Analysis

  • max time kernel
    112s
  • max time network
    118s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02-10-2024 01:23

General

  • Target

    http://Movieshd.com

Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 2 IoCs
  • Suspicious behavior: AddClipboardFormatListener 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 2 IoCs
  • Suspicious use of FindShellTrayWindow 13 IoCs
  • Suspicious use of SendNotifyMessage 11 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://Movieshd.com
    1⤵
      PID:1808
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=16 --field-trial-handle=1988,i,3387628439405076340,17957358341235678872,262144 --variations-seed-version --mojo-platform-channel-handle=3800 /prefetch:1
      1⤵
        PID:4640
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=15 --field-trial-handle=2144,i,3387628439405076340,17957358341235678872,262144 --variations-seed-version --mojo-platform-channel-handle=2888 /prefetch:1
        1⤵
          PID:852
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=5400,i,3387628439405076340,17957358341235678872,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:8
          1⤵
            PID:1936
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --field-trial-handle=5072,i,3387628439405076340,17957358341235678872,262144 --variations-seed-version --mojo-platform-channel-handle=5460 /prefetch:8
            1⤵
              PID:4216
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=19 --field-trial-handle=5924,i,3387628439405076340,17957358341235678872,262144 --variations-seed-version --mojo-platform-channel-handle=5952 /prefetch:1
              1⤵
                PID:4008
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --field-trial-handle=5100,i,3387628439405076340,17957358341235678872,262144 --variations-seed-version --mojo-platform-channel-handle=4120 /prefetch:8
                1⤵
                  PID:4556
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --field-trial-handle=5452,i,3387628439405076340,17957358341235678872,262144 --variations-seed-version --mojo-platform-channel-handle=3864 /prefetch:8
                  1⤵
                    PID:2708
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --field-trial-handle=6284,i,3387628439405076340,17957358341235678872,262144 --variations-seed-version --mojo-platform-channel-handle=3864 /prefetch:8
                    1⤵
                      PID:3148
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
                      1⤵
                      • Enumerates system info in registry
                      • Modifies data under HKEY_USERS
                      • Modifies registry class
                      • Suspicious behavior: EnumeratesProcesses
                      • Suspicious use of WriteProcessMemory
                      PID:2240
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=127.0.6533.89 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=127.0.2651.86 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffe62fad198,0x7ffe62fad1a4,0x7ffe62fad1b0
                        2⤵
                          PID:1928
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2900,i,9094741759348895981,313453279080530478,262144 --variations-seed-version --mojo-platform-channel-handle=2896 /prefetch:2
                          2⤵
                            PID:1424
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --field-trial-handle=1928,i,9094741759348895981,313453279080530478,262144 --variations-seed-version --mojo-platform-channel-handle=3076 /prefetch:3
                            2⤵
                              PID:2712
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --field-trial-handle=2268,i,9094741759348895981,313453279080530478,262144 --variations-seed-version --mojo-platform-channel-handle=3108 /prefetch:8
                              2⤵
                                PID:4524
                              • C:\Program Files (x86)\Microsoft\Edge\Application\127.0.2651.86\identity_helper.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\127.0.2651.86\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --field-trial-handle=4508,i,9094741759348895981,313453279080530478,262144 --variations-seed-version --mojo-platform-channel-handle=4540 /prefetch:8
                                2⤵
                                  PID:4820
                                • C:\Program Files (x86)\Microsoft\Edge\Application\127.0.2651.86\identity_helper.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\127.0.2651.86\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --field-trial-handle=4508,i,9094741759348895981,313453279080530478,262144 --variations-seed-version --mojo-platform-channel-handle=4540 /prefetch:8
                                  2⤵
                                    PID:3608
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --field-trial-handle=4604,i,9094741759348895981,313453279080530478,262144 --variations-seed-version --mojo-platform-channel-handle=4764 /prefetch:8
                                    2⤵
                                      PID:2460
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --field-trial-handle=4556,i,9094741759348895981,313453279080530478,262144 --variations-seed-version --mojo-platform-channel-handle=4768 /prefetch:8
                                      2⤵
                                        PID:1316
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --field-trial-handle=4844,i,9094741759348895981,313453279080530478,262144 --variations-seed-version --mojo-platform-channel-handle=4864 /prefetch:8
                                        2⤵
                                          PID:3372
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\127.0.2651.86\elevation_service.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\127.0.2651.86\elevation_service.exe"
                                        1⤵
                                          PID:1696
                                        • C:\Program Files\VideoLAN\VLC\vlc.exe
                                          "C:\Program Files\VideoLAN\VLC\vlc.exe" "C:\Users\Public\Desktop\Google Chrome.lnk"
                                          1⤵
                                          • Suspicious behavior: AddClipboardFormatListener
                                          • Suspicious behavior: GetForegroundWindowSpam
                                          • Suspicious use of FindShellTrayWindow
                                          • Suspicious use of SendNotifyMessage
                                          • Suspicious use of SetWindowsHookEx
                                          PID:3620
                                        • C:\Program Files\VideoLAN\VLC\vlc.exe
                                          "C:\Program Files\VideoLAN\VLC\vlc.exe" "C:\Users\Public\Desktop\Google Chrome.lnk"
                                          1⤵
                                          • Suspicious behavior: AddClipboardFormatListener
                                          • Suspicious behavior: GetForegroundWindowSpam
                                          • Suspicious use of FindShellTrayWindow
                                          • Suspicious use of SendNotifyMessage
                                          • Suspicious use of SetWindowsHookEx
                                          PID:5068

                                        Network

                                        • flag-us
                                          DNS
                                          movieshd.com
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          movieshd.com
                                          IN A
                                          Response
                                          movieshd.com
                                          IN A
                                          64.98.135.52
                                        • flag-us
                                          DNS
                                          movieshd.com
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          movieshd.com
                                          IN Unknown
                                          Response
                                        • flag-us
                                          DNS
                                          movieshd.com
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          movieshd.com
                                          IN A
                                          Response
                                          movieshd.com
                                          IN A
                                          64.98.135.52
                                        • flag-us
                                          GET
                                          http://movieshd.com/
                                          Remote address:
                                          64.98.135.52:80
                                          Request
                                          GET / HTTP/1.1
                                          Host: movieshd.com
                                          Connection: keep-alive
                                          DNT: 1
                                          Upgrade-Insecure-Requests: 1
                                          User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 Edg/127.0.0.0
                                          Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
                                          Accept-Encoding: gzip, deflate
                                          Accept-Language: en-US,en;q=0.9
                                          Response
                                          HTTP/1.1 302 Found
                                          Date: Wed, 02 Oct 2024 01:23:23 GMT
                                          Content-Type: text/html
                                          Transfer-Encoding: chunked
                                          Connection: keep-alive
                                          Location: https://www.blu-ray.com/cgi-bin/redirect.cgi?source=https://www.movieshd.com/&target=https://www.blu-ray.com/digital/
                                          Server: Redirector/1.0
                                          Cache-Control: private
                                        • flag-us
                                          DNS
                                          business.bing.com
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          business.bing.com
                                          IN A
                                          Response
                                          business.bing.com
                                          IN CNAME
                                          business-bing-com.b-0005.b-msedge.net
                                          business-bing-com.b-0005.b-msedge.net
                                          IN CNAME
                                          b-0005.b-msedge.net
                                          b-0005.b-msedge.net
                                          IN A
                                          13.107.6.158
                                        • flag-us
                                          DNS
                                          business.bing.com
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          business.bing.com
                                          IN Unknown
                                          Response
                                          business.bing.com
                                          IN CNAME
                                          business-bing-com.b-0005.b-msedge.net
                                          business-bing-com.b-0005.b-msedge.net
                                          IN CNAME
                                          b-0005.b-msedge.net
                                        • flag-us
                                          DNS
                                          movieshd.com
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          movieshd.com
                                          IN A
                                          Response
                                          movieshd.com
                                          IN A
                                          64.98.135.52
                                        • flag-us
                                          DNS
                                          movieshd.com
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          movieshd.com
                                          IN Unknown
                                          Response
                                        • flag-us
                                          DNS
                                          movieshd.com
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          movieshd.com
                                          IN A
                                          Response
                                          movieshd.com
                                          IN A
                                          64.98.135.52
                                        • flag-us
                                          DNS
                                          bzib.nelreports.net
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          bzib.nelreports.net
                                          IN A
                                          Response
                                          bzib.nelreports.net
                                          IN CNAME
                                          bzib.nelreports.net.akamaized.net
                                          bzib.nelreports.net.akamaized.net
                                          IN CNAME
                                          a416.dscd.akamai.net
                                          a416.dscd.akamai.net
                                          IN A
                                          2.19.117.71
                                          a416.dscd.akamai.net
                                          IN A
                                          2.19.117.83
                                        • flag-us
                                          DNS
                                          bzib.nelreports.net
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          bzib.nelreports.net
                                          IN Unknown
                                          Response
                                          bzib.nelreports.net
                                          IN CNAME
                                          bzib.nelreports.net.akamaized.net
                                          bzib.nelreports.net.akamaized.net
                                          IN CNAME
                                          a416.dscd.akamai.net
                                        • flag-us
                                          DNS
                                          8.8.8.8.in-addr.arpa
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          8.8.8.8.in-addr.arpa
                                          IN PTR
                                          Response
                                          8.8.8.8.in-addr.arpa
                                          IN PTR
                                          dnsgoogle
                                        • flag-us
                                          DNS
                                          133.211.185.52.in-addr.arpa
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          133.211.185.52.in-addr.arpa
                                          IN PTR
                                          Response
                                        • flag-us
                                          DNS
                                          52.135.98.64.in-addr.arpa
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          52.135.98.64.in-addr.arpa
                                          IN PTR
                                          Response
                                        • flag-us
                                          DNS
                                          68.32.126.40.in-addr.arpa
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          68.32.126.40.in-addr.arpa
                                          IN PTR
                                          Response
                                        • flag-us
                                          DNS
                                          240.221.184.93.in-addr.arpa
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          240.221.184.93.in-addr.arpa
                                          IN PTR
                                          Response
                                        • flag-us
                                          DNS
                                          71.117.19.2.in-addr.arpa
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          71.117.19.2.in-addr.arpa
                                          IN PTR
                                          Response
                                          71.117.19.2.in-addr.arpa
                                          IN PTR
                                          a2-19-117-71deploystaticakamaitechnologiescom
                                        • flag-us
                                          DNS
                                          95.221.229.192.in-addr.arpa
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          95.221.229.192.in-addr.arpa
                                          IN PTR
                                          Response
                                        • flag-us
                                          DNS
                                          nav-edge.smartscreen.microsoft.com
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          nav-edge.smartscreen.microsoft.com
                                          IN A
                                          Response
                                          nav-edge.smartscreen.microsoft.com
                                          IN CNAME
                                          prod-atm-wds-edge.trafficmanager.net
                                          prod-atm-wds-edge.trafficmanager.net
                                          IN CNAME
                                          prod-agic-uw-3.ukwest.cloudapp.azure.com
                                          prod-agic-uw-3.ukwest.cloudapp.azure.com
                                          IN A
                                          51.11.108.188
                                        • flag-us
                                          DNS
                                          nav-edge.smartscreen.microsoft.com
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          nav-edge.smartscreen.microsoft.com
                                          IN Unknown
                                          Response
                                          nav-edge.smartscreen.microsoft.com
                                          IN CNAME
                                          prod-atm-wds-edge.trafficmanager.net
                                          prod-atm-wds-edge.trafficmanager.net
                                          IN CNAME
                                          prod-agic-uw-3.ukwest.cloudapp.azure.com
                                        • flag-us
                                          DNS
                                          188.108.11.51.in-addr.arpa
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          188.108.11.51.in-addr.arpa
                                          IN PTR
                                          Response
                                        • flag-us
                                          DNS
                                          movieshd.com
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          movieshd.com
                                          IN A
                                          Response
                                          movieshd.com
                                          IN A
                                          64.98.135.52
                                        • flag-us
                                          DNS
                                          www.blu-ray.com
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          www.blu-ray.com
                                          IN A
                                          Response
                                          www.blu-ray.com
                                          IN A
                                          64.21.0.130
                                        • flag-us
                                          DNS
                                          www.blu-ray.com
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          www.blu-ray.com
                                          IN Unknown
                                          Response
                                        • flag-us
                                          DNS
                                          www.blu-ray.com
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          www.blu-ray.com
                                          IN A
                                          Response
                                          www.blu-ray.com
                                          IN A
                                          64.21.0.130
                                        • flag-us
                                          DNS
                                          130.0.21.64.in-addr.arpa
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          130.0.21.64.in-addr.arpa
                                          IN PTR
                                          Response
                                          130.0.21.64.in-addr.arpa
                                          IN PTR
                                          blu-raycom
                                        • flag-us
                                          DNS
                                          ssl.static-bluray.com
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          ssl.static-bluray.com
                                          IN A
                                          Response
                                          ssl.static-bluray.com
                                          IN A
                                          172.67.156.160
                                          ssl.static-bluray.com
                                          IN A
                                          104.21.8.15
                                        • flag-us
                                          DNS
                                          ssl.static-bluray.com
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          ssl.static-bluray.com
                                          IN Unknown
                                          Response
                                          ssl.static-bluray.com
                                          IN Unknown
                                          h3h2h�C��GE� A� ����ǞBF)y�e�w0jz{[�:�f�h ��cloudflare-ech.com &G01�C��&G04h
                                        • flag-us
                                          DNS
                                          images.static-bluray.com
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          images.static-bluray.com
                                          IN A
                                          Response
                                          images.static-bluray.com
                                          IN A
                                          104.21.8.15
                                          images.static-bluray.com
                                          IN A
                                          172.67.156.160
                                        • flag-us
                                          DNS
                                          images.static-bluray.com
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          images.static-bluray.com
                                          IN Unknown
                                          Response
                                          images.static-bluray.com
                                          IN Unknown
                                          h3h2h�C��GE� A� ����ǞBF)y�e�w0jz{[�:�f�h ��cloudflare-ech.com &G01�C��&G04h
                                        • flag-us
                                          DNS
                                          cdn.intergient.com
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          cdn.intergient.com
                                          IN A
                                          Response
                                          cdn.intergient.com
                                          IN CNAME
                                          d2n8ih7naru1ql.cloudfront.net
                                          d2n8ih7naru1ql.cloudfront.net
                                          IN A
                                          65.9.95.105
                                          d2n8ih7naru1ql.cloudfront.net
                                          IN A
                                          65.9.95.86
                                          d2n8ih7naru1ql.cloudfront.net
                                          IN A
                                          65.9.95.104
                                          d2n8ih7naru1ql.cloudfront.net
                                          IN A
                                          65.9.95.20
                                        • flag-us
                                          DNS
                                          cdn.intergient.com
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          cdn.intergient.com
                                          IN Unknown
                                          Response
                                          cdn.intergient.com
                                          IN CNAME
                                          d2n8ih7naru1ql.cloudfront.net
                                        • flag-us
                                          DNS
                                          cdn.intergi.com
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          cdn.intergi.com
                                          IN A
                                          Response
                                          cdn.intergi.com
                                          IN A
                                          104.18.24.242
                                          cdn.intergi.com
                                          IN A
                                          104.18.25.242
                                        • flag-us
                                          DNS
                                          cdn.intergi.com
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          cdn.intergi.com
                                          IN Unknown
                                          Response
                                          cdn.intergi.com
                                          IN Unknown
                                          h2h�h� &Gh�&Gh�
                                        • flag-us
                                          DNS
                                          tpc.googlesyndication.com
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          tpc.googlesyndication.com
                                          IN A
                                          Response
                                          tpc.googlesyndication.com
                                          IN A
                                          216.58.201.97
                                        • flag-us
                                          DNS
                                          tpc.googlesyndication.com
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          tpc.googlesyndication.com
                                          IN Unknown
                                          Response
                                        • flag-us
                                          DNS
                                          is1-ssl.mzstatic.com
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          is1-ssl.mzstatic.com
                                          IN A
                                          Response
                                          is1-ssl.mzstatic.com
                                          IN CNAME
                                          is-ssl.mzstatic.com.itunes-apple.com.akadns.net
                                          is-ssl.mzstatic.com.itunes-apple.com.akadns.net
                                          IN CNAME
                                          mzstatic.com.edgekey.net
                                          mzstatic.com.edgekey.net
                                          IN CNAME
                                          e673.dsce9.akamaiedge.net
                                          e673.dsce9.akamaiedge.net
                                          IN A
                                          23.219.192.23
                                        • flag-us
                                          DNS
                                          is1-ssl.mzstatic.com
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          is1-ssl.mzstatic.com
                                          IN Unknown
                                          Response
                                          is1-ssl.mzstatic.com
                                          IN CNAME
                                          is-ssl.mzstatic.com.itunes-apple.com.akadns.net
                                          is-ssl.mzstatic.com.itunes-apple.com.akadns.net
                                          IN CNAME
                                          mzstatic.com.edgekey.net
                                          mzstatic.com.edgekey.net
                                          IN CNAME
                                          e673.dsce9.akamaiedge.net
                                        • flag-us
                                          DNS
                                          securepubads.g.doubleclick.net
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          securepubads.g.doubleclick.net
                                          IN A
                                          Response
                                          securepubads.g.doubleclick.net
                                          IN A
                                          142.250.187.194
                                        • flag-us
                                          DNS
                                          securepubads.g.doubleclick.net
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          securepubads.g.doubleclick.net
                                          IN Unknown
                                          Response
                                          securepubads.g.doubleclick.net
                                          IN Unknown
                                          h2h3
                                        • flag-us
                                          DNS
                                          googleads.g.doubleclick.net
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          googleads.g.doubleclick.net
                                          IN A
                                          Response
                                          googleads.g.doubleclick.net
                                          IN A
                                          142.250.180.2
                                        • flag-us
                                          DNS
                                          googleads.g.doubleclick.net
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          googleads.g.doubleclick.net
                                          IN Unknown
                                          Response
                                          googleads.g.doubleclick.net
                                          IN Unknown
                                          h2h3
                                        • flag-us
                                          DNS
                                          160.156.67.172.in-addr.arpa
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          160.156.67.172.in-addr.arpa
                                          IN PTR
                                          Response
                                        • flag-us
                                          DNS
                                          region1.google-analytics.com
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          region1.google-analytics.com
                                          IN A
                                          Response
                                          region1.google-analytics.com
                                          IN A
                                          216.239.32.36
                                          region1.google-analytics.com
                                          IN A
                                          216.239.34.36
                                        • flag-us
                                          DNS
                                          region1.google-analytics.com
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          region1.google-analytics.com
                                          IN Unknown
                                          Response
                                        • flag-us
                                          DNS
                                          15.8.21.104.in-addr.arpa
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          15.8.21.104.in-addr.arpa
                                          IN PTR
                                          Response
                                        • flag-us
                                          DNS
                                          40.169.217.172.in-addr.arpa
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          40.169.217.172.in-addr.arpa
                                          IN PTR
                                          Response
                                          40.169.217.172.in-addr.arpa
                                          IN PTR
                                          lhr48s08-in-f81e100net
                                        • flag-us
                                          DNS
                                          23.192.219.23.in-addr.arpa
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          23.192.219.23.in-addr.arpa
                                          IN PTR
                                          Response
                                          23.192.219.23.in-addr.arpa
                                          IN PTR
                                          a23-219-192-23deploystaticakamaitechnologiescom
                                        • flag-us
                                          DNS
                                          161.128.123.92.in-addr.arpa
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          161.128.123.92.in-addr.arpa
                                          IN PTR
                                          Response
                                          161.128.123.92.in-addr.arpa
                                          IN PTR
                                          a92-123-128-161deploystaticakamaitechnologiescom
                                        • flag-us
                                          DNS
                                          36.32.239.216.in-addr.arpa
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          36.32.239.216.in-addr.arpa
                                          IN PTR
                                          Response
                                        • flag-us
                                          DNS
                                          data-edge.smartscreen.microsoft.com
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          data-edge.smartscreen.microsoft.com
                                          IN A
                                          Response
                                          data-edge.smartscreen.microsoft.com
                                          IN CNAME
                                          prod-atm-wds-edge.trafficmanager.net
                                          prod-atm-wds-edge.trafficmanager.net
                                          IN CNAME
                                          prod-agic-uw-3.ukwest.cloudapp.azure.com
                                          prod-agic-uw-3.ukwest.cloudapp.azure.com
                                          IN A
                                          51.11.108.188
                                        • flag-us
                                          DNS
                                          data-edge.smartscreen.microsoft.com
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          data-edge.smartscreen.microsoft.com
                                          IN Unknown
                                          Response
                                          data-edge.smartscreen.microsoft.com
                                          IN CNAME
                                          prod-atm-wds-edge.trafficmanager.net
                                          prod-atm-wds-edge.trafficmanager.net
                                          IN CNAME
                                          prod-agic-uw-2.ukwest.cloudapp.azure.com
                                        • flag-us
                                          DNS
                                          217.106.137.52.in-addr.arpa
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          217.106.137.52.in-addr.arpa
                                          IN PTR
                                          Response
                                        • flag-us
                                          DNS
                                          154.239.44.20.in-addr.arpa
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          154.239.44.20.in-addr.arpa
                                          IN PTR
                                          Response
                                        • flag-us
                                          DNS
                                          26.165.165.52.in-addr.arpa
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          26.165.165.52.in-addr.arpa
                                          IN PTR
                                          Response
                                        • flag-us
                                          DNS
                                          171.39.242.20.in-addr.arpa
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          171.39.242.20.in-addr.arpa
                                          IN PTR
                                          Response
                                        • flag-us
                                          DNS
                                          update.googleapis.com
                                          msedge.exe
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          update.googleapis.com
                                          IN A
                                          Response
                                          update.googleapis.com
                                          IN A
                                          142.250.200.35
                                        • flag-us
                                          DNS
                                          update.googleapis.com
                                          msedge.exe
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          update.googleapis.com
                                          IN Unknown
                                          Response
                                        • flag-us
                                          DNS
                                          edge-mobile-static.azureedge.net
                                          msedge.exe
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          edge-mobile-static.azureedge.net
                                          IN A
                                          Response
                                          edge-mobile-static.azureedge.net
                                          IN CNAME
                                          edge-mobile-static.afd.azureedge.net
                                          edge-mobile-static.afd.azureedge.net
                                          IN CNAME
                                          azureedge-t-prod.trafficmanager.net
                                          azureedge-t-prod.trafficmanager.net
                                          IN CNAME
                                          shed.dual-low.s-part-0036.t-0009.t-msedge.net
                                          shed.dual-low.s-part-0036.t-0009.t-msedge.net
                                          IN CNAME
                                          s-part-0036.t-0009.t-msedge.net
                                          s-part-0036.t-0009.t-msedge.net
                                          IN A
                                          13.107.246.64
                                        • flag-us
                                          DNS
                                          edge-mobile-static.azureedge.net
                                          msedge.exe
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          edge-mobile-static.azureedge.net
                                          IN Unknown
                                          Response
                                          edge-mobile-static.azureedge.net
                                          IN CNAME
                                          edge-mobile-static.afd.azureedge.net
                                          edge-mobile-static.afd.azureedge.net
                                          IN CNAME
                                          azureedge-t-prod.trafficmanager.net
                                          azureedge-t-prod.trafficmanager.net
                                          IN CNAME
                                          shed.dual-low.s-part-0036.t-0009.t-msedge.net
                                        • flag-us
                                          DNS
                                          35.200.250.142.in-addr.arpa
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          35.200.250.142.in-addr.arpa
                                          IN PTR
                                          Response
                                          35.200.250.142.in-addr.arpa
                                          IN PTR
                                          lhr48s30-in-f31e100net
                                        • flag-us
                                          DNS
                                          164.128.123.92.in-addr.arpa
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          164.128.123.92.in-addr.arpa
                                          IN PTR
                                          Response
                                          164.128.123.92.in-addr.arpa
                                          IN PTR
                                          a92-123-128-164deploystaticakamaitechnologiescom
                                        • flag-us
                                          DNS
                                          31.243.111.52.in-addr.arpa
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          31.243.111.52.in-addr.arpa
                                          IN PTR
                                          Response
                                        • flag-us
                                          DNS
                                          edge-consumer-static.azureedge.net
                                          msedge.exe
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          edge-consumer-static.azureedge.net
                                          IN A
                                          Response
                                          edge-consumer-static.azureedge.net
                                          IN CNAME
                                          edge-consumer-static.afd.azureedge.net
                                          edge-consumer-static.afd.azureedge.net
                                          IN CNAME
                                          azureedge-t-prod.trafficmanager.net
                                          azureedge-t-prod.trafficmanager.net
                                          IN CNAME
                                          shed.dual-low.s-part-0036.t-0009.t-msedge.net
                                          shed.dual-low.s-part-0036.t-0009.t-msedge.net
                                          IN CNAME
                                          s-part-0036.t-0009.t-msedge.net
                                          s-part-0036.t-0009.t-msedge.net
                                          IN A
                                          13.107.246.64
                                        • flag-us
                                          DNS
                                          edge-consumer-static.azureedge.net
                                          msedge.exe
                                          Remote address:
                                          8.8.8.8:53
                                          Request
                                          edge-consumer-static.azureedge.net
                                          IN Unknown
                                          Response
                                          edge-consumer-static.azureedge.net
                                          IN CNAME
                                          edge-consumer-static.afd.azureedge.net
                                          edge-consumer-static.afd.azureedge.net
                                          IN CNAME
                                          azureedge-t-prod.trafficmanager.net
                                          azureedge-t-prod.trafficmanager.net
                                          IN CNAME
                                          shed.dual-low.s-part-0036.t-0009.t-msedge.net
                                          shed.dual-low.s-part-0036.t-0009.t-msedge.net
                                          IN CNAME
                                          s-part-0036.t-0009.t-msedge.net
                                        • 64.98.135.52:80
                                          http://movieshd.com/
                                          http
                                          771 B
                                          786 B
                                          7
                                          5

                                          HTTP Request

                                          GET http://movieshd.com/

                                          HTTP Response

                                          302
                                        • 64.98.135.52:80
                                          movieshd.com
                                          236 B
                                          144 B
                                          5
                                          3
                                        • 13.107.6.158:443
                                          business.bing.com
                                          tls
                                          3.9kB
                                          10.3kB
                                          22
                                          26
                                        • 64.98.135.52:443
                                          movieshd.com
                                          260 B
                                          5
                                        • 64.98.135.52:443
                                          movieshd.com
                                          260 B
                                          5
                                        • 2.19.117.71:443
                                          bzib.nelreports.net
                                          tls
                                          3.0kB
                                          5.9kB
                                          14
                                          15
                                        • 51.11.108.188:443
                                          nav-edge.smartscreen.microsoft.com
                                          tls
                                          22.1kB
                                          622.0kB
                                          271
                                          464
                                        • 64.21.0.130:443
                                          www.blu-ray.com
                                          tls
                                          7.5kB
                                          90.8kB
                                          48
                                          78
                                        • 23.219.192.23:443
                                          is1-ssl.mzstatic.com
                                          tls
                                          390.5kB
                                          9.5MB
                                          5756
                                          6918
                                        • 23.219.192.23:443
                                          is1-ssl.mzstatic.com
                                          98 B
                                          52 B
                                          2
                                          1
                                        • 216.239.32.36:443
                                          region1.google-analytics.com
                                          tls
                                          8.5kB
                                          8.8kB
                                          24
                                          23
                                        • 64.21.0.130:443
                                          www.blu-ray.com
                                          tls
                                          2.3kB
                                          3.7kB
                                          10
                                          11
                                        • 142.250.200.35:443
                                          update.googleapis.com
                                          tls
                                          msedge.exe
                                          5.8kB
                                          10.1kB
                                          22
                                          24
                                        • 13.107.246.64:443
                                          edge-mobile-static.azureedge.net
                                          tls
                                          msedge.exe
                                          3.8kB
                                          12.3kB
                                          17
                                          20
                                        • 92.123.128.164:443
                                          www.bing.com
                                          tls
                                          msedge.exe
                                          3.2kB
                                          6.1kB
                                          14
                                          16
                                        • 13.107.246.64:443
                                          edge-consumer-static.azureedge.net
                                          tls
                                          msedge.exe
                                          3.4kB
                                          9.0kB
                                          14
                                          17
                                        • 8.8.8.8:53
                                          movieshd.com
                                          dns
                                          58 B
                                          74 B
                                          1
                                          1

                                          DNS Request

                                          movieshd.com

                                          DNS Response

                                          64.98.135.52

                                        • 8.8.8.8:53
                                          movieshd.com
                                          dns
                                          58 B
                                          118 B
                                          1
                                          1

                                          DNS Request

                                          movieshd.com

                                        • 8.8.8.8:53
                                          movieshd.com
                                          dns
                                          58 B
                                          74 B
                                          1
                                          1

                                          DNS Request

                                          movieshd.com

                                          DNS Response

                                          64.98.135.52

                                        • 8.8.8.8:53
                                          business.bing.com
                                          dns
                                          63 B
                                          144 B
                                          1
                                          1

                                          DNS Request

                                          business.bing.com

                                          DNS Response

                                          13.107.6.158

                                        • 8.8.8.8:53
                                          business.bing.com
                                          dns
                                          63 B
                                          185 B
                                          1
                                          1

                                          DNS Request

                                          business.bing.com

                                        • 8.8.8.8:53
                                          movieshd.com
                                          dns
                                          58 B
                                          74 B
                                          1
                                          1

                                          DNS Request

                                          movieshd.com

                                          DNS Response

                                          64.98.135.52

                                        • 8.8.8.8:53
                                          movieshd.com
                                          dns
                                          58 B
                                          118 B
                                          1
                                          1

                                          DNS Request

                                          movieshd.com

                                        • 8.8.8.8:53
                                          movieshd.com
                                          dns
                                          58 B
                                          74 B
                                          1
                                          1

                                          DNS Request

                                          movieshd.com

                                          DNS Response

                                          64.98.135.52

                                        • 8.8.8.8:53
                                          bzib.nelreports.net
                                          dns
                                          65 B
                                          172 B
                                          1
                                          1

                                          DNS Request

                                          bzib.nelreports.net

                                          DNS Response

                                          2.19.117.71
                                          2.19.117.83

                                        • 8.8.8.8:53
                                          bzib.nelreports.net
                                          dns
                                          65 B
                                          204 B
                                          1
                                          1

                                          DNS Request

                                          bzib.nelreports.net

                                        • 8.8.8.8:53
                                          8.8.8.8.in-addr.arpa
                                          dns
                                          66 B
                                          90 B
                                          1
                                          1

                                          DNS Request

                                          8.8.8.8.in-addr.arpa

                                        • 8.8.8.8:53
                                          133.211.185.52.in-addr.arpa
                                          dns
                                          73 B
                                          147 B
                                          1
                                          1

                                          DNS Request

                                          133.211.185.52.in-addr.arpa

                                        • 8.8.8.8:53
                                          52.135.98.64.in-addr.arpa
                                          dns
                                          71 B
                                          141 B
                                          1
                                          1

                                          DNS Request

                                          52.135.98.64.in-addr.arpa

                                        • 8.8.8.8:53
                                          68.32.126.40.in-addr.arpa
                                          dns
                                          71 B
                                          157 B
                                          1
                                          1

                                          DNS Request

                                          68.32.126.40.in-addr.arpa

                                        • 8.8.8.8:53
                                          240.221.184.93.in-addr.arpa
                                          dns
                                          73 B
                                          144 B
                                          1
                                          1

                                          DNS Request

                                          240.221.184.93.in-addr.arpa

                                        • 8.8.8.8:53
                                          71.117.19.2.in-addr.arpa
                                          dns
                                          70 B
                                          133 B
                                          1
                                          1

                                          DNS Request

                                          71.117.19.2.in-addr.arpa

                                        • 8.8.8.8:53
                                          95.221.229.192.in-addr.arpa
                                          dns
                                          73 B
                                          144 B
                                          1
                                          1

                                          DNS Request

                                          95.221.229.192.in-addr.arpa

                                        • 8.8.8.8:53
                                          nav-edge.smartscreen.microsoft.com
                                          dns
                                          80 B
                                          197 B
                                          1
                                          1

                                          DNS Request

                                          nav-edge.smartscreen.microsoft.com

                                          DNS Response

                                          51.11.108.188

                                        • 8.8.8.8:53
                                          nav-edge.smartscreen.microsoft.com
                                          dns
                                          80 B
                                          241 B
                                          1
                                          1

                                          DNS Request

                                          nav-edge.smartscreen.microsoft.com

                                        • 8.8.8.8:53
                                          188.108.11.51.in-addr.arpa
                                          dns
                                          72 B
                                          158 B
                                          1
                                          1

                                          DNS Request

                                          188.108.11.51.in-addr.arpa

                                        • 8.8.8.8:53
                                          movieshd.com
                                          dns
                                          58 B
                                          74 B
                                          1
                                          1

                                          DNS Request

                                          movieshd.com

                                          DNS Response

                                          64.98.135.52

                                        • 8.8.8.8:53
                                          www.blu-ray.com
                                          dns
                                          61 B
                                          77 B
                                          1
                                          1

                                          DNS Request

                                          www.blu-ray.com

                                          DNS Response

                                          64.21.0.130

                                        • 8.8.8.8:53
                                          www.blu-ray.com
                                          dns
                                          61 B
                                          105 B
                                          1
                                          1

                                          DNS Request

                                          www.blu-ray.com

                                        • 8.8.8.8:53
                                          www.blu-ray.com
                                          dns
                                          61 B
                                          77 B
                                          1
                                          1

                                          DNS Request

                                          www.blu-ray.com

                                          DNS Response

                                          64.21.0.130

                                        • 8.8.8.8:53
                                          130.0.21.64.in-addr.arpa
                                          dns
                                          70 B
                                          95 B
                                          1
                                          1

                                          DNS Request

                                          130.0.21.64.in-addr.arpa

                                        • 8.8.8.8:53
                                          ssl.static-bluray.com
                                          dns
                                          67 B
                                          99 B
                                          1
                                          1

                                          DNS Request

                                          ssl.static-bluray.com

                                          DNS Response

                                          172.67.156.160
                                          104.21.8.15

                                        • 8.8.8.8:53
                                          ssl.static-bluray.com
                                          dns
                                          67 B
                                          215 B
                                          1
                                          1

                                          DNS Request

                                          ssl.static-bluray.com

                                        • 8.8.8.8:53
                                          images.static-bluray.com
                                          dns
                                          70 B
                                          102 B
                                          1
                                          1

                                          DNS Request

                                          images.static-bluray.com

                                          DNS Response

                                          104.21.8.15
                                          172.67.156.160

                                        • 8.8.8.8:53
                                          images.static-bluray.com
                                          dns
                                          70 B
                                          218 B
                                          1
                                          1

                                          DNS Request

                                          images.static-bluray.com

                                        • 172.67.156.160:443
                                          images.static-bluray.com
                                          https
                                          6.5kB
                                          56.2kB
                                          32
                                          56
                                        • 8.8.8.8:53
                                          cdn.intergient.com
                                          dns
                                          64 B
                                          171 B
                                          1
                                          1

                                          DNS Request

                                          cdn.intergient.com

                                          DNS Response

                                          65.9.95.105
                                          65.9.95.86
                                          65.9.95.104
                                          65.9.95.20

                                        • 8.8.8.8:53
                                          cdn.intergient.com
                                          dns
                                          64 B
                                          185 B
                                          1
                                          1

                                          DNS Request

                                          cdn.intergient.com

                                        • 8.8.8.8:53
                                          cdn.intergi.com
                                          dns
                                          61 B
                                          93 B
                                          1
                                          1

                                          DNS Request

                                          cdn.intergi.com

                                          DNS Response

                                          104.18.24.242
                                          104.18.25.242

                                        • 8.8.8.8:53
                                          cdn.intergi.com
                                          dns
                                          61 B
                                          131 B
                                          1
                                          1

                                          DNS Request

                                          cdn.intergi.com

                                        • 8.8.8.8:53
                                          tpc.googlesyndication.com
                                          dns
                                          71 B
                                          87 B
                                          1
                                          1

                                          DNS Request

                                          tpc.googlesyndication.com

                                          DNS Response

                                          216.58.201.97

                                        • 8.8.8.8:53
                                          tpc.googlesyndication.com
                                          dns
                                          71 B
                                          128 B
                                          1
                                          1

                                          DNS Request

                                          tpc.googlesyndication.com

                                        • 104.21.8.15:443
                                          images.static-bluray.com
                                          https
                                          37.0kB
                                          79.7kB
                                          108
                                          107
                                        • 8.8.8.8:53
                                          is1-ssl.mzstatic.com
                                          dns
                                          66 B
                                          214 B
                                          1
                                          1

                                          DNS Request

                                          is1-ssl.mzstatic.com

                                          DNS Response

                                          23.219.192.23

                                        • 8.8.8.8:53
                                          is1-ssl.mzstatic.com
                                          dns
                                          66 B
                                          260 B
                                          1
                                          1

                                          DNS Request

                                          is1-ssl.mzstatic.com

                                        • 8.8.8.8:53
                                          securepubads.g.doubleclick.net
                                          dns
                                          76 B
                                          92 B
                                          1
                                          1

                                          DNS Request

                                          securepubads.g.doubleclick.net

                                          DNS Response

                                          142.250.187.194

                                        • 8.8.8.8:53
                                          securepubads.g.doubleclick.net
                                          dns
                                          76 B
                                          101 B
                                          1
                                          1

                                          DNS Request

                                          securepubads.g.doubleclick.net

                                        • 8.8.8.8:53
                                          googleads.g.doubleclick.net
                                          dns
                                          73 B
                                          89 B
                                          1
                                          1

                                          DNS Request

                                          googleads.g.doubleclick.net

                                          DNS Response

                                          142.250.180.2

                                        • 8.8.8.8:53
                                          googleads.g.doubleclick.net
                                          dns
                                          73 B
                                          98 B
                                          1
                                          1

                                          DNS Request

                                          googleads.g.doubleclick.net

                                        • 172.67.156.160:443
                                          images.static-bluray.com
                                          https
                                          7.1kB
                                          78.5kB
                                          41
                                          72
                                        • 8.8.8.8:53
                                          160.156.67.172.in-addr.arpa
                                          dns
                                          73 B
                                          135 B
                                          1
                                          1

                                          DNS Request

                                          160.156.67.172.in-addr.arpa

                                        • 8.8.8.8:53
                                          region1.google-analytics.com
                                          dns
                                          74 B
                                          106 B
                                          1
                                          1

                                          DNS Request

                                          region1.google-analytics.com

                                          DNS Response

                                          216.239.32.36
                                          216.239.34.36

                                        • 8.8.8.8:53
                                          region1.google-analytics.com
                                          dns
                                          74 B
                                          131 B
                                          1
                                          1

                                          DNS Request

                                          region1.google-analytics.com

                                        • 8.8.8.8:53
                                          15.8.21.104.in-addr.arpa
                                          dns
                                          70 B
                                          132 B
                                          1
                                          1

                                          DNS Request

                                          15.8.21.104.in-addr.arpa

                                        • 8.8.8.8:53
                                          40.169.217.172.in-addr.arpa
                                          dns
                                          73 B
                                          111 B
                                          1
                                          1

                                          DNS Request

                                          40.169.217.172.in-addr.arpa

                                        • 8.8.8.8:53
                                          23.192.219.23.in-addr.arpa
                                          dns
                                          72 B
                                          137 B
                                          1
                                          1

                                          DNS Request

                                          23.192.219.23.in-addr.arpa

                                        • 92.123.128.161:443
                                          www.bing.com
                                          https
                                          8.9kB
                                          672.8kB
                                          97
                                          539
                                        • 8.8.8.8:53
                                          161.128.123.92.in-addr.arpa
                                          dns
                                          73 B
                                          139 B
                                          1
                                          1

                                          DNS Request

                                          161.128.123.92.in-addr.arpa

                                        • 8.8.8.8:53
                                          36.32.239.216.in-addr.arpa
                                          dns
                                          72 B
                                          132 B
                                          1
                                          1

                                          DNS Request

                                          36.32.239.216.in-addr.arpa

                                        • 8.8.8.8:53
                                          data-edge.smartscreen.microsoft.com
                                          dns
                                          81 B
                                          198 B
                                          1
                                          1

                                          DNS Request

                                          data-edge.smartscreen.microsoft.com

                                          DNS Response

                                          51.11.108.188

                                        • 8.8.8.8:53
                                          data-edge.smartscreen.microsoft.com
                                          dns
                                          81 B
                                          242 B
                                          1
                                          1

                                          DNS Request

                                          data-edge.smartscreen.microsoft.com

                                        • 224.0.0.251:5353
                                          204 B
                                          3
                                        • 8.8.8.8:53
                                          217.106.137.52.in-addr.arpa
                                          dns
                                          73 B
                                          147 B
                                          1
                                          1

                                          DNS Request

                                          217.106.137.52.in-addr.arpa

                                        • 8.8.8.8:53
                                          154.239.44.20.in-addr.arpa
                                          dns
                                          72 B
                                          158 B
                                          1
                                          1

                                          DNS Request

                                          154.239.44.20.in-addr.arpa

                                        • 8.8.8.8:53
                                          26.165.165.52.in-addr.arpa
                                          dns
                                          72 B
                                          146 B
                                          1
                                          1

                                          DNS Request

                                          26.165.165.52.in-addr.arpa

                                        • 8.8.8.8:53
                                          171.39.242.20.in-addr.arpa
                                          dns
                                          72 B
                                          158 B
                                          1
                                          1

                                          DNS Request

                                          171.39.242.20.in-addr.arpa

                                        • 216.239.32.36:443
                                          region1.google-analytics.com
                                          https
                                          4.3kB
                                          9.2kB
                                          8
                                          11
                                        • 8.8.8.8:53
                                          update.googleapis.com
                                          dns
                                          msedge.exe
                                          67 B
                                          83 B
                                          1
                                          1

                                          DNS Request

                                          update.googleapis.com

                                          DNS Response

                                          142.250.200.35

                                        • 8.8.8.8:53
                                          update.googleapis.com
                                          dns
                                          msedge.exe
                                          67 B
                                          124 B
                                          1
                                          1

                                          DNS Request

                                          update.googleapis.com

                                        • 8.8.8.8:53
                                          edge-mobile-static.azureedge.net
                                          dns
                                          msedge.exe
                                          78 B
                                          247 B
                                          1
                                          1

                                          DNS Request

                                          edge-mobile-static.azureedge.net

                                          DNS Response

                                          13.107.246.64

                                        • 8.8.8.8:53
                                          edge-mobile-static.azureedge.net
                                          dns
                                          msedge.exe
                                          78 B
                                          277 B
                                          1
                                          1

                                          DNS Request

                                          edge-mobile-static.azureedge.net

                                        • 142.250.200.35:443
                                          update.googleapis.com
                                          https
                                          msedge.exe
                                          4.2kB
                                          9.1kB
                                          7
                                          11
                                        • 8.8.8.8:53
                                          35.200.250.142.in-addr.arpa
                                          dns
                                          73 B
                                          111 B
                                          1
                                          1

                                          DNS Request

                                          35.200.250.142.in-addr.arpa

                                        • 8.8.8.8:53
                                          164.128.123.92.in-addr.arpa
                                          dns
                                          73 B
                                          139 B
                                          1
                                          1

                                          DNS Request

                                          164.128.123.92.in-addr.arpa

                                        • 8.8.8.8:53
                                          31.243.111.52.in-addr.arpa
                                          dns
                                          72 B
                                          158 B
                                          1
                                          1

                                          DNS Request

                                          31.243.111.52.in-addr.arpa

                                        • 8.8.8.8:53
                                          edge-consumer-static.azureedge.net
                                          dns
                                          msedge.exe
                                          80 B
                                          251 B
                                          1
                                          1

                                          DNS Request

                                          edge-consumer-static.azureedge.net

                                          DNS Response

                                          13.107.246.64

                                        • 8.8.8.8:53
                                          edge-consumer-static.azureedge.net
                                          dns
                                          msedge.exe
                                          80 B
                                          295 B
                                          1
                                          1

                                          DNS Request

                                          edge-consumer-static.azureedge.net

                                        MITRE ATT&CK Enterprise v15

                                        Replay Monitor

                                        Loading Replay Monitor...

                                        Downloads

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json

                                          Filesize

                                          2B

                                          MD5

                                          99914b932bd37a50b983c5e7c90ae93b

                                          SHA1

                                          bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

                                          SHA256

                                          44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

                                          SHA512

                                          27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports

                                          Filesize

                                          2B

                                          MD5

                                          d751713988987e9331980363e24189ce

                                          SHA1

                                          97d170e1550eee4afc0af065b78cda302a97674c

                                          SHA256

                                          4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                                          SHA512

                                          b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries

                                          Filesize

                                          40B

                                          MD5

                                          20d4b8fa017a12a108c87f540836e250

                                          SHA1

                                          1ac617fac131262b6d3ce1f52f5907e31d5f6f00

                                          SHA256

                                          6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d

                                          SHA512

                                          507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                          Filesize

                                          11KB

                                          MD5

                                          4c996209d41ef45e07eeeaf4ad777d64

                                          SHA1

                                          348a3b5c3948be22b4dc65a5eb74c009e6808c54

                                          SHA256

                                          34466cdb79f48ec461dd3729cf03dcbd2f4ba81f6e1d60812f0e5651993339b4

                                          SHA512

                                          642dc814b102c0966f3d1a2073f58585124475cf0ea0b1bc618bed30144f4476fc82118ca353a5b530f4951efb542e4fc066cf50f1b32b8ecfd099884352d6bb

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

                                          Filesize

                                          30KB

                                          MD5

                                          55a3967c1bfcec6b0fba175c4577dbd9

                                          SHA1

                                          4277a06ba70d1afd103f10fe3ae64ff4f546f63c

                                          SHA256

                                          6153451d6ac746fe61f7ca20cc3e7f04a5cb6a62071329dd833b356122143333

                                          SHA512

                                          69d060f5065d82a3c1dfccef9ad8d3278f28d17ec6b0767fc7c63d19c0add9bdc61139598aaeb1be4a55ad64e941eb52f2d1000645262cff26bfc8e2089b4fcf

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                          Filesize

                                          56KB

                                          MD5

                                          6ac12fa1baaa652498eb6f05315c954b

                                          SHA1

                                          0a7c4a8a31e7b5bac5fde984ce02c8a14b611f1e

                                          SHA256

                                          069ab11c9035bdcadae334dcb926648c4cb7de7f60c577d16a13a0eb33e36df1

                                          SHA512

                                          4fa8bba8014a81c1f6a6fdd6a85b63d8a373f0d8627d40a5bb141a37c32de63eb874a04562e19d6514a19a800ce974d3d5a34896b0e505950d1114b4bc13b906

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                          Filesize

                                          56KB

                                          MD5

                                          eca49d81652f18413197cc6946a9b867

                                          SHA1

                                          8f537e8dc5d83fbeb361632e9003cc3a3f1fe8e0

                                          SHA256

                                          b539538e439013314a6ffc198ffad5e68becd5ca9019ba75a65fdcdd3ab59c53

                                          SHA512

                                          b09a153e740232125b0a76ef482ba9b64f4d96b8cfa2031706b17be6d34870a72a2b9b7e9c00f7f365d336f679c8133b80870cfdd546cbde1b1acf01f87871a9

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                          Filesize

                                          60KB

                                          MD5

                                          126259b1037a61dad21d60d71a4edf2a

                                          SHA1

                                          8437e4f5b29f7c88e27fb2be5bfa95a2f8d40cd9

                                          SHA256

                                          2ed59713c99161a55c5fdbc9e2ec1d661e34448d9b3817ec07c106f9c65dd101

                                          SHA512

                                          e518b19cd188774afdba9b71a34538483cc35cc18f4a2a76fd15c4fe8e1a268c35a9cde397dc0750f9b43e95a26092dea617f70074fb11a135af1a2939f43841

                                        • C:\Users\Admin\AppData\Roaming\vlc\ml.xspf

                                          Filesize

                                          304B

                                          MD5

                                          781602441469750c3219c8c38b515ed4

                                          SHA1

                                          e885acd1cbd0b897ebcedbb145bef1c330f80595

                                          SHA256

                                          81970dbe581373d14fbd451ac4b3f96e5f69b79645f1ee1ca715cff3af0bf20d

                                          SHA512

                                          2b0a1717d96edb47bdf0ffeb250a5ec11f7d0638d3e0a62fbe48c064379b473ca88ffbececb32a72129d06c040b107834f1004ccda5f0f35b8c3588034786461

                                        • C:\Users\Admin\AppData\Roaming\vlc\vlc-qt-interface.ini

                                          Filesize

                                          536B

                                          MD5

                                          f83e89cb9aac47e2965286d48ed7d268

                                          SHA1

                                          3cfc50882a906e52bd2ac4b5b01c53d24fca0a07

                                          SHA256

                                          adbe19946230419d08c5ce0b907b7e1cf4e7e40f5c7391f52af2568711248384

                                          SHA512

                                          c567059195aeba8e17ddcebbe8f7f0d57140f43fca38cbf96094f7a37595e42c83e4c737936a1171e31de76e208af49443922fe5fd939e537229b93201f8b2cf

                                        • C:\Users\Admin\Desktop\Microsoft Edge.lnk

                                          Filesize

                                          2KB

                                          MD5

                                          e4ea24344e4945ceefecd0c304662c1b

                                          SHA1

                                          266ed39c44a91bb71330150f74d918086bccd6dc

                                          SHA256

                                          45d13aa5e8f3d9eb27da01c140bae976ffd155bc7949593c51ea9f0b0ad6fdff

                                          SHA512

                                          97fa8ddb7337dfc2d202eac823b5fc51886b23151e78f8faee887f8c34053686ca2f53913e02845bde3998bff16ce1ef8ba85f6748143cc51209477873e8adab

                                        • C:\Users\Public\Desktop\Google Chrome.lnk

                                          Filesize

                                          2KB

                                          MD5

                                          806059e65eb17da6fc1ba3fbad795fd9

                                          SHA1

                                          aea69b4004e65c16d366574ea618cc7102946e10

                                          SHA256

                                          707844dc7b14174174ea0b9a6a99db817052b5120b8462eb665bb462333ec9f2

                                          SHA512

                                          f95d30631f9c88b4f19a61aa77872150bb77d8160ec38e2e3afd0b62a39cfd69a5384b807364d269a28f9205634bc9e7501685d34e8339d05834977c39638600

                                        • memory/3620-109-0x00007FF782EC0000-0x00007FF782FB8000-memory.dmp

                                          Filesize

                                          992KB

                                        • memory/3620-111-0x00007FFE68500000-0x00007FFE687B6000-memory.dmp

                                          Filesize

                                          2.7MB

                                        • memory/3620-110-0x00007FFE79EB0000-0x00007FFE79EE4000-memory.dmp

                                          Filesize

                                          208KB

                                        • memory/5068-125-0x00007FF782EC0000-0x00007FF782FB8000-memory.dmp

                                          Filesize

                                          992KB

                                        • memory/5068-126-0x00007FFE79EB0000-0x00007FFE79EE4000-memory.dmp

                                          Filesize

                                          208KB

                                        • memory/5068-127-0x00007FFE68500000-0x00007FFE687B6000-memory.dmp

                                          Filesize

                                          2.7MB

                                        • memory/5068-128-0x00007FFE67EE0000-0x00007FFE67FEE000-memory.dmp

                                          Filesize

                                          1.1MB

                                        We care about your privacy.

                                        This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.