Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Resubmissions
18/04/2024, 11:18 UTC
240418-ned1xsbd66 1018/04/2024, 11:18 UTC
240418-nea92abd64 1018/04/2024, 11:18 UTC
240418-neay9scf7z 1018/04/2024, 11:18 UTC
240418-neacqscf7y 718/04/2024, 11:18 UTC
240418-nd92zacf7x 718/04/2024, 09:59 UTC
240418-lz5chaba8t 7Analysis
-
max time kernel
1797s -
max time network
1598s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
-
submitted
18/04/2024, 11:18 UTC
General
-
Target
0145f04a8356780d52774ce5f7dd0a02f6d5b321694ed805ce3e27bdf04d3c94.exe
-
Size
371KB
-
MD5
eafe645b56c3f5cb746fb5f8504f6035
-
SHA1
f539987de9fe59bff20483ac7a124afafc27036b
-
SHA256
0145f04a8356780d52774ce5f7dd0a02f6d5b321694ed805ce3e27bdf04d3c94
-
SHA512
61af2cfa960a72b66d54d0ee121acb5c54d455b05eb85fb2d7df2958d3134d348c87a5aef2aa46319532407f7ebf01eaedfb8dd889bb0f67ce5edc067445e806
-
SSDEEP
6144:hnzQnu/cmM1oSigOQT2F8U92Iu7DMVQZhWLv3RXdYX9ji+uhi2PsrhY:dzQnkM1oSiBGI8bxn5W6i+uo20tY
Score
10/10
Malware Config
Extracted
Path
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{b2b93620-3dc4-41a5-b7a7-74475e011916}\_DECRYPT_INFO_iibibi.html
Ransom Note
<!DOCTYPE html PUBLIC '-//W3C//DTD XHTML 1.0 Transitional//EN' 'http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd'>
<!-- saved from url=(0014)about:internet -->
<html xmlns='http://www.w3.org/1999/xhtml'>
<head>
<meta http-equiv='Content-Type' content='text/html; charset=UTF-8' />
<title>iibibi decrypt</title>
<style type='text/css'>
<!--
html, body {margin: 0;padding: 0;margin-left: 0px;margin-top: 0px;margin-right: 0px;margin-bottom: 0px; background-color: #bfbfbf; height: 100%;}
a {color:426BBD; font-family:Tahoma, Verdana, Arial, Helvetica; font-size:12px;}
td {
font-family: Verdana, Arial, Helvetica, sans-serif;
font-weight: bold;
color: #f0f0f0;
font-size: 14px;
}
.style1 {
font-family: Verdana, Arial, Helvetica, sans-serif;
font-weight: bold;
color: #d7001e;
font-size: 48px;
}
.style3 {
font-family: Verdana, Arial, Helvetica, sans-serif;
font-weight: bold;
color: #f5e700;
font-size: 60px;
}
.style4 {
font-family: Verdana, Arial, Helvetica, sans-serif;
font-weight: bold;
color: #28caf9;
font-size: 14px;
}
.style5 {
font-family: Verdana, Arial, Helvetica, sans-serif;
font-weight: bold;
color: #f5e700;
font-size: 14px;
}
.style6 {
font-family: Verdana, Arial, Helvetica, sans-serif;
font-weight: bold;
color: #d7001e;
font-size: 14px;
}
.style7 {
width:685px;
height:120px;
background-color:#393838;
border:1px solid #565656;
font-family: Courier New;
font-weight: bold;
color: #f0f0f0;
font-size: 13px;
}
.styled-select select {
background-color:#393838;
font-weight: bold;
color: #f0f0f0;
width: 178px;
padding: 5px;
font-size: 16px;
line-height: 1;
border: 0;
border-radius: 0;
height: 34px;
-webkit-appearance: none;
}
-->
</style>
<script type='text/javascript'>
function init()
{
var xtime;
document.getElementById('fe_text').innerHTML = '00:00:00';
var language = window.navigator.userLanguage || window.navigator.language;
if (language.indexOf('-') !== -1)
language = language.split('-')[0];
if (language.indexOf('_') !== -1)
language = language.split('_')[0];
change_lang(language);
var ua = window.navigator.userAgent;
var msie = ua.indexOf('MSIE ');
xtime = Math.floor( (1713440863+(12*60*60)) - (Date.now()/1000));
if (msie == 0)
window.setTimeout('update_timestamp('+xtime+')',1000);
else
update_timestamp(xtime);
}
function component(x, y, z)
{
var res
if (z == 1)
res = Math.floor(x / y);
else
res = Math.floor(x / y) % z;
if (res < 10)
res = '0'+res;
return res;
}
function update_timestamp(tstamp)
{
if (tstamp < 1)
{
document.getElementById('fe_text').innerHTML = '00:00:00';
}
else
{
var hours = component(tstamp, 60*60, 1),
minutes = component(tstamp, 60, 60),
seconds = component(tstamp, 1, 60);
document.getElementById('fe_text').innerHTML = hours+':'+minutes+':'+seconds;
tstamp-=1;
window.setTimeout('update_timestamp('+tstamp+')',1000);
}
}
function change_lang(lang)
{
if (lang == "de")
show_de();
else if (lang == "es")
show_es();
else if (lang == "fr")
show_fr();
else if (lang == "it")
show_it();
else if (lang == "nl")
show_nl();
else
show_en();
}
function show_en()
{
document.getElementById('text_01').innerHTML = 'WARNING!';
document.getElementById('text_02').innerHTML = 'Your personal files are encrypted.';
document.getElementById('text_03').innerHTML = 'Your documents, photos, databases and other important files have been encrypted with strongest encryption and unique key, generated for this computer. Private decryption key is stored on a secret Internet server and nobody can decrypt your files until you pay and obtain the private key. The server will eliminate the key after a time period specified in this window.';
document.getElementById('text_09').innerHTML = 'Download TOR Browser from';
document.getElementById('text_10').innerHTML = 'In the Tor Browser open the';
document.getElementById('text_11').innerHTML = '(Note that this server is available via Tor Browser only. Retry in 1 hour if site is not reachable).';
document.getElementById('text_12').innerHTML = 'Write in the following public key in the input from on server:';
}
function show_de()
{
document.getElementById('text_01').innerHTML = 'WARNUNG!';
document.getElementById('text_02').innerHTML = 'Ihre persönlichen Dateien sind verschlüsselt!';
document.getElementById('text_03').innerHTML = 'Ihre Dokumente, Fotos, Datenbanken und andere wichtige Dateien wurden mit der stärkste Verschlüsselung und einem einzigartigen Schlüssel verschlüsselt, der für diesen Computer generiert wurde. Der Dechiffrierschlüssel ist auf einem geheimen Internet-Server gespeichert und niemand kann Ihre Dateien entschlüsseln, bis Sie bezahlen und den privaten Schlüssel erhalten. Der Server wird den Schlüssel nach einer bestimmten Zeit löschen, die in diesem Fenster angezeigt wird.';
document.getElementById('text_09').innerHTML = 'Laden Sie TOR-Browser von';
document.getElementById('text_10').innerHTML = 'Im Tor-Browser öffnen Sie';
document.getElementById('text_11').innerHTML = '(Beachten Sie, dass dieser Server nur über den Tor-Browser verfügbar ist. Wiederholen Sie den Vorgang nach 1 Stunde, wenn die Website nicht erreichbar ist).';
document.getElementById('text_12').innerHTML = 'Schreiben Sie den folgenden öffentlichen Schlüssel in die Eingabemaske auf dem Server:';
}
function show_es()
{
document.getElementById('text_01').innerHTML = '¡PELIGRO!';
document.getElementById('text_02').innerHTML = '¡Tus archivos personales han sido encriptados!';
document.getElementById('text_03').innerHTML = 'Tus documentos, fotos, bases de datos y otros archivos importantes han sido encriptados con una encriptación extremadamente fuerte y una clave única, generada para este computador. La clave de desencriptación privada está almacenada en un servidor de internet secreto. El servidor eliminará la clave luego del tiempo especificado en esta ventana.';
document.getElementById('text_09').innerHTML = 'Descarga el navegador TOR desde';
document.getElementById('text_10').innerHTML = 'En el navegador TOR abre';
document.getElementById('text_11').innerHTML = '(Nota que este servidor solo es accesible desde el navegador TOR. Intenta nuevamente en 1 hora si no puedes acceder).';
document.getElementById('text_12').innerHTML = 'Escribe la siguiente clave publica en la forma de ingreso del servidor:';
}
function show_fr()
{
document.getElementById('text_01').innerHTML = 'ATTENTION!';
document.getElementById('text_02').innerHTML = 'Vos fichiers personnels ont été cryptés !';
document.getElementById('text_03').innerHTML = 'Vos documents, photos, bases de données, et autres fichiers importants ont été cryptées avec le meilleur processus de cryptage et une clé unique générée pour cet ordinateur. La clé privée de cryptage est accessible sur un serveur Internet secret et personne ne peut décrypter vos fichiers à moins que vous ne payiez et obtenez cette clé. Le serveur éliminera la clé après le compte à rebours affiché sur cette fenêtre.';
document.getElementById('text_09').innerHTML = 'Télécharger le navigateur TOR de';
document.getElementById('text_10').innerHTML = 'Dans le navigateur, ouvrez ';
document.getElementById('text_11').innerHTML = '(Veuillez noter que ce serveur est disponible via le navigateur Tor uniquement. Réessayez dans 1 heure si le site n’est pas accessible).';
document.getElementById('text_12').innerHTML = 'Ecrivez les clés publiques suivantes sur le portail d’entrée du serveur :';
}
function show_it()
{
document.getElementById('text_01').innerHTML = 'ATTENZIONE!';
document.getElementById('text_02').innerHTML = 'I tuoi file personali sono criptati!';
document.getElementById('text_03').innerHTML = 'I tuoi documenti, le tue foto, database e altri file importanti sono stati criptati con forte codificazione ed una chiave unica, generata appositamente per questo computer. La chiave segreta di decriptazione è conservata su un server Internet segreto e nessuno può decriptare i tuoi file finché non paghi per ottenere la chiave. Il server eliminerà la chiave dopo il tempo indicato in questa finestra.';
document.getElementById('text_09').innerHTML = 'Scarica il Browser TOR da';
document.getElementById('text_10').innerHTML = 'Nel Browser TOR apri il link';
document.getElementById('text_11').innerHTML = '(Nota che questo server è disponibile solo tramite il Browser TOR. Riprova tra un’ora se il sito non è raggiungibile).';
document.getElementById('text_12').innerHTML = 'Scrivi la seguente chiave pubblica nel modulo di input sul server:';
}
function show_nl()
{
document.getElementById('text_01').innerHTML = 'WAARSCHUWING!';
document.getElementById('text_02').innerHTML = 'Uw persoonlijke bestanden zijn gecodeerd!';
document.getElementById('text_03').innerHTML = 'Uw documenten, foto’s, databases en andere belangrijke bestanden zijn gecodeerd met de sterkste encryptie en een unieke sleutel, gegenereerd voor deze computer. De persoonlijke decoderingssleutel is te vinden op een geheime Internet server en niemand kan uw bestanden decoderen totdat u betaalt en de persoonlijke sleutel heeft. De server zal de sleutel elimineren na de tijdsperiode genoemd in dit venster.';
document.getElementById('text_09').innerHTML = 'Download de TOR Browser van';
document.getElementById('text_10').innerHTML = 'In de Tor Browser, open';
document.getElementById('text_11').innerHTML = '(Let op dat deze server alleen via de Tor Browser te bereiken is. Probeer het na een uur weer als de site niet werkt).';
document.getElementById('text_12').innerHTML = 'Schrijf in de volgende openbare sleutel in het invoerformulier op de server:';
}
//var language = window.navigator.userLanguage || window.navigator.language;
//alert(language);
</script>
</head>
<body onload='init();'>
<div align='center'>
<table width='700' height='100%' border='0' cellpadding='0' cellspacing='0' bgcolor='#000000'>
<tr>
<td width='225' align='left'><img src='file:///C:/Users/Admin/AppData/Local/Temp/iibibi.gif' width='225' height='221' /></td>
<td width='415' valign='top'><div align='center' class='style1' id='text_01'>WARNING!</div><br />
<div align='center' id='text_02'>Your personal files are encrypted.<br />
<br />
<br />
</div>
<div align='center' class='style3' id='fe_text'></div></p>
<div class="styled-select" align='center'>
<select id ="ddl" name="ddl" onmousedown="this.value='';" onchange="change_lang(this.value);">
<option selected disabled value="" style="display:none;">Select language</option>
<option value='en'> ENGLISH</option>
<option value='de'> GERMAN</option>
<option value='es'> SPANISH</option>
<option value='fr'> FRENCH</option>
<option value='it'> ITALIAN</option>
<option value='nl'> DUTCH</option>
</select>
</div>
</td>
</tr>
<tr>
<td colspan='2' align='center'><table width='97%' border='0' cellpadding='0' cellspacing='0'>
<tr>
<td colspan='2' align='left'>
<br />
<div id='text_03'>Your documents, photos, databases and other important files have been encrypted with strongest encryption and unique key, generated for this computer. Private decryption key is stored on a secret Internet server and nobody can decrypt your files until you pay and obtain the private key. The server will eliminate the key after a time period specified in this window.</div><br />
<br />
</td>
</tr>
<tr>
<td colspan='2' align='left'>
1) <span id='text_09'>Download TOR Browser from</span> <a href='http://torproject.org' class='style4'>http://torproject.org</a><br />
2) <span id='text_10'>In the Tor Browser open the</span> <span class='style6'>http://maktubmvgn22y2ns.onion</span><br /><br />
<span id='text_11'>(Note that this server is available via Tor Browser only. Retry in 1 hour if site is not reachable).</span><br />
<br />
<span class='style5' id='text_12'>Write in the following public key in the input from on server:</span><br /><br />
<div align='center'><textarea class='style7'>
4MUZQ-RCTUF-5FDK4-8Z1TJ-WF7B5-K706U-2U70Z-2S63J-8D4JD-434E1-EX1Z2-XUT6P-VGNUC-MTFC7
JP0EZ-YG2DD-A0CWC-MPCZ4-7HEF3-DE2D1-VPFYB-GAN81-C38WW-GEKSX-0VFKH-RNURK-ZENKG-W1QCV
ZGNVW-MJHZK-1KVTA-GR1V4-X434Z-Z66BY-EGX8U-217K8-A4Q7X-JT7EW-Q0SZT-VUY85-EV3YR-ENM7Y
AG547-JV2NB-M7A4T-H744G-0V5A3-SB377-6KT4B-JU7F0-YV8QK-W2XZ7-8QFMH-3N534-66PDX-2C2MD
NGP1P-R1GV5-EX3HW-Z78KW-52TXY-RYBY7-8WKMF-5JA5G-2J7ZJ-W3JTC-ZXATQ-B0F5Q-UG546-H8C37
YUTXU-C0QPX-AETN5-MVKES-ZNF0N-B83ET-JWR8G-EA4RV-33QFX-P7QH7-MR6HJ-PC2BA
</textarea>
<br />
</div>
<br />
<br />
<br />
</div>
</td>
</tr>
</table></td>
</tr>
</table>
</div>
</body>
</html>
URLs
http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd'>
http-equiv='Content-Type
Extracted
Path
C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\_DECRYPT_INFO_iibibi.html
Ransom Note
<!DOCTYPE html PUBLIC '-//W3C//DTD XHTML 1.0 Transitional//EN' 'http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd'>
<!-- saved from url=(0014)about:internet -->
<html xmlns='http://www.w3.org/1999/xhtml'>
<head>
<meta http-equiv='Content-Type' content='text/html; charset=UTF-8' />
<title>iibibi decrypt</title>
<style type='text/css'>
<!--
html, body {margin: 0;padding: 0;margin-left: 0px;margin-top: 0px;margin-right: 0px;margin-bottom: 0px; background-color: #bfbfbf; height: 100%;}
a {color:426BBD; font-family:Tahoma, Verdana, Arial, Helvetica; font-size:12px;}
td {
font-family: Verdana, Arial, Helvetica, sans-serif;
font-weight: bold;
color: #f0f0f0;
font-size: 14px;
}
.style1 {
font-family: Verdana, Arial, Helvetica, sans-serif;
font-weight: bold;
color: #d7001e;
font-size: 48px;
}
.style3 {
font-family: Verdana, Arial, Helvetica, sans-serif;
font-weight: bold;
color: #f5e700;
font-size: 60px;
}
.style4 {
font-family: Verdana, Arial, Helvetica, sans-serif;
font-weight: bold;
color: #28caf9;
font-size: 14px;
}
.style5 {
font-family: Verdana, Arial, Helvetica, sans-serif;
font-weight: bold;
color: #f5e700;
font-size: 14px;
}
.style6 {
font-family: Verdana, Arial, Helvetica, sans-serif;
font-weight: bold;
color: #d7001e;
font-size: 14px;
}
.style7 {
width:685px;
height:120px;
background-color:#393838;
border:1px solid #565656;
font-family: Courier New;
font-weight: bold;
color: #f0f0f0;
font-size: 13px;
}
.styled-select select {
background-color:#393838;
font-weight: bold;
color: #f0f0f0;
width: 178px;
padding: 5px;
font-size: 16px;
line-height: 1;
border: 0;
border-radius: 0;
height: 34px;
-webkit-appearance: none;
}
-->
</style>
<script type='text/javascript'>
function init()
{
var xtime;
document.getElementById('fe_text').innerHTML = '00:00:00';
var language = window.navigator.userLanguage || window.navigator.language;
if (language.indexOf('-') !== -1)
language = language.split('-')[0];
if (language.indexOf('_') !== -1)
language = language.split('_')[0];
change_lang(language);
var ua = window.navigator.userAgent;
var msie = ua.indexOf('MSIE ');
xtime = Math.floor( (1713440868+(12*60*60)) - (Date.now()/1000));
if (msie == 0)
window.setTimeout('update_timestamp('+xtime+')',1000);
else
update_timestamp(xtime);
}
function component(x, y, z)
{
var res
if (z == 1)
res = Math.floor(x / y);
else
res = Math.floor(x / y) % z;
if (res < 10)
res = '0'+res;
return res;
}
function update_timestamp(tstamp)
{
if (tstamp < 1)
{
document.getElementById('fe_text').innerHTML = '00:00:00';
}
else
{
var hours = component(tstamp, 60*60, 1),
minutes = component(tstamp, 60, 60),
seconds = component(tstamp, 1, 60);
document.getElementById('fe_text').innerHTML = hours+':'+minutes+':'+seconds;
tstamp-=1;
window.setTimeout('update_timestamp('+tstamp+')',1000);
}
}
function change_lang(lang)
{
if (lang == "de")
show_de();
else if (lang == "es")
show_es();
else if (lang == "fr")
show_fr();
else if (lang == "it")
show_it();
else if (lang == "nl")
show_nl();
else
show_en();
}
function show_en()
{
document.getElementById('text_01').innerHTML = 'WARNING!';
document.getElementById('text_02').innerHTML = 'Your personal files are encrypted.';
document.getElementById('text_03').innerHTML = 'Your documents, photos, databases and other important files have been encrypted with strongest encryption and unique key, generated for this computer. Private decryption key is stored on a secret Internet server and nobody can decrypt your files until you pay and obtain the private key. The server will eliminate the key after a time period specified in this window.';
document.getElementById('text_09').innerHTML = 'Download TOR Browser from';
document.getElementById('text_10').innerHTML = 'In the Tor Browser open the';
document.getElementById('text_11').innerHTML = '(Note that this server is available via Tor Browser only. Retry in 1 hour if site is not reachable).';
document.getElementById('text_12').innerHTML = 'Write in the following public key in the input from on server:';
}
function show_de()
{
document.getElementById('text_01').innerHTML = 'WARNUNG!';
document.getElementById('text_02').innerHTML = 'Ihre persönlichen Dateien sind verschlüsselt!';
document.getElementById('text_03').innerHTML = 'Ihre Dokumente, Fotos, Datenbanken und andere wichtige Dateien wurden mit der stärkste Verschlüsselung und einem einzigartigen Schlüssel verschlüsselt, der für diesen Computer generiert wurde. Der Dechiffrierschlüssel ist auf einem geheimen Internet-Server gespeichert und niemand kann Ihre Dateien entschlüsseln, bis Sie bezahlen und den privaten Schlüssel erhalten. Der Server wird den Schlüssel nach einer bestimmten Zeit löschen, die in diesem Fenster angezeigt wird.';
document.getElementById('text_09').innerHTML = 'Laden Sie TOR-Browser von';
document.getElementById('text_10').innerHTML = 'Im Tor-Browser öffnen Sie';
document.getElementById('text_11').innerHTML = '(Beachten Sie, dass dieser Server nur über den Tor-Browser verfügbar ist. Wiederholen Sie den Vorgang nach 1 Stunde, wenn die Website nicht erreichbar ist).';
document.getElementById('text_12').innerHTML = 'Schreiben Sie den folgenden öffentlichen Schlüssel in die Eingabemaske auf dem Server:';
}
function show_es()
{
document.getElementById('text_01').innerHTML = '¡PELIGRO!';
document.getElementById('text_02').innerHTML = '¡Tus archivos personales han sido encriptados!';
document.getElementById('text_03').innerHTML = 'Tus documentos, fotos, bases de datos y otros archivos importantes han sido encriptados con una encriptación extremadamente fuerte y una clave única, generada para este computador. La clave de desencriptación privada está almacenada en un servidor de internet secreto. El servidor eliminará la clave luego del tiempo especificado en esta ventana.';
document.getElementById('text_09').innerHTML = 'Descarga el navegador TOR desde';
document.getElementById('text_10').innerHTML = 'En el navegador TOR abre';
document.getElementById('text_11').innerHTML = '(Nota que este servidor solo es accesible desde el navegador TOR. Intenta nuevamente en 1 hora si no puedes acceder).';
document.getElementById('text_12').innerHTML = 'Escribe la siguiente clave publica en la forma de ingreso del servidor:';
}
function show_fr()
{
document.getElementById('text_01').innerHTML = 'ATTENTION!';
document.getElementById('text_02').innerHTML = 'Vos fichiers personnels ont été cryptés !';
document.getElementById('text_03').innerHTML = 'Vos documents, photos, bases de données, et autres fichiers importants ont été cryptées avec le meilleur processus de cryptage et une clé unique générée pour cet ordinateur. La clé privée de cryptage est accessible sur un serveur Internet secret et personne ne peut décrypter vos fichiers à moins que vous ne payiez et obtenez cette clé. Le serveur éliminera la clé après le compte à rebours affiché sur cette fenêtre.';
document.getElementById('text_09').innerHTML = 'Télécharger le navigateur TOR de';
document.getElementById('text_10').innerHTML = 'Dans le navigateur, ouvrez ';
document.getElementById('text_11').innerHTML = '(Veuillez noter que ce serveur est disponible via le navigateur Tor uniquement. Réessayez dans 1 heure si le site n’est pas accessible).';
document.getElementById('text_12').innerHTML = 'Ecrivez les clés publiques suivantes sur le portail d’entrée du serveur :';
}
function show_it()
{
document.getElementById('text_01').innerHTML = 'ATTENZIONE!';
document.getElementById('text_02').innerHTML = 'I tuoi file personali sono criptati!';
document.getElementById('text_03').innerHTML = 'I tuoi documenti, le tue foto, database e altri file importanti sono stati criptati con forte codificazione ed una chiave unica, generata appositamente per questo computer. La chiave segreta di decriptazione è conservata su un server Internet segreto e nessuno può decriptare i tuoi file finché non paghi per ottenere la chiave. Il server eliminerà la chiave dopo il tempo indicato in questa finestra.';
document.getElementById('text_09').innerHTML = 'Scarica il Browser TOR da';
document.getElementById('text_10').innerHTML = 'Nel Browser TOR apri il link';
document.getElementById('text_11').innerHTML = '(Nota che questo server è disponibile solo tramite il Browser TOR. Riprova tra un’ora se il sito non è raggiungibile).';
document.getElementById('text_12').innerHTML = 'Scrivi la seguente chiave pubblica nel modulo di input sul server:';
}
function show_nl()
{
document.getElementById('text_01').innerHTML = 'WAARSCHUWING!';
document.getElementById('text_02').innerHTML = 'Uw persoonlijke bestanden zijn gecodeerd!';
document.getElementById('text_03').innerHTML = 'Uw documenten, foto’s, databases en andere belangrijke bestanden zijn gecodeerd met de sterkste encryptie en een unieke sleutel, gegenereerd voor deze computer. De persoonlijke decoderingssleutel is te vinden op een geheime Internet server en niemand kan uw bestanden decoderen totdat u betaalt en de persoonlijke sleutel heeft. De server zal de sleutel elimineren na de tijdsperiode genoemd in dit venster.';
document.getElementById('text_09').innerHTML = 'Download de TOR Browser van';
document.getElementById('text_10').innerHTML = 'In de Tor Browser, open';
document.getElementById('text_11').innerHTML = '(Let op dat deze server alleen via de Tor Browser te bereiken is. Probeer het na een uur weer als de site niet werkt).';
document.getElementById('text_12').innerHTML = 'Schrijf in de volgende openbare sleutel in het invoerformulier op de server:';
}
//var language = window.navigator.userLanguage || window.navigator.language;
//alert(language);
</script>
</head>
<body onload='init();'>
<div align='center'>
<table width='700' height='100%' border='0' cellpadding='0' cellspacing='0' bgcolor='#000000'>
<tr>
<td width='225' align='left'><img src='file:///C:/Users/Admin/AppData/Local/Temp/iibibi.gif' width='225' height='221' /></td>
<td width='415' valign='top'><div align='center' class='style1' id='text_01'>WARNING!</div><br />
<div align='center' id='text_02'>Your personal files are encrypted.<br />
<br />
<br />
</div>
<div align='center' class='style3' id='fe_text'></div></p>
<div class="styled-select" align='center'>
<select id ="ddl" name="ddl" onmousedown="this.value='';" onchange="change_lang(this.value);">
<option selected disabled value="" style="display:none;">Select language</option>
<option value='en'> ENGLISH</option>
<option value='de'> GERMAN</option>
<option value='es'> SPANISH</option>
<option value='fr'> FRENCH</option>
<option value='it'> ITALIAN</option>
<option value='nl'> DUTCH</option>
</select>
</div>
</td>
</tr>
<tr>
<td colspan='2' align='center'><table width='97%' border='0' cellpadding='0' cellspacing='0'>
<tr>
<td colspan='2' align='left'>
<br />
<div id='text_03'>Your documents, photos, databases and other important files have been encrypted with strongest encryption and unique key, generated for this computer. Private decryption key is stored on a secret Internet server and nobody can decrypt your files until you pay and obtain the private key. The server will eliminate the key after a time period specified in this window.</div><br />
<br />
</td>
</tr>
<tr>
<td colspan='2' align='left'>
1) <span id='text_09'>Download TOR Browser from</span> <a href='http://torproject.org' class='style4'>http://torproject.org</a><br />
2) <span id='text_10'>In the Tor Browser open the</span> <span class='style6'>http://maktubmvgn22y2ns.onion</span><br /><br />
<span id='text_11'>(Note that this server is available via Tor Browser only. Retry in 1 hour if site is not reachable).</span><br />
<br />
<span class='style5' id='text_12'>Write in the following public key in the input from on server:</span><br /><br />
<div align='center'><textarea class='style7'>
4MUZQ-RCTUF-5FDK4-8Z1TJ-WF7B5-K706U-2U70Z-2S63J-8D4JD-434E1-EX1Z2-XUT6P-VGNUC-MTFC7
JP0EZ-YG2DD-A0CWC-MPCZ4-7HEF3-DE2D1-VPFYB-GAN81-C38WW-GEKSX-0VFKH-RNURK-ZENKG-W1QCV
ZGNVW-MJHZK-1KVTA-GR1V4-X434Z-Z66BY-EGX8U-217K8-A4Q7X-JT7EW-Q0SZT-VUY85-EV3YR-ENM7Y
AG547-JV2NB-M7A4T-H744G-0V5A3-SB377-6KT4B-JU7F0-YV8QK-W2XZ7-8QFMH-3N534-66PDX-2C2MD
NGP1P-R1GV5-EX3HW-Z78KW-52TXY-RYBY7-8WKMF-5JA5G-2J7ZJ-W3JTC-ZXATQ-B0F5Q-UG546-H8C37
YUTXU-C0QPX-AETN5-MVKES-ZNF0N-B83ET-JWR8G-EA4RV-33QFX-P7QH7-MR6HJ-PC2BA
</textarea>
<br />
</div>
<br />
<br />
<br />
</div>
</td>
</tr>
</table></td>
</tr>
</table>
</div>
</body>
</html>
URLs
http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd'>
http-equiv='Content-Type
Extracted
Path
C:\Users\Admin\Desktop\backup_iibibi\_DECRYPT_INFO_iibibi.html
Ransom Note
<!DOCTYPE html PUBLIC '-//W3C//DTD XHTML 1.0 Transitional//EN' 'http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd'>
<!-- saved from url=(0014)about:internet -->
<html xmlns='http://www.w3.org/1999/xhtml'>
<head>
<meta http-equiv='Content-Type' content='text/html; charset=UTF-8' />
<title>iibibi decrypt</title>
<style type='text/css'>
<!--
html, body {margin: 0;padding: 0;margin-left: 0px;margin-top: 0px;margin-right: 0px;margin-bottom: 0px; background-color: #bfbfbf; height: 100%;}
a {color:426BBD; font-family:Tahoma, Verdana, Arial, Helvetica; font-size:12px;}
td {
font-family: Verdana, Arial, Helvetica, sans-serif;
font-weight: bold;
color: #f0f0f0;
font-size: 14px;
}
.style1 {
font-family: Verdana, Arial, Helvetica, sans-serif;
font-weight: bold;
color: #d7001e;
font-size: 48px;
}
.style3 {
font-family: Verdana, Arial, Helvetica, sans-serif;
font-weight: bold;
color: #f5e700;
font-size: 60px;
}
.style4 {
font-family: Verdana, Arial, Helvetica, sans-serif;
font-weight: bold;
color: #28caf9;
font-size: 14px;
}
.style5 {
font-family: Verdana, Arial, Helvetica, sans-serif;
font-weight: bold;
color: #f5e700;
font-size: 14px;
}
.style6 {
font-family: Verdana, Arial, Helvetica, sans-serif;
font-weight: bold;
color: #d7001e;
font-size: 14px;
}
.style7 {
width:685px;
height:120px;
background-color:#393838;
border:1px solid #565656;
font-family: Courier New;
font-weight: bold;
color: #f0f0f0;
font-size: 13px;
}
.styled-select select {
background-color:#393838;
font-weight: bold;
color: #f0f0f0;
width: 178px;
padding: 5px;
font-size: 16px;
line-height: 1;
border: 0;
border-radius: 0;
height: 34px;
-webkit-appearance: none;
}
-->
</style>
<script type='text/javascript'>
function init()
{
var xtime;
document.getElementById('fe_text').innerHTML = '00:00:00';
var language = window.navigator.userLanguage || window.navigator.language;
if (language.indexOf('-') !== -1)
language = language.split('-')[0];
if (language.indexOf('_') !== -1)
language = language.split('_')[0];
change_lang(language);
var ua = window.navigator.userAgent;
var msie = ua.indexOf('MSIE ');
xtime = Math.floor( (1713440859+(12*60*60)) - (Date.now()/1000));
if (msie == 0)
window.setTimeout('update_timestamp('+xtime+')',1000);
else
update_timestamp(xtime);
}
function component(x, y, z)
{
var res
if (z == 1)
res = Math.floor(x / y);
else
res = Math.floor(x / y) % z;
if (res < 10)
res = '0'+res;
return res;
}
function update_timestamp(tstamp)
{
if (tstamp < 1)
{
document.getElementById('fe_text').innerHTML = '00:00:00';
}
else
{
var hours = component(tstamp, 60*60, 1),
minutes = component(tstamp, 60, 60),
seconds = component(tstamp, 1, 60);
document.getElementById('fe_text').innerHTML = hours+':'+minutes+':'+seconds;
tstamp-=1;
window.setTimeout('update_timestamp('+tstamp+')',1000);
}
}
function change_lang(lang)
{
if (lang == "de")
show_de();
else if (lang == "es")
show_es();
else if (lang == "fr")
show_fr();
else if (lang == "it")
show_it();
else if (lang == "nl")
show_nl();
else
show_en();
}
function show_en()
{
document.getElementById('text_01').innerHTML = 'WARNING!';
document.getElementById('text_02').innerHTML = 'Your personal files are encrypted.';
document.getElementById('text_03').innerHTML = 'Your documents, photos, databases and other important files have been encrypted with strongest encryption and unique key, generated for this computer. Private decryption key is stored on a secret Internet server and nobody can decrypt your files until you pay and obtain the private key. The server will eliminate the key after a time period specified in this window.';
document.getElementById('text_09').innerHTML = 'Download TOR Browser from';
document.getElementById('text_10').innerHTML = 'In the Tor Browser open the';
document.getElementById('text_11').innerHTML = '(Note that this server is available via Tor Browser only. Retry in 1 hour if site is not reachable).';
document.getElementById('text_12').innerHTML = 'Write in the following public key in the input from on server:';
}
function show_de()
{
document.getElementById('text_01').innerHTML = 'WARNUNG!';
document.getElementById('text_02').innerHTML = 'Ihre persönlichen Dateien sind verschlüsselt!';
document.getElementById('text_03').innerHTML = 'Ihre Dokumente, Fotos, Datenbanken und andere wichtige Dateien wurden mit der stärkste Verschlüsselung und einem einzigartigen Schlüssel verschlüsselt, der für diesen Computer generiert wurde. Der Dechiffrierschlüssel ist auf einem geheimen Internet-Server gespeichert und niemand kann Ihre Dateien entschlüsseln, bis Sie bezahlen und den privaten Schlüssel erhalten. Der Server wird den Schlüssel nach einer bestimmten Zeit löschen, die in diesem Fenster angezeigt wird.';
document.getElementById('text_09').innerHTML = 'Laden Sie TOR-Browser von';
document.getElementById('text_10').innerHTML = 'Im Tor-Browser öffnen Sie';
document.getElementById('text_11').innerHTML = '(Beachten Sie, dass dieser Server nur über den Tor-Browser verfügbar ist. Wiederholen Sie den Vorgang nach 1 Stunde, wenn die Website nicht erreichbar ist).';
document.getElementById('text_12').innerHTML = 'Schreiben Sie den folgenden öffentlichen Schlüssel in die Eingabemaske auf dem Server:';
}
function show_es()
{
document.getElementById('text_01').innerHTML = '¡PELIGRO!';
document.getElementById('text_02').innerHTML = '¡Tus archivos personales han sido encriptados!';
document.getElementById('text_03').innerHTML = 'Tus documentos, fotos, bases de datos y otros archivos importantes han sido encriptados con una encriptación extremadamente fuerte y una clave única, generada para este computador. La clave de desencriptación privada está almacenada en un servidor de internet secreto. El servidor eliminará la clave luego del tiempo especificado en esta ventana.';
document.getElementById('text_09').innerHTML = 'Descarga el navegador TOR desde';
document.getElementById('text_10').innerHTML = 'En el navegador TOR abre';
document.getElementById('text_11').innerHTML = '(Nota que este servidor solo es accesible desde el navegador TOR. Intenta nuevamente en 1 hora si no puedes acceder).';
document.getElementById('text_12').innerHTML = 'Escribe la siguiente clave publica en la forma de ingreso del servidor:';
}
function show_fr()
{
document.getElementById('text_01').innerHTML = 'ATTENTION!';
document.getElementById('text_02').innerHTML = 'Vos fichiers personnels ont été cryptés !';
document.getElementById('text_03').innerHTML = 'Vos documents, photos, bases de données, et autres fichiers importants ont été cryptées avec le meilleur processus de cryptage et une clé unique générée pour cet ordinateur. La clé privée de cryptage est accessible sur un serveur Internet secret et personne ne peut décrypter vos fichiers à moins que vous ne payiez et obtenez cette clé. Le serveur éliminera la clé après le compte à rebours affiché sur cette fenêtre.';
document.getElementById('text_09').innerHTML = 'Télécharger le navigateur TOR de';
document.getElementById('text_10').innerHTML = 'Dans le navigateur, ouvrez ';
document.getElementById('text_11').innerHTML = '(Veuillez noter que ce serveur est disponible via le navigateur Tor uniquement. Réessayez dans 1 heure si le site n’est pas accessible).';
document.getElementById('text_12').innerHTML = 'Ecrivez les clés publiques suivantes sur le portail d’entrée du serveur :';
}
function show_it()
{
document.getElementById('text_01').innerHTML = 'ATTENZIONE!';
document.getElementById('text_02').innerHTML = 'I tuoi file personali sono criptati!';
document.getElementById('text_03').innerHTML = 'I tuoi documenti, le tue foto, database e altri file importanti sono stati criptati con forte codificazione ed una chiave unica, generata appositamente per questo computer. La chiave segreta di decriptazione è conservata su un server Internet segreto e nessuno può decriptare i tuoi file finché non paghi per ottenere la chiave. Il server eliminerà la chiave dopo il tempo indicato in questa finestra.';
document.getElementById('text_09').innerHTML = 'Scarica il Browser TOR da';
document.getElementById('text_10').innerHTML = 'Nel Browser TOR apri il link';
document.getElementById('text_11').innerHTML = '(Nota che questo server è disponibile solo tramite il Browser TOR. Riprova tra un’ora se il sito non è raggiungibile).';
document.getElementById('text_12').innerHTML = 'Scrivi la seguente chiave pubblica nel modulo di input sul server:';
}
function show_nl()
{
document.getElementById('text_01').innerHTML = 'WAARSCHUWING!';
document.getElementById('text_02').innerHTML = 'Uw persoonlijke bestanden zijn gecodeerd!';
document.getElementById('text_03').innerHTML = 'Uw documenten, foto’s, databases en andere belangrijke bestanden zijn gecodeerd met de sterkste encryptie en een unieke sleutel, gegenereerd voor deze computer. De persoonlijke decoderingssleutel is te vinden op een geheime Internet server en niemand kan uw bestanden decoderen totdat u betaalt en de persoonlijke sleutel heeft. De server zal de sleutel elimineren na de tijdsperiode genoemd in dit venster.';
document.getElementById('text_09').innerHTML = 'Download de TOR Browser van';
document.getElementById('text_10').innerHTML = 'In de Tor Browser, open';
document.getElementById('text_11').innerHTML = '(Let op dat deze server alleen via de Tor Browser te bereiken is. Probeer het na een uur weer als de site niet werkt).';
document.getElementById('text_12').innerHTML = 'Schrijf in de volgende openbare sleutel in het invoerformulier op de server:';
}
//var language = window.navigator.userLanguage || window.navigator.language;
//alert(language);
</script>
</head>
<body onload='init();'>
<div align='center'>
<table width='700' height='100%' border='0' cellpadding='0' cellspacing='0' bgcolor='#000000'>
<tr>
<td width='225' align='left'><img src='file:///C:/Users/Admin/AppData/Local/Temp/iibibi.gif' width='225' height='221' /></td>
<td width='415' valign='top'><div align='center' class='style1' id='text_01'>WARNING!</div><br />
<div align='center' id='text_02'>Your personal files are encrypted.<br />
<br />
<br />
</div>
<div align='center' class='style3' id='fe_text'></div></p>
<div class="styled-select" align='center'>
<select id ="ddl" name="ddl" onmousedown="this.value='';" onchange="change_lang(this.value);">
<option selected disabled value="" style="display:none;">Select language</option>
<option value='en'> ENGLISH</option>
<option value='de'> GERMAN</option>
<option value='es'> SPANISH</option>
<option value='fr'> FRENCH</option>
<option value='it'> ITALIAN</option>
<option value='nl'> DUTCH</option>
</select>
</div>
</td>
</tr>
<tr>
<td colspan='2' align='center'><table width='97%' border='0' cellpadding='0' cellspacing='0'>
<tr>
<td colspan='2' align='left'>
<br />
<div id='text_03'>Your documents, photos, databases and other important files have been encrypted with strongest encryption and unique key, generated for this computer. Private decryption key is stored on a secret Internet server and nobody can decrypt your files until you pay and obtain the private key. The server will eliminate the key after a time period specified in this window.</div><br />
<br />
</td>
</tr>
<tr>
<td colspan='2' align='left'>
1) <span id='text_09'>Download TOR Browser from</span> <a href='http://torproject.org' class='style4'>http://torproject.org</a><br />
2) <span id='text_10'>In the Tor Browser open the</span> <span class='style6'>http://maktubmvgn22y2ns.onion</span><br /><br />
<span id='text_11'>(Note that this server is available via Tor Browser only. Retry in 1 hour if site is not reachable).</span><br />
<br />
<span class='style5' id='text_12'>Write in the following public key in the input from on server:</span><br /><br />
<div align='center'><textarea class='style7'>
4MUZQ-RCTUF-5FDK4-8Z1TJ-WF7B5-K706U-2U70Z-2S63J-8D4JD-434E1-EX1Z2-XUT6P-VGNUC-MTFC7
JP0EZ-YG2DD-A0CWC-MPCZ4-7HEF3-DE2D1-VPFYB-GAN81-C38WW-GEKSX-0VFKH-RNURK-ZENKG-W1QCV
ZGNVW-MJHZK-1KVTA-GR1V4-X434Z-Z66BY-EGX8U-217K8-A4Q7X-JT7EW-Q0SZT-VUY85-EV3YR-ENM7Y
AG547-JV2NB-M7A4T-H744G-0V5A3-SB377-6KT4B-JU7F0-YV8QK-W2XZ7-8QFMH-3N534-66PDX-2C2MD
NGP1P-R1GV5-EX3HW-Z78KW-52TXY-RYBY7-8WKMF-5JA5G-2J7ZJ-W3JTC-ZXATQ-B0F5Q-UG546-H8C37
YUTXU-C0QPX-AETN5-MVKES-ZNF0N-B83ET-JWR8G-EA4RV-33QFX-P7QH7-MR6HJ-PC2BA
</textarea>
<br />
</div>
<br />
<br />
<br />
</div>
</td>
</tr>
</table></td>
</tr>
</table>
</div>
</body>
</html>
URLs
http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd'>
http-equiv='Content-Type
Signatures
-
Maktub Locker
Advanced ransomware family capable of offline decryption, generally distributed via .scr email attachments.
-
Deletes shadow copies 2 TTPs
Ransomware often targets backup files to inhibit system recovery.
-
Renames multiple (244) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
ACProtect 1.3x - 1.4x DLL software 3 IoCs
Detects file using ACProtect software.
-
Uses Tor communications 1 TTPs
Malware can proxy its traffic through Tor for more anonymity.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Interacts with shadow copies 2 TTPs 1 IoCs
Shadow copies are often targeted by ransomware to inhibit system recovery.
-
Modifies registry class 1 IoCs
-
Suspicious behavior: AddClipboardFormatListener 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 3 IoCs
-
Suspicious use of SetWindowsHookEx 7 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
-
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
Processes
-
C:\Users\Admin\AppData\Local\Temp\0145f04a8356780d52774ce5f7dd0a02f6d5b321694ed805ce3e27bdf04d3c94.exe"C:\Users\Admin\AppData\Local\Temp\0145f04a8356780d52774ce5f7dd0a02f6d5b321694ed805ce3e27bdf04d3c94.exe"1⤵
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\0145f04a8356780d52774ce5f7dd0a02f6d5b321694ed805ce3e27bdf04d3c94.rtf" /o ""2⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
-
-
C:\Windows\SYSTEM32\vssadmin.exevssadmin.exe delete shadows /all /quiet2⤵
- Interacts with shadow copies
-
-
C:\Windows\system32\vssvc.exeC:\Windows\system32\vssvc.exe1⤵
- Suspicious use of AdjustPrivilegeToken
Network
-
DNSroaming.officeapps.live.comRemote address:8.8.8.8:53Requestroaming.officeapps.live.comIN AResponseroaming.officeapps.live.comIN CNAMEprod.roaming1.live.com.akadns.netprod.roaming1.live.com.akadns.netIN CNAMEeur.roaming1.live.com.akadns.neteur.roaming1.live.com.akadns.netIN CNAMEneu-azsc-000.roaming.officeapps.live.comneu-azsc-000.roaming.officeapps.live.comIN CNAMEosiprod-neu-buff-azsc-000.northeurope.cloudapp.azure.comosiprod-neu-buff-azsc-000.northeurope.cloudapp.azure.comIN A52.109.76.243 -
POSThttps://roaming.officeapps.live.com/rs/RoamingSoapService.svcRemote address:52.109.76.243:443RequestPOST /rs/RoamingSoapService.svc HTTP/1.1
Cache-Control: no-cache
Connection: Keep-Alive
Pragma: no-cache
Content-Type: text/xml; charset=utf-8
User-Agent: MS-WebServices/1.0
SOAPAction: "http://tempuri.org/IRoamingSettingsService/GetConfig"
Content-Length: 511
Host: roaming.officeapps.live.com
ResponseHTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/xml; charset=utf-8
Server: Microsoft-IIS/10.0
X-OfficeFE: RoamingFE_IN_140
X-OfficeVersion: 16.0.17608.30575
X-OfficeCluster: neu-000.roaming.officeapps.live.com
X-CorrelationId: ea679da8-6ad6-4bd6-ad8a-9a808813ba66
X-Powered-By: ASP.NET
Date: Thu, 18 Apr 2024 11:39:31 GMT
Content-Length: 654
-
DNS97.32.109.52.in-addr.arpaRemote address:8.8.8.8:53Request97.32.109.52.in-addr.arpaIN PTRResponse
-
DNS243.76.109.52.in-addr.arpaRemote address:8.8.8.8:53Request243.76.109.52.in-addr.arpaIN PTRResponse
-
DNS82.90.14.23.in-addr.arpaRemote address:8.8.8.8:53Request82.90.14.23.in-addr.arpaIN PTRResponse82.90.14.23.in-addr.arpaIN PTRa23-14-90-82deploystaticakamaitechnologiescom
-
DNS64.159.190.20.in-addr.arpaRemote address:8.8.8.8:53Request64.159.190.20.in-addr.arpaIN PTRResponse
-
DNS64.159.190.20.in-addr.arpaRemote address:8.8.8.8:53Request64.159.190.20.in-addr.arpaIN PTR
-
DNS6.173.189.20.in-addr.arpaRemote address:8.8.8.8:53Request6.173.189.20.in-addr.arpaIN PTRResponse
-
GEThttp://128.31.0.39:9131/tor/status-vote/current/consensusRemote address:128.31.0.39:9131RequestGET /tor/status-vote/current/consensus HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:45.0) Gecko/20100101 Firefox/45.0
Host: 128.31.0.39:9131
ResponseHTTP/1.0 200 OK
Date: Thu, 18 Apr 2024 11:39:42 GMT
Content-Type: text/plain
X-Your-Address-Is: 191.101.209.39
Content-Encoding: identity
Expires: Thu, 18 Apr 2024 12:00:00 GMT
Vary: X-Or-Diff-From-Consensus
-
DNS39.0.31.128.in-addr.arpaRemote address:8.8.8.8:53Request39.0.31.128.in-addr.arpaIN PTRResponse39.0.31.128.in-addr.arpaIN PTRbelegostcsailmitedu
-
DNSmetadata.templates.cdn.office.netRemote address:8.8.8.8:53Requestmetadata.templates.cdn.office.netIN AResponsemetadata.templates.cdn.office.netIN CNAMEtemplatesmetadata.office.nettemplatesmetadata.office.netIN CNAMEtemplatesmetadata.office.net.edgekey.nettemplatesmetadata.office.net.edgekey.netIN CNAMEe26769.dscb.akamaiedge.nete26769.dscb.akamaiedge.netIN A23.62.61.162e26769.dscb.akamaiedge.netIN A23.62.61.184
-
GEThttps://metadata.templates.cdn.office.net/client/templates/gallery?lcid=1033&syslcid=1033&uilcid=1033&app=0&ver=16&tl=2&build=16.0.12527>ype=0%2C1%2C2%2C5%2CRemote address:23.62.61.162:443RequestGET /client/templates/gallery?lcid=1033&syslcid=1033&uilcid=1033&app=0&ver=16&tl=2&build=16.0.12527>ype=0%2C1%2C2%2C5%2C HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: metadata.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Type: text/xml
Server: Kestrel
Content-Encoding: gzip
Content-Length: 1265
Cache-Control: max-age=33598
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Vary: Accept-Encoding
-
DNSbinaries.templates.cdn.office.netRemote address:8.8.8.8:53Requestbinaries.templates.cdn.office.netIN AResponsebinaries.templates.cdn.office.netIN CNAMEbinaries.templates.cdn.office.net.edgesuite.netbinaries.templates.cdn.office.net.edgesuite.netIN CNAMEa1847.dscg2.akamai.neta1847.dscg2.akamai.netIN A95.100.202.48a1847.dscg2.akamai.netIN A95.100.202.8
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp01840907.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp01840907.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 43653
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: 2jOARYFw5gy+pyYC/dDZVQ==
Last-Modified: Fri, 22 Apr 2016 16:08:15 GMT
ETag: 0x8D36AC84F8E1FB0
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 8eae550b-501e-00a3-25e0-90efef000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp1000111403.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp1000111403.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 953453
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: 1OrACenntkuLABroK4EC+g==
Last-Modified: Thu, 12 Jul 2018 00:20:09 GMT
ETag: 0x8D5E78D3A5A7B12
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 2708e9c9-c01e-0054-07e0-90d2e3000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp03328893.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp03328893.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 20235
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: 48ZBc7L0qnq3LhOWqVFL2A==
Last-Modified: Fri, 22 Apr 2016 16:10:17 GMT
ETag: 0x8D36AC898C9059A
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 667c92e1-101e-00a2-75e0-90b033000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp0403391901.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp0403391901.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 1097591
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: v5XpZ+fRzsjv5Ca8ASfT3g==
Last-Modified: Wed, 29 Aug 2018 18:16:09 GMT
ETag: 0x8D60DDB7EAA50F0
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 214eecaf-201e-0142-1ce0-90cda7000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp02835233.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp02835233.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 46413
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: xFXEvEvsng2mfE0eU+RtWg==
Last-Modified: Fri, 22 Apr 2016 16:09:25 GMT
ETag: 0x8D36AC879BBB45C
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 0840d45c-401e-00af-07e0-9078e7000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp1000111502.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp1000111502.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 230916
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: k/qfd5Ugqy0irE6oZLe7NA==
Last-Modified: Thu, 12 Jul 2018 00:23:55 GMT
ETag: 0x8D5E78DC0BDFFD8
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 274c3272-201e-0038-5ee0-907930000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp03328916.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp03328916.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 26944
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: +RPdhJFXUwQthWzsTl2rpQ==
Last-Modified: Fri, 22 Apr 2016 16:09:47 GMT
ETag: 0x8D36AC886C4C4EE
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 2e9fcba0-a01e-0021-0be0-90ae51000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp03998159.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp03998159.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 3417042
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: dJw2FeVMjmh1UYz9hOWhsg==
Last-Modified: Fri, 22 Apr 2016 15:41:56 GMT
ETag: 0x8D36AC4A270AB9B
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: a343fbf1-b01e-0132-31e0-9026ec000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp02851216.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp02851216.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 34816
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: YoYxJM3NoTXswOcieCy4iA==
Last-Modified: Fri, 22 Apr 2016 16:09:38 GMT
ETag: 0x8D36AC8813CE0D3
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 9e9e68ec-601e-0131-6fe0-909534000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp0345749601.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp0345749601.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 550906
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: HBIxXIYqdFpkfa1UbrQmfg==
Last-Modified: Wed, 29 Aug 2018 18:21:00 GMT
ETag: 0x8D60DDC2BE7DF3C
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 85a56e03-c01e-00ec-55e0-909ebb000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp02851217.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp02851217.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 33610
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: UYBOJVxXMXYDn01bVcEqsg==
Last-Modified: Fri, 22 Apr 2016 16:09:38 GMT
ETag: 0x8D36AC881987151
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 7191d33d-601e-0143-4fe0-90927b000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp0403392901.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp0403392901.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 1766185
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: go+WAx9Av468teUqrut+TA==
Last-Modified: Wed, 29 Aug 2018 18:21:38 GMT
ETag: 0x8D60DDC42FF6DAF
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: cee345e3-001e-0120-11e0-9012f0000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp02851218.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp02851218.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 31835
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: kqgZ1DSoquosZfDMLzO7Og==
Last-Modified: Fri, 22 Apr 2016 16:09:39 GMT
ETag: 0x8D36AC881E66CE5
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: c04d6ba2-b01e-00bb-04e0-903088000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp02851219.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp02851219.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 31605
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: ae2zv4HJn+ipS7oDQIxa4Q==
Last-Modified: Fri, 22 Apr 2016 16:09:39 GMT
ETag: 0x8D36AC8822FFB6E
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: b9a5ca7c-701e-0022-18e0-904f35000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp0345751001.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp0345751001.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 1065873
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: 4RAcym4/7bKLV69MQbUNNw==
Last-Modified: Wed, 29 Aug 2018 18:15:36 GMT
ETag: 0x8D60DDB6B23796A
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 775b8925-301e-0005-20e0-90cc16000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp02851220.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp02851220.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 31482
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: 8Q35ApgPHVvuqWssZoQIpw==
Last-Modified: Fri, 22 Apr 2016 16:09:40 GMT
ETag: 0x8D36AC8827914A7
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 91cc8881-901e-010a-3ae0-90d090000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp02851221.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp02851221.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 31562
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: HW+Oc6BmKkjTMgkKTIyJjw==
Last-Modified: Fri, 22 Apr 2016 16:09:40 GMT
ETag: 0x8D36AC882C4ED43
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 69347acc-f01e-0151-26e0-90e9ab000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp0345751501.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp0345751501.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 222992
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: Jr6rnM6v5Pvwt8A2JoGp0g==
Last-Modified: Wed, 29 Aug 2018 18:20:49 GMT
ETag: 0x8D60DDC25D3B258
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 044e30be-401e-00e4-2ce0-902b63000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp02851222.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp02851222.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 28911
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: bXh7HiI9trkbaSOAYsyocg==
Last-Modified: Fri, 22 Apr 2016 15:41:42 GMT
ETag: 0x8D36AC49A221679
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 952c4392-601e-00b7-55e0-90376c000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp02851224.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp02851224.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 30957
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: 08kDbk4RWegysbTS6dQr8A==
Last-Modified: Fri, 22 Apr 2016 16:09:42 GMT
ETag: 0x8D36AC883A171B7
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 214ee531-201e-0142-09e0-90cda7000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp0403392701.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp0403392701.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 2527736
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: 8laspQm0xsAUTSeMcDawqA==
Last-Modified: Wed, 29 Aug 2018 18:18:47 GMT
ETag: 0x8D60DDBDD02F94A
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 47cb7cd9-901e-0077-21e0-905fbe000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp02851223.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp02851223.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 32833
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: IFr1FgTvlu8ejmAhJUH3Qg==
Last-Modified: Fri, 22 Apr 2016 16:09:41 GMT
ETag: 0x8D36AC88357BC32
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: be60fcc5-101e-0159-30e0-90f3a4000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp02851225.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp02851225.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 31008
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: 4DPMvHunh6L4JM4JUuV9RA==
Last-Modified: Fri, 22 Apr 2016 16:09:42 GMT
ETag: 0x8D36AC883F49D7D
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 9bdb3ee7-101e-0024-0fe0-907c8a000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp0403393701.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp0403393701.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 3256855
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: iGe99fx1Tanab1ujQTNFlQ==
Last-Modified: Wed, 29 Aug 2018 18:19:43 GMT
ETag: 0x8D60DDBFE4BB50C
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 448333ef-001e-00f3-0fe0-902dbf000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp02851226.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp02851226.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 35519
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: U+6dpJ0LhDVwOOzzdoONLg==
Last-Modified: Fri, 22 Apr 2016 15:41:43 GMT
ETag: 0x8D36AC49ACD2925
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 7029a38f-901e-0107-37e0-9088b9000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp0309043001.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp0309043001.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 307348
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: DrxFqg5nzENdB0VDg3H5SA==
Last-Modified: Wed, 29 Aug 2018 18:20:24 GMT
ETag: 0x8D60DDC169CBCB0
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: a3cbaf2e-701e-008a-54e0-90824a000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp02851227.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp02851227.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 31471
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: karb7EFxz6gpK2GEkvXvNA==
Last-Modified: Fri, 22 Apr 2016 15:41:43 GMT
ETag: 0x8D36AC49B376014
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: fd424c43-e01e-00e2-62e0-90dc1b000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp03998158.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp03998158.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 42788
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: IaS3txYxwszaX7umN1Hw0g==
Last-Modified: Fri, 22 Apr 2016 15:41:55 GMT
ETag: 0x8D36AC4A24B210A
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 322a22d8-d01e-00ea-4de0-90c768000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp0309043402.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp0309043402.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 723359
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: dIpTxr3Vzpe9VKdsejNChg==
Last-Modified: Wed, 29 Aug 2018 18:14:30 GMT
ETag: 0x8D60DDB43B59EC5
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 6b83e3b8-e01e-013f-64e0-90bc84000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp03328884.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp03328884.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 22008
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: q78QzulIDkHYEnfpU4+Yyw==
Last-Modified: Fri, 22 Apr 2016 16:10:17 GMT
ETag: 0x8D36AC8987823BE
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 0840d3d7-401e-00af-12e0-9078e7000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp0403391701.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp0403391701.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 698244
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: 4pziZjpWoUROqjcy/7gpQA==
Last-Modified: Wed, 29 Aug 2018 18:15:39 GMT
ETag: 0x8D60DDB6CAEA91D
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: f0facb95-e01e-00a6-11e0-903d34000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp03328905.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp03328905.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 20457
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: TvpI7DB+ry+bNGoHPGf8+w==
Last-Modified: Fri, 22 Apr 2016 15:41:39 GMT
ETag: 0x8D36AC498BB27EF
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 4fdc6833-201e-0055-28e0-90d31e000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp0403392501.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp0403392501.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 1310275
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: nJ9JpHIiwYAlzCVXUzepZQ==
Last-Modified: Wed, 29 Aug 2018 18:17:15 GMT
ETag: 0x8D60DDBA5EDDA1A
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: ca6efc10-401e-004e-01e0-90fd8c000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp03328908.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp03328908.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 31083
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: iamBjmZY1zpztkJSL/hwHw==
Last-Modified: Fri, 22 Apr 2016 16:09:46 GMT
ETag: 0x8D36AC8865F4922
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 3ced73e5-001e-00ae-17e0-90273b000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp0345749101.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp0345749101.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 261258
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: ZYKNx76Loc5hrXFCJSrMVA==
Last-Modified: Wed, 29 Aug 2018 18:23:58 GMT
ETag: 0x8D60DDC968C4F0E
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 6dacbb2d-101e-0114-06e0-903c48000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp03328925.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp03328925.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 25314
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: xH40MK+BPfiwLhy0gp3ZSw==
Last-Modified: Fri, 22 Apr 2016 15:41:40 GMT
ETag: 0x8D36AC49952B1C0
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 317ce797-d01e-00c8-7ee0-90a95e000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp0403392101.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp0403392101.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 1881952
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: U8X0WyLhM7KNS9O1o1D9vQ==
Last-Modified: Wed, 29 Aug 2018 18:19:46 GMT
ETag: 0x8D60DDC0007D57D
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 16771a2c-401e-0028-40e0-904fd6000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp03328919.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp03328919.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 22149
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: ZsUZnPT7GL1Pnz8sywdABw==
Last-Modified: Fri, 22 Apr 2016 15:41:40 GMT
ETag: 0x8D36AC4992C63CE
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 08e0efd8-c01e-00b1-05e0-90c014000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp0345750301.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp0345750301.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 640684
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: +TNk7sbE/6V2jeVFosNPBw==
Last-Modified: Wed, 29 Aug 2018 18:15:11 GMT
ETag: 0x8D60DDB5C4DB3A1
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: c04d6b69-b01e-00bb-52e0-903088000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp03328932.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp03328932.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 20554
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: SGy8siO4cxMv+vS4rQrQRA==
Last-Modified: Fri, 22 Apr 2016 16:09:49 GMT
ETag: 0x8D36AC887A4CC19
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 3b2d84a9-a01e-0043-2fe0-906c76000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp03328935.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp03328935.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 23597
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: fGRexQWYL+Up0OUDWzeP/A==
Last-Modified: Fri, 22 Apr 2016 15:41:41 GMT
ETag: 0x8D36AC49996C1E0
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 274c321a-201e-0038-0ce0-907930000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp03328940.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp03328940.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 21791
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: e/iLPKIOtx7UU6M2GQjgEA==
Last-Modified: Fri, 22 Apr 2016 15:41:41 GMT
ETag: 0x8D36AC499BA77A5
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: e6d0ad29-301e-0123-60e0-9011f7000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp03328972.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp03328972.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 21111
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: 0wrSbbtt7KT90pT0jtrVXQ==
Last-Modified: Fri, 22 Apr 2016 16:09:51 GMT
ETag: 0x8D36AC888CEAFBE
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: c16ddbaa-b01e-003d-56e0-90fc31000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp03328951.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp03328951.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 19893
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: 75y4vfvAjwO+9RmtZrpkLw==
Last-Modified: Fri, 22 Apr 2016 15:41:41 GMT
ETag: 0x8D36AC499DEA2B6
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 16771a05-401e-0028-1fe0-904fd6000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp03328975.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp03328975.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 22594
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: 7gEpx8waySu8PWyw9lP8rg==
Last-Modified: Fri, 22 Apr 2016 16:09:51 GMT
ETag: 0x8D36AC889183E51
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: a1fc0b28-701e-0032-80e0-908a5d000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp03328983.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp03328983.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 21875
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: 5TIDh2JQP/oTcd8D+i4iLQ==
Last-Modified: Fri, 22 Apr 2016 16:09:52 GMT
ETag: 0x8D36AC88963C8B3
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: be610276-101e-0159-2fe0-90f3a4000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp03328990.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp03328990.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 19288
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: uab/cVcZ7p3hZCGrmDynRQ==
Last-Modified: Fri, 22 Apr 2016 16:09:53 GMT
ETag: 0x8D36AC88A1DF716
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: e905325f-201e-004d-32e0-9045c6000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp03328986.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp03328986.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 22340
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: iyn6tQb9ZcIcnNb+a7vBRg==
Last-Modified: Fri, 22 Apr 2016 15:41:42 GMT
ETag: 0x8D36AC49A9463F7
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 20b88228-001e-002f-46e0-90b953000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp0345744402.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp0345744402.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 295527
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: mgcDXvgCv4n27SVNDbAqsA==
Last-Modified: Wed, 29 Aug 2018 21:59:16 GMT
ETag: 0x8D60DFAA9CC48C3
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 84001c69-001e-00a7-11e0-90018a000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp03328998.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp03328998.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 21357
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: l/W3t+nhKBmZRopcQssS5w==
Last-Modified: Fri, 22 Apr 2016 16:09:53 GMT
ETag: 0x8D36AC88A7F05EE
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 4bb5f91f-101e-012b-32e0-90f4eb000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp0345746401.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp0345746401.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 276650
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: hNjzhI50JMvjgB+VcOBQGA==
Last-Modified: Wed, 29 Aug 2018 18:16:15 GMT
ETag: 0x8D60DDB824A3C69
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 794c4e36-f01e-0135-79e0-90d069000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp0345747501.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp0345747501.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 271273
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: IUN4l8m4isLLK7L++SLRkQ==
Last-Modified: Wed, 29 Aug 2018 18:16:49 GMT
ETag: 0x8D60DDB967B9FA5
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 75091ed6-a01e-012d-07e0-90fdfc000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
GEThttps://binaries.templates.cdn.office.net/support/templates/en-us/tp0345748501.cabRemote address:95.100.202.48:443RequestGET /support/templates/en-us/tp0345748501.cab HTTP/1.1
Connection: Keep-Alive
Accept-Encoding: gzip
User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.12527; Pro)
X-IDCRL_ACCEPTED: t
X-Office-Version: 16.0.12527
X-Office-Application: 0
X-Office-Platform: Win32
X-Office-AudienceGroup: Production
X-Office-SessionId: 4D9E2320-F587-485C-99E0-607EB206E281
Host: binaries.templates.cdn.office.net
ResponseHTTP/1.1 200 OK
Content-Length: 2591108
Content-Type: application/vnd.ms-cab-compressed
Content-MD5: vrEqBGTQlsozuupDUs6ADw==
Last-Modified: Wed, 29 Aug 2018 18:18:42 GMT
ETag: 0x8D60DDBD9E38C6B
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 48fbab6c-b01e-00d3-2fe0-9087cc000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 18 Apr 2024 11:39:47 GMT
Connection: keep-alive
Access-Control-Allow-Headers: *
Vary: Origin
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
-
DNS151.223.88.45.in-addr.arpaRemote address:8.8.8.8:53Request151.223.88.45.in-addr.arpaIN PTRResponse151.223.88.45.in-addr.arpaIN PTRtor-exit-router-a13quidoorg
-
DNS162.61.62.23.in-addr.arpaRemote address:8.8.8.8:53Request162.61.62.23.in-addr.arpaIN PTRResponse162.61.62.23.in-addr.arpaIN PTRa23-62-61-162deploystaticakamaitechnologiescom
-
DNS48.202.100.95.in-addr.arpaRemote address:8.8.8.8:53Request48.202.100.95.in-addr.arpaIN PTRResponse48.202.100.95.in-addr.arpaIN PTRa95-100-202-48deploystaticakamaitechnologiescom
-
GEThttp://185.177.229.20/tor/server/fp/61a8aa477e06ba07445265f06be68cd51aceda7dRemote address:185.177.229.20:80RequestGET /tor/server/fp/61a8aa477e06ba07445265f06be68cd51aceda7d HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:45.0) Gecko/20100101 Firefox/45.0
Host: 185.177.229.20
-
DNS20.229.177.185.in-addr.arpaRemote address:8.8.8.8:53Request20.229.177.185.in-addr.arpaIN PTRResponse20.229.177.185.in-addr.arpaIN PTR20-229-177-185clientsgthostcom
-
DNS184.159.221.77.in-addr.arpaRemote address:8.8.8.8:53Request184.159.221.77.in-addr.arpaIN PTRResponse184.159.221.77.in-addr.arpaIN PTRbent-sea_n1aezanetwork
-
DNS0.204.248.87.in-addr.arpaRemote address:8.8.8.8:53Request0.204.248.87.in-addr.arpaIN PTRResponse0.204.248.87.in-addr.arpaIN PTRhttps-87-248-204-0lhrllnwnet
-
DNS248.165.8.185.in-addr.arpaRemote address:8.8.8.8:53Request248.165.8.185.in-addr.arpaIN PTRResponse248.165.8.185.in-addr.arpaIN PTRvpscz-procz
-
GEThttp://2.58.95.38/tor/server/fp/b882ecd090c8128746e9012756424ced20759f76Remote address:2.58.95.38:80RequestGET /tor/server/fp/b882ecd090c8128746e9012756424ced20759f76 HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:45.0) Gecko/20100101 Firefox/45.0
Host: 2.58.95.38
ResponseHTTP/1.0 200 OK
Date: Thu, 18 Apr 2024 11:40:59 GMT
Content-Type: text/plain
X-Your-Address-Is: 191.101.209.39
Content-Encoding: identity
Expires: Sat, 20 Apr 2024 11:40:59 GMT
-
DNS100.236.219.104.in-addr.arpaRemote address:8.8.8.8:53Request100.236.219.104.in-addr.arpaIN PTRResponse100.236.219.104.in-addr.arpaIN PTRip-104-219-236-100host datawagonnet
-
DNS38.95.58.2.in-addr.arpaRemote address:8.8.8.8:53Request38.95.58.2.in-addr.arpaIN PTRResponse38.95.58.2.in-addr.arpaIN PTRhosted-bypfcloudio
-
DNS62.88.143.91.in-addr.arpaRemote address:8.8.8.8:53Request62.88.143.91.in-addr.arpaIN PTRResponse62.88.143.91.in-addr.arpaIN PTR91-143-88-62que3de
-
DNS96.160.194.91.in-addr.arpaRemote address:8.8.8.8:53Request96.160.194.91.in-addr.arpaIN PTRResponse96.160.194.91.in-addr.arpaIN PTRvm2225160stark-industries solutions
-
GEThttp://163.172.211.128/tor/server/fp/2ca3206e63f347dc136710b4a2ecefd9b8f7ffc1Remote address:163.172.211.128:80RequestGET /tor/server/fp/2ca3206e63f347dc136710b4a2ecefd9b8f7ffc1 HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:45.0) Gecko/20100101 Firefox/45.0
Host: 163.172.211.128
ResponseHTTP/1.0 200 OK
Date: Thu, 18 Apr 2024 11:41:03 GMT
Content-Type: text/plain
X-Your-Address-Is: 191.101.209.39
Content-Encoding: identity
Expires: Sat, 20 Apr 2024 11:41:03 GMT
-
DNS128.211.172.163.in-addr.arpaRemote address:8.8.8.8:53Request128.211.172.163.in-addr.arpaIN PTRResponse128.211.172.163.in-addr.arpaIN PTRnsecasperlefantomnet
-
DNS202.100.189.193.in-addr.arpaRemote address:8.8.8.8:53Request202.100.189.193.in-addr.arpaIN PTRResponse202.100.189.193.in-addr.arpaIN PTRtor-exit-9
-
DNS90.65.42.20.in-addr.arpaRemote address:8.8.8.8:53Request90.65.42.20.in-addr.arpaIN PTRResponse
-
GEThttp://151.45.5.118/tor/server/fp/036efd2e61dea3d2fee59861ba4245e4de864112Remote address:151.45.5.118:80RequestGET /tor/server/fp/036efd2e61dea3d2fee59861ba4245e4de864112 HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:45.0) Gecko/20100101 Firefox/45.0
Host: 151.45.5.118
ResponseHTTP/1.1 301 Moved Permanently
Location: https://151.45.5.118/tor/server/fp/036efd2e61dea3d2fee59861ba4245e4de864112
Date: Thu, 18 Apr 2024 11:41:46 GMT
Content-Length: 17
Content-Type: text/plain; charset=utf-8
-
GEThttp://206.75.30.189/tor/server/fp/f54b42aedd880627fa4746bdbbc1c2500a85227fRemote address:206.75.30.189:80RequestGET /tor/server/fp/f54b42aedd880627fa4746bdbbc1c2500a85227f HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:45.0) Gecko/20100101 Firefox/45.0
Host: 206.75.30.189
ResponseHTTP/1.0 200 OK
Date: Thu, 18 Apr 2024 11:41:48 GMT
Content-Type: text/plain
X-Your-Address-Is: 191.101.209.39
Content-Encoding: identity
Expires: Sat, 20 Apr 2024 11:41:48 GMT
-
DNS118.5.45.151.in-addr.arpaRemote address:8.8.8.8:53Request118.5.45.151.in-addr.arpaIN PTRResponse118.5.45.151.in-addr.arpaIN PTRadsl-ull-118-545-151windit
-
GEThttp://188.63.254.7/tor/server/fp/e21336a5d5b02839c63e1f68dc1ce03b067bacc8Remote address:188.63.254.7:80RequestGET /tor/server/fp/e21336a5d5b02839c63e1f68dc1ce03b067bacc8 HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:45.0) Gecko/20100101 Firefox/45.0
Host: 188.63.254.7
-
DNS41.199.135.135.in-addr.arpaRemote address:8.8.8.8:53Request41.199.135.135.in-addr.arpaIN PTRResponse41.199.135.135.in-addr.arpaIN PTRh135-135-199-41abdlwi broadbanddynamictdsnet
-
DNS189.30.75.206.in-addr.arpaRemote address:8.8.8.8:53Request189.30.75.206.in-addr.arpaIN PTRResponse189.30.75.206.in-addr.arpaIN PTRd206-75-30-189abhsiatelusnet
-
DNS56.206.208.91.in-addr.arpaRemote address:8.8.8.8:53Request56.206.208.91.in-addr.arpaIN PTRResponse56.206.208.91.in-addr.arpaIN PTRMetalRelay1
-
DNS7.254.63.188.in-addr.arpaRemote address:8.8.8.8:53Request7.254.63.188.in-addr.arpaIN PTRResponse7.254.63.188.in-addr.arpaIN PTR725463188dynamicwlinerescustswisscomch
-
GEThttp://204.8.96.182/tor/server/fp/104944b9596f8d0340790442ec75ebf368375a1fRemote address:204.8.96.182:80RequestGET /tor/server/fp/104944b9596f8d0340790442ec75ebf368375a1f HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:45.0) Gecko/20100101 Firefox/45.0
Host: 204.8.96.182
ResponseHTTP/1.0 200 OK
Date: Thu, 18 Apr 2024 11:42:25 GMT
Content-Type: text/plain
X-Your-Address-Is: 191.101.209.39
Content-Encoding: identity
Expires: Sat, 20 Apr 2024 11:42:25 GMT
-
DNS28.142.122.193.in-addr.arpaRemote address:8.8.8.8:53Request28.142.122.193.in-addr.arpaIN PTRResponse
-
DNS182.96.8.204.in-addr.arpaRemote address:8.8.8.8:53Request182.96.8.204.in-addr.arpaIN PTRResponse
-
DNS213.137.143.94.in-addr.arpaRemote address:8.8.8.8:53Request213.137.143.94.in-addr.arpaIN PTRResponse
-
GEThttp://178.203.122.107/tor/server/fp/ce4c88b2ca700655ac0cc98f093973ea86caee4dRemote address:178.203.122.107:80RequestGET /tor/server/fp/ce4c88b2ca700655ac0cc98f093973ea86caee4d HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:45.0) Gecko/20100101 Firefox/45.0
Host: 178.203.122.107
ResponseHTTP/1.1 308 Permanent Redirect
Connection: close
Location: https://178.203.122.107/tor/server/fp/ce4c88b2ca700655ac0cc98f093973ea86caee4d
Server: Caddy
Date: Thu, 18 Apr 2024 11:42:46 GMT
Content-Length: 0
-
GEThttp://94.16.121.91/tor/server/fp/ce4c88b2ca700655ac0cc98f093973ea86caee4dRemote address:94.16.121.91:80RequestGET /tor/server/fp/ce4c88b2ca700655ac0cc98f093973ea86caee4d HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:45.0) Gecko/20100101 Firefox/45.0
Host: 94.16.121.91
ResponseHTTP/1.1 404 Not Found
Content-Type: text/html
Content-Length: 341
Date: Thu, 18 Apr 2024 11:42:46 GMT
Server: lighttpd/1.4.63
-
DNS107.122.203.178.in-addr.arpaRemote address:8.8.8.8:53Request107.122.203.178.in-addr.arpaIN PTRResponse107.122.203.178.in-addr.arpaIN PTRip-178-203-122-107um48pools vodafone-ipde
-
DNS91.121.16.94.in-addr.arpaRemote address:8.8.8.8:53Request91.121.16.94.in-addr.arpaIN PTRResponse91.121.16.94.in-addr.arpaIN PTRthis-is-a-tor-node---9 artikel5evde
-
DNS154.35.107.109.in-addr.arpaRemote address:8.8.8.8:53Request154.35.107.109.in-addr.arpaIN PTRResponse154.35.107.109.in-addr.arpaIN PTRcip-109-107-35-154gb1 brightboxcom
-
GEThttp://23.92.19.230/tor/server/fp/21b55072c00f4522857655fbb0f3e25d75a5357bRemote address:23.92.19.230:80RequestGET /tor/server/fp/21b55072c00f4522857655fbb0f3e25d75a5357b HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:45.0) Gecko/20100101 Firefox/45.0
Host: 23.92.19.230
ResponseHTTP/1.1 404 Not Found
Date: Thu, 18 Apr 2024 11:43:08 GMT
Server: Apache/2.4.41 (Ubuntu)
Content-Length: 274
Content-Type: text/html; charset=iso-8859-1
-
DNS230.19.92.23.in-addr.arpaRemote address:8.8.8.8:53Request230.19.92.23.in-addr.arpaIN PTRResponse230.19.92.23.in-addr.arpaIN PTRplovercom
-
DNS21.85.33.89.in-addr.arpaRemote address:8.8.8.8:53Request21.85.33.89.in-addr.arpaIN PTRResponse21.85.33.89.in-addr.arpaIN PTR89338521oxidenetwork
-
DNS234.72.92.164.in-addr.arpaRemote address:8.8.8.8:53Request234.72.92.164.in-addr.arpaIN PTRResponse
-
GEThttp://5.9.156.17/tor/server/fp/b4e7c2aec78452939a3eebd9328a54c273dc4619Remote address:5.9.156.17:80RequestGET /tor/server/fp/b4e7c2aec78452939a3eebd9328a54c273dc4619 HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:45.0) Gecko/20100101 Firefox/45.0
Host: 5.9.156.17
ResponseHTTP/1.0 200 OK
Date: Thu, 18 Apr 2024 11:44:34 GMT
Content-Type: text/plain
X-Your-Address-Is: 191.101.209.39
Content-Encoding: identity
Expires: Sat, 20 Apr 2024 11:44:34 GMT
-
GEThttp://185.220.101.67/tor/server/fp/fc83153ea2ff3807029506a4b30a27d953dd98d4Remote address:185.220.101.67:80RequestGET /tor/server/fp/fc83153ea2ff3807029506a4b30a27d953dd98d4 HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:45.0) Gecko/20100101 Firefox/45.0
Host: 185.220.101.67
ResponseHTTP/1.0 200 OK
Date: Thu, 18 Apr 2024 11:44:35 GMT
Content-Type: text/plain
X-Your-Address-Is: 191.101.209.39
Content-Encoding: identity
Expires: Sat, 20 Apr 2024 11:44:35 GMT
-
DNS17.156.9.5.in-addr.arpaRemote address:8.8.8.8:53Request17.156.9.5.in-addr.arpaIN PTRResponse17.156.9.5.in-addr.arpaIN PTRstatic1715695clients your-serverde
-
DNS113.126.86.86.in-addr.arpaRemote address:8.8.8.8:53Request113.126.86.86.in-addr.arpaIN PTRResponse113.126.86.86.in-addr.arpaIN PTR86-86-126-113fixedkpnnet
-
DNS67.101.220.185.in-addr.arpaRemote address:8.8.8.8:53Request67.101.220.185.in-addr.arpaIN PTRResponse67.101.220.185.in-addr.arpaIN PTRtor-exit-67cccsde
-
DNS203.195.236.87.in-addr.arpaRemote address:8.8.8.8:53Request203.195.236.87.in-addr.arpaIN PTRResponse203.195.236.87.in-addr.arpaIN PTRunassigned-87236195203 coolhousingnet
-
DNS203.195.236.87.in-addr.arpaRemote address:8.8.8.8:53Request203.195.236.87.in-addr.arpaIN PTRResponse203.195.236.87.in-addr.arpaIN PTRunassigned-87236195203 coolhousingnet
-
DNS14.224.90.88.in-addr.arpaRemote address:8.8.8.8:53Request14.224.90.88.in-addr.arpaIN PTRResponse14.224.90.88.in-addr.arpaIN PTRti0019a400-3067bbonlineno
-
DNS14.224.90.88.in-addr.arpaRemote address:8.8.8.8:53Request14.224.90.88.in-addr.arpaIN PTRResponse14.224.90.88.in-addr.arpaIN PTRti0019a400-3067bbonlineno
-
GEThttp://193.135.10.219/tor/server/fp/fc4d03403ecd90463198b9f2f81e0b37ed7afe1dRemote address:193.135.10.219:80RequestGET /tor/server/fp/fc4d03403ecd90463198b9f2f81e0b37ed7afe1d HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:45.0) Gecko/20100101 Firefox/45.0
Host: 193.135.10.219
ResponseHTTP/1.1 302 Found
Date: Thu, 18 Apr 2024 11:45:21 GMT
Server: Apache
Location: https://electroncash.detor/server/fp/fc4d03403ecd90463198b9f2f81e0b37ed7afe1d
Content-Length: 261
Content-Type: text/html; charset=iso-8859-1
-
DNSelectroncash.detorRemote address:8.8.8.8:53Requestelectroncash.detorIN AResponse
-
DNS219.10.135.193.in-addr.arpaRemote address:8.8.8.8:53Request219.10.135.193.in-addr.arpaIN PTRResponse219.10.135.193.in-addr.arpaIN PTRelectroncashde
-
DNS10.177.154.23.in-addr.arpaRemote address:8.8.8.8:53Request10.177.154.23.in-addr.arpaIN PTRResponse
-
GEThttp://160.251.204.200/tor/server/fp/9eac61cb4ef446a00c5a0f8d2c1805d27add85f1Remote address:160.251.204.200:80RequestGET /tor/server/fp/9eac61cb4ef446a00c5a0f8d2c1805d27add85f1 HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:45.0) Gecko/20100101 Firefox/45.0
Host: 160.251.204.200
ResponseHTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Thu, 18 Apr 2024 11:45:44 GMT
Content-Type: text/html
Content-Length: 138
Connection: keep-alive
Location: https://160.251.204.200/yunohost/admin
-
DNS200.204.251.160.in-addr.arpaRemote address:8.8.8.8:53Request200.204.251.160.in-addr.arpaIN PTRResponse200.204.251.160.in-addr.arpaIN PTRvladnablol
-
GEThttp://78.54.113.79/tor/server/fp/85a7e12388e12ccc881cc2cdd78a9370fcb01a0dRemote address:78.54.113.79:80RequestGET /tor/server/fp/85a7e12388e12ccc881cc2cdd78a9370fcb01a0d HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:45.0) Gecko/20100101 Firefox/45.0
Host: 78.54.113.79
ResponseHTTP/1.1 301 Moved Permanently
Location: https://78.54.113.79/tor/server/fp/85a7e12388e12ccc881cc2cdd78a9370fcb01a0d
Date: Thu, 18 Apr 2024 11:45:46 GMT
Content-Length: 17
Content-Type: text/plain; charset=utf-8
-
GEThttp://185.243.218.89/tor/server/fp/85a7e12388e12ccc881cc2cdd78a9370fcb01a0dRemote address:185.243.218.89:80RequestGET /tor/server/fp/85a7e12388e12ccc881cc2cdd78a9370fcb01a0d HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:45.0) Gecko/20100101 Firefox/45.0
Host: 185.243.218.89
ResponseHTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 18 Apr 2024 11:45:46 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
-
DNS216.80.220.158.in-addr.arpaRemote address:8.8.8.8:53Request216.80.220.158.in-addr.arpaIN PTRResponse216.80.220.158.in-addr.arpaIN PTRreadme-tor-exit-routerquidoorg
-
DNS79.113.54.78.in-addr.arpaRemote address:8.8.8.8:53Request79.113.54.78.in-addr.arpaIN PTRResponse79.113.54.78.in-addr.arpaIN PTRdynamic-078-054-113-0797854pool telefonicade
-
DNS79.113.54.78.in-addr.arpaRemote address:8.8.8.8:53Request79.113.54.78.in-addr.arpaIN PTRResponse79.113.54.78.in-addr.arpaIN PTRdynamic-078-054-113-0797854pool telefonicade
-
DNS89.218.243.185.in-addr.arpaRemote address:8.8.8.8:53Request89.218.243.185.in-addr.arpaIN PTRResponse89.218.243.185.in-addr.arpaIN PTRtor-exit1-terrahost07tuxliorg
-
DNS155.134.105.193.in-addr.arpaRemote address:8.8.8.8:53Request155.134.105.193.in-addr.arpaIN PTRResponse
-
DNS155.134.105.193.in-addr.arpaRemote address:8.8.8.8:53Request155.134.105.193.in-addr.arpaIN PTRResponse
-
GEThttp://64.4.175.33/tor/server/fp/8bcc134ca1ea40bd8236b8493cf8d9c20e03cf2dRemote address:64.4.175.33:80RequestGET /tor/server/fp/8bcc134ca1ea40bd8236b8493cf8d9c20e03cf2d HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:45.0) Gecko/20100101 Firefox/45.0
Host: 64.4.175.33
ResponseHTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 18 Apr 2024 11:45:48 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
-
GEThttp://98.128.175.41/tor/server/fp/ecd07a8b5ff36c1a6a736822f42b38d772a98190Remote address:98.128.175.41:80RequestGET /tor/server/fp/ecd07a8b5ff36c1a6a736822f42b38d772a98190 HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:45.0) Gecko/20100101 Firefox/45.0
Host: 98.128.175.41
ResponseHTTP/1.1 301 Moved Permanently
Location: https://98.128.175.41/tor/server/fp/ecd07a8b5ff36c1a6a736822f42b38d772a98190
Date: Thu, 18 Apr 2024 11:45:48 GMT
Content-Length: 17
Content-Type: text/plain; charset=utf-8
-
DNS33.175.4.64.in-addr.arpaRemote address:8.8.8.8:53Request33.175.4.64.in-addr.arpaIN PTRResponse33.175.4.64.in-addr.arpaIN PTRtorkpfanet
-
DNS112.42.27.37.in-addr.arpaRemote address:8.8.8.8:53Request112.42.27.37.in-addr.arpaIN PTRResponse112.42.27.37.in-addr.arpaIN PTRstatic112422737clients your-serverde
-
DNS112.42.27.37.in-addr.arpaRemote address:8.8.8.8:53Request112.42.27.37.in-addr.arpaIN PTRResponse112.42.27.37.in-addr.arpaIN PTRstatic112422737clients your-serverde
-
DNS41.175.128.98.in-addr.arpaRemote address:8.8.8.8:53Request41.175.128.98.in-addr.arpaIN PTRResponse41.175.128.98.in-addr.arpaIN PTRh-98-128-175-41A785privbahnhofse
-
DNS41.175.128.98.in-addr.arpaRemote address:8.8.8.8:53Request41.175.128.98.in-addr.arpaIN PTRResponse41.175.128.98.in-addr.arpaIN PTRh-98-128-175-41A785privbahnhofse
-
DNS34.218.0.81.in-addr.arpaRemote address:8.8.8.8:53Request34.218.0.81.in-addr.arpaIN PTRResponse34.218.0.81.in-addr.arpaIN PTRtor-exit-router-proxy-read-mequidoorg
-
DNS34.218.0.81.in-addr.arpaRemote address:8.8.8.8:53Request34.218.0.81.in-addr.arpaIN PTRResponse34.218.0.81.in-addr.arpaIN PTRtor-exit-router-proxy-read-mequidoorg
-
GEThttp://185.130.47.58/tor/server/fp/69042d0dc33bd810bd08adadbc7e95a3cabaef64Remote address:185.130.47.58:80RequestGET /tor/server/fp/69042d0dc33bd810bd08adadbc7e95a3cabaef64 HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:45.0) Gecko/20100101 Firefox/45.0
Host: 185.130.47.58
ResponseHTTP/1.1 200 OK
Content-Type: text/plain
Date: Thu, 18 Apr 2024 11:46:55 GMT
Expires: Sat, 20 Apr 2024 11:46:55 GMT
Server: Caddy
Transfer-Encoding: chunked
-
DNS239.233.210.192.in-addr.arpaRemote address:8.8.8.8:53Request239.233.210.192.in-addr.arpaIN PTRResponse239.233.210.192.in-addr.arpaIN PTRtor02mtaknl
-
DNS58.47.130.185.in-addr.arpaRemote address:8.8.8.8:53Request58.47.130.185.in-addr.arpaIN PTRResponse58.47.130.185.in-addr.arpaIN PTRtor-exit-nl1privexcc
-
DNS58.47.130.185.in-addr.arpaRemote address:8.8.8.8:53Request58.47.130.185.in-addr.arpaIN PTRResponse58.47.130.185.in-addr.arpaIN PTRtor-exit-nl1privexcc
-
DNS206.107.32.194.in-addr.arpaRemote address:8.8.8.8:53Request206.107.32.194.in-addr.arpaIN PTRResponse206.107.32.194.in-addr.arpaIN PTRtorexitjstark1809n0n0n0org
-
52.109.76.243:443https://roaming.officeapps.live.com/rs/RoamingSoapService.svctls, http
HTTP Request
POST https://roaming.officeapps.live.com/rs/RoamingSoapService.svcHTTP Response
200 -
128.31.0.39:9131http://128.31.0.39:9131/tor/status-vote/current/consensushttp
HTTP Request
GET http://128.31.0.39:9131/tor/status-vote/current/consensusHTTP Response
200 -
45.88.223.151:443tls, https
-
23.62.61.162:443https://metadata.templates.cdn.office.net/client/templates/gallery?lcid=1033&syslcid=1033&uilcid=1033&app=0&ver=16&tl=2&build=16.0.12527>ype=0%2C1%2C2%2C5%2Ctls, http
HTTP Request
GET https://metadata.templates.cdn.office.net/client/templates/gallery?lcid=1033&syslcid=1033&uilcid=1033&app=0&ver=16&tl=2&build=16.0.12527>ype=0%2C1%2C2%2C5%2CHTTP Response
200 -
95.100.202.48:443https://binaries.templates.cdn.office.net/support/templates/en-us/tp1000111403.cabtls, http
HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp01840907.cabHTTP Response
200HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp1000111403.cabHTTP Response
200 -
95.100.202.48:443https://binaries.templates.cdn.office.net/support/templates/en-us/tp0403391901.cabtls, http
HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp03328893.cabHTTP Response
200HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp0403391901.cabHTTP Response
200 -
95.100.202.48:443https://binaries.templates.cdn.office.net/support/templates/en-us/tp1000111502.cabtls, http
HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp02835233.cabHTTP Response
200HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp1000111502.cabHTTP Response
200 -
95.100.202.48:443https://binaries.templates.cdn.office.net/support/templates/en-us/tp03998159.cabtls, http
HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp03328916.cabHTTP Response
200HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp03998159.cabHTTP Response
200 -
95.100.202.48:443https://binaries.templates.cdn.office.net/support/templates/en-us/tp0345749601.cabtls, http
HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp02851216.cabHTTP Response
200HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp0345749601.cabHTTP Response
200 -
95.100.202.48:443https://binaries.templates.cdn.office.net/support/templates/en-us/tp0403392901.cabtls, http
HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp02851217.cabHTTP Response
200HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp0403392901.cabHTTP Response
200 -
95.100.202.48:443https://binaries.templates.cdn.office.net/support/templates/en-us/tp02851218.cabtls, http
HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp02851218.cabHTTP Response
200 -
95.100.202.48:443https://binaries.templates.cdn.office.net/support/templates/en-us/tp0345751001.cabtls, http
HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp02851219.cabHTTP Response
200HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp0345751001.cabHTTP Response
200 -
95.100.202.48:443https://binaries.templates.cdn.office.net/support/templates/en-us/tp02851220.cabtls, http
HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp02851220.cabHTTP Response
200 -
95.100.202.48:443https://binaries.templates.cdn.office.net/support/templates/en-us/tp0345751501.cabtls, http
HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp02851221.cabHTTP Response
200HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp0345751501.cabHTTP Response
200 -
95.100.202.48:443https://binaries.templates.cdn.office.net/support/templates/en-us/tp02851222.cabtls, http
HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp02851222.cabHTTP Response
200 -
95.100.202.48:443https://binaries.templates.cdn.office.net/support/templates/en-us/tp0403392701.cabtls, http
HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp02851224.cabHTTP Response
200HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp0403392701.cabHTTP Response
200 -
95.100.202.48:443https://binaries.templates.cdn.office.net/support/templates/en-us/tp02851223.cabtls, http
HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp02851223.cabHTTP Response
200 -
95.100.202.48:443https://binaries.templates.cdn.office.net/support/templates/en-us/tp0403393701.cabtls, http
HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp02851225.cabHTTP Response
200HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp0403393701.cabHTTP Response
200 -
95.100.202.48:443https://binaries.templates.cdn.office.net/support/templates/en-us/tp02851226.cabtls, http
HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp02851226.cabHTTP Response
200 -
95.100.202.48:443https://binaries.templates.cdn.office.net/support/templates/en-us/tp0309043001.cabtls, http
HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp0309043001.cabHTTP Response
200 -
95.100.202.48:443https://binaries.templates.cdn.office.net/support/templates/en-us/tp03998158.cabtls, http
HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp02851227.cabHTTP Response
200HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp03998158.cabHTTP Response
200 -
95.100.202.48:443https://binaries.templates.cdn.office.net/support/templates/en-us/tp0309043402.cabtls, http
HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp0309043402.cabHTTP Response
200 -
95.100.202.48:443https://binaries.templates.cdn.office.net/support/templates/en-us/tp0403391701.cabtls, http
HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp03328884.cabHTTP Response
200HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp0403391701.cabHTTP Response
200 -
95.100.202.48:443https://binaries.templates.cdn.office.net/support/templates/en-us/tp0403392501.cabtls, http
HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp03328905.cabHTTP Response
200HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp0403392501.cabHTTP Response
200 -
95.100.202.48:443https://binaries.templates.cdn.office.net/support/templates/en-us/tp0345749101.cabtls, http
HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp03328908.cabHTTP Response
200HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp0345749101.cabHTTP Response
200 -
95.100.202.48:443https://binaries.templates.cdn.office.net/support/templates/en-us/tp0403392101.cabtls, http
HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp03328925.cabHTTP Response
200HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp0403392101.cabHTTP Response
200 -
95.100.202.48:443https://binaries.templates.cdn.office.net/support/templates/en-us/tp0345750301.cabtls, http
HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp03328919.cabHTTP Response
200HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp0345750301.cabHTTP Response
200 -
95.100.202.48:443https://binaries.templates.cdn.office.net/support/templates/en-us/tp03328932.cabtls, http
HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp03328932.cabHTTP Response
200 -
95.100.202.48:443https://binaries.templates.cdn.office.net/support/templates/en-us/tp03328935.cabtls, http
HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp03328935.cabHTTP Response
200 -
95.100.202.48:443https://binaries.templates.cdn.office.net/support/templates/en-us/tp03328940.cabtls, http
HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp03328940.cabHTTP Response
200 -
95.100.202.48:443https://binaries.templates.cdn.office.net/support/templates/en-us/tp03328972.cabtls, http
HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp03328972.cabHTTP Response
200 -
95.100.202.48:443https://binaries.templates.cdn.office.net/support/templates/en-us/tp03328951.cabtls, http
HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp03328951.cabHTTP Response
200 -
95.100.202.48:443https://binaries.templates.cdn.office.net/support/templates/en-us/tp03328975.cabtls, http
HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp03328975.cabHTTP Response
200 -
95.100.202.48:443https://binaries.templates.cdn.office.net/support/templates/en-us/tp03328983.cabtls, http
HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp03328983.cabHTTP Response
200 -
95.100.202.48:443https://binaries.templates.cdn.office.net/support/templates/en-us/tp03328990.cabtls, http
HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp03328990.cabHTTP Response
200 -
95.100.202.48:443https://binaries.templates.cdn.office.net/support/templates/en-us/tp03328986.cabtls, http
HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp03328986.cabHTTP Response
200 -
95.100.202.48:443https://binaries.templates.cdn.office.net/support/templates/en-us/tp0345744402.cabtls, http
HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp0345744402.cabHTTP Response
200 -
95.100.202.48:443https://binaries.templates.cdn.office.net/support/templates/en-us/tp03328998.cabtls, http
HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp03328998.cabHTTP Response
200 -
95.100.202.48:443https://binaries.templates.cdn.office.net/support/templates/en-us/tp0345746401.cabtls, http
HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp0345746401.cabHTTP Response
200 -
95.100.202.48:443https://binaries.templates.cdn.office.net/support/templates/en-us/tp0345747501.cabtls, http
HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp0345747501.cabHTTP Response
200 -
95.100.202.48:443https://binaries.templates.cdn.office.net/support/templates/en-us/tp0345748501.cabtls, http
HTTP Request
GET https://binaries.templates.cdn.office.net/support/templates/en-us/tp0345748501.cabHTTP Response
200 -
67.205.180.87:80
-
23.88.44.26:80
-
185.177.229.20:80http://185.177.229.20/tor/server/fp/61a8aa477e06ba07445265f06be68cd51aceda7dhttp
HTTP Request
GET http://185.177.229.20/tor/server/fp/61a8aa477e06ba07445265f06be68cd51aceda7d -
77.221.159.184:443tls, https -
45.9.168.191:80 -
198.255.21.2:80
-
185.246.188.114:80
-
185.8.165.248:443tls, https -
37.187.147.119:80
-
158.220.80.216:80 -
65.49.20.11:80
-
104.219.236.100:443tls, https
-
2.58.95.38:80http://2.58.95.38/tor/server/fp/b882ecd090c8128746e9012756424ced20759f76http
HTTP Request
GET http://2.58.95.38/tor/server/fp/b882ecd090c8128746e9012756424ced20759f76HTTP Response
200 -
91.143.88.62:443tls
-
91.194.160.96:443tls, https
-
104.36.85.255:80
-
163.172.211.128:80http://163.172.211.128/tor/server/fp/2ca3206e63f347dc136710b4a2ecefd9b8f7ffc1http
HTTP Request
GET http://163.172.211.128/tor/server/fp/2ca3206e63f347dc136710b4a2ecefd9b8f7ffc1HTTP Response
200 -
193.189.100.202:443tls, https
-
85.195.244.251:80
-
23.111.143.202:80
-
151.45.5.118:80http://151.45.5.118/tor/server/fp/036efd2e61dea3d2fee59861ba4245e4de864112http
HTTP Request
GET http://151.45.5.118/tor/server/fp/036efd2e61dea3d2fee59861ba4245e4de864112HTTP Response
301 -
151.45.5.118:443tls
-
135.135.199.41:443tls, https
-
206.75.30.189:80http://206.75.30.189/tor/server/fp/f54b42aedd880627fa4746bdbbc1c2500a85227fhttp
HTTP Request
GET http://206.75.30.189/tor/server/fp/f54b42aedd880627fa4746bdbbc1c2500a85227fHTTP Response
200 -
91.208.206.56:443tls, https -
188.63.254.7:80http://188.63.254.7/tor/server/fp/e21336a5d5b02839c63e1f68dc1ce03b067bacc8http
HTTP Request
GET http://188.63.254.7/tor/server/fp/e21336a5d5b02839c63e1f68dc1ce03b067bacc8 -
62.169.21.101:80
-
89.58.26.216:80
-
193.122.142.28:443tls, https
-
204.8.96.182:80http://204.8.96.182/tor/server/fp/104944b9596f8d0340790442ec75ebf368375a1fhttp
HTTP Request
GET http://204.8.96.182/tor/server/fp/104944b9596f8d0340790442ec75ebf368375a1fHTTP Response
200 -
94.143.137.213:443tls, https -
177.104.76.97:80 -
178.203.122.107:80http://178.203.122.107/tor/server/fp/ce4c88b2ca700655ac0cc98f093973ea86caee4dhttp
HTTP Request
GET http://178.203.122.107/tor/server/fp/ce4c88b2ca700655ac0cc98f093973ea86caee4dHTTP Response
308 -
178.203.122.107:443tls
-
178.203.122.107:443tls
-
178.203.122.107:443
-
94.16.121.91:80http://94.16.121.91/tor/server/fp/ce4c88b2ca700655ac0cc98f093973ea86caee4dhttp
HTTP Request
GET http://94.16.121.91/tor/server/fp/ce4c88b2ca700655ac0cc98f093973ea86caee4dHTTP Response
404 -
109.107.35.154:443tls, https
-
212.227.119.130:80
-
23.92.19.230:80http://23.92.19.230/tor/server/fp/21b55072c00f4522857655fbb0f3e25d75a5357bhttp
HTTP Request
GET http://23.92.19.230/tor/server/fp/21b55072c00f4522857655fbb0f3e25d75a5357bHTTP Response
404 -
89.33.85.21:443tls, https
-
104.248.18.193:80
-
185.241.208.115:80 -
162.192.36.227:80
-
164.92.72.234:443tls, https
-
67.213.221.16:80
-
195.122.181.242:80
-
5.9.156.17:80http://5.9.156.17/tor/server/fp/b4e7c2aec78452939a3eebd9328a54c273dc4619http
HTTP Request
GET http://5.9.156.17/tor/server/fp/b4e7c2aec78452939a3eebd9328a54c273dc4619HTTP Response
200 -
86.86.126.113:443tls, https
-
185.220.101.67:80http://185.220.101.67/tor/server/fp/fc83153ea2ff3807029506a4b30a27d953dd98d4http
HTTP Request
GET http://185.220.101.67/tor/server/fp/fc83153ea2ff3807029506a4b30a27d953dd98d4HTTP Response
200 -
87.236.195.203:443tls, https
-
185.220.101.202:80
-
79.124.7.11:80 -
152.89.244.111:80
-
88.90.224.14:443tls, https
-
45.80.158.205:80
-
45.145.41.146:80
-
193.135.10.219:80http://193.135.10.219/tor/server/fp/fc4d03403ecd90463198b9f2f81e0b37ed7afe1dhttp
HTTP Request
GET http://193.135.10.219/tor/server/fp/fc4d03403ecd90463198b9f2f81e0b37ed7afe1dHTTP Response
302 -
23.154.177.10:443tls, https -
5.34.176.183:80 -
67.205.139.175:80
-
160.251.204.200:80http://160.251.204.200/tor/server/fp/9eac61cb4ef446a00c5a0f8d2c1805d27add85f1http
HTTP Request
GET http://160.251.204.200/tor/server/fp/9eac61cb4ef446a00c5a0f8d2c1805d27add85f1HTTP Response
302 -
160.251.204.200:443tls
-
160.251.204.200:443tls
-
160.251.204.200:443
-
158.220.80.216:443tls, https
-
78.54.113.79:80http://78.54.113.79/tor/server/fp/85a7e12388e12ccc881cc2cdd78a9370fcb01a0dhttp
HTTP Request
GET http://78.54.113.79/tor/server/fp/85a7e12388e12ccc881cc2cdd78a9370fcb01a0dHTTP Response
301 -
78.54.113.79:443tls
-
185.243.218.89:80http://185.243.218.89/tor/server/fp/85a7e12388e12ccc881cc2cdd78a9370fcb01a0dhttp
HTTP Request
GET http://185.243.218.89/tor/server/fp/85a7e12388e12ccc881cc2cdd78a9370fcb01a0dHTTP Response
404 -
193.105.134.155:443tls, https
-
188.165.26.13:80
-
64.4.175.33:80http://64.4.175.33/tor/server/fp/8bcc134ca1ea40bd8236b8493cf8d9c20e03cf2dhttp
HTTP Request
GET http://64.4.175.33/tor/server/fp/8bcc134ca1ea40bd8236b8493cf8d9c20e03cf2dHTTP Response
404 -
37.27.42.112:443tls, https
-
98.128.175.41:80http://98.128.175.41/tor/server/fp/ecd07a8b5ff36c1a6a736822f42b38d772a98190http
HTTP Request
GET http://98.128.175.41/tor/server/fp/ecd07a8b5ff36c1a6a736822f42b38d772a98190HTTP Response
301 -
98.128.175.41:443tls
-
85.119.82.131:80
-
193.187.91.79:80
-
81.0.218.34:443tls, https
-
185.5.233.141:80
-
62.210.125.130:80
-
209.141.39.104:80
-
192.210.233.239:443tls, https
-
185.130.47.58:80http://185.130.47.58/tor/server/fp/69042d0dc33bd810bd08adadbc7e95a3cabaef64http
HTTP Request
GET http://185.130.47.58/tor/server/fp/69042d0dc33bd810bd08adadbc7e95a3cabaef64HTTP Response
200 -
194.32.107.206:443tls, https
-
91.219.236.77:80
-
188.40.254.246:80
-
45.141.215.90:80
-
8.8.8.8:53roaming.officeapps.live.comdns
DNS Request
roaming.officeapps.live.com
DNS Response
52.109.76.243
-
8.8.8.8:5397.32.109.52.in-addr.arpadns
DNS Request
97.32.109.52.in-addr.arpa
-
8.8.8.8:53243.76.109.52.in-addr.arpadns
DNS Request
243.76.109.52.in-addr.arpa
-
8.8.8.8:5382.90.14.23.in-addr.arpadns
DNS Request
82.90.14.23.in-addr.arpa
-
8.8.8.8:5364.159.190.20.in-addr.arpadns
DNS Request
64.159.190.20.in-addr.arpa
DNS Request
64.159.190.20.in-addr.arpa
-
8.8.8.8:536.173.189.20.in-addr.arpadns
DNS Request
6.173.189.20.in-addr.arpa
-
8.8.8.8:5339.0.31.128.in-addr.arpadns
DNS Request
39.0.31.128.in-addr.arpa
-
8.8.8.8:53metadata.templates.cdn.office.netdns
DNS Request
metadata.templates.cdn.office.net
DNS Response
23.62.61.16223.62.61.184
-
8.8.8.8:53binaries.templates.cdn.office.netdns
DNS Request
binaries.templates.cdn.office.net
DNS Response
95.100.202.4895.100.202.8
-
8.8.8.8:53151.223.88.45.in-addr.arpadns
DNS Request
151.223.88.45.in-addr.arpa
-
8.8.8.8:53162.61.62.23.in-addr.arpadns
DNS Request
162.61.62.23.in-addr.arpa
-
8.8.8.8:5348.202.100.95.in-addr.arpadns
DNS Request
48.202.100.95.in-addr.arpa
-
8.8.8.8:5320.229.177.185.in-addr.arpadns
DNS Request
20.229.177.185.in-addr.arpa
-
8.8.8.8:53184.159.221.77.in-addr.arpadns
DNS Request
184.159.221.77.in-addr.arpa
-
8.8.8.8:530.204.248.87.in-addr.arpadns
DNS Request
0.204.248.87.in-addr.arpa
-
8.8.8.8:53248.165.8.185.in-addr.arpadns
DNS Request
248.165.8.185.in-addr.arpa
-
8.8.8.8:53100.236.219.104.in-addr.arpadns
DNS Request
100.236.219.104.in-addr.arpa
-
8.8.8.8:5338.95.58.2.in-addr.arpadns
DNS Request
38.95.58.2.in-addr.arpa
-
8.8.8.8:5362.88.143.91.in-addr.arpadns
DNS Request
62.88.143.91.in-addr.arpa
-
8.8.8.8:5396.160.194.91.in-addr.arpadns
DNS Request
96.160.194.91.in-addr.arpa
-
8.8.8.8:53128.211.172.163.in-addr.arpadns
DNS Request
128.211.172.163.in-addr.arpa
-
8.8.8.8:53202.100.189.193.in-addr.arpadns
DNS Request
202.100.189.193.in-addr.arpa
-
8.8.8.8:5390.65.42.20.in-addr.arpadns
DNS Request
90.65.42.20.in-addr.arpa
-
8.8.8.8:53118.5.45.151.in-addr.arpadns
DNS Request
118.5.45.151.in-addr.arpa
-
8.8.8.8:5341.199.135.135.in-addr.arpadns
DNS Request
41.199.135.135.in-addr.arpa
-
8.8.8.8:53189.30.75.206.in-addr.arpadns
DNS Request
189.30.75.206.in-addr.arpa
-
8.8.8.8:5356.206.208.91.in-addr.arpadns
DNS Request
56.206.208.91.in-addr.arpa
-
8.8.8.8:537.254.63.188.in-addr.arpadns
DNS Request
7.254.63.188.in-addr.arpa
-
8.8.8.8:5328.142.122.193.in-addr.arpadns
DNS Request
28.142.122.193.in-addr.arpa
-
8.8.8.8:53182.96.8.204.in-addr.arpadns
DNS Request
182.96.8.204.in-addr.arpa
-
8.8.8.8:53213.137.143.94.in-addr.arpadns
DNS Request
213.137.143.94.in-addr.arpa
-
8.8.8.8:53107.122.203.178.in-addr.arpadns
DNS Request
107.122.203.178.in-addr.arpa
-
8.8.8.8:5391.121.16.94.in-addr.arpadns
DNS Request
91.121.16.94.in-addr.arpa
-
8.8.8.8:53154.35.107.109.in-addr.arpadns
DNS Request
154.35.107.109.in-addr.arpa
-
8.8.8.8:53230.19.92.23.in-addr.arpadns
DNS Request
230.19.92.23.in-addr.arpa
-
8.8.8.8:5321.85.33.89.in-addr.arpadns
DNS Request
21.85.33.89.in-addr.arpa
-
8.8.8.8:53234.72.92.164.in-addr.arpadns
DNS Request
234.72.92.164.in-addr.arpa
-
8.8.8.8:5317.156.9.5.in-addr.arpadns
DNS Request
17.156.9.5.in-addr.arpa
-
8.8.8.8:53113.126.86.86.in-addr.arpadns
DNS Request
113.126.86.86.in-addr.arpa
-
8.8.8.8:5367.101.220.185.in-addr.arpadns
DNS Request
67.101.220.185.in-addr.arpa
-
8.8.8.8:53203.195.236.87.in-addr.arpadns
DNS Request
203.195.236.87.in-addr.arpa
DNS Request
203.195.236.87.in-addr.arpa
-
8.8.8.8:5314.224.90.88.in-addr.arpadns
DNS Request
14.224.90.88.in-addr.arpa
DNS Request
14.224.90.88.in-addr.arpa
-
8.8.8.8:53electroncash.detordns
DNS Request
electroncash.detor
-
8.8.8.8:53219.10.135.193.in-addr.arpadns
DNS Request
219.10.135.193.in-addr.arpa
-
8.8.8.8:5310.177.154.23.in-addr.arpadns
DNS Request
10.177.154.23.in-addr.arpa
-
8.8.8.8:53200.204.251.160.in-addr.arpadns
DNS Request
200.204.251.160.in-addr.arpa
-
8.8.8.8:53216.80.220.158.in-addr.arpadns
DNS Request
216.80.220.158.in-addr.arpa
-
8.8.8.8:5379.113.54.78.in-addr.arpadns
DNS Request
79.113.54.78.in-addr.arpa
DNS Request
79.113.54.78.in-addr.arpa
-
8.8.8.8:5389.218.243.185.in-addr.arpadns
DNS Request
89.218.243.185.in-addr.arpa
-
8.8.8.8:53155.134.105.193.in-addr.arpadns
DNS Request
155.134.105.193.in-addr.arpa
DNS Request
155.134.105.193.in-addr.arpa
-
8.8.8.8:5333.175.4.64.in-addr.arpadns
DNS Request
33.175.4.64.in-addr.arpa
-
8.8.8.8:53112.42.27.37.in-addr.arpadns
DNS Request
112.42.27.37.in-addr.arpa
DNS Request
112.42.27.37.in-addr.arpa
-
8.8.8.8:5341.175.128.98.in-addr.arpadns
DNS Request
41.175.128.98.in-addr.arpa
DNS Request
41.175.128.98.in-addr.arpa
-
8.8.8.8:5334.218.0.81.in-addr.arpadns
DNS Request
34.218.0.81.in-addr.arpa
DNS Request
34.218.0.81.in-addr.arpa
-
8.8.8.8:53239.233.210.192.in-addr.arpadns
DNS Request
239.233.210.192.in-addr.arpa
-
8.8.8.8:5358.47.130.185.in-addr.arpadns
DNS Request
58.47.130.185.in-addr.arpa
DNS Request
58.47.130.185.in-addr.arpa
-
8.8.8.8:53206.107.32.194.in-addr.arpadns
DNS Request
206.107.32.194.in-addr.arpa
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
12KB
MD5205b6063e85735866f598043b42c326e
SHA10a24beb75433ea88614adeb446c1cdacf1ee4e26
SHA256325466cec0636c916308c634b07db075c3e3c955179d3fbe7e83a17a8bef582f
SHA512c8e3d5b5cf2ac7d2adc7e4aca2568b9553e858c7e7cedede985a416aa468941796f11291f0c80a9740b4e2b0b955a032889500983a5784ee3fe242ee50a43d7b
-
Filesize
48B
MD53a59053d9da94fa3b482ab9c90b7645e
SHA182362ce17c35abc7809120c6b7dfbc927ebe791d
SHA256975d83d25d1304431d80ff574ce84f3dfa7d2a7da49c38e04630d38091b18daa
SHA5123147726a6381b1e0631160106b24ca0843d885a8b8f36ccd9eaa4d8685bca836ce748be9d02ea7ed91b20fda6512e166e2952bd4ce888d399779ffda77eb907d
-
Filesize
48B
MD58fbae4826b6b79845b56bb6fd197f6c4
SHA1978426b7bcbd1359dc5b0c5d7576566135c8ca71
SHA25624a910295af5043f8913089e4e3274477d2b04fa9aa236d338331d7c1f8a5b7a
SHA512a0c0f4981b6707899d91e325a77476c009066029bf0b77a3a2da7e3db045cdf9461fb9e58cb5a4da81338902ebfac3265adee639ec86b7e112741cbbfe2505f5
-
Filesize
12KB
MD5b3c26a21f5796e215611d9c7faba9fd8
SHA18004b5c5eba1a8915ab65b4cc56fa603de50f482
SHA2561e2e204af95ca3039c3b8b422fc5cd814d5ab86058982e5e7b991ea58c08c300
SHA51299aaa490f372b7aa48b5a6a2b49c0d03ecf3cbd6a0666e27e8107912dba6114dc3f3834c1e73422414851904f458f17cd185f3c20bf75d143fed3f3a16ce8e77
-
Filesize
4KB
MD52d5020c82de674b48cfd17cc20fcbba2
SHA14e317eaeebd839ee5f6eb3925a9fbee819c5349c
SHA256120becd55248f4a2ccbbc99ba9d3c2932223264a95cd72e9ae7568be61277e9a
SHA512ffbbdda009237d6825f6cd6f751a41f4f9d716186901ffdbeed56c2d1410245771decd07f591cf56cafdd4bbebd4e4c74f009ff15736d5321635e34ff17d0d8d
-
Filesize
263KB
MD5ff0e07eff1333cdf9fc2523d323dd654
SHA177a1ae0dd8dbc3fee65dd6266f31e2a564d088a4
SHA2563f925e0cc1542f09de1f99060899eafb0042bb9682507c907173c392115a44b5
SHA512b4615f995fab87661c2dbe46625aa982215d7bde27cafae221dca76087fe76da4b4a381943436fcac1577cb3d260d0050b32b7b93e3eb07912494429f126bb3d
-
Filesize
12KB
MD598054a7d4b1e6f371f497c7dda2c06a5
SHA18f7fe3c01f5fad44a3d01bc2f81a936ff9726b3b
SHA256b32385a49f14a83f3e841cb7a3e7a4f438a90bc7266528b4f02861431eb0e7fb
SHA512f2106d0057b0422b072194f4844af9567cf12680fd7649c54b50a0be1bf92f8fb7d1beee8ac0d65a1413dc4e94bd611807285122f625cc5b166a0daa00d224e4
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
696KB
-
Filesize
64KB
-
Filesize
696KB
-
Filesize
64KB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
696KB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
64KB
-
Filesize
1.9MB
-
Filesize
696KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
388KB
-
Filesize
72KB
-
Filesize
72KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
160KB
-
Filesize
388KB
-
Filesize
72KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
160KB
-
Filesize
388KB
-
Filesize
72KB
-
Filesize
4KB
-
Filesize
388KB
-
Filesize
388KB
-
Filesize
4KB
-
Filesize
72KB
-
Filesize
72KB
-
Filesize
160KB
-
Filesize
72KB
-
Filesize
72KB
-
Filesize
72KB
-
Filesize
72KB
-
Filesize
388KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
72KB
-
Filesize
72KB
-
Filesize
72KB
-
Filesize
72KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
352KB
-
Filesize
352KB
-
Filesize
4KB