Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

1

Static

static

1

URLScan

urlscan

1

https://main.ens2svr...

windows10-2004-x64

1

Analysis

  • max time kernel
    268s
  • max time network
    285s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/06/2024, 05:45 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    https://main.ens2svr.net/takaful1/

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://main.ens2svr.net/takaful1/
    1⤵
      PID:4748
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=17 --mojo-platform-channel-handle=4156 --field-trial-handle=2280,i,11703952675008463361,17436195144517971517,262144 --variations-seed-version /prefetch:1
      1⤵
        PID:1528
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=18 --mojo-platform-channel-handle=3404 --field-trial-handle=2280,i,11703952675008463361,17436195144517971517,262144 --variations-seed-version /prefetch:1
        1⤵
          PID:3980
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4676 --field-trial-handle=2280,i,11703952675008463361,17436195144517971517,262144 --variations-seed-version /prefetch:8
          1⤵
            PID:5036
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=20 --mojo-platform-channel-handle=5324 --field-trial-handle=2280,i,11703952675008463361,17436195144517971517,262144 --variations-seed-version /prefetch:1
            1⤵
              PID:4768
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=21 --mojo-platform-channel-handle=5904 --field-trial-handle=2280,i,11703952675008463361,17436195144517971517,262144 --variations-seed-version /prefetch:1
              1⤵
                PID:4508
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-appcompat-clear --mojo-platform-channel-handle=3804 --field-trial-handle=2280,i,11703952675008463361,17436195144517971517,262144 --variations-seed-version /prefetch:8
                1⤵
                  PID:4516
                • C:\Windows\system32\AUDIODG.EXE
                  C:\Windows\system32\AUDIODG.EXE 0x39c 0x40c
                  1⤵
                    PID:4884
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --no-appcompat-clear --mojo-platform-channel-handle=5564 --field-trial-handle=2280,i,11703952675008463361,17436195144517971517,262144 --variations-seed-version /prefetch:8
                    1⤵
                      PID:1868

                    Network

                    • flag-us
                      DNS
                      main.ens2svr.net
                      Remote address:
                      8.8.8.8:53
                      Request
                      main.ens2svr.net
                      IN A
                      Response
                      main.ens2svr.net
                      IN A
                      104.193.109.249
                    • flag-us
                      DNS
                      main.ens2svr.net
                      Remote address:
                      8.8.8.8:53
                      Request
                      main.ens2svr.net
                      IN Unknown
                      Response
                    • flag-us
                      DNS
                      main.ens2svr.net
                      Remote address:
                      8.8.8.8:53
                      Request
                      main.ens2svr.net
                      IN A
                      Response
                      main.ens2svr.net
                      IN A
                      104.193.109.249
                    • flag-us
                      DNS
                      nav-edge.smartscreen.microsoft.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      nav-edge.smartscreen.microsoft.com
                      IN A
                      Response
                      nav-edge.smartscreen.microsoft.com
                      IN CNAME
                      tm-prod-wd-csp-edge.trafficmanager.net
                      tm-prod-wd-csp-edge.trafficmanager.net
                      IN CNAME
                      prod-agic-uw-2.ukwest.cloudapp.azure.com
                      prod-agic-uw-2.ukwest.cloudapp.azure.com
                      IN A
                      51.140.244.186
                    • flag-us
                      DNS
                      nav-edge.smartscreen.microsoft.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      nav-edge.smartscreen.microsoft.com
                      IN Unknown
                      Response
                      nav-edge.smartscreen.microsoft.com
                      IN CNAME
                      tm-prod-wd-csp-edge.trafficmanager.net
                      tm-prod-wd-csp-edge.trafficmanager.net
                      IN CNAME
                      prod-agic-uw-2.ukwest.cloudapp.azure.com
                    • flag-us
                      DNS
                      business.bing.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      business.bing.com
                      IN A
                      Response
                      business.bing.com
                      IN CNAME
                      business-bing-com.b-0005.b-msedge.net
                      business-bing-com.b-0005.b-msedge.net
                      IN CNAME
                      b-0005.b-msedge.net
                      b-0005.b-msedge.net
                      IN A
                      13.107.6.158
                    • flag-us
                      DNS
                      business.bing.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      business.bing.com
                      IN Unknown
                      Response
                      business.bing.com
                      IN CNAME
                      business-bing-com.b-0005.b-msedge.net
                      business-bing-com.b-0005.b-msedge.net
                      IN CNAME
                      b-0005.b-msedge.net
                    • flag-us
                      DNS
                      www.microsoft.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      www.microsoft.com
                      IN A
                      Response
                      www.microsoft.com
                      IN CNAME
                      www.microsoft.com-c-3.edgekey.net
                      www.microsoft.com-c-3.edgekey.net
                      IN CNAME
                      www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                      www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                      IN CNAME
                      e13678.dscb.akamaiedge.net
                      e13678.dscb.akamaiedge.net
                      IN A
                      23.55.97.181
                    • flag-us
                      DNS
                      bzib.nelreports.net
                      Remote address:
                      8.8.8.8:53
                      Request
                      bzib.nelreports.net
                      IN A
                      Response
                      bzib.nelreports.net
                      IN CNAME
                      bzib.nelreports.net.akamaized.net
                      bzib.nelreports.net.akamaized.net
                      IN CNAME
                      a416.dscd.akamai.net
                      a416.dscd.akamai.net
                      IN A
                      104.91.71.140
                      a416.dscd.akamai.net
                      IN A
                      104.91.71.133
                    • flag-us
                      DNS
                      bzib.nelreports.net
                      Remote address:
                      8.8.8.8:53
                      Request
                      bzib.nelreports.net
                      IN Unknown
                      Response
                      bzib.nelreports.net
                      IN CNAME
                      bzib.nelreports.net.akamaized.net
                      bzib.nelreports.net.akamaized.net
                      IN CNAME
                      a416.dscd.akamai.net
                    • flag-us
                      DNS
                      www.microsoft.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      www.microsoft.com
                      IN A
                      Response
                      www.microsoft.com
                      IN CNAME
                      www.microsoft.com-c-3.edgekey.net
                      www.microsoft.com-c-3.edgekey.net
                      IN CNAME
                      www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                      www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                      IN CNAME
                      e13678.dscb.akamaiedge.net
                      e13678.dscb.akamaiedge.net
                      IN A
                      23.55.97.181
                    • flag-us
                      DNS
                      www.microsoft.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      www.microsoft.com
                      IN Unknown
                      Response
                      www.microsoft.com
                      IN CNAME
                      www.microsoft.com-c-3.edgekey.net
                      www.microsoft.com-c-3.edgekey.net
                      IN CNAME
                      www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                      www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                      IN CNAME
                      e13678.dscb.akamaiedge.net
                    • flag-us
                      DNS
                      164.189.21.2.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      164.189.21.2.in-addr.arpa
                      IN PTR
                      Response
                      164.189.21.2.in-addr.arpa
                      IN PTR
                      a2-21-189-164deploystaticakamaitechnologiescom
                    • flag-us
                      DNS
                      249.109.193.104.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      249.109.193.104.in-addr.arpa
                      IN PTR
                      Response
                      249.109.193.104.in-addr.arpa
                      IN PTR
                      hostens2svrnet
                    • flag-us
                      DNS
                      186.244.140.51.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      186.244.140.51.in-addr.arpa
                      IN PTR
                      Response
                    • flag-us
                      DNS
                      www.microsoft.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      www.microsoft.com
                      IN A
                      Response
                      www.microsoft.com
                      IN CNAME
                      www.microsoft.com-c-3.edgekey.net
                      www.microsoft.com-c-3.edgekey.net
                      IN CNAME
                      www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                      www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                      IN CNAME
                      e13678.dscb.akamaiedge.net
                      e13678.dscb.akamaiedge.net
                      IN A
                      23.55.97.181
                    • flag-us
                      DNS
                      140.71.91.104.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      140.71.91.104.in-addr.arpa
                      IN PTR
                      Response
                      140.71.91.104.in-addr.arpa
                      IN PTR
                      a104-91-71-140deploystaticakamaitechnologiescom
                    • flag-us
                      DNS
                      181.97.55.23.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      181.97.55.23.in-addr.arpa
                      IN PTR
                      Response
                      181.97.55.23.in-addr.arpa
                      IN PTR
                      a23-55-97-181deploystaticakamaitechnologiescom
                    • flag-us
                      DNS
                      edgestatic.azureedge.net
                      Remote address:
                      8.8.8.8:53
                      Request
                      edgestatic.azureedge.net
                      IN A
                      Response
                      edgestatic.azureedge.net
                      IN CNAME
                      edgestatic.afd.azureedge.net
                      edgestatic.afd.azureedge.net
                      IN CNAME
                      azureedge-t-prod.trafficmanager.net
                      azureedge-t-prod.trafficmanager.net
                      IN CNAME
                      shed.dual-low.s-part-0036.t-0009.t-msedge.net
                      shed.dual-low.s-part-0036.t-0009.t-msedge.net
                      IN CNAME
                      s-part-0036.t-0009.t-msedge.net
                      s-part-0036.t-0009.t-msedge.net
                      IN A
                      13.107.246.64
                    • flag-us
                      DNS
                      edgestatic.azureedge.net
                      Remote address:
                      8.8.8.8:53
                      Request
                      edgestatic.azureedge.net
                      IN Unknown
                      Response
                      edgestatic.azureedge.net
                      IN CNAME
                      edgestatic.afd.azureedge.net
                      edgestatic.afd.azureedge.net
                      IN CNAME
                      azureedge-t-prod.trafficmanager.net
                      azureedge-t-prod.trafficmanager.net
                      IN CNAME
                      shed.dual-low.s-part-0036.t-0009.t-msedge.net
                      shed.dual-low.s-part-0036.t-0009.t-msedge.net
                      IN CNAME
                      s-part-0036.t-0009.t-msedge.net
                    • flag-us
                      DNS
                      c.s-microsoft.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      c.s-microsoft.com
                      IN A
                      Response
                      c.s-microsoft.com
                      IN CNAME
                      c-s.cms.ms.akadns.net
                      c-s.cms.ms.akadns.net
                      IN CNAME
                      c.s-microsoft.com-c.edgekey.net
                      c.s-microsoft.com-c.edgekey.net
                      IN CNAME
                      e13678.dscg.akamaiedge.net
                      e13678.dscg.akamaiedge.net
                      IN A
                      2.21.189.233
                    • flag-us
                      DNS
                      c.s-microsoft.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      c.s-microsoft.com
                      IN Unknown
                      Response
                      c.s-microsoft.com
                      IN CNAME
                      c-s.cms.ms.akadns.net
                      c-s.cms.ms.akadns.net
                      IN CNAME
                      c.s-microsoft.com-c.edgekey.net
                      c.s-microsoft.com-c.edgekey.net
                      IN CNAME
                      e13678.dscg.akamaiedge.net
                    • flag-us
                      DNS
                      64.246.107.13.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      64.246.107.13.in-addr.arpa
                      IN PTR
                      Response
                    • flag-us
                      DNS
                      228.249.119.40.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      228.249.119.40.in-addr.arpa
                      IN PTR
                      Response
                    • flag-us
                      DNS
                      wcpstatic.microsoft.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      wcpstatic.microsoft.com
                      IN A
                      Response
                      wcpstatic.microsoft.com
                      IN CNAME
                      consentdeliveryfd.azurefd.net
                      consentdeliveryfd.azurefd.net
                      IN CNAME
                      firstparty-azurefd-prod.trafficmanager.net
                      firstparty-azurefd-prod.trafficmanager.net
                      IN CNAME
                      shed.dual-low.s-part-0036.t-0009.t-msedge.net
                      shed.dual-low.s-part-0036.t-0009.t-msedge.net
                      IN CNAME
                      s-part-0036.t-0009.t-msedge.net
                      s-part-0036.t-0009.t-msedge.net
                      IN A
                      13.107.246.64
                    • flag-us
                      DNS
                      wcpstatic.microsoft.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      wcpstatic.microsoft.com
                      IN Unknown
                      Response
                      wcpstatic.microsoft.com
                      IN CNAME
                      consentdeliveryfd.azurefd.net
                      consentdeliveryfd.azurefd.net
                      IN CNAME
                      firstparty-azurefd-prod.trafficmanager.net
                      firstparty-azurefd-prod.trafficmanager.net
                      IN CNAME
                      shed.dual-low.s-part-0036.t-0009.t-msedge.net
                      shed.dual-low.s-part-0036.t-0009.t-msedge.net
                      IN CNAME
                      s-part-0036.t-0009.t-msedge.net
                    • flag-us
                      DNS
                      172.210.232.199.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      172.210.232.199.in-addr.arpa
                      IN PTR
                      Response
                    • flag-us
                      DNS
                      95.221.229.192.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      95.221.229.192.in-addr.arpa
                      IN PTR
                      Response
                    • flag-us
                      DNS
                      76.32.126.40.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      76.32.126.40.in-addr.arpa
                      IN PTR
                      Response
                    • flag-us
                      DNS
                      133.211.185.52.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      133.211.185.52.in-addr.arpa
                      IN PTR
                      Response
                    • flag-us
                      DNS
                      nw-umwatson.events.data.microsoft.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      nw-umwatson.events.data.microsoft.com
                      IN A
                      Response
                      nw-umwatson.events.data.microsoft.com
                      IN CNAME
                      blobcollector.events.data.trafficmanager.net
                      blobcollector.events.data.trafficmanager.net
                      IN CNAME
                      onedsblobprdwus15.westus.cloudapp.azure.com
                      onedsblobprdwus15.westus.cloudapp.azure.com
                      IN A
                      20.189.173.20
                    • flag-us
                      POST
                      https://nw-umwatson.events.data.microsoft.com/Telemetry.Request
                      Remote address:
                      20.189.173.20:443
                      Request
                      POST /Telemetry.Request HTTP/1.1
                      Connection: Keep-Alive
                      Content-Type: application/xml
                      User-Agent: Crashpad/0.8.0 WinHTTP/10.0.19041.1151 Windows_NT/10.0.19041.1202 (x64)
                      Content-Length: 3685
                      Host: nw-umwatson.events.data.microsoft.com
                      Response
                      HTTP/1.1 200 200 OK
                      Content-Length: 634
                      Content-Type: text/xml
                      Server: Microsoft-HTTPAPI/2.0
                      Strict-Transport-Security: max-age=31536000
                      Date: Mon, 03 Jun 2024 05:46:35 GMT
                    • flag-us
                      DNS
                      20.173.189.20.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      20.173.189.20.in-addr.arpa
                      IN PTR
                      Response
                    • flag-us
                      DNS
                      13.86.106.20.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      13.86.106.20.in-addr.arpa
                      IN PTR
                      Response
                    • flag-us
                      DNS
                      86.23.85.13.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      86.23.85.13.in-addr.arpa
                      IN PTR
                      Response
                    • flag-us
                      DNS
                      15.164.165.52.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      15.164.165.52.in-addr.arpa
                      IN PTR
                      Response
                    • flag-us
                      DNS
                      155.61.62.23.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      155.61.62.23.in-addr.arpa
                      IN PTR
                      Response
                      155.61.62.23.in-addr.arpa
                      IN PTR
                      a23-62-61-155deploystaticakamaitechnologiescom
                    • flag-us
                      DNS
                      31.243.111.52.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      31.243.111.52.in-addr.arpa
                      IN PTR
                      Response
                    • flag-us
                      DNS
                      www.microsoft.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      www.microsoft.com
                      IN A
                      Response
                      www.microsoft.com
                      IN CNAME
                      www.microsoft.com-c-3.edgekey.net
                      www.microsoft.com-c-3.edgekey.net
                      IN CNAME
                      www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                      www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                      IN CNAME
                      e13678.dscb.akamaiedge.net
                      e13678.dscb.akamaiedge.net
                      IN A
                      23.55.97.181
                    • flag-us
                      DNS
                      www.microsoft.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      www.microsoft.com
                      IN Unknown
                      Response
                      www.microsoft.com
                      IN CNAME
                      www.microsoft.com-c-3.edgekey.net
                      www.microsoft.com-c-3.edgekey.net
                      IN CNAME
                      www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                      www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                      IN CNAME
                      e13678.dscb.akamaiedge.net
                    • flag-us
                      DNS
                      edgestatic.azureedge.net
                      Remote address:
                      8.8.8.8:53
                      Request
                      edgestatic.azureedge.net
                      IN A
                      Response
                      edgestatic.azureedge.net
                      IN CNAME
                      edgestatic.afd.azureedge.net
                      edgestatic.afd.azureedge.net
                      IN CNAME
                      azureedge-t-prod.trafficmanager.net
                      azureedge-t-prod.trafficmanager.net
                      IN CNAME
                      shed.dual-low.s-part-0036.t-0009.t-msedge.net
                      shed.dual-low.s-part-0036.t-0009.t-msedge.net
                      IN CNAME
                      s-part-0036.t-0009.t-msedge.net
                      s-part-0036.t-0009.t-msedge.net
                      IN A
                      13.107.246.64
                    • flag-us
                      DNS
                      edgestatic.azureedge.net
                      Remote address:
                      8.8.8.8:53
                      Request
                      edgestatic.azureedge.net
                      IN Unknown
                      Response
                      edgestatic.azureedge.net
                      IN CNAME
                      edgestatic.afd.azureedge.net
                      edgestatic.afd.azureedge.net
                      IN CNAME
                      azureedge-t-prod.trafficmanager.net
                      azureedge-t-prod.trafficmanager.net
                      IN CNAME
                      shed.dual-low.s-part-0036.t-0009.t-msedge.net
                      shed.dual-low.s-part-0036.t-0009.t-msedge.net
                      IN CNAME
                      s-part-0036.t-0009.t-msedge.net
                    • flag-us
                      DNS
                      194.61.62.23.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      194.61.62.23.in-addr.arpa
                      IN PTR
                      Response
                      194.61.62.23.in-addr.arpa
                      IN PTR
                      a23-62-61-194deploystaticakamaitechnologiescom
                    • flag-us
                      DNS
                      94.65.42.20.in-addr.arpa
                      Remote address:
                      8.8.8.8:53
                      Request
                      94.65.42.20.in-addr.arpa
                      IN PTR
                      Response
                    • flag-us
                      DNS
                      www.microsoft.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      www.microsoft.com
                      IN A
                      Response
                      www.microsoft.com
                      IN CNAME
                      www.microsoft.com-c-3.edgekey.net
                      www.microsoft.com-c-3.edgekey.net
                      IN CNAME
                      www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                      www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                      IN CNAME
                      e13678.dscb.akamaiedge.net
                      e13678.dscb.akamaiedge.net
                      IN A
                      23.55.97.181
                    • flag-us
                      DNS
                      www.microsoft.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      www.microsoft.com
                      IN Unknown
                      Response
                      www.microsoft.com
                      IN CNAME
                      www.microsoft.com-c-3.edgekey.net
                      www.microsoft.com-c-3.edgekey.net
                      IN CNAME
                      www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                      www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                      IN CNAME
                      e13678.dscb.akamaiedge.net
                    • flag-us
                      DNS
                      edgestatic.azureedge.net
                      Remote address:
                      8.8.8.8:53
                      Request
                      edgestatic.azureedge.net
                      IN A
                      Response
                      edgestatic.azureedge.net
                      IN CNAME
                      edgestatic.afd.azureedge.net
                      edgestatic.afd.azureedge.net
                      IN CNAME
                      azureedge-t-prod.trafficmanager.net
                      azureedge-t-prod.trafficmanager.net
                      IN CNAME
                      shed.dual-low.s-part-0036.t-0009.t-msedge.net
                      shed.dual-low.s-part-0036.t-0009.t-msedge.net
                      IN CNAME
                      s-part-0036.t-0009.t-msedge.net
                      s-part-0036.t-0009.t-msedge.net
                      IN A
                      13.107.246.64
                    • flag-us
                      DNS
                      edgestatic.azureedge.net
                      Remote address:
                      8.8.8.8:53
                      Request
                      edgestatic.azureedge.net
                      IN Unknown
                      Response
                      edgestatic.azureedge.net
                      IN CNAME
                      edgestatic.afd.azureedge.net
                      edgestatic.afd.azureedge.net
                      IN CNAME
                      azureedge-t-prod.trafficmanager.net
                      azureedge-t-prod.trafficmanager.net
                      IN CNAME
                      shed.dual-low.s-part-0036.t-0009.t-msedge.net
                      shed.dual-low.s-part-0036.t-0009.t-msedge.net
                      IN CNAME
                      s-part-0036.t-0009.t-msedge.net
                    • flag-us
                      DNS
                      www.microsoft.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      www.microsoft.com
                      IN A
                      Response
                      www.microsoft.com
                      IN CNAME
                      www.microsoft.com-c-3.edgekey.net
                      www.microsoft.com-c-3.edgekey.net
                      IN CNAME
                      www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                      www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                      IN CNAME
                      e13678.dscb.akamaiedge.net
                      e13678.dscb.akamaiedge.net
                      IN A
                      23.55.97.181
                    • flag-us
                      DNS
                      www.microsoft.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      www.microsoft.com
                      IN Unknown
                      Response
                      www.microsoft.com
                      IN CNAME
                      www.microsoft.com-c-3.edgekey.net
                      www.microsoft.com-c-3.edgekey.net
                      IN CNAME
                      www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                      www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                      IN CNAME
                      e13678.dscb.akamaiedge.net
                    • flag-us
                      DNS
                      edgestatic.azureedge.net
                      Remote address:
                      8.8.8.8:53
                      Request
                      edgestatic.azureedge.net
                      IN A
                      Response
                      edgestatic.azureedge.net
                      IN CNAME
                      edgestatic.afd.azureedge.net
                      edgestatic.afd.azureedge.net
                      IN CNAME
                      azureedge-t-prod.trafficmanager.net
                      azureedge-t-prod.trafficmanager.net
                      IN CNAME
                      shed.dual-low.s-part-0036.t-0009.t-msedge.net
                      shed.dual-low.s-part-0036.t-0009.t-msedge.net
                      IN CNAME
                      s-part-0036.t-0009.t-msedge.net
                      s-part-0036.t-0009.t-msedge.net
                      IN A
                      13.107.246.64
                    • flag-us
                      DNS
                      edgestatic.azureedge.net
                      Remote address:
                      8.8.8.8:53
                      Request
                      edgestatic.azureedge.net
                      IN Unknown
                      Response
                      edgestatic.azureedge.net
                      IN CNAME
                      edgestatic.afd.azureedge.net
                      edgestatic.afd.azureedge.net
                      IN CNAME
                      azureedge-t-prod.trafficmanager.net
                      azureedge-t-prod.trafficmanager.net
                      IN CNAME
                      shed.dual-low.s-part-0036.t-0009.t-msedge.net
                      shed.dual-low.s-part-0036.t-0009.t-msedge.net
                      IN CNAME
                      s-part-0036.t-0009.t-msedge.net
                    • flag-us
                      DNS
                      www.microsoft.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      www.microsoft.com
                      IN A
                      Response
                      www.microsoft.com
                      IN CNAME
                      www.microsoft.com-c-3.edgekey.net
                      www.microsoft.com-c-3.edgekey.net
                      IN CNAME
                      www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                      www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                      IN CNAME
                      e13678.dscb.akamaiedge.net
                      e13678.dscb.akamaiedge.net
                      IN A
                      23.55.97.181
                    • flag-us
                      DNS
                      www.microsoft.com
                      Remote address:
                      8.8.8.8:53
                      Request
                      www.microsoft.com
                      IN Unknown
                      Response
                      www.microsoft.com
                      IN CNAME
                      www.microsoft.com-c-3.edgekey.net
                      www.microsoft.com-c-3.edgekey.net
                      IN CNAME
                      www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                      www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                      IN CNAME
                      e13678.dscb.akamaiedge.net
                    • flag-us
                      DNS
                      edgestatic.azureedge.net
                      Remote address:
                      8.8.8.8:53
                      Request
                      edgestatic.azureedge.net
                      IN A
                      Response
                      edgestatic.azureedge.net
                      IN CNAME
                      edgestatic.afd.azureedge.net
                      edgestatic.afd.azureedge.net
                      IN CNAME
                      azureedge-t-prod.trafficmanager.net
                      azureedge-t-prod.trafficmanager.net
                      IN CNAME
                      shed.dual-low.s-part-0036.t-0009.t-msedge.net
                      shed.dual-low.s-part-0036.t-0009.t-msedge.net
                      IN CNAME
                      s-part-0036.t-0009.t-msedge.net
                      s-part-0036.t-0009.t-msedge.net
                      IN A
                      13.107.246.64
                    • flag-us
                      DNS
                      edgestatic.azureedge.net
                      Remote address:
                      8.8.8.8:53
                      Request
                      edgestatic.azureedge.net
                      IN Unknown
                      Response
                      edgestatic.azureedge.net
                      IN CNAME
                      edgestatic.afd.azureedge.net
                      edgestatic.afd.azureedge.net
                      IN CNAME
                      azureedge-t-prod.trafficmanager.net
                      azureedge-t-prod.trafficmanager.net
                      IN CNAME
                      shed.dual-low.s-part-0036.t-0009.t-msedge.net
                      shed.dual-low.s-part-0036.t-0009.t-msedge.net
                      IN CNAME
                      s-part-0036.t-0009.t-msedge.net
                    • 104.193.109.249:443
                      main.ens2svr.net
                      tls
                      2.7kB
                       5.0kB
                       14
                      14
                    • 104.193.109.249:443
                      main.ens2svr.net
                      tls
                      1.0kB
                       4.3kB
                       9
                      11
                    • 51.140.244.186:443
                      nav-edge.smartscreen.microsoft.com
                      tls
                      936 B
                       6.7kB
                       9
                      9
                    • 51.140.244.186:443
                      nav-edge.smartscreen.microsoft.com
                      tls
                      14.7kB
                       15.5kB
                       40
                      44
                    • 13.107.6.158:443
                      business.bing.com
                      tls
                      2.1kB
                       9.9kB
                       18
                      23
                    • 104.91.71.140:443
                      bzib.nelreports.net
                      tls
                      2.6kB
                       6.0kB
                       16
                      18
                    • 23.55.97.181:443
                      www.microsoft.com
                      tls
                      2.7kB
                       22.9kB
                       26
                      36
                    • 13.107.246.64:443
                      edgestatic.azureedge.net
                      tls
                      158.8kB
                       7.6MB
                       3240
                      5459
                    • 13.107.246.64:443
                      edgestatic.azureedge.net
                      tls
                      1.7kB
                       7.9kB
                       13
                      14
                    • 13.107.246.64:443
                      edgestatic.azureedge.net
                      tls
                      1.8kB
                       7.9kB
                       13
                      14
                    • 13.107.246.64:443
                      edgestatic.azureedge.net
                      tls
                      8.3kB
                       272.6kB
                       129
                      215
                    • 13.107.246.64:443
                      wcpstatic.microsoft.com
                      tls
                      1.9kB
                       5.6kB
                       11
                      12
                    • 23.44.234.16:80
                      260 B
                       5
                    • 20.189.173.20:443
                      https://nw-umwatson.events.data.microsoft.com/Telemetry.Request
                      tls, http
                      4.9kB
                       7.6kB
                       13
                      11

                      HTTP Request

                      POST https://nw-umwatson.events.data.microsoft.com/Telemetry.Request

                      HTTP Response

                      200
                    • 13.107.253.64:443
                      46 B
                       40 B
                       1
                      1
                    • 23.62.61.155:443
                      www.bing.com
                      tls
                      1.1kB
                       5.2kB
                       10
                      12
                    • 52.142.223.178:80
                      322 B
                       7
                    • 23.62.61.194:443
                      www.bing.com
                      tls
                      1.3kB
                       946 B
                       8
                      8
                    • 23.55.97.181:443
                      www.microsoft.com
                      tls
                      1.3kB
                       986 B
                       9
                      9
                    • 13.107.246.64:443
                      edgestatic.azureedge.net
                      tls
                      2.3kB
                       8.1kB
                       17
                      18
                    • 23.55.97.181:443
                      www.microsoft.com
                      tls
                      1.3kB
                       986 B
                       9
                      9
                    • 23.55.97.181:443
                      www.microsoft.com
                      tls
                      1.3kB
                       958 B
                       8
                      8
                    • 13.107.246.64:443
                      edgestatic.azureedge.net
                      tls
                      1.9kB
                       8.1kB
                       12
                      16
                    • 8.8.8.8:53
                      main.ens2svr.net
                      dns
                      62 B
                       78 B
                       1
                      1

                      DNS Request

                      main.ens2svr.net

                      DNS Response

                      104.193.109.249

                    • 8.8.8.8:53
                      main.ens2svr.net
                      dns
                      62 B
                       122 B
                       1
                      1

                      DNS Request

                      main.ens2svr.net

                    • 8.8.8.8:53
                      main.ens2svr.net
                      dns
                      62 B
                       78 B
                       1
                      1

                      DNS Request

                      main.ens2svr.net

                      DNS Response

                      104.193.109.249

                    • 8.8.8.8:53
                      nav-edge.smartscreen.microsoft.com
                      dns
                      80 B
                       199 B
                       1
                      1

                      DNS Request

                      nav-edge.smartscreen.microsoft.com

                      DNS Response

                      51.140.244.186

                    • 8.8.8.8:53
                      nav-edge.smartscreen.microsoft.com
                      dns
                      80 B
                       243 B
                       1
                      1

                      DNS Request

                      nav-edge.smartscreen.microsoft.com

                    • 8.8.8.8:53
                      business.bing.com
                      dns
                      63 B
                       144 B
                       1
                      1

                      DNS Request

                      business.bing.com

                      DNS Response

                      13.107.6.158

                    • 8.8.8.8:53
                      business.bing.com
                      dns
                      63 B
                       185 B
                       1
                      1

                      DNS Request

                      business.bing.com

                    • 8.8.8.8:53
                      www.microsoft.com
                      dns
                      63 B
                       230 B
                       1
                      1

                      DNS Request

                      www.microsoft.com

                      DNS Response

                      23.55.97.181

                    • 8.8.8.8:53
                      bzib.nelreports.net
                      dns
                      65 B
                       172 B
                       1
                      1

                      DNS Request

                      bzib.nelreports.net

                      DNS Response

                      104.91.71.140
                      104.91.71.133

                    • 8.8.8.8:53
                      bzib.nelreports.net
                      dns
                      65 B
                       204 B
                       1
                      1

                      DNS Request

                      bzib.nelreports.net

                    • 8.8.8.8:53
                      www.microsoft.com
                      dns
                      63 B
                       230 B
                       1
                      1

                      DNS Request

                      www.microsoft.com

                      DNS Response

                      23.55.97.181

                    • 8.8.8.8:53
                      www.microsoft.com
                      dns
                      63 B
                       275 B
                       1
                      1

                      DNS Request

                      www.microsoft.com

                    • 8.8.8.8:53
                      164.189.21.2.in-addr.arpa
                      dns
                      71 B
                       135 B
                       1
                      1

                      DNS Request

                      164.189.21.2.in-addr.arpa

                    • 8.8.8.8:53
                      249.109.193.104.in-addr.arpa
                      dns
                      74 B
                       104 B
                       1
                      1

                      DNS Request

                      249.109.193.104.in-addr.arpa

                    • 8.8.8.8:53
                      186.244.140.51.in-addr.arpa
                      dns
                      73 B
                       147 B
                       1
                      1

                      DNS Request

                      186.244.140.51.in-addr.arpa

                    • 8.8.8.8:53
                      www.microsoft.com
                      dns
                      63 B
                       230 B
                       1
                      1

                      DNS Request

                      www.microsoft.com

                      DNS Response

                      23.55.97.181

                    • 8.8.8.8:53
                      140.71.91.104.in-addr.arpa
                      dns
                      72 B
                       137 B
                       1
                      1

                      DNS Request

                      140.71.91.104.in-addr.arpa

                    • 8.8.8.8:53
                      181.97.55.23.in-addr.arpa
                      dns
                      71 B
                       135 B
                       1
                      1

                      DNS Request

                      181.97.55.23.in-addr.arpa

                    • 8.8.8.8:53
                      edgestatic.azureedge.net
                      dns
                      70 B
                       231 B
                       1
                      1

                      DNS Request

                      edgestatic.azureedge.net

                      DNS Response

                      13.107.246.64

                    • 8.8.8.8:53
                      edgestatic.azureedge.net
                      dns
                      70 B
                       275 B
                       1
                      1

                      DNS Request

                      edgestatic.azureedge.net

                    • 8.8.8.8:53
                      c.s-microsoft.com
                      dns
                      63 B
                       193 B
                       1
                      1

                      DNS Request

                      c.s-microsoft.com

                      DNS Response

                      2.21.189.233

                    • 8.8.8.8:53
                      c.s-microsoft.com
                      dns
                      63 B
                       238 B
                       1
                      1

                      DNS Request

                      c.s-microsoft.com

                    • 8.8.8.8:53
                      64.246.107.13.in-addr.arpa
                      dns
                      72 B
                       158 B
                       1
                      1

                      DNS Request

                      64.246.107.13.in-addr.arpa

                    • 224.0.0.251:5353
                      204 B
                       3
                    • 8.8.8.8:53
                      228.249.119.40.in-addr.arpa
                      dns
                      73 B
                       159 B
                       1
                      1

                      DNS Request

                      228.249.119.40.in-addr.arpa

                    • 8.8.8.8:53
                      wcpstatic.microsoft.com
                      dns
                      69 B
                       251 B
                       1
                      1

                      DNS Request

                      wcpstatic.microsoft.com

                      DNS Response

                      13.107.246.64

                    • 8.8.8.8:53
                      wcpstatic.microsoft.com
                      dns
                      69 B
                       282 B
                       1
                      1

                      DNS Request

                      wcpstatic.microsoft.com

                    • 8.8.8.8:53
                      172.210.232.199.in-addr.arpa
                      dns
                      74 B
                       128 B
                       1
                      1

                      DNS Request

                      172.210.232.199.in-addr.arpa

                    • 8.8.8.8:53
                      95.221.229.192.in-addr.arpa
                      dns
                      73 B
                       144 B
                       1
                      1

                      DNS Request

                      95.221.229.192.in-addr.arpa

                    • 8.8.8.8:53
                      76.32.126.40.in-addr.arpa
                      dns
                      71 B
                       157 B
                       1
                      1

                      DNS Request

                      76.32.126.40.in-addr.arpa

                    • 8.8.8.8:53
                      133.211.185.52.in-addr.arpa
                      dns
                      73 B
                       147 B
                       1
                      1

                      DNS Request

                      133.211.185.52.in-addr.arpa

                    • 8.8.8.8:53
                      nw-umwatson.events.data.microsoft.com
                      dns
                      83 B
                       211 B
                       1
                      1

                      DNS Request

                      nw-umwatson.events.data.microsoft.com

                      DNS Response

                      20.189.173.20

                    • 8.8.8.8:53
                      20.173.189.20.in-addr.arpa
                      dns
                      72 B
                       158 B
                       1
                      1

                      DNS Request

                      20.173.189.20.in-addr.arpa

                    • 8.8.8.8:53
                      13.86.106.20.in-addr.arpa
                      dns
                      71 B
                       157 B
                       1
                      1

                      DNS Request

                      13.86.106.20.in-addr.arpa

                    • 8.8.8.8:53
                      86.23.85.13.in-addr.arpa
                      dns
                      70 B
                       144 B
                       1
                      1

                      DNS Request

                      86.23.85.13.in-addr.arpa

                    • 8.8.8.8:53
                      15.164.165.52.in-addr.arpa
                      dns
                      72 B
                       146 B
                       1
                      1

                      DNS Request

                      15.164.165.52.in-addr.arpa

                    • 8.8.8.8:53
                      155.61.62.23.in-addr.arpa
                      dns
                      71 B
                       135 B
                       1
                      1

                      DNS Request

                      155.61.62.23.in-addr.arpa

                    • 8.8.8.8:53
                      31.243.111.52.in-addr.arpa
                      dns
                      72 B
                       158 B
                       1
                      1

                      DNS Request

                      31.243.111.52.in-addr.arpa

                    • 8.8.8.8:53
                      www.microsoft.com
                      dns
                      63 B
                       230 B
                       1
                      1

                      DNS Request

                      www.microsoft.com

                      DNS Response

                      23.55.97.181

                    • 8.8.8.8:53
                      www.microsoft.com
                      dns
                      63 B
                       275 B
                       1
                      1

                      DNS Request

                      www.microsoft.com

                    • 8.8.8.8:53
                      edgestatic.azureedge.net
                      dns
                      70 B
                       231 B
                       1
                      1

                      DNS Request

                      edgestatic.azureedge.net

                      DNS Response

                      13.107.246.64

                    • 8.8.8.8:53
                      edgestatic.azureedge.net
                      dns
                      70 B
                       275 B
                       1
                      1

                      DNS Request

                      edgestatic.azureedge.net

                    • 8.8.8.8:53
                      194.61.62.23.in-addr.arpa
                      dns
                      71 B
                       135 B
                       1
                      1

                      DNS Request

                      194.61.62.23.in-addr.arpa

                    • 8.8.8.8:53
                      94.65.42.20.in-addr.arpa
                      dns
                      70 B
                       156 B
                       1
                      1

                      DNS Request

                      94.65.42.20.in-addr.arpa

                    • 8.8.8.8:53
                      www.microsoft.com
                      dns
                      63 B
                       230 B
                       1
                      1

                      DNS Request

                      www.microsoft.com

                      DNS Response

                      23.55.97.181

                    • 8.8.8.8:53
                      www.microsoft.com
                      dns
                      63 B
                       275 B
                       1
                      1

                      DNS Request

                      www.microsoft.com

                    • 8.8.8.8:53
                      edgestatic.azureedge.net
                      dns
                      70 B
                       231 B
                       1
                      1

                      DNS Request

                      edgestatic.azureedge.net

                      DNS Response

                      13.107.246.64

                    • 8.8.8.8:53
                      edgestatic.azureedge.net
                      dns
                      70 B
                       275 B
                       1
                      1

                      DNS Request

                      edgestatic.azureedge.net

                    • 8.8.8.8:53
                      www.microsoft.com
                      dns
                      63 B
                       230 B
                       1
                      1

                      DNS Request

                      www.microsoft.com

                      DNS Response

                      23.55.97.181

                    • 8.8.8.8:53
                      www.microsoft.com
                      dns
                      63 B
                       275 B
                       1
                      1

                      DNS Request

                      www.microsoft.com

                    • 8.8.8.8:53
                      edgestatic.azureedge.net
                      dns
                      70 B
                       231 B
                       1
                      1

                      DNS Request

                      edgestatic.azureedge.net

                      DNS Response

                      13.107.246.64

                    • 8.8.8.8:53
                      edgestatic.azureedge.net
                      dns
                      70 B
                       275 B
                       1
                      1

                      DNS Request

                      edgestatic.azureedge.net

                    • 8.8.8.8:53
                      www.microsoft.com
                      dns
                      63 B
                       230 B
                       1
                      1

                      DNS Request

                      www.microsoft.com

                      DNS Response

                      23.55.97.181

                    • 8.8.8.8:53
                      www.microsoft.com
                      dns
                      63 B
                       275 B
                       1
                      1

                      DNS Request

                      www.microsoft.com

                    • 8.8.8.8:53
                      edgestatic.azureedge.net
                      dns
                      70 B
                       231 B
                       1
                      1

                      DNS Request

                      edgestatic.azureedge.net

                      DNS Response

                      13.107.246.64

                    • 8.8.8.8:53
                      edgestatic.azureedge.net
                      dns
                      70 B
                       275 B
                       1
                      1

                      DNS Request

                      edgestatic.azureedge.net

                    MITRE ATT&CK Matrix

                    Replay Monitor

                    Loading Replay Monitor...

                    Downloads

                    We care about your privacy.

                    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.