Overview

overview

10

Static

static

3

9e714d4d43...eN.dll

windows7-x64

10

9e714d4d43...eN.dll

windows10-2004-x64

10

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-09-2024 06:34

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    9e714d4d43e214c28c4ad49877d849e37ac06ed3095d32ff682cbde7c15c4e9eN.dll

  • Size

    5.0MB

  • MD5

    e979124c81143e8fb75bd63e7b07df00

  • SHA1

    54c94581e0d1c0d082a10c3d6169ebec7155efea

  • SHA256

    9e714d4d43e214c28c4ad49877d849e37ac06ed3095d32ff682cbde7c15c4e9e

  • SHA512

    40342b1f80e542f490ec42f4face1ebff2c2e1c94aac55f939c2b07026e5947f343487e05ea0bbc68d1d420a3a7f0b14e767b308272fb341af4e9040d06cbf93

  • SSDEEP

    24576:SbLgddQhfdmMSirYbcMNgef0Q4kqAH1pNZtA0p+9XEk:SnAQqMSPbcBVQyAH1plAH

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Signatures

  • Wannacry

    WannaCry is a ransomware cryptoworm.

    ransomwarewormwannacry
  • Contacts a large (2444) amount of remote hosts 1 TTPs

    This may indicate a network scan to discover remotely running services.

    discovery
  • Executes dropped EXE 3 IoCs
  • Drops file in Windows directory 2 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies data under HKEY_USERS 5 IoCs
  • Suspicious use of WriteProcessMemory 6 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\9e714d4d43e214c28c4ad49877d849e37ac06ed3095d32ff682cbde7c15c4e9eN.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1564
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\9e714d4d43e214c28c4ad49877d849e37ac06ed3095d32ff682cbde7c15c4e9eN.dll,#1
      2⤵
      • Drops file in Windows directory
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:2652
      • C:\WINDOWS\mssecsvc.exe
        C:\WINDOWS\mssecsvc.exe
        3⤵
        • Executes dropped EXE
        • Drops file in Windows directory
        • System Location Discovery: System Language Discovery
        PID:3904
        • C:\WINDOWS\tasksche.exe
          C:\WINDOWS\tasksche.exe /i
          4⤵
          • Executes dropped EXE
          PID:3832
  • C:\WINDOWS\mssecsvc.exe
    C:\WINDOWS\mssecsvc.exe -m security
    1⤵
    • Executes dropped EXE
    • System Location Discovery: System Language Discovery
    • Modifies data under HKEY_USERS
    PID:5056

Network

  • flag-us
    DNS
    www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com
    mssecsvc.exe
    Remote address:
    8.8.8.8:53
    Request
    www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com
    IN A
    Response
    www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com
    IN A
    104.16.167.228
    www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com
    IN A
    104.16.166.228
  • flag-us
    DNS
    8.8.8.8.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    8.8.8.8.in-addr.arpa
    IN PTR
    Response
    8.8.8.8.in-addr.arpa
    IN PTR
    dnsgoogle
  • flag-us
    GET
    http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com/
    mssecsvc.exe
    Remote address:
    104.16.167.228:80
    Request
    GET / HTTP/1.1
    Host: www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com
    Cache-Control: no-cache
    Response
    HTTP/1.1 200 OK
    Date: Wed, 25 Sep 2024 06:34:44 GMT
    Content-Type: text/html
    Content-Length: 607
    Connection: close
    Server: cloudflare
    CF-RAY: 8c88fd78ba10cd31-LHR
  • flag-us
    GET
    http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com/
    mssecsvc.exe
    Remote address:
    104.16.167.228:80
    Request
    GET / HTTP/1.1
    Host: www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com
    Cache-Control: no-cache
    Response
    HTTP/1.1 200 OK
    Date: Wed, 25 Sep 2024 06:34:44 GMT
    Content-Type: text/html
    Content-Length: 607
    Connection: close
    Server: cloudflare
    CF-RAY: 8c88fd79e87b9535-LHR
  • flag-us
    DNS
    228.167.16.104.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    228.167.16.104.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    232.168.11.51.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    232.168.11.51.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    88.210.23.2.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    88.210.23.2.in-addr.arpa
    IN PTR
    Response
    88.210.23.2.in-addr.arpa
    IN PTR
    a2-23-210-88deploystaticakamaitechnologiescom
  • flag-us
    DNS
    74.32.126.40.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    74.32.126.40.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    95.221.229.192.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    95.221.229.192.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    104.219.191.52.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    104.219.191.52.in-addr.arpa
    IN PTR
    Response
  • DNS
    183.59.114.20.in-addr.arpa
    Request
    183.59.114.20.in-addr.arpa
    IN PTR
    Response
  • DNS
    171.39.242.20.in-addr.arpa
    Request
    171.39.242.20.in-addr.arpa
    IN PTR
    Response
  • DNS
    172.210.232.199.in-addr.arpa
    Request
    172.210.232.199.in-addr.arpa
    IN PTR
    Response
  • DNS
    223.174.106.120.in-addr.arpa
    Request
    223.174.106.120.in-addr.arpa
    IN PTR
    Response
  • DNS
    223.174.106.120.in-addr.arpa
    Request
    223.174.106.120.in-addr.arpa
    IN PTR
    Response
  • DNS
    2.174.106.120.in-addr.arpa
    Request
    2.174.106.120.in-addr.arpa
    IN PTR
    Response
  • DNS
    2.174.106.120.in-addr.arpa
    Request
    2.174.106.120.in-addr.arpa
    IN PTR
    Response
  • DNS
    240.221.184.93.in-addr.arpa
    Request
    240.221.184.93.in-addr.arpa
    IN PTR
    Response
  • DNS
    30.40.213.91.in-addr.arpa
    Request
    30.40.213.91.in-addr.arpa
    IN PTR
    Response
  • DNS
    19.229.111.52.in-addr.arpa
    Request
    19.229.111.52.in-addr.arpa
    IN PTR
    Response
  • DNS
    83.198.224.156.in-addr.arpa
    Request
    83.198.224.156.in-addr.arpa
    IN PTR
    Response
  • DNS
    1.198.224.156.in-addr.arpa
    Request
    1.198.224.156.in-addr.arpa
    IN PTR
    Response
  • DNS
    201.120.81.185.in-addr.arpa
    Request
    201.120.81.185.in-addr.arpa
    IN PTR
    Response
  • DNS
    2.120.81.185.in-addr.arpa
    Request
    2.120.81.185.in-addr.arpa
    IN PTR
    Response
  • DNS
    3.174.106.120.in-addr.arpa
    Request
    3.174.106.120.in-addr.arpa
    IN PTR
    Response
  • DNS
    3.174.106.120.in-addr.arpa
    Request
    3.174.106.120.in-addr.arpa
    IN PTR
    Response
  • DNS
    2.198.224.156.in-addr.arpa
    Request
    2.198.224.156.in-addr.arpa
    IN PTR
    Response
  • DNS
    3.120.81.185.in-addr.arpa
    Request
    3.120.81.185.in-addr.arpa
    IN PTR
    Response
  • DNS
    4.120.81.185.in-addr.arpa
    Request
    4.120.81.185.in-addr.arpa
    IN PTR
    Response
  • DNS
    5.120.81.185.in-addr.arpa
    Request
    5.120.81.185.in-addr.arpa
    IN PTR
    Response
  • 104.16.167.228:80
    http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com/
    http
    mssecsvc.exe
    376 B
     990 B
     6
    5

    HTTP Request

    GET http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com/

    HTTP Response

    200
  • 104.16.167.228:80
    http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com/
    http
    mssecsvc.exe
    376 B
     990 B
     6
    5

    HTTP Request

    GET http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com/

    HTTP Response

    200
  • 5.201.93.222:445
    mssecsvc.exe
    104 B
     2
  • 10.127.0.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.1.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.5.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.2.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.4.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.6.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.11.1:445
    mssecsvc.exe
    104 B
     2
  • 84.121.218.68:445
    mssecsvc.exe
    104 B
     2
  • 10.127.9.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.7.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.3.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.8.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.10.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.12.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.13.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.14.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.15.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.16.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.17.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.18.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.19.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.20.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.21.1:445
    mssecsvc.exe
    104 B
     2
  • 209.1.232.142:445
    mssecsvc.exe
    104 B
     2
  • 102.122.31.136:445
    mssecsvc.exe
    104 B
     2
  • 10.127.22.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.25.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.23.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.24.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.31.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.30.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.28.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.27.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.26.1:445
    mssecsvc.exe
    104 B
     2
  • 69.186.185.83:445
    mssecsvc.exe
    52 B
     1
  • 10.127.32.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.29.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.33.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.34.1:445
    mssecsvc.exe
    104 B
     2
  • 113.28.23.123:445
    mssecsvc.exe
    104 B
     2
  • 10.127.35.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.36.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.37.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.38.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.39.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.40.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.41.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.42.1:445
    mssecsvc.exe
    104 B
     2
  • 142.248.1.251:445
    mssecsvc.exe
    52 B
     1
  • 10.127.43.1:445
    mssecsvc.exe
    104 B
     2
  • 123.54.201.159:445
    mssecsvc.exe
    104 B
     2
  • 44.172.70.220:445
    mssecsvc.exe
    104 B
     2
  • 10.127.44.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.48.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.45.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.47.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.46.1:445
    mssecsvc.exe
    104 B
     2
  • 129.206.231.238:445
    mssecsvc.exe
    104 B
     2
  • 10.127.53.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.54.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.50.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.52.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.51.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.49.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.55.1:445
    mssecsvc.exe
    104 B
     2
  • 181.47.152.55:445
    mssecsvc.exe
    104 B
     2
  • 10.127.56.1:445
    mssecsvc.exe
    104 B
     2
  • 148.79.130.3:445
    mssecsvc.exe
    104 B
     2
  • 10.127.57.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.58.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.59.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.60.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.61.1:445
    mssecsvc.exe
    52 B
     1
  • 66.244.212.84:445
    mssecsvc.exe
    52 B
     1
  • 10.127.65.1:445
    mssecsvc.exe
    52 B
     1
  • 195.111.82.37:445
    mssecsvc.exe
    104 B
     2
  • 10.127.66.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.63.1:445
    mssecsvc.exe
    104 B
     2
  • 168.156.186.66:445
    mssecsvc.exe
    104 B
     2
  • 10.127.62.1:445
    mssecsvc.exe
    52 B
     1
  • 103.251.83.19:445
    mssecsvc.exe
    104 B
     2
  • 10.127.64.1:445
    mssecsvc.exe
    104 B
     2
  • 147.189.248.41:445
    mssecsvc.exe
    104 B
     2
  • 10.127.72.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.67.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.70.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.68.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.76.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.69.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.71.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.73.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.74.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.75.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.77.1:445
    mssecsvc.exe
    104 B
     2
  • 117.183.200.235:445
    mssecsvc.exe
    52 B
     1
  • 10.127.78.1:445
    mssecsvc.exe
    52 B
     1
  • 121.80.108.57:445
    mssecsvc.exe
    104 B
     2
  • 10.127.79.1:445
    mssecsvc.exe
    52 B
     1
  • 175.254.105.24:445
    mssecsvc.exe
    104 B
     2
  • 10.127.80.1:445
    mssecsvc.exe
    52 B
     1
  • 175.71.185.180:445
    mssecsvc.exe
    104 B
     2
  • 10.127.82.1:445
    mssecsvc.exe
    52 B
     1
  • 134.44.240.211:445
    mssecsvc.exe
    104 B
     2
  • 10.127.85.1:445
    mssecsvc.exe
    104 B
     2
  • 174.157.38.54:445
    mssecsvc.exe
    104 B
     2
  • 10.127.88.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.83.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.81.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.84.1:445
    mssecsvc.exe
    104 B
     2
  • 55.252.173.22:445
    mssecsvc.exe
    104 B
     2
  • 10.127.89.1:445
    mssecsvc.exe
    104 B
     2
  • 204.159.96.25:445
    mssecsvc.exe
    52 B
     1
  • 10.127.86.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.87.1:445
    mssecsvc.exe
    52 B
     1
  • 192.65.126.210:445
    mssecsvc.exe
    104 B
     2
  • 10.127.94.1:445
    mssecsvc.exe
    104 B
     2
  • 97.227.250.76:445
    mssecsvc.exe
    52 B
     1
  • 10.127.92.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.93.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.90.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.91.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.95.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.96.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.97.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.98.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.99.1:445
    mssecsvc.exe
    104 B
     2
  • 177.147.20.7:445
    mssecsvc.exe
    104 B
     2
  • 10.127.100.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.101.1:445
    mssecsvc.exe
    52 B
     1
  • 87.3.182.92:445
    mssecsvc.exe
    104 B
     2
  • 10.127.102.1:445
    mssecsvc.exe
    104 B
     2
  • 65.153.24.254:445
    mssecsvc.exe
    52 B
     1
  • 2.150.208.160:445
    mssecsvc.exe
    52 B
     1
  • 124.240.216.53:445
    mssecsvc.exe
    104 B
     2
  • 10.127.103.1:445
    mssecsvc.exe
    52 B
     1
  • 144.96.146.201:445
    mssecsvc.exe
    104 B
     2
  • 140.189.129.144:445
    mssecsvc.exe
    52 B
     1
  • 10.127.109.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.104.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.107.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.106.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.110.1:445
    mssecsvc.exe
    52 B
     1
  • 180.99.116.177:445
    mssecsvc.exe
    52 B
     1
  • 10.127.105.1:445
    mssecsvc.exe
    104 B
     2
  • 162.104.23.178:445
    mssecsvc.exe
    104 B
     2
  • 8.131.43.120:445
    mssecsvc.exe
    104 B
     2
  • 10.127.111.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.112.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.108.1:445
    mssecsvc.exe
    104 B
     2
  • 152.194.128.80:445
    mssecsvc.exe
    104 B
     2
  • 10.127.114.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.113.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.115.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.116.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.117.1:445
    mssecsvc.exe
    52 B
     1
  • 78.25.141.29:445
    mssecsvc.exe
    104 B
     2
  • 10.127.118.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.119.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.120.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.121.1:445
    mssecsvc.exe
    52 B
     1
  • 94.3.177.249:445
    mssecsvc.exe
    52 B
     1
  • 10.127.123.1:445
    mssecsvc.exe
    104 B
     2
  • 100.194.191.137:445
    mssecsvc.exe
    52 B
     1
  • 129.144.154.48:445
    mssecsvc.exe
    104 B
     2
  • 10.127.122.1:445
    mssecsvc.exe
    104 B
     2
  • 42.221.245.35:445
    mssecsvc.exe
    52 B
     1
  • 130.125.61.141:445
    mssecsvc.exe
    104 B
     2
  • 8.52.63.23:445
    mssecsvc.exe
    104 B
     2
  • 10.127.126.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.125.1:445
    mssecsvc.exe
    52 B
     1
  • 204.158.103.213:445
    mssecsvc.exe
    104 B
     2
  • 10.127.129.1:445
    mssecsvc.exe
    104 B
     2
  • 200.245.249.206:445
    mssecsvc.exe
    104 B
     2
  • 10.127.124.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.128.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.132.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.134.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.131.1:445
    mssecsvc.exe
    104 B
     2
  • 82.162.248.200:445
    mssecsvc.exe
    104 B
     2
  • 161.129.144.179:445
    mssecsvc.exe
    52 B
     1
  • 10.127.130.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.127.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.133.1:445
    mssecsvc.exe
    104 B
     2
  • 135.174.91.176:445
    mssecsvc.exe
    52 B
     1
  • 190.197.45.93:445
    mssecsvc.exe
    104 B
     2
  • 10.127.135.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.136.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.137.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.138.1:445
    mssecsvc.exe
    104 B
     2
  • 104.4.243.208:445
    mssecsvc.exe
    104 B
     2
  • 10.127.139.1:445
    mssecsvc.exe
    52 B
     1
  • 1.119.133.180:445
    mssecsvc.exe
    104 B
     2
  • 10.127.140.1:445
    mssecsvc.exe
    104 B
     2
  • 120.122.47.223:445
    mssecsvc.exe
    52 B
     1
  • 62.94.117.228:445
    mssecsvc.exe
    104 B
     2
  • 10.127.144.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.141.1:445
    mssecsvc.exe
    52 B
     1
  • 187.62.143.144:445
    mssecsvc.exe
    52 B
     1
  • 156.92.129.7:445
    mssecsvc.exe
    104 B
     2
  • 10.127.145.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.142.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.146.1:445
    mssecsvc.exe
    52 B
     1
  • 34.15.234.204:445
    mssecsvc.exe
    52 B
     1
  • 106.0.79.90:445
    mssecsvc.exe
    104 B
     2
  • 204.29.40.206:445
    mssecsvc.exe
    52 B
     1
  • 10.127.143.1:445
    mssecsvc.exe
    52 B
     1
  • 109.107.221.25:445
    mssecsvc.exe
    104 B
     2
  • 10.127.149.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.148.1:445
    mssecsvc.exe
    104 B
     2
  • 74.115.21.182:445
    mssecsvc.exe
    104 B
     2
  • 58.88.125.130:445
    mssecsvc.exe
    52 B
     1
  • 10.127.147.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.154.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.155.1:445
    mssecsvc.exe
    104 B
     2
  • 29.46.223.234:445
    mssecsvc.exe
    104 B
     2
  • 2.241.45.110:445
    mssecsvc.exe
    104 B
     2
  • 10.127.150.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.152.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.151.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.153.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.156.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.157.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.158.1:445
    mssecsvc.exe
    104 B
     2
  • 164.81.134.224:445
    mssecsvc.exe
    104 B
     2
  • 10.127.159.1:445
    mssecsvc.exe
    52 B
     1
  • 172.126.17.107:445
    mssecsvc.exe
    52 B
     1
  • 10.127.160.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.161.1:445
    mssecsvc.exe
    104 B
     2
  • 206.171.102.170:445
    mssecsvc.exe
    104 B
     2
  • 10.127.162.1:445
    mssecsvc.exe
    52 B
     1
  • 205.173.115.52:445
    mssecsvc.exe
    104 B
     2
  • 65.125.84.215:445
    mssecsvc.exe
    52 B
     1
  • 121.145.138.113:445
    mssecsvc.exe
    104 B
     2
  • 83.241.192.37:445
    mssecsvc.exe
    104 B
     2
  • 10.127.165.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.167.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.166.1:445
    mssecsvc.exe
    52 B
     1
  • 24.41.235.90:445
    mssecsvc.exe
    104 B
     2
  • 139.43.174.248:445
    mssecsvc.exe
    104 B
     2
  • 10.127.168.1:445
    mssecsvc.exe
    104 B
     2
  • 46.190.41.172:445
    mssecsvc.exe
    104 B
     2
  • 194.129.39.228:445
    mssecsvc.exe
    104 B
     2
  • 10.127.170.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.164.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.163.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.172.1:445
    mssecsvc.exe
    104 B
     2
  • 16.88.167.50:445
    mssecsvc.exe
    104 B
     2
  • 10.127.171.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.173.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.175.1:445
    mssecsvc.exe
    104 B
     2
  • 58.109.60.208:445
    mssecsvc.exe
    104 B
     2
  • 180.95.14.160:445
    mssecsvc.exe
    104 B
     2
  • 10.127.169.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.176.1:445
    mssecsvc.exe
    104 B
     2
  • 47.30.179.44:445
    mssecsvc.exe
    104 B
     2
  • 58.33.111.204:445
    mssecsvc.exe
    104 B
     2
  • 10.127.174.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.177.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.178.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.179.1:445
    mssecsvc.exe
    104 B
     2
  • 156.28.235.109:445
    mssecsvc.exe
    52 B
     1
  • 173.157.201.80:445
    mssecsvc.exe
    52 B
     1
  • 10.127.180.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.181.1:445
    mssecsvc.exe
    104 B
     2
  • 15.221.182.7:445
    mssecsvc.exe
    52 B
     1
  • 152.227.127.42:445
    mssecsvc.exe
    52 B
     1
  • 10.127.183.1:445
    mssecsvc.exe
    104 B
     2
  • 131.198.140.4:445
    mssecsvc.exe
    52 B
     1
  • 166.179.115.46:445
    mssecsvc.exe
    104 B
     2
  • 10.127.185.1:445
    mssecsvc.exe
    104 B
     2
  • 88.40.81.221:445
    mssecsvc.exe
    104 B
     2
  • 38.15.208.155:445
    mssecsvc.exe
    52 B
     1
  • 10.127.186.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.182.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.184.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.187.1:445
    mssecsvc.exe
    104 B
     2
  • 149.144.175.200:445
    mssecsvc.exe
    104 B
     2
  • 142.138.36.19:445
    mssecsvc.exe
    104 B
     2
  • 142.100.217.93:445
    mssecsvc.exe
    104 B
     2
  • 28.119.210.33:445
    mssecsvc.exe
    104 B
     2
  • 196.208.170.23:445
    mssecsvc.exe
    104 B
     2
  • 75.34.134.186:445
    mssecsvc.exe
    52 B
     1
  • 10.127.191.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.192.1:445
    mssecsvc.exe
    104 B
     2
  • 186.156.83.245:445
    mssecsvc.exe
    52 B
     1
  • 124.10.97.24:445
    mssecsvc.exe
    52 B
     1
  • 10.127.197.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.188.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.194.1:445
    mssecsvc.exe
    104 B
     2
  • 21.6.115.5:445
    mssecsvc.exe
    104 B
     2
  • 63.75.95.227:445
    mssecsvc.exe
    52 B
     1
  • 10.127.198.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.193.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.196.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.189.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.190.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.195.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.199.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.200.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.201.1:445
    mssecsvc.exe
    104 B
     2
  • 85.37.197.180:445
    mssecsvc.exe
    104 B
     2
  • 181.107.160.211:445
    mssecsvc.exe
    104 B
     2
  • 10.127.202.1:445
    mssecsvc.exe
    52 B
     1
  • 216.170.165.117:445
    mssecsvc.exe
    104 B
     2
  • 6.132.177.73:445
    mssecsvc.exe
    104 B
     2
  • 10.127.203.1:445
    mssecsvc.exe
    104 B
     2
  • 221.89.221.252:445
    mssecsvc.exe
    104 B
     2
  • 91.54.166.251:445
    mssecsvc.exe
    52 B
     1
  • 147.109.205.144:445
    mssecsvc.exe
    52 B
     1
  • 112.127.189.174:445
    mssecsvc.exe
    104 B
     2
  • 94.206.147.233:445
    mssecsvc.exe
    104 B
     2
  • 10.127.204.1:445
    mssecsvc.exe
    104 B
     2
  • 68.42.12.94:445
    mssecsvc.exe
    104 B
     2
  • 165.163.45.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.207.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.208.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.210.1:445
    mssecsvc.exe
    104 B
     2
  • 203.141.89.79:445
    mssecsvc.exe
    104 B
     2
  • 217.25.100.128:445
    mssecsvc.exe
    104 B
     2
  • 10.127.212.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.206.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.205.1:445
    mssecsvc.exe
    104 B
     2
  • 40.204.112.115:445
    mssecsvc.exe
    104 B
     2
  • 80.238.50.237:445
    mssecsvc.exe
    104 B
     2
  • 10.127.209.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.215.1:445
    mssecsvc.exe
    104 B
     2
  • 50.3.196.37:445
    mssecsvc.exe
    104 B
     80 B
     2
    2
  • 189.114.109.153:445
    mssecsvc.exe
    52 B
     1
  • 40.55.106.209:445
    mssecsvc.exe
    104 B
     2
  • 10.127.211.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.213.1:445
    mssecsvc.exe
    52 B
     1
  • 167.139.62.90:445
    mssecsvc.exe
    104 B
     2
  • 10.127.214.1:445
    mssecsvc.exe
    52 B
     1
  • 120.163.195.27:445
    mssecsvc.exe
    104 B
     2
  • 10.127.216.1:445
    mssecsvc.exe
    52 B
     1
  • 206.81.233.137:445
    mssecsvc.exe
    52 B
     1
  • 4.181.13.178:445
    mssecsvc.exe
    52 B
     1
  • 10.127.217.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.218.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.219.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.220.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.221.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.222.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.223.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.224.1:445
    mssecsvc.exe
    104 B
     2
  • 173.161.162.166:445
    mssecsvc.exe
    104 B
     2
  • 129.74.44.27:445
    mssecsvc.exe
    52 B
     1
  • 45.107.42.132:445
    mssecsvc.exe
    104 B
     2
  • 107.5.108.180:445
    mssecsvc.exe
    104 B
     2
  • 208.213.118.117:445
    mssecsvc.exe
    104 B
     2
  • 104.240.178.119:445
    mssecsvc.exe
    52 B
     1
  • 10.127.226.1:445
    mssecsvc.exe
    104 B
     2
  • 100.20.26.97:445
    mssecsvc.exe
    104 B
     2
  • 29.26.133.192:445
    mssecsvc.exe
    104 B
     2
  • 10.127.227.1:445
    mssecsvc.exe
    52 B
     1
  • 106.36.106.21:445
    mssecsvc.exe
    104 B
     2
  • 194.121.231.108:445
    mssecsvc.exe
    104 B
     2
  • 10.127.225.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.230.1:445
    mssecsvc.exe
    104 B
     2
  • 208.33.226.214:445
    mssecsvc.exe
    104 B
     2
  • 2.67.26.71:445
    mssecsvc.exe
    104 B
     2
  • 10.127.234.1:445
    mssecsvc.exe
    52 B
     1
  • 9.141.78.56:445
    mssecsvc.exe
    104 B
     2
  • 13.191.4.11:445
    mssecsvc.exe
    104 B
     2
  • 10.127.228.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.229.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.233.1:445
    mssecsvc.exe
    104 B
     2
  • 41.12.205.180:445
    mssecsvc.exe
    104 B
     2
  • 215.219.105.6:445
    mssecsvc.exe
    52 B
     1
  • 201.209.92.46:445
    mssecsvc.exe
    104 B
     2
  • 10.127.237.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.231.1:445
    mssecsvc.exe
    104 B
     2
  • 218.151.181.164:445
    mssecsvc.exe
    104 B
     2
  • 102.210.71.143:445
    mssecsvc.exe
    104 B
     2
  • 10.127.238.1:445
    mssecsvc.exe
    52 B
     1
  • 185.26.234.79:445
    mssecsvc.exe
    52 B
     1
  • 10.127.232.1:445
    mssecsvc.exe
    104 B
     2
  • 9.213.66.114:445
    mssecsvc.exe
    104 B
     2
  • 10.127.235.1:445
    mssecsvc.exe
    104 B
     2
  • 49.117.168.91:445
    mssecsvc.exe
    52 B
     1
  • 10.127.240.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.236.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.239.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.241.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.242.1:445
    mssecsvc.exe
    52 B
     1
  • 115.132.203.16:445
    mssecsvc.exe
    104 B
     2
  • 88.113.86.126:445
    mssecsvc.exe
    104 B
     2
  • 10.127.243.1:445
    mssecsvc.exe
    104 B
     2
  • 151.72.76.138:445
    mssecsvc.exe
    52 B
     1
  • 216.95.12.182:445
    mssecsvc.exe
    52 B
     1
  • 135.5.208.247:445
    mssecsvc.exe
    52 B
     1
  • 10.127.246.1:445
    mssecsvc.exe
    104 B
     2
  • 12.163.175.193:445
    mssecsvc.exe
    52 B
     1
  • 109.161.162.242:445
    mssecsvc.exe
    52 B
     1
  • 136.174.188.31:445
    mssecsvc.exe
    104 B
     2
  • 10.127.247.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.244.1:445
    mssecsvc.exe
    104 B
     2
  • 155.183.193.44:445
    mssecsvc.exe
    52 B
     1
  • 48.35.194.63:445
    mssecsvc.exe
    52 B
     1
  • 11.238.200.105:445
    mssecsvc.exe
    52 B
     1
  • 10.127.250.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.249.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.248.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.245.1:445
    mssecsvc.exe
    104 B
     2
  • 99.246.238.129:445
    mssecsvc.exe
    52 B
     1
  • 38.163.250.58:445
    mssecsvc.exe
    104 B
     2
  • 10.127.253.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.252.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.251.1:445
    mssecsvc.exe
    52 B
     1
  • 158.238.76.16:445
    mssecsvc.exe
    104 B
     2
  • 200.181.210.199:445
    mssecsvc.exe
    52 B
     1
  • 10.127.254.1:445
    mssecsvc.exe
    104 B
     2
  • 10.127.0.2:445
    mssecsvc.exe
    104 B
     2
  • 100.129.196.169:445
    mssecsvc.exe
    104 B
     2
  • 219.188.26.244:445
    mssecsvc.exe
    104 B
     2
  • 12.164.142.61:445
    mssecsvc.exe
    104 B
     2
  • 116.151.183.50:445
    mssecsvc.exe
    52 B
     1
  • 29.78.50.67:445
    mssecsvc.exe
    52 B
     1
  • 190.22.80.151:445
    mssecsvc.exe
    104 B
     2
  • 209.54.213.214:445
    mssecsvc.exe
    104 B
     2
  • 83.156.252.90:445
    mssecsvc.exe
    104 B
     2
  • 174.186.37.108:445
    mssecsvc.exe
    104 B
     2
  • 10.127.255.1:445
    mssecsvc.exe
    52 B
     1
  • 10.127.1.2:445
    mssecsvc.exe
    52 B
     1
  • 10.127.2.2:445
    mssecsvc.exe
    52 B
     1
  • 10.127.3.2:445
    mssecsvc.exe
    104 B
     2
  • 10.127.4.2:445
    mssecsvc.exe
    52 B
     1
  • 10.127.5.2:445
    mssecsvc.exe
    52 B
     1
  • 10.127.6.2:445
    mssecsvc.exe
    52 B
     1
  • 10.127.7.2:445
    mssecsvc.exe
    104 B
     2
  • 219.19.51.109:445
    mssecsvc.exe
    104 B
     2
  • 143.204.62.189:445
    mssecsvc.exe
    52 B
     1
  • 211.91.99.54:445
    mssecsvc.exe
    52 B
     1
  • 28.190.219.180:445
    mssecsvc.exe
    104 B
     2
  • 47.122.45.157:445
    mssecsvc.exe
    52 B
     1
  • 10.127.9.2:445
    mssecsvc.exe
    104 B
     2
  • 10.127.10.2:445
    mssecsvc.exe
    104 B
     2
  • 87.29.248.109:445
    mssecsvc.exe
    52 B
     1
  • 144.231.78.201:445
    mssecsvc.exe
    52 B
     1
  • 24.181.148.139:445
    mssecsvc.exe
    104 B
     2
  • 10.127.13.2:445
    mssecsvc.exe
    104 B
     2
  • 10.127.12.2:445
    mssecsvc.exe
    104 B
     2
  • 10.127.14.2:445
    mssecsvc.exe
    52 B
     1
  • 182.189.173.254:445
    mssecsvc.exe
    104 B
     2
  • 174.183.61.126:445
    mssecsvc.exe
    104 B
     2
  • 10.127.15.2:445
    mssecsvc.exe
    104 B
     2
  • 135.108.234.14:445
    mssecsvc.exe
    104 B
     2
  • 10.127.11.2:445
    mssecsvc.exe
    52 B
     1
  • 10.127.8.2:445
    mssecsvc.exe
    104 B
     2
  • 7.5.182.170:445
    mssecsvc.exe
    104 B
     2
  • 62.207.205.120:445
    mssecsvc.exe
    104 B
     2
  • 51.166.33.139:445
    mssecsvc.exe
    104 B
     2
  • 17.64.178.32:445
    mssecsvc.exe
    104 B
     2
  • 28.148.35.6:445
    mssecsvc.exe
    104 B
     2
  • 10.127.19.2:445
    mssecsvc.exe
    104 B
     2
  • 10.127.17.2:445
    mssecsvc.exe
    52 B
     1
  • 151.81.147.192:445
    mssecsvc.exe
    104 B
     2
  • 50.32.159.207:445
    mssecsvc.exe
    104 B
     2
  • 67.118.100.249:445
    mssecsvc.exe
    52 B
     1
  • 10.127.16.2:445
    mssecsvc.exe
    104 B
     2
  • 203.80.101.138:445
    mssecsvc.exe
    104 B
     2
  • 53.188.57.9:445
    mssecsvc.exe
    104 B
     2
  • 54.87.113.30:445
    mssecsvc.exe
    104 B
     2
  • 10.127.18.2:445
    mssecsvc.exe
    104 B
     2
  • 10.127.22.2:445
    mssecsvc.exe
    104 B
     2
  • 10.127.24.2:445
    mssecsvc.exe
    52 B
     1
  • 152.163.251.132:445
    mssecsvc.exe
    52 B
     1
  • 194.51.235.0:445
    mssecsvc.exe
    104 B
     2
  • 50.181.174.85:445
    mssecsvc.exe
    104 B
     2
  • 10.127.20.2:445
    mssecsvc.exe
    52 B
     1
  • 10.127.21.2:445
    mssecsvc.exe
    52 B
     1
  • 10.127.23.2:445
    mssecsvc.exe
    104 B
     2
  • 10.127.25.2:445
    mssecsvc.exe
    52 B
     1
  • 10.127.26.2:445
    mssecsvc.exe
    52 B
     1
  • 10.127.27.2:445
    mssecsvc.exe
    52 B
     1
  • 95.158.81.169:445
    mssecsvc.exe
    104 B
     2
  • 5.181.8.177:445
    mssecsvc.exe
    52 B
     1
  • 198.158.169.104:445
    mssecsvc.exe
    52 B
     1
  • 151.115.168.244:445
    mssecsvc.exe
    104 B
     2
  • 161.250.61.249:445
    mssecsvc.exe
    52 B
     1
  • 10.127.30.2:445
    mssecsvc.exe
    52 B
     1
  • 66.187.179.135:445
    mssecsvc.exe
    52 B
     1
  • 10.127.29.2:445
    mssecsvc.exe
    104 B
     2
  • 71.108.60.78:445
    mssecsvc.exe
    104 B
     2
  • 222.61.34.31:445
    mssecsvc.exe
    104 B
     2
  • 103.176.113.87:445
    mssecsvc.exe
    104 B
     2
  • 10.127.28.2:445
    mssecsvc.exe
    104 B
     2
  • 10.127.33.2:445
    mssecsvc.exe
    52 B
     1
  • 152.101.167.86:445
    mssecsvc.exe
    104 B
     2
  • 8.8.8.8:53
    www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com
    dns
    mssecsvc.exe
    95 B
     127 B
     1
    1

    DNS Request

    www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com

    DNS Response

    104.16.167.228
    104.16.166.228

  • 8.8.8.8:53
    8.8.8.8.in-addr.arpa
    dns
    66 B
     90 B
     1
    1

    DNS Request

    8.8.8.8.in-addr.arpa

  • 8.8.8.8:53
    228.167.16.104.in-addr.arpa
    dns
    73 B
     135 B
     1
    1

    DNS Request

    228.167.16.104.in-addr.arpa

  • 8.8.8.8:53
    232.168.11.51.in-addr.arpa
    dns
    72 B
     158 B
     1
    1

    DNS Request

    232.168.11.51.in-addr.arpa

  • 8.8.8.8:53
    88.210.23.2.in-addr.arpa
    dns
    70 B
     133 B
     1
    1

    DNS Request

    88.210.23.2.in-addr.arpa

  • 8.8.8.8:53
    95.221.229.192.in-addr.arpa
    dns
    73 B
     144 B
     1
    1

    DNS Request

    95.221.229.192.in-addr.arpa

  • 8.8.8.8:53
    74.32.126.40.in-addr.arpa
    dns
    71 B
     157 B
     1
    1

    DNS Request

    74.32.126.40.in-addr.arpa

  • 8.8.8.8:53
    104.219.191.52.in-addr.arpa
    dns
    73 B
     147 B
     1
    1

    DNS Request

    104.219.191.52.in-addr.arpa

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\WINDOWS\mssecsvc.exe
    Filesize

    3.6MB

    MD5

    6fa3a464bd9df87c164a7650619634ba

    SHA1

    0c363ba86938102fbb55f8f0f1f2ad8a1953cc5a

    SHA256

    4049d0b5d878855fabc4338cf8f6b8a5f7604d249c970df5b4552186601f1f5d

    SHA512

    379512b5ceb023b78730fd3f8245413d990e4472861d8910a08baf73e291988fbb15f5d3135ba291f81b263d41cb6c0543b14c124967d4a6fc3ce2b0365f74ec

    Download Submit

  • C:\Windows\tasksche.exe
    Filesize

    3.4MB

    MD5

    a1660f6e4fe9388cbb251ca4d6b352e6

    SHA1

    db0686ae7886b54983fc86f876b015c59deaa0b3

    SHA256

    7902974c078579c6e8d28694cc6026854d53fedfdc34dac83b443089529eea4c

    SHA512

    6c432cf003dd1d04897a610f38c6b20f4acf212378803becf70dc0c3ad3197424d5fd7e17f81eeb7941f35a3e3207f3daccd13371f8d715a6277e5343471854b

    Download Submit

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.