Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
139s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
29/03/2024, 05:16 UTC
Static task
static1
Behavioral task
behavioral1
Sample
195e4305d5384c4067a071a8141b737b_JaffaCakes118.html
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
195e4305d5384c4067a071a8141b737b_JaffaCakes118.html
Resource
win10v2004-20240226-en
General
-
Target
195e4305d5384c4067a071a8141b737b_JaffaCakes118.html
-
Size
108KB
-
MD5
195e4305d5384c4067a071a8141b737b
-
SHA1
d436c503eaa4f3855fa212d5c965d1c51d8cd711
-
SHA256
a60cc42093f22507cc0cf1d219624e9a3b074fc4add180733f7cf8614c750f32
-
SHA512
58bc9f61e42d58292b2fbefb029ba02911bdb22857fabcec57fff3e0971bbad9fe7ac9d6735254f5642e7bd131840d10ef0ba91bef0d0aa64a28378a9943d48b
-
SSDEEP
3072:xs/KkyxQAe5LfGXsE63jiIZbh4GcB/VGqsN7tlaps2s2/m:xs/cQAe5LfmsE6x
Malware Config
Signatures
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\195e4305d5384c4067a071a8141b737b_JaffaCakes118.html1⤵PID:2032
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=17 --mojo-platform-channel-handle=5680 --field-trial-handle=3084,i,4016110471176367543,14287608422419064331,262144 --variations-seed-version /prefetch:11⤵PID:3120
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=18 --mojo-platform-channel-handle=5004 --field-trial-handle=3084,i,4016110471176367543,14287608422419064331,262144 --variations-seed-version /prefetch:11⤵PID:1668
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4184 --field-trial-handle=3084,i,4016110471176367543,14287608422419064331,262144 --variations-seed-version /prefetch:81⤵PID:4784
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=20 --mojo-platform-channel-handle=5308 --field-trial-handle=3084,i,4016110471176367543,14287608422419064331,262144 --variations-seed-version /prefetch:11⤵PID:2400
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --no-appcompat-clear --mojo-platform-channel-handle=5776 --field-trial-handle=3084,i,4016110471176367543,14287608422419064331,262144 --variations-seed-version /prefetch:81⤵PID:3984
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=22 --mojo-platform-channel-handle=5368 --field-trial-handle=3084,i,4016110471176367543,14287608422419064331,262144 --variations-seed-version /prefetch:11⤵PID:3044
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=23 --mojo-platform-channel-handle=4896 --field-trial-handle=3084,i,4016110471176367543,14287608422419064331,262144 --variations-seed-version /prefetch:11⤵PID:3804
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=24 --mojo-platform-channel-handle=5536 --field-trial-handle=3084,i,4016110471176367543,14287608422419064331,262144 --variations-seed-version /prefetch:11⤵PID:4696
Network
-
Remote address:8.8.8.8:53Requestnav-edge.smartscreen.microsoft.comIN AResponsenav-edge.smartscreen.microsoft.comIN CNAMEtm-prod-wd-csp-edge.trafficmanager.nettm-prod-wd-csp-edge.trafficmanager.netIN CNAMEprod-agic-us-1.uksouth.cloudapp.azure.comprod-agic-us-1.uksouth.cloudapp.azure.comIN A13.87.96.169
-
Remote address:8.8.8.8:53Requestnav-edge.smartscreen.microsoft.comIN UnknownResponsenav-edge.smartscreen.microsoft.comIN CNAMEtm-prod-wd-csp-edge.trafficmanager.nettm-prod-wd-csp-edge.trafficmanager.netIN CNAMEprod-agic-us-2.uksouth.cloudapp.azure.com
-
Remote address:8.8.8.8:53Requestbusiness.bing.comIN AResponsebusiness.bing.comIN CNAMEbusiness-bing-com.b-0005.b-msedge.netbusiness-bing-com.b-0005.b-msedge.netIN CNAMEb-0005.b-msedge.netb-0005.b-msedge.netIN A13.107.6.158
-
Remote address:8.8.8.8:53Requestbusiness.bing.comIN UnknownResponsebusiness.bing.comIN CNAMEbusiness-bing-com.b-0005.b-msedge.netbusiness-bing-com.b-0005.b-msedge.netIN CNAMEb-0005.b-msedge.net
-
Remote address:8.8.8.8:53Requestwww.blogger.comIN AResponsewww.blogger.comIN CNAMEblogger.l.google.comblogger.l.google.comIN A172.217.16.137
-
Remote address:8.8.8.8:53Requestwww.blogger.comIN UnknownResponsewww.blogger.comIN CNAMEblogger.l.google.com
-
Remote address:8.8.8.8:53Requestdel.icio.usIN AResponsedel.icio.usIN CNAMEicio.usicio.usIN A107.181.87.5
-
Remote address:8.8.8.8:53Requestdel.icio.usIN UnknownResponsedel.icio.usIN CNAMEicio.us
-
Remote address:8.8.8.8:53Requestimg1.steemit.comIN AResponseimg1.steemit.comIN CNAMEdualstack.imageredirect-elb-983726977.us-east-1.elb.amazonaws.comdualstack.imageredirect-elb-983726977.us-east-1.elb.amazonaws.comIN A54.234.125.139dualstack.imageredirect-elb-983726977.us-east-1.elb.amazonaws.comIN A44.205.48.33
-
Remote address:8.8.8.8:53Requestimg1.steemit.comIN UnknownResponseimg1.steemit.comIN CNAMEdualstack.imageredirect-elb-983726977.us-east-1.elb.amazonaws.com
-
Remote address:8.8.8.8:53Requestwww.microsoft.comIN AResponsewww.microsoft.comIN CNAMEwww.microsoft.com-c-3.edgekey.netwww.microsoft.com-c-3.edgekey.netIN CNAMEwww.microsoft.com-c-3.edgekey.net.globalredir.akadns.netwww.microsoft.com-c-3.edgekey.net.globalredir.akadns.netIN CNAMEe13678.dscb.akamaiedge.nete13678.dscb.akamaiedge.netIN A92.123.241.137
-
Remote address:8.8.8.8:53Requestwww.microsoft.comIN AResponsewww.microsoft.comIN CNAMEwww.microsoft.com-c-3.edgekey.netwww.microsoft.com-c-3.edgekey.netIN CNAMEwww.microsoft.com-c-3.edgekey.net.globalredir.akadns.netwww.microsoft.com-c-3.edgekey.net.globalredir.akadns.netIN CNAMEe13678.dscb.akamaiedge.nete13678.dscb.akamaiedge.netIN A92.123.241.137
-
Remote address:8.8.8.8:53Requestwww.microsoft.comIN UnknownResponsewww.microsoft.comIN CNAMEwww.microsoft.com-c-3.edgekey.netwww.microsoft.com-c-3.edgekey.netIN CNAMEwww.microsoft.com-c-3.edgekey.net.globalredir.akadns.netwww.microsoft.com-c-3.edgekey.net.globalredir.akadns.netIN CNAMEe13678.dscb.akamaiedge.net
-
Remote address:8.8.8.8:53Requestbzib.nelreports.netIN AResponsebzib.nelreports.netIN CNAMEbzib.nelreports.net.akamaized.netbzib.nelreports.net.akamaized.netIN CNAMEa416.dscd.akamai.neta416.dscd.akamai.netIN A88.221.135.81a416.dscd.akamai.netIN A88.221.134.17
-
Remote address:8.8.8.8:53Requestbzib.nelreports.netIN UnknownResponsebzib.nelreports.netIN CNAMEbzib.nelreports.net.akamaized.netbzib.nelreports.net.akamaized.netIN CNAMEa416.dscd.akamai.net
-
Remote address:8.8.8.8:53Requestcdnjs.cloudflare.comIN AResponsecdnjs.cloudflare.comIN A104.17.24.14cdnjs.cloudflare.comIN A104.17.25.14
-
Remote address:8.8.8.8:53Request152.33.115.104.in-addr.arpaIN PTRResponse152.33.115.104.in-addr.arpaIN PTRa104-115-33-152deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request169.96.87.13.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request137.16.217.172.in-addr.arpaIN PTRResponse137.16.217.172.in-addr.arpaIN PTRfra15s46-in-f91e100net137.16.217.172.in-addr.arpaIN PTRzrh04s06-in-f137�H
-
Remote address:8.8.8.8:53Request139.125.234.54.in-addr.arpaIN PTRResponse139.125.234.54.in-addr.arpaIN PTRec2-54-234-125-139 compute-1 amazonawscom
-
Remote address:8.8.8.8:53Request137.241.123.92.in-addr.arpaIN PTRResponse137.241.123.92.in-addr.arpaIN PTRa92-123-241-137deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Requestmaxcdn.bootstrapcdn.comIN AResponsemaxcdn.bootstrapcdn.comIN A104.18.10.207maxcdn.bootstrapcdn.comIN A104.18.11.207
-
Remote address:8.8.8.8:53Requestmaxcdn.bootstrapcdn.comIN UnknownResponsemaxcdn.bootstrapcdn.comIN Unknownh3h2h �h� &Gh �&Gh�
-
Remote address:8.8.8.8:53Requestapps.identrust.comIN AResponseapps.identrust.comIN CNAMEidentrust.edgesuite.netidentrust.edgesuite.netIN CNAMEa1952.dscq.akamai.neta1952.dscq.akamai.netIN A95.101.143.18a1952.dscq.akamai.netIN A95.101.143.19
-
Remote address:8.8.8.8:53Requestapps.identrust.comIN UnknownResponseapps.identrust.comIN CNAMEidentrust.edgesuite.netidentrust.edgesuite.netIN CNAMEa1952.dscq.akamai.net
-
Remote address:8.8.8.8:53Request2.bp.blogspot.comIN AResponse2.bp.blogspot.comIN CNAMEphotos-ugc.l.googleusercontent.comphotos-ugc.l.googleusercontent.comIN A172.217.18.97
-
Remote address:8.8.8.8:53Request2.bp.blogspot.comIN UnknownResponse2.bp.blogspot.comIN CNAMEphotos-ugc.l.googleusercontent.com
-
Remote address:95.101.143.18:80RequestGET /roots/dstrootcax3.p7c HTTP/1.1
Host: apps.identrust.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.0.0
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
ResponseHTTP/1.1 200 OK
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-Robots-Tag: noindex
Referrer-Policy: same-origin
Last-Modified: Fri, 13 Oct 2023 16:28:31 GMT
ETag: "37d-6079b8c0929c0"
Accept-Ranges: bytes
Content-Length: 893
X-Content-Type-Options: nosniff
X-Frame-Options: sameorigin
Content-Type: application/pkcs7-mime
Cache-Control: max-age=3600
Expires: Fri, 29 Mar 2024 06:16:30 GMT
Date: Fri, 29 Mar 2024 05:16:30 GMT
Connection: keep-alive
-
Remote address:8.8.8.8:53Requestlh4.googleusercontent.comIN AResponselh4.googleusercontent.comIN CNAMEgooglehosted.l.googleusercontent.comgooglehosted.l.googleusercontent.comIN A142.250.178.1
-
Remote address:8.8.8.8:53Requestlh4.googleusercontent.comIN UnknownResponselh4.googleusercontent.comIN CNAMEgooglehosted.l.googleusercontent.com
-
Remote address:8.8.8.8:53Requestwww.microsoft.comIN AResponsewww.microsoft.comIN CNAMEwww.microsoft.com-c-3.edgekey.netwww.microsoft.com-c-3.edgekey.netIN CNAMEwww.microsoft.com-c-3.edgekey.net.globalredir.akadns.netwww.microsoft.com-c-3.edgekey.net.globalredir.akadns.netIN CNAMEe13678.dscb.akamaiedge.nete13678.dscb.akamaiedge.netIN A92.123.241.137
-
Remote address:8.8.8.8:53Request1.bp.blogspot.comIN AResponse1.bp.blogspot.comIN CNAMEphotos-ugc.l.googleusercontent.comphotos-ugc.l.googleusercontent.comIN A172.217.169.65
-
Remote address:8.8.8.8:53Request1.bp.blogspot.comIN UnknownResponse1.bp.blogspot.comIN CNAMEphotos-ugc.l.googleusercontent.com
-
Remote address:8.8.8.8:53Request3.bp.blogspot.comIN AResponse3.bp.blogspot.comIN CNAMEphotos-ugc.l.googleusercontent.comphotos-ugc.l.googleusercontent.comIN A172.217.169.65
-
Remote address:8.8.8.8:53Request3.bp.blogspot.comIN UnknownResponse3.bp.blogspot.comIN CNAMEphotos-ugc.l.googleusercontent.com
-
Remote address:8.8.8.8:53Request5.87.181.107.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request81.135.221.88.in-addr.arpaIN PTRResponse81.135.221.88.in-addr.arpaIN PTRa88-221-135-81deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request207.10.18.104.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request18.143.101.95.in-addr.arpaIN PTRResponse18.143.101.95.in-addr.arpaIN PTRa95-101-143-18deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request97.18.217.172.in-addr.arpaIN PTRResponse97.18.217.172.in-addr.arpaIN PTRzrh04s05-in-f971e100net97.18.217.172.in-addr.arpaIN PTRfra16s42-in-f1�H
-
Remote address:8.8.8.8:53Request58.55.71.13.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request1.178.250.142.in-addr.arpaIN PTRResponse1.178.250.142.in-addr.arpaIN PTRlhr48s27-in-f11e100net
-
Remote address:8.8.8.8:53Request65.169.217.172.in-addr.arpaIN PTRResponse65.169.217.172.in-addr.arpaIN PTRlhr48s09-in-f11e100net
-
Remote address:8.8.8.8:53Request32.169.19.2.in-addr.arpaIN PTRResponse32.169.19.2.in-addr.arpaIN PTRa2-19-169-32deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Requestajax.googleapis.comIN AResponseajax.googleapis.comIN A142.250.200.42
-
Remote address:8.8.8.8:53Requestajax.googleapis.comIN UnknownResponse
-
Remote address:8.8.8.8:53Requestcdnjs.cloudflare.comIN AResponsecdnjs.cloudflare.comIN A104.17.24.14cdnjs.cloudflare.comIN A104.17.25.14
-
Remote address:8.8.8.8:53Requestcdnjs.cloudflare.comIN AResponsecdnjs.cloudflare.comIN A104.17.25.14cdnjs.cloudflare.comIN A104.17.24.14
-
Remote address:8.8.8.8:53Requestcdnjs.cloudflare.comIN UnknownResponsecdnjs.cloudflare.comIN Unknownh3h2hh &Gh&Gh
-
Remote address:8.8.8.8:53Requestrawgit.comIN AResponserawgit.comIN A172.67.217.78rawgit.comIN A104.21.24.61
-
Remote address:8.8.8.8:53Requestrawgit.comIN UnknownResponserawgit.comIN Unknownh3h2h=�C�N &G00�C�N&G01h=
-
Remote address:8.8.8.8:53Requestedgestatic.azureedge.netIN AResponseedgestatic.azureedge.netIN CNAMEedgestatic.afd.azureedge.netedgestatic.afd.azureedge.netIN CNAMEazureedge-t-prod.trafficmanager.netazureedge-t-prod.trafficmanager.netIN CNAMEshed.dual-low.part-0036.t-0009.t-msedge.netshed.dual-low.part-0036.t-0009.t-msedge.netIN CNAMEpart-0036.t-0009.t-msedge.netpart-0036.t-0009.t-msedge.netIN A13.107.246.64part-0036.t-0009.t-msedge.netIN A13.107.213.64
-
Remote address:8.8.8.8:53Requestedgestatic.azureedge.netIN UnknownResponseedgestatic.azureedge.netIN CNAMEedgestatic.afd.azureedge.netedgestatic.afd.azureedge.netIN CNAMEazureedge-t-prod.trafficmanager.netazureedge-t-prod.trafficmanager.netIN CNAMEshed.dual-low.part-0036.t-0009.t-msedge.netshed.dual-low.part-0036.t-0009.t-msedge.netIN CNAMEpart-0036.t-0009.t-msedge.net
-
Remote address:8.8.8.8:53Requestc.s-microsoft.comIN AResponsec.s-microsoft.comIN CNAMEc-s.cms.ms.akadns.netc-s.cms.ms.akadns.netIN CNAMEc.s-microsoft.com-c.edgekey.netc.s-microsoft.com-c.edgekey.netIN CNAMEe13678.dscg.akamaiedge.nete13678.dscg.akamaiedge.netIN A104.115.33.219
-
Remote address:8.8.8.8:53Requestc.s-microsoft.comIN UnknownResponsec.s-microsoft.comIN CNAMEc-s.cms.ms.akadns.netc-s.cms.ms.akadns.netIN CNAMEc.s-microsoft.com-c.edgekey.netc.s-microsoft.com-c.edgekey.netIN CNAMEe13678.dscg.akamaiedge.net
-
Remote address:8.8.8.8:53Request4.bp.blogspot.comIN AResponse4.bp.blogspot.comIN CNAMEphotos-ugc.l.googleusercontent.comphotos-ugc.l.googleusercontent.comIN A172.217.169.65
-
Remote address:8.8.8.8:53Request4.bp.blogspot.comIN UnknownResponse4.bp.blogspot.comIN CNAMEphotos-ugc.l.googleusercontent.com
-
Remote address:8.8.8.8:53Request41.134.221.88.in-addr.arpaIN PTRResponse41.134.221.88.in-addr.arpaIN PTRa88-221-134-41deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request42.200.250.142.in-addr.arpaIN PTRResponse42.200.250.142.in-addr.arpaIN PTRlhr48s30-in-f101e100net
-
Remote address:8.8.8.8:53Request14.25.17.104.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request78.217.67.172.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request64.246.107.13.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Requestwcpstatic.microsoft.comIN AResponsewcpstatic.microsoft.comIN CNAMEconsentdeliveryfd.azurefd.netconsentdeliveryfd.azurefd.netIN CNAMEfirstparty-azurefd-prod.trafficmanager.netfirstparty-azurefd-prod.trafficmanager.netIN CNAMEshed.dual-low.part-0036.t-0009.t-msedge.netshed.dual-low.part-0036.t-0009.t-msedge.netIN CNAMEpart-0036.t-0009.t-msedge.netpart-0036.t-0009.t-msedge.netIN A13.107.246.64part-0036.t-0009.t-msedge.netIN A13.107.213.64
-
Remote address:8.8.8.8:53Requestwcpstatic.microsoft.comIN UnknownResponsewcpstatic.microsoft.comIN CNAMEconsentdeliveryfd.azurefd.netconsentdeliveryfd.azurefd.netIN CNAMEfirstparty-azurefd-prod.trafficmanager.netfirstparty-azurefd-prod.trafficmanager.netIN CNAMEshed.dual-low.part-0036.t-0009.t-msedge.netshed.dual-low.part-0036.t-0009.t-msedge.netIN CNAMEpart-0036.t-0009.t-msedge.net
-
Remote address:8.8.8.8:53Request14.160.190.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request95.221.229.192.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Requestnw-umwatson.events.data.microsoft.comIN AResponsenw-umwatson.events.data.microsoft.comIN CNAMEblobcollector.events.data.trafficmanager.netblobcollector.events.data.trafficmanager.netIN CNAMEonedsblobprdcus15.centralus.cloudapp.azure.comonedsblobprdcus15.centralus.cloudapp.azure.comIN A52.182.143.212
-
Remote address:52.182.143.212:443RequestPOST /Telemetry.Request HTTP/1.1
Connection: Keep-Alive
Content-Type: application/xml
User-Agent: Crashpad/0.8.0 WinHTTP/10.0.19041.1151 Windows_NT/10.0.19041.1202 (x64)
MSA_DeviceTicket: t=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&p=
Content-Length: 3685
Host: nw-umwatson.events.data.microsoft.com
ResponseHTTP/1.1 200 200 OK
Content-Type: text/xml
Server: Microsoft-HTTPAPI/2.0
Strict-Transport-Security: max-age=31536000
Date: Fri, 29 Mar 2024 05:16:50 GMT
-
Remote address:8.8.8.8:53Request212.143.182.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Requestajax.googleapis.comIN AResponseajax.googleapis.comIN A142.250.185.202
-
Remote address:8.8.8.8:53Requestlh6.googleusercontent.comIN AResponselh6.googleusercontent.comIN CNAMEgooglehosted.l.googleusercontent.comgooglehosted.l.googleusercontent.comIN A142.250.178.1
-
Remote address:8.8.8.8:53Requestlh6.googleusercontent.comIN UnknownResponselh6.googleusercontent.comIN CNAMEgooglehosted.l.googleusercontent.com
-
Remote address:8.8.8.8:53Requestlh5.googleusercontent.comIN AResponselh5.googleusercontent.comIN CNAMEgooglehosted.l.googleusercontent.comgooglehosted.l.googleusercontent.comIN A216.58.212.161
-
Remote address:8.8.8.8:53Requestlh5.googleusercontent.comIN UnknownResponselh5.googleusercontent.comIN CNAMEgooglehosted.l.googleusercontent.com
-
Remote address:8.8.8.8:53Request78.186.250.142.in-addr.arpaIN PTRResponse78.186.250.142.in-addr.arpaIN PTRfra24s05-in-f141e100net
-
Remote address:8.8.8.8:53Request161.212.58.216.in-addr.arpaIN PTRResponse161.212.58.216.in-addr.arpaIN PTRams15s22-in-f1611e100net161.212.58.216.in-addr.arpaIN PTRfra24s01-in-f1�J161.212.58.216.in-addr.arpaIN PTRams15s22-in-f1�J
-
Remote address:8.8.8.8:53Requestajax.googleapis.comIN AResponseajax.googleapis.comIN A172.217.169.74
-
Remote address:8.8.8.8:53Request103.169.127.40.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request18.31.95.13.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request0.205.248.87.in-addr.arpaIN PTRResponse0.205.248.87.in-addr.arpaIN PTRhttps-87-248-205-0lgwllnwnet
-
Remote address:8.8.8.8:53Requestcode.jquery.comIN AResponsecode.jquery.comIN A151.101.66.137code.jquery.comIN A151.101.194.137code.jquery.comIN A151.101.130.137code.jquery.comIN A151.101.2.137
-
Remote address:8.8.8.8:53Request72.66.18.2.in-addr.arpaIN PTRResponse72.66.18.2.in-addr.arpaIN PTRa2-18-66-72deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Requestcode.jquery.comIN AResponsecode.jquery.comIN A151.101.2.137code.jquery.comIN A151.101.194.137code.jquery.comIN A151.101.66.137code.jquery.comIN A151.101.130.137
-
Remote address:8.8.8.8:53Requestwww.facebook.comIN AResponsewww.facebook.comIN CNAMEstar-mini.c10r.facebook.comstar-mini.c10r.facebook.comIN A157.240.221.35
-
Remote address:8.8.8.8:53Requestwww.facebook.comIN UnknownResponsewww.facebook.comIN CNAMEstar-mini.c10r.facebook.com
-
Remote address:8.8.8.8:53Requestwww.facebook.comIN AResponsewww.facebook.comIN CNAMEstar-mini.c10r.facebook.comstar-mini.c10r.facebook.comIN A157.240.221.35
-
Remote address:8.8.8.8:53Requestwww.facebook.comIN AResponsewww.facebook.comIN CNAMEstar-mini.c10r.facebook.comstar-mini.c10r.facebook.comIN A157.240.221.35
-
Remote address:8.8.8.8:53Requestcdn.elegantthemes.comIN AResponsecdn.elegantthemes.comIN A104.18.198.62cdn.elegantthemes.comIN A104.17.136.62
-
Remote address:8.8.8.8:53Requestcdn.elegantthemes.comIN UnknownResponsecdn.elegantthemes.comIN Unknownh2h�>h�> &Gh�>&Gh�>
-
Remote address:8.8.8.8:53Requestwww.facebook.comIN AResponsewww.facebook.comIN CNAMEstar-mini.c10r.facebook.comstar-mini.c10r.facebook.comIN A157.240.221.35
-
Remote address:8.8.8.8:53Requestwww.elegantthemes.comIN AResponsewww.elegantthemes.comIN A104.18.198.62www.elegantthemes.comIN A104.17.136.62
-
Remote address:8.8.8.8:53Requestwww.elegantthemes.comIN UnknownResponsewww.elegantthemes.comIN Unknownh2h�>h�> &Gh�>&Gh�>
-
Remote address:8.8.8.8:53Request35.221.240.157.in-addr.arpaIN PTRResponse35.221.240.157.in-addr.arpaIN PTRedge-star-mini-shv-01-lhr8facebookcom
-
Remote address:8.8.8.8:53Request62.198.18.104.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request21.236.111.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Requestc1.popads.netIN AResponsec1.popads.netIN CNAME1355769017.rsc.cdn77.org1355769017.rsc.cdn77.orgIN A138.199.26.201355769017.rsc.cdn77.orgIN A138.199.26.251355769017.rsc.cdn77.orgIN A143.244.56.8
-
Remote address:8.8.8.8:53Requestc1.popads.netIN AResponsec1.popads.netIN CNAME1355769017.rsc.cdn77.org1355769017.rsc.cdn77.orgIN A138.199.26.241355769017.rsc.cdn77.orgIN A138.199.26.211355769017.rsc.cdn77.orgIN A143.244.56.11
-
Remote address:8.8.8.8:53Request162.66.18.2.in-addr.arpaIN PTRResponse162.66.18.2.in-addr.arpaIN PTRa2-18-66-162deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Requestmaxcdn.bootstrapcdn.comIN AResponsemaxcdn.bootstrapcdn.comIN A104.18.10.207maxcdn.bootstrapcdn.comIN A104.18.11.207
-
Remote address:8.8.8.8:53Requestmaxcdn.bootstrapcdn.comIN AResponsemaxcdn.bootstrapcdn.comIN A104.18.10.207maxcdn.bootstrapcdn.comIN A104.18.11.207
-
Remote address:8.8.8.8:53Request169.117.168.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Requestconnect.facebook.netIN AResponseconnect.facebook.netIN CNAMEscontent.xx.fbcdn.netscontent.xx.fbcdn.netIN A157.240.221.16
-
Remote address:8.8.8.8:53Requestconnect.facebook.netIN AResponseconnect.facebook.netIN CNAMEscontent.xx.fbcdn.netscontent.xx.fbcdn.netIN A157.240.221.16
-
10.5kB 12.6kB 30 26
-
1.9kB 9.9kB 17 22
-
978 B 3.2kB 9 7
-
3.2kB 71.7kB 43 66
-
2.0kB 7.1kB 15 17
-
3.0kB 22.4kB 27 36
-
2.6kB 6.0kB 13 15
-
1.1kB 5.3kB 10 9
-
667 B 1.8kB 8 8
HTTP Request
GET http://apps.identrust.com/roots/dstrootcax3.p7cHTTP Response
200 -
2.5kB 17.6kB 23 28
-
2.9kB 13.4kB 18 23
-
260 B 5
-
4.0kB 38.4kB 45 52
-
2.9kB 38.6kB 37 36
-
260 B 5
-
260 B 5
-
1.9kB 7.6kB 13 11
-
1.5kB 7.6kB 9 11
-
107.6kB 4.4MB 2142 3209
-
10.1kB 273.8kB 163 213
-
4.2kB 91.0kB 52 77
-
260 B 5
-
5.9kB 7.6kB 13 11
HTTP Request
POST https://nw-umwatson.events.data.microsoft.com/Telemetry.RequestHTTP Response
200 -
260 B 5
-
260 B 5
-
46 B 40 B 1 1
-
260 B 5
-
260 B 5
-
260 B 5
-
260 B 5
-
1.1kB 5.1kB 11 11
-
260 B 5
-
1.0kB 3.2kB 8 9
-
2.0kB 5.8kB 15 15
-
2.3kB 16.5kB 19 24
-
260 B 5
-
260 B 5
-
260 B 5
-
260 B 5
-
1.3kB 906 B 7 7
-
260 B 5
-
260 B 5
-
260 B 5
-
208 B 4
-
208 B 4
-
80 B 200 B 1 1
DNS Request
nav-edge.smartscreen.microsoft.com
DNS Response
13.87.96.169
-
80 B 244 B 1 1
DNS Request
nav-edge.smartscreen.microsoft.com
-
63 B 144 B 1 1
DNS Request
business.bing.com
DNS Response
13.107.6.158
-
63 B 185 B 1 1
DNS Request
business.bing.com
-
61 B 108 B 1 1
DNS Request
www.blogger.com
DNS Response
172.217.16.137
-
61 B 142 B 1 1
DNS Request
www.blogger.com
-
57 B 87 B 1 1
DNS Request
del.icio.us
DNS Response
107.181.87.5
-
57 B 131 B 1 1
DNS Request
del.icio.us
-
62 B 170 B 1 1
DNS Request
img1.steemit.com
DNS Response
54.234.125.13944.205.48.33
-
62 B 220 B 1 1
DNS Request
img1.steemit.com
-
63 B 230 B 1 1
DNS Request
www.microsoft.com
DNS Response
92.123.241.137
-
63 B 230 B 1 1
DNS Request
www.microsoft.com
DNS Response
92.123.241.137
-
63 B 275 B 1 1
DNS Request
www.microsoft.com
-
65 B 172 B 1 1
DNS Request
bzib.nelreports.net
DNS Response
88.221.135.8188.221.134.17
-
65 B 204 B 1 1
DNS Request
bzib.nelreports.net
-
66 B 98 B 1 1
DNS Request
cdnjs.cloudflare.com
DNS Response
104.17.24.14104.17.25.14
-
73 B 139 B 1 1
DNS Request
152.33.115.104.in-addr.arpa
-
71 B 145 B 1 1
DNS Request
169.96.87.13.in-addr.arpa
-
73 B 142 B 1 1
DNS Request
137.16.217.172.in-addr.arpa
-
73 B 129 B 1 1
DNS Request
139.125.234.54.in-addr.arpa
-
73 B 139 B 1 1
DNS Request
137.241.123.92.in-addr.arpa
-
69 B 101 B 1 1
DNS Request
maxcdn.bootstrapcdn.com
DNS Response
104.18.10.207104.18.11.207
-
69 B 142 B 1 1
DNS Request
maxcdn.bootstrapcdn.com
-
3.9kB 13.8kB 14 19
-
64 B 165 B 1 1
DNS Request
apps.identrust.com
DNS Response
95.101.143.1895.101.143.19
-
64 B 194 B 1 1
DNS Request
apps.identrust.com
-
63 B 124 B 1 1
DNS Request
2.bp.blogspot.com
DNS Response
172.217.18.97
-
63 B 165 B 1 1
DNS Request
2.bp.blogspot.com
-
71 B 116 B 1 1
DNS Request
lh4.googleusercontent.com
DNS Response
142.250.178.1
-
71 B 157 B 1 1
DNS Request
lh4.googleusercontent.com
-
63 B 230 B 1 1
DNS Request
www.microsoft.com
DNS Response
92.123.241.137
-
63 B 124 B 1 1
DNS Request
1.bp.blogspot.com
DNS Response
172.217.169.65
-
63 B 165 B 1 1
DNS Request
1.bp.blogspot.com
-
63 B 124 B 1 1
DNS Request
3.bp.blogspot.com
DNS Response
172.217.169.65
-
63 B 165 B 1 1
DNS Request
3.bp.blogspot.com
-
71 B 142 B 1 1
DNS Request
5.87.181.107.in-addr.arpa
-
72 B 137 B 1 1
DNS Request
81.135.221.88.in-addr.arpa
-
72 B 134 B 1 1
DNS Request
207.10.18.104.in-addr.arpa
-
72 B 137 B 1 1
DNS Request
18.143.101.95.in-addr.arpa
-
72 B 140 B 1 1
DNS Request
97.18.217.172.in-addr.arpa
-
70 B 144 B 1 1
DNS Request
58.55.71.13.in-addr.arpa
-
72 B 110 B 1 1
DNS Request
1.178.250.142.in-addr.arpa
-
73 B 111 B 1 1
DNS Request
65.169.217.172.in-addr.arpa
-
70 B 133 B 1 1
DNS Request
32.169.19.2.in-addr.arpa
-
65 B 81 B 1 1
DNS Request
ajax.googleapis.com
DNS Response
142.250.200.42
-
65 B 122 B 1 1
DNS Request
ajax.googleapis.com
-
66 B 98 B 1 1
DNS Request
cdnjs.cloudflare.com
DNS Response
104.17.24.14104.17.25.14
-
66 B 98 B 1 1
DNS Request
cdnjs.cloudflare.com
DNS Response
104.17.25.14104.17.24.14
-
66 B 139 B 1 1
DNS Request
cdnjs.cloudflare.com
-
4.2kB 15.8kB 14 20
-
56 B 88 B 1 1
DNS Request
rawgit.com
DNS Response
172.67.217.78104.21.24.61
-
56 B 129 B 1 1
DNS Request
rawgit.com
-
2.7kB 15.7kB 14 20
-
70 B 245 B 1 1
DNS Request
edgestatic.azureedge.net
DNS Response
13.107.246.6413.107.213.64
-
70 B 273 B 1 1
DNS Request
edgestatic.azureedge.net
-
63 B 193 B 1 1
DNS Request
c.s-microsoft.com
DNS Response
104.115.33.219
-
63 B 238 B 1 1
DNS Request
c.s-microsoft.com
-
3.9kB 7.8kB 15 16
-
3.6kB 11.2kB 9 14
-
63 B 124 B 1 1
DNS Request
4.bp.blogspot.com
DNS Response
172.217.169.65
-
63 B 165 B 1 1
DNS Request
4.bp.blogspot.com
-
72 B 137 B 1 1
DNS Request
41.134.221.88.in-addr.arpa
-
73 B 112 B 1 1
DNS Request
42.200.250.142.in-addr.arpa
-
71 B 133 B 1 1
DNS Request
14.25.17.104.in-addr.arpa
-
72 B 134 B 1 1
DNS Request
78.217.67.172.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
64.246.107.13.in-addr.arpa
-
2.9kB 6.8kB 5 8
-
69 B 265 B 1 1
DNS Request
wcpstatic.microsoft.com
DNS Response
13.107.246.6413.107.213.64
-
69 B 280 B 1 1
DNS Request
wcpstatic.microsoft.com
-
72 B 158 B 1 1
DNS Request
14.160.190.20.in-addr.arpa
-
73 B 144 B 1 1
DNS Request
95.221.229.192.in-addr.arpa
-
83 B 214 B 1 1
DNS Request
nw-umwatson.events.data.microsoft.com
DNS Response
52.182.143.212
-
73 B 147 B 1 1
DNS Request
212.143.182.52.in-addr.arpa
-
65 B 81 B 1 1
DNS Request
ajax.googleapis.com
DNS Response
142.250.185.202
-
71 B 116 B 1 1
DNS Request
lh6.googleusercontent.com
DNS Response
142.250.178.1
-
71 B 157 B 1 1
DNS Request
lh6.googleusercontent.com
-
71 B 116 B 1 1
DNS Request
lh5.googleusercontent.com
DNS Response
216.58.212.161
-
71 B 157 B 1 1
DNS Request
lh5.googleusercontent.com
-
6.2kB 82.5kB 45 81
-
3.6kB 9.2kB 10 11
-
4.3kB 35.2kB 21 31
-
73 B 112 B 1 1
DNS Request
78.186.250.142.in-addr.arpa
-
73 B 171 B 1 1
DNS Request
161.212.58.216.in-addr.arpa
-
65 B 81 B 1 1
DNS Request
ajax.googleapis.com
DNS Response
172.217.169.74
-
73 B 147 B 1 1
DNS Request
103.169.127.40.in-addr.arpa
-
70 B 144 B 1 1
DNS Request
18.31.95.13.in-addr.arpa
-
71 B 116 B 1 1
DNS Request
0.205.248.87.in-addr.arpa
-
61 B 125 B 1 1
DNS Request
code.jquery.com
DNS Response
151.101.66.137151.101.194.137151.101.130.137151.101.2.137
-
69 B 131 B 1 1
DNS Request
72.66.18.2.in-addr.arpa
-
61 B 125 B 1 1
DNS Request
code.jquery.com
DNS Response
151.101.2.137151.101.194.137151.101.66.137151.101.130.137
-
204 B 3
-
62 B 107 B 1 1
DNS Request
www.facebook.com
DNS Response
157.240.221.35
-
62 B 136 B 1 1
DNS Request
www.facebook.com
-
62 B 107 B 1 1
DNS Request
www.facebook.com
DNS Response
157.240.221.35
-
62 B 107 B 1 1
DNS Request
www.facebook.com
DNS Response
157.240.221.35
-
67 B 99 B 1 1
DNS Request
cdn.elegantthemes.com
DNS Response
104.18.198.62104.17.136.62
-
67 B 137 B 1 1
DNS Request
cdn.elegantthemes.com
-
62 B 107 B 1 1
DNS Request
www.facebook.com
DNS Response
157.240.221.35
-
67 B 99 B 1 1
DNS Request
www.elegantthemes.com
DNS Response
104.18.198.62104.17.136.62
-
67 B 137 B 1 1
DNS Request
www.elegantthemes.com
-
73 B 126 B 1 1
DNS Request
35.221.240.157.in-addr.arpa
-
72 B 134 B 1 1
DNS Request
62.198.18.104.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
21.236.111.52.in-addr.arpa
-
59 B 145 B 1 1
DNS Request
c1.popads.net
DNS Response
138.199.26.20138.199.26.25143.244.56.8
-
59 B 145 B 1 1
DNS Request
c1.popads.net
DNS Response
138.199.26.24138.199.26.21143.244.56.11
-
70 B 133 B 1 1
DNS Request
162.66.18.2.in-addr.arpa
-
69 B 101 B 1 1
DNS Request
maxcdn.bootstrapcdn.com
DNS Response
104.18.10.207104.18.11.207
-
69 B 101 B 1 1
DNS Request
maxcdn.bootstrapcdn.com
DNS Response
104.18.10.207104.18.11.207
-
73 B 147 B 1 1
DNS Request
169.117.168.52.in-addr.arpa
-
66 B 114 B 1 1
DNS Request
connect.facebook.net
DNS Response
157.240.221.16
-
66 B 114 B 1 1
DNS Request
connect.facebook.net
DNS Response
157.240.221.16