4a41007510924a65cc9747f48d1869455dbd7fc329ddf9b29011d225405a4b80

Analysis

max time kernel
132s
max time network
139s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
27/09/2024, 19:28 UTC

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

fac4d95e1092c2773ca3a796b03ff16c_JaffaCakes118.html
Size

22KB
MD5

fac4d95e1092c2773ca3a796b03ff16c
SHA1

8d0a5d04ea9e853e13e845acdcd97c09efbc5b84
SHA256

4a41007510924a65cc9747f48d1869455dbd7fc329ddf9b29011d225405a4b80
SHA512

dacc7d9910fac8913ef4b8bf322d0ee9ce9312a10b91b490bccb380b37809e8180a1fd4673af54c6b9782c728f13bac1199b35866330d96bcb31b9e699993f0a
SSDEEP

384:wk4a3/TZAuGU/jIB0nDBMTQLy7iHOkLFOiwe50y:wkpdAuGEjISDCsjwe57

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	IEXPLORE.EXE

Modifies Internet Explorer settings 1 TTPs 60 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "0"	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "433627157"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "6"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "9883"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "6"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\NumberOfSubdomains = "1"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "197"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "9883"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "115"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "115"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "9883"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "282"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "282"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "197"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "282"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "115"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{A1682701-7D06-11EF-8D6F-62CAC36041A9} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\DOMStorage	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "0"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "121"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 9001137d1311db01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "6"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "121"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "197"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "0"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "121"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000d793ad506ece624c80bd99362738d9070000000002000000000010660000000100002000000059d56c0a758cbcee851d1227440452277a76a0f78f6470c644f64db39c309154000000000e8000000002000020000000458975bc561637f011281bcea903ae80ddf47162b5128f6e4379bc1a2ca89c0420000000010c5f1a5b87eba62049fc4f43425857186bcebee27fda4d55b2b4ca35fd3adf4000000013341dd60ea0a3526e93501bdb8efdd37f9db8a1923c7e721fe29d2e51d8f53ea367e3bb770d64daa5d5e1ecbe7d8c1a9e9983fb47abcc5d03f31f6ccce772c3	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
300	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
300	iexplore.exe
300	iexplore.exe
2488	IEXPLORE.EXE
2488	IEXPLORE.EXE
2488	IEXPLORE.EXE
2488	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 300 wrote to memory of 2488	300	iexplore.exe	31
PID 300 wrote to memory of 2488	300	iexplore.exe	31
PID 300 wrote to memory of 2488	300	iexplore.exe	31
PID 300 wrote to memory of 2488	300	iexplore.exe	31

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\fac4d95e1092c2773ca3a796b03ff16c_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:300
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:300 CREDAT:275457 /prefetch:2
  2⤵
  - System Location Discovery: System Language Discovery
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2488

Network

DNS

taktycznie.net

IEXPLORE.EXE

Remote address:

8.8.8.8:53

Request

taktycznie.net

IN A

Response

taktycznie.net

IN A

195.78.66.252
DNS

apis.google.com

IEXPLORE.EXE

Remote address:

8.8.8.8:53

Request

apis.google.com

IN A

Response

apis.google.com

IN CNAME

plus.l.google.com

plus.l.google.com

IN A

216.58.201.110
DNS

platform.twitter.com

IEXPLORE.EXE

Remote address:

8.8.8.8:53

Request

platform.twitter.com

IN A

Response

platform.twitter.com

IN CNAME

platform.twitter.map.fastly.net

platform.twitter.map.fastly.net

IN A

151.101.188.157
DNS

platform.linkedin.com

IEXPLORE.EXE

Remote address:

8.8.8.8:53

Request

platform.linkedin.com

IN A

Response

platform.linkedin.com

IN CNAME

2-01-2c3e-0055.cdx.cedexis.net

2-01-2c3e-0055.cdx.cedexis.net

IN CNAME

cs767.wpc.epsiloncdn.net

cs767.wpc.epsiloncdn.net

IN A

152.199.22.144
GET

http://taktycznie.net/wp-content/themes/resizable/style.css

IEXPLORE.EXE

Remote address:

195.78.66.252:80

Request

GET /wp-content/themes/resizable/style.css HTTP/1.1
Accept: text/css, */*
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: taktycznie.net
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 04 Oct 2024 19:28:15 GMT
content-type: text/css
last-modified: Tue, 19 Jan 2016 14:06:26 GMT
etag: "a005-569e42e2-44b39f5f9ca78dbd;gz"
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 10008
date: Fri, 27 Sep 2024 19:28:15 GMT
server: LiteSpeed
GET

http://taktycznie.net/wp-content/themes/resizable/includes/js/jquery-ui-1.8.5.custom.min.js?ver=1.8.5

IEXPLORE.EXE

Remote address:

195.78.66.252:80

Request

GET /wp-content/themes/resizable/includes/js/jquery-ui-1.8.5.custom.min.js?ver=1.8.5 HTTP/1.1
Accept: application/javascript, */*;q=0.8
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: taktycznie.net
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 04 Oct 2024 19:28:15 GMT
content-type: application/javascript
last-modified: Tue, 06 May 2014 09:59:24 GMT
etag: "31e20-5368b27c-b33dc70aa48210d8;gz"
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 58988
date: Fri, 27 Sep 2024 19:28:15 GMT
server: LiteSpeed
GET

http://taktycznie.net/wp-includes/js/wp-emoji-release.min.js?ver=4.7.2

IEXPLORE.EXE

Remote address:

195.78.66.252:80

Request

GET /wp-includes/js/wp-emoji-release.min.js?ver=4.7.2 HTTP/1.1
Accept: application/javascript, */*;q=0.8
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: taktycznie.net
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 04 Oct 2024 19:28:15 GMT
content-type: application/javascript
last-modified: Tue, 12 Apr 2022 05:56:23 GMT
etag: "48b9-62551487-6374847a67b6ccfd;gz"
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 5573
date: Fri, 27 Sep 2024 19:28:15 GMT
server: LiteSpeed
GET

http://taktycznie.net/wp-content/uploads/2014/05/chalk3.jpg

IEXPLORE.EXE

Remote address:

195.78.66.252:80

Request

GET /wp-content/uploads/2014/05/chalk3.jpg HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: taktycznie.net
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 04 Oct 2024 19:28:21 GMT
content-type: image/jpeg
last-modified: Wed, 07 May 2014 18:52:28 GMT
etag: "f97a3-536a80ec-e61d74f9aa93245;;;"
accept-ranges: bytes
content-length: 1021859
date: Fri, 27 Sep 2024 19:28:21 GMT
server: LiteSpeed
vary: User-Agent
GET

https://apis.google.com/js/plusone.js

IEXPLORE.EXE

Remote address:

216.58.201.110:443

Request

GET /js/plusone.js HTTP/1.1
Accept: application/javascript, */*;q=0.8
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: apis.google.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/javascript
Access-Control-Allow-Origin: *
Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="gapi-team"
Report-To: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
Timing-Allow-Origin: *
Date: Fri, 27 Sep 2024 19:28:15 GMT
Expires: Fri, 27 Sep 2024 19:28:15 GMT
Cache-Control: private, max-age=1800, stale-while-revalidate=1800
ETag: "e648652e2943b335"
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
Transfer-Encoding: chunked
GET

https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.2ttuSS2XBQ8.O/m=plusone/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-TYe36ShA0ds8KrukIhF82BwaKlg/cb=gapi.loaded_0?le=scs

IEXPLORE.EXE

Remote address:

216.58.201.110:443

Request

GET /_/scs/abc-static/_/js/k=gapi.lb.en.2ttuSS2XBQ8.O/m=plusone/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-TYe36ShA0ds8KrukIhF82BwaKlg/cb=gapi.loaded_0?le=scs HTTP/1.1
Accept: application/javascript, */*;q=0.8
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: apis.google.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Accept-Ranges: bytes
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access"
Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
Content-Length: 57774
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 27 Sep 2024 07:37:08 GMT
Expires: Sat, 27 Sep 2025 07:37:08 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Fri, 06 Sep 2024 22:15:37 GMT
Content-Type: text/javascript; charset=UTF-8
Vary: Accept-Encoding
Age: 42668
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET

http://taktycznie.net/wp-content/themes/resizable/colors/default.css

IEXPLORE.EXE

Remote address:

195.78.66.252:80

Request

GET /wp-content/themes/resizable/colors/default.css HTTP/1.1
Accept: text/css, */*
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: taktycznie.net
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 04 Oct 2024 19:28:15 GMT
content-type: text/css
last-modified: Tue, 06 May 2014 09:59:04 GMT
etag: "178-5368b268-66157cba4a54f23f;gz"
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 213
date: Fri, 27 Sep 2024 19:28:15 GMT
server: LiteSpeed
GET

http://taktycznie.net/wp-content/themes/resizable/includes/js/jquery.min.js?ver=1.6.4

IEXPLORE.EXE

Remote address:

195.78.66.252:80

Request

GET /wp-content/themes/resizable/includes/js/jquery.min.js?ver=1.6.4 HTTP/1.1
Accept: application/javascript, */*;q=0.8
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: taktycznie.net
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 04 Oct 2024 19:28:15 GMT
content-type: application/javascript
last-modified: Tue, 06 May 2014 09:59:25 GMT
etag: "16615-5368b27d-9c4ec31816987f0a;gz"
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 35147
date: Fri, 27 Sep 2024 19:28:15 GMT
server: LiteSpeed
GET

http://taktycznie.net/wp-content/themes/resizable/images/bullet.png

IEXPLORE.EXE

Remote address:

195.78.66.252:80

Request

GET /wp-content/themes/resizable/images/bullet.png HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: taktycznie.net
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 04 Oct 2024 19:28:21 GMT
content-type: image/png
last-modified: Tue, 06 May 2014 09:59:07 GMT
etag: "d6-5368b26b-14553c23f289c167;;;"
accept-ranges: bytes
content-length: 214
date: Fri, 27 Sep 2024 19:28:21 GMT
server: LiteSpeed
vary: User-Agent
GET

https://platform.linkedin.com/in.js

IEXPLORE.EXE

Remote address:

152.199.22.144:443

Request

GET /in.js HTTP/1.1
Accept: application/javascript, */*;q=0.8
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: platform.linkedin.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Content-Encoding: gzip
Accept-Ranges: bytes
Age: 536
Cache-Control: public, max-age=3600
Content-Type: text/javascript; charset=UTF-8
Date: Fri, 27 Sep 2024 19:28:15 GMT
Expires: Fri, 27 Sep 2024 20:19:19 GMT
Last-Modified: Fri, 27 Sep 2024 19:19:19 GMT
Server: ECAcc (frb/6722)
Vary: Accept-Encoding
X-Cache: HIT
X-CDN: ECST
X-CDN-CLIENT-IP-VERSION: IPV4
X-CDN-Proto: HTTP1
X-Content-Type-Options: nosniff
X-Li-Fabric: prod-lva1
X-Li-Pop: prod-lva1-x
X-LI-Proto: http/1.1
X-LI-UUID: AAYjHrtTm5eBwfIRWy4YZw==
Content-Length: 163630
GET

http://taktycznie.net/wp-content/themes/resizable/custom.css

IEXPLORE.EXE

Remote address:

195.78.66.252:80

Request

GET /wp-content/themes/resizable/custom.css HTTP/1.1
Accept: text/css, */*
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: taktycznie.net
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 04 Oct 2024 19:28:15 GMT
content-type: text/css
last-modified: Tue, 06 May 2014 09:58:59 GMT
etag: "ced-5368b263-dd46b6ad366424fc;gz"
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 1183
date: Fri, 27 Sep 2024 19:28:15 GMT
server: LiteSpeed
GET

http://taktycznie.net/wp-content/themes/resizable/includes/js/superfish.js?ver=1.4.2

IEXPLORE.EXE

Remote address:

195.78.66.252:80

Request

GET /wp-content/themes/resizable/includes/js/superfish.js?ver=1.4.2 HTTP/1.1
Accept: application/javascript, */*;q=0.8
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: taktycznie.net
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 04 Oct 2024 19:28:15 GMT
content-type: application/javascript
last-modified: Tue, 06 May 2014 09:59:25 GMT
etag: "eef-5368b27d-7ab645d8bde7e851;gz"
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 1615
date: Fri, 27 Sep 2024 19:28:15 GMT
server: LiteSpeed
GET

http://taktycznie.net/wp-content/uploads/2016/08/przewodnik-obraz.jpg

IEXPLORE.EXE

Remote address:

195.78.66.252:80

Request

GET /wp-content/uploads/2016/08/przewodnik-obraz.jpg HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: taktycznie.net
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 04 Oct 2024 19:28:15 GMT
content-type: image/jpeg
last-modified: Fri, 26 Aug 2016 12:12:11 GMT
etag: "19c96-57c0321b-eb40b92b131d7503;;;"
accept-ranges: bytes
content-length: 105622
date: Fri, 27 Sep 2024 19:28:15 GMT
server: LiteSpeed
vary: User-Agent
GET

http://taktycznie.net/wp-content/themes/resizable/images/arrow-up.png

IEXPLORE.EXE

Remote address:

195.78.66.252:80

Request

GET /wp-content/themes/resizable/images/arrow-up.png HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: taktycznie.net
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 04 Oct 2024 19:28:21 GMT
content-type: image/png
last-modified: Tue, 06 May 2014 09:59:07 GMT
etag: "a2-5368b26b-395bac428be7f55e;;;"
accept-ranges: bytes
content-length: 162
date: Fri, 27 Sep 2024 19:28:21 GMT
server: LiteSpeed
vary: User-Agent
GET

http://taktycznie.net/wp-content/themes/resizable/functions/shortcodes/shortcodes.css?ver=4.7.2

IEXPLORE.EXE

Remote address:

195.78.66.252:80

Request

GET /wp-content/themes/resizable/functions/shortcodes/shortcodes.css?ver=4.7.2 HTTP/1.1
Accept: text/css, */*
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: taktycznie.net
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 04 Oct 2024 19:28:15 GMT
content-type: text/css
last-modified: Tue, 06 May 2014 09:59:19 GMT
etag: "1c20-5368b277-6ad1467e94a840be;gz"
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 1681
date: Fri, 27 Sep 2024 19:28:15 GMT
server: LiteSpeed
GET

http://taktycznie.net/wp-includes/js/wp-embed.min.js?ver=4.7.2

IEXPLORE.EXE

Remote address:

195.78.66.252:80

Request

GET /wp-includes/js/wp-embed.min.js?ver=4.7.2 HTTP/1.1
Accept: application/javascript, */*;q=0.8
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: taktycznie.net
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 04 Oct 2024 19:28:15 GMT
content-type: application/javascript
last-modified: Tue, 16 May 2023 15:20:13 GMT
etag: "631-64639f2d-efa350c956645547;gz"
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 847
date: Fri, 27 Sep 2024 19:28:15 GMT
server: LiteSpeed
GET

http://taktycznie.net/wp-content/uploads/2016/06/pozycjonowanie-carted.png

IEXPLORE.EXE

Remote address:

195.78.66.252:80

Request

GET /wp-content/uploads/2016/06/pozycjonowanie-carted.png HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: taktycznie.net
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 04 Oct 2024 19:28:15 GMT
content-type: image/png
last-modified: Tue, 21 Jun 2016 21:07:19 GMT
etag: "533-5769ac87-3e2f0a7906397e11;;;"
accept-ranges: bytes
content-length: 1331
date: Fri, 27 Sep 2024 19:28:15 GMT
server: LiteSpeed
vary: User-Agent
GET

http://taktycznie.net/wp-content/themes/resizable/images/ico-video.png

IEXPLORE.EXE

Remote address:

195.78.66.252:80

Request

GET /wp-content/themes/resizable/images/ico-video.png HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: taktycznie.net
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 04 Oct 2024 19:28:21 GMT
content-type: image/png
last-modified: Tue, 06 May 2014 09:59:10 GMT
etag: "137-5368b26e-4db486a6b780f83b;;;"
accept-ranges: bytes
content-length: 311
date: Fri, 27 Sep 2024 19:28:21 GMT
server: LiteSpeed
vary: User-Agent
GET

http://taktycznie.net/wp-content/themes/resizable/functions/shortcodes/shortcodes.js?ver=1.0.0

IEXPLORE.EXE

Remote address:

195.78.66.252:80

Request

GET /wp-content/themes/resizable/functions/shortcodes/shortcodes.js?ver=1.0.0 HTTP/1.1
Accept: application/javascript, */*;q=0.8
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: taktycznie.net
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 04 Oct 2024 19:28:15 GMT
content-type: application/javascript
last-modified: Tue, 06 May 2014 09:59:19 GMT
etag: "273-5368b277-939fbe0d0047c73a;gz"
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 272
date: Fri, 27 Sep 2024 19:28:15 GMT
server: LiteSpeed
GET

http://taktycznie.net/wp-content/themes/resizable/includes/js/custom.js?ver=1.4.2

IEXPLORE.EXE

Remote address:

195.78.66.252:80

Request

GET /wp-content/themes/resizable/includes/js/custom.js?ver=1.4.2 HTTP/1.1
Accept: application/javascript, */*;q=0.8
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: taktycznie.net
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 04 Oct 2024 19:28:15 GMT
content-type: application/javascript
last-modified: Tue, 06 May 2014 09:59:23 GMT
etag: "1ae3-5368b27b-612288c141f8664d;gz"
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 1660
date: Fri, 27 Sep 2024 19:28:15 GMT
server: LiteSpeed
GET

http://taktycznie.net/wp-content/themes/resizable/images/ico-search.png

IEXPLORE.EXE

Remote address:

195.78.66.252:80

Request

GET /wp-content/themes/resizable/images/ico-search.png HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: taktycznie.net
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 04 Oct 2024 19:28:15 GMT
content-type: image/png
last-modified: Tue, 06 May 2014 09:59:09 GMT
etag: "676-5368b26d-c1da5baeba84d281;;;"
accept-ranges: bytes
content-length: 1654
date: Fri, 27 Sep 2024 19:28:15 GMT
server: LiteSpeed
vary: User-Agent
GET

http://taktycznie.net/wp-content/themes/resizable/images/arrow-down.png

IEXPLORE.EXE

Remote address:

195.78.66.252:80

Request

GET /wp-content/themes/resizable/images/arrow-down.png HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: taktycznie.net
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 04 Oct 2024 19:28:21 GMT
content-type: image/png
last-modified: Tue, 06 May 2014 09:59:07 GMT
etag: "549-5368b26b-625d87647dccd9be;;;"
accept-ranges: bytes
content-length: 1353
date: Fri, 27 Sep 2024 19:28:21 GMT
server: LiteSpeed
vary: User-Agent
GET

http://taktycznie.net/wp-content/plugins/disqus-recent-comments-widget/disqus_rcw.css?ver=4.7.2

IEXPLORE.EXE

Remote address:

195.78.66.252:80

Request

GET /wp-content/plugins/disqus-recent-comments-widget/disqus_rcw.css?ver=4.7.2 HTTP/1.1
Accept: text/css, */*
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: taktycznie.net
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 04 Oct 2024 19:28:15 GMT
content-type: text/css
last-modified: Wed, 01 Jul 2015 21:40:31 GMT
etag: "35c-55945e4f-ac4df03315082c78;gz"
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 379
date: Fri, 27 Sep 2024 19:28:15 GMT
server: LiteSpeed
GET

http://taktycznie.net/wp-content/uploads/2016/01/taktycznie_top.jpg

IEXPLORE.EXE

Remote address:

195.78.66.252:80

Request

GET /wp-content/uploads/2016/01/taktycznie_top.jpg HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: taktycznie.net
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 04 Oct 2024 19:28:15 GMT
content-type: image/jpeg
last-modified: Tue, 19 Jan 2016 13:36:55 GMT
etag: "2ac0d-569e3bf7-b1e0049668ffd974;;;"
accept-ranges: bytes
content-length: 175117
date: Fri, 27 Sep 2024 19:28:15 GMT
server: LiteSpeed
vary: User-Agent
GET

http://taktycznie.net/wp-content/themes/resizable/images/alert-overlay.png

IEXPLORE.EXE

Remote address:

195.78.66.252:80

Request

GET /wp-content/themes/resizable/images/alert-overlay.png HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: taktycznie.net
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 04 Oct 2024 19:28:21 GMT
content-type: image/png
last-modified: Tue, 06 May 2014 09:59:07 GMT
etag: "bd-5368b26b-d71b9e5841b9c9c2;;;"
accept-ranges: bytes
content-length: 189
date: Fri, 27 Sep 2024 19:28:21 GMT
server: LiteSpeed
vary: User-Agent
DNS

c.pki.goog

IEXPLORE.EXE

Remote address:

8.8.8.8:53

Request

c.pki.goog

IN A

Response

c.pki.goog

IN CNAME

pki-goog.l.google.com

pki-goog.l.google.com

IN A

142.250.187.227
DNS

c.pki.goog

IEXPLORE.EXE

Remote address:

8.8.8.8:53

Request

c.pki.goog

IN A

Response

c.pki.goog

IN CNAME

pki-goog.l.google.com

pki-goog.l.google.com

IN A

216.58.212.227
GET

http://c.pki.goog/r/r1.crl

IEXPLORE.EXE

Remote address:

142.250.187.227:80

Request

GET /r/r1.crl HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: c.pki.goog

Response

HTTP/1.1 200 OK

Accept-Ranges: bytes
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
Content-Length: 854
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 27 Sep 2024 19:03:07 GMT
Expires: Fri, 27 Sep 2024 19:53:07 GMT
Cache-Control: public, max-age=3000
Age: 1508
Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT
Content-Type: application/pkix-crl
Vary: Accept-Encoding
GET

http://c.pki.goog/r/gsr1.crl

IEXPLORE.EXE

Remote address:

142.250.187.227:80

Request

GET /r/gsr1.crl HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: c.pki.goog

Response

HTTP/1.1 200 OK

Accept-Ranges: bytes
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
Content-Length: 1739
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 27 Sep 2024 19:02:51 GMT
Expires: Fri, 27 Sep 2024 19:52:51 GMT
Cache-Control: public, max-age=3000
Age: 1530
Last-Modified: Mon, 08 Jul 2024 07:38:00 GMT
Content-Type: application/pkix-crl
Vary: Accept-Encoding
GET

http://c.pki.goog/r/r4.crl

IEXPLORE.EXE

Remote address:

142.250.187.227:80

Request

GET /r/r4.crl HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: c.pki.goog

Response

HTTP/1.1 200 OK

Accept-Ranges: bytes
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
Content-Length: 436
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 27 Sep 2024 19:02:51 GMT
Expires: Fri, 27 Sep 2024 19:52:51 GMT
Cache-Control: public, max-age=3000
Age: 1530
Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT
Content-Type: application/pkix-crl
Vary: Accept-Encoding
GET

http://c.pki.goog/r/r1.crl

IEXPLORE.EXE

Remote address:

216.58.212.227:80

Request

GET /r/r1.crl HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: c.pki.goog

Response

HTTP/1.1 200 OK

Accept-Ranges: bytes
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
Content-Length: 854
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 27 Sep 2024 19:03:07 GMT
Expires: Fri, 27 Sep 2024 19:53:07 GMT
Cache-Control: public, max-age=3000
Age: 1508
Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT
Content-Type: application/pkix-crl
Vary: Accept-Encoding
GET

http://c.pki.goog/r/gsr1.crl

IEXPLORE.EXE

Remote address:

216.58.212.227:80

Request

GET /r/gsr1.crl HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: c.pki.goog

Response

HTTP/1.1 200 OK

Accept-Ranges: bytes
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
Content-Length: 1739
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 27 Sep 2024 19:02:51 GMT
Expires: Fri, 27 Sep 2024 19:52:51 GMT
Cache-Control: public, max-age=3000
Age: 1530
Last-Modified: Mon, 08 Jul 2024 07:38:00 GMT
Content-Type: application/pkix-crl
Vary: Accept-Encoding
GET

http://c.pki.goog/r/r4.crl

IEXPLORE.EXE

Remote address:

216.58.212.227:80

Request

GET /r/r4.crl HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: c.pki.goog

Response

HTTP/1.1 200 OK

Accept-Ranges: bytes
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
Content-Length: 436
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 27 Sep 2024 19:02:51 GMT
Expires: Fri, 27 Sep 2024 19:52:51 GMT
Cache-Control: public, max-age=3000
Age: 1530
Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT
Content-Type: application/pkix-crl
Vary: Accept-Encoding
DNS

o.pki.goog

IEXPLORE.EXE

Remote address:

8.8.8.8:53

Request

o.pki.goog

IN A

Response

o.pki.goog

IN CNAME

pki-goog.l.google.com

pki-goog.l.google.com

IN A

142.250.187.227
DNS

o.pki.goog

IEXPLORE.EXE

Remote address:

8.8.8.8:53

Request

o.pki.goog

IN A

Response

o.pki.goog

IN CNAME

pki-goog.l.google.com

pki-goog.l.google.com

IN A

142.250.187.227
GET

http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEGxehKwEvgtmEgBIJfgU%2FNk%3D

IEXPLORE.EXE

Remote address:

142.250.187.227:80

Request

GET /wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEGxehKwEvgtmEgBIJfgU%2FNk%3D HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: o.pki.goog

Response

HTTP/1.1 200 OK

Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Date: Fri, 27 Sep 2024 18:35:15 GMT
Cache-Control: public, max-age=14400
Content-Type: application/ocsp-response
Age: 3180
GET

http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDmcMw%2Fo03sIxABiVt5eEgl

IEXPLORE.EXE

Remote address:

142.250.187.227:80

Request

GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDmcMw%2Fo03sIxABiVt5eEgl HTTP/1.1
Cache-Control: max-age = 14400
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: o.pki.goog

Response

HTTP/1.1 200 OK

Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Date: Fri, 27 Sep 2024 18:30:01 GMT
Cache-Control: public, max-age=14400
Content-Type: application/ocsp-response
Age: 3500
GET

http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCAjeF7nQPGRhIrMaE%2FWydB

IEXPLORE.EXE

Remote address:

142.250.187.227:80

Request

GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCAjeF7nQPGRhIrMaE%2FWydB HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: o.pki.goog

Response

HTTP/1.1 200 OK

Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Date: Fri, 27 Sep 2024 19:02:18 GMT
Cache-Control: public, max-age=14400
Content-Type: application/ocsp-response
Age: 1564
GET

http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDqAPNQawlabxCzGpwe%2BQff

IEXPLORE.EXE

Remote address:

142.250.187.227:80

Request

GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDqAPNQawlabxCzGpwe%2BQff HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: o.pki.goog

Response

HTTP/1.1 200 OK

Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Date: Fri, 27 Sep 2024 19:11:04 GMT
Cache-Control: public, max-age=14400
Content-Type: application/ocsp-response
Age: 1038
GET

http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEExK8DMmoBqACQpvxzF%2BYrw%3D

IEXPLORE.EXE

Remote address:

142.250.187.227:80

Request

GET /wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEExK8DMmoBqACQpvxzF%2BYrw%3D HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: o.pki.goog

Response

HTTP/1.1 200 OK

Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Date: Fri, 27 Sep 2024 18:45:25 GMT
Cache-Control: public, max-age=14400
Content-Type: application/ocsp-response
Age: 2578
GET

http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQC%2FJhM0ff%2Fc%2FQm3Xo%2Bqmx2e

IEXPLORE.EXE

Remote address:

142.250.187.227:80

Request

GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQC%2FJhM0ff%2Fc%2FQm3Xo%2Bqmx2e HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: o.pki.goog

Response

HTTP/1.1 200 OK

Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Date: Fri, 27 Sep 2024 19:16:37 GMT
Cache-Control: public, max-age=14400
Content-Type: application/ocsp-response
Age: 706
GET

http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEGxehKwEvgtmEgBIJfgU%2FNk%3D

IEXPLORE.EXE

Remote address:

142.250.187.227:80

Request

GET /wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEGxehKwEvgtmEgBIJfgU%2FNk%3D HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: o.pki.goog

Response

HTTP/1.1 200 OK

Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Date: Fri, 27 Sep 2024 18:35:15 GMT
Cache-Control: public, max-age=14400
Content-Type: application/ocsp-response
Age: 3180
GET

http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDmcMw%2Fo03sIxABiVt5eEgl

IEXPLORE.EXE

Remote address:

142.250.187.227:80

Request

GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDmcMw%2Fo03sIxABiVt5eEgl HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: o.pki.goog

Response

HTTP/1.1 200 OK

Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Date: Fri, 27 Sep 2024 18:30:01 GMT
Cache-Control: public, max-age=14400
Content-Type: application/ocsp-response
Age: 3500
GET

http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCAjeF7nQPGRhIrMaE%2FWydB

IEXPLORE.EXE

Remote address:

142.250.187.227:80

Request

GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCAjeF7nQPGRhIrMaE%2FWydB HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: o.pki.goog

Response

HTTP/1.1 200 OK

Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Date: Fri, 27 Sep 2024 19:02:18 GMT
Cache-Control: public, max-age=14400
Content-Type: application/ocsp-response
Age: 1564
GET

http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDqAPNQawlabxCzGpwe%2BQff

IEXPLORE.EXE

Remote address:

142.250.187.227:80

Request

GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDqAPNQawlabxCzGpwe%2BQff HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: o.pki.goog

Response

HTTP/1.1 200 OK

Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Date: Fri, 27 Sep 2024 19:11:04 GMT
Cache-Control: public, max-age=14400
Content-Type: application/ocsp-response
Age: 1038
GET

http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQC%2FJhM0ff%2Fc%2FQm3Xo%2Bqmx2e

IEXPLORE.EXE

Remote address:

142.250.187.227:80

Request

GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQC%2FJhM0ff%2Fc%2FQm3Xo%2Bqmx2e HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: o.pki.goog

Response

HTTP/1.1 200 OK

Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Date: Fri, 27 Sep 2024 19:16:37 GMT
Cache-Control: public, max-age=14400
Content-Type: application/ocsp-response
Age: 706
DNS

matlabgroup.com

IEXPLORE.EXE

Remote address:

8.8.8.8:53

Request

matlabgroup.com

IN A

Response
DNS

player.vimeo.com

IEXPLORE.EXE

Remote address:

8.8.8.8:53

Request

player.vimeo.com

IN A

Response

player.vimeo.com

IN CNAME

player.vimeo.com.cdn.cloudflare.net

player.vimeo.com.cdn.cloudflare.net

IN A

162.159.138.60

player.vimeo.com.cdn.cloudflare.net

IN A

162.159.128.61
DNS

www.youtube.com

IEXPLORE.EXE

Remote address:

8.8.8.8:53

Request

www.youtube.com

IN A

Response

www.youtube.com

IN CNAME

youtube-ui.l.google.com

youtube-ui.l.google.com

IN A

142.250.187.238

youtube-ui.l.google.com

IN A

216.58.213.14

youtube-ui.l.google.com

IN A

142.250.178.14

youtube-ui.l.google.com

IN A

142.250.187.206

youtube-ui.l.google.com

IN A

216.58.212.206

youtube-ui.l.google.com

IN A

142.250.180.14

youtube-ui.l.google.com

IN A

142.250.200.46

youtube-ui.l.google.com

IN A

142.250.200.14

youtube-ui.l.google.com

IN A

172.217.16.238

youtube-ui.l.google.com

IN A

216.58.212.238

youtube-ui.l.google.com

IN A

172.217.169.78

youtube-ui.l.google.com

IN A

216.58.204.78

youtube-ui.l.google.com

IN A

216.58.201.110

youtube-ui.l.google.com

IN A

142.250.179.238
GET

https://www.youtube.com/embed/AT-uuYe9XT0

IEXPLORE.EXE

Remote address:

142.250.187.238:443

Request

GET /embed/AT-uuYe9XT0 HTTP/1.1
Accept: text/html, application/xhtml+xml, */*
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: www.youtube.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8
X-Content-Type-Options: nosniff
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 27 Sep 2024 19:28:21 GMT
Strict-Transport-Security: max-age=31536000
Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9
Permissions-Policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
Content-Security-Policy: require-trusted-types-for 'script';report-uri /cspreport
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main"
Cross-Origin-Resource-Policy: cross-origin
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 0
Set-Cookie: YSC=9AeAkK64_PU; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
Set-Cookie: VISITOR_INFO1_LIVE=UOHy9Kg8AhQ; Domain=.youtube.com; Expires=Wed, 26-Mar-2025 19:28:21 GMT; Path=/; Secure; HttpOnly; SameSite=none
Set-Cookie: VISITOR_PRIVACY_METADATA=CgJHQhIEGgAgNg%3D%3D; Domain=.youtube.com; Expires=Wed, 26-Mar-2025 19:28:21 GMT; Path=/; Secure; HttpOnly; SameSite=none
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
Transfer-Encoding: chunked
GET

https://www.youtube.com/s/player/b0557ce3/player_ias.vflset/en_US/base.js

IEXPLORE.EXE

Remote address:

142.250.187.238:443

Request

GET /s/player/b0557ce3/player_ias.vflset/en_US/base.js HTTP/1.1
Accept: application/javascript, */*;q=0.8
Referer: https://www.youtube.com/embed/AT-uuYe9XT0
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: www.youtube.com
Connection: Keep-Alive
Cookie: YSC=9AeAkK64_PU; VISITOR_INFO1_LIVE=UOHy9Kg8AhQ; VISITOR_PRIVACY_METADATA=CgJHQhIEGgAgNg%3D%3D

Response

HTTP/1.1 200 OK

Accept-Ranges: bytes
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
Content-Length: 778584
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 27 Sep 2024 07:31:41 GMT
Expires: Sat, 27 Sep 2025 07:31:41 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Wed, 25 Sep 2024 04:14:17 GMT
Content-Type: text/javascript
Vary: Accept-Encoding, Origin
Age: 43000
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
POST

https://www.youtube.com/api/stats/qoe?cpn=THMHimBb-x6LtLnd&el=embedded&ns=yt&fexp=v1%2C24004644%2C434717%2C127326%2C26443548%2C7111%2C24166%2C12177%2C9954%2C1192%2C33462%2C2%2C2871%2C44048%2C12193%2C484%2C619%2C6953%2C11044%2C2471%2C7546%2C17801%2C18052%2C5969%2C2128%2C1336%2C4205%2C1823%2C3186%2C2912%2C4794%2C2775%2C327%2C13%2C142%2C3685%2C4%2C404%2C946%2C14631%2C3734%2C1162%2C8%2C8088%2C2543%2C304%2C4054%2C266%2C3312%2C1307%2C3188%2C83%2C14%2C2768%2C1176%2C1%2C485%2C1683%2C3%2C1882&cl=678482515&seq=1&event=streamingstats&docid=AT-uuYe9XT0&cbr=IE&cbrver=11.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240924.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=6.1&cplatform=DESKTOP&vps=0.000:N,0.001:ER&cmt=0.001:0.000,0.001:0.000&vis=0.001:0&bh=0.001:0.000&qclc=ChBUSE1IaW1CYi14Nkx0TG5kEAE

IEXPLORE.EXE

Remote address:

142.250.187.238:443

Request

POST /api/stats/qoe?cpn=THMHimBb-x6LtLnd&el=embedded&ns=yt&fexp=v1%2C24004644%2C434717%2C127326%2C26443548%2C7111%2C24166%2C12177%2C9954%2C1192%2C33462%2C2%2C2871%2C44048%2C12193%2C484%2C619%2C6953%2C11044%2C2471%2C7546%2C17801%2C18052%2C5969%2C2128%2C1336%2C4205%2C1823%2C3186%2C2912%2C4794%2C2775%2C327%2C13%2C142%2C3685%2C4%2C404%2C946%2C14631%2C3734%2C1162%2C8%2C8088%2C2543%2C304%2C4054%2C266%2C3312%2C1307%2C3188%2C83%2C14%2C2768%2C1176%2C1%2C485%2C1683%2C3%2C1882&cl=678482515&seq=1&event=streamingstats&docid=AT-uuYe9XT0&cbr=IE&cbrver=11.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240924.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=6.1&cplatform=DESKTOP&vps=0.000:N,0.001:ER&cmt=0.001:0.000,0.001:0.000&vis=0.001:0&bh=0.001:0.000&qclc=ChBUSE1IaW1CYi14Nkx0TG5kEAE HTTP/1.1
Accept: */*
X-Goog-Visitor-Id: CgtVT0h5OUtnOEFoUSjVjty3BjIKCgJHQhIEGgAgNg%3D%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20240924.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Ad-Signals: dt=1727465301416&flash=0&frm=2&u_tz&u_his=1&u_h=720&u_w=1280&u_ah=680&u_aw=1280&u_cd=24&bc=1&bih=-12245933&biw=-12245933&brdim=0%2C54%2C-8%2C-8%2C1280%2C%2C1296%2C696%2C0%2C0&vis=1&wgl=true&ca_type=image
Content-Type: application/x-www-form-urlencoded
Referer: https://www.youtube.com/embed/AT-uuYe9XT0
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Host: www.youtube.com
Content-Length: 402
Connection: Keep-Alive
Cache-Control: no-cache
Cookie: YSC=9AeAkK64_PU; VISITOR_INFO1_LIVE=UOHy9Kg8AhQ; VISITOR_PRIVACY_METADATA=CgJHQhIEGgAgNg%3D%3D

Response

HTTP/1.1 204 No Content

Content-Type: text/html; charset=UTF-8
Date: Fri, 27 Sep 2024 19:28:23 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: Video Stats Server
Content-Length: 0
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
POST

https://www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8

IEXPLORE.EXE

Remote address:

142.250.187.238:443

Request

POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Accept: */*
X-Goog-Request-Time: 1727465305107
Content-Type: application/json
X-Goog-Visitor-Id: CgtVT0h5OUtnOEFoUSjVjty3BjIKCgJHQhIEGgAgNg%3D%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20240924.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Ad-Signals: dt=1727465301120&flash=0&frm=2&u_tz&u_his=1&u_h=720&u_w=1280&u_ah=680&u_aw=1280&u_cd=24&bc=1&bih=-12245933&biw=-12245933&brdim=0%2C54%2C-8%2C-8%2C1280%2C%2C1296%2C696%2C0%2C0&vis=1&wgl=true&ca_type=image
Referer: https://www.youtube.com/embed/AT-uuYe9XT0
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Host: www.youtube.com
Content-Length: 9451
Connection: Keep-Alive
Cache-Control: no-cache
Cookie: YSC=9AeAkK64_PU; VISITOR_INFO1_LIVE=UOHy9Kg8AhQ; VISITOR_PRIVACY_METADATA=CgJHQhIEGgAgNg%3D%3D

Response

HTTP/1.1 200 OK

Content-Type: application/json; charset=UTF-8
Vary: Origin
Vary: X-Origin
Vary: Referer
Content-Encoding: gzip
Date: Fri, 27 Sep 2024 19:28:25 GMT
Server: scaffolding on HTTPServer2
Cache-Control: private
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
Transfer-Encoding: chunked
GET

https://www.youtube.com/s/player/b0557ce3/www-player.css

IEXPLORE.EXE

Remote address:

142.250.187.238:443

Request

GET /s/player/b0557ce3/www-player.css HTTP/1.1
Accept: text/css, */*
Referer: https://www.youtube.com/embed/AT-uuYe9XT0
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: www.youtube.com
Connection: Keep-Alive
Cookie: YSC=9AeAkK64_PU; VISITOR_INFO1_LIVE=UOHy9Kg8AhQ; VISITOR_PRIVACY_METADATA=CgJHQhIEGgAgNg%3D%3D

Response

HTTP/1.1 200 OK

Accept-Ranges: bytes
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
Content-Length: 60159
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 27 Sep 2024 08:20:11 GMT
Expires: Sat, 27 Sep 2025 08:20:11 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Wed, 25 Sep 2024 04:14:17 GMT
Content-Type: text/css
Vary: Accept-Encoding, Origin
Age: 40090
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET

https://www.youtube.com/s/player/b0557ce3/www-embed-player.vflset/www-embed-player.js

IEXPLORE.EXE

Remote address:

142.250.187.238:443

Request

GET /s/player/b0557ce3/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Accept: application/javascript, */*;q=0.8
Referer: https://www.youtube.com/embed/AT-uuYe9XT0
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: www.youtube.com
Connection: Keep-Alive
Cookie: YSC=9AeAkK64_PU; VISITOR_INFO1_LIVE=UOHy9Kg8AhQ; VISITOR_PRIVACY_METADATA=CgJHQhIEGgAgNg%3D%3D

Response

HTTP/1.1 200 OK

Accept-Ranges: bytes
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
Content-Length: 118297
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 27 Sep 2024 07:37:59 GMT
Expires: Sat, 27 Sep 2025 07:37:59 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Wed, 25 Sep 2024 04:14:17 GMT
Content-Type: text/javascript
Vary: Accept-Encoding, Origin
Age: 42622
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET

https://www.youtube.com/s/player/b0557ce3/player_ias.vflset/en_US/embed.js

IEXPLORE.EXE

Remote address:

142.250.187.238:443

Request

GET /s/player/b0557ce3/player_ias.vflset/en_US/embed.js HTTP/1.1
Accept: application/javascript, */*;q=0.8
Referer: https://www.youtube.com/embed/AT-uuYe9XT0
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: www.youtube.com
Connection: Keep-Alive
Cookie: YSC=9AeAkK64_PU; VISITOR_INFO1_LIVE=UOHy9Kg8AhQ; VISITOR_PRIVACY_METADATA=CgJHQhIEGgAgNg%3D%3D

Response

HTTP/1.1 200 OK

Accept-Ranges: bytes
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
Content-Length: 23759
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 27 Sep 2024 08:27:17 GMT
Expires: Sat, 27 Sep 2025 08:27:17 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Wed, 25 Sep 2024 04:14:17 GMT
Content-Type: text/javascript
Vary: Accept-Encoding, Origin
Age: 39666
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET

https://player.vimeo.com/video/134950335

IEXPLORE.EXE

Remote address:

162.159.138.60:443

Request

GET /video/134950335 HTTP/1.1
Accept: text/html, application/xhtml+xml, */*
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: player.vimeo.com
Connection: Keep-Alive

Response

HTTP/1.1 404 Not Found

Date: Fri, 27 Sep 2024 19:28:21 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
CF-Ray: 8c9de5773dfa631f-LHR
CF-Cache-Status: DYNAMIC
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Fri, 15 Dec 1985 19:30:00 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Vary: Accept-Encoding
Via: 1.1 varnish
content-security-policy: default-src 'self'; style-src 'unsafe-inline'; script-src 'unsafe-inline'
x-backend-server: player-backend-edge-entry
x-bapp-server: player-backend-7d4c668fbb-6cgpj
x-cache: MISS
x-cache-hits: 0
x-content-type-options: nosniff
x-host: player-backend-7d4c668fbb-6cgpj
x-player-backend: g
x-served-by: cache-lcy-eglc8600087-LCY
x-timer: S1727465302.672988,VS0,VE154
x-vimeo-error: player-backend
x-xss-protection: 1; mode=block
Set-Cookie: __cf_bm=7aC3yRR15rM0fo.1mLjZ9N99i8ro4vaGUeqrotylkHU-1727465301-1.0.1.1-D5H_Eap8D95N3rkaOAWIn81oti4AtsOlKZRWLT6UzwGqSTJN7.Ky9S2qJVVqls1O; path=/; expires=Fri, 27-Sep-24 19:58:21 GMT; domain=.vimeo.com; HttpOnly; Secure; SameSite=None
Set-Cookie: _cfuvid=dx1BUgTgpLflIJdE326A0gSyYLJ_9wdk_IccVLAZvTc-1727465301830-0.0.1.1-604800000; path=/; domain=.vimeo.com; HttpOnly; Secure; SameSite=None
Server: cloudflare
Content-Encoding: gzip
DNS

googleads.g.doubleclick.net

IEXPLORE.EXE

Remote address:

8.8.8.8:53

Request

googleads.g.doubleclick.net

IN A

Response

googleads.g.doubleclick.net

IN A

172.217.169.66
DNS

static.doubleclick.net

IEXPLORE.EXE

Remote address:

8.8.8.8:53

Request

static.doubleclick.net

IN A

Response

static.doubleclick.net

IN A

142.250.180.6
GET

https://googleads.g.doubleclick.net/pagead/id

IEXPLORE.EXE

Remote address:

172.217.169.66:443

Request

GET /pagead/id HTTP/1.1
Accept: */*
Referer: https://www.youtube.com/embed/AT-uuYe9XT0
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Host: googleads.g.doubleclick.net
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
Access-Control-Allow-Credentials: true
Date: Fri, 27 Sep 2024 19:28:22 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Content-Type: text/html; charset=UTF-8
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 0
X-XSS-Protection: 0
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET

https://googleads.g.doubleclick.net/pagead/id?slf_rd=1

IEXPLORE.EXE

Remote address:

172.217.169.66:443

Request

GET /pagead/id?slf_rd=1 HTTP/1.1
Accept: */*
Referer: https://www.youtube.com/embed/AT-uuYe9XT0
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Host: googleads.g.doubleclick.net
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Credentials: true
Content-Type: application/json; charset=UTF-8
Date: Fri, 27 Sep 2024 19:28:22 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
X-XSS-Protection: 0
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
Transfer-Encoding: chunked
GET

https://static.doubleclick.net/instream/ad_status.js

IEXPLORE.EXE

Remote address:

142.250.180.6:443

Request

GET /instream/ad_status.js HTTP/1.1
Accept: application/javascript, */*;q=0.8
Referer: https://www.youtube.com/embed/AT-uuYe9XT0
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: static.doubleclick.net
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media"
Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
Timing-Allow-Origin: *
Content-Length: 29
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 27 Sep 2024 19:14:38 GMT
Expires: Fri, 27 Sep 2024 19:29:38 GMT
Cache-Control: public, max-age=900
Age: 824
Last-Modified: Thu, 12 Dec 2013 23:40:16 GMT
Content-Type: text/javascript
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
DNS

jnn-pa.googleapis.com

IEXPLORE.EXE

Remote address:

8.8.8.8:53

Request

jnn-pa.googleapis.com

IN A

Response

jnn-pa.googleapis.com

IN A

172.217.169.42

jnn-pa.googleapis.com

IN A

172.217.169.10

jnn-pa.googleapis.com

IN A

142.250.187.234

jnn-pa.googleapis.com

IN A

216.58.201.106

jnn-pa.googleapis.com

IN A

142.250.180.10

jnn-pa.googleapis.com

IN A

142.250.179.234

jnn-pa.googleapis.com

IN A

142.250.187.202

jnn-pa.googleapis.com

IN A

142.250.200.42

jnn-pa.googleapis.com

IN A

142.250.200.10

jnn-pa.googleapis.com

IN A

216.58.204.74

jnn-pa.googleapis.com

IN A

216.58.213.10

jnn-pa.googleapis.com

IN A

172.217.16.234

jnn-pa.googleapis.com

IN A

142.250.178.10

jnn-pa.googleapis.com

IN A

216.58.212.202

jnn-pa.googleapis.com

IN A

172.217.169.74
POST

https://jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create

IEXPLORE.EXE

Remote address:

172.217.169.42:443

Request

POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Accept: */*
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Referer: https://www.youtube.com/embed/AT-uuYe9XT0
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Host: jnn-pa.googleapis.com
Content-Length: 24
Connection: Keep-Alive
Cache-Control: no-cache

Response

HTTP/1.1 200 OK

Content-Type: application/json+protobuf; charset=UTF-8
Vary: Origin
Vary: X-Origin
Vary: Referer
Content-Encoding: gzip
Date: Fri, 27 Sep 2024 19:28:23 GMT
Server: ESF
Cache-Control: private
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
Transfer-Encoding: chunked
POST

https://jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT

IEXPLORE.EXE

Remote address:

172.217.169.42:443

Request

POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Accept: */*
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Referer: https://www.youtube.com/embed/AT-uuYe9XT0
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Host: jnn-pa.googleapis.com
Content-Length: 1076
Connection: Keep-Alive
Cache-Control: no-cache

Response

HTTP/1.1 200 OK

Content-Type: application/json+protobuf; charset=UTF-8
Vary: Origin
Vary: X-Origin
Vary: Referer
Content-Encoding: gzip
Date: Fri, 27 Sep 2024 19:28:24 GMT
Server: ESF
Cache-Control: private
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
Transfer-Encoding: chunked
GET

https://googleads.g.doubleclick.net/pagead/id

IEXPLORE.EXE

Remote address:

172.217.169.66:443

Request

GET /pagead/id HTTP/1.1
Accept: */*
Referer: https://www.youtube.com/embed/AT-uuYe9XT0
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Host: googleads.g.doubleclick.net
Connection: Keep-Alive

Response

HTTP/1.1 302 Found

P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
Access-Control-Allow-Credentials: true
Date: Fri, 27 Sep 2024 19:30:23 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Content-Type: text/html; charset=UTF-8
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 0
X-XSS-Protection: 0
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET

https://googleads.g.doubleclick.net/pagead/id?slf_rd=1

IEXPLORE.EXE

Remote address:

172.217.169.66:443

Request

GET /pagead/id?slf_rd=1 HTTP/1.1
Accept: */*
Referer: https://www.youtube.com/embed/AT-uuYe9XT0
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Host: googleads.g.doubleclick.net
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Access-Control-Allow-Credentials: true
Content-Type: application/json; charset=UTF-8
Date: Fri, 27 Sep 2024 19:30:23 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
X-XSS-Protection: 0
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
Transfer-Encoding: chunked

195.78.66.252:80

http://taktycznie.net/wp-content/uploads/2014/05/chalk3.jpg

http

IEXPLORE.EXE

20.8kB
1.1MB
427
826

HTTP Request

GET http://taktycznie.net/wp-content/themes/resizable/style.css

HTTP Response

200

HTTP Request

GET http://taktycznie.net/wp-content/themes/resizable/includes/js/jquery-ui-1.8.5.custom.min.js?ver=1.8.5

HTTP Response

200

HTTP Request

GET http://taktycznie.net/wp-includes/js/wp-emoji-release.min.js?ver=4.7.2

HTTP Response

200

HTTP Request

GET http://taktycznie.net/wp-content/uploads/2014/05/chalk3.jpg

HTTP Response

200
216.58.201.110:443

https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.2ttuSS2XBQ8.O/m=plusone/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-TYe36ShA0ds8KrukIhF82BwaKlg/cb=gapi.loaded_0?le=scs

tls, http

IEXPLORE.EXE

3.1kB
93.0kB
45
75

HTTP Request

GET https://apis.google.com/js/plusone.js

HTTP Response

200

HTTP Request

GET https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.2ttuSS2XBQ8.O/m=plusone/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-TYe36ShA0ds8KrukIhF82BwaKlg/cb=gapi.loaded_0?le=scs

HTTP Response

200
151.101.188.157:443

platform.twitter.com

tls

IEXPLORE.EXE

751 B
4.7kB
9
11
195.78.66.252:80

http://taktycznie.net/wp-content/themes/resizable/images/bullet.png

http

IEXPLORE.EXE

2.2kB
38.1kB
29
32

HTTP Request

GET http://taktycznie.net/wp-content/themes/resizable/colors/default.css

HTTP Response

200

HTTP Request

GET http://taktycznie.net/wp-content/themes/resizable/includes/js/jquery.min.js?ver=1.6.4

HTTP Response

200

HTTP Request

GET http://taktycznie.net/wp-content/themes/resizable/images/bullet.png

HTTP Response

200
152.199.22.144:443

platform.linkedin.com

tls

IEXPLORE.EXE

844 B
5.7kB
11
12
151.101.188.157:443

platform.twitter.com

tls

IEXPLORE.EXE

751 B
4.7kB
9
11
152.199.22.144:443

https://platform.linkedin.com/in.js

tls, http

IEXPLORE.EXE

4.2kB
175.4kB
76
134

HTTP Request

GET https://platform.linkedin.com/in.js

HTTP Response

200
195.78.66.252:80

http://taktycznie.net/wp-content/themes/resizable/images/arrow-up.png

http

IEXPLORE.EXE

3.8kB
114.3kB
58
88

HTTP Request

GET http://taktycznie.net/wp-content/themes/resizable/custom.css

HTTP Response

200

HTTP Request

GET http://taktycznie.net/wp-content/themes/resizable/includes/js/superfish.js?ver=1.4.2

HTTP Response

200

HTTP Request

GET http://taktycznie.net/wp-content/uploads/2016/08/przewodnik-obraz.jpg

HTTP Response

200

HTTP Request

GET http://taktycznie.net/wp-content/themes/resizable/images/arrow-up.png

HTTP Response

200
216.58.201.110:443

apis.google.com

tls

IEXPLORE.EXE

706 B
4.6kB
9
9
195.78.66.252:80

http://taktycznie.net/wp-content/themes/resizable/images/ico-video.png

http

IEXPLORE.EXE

2.0kB
6.2kB
17
9

HTTP Request

GET http://taktycznie.net/wp-content/themes/resizable/functions/shortcodes/shortcodes.css?ver=4.7.2

HTTP Response

200

HTTP Request

GET http://taktycznie.net/wp-includes/js/wp-embed.min.js?ver=4.7.2

HTTP Response

200

HTTP Request

GET http://taktycznie.net/wp-content/uploads/2016/06/pozycjonowanie-carted.png

HTTP Response

200

HTTP Request

GET http://taktycznie.net/wp-content/themes/resizable/images/ico-video.png

HTTP Response

200
195.78.66.252:80

http://taktycznie.net/wp-content/themes/resizable/images/arrow-down.png

http

IEXPLORE.EXE

2.0kB
7.0kB
17
10

HTTP Request

GET http://taktycznie.net/wp-content/themes/resizable/functions/shortcodes/shortcodes.js?ver=1.0.0

HTTP Response

200

HTTP Request

GET http://taktycznie.net/wp-content/themes/resizable/includes/js/custom.js?ver=1.4.2

HTTP Response

200

HTTP Request

GET http://taktycznie.net/wp-content/themes/resizable/images/ico-search.png

HTTP Response

200

HTTP Request

GET http://taktycznie.net/wp-content/themes/resizable/images/arrow-down.png

HTTP Response

200
195.78.66.252:80

http://taktycznie.net/wp-content/themes/resizable/images/alert-overlay.png

http

IEXPLORE.EXE

4.6kB
182.9kB
81
136

HTTP Request

GET http://taktycznie.net/wp-content/plugins/disqus-recent-comments-widget/disqus_rcw.css?ver=4.7.2

HTTP Response

200

HTTP Request

GET http://taktycznie.net/wp-content/uploads/2016/01/taktycznie_top.jpg

HTTP Response

200

HTTP Request

GET http://taktycznie.net/wp-content/themes/resizable/images/alert-overlay.png

HTTP Response

200
142.250.187.227:80

http://c.pki.goog/r/r4.crl

http

IEXPLORE.EXE

764 B
6.7kB
9
8

HTTP Request

GET http://c.pki.goog/r/r1.crl

HTTP Response

200

HTTP Request

GET http://c.pki.goog/r/gsr1.crl

HTTP Response

200

HTTP Request

GET http://c.pki.goog/r/r4.crl

HTTP Response

200
216.58.212.227:80

http://c.pki.goog/r/r4.crl

http

IEXPLORE.EXE

810 B
6.7kB
10
8

HTTP Request

GET http://c.pki.goog/r/r1.crl

HTTP Response

200

HTTP Request

GET http://c.pki.goog/r/gsr1.crl

HTTP Response

200

HTTP Request

GET http://c.pki.goog/r/r4.crl

HTTP Response

200
142.250.187.227:80

http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQC%2FJhM0ff%2Fc%2FQm3Xo%2Bqmx2e

http

IEXPLORE.EXE

2.1kB
5.4kB
14
9

HTTP Request

GET http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEGxehKwEvgtmEgBIJfgU%2FNk%3D

HTTP Response

200

HTTP Request

GET http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDmcMw%2Fo03sIxABiVt5eEgl

HTTP Response

200

HTTP Request

GET http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCAjeF7nQPGRhIrMaE%2FWydB

HTTP Response

200

HTTP Request

GET http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDqAPNQawlabxCzGpwe%2BQff

HTTP Response

200

HTTP Request

GET http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEExK8DMmoBqACQpvxzF%2BYrw%3D

HTTP Response

200

HTTP Request

GET http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQC%2FJhM0ff%2Fc%2FQm3Xo%2Bqmx2e

HTTP Response

200
142.250.187.227:80

http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQC%2FJhM0ff%2Fc%2FQm3Xo%2Bqmx2e

http

IEXPLORE.EXE

1.8kB
6.1kB
14
10

HTTP Request

GET http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEGxehKwEvgtmEgBIJfgU%2FNk%3D

HTTP Response

200

HTTP Request

GET http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDmcMw%2Fo03sIxABiVt5eEgl

HTTP Response

200

HTTP Request

GET http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCAjeF7nQPGRhIrMaE%2FWydB

HTTP Response

200

HTTP Request

GET http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDqAPNQawlabxCzGpwe%2BQff

HTTP Response

200

HTTP Request

GET http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQC%2FJhM0ff%2Fc%2FQm3Xo%2Bqmx2e

HTTP Response

200
151.101.188.157:443

platform.twitter.com

tls

IEXPLORE.EXE

610 B
544 B
7
7
151.101.188.157:443

platform.twitter.com

tls

IEXPLORE.EXE

610 B
544 B
7
7
151.101.188.157:443

platform.twitter.com

tls

IEXPLORE.EXE

610 B
544 B
7
7
142.250.187.238:443

https://www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8

tls, http

IEXPLORE.EXE

35.5kB
873.9kB
436
648

HTTP Request

GET https://www.youtube.com/embed/AT-uuYe9XT0

HTTP Response

200

HTTP Request

GET https://www.youtube.com/s/player/b0557ce3/player_ias.vflset/en_US/base.js

HTTP Response

200

HTTP Request

POST https://www.youtube.com/api/stats/qoe?cpn=THMHimBb-x6LtLnd&el=embedded&ns=yt&fexp=v1%2C24004644%2C434717%2C127326%2C26443548%2C7111%2C24166%2C12177%2C9954%2C1192%2C33462%2C2%2C2871%2C44048%2C12193%2C484%2C619%2C6953%2C11044%2C2471%2C7546%2C17801%2C18052%2C5969%2C2128%2C1336%2C4205%2C1823%2C3186%2C2912%2C4794%2C2775%2C327%2C13%2C142%2C3685%2C4%2C404%2C946%2C14631%2C3734%2C1162%2C8%2C8088%2C2543%2C304%2C4054%2C266%2C3312%2C1307%2C3188%2C83%2C14%2C2768%2C1176%2C1%2C485%2C1683%2C3%2C1882&cl=678482515&seq=1&event=streamingstats&docid=AT-uuYe9XT0&cbr=IE&cbrver=11.0&c=WEB_EMBEDDED_PLAYER&cver=1.20240924.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=6.1&cplatform=DESKTOP&vps=0.000:N,0.001:ER&cmt=0.001:0.000,0.001:0.000&vis=0.001:0&bh=0.001:0.000&qclc=ChBUSE1IaW1CYi14Nkx0TG5kEAE

HTTP Response

204

HTTP Request

POST https://www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8

HTTP Response

200
142.250.187.238:443

https://www.youtube.com/s/player/b0557ce3/player_ias.vflset/en_US/embed.js

tls, http

IEXPLORE.EXE

5.9kB
222.0kB
92
164

HTTP Request

GET https://www.youtube.com/s/player/b0557ce3/www-player.css

HTTP Response

200

HTTP Request

GET https://www.youtube.com/s/player/b0557ce3/www-embed-player.vflset/www-embed-player.js

HTTP Response

200

HTTP Request

GET https://www.youtube.com/s/player/b0557ce3/player_ias.vflset/en_US/embed.js

HTTP Response

200
162.159.138.60:443

player.vimeo.com

tls

IEXPLORE.EXE

753 B
3.6kB
10
9
162.159.138.60:443

https://player.vimeo.com/video/134950335

tls, http

IEXPLORE.EXE

1.1kB
6.1kB
11
13

HTTP Request

GET https://player.vimeo.com/video/134950335

HTTP Response

404
142.250.187.238:443

www.youtube.com

tls

IEXPLORE.EXE

738 B
7.1kB
9
10
172.217.169.66:443

googleads.g.doubleclick.net

tls

IEXPLORE.EXE

712 B
4.7kB
9
8
172.217.169.66:443

https://googleads.g.doubleclick.net/pagead/id?slf_rd=1

tls, http

IEXPLORE.EXE

1.4kB
6.7kB
11
13

HTTP Request

GET https://googleads.g.doubleclick.net/pagead/id

HTTP Response

302

HTTP Request

GET https://googleads.g.doubleclick.net/pagead/id?slf_rd=1

HTTP Response

200
142.250.180.6:443

https://static.doubleclick.net/instream/ad_status.js

tls, http

IEXPLORE.EXE

1.1kB
5.5kB
10
9

HTTP Request

GET https://static.doubleclick.net/instream/ad_status.js

HTTP Response

200
142.250.180.6:443

static.doubleclick.net

tls

IEXPLORE.EXE

707 B
4.7kB
9
8
172.217.169.42:443

https://jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT

tls, http

IEXPLORE.EXE

3.9kB
53.2kB
31
48

HTTP Request

POST https://jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create

HTTP Response

200

HTTP Request

POST https://jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT

HTTP Response

200
151.101.188.157:443

platform.twitter.com

tls

IEXPLORE.EXE

610 B
544 B
7
7
204.79.197.200:443

ieonline.microsoft.com

tls

iexplore.exe

799 B
7.9kB
10
13
204.79.197.200:443

ieonline.microsoft.com

tls

iexplore.exe

799 B
7.9kB
10
13
204.79.197.200:443

ieonline.microsoft.com

tls

iexplore.exe

779 B
7.8kB
9
12
172.217.169.66:443

googleads.g.doubleclick.net

tls

IEXPLORE.EXE

652 B
4.7kB
7
7
172.217.169.66:443

https://googleads.g.doubleclick.net/pagead/id?slf_rd=1

tls, http

IEXPLORE.EXE

1.4kB
6.7kB
9
12

HTTP Request

GET https://googleads.g.doubleclick.net/pagead/id

HTTP Response

302

HTTP Request

GET https://googleads.g.doubleclick.net/pagead/id?slf_rd=1

HTTP Response

200

8.8.8.8:53

taktycznie.net

dns

IEXPLORE.EXE

60 B
76 B
1
1

DNS Request

taktycznie.net

DNS Response

195.78.66.252
8.8.8.8:53

apis.google.com

dns

IEXPLORE.EXE

61 B
98 B
1
1

DNS Request

apis.google.com

DNS Response

216.58.201.110
8.8.8.8:53

platform.twitter.com

dns

IEXPLORE.EXE

66 B
127 B
1
1

DNS Request

platform.twitter.com

DNS Response

151.101.188.157
8.8.8.8:53

platform.linkedin.com

dns

IEXPLORE.EXE

67 B
162 B
1
1

DNS Request

platform.linkedin.com

DNS Response

152.199.22.144
8.8.8.8:53

c.pki.goog

dns

IEXPLORE.EXE

56 B
107 B
1
1

DNS Request

c.pki.goog

DNS Response

142.250.187.227
8.8.8.8:53

c.pki.goog

dns

IEXPLORE.EXE

56 B
107 B
1
1

DNS Request

c.pki.goog

DNS Response

216.58.212.227
8.8.8.8:53

o.pki.goog

dns

IEXPLORE.EXE

56 B
107 B
1
1

DNS Request

o.pki.goog

DNS Response

142.250.187.227
8.8.8.8:53

o.pki.goog

dns

IEXPLORE.EXE

56 B
107 B
1
1

DNS Request

o.pki.goog

DNS Response

142.250.187.227
8.8.8.8:53

matlabgroup.com

dns

IEXPLORE.EXE

61 B
134 B
1
1

DNS Request

matlabgroup.com
8.8.8.8:53

player.vimeo.com

dns

IEXPLORE.EXE

62 B
143 B
1
1

DNS Request

player.vimeo.com

DNS Response

162.159.138.60

162.159.128.61
8.8.8.8:53

www.youtube.com

dns

IEXPLORE.EXE

61 B
319 B
1
1

DNS Request

www.youtube.com

DNS Response

142.250.187.238

216.58.213.14

142.250.178.14

142.250.187.206

216.58.212.206

142.250.180.14

142.250.200.46

142.250.200.14

172.217.16.238

216.58.212.238

172.217.169.78

216.58.204.78

216.58.201.110

142.250.179.238
8.8.8.8:53

googleads.g.doubleclick.net

dns

IEXPLORE.EXE

73 B
89 B
1
1

DNS Request

googleads.g.doubleclick.net

DNS Response

172.217.169.66
8.8.8.8:53

static.doubleclick.net

dns

IEXPLORE.EXE

68 B
84 B
1
1

DNS Request

static.doubleclick.net

DNS Response

142.250.180.6
8.8.8.8:53

jnn-pa.googleapis.com

dns

IEXPLORE.EXE

67 B
307 B
1
1

DNS Request

jnn-pa.googleapis.com

DNS Response

172.217.169.42

172.217.169.10

142.250.187.234

216.58.201.106

142.250.180.10

142.250.179.234

142.250.187.202

142.250.200.42

142.250.200.10

216.58.204.74

216.58.213.10

172.217.16.234

142.250.178.10

216.58.212.202

172.217.169.74

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
10c07be3074c86a4cbee94f2cb6dcf2a

SHA1
5410e0c8532d90e6b1b3539876c07e3fa1803412

SHA256
a9ff8239094a3d51b433e612d0d3394a375b48f3900476c3fd3ae6b701589d6b

SHA512
eef88e58c7102535a3179787d22ab89cb29e632bea3ead0d23f15ca4795f71d3c20bf96e309ecc532a93c23e434b51af6fabe2b511cba6cd388997ac014d7ce8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
e69624fad99b2bb0f8267fbc8a6fc4bc

SHA1
436abe712341e695e70328957a1897a8b28b7fd6

SHA256
15747f8967f6e9fa959659f1275c25b8acdd15625b027afe784875df6bedffb9

SHA512
6fc5de1ab2fb34c5f7802ebf3b5c6f4941b3d63ed6dc5c78a132d81e0fe9974c91e019a2f58bb77935f82e0173eb836d74cf7b4af21b0b9bb41a67dc71de396c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
11df2a4def9ebca2cc38bab6c4562f2a

SHA1
8625a4494673841299a28387ec4a22392108d271

SHA256
ea77171933273b264d66062e77c11de4dfcd1abd3830c60779e61d6bf54f07c0

SHA512
5d29b7e6185b4ade8f6c39103fdc999b48b7db33f4f85c4654b00e385b7d458de7559f410a707e16539c87c9c62d5eae26f96d7e800cc9828ab087b0c2e57143

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
41b4fdeb53a865758d116edcc37b4e05

SHA1
877fda44b32f799b3addafa14b2c3c59f561cf88

SHA256
933c086b3b2b565d79739d8a16da98e59581663375f78c200a0aa3718f63b20c

SHA512
cbc5c528ebca14c0bb9b5ad19cf0702c957d1594093668897d605f0c7b2ef6d00d321f5773d72b1010bc9ee4aeeeda816fcbd52f1d17db372d93f0366d338298

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
f64b454428837480b0967165867acf8f

SHA1
3ad430a3f6513c1a89147a6a9c66ad5c4573edc1

SHA256
dde9278303f2dd7979b6b23929230fd550a7539f77e2ddf302c0f4ceda8a1874

SHA512
8dec0064db298a92b91ba695ea5050e781e1a1bb990e36405fb4cd1c54be7c662a87592b16334df60fb86260031c18fe79d6515b4928eb0db4967c7cd13bb31a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
ae28600f0c345a3134f68c9789957bf1

SHA1
dd9d0ea5dc7dbe5b6e2edd5e2b73bcdc0c989297

SHA256
c98a950cdf0107c44405c004c2f719862bc40822b4530c398c6059759a9e0c20

SHA512
3d30a81b9dbb5514bf26bd4d1053542eb09c715dadc6a6990738f313652c23f333f93c178016ed404b8298833953225b05f84b07247d641dc00c88b36a825dcb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
92d5d4d7401ae61a3a610274fb1e3b92

SHA1
c29ed644f0844243dd25d7991ff718f797740cf3

SHA256
2ddb1122ae24341790a58684a7297960083d8db00ba048fb4efbbc05be965ee2

SHA512
b1abe6e5668eb84e7903342e940cca6d2d49413a31edbc868c353f3fd1061b6126a8534c5eec476535223e6df73e810c5f6983bb117055d88bbc22e3040ef458

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
7ba0e0ba514a0e2ef4c57ebe52d41ae3

SHA1
b208ca402e2a5930e998d30b3f3bc20b74cb07c9

SHA256
163e74ea5a665d545709faee3acf5b3d351330fdc6a58494a20b298ffc0cdd0f

SHA512
4ddc7fc593652b6eda36038760a3019906ab4bb9d5f7acdce966ae92957b86cb89d2dce1d82ee3a3e503b4b40b2858c089986407dbe3c0d00da057b014d43744

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
a8a82f6839e7f051248d9c1981b4ff81

SHA1
7640183b900870126009bd6b031367e7dec4308e

SHA256
355ef040dd899e3ac76afee8538c3faeedd25c04667112b07454f0a3b67d2a17

SHA512
61f3180e20d080ab83e8f7d8ad0d29752d180f250557b0bb024c53eb29e7340d3edd31ec601acbb928b99a6dc8dc56c4eec39a42d25c271f9682a2635dd37113

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
cf2ad6673719692650614d51b35bdba3

SHA1
c0358416580c41cc65f259c5a94bd740b57547d3

SHA256
9804fa31faccecf81c1d0dac1ef3f0cc37aebe05e105f18b8092bc455d0e84ec

SHA512
8769a18178ea865ea8397ded816c767071de57deccd201274d1031d08bf7fc64e758a723ceba07099fdeb1665baee01b41b84992933bf7b4bf1f47539941d575

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
d7c3045588a93eb3689108ee78d55ad7

SHA1
55020addbb44cb1a5d466dc6fda711b7cd3a26a3

SHA256
a06dbb94d72b6b63615e2b30281dfa91e6fcaee1ef6c890e0a23168056673d6c

SHA512
7e0a881345d76d31c33cabd53b626344706a1f4c48fc57b6e71303fcb117f74c1fd9ba2c9d64816fa414d488da3914a4a2b48466c9d232abe8310c3597bb8f7d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
caeb61e33b249d5f60e8ca3ab5bc404d

SHA1
cb93ff1aab9ef078282069c30387d9eb098265ec

SHA256
1e7311fc72d879b29b9d55720cd54748aedb4f0ba49dc7a0d580cd5c3b59b216

SHA512
5df77d8787c4c7cd2934dc208fbfeb29c5fe3e1940abdf707a968f0903b75d1d5638027a10bd1e5dd46983912f310cbdcc5019d07e43c442bb20c868d8a3325c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
9b135d61ae2e1d71c4233794ea94f94a

SHA1
d942fae7c9ae432b26ec508b81343c3551f64555

SHA256
2bba5ef730e0b2665e508d444b9f2fc23e3f6604379944471f265fd186de7d89

SHA512
ca3f36f0a6cf4aaf80477f822a881d4cca94e0f69179aaadfdbd2b2af0bae69c1a932a817d553c21a1e393213ab27bdb3366b650a9b64713e83b765d88b7e754

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
326c3842f83562b02d5d9e0a2e119de3

SHA1
7e610ddcf3dc04fe792952f52ea9ada865edd09a

SHA256
00518c7ec3aaa9b2899ad8856140c5f9aaa527e094ca639f6f8453d4823be3ee

SHA512
1de60786406148a5a5a1501965b1fe8ca4011ad45cb3d7e5cfad78f38dc1f4e9797bf38f6642e4a15b294106c039cb0f8e83d85fad2d27c8ed0dc9256c1b2860

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
46644573469b009043cbf2600d681282

SHA1
81db4ac075ca50c881be8f659872b488ee6b3197

SHA256
e2284fa54688c15d9e89be7eb6f4a765624e04feed2fcf591d7fee5668190051

SHA512
a0cb6d417f5e0aab8d9f20b5b31cc6ac3c40055015ad48fbe7a380bf319cee9f1a94670fd91bb915de5751a30157fa407a26c9af1d110233dd47c786beedad5b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
7bbe2e76b7799a24793fd2b887f5cbd0

SHA1
fba4ba3a0c37bbffecbd93bb037d1d10fe20c24c

SHA256
40565ed277d9987877ae15b67b0750e41b9e38f12f2561454d76d089c913213e

SHA512
7bcbce9c1178577fa440f639aac1f062ade58842c1bff422aa996ca4477d35c6874f34d6e880bb189e237ba71f3836d3852c15b04207a972c595809adb17fd0f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
ebab3024ffb0c7fc24f6f3145b375d61

SHA1
47b89e532fe1888d6278e2dfd99f4f7ac18f241b

SHA256
d7b2d996282656efde0d9ebb2e2bcce3d357f4fe001656409cc3c6c595c5df17

SHA512
c99d095940c95dea000bc1927fd5e0f2da8bc1a2d0f4be3e1d83a84112f7a1921cad399ba08234103a312a2994c6b255c581ff3d77fb1834d3f3b398956cfb31

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
81ac1bdc2e1a06d1ed6e10eb79a9362e

SHA1
fc768797d1d0211ca1ce379e4256f7adcb38257b

SHA256
792a30323af25b935ef12016efd626bd19e6df2afdeee4099807baf59205fe8c

SHA512
473e6d998ca0c8f559e3503a024751ff7c1b173300b20222541bada664314239349dc06b55dcf5ea6fc29b24069cd27b6c8f2cdc9ce957bb5b67e2145255c614

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
a98adc523f52cae2468879e71276412f

SHA1
4dae909d7377eb806d484a9067c5396a8522f4b7

SHA256
1e515fe855fa819ab73a27d7c18f18267aebc279a3c06a91ea0be21eb2177775

SHA512
7c65b1dffeaf30b104921122e63e2e623df3e7d51df8cd00d2b3db4a8d181f9767d4ec7258e3652bb66eeb68c995c93276d816abd94f1ee0f6406f2d0a0a5355

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
13835dca7e3565e0d1d69362f110763e

SHA1
320144bbd8c063ca3fd5d7569e0c5f8b57e3069c

SHA256
5624d2c4b8cc3a2c56026cfe553f4f3aa861a34f4f8c582ad60589cd9dcb1acc

SHA512
a27d632047aa86784cae50f8659f1bb161d2236339461844e9240100feb0c3a2d7a2c4ac8604af3e319c431c0aeceb4015c24d351c01f2848403aac4721b157e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
c8f14a63fe78372fddfe83519114f378

SHA1
5fc29cd27d6ced95e0cb6c523995e41a08d57cc0

SHA256
944610b7393ab3b60a2d84fd9a931ba1c9d1b915d033659e1bc7db465e6a8093

SHA512
112018601c25d472e112f9817e16a25437c54521d4460c34c97068b34a56d841844ace1be9aa36cdd9ea73387a7bb67de355454f7bdadac8ea4e7bc572222f32

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
66daf666f2b27f26bf51c2590b5dfad4

SHA1
4e6d197cb43dedd7df812ba6aa148c1325b52252

SHA256
df0a375f208ec526698ee76b190fef6c2e65a590a7f55cb0387469555304d2db

SHA512
f05aa39665d59fba99fcb238a086a8d50349c4f8c381f0733a7d238f25786e221cb23562ba3cbcdb9d12eea8f63c96aebe68500f7111f488585ecf3913272103

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
efd9bc3f0b9d5b8f17589d95c63123c6

SHA1
5b2f642dd48314ef38fe452775f00427a97935fc

SHA256
9b9e06861f141a8fe189c2b9294111b3259782aca5d8365d73b65105359d3001

SHA512
776494647a6a3711d5ba0a7278f24c988fad33339390d23268bf2d8c94495754ad50f90de9614ec03771f37f36e9266c873c8fc321ada0c7dbc06d8bb84f3ec2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
2a984706ac29d54e59c2018f0db310e8

SHA1
861954518502309f12f9c501a0a50b011ba6cd98

SHA256
241318d37cf3400207cccae6d4ccd8485a97200a1df7bf06b2e7011816cb5b89

SHA512
6a71ae59dea7a59c76a42d4eb6ed82b25d9a6f5515e4b2ed5de448a7c9685dd2ddfb17ca1ca6f99e80b2714a9cf90fa21a0413eb31d125659220e34c882fd8cc

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
15bcc1b449dc7213b2dab0207632e222

SHA1
4be1804fc9a48212a75cd58cc1dc946b61975ac0

SHA256
4c66dc19ab52b42ea3816164c3161d0c1f5fe166cda503c0ad091cc20cb64007

SHA512
89d8cd6414e89a6c85ef425e75ada41a3fb6bf987028f6587722baa8f10f51cab77ac040af26dc854331eb5a30f761be77355b8cae9a5760b5d8c2364e078eb2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
1a388903812802506264e88ddbb3f94e

SHA1
e340c239fcedba2c42f8dc2927988a3bd1fe89f7

SHA256
c162d83d5e3653c5f28d91e7a8c486b6bd13ffe8a6724d011a32b3808ea2a404

SHA512
d83c6b15d42c5b357fe9175881db6fcf422b707a576f8dc578f3493e70de921b7027a3e78b5f17e5287c0630ee74dfe8e6e68d37579db6e90c93a0b247ea8367

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
338998417f55328181f5d340d8f1d17a

SHA1
d2370c509f890328c15ad5f66aea204f88906139

SHA256
e039b821f64e63d1dbd5902877ce66db983f0ed195e257462b1516f38711581d

SHA512
62bcb554719723e4d743a3a01d92543681f4f38e364abee1fcc7763e5e9e768bc7dce6d1ba203f64ebfbd5a78a79e95e936774c90e4387f807c98f7fd05e6a5e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
2acfaa1a4e9e9374d1a203a07f81aace

SHA1
f9d98e225b4e49e3a86fceb0231cc51d4161f044

SHA256
4a04a2805f411bc41c29c64592f64debb48aa7a159e3a098ffa261679070d9ee

SHA512
ec30fb6b6042543e8ebf61bc5724180d9e1597028bb819afa6a1d455ae7917fb4a9b561b0ce0b4be2d7b8a5b9ad10c452e1fc696149a3aadadaab6c9b7ed9004

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
c5c9b5f9a224b800c92a568ef8d1b7fd

SHA1
7190951896a37a33b35cda77b41c7995a666ef6c

SHA256
5a160419ea05d02464bc6bc4e897edb95ff869e0122ebc4d8c3d33b8464fec58

SHA512
741b0d23ad15186c8a2dbd0d097e3df0fdaa06d994a34a67e9aaf95ccfc00e2b5b6110eaabb9261c878e7d2e4f89733b1ab4e92ccd75e613ea6990a68f0cdc6c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
ecb8d97fe3e43ee4ca8f248220cdaf70

SHA1
1635ea1d837783fe1d01bf6149431b06543b5e1d

SHA256
aa7b0cd1b460c0bfae5b8730b9002c0f833bdc6f7260e276074e72020f6c6cbc

SHA512
188d31dd50229cd50bb4e1647cc143fe7334eef46f1c1a07cef7028807c8347ac386306df6350eb9db7ed68b698073c77cecc6cc08e2787350fed848670c45e1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
da54a5d18d4ccca59a611d9f8265b875

SHA1
6161b69495e67ae5db0aff09b57a5724429cbf44

SHA256
127f9bf92ba83c7ccf87cbec086309c2602dc53eead00f26a64c0666af1d694e

SHA512
834977a1b97ce26b135c326298189eaa48de407b30dd153a675597f07ac3132a133c5eaf65387116381cdabab039cf792e817058e49b6cce72b45be67d3cf7c2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
fcdd6174cf00e18430f520e189a61837

SHA1
86afcd667d9c6580581c6cbcc9ca8202fbef1000

SHA256
2d07cb4677b408c48777f82b6fead3a45656f85139ea9626619592b08ef7bfbd

SHA512
a359f560393691f7c56af01e3ab3e4f8387f00a58fed16460e764427864855efa10fe5c61ea973695e0aefa36b3b974551325b7d9df3a19dd43e2f38f05f9538

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
3b4b0f700281b6d4aded88582667c48d

SHA1
0f1e325fffed3191801f59460201d74c2cbfd1a3

SHA256
f205e12699cf0e0e51b1a930d67d452728cbb897334056016acdcd0b24193991

SHA512
b08b9390cf9d5f9966f41dcc57ee2225924ed8944462ed18a5ba3becadaab2ab434f9b19042e3f29d62d764387d9770aef503d0d3f70310282a3c8e2cae58e83

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
76d24dadf1e1311686ed2a35b4bdbc31

SHA1
bbbbc7e533d48582657b088dfefbd9b1ec434f8c

SHA256
69598d2053c1a2e9ba13522b634761ad53c897078d15904ce35983390044c095

SHA512
80ba322db1f29d3b9e3950fd9aa09934688d06d081a2cd3029e4c0861da87583fbdbbabfc4bbef8f9831590704c12aa5624be25d7d437bed9d8140cef08bc944

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
75380fab4602f426b3059960fd356a36

SHA1
6e81455559d1cc0547e335b6f9d5d3c1aba92899

SHA256
b25395aab41fe4af1ba66c151148609cc943d3c5937aaca6f9f119892bfc79fe

SHA512
d0beb051c18a74b7cbcbf283b9720802dec19b4401d91e4aaf932bd65349f9b8dea87bced67d91447245142c8a133e1c50ee0c92fbbf3500e88b92be27caff12

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
88d1d61b1265ff849067e3e24313815e

SHA1
6f39a0035d8a9c4e631e8161445eb7b3ddc996ba

SHA256
f8aaf501c5924fdef9e8015a0661e224019ecd8d5481f346125a29b787470389

SHA512
c67ecb771025aaf31ab41e323187c430d37f1783a4922698ce20c6b63cbded2c0e04eb7760c836918f6aa8ad97c0079cef1f71bd93df9432dd469916f0b4c29e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
351a1c0fae86c97e5deac48531beab87

SHA1
8db75eee50b62612a3119f1c8dd32ae869a89229

SHA256
2d6cf19c36fc4fdf4d546b7f2612539c2de8ca25ad2222d90a74deaf36895e61

SHA512
da8ef252adde2939f8584e3eb07c3762ee0707c999c504d15db863df4145abd0808d67171df8a1c08b1d1bce431ef4ad624d133656be8a64514ff6049b164014

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
be1cc965ce800b581e87f30631bebf68

SHA1
93341aff33b265592663e2c5061bcda5061b34b7

SHA256
7633eb128ecd73c6fe3b5ce3a129180ef6d77c18d11eef9a8a0a4fec353b4014

SHA512
4037ff198038ab15c695edd35ba8717691cdf061bbec92ec5c78a26a4d390e4c2b0f3e6ef5fc5bdcf0ff20dc08de283ea84b1707474a4677dd7e75a426e6f198

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
b02c3492e3bb4645c06d5ff84a50a3e3

SHA1
c6be5b332cb52c05448ca1e297015b96c0ecf219

SHA256
1c89c665f25d41b0d3134bdd9756df8af7cb0233788dffe7046b2f90791aabf2

SHA512
3ebffd9c1eb4702e60467cfcc183c519896316be62ecd38e065ace5fc47467cca0a1505f8ba8ccd23df37434da6a76c1f8bd2e51528260cb04b8b46741384334

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
64cf767cabf78ea95914a0f3cf315240

SHA1
d62a936f97b1514622ee1891e8a7673e7a7cb7b7

SHA256
6dff8fd9d0ae6405ce2f643438a3edb3810e9ef4f7189a84041bc899a539156d

SHA512
41a92d1c14ed439d7c883eb4abb32a7ba2d7bc2187f5935cec4bd9b30e06634a9c702b6bc80f0d93114094dd5b0d97218cd6411ba7da811ec8fa5fdd946f5781

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\T8AQ7FHG\www.youtube[1].xml

Filesize
15KB

MD5
aefd19ae4a82f1b2120ad9e22d9c840a

SHA1
e44750b5ef752218e6baa95064f99cc28a680c4d

SHA256
594b00d79f5a0f03981a0977b520c354c20f1fb6069a3755b4f6b7fbe14e5400

SHA512
b8f1632d96ab04ed3a3faebcee9cfde4faff473547dd99565b4a91921a33c2b388569c97622a9a70cdaf8edfc9b9a15684ec4b2b01ee6232d997dfd0f6adf7a0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\T8AQ7FHG\www.youtube[1].xml

Filesize
578B

MD5
55c76c10bbf9ce35c408c9f842b9eaf2

SHA1
266fd279c60317a2b2d535364bf1e065a4c5b8f8

SHA256
c7348e3f22fdcb60bc4aa195b41748b6840ff04c7fce7ba61a06072d6e96d384

SHA512
4092788d437310db97d2571f7e0c6525fa3b55a1f9b587eeb55b2e38c441429593ac065aaaa55b84bbee8e92d3acea9784f18ca4740b778f5fd54f2eaacb55d2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\T8AQ7FHG\www.youtube[1].xml

Filesize
578B

MD5
f6ac9a78d545b6060f6166aff696b351

SHA1
ad699aa39dd4dc96d4a1f06b382b57b70b33247e

SHA256
3cc855d6be8e302e4c46129b27435ad0c946f8046902d727a62339bd77182469

SHA512
461a38fc186b835f40bfddcd5960a089d8c261146c8eb07c396601dea8abd07dc61293ddd51626b5abd6d6a70faf7c11d30ec571d42cd3944b86c2ce2a2d35b1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\T8AQ7FHG\www.youtube[1].xml

Filesize
578B

MD5
05efe6b0ba2b69c9b5b9b8f66ffc4dfa

SHA1
4d02e51c5e6d1062428306379a5f46a7f4c080a8

SHA256
bfd33429e7c2d123693889f3a19e8c6d4ddd6d23267ac2fa42019193f067694a

SHA512
b3618a4cd529ea3e3177e8188c4124c430dcc7b160db3afc9fa5b5897b8f250de91c6d908758139ca9ba0d9a5e4f10d3fb9937e71e2b09b2db29b37402696a18

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\T8AQ7FHG\www.youtube[1].xml

Filesize
578B

MD5
6cfbdd0f670764a0ed01a78eb80bcfc0

SHA1
3d2451140b189c460adf297ba2b464d46136308a

SHA256
69d9d0017f48234ea37929ae3204a8508c40249dc129aacb62e2386d45c6c904

SHA512
d1d3eb6a4d23d3280dc0d87748c870acc4ab1f26906d94c3f481c450cffc0a48fcb01dd25201fde001241663c4fd9bddc5edc8c19f91bb70cbd708fe200e5994

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\T8AQ7FHG\www.youtube[1].xml

Filesize
13B

MD5
c1ddea3ef6bbef3e7060a1a9ad89e4c5

SHA1
35e3224fcbd3e1af306f2b6a2c6bbea9b0867966

SHA256
b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db

SHA512
6be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\T8AQ7FHG\www.youtube[1].xml

Filesize
229B

MD5
889ec9e162e53c707d4c646f36d7d899

SHA1
31cf89296c251b2c2aa4511b44649e08bc64538b

SHA256
886a32f1cdd845f5a381388efe54961a039e16345535aef01998530ffe8a8311

SHA512
6b30a3f24e6c460a1cbac17c85a6a603aef28c2caabaf76e838c6830a84f66e98d87f9dd9c7f2946188a6dd4786c9abcc06b38e0c865d378dedb31cde2bcf6a7

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabEAED.tmp

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\Local\Temp\TarEB6E.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request