Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

Class1.vbs

windows7-x64

1

Class1.vbs

windows10-2004-x64

1

Form1.vbs

windows7-x64

1

Form1.vbs

windows10-2004-x64

1

GoldButton.vbs

windows7-x64

1

GoldButton.vbs

windows10-2004-x64

1

ModMain.vbs

windows7-x64

1

ModMain.vbs

windows10-2004-x64

1

ModuleMultimedia.vbs

windows7-x64

1

ModuleMultimedia.vbs

windows10-2004-x64

1

Mp3HeaderTag.vbs

windows7-x64

1

Mp3HeaderTag.vbs

windows10-2004-x64

1

Player.vbs

windows7-x64

1

Player.vbs

windows10-2004-x64

1

Progybar.vbs

windows7-x64

1

Progybar.vbs

windows10-2004-x64

1

Xplayer.vbs

windows7-x64

1

Xplayer.vbs

windows10-2004-x64

1

Xplayer.dll

windows7-x64

1

Xplayer.dll

windows10-2004-x64

1

playerX.exe

windows7-x64

1

playerX.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    130s
  • max time network
    129s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/07/2024, 20:07 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Xplayer.vbs

  • Size

    41KB

  • MD5

    da920c067c989958bdd3b5443eb9e225

  • SHA1

    bd16af83111fc0fab71ae9365decbaeba0c41320

  • SHA256

    7eae8cb8419be6883e5a2feb13ab4d3ccf88dc2afaad98ea44f7e6dad02d8ccd

  • SHA512

    c7fb6517b9bc813bac70e7e0733618334d1afa6949e6bf7edad76923e09573b8f14e4558b150aefbd0c74c4ef6a287ae6abe47924cb6826c216a4bda018cba1b

  • SSDEEP

    768:Ngpz/QGcpFBpTas4p+kB3ivQRO9k9HDN2YQD0PBOP9:kvcD3jCiECEa

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\System32\WScript.exe
    "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Xplayer.vbs"
    1⤵
      PID:3504
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=3932,i,3833046924978547022,12404847742964713612,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:8
      1⤵
        PID:4708

      Network

      • flag-us
        DNS
        196.249.167.52.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        196.249.167.52.in-addr.arpa
        IN PTR
        Response
      • flag-us
        DNS
        80.90.14.23.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        80.90.14.23.in-addr.arpa
        IN PTR
        Response
        80.90.14.23.in-addr.arpa
        IN PTR
        a23-14-90-80deploystaticakamaitechnologiescom
      • flag-us
        DNS
        g.bing.com
        Remote address:
        8.8.8.8:53
        Request
        g.bing.com
        IN A
        Response
        g.bing.com
        IN CNAME
        g-bing-com.dual-a-0034.a-msedge.net
        g-bing-com.dual-a-0034.a-msedge.net
        IN CNAME
        dual-a-0034.a-msedge.net
        dual-a-0034.a-msedge.net
        IN A
        13.107.21.237
        dual-a-0034.a-msedge.net
        IN A
        204.79.197.237
      • flag-us
        GET
        https://g.bing.com/neg/0?action=impression&rlink=https%3A%2F%2Fwww.bing.com%2Faclick%3Fld%3De8fyN2t142gQvpgCeAAkFXMDVUCUzN0O5Q2sVCRb3eqCP9S0v3nq0RZDakiJIBgPm_fuxUlkBfVSDXuEBzyIJ2zCP6-9jKi3xF_-HG5x5B2_jp9TmmWA28y2AVFc8Sho-ykGE6YCUpr-hqc0LgedYW6UOvgzTokpuHQGRhQQT-CjqQJT3e%26u%3DbWljcm9zb2Z0LWVkZ2UlM2FodHRwcyUzYSUyZiUyZnd3dy5taWNyb3NvZnQuY29tJTJmbWljcm9zb2Z0LTM2NSUyZm1pY3Jvc29mdC1lZGl0b3IlM2ZvY2lkJTNkY21taWV5YnVyNGM%26rlid%3Daf991cd7162a1500064f7abfc30ee1ca&TIME=20240611T225325Z&CID=531098720&EID=531098720&tids=15000&adUnitId=11730597&localId=w:8CE4F47C-62C1-CBA1-6083-4AA98427395E&deviceId=6825835407638640&muid=8CE4F47C62C1CBA160834AA98427395E
        Remote address:
        13.107.21.237:443
        Request
        GET /neg/0?action=impression&rlink=https%3A%2F%2Fwww.bing.com%2Faclick%3Fld%3De8fyN2t142gQvpgCeAAkFXMDVUCUzN0O5Q2sVCRb3eqCP9S0v3nq0RZDakiJIBgPm_fuxUlkBfVSDXuEBzyIJ2zCP6-9jKi3xF_-HG5x5B2_jp9TmmWA28y2AVFc8Sho-ykGE6YCUpr-hqc0LgedYW6UOvgzTokpuHQGRhQQT-CjqQJT3e%26u%3DbWljcm9zb2Z0LWVkZ2UlM2FodHRwcyUzYSUyZiUyZnd3dy5taWNyb3NvZnQuY29tJTJmbWljcm9zb2Z0LTM2NSUyZm1pY3Jvc29mdC1lZGl0b3IlM2ZvY2lkJTNkY21taWV5YnVyNGM%26rlid%3Daf991cd7162a1500064f7abfc30ee1ca&TIME=20240611T225325Z&CID=531098720&EID=531098720&tids=15000&adUnitId=11730597&localId=w:8CE4F47C-62C1-CBA1-6083-4AA98427395E&deviceId=6825835407638640&muid=8CE4F47C62C1CBA160834AA98427395E HTTP/2.0
        host: g.bing.com
        accept-encoding: gzip, deflate
        user-agent: WindowsShellClient/9.0.40929.0 (Windows)
        Response
        HTTP/2.0 204
        cache-control: no-cache, must-revalidate
        pragma: no-cache
        expires: Fri, 01 Jan 1990 00:00:00 GMT
        set-cookie: MUID=0A6412A46E7D6F013595060B6FC66E2E; domain=.bing.com; expires=Sat, 26-Jul-2025 20:20:07 GMT; path=/; SameSite=None; Secure; Priority=High;
        strict-transport-security: max-age=31536000; includeSubDomains; preload
        access-control-allow-origin: *
        x-cache: CONFIG_NOCACHE
        accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
        x-msedge-ref: Ref A: 1D6C5B6DB4714B2597D2994D06491B08 Ref B: LON04EDGE0921 Ref C: 2024-07-01T20:20:07Z
        date: Mon, 01 Jul 2024 20:20:07 GMT
      • flag-us
        GET
        https://g.bing.com/neg/0?action=impression&rlink=https%3A%2F%2Fwww.bing.com%2Faclick%3Fld%3De8fyN2t142gQvpgCeAAkFXMDVUCUzN0O5Q2sVCRb3eqCP9S0v3nq0RZDakiJIBgPm_fuxUlkBfVSDXuEBzyIJ2zCP6-9jKi3xF_-HG5x5B2_jp9TmmWA28y2AVFc8Sho-ykGE6YCUpr-hqc0LgedYW6UOvgzTokpuHQGRhQQT-CjqQJT3e%26u%3DbWljcm9zb2Z0LWVkZ2UlM2FodHRwcyUzYSUyZiUyZnd3dy5taWNyb3NvZnQuY29tJTJmbWljcm9zb2Z0LTM2NSUyZm1pY3Jvc29mdC1lZGl0b3IlM2ZvY2lkJTNkY21taWV5YnVyNGM%26rlid%3Daf991cd7162a1500064f7abfc30ee1ca&TIME=20240611T225325Z&CID=531098720&EID=&tids=15000&adUnitId=11730597&localId=w:8CE4F47C-62C1-CBA1-6083-4AA98427395E&deviceId=6825835407638640&muid=8CE4F47C62C1CBA160834AA98427395E
        Remote address:
        13.107.21.237:443
        Request
        GET /neg/0?action=impression&rlink=https%3A%2F%2Fwww.bing.com%2Faclick%3Fld%3De8fyN2t142gQvpgCeAAkFXMDVUCUzN0O5Q2sVCRb3eqCP9S0v3nq0RZDakiJIBgPm_fuxUlkBfVSDXuEBzyIJ2zCP6-9jKi3xF_-HG5x5B2_jp9TmmWA28y2AVFc8Sho-ykGE6YCUpr-hqc0LgedYW6UOvgzTokpuHQGRhQQT-CjqQJT3e%26u%3DbWljcm9zb2Z0LWVkZ2UlM2FodHRwcyUzYSUyZiUyZnd3dy5taWNyb3NvZnQuY29tJTJmbWljcm9zb2Z0LTM2NSUyZm1pY3Jvc29mdC1lZGl0b3IlM2ZvY2lkJTNkY21taWV5YnVyNGM%26rlid%3Daf991cd7162a1500064f7abfc30ee1ca&TIME=20240611T225325Z&CID=531098720&EID=&tids=15000&adUnitId=11730597&localId=w:8CE4F47C-62C1-CBA1-6083-4AA98427395E&deviceId=6825835407638640&muid=8CE4F47C62C1CBA160834AA98427395E HTTP/2.0
        host: g.bing.com
        accept-encoding: gzip, deflate
        user-agent: WindowsShellClient/9.0.40929.0 (Windows)
        cookie: MUID=0A6412A46E7D6F013595060B6FC66E2E; _EDGE_S=SID=1ECC62F02F29609E3881765F2E8361EA
        Response
        HTTP/2.0 204
        cache-control: no-cache, must-revalidate
        pragma: no-cache
        expires: Fri, 01 Jan 1990 00:00:00 GMT
        set-cookie: MSPTC=srSdlJ-tEANFoBkf3g-eWsXKfWMRLqQuIXegJG0k5Yo; domain=.bing.com; expires=Sat, 26-Jul-2025 20:20:08 GMT; path=/; Partitioned; secure; SameSite=None
        strict-transport-security: max-age=31536000; includeSubDomains; preload
        access-control-allow-origin: *
        x-cache: CONFIG_NOCACHE
        accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
        x-msedge-ref: Ref A: 6F140A82BE91411698B1F02E8165D31D Ref B: LON04EDGE0921 Ref C: 2024-07-01T20:20:08Z
        date: Mon, 01 Jul 2024 20:20:07 GMT
      • flag-be
        GET
        https://www.bing.com/aes/c.gif?RG=d8f301cad33644c2ba25cb1d5622115d&med=10&pubId=251978541&tids=15000&type=mv&reqver=1.0&TIME=20240611T225325Z&adUnitId=11730597&localId=w:8CE4F47C-62C1-CBA1-6083-4AA98427395E&deviceId=6825835407638640
        Remote address:
        2.17.107.105:443
        Request
        GET /aes/c.gif?RG=d8f301cad33644c2ba25cb1d5622115d&med=10&pubId=251978541&tids=15000&type=mv&reqver=1.0&TIME=20240611T225325Z&adUnitId=11730597&localId=w:8CE4F47C-62C1-CBA1-6083-4AA98427395E&deviceId=6825835407638640 HTTP/2.0
        host: www.bing.com
        accept-encoding: gzip, deflate
        user-agent: WindowsShellClient/9.0.40929.0 (Windows)
        cookie: MUID=0A6412A46E7D6F013595060B6FC66E2E
        Response
        HTTP/2.0 200
        cache-control: private,no-store
        pragma: no-cache
        vary: Origin
        p3p: CP=BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo
        accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
        x-msedge-ref: Ref A: 4D0CAFCE19B94D169F55E90B5B4BD205 Ref B: DUS30EDGE0705 Ref C: 2024-07-01T20:20:07Z
        content-length: 0
        date: Mon, 01 Jul 2024 20:20:08 GMT
        set-cookie: _EDGE_S=SID=1ECC62F02F29609E3881765F2E8361EA; path=/; httponly; domain=bing.com
        set-cookie: MUIDB=0A6412A46E7D6F013595060B6FC66E2E; path=/; httponly; expires=Sat, 26-Jul-2025 20:20:08 GMT
        alt-svc: h3=":443"; ma=93600
        x-cdn-traceid: 0.656b1102.1719865207.1017d2af
      • flag-us
        DNS
        105.107.17.2.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        105.107.17.2.in-addr.arpa
        IN PTR
        Response
        105.107.17.2.in-addr.arpa
        IN PTR
        a2-17-107-105deploystaticakamaitechnologiescom
      • flag-us
        DNS
        237.21.107.13.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        237.21.107.13.in-addr.arpa
        IN PTR
        Response
      • flag-us
        DNS
        18.53.126.40.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        18.53.126.40.in-addr.arpa
        IN PTR
        Response
      • flag-us
        DNS
        13.86.106.20.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        13.86.106.20.in-addr.arpa
        IN PTR
        Response
      • flag-us
        DNS
        50.23.12.20.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        50.23.12.20.in-addr.arpa
        IN PTR
        Response
      • flag-us
        DNS
        171.39.242.20.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        171.39.242.20.in-addr.arpa
        IN PTR
        Response
      • flag-us
        DNS
        21.121.18.2.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        21.121.18.2.in-addr.arpa
        IN PTR
        Response
        21.121.18.2.in-addr.arpa
        IN PTR
        a2-18-121-21deploystaticakamaitechnologiescom
      • flag-us
        DNS
        31.243.111.52.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        31.243.111.52.in-addr.arpa
        IN PTR
        Response
      • flag-us
        DNS
        tse1.mm.bing.net
        Remote address:
        8.8.8.8:53
        Request
        tse1.mm.bing.net
        IN A
        Response
        tse1.mm.bing.net
        IN CNAME
        mm-mm.bing.net.trafficmanager.net
        mm-mm.bing.net.trafficmanager.net
        IN CNAME
        ax-0001.ax-msedge.net
        ax-0001.ax-msedge.net
        IN A
        150.171.27.10
        ax-0001.ax-msedge.net
        IN A
        150.171.28.10
      • flag-us
        GET
        https://tse1.mm.bing.net/th?id=OADD2.10239351692308_1QYA5IZ7RRGGSDH4Z&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90
        Remote address:
        150.171.27.10:443
        Request
        GET /th?id=OADD2.10239351692308_1QYA5IZ7RRGGSDH4Z&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/2.0
        host: tse1.mm.bing.net
        accept: */*
        accept-encoding: gzip, deflate, br
        user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
        Response
        HTTP/2.0 200
        cache-control: public, max-age=2592000
        content-length: 276211
        content-type: image/jpeg
        x-cache: TCP_HIT
        access-control-allow-origin: *
        access-control-allow-headers: *
        access-control-allow-methods: GET, POST, OPTIONS
        timing-allow-origin: *
        report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
        nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
        accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
        x-msedge-ref: Ref A: B99D53EEB6F8467C9AD1514D651421F2 Ref B: LON04EDGE0708 Ref C: 2024-07-01T20:21:43Z
        date: Mon, 01 Jul 2024 20:21:42 GMT
      • flag-us
        GET
        https://tse1.mm.bing.net/th?id=OADD2.10239370639595_1MX6CE6U5QJ1LNKB2&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90
        Remote address:
        150.171.27.10:443
        Request
        GET /th?id=OADD2.10239370639595_1MX6CE6U5QJ1LNKB2&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/2.0
        host: tse1.mm.bing.net
        accept: */*
        accept-encoding: gzip, deflate, br
        user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
        Response
        HTTP/2.0 200
        cache-control: public, max-age=2592000
        content-length: 383394
        content-type: image/jpeg
        x-cache: TCP_HIT
        access-control-allow-origin: *
        access-control-allow-headers: *
        access-control-allow-methods: GET, POST, OPTIONS
        timing-allow-origin: *
        report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
        nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
        accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
        x-msedge-ref: Ref A: BF67D2B7D8E646EDB0F80FB72616A7BB Ref B: LON04EDGE0708 Ref C: 2024-07-01T20:21:43Z
        date: Mon, 01 Jul 2024 20:21:42 GMT
      • flag-us
        GET
        https://tse1.mm.bing.net/th?id=OADD2.10239370639606_1UY6VCV79VNDR5KH5&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90
        Remote address:
        150.171.27.10:443
        Request
        GET /th?id=OADD2.10239370639606_1UY6VCV79VNDR5KH5&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/2.0
        host: tse1.mm.bing.net
        accept: */*
        accept-encoding: gzip, deflate, br
        user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
        Response
        HTTP/2.0 200
        cache-control: public, max-age=2592000
        content-length: 664170
        content-type: image/jpeg
        x-cache: TCP_HIT
        access-control-allow-origin: *
        access-control-allow-headers: *
        access-control-allow-methods: GET, POST, OPTIONS
        timing-allow-origin: *
        report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
        nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
        accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
        x-msedge-ref: Ref A: ECB7A3A313934A008D54EFDB4CE2749C Ref B: LON04EDGE0708 Ref C: 2024-07-01T20:21:43Z
        date: Mon, 01 Jul 2024 20:21:42 GMT
      • flag-us
        GET
        https://tse1.mm.bing.net/th?id=OADD2.10239351692309_12E985FV6AZCRM3HV&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90
        Remote address:
        150.171.27.10:443
        Request
        GET /th?id=OADD2.10239351692309_12E985FV6AZCRM3HV&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/2.0
        host: tse1.mm.bing.net
        accept: */*
        accept-encoding: gzip, deflate, br
        user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
        Response
        HTTP/2.0 200
        cache-control: public, max-age=2592000
        content-length: 612524
        content-type: image/jpeg
        x-cache: TCP_HIT
        access-control-allow-origin: *
        access-control-allow-headers: *
        access-control-allow-methods: GET, POST, OPTIONS
        timing-allow-origin: *
        report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
        nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
        accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
        x-msedge-ref: Ref A: 05AC73E139334679B508B2E51A92E288 Ref B: LON04EDGE0708 Ref C: 2024-07-01T20:21:43Z
        date: Mon, 01 Jul 2024 20:21:42 GMT
      • flag-us
        DNS
        10.27.171.150.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        10.27.171.150.in-addr.arpa
        IN PTR
        Response
      • 13.107.21.237:443
        https://g.bing.com/neg/0?action=impression&rlink=https%3A%2F%2Fwww.bing.com%2Faclick%3Fld%3De8fyN2t142gQvpgCeAAkFXMDVUCUzN0O5Q2sVCRb3eqCP9S0v3nq0RZDakiJIBgPm_fuxUlkBfVSDXuEBzyIJ2zCP6-9jKi3xF_-HG5x5B2_jp9TmmWA28y2AVFc8Sho-ykGE6YCUpr-hqc0LgedYW6UOvgzTokpuHQGRhQQT-CjqQJT3e%26u%3DbWljcm9zb2Z0LWVkZ2UlM2FodHRwcyUzYSUyZiUyZnd3dy5taWNyb3NvZnQuY29tJTJmbWljcm9zb2Z0LTM2NSUyZm1pY3Jvc29mdC1lZGl0b3IlM2ZvY2lkJTNkY21taWV5YnVyNGM%26rlid%3Daf991cd7162a1500064f7abfc30ee1ca&TIME=20240611T225325Z&CID=531098720&EID=&tids=15000&adUnitId=11730597&localId=w:8CE4F47C-62C1-CBA1-6083-4AA98427395E&deviceId=6825835407638640&muid=8CE4F47C62C1CBA160834AA98427395E
        tls, http2
        2.5kB
         9.0kB
         20
        16

        HTTP Request

        GET https://g.bing.com/neg/0?action=impression&rlink=https%3A%2F%2Fwww.bing.com%2Faclick%3Fld%3De8fyN2t142gQvpgCeAAkFXMDVUCUzN0O5Q2sVCRb3eqCP9S0v3nq0RZDakiJIBgPm_fuxUlkBfVSDXuEBzyIJ2zCP6-9jKi3xF_-HG5x5B2_jp9TmmWA28y2AVFc8Sho-ykGE6YCUpr-hqc0LgedYW6UOvgzTokpuHQGRhQQT-CjqQJT3e%26u%3DbWljcm9zb2Z0LWVkZ2UlM2FodHRwcyUzYSUyZiUyZnd3dy5taWNyb3NvZnQuY29tJTJmbWljcm9zb2Z0LTM2NSUyZm1pY3Jvc29mdC1lZGl0b3IlM2ZvY2lkJTNkY21taWV5YnVyNGM%26rlid%3Daf991cd7162a1500064f7abfc30ee1ca&TIME=20240611T225325Z&CID=531098720&EID=531098720&tids=15000&adUnitId=11730597&localId=w:8CE4F47C-62C1-CBA1-6083-4AA98427395E&deviceId=6825835407638640&muid=8CE4F47C62C1CBA160834AA98427395E

        HTTP Response

        204

        HTTP Request

        GET https://g.bing.com/neg/0?action=impression&rlink=https%3A%2F%2Fwww.bing.com%2Faclick%3Fld%3De8fyN2t142gQvpgCeAAkFXMDVUCUzN0O5Q2sVCRb3eqCP9S0v3nq0RZDakiJIBgPm_fuxUlkBfVSDXuEBzyIJ2zCP6-9jKi3xF_-HG5x5B2_jp9TmmWA28y2AVFc8Sho-ykGE6YCUpr-hqc0LgedYW6UOvgzTokpuHQGRhQQT-CjqQJT3e%26u%3DbWljcm9zb2Z0LWVkZ2UlM2FodHRwcyUzYSUyZiUyZnd3dy5taWNyb3NvZnQuY29tJTJmbWljcm9zb2Z0LTM2NSUyZm1pY3Jvc29mdC1lZGl0b3IlM2ZvY2lkJTNkY21taWV5YnVyNGM%26rlid%3Daf991cd7162a1500064f7abfc30ee1ca&TIME=20240611T225325Z&CID=531098720&EID=&tids=15000&adUnitId=11730597&localId=w:8CE4F47C-62C1-CBA1-6083-4AA98427395E&deviceId=6825835407638640&muid=8CE4F47C62C1CBA160834AA98427395E

        HTTP Response

        204
      • 2.17.107.105:443
        https://www.bing.com/aes/c.gif?RG=d8f301cad33644c2ba25cb1d5622115d&med=10&pubId=251978541&tids=15000&type=mv&reqver=1.0&TIME=20240611T225325Z&adUnitId=11730597&localId=w:8CE4F47C-62C1-CBA1-6083-4AA98427395E&deviceId=6825835407638640
        tls, http2
        1.4kB
         5.4kB
         16
        14

        HTTP Request

        GET https://www.bing.com/aes/c.gif?RG=d8f301cad33644c2ba25cb1d5622115d&med=10&pubId=251978541&tids=15000&type=mv&reqver=1.0&TIME=20240611T225325Z&adUnitId=11730597&localId=w:8CE4F47C-62C1-CBA1-6083-4AA98427395E&deviceId=6825835407638640

        HTTP Response

        200
      • 150.171.27.10:443
        https://tse1.mm.bing.net/th?id=OADD2.10239351692309_12E985FV6AZCRM3HV&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90
        tls, http2
        73.6kB
         2.0MB
         1483
        1480

        HTTP Request

        GET https://tse1.mm.bing.net/th?id=OADD2.10239351692308_1QYA5IZ7RRGGSDH4Z&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90

        HTTP Request

        GET https://tse1.mm.bing.net/th?id=OADD2.10239370639595_1MX6CE6U5QJ1LNKB2&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90

        HTTP Request

        GET https://tse1.mm.bing.net/th?id=OADD2.10239370639606_1UY6VCV79VNDR5KH5&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90

        HTTP Request

        GET https://tse1.mm.bing.net/th?id=OADD2.10239351692309_12E985FV6AZCRM3HV&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90

        HTTP Response

        200

        HTTP Response

        200

        HTTP Response

        200

        HTTP Response

        200
      • 150.171.27.10:443
        tse1.mm.bing.net
        tls, http2
        1.2kB
         6.9kB
         15
        13
      • 150.171.27.10:443
        tse1.mm.bing.net
        tls, http2
        1.2kB
         6.9kB
         15
        13
      • 150.171.27.10:443
        tse1.mm.bing.net
        tls, http2
        1.2kB
         6.9kB
         15
        13
      • 8.8.8.8:53
        196.249.167.52.in-addr.arpa
        dns
        73 B
         147 B
         1
        1

        DNS Request

        196.249.167.52.in-addr.arpa

      • 8.8.8.8:53
        80.90.14.23.in-addr.arpa
        dns
        70 B
         133 B
         1
        1

        DNS Request

        80.90.14.23.in-addr.arpa

      • 8.8.8.8:53
        g.bing.com
        dns
        56 B
         151 B
         1
        1

        DNS Request

        g.bing.com

        DNS Response

        13.107.21.237
        204.79.197.237

      • 8.8.8.8:53
        105.107.17.2.in-addr.arpa
        dns
        71 B
         135 B
         1
        1

        DNS Request

        105.107.17.2.in-addr.arpa

      • 8.8.8.8:53
        237.21.107.13.in-addr.arpa
        dns
        72 B
         158 B
         1
        1

        DNS Request

        237.21.107.13.in-addr.arpa

      • 8.8.8.8:53
        18.53.126.40.in-addr.arpa
        dns
        71 B
         157 B
         1
        1

        DNS Request

        18.53.126.40.in-addr.arpa

      • 8.8.8.8:53
        13.86.106.20.in-addr.arpa
        dns
        71 B
         157 B
         1
        1

        DNS Request

        13.86.106.20.in-addr.arpa

      • 8.8.8.8:53
        50.23.12.20.in-addr.arpa
        dns
        70 B
         156 B
         1
        1

        DNS Request

        50.23.12.20.in-addr.arpa

      • 8.8.8.8:53
        171.39.242.20.in-addr.arpa
        dns
        72 B
         158 B
         1
        1

        DNS Request

        171.39.242.20.in-addr.arpa

      • 8.8.8.8:53
        21.121.18.2.in-addr.arpa
        dns
        70 B
         133 B
         1
        1

        DNS Request

        21.121.18.2.in-addr.arpa

      • 8.8.8.8:53
        31.243.111.52.in-addr.arpa
        dns
        72 B
         158 B
         1
        1

        DNS Request

        31.243.111.52.in-addr.arpa

      • 8.8.8.8:53
        tse1.mm.bing.net
        dns
        62 B
         170 B
         1
        1

        DNS Request

        tse1.mm.bing.net

        DNS Response

        150.171.27.10
        150.171.28.10

      • 8.8.8.8:53
        10.27.171.150.in-addr.arpa
        dns
        72 B
         158 B
         1
        1

        DNS Request

        10.27.171.150.in-addr.arpa

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      We care about your privacy.

      This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.