Overview

overview

1

Static

static

1

c2117954ed...5.html

windows7-x64

1

c2117954ed...5.html

windows10-2004-x64

1

Analysis

  • max time kernel
    141s
  • max time network
    158s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/03/2024, 01:05 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    c2117954ed6009f2be6a73c84aa8ede5.html

  • Size

    432B

  • MD5

    c2117954ed6009f2be6a73c84aa8ede5

  • SHA1

    b7cbbecdc9cd9304c9204db7b526a5b209bd6b9e

  • SHA256

    f8e8c7b27488ab6c574b6b1103942ca6f5666519cc9f8b9cad6d0be85670c400

  • SHA512

    1e007702d9baaa4f42e62a1f882cdf6e01d64586408fa46b3fc8db340fe48c321ebf30af41296dc40e1e3865b452421cf574a8bcdd70b3aa0fa2526ea781c4fa

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\c2117954ed6009f2be6a73c84aa8ede5.html
    1⤵
      PID:4640
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=17 --mojo-platform-channel-handle=4120 --field-trial-handle=2356,i,13261194862334667799,7441241219475888176,262144 --variations-seed-version /prefetch:1
      1⤵
        PID:2676
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=18 --mojo-platform-channel-handle=5012 --field-trial-handle=2356,i,13261194862334667799,7441241219475888176,262144 --variations-seed-version /prefetch:1
        1⤵
          PID:3884
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=5600 --field-trial-handle=2356,i,13261194862334667799,7441241219475888176,262144 --variations-seed-version /prefetch:8
          1⤵
            PID:3456
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=20 --mojo-platform-channel-handle=3616 --field-trial-handle=2356,i,13261194862334667799,7441241219475888176,262144 --variations-seed-version /prefetch:1
            1⤵
              PID:1348
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=21 --mojo-platform-channel-handle=5340 --field-trial-handle=2356,i,13261194862334667799,7441241219475888176,262144 --variations-seed-version /prefetch:1
              1⤵
                PID:4488
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=22 --mojo-platform-channel-handle=5812 --field-trial-handle=2356,i,13261194862334667799,7441241219475888176,262144 --variations-seed-version /prefetch:1
                1⤵
                  PID:4800
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --no-appcompat-clear --mojo-platform-channel-handle=5948 --field-trial-handle=2356,i,13261194862334667799,7441241219475888176,262144 --variations-seed-version /prefetch:8
                  1⤵
                    PID:3884
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=6004 --field-trial-handle=2356,i,13261194862334667799,7441241219475888176,262144 --variations-seed-version /prefetch:8
                    1⤵
                      PID:548

                    Network

                    • flag-us
                      DNS
                      nav-edge.smartscreen.microsoft.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      nav-edge.smartscreen.microsoft.com
                      IN A
                      Response
                      nav-edge.smartscreen.microsoft.com
                      IN CNAME
                      tm-prod-wd-csp-edge.trafficmanager.net
                      tm-prod-wd-csp-edge.trafficmanager.net
                      IN CNAME
                      prod-agic-uw-1.ukwest.cloudapp.azure.com
                      prod-agic-uw-1.ukwest.cloudapp.azure.com
                      IN A
                      51.140.242.104
                    • flag-us
                      DNS
                      nav-edge.smartscreen.microsoft.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      nav-edge.smartscreen.microsoft.com
                      IN Unknown
                      Response
                      nav-edge.smartscreen.microsoft.com
                      IN CNAME
                      tm-prod-wd-csp-edge.trafficmanager.net
                      tm-prod-wd-csp-edge.trafficmanager.net
                      IN CNAME
                      prod-agic-uw-1.ukwest.cloudapp.azure.com
                    • flag-us
                      DNS
                      business.bing.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      business.bing.com
                      IN A
                      Response
                      business.bing.com
                      IN CNAME
                      business-bing-com.b-0005.b-msedge.net
                      business-bing-com.b-0005.b-msedge.net
                      IN CNAME
                      b-0005.b-msedge.net
                      b-0005.b-msedge.net
                      IN A
                      13.107.6.158
                    • flag-us
                      DNS
                      business.bing.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      business.bing.com
                      IN Unknown
                      Response
                      business.bing.com
                      IN CNAME
                      business-bing-com.b-0005.b-msedge.net
                    • flag-us
                      DNS
                      www.microsoft.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      www.microsoft.com
                      IN A
                      Response
                      www.microsoft.com
                      IN CNAME
                      www.microsoft.com-c-3.edgekey.net
                      www.microsoft.com-c-3.edgekey.net
                      IN CNAME
                      www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                      www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                      IN CNAME
                      e13678.dscb.akamaiedge.net
                      e13678.dscb.akamaiedge.net
                      IN A
                      92.123.241.137
                    • flag-us
                      DNS
                      www.microsoft.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      www.microsoft.com
                      IN A
                      Response
                      www.microsoft.com
                      IN CNAME
                      www.microsoft.com-c-3.edgekey.net
                      www.microsoft.com-c-3.edgekey.net
                      IN CNAME
                      www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                      www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                      IN CNAME
                      e13678.dscb.akamaiedge.net
                      e13678.dscb.akamaiedge.net
                      IN A
                      92.123.241.137
                    • flag-us
                      DNS
                      www.microsoft.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      www.microsoft.com
                      IN Unknown
                      Response
                      www.microsoft.com
                      IN CNAME
                      www.microsoft.com-c-3.edgekey.net
                      www.microsoft.com-c-3.edgekey.net
                      IN CNAME
                      www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                      www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                      IN CNAME
                      e13678.dscb.akamaiedge.net
                    • flag-us
                      DNS
                      68.159.190.20.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      68.159.190.20.in-addr.arpa
                      IN PTR
                      Response
                    • flag-us
                      DNS
                      114.110.16.96.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      114.110.16.96.in-addr.arpa
                      IN PTR
                      Response
                      114.110.16.96.in-addr.arpa
                      IN PTR
                      a96-16-110-114deploystaticakamaitechnologiescom
                    • flag-us
                      DNS
                      frookshop-winsive.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      frookshop-winsive.com
                      IN A
                      Response
                      frookshop-winsive.com
                      IN A
                      18.158.88.249
                    • flag-us
                      DNS
                      frookshop-winsive.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      frookshop-winsive.com
                      IN Unknown
                    • flag-us
                      DNS
                      frookshop-winsive.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      frookshop-winsive.com
                      IN A
                      Response
                      frookshop-winsive.com
                      IN A
                      18.158.88.249
                    • flag-us
                      DNS
                      www.microsoft.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      www.microsoft.com
                      IN A
                    • flag-us
                      DNS
                      104.242.140.51.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      104.242.140.51.in-addr.arpa
                      IN PTR
                      Response
                    • flag-us
                      DNS
                      137.241.123.92.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      137.241.123.92.in-addr.arpa
                      IN PTR
                      Response
                      137.241.123.92.in-addr.arpa
                      IN PTR
                      a92-123-241-137deploystaticakamaitechnologiescom
                    • flag-us
                      DNS
                      www.microsoft.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      www.microsoft.com
                      IN A
                      Response
                      www.microsoft.com
                      IN CNAME
                      www.microsoft.com-c-3.edgekey.net
                      www.microsoft.com-c-3.edgekey.net
                      IN CNAME
                      www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                      www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                      IN CNAME
                      e13678.dscb.akamaiedge.net
                      e13678.dscb.akamaiedge.net
                      IN A
                      92.123.241.137
                    • flag-us
                      DNS
                      249.88.158.18.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      249.88.158.18.in-addr.arpa
                      IN PTR
                      Response
                      249.88.158.18.in-addr.arpa
                      IN PTR
                      ec2-18-158-88-249 eu-central-1compute amazonawscom
                    • flag-us
                      DNS
                      95.221.229.192.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      95.221.229.192.in-addr.arpa
                      IN PTR
                      Response
                    • flag-us
                      DNS
                      194.178.17.96.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      194.178.17.96.in-addr.arpa
                      IN PTR
                      Response
                      194.178.17.96.in-addr.arpa
                      IN PTR
                      a96-17-178-194deploystaticakamaitechnologiescom
                    • flag-us
                      DNS
                      9.228.82.20.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      9.228.82.20.in-addr.arpa
                      IN PTR
                      Response
                    • flag-us
                      DNS
                      g.bing.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      g.bing.com
                      IN A
                      Response
                      g.bing.com
                      IN CNAME
                      g-bing-com.a-0001.a-msedge.net
                      g-bing-com.a-0001.a-msedge.net
                      IN CNAME
                      dual-a-0001.a-msedge.net
                      dual-a-0001.a-msedge.net
                      IN A
                      204.79.197.200
                      dual-a-0001.a-msedge.net
                      IN A
                      13.107.21.200
                    • flag-us
                      GET
                      https://g.bing.com/neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=8c8bda9c3843499ea8c00f67932bec6d&localId=w:AE07C56D-9F7E-DB3B-D18D-2459C76F841B&deviceId=6825825924912662&anid=
                      Remote address:
                      204.79.197.200:443
                      Request
                      GET /neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=8c8bda9c3843499ea8c00f67932bec6d&localId=w:AE07C56D-9F7E-DB3B-D18D-2459C76F841B&deviceId=6825825924912662&anid= HTTP/2.0
                      host: g.bing.com
                      accept-encoding: gzip, deflate
                      user-agent: WindowsShellClient/9.0.40929.0 (Windows)
                      Response
                      HTTP/2.0 204
                      cache-control: no-cache, must-revalidate
                      pragma: no-cache
                      expires: Fri, 01 Jan 1990 00:00:00 GMT
                      set-cookie: MUID=2C7877518E1965FF36C863118FF96488; domain=.bing.com; expires=Sun, 06-Apr-2025 01:06:24 GMT; path=/; SameSite=None; Secure; Priority=High;
                      strict-transport-security: max-age=31536000; includeSubDomains; preload
                      access-control-allow-origin: *
                      x-cache: CONFIG_NOCACHE
                      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
                      x-msedge-ref: Ref A: B1752722285F48A89478FCC69B562EC1 Ref B: LON04EDGE1220 Ref C: 2024-03-12T01:06:24Z
                      date: Tue, 12 Mar 2024 01:06:23 GMT
                    • flag-us
                      GET
                      https://g.bing.com/neg/0?action=emptycreative&adUnitId=11730597&publisherId=251978541&rid=8c8bda9c3843499ea8c00f67932bec6d&localId=w:AE07C56D-9F7E-DB3B-D18D-2459C76F841B&deviceId=6825825924912662&anid=
                      Remote address:
                      204.79.197.200:443
                      Request
                      GET /neg/0?action=emptycreative&adUnitId=11730597&publisherId=251978541&rid=8c8bda9c3843499ea8c00f67932bec6d&localId=w:AE07C56D-9F7E-DB3B-D18D-2459C76F841B&deviceId=6825825924912662&anid= HTTP/2.0
                      host: g.bing.com
                      accept-encoding: gzip, deflate
                      user-agent: WindowsShellClient/9.0.40929.0 (Windows)
                      cookie: MUID=2C7877518E1965FF36C863118FF96488
                      Response
                      HTTP/2.0 204
                      cache-control: no-cache, must-revalidate
                      pragma: no-cache
                      expires: Fri, 01 Jan 1990 00:00:00 GMT
                      set-cookie: MSPTC=4YaI4XmFq0a_f3q_D_QidvX46CsInqDj4l7oJtJ6pSs; domain=.bing.com; expires=Sun, 06-Apr-2025 01:06:24 GMT; path=/; Partitioned; secure; SameSite=None
                      strict-transport-security: max-age=31536000; includeSubDomains; preload
                      access-control-allow-origin: *
                      x-cache: CONFIG_NOCACHE
                      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
                      x-msedge-ref: Ref A: E1160989315645088167858831940937 Ref B: LON04EDGE1220 Ref C: 2024-03-12T01:06:24Z
                      date: Tue, 12 Mar 2024 01:06:23 GMT
                    • flag-us
                      GET
                      https://g.bing.com/neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=8c8bda9c3843499ea8c00f67932bec6d&localId=w:AE07C56D-9F7E-DB3B-D18D-2459C76F841B&deviceId=6825825924912662&anid=
                      Remote address:
                      204.79.197.200:443
                      Request
                      GET /neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=8c8bda9c3843499ea8c00f67932bec6d&localId=w:AE07C56D-9F7E-DB3B-D18D-2459C76F841B&deviceId=6825825924912662&anid= HTTP/2.0
                      host: g.bing.com
                      accept-encoding: gzip, deflate
                      user-agent: WindowsShellClient/9.0.40929.0 (Windows)
                      cookie: MUID=2C7877518E1965FF36C863118FF96488; MSPTC=4YaI4XmFq0a_f3q_D_QidvX46CsInqDj4l7oJtJ6pSs
                      Response
                      HTTP/2.0 204
                      cache-control: no-cache, must-revalidate
                      pragma: no-cache
                      expires: Fri, 01 Jan 1990 00:00:00 GMT
                      strict-transport-security: max-age=31536000; includeSubDomains; preload
                      access-control-allow-origin: *
                      x-cache: CONFIG_NOCACHE
                      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
                      x-msedge-ref: Ref A: 0F50DFFF38204EBF8AEFE2A328C3E3CE Ref B: LON04EDGE1220 Ref C: 2024-03-12T01:06:24Z
                      date: Tue, 12 Mar 2024 01:06:23 GMT
                    • flag-us
                      DNS
                      200.197.79.204.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      200.197.79.204.in-addr.arpa
                      IN PTR
                      Response
                      200.197.79.204.in-addr.arpa
                      IN PTR
                      a-0001a-msedgenet
                    • flag-us
                      DNS
                      41.110.16.96.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      41.110.16.96.in-addr.arpa
                      IN PTR
                      Response
                      41.110.16.96.in-addr.arpa
                      IN PTR
                      a96-16-110-41deploystaticakamaitechnologiescom
                    • flag-us
                      DNS
                      26.35.223.20.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      26.35.223.20.in-addr.arpa
                      IN PTR
                      Response
                    • flag-us
                      DNS
                      232.168.11.51.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      232.168.11.51.in-addr.arpa
                      IN PTR
                      Response
                    • flag-us
                      DNS
                      138.32.126.40.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      138.32.126.40.in-addr.arpa
                      IN PTR
                      Response
                    • flag-us
                      DNS
                      nw-umwatson.events.data.microsoft.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      nw-umwatson.events.data.microsoft.com
                      IN A
                      Response
                      nw-umwatson.events.data.microsoft.com
                      IN CNAME
                      blobcollector.events.data.trafficmanager.net
                      blobcollector.events.data.trafficmanager.net
                      IN CNAME
                      onedsblobprdcus17.centralus.cloudapp.azure.com
                      onedsblobprdcus17.centralus.cloudapp.azure.com
                      IN A
                      13.89.179.12
                    • flag-us
                      POST
                      https://nw-umwatson.events.data.microsoft.com/Telemetry.Request
                      Remote address:
                      13.89.179.12:443
                      Request
                      POST /Telemetry.Request HTTP/1.1
                      Connection: Keep-Alive
                      Content-Type: application/xml
                      User-Agent: Crashpad/0.8.0 WinHTTP/10.0.19041.1151 Windows_NT/10.0.19041.1202 (x64)
                      MSA_DeviceTicket: t=EwCwAlN5BAAUu1V9OkIAK55tj6h8OjaXgvkszYkAARAeMGvprj8BnwsGx0+SHDRUVaazsoPZ01Bg/ng9041LQ4WDrXXr++g48fECAaYGKgo9K1j9B0sOnpGhEYKdQYNH/WolFBZWtYYf+oDyMfQu4Rg14wIktiGfG/FQG57wr3oKE1TLf/Nw0B1GQHeJ91tvWG+vq3up6mgWSaEoM9ooR6cD3Hk+rU+zmbkZFVpEkjV4973pB2imhf/0jsvApl76yUJcFC3et9TMtR87X88ll5f0kFX8+99n4QeEE7s4KefFKdajTFQkOSbeBg1ifvvn+n5WxD6/gC5LMes1nq/8Epmut7QRAtnQ4m5M+yCBJj8vEJiR28bspqpzwLAbYQwDZgAACLgbAjSRlpHCgAHl2PQxj7YnGXFjsw0hUV/eaBs32gMJLzfWD69Ui9rJ/DeExhSNKYegWsPwLB6ecnIkd3cGVbsOKF9+i5Xh5NcB5J38s/BxFRKAVtthzIYxdGLbCSM1D2t9QV9CxOyFMHhhkxkAe/CmwGqMNk8mcXO9eCAapHBfyDwTwIqFuirL9Q31MbVFT+i4oDtRwHz2nrDSC6WZeS1c2OHrbFVbtEn76VPFraW4mxs9crdmaiRT77Or6LPsY2dwQwGKgT/CX8CY/HEcVn6CFXb0RygNyB2RCsoX3iYu83AfrWlM6FaVzphlNsWhdzMeKJJBh8r3jSTptpDA0zTPK8VTGqAWGX7tWLejTgBDccVUmoGA2+nJPyyVjkHu2Rt7Ll5Ko8UFgJ3YeIXCCfeLGmUi0a7y1gJQqB73pnnt0G3kQtP6Mp6dWx5bKyomTCAHu+59yGf1p06tRvBzHSowWwMaMLpEm8E7kv9CjCBNB7zFjoyYA/Ys3jb8AjH20VioFQGHhwlRd3e2AQ==&p=
                      Content-Length: 3685
                      Host: nw-umwatson.events.data.microsoft.com
                      Response
                      HTTP/1.1 200 200 OK
                      Content-Length: 634
                      Content-Type: text/xml
                      Server: Microsoft-HTTPAPI/2.0
                      Strict-Transport-Security: max-age=31536000
                      Date: Tue, 12 Mar 2024 01:06:34 GMT
                    • flag-us
                      DNS
                      12.179.89.13.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      12.179.89.13.in-addr.arpa
                      IN PTR
                      Response
                    • flag-us
                      DNS
                      bzib.nelreports.net
                      Remote address:
                      8.8.8.8:53
                      Request
                      bzib.nelreports.net
                      IN A
                      Response
                      bzib.nelreports.net
                      IN CNAME
                      bzib.nelreports.net.akamaized.net
                      bzib.nelreports.net.akamaized.net
                      IN CNAME
                      a416.dscd.akamai.net
                      a416.dscd.akamai.net
                      IN A
                      104.91.71.133
                      a416.dscd.akamai.net
                      IN A
                      104.91.71.140
                    • flag-us
                      DNS
                      bzib.nelreports.net
                      Remote address:
                      8.8.8.8:53
                      Request
                      bzib.nelreports.net
                      IN Unknown
                      Response
                      bzib.nelreports.net
                      IN CNAME
                      bzib.nelreports.net.akamaized.net
                      bzib.nelreports.net.akamaized.net
                      IN CNAME
                      a416.dscd.akamai.net
                    • flag-us
                      DNS
                      edgestatic.azureedge.net
                      Remote address:
                      8.8.8.8:53
                      Request
                      edgestatic.azureedge.net
                      IN A
                      Response
                      edgestatic.azureedge.net
                      IN CNAME
                      edgestatic.afd.azureedge.net
                      edgestatic.afd.azureedge.net
                      IN CNAME
                      azureedge-t-prod.trafficmanager.net
                      azureedge-t-prod.trafficmanager.net
                      IN CNAME
                      shed.dual-low.part-0036.t-0009.t-msedge.net
                      shed.dual-low.part-0036.t-0009.t-msedge.net
                      IN CNAME
                      part-0036.t-0009.t-msedge.net
                      part-0036.t-0009.t-msedge.net
                      IN A
                      13.107.246.64
                      part-0036.t-0009.t-msedge.net
                      IN A
                      13.107.213.64
                    • flag-us
                      DNS
                      edgestatic.azureedge.net
                      Remote address:
                      8.8.8.8:53
                      Request
                      edgestatic.azureedge.net
                      IN Unknown
                      Response
                      edgestatic.azureedge.net
                      IN CNAME
                      edgestatic.afd.azureedge.net
                      edgestatic.afd.azureedge.net
                      IN CNAME
                      azureedge-t-prod.trafficmanager.net
                      azureedge-t-prod.trafficmanager.net
                      IN CNAME
                      shed.dual-low.part-0036.t-0009.t-msedge.net
                      shed.dual-low.part-0036.t-0009.t-msedge.net
                      IN CNAME
                      part-0036.t-0009.t-msedge.net
                    • flag-us
                      DNS
                      telem-edge.smartscreen.microsoft.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      telem-edge.smartscreen.microsoft.com
                      IN A
                      Response
                      telem-edge.smartscreen.microsoft.com
                      IN CNAME
                      tm-prod-wd-csp-edge.trafficmanager.net
                      tm-prod-wd-csp-edge.trafficmanager.net
                      IN CNAME
                      prod-agic-uw-3.ukwest.cloudapp.azure.com
                      prod-agic-uw-3.ukwest.cloudapp.azure.com
                      IN A
                      51.11.108.188
                    • flag-us
                      DNS
                      telem-edge.smartscreen.microsoft.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      telem-edge.smartscreen.microsoft.com
                      IN Unknown
                      Response
                      telem-edge.smartscreen.microsoft.com
                      IN CNAME
                      tm-prod-wd-csp-edge.trafficmanager.net
                      tm-prod-wd-csp-edge.trafficmanager.net
                      IN CNAME
                      prod-agic-uw-3.ukwest.cloudapp.azure.com
                    • flag-us
                      DNS
                      c.s-microsoft.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      c.s-microsoft.com
                      IN A
                      Response
                      c.s-microsoft.com
                      IN CNAME
                      c-s.cms.ms.akadns.net
                      c-s.cms.ms.akadns.net
                      IN CNAME
                      c.s-microsoft.com-c.edgekey.net
                      c.s-microsoft.com-c.edgekey.net
                      IN CNAME
                      e13678.dscg.akamaiedge.net
                      e13678.dscg.akamaiedge.net
                      IN A
                      96.16.110.13
                    • flag-us
                      DNS
                      c.s-microsoft.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      c.s-microsoft.com
                      IN Unknown
                      Response
                      c.s-microsoft.com
                      IN CNAME
                      c-s.cms.ms.akadns.net
                      c-s.cms.ms.akadns.net
                      IN CNAME
                      c.s-microsoft.com-c.edgekey.net
                      c.s-microsoft.com-c.edgekey.net
                      IN CNAME
                      e13678.dscg.akamaiedge.net
                    • flag-us
                      DNS
                      26.165.165.52.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      26.165.165.52.in-addr.arpa
                      IN PTR
                      Response
                    • flag-us
                      DNS
                      133.71.91.104.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      133.71.91.104.in-addr.arpa
                      IN PTR
                      Response
                      133.71.91.104.in-addr.arpa
                      IN PTR
                      a104-91-71-133deploystaticakamaitechnologiescom
                    • flag-us
                      DNS
                      188.108.11.51.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      188.108.11.51.in-addr.arpa
                      IN PTR
                      Response
                    • flag-us
                      DNS
                      206.23.85.13.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      206.23.85.13.in-addr.arpa
                      IN PTR
                      Response
                    • flag-us
                      DNS
                      wcpstatic.microsoft.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      wcpstatic.microsoft.com
                      IN A
                      Response
                      wcpstatic.microsoft.com
                      IN CNAME
                      consentdeliveryfd.azurefd.net
                      consentdeliveryfd.azurefd.net
                      IN CNAME
                      firstparty-azurefd-prod.trafficmanager.net
                      firstparty-azurefd-prod.trafficmanager.net
                      IN CNAME
                      shed.dual-low.part-0036.t-0009.t-msedge.net
                      shed.dual-low.part-0036.t-0009.t-msedge.net
                      IN CNAME
                      part-0036.t-0009.t-msedge.net
                      part-0036.t-0009.t-msedge.net
                      IN A
                      13.107.246.64
                      part-0036.t-0009.t-msedge.net
                      IN A
                      13.107.213.64
                    • flag-us
                      DNS
                      wcpstatic.microsoft.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      wcpstatic.microsoft.com
                      IN Unknown
                      Response
                      wcpstatic.microsoft.com
                      IN CNAME
                      consentdeliveryfd.azurefd.net
                      consentdeliveryfd.azurefd.net
                      IN CNAME
                      firstparty-azurefd-prod.trafficmanager.net
                      firstparty-azurefd-prod.trafficmanager.net
                      IN CNAME
                      shed.dual-low.part-0036.t-0009.t-msedge.net
                      shed.dual-low.part-0036.t-0009.t-msedge.net
                      IN CNAME
                      part-0036.t-0009.t-msedge.net
                    • flag-us
                      DNS
                      196.249.167.52.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      196.249.167.52.in-addr.arpa
                      IN PTR
                      Response
                    • flag-us
                      DNS
                      0.205.248.87.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      0.205.248.87.in-addr.arpa
                      IN PTR
                      Response
                      0.205.248.87.in-addr.arpa
                      IN PTR
                      https-87-248-205-0lgwllnwnet
                    • flag-us
                      DNS
                      81.171.91.138.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      81.171.91.138.in-addr.arpa
                      IN PTR
                      Response
                    • flag-us
                      DNS
                      161.128.123.92.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      161.128.123.92.in-addr.arpa
                      IN PTR
                      Response
                      161.128.123.92.in-addr.arpa
                      IN PTR
                      a92-123-128-161deploystaticakamaitechnologiescom
                    • flag-us
                      DNS
                      79.121.231.20.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      79.121.231.20.in-addr.arpa
                      IN PTR
                      Response
                    • flag-us
                      DNS
                      0.204.248.87.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      0.204.248.87.in-addr.arpa
                      IN PTR
                      Response
                      0.204.248.87.in-addr.arpa
                      IN PTR
                      https-87-248-204-0lhrllnwnet
                    • flag-us
                      DNS
                      181.128.123.92.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      181.128.123.92.in-addr.arpa
                      IN PTR
                      Response
                      181.128.123.92.in-addr.arpa
                      IN PTR
                      a92-123-128-181deploystaticakamaitechnologiescom
                    • flag-us
                      DNS
                      181.128.123.92.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      181.128.123.92.in-addr.arpa
                      IN PTR
                    • flag-us
                      DNS
                      181.128.123.92.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      181.128.123.92.in-addr.arpa
                      IN PTR
                    • flag-us
                      DNS
                      tse1.mm.bing.net
                      Remote address:
                      8.8.8.8:53
                      Request
                      tse1.mm.bing.net
                      IN A
                      Response
                      tse1.mm.bing.net
                      IN CNAME
                      mm-mm.bing.net.trafficmanager.net
                      mm-mm.bing.net.trafficmanager.net
                      IN CNAME
                      dual-a-0001.a-msedge.net
                      dual-a-0001.a-msedge.net
                      IN A
                      204.79.197.200
                      dual-a-0001.a-msedge.net
                      IN A
                      13.107.21.200
                    • flag-us
                      GET
                      https://tse1.mm.bing.net/th?id=OADD2.10239340418555_1KV8ALUFBH6DDF1AN&pid=21.2&w=1920&h=1080&c=4
                      Remote address:
                      204.79.197.200:443
                      Request
                      GET /th?id=OADD2.10239340418555_1KV8ALUFBH6DDF1AN&pid=21.2&w=1920&h=1080&c=4 HTTP/2.0
                      host: tse1.mm.bing.net
                      accept: */*
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      Response
                      HTTP/2.0 200
                      cache-control: public, max-age=2592000
                      content-length: 448474
                      content-type: image/jpeg
                      x-cache: TCP_HIT
                      access-control-allow-origin: *
                      access-control-allow-headers: *
                      access-control-allow-methods: GET, POST, OPTIONS
                      timing-allow-origin: *
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
                      x-msedge-ref: Ref A: DA4DDB0159094443B0BD810ECBFDD529 Ref B: LON04EDGE1121 Ref C: 2024-03-12T01:08:08Z
                      date: Tue, 12 Mar 2024 01:08:07 GMT
                    • flag-us
                      GET
                      https://tse1.mm.bing.net/th?id=OADD2.10239317301530_18PVHZ040UYOWJ1A4&pid=21.2&w=1080&h=1920&c=4
                      Remote address:
                      204.79.197.200:443
                      Request
                      GET /th?id=OADD2.10239317301530_18PVHZ040UYOWJ1A4&pid=21.2&w=1080&h=1920&c=4 HTTP/2.0
                      host: tse1.mm.bing.net
                      accept: */*
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      Response
                      HTTP/2.0 200
                      cache-control: public, max-age=2592000
                      content-length: 391164
                      content-type: image/jpeg
                      x-cache: TCP_HIT
                      access-control-allow-origin: *
                      access-control-allow-headers: *
                      access-control-allow-methods: GET, POST, OPTIONS
                      timing-allow-origin: *
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
                      x-msedge-ref: Ref A: 9DFDD3E7C0124A549677CCE8390FE117 Ref B: LON04EDGE1121 Ref C: 2024-03-12T01:08:08Z
                      date: Tue, 12 Mar 2024 01:08:07 GMT
                    • flag-us
                      GET
                      https://tse1.mm.bing.net/th?id=OADD2.10239317301097_12A5KDJOE91WSRBSS&pid=21.2&w=1920&h=1080&c=4
                      Remote address:
                      204.79.197.200:443
                      Request
                      GET /th?id=OADD2.10239317301097_12A5KDJOE91WSRBSS&pid=21.2&w=1920&h=1080&c=4 HTTP/2.0
                      host: tse1.mm.bing.net
                      accept: */*
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      Response
                      HTTP/2.0 200
                      cache-control: public, max-age=2592000
                      content-length: 466306
                      content-type: image/jpeg
                      x-cache: TCP_HIT
                      access-control-allow-origin: *
                      access-control-allow-headers: *
                      access-control-allow-methods: GET, POST, OPTIONS
                      timing-allow-origin: *
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
                      x-msedge-ref: Ref A: CE9A228CBBAD4D808E6FF9BB1535453C Ref B: LON04EDGE1121 Ref C: 2024-03-12T01:08:08Z
                      date: Tue, 12 Mar 2024 01:08:07 GMT
                    • flag-us
                      GET
                      https://tse1.mm.bing.net/th?id=OADD2.10239339388209_1UI7TWFL2FR2S3CP9&pid=21.2&w=1080&h=1920&c=4
                      Remote address:
                      204.79.197.200:443
                      Request
                      GET /th?id=OADD2.10239339388209_1UI7TWFL2FR2S3CP9&pid=21.2&w=1080&h=1920&c=4 HTTP/2.0
                      host: tse1.mm.bing.net
                      accept: */*
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      Response
                      HTTP/2.0 200
                      cache-control: public, max-age=2592000
                      content-length: 371912
                      content-type: image/jpeg
                      x-cache: TCP_HIT
                      access-control-allow-origin: *
                      access-control-allow-headers: *
                      access-control-allow-methods: GET, POST, OPTIONS
                      timing-allow-origin: *
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
                      x-msedge-ref: Ref A: 7ADA272546B34FE581F63DCCD14682A6 Ref B: LON04EDGE1121 Ref C: 2024-03-12T01:08:08Z
                      date: Tue, 12 Mar 2024 01:08:07 GMT
                    • flag-us
                      GET
                      https://tse1.mm.bing.net/th?id=OADD2.10239339388208_1P9RJKIJ8V43BR17K&pid=21.2&w=1920&h=1080&c=4
                      Remote address:
                      204.79.197.200:443
                      Request
                      GET /th?id=OADD2.10239339388208_1P9RJKIJ8V43BR17K&pid=21.2&w=1920&h=1080&c=4 HTTP/2.0
                      host: tse1.mm.bing.net
                      accept: */*
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      Response
                      HTTP/2.0 200
                      cache-control: public, max-age=2592000
                      content-length: 445169
                      content-type: image/jpeg
                      x-cache: TCP_HIT
                      access-control-allow-origin: *
                      access-control-allow-headers: *
                      access-control-allow-methods: GET, POST, OPTIONS
                      timing-allow-origin: *
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
                      x-msedge-ref: Ref A: 82B2CD0E59994B56980E24C36631B51C Ref B: LON04EDGE1121 Ref C: 2024-03-12T01:08:08Z
                      date: Tue, 12 Mar 2024 01:08:07 GMT
                    • flag-us
                      GET
                      https://tse1.mm.bing.net/th?id=OADD2.10239340418556_19ZNSNV8II35KT0LW&pid=21.2&w=1080&h=1920&c=4
                      Remote address:
                      204.79.197.200:443
                      Request
                      GET /th?id=OADD2.10239340418556_19ZNSNV8II35KT0LW&pid=21.2&w=1080&h=1920&c=4 HTTP/2.0
                      host: tse1.mm.bing.net
                      accept: */*
                      accept-encoding: gzip, deflate, br
                      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
                      Response
                      HTTP/2.0 200
                      cache-control: public, max-age=2592000
                      content-length: 371966
                      content-type: image/jpeg
                      x-cache: TCP_HIT
                      access-control-allow-origin: *
                      access-control-allow-headers: *
                      access-control-allow-methods: GET, POST, OPTIONS
                      timing-allow-origin: *
                      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
                      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
                      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
                      x-msedge-ref: Ref A: F548BA706D8E4413A1097D6001E10BE4 Ref B: LON04EDGE1121 Ref C: 2024-03-12T01:08:10Z
                      date: Tue, 12 Mar 2024 01:08:09 GMT
                    • flag-us
                      DNS
                      123.10.44.20.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      123.10.44.20.in-addr.arpa
                      IN PTR
                      Response
                    • 142.250.178.10:443
                      92 B
                       40 B
                       2
                      1
                    • 51.140.242.104:443
                      nav-edge.smartscreen.microsoft.com
                      tls
                      21.6kB
                       15.2kB
                       42
                      37
                    • 13.107.6.158:443
                      business.bing.com
                      tls
                      2.6kB
                       10.2kB
                       18
                      24
                    • 92.123.241.137:443
                      www.microsoft.com
                      tls
                      2.9kB
                       22.5kB
                       27
                      38
                    • 18.158.88.249:443
                      frookshop-winsive.com
                      tls
                      1.3kB
                       6.3kB
                       13
                      15
                    • 18.158.88.249:443
                      frookshop-winsive.com
                      tls
                      1.2kB
                       6.3kB
                       13
                      15
                    • 18.158.88.249:443
                      frookshop-winsive.com
                      tls
                      2.8kB
                       8.9kB
                       18
                      21
                    • 204.79.197.200:443
                      https://g.bing.com/neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=8c8bda9c3843499ea8c00f67932bec6d&localId=w:AE07C56D-9F7E-DB3B-D18D-2459C76F841B&deviceId=6825825924912662&anid=
                      tls, http2
                      2.1kB
                       10.6kB
                       23
                      20

                      HTTP Request

                      GET https://g.bing.com/neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=8c8bda9c3843499ea8c00f67932bec6d&localId=w:AE07C56D-9F7E-DB3B-D18D-2459C76F841B&deviceId=6825825924912662&anid=

                      HTTP Response

                      204

                      HTTP Request

                      GET https://g.bing.com/neg/0?action=emptycreative&adUnitId=11730597&publisherId=251978541&rid=8c8bda9c3843499ea8c00f67932bec6d&localId=w:AE07C56D-9F7E-DB3B-D18D-2459C76F841B&deviceId=6825825924912662&anid=

                      HTTP Response

                      204

                      HTTP Request

                      GET https://g.bing.com/neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=8c8bda9c3843499ea8c00f67932bec6d&localId=w:AE07C56D-9F7E-DB3B-D18D-2459C76F841B&deviceId=6825825924912662&anid=

                      HTTP Response

                      204
                    • 13.89.179.12:443
                      https://nw-umwatson.events.data.microsoft.com/Telemetry.Request
                      tls, http
                      6.0kB
                       7.7kB
                       15
                      12

                      HTTP Request

                      POST https://nw-umwatson.events.data.microsoft.com/Telemetry.Request

                      HTTP Response

                      200
                    • 104.91.71.133:443
                      bzib.nelreports.net
                      tls
                      2.5kB
                       5.9kB
                       13
                      15
                    • 13.107.246.64:443
                      edgestatic.azureedge.net
                      tls
                      1.7kB
                       6.6kB
                       10
                      10
                    • 13.107.246.64:443
                      edgestatic.azureedge.net
                      tls
                      102.2kB
                       4.4MB
                       2003
                      3146
                    • 13.107.246.64:443
                      edgestatic.azureedge.net
                      tls
                      1.6kB
                       7.8kB
                       11
                      12
                    • 51.11.108.188:443
                      telem-edge.smartscreen.microsoft.com
                      tls
                      4.0kB
                       8.0kB
                       15
                      19
                    • 13.107.253.64:443
                      92 B
                       40 B
                       2
                      1
                    • 13.107.246.64:443
                      edgestatic.azureedge.net
                      tls
                      7.6kB
                       270.7kB
                       117
                      218
                    • 13.107.246.64:443
                      wcpstatic.microsoft.com
                      tls
                      5.0kB
                       91.0kB
                       66
                      77
                    • 92.123.128.161:443
                      www.bing.com
                      tls
                      1.1kB
                       5.2kB
                       10
                      13
                    • 92.123.128.181:443
                      www.bing.com
                      tls
                      1.3kB
                       1.2kB
                       8
                      8
                    • 204.79.197.200:443
                      tse1.mm.bing.net
                      tls, http2
                      1.2kB
                       8.1kB
                       16
                      13
                    • 204.79.197.200:443
                      https://tse1.mm.bing.net/th?id=OADD2.10239340418556_19ZNSNV8II35KT0LW&pid=21.2&w=1080&h=1920&c=4
                      tls, http2
                      95.0kB
                       2.6MB
                       1888
                      1884

                      HTTP Request

                      GET https://tse1.mm.bing.net/th?id=OADD2.10239340418555_1KV8ALUFBH6DDF1AN&pid=21.2&w=1920&h=1080&c=4

                      HTTP Request

                      GET https://tse1.mm.bing.net/th?id=OADD2.10239317301530_18PVHZ040UYOWJ1A4&pid=21.2&w=1080&h=1920&c=4

                      HTTP Request

                      GET https://tse1.mm.bing.net/th?id=OADD2.10239317301097_12A5KDJOE91WSRBSS&pid=21.2&w=1920&h=1080&c=4

                      HTTP Request

                      GET https://tse1.mm.bing.net/th?id=OADD2.10239339388209_1UI7TWFL2FR2S3CP9&pid=21.2&w=1080&h=1920&c=4

                      HTTP Request

                      GET https://tse1.mm.bing.net/th?id=OADD2.10239339388208_1P9RJKIJ8V43BR17K&pid=21.2&w=1920&h=1080&c=4

                      HTTP Response

                      200

                      HTTP Response

                      200

                      HTTP Response

                      200

                      HTTP Response

                      200

                      HTTP Response

                      200

                      HTTP Request

                      GET https://tse1.mm.bing.net/th?id=OADD2.10239340418556_19ZNSNV8II35KT0LW&pid=21.2&w=1080&h=1920&c=4

                      HTTP Response

                      200
                    • 204.79.197.200:443
                      tse1.mm.bing.net
                      tls, http2
                      1.2kB
                       8.1kB
                       16
                      14
                    • 204.79.197.200:443
                      tse1.mm.bing.net
                      tls, http2
                      1.2kB
                       8.1kB
                       16
                      14
                    • 204.79.197.200:443
                      tse1.mm.bing.net
                      tls, http2
                      1.2kB
                       8.1kB
                       16
                      14
                    • 8.8.8.8:53
                      nav-edge.smartscreen.microsoft.com
                      dns
                      80 B
                       199 B
                       1
                      1

                      DNS Request

                      nav-edge.smartscreen.microsoft.com

                      DNS Response

                      51.140.242.104

                    • 8.8.8.8:53
                      nav-edge.smartscreen.microsoft.com
                      dns
                      80 B
                       243 B
                       1
                      1

                      DNS Request

                      nav-edge.smartscreen.microsoft.com

                    • 8.8.8.8:53
                      business.bing.com
                      dns
                      63 B
                       144 B
                       1
                      1

                      DNS Request

                      business.bing.com

                      DNS Response

                      13.107.6.158

                    • 8.8.8.8:53
                      business.bing.com
                      dns
                      63 B
                       171 B
                       1
                      1

                      DNS Request

                      business.bing.com

                    • 8.8.8.8:53
                      www.microsoft.com
                      dns
                      63 B
                       230 B
                       1
                      1

                      DNS Request

                      www.microsoft.com

                      DNS Response

                      92.123.241.137

                    • 8.8.8.8:53
                      www.microsoft.com
                      dns
                      63 B
                       230 B
                       1
                      1

                      DNS Request

                      www.microsoft.com

                      DNS Response

                      92.123.241.137

                    • 8.8.8.8:53
                      www.microsoft.com
                      dns
                      63 B
                       275 B
                       1
                      1

                      DNS Request

                      www.microsoft.com

                    • 8.8.8.8:53
                      68.159.190.20.in-addr.arpa
                      dns
                      72 B
                       158 B
                       1
                      1

                      DNS Request

                      68.159.190.20.in-addr.arpa

                    • 8.8.8.8:53
                      114.110.16.96.in-addr.arpa
                      dns
                      72 B
                       137 B
                       1
                      1

                      DNS Request

                      114.110.16.96.in-addr.arpa

                    • 8.8.8.8:53
                      frookshop-winsive.com
                      dns
                      67 B
                       83 B
                       1
                      1

                      DNS Request

                      frookshop-winsive.com

                      DNS Response

                      18.158.88.249

                    • 8.8.8.8:53
                      frookshop-winsive.com
                      dns
                      67 B
                       1

                      DNS Request

                      frookshop-winsive.com

                    • 8.8.8.8:53
                      frookshop-winsive.com
                      dns
                      67 B
                       83 B
                       1
                      1

                      DNS Request

                      frookshop-winsive.com

                      DNS Response

                      18.158.88.249

                    • 8.8.8.8:53
                      www.microsoft.com
                      dns
                      63 B
                       1

                      DNS Request

                      www.microsoft.com

                    • 8.8.8.8:53
                      104.242.140.51.in-addr.arpa
                      dns
                      73 B
                       147 B
                       1
                      1

                      DNS Request

                      104.242.140.51.in-addr.arpa

                    • 8.8.8.8:53
                      137.241.123.92.in-addr.arpa
                      dns
                      73 B
                       139 B
                       1
                      1

                      DNS Request

                      137.241.123.92.in-addr.arpa

                    • 8.8.8.8:53
                      www.microsoft.com
                      dns
                      63 B
                       230 B
                       1
                      1

                      DNS Request

                      www.microsoft.com

                      DNS Response

                      92.123.241.137

                    • 8.8.8.8:53
                      249.88.158.18.in-addr.arpa
                      dns
                      72 B
                       138 B
                       1
                      1

                      DNS Request

                      249.88.158.18.in-addr.arpa

                    • 8.8.8.8:53
                      95.221.229.192.in-addr.arpa
                      dns
                      73 B
                       144 B
                       1
                      1

                      DNS Request

                      95.221.229.192.in-addr.arpa

                    • 8.8.8.8:53
                      194.178.17.96.in-addr.arpa
                      dns
                      72 B
                       137 B
                       1
                      1

                      DNS Request

                      194.178.17.96.in-addr.arpa

                    • 8.8.8.8:53
                      9.228.82.20.in-addr.arpa
                      dns
                      70 B
                       156 B
                       1
                      1

                      DNS Request

                      9.228.82.20.in-addr.arpa

                    • 8.8.8.8:53
                      g.bing.com
                      dns
                      56 B
                       158 B
                       1
                      1

                      DNS Request

                      g.bing.com

                      DNS Response

                      204.79.197.200
                      13.107.21.200

                    • 8.8.8.8:53
                      200.197.79.204.in-addr.arpa
                      dns
                      73 B
                       106 B
                       1
                      1

                      DNS Request

                      200.197.79.204.in-addr.arpa

                    • 8.8.8.8:53
                      41.110.16.96.in-addr.arpa
                      dns
                      71 B
                       135 B
                       1
                      1

                      DNS Request

                      41.110.16.96.in-addr.arpa

                    • 8.8.8.8:53
                      26.35.223.20.in-addr.arpa
                      dns
                      71 B
                       157 B
                       1
                      1

                      DNS Request

                      26.35.223.20.in-addr.arpa

                    • 8.8.8.8:53
                      232.168.11.51.in-addr.arpa
                      dns
                      72 B
                       158 B
                       1
                      1

                      DNS Request

                      232.168.11.51.in-addr.arpa

                    • 8.8.8.8:53
                      138.32.126.40.in-addr.arpa
                      dns
                      72 B
                       158 B
                       1
                      1

                      DNS Request

                      138.32.126.40.in-addr.arpa

                    • 8.8.8.8:53
                      nw-umwatson.events.data.microsoft.com
                      dns
                      83 B
                       214 B
                       1
                      1

                      DNS Request

                      nw-umwatson.events.data.microsoft.com

                      DNS Response

                      13.89.179.12

                    • 8.8.8.8:53
                      12.179.89.13.in-addr.arpa
                      dns
                      71 B
                       145 B
                       1
                      1

                      DNS Request

                      12.179.89.13.in-addr.arpa

                    • 8.8.8.8:53
                      bzib.nelreports.net
                      dns
                      65 B
                       172 B
                       1
                      1

                      DNS Request

                      bzib.nelreports.net

                      DNS Response

                      104.91.71.133
                      104.91.71.140

                    • 8.8.8.8:53
                      bzib.nelreports.net
                      dns
                      65 B
                       204 B
                       1
                      1

                      DNS Request

                      bzib.nelreports.net

                    • 8.8.8.8:53
                      edgestatic.azureedge.net
                      dns
                      70 B
                       245 B
                       1
                      1

                      DNS Request

                      edgestatic.azureedge.net

                      DNS Response

                      13.107.246.64
                      13.107.213.64

                    • 8.8.8.8:53
                      edgestatic.azureedge.net
                      dns
                      70 B
                       273 B
                       1
                      1

                      DNS Request

                      edgestatic.azureedge.net

                    • 8.8.8.8:53
                      telem-edge.smartscreen.microsoft.com
                      dns
                      82 B
                       201 B
                       1
                      1

                      DNS Request

                      telem-edge.smartscreen.microsoft.com

                      DNS Response

                      51.11.108.188

                    • 8.8.8.8:53
                      telem-edge.smartscreen.microsoft.com
                      dns
                      82 B
                       245 B
                       1
                      1

                      DNS Request

                      telem-edge.smartscreen.microsoft.com

                    • 8.8.8.8:53
                      c.s-microsoft.com
                      dns
                      63 B
                       193 B
                       1
                      1

                      DNS Request

                      c.s-microsoft.com

                      DNS Response

                      96.16.110.13

                    • 8.8.8.8:53
                      c.s-microsoft.com
                      dns
                      63 B
                       238 B
                       1
                      1

                      DNS Request

                      c.s-microsoft.com

                    • 8.8.8.8:53
                      26.165.165.52.in-addr.arpa
                      dns
                      72 B
                       146 B
                       1
                      1

                      DNS Request

                      26.165.165.52.in-addr.arpa

                    • 8.8.8.8:53
                      133.71.91.104.in-addr.arpa
                      dns
                      72 B
                       137 B
                       1
                      1

                      DNS Request

                      133.71.91.104.in-addr.arpa

                    • 8.8.8.8:53
                      188.108.11.51.in-addr.arpa
                      dns
                      72 B
                       158 B
                       1
                      1

                      DNS Request

                      188.108.11.51.in-addr.arpa

                    • 8.8.8.8:53
                      206.23.85.13.in-addr.arpa
                      dns
                      71 B
                       145 B
                       1
                      1

                      DNS Request

                      206.23.85.13.in-addr.arpa

                    • 8.8.8.8:53
                      wcpstatic.microsoft.com
                      dns
                      69 B
                       265 B
                       1
                      1

                      DNS Request

                      wcpstatic.microsoft.com

                      DNS Response

                      13.107.246.64
                      13.107.213.64

                    • 8.8.8.8:53
                      wcpstatic.microsoft.com
                      dns
                      69 B
                       280 B
                       1
                      1

                      DNS Request

                      wcpstatic.microsoft.com

                    • 224.0.0.251:5353
                      204 B
                       3
                    • 8.8.8.8:53
                      196.249.167.52.in-addr.arpa
                      dns
                      73 B
                       147 B
                       1
                      1

                      DNS Request

                      196.249.167.52.in-addr.arpa

                    • 8.8.8.8:53
                      0.205.248.87.in-addr.arpa
                      dns
                      71 B
                       116 B
                       1
                      1

                      DNS Request

                      0.205.248.87.in-addr.arpa

                    • 8.8.8.8:53
                      81.171.91.138.in-addr.arpa
                      dns
                      72 B
                       146 B
                       1
                      1

                      DNS Request

                      81.171.91.138.in-addr.arpa

                    • 8.8.8.8:53
                      161.128.123.92.in-addr.arpa
                      dns
                      73 B
                       139 B
                       1
                      1

                      DNS Request

                      161.128.123.92.in-addr.arpa

                    • 8.8.8.8:53
                      79.121.231.20.in-addr.arpa
                      dns
                      72 B
                       158 B
                       1
                      1

                      DNS Request

                      79.121.231.20.in-addr.arpa

                    • 8.8.8.8:53
                      0.204.248.87.in-addr.arpa
                      dns
                      71 B
                       116 B
                       1
                      1

                      DNS Request

                      0.204.248.87.in-addr.arpa

                    • 8.8.8.8:53
                      181.128.123.92.in-addr.arpa
                      dns
                      219 B
                       139 B
                       3
                      1

                      DNS Request

                      181.128.123.92.in-addr.arpa

                      DNS Request

                      181.128.123.92.in-addr.arpa

                      DNS Request

                      181.128.123.92.in-addr.arpa

                    • 8.8.8.8:53
                      tse1.mm.bing.net
                      dns
                      62 B
                       173 B
                       1
                      1

                      DNS Request

                      tse1.mm.bing.net

                      DNS Response

                      204.79.197.200
                      13.107.21.200

                    • 8.8.8.8:53
                      123.10.44.20.in-addr.arpa
                      dns
                      71 B
                       145 B
                       1
                      1

                      DNS Request

                      123.10.44.20.in-addr.arpa

                    MITRE ATT&CK Matrix

                    Replay Monitor

                    Loading Replay Monitor...

                    Downloads

                    We care about your privacy.

                    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.