Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    127s
  • platform
    windows10-ltsc 2021_x64
  • resource
    win10ltsc2021-20241211-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20241211-enlocale:en-usos:windows10-ltsc 2021-x64system
  • submitted
    04/01/2025, 14:00 UTC

General

  • Target

    platformBinary32/bin/JavaAccessBridge-32.dll

  • Size

    126KB

  • MD5

    d382150d3dbfe4752fbe2ee23f10f1c9

  • SHA1

    d482e342b8f20d6b5c249ecfa0dd6ab95514f32d

  • SHA256

    10380aabe130ebb62ecf3d09620e8e15fd2335a1ea2faf74c41d057d9e06eee4

  • SHA512

    72099a0599fd15f4ede5d295cc2e478fa6cd9a7a820f801fd55e634ce03a0cb002471d77329b0d74a72ab964ec8475342f29aeb3b709f0d08d58503dc9fdea2b

  • SSDEEP

    3072:kvAznTOzUca38u4nSK/e2Hrgc6kZAn1yEkBKMKy1Zf22QYHJiuzTl8ShzzM+64mf:kvcwUca35BZnQvw

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\platformBinary32\bin\JavaAccessBridge-32.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4744
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\platformBinary32\bin\JavaAccessBridge-32.dll,#1
      2⤵
      • System Location Discovery: System Language Discovery
      PID:4832
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --string-annotations=is-enterprise-managed=no --field-trial-handle=5056,i,690293423614796501,17475910179943560176,262144 --variations-seed-version --mojo-platform-channel-handle=4020 /prefetch:8
    1⤵
      PID:1116

    Network

    • flag-it
      HEAD
      http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0c269ced-c74b-4e70-9b58-6e7999b292c0?P1=1734261670&P2=404&P3=2&P4=nLreT3w98NYPfyTlUt84lNIIzUpxduRjiAgT%2fzbjbtpv8PHMKYxAxCkLZXXLZY65iMkTwKfLcI6WjhICrUaYZQ%3d%3d
      Remote address:
      91.80.49.21:80
      Request
      HEAD /filestreamingservice/files/0c269ced-c74b-4e70-9b58-6e7999b292c0?P1=1734261670&P2=404&P3=2&P4=nLreT3w98NYPfyTlUt84lNIIzUpxduRjiAgT%2fzbjbtpv8PHMKYxAxCkLZXXLZY65iMkTwKfLcI6WjhICrUaYZQ%3d%3d HTTP/1.1
      Connection: Keep-Alive
      Accept: */*
      Accept-Encoding: identity
      User-Agent: Microsoft BITS/7.8
      Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
    • flag-us
      DNS
      edge.microsoft.com
      Remote address:
      8.8.8.8:53
      Request
      edge.microsoft.com
      IN A
      Response
      edge.microsoft.com
      IN CNAME
      edge-microsoft-com.dual-a-0036.a-msedge.net
      edge-microsoft-com.dual-a-0036.a-msedge.net
      IN CNAME
      dual-a-0036.a-msedge.net
      dual-a-0036.a-msedge.net
      IN A
      13.107.21.239
      dual-a-0036.a-msedge.net
      IN A
      204.79.197.239
    • flag-us
      DNS
      edge.microsoft.com
      Remote address:
      8.8.8.8:53
      Request
      edge.microsoft.com
      IN Unknown
      Response
      edge.microsoft.com
      IN CNAME
      edge-microsoft-com.dual-a-0036.a-msedge.net
    • flag-us
      DNS
      edgeassetservice.azureedge.net
      Remote address:
      8.8.8.8:53
      Request
      edgeassetservice.azureedge.net
      IN A
      Response
      edgeassetservice.azureedge.net
      IN CNAME
      edgeassetservice.afd.azureedge.net
      edgeassetservice.afd.azureedge.net
      IN CNAME
      azureedge-t-prod.trafficmanager.net
      azureedge-t-prod.trafficmanager.net
      IN CNAME
      shed.dual-low.s-part-0036.t-0009.t-msedge.net
      shed.dual-low.s-part-0036.t-0009.t-msedge.net
      IN CNAME
      s-part-0036.t-0009.t-msedge.net
      s-part-0036.t-0009.t-msedge.net
      IN A
      13.107.246.64
    • flag-us
      DNS
      edgeassetservice.azureedge.net
      Remote address:
      8.8.8.8:53
      Request
      edgeassetservice.azureedge.net
      IN Unknown
      Response
      edgeassetservice.azureedge.net
      IN CNAME
      edgeassetservice.afd.azureedge.net
      edgeassetservice.afd.azureedge.net
      IN CNAME
      azureedge-t-prod.trafficmanager.net
      azureedge-t-prod.trafficmanager.net
      IN CNAME
      shed.dual-low.s-part-0036.t-0009.t-msedge.net
      shed.dual-low.s-part-0036.t-0009.t-msedge.net
      IN CNAME
      s-part-0036.t-0009.t-msedge.net
    • flag-us
      DNS
      13.86.106.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      13.86.106.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      4.159.190.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      4.159.190.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      95.221.229.192.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      95.221.229.192.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      msedge.b.tlu.dl.delivery.mp.microsoft.com
      Remote address:
      8.8.8.8:53
      Request
      msedge.b.tlu.dl.delivery.mp.microsoft.com
      IN A
      Response
      msedge.b.tlu.dl.delivery.mp.microsoft.com
      IN CNAME
      star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com
      star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com
      IN CNAME
      cdp-f-tlu-net.trafficmanager.net
      cdp-f-tlu-net.trafficmanager.net
      IN CNAME
      wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net
      wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net
      IN CNAME
      a1847.dscd.akamai.net
      a1847.dscd.akamai.net
      IN A
      2.16.62.193
      a1847.dscd.akamai.net
      IN A
      2.16.62.82
    • flag-us
      DNS
      msedge.b.tlu.dl.delivery.mp.microsoft.com
      Remote address:
      8.8.8.8:53
      Request
      msedge.b.tlu.dl.delivery.mp.microsoft.com
      IN Unknown
      Response
      msedge.b.tlu.dl.delivery.mp.microsoft.com
      IN CNAME
      star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com
      star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com
      IN CNAME
      cdp-f-tlu-net.trafficmanager.net
      cdp-f-tlu-net.trafficmanager.net
      IN CNAME
      fg.microsoft.map.fastly.net
    • flag-de
      GET
      http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0c269ced-c74b-4e70-9b58-6e7999b292c0?P1=1734261670&P2=404&P3=2&P4=nLreT3w98NYPfyTlUt84lNIIzUpxduRjiAgT%2fzbjbtpv8PHMKYxAxCkLZXXLZY65iMkTwKfLcI6WjhICrUaYZQ%3d%3d
      Remote address:
      2.16.62.193:80
      Request
      GET /filestreamingservice/files/0c269ced-c74b-4e70-9b58-6e7999b292c0?P1=1734261670&P2=404&P3=2&P4=nLreT3w98NYPfyTlUt84lNIIzUpxduRjiAgT%2fzbjbtpv8PHMKYxAxCkLZXXLZY65iMkTwKfLcI6WjhICrUaYZQ%3d%3d HTTP/1.1
      Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
      Connection: keep-alive
      Sec-Mesh-Client-Edge-Version: 131.0.2903.86
      Sec-Mesh-Client-Edge-Channel: stable
      Sec-Mesh-Client-OS: Windows
      Sec-Mesh-Client-OS-Version: 10.0.19044
      Sec-Mesh-Client-Arch: x86_64
      Sec-Mesh-Client-WebView: 0
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0
      Accept-Encoding: gzip, deflate
      Response
      HTTP/1.1 403 Forbidden
      Server: AkamaiGHost
      Mime-Version: 1.0
      Content-Type: text/html
      Content-Length: 507
      Expires: Sat, 04 Jan 2025 14:07:15 GMT
      Date: Sat, 04 Jan 2025 14:07:15 GMT
      Connection: keep-alive
      X-CID: 2
      X-CCC: DE
    • flag-de
      GET
      http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/2aaa8eb1-4390-495e-873c-71f03ed02d54?P1=1734258071&P2=404&P3=2&P4=MxkAqOhZ1UQQ8daG%2fM9SJkjqebtteFGtkr8qD7LgEMbMbwxAZcW9t0Mp%2buul0PklwkE9kmaHxKbL8Qo9w0z1Cg%3d%3d
      Remote address:
      2.16.62.193:80
      Request
      GET /filestreamingservice/files/2aaa8eb1-4390-495e-873c-71f03ed02d54?P1=1734258071&P2=404&P3=2&P4=MxkAqOhZ1UQQ8daG%2fM9SJkjqebtteFGtkr8qD7LgEMbMbwxAZcW9t0Mp%2buul0PklwkE9kmaHxKbL8Qo9w0z1Cg%3d%3d HTTP/1.1
      Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
      Connection: keep-alive
      Sec-Mesh-Client-Edge-Version: 131.0.2903.86
      Sec-Mesh-Client-Edge-Channel: stable
      Sec-Mesh-Client-OS: Windows
      Sec-Mesh-Client-OS-Version: 10.0.19044
      Sec-Mesh-Client-Arch: x86_64
      Sec-Mesh-Client-WebView: 0
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0
      Accept-Encoding: gzip, deflate
      Response
      HTTP/1.1 403 Forbidden
      Server: AkamaiGHost
      Mime-Version: 1.0
      Content-Type: text/html
      Content-Length: 507
      Expires: Sat, 04 Jan 2025 14:07:32 GMT
      Date: Sat, 04 Jan 2025 14:07:32 GMT
      Connection: keep-alive
      X-CID: 2
      X-CCC: DE
    • flag-de
      GET
      http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/ef5f792e-9df7-4748-accf-02ec33a4a2c4?P1=1734261669&P2=404&P3=2&P4=NZVSv%2bbZd2oYP1XeiCgTl1VO2Qx2XjrhXkaTUnQ4vjJt8Xq4zn19kqLj4P33vkhGt1I8GDNXkD%2f4ks4EcinKWw%3d%3d
      Remote address:
      2.16.62.193:80
      Request
      GET /filestreamingservice/files/ef5f792e-9df7-4748-accf-02ec33a4a2c4?P1=1734261669&P2=404&P3=2&P4=NZVSv%2bbZd2oYP1XeiCgTl1VO2Qx2XjrhXkaTUnQ4vjJt8Xq4zn19kqLj4P33vkhGt1I8GDNXkD%2f4ks4EcinKWw%3d%3d HTTP/1.1
      Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
      Connection: keep-alive
      Sec-Mesh-Client-Edge-Version: 131.0.2903.86
      Sec-Mesh-Client-Edge-Channel: stable
      Sec-Mesh-Client-OS: Windows
      Sec-Mesh-Client-OS-Version: 10.0.19044
      Sec-Mesh-Client-Arch: x86_64
      Sec-Mesh-Client-WebView: 0
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0
      Accept-Encoding: gzip, deflate
      Response
      HTTP/1.1 403 Forbidden
      Server: AkamaiGHost
      Mime-Version: 1.0
      Content-Type: text/html
      Content-Length: 507
      Expires: Sat, 04 Jan 2025 14:07:53 GMT
      Date: Sat, 04 Jan 2025 14:07:53 GMT
      Connection: keep-alive
      X-CID: 2
      X-CCC: DE
    • flag-de
      GET
      http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/376d5b20-4ccf-4ab3-92ec-d2fa66fb039b?P1=1734261669&P2=404&P3=2&P4=dllFEkZa9wQ2uspAjFDDO1ZmM%2bCHxFkFYfaRhioUJzcY1jU2ZYTlgyQ4pEkRSt3IxyXnGy%2b%2f3Gdx77gKXuvTNw%3d%3d
      Remote address:
      2.16.62.193:80
      Request
      GET /filestreamingservice/files/376d5b20-4ccf-4ab3-92ec-d2fa66fb039b?P1=1734261669&P2=404&P3=2&P4=dllFEkZa9wQ2uspAjFDDO1ZmM%2bCHxFkFYfaRhioUJzcY1jU2ZYTlgyQ4pEkRSt3IxyXnGy%2b%2f3Gdx77gKXuvTNw%3d%3d HTTP/1.1
      Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
      Connection: keep-alive
      Sec-Mesh-Client-Edge-Version: 131.0.2903.86
      Sec-Mesh-Client-Edge-Channel: stable
      Sec-Mesh-Client-OS: Windows
      Sec-Mesh-Client-OS-Version: 10.0.19044
      Sec-Mesh-Client-Arch: x86_64
      Sec-Mesh-Client-WebView: 0
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0
      Accept-Encoding: gzip, deflate
      Response
      HTTP/1.1 403 Forbidden
      Server: AkamaiGHost
      Mime-Version: 1.0
      Content-Type: text/html
      Content-Length: 507
      Expires: Sat, 04 Jan 2025 14:07:57 GMT
      Date: Sat, 04 Jan 2025 14:07:57 GMT
      Connection: keep-alive
      X-CID: 2
      X-CCC: DE
    • flag-de
      GET
      http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/7ea0d449-ab10-4e22-a3ef-f7271d7afdff?P1=1734414699&P2=404&P3=2&P4=KgNHmbKJP0Gni%2fGWkXnBcVhOV0ilLB5ts%2fApSUax5%2fg%2bcLlg0Ox8ql52vViw%2by8760ygCblQFQDd0MBuL3ajjQ%3d%3d
      Remote address:
      2.16.62.193:80
      Request
      GET /filestreamingservice/files/7ea0d449-ab10-4e22-a3ef-f7271d7afdff?P1=1734414699&P2=404&P3=2&P4=KgNHmbKJP0Gni%2fGWkXnBcVhOV0ilLB5ts%2fApSUax5%2fg%2bcLlg0Ox8ql52vViw%2by8760ygCblQFQDd0MBuL3ajjQ%3d%3d HTTP/1.1
      Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
      Connection: keep-alive
      Sec-Mesh-Client-Edge-Version: 131.0.2903.86
      Sec-Mesh-Client-Edge-Channel: stable
      Sec-Mesh-Client-OS: Windows
      Sec-Mesh-Client-OS-Version: 10.0.19044
      Sec-Mesh-Client-Arch: x86_64
      Sec-Mesh-Client-WebView: 0
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0
      Accept-Encoding: gzip, deflate
      Response
      HTTP/1.1 403 Forbidden
      Server: AkamaiGHost
      Mime-Version: 1.0
      Content-Type: text/html
      Content-Length: 507
      Expires: Sat, 04 Jan 2025 14:08:05 GMT
      Date: Sat, 04 Jan 2025 14:08:05 GMT
      Connection: keep-alive
      X-CID: 2
      X-CCC: DE
    • flag-de
      GET
      http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/4c4fdee0-d69c-42b7-bf5c-3ec046e9dfc9?P1=1734258069&P2=404&P3=2&P4=bsnLt6LK4lshCgKT02R1AEtcffKNSZdKoScZB8wJH9Smwq6zjhmocBbC9gniMIeONVXzCsSbvqq6tXPehAPEPQ%3d%3d
      Remote address:
      2.16.62.193:80
      Request
      GET /filestreamingservice/files/4c4fdee0-d69c-42b7-bf5c-3ec046e9dfc9?P1=1734258069&P2=404&P3=2&P4=bsnLt6LK4lshCgKT02R1AEtcffKNSZdKoScZB8wJH9Smwq6zjhmocBbC9gniMIeONVXzCsSbvqq6tXPehAPEPQ%3d%3d HTTP/1.1
      Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
      Connection: keep-alive
      Sec-Mesh-Client-Edge-Version: 131.0.2903.86
      Sec-Mesh-Client-Edge-Channel: stable
      Sec-Mesh-Client-OS: Windows
      Sec-Mesh-Client-OS-Version: 10.0.19044
      Sec-Mesh-Client-Arch: x86_64
      Sec-Mesh-Client-WebView: 0
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0
      Accept-Encoding: gzip, deflate
      Response
      HTTP/1.1 403 Forbidden
      Server: AkamaiGHost
      Mime-Version: 1.0
      Content-Type: text/html
      Content-Length: 507
      Expires: Sat, 04 Jan 2025 14:08:18 GMT
      Date: Sat, 04 Jan 2025 14:08:18 GMT
      Connection: keep-alive
      X-CID: 2
      X-CCC: DE
    • flag-de
      GET
      http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/46762b80-7b06-480c-929a-1514bfab47dc?P1=1734509477&P2=404&P3=2&P4=G%2bXhqH86tBIAuteAmNyXBukDZRI39cNIm%2be6c1R%2bWHQnZWeQznu5xCo0GWmB%2byMOaaJf%2beKr31Du89RJq6eHXQ%3d%3d
      Remote address:
      2.16.62.193:80
      Request
      GET /filestreamingservice/files/46762b80-7b06-480c-929a-1514bfab47dc?P1=1734509477&P2=404&P3=2&P4=G%2bXhqH86tBIAuteAmNyXBukDZRI39cNIm%2be6c1R%2bWHQnZWeQznu5xCo0GWmB%2byMOaaJf%2beKr31Du89RJq6eHXQ%3d%3d HTTP/1.1
      Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
      Connection: keep-alive
      Sec-Mesh-Client-Edge-Version: 131.0.2903.86
      Sec-Mesh-Client-Edge-Channel: stable
      Sec-Mesh-Client-OS: Windows
      Sec-Mesh-Client-OS-Version: 10.0.19044
      Sec-Mesh-Client-Arch: x86_64
      Sec-Mesh-Client-WebView: 0
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0
      Accept-Encoding: gzip, deflate
      Response
      HTTP/1.1 403 Forbidden
      Server: AkamaiGHost
      Mime-Version: 1.0
      Content-Type: text/html
      Content-Length: 507
      Expires: Sat, 04 Jan 2025 14:08:34 GMT
      Date: Sat, 04 Jan 2025 14:08:34 GMT
      Connection: keep-alive
      X-CID: 2
      X-CCC: DE
    • flag-de
      GET
      http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/b2937c84-8cc1-4c00-b1a2-350a9880a217?P1=1734123823&P2=404&P3=2&P4=dScmsqDsz4FkSgqxx0X7AQHzgjNxms0yi9ZX%2fVClGKtgUdO6XvJxFjXcEUCt1HU5KI2Wr4ShrX7nt8mzUefxfQ%3d%3d
      Remote address:
      2.16.62.193:80
      Request
      GET /filestreamingservice/files/b2937c84-8cc1-4c00-b1a2-350a9880a217?P1=1734123823&P2=404&P3=2&P4=dScmsqDsz4FkSgqxx0X7AQHzgjNxms0yi9ZX%2fVClGKtgUdO6XvJxFjXcEUCt1HU5KI2Wr4ShrX7nt8mzUefxfQ%3d%3d HTTP/1.1
      Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
      Connection: keep-alive
      Sec-Mesh-Client-Edge-Version: 131.0.2903.86
      Sec-Mesh-Client-Edge-Channel: stable
      Sec-Mesh-Client-OS: Windows
      Sec-Mesh-Client-OS-Version: 10.0.19044
      Sec-Mesh-Client-Arch: x86_64
      Sec-Mesh-Client-WebView: 0
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0
      Accept-Encoding: gzip, deflate
      Response
      HTTP/1.1 403 Forbidden
      Server: AkamaiGHost
      Mime-Version: 1.0
      Content-Type: text/html
      Content-Length: 507
      Expires: Sat, 04 Jan 2025 14:08:38 GMT
      Date: Sat, 04 Jan 2025 14:08:38 GMT
      Connection: keep-alive
      X-CID: 2
      X-CCC: DE
    • flag-de
      GET
      http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/2132f61f-f790-4ae6-a355-8cf9a1533800?P1=1734250869&P2=404&P3=2&P4=b5KpK%2bES%2b7p6LHXssDqSUBWrx%2fMb7aUaDag7Zd6DKXA4IOZKJgVYP2rL8lcZgMP%2f%2bysMG%2bjPw9CAJsa1%2fSYVKw%3d%3d
      Remote address:
      2.16.62.193:80
      Request
      GET /filestreamingservice/files/2132f61f-f790-4ae6-a355-8cf9a1533800?P1=1734250869&P2=404&P3=2&P4=b5KpK%2bES%2b7p6LHXssDqSUBWrx%2fMb7aUaDag7Zd6DKXA4IOZKJgVYP2rL8lcZgMP%2f%2bysMG%2bjPw9CAJsa1%2fSYVKw%3d%3d HTTP/1.1
      Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
      Connection: keep-alive
      Sec-Mesh-Client-Edge-Version: 131.0.2903.86
      Sec-Mesh-Client-Edge-Channel: stable
      Sec-Mesh-Client-OS: Windows
      Sec-Mesh-Client-OS-Version: 10.0.19044
      Sec-Mesh-Client-Arch: x86_64
      Sec-Mesh-Client-WebView: 0
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0
      Accept-Encoding: gzip, deflate
      Response
      HTTP/1.1 403 Forbidden
      Server: AkamaiGHost
      Mime-Version: 1.0
      Content-Type: text/html
      Content-Length: 507
      Expires: Sat, 04 Jan 2025 14:08:47 GMT
      Date: Sat, 04 Jan 2025 14:08:47 GMT
      Connection: keep-alive
      X-CID: 2
      X-CCC: DE
    • flag-de
      GET
      http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/c08f1970-45bc-4dbe-8166-4ecef7a1f617?P1=1734258068&P2=404&P3=2&P4=dyL3hcUzv63SK50l4d4qTkY5yi%2bU5%2fzAAVRtDpCucgd04FGnEPALI7EnZX0SJhiv%2fQSsLjM7NyMKgXYcECDTng%3d%3d
      Remote address:
      2.16.62.193:80
      Request
      GET /filestreamingservice/files/c08f1970-45bc-4dbe-8166-4ecef7a1f617?P1=1734258068&P2=404&P3=2&P4=dyL3hcUzv63SK50l4d4qTkY5yi%2bU5%2fzAAVRtDpCucgd04FGnEPALI7EnZX0SJhiv%2fQSsLjM7NyMKgXYcECDTng%3d%3d HTTP/1.1
      Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
      Connection: keep-alive
      Sec-Mesh-Client-Edge-Version: 131.0.2903.86
      Sec-Mesh-Client-Edge-Channel: stable
      Sec-Mesh-Client-OS: Windows
      Sec-Mesh-Client-OS-Version: 10.0.19044
      Sec-Mesh-Client-Arch: x86_64
      Sec-Mesh-Client-WebView: 0
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0
      Accept-Encoding: gzip, deflate
      Response
      HTTP/1.1 403 Forbidden
      Server: AkamaiGHost
      Mime-Version: 1.0
      Content-Type: text/html
      Content-Length: 507
      Expires: Sat, 04 Jan 2025 14:08:59 GMT
      Date: Sat, 04 Jan 2025 14:08:59 GMT
      Connection: keep-alive
      X-CID: 2
      X-CCC: DE
    • flag-us
      DNS
      193.62.16.2.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      193.62.16.2.in-addr.arpa
      IN PTR
      Response
      193.62.16.2.in-addr.arpa
      IN PTR
      a2-16-62-193deploystaticakamaitechnologiescom
    • flag-us
      DNS
      133.211.185.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      133.211.185.52.in-addr.arpa
      IN PTR
      Response
    • flag-it
      HEAD
      http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/2aaa8eb1-4390-495e-873c-71f03ed02d54?P1=1734258071&P2=404&P3=2&P4=MxkAqOhZ1UQQ8daG%2fM9SJkjqebtteFGtkr8qD7LgEMbMbwxAZcW9t0Mp%2buul0PklwkE9kmaHxKbL8Qo9w0z1Cg%3d%3d
      Remote address:
      91.80.49.21:80
      Request
      HEAD /filestreamingservice/files/2aaa8eb1-4390-495e-873c-71f03ed02d54?P1=1734258071&P2=404&P3=2&P4=MxkAqOhZ1UQQ8daG%2fM9SJkjqebtteFGtkr8qD7LgEMbMbwxAZcW9t0Mp%2buul0PklwkE9kmaHxKbL8Qo9w0z1Cg%3d%3d HTTP/1.1
      Connection: Keep-Alive
      Accept: */*
      Accept-Encoding: identity
      User-Agent: Microsoft BITS/7.8
      Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
      Response
      HTTP/1.1 403 Forbidden
      Date: Sat, 04 Jan 2025 14:07:28 GMT
      Content-Type: text/html
      Content-Length: 141
      Connection: keep-alive
      Server: Qwilt
      X-OC-Service-Type: lo
      Ocn-Cache-Status: NA
      Ocn-Requestid: 100000029d55fbd9-1286601283-1
      Ocn-Served-By: QLT
      X-CID: 9
      X-CCC: it
    • flag-it
      HEAD
      http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/ef5f792e-9df7-4748-accf-02ec33a4a2c4?P1=1734261669&P2=404&P3=2&P4=NZVSv%2bbZd2oYP1XeiCgTl1VO2Qx2XjrhXkaTUnQ4vjJt8Xq4zn19kqLj4P33vkhGt1I8GDNXkD%2f4ks4EcinKWw%3d%3d
      Remote address:
      91.80.49.21:80
      Request
      HEAD /filestreamingservice/files/ef5f792e-9df7-4748-accf-02ec33a4a2c4?P1=1734261669&P2=404&P3=2&P4=NZVSv%2bbZd2oYP1XeiCgTl1VO2Qx2XjrhXkaTUnQ4vjJt8Xq4zn19kqLj4P33vkhGt1I8GDNXkD%2f4ks4EcinKWw%3d%3d HTTP/1.1
      Connection: Keep-Alive
      Accept: */*
      Accept-Encoding: identity
      User-Agent: Microsoft BITS/7.8
      Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
      Response
      HTTP/1.1 403 Forbidden
      Date: Sat, 04 Jan 2025 14:07:49 GMT
      Content-Type: text/html
      Content-Length: 141
      Connection: keep-alive
      Server: Qwilt
      X-OC-Service-Type: lo
      Ocn-Cache-Status: NA
      Ocn-Requestid: 100000029d56c32f-1286601283-2
      Ocn-Served-By: QLT
      X-CID: 9
      X-CCC: it
    • flag-it
      HEAD
      http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/376d5b20-4ccf-4ab3-92ec-d2fa66fb039b?P1=1734261669&P2=404&P3=2&P4=dllFEkZa9wQ2uspAjFDDO1ZmM%2bCHxFkFYfaRhioUJzcY1jU2ZYTlgyQ4pEkRSt3IxyXnGy%2b%2f3Gdx77gKXuvTNw%3d%3d
      Remote address:
      91.80.49.21:80
      Request
      HEAD /filestreamingservice/files/376d5b20-4ccf-4ab3-92ec-d2fa66fb039b?P1=1734261669&P2=404&P3=2&P4=dllFEkZa9wQ2uspAjFDDO1ZmM%2bCHxFkFYfaRhioUJzcY1jU2ZYTlgyQ4pEkRSt3IxyXnGy%2b%2f3Gdx77gKXuvTNw%3d%3d HTTP/1.1
      Connection: Keep-Alive
      Accept: */*
      Accept-Encoding: identity
      User-Agent: Microsoft BITS/7.8
      Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
      Response
      HTTP/1.1 403 Forbidden
      Date: Sat, 04 Jan 2025 14:07:53 GMT
      Content-Type: text/html
      Content-Length: 141
      Connection: keep-alive
      Server: Qwilt
      X-OC-Service-Type: lo
      Ocn-Cache-Status: NA
      Ocn-Requestid: 100000029d56eacf-1286601283-3
      Ocn-Served-By: QLT
      X-CID: 9
      X-CCC: it
    • flag-it
      HEAD
      http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/7ea0d449-ab10-4e22-a3ef-f7271d7afdff?P1=1734414699&P2=404&P3=2&P4=KgNHmbKJP0Gni%2fGWkXnBcVhOV0ilLB5ts%2fApSUax5%2fg%2bcLlg0Ox8ql52vViw%2by8760ygCblQFQDd0MBuL3ajjQ%3d%3d
      Remote address:
      91.80.49.21:80
      Request
      HEAD /filestreamingservice/files/7ea0d449-ab10-4e22-a3ef-f7271d7afdff?P1=1734414699&P2=404&P3=2&P4=KgNHmbKJP0Gni%2fGWkXnBcVhOV0ilLB5ts%2fApSUax5%2fg%2bcLlg0Ox8ql52vViw%2by8760ygCblQFQDd0MBuL3ajjQ%3d%3d HTTP/1.1
      Connection: Keep-Alive
      Accept: */*
      Accept-Encoding: identity
      User-Agent: Microsoft BITS/7.8
      Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
      Response
      HTTP/1.1 403 Forbidden
      Date: Sat, 04 Jan 2025 14:08:01 GMT
      Content-Type: text/html
      Content-Length: 141
      Connection: keep-alive
      Server: Qwilt
      X-OC-Service-Type: lo
      Ocn-Cache-Status: NA
      Ocn-Requestid: 100000029d573930-1286601283-4
      Ocn-Served-By: QLT
      X-CID: 9
      X-CCC: it
    • flag-it
      HEAD
      http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/4c4fdee0-d69c-42b7-bf5c-3ec046e9dfc9?P1=1734258069&P2=404&P3=2&P4=bsnLt6LK4lshCgKT02R1AEtcffKNSZdKoScZB8wJH9Smwq6zjhmocBbC9gniMIeONVXzCsSbvqq6tXPehAPEPQ%3d%3d
      Remote address:
      91.80.49.21:80
      Request
      HEAD /filestreamingservice/files/4c4fdee0-d69c-42b7-bf5c-3ec046e9dfc9?P1=1734258069&P2=404&P3=2&P4=bsnLt6LK4lshCgKT02R1AEtcffKNSZdKoScZB8wJH9Smwq6zjhmocBbC9gniMIeONVXzCsSbvqq6tXPehAPEPQ%3d%3d HTTP/1.1
      Connection: Keep-Alive
      Accept: */*
      Accept-Encoding: identity
      User-Agent: Microsoft BITS/7.8
      Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
      Response
      HTTP/1.1 403 Forbidden
      Date: Sat, 04 Jan 2025 14:08:14 GMT
      Content-Type: text/html
      Content-Length: 141
      Connection: keep-alive
      Server: Qwilt
      X-OC-Service-Type: lo
      Ocn-Cache-Status: NA
      Ocn-Requestid: 100000029d57ae2c-1286601283-5
      Ocn-Served-By: QLT
      X-CID: 9
      X-CCC: it
    • flag-it
      HEAD
      http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/46762b80-7b06-480c-929a-1514bfab47dc?P1=1734509477&P2=404&P3=2&P4=G%2bXhqH86tBIAuteAmNyXBukDZRI39cNIm%2be6c1R%2bWHQnZWeQznu5xCo0GWmB%2byMOaaJf%2beKr31Du89RJq6eHXQ%3d%3d
      Remote address:
      91.80.49.21:80
      Request
      HEAD /filestreamingservice/files/46762b80-7b06-480c-929a-1514bfab47dc?P1=1734509477&P2=404&P3=2&P4=G%2bXhqH86tBIAuteAmNyXBukDZRI39cNIm%2be6c1R%2bWHQnZWeQznu5xCo0GWmB%2byMOaaJf%2beKr31Du89RJq6eHXQ%3d%3d HTTP/1.1
      Connection: Keep-Alive
      Accept: */*
      Accept-Encoding: identity
      User-Agent: Microsoft BITS/7.8
      Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
      Response
      HTTP/1.1 403 Forbidden
      Date: Sat, 04 Jan 2025 14:08:30 GMT
      Content-Type: text/html
      Content-Length: 141
      Connection: keep-alive
      Server: Qwilt
      X-OC-Service-Type: lo
      Ocn-Cache-Status: NA
      Ocn-Requestid: 100000029d584a4f-1286601283-6
      Ocn-Served-By: QLT
      X-CID: 9
      X-CCC: it
    • flag-it
      HEAD
      http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/b2937c84-8cc1-4c00-b1a2-350a9880a217?P1=1734123823&P2=404&P3=2&P4=dScmsqDsz4FkSgqxx0X7AQHzgjNxms0yi9ZX%2fVClGKtgUdO6XvJxFjXcEUCt1HU5KI2Wr4ShrX7nt8mzUefxfQ%3d%3d
      Remote address:
      91.80.49.21:80
      Request
      HEAD /filestreamingservice/files/b2937c84-8cc1-4c00-b1a2-350a9880a217?P1=1734123823&P2=404&P3=2&P4=dScmsqDsz4FkSgqxx0X7AQHzgjNxms0yi9ZX%2fVClGKtgUdO6XvJxFjXcEUCt1HU5KI2Wr4ShrX7nt8mzUefxfQ%3d%3d HTTP/1.1
      Connection: Keep-Alive
      Accept: */*
      Accept-Encoding: identity
      User-Agent: Microsoft BITS/7.8
      Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
      Response
      HTTP/1.1 403 Forbidden
      Date: Sat, 04 Jan 2025 14:08:34 GMT
      Content-Type: text/html
      Content-Length: 141
      Connection: keep-alive
      Server: Qwilt
      X-OC-Service-Type: lo
      Ocn-Cache-Status: NA
      Ocn-Requestid: 100000029d58729e-1286601283-7
      Ocn-Served-By: QLT
      X-CID: 9
      X-CCC: it
    • flag-it
      HEAD
      http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/2132f61f-f790-4ae6-a355-8cf9a1533800?P1=1734250869&P2=404&P3=2&P4=b5KpK%2bES%2b7p6LHXssDqSUBWrx%2fMb7aUaDag7Zd6DKXA4IOZKJgVYP2rL8lcZgMP%2f%2bysMG%2bjPw9CAJsa1%2fSYVKw%3d%3d
      Remote address:
      91.80.49.21:80
      Request
      HEAD /filestreamingservice/files/2132f61f-f790-4ae6-a355-8cf9a1533800?P1=1734250869&P2=404&P3=2&P4=b5KpK%2bES%2b7p6LHXssDqSUBWrx%2fMb7aUaDag7Zd6DKXA4IOZKJgVYP2rL8lcZgMP%2f%2bysMG%2bjPw9CAJsa1%2fSYVKw%3d%3d HTTP/1.1
      Connection: Keep-Alive
      Accept: */*
      Accept-Encoding: identity
      User-Agent: Microsoft BITS/7.8
      Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
      Response
      HTTP/1.1 403 Forbidden
      Date: Sat, 04 Jan 2025 14:08:43 GMT
      Content-Type: text/html
      Content-Length: 141
      Connection: keep-alive
      Server: Qwilt
      X-OC-Service-Type: lo
      Ocn-Cache-Status: NA
      Ocn-Requestid: 100000029d58c3ab-1286601283-8
      Ocn-Served-By: QLT
      X-CID: 9
      X-CCC: it
    • flag-it
      HEAD
      http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/c08f1970-45bc-4dbe-8166-4ecef7a1f617?P1=1734258068&P2=404&P3=2&P4=dyL3hcUzv63SK50l4d4qTkY5yi%2bU5%2fzAAVRtDpCucgd04FGnEPALI7EnZX0SJhiv%2fQSsLjM7NyMKgXYcECDTng%3d%3d
      Remote address:
      91.80.49.21:80
      Request
      HEAD /filestreamingservice/files/c08f1970-45bc-4dbe-8166-4ecef7a1f617?P1=1734258068&P2=404&P3=2&P4=dyL3hcUzv63SK50l4d4qTkY5yi%2bU5%2fzAAVRtDpCucgd04FGnEPALI7EnZX0SJhiv%2fQSsLjM7NyMKgXYcECDTng%3d%3d HTTP/1.1
      Connection: Keep-Alive
      Accept: */*
      Accept-Encoding: identity
      User-Agent: Microsoft BITS/7.8
      Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
      Response
      HTTP/1.1 403 Forbidden
      Date: Sat, 04 Jan 2025 14:08:55 GMT
      Content-Type: text/html
      Content-Length: 141
      Connection: keep-alive
      Server: Qwilt
      X-OC-Service-Type: lo
      Ocn-Cache-Status: NA
      Ocn-Requestid: 100000029d593cd6-1286601283-9
      Ocn-Served-By: QLT
      X-CID: 9
      X-CCC: it
    • flag-it
      HEAD
      http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/297b5139-7919-4cb1-be42-91e5d6367802?P1=1734254468&P2=404&P3=2&P4=lmH4sygBoXArba%2bLHSqZWfITDg8sjf5TcST7lCC0Hz3LjC4z1T6lgBwe1kRq9czXXTm58V%2f3e7l04hT5Gqm2EA%3d%3d
      Remote address:
      91.80.49.21:80
      Request
      HEAD /filestreamingservice/files/297b5139-7919-4cb1-be42-91e5d6367802?P1=1734254468&P2=404&P3=2&P4=lmH4sygBoXArba%2bLHSqZWfITDg8sjf5TcST7lCC0Hz3LjC4z1T6lgBwe1kRq9czXXTm58V%2f3e7l04hT5Gqm2EA%3d%3d HTTP/1.1
      Connection: Keep-Alive
      Accept: */*
      Accept-Encoding: identity
      User-Agent: Microsoft BITS/7.8
      Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
      Response
      HTTP/1.1 403 Forbidden
      Date: Sat, 04 Jan 2025 14:09:11 GMT
      Content-Type: text/html
      Content-Length: 141
      Connection: keep-alive
      Server: Qwilt
      X-OC-Service-Type: lo
      Ocn-Cache-Status: NA
      Ocn-Requestid: 100000029d59dc88-1286601283-10
      Ocn-Served-By: QLT
      X-CID: 9
      X-CCC: it
    • flag-us
      DNS
      edge.microsoft.com
      Remote address:
      8.8.8.8:53
      Request
      edge.microsoft.com
      IN A
      Response
      edge.microsoft.com
      IN CNAME
      edge-microsoft-com.dual-a-0036.a-msedge.net
      edge-microsoft-com.dual-a-0036.a-msedge.net
      IN CNAME
      dual-a-0036.a-msedge.net
      dual-a-0036.a-msedge.net
      IN A
      13.107.21.239
      dual-a-0036.a-msedge.net
      IN A
      204.79.197.239
    • flag-us
      DNS
      edge.microsoft.com
      Remote address:
      8.8.8.8:53
      Request
      edge.microsoft.com
      IN Unknown
      Response
      edge.microsoft.com
      IN CNAME
      edge-microsoft-com.dual-a-0036.a-msedge.net
    • flag-us
      DNS
      fd.api.iris.microsoft.com
      Remote address:
      8.8.8.8:53
      Request
      fd.api.iris.microsoft.com
      IN A
      Response
      fd.api.iris.microsoft.com
      IN CNAME
      fd-api-iris.trafficmanager.net
      fd-api-iris.trafficmanager.net
      IN CNAME
      iris-de-prod-azsc-v2-neu-b.northeurope.cloudapp.azure.com
      iris-de-prod-azsc-v2-neu-b.northeurope.cloudapp.azure.com
      IN A
      20.223.36.55
    • flag-ie
      GET
      https://fd.api.iris.microsoft.com/v4/api/selection?&asid=AF6D2FD5521E4B768442C363BEAC94F2&nct=1&placement=88000677&bcnt=30&country=US&locale=en-US&poptin=0&fmt=json&clr=cdmlite&arch=AMD64&concp=0&d3dfl=D3D_FEATURE_LEVEL_12_1&devfam=Windows.Desktop&devosver=10.0.19044.4529&dinst=1733929142&dmret=0&drgng=244&flightbranch=&flightring=Retail&localid=w%3A0536F3B0-8B64-FBDF-D563-859F5D26F537&osbranch=vb_release&oslocale=en-US&osret=1&ossku=EnterpriseS&osskuid=125&prccn=2&prccs=4192&prcmf=AuthenticAMD&procm=Intel%20Core%20Processor%20%28Broadwell%29&ram=4095&tinst=Client&tl=1&pat=0&smc=0&sac=0&disphorzres=1280&dispsize=14.7&dispvertres=720&ldisphorzres=1280&ldispvertres=720&moncnt=1&cpdsk=241361&frdsk=203801&lo=34507&tsu=34507
      Remote address:
      20.223.36.55:443
      Request
      GET /v4/api/selection?&asid=AF6D2FD5521E4B768442C363BEAC94F2&nct=1&placement=88000677&bcnt=30&country=US&locale=en-US&poptin=0&fmt=json&clr=cdmlite&arch=AMD64&concp=0&d3dfl=D3D_FEATURE_LEVEL_12_1&devfam=Windows.Desktop&devosver=10.0.19044.4529&dinst=1733929142&dmret=0&drgng=244&flightbranch=&flightring=Retail&localid=w%3A0536F3B0-8B64-FBDF-D563-859F5D26F537&osbranch=vb_release&oslocale=en-US&osret=1&ossku=EnterpriseS&osskuid=125&prccn=2&prccs=4192&prcmf=AuthenticAMD&procm=Intel%20Core%20Processor%20%28Broadwell%29&ram=4095&tinst=Client&tl=1&pat=0&smc=0&sac=0&disphorzres=1280&dispsize=14.7&dispvertres=720&ldisphorzres=1280&ldispvertres=720&moncnt=1&cpdsk=241361&frdsk=203801&lo=34507&tsu=34507 HTTP/2.0
      host: fd.api.iris.microsoft.com
      accept-encoding: gzip, deflate
      x-sdk-hw-token: t=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&p=
      Response
      HTTP/2.0 200
      cache-control: no-store, no-cache
      pragma: no-cache
      content-length: 131
      content-type: application/json; charset=utf-8
      expires: Mon, 01 Jan 0001 00:00:00 GMT
      server: Microsoft-IIS/10.0
      arc-rsp-dbg: [{"DcoPlusDebug":"Status: Ok"},{"OPTOUTSTATE":"256"},{"REGIONALPOLICY":"0"}]
      accept-ch: UA, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform, UA-Platform-Version
      x-aspnet-version: 4.0.30319
      x-powered-by: ASP.NET
      strict-transport-security: max-age=31536000; includeSubDomains
      date: Sat, 04 Jan 2025 14:07:41 GMT
    • flag-us
      DNS
      55.36.223.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      55.36.223.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      212.20.149.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      212.20.149.52.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      171.39.242.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      171.39.242.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      13.227.111.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      13.227.111.52.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      edge.microsoft.com
      Remote address:
      8.8.8.8:53
      Request
      edge.microsoft.com
      IN A
      Response
      edge.microsoft.com
      IN CNAME
      edge-microsoft-com.dual-a-0036.a-msedge.net
      edge-microsoft-com.dual-a-0036.a-msedge.net
      IN CNAME
      dual-a-0036.a-msedge.net
      dual-a-0036.a-msedge.net
      IN A
      13.107.21.239
      dual-a-0036.a-msedge.net
      IN A
      204.79.197.239
    • flag-us
      DNS
      edge.microsoft.com
      Remote address:
      8.8.8.8:53
      Request
      edge.microsoft.com
      IN Unknown
      Response
      edge.microsoft.com
      IN CNAME
      edge-microsoft-com.dual-a-0036.a-msedge.net
    • flag-us
      DNS
      225.162.46.104.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      225.162.46.104.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      edge.microsoft.com
      Remote address:
      8.8.8.8:53
      Request
      edge.microsoft.com
      IN A
      Response
      edge.microsoft.com
      IN CNAME
      edge-microsoft-com.dual-a-0036.a-msedge.net
      edge-microsoft-com.dual-a-0036.a-msedge.net
      IN CNAME
      dual-a-0036.a-msedge.net
      dual-a-0036.a-msedge.net
      IN A
      13.107.21.239
      dual-a-0036.a-msedge.net
      IN A
      204.79.197.239
    • flag-us
      DNS
      edge.microsoft.com
      Remote address:
      8.8.8.8:53
      Request
      edge.microsoft.com
      IN Unknown
      Response
      edge.microsoft.com
      IN CNAME
      edge-microsoft-com.dual-a-0036.a-msedge.net
    • 91.80.49.21:80
      http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0c269ced-c74b-4e70-9b58-6e7999b292c0?P1=1734261670&P2=404&P3=2&P4=nLreT3w98NYPfyTlUt84lNIIzUpxduRjiAgT%2fzbjbtpv8PHMKYxAxCkLZXXLZY65iMkTwKfLcI6WjhICrUaYZQ%3d%3d
      http
      391 B
      40 B
      1
      1

      HTTP Request

      HEAD http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0c269ced-c74b-4e70-9b58-6e7999b292c0?P1=1734261670&P2=404&P3=2&P4=nLreT3w98NYPfyTlUt84lNIIzUpxduRjiAgT%2fzbjbtpv8PHMKYxAxCkLZXXLZY65iMkTwKfLcI6WjhICrUaYZQ%3d%3d
    • 13.107.21.239:443
      edge.microsoft.com
      tls
      3.6kB
      8.4kB
      19
      24
    • 13.107.246.64:443
      edgeassetservice.azureedge.net
      tls
      23.0kB
      1.2MB
      440
      845
    • 2.16.62.193:80
      http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/c08f1970-45bc-4dbe-8166-4ecef7a1f617?P1=1734258068&P2=404&P3=2&P4=dyL3hcUzv63SK50l4d4qTkY5yi%2bU5%2fzAAVRtDpCucgd04FGnEPALI7EnZX0SJhiv%2fQSsLjM7NyMKgXYcECDTng%3d%3d
      http
      7.6kB
      8.0kB
      23
      15

      HTTP Request

      GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0c269ced-c74b-4e70-9b58-6e7999b292c0?P1=1734261670&P2=404&P3=2&P4=nLreT3w98NYPfyTlUt84lNIIzUpxduRjiAgT%2fzbjbtpv8PHMKYxAxCkLZXXLZY65iMkTwKfLcI6WjhICrUaYZQ%3d%3d

      HTTP Response

      403

      HTTP Request

      GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/2aaa8eb1-4390-495e-873c-71f03ed02d54?P1=1734258071&P2=404&P3=2&P4=MxkAqOhZ1UQQ8daG%2fM9SJkjqebtteFGtkr8qD7LgEMbMbwxAZcW9t0Mp%2buul0PklwkE9kmaHxKbL8Qo9w0z1Cg%3d%3d

      HTTP Response

      403

      HTTP Request

      GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/ef5f792e-9df7-4748-accf-02ec33a4a2c4?P1=1734261669&P2=404&P3=2&P4=NZVSv%2bbZd2oYP1XeiCgTl1VO2Qx2XjrhXkaTUnQ4vjJt8Xq4zn19kqLj4P33vkhGt1I8GDNXkD%2f4ks4EcinKWw%3d%3d

      HTTP Response

      403

      HTTP Request

      GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/376d5b20-4ccf-4ab3-92ec-d2fa66fb039b?P1=1734261669&P2=404&P3=2&P4=dllFEkZa9wQ2uspAjFDDO1ZmM%2bCHxFkFYfaRhioUJzcY1jU2ZYTlgyQ4pEkRSt3IxyXnGy%2b%2f3Gdx77gKXuvTNw%3d%3d

      HTTP Response

      403

      HTTP Request

      GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/7ea0d449-ab10-4e22-a3ef-f7271d7afdff?P1=1734414699&P2=404&P3=2&P4=KgNHmbKJP0Gni%2fGWkXnBcVhOV0ilLB5ts%2fApSUax5%2fg%2bcLlg0Ox8ql52vViw%2by8760ygCblQFQDd0MBuL3ajjQ%3d%3d

      HTTP Response

      403

      HTTP Request

      GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/4c4fdee0-d69c-42b7-bf5c-3ec046e9dfc9?P1=1734258069&P2=404&P3=2&P4=bsnLt6LK4lshCgKT02R1AEtcffKNSZdKoScZB8wJH9Smwq6zjhmocBbC9gniMIeONVXzCsSbvqq6tXPehAPEPQ%3d%3d

      HTTP Response

      403

      HTTP Request

      GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/46762b80-7b06-480c-929a-1514bfab47dc?P1=1734509477&P2=404&P3=2&P4=G%2bXhqH86tBIAuteAmNyXBukDZRI39cNIm%2be6c1R%2bWHQnZWeQznu5xCo0GWmB%2byMOaaJf%2beKr31Du89RJq6eHXQ%3d%3d

      HTTP Response

      403

      HTTP Request

      GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/b2937c84-8cc1-4c00-b1a2-350a9880a217?P1=1734123823&P2=404&P3=2&P4=dScmsqDsz4FkSgqxx0X7AQHzgjNxms0yi9ZX%2fVClGKtgUdO6XvJxFjXcEUCt1HU5KI2Wr4ShrX7nt8mzUefxfQ%3d%3d

      HTTP Response

      403

      HTTP Request

      GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/2132f61f-f790-4ae6-a355-8cf9a1533800?P1=1734250869&P2=404&P3=2&P4=b5KpK%2bES%2b7p6LHXssDqSUBWrx%2fMb7aUaDag7Zd6DKXA4IOZKJgVYP2rL8lcZgMP%2f%2bysMG%2bjPw9CAJsa1%2fSYVKw%3d%3d

      HTTP Response

      403

      HTTP Request

      GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/c08f1970-45bc-4dbe-8166-4ecef7a1f617?P1=1734258068&P2=404&P3=2&P4=dyL3hcUzv63SK50l4d4qTkY5yi%2bU5%2fzAAVRtDpCucgd04FGnEPALI7EnZX0SJhiv%2fQSsLjM7NyMKgXYcECDTng%3d%3d

      HTTP Response

      403
    • 13.107.21.239:443
      edge.microsoft.com
      tls, https
      2.0kB
      40 B
      4
      1
    • 13.107.21.239:443
      edge.microsoft.com
      tls
      55.9kB
      1.2MB
      682
      905
    • 91.80.49.21:80
      http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/297b5139-7919-4cb1-be42-91e5d6367802?P1=1734254468&P2=404&P3=2&P4=lmH4sygBoXArba%2bLHSqZWfITDg8sjf5TcST7lCC0Hz3LjC4z1T6lgBwe1kRq9czXXTm58V%2f3e7l04hT5Gqm2EA%3d%3d
      http
      4.5kB
      3.4kB
      22
      15

      HTTP Request

      HEAD http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/2aaa8eb1-4390-495e-873c-71f03ed02d54?P1=1734258071&P2=404&P3=2&P4=MxkAqOhZ1UQQ8daG%2fM9SJkjqebtteFGtkr8qD7LgEMbMbwxAZcW9t0Mp%2buul0PklwkE9kmaHxKbL8Qo9w0z1Cg%3d%3d

      HTTP Response

      403

      HTTP Request

      HEAD http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/ef5f792e-9df7-4748-accf-02ec33a4a2c4?P1=1734261669&P2=404&P3=2&P4=NZVSv%2bbZd2oYP1XeiCgTl1VO2Qx2XjrhXkaTUnQ4vjJt8Xq4zn19kqLj4P33vkhGt1I8GDNXkD%2f4ks4EcinKWw%3d%3d

      HTTP Response

      403

      HTTP Request

      HEAD http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/376d5b20-4ccf-4ab3-92ec-d2fa66fb039b?P1=1734261669&P2=404&P3=2&P4=dllFEkZa9wQ2uspAjFDDO1ZmM%2bCHxFkFYfaRhioUJzcY1jU2ZYTlgyQ4pEkRSt3IxyXnGy%2b%2f3Gdx77gKXuvTNw%3d%3d

      HTTP Response

      403

      HTTP Request

      HEAD http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/7ea0d449-ab10-4e22-a3ef-f7271d7afdff?P1=1734414699&P2=404&P3=2&P4=KgNHmbKJP0Gni%2fGWkXnBcVhOV0ilLB5ts%2fApSUax5%2fg%2bcLlg0Ox8ql52vViw%2by8760ygCblQFQDd0MBuL3ajjQ%3d%3d

      HTTP Response

      403

      HTTP Request

      HEAD http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/4c4fdee0-d69c-42b7-bf5c-3ec046e9dfc9?P1=1734258069&P2=404&P3=2&P4=bsnLt6LK4lshCgKT02R1AEtcffKNSZdKoScZB8wJH9Smwq6zjhmocBbC9gniMIeONVXzCsSbvqq6tXPehAPEPQ%3d%3d

      HTTP Response

      403

      HTTP Request

      HEAD http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/46762b80-7b06-480c-929a-1514bfab47dc?P1=1734509477&P2=404&P3=2&P4=G%2bXhqH86tBIAuteAmNyXBukDZRI39cNIm%2be6c1R%2bWHQnZWeQznu5xCo0GWmB%2byMOaaJf%2beKr31Du89RJq6eHXQ%3d%3d

      HTTP Response

      403

      HTTP Request

      HEAD http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/b2937c84-8cc1-4c00-b1a2-350a9880a217?P1=1734123823&P2=404&P3=2&P4=dScmsqDsz4FkSgqxx0X7AQHzgjNxms0yi9ZX%2fVClGKtgUdO6XvJxFjXcEUCt1HU5KI2Wr4ShrX7nt8mzUefxfQ%3d%3d

      HTTP Response

      403

      HTTP Request

      HEAD http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/2132f61f-f790-4ae6-a355-8cf9a1533800?P1=1734250869&P2=404&P3=2&P4=b5KpK%2bES%2b7p6LHXssDqSUBWrx%2fMb7aUaDag7Zd6DKXA4IOZKJgVYP2rL8lcZgMP%2f%2bysMG%2bjPw9CAJsa1%2fSYVKw%3d%3d

      HTTP Response

      403

      HTTP Request

      HEAD http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/c08f1970-45bc-4dbe-8166-4ecef7a1f617?P1=1734258068&P2=404&P3=2&P4=dyL3hcUzv63SK50l4d4qTkY5yi%2bU5%2fzAAVRtDpCucgd04FGnEPALI7EnZX0SJhiv%2fQSsLjM7NyMKgXYcECDTng%3d%3d

      HTTP Response

      403

      HTTP Request

      HEAD http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/297b5139-7919-4cb1-be42-91e5d6367802?P1=1734254468&P2=404&P3=2&P4=lmH4sygBoXArba%2bLHSqZWfITDg8sjf5TcST7lCC0Hz3LjC4z1T6lgBwe1kRq9czXXTm58V%2f3e7l04hT5Gqm2EA%3d%3d

      HTTP Response

      403
    • 20.223.36.55:443
      https://fd.api.iris.microsoft.com/v4/api/selection?&asid=AF6D2FD5521E4B768442C363BEAC94F2&nct=1&placement=88000677&bcnt=30&country=US&locale=en-US&poptin=0&fmt=json&clr=cdmlite&arch=AMD64&concp=0&d3dfl=D3D_FEATURE_LEVEL_12_1&devfam=Windows.Desktop&devosver=10.0.19044.4529&dinst=1733929142&dmret=0&drgng=244&flightbranch=&flightring=Retail&localid=w%3A0536F3B0-8B64-FBDF-D563-859F5D26F537&osbranch=vb_release&oslocale=en-US&osret=1&ossku=EnterpriseS&osskuid=125&prccn=2&prccs=4192&prcmf=AuthenticAMD&procm=Intel%20Core%20Processor%20%28Broadwell%29&ram=4095&tinst=Client&tl=1&pat=0&smc=0&sac=0&disphorzres=1280&dispsize=14.7&dispvertres=720&ldisphorzres=1280&ldispvertres=720&moncnt=1&cpdsk=241361&frdsk=203801&lo=34507&tsu=34507
      tls, http2
      2.7kB
      7.4kB
      19
      12

      HTTP Request

      GET https://fd.api.iris.microsoft.com/v4/api/selection?&asid=AF6D2FD5521E4B768442C363BEAC94F2&nct=1&placement=88000677&bcnt=30&country=US&locale=en-US&poptin=0&fmt=json&clr=cdmlite&arch=AMD64&concp=0&d3dfl=D3D_FEATURE_LEVEL_12_1&devfam=Windows.Desktop&devosver=10.0.19044.4529&dinst=1733929142&dmret=0&drgng=244&flightbranch=&flightring=Retail&localid=w%3A0536F3B0-8B64-FBDF-D563-859F5D26F537&osbranch=vb_release&oslocale=en-US&osret=1&ossku=EnterpriseS&osskuid=125&prccn=2&prccs=4192&prcmf=AuthenticAMD&procm=Intel%20Core%20Processor%20%28Broadwell%29&ram=4095&tinst=Client&tl=1&pat=0&smc=0&sac=0&disphorzres=1280&dispsize=14.7&dispvertres=720&ldisphorzres=1280&ldispvertres=720&moncnt=1&cpdsk=241361&frdsk=203801&lo=34507&tsu=34507

      HTTP Response

      200
    • 8.8.8.8:53
      edge.microsoft.com
      dns
      64 B
      167 B
      1
      1

      DNS Request

      edge.microsoft.com

      DNS Response

      13.107.21.239
      204.79.197.239

    • 8.8.8.8:53
      edge.microsoft.com
      dns
      64 B
      168 B
      1
      1

      DNS Request

      edge.microsoft.com

    • 8.8.8.8:53
      edgeassetservice.azureedge.net
      dns
      76 B
      243 B
      1
      1

      DNS Request

      edgeassetservice.azureedge.net

      DNS Response

      13.107.246.64

    • 8.8.8.8:53
      edgeassetservice.azureedge.net
      dns
      76 B
      287 B
      1
      1

      DNS Request

      edgeassetservice.azureedge.net

    • 8.8.8.8:53
      13.86.106.20.in-addr.arpa
      dns
      71 B
      157 B
      1
      1

      DNS Request

      13.86.106.20.in-addr.arpa

    • 8.8.8.8:53
      4.159.190.20.in-addr.arpa
      dns
      71 B
      157 B
      1
      1

      DNS Request

      4.159.190.20.in-addr.arpa

    • 8.8.8.8:53
      95.221.229.192.in-addr.arpa
      dns
      73 B
      144 B
      1
      1

      DNS Request

      95.221.229.192.in-addr.arpa

    • 8.8.8.8:53
      msedge.b.tlu.dl.delivery.mp.microsoft.com
      dns
      87 B
      328 B
      1
      1

      DNS Request

      msedge.b.tlu.dl.delivery.mp.microsoft.com

      DNS Response

      2.16.62.193
      2.16.62.82

    • 8.8.8.8:53
      msedge.b.tlu.dl.delivery.mp.microsoft.com
      dns
      87 B
      292 B
      1
      1

      DNS Request

      msedge.b.tlu.dl.delivery.mp.microsoft.com

    • 8.8.8.8:53
      193.62.16.2.in-addr.arpa
      dns
      70 B
      133 B
      1
      1

      DNS Request

      193.62.16.2.in-addr.arpa

    • 8.8.8.8:53
      133.211.185.52.in-addr.arpa
      dns
      73 B
      147 B
      1
      1

      DNS Request

      133.211.185.52.in-addr.arpa

    • 8.8.8.8:53
      edge.microsoft.com
      dns
      64 B
      167 B
      1
      1

      DNS Request

      edge.microsoft.com

      DNS Response

      13.107.21.239
      204.79.197.239

    • 8.8.8.8:53
      edge.microsoft.com
      dns
      64 B
      168 B
      1
      1

      DNS Request

      edge.microsoft.com

    • 8.8.8.8:53
      fd.api.iris.microsoft.com
      dns
      71 B
      199 B
      1
      1

      DNS Request

      fd.api.iris.microsoft.com

      DNS Response

      20.223.36.55

    • 8.8.8.8:53
      55.36.223.20.in-addr.arpa
      dns
      71 B
      157 B
      1
      1

      DNS Request

      55.36.223.20.in-addr.arpa

    • 8.8.8.8:53
      212.20.149.52.in-addr.arpa
      dns
      72 B
      146 B
      1
      1

      DNS Request

      212.20.149.52.in-addr.arpa

    • 8.8.8.8:53
      171.39.242.20.in-addr.arpa
      dns
      72 B
      158 B
      1
      1

      DNS Request

      171.39.242.20.in-addr.arpa

    • 8.8.8.8:53
      13.227.111.52.in-addr.arpa
      dns
      72 B
      158 B
      1
      1

      DNS Request

      13.227.111.52.in-addr.arpa

    • 8.8.8.8:53
      edge.microsoft.com
      dns
      64 B
      167 B
      1
      1

      DNS Request

      edge.microsoft.com

      DNS Response

      13.107.21.239
      204.79.197.239

    • 8.8.8.8:53
      edge.microsoft.com
      dns
      64 B
      168 B
      1
      1

      DNS Request

      edge.microsoft.com

    • 8.8.8.8:53
      225.162.46.104.in-addr.arpa
      dns
      73 B
      147 B
      1
      1

      DNS Request

      225.162.46.104.in-addr.arpa

    • 8.8.8.8:53
      edge.microsoft.com
      dns
      64 B
      167 B
      1
      1

      DNS Request

      edge.microsoft.com

      DNS Response

      13.107.21.239
      204.79.197.239

    • 8.8.8.8:53
      edge.microsoft.com
      dns
      64 B
      168 B
      1
      1

      DNS Request

      edge.microsoft.com

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.