a9244def340e8a9e8e58a3bb6ec1f953ae8301220c1ee678ed98e56d53a0c5c1

Analysis

max time kernel
145s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
14/09/2024, 08:50 UTC

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

dfda2e5af4949f508eeb335c48d77ea1_JaffaCakes118.html
Size

90KB
MD5

dfda2e5af4949f508eeb335c48d77ea1
SHA1

8e88f1ccdb81ae80f9a566dc39f5951f4cbf42f0
SHA256

a9244def340e8a9e8e58a3bb6ec1f953ae8301220c1ee678ed98e56d53a0c5c1
SHA512

392c28f23dedb5d543c7602f3791528e61ff85a5417cf1f07bd970a2a72a1f86bd4e00c2f12477562a718283cea18bd7aeb7f3e1de000f78805c98d8a9ec6172
SSDEEP

1536:32ZPMAP2VWHZMJNDXSDXTDXQHltz0DWORudT2jBIt:0P2VW5E+nAdT2jBIt

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1356	msedge.exe
1356	msedge.exe
3460	msedge.exe
3460	msedge.exe
2832	identity_helper.exe
2832	identity_helper.exe
6104	msedge.exe
6104	msedge.exe
6104	msedge.exe
6104	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe
3460	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3460 wrote to memory of 3336	3460	msedge.exe	83
PID 3460 wrote to memory of 3336	3460	msedge.exe	83
PID 3460 wrote to memory of 1056	3460	msedge.exe	84
PID 3460 wrote to memory of 1056	3460	msedge.exe	84
PID 3460 wrote to memory of 1056	3460	msedge.exe	84
PID 3460 wrote to memory of 1056	3460	msedge.exe	84
PID 3460 wrote to memory of 1056	3460	msedge.exe	84
PID 3460 wrote to memory of 1056	3460	msedge.exe	84
PID 3460 wrote to memory of 1056	3460	msedge.exe	84
PID 3460 wrote to memory of 1056	3460	msedge.exe	84
PID 3460 wrote to memory of 1056	3460	msedge.exe	84
PID 3460 wrote to memory of 1056	3460	msedge.exe	84
PID 3460 wrote to memory of 1056	3460	msedge.exe	84
PID 3460 wrote to memory of 1056	3460	msedge.exe	84
PID 3460 wrote to memory of 1056	3460	msedge.exe	84
PID 3460 wrote to memory of 1056	3460	msedge.exe	84
PID 3460 wrote to memory of 1056	3460	msedge.exe	84
PID 3460 wrote to memory of 1056	3460	msedge.exe	84
PID 3460 wrote to memory of 1056	3460	msedge.exe	84
PID 3460 wrote to memory of 1056	3460	msedge.exe	84
PID 3460 wrote to memory of 1056	3460	msedge.exe	84
PID 3460 wrote to memory of 1056	3460	msedge.exe	84
PID 3460 wrote to memory of 1056	3460	msedge.exe	84
PID 3460 wrote to memory of 1056	3460	msedge.exe	84
PID 3460 wrote to memory of 1056	3460	msedge.exe	84
PID 3460 wrote to memory of 1056	3460	msedge.exe	84
PID 3460 wrote to memory of 1056	3460	msedge.exe	84
PID 3460 wrote to memory of 1056	3460	msedge.exe	84
PID 3460 wrote to memory of 1056	3460	msedge.exe	84
PID 3460 wrote to memory of 1056	3460	msedge.exe	84
PID 3460 wrote to memory of 1056	3460	msedge.exe	84
PID 3460 wrote to memory of 1056	3460	msedge.exe	84
PID 3460 wrote to memory of 1056	3460	msedge.exe	84
PID 3460 wrote to memory of 1056	3460	msedge.exe	84
PID 3460 wrote to memory of 1056	3460	msedge.exe	84
PID 3460 wrote to memory of 1056	3460	msedge.exe	84
PID 3460 wrote to memory of 1056	3460	msedge.exe	84
PID 3460 wrote to memory of 1056	3460	msedge.exe	84
PID 3460 wrote to memory of 1056	3460	msedge.exe	84
PID 3460 wrote to memory of 1056	3460	msedge.exe	84
PID 3460 wrote to memory of 1056	3460	msedge.exe	84
PID 3460 wrote to memory of 1056	3460	msedge.exe	84
PID 3460 wrote to memory of 1356	3460	msedge.exe	85
PID 3460 wrote to memory of 1356	3460	msedge.exe	85
PID 3460 wrote to memory of 4248	3460	msedge.exe	86
PID 3460 wrote to memory of 4248	3460	msedge.exe	86
PID 3460 wrote to memory of 4248	3460	msedge.exe	86
PID 3460 wrote to memory of 4248	3460	msedge.exe	86
PID 3460 wrote to memory of 4248	3460	msedge.exe	86
PID 3460 wrote to memory of 4248	3460	msedge.exe	86
PID 3460 wrote to memory of 4248	3460	msedge.exe	86
PID 3460 wrote to memory of 4248	3460	msedge.exe	86
PID 3460 wrote to memory of 4248	3460	msedge.exe	86
PID 3460 wrote to memory of 4248	3460	msedge.exe	86
PID 3460 wrote to memory of 4248	3460	msedge.exe	86
PID 3460 wrote to memory of 4248	3460	msedge.exe	86
PID 3460 wrote to memory of 4248	3460	msedge.exe	86
PID 3460 wrote to memory of 4248	3460	msedge.exe	86
PID 3460 wrote to memory of 4248	3460	msedge.exe	86
PID 3460 wrote to memory of 4248	3460	msedge.exe	86
PID 3460 wrote to memory of 4248	3460	msedge.exe	86
PID 3460 wrote to memory of 4248	3460	msedge.exe	86
PID 3460 wrote to memory of 4248	3460	msedge.exe	86
PID 3460 wrote to memory of 4248	3460	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\dfda2e5af4949f508eeb335c48d77ea1_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb70f746f8,0x7ffb70f74708,0x7ffb70f74718
  2⤵
  PID:3336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2244,10343263780776600993,2513899364908206723,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2248 /prefetch:2
  2⤵
  PID:1056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2244,10343263780776600993,2513899364908206723,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2312 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2244,10343263780776600993,2513899364908206723,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2736 /prefetch:8
  2⤵
  PID:4248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2244,10343263780776600993,2513899364908206723,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:3280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2244,10343263780776600993,2513899364908206723,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:1852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2244,10343263780776600993,2513899364908206723,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5016 /prefetch:1
  2⤵
  PID:2544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2244,10343263780776600993,2513899364908206723,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4140 /prefetch:1
  2⤵
  PID:3784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2244,10343263780776600993,2513899364908206723,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6120 /prefetch:1
  2⤵
  PID:2736
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2244,10343263780776600993,2513899364908206723,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6168 /prefetch:8
  2⤵
  PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2244,10343263780776600993,2513899364908206723,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6168 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2244,10343263780776600993,2513899364908206723,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5968 /prefetch:1
  2⤵
  PID:1396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2244,10343263780776600993,2513899364908206723,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5940 /prefetch:1
  2⤵
  PID:4644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2244,10343263780776600993,2513899364908206723,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4080 /prefetch:1
  2⤵
  PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2244,10343263780776600993,2513899364908206723,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5844 /prefetch:1
  2⤵
  PID:2296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2244,10343263780776600993,2513899364908206723,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4848 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6104

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1156

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3544

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1536

Network

DNS

8.8.8.8.in-addr.arpa

Remote address:

8.8.8.8:53

Request

8.8.8.8.in-addr.arpa

IN PTR

Response

8.8.8.8.in-addr.arpa

IN PTR

dnsgoogle
DNS

s.w.org

msedge.exe

Remote address:

8.8.8.8:53

Request

s.w.org

IN A

Response

s.w.org

IN A

192.0.77.48
DNS

tsouxtres.gr

msedge.exe

Remote address:

8.8.8.8:53

Request

tsouxtres.gr

IN A

Response

tsouxtres.gr

IN A

128.199.39.71
DNS

13.86.106.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

13.86.106.20.in-addr.arpa

IN PTR

Response
DNS

25.140.123.92.in-addr.arpa

Remote address:

8.8.8.8:53

Request

25.140.123.92.in-addr.arpa

IN PTR

Response

25.140.123.92.in-addr.arpa

IN PTR

a92-123-140-25deploystaticakamaitechnologiescom
DNS

75.159.190.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

75.159.190.20.in-addr.arpa

IN PTR

Response
DNS

95.221.229.192.in-addr.arpa

Remote address:

8.8.8.8:53

Request

95.221.229.192.in-addr.arpa

IN PTR

Response
DNS

71.39.199.128.in-addr.arpa

Remote address:

8.8.8.8:53

Request

71.39.199.128.in-addr.arpa

IN PTR

Response

71.39.199.128.in-addr.arpa

IN PTR

john mind-viewgr
DNS

www.youtube.com

msedge.exe

Remote address:

8.8.8.8:53

Request

www.youtube.com

IN A

Response

www.youtube.com

IN CNAME

youtube-ui.l.google.com

youtube-ui.l.google.com

IN A

216.58.213.14

youtube-ui.l.google.com

IN A

142.250.178.14

youtube-ui.l.google.com

IN A

216.58.212.206

youtube-ui.l.google.com

IN A

216.58.201.110

youtube-ui.l.google.com

IN A

216.58.212.238

youtube-ui.l.google.com

IN A

172.217.169.78

youtube-ui.l.google.com

IN A

172.217.169.14

youtube-ui.l.google.com

IN A

142.250.187.206

youtube-ui.l.google.com

IN A

142.250.200.46

youtube-ui.l.google.com

IN A

142.250.187.238

youtube-ui.l.google.com

IN A

142.250.200.14

youtube-ui.l.google.com

IN A

216.58.204.78

youtube-ui.l.google.com

IN A

142.250.179.238

youtube-ui.l.google.com

IN A

172.217.16.238

youtube-ui.l.google.com

IN A

142.250.180.14

youtube-ui.l.google.com

IN A

172.217.169.46
GET

http://www.youtube.com/embed/81CfKb4vEAs

msedge.exe

Remote address:

216.58.213.14:80

Request

GET /embed/81CfKb4vEAs HTTP/1.1
Host: www.youtube.com
Connection: keep-alive
Upgrade-Insecure-Requests: 1
DNT: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 301 Moved Permanently

Content-Type: application/binary
X-Content-Type-Options: nosniff
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Sat, 14 Sep 2024 08:50:30 GMT
Location: https://www.youtube.com/embed/81CfKb4vEAs
Server: ESF
Content-Length: 0
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET

http://www.youtube.com/embed/Sziscz_QuKM

msedge.exe

Remote address:

216.58.213.14:80

Request

GET /embed/Sziscz_QuKM HTTP/1.1
Host: www.youtube.com
Connection: keep-alive
Upgrade-Insecure-Requests: 1
DNT: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 301 Moved Permanently

Content-Type: application/binary
X-Content-Type-Options: nosniff
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Sat, 14 Sep 2024 08:50:30 GMT
Location: https://www.youtube.com/embed/Sziscz_QuKM
Server: ESF
Content-Length: 0
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET

https://www.youtube.com/embed/Sziscz_QuKM

msedge.exe

Remote address:

216.58.213.14:443

Request

GET /embed/Sziscz_QuKM HTTP/2.0
host: www.youtube.com
upgrade-insecure-requests: 1
dnt: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
sec-ch-ua-mobile: ?0
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://www.youtube.com/embed/81CfKb4vEAs

msedge.exe

Remote address:

216.58.213.14:443

Request

GET /embed/81CfKb4vEAs HTTP/2.0
host: www.youtube.com
upgrade-insecure-requests: 1
dnt: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
sec-ch-ua-mobile: ?0
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://www.youtube.com/s/player/e38bb6de/www-player.css

msedge.exe

Remote address:

216.58.213.14:443

Request

GET /s/player/e38bb6de/www-player.css HTTP/2.0
host: www.youtube.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: text/css,*/*;q=0.1
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://www.youtube.com/embed/Sziscz_QuKM
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://www.youtube.com/s/player/e38bb6de/player_ias.vflset/en_US/embed.js

msedge.exe

Remote address:

216.58.213.14:443

Request

GET /s/player/e38bb6de/player_ias.vflset/en_US/embed.js HTTP/2.0
host: www.youtube.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://www.youtube.com/embed/Sziscz_QuKM
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://www.youtube.com/s/player/e38bb6de/www-embed-player.vflset/www-embed-player.js

msedge.exe

Remote address:

216.58.213.14:443

Request

GET /s/player/e38bb6de/www-embed-player.vflset/www-embed-player.js HTTP/2.0
host: www.youtube.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://www.youtube.com/embed/Sziscz_QuKM
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://www.youtube.com/s/player/e38bb6de/player_ias.vflset/en_US/base.js

msedge.exe

Remote address:

216.58.213.14:443

Request

GET /s/player/e38bb6de/player_ias.vflset/en_US/base.js HTTP/2.0
host: www.youtube.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://www.youtube.com/embed/Sziscz_QuKM
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

http://pagead2.googlesyndication.com/pagead/show_ads.js

msedge.exe

Remote address:

216.58.204.66:80

Request

GET /pagead/show_ads.js HTTP/1.1
Host: pagead2.googlesyndication.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
DNT: 1
Accept: */*
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 200 OK

P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
Date: Sat, 14 Sep 2024 08:50:30 GMT
Expires: Sat, 14 Sep 2024 08:50:30 GMT
Cache-Control: private, max-age=3600
Content-Type: text/javascript; charset=UTF-8
ETag: 781661869154724294
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 10583
X-XSS-Protection: 0
DNS

www.tsouxtres.gr

msedge.exe

Remote address:

8.8.8.8:53

Request

www.tsouxtres.gr

IN A

Response

www.tsouxtres.gr

IN CNAME

tsouxtres.gr

tsouxtres.gr

IN A

128.199.39.71
DNS

www.sidages.gr

msedge.exe

Remote address:

8.8.8.8:53

Request

www.sidages.gr

IN A

Response

www.sidages.gr

IN A

104.21.74.228

www.sidages.gr

IN A

172.67.207.46
GET

http://www.sidages.gr/sites/all/themes/sidages_theme/images/ad_banners/logo_200x81.png

msedge.exe

Remote address:

104.21.74.228:80

Request

GET /sites/all/themes/sidages_theme/images/ad_banners/logo_200x81.png HTTP/1.1
Host: www.sidages.gr
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
DNT: 1
Accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 301 Moved Permanently

Date: Sat, 14 Sep 2024 08:50:31 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sat, 14 Sep 2024 09:50:31 GMT
Location: https://www.sidages.gr/sites/all/themes/sidages_theme/images/ad_banners/logo_200x81.png
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xVVfZ4eBFJJWdUUXlnBezle7OShwYHCB6BzB%2FcnE1J3a6JSbPaVX4YpJoqX10Vsnot%2BlDKUBDd8pt6byO6S9etlcdpl70aG5SevfIxOGJ8%2B%2Fwtl57TUr2RIo7WiZUtgrbw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8c2f21404d870b90-AMS
alt-svc: h3=":443"; ma=86400
DNS

i.ytimg.com

msedge.exe

Remote address:

8.8.8.8:53

Request

i.ytimg.com

IN A

Response

i.ytimg.com

IN A

142.250.180.22

i.ytimg.com

IN A

216.58.212.246

i.ytimg.com

IN A

142.250.178.22

i.ytimg.com

IN A

142.250.187.214

i.ytimg.com

IN A

172.217.169.86

i.ytimg.com

IN A

172.217.16.246

i.ytimg.com

IN A

216.58.204.86

i.ytimg.com

IN A

216.58.212.214

i.ytimg.com

IN A

216.58.201.118

i.ytimg.com

IN A

142.250.179.246

i.ytimg.com

IN A

142.250.200.22

i.ytimg.com

IN A

142.250.187.246

i.ytimg.com

IN A

172.217.169.22

i.ytimg.com

IN A

142.250.200.54
GET

https://www.sidages.gr/sites/all/themes/sidages_theme/images/ad_banners/logo_200x81.png

msedge.exe

Remote address:

104.21.74.228:443

Request

GET /sites/all/themes/sidages_theme/images/ad_banners/logo_200x81.png HTTP/2.0
host: www.sidages.gr
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
dnt: 1
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 404

date: Sat, 14 Sep 2024 08:50:31 GMT
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
x-content-type-options: nosniff
x-drupal-cache: MISS
expires: Sun, 19 Nov 1978 05:00:00 GMT
cache-control: no-cache, must-revalidate
content-language: el
x-frame-options: SAMEORIGIN
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nR059%2BFza7oeD96WJFapZPq6hmsWEGEQk4GFaMCd4ouORQ4bxvdnmCvbT2pJ5EAhvNQFuYab%2BL7oXXfKyNInUBByyD72sXyZ9d9h0QojP1gGulf7P5PgK5h4LiWIA85hJQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8c2f214189520485-CDG
content-encoding: br
alt-svc: h3=":443"; ma=86400
DNS

a.nel.cloudflare.com

msedge.exe

Remote address:

8.8.8.8:53

Request

a.nel.cloudflare.com

IN A

Response

a.nel.cloudflare.com

IN A

35.190.80.1
OPTIONS

https://a.nel.cloudflare.com/report/v4?s=nR059%2BFza7oeD96WJFapZPq6hmsWEGEQk4GFaMCd4ouORQ4bxvdnmCvbT2pJ5EAhvNQFuYab%2BL7oXXfKyNInUBByyD72sXyZ9d9h0QojP1gGulf7P5PgK5h4LiWIA85hJQ%3D%3D

msedge.exe

Remote address:

35.190.80.1:443

Request

OPTIONS /report/v4?s=nR059%2BFza7oeD96WJFapZPq6hmsWEGEQk4GFaMCd4ouORQ4bxvdnmCvbT2pJ5EAhvNQFuYab%2BL7oXXfKyNInUBByyD72sXyZ9d9h0QojP1gGulf7P5PgK5h4LiWIA85hJQ%3D%3D HTTP/2.0
host: a.nel.cloudflare.com
origin: https://www.sidages.gr
access-control-request-method: POST
access-control-request-headers: content-type
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
DNS

googleads.g.doubleclick.net

msedge.exe

Remote address:

8.8.8.8:53

Request

googleads.g.doubleclick.net

IN A

Response

googleads.g.doubleclick.net

IN A

142.250.179.226
DNS

172.214.232.199.in-addr.arpa

Remote address:

8.8.8.8:53

Request

172.214.232.199.in-addr.arpa

IN PTR

Response
DNS

14.213.58.216.in-addr.arpa

Remote address:

8.8.8.8:53

Request

14.213.58.216.in-addr.arpa

IN PTR

Response

14.213.58.216.in-addr.arpa

IN PTR

lhr25s25-in-f141e100net

14.213.58.216.in-addr.arpa

IN PTR

ber01s14-in-f14�H
DNS

66.204.58.216.in-addr.arpa

Remote address:

8.8.8.8:53

Request

66.204.58.216.in-addr.arpa

IN PTR

Response

66.204.58.216.in-addr.arpa

IN PTR

lhr25s13-in-f661e100net

66.204.58.216.in-addr.arpa

IN PTR

lhr25s13-in-f2�H

66.204.58.216.in-addr.arpa

IN PTR

lhr48s49-in-f2�H
DNS

228.74.21.104.in-addr.arpa

Remote address:

8.8.8.8:53

Request

228.74.21.104.in-addr.arpa

IN PTR

Response
DNS

22.180.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

22.180.250.142.in-addr.arpa

IN PTR

Response

22.180.250.142.in-addr.arpa

IN PTR

lhr25s32-in-f221e100net
DNS

1.80.190.35.in-addr.arpa

Remote address:

8.8.8.8:53

Request

1.80.190.35.in-addr.arpa

IN PTR

Response

1.80.190.35.in-addr.arpa

IN PTR

18019035bcgoogleusercontentcom
GET

https://googleads.g.doubleclick.net/pagead/id

msedge.exe

Remote address:

142.250.179.226:443

Request

GET /pagead/id HTTP/2.0
host: googleads.g.doubleclick.net
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
origin: https://www.youtube.com
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://www.youtube.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
DNS

static.doubleclick.net

msedge.exe

Remote address:

8.8.8.8:53

Request

static.doubleclick.net

IN A

Response

static.doubleclick.net

IN A

142.250.179.230
DNS

jnn-pa.googleapis.com

msedge.exe

Remote address:

8.8.8.8:53

Request

jnn-pa.googleapis.com

IN A

Response

jnn-pa.googleapis.com

IN A

172.217.16.234

jnn-pa.googleapis.com

IN A

142.250.200.42

jnn-pa.googleapis.com

IN A

216.58.201.106

jnn-pa.googleapis.com

IN A

172.217.169.10

jnn-pa.googleapis.com

IN A

142.250.178.10

jnn-pa.googleapis.com

IN A

216.58.204.74

jnn-pa.googleapis.com

IN A

216.58.213.10

jnn-pa.googleapis.com

IN A

142.250.187.234

jnn-pa.googleapis.com

IN A

142.250.179.234

jnn-pa.googleapis.com

IN A

216.58.212.234

jnn-pa.googleapis.com

IN A

142.250.180.10

jnn-pa.googleapis.com

IN A

142.250.200.10

jnn-pa.googleapis.com

IN A

142.250.187.202
GET

https://static.doubleclick.net/instream/ad_status.js

msedge.exe

Remote address:

142.250.179.230:443

Request

GET /instream/ad_status.js HTTP/2.0
host: static.doubleclick.net
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://www.youtube.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
OPTIONS

https://jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create

msedge.exe

Remote address:

172.217.16.234:443

Request

OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/2.0
host: jnn-pa.googleapis.com
accept: */*
access-control-request-method: POST
access-control-request-headers: content-type,x-goog-api-key,x-user-agent
origin: https://www.youtube.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
sec-fetch-mode: cors
sec-fetch-site: cross-site
sec-fetch-dest: empty
referer: https://www.youtube.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
OPTIONS

https://jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create

msedge.exe

Remote address:

172.217.16.234:443

Request

OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/2.0
host: jnn-pa.googleapis.com
accept: */*
access-control-request-method: POST
access-control-request-headers: content-type,x-goog-api-key,x-user-agent
origin: https://www.youtube.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
sec-fetch-mode: cors
sec-fetch-site: cross-site
sec-fetch-dest: empty
referer: https://www.youtube.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
DNS

play.google.com

msedge.exe

Remote address:

8.8.8.8:53

Request

play.google.com

IN A

Response

play.google.com

IN A

216.58.212.206
OPTIONS

https://play.google.com/log?format=json&hasfast=true&authuser=0

msedge.exe

Remote address:

216.58.212.206:443

Request

OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/2.0
host: play.google.com
accept: */*
access-control-request-method: POST
access-control-request-headers: x-goog-authuser
origin: https://www.youtube.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
sec-fetch-mode: cors
sec-fetch-site: cross-site
sec-fetch-dest: empty
referer: https://www.youtube.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
OPTIONS

https://play.google.com/log?format=json&hasfast=true&authuser=0

msedge.exe

Remote address:

216.58.212.206:443

Request

OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/2.0
host: play.google.com
accept: */*
access-control-request-method: POST
access-control-request-headers: x-goog-authuser
origin: https://www.youtube.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
sec-fetch-mode: cors
sec-fetch-site: cross-site
sec-fetch-dest: empty
referer: https://www.youtube.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
OPTIONS

https://play.google.com/log?format=json&hasfast=true&authuser=0

msedge.exe

Remote address:

216.58.212.206:443

Request

OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/2.0
host: play.google.com
accept: */*
access-control-request-method: POST
access-control-request-headers: x-goog-authuser
origin: https://www.youtube.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
sec-fetch-mode: cors
sec-fetch-site: cross-site
sec-fetch-dest: empty
referer: https://www.youtube.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
OPTIONS

https://play.google.com/log?format=json&hasfast=true&authuser=0

msedge.exe

Remote address:

216.58.212.206:443

Request

OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/2.0
host: play.google.com
accept: */*
access-control-request-method: POST
access-control-request-headers: x-goog-authuser
origin: https://www.youtube.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
sec-fetch-mode: cors
sec-fetch-site: cross-site
sec-fetch-dest: empty
referer: https://www.youtube.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
DNS

226.179.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

226.179.250.142.in-addr.arpa

IN PTR

Response

226.179.250.142.in-addr.arpa

IN PTR

lhr25s31-in-f21e100net
DNS

230.179.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

230.179.250.142.in-addr.arpa

IN PTR

Response

230.179.250.142.in-addr.arpa

IN PTR

lhr25s31-in-f61e100net
DNS

234.16.217.172.in-addr.arpa

Remote address:

8.8.8.8:53

Request

234.16.217.172.in-addr.arpa

IN PTR

Response

234.16.217.172.in-addr.arpa

IN PTR

lhr48s28-in-f101e100net

234.16.217.172.in-addr.arpa

IN PTR

mad08s04-in-f10�I
DNS

206.212.58.216.in-addr.arpa

Remote address:

8.8.8.8:53

Request

206.212.58.216.in-addr.arpa

IN PTR

Response

206.212.58.216.in-addr.arpa

IN PTR

ams16s21-in-f141e100net

206.212.58.216.in-addr.arpa

IN PTR

lhr25s27-in-f14�I

206.212.58.216.in-addr.arpa

IN PTR

ams16s21-in-f206�I
DNS

241.150.49.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

241.150.49.20.in-addr.arpa

IN PTR

Response
DNS

tpc.googlesyndication.com

msedge.exe

Remote address:

8.8.8.8:53

Request

tpc.googlesyndication.com

IN A

Response

tpc.googlesyndication.com

IN A

172.217.169.33
GET

https://tpc.googlesyndication.com/sodar/sodar2.js

msedge.exe

Remote address:

172.217.169.33:443

Request

GET /sodar/sodar2.js HTTP/2.0
host: tpc.googlesyndication.com
sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Microsoft Edge";v="92"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
DNS

33.169.217.172.in-addr.arpa

Remote address:

8.8.8.8:53

Request

33.169.217.172.in-addr.arpa

IN PTR

Response

33.169.217.172.in-addr.arpa

IN PTR

lhr48s08-in-f11e100net
DNS

50.23.12.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

50.23.12.20.in-addr.arpa

IN PTR

Response
DNS

18.31.95.13.in-addr.arpa

Remote address:

8.8.8.8:53

Request

18.31.95.13.in-addr.arpa

IN PTR

Response
DNS

42.56.20.217.in-addr.arpa

Remote address:

8.8.8.8:53

Request

42.56.20.217.in-addr.arpa

IN PTR

Response
DNS

172.210.232.199.in-addr.arpa

Remote address:

8.8.8.8:53

Request

172.210.232.199.in-addr.arpa

IN PTR

Response
DNS

19.229.111.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

19.229.111.52.in-addr.arpa

IN PTR

Response
DNS

googleads.g.doubleclick.net

msedge.exe

Remote address:

8.8.8.8:53

Request

googleads.g.doubleclick.net

IN A

Response

googleads.g.doubleclick.net

IN A

142.250.178.2
DNS

2.178.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

2.178.250.142.in-addr.arpa

IN PTR

Response

2.178.250.142.in-addr.arpa

IN PTR

lhr48s27-in-f21e100net

142.250.180.14:445

www.google-analytics.com

260 B
5
128.199.39.71:443

tsouxtres.gr

tls

msedge.exe

863 B
1.7kB
7
6
128.199.39.71:443

tsouxtres.gr

tls

msedge.exe

863 B
1.7kB
7
6
128.199.39.71:443

tsouxtres.gr

tls

msedge.exe

863 B
1.7kB
7
6
128.199.39.71:443

tsouxtres.gr

tls

msedge.exe

863 B
1.7kB
7
6
128.199.39.71:443

tsouxtres.gr

tls

msedge.exe

863 B
1.7kB
7
6
128.199.39.71:443

tsouxtres.gr

tls

msedge.exe

863 B
1.7kB
7
6
128.199.39.71:443

tsouxtres.gr

tls

msedge.exe

863 B
1.7kB
7
5
128.199.39.71:443

tsouxtres.gr

tls

msedge.exe

863 B
1.7kB
7
5
128.199.39.71:443

tsouxtres.gr

tls

msedge.exe

863 B
1.7kB
7
5
128.199.39.71:443

tsouxtres.gr

tls

msedge.exe

863 B
1.7kB
7
5
128.199.39.71:443

tsouxtres.gr

tls

msedge.exe

863 B
1.7kB
7
5
128.199.39.71:443

tsouxtres.gr

tls

msedge.exe

863 B
1.7kB
7
6
216.58.213.14:80

http://www.youtube.com/embed/81CfKb4vEAs

http

msedge.exe

786 B
682 B
7
6

HTTP Request

GET http://www.youtube.com/embed/81CfKb4vEAs

HTTP Response

301
216.58.213.14:80

http://www.youtube.com/embed/Sziscz_QuKM

http

msedge.exe

786 B
682 B
7
6

HTTP Request

GET http://www.youtube.com/embed/Sziscz_QuKM

HTTP Response

301
128.199.39.71:443

tsouxtres.gr

tls

msedge.exe

863 B
1.7kB
7
5
128.199.39.71:443

tsouxtres.gr

tls

msedge.exe

863 B
1.7kB
7
5
128.199.39.71:443

tsouxtres.gr

tls

msedge.exe

863 B
1.7kB
7
5
128.199.39.71:443

tsouxtres.gr

tls

msedge.exe

863 B
1.7kB
7
5
128.199.39.71:443

tsouxtres.gr

tls

msedge.exe

863 B
1.7kB
7
5
128.199.39.71:443

tsouxtres.gr

tls

msedge.exe

863 B
1.7kB
7
5
216.58.213.14:443

https://www.youtube.com/s/player/e38bb6de/player_ias.vflset/en_US/base.js

tls, http2

msedge.exe

22.4kB
1.1MB
449
792

HTTP Request

GET https://www.youtube.com/embed/Sziscz_QuKM

HTTP Request

GET https://www.youtube.com/embed/81CfKb4vEAs

HTTP Request

GET https://www.youtube.com/s/player/e38bb6de/www-player.css

HTTP Request

GET https://www.youtube.com/s/player/e38bb6de/player_ias.vflset/en_US/embed.js

HTTP Request

GET https://www.youtube.com/s/player/e38bb6de/www-embed-player.vflset/www-embed-player.js

HTTP Request

GET https://www.youtube.com/s/player/e38bb6de/player_ias.vflset/en_US/base.js
216.58.213.14:443

www.youtube.com

tls, http2

msedge.exe

1.0kB
8.1kB
10
9
128.199.39.71:443

tsouxtres.gr

tls

msedge.exe

863 B
1.7kB
7
6
128.199.39.71:443

tsouxtres.gr

tls

msedge.exe

863 B
1.7kB
7
6
128.199.39.71:443

tsouxtres.gr

tls

msedge.exe

863 B
1.7kB
7
5
128.199.39.71:443

tsouxtres.gr

tls

msedge.exe

863 B
1.7kB
7
6
128.199.39.71:443

tsouxtres.gr

tls

msedge.exe

863 B
1.7kB
7
5
128.199.39.71:443

tsouxtres.gr

tls

msedge.exe

863 B
1.7kB
7
5
216.58.204.66:80

http://pagead2.googlesyndication.com/pagead/show_ads.js

http

msedge.exe

834 B
11.8kB
11
14

HTTP Request

GET http://pagead2.googlesyndication.com/pagead/show_ads.js

HTTP Response

200
185.156.177.85:80

msedge.exe

260 B
5
104.21.74.228:80

http://www.sidages.gr/sites/all/themes/sidages_theme/images/ad_banners/logo_200x81.png

http

msedge.exe

731 B
1.2kB
7
6

HTTP Request

GET http://www.sidages.gr/sites/all/themes/sidages_theme/images/ad_banners/logo_200x81.png

HTTP Response

301
128.199.39.71:443

www.tsouxtres.gr

tls

msedge.exe

863 B
1.7kB
7
5
128.199.39.71:443

www.tsouxtres.gr

tls

msedge.exe

863 B
1.7kB
7
6
104.21.74.228:443

https://www.sidages.gr/sites/all/themes/sidages_theme/images/ad_banners/logo_200x81.png

tls, http2

msedge.exe

1.7kB
4.3kB
14
14

HTTP Request

GET https://www.sidages.gr/sites/all/themes/sidages_theme/images/ad_banners/logo_200x81.png

HTTP Response

404
142.250.180.22:443

i.ytimg.com

tls, http2

msedge.exe

1.0kB
6.1kB
10
10
185.156.177.85:80

msedge.exe

260 B
5
35.190.80.1:443

https://a.nel.cloudflare.com/report/v4?s=nR059%2BFza7oeD96WJFapZPq6hmsWEGEQk4GFaMCd4ouORQ4bxvdnmCvbT2pJ5EAhvNQFuYab%2BL7oXXfKyNInUBByyD72sXyZ9d9h0QojP1gGulf7P5PgK5h4LiWIA85hJQ%3D%3D

tls, http2

msedge.exe

1.8kB
4.6kB
14
15

HTTP Request

OPTIONS https://a.nel.cloudflare.com/report/v4?s=nR059%2BFza7oeD96WJFapZPq6hmsWEGEQk4GFaMCd4ouORQ4bxvdnmCvbT2pJ5EAhvNQFuYab%2BL7oXXfKyNInUBByyD72sXyZ9d9h0QojP1gGulf7P5PgK5h4LiWIA85hJQ%3D%3D
142.250.180.14:139

www.google-analytics.com

260 B
5
142.250.179.226:443

https://googleads.g.doubleclick.net/pagead/id

tls, http2

msedge.exe

1.8kB
6.8kB
15
17

HTTP Request

GET https://googleads.g.doubleclick.net/pagead/id
142.250.179.230:443

https://static.doubleclick.net/instream/ad_status.js

tls, http2

msedge.exe

1.8kB
6.7kB
15
14

HTTP Request

GET https://static.doubleclick.net/instream/ad_status.js
172.217.16.234:443

https://jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create

tls, http2

msedge.exe

2.0kB
7.0kB
17
19

HTTP Request

OPTIONS https://jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create

HTTP Request

OPTIONS https://jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
172.217.16.234:443

jnn-pa.googleapis.com

tls, http2

msedge.exe

999 B
6.0kB
9
8
216.58.212.206:443

https://play.google.com/log?format=json&hasfast=true&authuser=0

tls, http2

msedge.exe

2.3kB
8.8kB
20
22

HTTP Request

OPTIONS https://play.google.com/log?format=json&hasfast=true&authuser=0

HTTP Request

OPTIONS https://play.google.com/log?format=json&hasfast=true&authuser=0

HTTP Request

OPTIONS https://play.google.com/log?format=json&hasfast=true&authuser=0

HTTP Request

OPTIONS https://play.google.com/log?format=json&hasfast=true&authuser=0
216.58.212.206:443

play.google.com

tls, http2

msedge.exe

989 B
7.6kB
9
9
216.58.212.206:443

play.google.com

tls, http2

msedge.exe

989 B
7.6kB
9
9
216.58.212.206:443

play.google.com

tls, http2

msedge.exe

989 B
7.6kB
9
9
128.199.39.71:443

tsouxtres.gr

tls

msedge.exe

863 B
1.7kB
7
5
128.199.39.71:443

tsouxtres.gr

tls

msedge.exe

863 B
1.7kB
7
5
128.199.39.71:443

tsouxtres.gr

tls

msedge.exe

863 B
1.7kB
7
5
172.217.169.33:443

https://tpc.googlesyndication.com/sodar/sodar2.js

tls, http2

msedge.exe

1.9kB
13.2kB
18
19

HTTP Request

GET https://tpc.googlesyndication.com/sodar/sodar2.js

8.8.8.8:53

8.8.8.8.in-addr.arpa

dns

66 B
90 B
1
1

DNS Request

8.8.8.8.in-addr.arpa
8.8.8.8:53

s.w.org

dns

msedge.exe

53 B
69 B
1
1

DNS Request

s.w.org

DNS Response

192.0.77.48
8.8.8.8:53

tsouxtres.gr

dns

msedge.exe

58 B
74 B
1
1

DNS Request

tsouxtres.gr

DNS Response

128.199.39.71
8.8.8.8:53

13.86.106.20.in-addr.arpa

dns

71 B
157 B
1
1

DNS Request

13.86.106.20.in-addr.arpa
8.8.8.8:53

25.140.123.92.in-addr.arpa

dns

72 B
137 B
1
1

DNS Request

25.140.123.92.in-addr.arpa
8.8.8.8:53

75.159.190.20.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

75.159.190.20.in-addr.arpa
8.8.8.8:53

95.221.229.192.in-addr.arpa

dns

73 B
144 B
1
1

DNS Request

95.221.229.192.in-addr.arpa
8.8.8.8:53

71.39.199.128.in-addr.arpa

dns

72 B
103 B
1
1

DNS Request

71.39.199.128.in-addr.arpa
8.8.8.8:53

www.youtube.com

dns

msedge.exe

61 B
351 B
1
1

DNS Request

www.youtube.com

DNS Response

216.58.213.14

142.250.178.14

216.58.212.206

216.58.201.110

216.58.212.238

172.217.169.78

172.217.169.14

142.250.187.206

142.250.200.46

142.250.187.238

142.250.200.14

216.58.204.78

142.250.179.238

172.217.16.238

142.250.180.14

172.217.169.46
8.8.8.8:53

www.tsouxtres.gr

dns

msedge.exe

62 B
92 B
1
1

DNS Request

www.tsouxtres.gr

DNS Response

128.199.39.71
8.8.8.8:53

www.sidages.gr

dns

msedge.exe

60 B
92 B
1
1

DNS Request

www.sidages.gr

DNS Response

104.21.74.228

172.67.207.46
8.8.8.8:53

i.ytimg.com

dns

msedge.exe

57 B
281 B
1
1

DNS Request

i.ytimg.com

DNS Response

142.250.180.22

216.58.212.246

142.250.178.22

142.250.187.214

172.217.169.86

172.217.16.246

216.58.204.86

216.58.212.214

216.58.201.118

142.250.179.246

142.250.200.22

142.250.187.246

172.217.169.22

142.250.200.54
216.58.213.14:443

www.youtube.com

https

msedge.exe

28.3kB
8.8kB
33
28
8.8.8.8:53

a.nel.cloudflare.com

dns

msedge.exe

66 B
82 B
1
1

DNS Request

a.nel.cloudflare.com

DNS Response

35.190.80.1
8.8.8.8:53

googleads.g.doubleclick.net

dns

msedge.exe

73 B
89 B
1
1

DNS Request

googleads.g.doubleclick.net

DNS Response

142.250.179.226
8.8.8.8:53

172.214.232.199.in-addr.arpa

dns

74 B
128 B
1
1

DNS Request

172.214.232.199.in-addr.arpa
8.8.8.8:53

14.213.58.216.in-addr.arpa

dns

72 B
141 B
1
1

DNS Request

14.213.58.216.in-addr.arpa
8.8.8.8:53

66.204.58.216.in-addr.arpa

dns

72 B
169 B
1
1

DNS Request

66.204.58.216.in-addr.arpa
8.8.8.8:53

228.74.21.104.in-addr.arpa

dns

72 B
134 B
1
1

DNS Request

228.74.21.104.in-addr.arpa
8.8.8.8:53

22.180.250.142.in-addr.arpa

dns

73 B
112 B
1
1

DNS Request

22.180.250.142.in-addr.arpa
8.8.8.8:53

1.80.190.35.in-addr.arpa

dns

70 B
120 B
1
1

DNS Request

1.80.190.35.in-addr.arpa
35.190.80.1:443

a.nel.cloudflare.com

https

msedge.exe

4.0kB
4.0kB
7
8
8.8.8.8:53

static.doubleclick.net

dns

msedge.exe

68 B
84 B
1
1

DNS Request

static.doubleclick.net

DNS Response

142.250.179.230
142.250.179.226:443

googleads.g.doubleclick.net

https

msedge.exe

3.9kB
7.9kB
12
13
8.8.8.8:53

jnn-pa.googleapis.com

dns

msedge.exe

67 B
275 B
1
1

DNS Request

jnn-pa.googleapis.com

DNS Response

172.217.16.234

142.250.200.42

216.58.201.106

172.217.169.10

142.250.178.10

216.58.204.74

216.58.213.10

142.250.187.234

142.250.179.234

216.58.212.234

142.250.180.10

142.250.200.10

142.250.187.202
172.217.16.234:443

jnn-pa.googleapis.com

https

msedge.exe

8.8kB
96.8kB
48
83
8.8.8.8:53

play.google.com

dns

msedge.exe

61 B
77 B
1
1

DNS Request

play.google.com

DNS Response

216.58.212.206
216.58.212.206:443

play.google.com

https

msedge.exe

7.5kB
8.5kB
14
18
8.8.8.8:53

226.179.250.142.in-addr.arpa

dns

74 B
112 B
1
1

DNS Request

226.179.250.142.in-addr.arpa
8.8.8.8:53

230.179.250.142.in-addr.arpa

dns

74 B
112 B
1
1

DNS Request

230.179.250.142.in-addr.arpa
8.8.8.8:53

234.16.217.172.in-addr.arpa

dns

73 B
142 B
1
1

DNS Request

234.16.217.172.in-addr.arpa
8.8.8.8:53

206.212.58.216.in-addr.arpa

dns

73 B
173 B
1
1

DNS Request

206.212.58.216.in-addr.arpa
224.0.0.251:5353

msedge.exe

588 B
9
8.8.8.8:53

241.150.49.20.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

241.150.49.20.in-addr.arpa
8.8.8.8:53

tpc.googlesyndication.com

dns

msedge.exe

71 B
87 B
1
1

DNS Request

tpc.googlesyndication.com

DNS Response

172.217.169.33
172.217.169.33:443

tpc.googlesyndication.com

https

msedge.exe

4.1kB
12.4kB
13
14
8.8.8.8:53

33.169.217.172.in-addr.arpa

dns

73 B
111 B
1
1

DNS Request

33.169.217.172.in-addr.arpa
8.8.8.8:53

50.23.12.20.in-addr.arpa

dns

70 B
156 B
1
1

DNS Request

50.23.12.20.in-addr.arpa
8.8.8.8:53

18.31.95.13.in-addr.arpa

dns

70 B
144 B
1
1

DNS Request

18.31.95.13.in-addr.arpa
216.58.212.206:443

play.google.com

https

msedge.exe

4.8kB
3.4kB
10
11
8.8.8.8:53

42.56.20.217.in-addr.arpa

dns

71 B
131 B
1
1

DNS Request

42.56.20.217.in-addr.arpa
8.8.8.8:53

172.210.232.199.in-addr.arpa

dns

74 B
128 B
1
1

DNS Request

172.210.232.199.in-addr.arpa
8.8.8.8:53

19.229.111.52.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

19.229.111.52.in-addr.arpa
8.8.8.8:53

googleads.g.doubleclick.net

dns

msedge.exe

73 B
89 B
1
1

DNS Request

googleads.g.doubleclick.net

DNS Response

142.250.178.2
142.250.178.2:443

googleads.g.doubleclick.net

https

msedge.exe

4.1kB
4.3kB
16
18
8.8.8.8:53

2.178.250.142.in-addr.arpa

dns

72 B
110 B
1
1

DNS Request

2.178.250.142.in-addr.arpa

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
d7114a6cd851f9bf56cf771c37d664a2

SHA1
769c5d04fd83e583f15ab1ef659de8f883ecab8a

SHA256
d2c75c7d68c474d4b8847b4ba6cfd09fe90717f46dd398c86483d825a66e977e

SHA512
33bdae2305ae98e7c0de576de5a6600bd70a425e7b891d745cba9de992036df1b3d1df9572edb0f89f320e50962d06532dae9491985b6b57fd37d5f46f7a2ff8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
719923124ee00fb57378e0ebcbe894f7

SHA1
cc356a7d27b8b27dc33f21bd4990f286ee13a9f9

SHA256
aa22ab845fa08c786bd3366ec39f733d5be80e9ac933ed115ff048ff30090808

SHA512
a207b6646500d0d504cf70ee10f57948e58dab7f214ad2e7c4af0e7ca23ce1d37c8c745873137e6c55bdcf0f527031a66d9cc54805a0eac3678be6dd497a5bbc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
120B

MD5
249c525870ae35926c67966525075fda

SHA1
ff7ca26730ff081b3ddfcfd132e18b94dad5bb50

SHA256
9e0939cbbb33662748afa03d895f8e681f372e46957b7cd4dde10838443b53db

SHA512
e11eefc6154ad48d7ed4adb63ba5ecd565adb1ed8eeb2ca8a9bbfb93966f6505cbfcc81acee7b109db30c0f56944441a9a696e35074df398f837350deba94063

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
144B

MD5
eeef2ed4c226366cc880895ebc207316

SHA1
d92c6c2f579b014867ef220776074c469f17913b

SHA256
5a20f1dc87da8caa4a7aa41c2164782247db7ef357d2eb4fe8e6c62d2a16ea51

SHA512
508234f9ab72395e56b19f57e4eb8c439ef1aa4faa98ca8e5a2c0ae0866418dae63a9169d0915a23b0d8e63b18ad16473fd832326ad075aec7ca6dc3fe909a7d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
5ad1539d750127a5de4fb33c92b52232

SHA1
73bf7c53068bff66d2468a3fe9547893f4eebb3c

SHA256
c6066f3ba04b933e562881c4c8baad4a78653acc306d5e32a1fca8e188fbd9fc

SHA512
3e7b935967b4147ce25d337a6975f261da6450fee42ed2fd97b936fa08db8dc0c7c9ea0301e273eefc1268c87a20f78945ea834aac6d8a0773371dfa6c189920

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
b247fa1eba91ad9bd3b08095f11069ee

SHA1
b98b4f6cf06962424551f67747d2ed91e38fb8d5

SHA256
d42d16466b93cd21125586a4b00c552dda4d438d843e3c8594557be4cd750476

SHA512
92c1bb71d37c219a1beba7095f6a4e89e352554c58d630ff844c5b96de2472405daabe4d2f662af28679cd6c73254fd9dd9abfb5967fcdfeb0b5ae04752da00e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
5d81b97879f064bc5dd68eba535fe5bc

SHA1
33fc7cb03f3a8e925847bd09e88154ddb6e214d9

SHA256
700cb3bbc12d291ab47809c208e64ea43545c890110338da7e00cbe46598d0a9

SHA512
fb7ca8dc8e8b61cee4b45dcf91fa8807ab41d50794bc6231d9fe0de9267c055c02a30f487858728fb1df0b58e0d26fbb520b249681bc512b9c9978465988abb6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
588694d98049e8ce92619362564572ee

SHA1
88a91a731cca1047aea1dd4ba5a4c14dae1fcb38

SHA256
b3a7d2f6868e410393b8fb884e427770658a81f6817cd9d3d0f95166dedfbb83

SHA512
2f3802e36c177c8b5d2d726fb5f9d451e389882f0295efcfd8cfc6025c8cea4331920b169c487634aea38591a0e6eb727c8d804963ac35f2fa7eb646164ffdfe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
add47ea322ca47b9084964cfb3ff35f7

SHA1
c9733a9ae7602623e8a03e5b3f0eae32a409d78a

SHA256
40b631507c0e1dcc2fceb847da59abfe100e7f08ed0e5359210239b69c3d5582

SHA512
5c8c78aa18f6dbe85a20c7efd49e197edf1a58c472c57060e9032f6b81aa3127c89efbfbbf3ac16367e183ead6ad6da4ea38ccf6b98b3067139865e622bdf382

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
1844bf9a001a5604d529ec8ec5c50709

SHA1
914a0160503e8054ac225f83755c7e3d02eac6be

SHA256
673634e3a4a28a770579e54ac21a3d5e83becd75542539aa6254d8edae9daad6

SHA512
3eac278a39b5bd792f37d931ffbbb276140b92c48d4eada514ead0909458ac05f96c62fc2b57f5ec44116c056a88e4a464885711104bc2dd328732763a933270

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

DNS Request

DNS Request

DNS Response

DNS Request

DNS Response

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Response

DNS Request

DNS Response

DNS Request

DNS Response

DNS Request

DNS Response

DNS Request

DNS Response

DNS Request

DNS Response

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Response

DNS Request

DNS Response

DNS Request

DNS Response

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Response

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request