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.16.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.15.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.13.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.14.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.19.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.18.1:445
    mssecsvc.exe
    52 B
     1
  • 218.173.52.185:445
    mssecsvc.exe
    104 B
     2
  • 10.127.22.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.20.1:445
    mssecsvc.exe
    104 B
     2
  • 160.63.75.42:445
    mssecsvc.exe
    104 B
     2
  • 10.127.21.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.23.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.24.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.25.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.26.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.27.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.28.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.29.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.30.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.32.1:445
    mssecsvc.exe
    104 B
     2
  • 113.60.252.19:445
    mssecsvc.exe
    104 B
     2
  • 10.127.31.1:445
    mssecsvc.exe
    104 B
     2
  • 167.37.80.72:445
    mssecsvc.exe
    104 B
     2
  • 10.127.37.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.34.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.39.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.35.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.38.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.33.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.36.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.43.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.41.1:445
    mssecsvc.exe
    104 B
     2
  • 199.231.145.179:445
    mssecsvc.exe
    104 B
     2
  • 57.163.6.254:445
    mssecsvc.exe
    104 B
     2
  • 10.127.45.1:445
    mssecsvc.exe
    52 B
     1
  • 112.232.154.152:445
    mssecsvc.exe
    52 B
     1
  • 10.127.40.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.42.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.44.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.46.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.47.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.48.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.49.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.52.1:445
    mssecsvc.exe
    104 B
     2
  • 134.165.170.225:445
    mssecsvc.exe
    104 B
     2
  • 10.127.51.1:445
    mssecsvc.exe
    52 B
     1
  • 28.138.66.22:445
    mssecsvc.exe
    104 B
     2
  • 10.127.50.1:445
    mssecsvc.exe
    104 B
     2
  • 157.135.245.192:445
    mssecsvc.exe
    52 B
     1
  • 10.127.56.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.53.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.55.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.54.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.57.1:445
    mssecsvc.exe
    104 B
     2
  • 170.173.99.78:445
    mssecsvc.exe
    104 B
     2
  • 10.127.58.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.64.1:445
    mssecsvc.exe
    52 B
     1
  • 75.115.166.200:445
    mssecsvc.exe
    52 B
     1
  • 10.127.59.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.60.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.62.1:445
    mssecsvc.exe
    52 B
     1
  • 141.21.206.90:445
    mssecsvc.exe
    104 B
     80 B
     2
    2
  • 10.127.61.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.63.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.65.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.66.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.67.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.68.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.69.1:445
    mssecsvc.exe
    104 B
     2
  • 82.162.149.159:445
    mssecsvc.exe
    104 B
     2
  • 10.127.72.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.73.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.70.1:445
    mssecsvc.exe
    52 B
     1
  • 128.89.21.156:445
    mssecsvc.exe
    52 B
     1
  • 10.127.75.1:445
    mssecsvc.exe
    104 B
     2
  • 166.88.119.221:445
    mssecsvc.exe
    104 B
     2
  • 10.127.71.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.74.1:445
    mssecsvc.exe
    104 B
     2
  • 11.1.6.66:445
    mssecsvc.exe
    104 B
     2
  • 10.127.76.1:445
    mssecsvc.exe
    104 B
     2
  • 131.27.137.58:445
    mssecsvc.exe
    104 B
     2
  • 10.127.78.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.81.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.77.1:445
    mssecsvc.exe
    104 B
     2
  • 77.32.244.198:445
    mssecsvc.exe
    104 B
     2
  • 10.127.82.1:445
    mssecsvc.exe
    104 B
     2
  • 69.212.67.88:445
    mssecsvc.exe
    104 B
     2
  • 10.127.79.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.80.1:445
    mssecsvc.exe
    104 B
     2
  • 111.23.105.121:445
    mssecsvc.exe
    104 B
     2
  • 10.127.86.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.83.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.84.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.85.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.87.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.88.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.89.1:445
    mssecsvc.exe
    104 B
     2
  • 180.93.215.43:445
    mssecsvc.exe
    104 B
     2
  • 89.114.160.192:445
    mssecsvc.exe
    104 B
     2
  • 178.76.106.235:445
    mssecsvc.exe
    104 B
     2
  • 10.127.90.1:445
    mssecsvc.exe
    52 B
     1
  • 20.215.74.161:445
    mssecsvc.exe
    52 B
     1
  • 10.127.93.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.91.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.92.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.96.1:445
    mssecsvc.exe
    104 B
     2
  • 8.183.230.252:445
    mssecsvc.exe
    52 B
     1
  • 10.127.97.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.95.1:445
    mssecsvc.exe
    104 B
     2
  • 200.178.131.12:445
    mssecsvc.exe
    52 B
     1
  • 10.127.94.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.101.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.98.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.99.1:445
    mssecsvc.exe
    52 B
     1
  • 138.95.49.208:445
    mssecsvc.exe
    104 B
     2
  • 104.72.29.155:445
    mssecsvc.exe
    52 B
     1
  • 140.238.239.71:445
    mssecsvc.exe
    104 B
     2
  • 10.127.102.1:445
    mssecsvc.exe
    104 B
     2
  • 89.190.42.160:445
    mssecsvc.exe
    104 B
     2
  • 10.127.103.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.100.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.104.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.105.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.106.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.107.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.108.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.109.1:445
    mssecsvc.exe
    104 B
     2
  • 46.24.141.241:445
    mssecsvc.exe
    104 B
     80 B
     2
    2
  • 10.127.110.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.111.1:445
    mssecsvc.exe
    104 B
     2
  • 58.96.94.161:445
    mssecsvc.exe
    104 B
     2
  • 10.127.112.1:445
    mssecsvc.exe
    104 B
     2
  • 100.190.209.189:445
    mssecsvc.exe
    104 B
     2
  • 96.116.63.80:445
    mssecsvc.exe
    104 B
     2
  • 10.127.113.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.114.1:445
    mssecsvc.exe
    104 B
     2
  • 142.224.35.66:445
    mssecsvc.exe
    104 B
     2
  • 10.127.115.1:445
    mssecsvc.exe
    52 B
     1
  • 131.179.3.91:445
    mssecsvc.exe
    104 B
     2
  • 10.127.116.1:445
    mssecsvc.exe
    104 B
     2
  • 88.163.144.149:445
    mssecsvc.exe
    104 B
     2
  • 10.127.118.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.121.1:445
    mssecsvc.exe
    104 B
     2
  • 209.148.240.146:445
    mssecsvc.exe
    104 B
     2
  • 10.127.119.1:445
    mssecsvc.exe
    104 B
     2
  • 29.213.203.28:445
    mssecsvc.exe
    52 B
     1
  • 10.127.123.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.117.1:445
    mssecsvc.exe
    104 B
     2
  • 56.208.28.57:445
    mssecsvc.exe
    104 B
     2
  • 93.153.243.241:445
    mssecsvc.exe
    52 B
     1
  • 10.127.120.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.125.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.124.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.122.1:445
    mssecsvc.exe
    104 B
     2
  • 39.113.242.176:445
    mssecsvc.exe
    104 B
     2
  • 10.127.126.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.127.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.128.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.129.1:445
    mssecsvc.exe
    52 B
     1
  • 84.45.119.25:445
    mssecsvc.exe
    52 B
     1
  • 10.127.130.1:445
    mssecsvc.exe
    52 B
     1
  • 218.236.238.207:445
    mssecsvc.exe
    52 B
     1
  • 92.101.64.21:445
    mssecsvc.exe
    52 B
     1
  • 65.31.32.133:445
    mssecsvc.exe
    104 B
     2
  • 10.127.131.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.132.1:445
    mssecsvc.exe
    104 B
     2
  • 183.131.187.134:445
    mssecsvc.exe
    52 B
     1
  • 35.227.85.143:445
    mssecsvc.exe
    104 B
     2
  • 10.127.136.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.138.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.135.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.134.1:445
    mssecsvc.exe
    104 B
     2
  • 64.60.173.49:445
    mssecsvc.exe
    104 B
     2
  • 10.127.133.1:445
    mssecsvc.exe
    104 B
     2
  • 102.24.206.207:445
    mssecsvc.exe
    52 B
     1
  • 10.127.140.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.141.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.142.1:445
    mssecsvc.exe
    52 B
     1
  • 98.196.147.127:445
    mssecsvc.exe
    104 B
     2
  • 42.120.104.206:445
    mssecsvc.exe
    52 B
     1
  • 10.127.137.1:445
    mssecsvc.exe
    104 B
     2
  • 123.163.114.208:445
    mssecsvc.exe
    52 B
     1
  • 10.127.139.1:445
    mssecsvc.exe
    104 B
     2
  • 64.190.236.4:445
    mssecsvc.exe
    52 B
     1
  • 10.127.144.1:445
    mssecsvc.exe
    52 B
     1
  • 55.201.244.213:445
    mssecsvc.exe
    52 B
     1
  • 133.15.90.169:445
    mssecsvc.exe
    52 B
     1
  • 10.127.143.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.145.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.146.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.147.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.148.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.149.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.150.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.151.1:445
    mssecsvc.exe
    104 B
     2
  • 59.61.140.254:445
    mssecsvc.exe
    104 B
     2
  • 14.165.105.63:445
    mssecsvc.exe
    104 B
     2
  • 10.127.152.1:445
    mssecsvc.exe
    52 B
     1
  • 106.99.144.102:445
    mssecsvc.exe
    104 B
     2
  • 151.132.135.147:445
    mssecsvc.exe
    104 B
     2
  • 10.127.154.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.153.1:445
    mssecsvc.exe
    104 B
     2
  • 46.197.194.86:445
    mssecsvc.exe
    104 B
     2
  • 125.180.44.92:445
    mssecsvc.exe
    104 B
     2
  • 10.127.155.1:445
    mssecsvc.exe
    104 B
     2
  • 172.163.44.47:445
    mssecsvc.exe
    104 B
     2
  • 4.211.87.170:445
    mssecsvc.exe
    104 B
     2
  • 10.127.156.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.158.1:445
    mssecsvc.exe
    104 B
     2
  • 206.114.21.154:445
    mssecsvc.exe
    52 B
     1
  • 10.127.157.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.161.1:445
    mssecsvc.exe
    104 B
     2
  • 51.59.206.54:445
    mssecsvc.exe
    104 B
     2
  • 10.127.163.1:445
    mssecsvc.exe
    52 B
     1
  • 82.165.214.59:445
    mssecsvc.exe
    52 B
     1
  • 10.127.159.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.165.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.160.1:445
    mssecsvc.exe
    104 B
     2
  • 188.27.49.128:445
    mssecsvc.exe
    52 B
     1
  • 38.64.26.240:445
    mssecsvc.exe
    52 B
     1
  • 10.127.162.1:445
    mssecsvc.exe
    104 B
     2
  • 110.128.41.19:445
    mssecsvc.exe
    104 B
     2
  • 206.32.108.145:445
    mssecsvc.exe
    104 B
     2
  • 10.127.166.1:445
    mssecsvc.exe
    52 B
     1
  • 169.138.200.28:445
    mssecsvc.exe
    104 B
     2
  • 55.229.125.215:445
    mssecsvc.exe
    104 B
     2
  • 10.127.164.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.167.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.168.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.169.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.170.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.171.1:445
    mssecsvc.exe
    104 B
     2
  • 60.160.191.26:445
    mssecsvc.exe
    52 B
     1
  • 10.127.173.1:445
    mssecsvc.exe
    52 B
     1
  • 16.250.223.182:445
    mssecsvc.exe
    104 B
     2
  • 218.46.98.188:445
    mssecsvc.exe
    104 B
     2
  • 10.127.172.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.174.1:445
    mssecsvc.exe
    104 B
     2
  • 93.199.171.6:445
    mssecsvc.exe
    104 B
     2
  • 206.115.48.108:445
    mssecsvc.exe
    104 B
     2
  • 10.127.175.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.177.1:445
    mssecsvc.exe
    104 B
     2
  • 99.25.208.111:445
    mssecsvc.exe
    104 B
     2
  • 110.150.71.202:445
    mssecsvc.exe
    104 B
     2
  • 10.127.179.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.176.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.178.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.180.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.181.1:445
    mssecsvc.exe
    104 B
     2
  • 53.179.45.69:445
    mssecsvc.exe
    104 B
     2
  • 15.120.87.196:445
    mssecsvc.exe
    104 B
     2
  • 10.127.182.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.183.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.184.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.185.1:445
    mssecsvc.exe
    104 B
     2
  • 72.77.164.47:445
    mssecsvc.exe
    104 B
     2
  • 56.77.72.142:445
    mssecsvc.exe
    52 B
     1
  • 10.127.186.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.187.1:445
    mssecsvc.exe
    104 B
     2
  • 93.51.151.170:445
    mssecsvc.exe
    104 B
     2
  • 20.177.129.113:445
    mssecsvc.exe
    104 B
     2
  • 10.127.188.1:445
    mssecsvc.exe
    104 B
     2
  • 146.229.27.152:445
    mssecsvc.exe
    104 B
     2
  • 124.111.168.40:445
    mssecsvc.exe
    104 B
     2
  • 10.127.189.1:445
    mssecsvc.exe
    104 B
     2
  • 193.222.136.173:445
    mssecsvc.exe
    104 B
     2
  • 183.16.94.97:445
    mssecsvc.exe
    104 B
     2
  • 218.132.153.73:445
    mssecsvc.exe
    104 B
     2
  • 187.123.120.221:445
    mssecsvc.exe
    104 B
     2
  • 10.127.190.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.191.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.193.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.192.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.195.1:445
    mssecsvc.exe
    104 B
     2
  • 223.115.64.112:445
    mssecsvc.exe
    104 B
     2
  • 116.160.167.219:445
    mssecsvc.exe
    104 B
     2
  • 10.127.197.1:445
    mssecsvc.exe
    104 B
     2
  • 165.53.186.119:445
    mssecsvc.exe
    104 B
     2
  • 53.153.249.54:445
    mssecsvc.exe
    104 B
     2
  • 10.127.196.1:445
    mssecsvc.exe
    104 B
     2
  • 141.152.178.42:445
    mssecsvc.exe
    104 B
     2
  • 76.117.105.21:445
    mssecsvc.exe
    104 B
     2
  • 10.127.194.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.198.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.199.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.200.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.201.1:445
    mssecsvc.exe
    104 B
     2
  • 195.181.40.96:445
    mssecsvc.exe
    104 B
     2
  • 10.127.202.1:445
    mssecsvc.exe
    52 B
     1
  • 213.242.147.4:445
    mssecsvc.exe
    104 B
     2
  • 10.127.203.1:445
    mssecsvc.exe
    52 B
     1
  • 196.198.41.45:445
    mssecsvc.exe
    52 B
     1
  • 132.127.31.110:445
    mssecsvc.exe
    52 B
     1
  • 10.127.204.1:445
    mssecsvc.exe
    104 B
     2
  • 173.118.47.31:445
    mssecsvc.exe
    104 B
     2
  • 10.127.205.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.206.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.207.1:445
    mssecsvc.exe
    104 B
     2
  • 157.52.161.36:445
    mssecsvc.exe
    52 B
     1
  • 117.71.19.251:445
    mssecsvc.exe
    52 B
     1
  • 10.127.208.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.209.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.210.1:445
    mssecsvc.exe
    52 B
     1
  • 134.15.236.92:445
    mssecsvc.exe
    104 B
     2
  • 2.7.173.211:445
    mssecsvc.exe
    52 B
     1
  • 10.127.211.1:445
    mssecsvc.exe
    104 B
     2
  • 108.115.223.229:445
    mssecsvc.exe
    52 B
     1
  • 77.197.15.46:445
    mssecsvc.exe
    52 B
     1
  • 62.211.134.123:445
    mssecsvc.exe
    52 B
     1
  • 176.172.75.61:445
    mssecsvc.exe
    104 B
     2
  • 10.127.213.1:445
    mssecsvc.exe
    104 B
     2
  • 63.113.167.185:445
    mssecsvc.exe
    104 B
     2
  • 75.252.152.203:445
    mssecsvc.exe
    104 B
     2
  • 10.127.216.1:445
    mssecsvc.exe
    52 B
     1
  • 155.224.110.72:445
    mssecsvc.exe
    52 B
     1
  • 66.12.0.131:445
    mssecsvc.exe
    52 B
     1
  • 84.87.208.80:445
    mssecsvc.exe
    52 B
     1
  • 10.127.212.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.214.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.220.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.218.1:445
    mssecsvc.exe
    52 B
     1
  • 130.96.167.36:445
    mssecsvc.exe
    52 B
     1
  • 121.32.247.150:445
    mssecsvc.exe
    104 B
     2
  • 10.127.217.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.215.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.219.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.221.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.222.1:445
    mssecsvc.exe
    104 B
     2
  • 112.121.88.74:445
    mssecsvc.exe
    104 B
     2
  • 10.13.252.187:445
    mssecsvc.exe
    104 B
     2
  • 10.127.223.1:445
    mssecsvc.exe
    104 B
     2
  • 209.89.19.53:445
    mssecsvc.exe
    104 B
     2
  • 10.127.224.1:445
    mssecsvc.exe
    52 B
     1
  • 58.214.79.117:445
    mssecsvc.exe
    104 B
     2
  • 26.80.211.79:445
    mssecsvc.exe
    104 B
     2
  • 10.127.225.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.226.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.227.1:445
    mssecsvc.exe
    52 B
     1
  • 133.164.26.165:445
    mssecsvc.exe
    104 B
     2
  • 97.85.66.210:445
    mssecsvc.exe
    52 B
     1
  • 181.243.179.224:445
    mssecsvc.exe
    52 B
     1
  • 10.127.228.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.229.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.230.1:445
    mssecsvc.exe
    52 B
     1
  • 92.170.230.150:445
    mssecsvc.exe
    104 B
     2
  • 199.51.75.14:445
    mssecsvc.exe
    104 B
     2
  • 10.127.231.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.232.1:445
    mssecsvc.exe
    52 B
     1
  • 182.109.162.12:445
    mssecsvc.exe
    52 B
     1
  • 160.211.168.235:445
    mssecsvc.exe
    52 B
     1
  • 66.74.213.89:445
    mssecsvc.exe
    52 B
     1
  • 203.0.152.137:445
    mssecsvc.exe
    52 B
     1
  • 121.248.37.46:445
    mssecsvc.exe
    52 B
     1
  • 75.138.213.134:445
    mssecsvc.exe
    104 B
     2
  • 118.164.200.175:445
    mssecsvc.exe
    52 B
     1
  • 204.60.232.58:445
    mssecsvc.exe
    104 B
     2
  • 149.208.102.224:445
    mssecsvc.exe
    104 B
     2
  • 116.72.230.8:445
    mssecsvc.exe
    104 B
     2
  • 10.127.238.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.233.1:445
    mssecsvc.exe
    104 B
     2
  • 41.245.136.5:445
    mssecsvc.exe
    52 B
     1
  • 10.127.240.1:445
    mssecsvc.exe
    52 B
     1
  • 176.152.97.141:445
    mssecsvc.exe
    52 B
     1
  • 10.127.241.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.235.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.234.1:445
    mssecsvc.exe
    52 B
     1
  • 179.163.92.133:445
    mssecsvc.exe
    104 B
     2
  • 10.127.236.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.237.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.239.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.242.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.243.1:445
    mssecsvc.exe
    104 B
     2
  • 94.81.156.221:445
    mssecsvc.exe
    104 B
     2
  • 10.127.244.1:445
    mssecsvc.exe
    104 B
     2
  • 57.187.155.68:445
    mssecsvc.exe
    52 B
     1
  • 16.31.213.247:445
    mssecsvc.exe
    104 B
     2
  • 160.220.128.102:445
    mssecsvc.exe
    104 B
     2
  • 10.127.245.1:445
    mssecsvc.exe
    52 B
     1
  • 109.196.168.182:445
    mssecsvc.exe
    104 B
     80 B
     2
    2
  • 10.127.246.1:445
    mssecsvc.exe
    52 B
     1
  • 185.222.109.46:445
    mssecsvc.exe
    104 B
     2
  • 177.36.126.175:445
    mssecsvc.exe
    104 B
     2
  • 10.127.247.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.248.1:445
    mssecsvc.exe
    104 B
     2
  • 111.24.183.92:445
    mssecsvc.exe
    52 B
     1
  • 169.152.155.52:445
    mssecsvc.exe
    52 B
     1
  • 170.135.220.61:445
    mssecsvc.exe
    52 B
     1
  • 10.127.249.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.250.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.251.1:445
    mssecsvc.exe
    52 B
     1
  • 179.200.33.93:445
    mssecsvc.exe
    104 B
     2
  • 83.189.224.198:445
    mssecsvc.exe
    104 B
     2
  • 196.15.93.139:445
    mssecsvc.exe
    104 B
     2
  • 79.238.61.218:445
    mssecsvc.exe
    52 B
     1
  • 10.127.255.1:445
    mssecsvc.exe
    104 B
     2
  • 102.51.233.113:445
    mssecsvc.exe
    104 B
     2
  • 145.93.117.87:445
    mssecsvc.exe
    52 B
     1
  • 27.13.24.81:445
    mssecsvc.exe
    104 B
     2
  • 10.127.253.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.252.1:445
    mssecsvc.exe
    52 B
     1
  • 84.10.251.9:445
    mssecsvc.exe
    104 B
     2
  • 205.81.189.31:445
    mssecsvc.exe
    52 B
     1
  • 70.226.188.58:445
    mssecsvc.exe
    52 B
     1
  • 10.127.254.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.2.2:445
    mssecsvc.exe
    104 B
     2
  • 10.127.1.2:445
    mssecsvc.exe
    104 B
     2
  • 170.241.85.177:445
    mssecsvc.exe
    104 B
     2
  • 75.242.234.95:445
    mssecsvc.exe
    104 B
     2
  • 149.45.241.136:445
    mssecsvc.exe
    104 B
     2
  • 10.127.5.2:445
    mssecsvc.exe
    104 B
     2
  • 56.99.23.145:445
    mssecsvc.exe
    104 B
     2
  • 149.138.211.153:445
    mssecsvc.exe
    104 B
     2
  • 10.127.0.2:445
    mssecsvc.exe
    52 B
     1
  • 10.127.3.2:445
    mssecsvc.exe
    52 B
     1
  • 10.127.4.2:445
    mssecsvc.exe
    104 B
     2
  • 10.127.6.2:445
    mssecsvc.exe
    52 B
     1
  • 10.127.7.2:445
    mssecsvc.exe
    52 B
     1
  • 10.127.8.2:445
    mssecsvc.exe
    52 B
     1
  • 10.127.9.2:445
    mssecsvc.exe
    104 B
     2
  • 10.127.10.2:445
    mssecsvc.exe
    104 B
     2
  • 10.23.11.212:445
    mssecsvc.exe
    104 B
     2
  • 63.96.177.105:445
    mssecsvc.exe
    104 B
     2
  • 93.94.139.104:445
    mssecsvc.exe
    52 B
     1
  • 10.127.11.2:445
    mssecsvc.exe
    104 B
     2
  • 58.1.189.106:445
    mssecsvc.exe
    104 B
     2
  • 213.104.219.56:445
    mssecsvc.exe
    104 B
     80 B
     2
    2
  • 137.158.96.80:445
    mssecsvc.exe
    104 B
     2
  • 10.127.12.2:445
    mssecsvc.exe
    104 B
     2
  • 34.34.94.90:445
    mssecsvc.exe
    104 B
     2
  • 10.127.13.2:445
    mssecsvc.exe
    104 B
     2
  • 120.85.86.22:445
    mssecsvc.exe
    104 B
     2
  • 221.97.98.48:445
    mssecsvc.exe
    104 B
     2
  • 10.127.14.2:445
    mssecsvc.exe
    104 B
     2
  • 10.127.15.2:445
    mssecsvc.exe
    104 B
     2
  • 129.176.22.143:445
    mssecsvc.exe
    52 B
     1
  • 10.127.16.2:445
    mssecsvc.exe
    104 B
     2
  • 170.83.10.46:445
    mssecsvc.exe
    104 B
     2
  • 95.151.39.210:445
    mssecsvc.exe
    52 B
     1
  • 165.12.247.136:445
    mssecsvc.exe
    104 B
     2
  • 152.239.217.192:445
    mssecsvc.exe
    104 B
     2
  • 159.160.237.58:445
    mssecsvc.exe
    52 B
     1
  • 217.52.0.41:445
    mssecsvc.exe
    104 B
     80 B
     2
    2
  • 10.127.18.2:445
    mssecsvc.exe
    52 B
     1
  • 153.254.194.105:445
    mssecsvc.exe
    104 B
     2
  • 10.127.22.2:445
    mssecsvc.exe
    104 B
     2
  • 10.127.19.2:445
    mssecsvc.exe
    104 B
     2
  • 10.127.21.2:445
    mssecsvc.exe
    104 B
     2
  • 172.23.150.9:445
    mssecsvc.exe
    104 B
     2
  • 96.118.85.0:445
    mssecsvc.exe
    104 B
     2
  • 10.127.17.2:445
    mssecsvc.exe
    104 B
     2
  • 96.209.159.201:445
    mssecsvc.exe
    104 B
     2
  • 134.85.198.33:445
    mssecsvc.exe
    104 B
     2
  • 137.80.155.197:445
    mssecsvc.exe
    104 B
     2
  • 184.160.82.132:445
    mssecsvc.exe
    104 B
     2
  • 10.127.20.2:445
    mssecsvc.exe
    104 B
     2
  • 118.162.46.83:445
    mssecsvc.exe
    104 B
     2
  • 198.41.217.66:445
    mssecsvc.exe
    104 B
     2
  • 31.129.21.182:445
    mssecsvc.exe
    104 B
     80 B
     2
    2
  • 10.127.23.2:445
    mssecsvc.exe
    52 B
     1
  • 10.127.24.2:445
    mssecsvc.exe
    52 B
     1
  • 10.127.25.2:445
    mssecsvc.exe
    104 B
     2
  • 10.127.26.2:445
    mssecsvc.exe
    104 B
     2
  • 10.127.27.2:445
    mssecsvc.exe
    52 B
     1
  • 10.127.28.2:445
    mssecsvc.exe
    104 B
     2
  • 10.127.29.2:445
    mssecsvc.exe
    52 B
     1
  • 10.127.30.2:445
    mssecsvc.exe
    104 B
     2
  • 111.219.123.147:445
    mssecsvc.exe
    52 B
     1
  • 94.136.70.191:445
    mssecsvc.exe
    52 B
     1
  • 10.127.31.2:445
    mssecsvc.exe
    104 B
     2
  • 169.83.128.71:445
    mssecsvc.exe
    104 B
     2
  • 10.127.32.2:445
    mssecsvc.exe
    52 B
     1
  • 210.32.112.161:445
    mssecsvc.exe
    104 B
     2
  • 38.99.70.22:445
    mssecsvc.exe
    52 B
     1
  • 10.127.33.2:445
    mssecsvc.exe
    52 B
     1
  • 8.8.8.8:53
    www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com
    dns
    mssecsvc.exe
    95 B
     127 B
     1
    1

    DNS Request

    www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com

    DNS Response

    104.16.167.228
    104.16.166.228

  • 8.8.8.8:53
    196.249.167.52.in-addr.arpa
    dns
    73 B
     147 B
     1
    1

    DNS Request

    196.249.167.52.in-addr.arpa

  • 8.8.8.8:53
    172.210.232.199.in-addr.arpa
    dns
    74 B
     128 B
     1
    1

    DNS Request

    172.210.232.199.in-addr.arpa

  • 8.8.8.8:53
    228.167.16.104.in-addr.arpa
    dns
    73 B
     135 B
     1
    1

    DNS Request

    228.167.16.104.in-addr.arpa

  • 8.8.8.8:53
    95.221.229.192.in-addr.arpa
    dns
    73 B
     144 B
     1
    1

    DNS Request

    95.221.229.192.in-addr.arpa

  • 8.8.8.8:53
    20.160.190.20.in-addr.arpa
    dns
    72 B
     158 B
     1
    1

    DNS Request

    20.160.190.20.in-addr.arpa

  • 8.8.8.8:53
    217.106.137.52.in-addr.arpa
    dns
    73 B
     147 B
     1
    1

    DNS Request

    217.106.137.52.in-addr.arpa

  • 8.8.8.8:53
    228.249.119.40.in-addr.arpa
    dns
    73 B
     159 B
     1
    1

    DNS Request

    228.249.119.40.in-addr.arpa

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Windows\mssecsvc.exe
    Filesize

    3.6MB

    MD5

    37a61307a8714c3005bf1a3da3980b02

    SHA1

    95fc105534f605e1249feb92bdcbf276629756a2

    SHA256

    531fa5a1b26836d491992a48dcbd7a98963578ab19e5af1f3269fbd309052a7f

    SHA512

    31d0782943bcb96b0b56f508c60ccb24fe086f804ca751b68b2d1124b57b009e23bf3871cf4546c90cda7de941456b696f298e4e221b2bbd777fce40918f500f

    Download Submit

  • C:\Windows\tasksche.exe
    Filesize

    3.4MB

    MD5

    50f0d6961f4433eaea5fb1df87cb5cff

    SHA1

    53d176a5f23edfd5ecb70a4a3a22d5c01b019e15

    SHA256

    a9ea9416d59b36c4648dabbf723e076315a2ea8f0ff7da9f203ad9a4ca91d296

    SHA512

    33ce76e2d0c84c10410561ddee39e7cd3becae81f2d8d0f1d9b20f2f3b22a8881e994284160320e6ec2e273605375e0794951c2e1712c104f2bb7b5dc94e17e5

    Download Submit

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.