Network Analysis
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| linksharing.samsungcloud.com | 54.68.213.116 |
- TCP Requests
-
-
192.168.56.101:49174 117.18.232.200:80
-
192.168.56.101:49176 117.18.232.200:443
-
192.168.56.101:49177 117.18.232.200:443
-
192.168.56.101:49178 117.18.232.200:443
-
192.168.56.101:49164 44.238.138.209:443linksharing.samsungcloud.com
-
192.168.56.101:49165 44.238.138.209:443linksharing.samsungcloud.com
-
192.168.56.101:49167 44.238.138.209:443linksharing.samsungcloud.com
-
192.168.56.101:49168 44.238.138.209:443linksharing.samsungcloud.com
-
192.168.56.101:49169 44.238.138.209:443linksharing.samsungcloud.com
-
192.168.56.101:49170 44.238.138.209:443linksharing.samsungcloud.com
-
GET
200
https://linksharing.samsungcloud.com/cuTdhqX2XLpd
REQUEST
RESPONSE
BODY
GET /cuTdhqX2XLpd HTTP/1.1
Accept: text/html, application/xhtml+xml, */*
Accept-Language: ko-KR
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
Host: linksharing.samsungcloud.com
Connection: Keep-Alive
HTTP/1.1 200
Content-Language: ko-KR
Content-Type: text/html;charset=UTF-8
Date: Tue, 16 Nov 2021 12:53:02 GMT
Location: https://linksharing.samsungcloud.com
Set-Cookie: JSESSIONID=2D8A05A1EDB2C10C2EB29CF0DC722B48; Path=/; HttpOnly
X-Frame-Options: SAMEORIGIN
transfer-encoding: chunked
Connection: keep-alive
GET
200
https://linksharing.samsungcloud.com/resources/css/layout.css?ver=21012103
REQUEST
RESPONSE
BODY
GET /resources/css/layout.css?ver=21012103 HTTP/1.1
Accept: text/css
Referer: https://linksharing.samsungcloud.com/cuTdhqX2XLpd
Accept-Language: ko-KR
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
Host: linksharing.samsungcloud.com
Connection: Keep-Alive
Cookie: JSESSIONID=2D8A05A1EDB2C10C2EB29CF0DC722B48
HTTP/1.1 200
Accept-Ranges: bytes
Cache-Control: max-age=31556926
Content-Type: text/css
Date: Tue, 16 Nov 2021 12:53:02 GMT
Last-Modified: Thu, 04 Nov 2021 02:08:16 GMT
X-Frame-Options: SAMEORIGIN
Content-Length: 37684
Connection: keep-alive
GET
200
https://linksharing.samsungcloud.com/resources/js/jquery/jquery-2.2.0.min.js
REQUEST
RESPONSE
BODY
GET /resources/js/jquery/jquery-2.2.0.min.js HTTP/1.1
Accept: application/javascript, */*;q=0.8
Referer: https://linksharing.samsungcloud.com/cuTdhqX2XLpd
Accept-Language: ko-KR
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
Host: linksharing.samsungcloud.com
Connection: Keep-Alive
Cookie: JSESSIONID=2D8A05A1EDB2C10C2EB29CF0DC722B48
HTTP/1.1 200
Accept-Ranges: bytes
Cache-Control: max-age=31556926
Content-Type: application/javascript
Date: Tue, 16 Nov 2021 12:53:02 GMT
Last-Modified: Thu, 04 Nov 2021 02:08:16 GMT
X-Frame-Options: SAMEORIGIN
Content-Length: 85589
Connection: keep-alive
GET
200
https://linksharing.samsungcloud.com/resources/js/common/moment.min.js
REQUEST
RESPONSE
BODY
GET /resources/js/common/moment.min.js HTTP/1.1
Accept: application/javascript, */*;q=0.8
Referer: https://linksharing.samsungcloud.com/cuTdhqX2XLpd
Accept-Language: ko-KR
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
Host: linksharing.samsungcloud.com
Connection: Keep-Alive
Cookie: JSESSIONID=2D8A05A1EDB2C10C2EB29CF0DC722B48
HTTP/1.1 200
Accept-Ranges: bytes
Cache-Control: max-age=31556926
Content-Type: application/javascript
Date: Tue, 16 Nov 2021 12:53:03 GMT
Last-Modified: Thu, 04 Nov 2021 02:08:16 GMT
X-Frame-Options: SAMEORIGIN
Content-Length: 40732
Connection: keep-alive
GET
200
https://linksharing.samsungcloud.com/resources/js/jquery/jquery.numeric.min.js
REQUEST
RESPONSE
BODY
GET /resources/js/jquery/jquery.numeric.min.js HTTP/1.1
Accept: application/javascript, */*;q=0.8
Referer: https://linksharing.samsungcloud.com/cuTdhqX2XLpd
Accept-Language: ko-KR
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
Host: linksharing.samsungcloud.com
Connection: Keep-Alive
Cookie: JSESSIONID=2D8A05A1EDB2C10C2EB29CF0DC722B48
HTTP/1.1 200
Accept-Ranges: bytes
Cache-Control: max-age=31556926
Content-Type: application/javascript
Date: Tue, 16 Nov 2021 12:53:03 GMT
Last-Modified: Thu, 04 Nov 2021 02:08:16 GMT
X-Frame-Options: SAMEORIGIN
Content-Length: 5563
Connection: keep-alive
GET
200
https://linksharing.samsungcloud.com/resources/js/app/sharelink.js?ver=21042209
REQUEST
RESPONSE
BODY
GET /resources/js/app/sharelink.js?ver=21042209 HTTP/1.1
Accept: application/javascript, */*;q=0.8
Referer: https://linksharing.samsungcloud.com/cuTdhqX2XLpd
Accept-Language: ko-KR
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
Host: linksharing.samsungcloud.com
Connection: Keep-Alive
Cookie: JSESSIONID=2D8A05A1EDB2C10C2EB29CF0DC722B48
HTTP/1.1 200
Accept-Ranges: bytes
Cache-Control: max-age=31556926
Content-Type: application/javascript
Date: Tue, 16 Nov 2021 12:53:03 GMT
Last-Modified: Thu, 04 Nov 2021 02:08:16 GMT
X-Frame-Options: SAMEORIGIN
Content-Length: 11507
Connection: keep-alive
GET
200
https://linksharing.samsungcloud.com/resources/js/common/handlebars.min-latest.js
REQUEST
RESPONSE
BODY
GET /resources/js/common/handlebars.min-latest.js HTTP/1.1
Accept: application/javascript, */*;q=0.8
Referer: https://linksharing.samsungcloud.com/cuTdhqX2XLpd
Accept-Language: ko-KR
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
Host: linksharing.samsungcloud.com
Connection: Keep-Alive
Cookie: JSESSIONID=2D8A05A1EDB2C10C2EB29CF0DC722B48
HTTP/1.1 200
Accept-Ranges: bytes
Cache-Control: max-age=31556926
Content-Type: application/javascript
Date: Tue, 16 Nov 2021 12:53:03 GMT
Last-Modified: Thu, 04 Nov 2021 02:08:16 GMT
X-Frame-Options: SAMEORIGIN
Content-Length: 64180
Connection: keep-alive
GET
200
https://linksharing.samsungcloud.com/resources/js/common/handlebars.helper.js
REQUEST
RESPONSE
BODY
GET /resources/js/common/handlebars.helper.js HTTP/1.1
Accept: application/javascript, */*;q=0.8
Referer: https://linksharing.samsungcloud.com/cuTdhqX2XLpd
Accept-Language: ko-KR
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
Host: linksharing.samsungcloud.com
Connection: Keep-Alive
Cookie: JSESSIONID=2D8A05A1EDB2C10C2EB29CF0DC722B48
HTTP/1.1 200
Accept-Ranges: bytes
Cache-Control: max-age=31556926
Content-Type: application/javascript
Date: Tue, 16 Nov 2021 12:53:03 GMT
Last-Modified: Thu, 04 Nov 2021 02:08:16 GMT
X-Frame-Options: SAMEORIGIN
Content-Length: 2140
Connection: keep-alive
GET
200
https://linksharing.samsungcloud.com/resources/js/common/remoteshare.prototype.js?ver=20061701
REQUEST
RESPONSE
BODY
GET /resources/js/common/remoteshare.prototype.js?ver=20061701 HTTP/1.1
Accept: application/javascript, */*;q=0.8
Referer: https://linksharing.samsungcloud.com/cuTdhqX2XLpd
Accept-Language: ko-KR
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
Host: linksharing.samsungcloud.com
Connection: Keep-Alive
Cookie: JSESSIONID=2D8A05A1EDB2C10C2EB29CF0DC722B48
HTTP/1.1 200
Accept-Ranges: bytes
Cache-Control: max-age=31556926
Content-Type: application/javascript
Date: Tue, 16 Nov 2021 12:53:04 GMT
Last-Modified: Thu, 04 Nov 2021 02:08:16 GMT
X-Frame-Options: SAMEORIGIN
Content-Length: 1400
Connection: keep-alive
GET
200
https://linksharing.samsungcloud.com/resources/js/app/remoteshare.js?ver=20070601
REQUEST
RESPONSE
BODY
GET /resources/js/app/remoteshare.js?ver=20070601 HTTP/1.1
Accept: application/javascript, */*;q=0.8
Referer: https://linksharing.samsungcloud.com/cuTdhqX2XLpd
Accept-Language: ko-KR
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
Host: linksharing.samsungcloud.com
Connection: Keep-Alive
Cookie: JSESSIONID=2D8A05A1EDB2C10C2EB29CF0DC722B48
HTTP/1.1 200
Accept-Ranges: bytes
Cache-Control: max-age=31556926
Content-Type: application/javascript
Date: Tue, 16 Nov 2021 12:53:04 GMT
Last-Modified: Thu, 04 Nov 2021 02:08:16 GMT
X-Frame-Options: SAMEORIGIN
Content-Length: 4240
Connection: keep-alive
GET
200
https://linksharing.samsungcloud.com/resources/images/share_link.png
REQUEST
RESPONSE
BODY
GET /resources/images/share_link.png HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Referer: https://linksharing.samsungcloud.com/cuTdhqX2XLpd
Accept-Language: ko-KR
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
Host: linksharing.samsungcloud.com
Connection: Keep-Alive
Cookie: JSESSIONID=2D8A05A1EDB2C10C2EB29CF0DC722B48
HTTP/1.1 200
Accept-Ranges: bytes
Cache-Control: max-age=31556926
Content-Type: image/png
Date: Tue, 16 Nov 2021 12:53:03 GMT
Last-Modified: Thu, 04 Nov 2021 02:08:16 GMT
X-Frame-Options: SAMEORIGIN
Content-Length: 9037
Connection: keep-alive
GET
200
https://linksharing.samsungcloud.com/resources/images/category/category_ic_apk.png
REQUEST
RESPONSE
BODY
GET /resources/images/category/category_ic_apk.png HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Referer: https://linksharing.samsungcloud.com/cuTdhqX2XLpd
Accept-Language: ko-KR
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
Host: linksharing.samsungcloud.com
Connection: Keep-Alive
Cookie: JSESSIONID=2D8A05A1EDB2C10C2EB29CF0DC722B48
HTTP/1.1 200
Accept-Ranges: bytes
Cache-Control: max-age=31556926
Content-Type: image/png
Date: Tue, 16 Nov 2021 12:53:03 GMT
Last-Modified: Thu, 04 Nov 2021 02:08:16 GMT
X-Frame-Options: SAMEORIGIN
Content-Length: 21816
Connection: keep-alive
GET
200
https://linksharing.samsungcloud.com/resources/images/Samsung_Orig_Wordmark_BLACK_RGB.png
REQUEST
RESPONSE
BODY
GET /resources/images/Samsung_Orig_Wordmark_BLACK_RGB.png HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Referer: https://linksharing.samsungcloud.com/cuTdhqX2XLpd
Accept-Language: ko-KR
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
Host: linksharing.samsungcloud.com
Connection: Keep-Alive
Cookie: JSESSIONID=2D8A05A1EDB2C10C2EB29CF0DC722B48
HTTP/1.1 200
Accept-Ranges: bytes
Cache-Control: max-age=31556926
Content-Type: image/png
Date: Tue, 16 Nov 2021 12:53:03 GMT
Last-Modified: Thu, 04 Nov 2021 02:08:16 GMT
X-Frame-Options: SAMEORIGIN
Content-Length: 5520
Connection: keep-alive
GET
200
https://linksharing.samsungcloud.com/resources/images/share_link_32.png
REQUEST
RESPONSE
BODY
GET /resources/images/share_link_32.png HTTP/1.1
Accept: */*
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)
Host: linksharing.samsungcloud.com
Connection: Keep-Alive
Cookie: JSESSIONID=2D8A05A1EDB2C10C2EB29CF0DC722B48
HTTP/1.1 200
Accept-Ranges: bytes
Cache-Control: max-age=31556926
Content-Type: image/png
Date: Tue, 16 Nov 2021 12:53:04 GMT
Last-Modified: Thu, 04 Nov 2021 02:08:16 GMT
X-Frame-Options: SAMEORIGIN
Content-Length: 1108
Connection: keep-alive
GET
200
https://linksharing.samsungcloud.com/resources/images/category/category_ic_broken.png
REQUEST
RESPONSE
BODY
GET /resources/images/category/category_ic_broken.png HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Referer: https://linksharing.samsungcloud.com/cuTdhqX2XLpd
Accept-Language: ko-KR
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
Host: linksharing.samsungcloud.com
Connection: Keep-Alive
Cookie: JSESSIONID=2D8A05A1EDB2C10C2EB29CF0DC722B48
HTTP/1.1 200
Accept-Ranges: bytes
Cache-Control: max-age=31556926
Content-Type: image/png
Date: Tue, 16 Nov 2021 12:53:04 GMT
Last-Modified: Thu, 04 Nov 2021 02:08:16 GMT
X-Frame-Options: SAMEORIGIN
Content-Length: 25923
Connection: keep-alive
GET
200
https://linksharing.samsungcloud.com/resources/images/loadingbar.gif
REQUEST
RESPONSE
BODY
GET /resources/images/loadingbar.gif HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Referer: https://linksharing.samsungcloud.com/cuTdhqX2XLpd
Accept-Language: ko-KR
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
Host: linksharing.samsungcloud.com
Connection: Keep-Alive
Cookie: JSESSIONID=2D8A05A1EDB2C10C2EB29CF0DC722B48
HTTP/1.1 200
Accept-Ranges: bytes
Cache-Control: max-age=31556926
Content-Type: image/gif
Date: Tue, 16 Nov 2021 12:53:05 GMT
Last-Modified: Thu, 04 Nov 2021 02:08:16 GMT
X-Frame-Options: SAMEORIGIN
Content-Length: 6887
Connection: keep-alive
GET
200
http://ie9cvlist.ie.microsoft.com/IE9CompatViewList.xml
REQUEST
RESPONSE
BODY
GET /IE9CompatViewList.xml HTTP/1.1
Accept: */*
UA-CPU: AMD64
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)
Host: ie9cvlist.ie.microsoft.com
If-Modified-Since: Thu, 21 Nov 2019 19:37:08 GMT
If-None-Match: 0x8D76EBA32AF0BC3
Connection: Keep-Alive
HTTP/1.1 200 OK
Content-Encoding: gzip
Age: 4656
Cache-Control: max-age=21600
Content-MD5: p9g4jsuZO6TaLMVAI9ujVg==
Content-Type: text/xml
Date: Tue, 16 Nov 2021 12:54:01 GMT
Etag: 0x8D9521D2D2DF1EC
Last-Modified: Wed, 28 Jul 2021 23:12:31 GMT
Server: ECAcc (tka/897A)
Vary: Accept-Encoding
X-Cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: c6e5d705-801e-00de-2cde-dabdab000000
x-ms-version: 2009-09-19
Content-Length: 13702
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
Suricata TLS
| Flow | Issuer | Subject | Fingerprint |
|---|---|---|---|
|
TLSv1 192.168.56.101:49167 44.238.138.209:443 |
None | None | None |
|
TLSv1 192.168.56.101:49164 44.238.138.209:443 |
C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Organization Validation Secure Server CA | C=KR, unknown=16677, ST=Gyeonggi-do, L=Suwon-si, unknown=Yeongtong-gu, unknown=129, Samsung-ro, Yeongtong-gu, O=Samsung Electronics Co., Ltd., OU=Cloud Operation Group, CN=*.samsungcloud.com | e0:9f:8e:31:31:3d:6e:12:30:05:bd:a7:49:16:3f:02:0b:cc:db:8c |
|
TLSv1 192.168.56.101:49169 44.238.138.209:443 |
None | None | None |
|
TLSv1 192.168.56.101:49168 44.238.138.209:443 |
None | None | None |
|
TLSv1 192.168.56.101:49170 44.238.138.209:443 |
None | None | None |
|
TLSv1 192.168.56.101:49165 44.238.138.209:443 |
C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Organization Validation Secure Server CA | C=KR, unknown=16677, ST=Gyeonggi-do, L=Suwon-si, unknown=Yeongtong-gu, unknown=129, Samsung-ro, Yeongtong-gu, O=Samsung Electronics Co., Ltd., OU=Cloud Operation Group, CN=*.samsungcloud.com | e0:9f:8e:31:31:3d:6e:12:30:05:bd:a7:49:16:3f:02:0b:cc:db:8c |
Snort Alerts
No Snort Alerts