Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    140s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/08/2022, 15:11 UTC

General

  • Target

    file.exe

  • Size

    281KB

  • MD5

    e005c377c3afa1c769c875439bbf1aec

  • SHA1

    e3b472abcae46c5da33e04d94ede7f6ffb082863

  • SHA256

    ecff5e9fc6e4fc922ae7c0a4d111350b4625edb6755209101aa7152732b28f0b

  • SHA512

    010a4db5181598bc0a0a1f7d721948c16f4a815037c2710bd59b59013b67b81a0f1532b5e97ffd5edc52c2e49fdf1cda2a85b20a625bcce51f8c91b9598ccbd2

Malware Config

Extracted

Family

arrowrat

Botnet

Client

C2

20.100.171.81:1337

Mutex

XWIEUOzKz

Signatures

  • ArrowRat

    Remote access tool with various capabilities first seen in late 2021.

  • Downloads MZ/PE file
  • Modifies Installed Components in the registry 2 TTPs 1 IoCs
  • Enumerates connected drives 3 TTPs 1 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Suspicious use of SetThreadContext 2 IoCs
  • Checks SCSI registry key(s) 3 TTPs 22 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 2 IoCs
  • Modifies registry class 56 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 34 IoCs
  • Suspicious use of FindShellTrayWindow 49 IoCs
  • Suspicious use of SendNotifyMessage 21 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs
  • Suspicious use of WriteProcessMemory 18 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\file.exe
    "C:\Users\Admin\AppData\Local\Temp\file.exe"
    1⤵
    • Suspicious use of SetThreadContext
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:396
    • C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
      "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
      2⤵
      • Suspicious use of SetThreadContext
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:4292
      • C:\Windows\explorer.exe
        "C:\Windows\explorer.exe"
        3⤵
        • Modifies Installed Components in the registry
        • Enumerates connected drives
        • Checks SCSI registry key(s)
        • Modifies registry class
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        PID:1904
      • C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe
        "C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe" Client 20.100.171.81 1337 XWIEUOzKz
        3⤵
          PID:384
    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
      1⤵
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      PID:3584
    • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
      "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
      1⤵
      • Enumerates system info in registry
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      PID:4524

    Network

    • flag-us
      DNS
      filebin.net
      file.exe
      Remote address:
      8.8.8.8:53
      Request
      filebin.net
      IN A
      Response
      filebin.net
      IN A
      185.47.40.36
    • flag-no
      GET
      https://filebin.net/ayyivd2vv9ist18n/Client.exe
      file.exe
      Remote address:
      185.47.40.36:443
      Request
      GET /ayyivd2vv9ist18n/Client.exe HTTP/1.1
      Host: filebin.net
      Connection: Keep-Alive
      Response
      HTTP/1.1 302 Found
      Cache-Control: max-age=0
      Location: https://situla.bitbit.net/filebin/7e40dc34e22b7829ed3b935404357dd0de9c234a40872fb529c9e0988713dd1d/9577c398546643ac7c41d72606e249c5cd74b4a1c1d1591e941f4b7503d9ce92?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=HZXB1J7T0UN34UN512IW%2F20220822%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20220822T151115Z&X-Amz-Expires=30&X-Amz-SignedHeaders=host&response-cache-control=max-age%3D30&response-content-disposition=filename%3D%22Client.exe%22&response-content-type=application%2Fvnd.microsoft.portable-executable&X-Amz-Signature=7a414a0fcc868b7d80f30830f513bc351d41bb7ffb37a2a76bf5fb785d0f5313
      Vary: Accept-Encoding
      X-Robots-Tag: noindex
      Date: Mon, 22 Aug 2022 15:11:15 GMT
      Content-Length: 0
      X-Varnish: 68412076
      Age: 0
      Via: 1.1 varnish (Varnish/6.0)
      Access-Control-Allow-Origin: *
      Connection: keep-alive
    • flag-us
      DNS
      situla.bitbit.net
      file.exe
      Remote address:
      8.8.8.8:53
      Request
      situla.bitbit.net
      IN A
      Response
      situla.bitbit.net
      IN A
      87.238.33.8
      situla.bitbit.net
      IN A
      87.238.33.7
    • flag-no
      GET
      https://situla.bitbit.net/filebin/7e40dc34e22b7829ed3b935404357dd0de9c234a40872fb529c9e0988713dd1d/9577c398546643ac7c41d72606e249c5cd74b4a1c1d1591e941f4b7503d9ce92?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=HZXB1J7T0UN34UN512IW%2F20220822%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20220822T151115Z&X-Amz-Expires=30&X-Amz-SignedHeaders=host&response-cache-control=max-age%3D30&response-content-disposition=filename%3D%22Client.exe%22&response-content-type=application%2Fvnd.microsoft.portable-executable&X-Amz-Signature=7a414a0fcc868b7d80f30830f513bc351d41bb7ffb37a2a76bf5fb785d0f5313
      file.exe
      Remote address:
      87.238.33.8:443
      Request
      GET /filebin/7e40dc34e22b7829ed3b935404357dd0de9c234a40872fb529c9e0988713dd1d/9577c398546643ac7c41d72606e249c5cd74b4a1c1d1591e941f4b7503d9ce92?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=HZXB1J7T0UN34UN512IW%2F20220822%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20220822T151115Z&X-Amz-Expires=30&X-Amz-SignedHeaders=host&response-cache-control=max-age%3D30&response-content-disposition=filename%3D%22Client.exe%22&response-content-type=application%2Fvnd.microsoft.portable-executable&X-Amz-Signature=7a414a0fcc868b7d80f30830f513bc351d41bb7ffb37a2a76bf5fb785d0f5313 HTTP/1.1
      Host: situla.bitbit.net
      Connection: Keep-Alive
      Response
      HTTP/1.1 200 OK
      Content-Length: 162304
      Accept-Ranges: bytes
      Last-Modified: Mon, 22 Aug 2022 12:17:47 GMT
      ETag: "1540a7d29d157a1f6b4cb07eb15f3009"
      Cache-Control: max-age=30
      Content-Disposition: filename="Client.exe"
      x-amz-request-id: tx00000000000000081408e-0063039c94-3e0cc50a-default
      Content-Type: application/vnd.microsoft.portable-executable
      Date: Mon, 22 Aug 2022 15:11:16 GMT
      Connection: Keep-Alive
    • flag-us
      GET
      https://www.bing.com/rb/5p/cj,nj/Jpqm_USeYFK0psp0vE_gjKH9hg8.js?bu=FI8mlCX5BaMlpSWnJaklsyWVJuQlmA76JYAmmSb5BfkFuiLbJZQOiw4&or=w
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /rb/5p/cj,nj/Jpqm_USeYFK0psp0vE_gjKH9hg8.js?bu=FI8mlCX5BaMlpSWnJaklsyWVJuQlmA76JYAmmSb5BfkFuiLbJZQOiw4&or=w HTTP/2.0
      host: www.bing.com
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept: */*
      accept-language: en-US
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      if-modified-since: Wed, 10 Aug 2022 20:05:31 GMT
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=6e19dba2&IPMID=1660336548848; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 304
      cache-control: public, max-age=432000
      content-type: application/x-javascript; charset=utf-8
      content-encoding: br
      last-modified: Tue, 09 Aug 2022 14:37:51 GMT
      vary: Accept-Encoding
      x-cache: TCP_HIT
      server: Kestrel
      access-control-allow-headers: *
      access-control-allow-origin: *
      x-xss-protection: 0
      timing-allow-origin: *
      cross-origin-resource-policy: cross-origin
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingrms"}]}
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-msedge-ref: Ref A: 1FB6B51540E64265BDBB289DE7D37A75 Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:07Z
      date: Mon, 22 Aug 2022 15:12:07 GMT
    • flag-us
      GET
      https://www.bing.com/manifest/threshold.appcache
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /manifest/threshold.appcache HTTP/2.0
      host: www.bing.com
      accept: */*
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      origin: https://www.bing.com
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=6e19dba2&IPMID=1660336548848; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=CPID=1661188326550&AC=1&CPH=db797c90; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 200
      cache-control: private
      content-length: 1230
      content-type: text/cache-manifest; charset=utf-8
      content-encoding: br
      vary: Accept-Encoding
      p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
      set-cookie: SUID=M; domain=.bing.com; expires=Tue, 23-Aug-2022 15:12:07 GMT; path=/; secure; HttpOnly; SameSite=None
      set-cookie: _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; domain=.bing.com; path=/; HttpOnly
      set-cookie: MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054; expires=Sat, 16-Sep-2023 15:12:07 GMT; path=/; HttpOnly
      set-cookie: _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC; domain=.bing.com; path=/; secure; SameSite=None
      set-cookie: SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=a00c4273&IPMID=1661188326550; domain=.bing.com; expires=Sat, 16-Sep-2023 15:12:07 GMT; path=/; secure; SameSite=None
      x-xss-protection: 0
      x-cache: CONFIG_NOCACHE
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-msedge-ref: Ref A: D1FC60A6941245C587A6F998B2754061 Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:07Z
      date: Mon, 22 Aug 2022 15:12:07 GMT
    • flag-us
      GET
      https://www.bing.com/rb/17/cj,nj/1FLtrEdHrNq7YDeeCYhb8ssigCI.js?bu=Dx8oW2dqbWReYZwBnwEokQEoogE&or=w
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /rb/17/cj,nj/1FLtrEdHrNq7YDeeCYhb8ssigCI.js?bu=Dx8oW2dqbWReYZwBnwEokQEoogE&or=w HTTP/2.0
      host: www.bing.com
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept: */*
      accept-language: en-US
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      if-modified-since: Tue, 09 Aug 2022 02:07:23 GMT
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=6e19dba2&IPMID=1660336548848; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=CPID=1661188326550&AC=1&CPH=db797c90; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 200
      cache-control: public, max-age=432000
      content-length: 8867
      content-type: application/x-javascript; charset=utf-8
      content-encoding: br
      last-modified: Thu, 18 Aug 2022 20:03:40 GMT
      vary: Accept-Encoding
      x-cache: TCP_HIT
      server: Kestrel
      access-control-allow-headers: *
      access-control-allow-origin: *
      x-xss-protection: 0
      timing-allow-origin: *
      cross-origin-resource-policy: cross-origin
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingrms"}]}
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-msedge-ref: Ref A: 19FF44A284E043A983223C44295FE5A4 Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:08Z
      date: Mon, 22 Aug 2022 15:12:07 GMT
    • flag-us
      GET
      https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /AS/API/WindowsCortanaPane/V2/Init HTTP/2.0
      host: www.bing.com
      accept: */*
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 200
      cache-control: private
      content-length: 58162
      content-type: text/html; charset=utf-8
      content-encoding: br
      vary: Accept-Encoding
      p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
      set-cookie: MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054; expires=Sat, 16-Sep-2023 15:12:08 GMT; path=/; HttpOnly
      x-xss-protection: 0
      x-ua-compatible: IE=edge
      x-cache: CONFIG_NOCACHE
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-msedge-ref: Ref A: 82440C10C20241CCBEA552D3EC1A50A8 Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:08Z
      date: Mon, 22 Aug 2022 15:12:07 GMT
    • flag-us
      POST
      https://www.bing.com/threshold/xls.aspx
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      POST /threshold/xls.aspx HTTP/2.0
      host: www.bing.com
      origin: https://www.bing.com
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept: */*
      accept-language: en-US
      content-type: text/xml
      x-msedge-externalexp: d-thshld39,d-thshld42,d-thshld77,d-thshldspcl40,lbsh-reverse
      x-msedge-externalexptype: JointCoord
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      content-length: 15219
      cache-control: no-cache
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 200
      cache-control: public, max-age=432000
      content-length: 4826
      content-type: text/css; charset=utf-8
      content-encoding: br
      last-modified: Wed, 01 Jun 2022 21:24:17 GMT
      vary: Accept-Encoding
      x-cache: TCP_HIT
      server: Kestrel
      access-control-allow-headers: *
      access-control-allow-origin: *
      x-xss-protection: 0
      timing-allow-origin: *
      cross-origin-resource-policy: cross-origin
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingrms"}]}
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-msedge-ref: Ref A: CDCF771116894FC0B274F109782B2A7A Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:08Z
      date: Mon, 22 Aug 2022 15:12:07 GMT
    • flag-us
      GET
      https://www.bing.com/rb/1a/cir2,ortl,cc,nc/9kAvRypYmWc9B8vB-LFOrkNKVL8.css?bu=C4kGxwKFA-AG3QXQBZwEPDw8PA&or=w
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /rb/1a/cir2,ortl,cc,nc/9kAvRypYmWc9B8vB-LFOrkNKVL8.css?bu=C4kGxwKFA-AG3QXQBZwEPDw8PA&or=w HTTP/2.0
      host: www.bing.com
      accept: */*
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30311771; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 204
      access-control-allow-origin: *
      x-cache: CONFIG_NOCACHE
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-msedge-ref: Ref A: 818A19068B924326A7327CBA7F69ED4A Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:08Z
      date: Mon, 22 Aug 2022 15:12:07 GMT
    • flag-us
      GET
      https://www.bing.com/rb/1a/cir2,ortl,cc,nc/Xk0n9ycPBpl3ibUiCDpx5bvphM0.css?bu=B_QBQ-YBhwE8PP4B&or=w
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /rb/1a/cir2,ortl,cc,nc/Xk0n9ycPBpl3ibUiCDpx5bvphM0.css?bu=B_QBQ-YBhwE8PP4B&or=w HTTP/2.0
      host: www.bing.com
      accept: */*
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30311771; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 200
      cache-control: public, max-age=432000
      content-length: 1516
      content-type: text/css; charset=utf-8
      content-encoding: br
      last-modified: Tue, 16 Aug 2022 23:10:41 GMT
      vary: Accept-Encoding
      x-cache: TCP_HIT
      server: Kestrel
      access-control-allow-headers: *
      access-control-allow-origin: *
      x-xss-protection: 0
      timing-allow-origin: *
      cross-origin-resource-policy: cross-origin
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingrms"}]}
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-msedge-ref: Ref A: EE4CD7D777F941ED8E173214DF619D4D Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:08Z
      date: Mon, 22 Aug 2022 15:12:08 GMT
    • flag-us
      GET
      https://www.bing.com/rb/45/ortl,cc,nc/8yOt-qMgl3wFFpnXBbdaeUrdWpM.css?bu=A4gCjAKPAg&or=w
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /rb/45/ortl,cc,nc/8yOt-qMgl3wFFpnXBbdaeUrdWpM.css?bu=A4gCjAKPAg&or=w HTTP/2.0
      host: www.bing.com
      accept: */*
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      if-modified-since: Sun, 07 Aug 2022 11:06:45 GMT
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30311771; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 200
      cache-control: public, max-age=432000
      content-length: 3508
      content-type: text/css; charset=utf-8
      content-encoding: br
      last-modified: Sun, 21 Aug 2022 16:18:22 GMT
      vary: Accept-Encoding
      x-cache: TCP_HIT
      server: Kestrel
      access-control-allow-headers: *
      access-control-allow-origin: *
      x-xss-protection: 0
      timing-allow-origin: *
      cross-origin-resource-policy: cross-origin
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingrms"}]}
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-msedge-ref: Ref A: B1DFA4394E934D9382ECD65EAD425BFE Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:08Z
      date: Mon, 22 Aug 2022 15:12:08 GMT
    • flag-us
      GET
      https://www.bing.com/rb/6L/cir2,ortl,cc,nc/QWjhdPA8Q0Hzj9-dWwSBkC3YuT0.css?bu=GOYG4wb4BqMH7wbsBt0GnQf7Bv4G3QbdBt0GhwfdBo8HmAeSB90G3QbdBqYH3QbNBw&or=w
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /rb/6L/cir2,ortl,cc,nc/QWjhdPA8Q0Hzj9-dWwSBkC3YuT0.css?bu=GOYG4wb4BqMH7wbsBt0GnQf7Bv4G3QbdBt0GhwfdBo8HmAeSB90G3QbdBqYH3QbNBw&or=w HTTP/2.0
      host: www.bing.com
      accept: */*
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30311771; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 200
      cache-control: public, max-age=432000
      content-length: 32814
      content-type: text/css; charset=utf-8
      content-encoding: br
      last-modified: Thu, 18 Aug 2022 01:53:09 GMT
      vary: Accept-Encoding
      x-cache: TCP_HIT
      server: Kestrel
      access-control-allow-headers: *
      access-control-allow-origin: *
      x-xss-protection: 0
      timing-allow-origin: *
      cross-origin-resource-policy: cross-origin
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingrms"}]}
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-msedge-ref: Ref A: 4B9C6ADA59F44D97A5C7ED21475F41FA Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:08Z
      date: Mon, 22 Aug 2022 15:12:08 GMT
    • flag-us
      GET
      https://www.bing.com/rb/6L/ortl,cc,nc/QNBBNqWD9F_Blep-UqQSqnMp-FI.css?bu=Ad0G&or=w
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /rb/6L/ortl,cc,nc/QNBBNqWD9F_Blep-UqQSqnMp-FI.css?bu=Ad0G&or=w HTTP/2.0
      host: www.bing.com
      accept: */*
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30311771; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 200
      cache-control: public, max-age=432000
      content-length: 10
      content-type: text/css; charset=utf-8
      content-encoding: br
      last-modified: Thu, 18 Aug 2022 11:50:53 GMT
      vary: Accept-Encoding
      x-cache: TCP_HIT
      server: Kestrel
      access-control-allow-headers: *
      access-control-allow-origin: *
      x-xss-protection: 0
      timing-allow-origin: *
      cross-origin-resource-policy: cross-origin
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingrms"}]}
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-msedge-ref: Ref A: E86EB07393134874857325F856A1019E Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:08Z
      date: Mon, 22 Aug 2022 15:12:08 GMT
    • flag-us
      GET
      https://www.bing.com/rp/-ijWDOoNJ6BlbsCOGYCDxI9TjTg.br.js
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /rp/-ijWDOoNJ6BlbsCOGYCDxI9TjTg.br.js HTTP/2.0
      host: www.bing.com
      accept: */*
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30311771; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 200
      cache-control: public, max-age=432000, no-transform, immutable
      content-length: 34014
      content-type: text/javascript; charset=utf-8
      content-encoding: br
      content-md5: UmvBBrHt/l/LNKD+RMU/ww==
      last-modified: Thu, 18 Aug 2022 17:28:08 GMT
      etag: 0x8DA813F0444BA51
      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
      x-cache: TCP_HIT
      x-ms-request-id: f02a8bbd-201e-00b9-5d69-b3732f000000
      x-ms-version: 2009-09-19
      x-ms-lease-status: unlocked
      x-ms-blob-type: BlockBlob
      access-control-allow-origin: *
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-azure-ref-originshield: Ref A: 4CCD8C1E479C40669383ADE4C53ADEE1 Ref B: AMS04EDGE1117 Ref C: 2022-08-19T01:53:37Z
      timing-allow-origin: *
      cross-origin-resource-policy: cross-origin
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
      x-msedge-ref: Ref A: 877B5025151943EA923BE7C4B220F35A Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:08Z
      date: Mon, 22 Aug 2022 15:12:08 GMT
    • flag-us
      GET
      https://www.bing.com/rp/-pBqIguxLDC5C1YjXzlKax0RNqE.br.js
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /rp/-pBqIguxLDC5C1YjXzlKax0RNqE.br.js HTTP/2.0
      host: www.bing.com
      accept: */*
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      if-modified-since: Tue, 19 Jul 2022 03:31:44 GMT
      if-none-match: 0x8DA693733E6F4F1
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30311771; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 200
      cache-control: public, max-age=432000, no-transform, immutable
      content-length: 39310
      content-type: text/javascript; charset=utf-8
      content-encoding: br
      content-md5: lCAyfcZKVwchJhQY4pLN4g==
      last-modified: Wed, 17 Aug 2022 05:04:05 GMT
      etag: 0x8DA800DE892B7AA
      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
      x-cache: TCP_HIT
      x-ms-request-id: 47d0db85-101e-0024-44b5-b28195000000
      x-ms-version: 2009-09-19
      x-ms-lease-status: unlocked
      x-ms-blob-type: BlockBlob
      access-control-allow-origin: *
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-azure-ref-originshield: Ref A: 7F008D568EC44D199BD83CA0A4681AAB Ref B: AMS04EDGE1510 Ref C: 2022-08-18T18:10:58Z
      timing-allow-origin: *
      cross-origin-resource-policy: cross-origin
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
      x-msedge-ref: Ref A: F475C7F87C554B0FB1609674B6033CC5 Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:08Z
      date: Mon, 22 Aug 2022 15:12:08 GMT
    • flag-us
      GET
      https://www.bing.com/rp/26Pt5PvK51HgeLA2eGQca_iZ1j0.br.js
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /rp/26Pt5PvK51HgeLA2eGQca_iZ1j0.br.js HTTP/2.0
      host: www.bing.com
      accept: */*
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      if-modified-since: Mon, 23 May 2022 23:45:46 GMT
      if-none-match: 0x8DA3D165BFEF325
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30311771; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 200
      cache-control: public, max-age=432000, no-transform, immutable
      content-length: 1670
      content-type: text/javascript; charset=utf-8
      content-encoding: br
      content-md5: +urXGiWCqGnl2q/na4mVcg==
      last-modified: Wed, 17 Aug 2022 05:08:18 GMT
      etag: 0x8DA800E7FA88E6D
      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
      x-cache: TCP_HIT
      x-ms-request-id: 9f182099-101e-0046-1516-b343b2000000
      x-ms-version: 2009-09-19
      x-ms-lease-status: unlocked
      x-ms-blob-type: BlockBlob
      access-control-allow-origin: *
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-azure-ref-originshield: Ref A: F9A2211AABCF4BBB9D9404725B0035F5 Ref B: AMS04EDGE1118 Ref C: 2022-08-18T19:00:22Z
      timing-allow-origin: *
      cross-origin-resource-policy: cross-origin
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
      x-msedge-ref: Ref A: 7D903167F1DB469184EEE5FCB203A265 Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:08Z
      date: Mon, 22 Aug 2022 15:12:08 GMT
    • flag-us
      GET
      https://www.bing.com/rp/40U_9sQqMsu5_oBnZV25nq4Swi4.br.js
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /rp/40U_9sQqMsu5_oBnZV25nq4Swi4.br.js HTTP/2.0
      host: www.bing.com
      accept: */*
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30311771; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 200
      cache-control: public, max-age=432000, no-transform, immutable
      content-length: 16122
      content-type: text/javascript; charset=utf-8
      content-encoding: br
      content-md5: zObq8F/7/aPkBYW/XJwTRQ==
      last-modified: Wed, 17 Aug 2022 23:57:57 GMT
      etag: 0x8DA80AC4F1E84A2
      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
      x-cache: TCP_HIT
      x-ms-request-id: 780ec87a-801e-007b-07d5-b235a9000000
      x-ms-version: 2009-09-19
      x-ms-lease-status: unlocked
      x-ms-blob-type: BlockBlob
      access-control-allow-origin: *
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-azure-ref-originshield: Ref A: 543B185B35A2444EBDFE4A74D73F9611 Ref B: AMS04EDGE1317 Ref C: 2022-08-18T23:02:14Z
      timing-allow-origin: *
      cross-origin-resource-policy: cross-origin
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
      x-msedge-ref: Ref A: D568E1CCCA5B4A4AAF035CE2E06E2EEA Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:08Z
      date: Mon, 22 Aug 2022 15:12:08 GMT
    • flag-us
      GET
      https://www.bing.com/rp/53v2UapkP691FR6Fvybjpk4_rZU.br.js
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /rp/53v2UapkP691FR6Fvybjpk4_rZU.br.js HTTP/2.0
      host: www.bing.com
      accept: */*
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      if-modified-since: Wed, 27 Jul 2022 00:40:14 GMT
      if-none-match: 0x8DA6F6891E7AF1B
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30311771; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 200
      cache-control: public, max-age=432000, no-transform, immutable
      content-length: 9749
      content-type: text/javascript; charset=utf-8
      content-encoding: br
      content-md5: r2NHu+ASAMvz/nwPq9pRyg==
      last-modified: Wed, 17 Aug 2022 05:13:29 GMT
      etag: 0x8DA800F38D6CDD6
      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
      x-cache: TCP_HIT
      x-ms-request-id: fd387994-501e-00c1-1080-b2d0d7000000
      x-ms-version: 2009-09-19
      x-ms-lease-status: unlocked
      x-ms-blob-type: BlockBlob
      access-control-allow-origin: *
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-azure-ref-originshield: Ref A: 0C5AF3A217BB4D5D8B1053AD063F4A09 Ref B: AMS04EDGE1419 Ref C: 2022-08-22T09:06:06Z
      timing-allow-origin: *
      cross-origin-resource-policy: cross-origin
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
      x-msedge-ref: Ref A: 43083FCFFBD647699D05E8BB3DBD14AC Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:08Z
      date: Mon, 22 Aug 2022 15:12:08 GMT
    • flag-us
      GET
      https://www.bing.com/rp/6mDplh2-tnrwx7GcRbXrFrcA_p8.br.js
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /rp/6mDplh2-tnrwx7GcRbXrFrcA_p8.br.js HTTP/2.0
      host: www.bing.com
      accept: */*
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      if-modified-since: Tue, 14 Jun 2022 17:06:30 GMT
      if-none-match: 0x8DA4E283A2D3821
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30311771; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 200
      cache-control: public, max-age=432000, no-transform, immutable
      content-length: 1383
      content-type: text/javascript; charset=utf-8
      content-encoding: br
      content-md5: 6b+2ULVaGam+Qz8AuXnr/g==
      last-modified: Wed, 17 Aug 2022 05:16:10 GMT
      etag: 0x8DA800F98B8C749
      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
      x-cache: TCP_HIT
      x-ms-request-id: 5e15931f-301e-000c-687b-b2e03d000000
      x-ms-version: 2009-09-19
      x-ms-lease-status: unlocked
      x-ms-blob-type: BlockBlob
      access-control-allow-origin: *
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-azure-ref-originshield: Ref A: E15A6D4B6712474F87D74A553A8208D9 Ref B: AMS04EDGE1416 Ref C: 2022-08-18T22:46:42Z
      timing-allow-origin: *
      cross-origin-resource-policy: cross-origin
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
      x-msedge-ref: Ref A: F65BB32E70784030829106A12026EF73 Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:08Z
      date: Mon, 22 Aug 2022 15:12:08 GMT
    • flag-us
      GET
      https://www.bing.com/rp/98-tFzBbrLP3oaKdmZtyZ4BBBI4.br.js
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /rp/98-tFzBbrLP3oaKdmZtyZ4BBBI4.br.js HTTP/2.0
      host: www.bing.com
      accept: */*
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      if-modified-since: Thu, 28 Jan 2021 01:44:49 GMT
      if-none-match: 0x8D8C32E4CDC654C
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30311771; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 304
      cache-control: public, max-age=432000
      content-type: application/x-javascript; charset=utf-8
      content-encoding: br
      content-md5: xVtvk8m0iq8KaH8JY6bhxg==
      last-modified: Thu, 28 Jan 2021 01:44:49 GMT
      etag: 0x8D8C32E4CDC654C
      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
      x-cache: TCP_HIT
      x-ms-request-id: c8fbc865-301e-00d7-6f7f-b22600000000
      x-ms-version: 2009-09-19
      x-ms-lease-status: unlocked
      x-ms-blob-type: BlockBlob
      access-control-allow-origin: *
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-azure-ref-originshield: Ref A: DEF6860929644660961743FDAE7689A4 Ref B: AMS04EDGE1312 Ref C: 2022-08-18T19:19:32Z
      timing-allow-origin: *
      cross-origin-resource-policy: cross-origin
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
      x-msedge-ref: Ref A: FE8A6D4D7F7B4B598137FF575A7EA2B9 Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:08Z
      date: Mon, 22 Aug 2022 15:12:08 GMT
    • flag-us
      GET
      https://www.bing.com/rp/BQR--Mi6Hdug9aUgfjMzORag63E.br.js
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /rp/BQR--Mi6Hdug9aUgfjMzORag63E.br.js HTTP/2.0
      host: www.bing.com
      accept: */*
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      if-modified-since: Mon, 23 Nov 2020 21:26:10 GMT
      if-none-match: 0x8D88FF665839903
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30311771; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 304
      cache-control: public, max-age=432000
      content-type: application/x-javascript; charset=utf-8
      content-encoding: br
      content-md5: uh4a6uPJ/QiEZGs/QDfl5w==
      last-modified: Mon, 23 Nov 2020 21:26:10 GMT
      etag: 0x8D88FF665839903
      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
      x-cache: TCP_HIT
      x-ms-request-id: 1b756521-901e-0005-0699-b1a5ee000000
      x-ms-version: 2009-09-19
      x-ms-lease-status: unlocked
      x-ms-blob-type: BlockBlob
      access-control-allow-origin: *
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-azure-ref-originshield: Ref A: AA5EC88597244333BC4E0C1A204A5FFA Ref B: AMS04EDGE1521 Ref C: 2022-08-18T21:24:57Z
      timing-allow-origin: *
      cross-origin-resource-policy: cross-origin
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
      x-msedge-ref: Ref A: F4F4A711B1D3432194F3204CB87A9CEC Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:08Z
      date: Mon, 22 Aug 2022 15:12:08 GMT
    • flag-us
      GET
      https://www.bing.com/rp/BVRtSKnC-nkUJXVttThHX1waGF8.br.js
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /rp/BVRtSKnC-nkUJXVttThHX1waGF8.br.js HTTP/2.0
      host: www.bing.com
      accept: */*
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30311771; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 200
      cache-control: public, max-age=432000, no-transform, immutable
      content-length: 17733
      content-type: text/javascript; charset=utf-8
      content-encoding: br
      content-md5: Hgqq9TBH2GksgNpJ7gAu9w==
      last-modified: Wed, 17 Aug 2022 15:38:15 GMT
      etag: 0x8DA806680209EAC
      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
      x-cache: TCP_HIT
      x-ms-request-id: 42f2f4b4-b01e-0084-3fd5-b20534000000
      x-ms-version: 2009-09-19
      x-ms-lease-status: unlocked
      x-ms-blob-type: BlockBlob
      access-control-allow-origin: *
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-azure-ref-originshield: Ref A: A7BFE100D04E496EA0F934C27CEADE64 Ref B: AMS04EDGE1119 Ref C: 2022-08-18T19:19:32Z
      timing-allow-origin: *
      cross-origin-resource-policy: cross-origin
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
      x-msedge-ref: Ref A: 5E87D8ADC12A4BE68409B3E2203F13A6 Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:08Z
      date: Mon, 22 Aug 2022 15:12:08 GMT
    • flag-us
      GET
      https://www.bing.com/rp/Cj4mQnDN_eMyYEqsEbjRrJ2Ttec.br.js
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /rp/Cj4mQnDN_eMyYEqsEbjRrJ2Ttec.br.js HTTP/2.0
      host: www.bing.com
      accept: */*
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      if-modified-since: Wed, 24 Jun 2020 05:06:01 GMT
      if-none-match: 0x8D817FC4A10933C
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30311771; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 304
      cache-control: public, max-age=432000
      content-type: application/x-javascript; charset=utf-8
      content-encoding: br
      content-md5: 3WhJ+OYKE/V46pTyaMnODg==
      last-modified: Wed, 24 Jun 2020 05:06:01 GMT
      etag: 0x8D817FC4A10933C
      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
      x-cache: TCP_HIT
      x-ms-request-id: 6ec113c6-201e-004d-797f-b2b8d9000000
      x-ms-version: 2009-09-19
      x-ms-lease-status: unlocked
      x-ms-blob-type: BlockBlob
      access-control-allow-origin: *
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-azure-ref-originshield: Ref A: 519274CA0F5049B3B4D5D7B8831D9429 Ref B: AMS04EDGE1416 Ref C: 2022-08-18T22:38:05Z
      timing-allow-origin: *
      cross-origin-resource-policy: cross-origin
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
      x-msedge-ref: Ref A: F122508EBE2846FE8AE43FF7F00DE7AC Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:09Z
      date: Mon, 22 Aug 2022 15:12:08 GMT
    • flag-us
      GET
      https://www.bing.com/rp/DK-F0W-t_TtUZn6MPb8LKLCDvgs.br.js
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /rp/DK-F0W-t_TtUZn6MPb8LKLCDvgs.br.js HTTP/2.0
      host: www.bing.com
      accept: */*
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      if-modified-since: Thu, 04 Aug 2022 21:23:05 GMT
      if-none-match: 0x8DA765F8536AC0A
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30311771; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 304
      cache-control: public, max-age=432000, no-transform, immutable
      content-type: text/javascript; charset=utf-8
      content-encoding: br
      content-md5: nd8tFZ0545rOuAJl82jiSw==
      last-modified: Thu, 04 Aug 2022 21:23:05 GMT
      etag: 0x8DA765F8536AC0A
      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
      x-cache: TCP_HIT
      x-ms-request-id: 67b702c7-f01e-0095-7293-b29f80000000
      x-ms-version: 2009-09-19
      x-ms-lease-status: unlocked
      x-ms-blob-type: BlockBlob
      access-control-allow-origin: *
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-azure-ref-originshield: Ref A: 02B03CBC542A4172A88893DA97E89FF8 Ref B: AMS04EDGE1407 Ref C: 2022-08-18T22:46:42Z
      timing-allow-origin: *
      cross-origin-resource-policy: cross-origin
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
      x-msedge-ref: Ref A: 0B2305823AE64D04929100F5ADD3234A Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:09Z
      date: Mon, 22 Aug 2022 15:12:08 GMT
    • flag-us
      GET
      https://www.bing.com/rp/EWL8d9zir1RT2nx4rboBo_IHlwc.br.js
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /rp/EWL8d9zir1RT2nx4rboBo_IHlwc.br.js HTTP/2.0
      host: www.bing.com
      accept: */*
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      if-modified-since: Thu, 14 Jul 2022 00:41:53 GMT
      if-none-match: 0x8DA6531A5A896FB
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30311771; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 200
      cache-control: public, max-age=432000, no-transform, immutable
      content-length: 18703
      content-type: text/javascript; charset=utf-8
      content-encoding: br
      content-md5: kiQdVY8eSNmAtQR/trGQBQ==
      last-modified: Wed, 17 Aug 2022 05:30:22 GMT
      etag: 0x8DA801194B697CE
      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
      x-cache: TCP_HIT
      x-ms-request-id: 00cb0e2e-801e-0044-4944-b3fd0a000000
      x-ms-version: 2009-09-19
      x-ms-lease-status: unlocked
      x-ms-blob-type: BlockBlob
      access-control-allow-origin: *
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-azure-ref-originshield: Ref A: BB9EDD586CEF4CD89B5F95967F5642DB Ref B: AMS04EDGE1517 Ref C: 2022-08-22T05:11:57Z
      timing-allow-origin: *
      cross-origin-resource-policy: cross-origin
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
      x-msedge-ref: Ref A: 6B70E81B2ECA48CEB4A402A5397EE3B2 Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:09Z
      date: Mon, 22 Aug 2022 15:12:08 GMT
    • flag-us
      GET
      https://www.bing.com/rp/FfpNMdo0vKfG5ZTD5JKxtjVlD2c.br.js
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /rp/FfpNMdo0vKfG5ZTD5JKxtjVlD2c.br.js HTTP/2.0
      host: www.bing.com
      accept: */*
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30311771; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 200
      cache-control: public, max-age=432000, no-transform, immutable
      content-length: 20138
      content-type: text/javascript; charset=utf-8
      content-encoding: br
      content-md5: 2YNe1Au4t3Roo3Jf18n1TA==
      last-modified: Sat, 13 Aug 2022 07:33:09 GMT
      etag: 0x8DA7CFE122EF7C2
      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
      x-cache: TCP_HIT
      x-ms-request-id: 32c9a59e-d01e-00cf-7f55-aff967000000
      x-ms-version: 2009-09-19
      x-ms-lease-status: unlocked
      x-ms-blob-type: BlockBlob
      access-control-allow-origin: *
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-azure-ref-originshield: Ref A: 803713B4E76F491EB2D9E753D121F694 Ref B: AMS04EDGE1420 Ref C: 2022-08-18T19:00:22Z
      timing-allow-origin: *
      cross-origin-resource-policy: cross-origin
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
      x-msedge-ref: Ref A: 5EB312041F324FF892983EC9152F8930 Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:09Z
      date: Mon, 22 Aug 2022 15:12:08 GMT
    • flag-us
      GET
      https://www.bing.com/rp/MAi8ZrMgFhG81tZ07Arc2JEjTY8.br.js
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /rp/MAi8ZrMgFhG81tZ07Arc2JEjTY8.br.js HTTP/2.0
      host: www.bing.com
      accept: */*
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      if-modified-since: Wed, 24 Jun 2020 05:07:14 GMT
      if-none-match: 0x8D817FC756864AE
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30311771; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 200
      cache-control: public, max-age=432000, no-transform, immutable
      content-length: 37463
      content-type: application/x-javascript; charset=utf-8
      content-encoding: br
      content-md5: 4csgy3MnorVZ2sztEWGSow==
      last-modified: Wed, 17 Aug 2022 05:48:13 GMT
      etag: 0x8DA80141326C3A7
      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
      x-cache: TCP_HIT
      x-ms-request-id: 28e07709-701e-008b-04b7-b27358000000
      x-ms-version: 2009-09-19
      x-ms-lease-status: unlocked
      x-ms-blob-type: BlockBlob
      access-control-allow-origin: *
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-azure-ref-originshield: Ref A: 5BFE1426BEAE4A81A819EC5A707610C5 Ref B: AMS04EDGE1309 Ref C: 2022-08-18T21:30:42Z
      timing-allow-origin: *
      cross-origin-resource-policy: cross-origin
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
      x-msedge-ref: Ref A: 4F8091EBC8BE4D9592F3643E73F0A302 Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:09Z
      date: Mon, 22 Aug 2022 15:12:08 GMT
    • flag-us
      GET
      https://www.bing.com/rp/PN5lNRi5OMLPR9qG64XlIV-xdNk.br.js
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /rp/PN5lNRi5OMLPR9qG64XlIV-xdNk.br.js HTTP/2.0
      host: www.bing.com
      accept: */*
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      if-modified-since: Wed, 27 Jul 2022 00:40:14 GMT
      if-none-match: 0x8DA6F6892636689
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30311771; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 200
      cache-control: public, max-age=432000, no-transform, immutable
      content-length: 3575
      content-type: text/javascript; charset=utf-8
      content-encoding: br
      content-md5: e9a3ZbQzTRkvSaH2r+UZNQ==
      last-modified: Wed, 17 Aug 2022 05:54:14 GMT
      etag: 0x8DA8014EA854CFA
      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
      x-cache: TCP_HIT
      x-ms-request-id: 05a594f8-501e-00ee-0bdd-b2dd1c000000
      x-ms-version: 2009-09-19
      x-ms-lease-status: unlocked
      x-ms-blob-type: BlockBlob
      access-control-allow-origin: *
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-azure-ref-originshield: Ref A: 49BBA4750C1844A8ACF42A8583B6D84E Ref B: AMS04EDGE1311 Ref C: 2022-08-18T21:30:43Z
      timing-allow-origin: *
      cross-origin-resource-policy: cross-origin
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
      x-msedge-ref: Ref A: F8E393DEFAEE4631B196DD1B9DAB2FFE Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:09Z
      date: Mon, 22 Aug 2022 15:12:08 GMT
    • flag-us
      GET
      https://www.bing.com/rp/PvVze1dcpBMAPV5PYO5uw3GriyY.br.js
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /rp/PvVze1dcpBMAPV5PYO5uw3GriyY.br.js HTTP/2.0
      host: www.bing.com
      accept: */*
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      if-modified-since: Thu, 28 Jan 2021 01:44:49 GMT
      if-none-match: 0x8D8C32E4CD7A977
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30311771; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 304
      cache-control: public, max-age=432000
      content-type: application/x-javascript; charset=utf-8
      content-encoding: br
      content-md5: d41OEXAJO8PyxDM8Cad0Pw==
      last-modified: Thu, 28 Jan 2021 01:44:49 GMT
      etag: 0x8D8C32E4CD7A977
      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
      x-cache: TCP_HIT
      x-ms-request-id: a9c4f9c7-601e-005c-4350-b0226d000000
      x-ms-version: 2009-09-19
      x-ms-lease-status: unlocked
      x-ms-blob-type: BlockBlob
      access-control-allow-origin: *
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-azure-ref-originshield: Ref A: 799F75A8132E49A2B57DB82251F0F7E2 Ref B: AMS04EDGE1117 Ref C: 2022-08-18T21:06:09Z
      timing-allow-origin: *
      cross-origin-resource-policy: cross-origin
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
      x-msedge-ref: Ref A: 82A9F0292E01440FB6606B67907557C6 Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:09Z
      date: Mon, 22 Aug 2022 15:12:08 GMT
    • flag-us
      GET
      https://www.bing.com/rp/QIrBtzn_Y-0xqNrrJhAvklMUH4g.br.js
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /rp/QIrBtzn_Y-0xqNrrJhAvklMUH4g.br.js HTTP/2.0
      host: www.bing.com
      accept: */*
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      if-modified-since: Wed, 27 Jul 2022 00:40:13 GMT
      if-none-match: 0x8DA6F68915FD5C5
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30311771; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 304
      cache-control: public, max-age=432000
      content-type: text/javascript; charset=utf-8
      content-encoding: br
      content-md5: rk/yJ8YHaICXl5USb0A9AQ==
      last-modified: Wed, 27 Jul 2022 00:40:13 GMT
      etag: 0x8DA6F68915FD5C5
      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
      x-cache: TCP_HIT
      x-ms-request-id: 9de64020-a01e-0053-2b4f-b05401000000
      x-ms-version: 2009-09-19
      x-ms-lease-status: unlocked
      x-ms-blob-type: BlockBlob
      access-control-allow-origin: *
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-azure-ref-originshield: Ref A: 505B5D1EBB014F9BB7AFC93C3D7A52C2 Ref B: AMS04EDGE1208 Ref C: 2022-08-19T15:05:56Z
      timing-allow-origin: *
      cross-origin-resource-policy: cross-origin
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
      x-msedge-ref: Ref A: 2663BC7C25064430B49E6555333ACF7A Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:09Z
      date: Mon, 22 Aug 2022 15:12:09 GMT
    • flag-us
      GET
      https://www.bing.com/rp/WeaqEJfS9Yrl9laS6TOxoSX0WqM.br.js
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /rp/WeaqEJfS9Yrl9laS6TOxoSX0WqM.br.js HTTP/2.0
      host: www.bing.com
      accept: */*
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      if-modified-since: Wed, 27 Jul 2022 00:40:15 GMT
      if-none-match: 0x8DA6F6892BE8459
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30311771; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 200
      cache-control: public, max-age=432000, no-transform, immutable
      content-length: 943
      content-type: text/javascript; charset=utf-8
      content-encoding: br
      content-md5: lxgtszuiixL1L66T8UX4NA==
      last-modified: Wed, 17 Aug 2022 06:08:35 GMT
      etag: 0x8DA8016EB530E03
      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
      x-cache: TCP_HIT
      x-ms-request-id: b87bff81-e01e-0042-7e81-b2ceb5000000
      x-ms-version: 2009-09-19
      x-ms-lease-status: unlocked
      x-ms-blob-type: BlockBlob
      access-control-allow-origin: *
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-azure-ref-originshield: Ref A: 649D6852628A45EAB78594761B462DC2 Ref B: AMS04EDGE1117 Ref C: 2022-08-18T19:50:33Z
      timing-allow-origin: *
      cross-origin-resource-policy: cross-origin
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
      x-msedge-ref: Ref A: 57137836B1864A14802D606DF07A6CEB Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:09Z
      date: Mon, 22 Aug 2022 15:12:09 GMT
    • flag-us
      GET
      https://www.bing.com/rp/Yi3Flkft8YS8nbd9qCHjIlXAHPg.br.js
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /rp/Yi3Flkft8YS8nbd9qCHjIlXAHPg.br.js HTTP/2.0
      host: www.bing.com
      accept: */*
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      if-modified-since: Mon, 23 Nov 2020 21:26:03 GMT
      if-none-match: 0x8D88FF661D9DD82
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30311771; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 304
      cache-control: public, max-age=432000
      content-type: application/x-javascript; charset=utf-8
      content-encoding: br
      content-md5: uuWAzBljEQDunHIzhB3sjQ==
      last-modified: Mon, 23 Nov 2020 21:26:03 GMT
      etag: 0x8D88FF661D9DD82
      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
      x-cache: TCP_HIT
      x-ms-request-id: 627ebdb5-c01e-00ec-74c2-b163a4000000
      x-ms-version: 2009-09-19
      x-ms-lease-status: unlocked
      x-ms-blob-type: BlockBlob
      access-control-allow-origin: *
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-azure-ref-originshield: Ref A: 64D1CCB826624989BF4E44519B7836E5 Ref B: AMS04EDGE1116 Ref C: 2022-08-18T19:43:47Z
      timing-allow-origin: *
      cross-origin-resource-policy: cross-origin
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
      x-msedge-ref: Ref A: 89227E4718BB4F0DA9AABB902B60AE64 Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:09Z
      date: Mon, 22 Aug 2022 15:12:09 GMT
    • flag-us
      GET
      https://www.bing.com/rp/Z_GJ62uUjIGBtHsKSBYBwY74EHY.br.js
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /rp/Z_GJ62uUjIGBtHsKSBYBwY74EHY.br.js HTTP/2.0
      host: www.bing.com
      accept: */*
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      if-modified-since: Tue, 14 Jun 2022 17:07:02 GMT
      if-none-match: 0x8DA4E284D474ACD
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30311771; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 200
      cache-control: public, max-age=432000, no-transform, immutable
      content-length: 1762
      content-type: text/javascript; charset=utf-8
      content-encoding: br
      content-md5: 99cPrYSyWb4/aOqp61s3oQ==
      last-modified: Wed, 17 Aug 2022 06:14:27 GMT
      etag: 0x8DA8017BD7CC827
      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
      x-cache: TCP_HIT
      x-ms-request-id: 45ee6c77-501e-0078-2483-b2d4cd000000
      x-ms-version: 2009-09-19
      x-ms-lease-status: unlocked
      x-ms-blob-type: BlockBlob
      access-control-allow-origin: *
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-azure-ref-originshield: Ref A: 8606D8B0AA05445581BF836097C82AEF Ref B: AMS04EDGE1119 Ref C: 2022-08-18T20:58:28Z
      timing-allow-origin: *
      cross-origin-resource-policy: cross-origin
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
      x-msedge-ref: Ref A: BA3542665A6D4B26A490A56E82AD1AEA Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:09Z
      date: Mon, 22 Aug 2022 15:12:09 GMT
    • flag-us
      GET
      https://www.bing.com/rp/_F0M0yoTmc2b-_eS3W0Eu-fGENs.br.js
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /rp/_F0M0yoTmc2b-_eS3W0Eu-fGENs.br.js HTTP/2.0
      host: www.bing.com
      accept: */*
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      if-modified-since: Thu, 02 Sep 2021 00:09:13 GMT
      if-none-match: 0x8D96DA5E51EBE56
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30311771; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 200
      cache-control: public, max-age=432000, no-transform, immutable
      content-length: 5233
      content-type: text/javascript; charset=utf-8
      content-encoding: br
      content-md5: WieVU5mDjosPKXlzxtw5OQ==
      last-modified: Wed, 17 Aug 2022 06:15:49 GMT
      etag: 0x8DA8017EE79A2A4
      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
      x-cache: TCP_HIT
      x-ms-request-id: d366ada1-601e-0097-3179-b22138000000
      x-ms-version: 2009-09-19
      x-ms-lease-status: unlocked
      x-ms-blob-type: BlockBlob
      access-control-allow-origin: *
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-azure-ref-originshield: Ref A: FB70FEE6A6C9427F9A4BBC9519E0EEA0 Ref B: AMS04EDGE1411 Ref C: 2022-08-18T21:24:57Z
      timing-allow-origin: *
      cross-origin-resource-policy: cross-origin
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
      x-msedge-ref: Ref A: 0CC1639E4DB44E4180C0D9C757927BB7 Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:09Z
      date: Mon, 22 Aug 2022 15:12:09 GMT
    • flag-us
      GET
      https://www.bing.com/rp/_UuhVxYdoujMCo65q2K3CJYHYBM.br.js
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /rp/_UuhVxYdoujMCo65q2K3CJYHYBM.br.js HTTP/2.0
      host: www.bing.com
      accept: */*
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      if-modified-since: Thu, 30 Jun 2022 18:01:00 GMT
      if-none-match: 0x8DA5AC27DA912D0
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30311771; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 304
      cache-control: public, max-age=432000
      content-type: text/javascript; charset=utf-8
      content-encoding: br
      content-md5: iOKit25aGsONspp6Vv3ieQ==
      last-modified: Thu, 30 Jun 2022 18:01:00 GMT
      etag: 0x8DA5AC27DA912D0
      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
      x-cache: TCP_HIT
      x-ms-request-id: 0481a40a-701e-006f-248e-b27dc6000000
      x-ms-version: 2009-09-19
      x-ms-lease-status: unlocked
      x-ms-blob-type: BlockBlob
      access-control-allow-origin: *
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-azure-ref-originshield: Ref A: EAF13148C5AF445B81E9309CF1EBA834 Ref B: AMS04EDGE1321 Ref C: 2022-08-21T10:19:36Z
      timing-allow-origin: *
      cross-origin-resource-policy: cross-origin
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
      x-msedge-ref: Ref A: 6752AC7A998A4F8D89074EE020268167 Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:09Z
      date: Mon, 22 Aug 2022 15:12:09 GMT
    • flag-us
      GET
      https://www.bing.com/rp/bhSlnVqmEsrnxgWPMYtgH4wjRo8.br.js
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /rp/bhSlnVqmEsrnxgWPMYtgH4wjRo8.br.js HTTP/2.0
      host: www.bing.com
      accept: */*
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30311771; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 200
      cache-control: public, max-age=432000, no-transform, immutable
      content-length: 30729
      content-type: text/javascript; charset=utf-8
      content-encoding: br
      content-md5: +78/HmT9ehjpYwchrdlRig==
      last-modified: Fri, 19 Aug 2022 18:06:52 GMT
      etag: 0x8DA820D983CD3DF
      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
      x-cache: TCP_HIT
      x-ms-request-id: 6b905bb5-901e-00f1-2937-b46e18000000
      x-ms-version: 2009-09-19
      x-ms-lease-status: unlocked
      x-ms-blob-type: BlockBlob
      access-control-allow-origin: *
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-azure-ref-originshield: Ref A: 6F8BD9A12EE940738560AE979722457A Ref B: AMS04EDGE1412 Ref C: 2022-08-20T02:13:57Z
      timing-allow-origin: *
      cross-origin-resource-policy: cross-origin
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
      x-msedge-ref: Ref A: F6B1F2216564435F923000F667D9420F Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:09Z
      date: Mon, 22 Aug 2022 15:12:09 GMT
    • flag-us
      GET
      https://www.bing.com/rp/dye0oi0oSKo4PwRjyp6o2bKfFRg.br.js
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /rp/dye0oi0oSKo4PwRjyp6o2bKfFRg.br.js HTTP/2.0
      host: www.bing.com
      accept: */*
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      if-modified-since: Wed, 03 Mar 2021 23:29:26 GMT
      if-none-match: 0x8D8DE9C2F6AA8EF
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30311771; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 200
      cache-control: public, max-age=432000, no-transform, immutable
      content-length: 1583
      content-type: application/x-javascript; charset=utf-8
      content-encoding: br
      content-md5: HTu0vZDwI9pARUpw83N3/Q==
      last-modified: Wed, 17 Aug 2022 06:24:03 GMT
      etag: 0x8DA801914AB75D9
      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
      x-cache: TCP_HIT
      x-ms-request-id: 67b70041-f01e-0095-0993-b29f80000000
      x-ms-version: 2009-09-19
      x-ms-lease-status: unlocked
      x-ms-blob-type: BlockBlob
      access-control-allow-origin: *
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-azure-ref-originshield: Ref A: 0ACD49FCCF18421EBA3F2E20D6965C75 Ref B: AMS04EDGE1514 Ref C: 2022-08-18T22:38:03Z
      timing-allow-origin: *
      cross-origin-resource-policy: cross-origin
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
      x-msedge-ref: Ref A: FF05F2236570426E99F51FF3CA205D6C Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:09Z
      date: Mon, 22 Aug 2022 15:12:09 GMT
    • flag-us
      GET
      https://www.bing.com/rp/fZiwwcWnYKBryttZuDLzYEE0G0M.br.js
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /rp/fZiwwcWnYKBryttZuDLzYEE0G0M.br.js HTTP/2.0
      host: www.bing.com
      accept: */*
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30311771; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 200
      cache-control: public, max-age=432000, no-transform, immutable
      content-length: 87326
      content-type: text/javascript; charset=utf-8
      content-encoding: br
      content-md5: eIRcbkKKPLPVbB3kmk+PNg==
      last-modified: Thu, 18 Aug 2022 18:48:16 GMT
      etag: 0x8DA814A367BDB67
      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
      x-cache: TCP_HIT
      x-ms-request-id: bdba5741-301e-009a-0669-b3e9ec000000
      x-ms-version: 2009-09-19
      x-ms-lease-status: unlocked
      x-ms-blob-type: BlockBlob
      access-control-allow-origin: *
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-azure-ref-originshield: Ref A: 1156394C5F57498E8D25718B6BE79B7D Ref B: AMS04EDGE1310 Ref C: 2022-08-19T01:53:37Z
      timing-allow-origin: *
      cross-origin-resource-policy: cross-origin
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
      x-msedge-ref: Ref A: B037AF20249746009A33A56B86A93EBC Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:09Z
      date: Mon, 22 Aug 2022 15:12:09 GMT
    • flag-us
      GET
      https://www.bing.com/rp/h70X_CXjGxCPmsxsoFPq_Qb3OkQ.br.js
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /rp/h70X_CXjGxCPmsxsoFPq_Qb3OkQ.br.js HTTP/2.0
      host: www.bing.com
      accept: */*
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      if-modified-since: Tue, 09 Aug 2022 21:57:13 GMT
      if-none-match: 0x8DA7A521E2EC034
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30311771; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 304
      cache-control: public, max-age=432000, no-transform, immutable
      content-type: text/javascript; charset=utf-8
      content-encoding: br
      content-md5: nWz4MCqWtA/RxSztZ133LA==
      last-modified: Tue, 09 Aug 2022 21:57:13 GMT
      etag: 0x8DA7A521E2EC034
      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
      x-cache: TCP_HIT
      x-ms-request-id: 8c3f5415-501e-0078-368f-afd4cd000000
      x-ms-version: 2009-09-19
      x-ms-lease-status: unlocked
      x-ms-blob-type: BlockBlob
      access-control-allow-origin: *
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-azure-ref-originshield: Ref A: 5A1C35A83F604F7CA33C4BA48171EEB5 Ref B: AMS04EDGE1118 Ref C: 2022-08-18T23:08:34Z
      timing-allow-origin: *
      cross-origin-resource-policy: cross-origin
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
      x-msedge-ref: Ref A: 1D5DB8D6ABD740D0812C92251D3B1A26 Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:09Z
      date: Mon, 22 Aug 2022 15:12:09 GMT
    • flag-us
      GET
      https://www.bing.com/rp/hPlNScrKKGfUAhwQVepjVKsWqRY.br.js
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /rp/hPlNScrKKGfUAhwQVepjVKsWqRY.br.js HTTP/2.0
      host: www.bing.com
      accept: */*
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      if-modified-since: Tue, 14 Jun 2022 17:07:07 GMT
      if-none-match: 0x8DA4E285014FB2F
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30311771; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 200
      cache-control: public, max-age=432000, no-transform, immutable
      content-length: 929
      content-type: text/javascript; charset=utf-8
      content-encoding: br
      content-md5: l+/wvAyxIq/orljv9jSFPg==
      last-modified: Wed, 17 Aug 2022 06:30:54 GMT
      etag: 0x8DA801A095779B4
      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
      x-cache: TCP_HIT
      x-ms-request-id: 064c6dd7-f01e-00aa-667f-b25723000000
      x-ms-version: 2009-09-19
      x-ms-lease-status: unlocked
      x-ms-blob-type: BlockBlob
      access-control-allow-origin: *
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-azure-ref-originshield: Ref A: 2E8BBE58D2644021B054C45660AB35A7 Ref B: AMS04EDGE1113 Ref C: 2022-08-18T22:38:04Z
      timing-allow-origin: *
      cross-origin-resource-policy: cross-origin
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
      x-msedge-ref: Ref A: 1358CF4CC74944459696C2557EF103B1 Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:09Z
      date: Mon, 22 Aug 2022 15:12:09 GMT
    • flag-us
      GET
      https://www.bing.com/rp/jIc4kNQcCnXVPMb7KcS_EpEDmoA.br.js
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /rp/jIc4kNQcCnXVPMb7KcS_EpEDmoA.br.js HTTP/2.0
      host: www.bing.com
      accept: */*
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      if-modified-since: Thu, 14 Jul 2022 18:15:47 GMT
      if-none-match: 0x8DA65C4DFDD2AA4
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30311771; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 304
      cache-control: public, max-age=432000
      content-type: text/javascript; charset=utf-8
      content-encoding: br
      content-md5: WUzC8pYMw4nxEZsXf0IYNA==
      last-modified: Thu, 14 Jul 2022 18:15:47 GMT
      etag: 0x8DA65C4DFDD2AA4
      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
      x-cache: TCP_HIT
      x-ms-request-id: 7cf6403d-b01e-00ab-5c8f-af08ff000000
      x-ms-version: 2009-09-19
      x-ms-lease-status: unlocked
      x-ms-blob-type: BlockBlob
      access-control-allow-origin: *
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-azure-ref-originshield: Ref A: F3E7C08FEA514EC5BD3E68E2F66266F2 Ref B: AMS04EDGE1218 Ref C: 2022-08-18T23:08:33Z
      timing-allow-origin: *
      cross-origin-resource-policy: cross-origin
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
      x-msedge-ref: Ref A: 460082921D23457AA05A7031260BA3FB Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:09Z
      date: Mon, 22 Aug 2022 15:12:09 GMT
    • flag-us
      GET
      https://www.bing.com/rp/jReNPx8gS5IWDxQLFD-EkpG1n7w.br.js
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /rp/jReNPx8gS5IWDxQLFD-EkpG1n7w.br.js HTTP/2.0
      host: www.bing.com
      accept: */*
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      if-modified-since: Thu, 10 Mar 2022 14:33:42 GMT
      if-none-match: 0x8DA02A2FA06058D
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30311771; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 200
      cache-control: public, max-age=432000, no-transform, immutable
      content-length: 556
      content-type: text/javascript; charset=utf-8
      content-encoding: br
      content-md5: FY8saPXJjS9PIFde2jcDIg==
      last-modified: Wed, 17 Aug 2022 06:34:32 GMT
      etag: 0x8DA801A8B5BF239
      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
      x-cache: TCP_HIT
      x-ms-request-id: fea06adb-801e-0009-3979-b232e6000000
      x-ms-version: 2009-09-19
      x-ms-lease-status: unlocked
      x-ms-blob-type: BlockBlob
      access-control-allow-origin: *
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-azure-ref-originshield: Ref A: 96DC6EAEE8474FCEBCFB76567C56BF5D Ref B: AMS04EDGE1205 Ref C: 2022-08-18T22:38:04Z
      timing-allow-origin: *
      cross-origin-resource-policy: cross-origin
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
      x-msedge-ref: Ref A: 5328C97EF6FB4422AD0581E539DAB5B8 Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:09Z
      date: Mon, 22 Aug 2022 15:12:09 GMT
    • flag-us
      GET
      https://www.bing.com/rp/jz5JHWe_2WCod7u1RNWmByRezL4.br.js
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /rp/jz5JHWe_2WCod7u1RNWmByRezL4.br.js HTTP/2.0
      host: www.bing.com
      accept: */*
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      if-modified-since: Mon, 23 Nov 2020 21:26:09 GMT
      if-none-match: 0x8D88FF664F8F216
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30311771; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 304
      cache-control: public, max-age=432000
      content-type: application/x-javascript; charset=utf-8
      content-encoding: br
      content-md5: vAZSldiIKneL7lXA7Dv5qA==
      last-modified: Mon, 23 Nov 2020 21:26:09 GMT
      etag: 0x8D88FF664F8F216
      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
      x-cache: TCP_HIT
      x-ms-request-id: 733f8d0f-701e-0022-1400-b0b22a000000
      x-ms-version: 2009-09-19
      x-ms-lease-status: unlocked
      x-ms-blob-type: BlockBlob
      access-control-allow-origin: *
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-azure-ref-originshield: Ref A: C5C2B5AB4DA044AE817C5FE01FCE8D5A Ref B: AMS04EDGE1410 Ref C: 2022-08-18T21:30:43Z
      timing-allow-origin: *
      cross-origin-resource-policy: cross-origin
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
      x-msedge-ref: Ref A: 065517EAE09A4FF59857FE29B29F1F3E Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:09Z
      date: Mon, 22 Aug 2022 15:12:09 GMT
    • flag-us
      GET
      https://www.bing.com/rp/lhgXDPuakBioCT_GC_cTrDlP6gs.br.js
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /rp/lhgXDPuakBioCT_GC_cTrDlP6gs.br.js HTTP/2.0
      host: www.bing.com
      accept: */*
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      if-modified-since: Mon, 24 Jan 2022 21:28:39 GMT
      if-none-match: 0x8D9DF807D249892
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30311771; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 304
      cache-control: public, max-age=432000
      content-type: text/javascript; charset=utf-8
      content-encoding: br
      content-md5: P5gWZ8SuEHVF20/YgnkBcQ==
      last-modified: Mon, 24 Jan 2022 21:28:39 GMT
      etag: 0x8D9DF807D249892
      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
      x-cache: TCP_HIT
      x-ms-request-id: df910310-201e-002f-01a1-b17afe000000
      x-ms-version: 2009-09-19
      x-ms-lease-status: unlocked
      x-ms-blob-type: BlockBlob
      access-control-allow-origin: *
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-azure-ref-originshield: Ref A: EDBCF491B7094C6B9A908083ADC9CE26 Ref B: AMS04EDGE1517 Ref C: 2022-08-18T22:38:03Z
      timing-allow-origin: *
      cross-origin-resource-policy: cross-origin
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
      x-msedge-ref: Ref A: F27A6439DF144863866B911833C3C982 Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:09Z
      date: Mon, 22 Aug 2022 15:12:09 GMT
    • flag-us
      GET
      https://www.bing.com/rp/lu2PFUTcnpg4NsQIcCHykj_HUKM.br.js
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /rp/lu2PFUTcnpg4NsQIcCHykj_HUKM.br.js HTTP/2.0
      host: www.bing.com
      accept: */*
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      if-modified-since: Wed, 27 Jul 2022 00:40:16 GMT
      if-none-match: 0x8DA6F6893243D9D
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30311771; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 200
      cache-control: public, max-age=432000, no-transform, immutable
      content-length: 5047
      content-type: text/javascript; charset=utf-8
      content-encoding: br
      content-md5: Bwmw8XH9uDj6feEK9CttSw==
      last-modified: Wed, 17 Aug 2022 06:39:40 GMT
      etag: 0x8DA801B432ADCDF
      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
      x-cache: TCP_HIT
      x-ms-request-id: d058066e-501e-00b3-0f80-b2d798000000
      x-ms-version: 2009-09-19
      x-ms-lease-status: unlocked
      x-ms-blob-type: BlockBlob
      access-control-allow-origin: *
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-azure-ref-originshield: Ref A: 4E3E914B4619400CB15CB88493E05BEE Ref B: AMS04EDGE1506 Ref C: 2022-08-22T09:06:06Z
      timing-allow-origin: *
      cross-origin-resource-policy: cross-origin
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
      x-msedge-ref: Ref A: 1F223BF3877E43BA9505EB0F81B4CFC2 Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:10Z
      date: Mon, 22 Aug 2022 15:12:09 GMT
    • flag-us
      GET
      https://www.bing.com/rp/qHQm8CxZq2duiKylvcB-3AUQKUc.br.js
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /rp/qHQm8CxZq2duiKylvcB-3AUQKUc.br.js HTTP/2.0
      host: www.bing.com
      accept: */*
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      if-modified-since: Tue, 14 Jun 2022 17:07:20 GMT
      if-none-match: 0x8DA4E2857D647C7
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30311771; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 200
      cache-control: public, max-age=432000, no-transform, immutable
      content-length: 13076
      content-type: text/javascript; charset=utf-8
      content-encoding: br
      content-md5: 4y9txF7aMOP06ioYa5EjRw==
      last-modified: Wed, 17 Aug 2022 06:47:51 GMT
      etag: 0x8DA801C6790F795
      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
      x-cache: TCP_HIT
      x-ms-request-id: 4920050b-401e-0029-0292-b24941000000
      x-ms-version: 2009-09-19
      x-ms-lease-status: unlocked
      x-ms-blob-type: BlockBlob
      access-control-allow-origin: *
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-azure-ref-originshield: Ref A: D2AC79DC315F476C8C790E59568469AA Ref B: AMS04EDGE1510 Ref C: 2022-08-18T21:06:08Z
      timing-allow-origin: *
      cross-origin-resource-policy: cross-origin
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
      x-msedge-ref: Ref A: E3BAA4434E9743EC89D3DC57F6BE12B6 Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:10Z
      date: Mon, 22 Aug 2022 15:12:09 GMT
    • flag-us
      GET
      https://www.bing.com/rp/x0Cvpg0MmmBx9EUGxLDfa2xcV-E.br.js
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /rp/x0Cvpg0MmmBx9EUGxLDfa2xcV-E.br.js HTTP/2.0
      host: www.bing.com
      accept: */*
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      if-modified-since: Wed, 17 Mar 2021 02:36:36 GMT
      if-none-match: 0x8D8E8ED7CB1BF73
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30311771; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 200
      cache-control: public, max-age=432000, no-transform, immutable
      content-length: 42657
      content-type: application/x-javascript; charset=utf-8
      content-encoding: br
      content-md5: YK3GKcKH7rZEYCT3YQXkTg==
      last-modified: Wed, 17 Aug 2022 07:02:19 GMT
      etag: 0x8DA801E6D143BCC
      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
      x-cache: TCP_HIT
      x-ms-request-id: 45ef167b-501e-0078-1988-b2d4cd000000
      x-ms-version: 2009-09-19
      x-ms-lease-status: unlocked
      x-ms-blob-type: BlockBlob
      access-control-allow-origin: *
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-azure-ref-originshield: Ref A: AC7B37C399064F06986FE62C7F893841 Ref B: AMS04EDGE1510 Ref C: 2022-08-18T19:19:32Z
      timing-allow-origin: *
      cross-origin-resource-policy: cross-origin
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
      x-msedge-ref: Ref A: 40CFD6D9D7B2435B8B0FD2D9076C94FD Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:10Z
      date: Mon, 22 Aug 2022 15:12:09 GMT
    • flag-us
      GET
      https://www.bing.com/rp/xDwPHzjYc8gMwMkGDsHMDpOtE-U.br.js
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /rp/xDwPHzjYc8gMwMkGDsHMDpOtE-U.br.js HTTP/2.0
      host: www.bing.com
      accept: */*
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30311771; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 200
      cache-control: public, max-age=432000, no-transform, immutable
      content-length: 63837
      content-type: text/javascript; charset=utf-8
      content-encoding: br
      content-md5: HYtK07PmFYVK0ELY+W+RQg==
      last-modified: Wed, 17 Aug 2022 15:38:15 GMT
      etag: 0x8DA806680263C90
      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
      x-cache: TCP_HIT
      x-ms-request-id: 05a1a962-501e-00ee-49d5-b2dd1c000000
      x-ms-version: 2009-09-19
      x-ms-lease-status: unlocked
      x-ms-blob-type: BlockBlob
      access-control-allow-origin: *
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-azure-ref-originshield: Ref A: A380FDFA74AB40F0883432E2AEF874EA Ref B: AMS04EDGE1119 Ref C: 2022-08-18T21:24:57Z
      timing-allow-origin: *
      cross-origin-resource-policy: cross-origin
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
      x-msedge-ref: Ref A: 78FC6C1A723346B4BB73F115AC40BBEE Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:10Z
      date: Mon, 22 Aug 2022 15:12:09 GMT
    • flag-us
      GET
      https://www.bing.com/rp/zEQqhwKoETyGdQapOnP2uL1FFF0.br.js
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /rp/zEQqhwKoETyGdQapOnP2uL1FFF0.br.js HTTP/2.0
      host: www.bing.com
      accept: */*
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      if-modified-since: Mon, 23 Nov 2020 21:26:04 GMT
      if-none-match: 0x8D88FF66254C9E9
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30311771; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 304
      cache-control: public, max-age=432000
      content-type: application/x-javascript; charset=utf-8
      content-encoding: br
      content-md5: FcPOQSqE3BHB4YotMSuIbA==
      last-modified: Mon, 23 Nov 2020 21:26:04 GMT
      etag: 0x8D88FF66254C9E9
      server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
      x-cache: TCP_HIT
      x-ms-request-id: 77fbadfb-801e-007b-3a93-b235a9000000
      x-ms-version: 2009-09-19
      x-ms-lease-status: unlocked
      x-ms-blob-type: BlockBlob
      access-control-allow-origin: *
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-azure-ref-originshield: Ref A: E7265E4A4AC540B68088AA9F78B161EF Ref B: AMS04EDGE1310 Ref C: 2022-08-18T21:56:04Z
      timing-allow-origin: *
      cross-origin-resource-policy: cross-origin
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaot"}]}
      x-msedge-ref: Ref A: 57F00F86CC514B29BEBC144346AF3768 Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:10Z
      date: Mon, 22 Aug 2022 15:12:09 GMT
    • flag-us
      GET
      https://www.bing.com/rs/6u/17d/ortl,cc,nc/onra7PQl9o5bYT2lASI1BE4DDEs.css?or=w
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /rs/6u/17d/ortl,cc,nc/onra7PQl9o5bYT2lASI1BE4DDEs.css?or=w HTTP/2.0
      host: www.bing.com
      accept: */*
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      if-modified-since: Wed, 10 Aug 2022 20:05:13 GMT
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30311771; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 200
      cache-control: public, max-age=432000
      content-length: 50458
      content-type: text/css; charset=utf-8
      content-encoding: br
      last-modified: Tue, 16 Aug 2022 23:45:22 GMT
      vary: Accept-Encoding
      x-cache: TCP_HIT
      server: Kestrel
      access-control-allow-headers: *
      access-control-allow-origin: *
      x-xss-protection: 0
      timing-allow-origin: *
      cross-origin-resource-policy: cross-origin
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingrms"}]}
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-msedge-ref: Ref A: 778D7EBC3FA54FCEA19C5144C7131194 Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:10Z
      date: Mon, 22 Aug 2022 15:12:09 GMT
    • flag-us
      GET
      https://www.bing.com/manifest/threshold.appcache
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /manifest/threshold.appcache HTTP/2.0
      host: www.bing.com
      accept: */*
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      origin: https://www.bing.com
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1660331348859&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30311771; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 200
      cache-control: private
      content-length: 1230
      content-type: text/cache-manifest; charset=utf-8
      content-encoding: br
      vary: Accept-Encoding
      p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
      set-cookie: MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054; expires=Sat, 16-Sep-2023 15:12:10 GMT; path=/; HttpOnly
      x-xss-protection: 0
      x-cache: CONFIG_NOCACHE
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-msedge-ref: Ref A: 48A53AA52AEE41F084394B41C088BA4F Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:10Z
      date: Mon, 22 Aug 2022 15:12:10 GMT
    • flag-us
      GET
      https://www.bing.com/rb/5p/cj,nj/Ane5LYLWhZhlI27dRgdM_U8g7Wo.js?bu=FJYmmyX_BaolrCWuJbAluiWcJuslnQ6BJocmoCb_Bf8FwSLiJZkOkA4&or=w
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /rb/5p/cj,nj/Ane5LYLWhZhlI27dRgdM_U8g7Wo.js?bu=FJYmmyX_BaolrCWuJbAluiWcJuslnQ6BJocmoCb_Bf8FwSLiJZkOkA4&or=w HTTP/2.0
      host: www.bing.com
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept: */*
      accept-language: en-US
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1661188329415&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30311771&CPID=1661188329417&AC=4&CPH=a00c4273; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 200
      cache-control: public, max-age=432000
      content-length: 20155
      content-type: application/x-javascript; charset=utf-8
      content-encoding: br
      last-modified: Sun, 21 Aug 2022 16:21:44 GMT
      vary: Accept-Encoding
      x-cache: TCP_HIT
      server: Kestrel
      access-control-allow-headers: *
      access-control-allow-origin: *
      x-xss-protection: 0
      timing-allow-origin: *
      cross-origin-resource-policy: cross-origin
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingrms"}]}
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-msedge-ref: Ref A: 448F71DE0F8B469A8D3566D1FDE06E38 Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:10Z
      date: Mon, 22 Aug 2022 15:12:10 GMT
    • flag-us
      GET
      https://www.bing.com/manifest/threshold.appcache
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      GET /manifest/threshold.appcache HTTP/2.0
      host: www.bing.com
      accept: */*
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      origin: https://www.bing.com
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1661188329415&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30311771&CPID=1661188329756&AC=1&CPH=ca46f5b4; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 200
      cache-control: private
      content-length: 1230
      content-type: text/cache-manifest; charset=utf-8
      content-encoding: br
      vary: Accept-Encoding
      p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
      set-cookie: MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054; expires=Sat, 16-Sep-2023 15:12:10 GMT; path=/; HttpOnly
      set-cookie: SRCHHPGUSR=SRCHLANG=nl&LUT=1661188329415&IPMH=a00c4273&IPMID=1661188329756; domain=.bing.com; expires=Sat, 16-Sep-2023 15:12:10 GMT; path=/; secure; SameSite=None
      x-xss-protection: 0
      x-cache: CONFIG_NOCACHE
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-msedge-ref: Ref A: 5D1CA90D11624D1CBAD0EF130F742987 Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:10Z
      date: Mon, 22 Aug 2022 15:12:10 GMT
    • flag-us
      POST
      https://www.bing.com/threshold/xls.aspx
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      POST /threshold/xls.aspx HTTP/2.0
      host: www.bing.com
      origin: https://www.bing.com
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept: */*
      accept-language: en-US
      content-type: text/xml
      x-msedge-externalexp: d-thshld39,d-thshld42,d-thshld77,d-thshldspcl40,lbsh-reverse
      x-msedge-externalexptype: JointCoord
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      content-length: 7537
      cache-control: no-cache
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1661188329415&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30311771&CPID=1661188329756&AC=1&CPH=ca46f5b4; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 204
      access-control-allow-origin: *
      x-cache: CONFIG_NOCACHE
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-msedge-ref: Ref A: 4BFE29B0460F4307BE0A2D87D45D95BE Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:10Z
      date: Mon, 22 Aug 2022 15:12:10 GMT
    • flag-us
      POST
      https://www.bing.com/threshold/xls.aspx
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      POST /threshold/xls.aspx HTTP/2.0
      host: www.bing.com
      origin: https://www.bing.com
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept: */*
      accept-language: en-US
      content-type: text/xml
      x-msedge-externalexp: d-thshld42,d-thshld77,dsbnewdayc,lbsh-reverse,stwffsug11
      x-msedge-externalexptype: JointCoord
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      content-length: 1446
      cache-control: no-cache
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1661188329415&IPMH=a00c4273&IPMID=1661188326550; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30311771&CPID=1661188329756&AC=1&CPH=ca46f5b4; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 204
      access-control-allow-origin: *
      x-cache: CONFIG_NOCACHE
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-msedge-ref: Ref A: 54B7FDC15C8D434D9E6EF636EB207872 Ref B: AMBEDGE0820 Ref C: 2022-08-22T15:12:10Z
      date: Mon, 22 Aug 2022 15:12:10 GMT
    • flag-us
      POST
      https://www.bing.com/threshold/xls.aspx
      SearchApp.exe
      Remote address:
      204.79.197.200:443
      Request
      POST /threshold/xls.aspx HTTP/2.0
      host: www.bing.com
      origin: https://www.bing.com
      referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
      accept: */*
      accept-language: en-US
      content-type: text/xml
      x-msedge-externalexp: d-thshld42,d-thshld77,dsbnewdayc,lbsh-reverse,stwffsug11
      x-msedge-externalexptype: JointCoord
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
      content-length: 6077
      cache-control: no-cache
      cookie: SRCHUID=V=2&GUID=B26F69028B7F454FAB7C9B1DEE4E3DC3&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20220812; SRCHHPGUSR=SRCHLANG=nl&LUT=1661188329415&IPMH=a00c4273&IPMID=1661188329756; CortanaAppUID=9C0DA10A27A69B5F4DC9FC093B60234D; MUID=FE1CBBEACBE7466EB9B4DF65A4363054; _SS=SID=3C085FD9C3D8606935C34DD1C22D61AC&CBV=30496877&CPID=1661188330095&AC=1&CPH=ca46f5b4; SUID=M; _EDGE_S=SID=3C085FD9C3D8606935C34DD1C22D61AC; MUIDB=FE1CBBEACBE7466EB9B4DF65A4363054
      Response
      HTTP/2.0 204
      access-control-allow-origin: *
      x-cache: CONFIG_NOCACHE
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-msedge-ref: Ref A: C62FE924D1664BFEB42B3B008F31CE6A Ref B: AMBEDGE0809 Ref C: 2022-08-22T15:13:18Z
      date: Mon, 22 Aug 2022 15:13:17 GMT
    • 93.184.221.240:80
      52 B
      1
    • 93.184.221.240:80
      322 B
      7
    • 93.184.221.240:80
      322 B
      7
    • 93.184.221.240:80
      260 B
      5
    • 185.47.40.36:443
      https://filebin.net/ayyivd2vv9ist18n/Client.exe
      tls, http
      file.exe
      877 B
      6.0kB
      11
      11

      HTTP Request

      GET https://filebin.net/ayyivd2vv9ist18n/Client.exe

      HTTP Response

      302
    • 87.238.33.8:443
      https://situla.bitbit.net/filebin/7e40dc34e22b7829ed3b935404357dd0de9c234a40872fb529c9e0988713dd1d/9577c398546643ac7c41d72606e249c5cd74b4a1c1d1591e941f4b7503d9ce92?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=HZXB1J7T0UN34UN512IW%2F20220822%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20220822T151115Z&X-Amz-Expires=30&X-Amz-SignedHeaders=host&response-cache-control=max-age%3D30&response-content-disposition=filename%3D%22Client.exe%22&response-content-type=application%2Fvnd.microsoft.portable-executable&X-Amz-Signature=7a414a0fcc868b7d80f30830f513bc351d41bb7ffb37a2a76bf5fb785d0f5313
      tls, http
      file.exe
      6.9kB
      196.0kB
      118
      149

      HTTP Request

      GET https://situla.bitbit.net/filebin/7e40dc34e22b7829ed3b935404357dd0de9c234a40872fb529c9e0988713dd1d/9577c398546643ac7c41d72606e249c5cd74b4a1c1d1591e941f4b7503d9ce92?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=HZXB1J7T0UN34UN512IW%2F20220822%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20220822T151115Z&X-Amz-Expires=30&X-Amz-SignedHeaders=host&response-cache-control=max-age%3D30&response-content-disposition=filename%3D%22Client.exe%22&response-content-type=application%2Fvnd.microsoft.portable-executable&X-Amz-Signature=7a414a0fcc868b7d80f30830f513bc351d41bb7ffb37a2a76bf5fb785d0f5313

      HTTP Response

      200
    • 93.184.221.240:80
      260 B
      5
    • 20.100.171.81:1337
      cvtres.exe
      274 B
      132 B
      4
      3
    • 204.79.197.200:443
      www.bing.com
      SearchApp.exe
      156 B
      3
    • 13.107.21.200:443
      www.bing.com
      SearchApp.exe
      156 B
      3
    • 204.79.197.200:443
      https://www.bing.com/threshold/xls.aspx
      tls, http2
      SearchApp.exe
      79.3kB
      694.4kB
      664
      652

      HTTP Request

      GET https://www.bing.com/rb/5p/cj,nj/Jpqm_USeYFK0psp0vE_gjKH9hg8.js?bu=FI8mlCX5BaMlpSWnJaklsyWVJuQlmA76JYAmmSb5BfkFuiLbJZQOiw4&or=w

      HTTP Response

      304

      HTTP Request

      GET https://www.bing.com/manifest/threshold.appcache

      HTTP Response

      200

      HTTP Request

      GET https://www.bing.com/rb/17/cj,nj/1FLtrEdHrNq7YDeeCYhb8ssigCI.js?bu=Dx8oW2dqbWReYZwBnwEokQEoogE&or=w

      HTTP Request

      GET https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init

      HTTP Response

      200

      HTTP Request

      POST https://www.bing.com/threshold/xls.aspx

      HTTP Response

      200

      HTTP Request

      GET https://www.bing.com/rb/1a/cir2,ortl,cc,nc/9kAvRypYmWc9B8vB-LFOrkNKVL8.css?bu=C4kGxwKFA-AG3QXQBZwEPDw8PA&or=w

      HTTP Response

      200

      HTTP Request

      GET https://www.bing.com/rb/1a/cir2,ortl,cc,nc/Xk0n9ycPBpl3ibUiCDpx5bvphM0.css?bu=B_QBQ-YBhwE8PP4B&or=w

      HTTP Response

      204

      HTTP Response

      200

      HTTP Request

      GET https://www.bing.com/rb/45/ortl,cc,nc/8yOt-qMgl3wFFpnXBbdaeUrdWpM.css?bu=A4gCjAKPAg&or=w

      HTTP Response

      200

      HTTP Request

      GET https://www.bing.com/rb/6L/cir2,ortl,cc,nc/QWjhdPA8Q0Hzj9-dWwSBkC3YuT0.css?bu=GOYG4wb4BqMH7wbsBt0GnQf7Bv4G3QbdBt0GhwfdBo8HmAeSB90G3QbdBqYH3QbNBw&or=w

      HTTP Response

      200

      HTTP Request

      GET https://www.bing.com/rb/6L/ortl,cc,nc/QNBBNqWD9F_Blep-UqQSqnMp-FI.css?bu=Ad0G&or=w

      HTTP Response

      200

      HTTP Request

      GET https://www.bing.com/rp/-ijWDOoNJ6BlbsCOGYCDxI9TjTg.br.js

      HTTP Response

      200

      HTTP Request

      GET https://www.bing.com/rp/-pBqIguxLDC5C1YjXzlKax0RNqE.br.js

      HTTP Response

      200

      HTTP Request

      GET https://www.bing.com/rp/26Pt5PvK51HgeLA2eGQca_iZ1j0.br.js

      HTTP Response

      200

      HTTP Request

      GET https://www.bing.com/rp/40U_9sQqMsu5_oBnZV25nq4Swi4.br.js

      HTTP Response

      200

      HTTP Request

      GET https://www.bing.com/rp/53v2UapkP691FR6Fvybjpk4_rZU.br.js

      HTTP Response

      200

      HTTP Request

      GET https://www.bing.com/rp/6mDplh2-tnrwx7GcRbXrFrcA_p8.br.js

      HTTP Response

      200

      HTTP Request

      GET https://www.bing.com/rp/98-tFzBbrLP3oaKdmZtyZ4BBBI4.br.js

      HTTP Response

      304

      HTTP Request

      GET https://www.bing.com/rp/BQR--Mi6Hdug9aUgfjMzORag63E.br.js

      HTTP Response

      304

      HTTP Request

      GET https://www.bing.com/rp/BVRtSKnC-nkUJXVttThHX1waGF8.br.js

      HTTP Response

      200

      HTTP Request

      GET https://www.bing.com/rp/Cj4mQnDN_eMyYEqsEbjRrJ2Ttec.br.js

      HTTP Response

      304

      HTTP Request

      GET https://www.bing.com/rp/DK-F0W-t_TtUZn6MPb8LKLCDvgs.br.js

      HTTP Response

      304

      HTTP Request

      GET https://www.bing.com/rp/EWL8d9zir1RT2nx4rboBo_IHlwc.br.js

      HTTP Response

      200

      HTTP Request

      GET https://www.bing.com/rp/FfpNMdo0vKfG5ZTD5JKxtjVlD2c.br.js

      HTTP Response

      200

      HTTP Request

      GET https://www.bing.com/rp/MAi8ZrMgFhG81tZ07Arc2JEjTY8.br.js

      HTTP Response

      200

      HTTP Request

      GET https://www.bing.com/rp/PN5lNRi5OMLPR9qG64XlIV-xdNk.br.js

      HTTP Response

      200

      HTTP Request

      GET https://www.bing.com/rp/PvVze1dcpBMAPV5PYO5uw3GriyY.br.js

      HTTP Response

      304

      HTTP Request

      GET https://www.bing.com/rp/QIrBtzn_Y-0xqNrrJhAvklMUH4g.br.js

      HTTP Response

      304

      HTTP Request

      GET https://www.bing.com/rp/WeaqEJfS9Yrl9laS6TOxoSX0WqM.br.js

      HTTP Response

      200

      HTTP Request

      GET https://www.bing.com/rp/Yi3Flkft8YS8nbd9qCHjIlXAHPg.br.js

      HTTP Response

      304

      HTTP Request

      GET https://www.bing.com/rp/Z_GJ62uUjIGBtHsKSBYBwY74EHY.br.js

      HTTP Response

      200

      HTTP Request

      GET https://www.bing.com/rp/_F0M0yoTmc2b-_eS3W0Eu-fGENs.br.js

      HTTP Response

      200

      HTTP Request

      GET https://www.bing.com/rp/_UuhVxYdoujMCo65q2K3CJYHYBM.br.js

      HTTP Response

      304

      HTTP Request

      GET https://www.bing.com/rp/bhSlnVqmEsrnxgWPMYtgH4wjRo8.br.js

      HTTP Response

      200

      HTTP Request

      GET https://www.bing.com/rp/dye0oi0oSKo4PwRjyp6o2bKfFRg.br.js

      HTTP Response

      200

      HTTP Request

      GET https://www.bing.com/rp/fZiwwcWnYKBryttZuDLzYEE0G0M.br.js

      HTTP Response

      200

      HTTP Request

      GET https://www.bing.com/rp/h70X_CXjGxCPmsxsoFPq_Qb3OkQ.br.js

      HTTP Response

      304

      HTTP Request

      GET https://www.bing.com/rp/hPlNScrKKGfUAhwQVepjVKsWqRY.br.js

      HTTP Response

      200

      HTTP Request

      GET https://www.bing.com/rp/jIc4kNQcCnXVPMb7KcS_EpEDmoA.br.js

      HTTP Response

      304

      HTTP Request

      GET https://www.bing.com/rp/jReNPx8gS5IWDxQLFD-EkpG1n7w.br.js

      HTTP Response

      200

      HTTP Request

      GET https://www.bing.com/rp/jz5JHWe_2WCod7u1RNWmByRezL4.br.js

      HTTP Response

      304

      HTTP Request

      GET https://www.bing.com/rp/lhgXDPuakBioCT_GC_cTrDlP6gs.br.js

      HTTP Response

      304

      HTTP Request

      GET https://www.bing.com/rp/lu2PFUTcnpg4NsQIcCHykj_HUKM.br.js

      HTTP Response

      200

      HTTP Request

      GET https://www.bing.com/rp/qHQm8CxZq2duiKylvcB-3AUQKUc.br.js

      HTTP Response

      200

      HTTP Request

      GET https://www.bing.com/rp/x0Cvpg0MmmBx9EUGxLDfa2xcV-E.br.js

      HTTP Response

      200

      HTTP Request

      GET https://www.bing.com/rp/xDwPHzjYc8gMwMkGDsHMDpOtE-U.br.js

      HTTP Response

      200

      HTTP Request

      GET https://www.bing.com/rp/zEQqhwKoETyGdQapOnP2uL1FFF0.br.js

      HTTP Response

      304

      HTTP Request

      GET https://www.bing.com/rs/6u/17d/ortl,cc,nc/onra7PQl9o5bYT2lASI1BE4DDEs.css?or=w

      HTTP Response

      200

      HTTP Request

      GET https://www.bing.com/manifest/threshold.appcache

      HTTP Response

      200

      HTTP Request

      GET https://www.bing.com/rb/5p/cj,nj/Ane5LYLWhZhlI27dRgdM_U8g7Wo.js?bu=FJYmmyX_BaolrCWuJbAluiWcJuslnQ6BJocmoCb_Bf8FwSLiJZkOkA4&or=w

      HTTP Response

      200

      HTTP Request

      GET https://www.bing.com/manifest/threshold.appcache

      HTTP Request

      POST https://www.bing.com/threshold/xls.aspx

      HTTP Request

      POST https://www.bing.com/threshold/xls.aspx

      HTTP Response

      200

      HTTP Response

      204

      HTTP Response

      204
    • 13.69.109.130:443
      322 B
      7
    • 40.126.31.73:443
      260 B
      5
    • 204.79.197.200:443
      https://www.bing.com/threshold/xls.aspx
      tls, http2
      SearchApp.exe
      8.3kB
      1.0kB
      17
      12

      HTTP Request

      POST https://www.bing.com/threshold/xls.aspx

      HTTP Response

      204
    • 8.8.8.8:53
      filebin.net
      dns
      file.exe
      57 B
      73 B
      1
      1

      DNS Request

      filebin.net

      DNS Response

      185.47.40.36

    • 8.8.8.8:53
      situla.bitbit.net
      dns
      file.exe
      63 B
      95 B
      1
      1

      DNS Request

      situla.bitbit.net

      DNS Response

      87.238.33.8
      87.238.33.7

    MITRE ATT&CK Enterprise v6

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/384-141-0x0000000000400000-0x0000000000418000-memory.dmp

      Filesize

      96KB

    • memory/384-142-0x0000000005E10000-0x0000000005E76000-memory.dmp

      Filesize

      408KB

    • memory/384-143-0x00000000066D0000-0x0000000006720000-memory.dmp

      Filesize

      320KB

    • memory/396-132-0x00000000004F0000-0x000000000053C000-memory.dmp

      Filesize

      304KB

    • memory/396-133-0x0000000005400000-0x00000000059A4000-memory.dmp

      Filesize

      5.6MB

    • memory/396-134-0x0000000004EF0000-0x0000000004F82000-memory.dmp

      Filesize

      584KB

    • memory/396-135-0x0000000005080000-0x000000000508A000-memory.dmp

      Filesize

      40KB

    • memory/4292-137-0x0000000000400000-0x000000000042E000-memory.dmp

      Filesize

      184KB

    • memory/4292-138-0x0000000004FE0000-0x000000000507C000-memory.dmp

      Filesize

      624KB

    • memory/4524-160-0x000001DE12230000-0x000001DE12330000-memory.dmp

      Filesize

      1024KB

    • memory/4524-239-0x000001DE13190000-0x000001DE13290000-memory.dmp

      Filesize

      1024KB

    • memory/4524-154-0x000001DDFE290000-0x000001DDFE298000-memory.dmp

      Filesize

      32KB

    • memory/4524-165-0x000001DE01780000-0x000001DE017A0000-memory.dmp

      Filesize

      128KB

    • memory/4524-176-0x000001DE021F0000-0x000001DE02210000-memory.dmp

      Filesize

      128KB

    • memory/4524-234-0x000001DE0223B000-0x000001DE0223E000-memory.dmp

      Filesize

      12KB

    • memory/4524-235-0x000001DE0223B000-0x000001DE0223E000-memory.dmp

      Filesize

      12KB

    • memory/4524-236-0x000001DE0223B000-0x000001DE0223E000-memory.dmp

      Filesize

      12KB

    • memory/4524-237-0x000001DE0223B000-0x000001DE0223E000-memory.dmp

      Filesize

      12KB

    • memory/4524-157-0x000001DE02170000-0x000001DE02190000-memory.dmp

      Filesize

      128KB

    • memory/4524-240-0x000001DE13190000-0x000001DE13290000-memory.dmp

      Filesize

      1024KB

    • memory/4524-248-0x000001DE02230000-0x000001DE02234000-memory.dmp

      Filesize

      16KB

    • memory/4524-247-0x000001DE02230000-0x000001DE02234000-memory.dmp

      Filesize

      16KB

    • memory/4524-246-0x000001DE02230000-0x000001DE02234000-memory.dmp

      Filesize

      16KB

    • memory/4524-245-0x000001DE02230000-0x000001DE02234000-memory.dmp

      Filesize

      16KB

    • memory/4524-244-0x000001DE02230000-0x000001DE02234000-memory.dmp

      Filesize

      16KB

    • memory/4524-252-0x000001DE02234000-0x000001DE02237000-memory.dmp

      Filesize

      12KB

    • memory/4524-253-0x000001DE02234000-0x000001DE02237000-memory.dmp

      Filesize

      12KB

    • memory/4524-251-0x000001DE02234000-0x000001DE02237000-memory.dmp

      Filesize

      12KB

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.