Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
1722s -
max time network
1726s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system -
submitted
10/08/2024, 21:29 UTC
Static task
static1
Behavioral task
behavioral1
Sample
2BuVfqNL_400x400.jpg
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
2BuVfqNL_400x400.jpg
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
2BuVfqNL_400x400.jpg
Resource
win11-20240802-en
General
-
Target
2BuVfqNL_400x400.jpg
-
Size
4KB
-
MD5
1308240a66224bde83dd2ea8a22828d4
-
SHA1
b66ad9628e14fe2e099e4aac6851f1316f46ec58
-
SHA256
67f9972005be1107407d1875f09086e779bc526a91ed18f95936eed046e600bb
-
SHA512
232e534c82a021498b8f28a601eb3b8d5c7d169b796b95fedacf49ede9d5d18972989881d563c2b14c1aedcf9e6fbe5aa7e36a57e12183e4c9ac5d4d13610f88
-
SSDEEP
96:b894vJh7WQiQaxFtFzoiJx5bL+nqYeuEnHs4L:IkizNLFzoY9zsO
Malware Config
Extracted
C:\Users\Admin\Desktop\@Please_Read_Me@.txt
wannacry
12t9YDPgwueZ9NyMgw519p7AA8isjr6SMw
Signatures
-
Jigsaw Ransomware
Ransomware family first created in 2016. Named based on wallpaper set after infection in the early versions.
-
Suspicious use of NtCreateProcessExOtherParentProcess 2 IoCs
description pid Process procid_target PID 6932 created 6896 6932 taskmgr.exe 132 PID 6932 created 6896 6932 taskmgr.exe 132 -
Wannacry
WannaCry is a ransomware cryptoworm.
-
Deletes shadow copies 3 TTPs
Ransomware often targets backup files to inhibit system recovery.
-
Renames multiple (3303) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Renames multiple (3806) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Downloads MZ/PE file
-
Drops file in Drivers directory 1 IoCs
description ioc Process File opened for modification C:\Windows\SysWOW64\drivers\gmreadme.txt gsalfrh.exe -
Event Triggered Execution: Image File Execution Options Injection 1 TTPs 2 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe MicrosoftEdgeUpdate.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe\DisableExceptionChainValidation = "0" MicrosoftEdgeUpdate.exe -
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000\Control Panel\International\Geo\Nation gsalfrh.exe -
Deletes itself 1 IoCs
pid Process 6896 drpbx.exe -
Drops startup file 2 IoCs
description ioc Process File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\~SD9A83.tmp ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Word\STARTUP\~SD9A8A.tmp ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe -
Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Executes dropped EXE 33 IoCs
pid Process 4088 MicrosoftEdgeSetup.exe 2144 MicrosoftEdgeUpdate.exe 2788 MicrosoftEdgeUpdate.exe 3316 MicrosoftEdgeUpdate.exe 3424 MicrosoftEdgeUpdateComRegisterShell64.exe 4880 MicrosoftEdgeUpdateComRegisterShell64.exe 1504 MicrosoftEdgeUpdateComRegisterShell64.exe 2332 MicrosoftEdgeUpdate.exe 1956 MicrosoftEdgeUpdate.exe 2228 MicrosoftEdgeUpdate.exe 4596 MicrosoftEdgeUpdate.exe 5468 MicrosoftEdgeUpdate.exe 3996 MicrosoftEdgeUpdate.exe 5492 MicrosoftEdgeUpdateComRegisterShell64.exe 4376 MicrosoftEdgeUpdateComRegisterShell64.exe 2780 MicrosoftEdgeUpdateComRegisterShell64.exe 6824 jigsaw.exe 6896 drpbx.exe 6760 jigsaw.exe 5712 3372c1edab46837f1e973164fa2d726c5c5e17bcb888828ccd7c4dfcc234a370.exe 6916 gsalfrh.exe 4868 ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe 6616 taskdl.exe 4708 @WanaDecryptor@.exe 4552 @WanaDecryptor@.exe 6568 taskhsvc.exe 4944 @WanaDecryptor@.exe 7128 taskdl.exe 6436 taskse.exe 3488 @WanaDecryptor@.exe 6176 taskdl.exe 5560 taskse.exe 6900 @WanaDecryptor@.exe -
Loads dropped DLL 23 IoCs
pid Process 2144 MicrosoftEdgeUpdate.exe 3424 MicrosoftEdgeUpdateComRegisterShell64.exe 3316 MicrosoftEdgeUpdate.exe 4880 MicrosoftEdgeUpdateComRegisterShell64.exe 3316 MicrosoftEdgeUpdate.exe 1504 MicrosoftEdgeUpdateComRegisterShell64.exe 3316 MicrosoftEdgeUpdate.exe 2228 MicrosoftEdgeUpdate.exe 1956 MicrosoftEdgeUpdate.exe 5492 MicrosoftEdgeUpdateComRegisterShell64.exe 3996 MicrosoftEdgeUpdate.exe 4376 MicrosoftEdgeUpdateComRegisterShell64.exe 3996 MicrosoftEdgeUpdate.exe 2780 MicrosoftEdgeUpdateComRegisterShell64.exe 3996 MicrosoftEdgeUpdate.exe 6568 taskhsvc.exe 6568 taskhsvc.exe 6568 taskhsvc.exe 6568 taskhsvc.exe 6568 taskhsvc.exe 6568 taskhsvc.exe 6568 taskhsvc.exe 6568 taskhsvc.exe -
Modifies file permissions 1 TTPs 1 IoCs
pid Process 3004 icacls.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Adds Run key to start application 2 TTPs 4 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000\Software\Microsoft\Windows\CurrentVersion\Run\firefox.exe = "C:\\Users\\Admin\\AppData\\Roaming\\Frfx\\firefox.exe" jigsaw.exe Set value (str) \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000\Software\Microsoft\Windows\CurrentVersion\Run\firefox.exe = "C:\\Users\\Admin\\AppData\\Roaming\\Frfx\\firefox.exe" jigsaw.exe Set value (str) \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000\Software\Microsoft\Windows\CurrentVersion\Run\crypto13 = "C:\\Users\\Admin\\AppData\\Roaming\\gsalfrh.exe" gsalfrh.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\kxmrwtygyk434 = "\"C:\\Users\\Admin\\Desktop\\tasksche.exe\"" reg.exe -
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops desktop.ini file(s) 2 IoCs
description ioc Process File created C:\Windows\assembly\Desktop.ini drpbx.exe File opened for modification C:\Windows\assembly\Desktop.ini drpbx.exe -
File and Directory Permissions Modification: Windows File and Directory Permissions Modification 1 TTPs
-
description ioc Process Delete value \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe\DisableExceptionChainValidation MicrosoftEdgeUpdate.exe -
Indicator Removal: File Deletion 1 TTPs
Adversaries may delete files left behind by the actions of their intrusion activity.
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 5 IoCs
flow ioc 178 raw.githubusercontent.com 179 raw.githubusercontent.com 180 raw.githubusercontent.com 181 raw.githubusercontent.com 284 raw.githubusercontent.com -
Checks system information in the registry 2 TTPs 10 IoCs
System information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer MicrosoftEdgeUpdate.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName MicrosoftEdgeUpdate.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer MicrosoftEdgeUpdate.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName MicrosoftEdgeUpdate.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer MicrosoftEdgeUpdate.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName MicrosoftEdgeUpdate.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName MicrosoftEdgeUpdate.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer MicrosoftEdgeUpdate.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName MicrosoftEdgeUpdate.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer MicrosoftEdgeUpdate.exe -
Drops file in System32 directory 64 IoCs
description ioc Process File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData MicrosoftEdgeUpdate.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Security\Microsoft.PowerShell.Security.psd1 gsalfrh.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_EnvironmentResource\ja-JP\MSFT_EnvironmentResource.strings.psd1 gsalfrh.exe File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\counters2.dat MicrosoftEdgeUpdate.exe File opened for modification C:\Windows\SysWOW64\de-DE\Licenses\OEM\Professional\license.rtf gsalfrh.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\ja-JP\default.help.txt gsalfrh.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\AppLocker\AppLocker.psd1 gsalfrh.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\MsDtc\it-IT\TestDtc.psd1 gsalfrh.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\GroupSet\GroupSet.psd1 gsalfrh.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_GroupResource\uk-UA\MSFT_GroupResource.strings.psd1 gsalfrh.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\es-ES\PSDSCxMachine.strings.psd1 gsalfrh.exe File opened for modification C:\Windows\SysWOW64\es-ES\Licenses\_Default\Professional\license.rtf gsalfrh.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PrintManagement\PrintManagement.psd1 gsalfrh.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_WindowsOptionalFeature\ja-JP\MSFT_WindowsOptionalFeature.strings.psd1 gsalfrh.exe File opened for modification C:\Windows\SysWOW64\de-DE\Licenses\Volume\Professional\license.rtf gsalfrh.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\MsDtc\ja-JP\TestDtc.psd1 gsalfrh.exe File opened for modification C:\Windows\SysWOW64\en-US\Licenses\Volume\Professional\license.rtf gsalfrh.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\MsDtc\fr-FR\TestDtc.psd1 gsalfrh.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_EnvironmentResource\en-US\MSFT_EnvironmentResource.strings.psd1 gsalfrh.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_ScriptResource\fr-FR\MSFT_ScriptResourceStrings.psd1 gsalfrh.exe File opened for modification C:\Windows\SysWOW64\ja-JP\Licenses\OEM\Professional\license.rtf gsalfrh.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\Dism\Dism.psd1 gsalfrh.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Archive\ja-JP\ArchiveResources.psd1 gsalfrh.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\uk-UA\PSDSCxMachine.strings.psd1 gsalfrh.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_ArchiveResource\ja-JP\ArchiveProvider.psd1 gsalfrh.exe File opened for modification C:\Windows\SysWOW64\fr-FR\Licenses\_Default\Professional\license.rtf gsalfrh.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BranchCache\BranchCache.psd1 gsalfrh.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCClassResources\WindowsPackageCab\it-IT\WindowsPackageCab.Strings.psd1 gsalfrh.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_GroupResource\ja-JP\MSFT_GroupResource.strings.psd1 gsalfrh.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_UserResource\ja-JP\MSFT_UserResource.strings.psd1 gsalfrh.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\es-ES\PSDesiredStateConfiguration.Resource.psd1 gsalfrh.exe File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft MicrosoftEdgeUpdate.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\Appx\Appx.psd1 gsalfrh.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_ArchiveResource\de-DE\ArchiveProvider.psd1 gsalfrh.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\WindowsErrorReporting\WindowsErrorReporting.psd1 gsalfrh.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_WindowsOptionalFeature\uk-UA\MSFT_WindowsOptionalFeature.strings.psd1 gsalfrh.exe File opened for modification C:\Windows\SysWOW64\es-ES\lpeula.rtf gsalfrh.exe File opened for modification C:\Windows\SysWOW64\MSDRM\MsoIrmProtector.ppt gsalfrh.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PKI\pki.psd1 gsalfrh.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_EnvironmentResource\uk-UA\MSFT_EnvironmentResource.strings.psd1 gsalfrh.exe File opened for modification C:\Windows\SysWOW64\en-US\lpeula.rtf gsalfrh.exe File opened for modification C:\Windows\SysWOW64\fr-FR\lipeula.rtf gsalfrh.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\AppvClient\AppvClient.psd1 gsalfrh.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCClassResources\WindowsPackageCab\ja-JP\WindowsPackageCab.Strings.psd1 gsalfrh.exe File opened for modification C:\Windows\SysWOW64\it-IT\Licenses\Volume\Professional\license.rtf gsalfrh.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.ODataUtils\fr-FR\Microsoft.PowerShell.ODataUtilsStrings.psd1 gsalfrh.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\NetLbfo\NetLbfo.psd1 gsalfrh.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_ArchiveResource\es-ES\ArchiveProvider.psd1 gsalfrh.exe File opened for modification C:\Windows\SysWOW64\@EnrollmentToastIcon.png gsalfrh.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\International\International.psd1 gsalfrh.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\MsDtc\es-ES\TestDtc.psd1 gsalfrh.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCClassResources\WindowsPackageCab\en-US\WindowsPackageCab.Strings.psd1 gsalfrh.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_RoleResource\ja-JP\MSFT_RoleResourceStrings.psd1 gsalfrh.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_ArchiveResource\en-US\ArchiveProvider.psd1 gsalfrh.exe File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_363582827213C09529A76F35FB615187 MicrosoftEdgeUpdate.exe File opened for modification C:\Windows\SysWOW64\it-IT\lipeula.rtf gsalfrh.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Diagnostics\Microsoft.PowerShell.Diagnostics.psd1 gsalfrh.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_RegistryResource\de-DE\MSFT_RegistryResource.strings.psd1 gsalfrh.exe File opened for modification C:\Windows\SysWOW64\Licenses\neutral\_Default\Professional\license.rtf gsalfrh.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.Archive\es-ES\ArchiveResources.psd1 gsalfrh.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\de-DE\RunAsHelper.strings.psd1 gsalfrh.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_EnvironmentResource\fr-FR\MSFT_EnvironmentResource.strings.psd1 gsalfrh.exe File opened for modification C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\DSCResources\MSFT_EnvironmentResource\it-IT\MSFT_EnvironmentResource.strings.psd1 gsalfrh.exe File opened for modification C:\Windows\SysWOW64\fr-FR\Licenses\Volume\Professional\license.rtf gsalfrh.exe -
Sets desktop wallpaper using registry 2 TTPs 3 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\Desktop\\HELP_TO_DECRYPT_YOUR_FILES.bmp" gsalfrh.exe Set value (str) \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\Desktop\\@WanaDecryptor@.bmp" ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe Set value (str) \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\Desktop\\@WanaDecryptor@.bmp" @WanaDecryptor@.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\Assets\AlarmsAppList.targetsize-16_altform-unplated.png gsalfrh.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\cef_extensions.pak gsalfrh.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\css\main.css gsalfrh.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\tr-tr\ui-strings.js.fun gsalfrh.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\Assets\GamesXboxHubAppList.targetsize-32.png drpbx.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\Assets\manifestAssets\Square44x44Logo.scale-100.png drpbx.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\Themes\Jumbo\jumbo_12s.png drpbx.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Flags\small\ag_16x11.png gsalfrh.exe File opened for modification C:\Program Files\Common Files\microsoft shared\Stationery\ShadesOfBlue.jpg drpbx.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\Assets\AppPackageAppList.targetsize-20_altform-unplated.png drpbx.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-white\ExchangeLargeTile.scale-400.png gsalfrh.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\Assets\GetStartedAppList.targetsize-16_altform-unplated_contrast-white.png drpbx.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\Themes\Beach\mask\11s.png drpbx.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\5613_40x40x32.png gsalfrh.exe File opened for modification C:\Program Files\ConvertFromMount.png drpbx.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\Assets\WindowsIcons\WindowsCameraAppList.contrast-black_targetsize-96.png drpbx.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\Assets\SecondaryTiles\Car\RTL\contrast-black\WideTile.scale-200.png gsalfrh.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\Assets\AlarmsAppList.contrast-black_targetsize-30.png drpbx.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe\Assets\CalculatorAppList.contrast-black_targetsize-24.png drpbx.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\Assets\PhotosAppList.contrast-white_targetsize-40.png gsalfrh.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-black\MapsAppList.targetsize-64_altform-unplated.png gsalfrh.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\WelcomeCardRdr.png.fun drpbx.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files\js\nls\pl-pl\ui-strings.js.fun drpbx.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\Assets\GamesXboxHubAppList.targetsize-40_contrast-white.png drpbx.exe File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-200_8wekyb3d8bbwe\Assets\WideLogo.scale-200.png drpbx.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\MainPageState2\awards_bp_920.jpg drpbx.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-white\GenericMailSmallTile.scale-150.png drpbx.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\themeless\edit_pdf_poster.jpg drpbx.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Flags\large\gd_60x42.png gsalfrh.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\images\themes\dark\rhp_world_icon_hover.png.fun gsalfrh.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\Assets\SecondaryTiles\Collections\contrast-black\SmallTile.scale-200_contrast-black.png drpbx.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\Assets\starttile.dualsim2.smile.scale-200.png gsalfrh.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Flags\large\so_60x42.png gsalfrh.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-black\HxA-Yahoo-Light.scale-300.png gsalfrh.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\images\themeless\desktop_acrobat_logo.png.fun drpbx.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\sl-sl\ui-strings.js.fun drpbx.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\2475_40x40x32.png gsalfrh.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\Assets\AppPackageAppList.targetsize-36_altform-unplated.png drpbx.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\ThemeCreation\Export.png drpbx.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\en-il\ui-strings.js.fun drpbx.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\uk-ua\ui-strings.js.fun drpbx.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\Tournament\Strike.png gsalfrh.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Flags\small\pw_16x11.png gsalfrh.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Arkadium.Win10.Awards\Assets\Awards_cup.png drpbx.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\StarClub\challenge_spider.jpg gsalfrh.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\Themes\Beach\mask\12s.png gsalfrh.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-black\HxA-Exchange.scale-125.png gsalfrh.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-black\HxMailSmallTile.scale-150.png drpbx.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\acrobat_pdf.svg.fun drpbx.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\nls\cs-cz\ui-strings.js.fun drpbx.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\images\3416_24x24x32.png drpbx.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\8080_20x20x32.png drpbx.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\Assets\GamesXboxHubAppList.targetsize-60_altform-unplated_contrast-white.png drpbx.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\WacLangPack2019Eula.txt drpbx.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe\Assets\CalculatorAppList.contrast-white_targetsize-16.png drpbx.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\themes\dark\adobe_sign_tag.png drpbx.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\Assets\WindowsIcons\WindowsCameraAppList.contrast-black_targetsize-48.png gsalfrh.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\uk-ua\ui-strings.js.fun gsalfrh.exe File opened for modification C:\Program Files\Microsoft Office\root\Integration\C2RManifest.officemui.msi.16.en-us.xml drpbx.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\images\OneNoteSectionMedTile.scale-125.png drpbx.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\Livetiles\MicrosoftSolitaireLargeTile.scale-125.jpg drpbx.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Flags\small\km_16x11.png drpbx.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files\js\nls\en-gb\ui-strings.js.fun drpbx.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-black\LinkedInboxSmallTile.scale-125.png gsalfrh.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-microsoftedge_31bf3856ad364e35_10.0.15063.0_none_224b97ad28ee338b\MicrosoftEdgeSquare150x150.scale-125_contrast-black.png gsalfrh.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-ppiprojection.appxmain_31bf3856ad364e35_10.0.15063.0_none_17719193ec542ada\Square150x150.contrast-white_Scale-100.png gsalfrh.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-ppiprojection.appxmain_31bf3856ad364e35_10.0.15063.0_none_17719193ec542ada\StoreLogo.Scale-140.png gsalfrh.exe File opened for modification C:\Windows\InfusedApps\Packages\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-black\HxA-Advanced-Light.scale-300.png gsalfrh.exe File opened for modification C:\Windows\InfusedApps\Packages\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-white\HxMailAppList.targetsize-80.png gsalfrh.exe File opened for modification C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\cache\Local\Desktop\15.js gsalfrh.exe File opened for modification C:\Windows\InfusedApps\Packages\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\CalculatorMedTile.contrast-black_scale-125.png gsalfrh.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-microsoftedge_31bf3856ad364e35_10.0.15063.0_none_224b97ad28ee338b\TabSweepExplanation.png gsalfrh.exe File opened for modification C:\Windows\InfusedApps\Packages\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppPackageMedTile.scale-200_contrast-white.png gsalfrh.exe File opened for modification C:\Windows\InfusedApps\Packages\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\Assets\Logos\StoreLogo\PaintApplist.scale-125.png gsalfrh.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft.powershel..resources.resources_31bf3856ad364e35_10.0.15063.0_it-it_1f8a5fb3b1206c07\MSFT_UserResource.strings.psd1 gsalfrh.exe File opened for modification C:\Windows\InfusedApps\Packages\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\Assets\GetStartedLargeTile.scale-200_contrast-white.png gsalfrh.exe File opened for modification C:\Windows\MiracastView\Assets\splashscreen.contrast-white_scale-140.png gsalfrh.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-miracastview.appxmain_31bf3856ad364e35_10.0.15063.0_none_3d8834d7dbd2a689\logo.contrast-black.png gsalfrh.exe File opened for modification C:\Windows\InfusedApps\Packages\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\Assets\Images\Stickers\Thumbnails\Sticker_Icon_OwlEye.png gsalfrh.exe File opened for modification C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Assets\Icons\custom-Miantuan\WideTile.scale-400.png gsalfrh.exe File opened for modification C:\Windows\WinSxS\x86_microsoft-windows-l..-lpksetup.resources_31bf3856ad364e35_10.0.15063.0_fr-fr_5400334db745332c\lpeula.rtf gsalfrh.exe File opened for modification C:\Windows\InfusedApps\Packages\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\SecondaryTiles\Place\contrast-white\WideTile.scale-100.png gsalfrh.exe File opened for modification C:\Windows\SystemApps\Microsoft.PPIProjection_cw5n1h2txyewy\Assets\StoreLogo.contrast-black_Scale-140.png gsalfrh.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-t..riventextservice-yi_31bf3856ad364e35_10.0.15063.0_none_52914cf6f7760703\TableTextServiceYi.txt gsalfrh.exe File opened for modification C:\Windows\WinSxS\Manifests\msil_multipoint-wms.dashboardcommon.resources_31bf3856ad364e35_10.0.15063.0_ja-jp_c604efea30d9db5f.manifest gsalfrh.exe File opened for modification C:\Windows\InfusedApps\Packages\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\ExchangeSmallTile.scale-125.png gsalfrh.exe File opened for modification C:\Windows\MiracastView\Assets\tilesmall.contrast-white_scale-180.png gsalfrh.exe File opened for modification C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\Microsoft.WinJS\js\base.js gsalfrh.exe File opened for modification C:\Windows\InfusedApps\Packages\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\Themes\Classic\classic_12c.png gsalfrh.exe File opened for modification C:\Windows\InfusedApps\Packages\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\GenericMailBadge.scale-200.png gsalfrh.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-ppiprojection.appxmain_31bf3856ad364e35_10.0.15063.0_none_17719193ec542ada\Square70x70.Scale-140.png gsalfrh.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-m..nt-browser.appxmain_31bf3856ad364e35_10.0.15063.0_none_0d07ce77359b6878\Square71x71Logo.contrast-black_scale-125.png gsalfrh.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-m..nt-browser.appxmain_31bf3856ad364e35_10.0.15063.0_none_0d07ce77359b6878\Wide310x150Logo.contrast-black_scale-200.png gsalfrh.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-microsoftedge_31bf3856ad364e35_10.0.15063.0_none_224b97ad28ee338b\MicrosoftEdgeSquare44x44.targetsize-30_contrast-black.png gsalfrh.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-shell-wallpaper-theme1_31bf3856ad364e35_10.0.15063.0_none_e7eddc45ddbcabc0\img1.jpg gsalfrh.exe File opened for modification C:\Windows\InfusedApps\Packages\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherIcons\30x30\184.png gsalfrh.exe File opened for modification C:\Windows\InfusedApps\Packages\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\Icons\privacy_policy.png gsalfrh.exe File opened for modification C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Assets\Places\NoPageFiller.scale-100.png gsalfrh.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-miracastview.appxmain_31bf3856ad364e35_10.0.15063.0_none_3d8834d7dbd2a689\tilesmall.scale-140.png gsalfrh.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-n..tcapture-powershell_31bf3856ad364e35_10.0.15063.0_none_a71bce8701cf4ff3\NetEventPacketCapture.psd1 gsalfrh.exe File opened for modification C:\Windows\InfusedApps\Packages\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\SkypeApp\Assets\SkypeMedTile.scale-100_contrast-black.png gsalfrh.exe File opened for modification C:\Windows\Media\Focus3_22050hz.raw gsalfrh.exe File opened for modification C:\Windows\SystemApps\ContactSupport_cw5n1h2txyewy\Assets\MediumTile.scale-100.png gsalfrh.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-c..trast-black.cortana_31bf3856ad364e35_10.0.15063.0_none_8bb78df7f38275dd\AppListIcon.targetsize-96.png gsalfrh.exe File opened for modification C:\Windows\InfusedApps\Packages\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Work\LTR\contrast-white\MedTile.scale-200.png gsalfrh.exe File opened for modification C:\Windows\SystemApps\Microsoft.PPIProjection_cw5n1h2txyewy\Assets\Square310x310.contrast-white_Scale-80.png gsalfrh.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-c..trast-black.cortana_31bf3856ad364e35_10.0.15063.0_none_d91126b413aa8ca0\AppListIcon.targetsize-16.png gsalfrh.exe File opened for modification C:\Windows\InfusedApps\Packages\Microsoft.3DBuilder_13.0.10349.0_neutral_split.scale-140_8wekyb3d8bbwe\Assets\Office\PlaneCutKeepBoth.scale-140.png gsalfrh.exe File opened for modification C:\Windows\InfusedApps\Packages\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Assets\Audio\Skype_Call_Hold.m4a gsalfrh.exe File opened for modification C:\Windows\InfusedApps\Packages\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\Themes\Aquarium\aquarium_11s.png gsalfrh.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-microsoftedge_31bf3856ad364e35_10.0.15063.0_none_224b97ad28ee338b\MicrosoftEdgeSquare44x44.targetsize-80_altform-unplated_contrast-black.png gsalfrh.exe File opened for modification C:\Windows\InfusedApps\Packages\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\Awards\freecell\On_Parole_.png gsalfrh.exe File opened for modification C:\Windows\InfusedApps\Packages\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-black\HxCalendarLargeTile.scale-150.png gsalfrh.exe File opened for modification C:\Windows\InfusedApps\Packages\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppList.targetsize-80_contrast-black.png gsalfrh.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-c...speechhelp.cortana_31bf3856ad364e35_10.0.15063.0_none_e1bce38acad169f7\SpeechHelp_AssistantEnabled_zh-CN.json gsalfrh.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-c..main.assets.cortana_31bf3856ad364e35_10.0.15063.0_none_e7716ec01fa1cfed\Splashscreen.contrast-black_scale-80.png gsalfrh.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-i..ntrolpanel.appxmain_31bf3856ad364e35_10.0.15063.0_none_2bd1e3a1cfd67be0\logo.contrast-black_scale-400.png gsalfrh.exe File opened for modification C:\Windows\InfusedApps\Packages\Microsoft.3DBuilder_13.0.10349.0_neutral_split.scale-140_8wekyb3d8bbwe\Assets\Office\ProjectionCylindric.scale-140.png gsalfrh.exe File opened for modification C:\Windows\InfusedApps\Packages\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\Assets\BadgeLogo.scale-150.png gsalfrh.exe File opened for modification C:\Windows\InfusedApps\Packages\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\3009_20x20x32.png gsalfrh.exe File opened for modification C:\Windows\InfusedApps\Packages\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\SecondaryTiles\Directions\Car\RTL\contrast-black\SmallTile.scale-100.png gsalfrh.exe File opened for modification C:\Windows\InfusedApps\Packages\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\Assets\Themes\Beach\beach_12d.png gsalfrh.exe File opened for modification C:\Windows\InfusedApps\Packages\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\images\contrast-black\OneNotePageWideTile.scale-200.png gsalfrh.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-c..riencehost.appxmain_31bf3856ad364e35_10.0.15063.0_none_13cc520b866eaf57\oobe-desktop.css gsalfrh.exe File opened for modification C:\Windows\InfusedApps\Packages\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\SkypeApp\Designs\Flags\large\ee_60x42.png gsalfrh.exe File opened for modification C:\Windows\InfusedApps\Packages\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\images\contrast-black\HxCalendarSplashLogo.scale-200.png gsalfrh.exe File opened for modification C:\Windows\SystemResources\Windows.UI.AccountsControl\Images\Outlook.Theme-Dark_Scale-150.png gsalfrh.exe File opened for modification C:\Windows\WinSxS\amd64_microsoft-windows-c..main.assets.cortana_31bf3856ad364e35_10.0.15063.0_none_e7716ec01fa1cfed\xdevice.forward.targetsize-32_contrast-black.png gsalfrh.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 35 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language MicrosoftEdgeSetup.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language MicrosoftEdgeUpdate.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language MicrosoftEdgeUpdate.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language wermgr.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language gsalfrh.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language wermgr.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language icacls.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language taskhsvc.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language cmd.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language vssadmin.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language vssadmin.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language MicrosoftEdgeUpdate.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language MicrosoftEdgeUpdate.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language @WanaDecryptor@.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language cmd.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language reg.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language MicrosoftEdgeUpdate.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language cmd.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language cmd.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language @WanaDecryptor@.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language @WanaDecryptor@.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language MicrosoftEdgeUpdate.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 3372c1edab46837f1e973164fa2d726c5c5e17bcb888828ccd7c4dfcc234a370.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language attrib.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language taskdl.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language attrib.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language WMIC.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language MicrosoftEdgeUpdate.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language MicrosoftEdgeUpdate.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language cmd.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language taskse.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language @WanaDecryptor@.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language MicrosoftEdgeUpdate.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language @WanaDecryptor@.exe -
System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 3 IoCs
Adversaries may check for Internet connectivity on compromised systems.
pid Process 2332 MicrosoftEdgeUpdate.exe 4596 MicrosoftEdgeUpdate.exe 5468 MicrosoftEdgeUpdate.exe -
Checks SCSI registry key(s) 3 TTPs 6 IoCs
SCSI information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName taskmgr.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000 taskmgr.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A taskmgr.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName taskmgr.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000 taskmgr.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A taskmgr.exe -
Checks processor information in registry 2 TTPs 5 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 firefox.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature firefox.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision firefox.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz firefox.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier firefox.exe -
Interacts with shadow copies 3 TTPs 2 IoCs
Shadow copies are often targeted by ransomware to inhibit system recovery.
pid Process 4436 vssadmin.exe 1136 vssadmin.exe -
Modifies Control Panel 2 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000\Control Panel\Desktop\WallpaperStyle = "0" gsalfrh.exe Set value (str) \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000\Control Panel\Desktop\TileWallpaper = "0" gsalfrh.exe -
description ioc Process Key created \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000\Software\Microsoft\Internet Explorer\Main browser_broker.exe Key created \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000\Software\Microsoft\Internet Explorer\Main MicrosoftEdgeCP.exe Key created \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000\Software\Microsoft\Internet Explorer\Main MicrosoftEdgeCP.exe -
Modifies data under HKEY_USERS 23 IoCs
description ioc Process Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ MicrosoftEdgeUpdate.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\UNCAsIntranet = "1" MicrosoftEdgeUpdate.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing MicrosoftEdgeUpdate.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ MicrosoftEdgeUpdate.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\IntranetName = "1" MicrosoftEdgeUpdate.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\AutoDetect = "0" MicrosoftEdgeUpdate.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\CachePrefix = "Visited:" MicrosoftEdgeUpdate.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1a\52C64B7E\LanguageList = 65006e002d0055005300000065006e0000000000 MicrosoftEdgeUpdate.exe Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\OnDemandInterfaceCache MicrosoftEdgeUpdate.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1a\52C64B7E\LanguageList = 65006e002d0055005300000065006e0000000000 MicrosoftEdgeUpdate.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\CachePrefix MicrosoftEdgeUpdate.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass = "1" MicrosoftEdgeUpdate.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\AutoDetect = "0" MicrosoftEdgeUpdate.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\CachePrefix = "Visited:" MicrosoftEdgeUpdate.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass = "1" MicrosoftEdgeUpdate.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\UNCAsIntranet = "1" MicrosoftEdgeUpdate.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\CachePrefix = "Cookie:" MicrosoftEdgeUpdate.exe Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\OnDemandInterfaceCache MicrosoftEdgeUpdate.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing MicrosoftEdgeUpdate.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\CachePrefix MicrosoftEdgeUpdate.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\CachePrefix = "Cookie:" MicrosoftEdgeUpdate.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\IntranetName = "1" MicrosoftEdgeUpdate.exe Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\OnDemandInterfaceCache MicrosoftEdgeUpdate.exe -
Modifies registry class 64 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Internet Settings\Zones\3 MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\VendorId = "0" MicrosoftEdge.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB} MicrosoftEdgeUpdateComRegisterShell64.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{375D3B39-152A-41E1-BF1B-B648933F26D0} MicrosoftEdgeUpdateComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Software\Microsoft\SystemCertificates\Disallowed\CTLs MicrosoftEdge.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CECDDD22-2E72-4832-9606-A9B0E5E344B2}\ = "Update3COMClass" MicrosoftEdgeUpdate.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.OnDemandCOMClassSvc.1.0 MicrosoftEdgeUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{79E0C401-B7BC-4DE5-8104-71350F3A9B67}\ = "IGoogleUpdate" MicrosoftEdgeUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{EA92A799-267E-4DF5-A6ED-6A7E0684BB8A}\AppID = "{A6B716CB-028B-404D-B72C-50E153DD68DA}" MicrosoftEdgeUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.PolicyStatusSvc\CLSID\ = "{9F3F5F5D-721A-4B19-9B5D-69F664C1A591}" MicrosoftEdgeUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C853632E-36CA-4999-B992-EC0D408CF5AB}\NumMethods\ = "10" MicrosoftEdgeUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{79E0C401-B7BC-4DE5-8104-71350F3A9B67} MicrosoftEdgeUpdateComRegisterShell64.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 MicrosoftEdgeUpdateComRegisterShell64.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{C20433B3-0D4B-49F6-9B6C-6EE0FAE07837}\NUMMETHODS MicrosoftEdgeUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.195.15\\psmachine.dll" MicrosoftEdgeUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A5135E58-384F-4244-9A5F-30FA9259413C}\ = "IProcessLauncher" MicrosoftEdgeUpdateComRegisterShell64.exe Set value (data) \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus\CIStatusTimestamp = 5e520e666eebda01 MicrosoftEdge.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A6B716CB-028B-404D-B72C-50E153DD68DA}\AppID = "{A6B716CB-028B-404D-B72C-50E153DD68DA}" MicrosoftEdgeUpdate.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.CoreClass\CLSID MicrosoftEdgeUpdate.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{195A2EB3-21EE-43CA-9F23-93C2C9934E2E} MicrosoftEdgeUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{2E1DD7EF-C12D-4F8E-8AD8-CF8CC265BAD0}\LocalServer32\ = "\"C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.195.15\\MicrosoftEdgeUpdateOnDemand.exe\"" MicrosoftEdgeUpdate.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{79E0C401-B7BC-4DE5-8104-71350F3A9B67} MicrosoftEdgeUpdateComRegisterShell64.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{2603C88B-F971-4167-9DE1-871EE4A3DC84}\ProxyStubClsid32 MicrosoftEdgeUpdate.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AB4F4A7E-977C-4E23-AD8F-626A491715DF}\NumMethods MicrosoftEdgeUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{450CF5FF-95C4-4679-BECA-22680389ECB9} MicrosoftEdgeUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{79E0C401-B7BC-4DE5-8104-71350F3A9B67}\NumMethods MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{5F9C80B5-9E50-43C9-887C-7C6412E110DF}\ = "IAppCommand" MicrosoftEdgeUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.OnDemandCOMClassSvc\CLSID MicrosoftEdgeUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A6556DFF-AB15-4DC3-A890-AB54120BEAEC}\NumMethods\ = "7" MicrosoftEdgeUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{450CF5FF-95C4-4679-BECA-22680389ECB9}\ProxyStubClsid32 MicrosoftEdgeUpdateComRegisterShell64.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{2EC826CB-5478-4533-9015-7580B3B5E03A}\NUMMETHODS MicrosoftEdgeUpdate.exe Set value (int) \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\DataStore\OneTimeCleanup = "1" MicrosoftEdge.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\MicrosoftEdgeUpdate.exe\AppID = "{A6B716CB-028B-404D-B72C-50E153DD68DA}" MicrosoftEdgeUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{60355531-5BFD-45AB-942C-7912628752C7}\ProxyStubClsid32\ = "{0E8770A1-043A-4818-BB5C-41862B93EEFF}" MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{177CAE89-4AD6-42F4-A458-00EC3389E3FE}\NumMethods\ = "24" MicrosoftEdgeUpdateComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\OnlineHistory MicrosoftEdge.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2603C88B-F971-4167-9DE1-871EE4A3DC84}\NumMethods MicrosoftEdgeUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.OnDemandCOMClassMachineFallback MicrosoftEdgeUpdate.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\INTERFACE\{FEA2518F-758F-4B95-A59F-97FCEEF1F5D0}\NUMMETHODS MicrosoftEdgeUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3805CA06-AC83-4F00-8A02-271DCD89BDEB}\NumMethods MicrosoftEdgeUpdateComRegisterShell64.exe Set value (data) \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\PersistedStorageItemTable\System\{2281B681-6FF0-4EF7-A4F4-42AC84B9AC9 = 2ce9f4596eebda01 browser_broker.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2603C88B-F971-4167-9DE1-871EE4A3DC84}\NumMethods MicrosoftEdgeUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FEA2518F-758F-4B95-A59F-97FCEEF1F5D0} MicrosoftEdgeUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{E421557C-0628-43FB-BF2B-7C9F8A4D067C}\VersionIndependentProgID MicrosoftEdgeUpdate.exe Set value (int) \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\SubSysId = "0" MicrosoftEdge.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3A49F783-1C7D-4D35-8F63-5C1C206B9B6E}\NumMethods MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{492E1C30-A1A2-4695-87C8-7A8CAD6F936F}\VersionIndependentProgID\ = "MicrosoftEdgeUpdate.Update3WebMachine" MicrosoftEdgeUpdate.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 MicrosoftEdgeUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{5F6A18BB-6231-424B-8242-19E5BB94F8ED}\LocalServer32 MicrosoftEdgeUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7B3B7A69-7D88-4847-A6BC-90E246A41F69}\ProxyStubClsid32\ = "{0E8770A1-043A-4818-BB5C-41862B93EEFF}" MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{60355531-5BFD-45AB-942C-7912628752C7}\ProxyStubClsid32\ = "{0E8770A1-043A-4818-BB5C-41862B93EEFF}" MicrosoftEdgeUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C853632E-36CA-4999-B992-EC0D408CF5AB} MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2603C88B-F971-4167-9DE1-871EE4A3DC84}\ProxyStubClsid32\ = "{0E8770A1-043A-4818-BB5C-41862B93EEFF}" MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{837E40DA-EB1B-440C-8623-0F14DF158DC0}\ProxyStubClsid32\ = "{0E8770A1-043A-4818-BB5C-41862B93EEFF}" MicrosoftEdgeUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7E29BE61-5809-443F-9B5D-CF22156694EB} MicrosoftEdgeUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.CoreMachineClass\CurVer MicrosoftEdgeUpdate.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{3E102DC6-1EDB-46A1-8488-61F71B35ED5F}\NumMethods MicrosoftEdgeUpdate.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2EC826CB-5478-4533-9015-7580B3B5E03A} MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{D9AA3288-4EA7-4E67-AE60-D18EADCB923D}\NumMethods\ = "4" MicrosoftEdgeUpdate.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{D1E8B1A6-32CE-443C-8E2E-EBA90C481353} MicrosoftEdgeUpdate.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\INTERFACE\{FCE48F77-C677-4012-8A1A-54D2E2BC07BD}\NUMMETHODS MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{9A6B447A-35E2-4F6B-A87B-5DEEBBFDAD17}\ = "ICoCreateAsyncStatus" MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{195A2EB3-21EE-43CA-9F23-93C2C9934E2E}\NumMethods\ = "41" MicrosoftEdgeUpdateComRegisterShell64.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.Update3WebMachineFallback\CLSID MicrosoftEdgeUpdate.exe -
Modifies registry key 1 TTPs 1 IoCs
pid Process 5260 reg.exe -
NTFS ADS 5 IoCs
description ioc Process File opened for modification C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\TempState\Downloads\MicrosoftEdgeSetup.exe.8wr61oq.partial:Zone.Identifier browser_broker.exe File created C:\Program Files (x86)\Microsoft\Temp\EU95FC.tmp\MicrosoftEdgeUpdateSetup.exe\:Zone.Identifier:$DATA MicrosoftEdgeSetup.exe File created C:\Users\Admin\Downloads\Ransomware.TeslaCrypt.zip:Zone.Identifier firefox.exe File created C:\Users\Admin\Downloads\Ransomware.Jigsaw.zip:Zone.Identifier firefox.exe File created C:\Users\Admin\Downloads\Ransomware.WannaCry.zip:Zone.Identifier firefox.exe -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2144 MicrosoftEdgeUpdate.exe 2144 MicrosoftEdgeUpdate.exe 2144 MicrosoftEdgeUpdate.exe 2144 MicrosoftEdgeUpdate.exe 2144 MicrosoftEdgeUpdate.exe 2144 MicrosoftEdgeUpdate.exe 2144 MicrosoftEdgeUpdate.exe 2144 MicrosoftEdgeUpdate.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 6932 taskmgr.exe -
Suspicious behavior: MapViewOfSection 8 IoCs
pid Process 3984 MicrosoftEdgeCP.exe 3984 MicrosoftEdgeCP.exe 3984 MicrosoftEdgeCP.exe 3984 MicrosoftEdgeCP.exe 3984 MicrosoftEdgeCP.exe 3984 MicrosoftEdgeCP.exe 3984 MicrosoftEdgeCP.exe 3984 MicrosoftEdgeCP.exe -
Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeDebugPrivilege 588 MicrosoftEdgeCP.exe Token: SeDebugPrivilege 588 MicrosoftEdgeCP.exe Token: SeDebugPrivilege 588 MicrosoftEdgeCP.exe Token: SeDebugPrivilege 588 MicrosoftEdgeCP.exe Token: SeDebugPrivilege 3468 MicrosoftEdgeCP.exe Token: SeDebugPrivilege 3468 MicrosoftEdgeCP.exe Token: SeDebugPrivilege 3468 MicrosoftEdgeCP.exe Token: SeDebugPrivilege 4844 MicrosoftEdge.exe Token: SeDebugPrivilege 4844 MicrosoftEdge.exe Token: SeDebugPrivilege 2144 MicrosoftEdgeUpdate.exe Token: SeDebugPrivilege 3616 firefox.exe Token: SeDebugPrivilege 3616 firefox.exe Token: SeDebugPrivilege 3616 firefox.exe Token: SeDebugPrivilege 3616 firefox.exe Token: SeDebugPrivilege 3616 firefox.exe Token: SeDebugPrivilege 3616 firefox.exe Token: SeDebugPrivilege 3616 firefox.exe Token: SeRestorePrivilege 1956 MicrosoftEdgeUpdate.exe Token: SeBackupPrivilege 1956 MicrosoftEdgeUpdate.exe Token: SeRestorePrivilege 2144 MicrosoftEdgeUpdate.exe Token: SeBackupPrivilege 2144 MicrosoftEdgeUpdate.exe Token: SeDebugPrivilege 2144 MicrosoftEdgeUpdate.exe Token: SeDebugPrivilege 2144 MicrosoftEdgeUpdate.exe Token: SeRestorePrivilege 6432 7zG.exe Token: 35 6432 7zG.exe Token: SeSecurityPrivilege 6432 7zG.exe Token: SeSecurityPrivilege 6432 7zG.exe Token: SeRestorePrivilege 6696 7zG.exe Token: 35 6696 7zG.exe Token: SeSecurityPrivilege 6696 7zG.exe Token: SeSecurityPrivilege 6696 7zG.exe Token: SeDebugPrivilege 3616 firefox.exe Token: SeDebugPrivilege 3616 firefox.exe Token: SeDebugPrivilege 6932 taskmgr.exe Token: SeSystemProfilePrivilege 6932 taskmgr.exe Token: SeCreateGlobalPrivilege 6932 taskmgr.exe Token: SeDebugPrivilege 3616 firefox.exe Token: SeBackupPrivilege 6784 vssvc.exe Token: SeRestorePrivilege 6784 vssvc.exe Token: SeAuditPrivilege 6784 vssvc.exe Token: SeDebugPrivilege 3616 firefox.exe Token: SeDebugPrivilege 3616 firefox.exe Token: SeRestorePrivilege 6504 7zG.exe Token: 35 6504 7zG.exe Token: SeSecurityPrivilege 6504 7zG.exe Token: SeSecurityPrivilege 6504 7zG.exe Token: SeDebugPrivilege 3616 firefox.exe Token: SeBackupPrivilege 6620 vssvc.exe Token: SeRestorePrivilege 6620 vssvc.exe Token: SeAuditPrivilege 6620 vssvc.exe Token: SeIncreaseQuotaPrivilege 6744 WMIC.exe Token: SeSecurityPrivilege 6744 WMIC.exe Token: SeTakeOwnershipPrivilege 6744 WMIC.exe Token: SeLoadDriverPrivilege 6744 WMIC.exe Token: SeSystemProfilePrivilege 6744 WMIC.exe Token: SeSystemtimePrivilege 6744 WMIC.exe Token: SeProfSingleProcessPrivilege 6744 WMIC.exe Token: SeIncBasePriorityPrivilege 6744 WMIC.exe Token: SeCreatePagefilePrivilege 6744 WMIC.exe Token: SeBackupPrivilege 6744 WMIC.exe Token: SeRestorePrivilege 6744 WMIC.exe Token: SeShutdownPrivilege 6744 WMIC.exe Token: SeDebugPrivilege 6744 WMIC.exe Token: SeSystemEnvironmentPrivilege 6744 WMIC.exe -
Suspicious use of FindShellTrayWindow 64 IoCs
pid Process 3616 firefox.exe 3616 firefox.exe 3616 firefox.exe 3616 firefox.exe 6432 7zG.exe 6696 7zG.exe 6896 drpbx.exe 6896 drpbx.exe 6896 drpbx.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe -
Suspicious use of SendNotifyMessage 64 IoCs
pid Process 3616 firefox.exe 3616 firefox.exe 3616 firefox.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe 6932 taskmgr.exe -
Suspicious use of SetWindowsHookEx 32 IoCs
pid Process 4844 MicrosoftEdge.exe 3984 MicrosoftEdgeCP.exe 588 MicrosoftEdgeCP.exe 3984 MicrosoftEdgeCP.exe 2968 MicrosoftEdgeCP.exe 3616 firefox.exe 3616 firefox.exe 3616 firefox.exe 3616 firefox.exe 3616 firefox.exe 3616 firefox.exe 3616 firefox.exe 3616 firefox.exe 3616 firefox.exe 3616 firefox.exe 3616 firefox.exe 3616 firefox.exe 3616 firefox.exe 3616 firefox.exe 3616 firefox.exe 3616 firefox.exe 3616 firefox.exe 3616 firefox.exe 3616 firefox.exe 4708 @WanaDecryptor@.exe 4552 @WanaDecryptor@.exe 4708 @WanaDecryptor@.exe 4552 @WanaDecryptor@.exe 4944 @WanaDecryptor@.exe 4944 @WanaDecryptor@.exe 3488 @WanaDecryptor@.exe 6900 @WanaDecryptor@.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 3984 wrote to memory of 3468 3984 MicrosoftEdgeCP.exe 81 PID 3984 wrote to memory of 3468 3984 MicrosoftEdgeCP.exe 81 PID 3984 wrote to memory of 3468 3984 MicrosoftEdgeCP.exe 81 PID 3984 wrote to memory of 3468 3984 MicrosoftEdgeCP.exe 81 PID 3984 wrote to memory of 2948 3984 MicrosoftEdgeCP.exe 82 PID 3984 wrote to memory of 2948 3984 MicrosoftEdgeCP.exe 82 PID 3984 wrote to memory of 2948 3984 MicrosoftEdgeCP.exe 82 PID 3984 wrote to memory of 2948 3984 MicrosoftEdgeCP.exe 82 PID 3984 wrote to memory of 2948 3984 MicrosoftEdgeCP.exe 82 PID 3984 wrote to memory of 2948 3984 MicrosoftEdgeCP.exe 82 PID 1660 wrote to memory of 4088 1660 browser_broker.exe 83 PID 1660 wrote to memory of 4088 1660 browser_broker.exe 83 PID 1660 wrote to memory of 4088 1660 browser_broker.exe 83 PID 4088 wrote to memory of 2144 4088 MicrosoftEdgeSetup.exe 85 PID 4088 wrote to memory of 2144 4088 MicrosoftEdgeSetup.exe 85 PID 4088 wrote to memory of 2144 4088 MicrosoftEdgeSetup.exe 85 PID 2144 wrote to memory of 2788 2144 MicrosoftEdgeUpdate.exe 86 PID 2144 wrote to memory of 2788 2144 MicrosoftEdgeUpdate.exe 86 PID 2144 wrote to memory of 2788 2144 MicrosoftEdgeUpdate.exe 86 PID 2144 wrote to memory of 3316 2144 MicrosoftEdgeUpdate.exe 87 PID 2144 wrote to memory of 3316 2144 MicrosoftEdgeUpdate.exe 87 PID 2144 wrote to memory of 3316 2144 MicrosoftEdgeUpdate.exe 87 PID 3316 wrote to memory of 3424 3316 MicrosoftEdgeUpdate.exe 88 PID 3316 wrote to memory of 3424 3316 MicrosoftEdgeUpdate.exe 88 PID 3316 wrote to memory of 4880 3316 MicrosoftEdgeUpdate.exe 89 PID 3316 wrote to memory of 4880 3316 MicrosoftEdgeUpdate.exe 89 PID 3316 wrote to memory of 1504 3316 MicrosoftEdgeUpdate.exe 90 PID 3316 wrote to memory of 1504 3316 MicrosoftEdgeUpdate.exe 90 PID 2144 wrote to memory of 2332 2144 MicrosoftEdgeUpdate.exe 91 PID 2144 wrote to memory of 2332 2144 MicrosoftEdgeUpdate.exe 91 PID 2144 wrote to memory of 2332 2144 MicrosoftEdgeUpdate.exe 91 PID 2144 wrote to memory of 1956 2144 MicrosoftEdgeUpdate.exe 92 PID 2144 wrote to memory of 1956 2144 MicrosoftEdgeUpdate.exe 92 PID 2144 wrote to memory of 1956 2144 MicrosoftEdgeUpdate.exe 92 PID 2228 wrote to memory of 4596 2228 MicrosoftEdgeUpdate.exe 95 PID 2228 wrote to memory of 4596 2228 MicrosoftEdgeUpdate.exe 95 PID 2228 wrote to memory of 4596 2228 MicrosoftEdgeUpdate.exe 95 PID 3984 wrote to memory of 3468 3984 MicrosoftEdgeCP.exe 81 PID 3984 wrote to memory of 3468 3984 MicrosoftEdgeCP.exe 81 PID 3984 wrote to memory of 3468 3984 MicrosoftEdgeCP.exe 81 PID 3984 wrote to memory of 3468 3984 MicrosoftEdgeCP.exe 81 PID 3984 wrote to memory of 3468 3984 MicrosoftEdgeCP.exe 81 PID 3984 wrote to memory of 3468 3984 MicrosoftEdgeCP.exe 81 PID 3984 wrote to memory of 3468 3984 MicrosoftEdgeCP.exe 81 PID 3984 wrote to memory of 3468 3984 MicrosoftEdgeCP.exe 81 PID 3984 wrote to memory of 3468 3984 MicrosoftEdgeCP.exe 81 PID 3984 wrote to memory of 3468 3984 MicrosoftEdgeCP.exe 81 PID 3984 wrote to memory of 3468 3984 MicrosoftEdgeCP.exe 81 PID 3984 wrote to memory of 3468 3984 MicrosoftEdgeCP.exe 81 PID 4324 wrote to memory of 3616 4324 firefox.exe 102 PID 4324 wrote to memory of 3616 4324 firefox.exe 102 PID 4324 wrote to memory of 3616 4324 firefox.exe 102 PID 4324 wrote to memory of 3616 4324 firefox.exe 102 PID 4324 wrote to memory of 3616 4324 firefox.exe 102 PID 4324 wrote to memory of 3616 4324 firefox.exe 102 PID 4324 wrote to memory of 3616 4324 firefox.exe 102 PID 4324 wrote to memory of 3616 4324 firefox.exe 102 PID 4324 wrote to memory of 3616 4324 firefox.exe 102 PID 4324 wrote to memory of 3616 4324 firefox.exe 102 PID 4324 wrote to memory of 3616 4324 firefox.exe 102 PID 3616 wrote to memory of 1220 3616 firefox.exe 103 PID 3616 wrote to memory of 1220 3616 firefox.exe 103 PID 3616 wrote to memory of 4336 3616 firefox.exe 104 PID 3616 wrote to memory of 4336 3616 firefox.exe 104 -
Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
-
Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
-
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
-
Views/modifies file attributes 1 TTPs 2 IoCs
pid Process 3452 attrib.exe 3540 attrib.exe
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\2BuVfqNL_400x400.jpg1⤵PID:2428
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca1⤵
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:4844
-
C:\Windows\system32\browser_broker.exeC:\Windows\system32\browser_broker.exe -Embedding1⤵
- Modifies Internet Explorer settings
- Modifies registry class
- NTFS ADS
- Suspicious use of WriteProcessMemory
PID:1660 -
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\TempState\Downloads\MicrosoftEdgeSetup.exe"C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\TempState\Downloads\MicrosoftEdgeSetup.exe"2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- NTFS ADS
- Suspicious use of WriteProcessMemory
PID:4088 -
C:\Program Files (x86)\Microsoft\Temp\EU95FC.tmp\MicrosoftEdgeUpdate.exe"C:\Program Files (x86)\Microsoft\Temp\EU95FC.tmp\MicrosoftEdgeUpdate.exe" /installsource taggedmi /install "appguid={56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}&appname=Microsoft%20Edge&needsadmin=prefers&usagestats=0"3⤵
- Event Triggered Execution: Image File Execution Options Injection
- Executes dropped EXE
- Loads dropped DLL
- Indicator Removal: Clear Persistence
- Checks system information in the registry
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2144 -
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc4⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Modifies registry class
PID:2788
-
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver4⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:3316 -
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.15\MicrosoftEdgeUpdateComRegisterShell64.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.15\MicrosoftEdgeUpdateComRegisterShell64.exe"5⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
PID:3424
-
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.15\MicrosoftEdgeUpdateComRegisterShell64.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.15\MicrosoftEdgeUpdateComRegisterShell64.exe"5⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
PID:4880
-
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.15\MicrosoftEdgeUpdateComRegisterShell64.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.15\MicrosoftEdgeUpdateComRegisterShell64.exe"5⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
PID:1504
-
-
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xOTUuMTUiIHNoZWxsX3ZlcnNpb249IjEuMy4xOTUuMTUiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7MDg5RTM1NDQtM0E0Ny00N0VELTgyMTktRDg4RkRBM0QzNTI5fSIgaW5zdGFsbHNvdXJjZT0idGFnZ2VkbWkiIHJlcXVlc3RpZD0ie0E1ODc0NUQ2LTk2MjQtNDVBOS1CQjc1LTRCN0Y5QzkwMzhFM30iIGRlZHVwPSJjciIgZG9tYWluam9pbmVkPSIwIj48aHcgbG9naWNhbF9jcHVzPSI4IiBwaHlzbWVtb3J5PSI4IiBkaXNrX3R5cGU9IjIiIHNzZT0iMSIgc3NlMj0iMSIgc3NlMz0iMSIgc3NzZTM9IjEiIHNzZTQxPSIxIiBzc2U0Mj0iMSIgYXZ4PSIxIi8-PG9zIHBsYXRmb3JtPSJ3aW4iIHZlcnNpb249IjEwLjAuMTUwNjMuMCIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiIGlzX2luX2xvY2tkb3duX21vZGU9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSJRRU1VIiBwcm9kdWN0X25hbWU9IlN0YW5kYXJkIFBDIChRMzUgKyBJQ0g5LCAyMDA5KSIvPjxleHAgZXRhZz0iIi8-PGFwcCBhcHBpZD0ie0YzQzRGRTAwLUVGRDUtNDAzQi05NTY5LTM5OEEyMEYxQkE0QX0iIHZlcnNpb249IiIgbmV4dHZlcnNpb249IjEuMy4xOTUuMTUiIGxhbmc9IiIgYnJhbmQ9IiIgY2xpZW50PSIiPjxldmVudCBldmVudHR5cGU9IjIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjEyNjQ0OTQ0ODkzIiBpbnN0YWxsX3RpbWVfbXM9IjQ1MyIvPjwvYXBwPjwvcmVxdWVzdD44⤵
- Executes dropped EXE
- Checks system information in the registry
- System Location Discovery: System Language Discovery
- System Network Configuration Discovery: Internet Connection Discovery
PID:2332
-
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /handoff "appguid={56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}&appname=Microsoft%20Edge&needsadmin=prefers&usagestats=0" /installsource taggedmi /sessionid "{089E3544-3A47-47ED-8219-D88FDA3D3529}"4⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
PID:1956 -
C:\Windows\SysWOW64\wermgr.exe"C:\Windows\system32\wermgr.exe" "-outproc" "0" "1956" "712" "812" "912" "0" "0" "0" "0" "0" "0" "0" "0"5⤵
- System Location Discovery: System Language Discovery
PID:5564
-
-
-
C:\Windows\SysWOW64\wermgr.exe"C:\Windows\system32\wermgr.exe" "-outproc" "0" "2144" "872" "1092" "648" "0" "0" "0" "0" "0" "0" "0" "0"4⤵
- System Location Discovery: System Language Discovery
PID:5456
-
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /unregserver4⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Modifies registry class
PID:3996 -
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.15\MicrosoftEdgeUpdateComRegisterShell64.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.15\MicrosoftEdgeUpdateComRegisterShell64.exe" /unregister5⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
PID:5492
-
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.15\MicrosoftEdgeUpdateComRegisterShell64.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.15\MicrosoftEdgeUpdateComRegisterShell64.exe" /unregister5⤵
- Executes dropped EXE
- Loads dropped DLL
PID:4376
-
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.15\MicrosoftEdgeUpdateComRegisterShell64.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.15\MicrosoftEdgeUpdateComRegisterShell64.exe" /unregister5⤵
- Executes dropped EXE
- Loads dropped DLL
PID:2780
-
-
-
-
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3984
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Modifies Internet Explorer settings
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:588
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Modifies Internet Explorer settings
- Suspicious use of AdjustPrivilegeToken
PID:3468
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵PID:2948
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc1⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks system information in the registry
- System Location Discovery: System Language Discovery
- Modifies data under HKEY_USERS
- Suspicious use of WriteProcessMemory
PID:2228 -
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping 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-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⤵
- Executes dropped EXE
- Checks system information in the registry
- Drops file in System32 directory
- System Location Discovery: System Language Discovery
- System Network Configuration Discovery: Internet Connection Discovery
- Modifies data under HKEY_USERS
PID:4596
-
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping 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-PG9zIHBsYXRmb3JtPSJ3aW4iIHZlcnNpb249IjEwLjAuMTUwNjMuMCIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiIGlzX2luX2xvY2tkb3duX21vZGU9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSJRRU1VIiBwcm9kdWN0X25hbWU9IlN0YW5kYXJkIFBDIChRMzUgKyBJQ0g5LCAyMDA5KSIvPjxleHAgZXRhZz0iJnF1b3Q7VlBRb1AxRitmcTE1d1J6aDFrUEw0UE1wV2g4T1JNQjVpenZyT0MvY2hqUT0mcXVvdDsiLz48YXBwIGFwcGlkPSJ7NTZFQjE4RjgtQjAwOC00Q0JELUI2RDItOEM5N0ZFN0U5MDYyfSIgdmVyc2lvbj0iIiBuZXh0dmVyc2lvbj0iMTI3LjAuMjY1MS45OCIgbGFuZz0iIiBicmFuZD0iIiBjbGllbnQ9IiIgZXhwZXJpbWVudHM9ImNvbnNlbnQ9ZmFsc2UiIGluc3RhbGxhZ2U9Ii0xIiBpbnN0YWxsZGF0ZT0iLTEiPjx1cGRhdGVjaGVjay8-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-PC9hcHA-PC9yZXF1ZXN0Pg2⤵
- Executes dropped EXE
- Checks system information in the registry
- Drops file in System32 directory
- System Location Discovery: System Language Discovery
- System Network Configuration Discovery: Internet Connection Discovery
- Modifies data under HKEY_USERS
PID:5468
-
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Suspicious use of SetWindowsHookEx
PID:2968
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:4324 -
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe"2⤵
- Checks processor information in registry
- NTFS ADS
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3616 -
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3616.0.1324718879\1226129120" -parentBuildID 20221007134813 -prefsHandle 1696 -prefMapHandle 1688 -prefsLen 20747 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {2d03b033-0467-4901-9277-ae436003d9cc} 3616 "\\.\pipe\gecko-crash-server-pipe.3616" 1776 235ee5d9558 gpu3⤵PID:1220
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3616.1.1530705607\1576951490" -parentBuildID 20221007134813 -prefsHandle 2120 -prefMapHandle 2116 -prefsLen 20828 -prefMapSize 233444 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4da6074d-dbb7-4520-87b0-4f0bd61affd4} 3616 "\\.\pipe\gecko-crash-server-pipe.3616" 2132 235ee132f58 socket3⤵PID:4336
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3616.2.1841336777\1500815652" -childID 1 -isForBrowser -prefsHandle 2832 -prefMapHandle 2848 -prefsLen 20931 -prefMapSize 233444 -jsInitHandle 1108 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {ca84bba9-73df-459d-839d-adaf385bc923} 3616 "\\.\pipe\gecko-crash-server-pipe.3616" 2824 235ee561558 tab3⤵PID:2868
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3616.3.518194746\289550273" -childID 2 -isForBrowser -prefsHandle 3504 -prefMapHandle 3500 -prefsLen 26109 -prefMapSize 233444 -jsInitHandle 1108 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {9c5203eb-1048-452d-a80e-775983041fe0} 3616 "\\.\pipe\gecko-crash-server-pipe.3616" 3484 235e3562b58 tab3⤵PID:4668
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3616.4.447178928\1109505680" -childID 3 -isForBrowser -prefsHandle 3916 -prefMapHandle 3748 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1108 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {ff175ea0-451f-4b84-a618-5bd3892aa3cc} 3616 "\\.\pipe\gecko-crash-server-pipe.3616" 3928 235f3d33258 tab3⤵PID:3416
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3616.5.1523657766\1616993305" -childID 4 -isForBrowser -prefsHandle 4848 -prefMapHandle 4864 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1108 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {a3026cac-cfb1-4fe0-9b5f-ba8f9bb565c9} 3616 "\\.\pipe\gecko-crash-server-pipe.3616" 4840 235f4c09758 tab3⤵PID:5568
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3616.6.2078003553\393045885" -childID 5 -isForBrowser -prefsHandle 4992 -prefMapHandle 4996 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1108 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {a49b4242-718e-4a04-bcc1-4c9d035764e0} 3616 "\\.\pipe\gecko-crash-server-pipe.3616" 4984 235f4cf7858 tab3⤵PID:5576
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3616.7.169016365\179399783" -childID 6 -isForBrowser -prefsHandle 5192 -prefMapHandle 5196 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1108 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {078bee0d-1521-4cc3-bfcd-bf490258b2c9} 3616 "\\.\pipe\gecko-crash-server-pipe.3616" 5184 235f59a0d58 tab3⤵PID:5584
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3616.8.1242717713\223727862" -childID 7 -isForBrowser -prefsHandle 3100 -prefMapHandle 3096 -prefsLen 27074 -prefMapSize 233444 -jsInitHandle 1108 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {5662d970-2793-4485-908b-6fe38fd697d1} 3616 "\\.\pipe\gecko-crash-server-pipe.3616" 5548 235f8b33158 tab3⤵PID:3628
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3616.9.1334879314\2049794783" -childID 8 -isForBrowser -prefsHandle 5492 -prefMapHandle 5496 -prefsLen 27074 -prefMapSize 233444 -jsInitHandle 1108 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {896e9a28-e671-448c-a92b-861d1df4cf53} 3616 "\\.\pipe\gecko-crash-server-pipe.3616" 5500 235f4d74858 tab3⤵PID:1964
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3616.10.1029510022\845730934" -childID 9 -isForBrowser -prefsHandle 6240 -prefMapHandle 6264 -prefsLen 27074 -prefMapSize 233444 -jsInitHandle 1108 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {5f29f29f-732a-45de-abd2-5df85070c68b} 3616 "\\.\pipe\gecko-crash-server-pipe.3616" 6268 235f4c08b58 tab3⤵PID:6072
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3616.11.359415718\1873378931" -childID 10 -isForBrowser -prefsHandle 5616 -prefMapHandle 2612 -prefsLen 27074 -prefMapSize 233444 -jsInitHandle 1108 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {ed13009f-01ce-446d-a5ed-5267dfbb47e6} 3616 "\\.\pipe\gecko-crash-server-pipe.3616" 5856 235f5a1f958 tab3⤵PID:5400
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3616.12.1093827710\159161900" -childID 11 -isForBrowser -prefsHandle 2908 -prefMapHandle 5924 -prefsLen 27074 -prefMapSize 233444 -jsInitHandle 1108 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {dc0c1e68-3a28-4b4a-a70a-51e5f4c294d7} 3616 "\\.\pipe\gecko-crash-server-pipe.3616" 2548 235f8c14258 tab3⤵PID:5452
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3616.13.1473509544\49959175" -childID 12 -isForBrowser -prefsHandle 4452 -prefMapHandle 2652 -prefsLen 27694 -prefMapSize 233444 -jsInitHandle 1108 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {5a4b0414-6a38-45d7-a8e7-67408ae5c7c3} 3616 "\\.\pipe\gecko-crash-server-pipe.3616" 6896 235f59a2558 tab3⤵PID:5512
-
-
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:5376
-
C:\Program Files\7-Zip\7zG.exe"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Desktop\Ransomware.TeslaCrypt\" -ad -an -ai#7zMap27729:100:7zEvent50111⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:6432
-
C:\Program Files\7-Zip\7zG.exe"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Desktop\Ransomware.Jigsaw\" -ad -an -ai#7zMap6166:92:7zEvent168181⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:6696
-
C:\Users\Admin\Desktop\Ransomware.Jigsaw\jigsaw.exe"C:\Users\Admin\Desktop\Ransomware.Jigsaw\jigsaw.exe"1⤵
- Executes dropped EXE
- Adds Run key to start application
PID:6824 -
C:\Users\Admin\AppData\Local\Drpbx\drpbx.exe"C:\Users\Admin\AppData\Local\Drpbx\drpbx.exe" C:\Users\Admin\Desktop\Ransomware.Jigsaw\jigsaw.exe2⤵
- Deletes itself
- Executes dropped EXE
- Drops desktop.ini file(s)
- Drops file in Program Files directory
- Suspicious use of FindShellTrayWindow
PID:6896
-
-
C:\Users\Admin\Desktop\Ransomware.Jigsaw\jigsaw.exe"C:\Users\Admin\Desktop\Ransomware.Jigsaw\jigsaw.exe"1⤵
- Executes dropped EXE
- Adds Run key to start application
PID:6760
-
C:\Windows\system32\taskmgr.exe"C:\Windows\system32\taskmgr.exe" /41⤵
- Suspicious use of NtCreateProcessExOtherParentProcess
- Checks SCSI registry key(s)
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:6932
-
C:\Windows\system32\browser_broker.exeC:\Windows\system32\browser_broker.exe -Embedding1⤵PID:7144
-
C:\Windows\system32\werfault.exewerfault.exe /h /shared Global\cd8e253b904e4860ad32d0e06df5464a /t 6900 /p 68961⤵PID:6680
-
C:\Users\Admin\Desktop\Ransomware.TeslaCrypt\3372c1edab46837f1e973164fa2d726c5c5e17bcb888828ccd7c4dfcc234a370.exe"C:\Users\Admin\Desktop\Ransomware.TeslaCrypt\3372c1edab46837f1e973164fa2d726c5c5e17bcb888828ccd7c4dfcc234a370.exe"1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:5712 -
C:\Users\Admin\AppData\Roaming\gsalfrh.exeC:\Users\Admin\AppData\Roaming\gsalfrh.exe2⤵
- Drops file in Drivers directory
- Checks computer location settings
- Executes dropped EXE
- Adds Run key to start application
- Drops file in System32 directory
- Sets desktop wallpaper using registry
- Drops file in Program Files directory
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Modifies Control Panel
PID:6916 -
C:\Windows\SysWOW64\vssadmin.exevssadmin delete shadows /all3⤵
- System Location Discovery: System Language Discovery
- Interacts with shadow copies
PID:4436
-
-
-
C:\Windows\SysWOW64\cmd.exe"C:\Windows\system32\cmd.exe" /c del C:\Users\Admin\Desktop\RANSOM~1.TES\3372C1~1.EXE >> NUL2⤵
- System Location Discovery: System Language Discovery
PID:4964
-
-
C:\Windows\system32\vssvc.exeC:\Windows\system32\vssvc.exe1⤵
- Suspicious use of AdjustPrivilegeToken
PID:6784
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵PID:2340
-
C:\Program Files\7-Zip\7zG.exe"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Desktop\Ransomware.WannaCry\" -ad -an -ai#7zMap7926:96:7zEvent247461⤵
- Suspicious use of AdjustPrivilegeToken
PID:6504
-
C:\Users\Admin\Desktop\ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe"C:\Users\Admin\Desktop\ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe"1⤵
- Drops startup file
- Executes dropped EXE
- Sets desktop wallpaper using registry
- System Location Discovery: System Language Discovery
PID:4868 -
C:\Windows\SysWOW64\attrib.exeattrib +h .2⤵
- System Location Discovery: System Language Discovery
- Views/modifies file attributes
PID:3452
-
-
C:\Windows\SysWOW64\icacls.exeicacls . /grant Everyone:F /T /C /Q2⤵
- Modifies file permissions
- System Location Discovery: System Language Discovery
PID:3004
-
-
C:\Users\Admin\Desktop\taskdl.exetaskdl.exe2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:6616
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c 299171723327066.bat2⤵
- System Location Discovery: System Language Discovery
PID:6748
-
-
C:\Windows\SysWOW64\attrib.exeattrib +h +s F:\$RECYCLE2⤵
- System Location Discovery: System Language Discovery
- Views/modifies file attributes
PID:3540
-
-
C:\Users\Admin\Desktop\@WanaDecryptor@.exe@WanaDecryptor@.exe co2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:4708 -
C:\Users\Admin\Desktop\TaskData\Tor\taskhsvc.exeTaskData\Tor\taskhsvc.exe3⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:6568
-
-
-
C:\Windows\SysWOW64\cmd.execmd.exe /c start /b @WanaDecryptor@.exe vs2⤵
- System Location Discovery: System Language Discovery
PID:5052 -
C:\Users\Admin\Desktop\@WanaDecryptor@.exe@WanaDecryptor@.exe vs3⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:4552 -
C:\Windows\SysWOW64\cmd.execmd.exe /c vssadmin delete shadows /all /quiet & wmic shadowcopy delete & bcdedit /set {default} bootstatuspolicy ignoreallfailures & bcdedit /set {default} recoveryenabled no & wbadmin delete catalog -quiet4⤵
- System Location Discovery: System Language Discovery
PID:6500 -
C:\Windows\SysWOW64\vssadmin.exevssadmin delete shadows /all /quiet5⤵
- System Location Discovery: System Language Discovery
- Interacts with shadow copies
PID:1136
-
-
C:\Windows\SysWOW64\Wbem\WMIC.exewmic shadowcopy delete5⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
PID:6744
-
-
-
-
-
C:\Users\Admin\Desktop\taskdl.exetaskdl.exe2⤵
- Executes dropped EXE
PID:7128
-
-
C:\Users\Admin\Desktop\taskse.exetaskse.exe C:\Users\Admin\Desktop\@WanaDecryptor@.exe2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:6436
-
-
C:\Users\Admin\Desktop\@WanaDecryptor@.exe@WanaDecryptor@.exe2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:3488
-
-
C:\Windows\SysWOW64\cmd.execmd.exe /c reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v "kxmrwtygyk434" /t REG_SZ /d "\"C:\Users\Admin\Desktop\tasksche.exe\"" /f2⤵
- System Location Discovery: System Language Discovery
PID:2972 -
C:\Windows\SysWOW64\reg.exereg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v "kxmrwtygyk434" /t REG_SZ /d "\"C:\Users\Admin\Desktop\tasksche.exe\"" /f3⤵
- Adds Run key to start application
- System Location Discovery: System Language Discovery
- Modifies registry key
PID:5260
-
-
-
C:\Users\Admin\Desktop\taskdl.exetaskdl.exe2⤵
- Executes dropped EXE
PID:6176
-
-
C:\Users\Admin\Desktop\taskse.exetaskse.exe C:\Users\Admin\Desktop\@WanaDecryptor@.exe2⤵
- Executes dropped EXE
PID:5560
-
-
C:\Users\Admin\Desktop\@WanaDecryptor@.exe@WanaDecryptor@.exe2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:6900
-
-
C:\Windows\system32\vssvc.exeC:\Windows\system32\vssvc.exe1⤵
- Suspicious use of AdjustPrivilegeToken
PID:6620
-
C:\Users\Public\Desktop\@WanaDecryptor@.exe"C:\Users\Public\Desktop\@WanaDecryptor@.exe"1⤵
- Executes dropped EXE
- Sets desktop wallpaper using registry
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:4944
-
C:\Windows\system32\taskmgr.exe"C:\Windows\system32\taskmgr.exe" /41⤵
- Checks SCSI registry key(s)
PID:6312
Network
-
Remote address:8.8.8.8:53Request14.227.111.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request14.227.111.52.in-addr.arpaIN PTR
-
Remote address:8.8.8.8:53Request174.117.168.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Requestapi.github.comIN AResponseapi.github.comIN A20.26.156.210
-
Remote address:8.8.8.8:53Requestapi.github.comIN AResponseapi.github.comIN A20.26.156.210
-
Remote address:8.8.8.8:53Request172.210.232.199.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request57.110.18.2.in-addr.arpaIN PTRResponse57.110.18.2.in-addr.arpaIN PTRa2-18-110-57deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Requestwww.microsoft.comIN AResponsewww.microsoft.comIN CNAMEwww.microsoft.com-c-3.edgekey.netwww.microsoft.com-c-3.edgekey.netIN CNAMEwww.microsoft.com-c-3.edgekey.net.globalredir.akadns.netwww.microsoft.com-c-3.edgekey.net.globalredir.akadns.netIN CNAMEe13678.dscb.akamaiedge.nete13678.dscb.akamaiedge.netIN A95.100.245.144
-
Remote address:95.100.245.144:443RequestGET /en-us/edge/server/download?form=MA13FJ HTTP/2.0
host: www.microsoft.com
accept: text/html, application/xhtml+xml, image/jxr, */*
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br
ResponseHTTP/2.0 200
content-encoding: gzip
etag: "9854-GFobyJqZspCQJzUZ6gHfBrceNIw"
strict-transport-security: max-age=31536000; includeSubDomains; preload
origin-agent-cluster: ?1
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
content-security-policy: default-src 'self' https://edgestatic.azureedge.net https://*.microsoft.com; script-src 'self' 'self' 'unsafe-eval' 'unsafe-inline' https://ajax.aspnetcdn.com https://az725175.vo.msecnd.net https://*.microsoft.com https://mem.gfx.ms https://edgestatic.azureedge.net https://js.monitor.azure.com https://mwf-service.akamaized.net https://*.clarity.ms https://*.bing.com http://*.bing.com https://*.adnxs.com https://connect.facebook.net https://snap.licdn.com https://www.youtube.com; style-src 'self' 'unsafe-inline' https://*.microsoft.com https://statics-marketingsites-wcus-ms-com.akamaized.net https://statics-marketingsites-eus-ms-com.akamaized.net https://statics-marketingsites-neu-ms-com.akamaized.net https://statics-marketingsites-eas-ms-com.akamaized.net https://edgestatic.azureedge.net; font-src 'self' data: https://*.microsoft.com http://c.s-microsoft.com https://c.s-microsoft.com https://edgestatic.azureedge.net; connect-src 'self' http://*.microsoft.com https://*.microsoft.com https://*.bing.com https://*.clarity.ms https://js.monitor.azure.com https://edgestatic.azureedge.net https://consentreceiverfd-prod.azurefd.net https://cdn.linkedin.oribi.io https://*.linkedin.com https://boost.mediation.trafficmanager.net https://*.adnxs.com; frame-src 'self' http://*.microsoft.com https://*.microsoft.com https://*.msn.com https://*.msn.cn https://*.bing.com https://www.youtube-nocookie.com https://microsoft-store-10748068.azurewebsites.net; frame-ancestors 'self' https://*.microsoft.com https://*.bing.com chrome-untrusted://dual-search; img-src * data:; media-src 'self' https://edgestatic.azureedge.net
x-azure-ref: 20240810T214329Z-167f4bf9998wp72jmnysebbw6s00000006e000000001bwx0
date: Sat, 10 Aug 2024 21:43:29 GMT
content-length: 10873
vary: Accept-Encoding
tls_version: tls1.2
ms-cv: CASMicrosoftCVfd03941b.0
ms-cv-esi: CASMicrosoftCVfd03941b.0
x-rtag: RT
-
Remote address:8.8.8.8:53Request144.245.100.95.in-addr.arpaIN PTRResponse144.245.100.95.in-addr.arpaIN PTRa95-100-245-144deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Requestajax.aspnetcdn.comIN AResponseajax.aspnetcdn.comIN CNAMEmscomajax.vo.msecnd.netmscomajax.vo.msecnd.netIN CNAMEcs22.wpc.v0cdn.netcs22.wpc.v0cdn.netIN A152.199.19.160
-
Remote address:8.8.8.8:53Requestedgestatic.azureedge.netIN AResponseedgestatic.azureedge.netIN CNAMEedgestatic.afd.azureedge.netedgestatic.afd.azureedge.netIN CNAMEazureedge-t-prod.trafficmanager.netazureedge-t-prod.trafficmanager.netIN CNAMEshed.dual-low.s-part-0036.t-0009.t-msedge.netshed.dual-low.s-part-0036.t-0009.t-msedge.netIN CNAMEs-part-0036.t-0009.t-msedge.nets-part-0036.t-0009.t-msedge.netIN A13.107.246.64
-
Remote address:152.199.19.160:443RequestGET /ajax/jQuery/jquery-3.6.4.min.js HTTP/2.0
host: ajax.aspnetcdn.com
accept: application/javascript, */*;q=0.8
referer: https://www.microsoft.com/en-us/edge/server/download?form=MA13FJ
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br
ResponseHTTP/2.0 200
accept-ranges: bytes
access-control-allow-origin: *
age: 11980456
cache-control: public,max-age=31536000
content-type: application/javascript
date: Sat, 10 Aug 2024 21:43:29 GMT
etag: "06a6d6dc51d91:0"
last-modified: Wed, 08 Mar 2023 16:41:32 GMT
server: ECAcc (lhc/7965)
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 31113
-
Remote address:152.199.19.160:443RequestGET /ajax/jquery.ui/1.11.1/jquery-ui.min.js HTTP/2.0
host: ajax.aspnetcdn.com
accept: application/javascript, */*;q=0.8
referer: https://www.microsoft.com/en-us/edge/server/download?form=MA13FJ
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br
ResponseHTTP/2.0 200
accept-ranges: bytes
access-control-allow-origin: *
age: 12066253
cache-control: public,max-age=31536000
content-type: application/javascript
date: Sat, 10 Aug 2024 21:43:29 GMT
etag: "0e5d372cc33d21:0"
last-modified: Mon, 31 Oct 2016 23:13:54 GMT
server: ECAcc (lhc/7940)
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 63963
-
Remote address:13.107.246.64:443RequestGET /shared/edgeweb/css/b2275d2.css HTTP/2.0
host: edgestatic.azureedge.net
accept: text/css, */*
referer: https://www.microsoft.com/en-us/edge/server/download?form=MA13FJ
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br
ResponseHTTP/2.0 200
content-type: text/css; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
etag: W/"41032-1912dfb3f45"
last-modified: Wed, 07 Aug 2024 17:55:26 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
origin-agent-cluster: ?1
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
x-azure-ref: 20240810T214329Z-154b59dbc6d4k5kg7m84cvh51w0000000220000000009u0z
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
content-encoding: br
-
Remote address:13.107.246.64:443RequestGET /shared/edgeweb/css/5c176d7.css HTTP/2.0
host: edgestatic.azureedge.net
accept: text/css, */*
referer: https://www.microsoft.com/en-us/edge/server/download?form=MA13FJ
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br
ResponseHTTP/2.0 200
content-type: text/css; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
etag: W/"16369-190c6872200"
last-modified: Thu, 18 Jul 2024 15:47:43 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
origin-agent-cluster: ?1
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
x-azure-ref: 20240810T214329Z-154b59dbc6d4k5kg7m84cvh51w0000000220000000009u10
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
content-encoding: br
-
Remote address:13.107.246.64:443RequestGET /shared/edgeweb/css/97af919.css HTTP/2.0
host: edgestatic.azureedge.net
accept: text/css, */*
referer: https://www.microsoft.com/en-us/edge/server/download?form=MA13FJ
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br
ResponseHTTP/2.0 200
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
etag: W/"1b80-1912dfb3f54"
last-modified: Wed, 07 Aug 2024 17:55:26 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
origin-agent-cluster: ?1
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
x-azure-ref: 20240810T214329Z-154b59dbc6d4k5kg7m84cvh51w0000000220000000009u12
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
content-encoding: br
-
Remote address:13.107.246.64:443RequestGET /shared/edgeweb/css/f94b2c3.css HTTP/2.0
host: edgestatic.azureedge.net
accept: text/css, */*
referer: https://www.microsoft.com/en-us/edge/server/download?form=MA13FJ
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br
ResponseHTTP/2.0 200
content-type: text/css; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
etag: W/"498-18c5b523407"
last-modified: Mon, 11 Dec 2023 23:59:23 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
origin-agent-cluster: ?1
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
x-azure-ref: 20240810T214329Z-154b59dbc6d4k5kg7m84cvh51w0000000220000000009u0y
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
content-encoding: br
-
Remote address:13.107.246.64:443RequestGET /shared/edgeweb/5d56b21.js HTTP/2.0
host: edgestatic.azureedge.net
accept: application/javascript, */*;q=0.8
referer: https://www.microsoft.com/en-us/edge/server/download?form=MA13FJ
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br
ResponseHTTP/2.0 200
content-type: text/css; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
etag: W/"b9a-190c68c28a1"
last-modified: Thu, 18 Jul 2024 15:53:12 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
origin-agent-cluster: ?1
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
x-azure-ref: 20240810T214329Z-154b59dbc6d4k5kg7m84cvh51w0000000220000000009u11
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
content-encoding: br
-
Remote address:13.107.246.64:443RequestGET /shared/edgeweb/96ca61e.js HTTP/2.0
host: edgestatic.azureedge.net
accept: application/javascript, */*;q=0.8
referer: https://www.microsoft.com/en-us/edge/server/download?form=MA13FJ
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br
ResponseHTTP/2.0 200
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
etag: W/"4a7b8-1912dfb3f73"
last-modified: Wed, 07 Aug 2024 17:55:26 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
origin-agent-cluster: ?1
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
x-azure-ref: 20240810T214329Z-154b59dbc6d4k5kg7m84cvh51w0000000220000000009u15
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
content-encoding: br
-
Remote address:13.107.246.64:443RequestGET /shared/edgeweb/b8f89d1.js HTTP/2.0
host: edgestatic.azureedge.net
accept: application/javascript, */*;q=0.8
referer: https://www.microsoft.com/en-us/edge/server/download?form=MA13FJ
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br
ResponseHTTP/2.0 200
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
etag: W/"18e407-1912dfb3f93"
last-modified: Wed, 07 Aug 2024 17:55:26 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
origin-agent-cluster: ?1
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
x-azure-ref: 20240810T214329Z-154b59dbc6d4k5kg7m84cvh51w0000000220000000009u16
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
content-encoding: br
-
Remote address:13.107.246.64:443RequestGET /shared/edgeweb/e286996.js HTTP/2.0
host: edgestatic.azureedge.net
accept: application/javascript, */*;q=0.8
referer: https://www.microsoft.com/en-us/edge/server/download?form=MA13FJ
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br
ResponseHTTP/2.0 200
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
etag: W/"1a35bb-1912dfb3f93"
last-modified: Wed, 07 Aug 2024 17:55:26 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
origin-agent-cluster: ?1
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
x-azure-ref: 20240810T214329Z-154b59dbc6d4k5kg7m84cvh51w0000000220000000009u17
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
content-encoding: br
-
Remote address:13.107.246.64:443RequestGET /shared/edgeweb/761c495.js HTTP/2.0
host: edgestatic.azureedge.net
accept: application/javascript, */*;q=0.8
referer: https://www.microsoft.com/en-us/edge/server/download?form=MA13FJ
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br
ResponseHTTP/2.0 200
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
etag: W/"831-1912e1e1135"
last-modified: Wed, 07 Aug 2024 18:33:28 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
origin-agent-cluster: ?1
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
x-azure-ref: 20240810T214329Z-154b59dbc6d4k5kg7m84cvh51w0000000220000000009u13
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
content-encoding: br
-
Remote address:13.107.246.64:443RequestGET /shared/edgeweb/f4d8389.js HTTP/2.0
host: edgestatic.azureedge.net
accept: application/javascript, */*;q=0.8
referer: https://www.microsoft.com/en-us/edge/server/download?form=MA13FJ
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br
ResponseHTTP/2.0 200
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
etag: W/"811c-1912e1e1125"
last-modified: Wed, 07 Aug 2024 18:33:28 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
origin-agent-cluster: ?1
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
x-azure-ref: 20240810T214329Z-154b59dbc6d4k5kg7m84cvh51w0000000220000000009u14
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
content-encoding: br
-
GEThttps://edgestatic.azureedge.net/shared/edgeweb/fonts/segoeui-vf-display-light.e452665.woff2MicrosoftEdgeCP.exeRemote address:13.107.246.64:443RequestGET /shared/edgeweb/fonts/segoeui-vf-display-light.e452665.woff2 HTTP/2.0
host: edgestatic.azureedge.net
accept: */*
referer: https://www.microsoft.com/en-us/edge/server/download?form=MA13FJ
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
origin: https://www.microsoft.com
accept-encoding: gzip, deflate, br
ResponseHTTP/2.0 200
content-type: font/woff2
content-length: 127700
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
etag: W/"1f2d4-18c5b5305d4"
last-modified: Tue, 12 Dec 2023 00:00:16 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
origin-agent-cluster: ?1
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
x-azure-ref: 20240810T214330Z-154b59dbc6d4k5kg7m84cvh51w0000000220000000009u1w
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
accept-ranges: bytes
-
GEThttps://edgestatic.azureedge.net/shared/edgeweb/fonts/segoeui-vf-display-semilight.1338e9a.woff2MicrosoftEdgeCP.exeRemote address:13.107.246.64:443RequestGET /shared/edgeweb/fonts/segoeui-vf-display-semilight.1338e9a.woff2 HTTP/2.0
host: edgestatic.azureedge.net
accept: */*
referer: https://www.microsoft.com/en-us/edge/server/download?form=MA13FJ
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
origin: https://www.microsoft.com
accept-encoding: gzip, deflate, br
ResponseHTTP/2.0 200
content-type: font/woff2
content-length: 127348
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
etag: W/"1f174-18c5b5302f5"
last-modified: Tue, 12 Dec 2023 00:00:16 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
origin-agent-cluster: ?1
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
x-azure-ref: 20240810T214330Z-154b59dbc6d4k5kg7m84cvh51w0000000220000000009u1x
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
accept-ranges: bytes
-
GEThttps://edgestatic.azureedge.net/shared/edgeweb/fonts/segoeui-vf-display.e85854a.woff2MicrosoftEdgeCP.exeRemote address:13.107.246.64:443RequestGET /shared/edgeweb/fonts/segoeui-vf-display.e85854a.woff2 HTTP/2.0
host: edgestatic.azureedge.net
accept: */*
referer: https://www.microsoft.com/en-us/edge/server/download?form=MA13FJ
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
origin: https://www.microsoft.com
accept-encoding: gzip, deflate, br
ResponseHTTP/2.0 200
content-type: font/woff2
content-length: 121824
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
etag: W/"1dbe0-18c5b53a150"
last-modified: Tue, 12 Dec 2023 00:00:56 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
origin-agent-cluster: ?1
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
x-azure-ref: 20240810T214330Z-154b59dbc6d4k5kg7m84cvh51w0000000220000000009u1y
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
accept-ranges: bytes
-
GEThttps://edgestatic.azureedge.net/shared/edgeweb/fonts/segoeui-vf-display-semibold.1977a17.woff2MicrosoftEdgeCP.exeRemote address:13.107.246.64:443RequestGET /shared/edgeweb/fonts/segoeui-vf-display-semibold.1977a17.woff2 HTTP/2.0
host: edgestatic.azureedge.net
accept: */*
referer: https://www.microsoft.com/en-us/edge/server/download?form=MA13FJ
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
origin: https://www.microsoft.com
accept-encoding: gzip, deflate, br
ResponseHTTP/2.0 200
content-type: font/woff2
content-length: 129152
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
etag: W/"1f880-18c5b53a6a2"
last-modified: Tue, 12 Dec 2023 00:00:58 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
origin-agent-cluster: ?1
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
x-azure-ref: 20240810T214330Z-154b59dbc6d4k5kg7m84cvh51w0000000220000000009u1z
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
accept-ranges: bytes
-
GEThttps://edgestatic.azureedge.net/shared/edgeweb/fonts/segoeui-vf-display-bold.2756fcb.woff2MicrosoftEdgeCP.exeRemote address:13.107.246.64:443RequestGET /shared/edgeweb/fonts/segoeui-vf-display-bold.2756fcb.woff2 HTTP/2.0
host: edgestatic.azureedge.net
accept: */*
referer: https://www.microsoft.com/en-us/edge/server/download?form=MA13FJ
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
origin: https://www.microsoft.com
accept-encoding: gzip, deflate, br
ResponseHTTP/2.0 200
content-type: font/woff2
content-length: 125520
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
etag: W/"1ea50-18c5b58e871"
last-modified: Tue, 12 Dec 2023 00:06:42 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
origin-agent-cluster: ?1
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
x-azure-ref: 20240810T214330Z-154b59dbc6d4k5kg7m84cvh51w0000000220000000009u20
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
accept-ranges: bytes
-
Remote address:8.8.8.8:53Request64.246.107.13.in-addr.arpaIN PTRResponse
-
Remote address:13.107.246.64:443RequestGET /welcome/static/favicon.png HTTP/2.0
host: edgestatic.azureedge.net
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
dnt: 1
ResponseHTTP/2.0 200
content-type: image/png
content-length: 7904
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
etag: W/"1ee0-18c5b580101"
last-modified: Tue, 12 Dec 2023 00:05:43 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
origin-agent-cluster: ?1
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
x-azure-ref: 20240810T214331Z-154b59dbc6d9w795z6ern45hp8000000044g000000000efw
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
accept-ranges: bytes
-
Remote address:8.8.8.8:53Requestmsedge.sf.dl.delivery.mp.microsoft.comIN AResponsemsedge.sf.dl.delivery.mp.microsoft.comIN CNAMEstar.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.comstar.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.comIN CNAMEcdp-f-ssl-nlu-net.trafficmanager.netcdp-f-ssl-nlu-net.trafficmanager.netIN CNAMEwildcard-ssl.azureedge.netwildcard-ssl.azureedge.netIN CNAMEwildcard-ssl.ec.azureedge.netwildcard-ssl.ec.azureedge.netIN CNAMEscdn1f003.wpc.ad629.nucdn.netscdn1f003.wpc.ad629.nucdn.netIN CNAMEsni1gl.wpc.nucdn.netsni1gl.wpc.nucdn.netIN A152.199.21.175
-
GEThttps://msedge.sf.dl.delivery.mp.microsoft.com/filestreamingservice/files/930b8c80-17c1-4850-b5ee-3dd601265f34/MicrosoftEdgeSetup.exeMicrosoftEdgeCP.exeRemote address:152.199.21.175:443RequestGET /filestreamingservice/files/930b8c80-17c1-4850-b5ee-3dd601265f34/MicrosoftEdgeSetup.exe HTTP/2.0
host: msedge.sf.dl.delivery.mp.microsoft.com
accept: text/html, application/xhtml+xml, image/jxr, */*
referer: https://www.microsoft.com/en-us/edge/server/download?form=MA13FJ
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br
ResponseHTTP/2.0 200
age: 1101919
cache-control: public, max-age=17280000
content-type: application/octet-stream
date: Sat, 10 Aug 2024 21:43:32 GMT
etag: "pVwADCJ3oWI4QllR2BuIWb7CXxA="
last-modified: Mon, 29 Jul 2024 03:34:50 GMT
ms-correlationid: 7eb75fba-78a3-46b2-838a-786c3a6432cb
ms-cv: e675jACPdEmWXz4Q.0
ms-requestid: 58fb51bc-8775-4645-a987-b2a189d3bb98
server: ECAcc (lhc/7961)
x-aspnet-version: 4.0.30319
x-aspnetmvc-version: 5.3
x-cache: HIT
x-ccc: GB
x-cid: 11
x-powered-by: ASP.NET
x-powered-by: ARR/3.0
x-powered-by: ASP.NET
content-length: 1647016
-
GEThttps://msedge.sf.dl.delivery.mp.microsoft.com/filestreamingservice/files/930b8c80-17c1-4850-b5ee-3dd601265f34/MicrosoftEdgeSetup.exeMicrosoftEdgeCP.exeRemote address:152.199.21.175:443RequestGET /filestreamingservice/files/930b8c80-17c1-4850-b5ee-3dd601265f34/MicrosoftEdgeSetup.exe HTTP/2.0
host: msedge.sf.dl.delivery.mp.microsoft.com
accept: text/html, application/xhtml+xml, image/jxr, */*
referer: https://www.microsoft.com/en-us/edge/server/download?form=MA13FJ
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br
ResponseHTTP/2.0 200
age: 1101919
cache-control: public, max-age=17280000
content-type: application/octet-stream
date: Sat, 10 Aug 2024 21:43:32 GMT
etag: "pVwADCJ3oWI4QllR2BuIWb7CXxA="
last-modified: Mon, 29 Jul 2024 03:34:50 GMT
ms-correlationid: 7eb75fba-78a3-46b2-838a-786c3a6432cb
ms-cv: e675jACPdEmWXz4Q.0
ms-requestid: 58fb51bc-8775-4645-a987-b2a189d3bb98
server: ECAcc (lhc/7961)
x-aspnet-version: 4.0.30319
x-aspnetmvc-version: 5.3
x-cache: HIT
x-ccc: GB
x-cid: 11
x-powered-by: ASP.NET
x-powered-by: ARR/3.0
x-powered-by: ASP.NET
content-length: 1647016
-
GEThttps://msedge.sf.dl.delivery.mp.microsoft.com/filestreamingservice/files/930b8c80-17c1-4850-b5ee-3dd601265f34/MicrosoftEdgeSetup.exeMicrosoftEdgeCP.exeRemote address:152.199.21.175:443RequestGET /filestreamingservice/files/930b8c80-17c1-4850-b5ee-3dd601265f34/MicrosoftEdgeSetup.exe HTTP/2.0
host: msedge.sf.dl.delivery.mp.microsoft.com
accept: text/html, application/xhtml+xml, image/jxr, */*
referer: https://www.microsoft.com/en-us/edge/server/download?form=MA13FJ
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br
ResponseHTTP/2.0 200
age: 1101921
cache-control: public, max-age=17280000
content-type: application/octet-stream
date: Sat, 10 Aug 2024 21:43:34 GMT
etag: "pVwADCJ3oWI4QllR2BuIWb7CXxA="
last-modified: Mon, 29 Jul 2024 03:34:50 GMT
ms-correlationid: 7eb75fba-78a3-46b2-838a-786c3a6432cb
ms-cv: e675jACPdEmWXz4Q.0
ms-requestid: 58fb51bc-8775-4645-a987-b2a189d3bb98
server: ECAcc (lhc/7961)
x-aspnet-version: 4.0.30319
x-aspnetmvc-version: 5.3
x-cache: HIT
x-ccc: GB
x-cid: 11
x-powered-by: ASP.NET
x-powered-by: ARR/3.0
x-powered-by: ASP.NET
content-length: 1647016
-
Remote address:8.8.8.8:53Request175.21.199.152.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request253.15.104.51.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Requestwww.msn.comIN AResponsewww.msn.comIN CNAMEwww-msn-com.a-0003.a-msedge.netwww-msn-com.a-0003.a-msedge.netIN CNAMEa-0003.a-msedge.neta-0003.a-msedge.netIN A204.79.197.203
-
GEThttps://www.msn.com/spartan/ntp?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=defaultMicrosoftEdgeCP.exeRemote address:204.79.197.203:443RequestGET /spartan/ntp?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default HTTP/2.0
host: www.msn.com
accept: text/html, application/xhtml+xml, image/jxr, */*
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br
cookie: USRLOC=; MUID=160C54256D446C232E4B40726CE86D50; _EDGE_V=1; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+04+2024+13%3A28%3A10+GMT%2B0000+(Coordinated+Universal+Time)&version=202310.2.0&browserGpcFlag=0&isIABGlobal=false; sptmarket=en-US|US|gb|en-gb|en-gb|en||RefA=BE072A2D29CA44A4956EA1CFE9EDFA2F.RefC=2024-04-04T13:28:10Z; MUIDB=160C54256D446C232E4B40726CE86D50
ResponseHTTP/2.0 200
content-length: 65926
content-type: text/html; charset=utf-8
set-cookie: _C_ETH=1; domain=.msn.com; path=/; secure; httponly
set-cookie: _C_Auth=
set-cookie: sptmarket=en-US|US|gb|en-gb|en-gb|en||cf=8|RefA=BE072A2D29CA44A4956EA1CFE9EDFA2F.RefC=2024-04-04T13:28:10Z; expires=Mon, 10 Aug 2026 21:43:41 GMT; path=/
set-cookie: _EDGE_S=SID=2323B3F93F4460CF364FA72E3E3F6142; domain=.msn.com; path=/; httponly
access-control-allow-methods: HEAD,GET,OPTIONS
x-ceto-origin-forwardonerror: https://staticview.msn.com
content-security-policy: child-src 'self';connect-src 'self' *.mavideo.microsoft.com arc.msn.com assets.msn.com assets2.msn.com assets.msn.cn assets2.msn.cn browser.events.data.msn.com browser.events.data.msn.cn browser.events.data.microsoftstart.com browser.events.data.microsoftstart.cn business.bing.com/api/ events-sandbox.data.msn.com events-sandbox.data.msn.cn events-sandbox.data.microsoftstart.com events-sandbox.data.microsoftstart.cn finance-services.msn.com https://bingretailmsndata.azureedge.net/msndata/ https://petrol.office.microsoft.com/v1/feedback https://privacyportal.onetrust.com/request/v1/consentreceipts https://services.bingapis.com img-s-msn-com.akamaized.net login.microsoftonline.com notification.services.msn.com ris.api.iris.microsoft.com srtb.msn.com srtb.msn.cn usgov.business.bing.com/api/ www.bing.com/HPImageArchive.aspx www.bing.com/api/custom/opal/reco/ www.bing.com/api/v1/mediation/tracking www.bing.com/api/v1/mediation/trends www.bing.com/as/ www.bing.com/AS/Suggestions www.bing.com/AS/Suggestions/v2 www.bing.com/historyHandler www.bing.com/profile/history/data www.bing.com/retail/msn/api/shopcard www.bing.com/retailexp/msn/api/ www.bing.com/retailexpdata/msndata/ www.bing.com/th www.msn.com www.microsoftstart.com *.oneservice.msn.com *.oneservice.msn.cn api.msn.com api.msn.cn ent-api.msn.com ent-api.msn.cn ppe-api.msn.com ppe-api.msn.cn graph.microsoft.com/v1.0/;default-src 'none';font-src 'self' assets.msn.com assets2.msn.com assets.msn.cn assets2.msn.cn;frame-src login.live.com login.microsoftonline.com www.bing.com/shop www.bing.com/shop/halloween www.bing.com/videos/search;img-src https://* blob: data:;report-to csp-endpoint;style-src 'self' 'unsafe-inline' c.s-microsoft.com/mscc/ assets.msn.com assets2.msn.com assets.msn.cn assets2.msn.cn;worker-src 'self' 'report-sample';script-src 'self' 'report-sample' assets.msn.com assets2.msn.com assets.msn.cn assets2.msn.cn c.s-microsoft.com/mscc/ https://clarity.microsoft.com/js/879b55d3-7b96-457b-af7c-03a114c2ae20 platform.bing.com/geo/AutoSuggest/v1 www.bing.com/as/ www.bing.com/s/as/ 'unsafe-inline'
x-robots-tag: noindex
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-ua-compatible: IE=Edge;chrome=1
x-fabric-cluster: pmeprodneu
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]},{"group":"csp-endpoint","max_age":86400,"endpoints":[{"url":"https://deff.nelreports.net/api/report"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.5}
strict-transport-security: max-age=1209600; includeSubDomains; preload
x-ceto-ref: 66b7df0d83974248be70dd7833208f79|AFD:D8185B662CDC4949B1472FFA8DFE0DBA|2024-08-10T21:43:41.644Z
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: D8185B662CDC4949B1472FFA8DFE0DBA Ref B: LON04EDGE0609 Ref C: 2024-08-10T21:43:41Z
date: Sat, 10 Aug 2024 21:43:40 GMT
-
GEThttps://www.msn.com/bundles/v1/edge/latest/manifest.appcache?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=defaultMicrosoftEdgeCP.exeRemote address:204.79.197.203:443RequestGET /bundles/v1/edge/latest/manifest.appcache?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default HTTP/2.0
host: www.msn.com
accept: */*
referer: https://www.msn.com/spartan/ntp?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
origin: https://www.msn.com
accept-encoding: gzip, deflate, br
cookie: USRLOC=; MUID=160C54256D446C232E4B40726CE86D50; _EDGE_V=1; OptanonConsent=isGpcEnabled=0&datestamp=Sat+Aug+10+2024+21%3A43%3A41+GMT%2B0000+(Coordinated+Universal+Time)&version=202310.2.0&browserGpcFlag=0&isIABGlobal=false; _C_ETH=1; _EDGE_S=SID=2323B3F93F4460CF364FA72E3E3F6142; sptmarket=en-US|US|gb|en-gb|en-gb|en||cf=8|RefA=BE072A2D29CA44A4956EA1CFE9EDFA2F.RefC=2024-04-04T13:28:10Z; MUIDB=160C54256D446C232E4B40726CE86D50
ResponseHTTP/2.0 200
content-length: 70
content-type: text/cache-manifest
content-encoding: gzip
content-md5: Rqmsx87pIMK1GFYNCRhAAQ==
last-modified: Mon, 26 Jul 2021 22:20:05 GMT
etag: 0x8D9508385701DBF
vary: Origin
x-ms-request-id: 1030c6a6-101e-00fa-4128-bfc1fe000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
akamai-request-bc: [a=2.18.26.197,b=1485418565,c=g,n=GB_EN_SLOUGH,o=20940]
server-timing: clientrtt; dur=0, clienttt; dur=0, origin; dur=0, cdntime; dur=0, wpo;dur=0,1s;dur=0
akamai-cache-status: Hit from child
akamai-server-ip: 2.18.26.197
akamai-request-id: 5889b045
access-control-allow-credentials: true
access-control-allow-origin: https://www.msn.com
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1}
timing-allow-origin: *
akamai-grn: 0.c51a1202.1723326222.5889b045
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: B3BBD374FACB42E897E4C41CE5083B51 Ref B: LON04EDGE0609 Ref C: 2024-08-10T21:43:42Z
date: Sat, 10 Aug 2024 21:43:41 GMT
-
GEThttps://www.msn.com/spartan/ntp?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=defaultMicrosoftEdgeCP.exeRemote address:204.79.197.203:443RequestGET /spartan/ntp?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default HTTP/2.0
host: www.msn.com
accept: */*
referer: https://www.msn.com/spartan/ntp?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br
cookie: _C_Auth=; USRLOC=; MUID=160C54256D446C232E4B40726CE86D50; _EDGE_V=1; OptanonConsent=isGpcEnabled=0&datestamp=Sat+Aug+10+2024+21%3A43%3A41+GMT%2B0000+(Coordinated+Universal+Time)&version=202310.2.0&browserGpcFlag=0&isIABGlobal=false; _C_ETH=1; _EDGE_S=SID=2323B3F93F4460CF364FA72E3E3F6142; sptmarket=en-US|US|gb|en-gb|en-gb|en||cf=8|RefA=BE072A2D29CA44A4956EA1CFE9EDFA2F.RefC=2024-04-04T13:28:10Z; MUIDB=160C54256D446C232E4B40726CE86D50
ResponseHTTP/2.0 200
content-length: 65935
content-type: text/html; charset=utf-8
set-cookie: _C_ETH=1; expires=Fri, 09 Aug 2024 21:43:42 GMT; domain=.msn.com; path=/; secure; httponly
set-cookie: _C_Auth=
set-cookie: _EDGE_S=SID=2323B3F93F4460CF364FA72E3E3F6142; domain=.msn.com; path=/; httponly
access-control-allow-methods: HEAD,GET,OPTIONS
x-ceto-origin-forwardonerror: https://staticview.msn.com
content-security-policy: child-src 'self';connect-src 'self' *.mavideo.microsoft.com arc.msn.com assets.msn.com assets2.msn.com assets.msn.cn assets2.msn.cn browser.events.data.msn.com browser.events.data.msn.cn browser.events.data.microsoftstart.com browser.events.data.microsoftstart.cn business.bing.com/api/ events-sandbox.data.msn.com events-sandbox.data.msn.cn events-sandbox.data.microsoftstart.com events-sandbox.data.microsoftstart.cn finance-services.msn.com https://bingretailmsndata.azureedge.net/msndata/ https://petrol.office.microsoft.com/v1/feedback https://privacyportal.onetrust.com/request/v1/consentreceipts https://services.bingapis.com img-s-msn-com.akamaized.net login.microsoftonline.com notification.services.msn.com ris.api.iris.microsoft.com srtb.msn.com srtb.msn.cn usgov.business.bing.com/api/ www.bing.com/HPImageArchive.aspx www.bing.com/api/custom/opal/reco/ www.bing.com/api/v1/mediation/tracking www.bing.com/api/v1/mediation/trends www.bing.com/as/ www.bing.com/AS/Suggestions www.bing.com/AS/Suggestions/v2 www.bing.com/historyHandler www.bing.com/profile/history/data www.bing.com/retail/msn/api/shopcard www.bing.com/retailexp/msn/api/ www.bing.com/retailexpdata/msndata/ www.bing.com/th www.msn.com www.microsoftstart.com *.oneservice.msn.com *.oneservice.msn.cn api.msn.com api.msn.cn ent-api.msn.com ent-api.msn.cn ppe-api.msn.com ppe-api.msn.cn graph.microsoft.com/v1.0/;default-src 'none';font-src 'self' assets.msn.com assets2.msn.com assets.msn.cn assets2.msn.cn;frame-src login.live.com login.microsoftonline.com www.bing.com/shop www.bing.com/shop/halloween www.bing.com/videos/search;img-src https://* blob: data:;report-to csp-endpoint;style-src 'self' 'unsafe-inline' c.s-microsoft.com/mscc/ assets.msn.com assets2.msn.com assets.msn.cn assets2.msn.cn;worker-src 'self' 'report-sample';script-src 'self' 'report-sample' assets.msn.com assets2.msn.com assets.msn.cn assets2.msn.cn c.s-microsoft.com/mscc/ https://clarity.microsoft.com/js/879b55d3-7b96-457b-af7c-03a114c2ae20 platform.bing.com/geo/AutoSuggest/v1 www.bing.com/as/ www.bing.com/s/as/ 'unsafe-inline'
x-robots-tag: noindex
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-ua-compatible: IE=Edge;chrome=1
x-fabric-cluster: pmeprodneu
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]},{"group":"csp-endpoint","max_age":86400,"endpoints":[{"url":"https://deff.nelreports.net/api/report"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.5}
strict-transport-security: max-age=1209600; includeSubDomains; preload
x-ceto-ref: 66b7df0e685f466890b406b0fc5278f2|AFD:324113CE38D14893AB4593D3086A54DE|2024-08-10T21:43:42.964Z
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 324113CE38D14893AB4593D3086A54DE Ref B: LON04EDGE0609 Ref C: 2024-08-10T21:43:42Z
date: Sat, 10 Aug 2024 21:43:42 GMT
-
GEThttps://www.msn.com/bundles/v1/edge/latest/manifest.appcache?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=defaultMicrosoftEdgeCP.exeRemote address:204.79.197.203:443RequestGET /bundles/v1/edge/latest/manifest.appcache?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default HTTP/2.0
host: www.msn.com
accept: */*
referer: https://www.msn.com/spartan/ntp?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
origin: https://www.msn.com
accept-encoding: gzip, deflate, br
cookie: USRLOC=; MUID=160C54256D446C232E4B40726CE86D50; _EDGE_V=1; OptanonConsent=isGpcEnabled=0&datestamp=Sat+Aug+10+2024+21%3A43%3A41+GMT%2B0000+(Coordinated+Universal+Time)&version=202310.2.0&browserGpcFlag=0&isIABGlobal=false; _EDGE_S=SID=2323B3F93F4460CF364FA72E3E3F6142; sptmarket=en-US|US|gb|en-gb|en-gb|en||cf=8|RefA=BE072A2D29CA44A4956EA1CFE9EDFA2F.RefC=2024-04-04T13:28:10Z; MUIDB=160C54256D446C232E4B40726CE86D50
ResponseHTTP/2.0 200
content-length: 70
content-type: text/cache-manifest
content-encoding: gzip
content-md5: Rqmsx87pIMK1GFYNCRhAAQ==
last-modified: Mon, 26 Jul 2021 22:20:05 GMT
etag: 0x8D9508385701DBF
vary: Origin
x-ms-request-id: 1030c6a6-101e-00fa-4128-bfc1fe000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
akamai-request-bc: [a=2.18.26.197,b=1485423049,c=g,n=GB_EN_SLOUGH,o=20940]
server-timing: clientrtt; dur=0, clienttt; dur=0, origin; dur=0, cdntime; dur=0, wpo;dur=0,1s;dur=0
akamai-cache-status: Hit from child
akamai-server-ip: 2.18.26.197
akamai-request-id: 5889c1c9
access-control-allow-credentials: true
access-control-allow-origin: https://www.msn.com
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1}
timing-allow-origin: *
akamai-grn: 0.c51a1202.1723326223.5889c1c9
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 2EDDA05B5FCE4A049BCBB19E70E60900 Ref B: LON04EDGE0609 Ref C: 2024-08-10T21:43:43Z
date: Sat, 10 Aug 2024 21:43:42 GMT
-
Remote address:8.8.8.8:53Requestassets.msn.comIN AResponseassets.msn.comIN CNAMEassets.msn.com.edgekey.netassets.msn.com.edgekey.netIN CNAMEe28578.d.akamaiedge.nete28578.d.akamaiedge.netIN A95.101.143.105e28578.d.akamaiedge.netIN A95.101.143.242
-
Remote address:8.8.8.8:53Requestbrowser.events.data.msn.comIN AResponsebrowser.events.data.msn.comIN CNAMEglobal.asimov.events.data.trafficmanager.netglobal.asimov.events.data.trafficmanager.netIN CNAMEonedscolprdcus03.centralus.cloudapp.azure.comonedscolprdcus03.centralus.cloudapp.azure.comIN A13.89.178.27
-
GEThttps://assets.msn.com/staticsb/statics/latest/oneTrust/1.9/scripttemplates/otSDKStub.jsMicrosoftEdgeCP.exeRemote address:95.101.143.105:443RequestGET /staticsb/statics/latest/oneTrust/1.9/scripttemplates/otSDKStub.js HTTP/2.0
host: assets.msn.com
accept: application/javascript, */*;q=0.8
referer: https://www.msn.com/spartan/ntp?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br
cookie: USRLOC=; MUID=160C54256D446C232E4B40726CE86D50; _EDGE_V=1; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+04+2024+13%3A28%3A10+GMT%2B0000+(Coordinated+Universal+Time)&version=202310.2.0&browserGpcFlag=0&isIABGlobal=false; _C_ETH=1; _EDGE_S=SID=2323B3F93F4460CF364FA72E3E3F6142
ResponseHTTP/2.0 200
content-md5: SrH4iQ0luJkTRyZ3V7l1ZA==
last-modified: Fri, 09 Aug 2024 06:14:06 GMT
etag: 0x8DCB83A79658C90
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 3af7420a-d01e-0007-3978-ea367c000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
content-encoding: gzip
date: Sat, 10 Aug 2024 21:43:42 GMT
content-length: 7369
akamai-request-bc: [a=95.101.143.101,b=25375534,c=g,n=GB_EN_LONDON,o=20940]
server-timing: clientrtt; dur=51, clienttt; dur=0, origin; dur=0, cdntime; dur=0, wpo;dur=0,1s;dur=0
akamai-cache-status: Hit from child
akamai-server-ip: 95.101.143.101
akamai-request-id: 183332e
cache-control: public, max-age=1209600
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1}
timing-allow-origin: *
akamai-grn: 0.658f655f.1723326221.183332e
vary: Origin
-
GEThttps://assets.msn.com/bundles/v1/edge/latest/common.5dd7cff85de67632bfd7.jsMicrosoftEdgeCP.exeRemote address:95.101.143.105:443RequestGET /bundles/v1/edge/latest/common.5dd7cff85de67632bfd7.js HTTP/2.0
host: assets.msn.com
accept: application/javascript, */*;q=0.8
referer: https://www.msn.com/spartan/ntp?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
origin: https://www.msn.com
accept-encoding: gzip, deflate, br
ResponseHTTP/2.0 200
content-md5: 4Qqx/5ghQW9cUY3TgpoINQ==
last-modified: Mon, 26 Jul 2021 22:18:30 GMT
etag: 0x8D950834C94BC27
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 39561431-001e-00cf-5ed0-7067e5000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
content-encoding: br
date: Sat, 10 Aug 2024 21:43:42 GMT
akamai-request-bc: [a=95.101.143.101,b=25375535,c=g,n=GB_EN_LONDON,o=20940]
server-timing: clientrtt; dur=51, clienttt; dur=1, origin; dur=0, cdntime; dur=1, wpo;dur=0,1s;dur=0
akamai-cache-status: Hit from child
content-type: application/javascript
akamai-server-ip: 95.101.143.101
akamai-request-id: 183332f
access-control-allow-credentials: true
access-control-allow-origin: https://www.msn.com
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1}
cache-control: public, no-transform, max-age=31535892
timing-allow-origin: *
akamai-grn: 0.658f655f.1723326222.183332f
vary: Origin
-
GEThttps://assets.msn.com/bundles/v1/edge/latest/vendors.c47bf4f4981f23895ddb.jsMicrosoftEdgeCP.exeRemote address:95.101.143.105:443RequestGET /bundles/v1/edge/latest/vendors.c47bf4f4981f23895ddb.js HTTP/2.0
host: assets.msn.com
accept: application/javascript, */*;q=0.8
referer: https://www.msn.com/spartan/ntp?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
origin: https://www.msn.com
accept-encoding: gzip, deflate, br
ResponseHTTP/2.0 200
content-md5: YrPejprI4tG+2X4ekLKlAg==
last-modified: Mon, 26 Jul 2021 22:19:35 GMT
etag: 0x8D9508373717114
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: facf2bbe-701e-003c-1fc8-58bfb6000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
content-encoding: br
date: Sat, 10 Aug 2024 21:43:42 GMT
akamai-request-bc: [a=95.101.143.101,b=25375536,c=g,n=GB_EN_LONDON,o=20940]
server-timing: clientrtt; dur=51, clienttt; dur=0, origin; dur=0, cdntime; dur=0, wpo;dur=0,1s;dur=0
akamai-cache-status: Hit from child
content-type: application/javascript
akamai-server-ip: 95.101.143.101
akamai-request-id: 1833330
access-control-allow-credentials: true
access-control-allow-origin: https://www.msn.com
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1}
cache-control: public, no-transform, max-age=31535892
timing-allow-origin: *
akamai-grn: 0.658f655f.1723326222.1833330
vary: Origin
-
GEThttps://assets.msn.com/bundles/v1/edge/latest/microsoft.8aa91a5fe4f5d8517ae1.jsMicrosoftEdgeCP.exeRemote address:95.101.143.105:443RequestGET /bundles/v1/edge/latest/microsoft.8aa91a5fe4f5d8517ae1.js HTTP/2.0
host: assets.msn.com
accept: application/javascript, */*;q=0.8
referer: https://www.msn.com/spartan/ntp?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
origin: https://www.msn.com
accept-encoding: gzip, deflate, br
ResponseHTTP/2.0 200
content-md5: YzySdh8ykm7KVsyrxDpMLg==
last-modified: Mon, 26 Jul 2021 22:18:52 GMT
etag: 0x8D9508359704919
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: b489f3f8-901e-00b6-5b75-65e6f6000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
content-encoding: br
date: Sat, 10 Aug 2024 21:43:42 GMT
akamai-request-bc: [a=95.101.143.101,b=25375537,c=g,n=GB_EN_LONDON,o=20940]
server-timing: clientrtt; dur=51, clienttt; dur=0, origin; dur=0, cdntime; dur=0, wpo;dur=0,1s;dur=0
akamai-cache-status: Hit from child
content-type: application/javascript
akamai-server-ip: 95.101.143.101
akamai-request-id: 1833331
access-control-allow-credentials: true
access-control-allow-origin: https://www.msn.com
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1}
cache-control: public, no-transform, max-age=31535892
timing-allow-origin: *
akamai-grn: 0.658f655f.1723326222.1833331
vary: Origin
-
GEThttps://assets.msn.com/staticsb/statics/latest/oneTrust/1.9/consent/55a804ab-e5c6-4b97-9319-86263d365d28/55a804ab-e5c6-4b97-9319-86263d365d28.jsonMicrosoftEdgeCP.exeRemote address:95.101.143.105:443RequestGET /staticsb/statics/latest/oneTrust/1.9/consent/55a804ab-e5c6-4b97-9319-86263d365d28/55a804ab-e5c6-4b97-9319-86263d365d28.json HTTP/2.0
host: assets.msn.com
accept: */*
origin: https://www.msn.com
referer: https://www.msn.com/spartan/ntp?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br
ResponseHTTP/2.0 200
content-md5: tBDiswOqCRnxNKBPFOr30w==
last-modified: Fri, 09 Aug 2024 06:14:18 GMT
etag: 0x8DCB83A80957425
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 07a46457-601e-0002-32a3-eae4a7000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
content-encoding: gzip
date: Sat, 10 Aug 2024 21:43:42 GMT
content-length: 1854
akamai-request-bc: [a=95.101.143.101,b=25375570,c=g,n=GB_EN_LONDON,o=20940]
server-timing: clientrtt; dur=48, clienttt; dur=0, origin; dur=0, cdntime; dur=0, wpo;dur=0,1s;dur=0
akamai-cache-status: Hit from child
akamai-server-ip: 95.101.143.101
akamai-request-id: 1833352
access-control-allow-credentials: true
access-control-allow-origin: https://www.msn.com
cache-control: public, max-age=1209600
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1}
timing-allow-origin: *
akamai-grn: 0.658f655f.1723326222.1833352
vary: Origin
-
GEThttps://assets.msn.com/staticsb/statics/latest/oneTrust/1.9/scripttemplates/202310.2.0/otBannerSdk.jsMicrosoftEdgeCP.exeRemote address:95.101.143.105:443RequestGET /staticsb/statics/latest/oneTrust/1.9/scripttemplates/202310.2.0/otBannerSdk.js HTTP/2.0
host: assets.msn.com
accept: application/javascript, */*;q=0.8
referer: https://www.msn.com/spartan/ntp?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br
cookie: USRLOC=; MUID=160C54256D446C232E4B40726CE86D50; _EDGE_V=1; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+04+2024+13%3A28%3A10+GMT%2B0000+(Coordinated+Universal+Time)&version=202310.2.0&browserGpcFlag=0&isIABGlobal=false; _C_ETH=1; _EDGE_S=SID=2323B3F93F4460CF364FA72E3E3F6142
ResponseHTTP/2.0 200
content-md5: lAfvoXufoJKI/4M+6xEcxw==
last-modified: Fri, 09 Aug 2024 06:14:17 GMT
etag: 0x8DCB83A7FD6A45A
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 31d5b97c-a01e-0003-59c8-ea130b000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
content-encoding: gzip
content-length: 105160
date: Sat, 10 Aug 2024 21:43:42 GMT
akamai-request-bc: [a=95.101.143.101,b=25375719,c=g,n=GB_EN_LONDON,o=20940]
server-timing: clientrtt; dur=55, clienttt; dur=0, origin; dur=0, cdntime; dur=0, wpo;dur=0,1s;dur=0
akamai-cache-status: Hit from child
akamai-server-ip: 95.101.143.101
akamai-request-id: 18333e7
cache-control: public, max-age=1209600
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1}
timing-allow-origin: *
akamai-grn: 0.658f655f.1723326222.18333e7
vary: Origin
-
GEThttps://assets.msn.com/staticsb/statics/latest/oneTrust/1.9/consent/55a804ab-e5c6-4b97-9319-86263d365d28/e51556d4-5848-4a4b-a5e2-bc98431e1bf7/en-gb.jsonMicrosoftEdgeCP.exeRemote address:95.101.143.105:443RequestGET /staticsb/statics/latest/oneTrust/1.9/consent/55a804ab-e5c6-4b97-9319-86263d365d28/e51556d4-5848-4a4b-a5e2-bc98431e1bf7/en-gb.json HTTP/2.0
host: assets.msn.com
accept: */*
origin: https://www.msn.com
referer: https://www.msn.com/spartan/ntp?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br
ResponseHTTP/2.0 200
content-md5: iB7GIl1dfVgN/rIFCQoYvg==
last-modified: Fri, 09 Aug 2024 06:14:09 GMT
etag: 0x8DCB83A7B0EC608
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 93fa9c65-801e-0055-7b4a-eaabf6000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
content-encoding: gzip
date: Sat, 10 Aug 2024 21:43:42 GMT
content-length: 67471
akamai-request-bc: [a=95.101.143.101,b=25375761,c=g,n=GB_EN_LONDON,o=20940]
server-timing: clientrtt; dur=49, clienttt; dur=0, origin; dur=0, cdntime; dur=0, wpo;dur=0,1s;dur=0
akamai-cache-status: Hit from child
akamai-server-ip: 95.101.143.101
akamai-request-id: 1833411
access-control-allow-credentials: true
access-control-allow-origin: https://www.msn.com
cache-control: public, max-age=1209600
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1}
timing-allow-origin: *
akamai-grn: 0.658f655f.1723326222.1833411
vary: Origin
-
GEThttps://assets.msn.com/staticsb/statics/latest/oneTrust/1.9/consent/55a804ab-e5c6-4b97-9319-86263d365d28/iab2V2Data.jsonMicrosoftEdgeCP.exeRemote address:95.101.143.105:443RequestGET /staticsb/statics/latest/oneTrust/1.9/consent/55a804ab-e5c6-4b97-9319-86263d365d28/iab2V2Data.json HTTP/2.0
host: assets.msn.com
accept: */*
origin: https://www.msn.com
referer: https://www.msn.com/spartan/ntp?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br
ResponseHTTP/2.0 200
content-md5: Z3GVmx0mQbhR0PePNnG6TQ==
last-modified: Fri, 09 Aug 2024 06:14:22 GMT
etag: 0x8DCB83A82D27F06
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 43e2f6b7-d01e-00de-7686-eaaf9b000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
content-encoding: gzip
date: Sat, 10 Aug 2024 21:43:42 GMT
content-length: 20340
akamai-request-bc: [a=95.101.143.101,b=25375760,c=g,n=GB_EN_LONDON,o=20940]
server-timing: clientrtt; dur=49, clienttt; dur=0, origin; dur=0, cdntime; dur=0, wpo;dur=0,1s;dur=0
akamai-cache-status: Hit from child
akamai-server-ip: 95.101.143.101
akamai-request-id: 1833410
access-control-allow-credentials: true
access-control-allow-origin: https://www.msn.com
cache-control: public, max-age=1209600
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1}
timing-allow-origin: *
akamai-grn: 0.658f655f.1723326222.1833410
vary: Origin
-
GEThttps://assets.msn.com/staticsb/statics/latest/oneTrust/1.9/scripttemplates/202310.2.0/otTCF.jsMicrosoftEdgeCP.exeRemote address:95.101.143.105:443RequestGET /staticsb/statics/latest/oneTrust/1.9/scripttemplates/202310.2.0/otTCF.js HTTP/2.0
host: assets.msn.com
accept: application/javascript, */*;q=0.8
referer: https://www.msn.com/spartan/ntp?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br
cookie: USRLOC=; MUID=160C54256D446C232E4B40726CE86D50; _EDGE_V=1; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+04+2024+13%3A28%3A10+GMT%2B0000+(Coordinated+Universal+Time)&version=202310.2.0&browserGpcFlag=0&isIABGlobal=false; _C_ETH=1; _EDGE_S=SID=2323B3F93F4460CF364FA72E3E3F6142
ResponseHTTP/2.0 200
content-md5: zMe9/U/sQ7tOLuJUcFr2+Q==
last-modified: Fri, 09 Aug 2024 06:14:07 GMT
etag: 0x8DCB83A7A5657AA
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: daae8695-301e-00c6-6b7e-ea70fc000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
content-encoding: gzip
content-length: 11711
date: Sat, 10 Aug 2024 21:43:42 GMT
akamai-request-bc: [a=95.101.143.101,b=25375766,c=g,n=GB_EN_LONDON,o=20940]
server-timing: clientrtt; dur=49, clienttt; dur=0, origin; dur=0, cdntime; dur=0, wpo;dur=0,1s;dur=0
akamai-cache-status: Hit from child
akamai-server-ip: 95.101.143.101
akamai-request-id: 1833416
cache-control: public, max-age=1209600
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1}
timing-allow-origin: *
akamai-grn: 0.658f655f.1723326222.1833416
vary: Origin
-
POSThttps://browser.events.data.msn.com/OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-2.2.2&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1723326221000&w=0&anoncknm=app_anonMicrosoftEdgeCP.exeRemote address:13.89.178.27:443RequestPOST /OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-2.2.2&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1723326221000&w=0&anoncknm=app_anon HTTP/2.0
host: browser.events.data.msn.com
origin: https://www.msn.com
referer: https://www.msn.com/spartan/ntp?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
content-type: text/plain;charset=UTF-8
accept-language: en-US
accept: */*
accept-encoding: gzip, deflate, br
content-length: 4948
cache-control: no-cache
cookie: USRLOC=; MUID=160C54256D446C232E4B40726CE86D50; _EDGE_V=1; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+04+2024+13%3A28%3A10+GMT%2B0000+(Coordinated+Universal+Time)&version=202310.2.0&browserGpcFlag=0&isIABGlobal=false; _C_ETH=1; _EDGE_S=SID=2323B3F93F4460CF364FA72E3E3F6142
ResponseHTTP/2.0 200
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
set-cookie: MC1=GUID=9252cf449b264fb38c186b9ce5407848&HASH=9252&LV=202408&V=4&LU=1723326222258; Domain=.microsoft.com; Expires=Sun, 10 Aug 2025 21:43:42 GMT; Path=/;Secure; SameSite=None
set-cookie: MS0=fba5f985bae34f1a97ae1e305428a187; Domain=.microsoft.com; Expires=Sat, 10 Aug 2024 22:13:42 GMT; Path=/;Secure; SameSite=None
time-delta-millis: 1258
access-control-allow-headers: P3P,Set-Cookie,time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://www.msn.com
access-control-expose-headers: time-delta-millis
date: Sat, 10 Aug 2024 21:43:41 GMT
-
POSThttps://browser.events.data.msn.com/OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-2.2.2&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1723326221000&w=0&anoncknm=app_anonMicrosoftEdgeCP.exeRemote address:13.89.178.27:443RequestPOST /OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-2.2.2&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1723326221000&w=0&anoncknm=app_anon HTTP/2.0
host: browser.events.data.msn.com
origin: https://www.msn.com
referer: https://www.msn.com/spartan/ntp?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
content-type: text/plain;charset=UTF-8
accept-language: en-US
accept: */*
accept-encoding: gzip, deflate, br
content-length: 5414
cache-control: no-cache
cookie: USRLOC=; MUID=160C54256D446C232E4B40726CE86D50; _EDGE_V=1; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+04+2024+13%3A28%3A10+GMT%2B0000+(Coordinated+Universal+Time)&version=202310.2.0&browserGpcFlag=0&isIABGlobal=false; _C_ETH=1; _EDGE_S=SID=2323B3F93F4460CF364FA72E3E3F6142
ResponseHTTP/2.0 200
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
set-cookie: MC1=GUID=18cbdc8a6d06439382f9d7e0d9ee6dcc&HASH=18cb&LV=202408&V=4&LU=1723326222883; Domain=.microsoft.com; Expires=Sun, 10 Aug 2025 21:43:42 GMT; Path=/;Secure; SameSite=None
set-cookie: MS0=fa9fdbdbd5b34c2fa7a3d252eb0086d4; Domain=.microsoft.com; Expires=Sat, 10 Aug 2024 22:13:42 GMT; Path=/;Secure; SameSite=None
time-delta-millis: 1883
access-control-allow-headers: P3P,Set-Cookie,time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://www.msn.com
access-control-expose-headers: time-delta-millis
date: Sat, 10 Aug 2024 21:43:42 GMT
-
POSThttps://browser.events.data.msn.com/OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-2.2.2&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1723326221000&w=0&anoncknm=app_anonMicrosoftEdgeCP.exeRemote address:13.89.178.27:443RequestPOST /OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-2.2.2&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1723326221000&w=0&anoncknm=app_anon HTTP/2.0
host: browser.events.data.msn.com
origin: https://www.msn.com
referer: https://www.msn.com/spartan/ntp?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
content-type: text/plain;charset=UTF-8
accept-language: en-US
accept: */*
accept-encoding: gzip, deflate, br
content-length: 4805
cache-control: no-cache
cookie: USRLOC=; MUID=160C54256D446C232E4B40726CE86D50; _EDGE_V=1; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+04+2024+13%3A28%3A10+GMT%2B0000+(Coordinated+Universal+Time)&version=202310.2.0&browserGpcFlag=0&isIABGlobal=false; _C_ETH=1; _EDGE_S=SID=2323B3F93F4460CF364FA72E3E3F6142
ResponseHTTP/2.0 200
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
set-cookie: MC1=GUID=b466d46f185a4037be27e1c56fe16404&HASH=b466&LV=202408&V=4&LU=1723326222867; Domain=.microsoft.com; Expires=Sun, 10 Aug 2025 21:43:42 GMT; Path=/;Secure; SameSite=None
set-cookie: MS0=a9da1d075aff44899aadf4a86fe060c0; Domain=.microsoft.com; Expires=Sat, 10 Aug 2024 22:13:42 GMT; Path=/;Secure; SameSite=None
time-delta-millis: 1867
access-control-allow-headers: P3P,Set-Cookie,time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://www.msn.com
access-control-expose-headers: time-delta-millis
date: Sat, 10 Aug 2024 21:43:42 GMT
-
Remote address:204.79.197.203:443RequestGET /favicon.ico HTTP/2.0
host: www.msn.com
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
dnt: 1
ResponseHTTP/2.0 200
content-length: 781
content-type: image/x-icon
content-encoding: gzip
content-md5: hMyXfQ6xSBZkgbAdhBjjdQ==
last-modified: Fri, 09 Aug 2024 06:14:14 GMT
etag: 0x8DCB83A7E2F8B63
vary: Origin
x-ms-request-id: 5dfd6e84-101e-0025-1160-ea1201000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
akamai-request-bc: [a=2.18.26.197,b=1485416357,c=g,n=GB_EN_SLOUGH,o=20940]
server-timing: clientrtt; dur=0, clienttt; dur=0, origin; dur=0, cdntime; dur=0, wpo;dur=0,1s;dur=0
akamai-cache-status: Hit from child
akamai-server-ip: 2.18.26.197
akamai-request-id: 5889a7a5
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1}
timing-allow-origin: *
akamai-grn: 0.c51a1202.1723326222.5889a7a5
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: A58D9B98D6C747B6A3BD22F6FDBA663D Ref B: LON04EDGE0706 Ref C: 2024-08-10T21:43:42Z
date: Sat, 10 Aug 2024 21:43:42 GMT
-
Remote address:8.8.8.8:53Request105.143.101.95.in-addr.arpaIN PTRResponse105.143.101.95.in-addr.arpaIN PTRa95-101-143-105deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request27.178.89.13.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Requestmsedge.api.cdp.microsoft.comIN AResponsemsedge.api.cdp.microsoft.comIN CNAMEapi.cdp.microsoft.comapi.cdp.microsoft.comIN CNAMEglb.api.prod.dcat.dsp.trafficmanager.netglb.api.prod.dcat.dsp.trafficmanager.netIN A20.114.58.89
-
POSThttps://msedge.api.cdp.microsoft.com/api/v2/contents/Browser/namespaces/Default/names?action=batchupdatesMicrosoftEdgeUpdate.exeRemote address:20.114.58.89:443RequestPOST /api/v2/contents/Browser/namespaces/Default/names?action=batchupdates HTTP/1.1
Cache-Control: no-cache
Connection: Keep-Alive
Pragma: no-cache
Content-Type: application/json
User-Agent: Microsoft Edge Update/1.3.195.15;winhttp
X-Old-UID: cnt=0
MS-CorrelationId: {089E3544-3A47-47ED-8219-D88FDA3D3529}
MS-RequestId: {9C774E1A-58B7-4726-BB8A-1F1D81DA9D88}
MS-CV: RDWeCEc67UeCGdiP2j01KQ.0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Content-Length: 835
Host: msedge.api.cdp.microsoft.com
ResponseHTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
Content-Type: application/json; charset=utf-8
Date: Sat, 10 Aug 2024 21:43:44 GMT
MS-CorrelationId: 089e3544-3a47-47ed-8219-d88fda3d3529
MS-RequestId: 9c774e1a-58b7-4726-bb8a-1f1d81da9d88
MS-CV: {089E3544-3A47-47ED-8219-D88FDA3D3529}.0
-
POSThttps://msedge.api.cdp.microsoft.com/api/v1.1/internal/contents/Browser/namespaces/Default/names/msedge-stable-win-x64/versions/127.0.2651.98/files?action=GenerateDownloadInfo&foregroundPriority=trueMicrosoftEdgeUpdate.exeRemote address:20.114.58.89:443RequestPOST /api/v1.1/internal/contents/Browser/namespaces/Default/names/msedge-stable-win-x64/versions/127.0.2651.98/files?action=GenerateDownloadInfo&foregroundPriority=true HTTP/1.1
Cache-Control: no-cache
Connection: Keep-Alive
Pragma: no-cache
Content-Type: application/json
User-Agent: Microsoft Edge Update/1.3.195.15;winhttp
X-Old-UID: cnt=0
MS-CorrelationId: {089E3544-3A47-47ED-8219-D88FDA3D3529}
MS-RequestId: {BE05BC5B-54D6-4E5B-BE8C-7C0725513AE8}
MS-CV: RDWeCEc67UeCGdiP2j01KQ.1
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Content-Length: 2
Host: msedge.api.cdp.microsoft.com
ResponseHTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
Content-Type: application/json; charset=utf-8
Date: Sat, 10 Aug 2024 21:43:44 GMT
MS-CorrelationId: 089e3544-3a47-47ed-8219-d88fda3d3529
MS-RequestId: be05bc5b-54d6-4e5b-be8c-7c0725513ae8
MS-CV: {089E3544-3A47-47ED-8219-D88FDA3D3529}.0
-
Remote address:8.8.8.8:53Request89.58.114.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Requestmsedge.f.tlu.dl.delivery.mp.microsoft.comIN AResponsemsedge.f.tlu.dl.delivery.mp.microsoft.comIN CNAMEstar.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.comstar.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.comIN CNAMEcdp-f-tlu-net.trafficmanager.netcdp-f-tlu-net.trafficmanager.netIN CNAMEedge.ds-c7114-microsoft.global.dns.qwilted-cds.cqloud.comedge.ds-c7114-microsoft.global.dns.qwilted-cds.cqloud.comIN A217.20.58.36edge.ds-c7114-microsoft.global.dns.qwilted-cds.cqloud.comIN A217.20.58.24edge.ds-c7114-microsoft.global.dns.qwilted-cds.cqloud.comIN A217.20.58.22edge.ds-c7114-microsoft.global.dns.qwilted-cds.cqloud.comIN A217.20.58.99edge.ds-c7114-microsoft.global.dns.qwilted-cds.cqloud.comIN A217.20.58.21edge.ds-c7114-microsoft.global.dns.qwilted-cds.cqloud.comIN A217.20.58.37edge.ds-c7114-microsoft.global.dns.qwilted-cds.cqloud.comIN A217.20.58.98edge.ds-c7114-microsoft.global.dns.qwilted-cds.cqloud.comIN A217.20.58.101
-
HEADhttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestHEAD /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 200 OK
Content-Type: application/octet-stream
Content-Length: 172606408
Connection: keep-alive
Age: 166017
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: eeeed0c4-d61a-4c86-b7d8-f935a474ff73
MS-CV: Pwz3zTPXYEqdozqpUnsmLA.0.2.6.2.1.21.0
MS-RequestId: 0ca7ec36-5241-42e0-a319-7806d676bbdd
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Accept-Ranges: bytes
Server: Qwilt
X-OC-Service-Type: lo
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022f99f1d8-1135170257-1
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=0-11199
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 11200
Connection: keep-alive
Age: 166017
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: eeeed0c4-d61a-4c86-b7d8-f935a474ff73
MS-CV: Pwz3zTPXYEqdozqpUnsmLA.0.2.6.2.1.21.0
MS-RequestId: 0ca7ec36-5241-42e0-a319-7806d676bbdd
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Content-Range: bytes 0-11199/172606408
Server: Qwilt
X-OC-Service-Type: lo
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022f99f55e-1135170399-1
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=11200-216703
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 205504
Connection: keep-alive
Age: 166017
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: eeeed0c4-d61a-4c86-b7d8-f935a474ff73
MS-CV: Pwz3zTPXYEqdozqpUnsmLA.0.2.6.2.1.21.0
MS-RequestId: 0ca7ec36-5241-42e0-a319-7806d676bbdd
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Content-Range: bytes 11200-216703/172606408
Server: Qwilt
X-OC-Service-Type: lo
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022f99f6a3-1135170399-2
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=216704-1973147
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 1756444
Connection: keep-alive
Age: 166017
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: eeeed0c4-d61a-4c86-b7d8-f935a474ff73
MS-CV: Pwz3zTPXYEqdozqpUnsmLA.0.2.6.2.1.21.0
MS-RequestId: 0ca7ec36-5241-42e0-a319-7806d676bbdd
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Content-Range: bytes 216704-1973147/172606408
Server: Qwilt
X-OC-Service-Type: lo
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022f99fb18-1135170399-3
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=1973148-8781069
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 6807922
Connection: keep-alive
Age: 166017
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: eeeed0c4-d61a-4c86-b7d8-f935a474ff73
MS-CV: Pwz3zTPXYEqdozqpUnsmLA.0.2.6.2.1.21.0
MS-RequestId: 0ca7ec36-5241-42e0-a319-7806d676bbdd
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Content-Range: bytes 1973148-8781069/172606408
Server: Qwilt
X-OC-Service-Type: lo
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022f9a059d-1135170399-4
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=8781070-14402804
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 5621735
Connection: keep-alive
Age: 34
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: faa3f4a5-77f7-42a8-b619-ec1d702f12e1
MS-CV: KNnAy/UWikChbu9z.0
MS-RequestId: 90deae6f-7422-413f-a63a-03faa9ff8247
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022f9a36af-1135170399-5
Content-Range: bytes 8781070-14402804/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=14402805-18019230
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 3616426
Connection: keep-alive
Age: 34
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: faa3f4a5-77f7-42a8-b619-ec1d702f12e1
MS-CV: KNnAy/UWikChbu9z.0
MS-RequestId: 90deae6f-7422-413f-a63a-03faa9ff8247
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022f9a748c-1135170399-6
Content-Range: bytes 14402805-18019230/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=18019231-20841255
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 2822025
Connection: keep-alive
Age: 33
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 2ca85371-878d-45b5-8627-d63c90daa83f
MS-CV: xp+0sVUIFkSboXZpzZCtxg.0.1.1.6.1.1.37.0
MS-RequestId: b13d4794-6ba2-4c07-b19c-88872c9eb902
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022f9aa76c-1135170399-7
Content-Range: bytes 18019231-20841255/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=20841256-22014166
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 1172911
Connection: keep-alive
Age: 33
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 2ca85371-878d-45b5-8627-d63c90daa83f
MS-CV: xp+0sVUIFkSboXZpzZCtxg.0.1.1.6.1.1.37.0
MS-RequestId: b13d4794-6ba2-4c07-b19c-88872c9eb902
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022f9b02ef-1135170399-8
Content-Range: bytes 20841256-22014166/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=22014167-22876917
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 862751
Connection: keep-alive
Age: 33
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 2ca85371-878d-45b5-8627-d63c90daa83f
MS-CV: xp+0sVUIFkSboXZpzZCtxg.0.1.1.6.1.1.37.0
MS-RequestId: b13d4794-6ba2-4c07-b19c-88872c9eb902
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022f9b3790-1135170399-9
Content-Range: bytes 22014167-22876917/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=22876918-24630475
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 1753558
Connection: keep-alive
Age: 33
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 2ca85371-878d-45b5-8627-d63c90daa83f
MS-CV: xp+0sVUIFkSboXZpzZCtxg.0.1.1.6.1.1.37.0
MS-RequestId: b13d4794-6ba2-4c07-b19c-88872c9eb902
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022f9b4b1e-1135170399-10
Content-Range: bytes 22876918-24630475/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=24630476-26116541
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 1486066
Connection: keep-alive
Age: 33
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 2ca85371-878d-45b5-8627-d63c90daa83f
MS-CV: xp+0sVUIFkSboXZpzZCtxg.0.1.1.6.1.1.37.0
MS-RequestId: b13d4794-6ba2-4c07-b19c-88872c9eb902
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022f9b786e-1135170399-11
Content-Range: bytes 24630476-26116541/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=26116542-28000021
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 1883480
Connection: keep-alive
Age: 32
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 16ceb441-9017-4a80-9284-b93234a30df3
MS-CV: xp+0sVUIFkSboXZpzZCtxg.0.1.1.6.1.1.16.0
MS-RequestId: 77ed77b3-933f-494f-b9ec-e26d8c062396
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022f9b96e7-1135170399-12
Content-Range: bytes 26116542-28000021/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=28000022-31348429
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 3348408
Connection: keep-alive
Age: 32
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 16ceb441-9017-4a80-9284-b93234a30df3
MS-CV: xp+0sVUIFkSboXZpzZCtxg.0.1.1.6.1.1.16.0
MS-RequestId: 77ed77b3-933f-494f-b9ec-e26d8c062396
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022f9bb8ab-1135170399-13
Content-Range: bytes 28000022-31348429/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=31348430-32816385
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 1467956
Connection: keep-alive
Age: 32
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 16ceb441-9017-4a80-9284-b93234a30df3
MS-CV: xp+0sVUIFkSboXZpzZCtxg.0.1.1.6.1.1.16.0
MS-RequestId: 77ed77b3-933f-494f-b9ec-e26d8c062396
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022f9c05e7-1135170399-14
Content-Range: bytes 31348430-32816385/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=32816386-35353906
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 2537521
Connection: keep-alive
Age: 32
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 16ceb441-9017-4a80-9284-b93234a30df3
MS-CV: xp+0sVUIFkSboXZpzZCtxg.0.1.1.6.1.1.16.0
MS-RequestId: 77ed77b3-933f-494f-b9ec-e26d8c062396
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022f9c1c1b-1135170399-15
Content-Range: bytes 32816386-35353906/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=35353907-38508065
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 3154159
Connection: keep-alive
Age: 32
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: af33974e-d702-4231-b5ec-c18dd227c658
MS-CV: O3z/nvMWiUykMqrP4dMZYg.0.2.7.1.1.190.0
MS-RequestId: 21eec8eb-3dc5-420a-be2b-a4dd97a2adf7
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022f9c3b1f-1135170399-16
Content-Range: bytes 35353907-38508065/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=38508066-42390106
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 3882041
Connection: keep-alive
Age: 32
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: af33974e-d702-4231-b5ec-c18dd227c658
MS-CV: O3z/nvMWiUykMqrP4dMZYg.0.2.7.1.1.190.0
MS-RequestId: 21eec8eb-3dc5-420a-be2b-a4dd97a2adf7
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022f9c5ab5-1135170399-17
Content-Range: bytes 38508066-42390106/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=42390107-46241337
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 3851231
Connection: keep-alive
Age: 38
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 15c272cc-8794-4170-ac1d-8391cc84e618
MS-CV: vWFjEJWipEiOhsXh.0
MS-RequestId: 50bdb56e-ce46-4876-82f2-3f895725f00b
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022f9c82c8-1135170399-18
Content-Range: bytes 42390107-46241337/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=46241338-47906734
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 1665397
Connection: keep-alive
Age: 38
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 15c272cc-8794-4170-ac1d-8391cc84e618
MS-CV: vWFjEJWipEiOhsXh.0
MS-RequestId: 50bdb56e-ce46-4876-82f2-3f895725f00b
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022f9cdb03-1135170399-19
Content-Range: bytes 46241338-47906734/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=47906735-49572131
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 1665397
Connection: keep-alive
Age: 38
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 15c272cc-8794-4170-ac1d-8391cc84e618
MS-CV: vWFjEJWipEiOhsXh.0
MS-RequestId: 50bdb56e-ce46-4876-82f2-3f895725f00b
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022f9d0269-1135170399-20
Content-Range: bytes 47906735-49572131/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=49572132-51968385
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 2396254
Connection: keep-alive
Age: 38
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 15c272cc-8794-4170-ac1d-8391cc84e618
MS-CV: vWFjEJWipEiOhsXh.0
MS-RequestId: 50bdb56e-ce46-4876-82f2-3f895725f00b
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022f9d1dc1-1135170399-21
Content-Range: bytes 49572132-51968385/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=51968386-53827387
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 1859002
Connection: keep-alive
Age: 46
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 7157a0ab-01ed-4b4c-b0ef-66084b9a49ca
MS-CV: uYAkcgsZ0k2JiWloy/ZUww.0.2.6.1.1.314.0
MS-RequestId: 3ef20b03-8e3b-4d62-9896-5ce57e8ef474
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022f9d5053-1135170399-22
Content-Range: bytes 51968386-53827387/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=53827388-55413566
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 1586179
Connection: keep-alive
Age: 46
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 7157a0ab-01ed-4b4c-b0ef-66084b9a49ca
MS-CV: uYAkcgsZ0k2JiWloy/ZUww.0.2.6.1.1.314.0
MS-RequestId: 3ef20b03-8e3b-4d62-9896-5ce57e8ef474
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022f9d7e03-1135170399-23
Content-Range: bytes 53827388-55413566/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=55413567-59735579
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 4322013
Connection: keep-alive
Age: 46
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 7157a0ab-01ed-4b4c-b0ef-66084b9a49ca
MS-CV: uYAkcgsZ0k2JiWloy/ZUww.0.2.6.1.1.314.0
MS-RequestId: 3ef20b03-8e3b-4d62-9896-5ce57e8ef474
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022f9d8cbc-1135170399-24
Content-Range: bytes 55413567-59735579/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=59735580-62647005
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 2911426
Connection: keep-alive
Age: 53
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 6f0ae80c-ab48-4c60-a393-d2839f7d3b51
MS-CV: j9iY73DKDEi0FGmH.0
MS-RequestId: 9c7720ef-9628-4692-ac45-c0a51ed33f03
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022f9dc673-1135170399-25
Content-Range: bytes 59735580-62647005/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=62647006-64918894
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 2271889
Connection: keep-alive
Age: 53
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 6f0ae80c-ab48-4c60-a393-d2839f7d3b51
MS-CV: j9iY73DKDEi0FGmH.0
MS-RequestId: 9c7720ef-9628-4692-ac45-c0a51ed33f03
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022f9df85f-1135170399-26
Content-Range: bytes 62647006-64918894/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=64918895-67138619
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 2219725
Connection: keep-alive
Age: 53
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 6f0ae80c-ab48-4c60-a393-d2839f7d3b51
MS-CV: j9iY73DKDEi0FGmH.0
MS-RequestId: 9c7720ef-9628-4692-ac45-c0a51ed33f03
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022f9e20d2-1135170399-27
Content-Range: bytes 64918895-67138619/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=67138620-67869031
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 730412
Connection: keep-alive
Age: 56
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: f8f4fcf4-3bd1-41a8-b7bb-dffd5acd2d66
MS-CV: rJHN7BLibE6SAgYn.0
MS-RequestId: e8db533e-609f-48a5-b7a2-7ca157c9c311
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022f9e9822-1135170399-28
Content-Range: bytes 67138620-67869031/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=67869032-68751171
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 882140
Connection: keep-alive
Age: 56
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: f8f4fcf4-3bd1-41a8-b7bb-dffd5acd2d66
MS-CV: rJHN7BLibE6SAgYn.0
MS-RequestId: e8db533e-609f-48a5-b7a2-7ca157c9c311
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022f9eb807-1135170399-29
Content-Range: bytes 67869032-68751171/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=68751172-70217737
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 1466566
Connection: keep-alive
Age: 56
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: f8f4fcf4-3bd1-41a8-b7bb-dffd5acd2d66
MS-CV: rJHN7BLibE6SAgYn.0
MS-RequestId: e8db533e-609f-48a5-b7a2-7ca157c9c311
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022f9ecfda-1135170399-30
Content-Range: bytes 68751172-70217737/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=70217738-71503634
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 1285897
Connection: keep-alive
Age: 56
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: f8f4fcf4-3bd1-41a8-b7bb-dffd5acd2d66
MS-CV: rJHN7BLibE6SAgYn.0
MS-RequestId: e8db533e-609f-48a5-b7a2-7ca157c9c311
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022f9efdc1-1135170399-31
Content-Range: bytes 70217738-71503634/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=71503635-72646653
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 1143019
Connection: keep-alive
Age: 56
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: f8f4fcf4-3bd1-41a8-b7bb-dffd5acd2d66
MS-CV: rJHN7BLibE6SAgYn.0
MS-RequestId: e8db533e-609f-48a5-b7a2-7ca157c9c311
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022f9f2a05-1135170399-32
Content-Range: bytes 71503635-72646653/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=72646654-73722435
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 1075782
Connection: keep-alive
Age: 56
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: f8f4fcf4-3bd1-41a8-b7bb-dffd5acd2d66
MS-CV: rJHN7BLibE6SAgYn.0
MS-RequestId: e8db533e-609f-48a5-b7a2-7ca157c9c311
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022f9f5370-1135170399-33
Content-Range: bytes 72646654-73722435/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=73722436-75533515
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 1811080
Connection: keep-alive
Age: 56
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: f8f4fcf4-3bd1-41a8-b7bb-dffd5acd2d66
MS-CV: rJHN7BLibE6SAgYn.0
MS-RequestId: e8db533e-609f-48a5-b7a2-7ca157c9c311
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022f9f6b03-1135170399-34
Content-Range: bytes 73722436-75533515/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=75533516-77899393
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 2365878
Connection: keep-alive
Age: 64
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 8e7adbb7-b593-4f6a-a1b0-99e9e97b6cd2
MS-CV: ci8O7EEG9kuBgvRgGgMorg.0.1.1.7.3.1.5.0
MS-RequestId: 85edfecb-33a0-4276-b016-f861150260a8
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022f9f8915-1135170399-35
Content-Range: bytes 75533516-77899393/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=77899394-80628202
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 2728809
Connection: keep-alive
Age: 64
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 8e7adbb7-b593-4f6a-a1b0-99e9e97b6cd2
MS-CV: ci8O7EEG9kuBgvRgGgMorg.0.1.1.7.3.1.5.0
MS-RequestId: 85edfecb-33a0-4276-b016-f861150260a8
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022f9fab3c-1135170399-36
Content-Range: bytes 77899394-80628202/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=80628203-83036683
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 2408481
Connection: keep-alive
Age: 64
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 8e7adbb7-b593-4f6a-a1b0-99e9e97b6cd2
MS-CV: ci8O7EEG9kuBgvRgGgMorg.0.1.1.7.3.1.5.0
MS-RequestId: 85edfecb-33a0-4276-b016-f861150260a8
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022f9fd8cf-1135170399-37
Content-Range: bytes 80628203-83036683/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=83036684-86182967
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 3146284
Connection: keep-alive
Age: 64
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 8e7adbb7-b593-4f6a-a1b0-99e9e97b6cd2
MS-CV: ci8O7EEG9kuBgvRgGgMorg.0.1.1.7.3.1.5.0
MS-RequestId: 85edfecb-33a0-4276-b016-f861150260a8
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022f9ff7d6-1135170399-38
Content-Range: bytes 83036684-86182967/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=86182968-89058912
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 2875945
Connection: keep-alive
Age: 71
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 2f57de9b-d0cc-4724-bdfb-bef11edebe6a
MS-CV: 5qhSgEIt3kqX82zd3fCs8A.0.2.7.1.1.39.0
MS-RequestId: 54182dca-ef5f-408b-916d-394ab0e3bda9
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa024a7-1135170399-39
Content-Range: bytes 86182968-89058912/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=89058913-91211565
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 2152653
Connection: keep-alive
Age: 71
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 2f57de9b-d0cc-4724-bdfb-bef11edebe6a
MS-CV: 5qhSgEIt3kqX82zd3fCs8A.0.2.7.1.1.39.0
MS-RequestId: 54182dca-ef5f-408b-916d-394ab0e3bda9
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa05c06-1135170399-40
Content-Range: bytes 89058913-91211565/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=91211566-93138738
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 1927173
Connection: keep-alive
Age: 71
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 2f57de9b-d0cc-4724-bdfb-bef11edebe6a
MS-CV: 5qhSgEIt3kqX82zd3fCs8A.0.2.7.1.1.39.0
MS-RequestId: 54182dca-ef5f-408b-916d-394ab0e3bda9
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa08a73-1135170399-41
Content-Range: bytes 91211566-93138738/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=93138739-95021662
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 1882924
Connection: keep-alive
Age: 86547
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: be286354-e4c4-492b-a523-e0d9442265fa
MS-CV: xp+0sVUIFkSboXZpzZCtxg.0.1.1.6.1.1.2.0
MS-RequestId: 7dfee8b6-7eae-4081-8d77-4c2ffc2621f6
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Content-Range: bytes 93138739-95021662/172606408
Server: Qwilt
X-OC-Service-Type: lo
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa0b365-1135170399-42
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=95021663-97669937
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 2648275
Connection: keep-alive
Age: 86547
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: be286354-e4c4-492b-a523-e0d9442265fa
MS-CV: xp+0sVUIFkSboXZpzZCtxg.0.1.1.6.1.1.2.0
MS-RequestId: 7dfee8b6-7eae-4081-8d77-4c2ffc2621f6
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Content-Range: bytes 95021663-97669937/172606408
Server: Qwilt
X-OC-Service-Type: lo
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa0cfb1-1135170399-43
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=97669938-99339719
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 1669782
Connection: keep-alive
Age: 86547
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: be286354-e4c4-492b-a523-e0d9442265fa
MS-CV: xp+0sVUIFkSboXZpzZCtxg.0.1.1.6.1.1.2.0
MS-RequestId: 7dfee8b6-7eae-4081-8d77-4c2ffc2621f6
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Content-Range: bytes 97669938-99339719/172606408
Server: Qwilt
X-OC-Service-Type: lo
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa11188-1135170399-44
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=99339720-100174610
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 834891
Connection: keep-alive
Age: 86547
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: be286354-e4c4-492b-a523-e0d9442265fa
MS-CV: xp+0sVUIFkSboXZpzZCtxg.0.1.1.6.1.1.2.0
MS-RequestId: 7dfee8b6-7eae-4081-8d77-4c2ffc2621f6
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Content-Range: bytes 99339720-100174610/172606408
Server: Qwilt
X-OC-Service-Type: lo
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa16251-1135170399-45
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=100174611-101562624
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 1388014
Connection: keep-alive
Age: 86547
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: be286354-e4c4-492b-a523-e0d9442265fa
MS-CV: xp+0sVUIFkSboXZpzZCtxg.0.1.1.6.1.1.2.0
MS-RequestId: 7dfee8b6-7eae-4081-8d77-4c2ffc2621f6
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Content-Range: bytes 100174611-101562624/172606408
Server: Qwilt
X-OC-Service-Type: lo
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa17a7a-1135170399-46
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=101562625-103473173
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 1910549
Connection: keep-alive
Age: 89
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 351e0a10-9158-4140-abd0-b41f98c8f739
MS-CV: Z2fNIMGlFkG1DLiSdDBASQ.0.1.1.6.1.1.525.0
MS-RequestId: 968644f3-51bc-4ded-a8d3-99b42b0b27f9
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Content-Range: bytes 101562625-103473173/172606408
Server: Qwilt
X-OC-Service-Type: lo
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa19869-1135170399-47
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=103473174-105477946
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 2004773
Connection: keep-alive
Age: 89
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 351e0a10-9158-4140-abd0-b41f98c8f739
MS-CV: Z2fNIMGlFkG1DLiSdDBASQ.0.1.1.6.1.1.525.0
MS-RequestId: 968644f3-51bc-4ded-a8d3-99b42b0b27f9
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Content-Range: bytes 103473174-105477946/172606408
Server: Qwilt
X-OC-Service-Type: lo
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa1bec0-1135170399-48
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=105477947-107166175
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 1688229
Connection: keep-alive
Age: 89
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 351e0a10-9158-4140-abd0-b41f98c8f739
MS-CV: Z2fNIMGlFkG1DLiSdDBASQ.0.1.1.6.1.1.525.0
MS-RequestId: 968644f3-51bc-4ded-a8d3-99b42b0b27f9
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Content-Range: bytes 105477947-107166175/172606408
Server: Qwilt
X-OC-Service-Type: lo
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa1ee0f-1135170399-49
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=107166176-108037519
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 871344
Connection: keep-alive
Age: 89
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 351e0a10-9158-4140-abd0-b41f98c8f739
MS-CV: Z2fNIMGlFkG1DLiSdDBASQ.0.1.1.6.1.1.525.0
MS-RequestId: 968644f3-51bc-4ded-a8d3-99b42b0b27f9
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Content-Range: bytes 107166176-108037519/172606408
Server: Qwilt
X-OC-Service-Type: lo
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa23c02-1135170399-50
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=108037520-108506109
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 468590
Connection: keep-alive
Age: 89
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 351e0a10-9158-4140-abd0-b41f98c8f739
MS-CV: Z2fNIMGlFkG1DLiSdDBASQ.0.1.1.6.1.1.525.0
MS-RequestId: 968644f3-51bc-4ded-a8d3-99b42b0b27f9
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Content-Range: bytes 108037520-108506109/172606408
Server: Qwilt
X-OC-Service-Type: lo
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa28615-1135170399-51
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=108506110-109179854
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 673745
Connection: keep-alive
Age: 89
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 351e0a10-9158-4140-abd0-b41f98c8f739
MS-CV: Z2fNIMGlFkG1DLiSdDBASQ.0.1.1.6.1.1.525.0
MS-RequestId: 968644f3-51bc-4ded-a8d3-99b42b0b27f9
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Content-Range: bytes 108506110-109179854/172606408
Server: Qwilt
X-OC-Service-Type: lo
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa2a26e-1135170399-52
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=109179855-109646113
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 466259
Connection: keep-alive
Age: 88
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 705a0a6c-bc55-4a2f-997a-34291665508d
MS-CV: ypQzQpEDckuoQNsZ.0
MS-RequestId: 7f49772f-49aa-4ed7-8a4a-ee9b10a698a0
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa2ddf3-1135170399-53
Content-Range: bytes 109179855-109646113/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=109646114-110072309
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 426196
Connection: keep-alive
Age: 88
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 705a0a6c-bc55-4a2f-997a-34291665508d
MS-CV: ypQzQpEDckuoQNsZ.0
MS-RequestId: 7f49772f-49aa-4ed7-8a4a-ee9b10a698a0
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa30a1e-1135170399-54
Content-Range: bytes 109646114-110072309/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=110072310-110495332
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 423023
Connection: keep-alive
Age: 88
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 705a0a6c-bc55-4a2f-997a-34291665508d
MS-CV: ypQzQpEDckuoQNsZ.0
MS-RequestId: 7f49772f-49aa-4ed7-8a4a-ee9b10a698a0
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa331f2-1135170399-55
Content-Range: bytes 110072310-110495332/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=110495333-111172168
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 676836
Connection: keep-alive
Age: 88
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 705a0a6c-bc55-4a2f-997a-34291665508d
MS-CV: ypQzQpEDckuoQNsZ.0
MS-RequestId: 7f49772f-49aa-4ed7-8a4a-ee9b10a698a0
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa34bbd-1135170399-56
Content-Range: bytes 110495333-111172168/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=111172169-112093660
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 921492
Connection: keep-alive
Age: 88
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 705a0a6c-bc55-4a2f-997a-34291665508d
MS-CV: ypQzQpEDckuoQNsZ.0
MS-RequestId: 7f49772f-49aa-4ed7-8a4a-ee9b10a698a0
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa3687d-1135170399-57
Content-Range: bytes 111172169-112093660/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=112093661-113076584
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 982924
Connection: keep-alive
Age: 88
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 705a0a6c-bc55-4a2f-997a-34291665508d
MS-CV: ypQzQpEDckuoQNsZ.0
MS-RequestId: 7f49772f-49aa-4ed7-8a4a-ee9b10a698a0
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa38dde-1135170399-58
Content-Range: bytes 112093661-113076584/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=113076585-114360612
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 1284028
Connection: keep-alive
Age: 88
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 705a0a6c-bc55-4a2f-997a-34291665508d
MS-CV: ypQzQpEDckuoQNsZ.0
MS-RequestId: 7f49772f-49aa-4ed7-8a4a-ee9b10a698a0
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa3b18d-1135170399-59
Content-Range: bytes 113076585-114360612/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=114360613-115896530
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 1535918
Connection: keep-alive
Age: 88
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 705a0a6c-bc55-4a2f-997a-34291665508d
MS-CV: ypQzQpEDckuoQNsZ.0
MS-RequestId: 7f49772f-49aa-4ed7-8a4a-ee9b10a698a0
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa3cbe0-1135170399-60
Content-Range: bytes 114360613-115896530/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=115896531-117804502
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 1907972
Connection: keep-alive
Age: 88
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 705a0a6c-bc55-4a2f-997a-34291665508d
MS-CV: ypQzQpEDckuoQNsZ.0
MS-RequestId: 7f49772f-49aa-4ed7-8a4a-ee9b10a698a0
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa3eb29-1135170399-61
Content-Range: bytes 115896531-117804502/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=117804503-118535805
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 731303
Connection: keep-alive
Age: 48
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 013aabe1-16fa-4775-bc89-58a378353276
MS-CV: N3lpd/UN7E2YJ14X.0
MS-RequestId: 3b048753-1239-43ec-9aa9-59505480d8c5
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa450be-1135170399-62
Content-Range: bytes 117804503-118535805/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=118535806-119076909
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 541104
Connection: keep-alive
Age: 48
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 013aabe1-16fa-4775-bc89-58a378353276
MS-CV: N3lpd/UN7E2YJ14X.0
MS-RequestId: 3b048753-1239-43ec-9aa9-59505480d8c5
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa48495-1135170399-63
Content-Range: bytes 118535806-119076909/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=119076910-120038871
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 961962
Connection: keep-alive
Age: 48
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 013aabe1-16fa-4775-bc89-58a378353276
MS-CV: N3lpd/UN7E2YJ14X.0
MS-RequestId: 3b048753-1239-43ec-9aa9-59505480d8c5
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa49a47-1135170399-64
Content-Range: bytes 119076910-120038871/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=120038872-120957650
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 918779
Connection: keep-alive
Age: 48
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 013aabe1-16fa-4775-bc89-58a378353276
MS-CV: N3lpd/UN7E2YJ14X.0
MS-RequestId: 3b048753-1239-43ec-9aa9-59505480d8c5
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa4c0ef-1135170399-65
Content-Range: bytes 120038872-120957650/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=120957651-121803671
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 846021
Connection: keep-alive
Age: 48
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 013aabe1-16fa-4775-bc89-58a378353276
MS-CV: N3lpd/UN7E2YJ14X.0
MS-RequestId: 3b048753-1239-43ec-9aa9-59505480d8c5
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa4eac9-1135170399-66
Content-Range: bytes 120957651-121803671/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=121803672-122886231
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 1082560
Connection: keep-alive
Age: 48
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 013aabe1-16fa-4775-bc89-58a378353276
MS-CV: N3lpd/UN7E2YJ14X.0
MS-RequestId: 3b048753-1239-43ec-9aa9-59505480d8c5
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa5094a-1135170399-67
Content-Range: bytes 121803672-122886231/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=122886232-124134858
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 1248627
Connection: keep-alive
Age: 48
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 013aabe1-16fa-4775-bc89-58a378353276
MS-CV: N3lpd/UN7E2YJ14X.0
MS-RequestId: 3b048753-1239-43ec-9aa9-59505480d8c5
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa52978-1135170399-68
Content-Range: bytes 122886232-124134858/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=124134859-125717401
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 1582543
Connection: keep-alive
Age: 48
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 013aabe1-16fa-4775-bc89-58a378353276
MS-CV: N3lpd/UN7E2YJ14X.0
MS-RequestId: 3b048753-1239-43ec-9aa9-59505480d8c5
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa548a2-1135170399-69
Content-Range: bytes 124134859-125717401/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=125717402-126682072
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 964671
Connection: keep-alive
Age: 48
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 013aabe1-16fa-4775-bc89-58a378353276
MS-CV: N3lpd/UN7E2YJ14X.0
MS-RequestId: 3b048753-1239-43ec-9aa9-59505480d8c5
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa5885c-1135170399-70
Content-Range: bytes 125717402-126682072/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=126682073-127168174
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 486102
Connection: keep-alive
Age: 78
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 87ff44f3-fa4c-412d-a5c9-eb182eb12f4b
MS-CV: /sQRgOnHm0ukvN5x.0
MS-RequestId: 9671aab6-bce0-4f07-8f47-7b863a55c1b6
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Content-Range: bytes 126682073-127168174/172606408
Server: Qwilt
X-OC-Service-Type: lo
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa5d5a1-1135170399-71
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=127168175-127704414
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 536240
Connection: keep-alive
Age: 78
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 87ff44f3-fa4c-412d-a5c9-eb182eb12f4b
MS-CV: /sQRgOnHm0ukvN5x.0
MS-RequestId: 9671aab6-bce0-4f07-8f47-7b863a55c1b6
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Content-Range: bytes 127168175-127704414/172606408
Server: Qwilt
X-OC-Service-Type: lo
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa5f89d-1135170399-72
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=127704415-128595918
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 891504
Connection: keep-alive
Age: 78
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 87ff44f3-fa4c-412d-a5c9-eb182eb12f4b
MS-CV: /sQRgOnHm0ukvN5x.0
MS-RequestId: 9671aab6-bce0-4f07-8f47-7b863a55c1b6
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Content-Range: bytes 127704415-128595918/172606408
Server: Qwilt
X-OC-Service-Type: lo
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa60fb4-1135170399-73
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=128595919-129571305
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 975387
Connection: keep-alive
Age: 78
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 87ff44f3-fa4c-412d-a5c9-eb182eb12f4b
MS-CV: /sQRgOnHm0ukvN5x.0
MS-RequestId: 9671aab6-bce0-4f07-8f47-7b863a55c1b6
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Content-Range: bytes 128595919-129571305/172606408
Server: Qwilt
X-OC-Service-Type: lo
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa63327-1135170399-74
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=129571306-130257231
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 685926
Connection: keep-alive
Age: 78
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 87ff44f3-fa4c-412d-a5c9-eb182eb12f4b
MS-CV: /sQRgOnHm0ukvN5x.0
MS-RequestId: 9671aab6-bce0-4f07-8f47-7b863a55c1b6
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Content-Range: bytes 129571306-130257231/172606408
Server: Qwilt
X-OC-Service-Type: lo
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa66b23-1135170399-75
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=130257232-131021068
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 763837
Connection: keep-alive
Age: 78
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 87ff44f3-fa4c-412d-a5c9-eb182eb12f4b
MS-CV: /sQRgOnHm0ukvN5x.0
MS-RequestId: 9671aab6-bce0-4f07-8f47-7b863a55c1b6
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Content-Range: bytes 130257232-131021068/172606408
Server: Qwilt
X-OC-Service-Type: lo
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa68e40-1135170399-76
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=131021069-132170559
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 1149491
Connection: keep-alive
Age: 78
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 87ff44f3-fa4c-412d-a5c9-eb182eb12f4b
MS-CV: /sQRgOnHm0ukvN5x.0
MS-RequestId: 9671aab6-bce0-4f07-8f47-7b863a55c1b6
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Content-Range: bytes 131021069-132170559/172606408
Server: Qwilt
X-OC-Service-Type: lo
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa6a73b-1135170399-77
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=132170560-133901720
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 1731161
Connection: keep-alive
Age: 78
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 87ff44f3-fa4c-412d-a5c9-eb182eb12f4b
MS-CV: /sQRgOnHm0ukvN5x.0
MS-RequestId: 9671aab6-bce0-4f07-8f47-7b863a55c1b6
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Content-Range: bytes 132170560-133901720/172606408
Server: Qwilt
X-OC-Service-Type: lo
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa6c12b-1135170399-78
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=133901721-135286648
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 1384928
Connection: keep-alive
Age: 78
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 87ff44f3-fa4c-412d-a5c9-eb182eb12f4b
MS-CV: /sQRgOnHm0ukvN5x.0
MS-RequestId: 9671aab6-bce0-4f07-8f47-7b863a55c1b6
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Content-Range: bytes 133901721-135286648/172606408
Server: Qwilt
X-OC-Service-Type: lo
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa6f306-1135170399-79
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=135286649-137256673
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 1970025
Connection: keep-alive
Age: 54
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 490e99a3-00a5-4b3f-bd17-bef5c4b3eebf
MS-CV: 74HJ5Aj+1EaCrTaI.0
MS-RequestId: a00e5f37-8c94-4c36-a03d-1bea6f962a75
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa70e4a-1135170399-80
Content-Range: bytes 135286649-137256673/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=137256674-139242585
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 1985912
Connection: keep-alive
Age: 54
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 490e99a3-00a5-4b3f-bd17-bef5c4b3eebf
MS-CV: 74HJ5Aj+1EaCrTaI.0
MS-RequestId: a00e5f37-8c94-4c36-a03d-1bea6f962a75
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa734de-1135170399-81
Content-Range: bytes 137256674-139242585/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=139242586-141071233
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 1828648
Connection: keep-alive
Age: 54
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 490e99a3-00a5-4b3f-bd17-bef5c4b3eebf
MS-CV: 74HJ5Aj+1EaCrTaI.0
MS-RequestId: a00e5f37-8c94-4c36-a03d-1bea6f962a75
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa760af-1135170399-82
Content-Range: bytes 139242586-141071233/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=141071234-142416321
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 1345088
Connection: keep-alive
Age: 54
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 490e99a3-00a5-4b3f-bd17-bef5c4b3eebf
MS-CV: 74HJ5Aj+1EaCrTaI.0
MS-RequestId: a00e5f37-8c94-4c36-a03d-1bea6f962a75
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa7966d-1135170399-83
Content-Range: bytes 141071234-142416321/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=142416322-144190843
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 1774522
Connection: keep-alive
Age: 54
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 490e99a3-00a5-4b3f-bd17-bef5c4b3eebf
MS-CV: 74HJ5Aj+1EaCrTaI.0
MS-RequestId: a00e5f37-8c94-4c36-a03d-1bea6f962a75
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa7b50d-1135170399-84
Content-Range: bytes 142416322-144190843/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=144190844-145165855
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 975012
Connection: keep-alive
Age: 39
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: fe6049c2-f332-480f-9fad-e21033f49fdf
MS-CV: qBPTYo5ju0WxrJcF.0
MS-RequestId: 81c30029-01d8-446d-91f1-311eb994a3c6
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa8003d-1135170399-85
Content-Range: bytes 144190844-145165855/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=145165856-146507922
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 1342067
Connection: keep-alive
Age: 39
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: fe6049c2-f332-480f-9fad-e21033f49fdf
MS-CV: qBPTYo5ju0WxrJcF.0
MS-RequestId: 81c30029-01d8-446d-91f1-311eb994a3c6
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa81f55-1135170399-86
Content-Range: bytes 145165856-146507922/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=146507923-147411975
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 904053
Connection: keep-alive
Age: 39
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: fe6049c2-f332-480f-9fad-e21033f49fdf
MS-CV: qBPTYo5ju0WxrJcF.0
MS-RequestId: 81c30029-01d8-446d-91f1-311eb994a3c6
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa85d1b-1135170399-87
Content-Range: bytes 146507923-147411975/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
Remote address:8.8.8.8:53Request36.58.20.217.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request161.19.199.152.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Requestwww.microsoft.comIN AResponsewww.microsoft.comIN CNAMEwww.microsoft.com-c-3.edgekey.netwww.microsoft.com-c-3.edgekey.netIN CNAMEwww.microsoft.com-c-3.edgekey.net.globalredir.akadns.netwww.microsoft.com-c-3.edgekey.net.globalredir.akadns.netIN CNAMEe13678.dscb.akamaiedge.nete13678.dscb.akamaiedge.netIN A95.100.245.144
-
Remote address:8.8.8.8:53Request200.197.79.204.in-addr.arpaIN PTRResponse200.197.79.204.in-addr.arpaIN PTRa-0001a-msedgenet
-
Remote address:95.101.143.201:443RequestGET /cortanaassist/rules?cc=US&version=6 HTTP/2.0
host: www.bing.com
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
dnt: 1
ResponseHTTP/2.0 404
content-length: 56211
content-type: text/html; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
x-eventid: 66b7df3f5e4541739147d7d783715a6b
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-error-page: 404-custom
x-ua-compatible: IE=edge
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: C9EE142DA8A64C29AA7DB948DC2A6F05 Ref B: LON601060108042 Ref C: 2024-08-10T21:44:31Z
date: Sat, 10 Aug 2024 21:44:31 GMT
set-cookie: MUID=167D88E1BEA665C43AC79C36BFA064A6; domain=.bing.com; expires=Thu, 04-Sep-2025 21:44:31 GMT; path=/; secure; SameSite=None
set-cookie: MUIDB=167D88E1BEA665C43AC79C36BFA064A6; expires=Thu, 04-Sep-2025 21:44:31 GMT; path=/; HttpOnly
set-cookie: _EDGE_S=F=1&SID=2562DA58B719622B0F78CE8FB61F6366&mkt=en-us; domain=.bing.com; path=/; HttpOnly
set-cookie: _EDGE_V=1; domain=.bing.com; expires=Thu, 04-Sep-2025 21:44:31 GMT; path=/; HttpOnly
set-cookie: SRCHD=AF=NOFORM; domain=.bing.com; expires=Mon, 10-Aug-2026 21:44:31 GMT; path=/
set-cookie: SRCHUID=V=2&GUID=0F3B5BBF65C64F10933A13A76D9CF7D4&dmnchg=1; domain=.bing.com; expires=Mon, 10-Aug-2026 21:44:31 GMT; path=/
set-cookie: SRCHUSR=DOB=20240810; domain=.bing.com; expires=Mon, 10-Aug-2026 21:44:31 GMT; path=/
set-cookie: SRCHHPGUSR=SRCHLANG=en; domain=.bing.com; expires=Mon, 10-Aug-2026 21:44:31 GMT; path=/
set-cookie: _SS=SID=2562DA58B719622B0F78CE8FB61F6366; domain=.bing.com; path=/
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.d78f655f.1723326271.169581b2
-
Remote address:8.8.8.8:53Request201.143.101.95.in-addr.arpaIN PTRResponse201.143.101.95.in-addr.arpaIN PTRa95-101-143-201deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Requestshavar.prod.mozaws.netIN AResponseshavar.prod.mozaws.netIN A44.239.110.200shavar.prod.mozaws.netIN A35.165.99.161shavar.prod.mozaws.netIN A35.155.86.205
-
Remote address:8.8.8.8:53Requestprod.content-signature-chains.prod.webservices.mozgcp.netIN AResponseprod.content-signature-chains.prod.webservices.mozgcp.netIN A34.160.144.191
-
Remote address:8.8.8.8:53Requestshavar.prod.mozaws.netIN AAAAResponse
-
Remote address:8.8.8.8:53Requestshavar.prod.mozaws.netIN AAAAResponse
-
Remote address:8.8.8.8:53Requestprod.content-signature-chains.prod.webservices.mozgcp.netIN AAAAResponseprod.content-signature-chains.prod.webservices.mozgcp.netIN AAAA2600:1901:0:92a9::
-
Remote address:8.8.8.8:53Requestprod.content-signature-chains.prod.webservices.mozgcp.netIN AAAAResponseprod.content-signature-chains.prod.webservices.mozgcp.netIN AAAA2600:1901:0:92a9::
-
Remote address:8.8.8.8:53Requestprod.remote-settings.prod.webservices.mozgcp.netIN AResponseprod.remote-settings.prod.webservices.mozgcp.netIN A34.149.100.209
-
Remote address:8.8.8.8:53Requestprod.remote-settings.prod.webservices.mozgcp.netIN AAAAResponse
-
Remote address:8.8.8.8:53Requestprod.remote-settings.prod.webservices.mozgcp.netIN AAAAResponse
-
Remote address:8.8.8.8:53Request166.188.117.34.in-addr.arpaIN PTRResponse166.188.117.34.in-addr.arpaIN PTR16618811734bcgoogleusercontentcom
-
Remote address:8.8.8.8:53Request166.188.117.34.in-addr.arpaIN PTRResponse166.188.117.34.in-addr.arpaIN PTR16618811734bcgoogleusercontentcom
-
Remote address:8.8.8.8:53Request161.99.165.35.in-addr.arpaIN PTRResponse161.99.165.35.in-addr.arpaIN PTRec2-35-165-99-161 us-west-2compute amazonawscom
-
Remote address:8.8.8.8:53Request161.99.165.35.in-addr.arpaIN PTRResponse161.99.165.35.in-addr.arpaIN PTRec2-35-165-99-161 us-west-2compute amazonawscom
-
Remote address:8.8.8.8:53Requestsupport.mozilla.orgIN AResponsesupport.mozilla.orgIN CNAMEprod.sumo.prod.webservices.mozgcp.netprod.sumo.prod.webservices.mozgcp.netIN CNAMEus-west1.prod.sumo.prod.webservices.mozgcp.netus-west1.prod.sumo.prod.webservices.mozgcp.netIN A34.149.128.2
-
Remote address:8.8.8.8:53Requestsupport.mozilla.orgIN AResponsesupport.mozilla.orgIN CNAMEprod.sumo.prod.webservices.mozgcp.netprod.sumo.prod.webservices.mozgcp.netIN CNAMEus-west1.prod.sumo.prod.webservices.mozgcp.netus-west1.prod.sumo.prod.webservices.mozgcp.netIN A34.149.128.2
-
Remote address:8.8.8.8:53Requestwww.mozilla.orgIN AResponsewww.mozilla.orgIN CNAMEwww.mozorg.moz.workswww.mozorg.moz.worksIN A143.204.72.186
-
Remote address:8.8.8.8:53Requestwww.mozilla.orgIN AResponsewww.mozilla.orgIN CNAMEwww.mozorg.moz.workswww.mozorg.moz.worksIN A143.204.72.186
-
Remote address:8.8.8.8:53Requestwiki.mozilla.orgIN AResponsewiki.mozilla.orgIN CNAMEwiki-prod-850398177.us-west-2.elb.amazonaws.comwiki-prod-850398177.us-west-2.elb.amazonaws.comIN A34.208.162.104wiki-prod-850398177.us-west-2.elb.amazonaws.comIN A52.24.175.29wiki-prod-850398177.us-west-2.elb.amazonaws.comIN A35.163.213.45
-
Remote address:8.8.8.8:53Requestwiki.mozilla.orgIN AResponsewiki.mozilla.orgIN CNAMEwiki-prod-850398177.us-west-2.elb.amazonaws.comwiki-prod-850398177.us-west-2.elb.amazonaws.comIN A52.24.175.29wiki-prod-850398177.us-west-2.elb.amazonaws.comIN A34.208.162.104wiki-prod-850398177.us-west-2.elb.amazonaws.comIN A35.163.213.45
-
Remote address:8.8.8.8:53Requestus-west1.prod.sumo.prod.webservices.mozgcp.netIN AResponseus-west1.prod.sumo.prod.webservices.mozgcp.netIN A34.149.128.2
-
Remote address:8.8.8.8:53Requestus-west1.prod.sumo.prod.webservices.mozgcp.netIN AResponseus-west1.prod.sumo.prod.webservices.mozgcp.netIN A34.149.128.2
-
Remote address:8.8.8.8:53Requestwww.mozorg.moz.worksIN AResponsewww.mozorg.moz.worksIN A143.204.72.186
-
Remote address:8.8.8.8:53Requestwww.mozorg.moz.worksIN AResponsewww.mozorg.moz.worksIN A143.204.72.186
-
Remote address:8.8.8.8:53Requestwiki-prod-850398177.us-west-2.elb.amazonaws.comIN AResponsewiki-prod-850398177.us-west-2.elb.amazonaws.comIN A52.24.175.29wiki-prod-850398177.us-west-2.elb.amazonaws.comIN A34.208.162.104wiki-prod-850398177.us-west-2.elb.amazonaws.comIN A35.163.213.45
-
Remote address:8.8.8.8:53Requestwiki-prod-850398177.us-west-2.elb.amazonaws.comIN AResponsewiki-prod-850398177.us-west-2.elb.amazonaws.comIN A52.24.175.29wiki-prod-850398177.us-west-2.elb.amazonaws.comIN A34.208.162.104wiki-prod-850398177.us-west-2.elb.amazonaws.comIN A35.163.213.45
-
Remote address:8.8.8.8:53Requestus-west1.prod.sumo.prod.webservices.mozgcp.netIN AAAAResponse
-
Remote address:8.8.8.8:53Requestus-west1.prod.sumo.prod.webservices.mozgcp.netIN AAAAResponse
-
Remote address:8.8.8.8:53Request61.85.100.185.in-addr.arpaIN PTRResponse61.85.100.185.in-addr.arpaIN PTRtor-exit-node-nibbanadsonorg
-
Remote address:8.8.8.8:53Request61.85.100.185.in-addr.arpaIN PTR
-
Remote address:8.8.8.8:53Requestwiki-prod-850398177.us-west-2.elb.amazonaws.comIN AAAAResponse
-
Remote address:8.8.8.8:53Requestwiki-prod-850398177.us-west-2.elb.amazonaws.comIN AAAAResponse
-
Remote address:8.8.8.8:53Requestwww.mozorg.moz.worksIN AAAAResponse
-
Remote address:8.8.8.8:53Requestwww.mozorg.moz.worksIN AAAAResponse
-
Remote address:95.101.143.219:443RequestGET /search?form=MOZLBR&pc=MOZI&q=ransoware+data+base+github HTTP/2.0
host: www.bing.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
upgrade-insecure-requests: 1
sec-fetch-dest: document
sec-fetch-mode: navigate
sec-fetch-site: none
sec-fetch-user: ?1
te: trailers
ResponseHTTP/2.0 200
cache-control: private, max-age=0
content-encoding: br
expires: Sat, 10 Aug 2024 21:44:58 GMT
vary: Accept-Encoding
x-eventid: 66b7df9607bb423ab32eb478ae2b9e2b
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
strict-transport-security: max-age=31536000; includeSubDomains; preload
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
date: Sat, 10 Aug 2024 21:45:58 GMT
set-cookie: MUID=3B47DB91659261530C0BCF4664E7602D; domain=.bing.com; expires=Thu, 04-Sep-2025 21:45:58 GMT; path=/; secure; SameSite=None
set-cookie: MUIDB=3B47DB91659261530C0BCF4664E7602D; expires=Thu, 04-Sep-2025 21:45:58 GMT; path=/; HttpOnly
set-cookie: _EDGE_S=F=1&SID=02E1C70D1AC361DB3858D3DA1BB660FE; domain=.bing.com; path=/; HttpOnly
set-cookie: _EDGE_V=1; domain=.bing.com; expires=Thu, 04-Sep-2025 21:45:58 GMT; path=/; HttpOnly
set-cookie: _SS=PC=MOZI&SID=02E1C70D1AC361DB3858D3DA1BB660FE; domain=.bing.com; path=/; secure; SameSite=None
set-cookie: SRCHS=PC=MOZI; domain=.bing.com; path=/; secure; SameSite=None
set-cookie: SRCHD=AF=MOZLBR; domain=.bing.com; expires=Thu, 04-Sep-2025 21:45:58 GMT; path=/; secure; SameSite=None
set-cookie: SRCHUID=V=2&GUID=E71A29DF6C174DD798A4CF3E3D11BB88&dmnchg=1; domain=.bing.com; expires=Thu, 04-Sep-2025 21:45:58 GMT; path=/; secure; SameSite=None
set-cookie: SRCHUSR=DOB=20240810; domain=.bing.com; expires=Thu, 04-Sep-2025 21:45:58 GMT; path=/; secure; SameSite=None
set-cookie: SRCHHPGUSR=SRCHLANG=en; domain=.bing.com; expires=Thu, 04-Sep-2025 21:45:58 GMT; path=/; secure; SameSite=None
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.c58f655f.1723326358.14faff68
set-cookie: ak_bmsc=21C24567F2E18713F86DC399292197EF~000000000000000000000000000000~YAAQxY9lXx1cpyeRAQAAF2VBPhjR/kI/Jsdu247Pz3lHHvDbBVLa2aEuXV889HvwmoTk+NcxQPgAVqCVExglMmdOumSQ+YgHii/FXbo3z/SlZZrDTeB9g+s++miBLTKR2GPUaYhe2aVHszXzsESkREvXi7KbPKulVT4eiiwKKvr2cbq7+jGwXZvH1fTYll/iLYze8+nztBMNZeDvFRAS6x32L5HL5rPbeqA/b8hljnteFLcBZtqnbkVorciFV9tRCixPxM+hHsVQnVfW3Nh2bBHRclrK5lL6mGNLauthQQ3nk9j6UQ0yRg++88YVBUWOW3j3HWjE7CY1LGPTdg8C7/dgmqC7n5e7NxLu+mCxNSgYvWpeT4WESrNodkyhWAFP1knCfNxU8yY=; Domain=.bing.com; Path=/; Expires=Sat, 10 Aug 2024 23:45:58 GMT; Max-Age=7200
-
Remote address:95.101.143.219:443RequestGET /rp/B6jGHby7hXuEC7enS8xiNSUwqXw.png HTTP/2.0
host: www.bing.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://www.bing.com/search?form=MOZLBR&pc=MOZI&q=ransoware+data+base+github
cookie: MUID=3B47DB91659261530C0BCF4664E7602D
cookie: MUIDB=3B47DB91659261530C0BCF4664E7602D
cookie: _EDGE_S=F=1&SID=02E1C70D1AC361DB3858D3DA1BB660FE
cookie: _EDGE_V=1
cookie: _SS=PC=MOZI&SID=02E1C70D1AC361DB3858D3DA1BB660FE
cookie: SRCHS=PC=MOZI
cookie: SRCHD=AF=MOZLBR
cookie: SRCHUID=V=2&GUID=E71A29DF6C174DD798A4CF3E3D11BB88&dmnchg=1
cookie: SRCHUSR=DOB=20240810
cookie: SRCHHPGUSR=SRCHLANG=en
cookie: ak_bmsc=21C24567F2E18713F86DC399292197EF~000000000000000000000000000000~YAAQxY9lXx1cpyeRAQAAF2VBPhjR/kI/Jsdu247Pz3lHHvDbBVLa2aEuXV889HvwmoTk+NcxQPgAVqCVExglMmdOumSQ+YgHii/FXbo3z/SlZZrDTeB9g+s++miBLTKR2GPUaYhe2aVHszXzsESkREvXi7KbPKulVT4eiiwKKvr2cbq7+jGwXZvH1fTYll/iLYze8+nztBMNZeDvFRAS6x32L5HL5rPbeqA/b8hljnteFLcBZtqnbkVorciFV9tRCixPxM+hHsVQnVfW3Nh2bBHRclrK5lL6mGNLauthQQ3nk9j6UQ0yRg++88YVBUWOW3j3HWjE7CY1LGPTdg8C7/dgmqC7n5e7NxLu+mCxNSgYvWpeT4WESrNodkyhWAFP1knCfNxU8yY=
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers
ResponseHTTP/2.0 200
content-length: 10060
content-type: image/png
content-md5: NyL0K09FbOsKFVWkE+stgw==
last-modified: Fri, 22 Mar 2024 20:42:06 GMT
etag: 0x8DC4AB0896DD41E
x-ms-request-id: e2971f82-c01e-0023-220d-e89e6f000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
akamai-amd-bc-debug: [a=2.17.209.38,b=27609086,c=c,d=1723117735,h=200,k=29,l=1,n=GB_EN_LONDON,o=20940,r=30,p=10060]
date: Sat, 10 Aug 2024 21:45:58 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.c58f655f.1723326358.14fb0124
-
Remote address:8.8.8.8:53Requeste86303.dscx.akamaiedge.netIN AResponsee86303.dscx.akamaiedge.netIN A95.101.143.201e86303.dscx.akamaiedge.netIN A95.101.143.219
-
Remote address:8.8.8.8:53Requeste86303.dscx.akamaiedge.netIN AResponsee86303.dscx.akamaiedge.netIN A95.101.143.201e86303.dscx.akamaiedge.netIN A95.101.143.219
-
Remote address:8.8.8.8:53Requeste86303.dscx.akamaiedge.netIN AAAAResponsee86303.dscx.akamaiedge.netIN AAAA2a02:26f0:1780:d::213:f823e86303.dscx.akamaiedge.netIN AAAA2a02:26f0:1780:d::213:f81f
-
Remote address:8.8.8.8:53Requeste86303.dscx.akamaiedge.netIN AAAAResponsee86303.dscx.akamaiedge.netIN AAAA2a02:26f0:1780:d::213:f823e86303.dscx.akamaiedge.netIN AAAA2a02:26f0:1780:d::213:f81f
-
Remote address:8.8.8.8:53Request219.143.101.95.in-addr.arpaIN PTRResponse219.143.101.95.in-addr.arpaIN PTRa95-101-143-219deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request219.143.101.95.in-addr.arpaIN PTRResponse219.143.101.95.in-addr.arpaIN PTRa95-101-143-219deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Requestr.bing.comIN AResponser.bing.comIN CNAMEp-static.bing.trafficmanager.netp-static.bing.trafficmanager.netIN CNAMEr.bing.com.edgekey.netr.bing.com.edgekey.netIN CNAMEe86303.dscx.akamaiedge.nete86303.dscx.akamaiedge.netIN A95.101.143.201e86303.dscx.akamaiedge.netIN A95.101.143.219
-
Remote address:8.8.8.8:53Requestr.bing.comIN AResponser.bing.comIN CNAMEp-static.bing.trafficmanager.netp-static.bing.trafficmanager.netIN CNAMEr.bing.com.edgekey.netr.bing.com.edgekey.netIN CNAMEe86303.dscx.akamaiedge.nete86303.dscx.akamaiedge.netIN A95.101.143.201e86303.dscx.akamaiedge.netIN A95.101.143.219
-
Remote address:95.101.143.201:443RequestGET /rp/NrVxAJRIC-KRKL-qHvM71lVoCPs.br.css HTTP/2.0
host: r.bing.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://www.bing.com/
x-moz: prefetch
origin: https://www.bing.com
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-site
te: trailers
ResponseHTTP/2.0 200
content-type: text/css; charset=utf-8
content-encoding: br
content-md5: gDvzRdQ7HLs+ezV8cUVOmQ==
last-modified: Fri, 02 Aug 2024 13:09:01 GMT
etag: 0x8DCB2F4476C2E05
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 344071c1-901e-00a8-5110-e59a02000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
akamai-grn: 0.60ba1302.1722626320.57a59d51
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
cache-control: public, no-transform, max-age=120767
expires: Mon, 12 Aug 2024 07:18:46 GMT
date: Sat, 10 Aug 2024 21:45:59 GMT
alt-svc: h3=":443"; ma=93600
akamai-grn: 0.d78f655f.1723326359.1696adbb
timing-allow-origin: *
-
Remote address:8.8.8.8:53Requestth.bing.comIN AResponseth.bing.comIN CNAMEp-th.bing.com.trafficmanager.netp-th.bing.com.trafficmanager.netIN CNAMEth.bing.com.edgekey.netth.bing.com.edgekey.netIN CNAMEe86303.dscx.akamaiedge.nete86303.dscx.akamaiedge.netIN A95.101.143.219e86303.dscx.akamaiedge.netIN A95.101.143.201
-
Remote address:8.8.8.8:53Requestth.bing.comIN AResponseth.bing.comIN CNAMEp-th.bing.com.trafficmanager.netp-th.bing.com.trafficmanager.netIN CNAMEth.bing.com.edgekey.netth.bing.com.edgekey.netIN CNAMEe86303.dscx.akamaiedge.nete86303.dscx.akamaiedge.netIN A95.101.143.201e86303.dscx.akamaiedge.netIN A95.101.143.219
-
Remote address:8.8.8.8:53Requestlogin.microsoftonline.comIN AResponselogin.microsoftonline.comIN CNAMElogin.mso.msidentity.comlogin.mso.msidentity.comIN CNAMEak.privatelink.msidentity.comak.privatelink.msidentity.comIN CNAMEwww.tm.ak.prd.aadg.trafficmanager.netwww.tm.ak.prd.aadg.trafficmanager.netIN A40.126.31.69www.tm.ak.prd.aadg.trafficmanager.netIN A20.190.159.0www.tm.ak.prd.aadg.trafficmanager.netIN A40.126.31.67www.tm.ak.prd.aadg.trafficmanager.netIN A20.190.159.64www.tm.ak.prd.aadg.trafficmanager.netIN A20.190.159.4www.tm.ak.prd.aadg.trafficmanager.netIN A40.126.31.71www.tm.ak.prd.aadg.trafficmanager.netIN A20.190.159.71www.tm.ak.prd.aadg.trafficmanager.netIN A20.190.159.73
-
Remote address:8.8.8.8:53Requestlogin.microsoftonline.comIN AResponselogin.microsoftonline.comIN CNAMElogin.mso.msidentity.comlogin.mso.msidentity.comIN CNAMEak.privatelink.msidentity.comak.privatelink.msidentity.comIN CNAMEwww.tm.ak.prd.aadg.trafficmanager.netwww.tm.ak.prd.aadg.trafficmanager.netIN A20.190.159.64www.tm.ak.prd.aadg.trafficmanager.netIN A20.190.159.0www.tm.ak.prd.aadg.trafficmanager.netIN A20.190.159.73www.tm.ak.prd.aadg.trafficmanager.netIN A40.126.31.69www.tm.ak.prd.aadg.trafficmanager.netIN A40.126.31.71www.tm.ak.prd.aadg.trafficmanager.netIN A20.190.159.4www.tm.ak.prd.aadg.trafficmanager.netIN A40.126.31.67www.tm.ak.prd.aadg.trafficmanager.netIN A20.190.159.71
-
Remote address:8.8.8.8:53Requestwww.tm.ak.prd.aadg.trafficmanager.netIN AResponsewww.tm.ak.prd.aadg.trafficmanager.netIN A40.126.31.67www.tm.ak.prd.aadg.trafficmanager.netIN A20.190.159.2www.tm.ak.prd.aadg.trafficmanager.netIN A20.190.159.75www.tm.ak.prd.aadg.trafficmanager.netIN A20.190.159.0www.tm.ak.prd.aadg.trafficmanager.netIN A20.190.159.68www.tm.ak.prd.aadg.trafficmanager.netIN A40.126.31.69www.tm.ak.prd.aadg.trafficmanager.netIN A20.190.159.4www.tm.ak.prd.aadg.trafficmanager.netIN A20.190.159.64
-
Remote address:8.8.8.8:53Requestwww.tm.ak.prd.aadg.trafficmanager.netIN AResponsewww.tm.ak.prd.aadg.trafficmanager.netIN A40.126.31.67www.tm.ak.prd.aadg.trafficmanager.netIN A40.126.31.69www.tm.ak.prd.aadg.trafficmanager.netIN A20.190.159.0www.tm.ak.prd.aadg.trafficmanager.netIN A20.190.159.64www.tm.ak.prd.aadg.trafficmanager.netIN A20.190.159.4www.tm.ak.prd.aadg.trafficmanager.netIN A20.190.159.2www.tm.ak.prd.aadg.trafficmanager.netIN A20.190.159.75www.tm.ak.prd.aadg.trafficmanager.netIN A20.190.159.68
-
GEThttps://login.microsoftonline.com/common/oauth2/authorize?client_id=9ea1ad79-fdb6-4f9a-8bc3-2b70f96e34c7&response_type=id_token+code&nonce=20bc090e-636b-4a61-8891-1b90a7018730&redirect_uri=https%3a%2f%2fwww.bing.com%2forgid%2fidtoken%2fconditional&scope=openid%20email%20profile%209ea1ad79-fdb6-4f9a-8bc3-2b70f96e34c7/.default&response_mode=form_post&instance_aware=true&msafed=0&prompt=none&state=%7b%22ig%22%3a%2264DA08D00105497A9890DC74AC2CACB8%22%7dfirefox.exeRemote address:40.126.31.69:443RequestGET /common/oauth2/authorize?client_id=9ea1ad79-fdb6-4f9a-8bc3-2b70f96e34c7&response_type=id_token+code&nonce=20bc090e-636b-4a61-8891-1b90a7018730&redirect_uri=https%3a%2f%2fwww.bing.com%2forgid%2fidtoken%2fconditional&scope=openid%20email%20profile%209ea1ad79-fdb6-4f9a-8bc3-2b70f96e34c7/.default&response_mode=form_post&instance_aware=true&msafed=0&prompt=none&state=%7b%22ig%22%3a%2264DA08D00105497A9890DC74AC2CACB8%22%7d HTTP/1.1
Host: login.microsoftonline.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bing.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
ResponseHTTP/1.1 200 OK
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Expires: -1
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
P3P: CP="DSP CUR OTPi IND OTRi ONL FIN"
x-ms-request-id: af1ae7ab-43a1-4a9a-9910-655cdca72a00
x-ms-ests-server: 2.1.18662.4 - SEC ProdSlices
x-ms-srs: 1.P
Referrer-Policy: strict-origin-when-cross-origin
X-XSS-Protection: 0
Set-Cookie: buid=0.AR8AMe_N-B6jSkuT5F9XHpElWnmtoZ62_ZpPi8MrcPluNMcBAAA.AQABGgEAAAApTwJmzXqdR4BN2miheQMYwZwbRm2nBaA72iLl3Zt5DZnCgPaWtrF-6A1ZWzN3Q42ffZs0-MJDIanAxVl6V1vN2_DsX6419-fGvf9oQN64fgPdQTPz_r8LLRpK4DlpEjggAA; expires=Mon, 09-Sep-2024 21:46:00 GMT; path=/; secure; HttpOnly; SameSite=None
Set-Cookie: fpc=AoXdFv38dn1FphUXfsudh1iCeMQLAQAAAJfWSd4OAAAA; expires=Mon, 09-Sep-2024 21:46:00 GMT; path=/; secure; HttpOnly; SameSite=None
Set-Cookie: esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMYW9mjsbkG9xABkYzd9a4Zx_1J1C_Vc8a0njxP8MQ5kElmHnW0n_HGR72Gk3Wf7BXrrbt_yDDLqPhxf3B9crfsJx3zD8rNo7_qGTTBk4KW0xDwBZfbMQUJ1DGT1Hz74hxFhtj6uReSUeglFDltrrmlhYfkLpa7FPd0jJDP_4g2_YAgAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None
Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly
Set-Cookie: stsservicecookie=estsfd; path=/; secure; samesite=none; httponly
Date: Sat, 10 Aug 2024 21:46:00 GMT
Content-Length: 673
-
Remote address:8.8.8.8:53Requestwww.tm.ak.prd.aadg.trafficmanager.netIN AAAAResponsewww.tm.ak.prd.aadg.trafficmanager.netIN AAAA2603:1027:1:158::8www.tm.ak.prd.aadg.trafficmanager.netIN AAAA2603:1026:3000:150::5www.tm.ak.prd.aadg.trafficmanager.netIN AAAA2603:1026:3000:150::8www.tm.ak.prd.aadg.trafficmanager.netIN AAAA2603:1026:3000:150::cwww.tm.ak.prd.aadg.trafficmanager.netIN AAAA2603:1027:1:158::awww.tm.ak.prd.aadg.trafficmanager.netIN AAAA2603:1026:3000:150::6www.tm.ak.prd.aadg.trafficmanager.netIN AAAA2603:1027:1:158::cwww.tm.ak.prd.aadg.trafficmanager.netIN AAAA2603:1026:3000:150::a
-
Remote address:8.8.8.8:53Requestwww.tm.ak.prd.aadg.trafficmanager.netIN AAAA
-
Remote address:8.8.8.8:53Request69.31.126.40.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request69.31.126.40.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Requestservices.bingapis.comIN AResponseservices.bingapis.comIN CNAMEservices-bingapis-com.e-0001.e-msedge.netservices-bingapis-com.e-0001.e-msedge.netIN CNAMEe-0001.e-msedge.nete-0001.e-msedge.netIN A13.107.5.80
-
Remote address:8.8.8.8:53Requestservices.bingapis.comIN AResponseservices.bingapis.comIN CNAMEservices-bingapis-com.e-0001.e-msedge.netservices-bingapis-com.e-0001.e-msedge.netIN CNAMEe-0001.e-msedge.nete-0001.e-msedge.netIN A13.107.5.80
-
Remote address:13.107.5.80:443RequestOPTIONS /suggestionchips/api/v1/cannedChips HTTP/2.0
host: services.bingapis.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
access-control-request-method: POST
access-control-request-headers: content-type
referer: https://www.bing.com/
origin: https://www.bing.com
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 204
access-control-allow-headers: content-type
access-control-allow-methods: POST
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: B3418B001FBB4EF492262D3944DE526D Ref B: AMS04EDGE3115 Ref C: 2024-08-10T21:46:01Z
set-cookie: MUIDB=21FD1CE264B563E12E5B083565BD62C2; path=/; httponly; expires=Thu, 04-Sep-2025 21:46:01 GMT
date: Sat, 10 Aug 2024 21:46:00 GMT
-
Remote address:13.107.5.80:443RequestPOST /suggestionchips/api/v1/cannedChips HTTP/2.0
host: services.bingapis.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
content-length: 48
origin: https://www.bing.com
referer: https://www.bing.com/
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-length: 116
content-type: application/json; charset=utf-8
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 863F9F4E578143B0B0885585CD59806A Ref B: AMS04EDGE3115 Ref C: 2024-08-10T21:46:01Z
set-cookie: MUIDB=10699AE4B4E86F1C019A8E33B5E06E0B; path=/; httponly; expires=Thu, 04-Sep-2025 21:46:01 GMT
date: Sat, 10 Aug 2024 21:46:01 GMT
-
Remote address:8.8.8.8:53Requeste-0001.e-msedge.netIN AResponsee-0001.e-msedge.netIN A13.107.5.80
-
Remote address:8.8.8.8:53Requeste-0001.e-msedge.netIN AResponsee-0001.e-msedge.netIN A13.107.5.80
-
Remote address:8.8.8.8:53Requeste-0001.e-msedge.netIN AAAAResponse
-
Remote address:8.8.8.8:53Requeste-0001.e-msedge.netIN AAAAResponse
-
Remote address:8.8.8.8:53Requestgithub.comIN AResponsegithub.comIN A20.26.156.215
-
Remote address:8.8.8.8:53Requestgithub.comIN AResponseavatars.githubusercontent.comIN A185.199.111.133avatars.githubusercontent.comIN A185.199.110.133avatars.githubusercontent.comIN A185.199.109.133avatars.githubusercontent.comIN A185.199.108.133
-
Remote address:8.8.8.8:53Requestavatars.githubusercontent.comIN AResponseavatars.githubusercontent.comIN A185.199.109.133avatars.githubusercontent.comIN A185.199.110.133avatars.githubusercontent.comIN A185.199.108.133avatars.githubusercontent.comIN A185.199.111.133
-
Remote address:8.8.8.8:53Requestavatars.githubusercontent.comIN A
-
Remote address:20.26.156.215:443RequestGET /kh4sh3i/Ransomware-Samples HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://www.bing.com/
upgrade-insecure-requests: 1
sec-fetch-dest: document
sec-fetch-mode: navigate
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
date: Sat, 10 Aug 2024 21:46:02 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"5dc0afc5dba67c9f57fb0210c7504dc8"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com api.githubcopilot.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com/v1/engines/github-completion/completions proxy.enterprise.githubcopilot.com/v1/engines/github-completion/completions *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
set-cookie: _gh_sess=ErweKtoMtlWijiW2MF%2B5xbMx0M6dBvSq3EAoOzoRelRMqtoZ%2F1G5eO38GtOqU%2F3WVx9IIKOCHruMj%2BaFVfJNoE2R6fmbXc7wMqpXFXM8axwaylJvEw%2BPMxQOmMbYBui7kdQ%2Ft8FgHJOCIYsxViOcCRIh5D25dEwfSS0S2fr1tS2KyzjX417xfm1O362QPnlmOalRsELO9ogjeNoo1T89%2BSvuqeAO47Cb7RGmJPelI2BcCoomhIuZY54xFEaelmiHckGjgZIVKMsecqvxo9IMpg%3D%3D--wI0BjUBYzuvOpYVB--qeW4Jg4R08091lsBe%2BUQ6g%3D%3D; Path=/; HttpOnly; Secure; SameSite=Lax
set-cookie: _octo=GH1.1.1794739429.1723326361; Path=/; Domain=github.com; Expires=Sun, 10 Aug 2025 21:46:01 GMT; Secure; SameSite=Lax
set-cookie: logged_in=no; Path=/; Domain=github.com; Expires=Sun, 10 Aug 2025 21:46:01 GMT; HttpOnly; Secure; SameSite=Lax
accept-ranges: bytes
x-github-request-id: C733:3BA9F4:63254B:73257B:66B7DF99
-
Remote address:20.26.156.215:443RequestGET /kh4sh3i/Ransomware-Samples/raw/main/ransomware.png HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples
cookie: _gh_sess=ErweKtoMtlWijiW2MF%2B5xbMx0M6dBvSq3EAoOzoRelRMqtoZ%2F1G5eO38GtOqU%2F3WVx9IIKOCHruMj%2BaFVfJNoE2R6fmbXc7wMqpXFXM8axwaylJvEw%2BPMxQOmMbYBui7kdQ%2Ft8FgHJOCIYsxViOcCRIh5D25dEwfSS0S2fr1tS2KyzjX417xfm1O362QPnlmOalRsELO9ogjeNoo1T89%2BSvuqeAO47Cb7RGmJPelI2BcCoomhIuZY54xFEaelmiHckGjgZIVKMsecqvxo9IMpg%3D%3D--wI0BjUBYzuvOpYVB--qeW4Jg4R08091lsBe%2BUQ6g%3D%3D
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers
ResponseHTTP/2.0 302
date: Sat, 10 Aug 2024 21:46:02 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
access-control-allow-origin:
location: https://raw.githubusercontent.com/kh4sh3i/Ransomware-Samples/main/ransomware.png
cache-control: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com api.githubcopilot.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com/v1/engines/github-completion/completions proxy.enterprise.githubcopilot.com/v1/engines/github-completion/completions *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
content-length: 0
x-github-request-id: C733:3BA9F4:6325B8:7325ED:66B7DF9A
-
Remote address:20.26.156.215:443RequestGET /kh4sh3i/Ransomware-Samples/refs?type=branch HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples
cookie: _gh_sess=ErweKtoMtlWijiW2MF%2B5xbMx0M6dBvSq3EAoOzoRelRMqtoZ%2F1G5eO38GtOqU%2F3WVx9IIKOCHruMj%2BaFVfJNoE2R6fmbXc7wMqpXFXM8axwaylJvEw%2BPMxQOmMbYBui7kdQ%2Ft8FgHJOCIYsxViOcCRIh5D25dEwfSS0S2fr1tS2KyzjX417xfm1O362QPnlmOalRsELO9ogjeNoo1T89%2BSvuqeAO47Cb7RGmJPelI2BcCoomhIuZY54xFEaelmiHckGjgZIVKMsecqvxo9IMpg%3D%3D--wI0BjUBYzuvOpYVB--qeW4Jg4R08091lsBe%2BUQ6g%3D%3D
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers
ResponseHTTP/2.0 200
date: Sat, 10 Aug 2024 21:46:03 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"56a3b41b3adb53ca7fce5703eb10dacf"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com api.githubcopilot.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com/v1/engines/github-completion/completions proxy.enterprise.githubcopilot.com/v1/engines/github-completion/completions *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
x-html-safe: 7f34e7f357f843c28d92476b5ae47ba36afd7174c10d84fbbcbad98f26901417
accept-ranges: bytes
content-length: 97
x-github-request-id: C733:3BA9F4:632620:732668:66B7DF9B
-
Remote address:20.26.156.215:443RequestGET /kh4sh3i/Ransomware-Samples/latest-commit/main HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples
content-type: application/json
github-verified-fetch: true
x-requested-with: XMLHttpRequest
cookie: _gh_sess=ErweKtoMtlWijiW2MF%2B5xbMx0M6dBvSq3EAoOzoRelRMqtoZ%2F1G5eO38GtOqU%2F3WVx9IIKOCHruMj%2BaFVfJNoE2R6fmbXc7wMqpXFXM8axwaylJvEw%2BPMxQOmMbYBui7kdQ%2Ft8FgHJOCIYsxViOcCRIh5D25dEwfSS0S2fr1tS2KyzjX417xfm1O362QPnlmOalRsELO9ogjeNoo1T89%2BSvuqeAO47Cb7RGmJPelI2BcCoomhIuZY54xFEaelmiHckGjgZIVKMsecqvxo9IMpg%3D%3D--wI0BjUBYzuvOpYVB--qeW4Jg4R08091lsBe%2BUQ6g%3D%3D
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers
ResponseHTTP/2.0 200
date: Sat, 10 Aug 2024 21:46:03 GMT
content-type: application/json; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"033da1cccc24b02dd0ddba2f09ad7ecd"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com api.githubcopilot.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com/v1/engines/github-completion/completions proxy.enterprise.githubcopilot.com/v1/engines/github-completion/completions *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
accept-ranges: bytes
content-length: 83
x-github-request-id: C733:3BA9F4:632620:732663:66B7DF9A
-
Remote address:20.26.156.215:443RequestGET /kh4sh3i/Ransomware-Samples/tree-commit-info/main HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples
content-type: application/json
github-verified-fetch: true
x-requested-with: XMLHttpRequest
cookie: _gh_sess=ErweKtoMtlWijiW2MF%2B5xbMx0M6dBvSq3EAoOzoRelRMqtoZ%2F1G5eO38GtOqU%2F3WVx9IIKOCHruMj%2BaFVfJNoE2R6fmbXc7wMqpXFXM8axwaylJvEw%2BPMxQOmMbYBui7kdQ%2Ft8FgHJOCIYsxViOcCRIh5D25dEwfSS0S2fr1tS2KyzjX417xfm1O362QPnlmOalRsELO9ogjeNoo1T89%2BSvuqeAO47Cb7RGmJPelI2BcCoomhIuZY54xFEaelmiHckGjgZIVKMsecqvxo9IMpg%3D%3D--wI0BjUBYzuvOpYVB--qeW4Jg4R08091lsBe%2BUQ6g%3D%3D
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers
ResponseHTTP/2.0 200
date: Sat, 10 Aug 2024 21:46:03 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"8902c7088699d5c25402933819980cd9"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com api.githubcopilot.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com/v1/engines/github-completion/completions proxy.enterprise.githubcopilot.com/v1/engines/github-completion/completions *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
x-html-safe: 7f34e7f357f843c28d92476b5ae47ba36afd7174c10d84fbbcbad98f26901417
accept-ranges: bytes
content-length: 95
x-github-request-id: C733:3BA9F4:632620:732669:66B7DF9B
-
Remote address:20.26.156.215:443RequestGET /kh4sh3i/Ransomware-Samples/overview-files/main HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples
content-type: application/json
github-verified-fetch: true
x-requested-with: XMLHttpRequest
cookie: _gh_sess=ErweKtoMtlWijiW2MF%2B5xbMx0M6dBvSq3EAoOzoRelRMqtoZ%2F1G5eO38GtOqU%2F3WVx9IIKOCHruMj%2BaFVfJNoE2R6fmbXc7wMqpXFXM8axwaylJvEw%2BPMxQOmMbYBui7kdQ%2Ft8FgHJOCIYsxViOcCRIh5D25dEwfSS0S2fr1tS2KyzjX417xfm1O362QPnlmOalRsELO9ogjeNoo1T89%2BSvuqeAO47Cb7RGmJPelI2BcCoomhIuZY54xFEaelmiHckGjgZIVKMsecqvxo9IMpg%3D%3D--wI0BjUBYzuvOpYVB--qeW4Jg4R08091lsBe%2BUQ6g%3D%3D
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers
ResponseHTTP/2.0 200
date: Sat, 10 Aug 2024 21:46:03 GMT
content-type: application/json; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"b8309e33807e7ea17d71a2ae327ccd7f"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com api.githubcopilot.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com/v1/engines/github-completion/completions proxy.enterprise.githubcopilot.com/v1/engines/github-completion/completions *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
accept-ranges: bytes
content-length: 427
x-github-request-id: C733:3BA9F4:632620:732665:66B7DF9B
-
Remote address:20.26.156.215:443RequestGET /kh4sh3i/Ransomware-Samples/branch-count HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples
github-verified-fetch: true
x-requested-with: XMLHttpRequest
cookie: _gh_sess=ErweKtoMtlWijiW2MF%2B5xbMx0M6dBvSq3EAoOzoRelRMqtoZ%2F1G5eO38GtOqU%2F3WVx9IIKOCHruMj%2BaFVfJNoE2R6fmbXc7wMqpXFXM8axwaylJvEw%2BPMxQOmMbYBui7kdQ%2Ft8FgHJOCIYsxViOcCRIh5D25dEwfSS0S2fr1tS2KyzjX417xfm1O362QPnlmOalRsELO9ogjeNoo1T89%2BSvuqeAO47Cb7RGmJPelI2BcCoomhIuZY54xFEaelmiHckGjgZIVKMsecqvxo9IMpg%3D%3D--wI0BjUBYzuvOpYVB--qeW4Jg4R08091lsBe%2BUQ6g%3D%3D
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers
ResponseHTTP/2.0 200
date: Sat, 10 Aug 2024 21:46:03 GMT
content-type: application/json; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"cb0e16f74200ff3478208d990661e6b9"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com api.githubcopilot.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com/v1/engines/github-completion/completions proxy.enterprise.githubcopilot.com/v1/engines/github-completion/completions *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
accept-ranges: bytes
content-length: 13732
x-github-request-id: C733:3BA9F4:632620:732667:66B7DF9B
-
Remote address:20.26.156.215:443RequestGET /kh4sh3i/Ransomware-Samples/tag-count HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples
github-verified-fetch: true
x-requested-with: XMLHttpRequest
cookie: _gh_sess=ErweKtoMtlWijiW2MF%2B5xbMx0M6dBvSq3EAoOzoRelRMqtoZ%2F1G5eO38GtOqU%2F3WVx9IIKOCHruMj%2BaFVfJNoE2R6fmbXc7wMqpXFXM8axwaylJvEw%2BPMxQOmMbYBui7kdQ%2Ft8FgHJOCIYsxViOcCRIh5D25dEwfSS0S2fr1tS2KyzjX417xfm1O362QPnlmOalRsELO9ogjeNoo1T89%2BSvuqeAO47Cb7RGmJPelI2BcCoomhIuZY54xFEaelmiHckGjgZIVKMsecqvxo9IMpg%3D%3D--wI0BjUBYzuvOpYVB--qeW4Jg4R08091lsBe%2BUQ6g%3D%3D
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers
ResponseHTTP/2.0 200
date: Sat, 10 Aug 2024 21:46:03 GMT
content-type: application/json; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"ba1c8a82daf994caf97ceeb6a062e61c"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com api.githubcopilot.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com/v1/engines/github-completion/completions proxy.enterprise.githubcopilot.com/v1/engines/github-completion/completions *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
accept-ranges: bytes
content-length: 671
x-github-request-id: C733:3BA9F4:632620:732666:66B7DF9B
-
Remote address:20.26.156.215:443RequestGET /fluidicon.png HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples
cookie: _gh_sess=ErweKtoMtlWijiW2MF%2B5xbMx0M6dBvSq3EAoOzoRelRMqtoZ%2F1G5eO38GtOqU%2F3WVx9IIKOCHruMj%2BaFVfJNoE2R6fmbXc7wMqpXFXM8axwaylJvEw%2BPMxQOmMbYBui7kdQ%2Ft8FgHJOCIYsxViOcCRIh5D25dEwfSS0S2fr1tS2KyzjX417xfm1O362QPnlmOalRsELO9ogjeNoo1T89%2BSvuqeAO47Cb7RGmJPelI2BcCoomhIuZY54xFEaelmiHckGjgZIVKMsecqvxo9IMpg%3D%3D--wI0BjUBYzuvOpYVB--qeW4Jg4R08091lsBe%2BUQ6g%3D%3D
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers
ResponseHTTP/2.0 200
date: Sat, 10 Aug 2024 21:46:04 GMT
content-type: image/png
content-length: 33270
last-modified: Sat, 10 Aug 2024 13:04:08 GMT
etag: "66b76548-81f6"
vary: Accept-Encoding, Accept, X-Requested-With
x-frame-options: DENY
accept-ranges: bytes
x-github-request-id: C733:3BA9F4:632686:7326DB:66B7DF9B
-
Remote address:20.26.156.215:443RequestGET /kh4sh3i/Ransomware-Samples/security/overall-count HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: text/fragment+html
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples
x-requested-with: XMLHttpRequest
cookie: _gh_sess=ErweKtoMtlWijiW2MF%2B5xbMx0M6dBvSq3EAoOzoRelRMqtoZ%2F1G5eO38GtOqU%2F3WVx9IIKOCHruMj%2BaFVfJNoE2R6fmbXc7wMqpXFXM8axwaylJvEw%2BPMxQOmMbYBui7kdQ%2Ft8FgHJOCIYsxViOcCRIh5D25dEwfSS0S2fr1tS2KyzjX417xfm1O362QPnlmOalRsELO9ogjeNoo1T89%2BSvuqeAO47Cb7RGmJPelI2BcCoomhIuZY54xFEaelmiHckGjgZIVKMsecqvxo9IMpg%3D%3D--wI0BjUBYzuvOpYVB--qeW4Jg4R08091lsBe%2BUQ6g%3D%3D
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers
ResponseHTTP/2.0 200
date: Sat, 10 Aug 2024 21:46:04 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"75a11da44c802486bc6f65640aa48a73"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com api.githubcopilot.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com/v1/engines/github-completion/completions proxy.enterprise.githubcopilot.com/v1/engines/github-completion/completions *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
x-html-safe: 7f34e7f357f843c28d92476b5ae47ba36afd7174c10d84fbbcbad98f26901417
accept-ranges: bytes
content-length: 33
x-github-request-id: C733:3BA9F4:6326CA:732716:66B7DF9C
-
GEThttps://github.com/kh4sh3i/Ransomware-Samples/spoofed_commit_check/71f6062209bed1c52b63637746239868da0da49efirefox.exeRemote address:20.26.156.215:443RequestGET /kh4sh3i/Ransomware-Samples/spoofed_commit_check/71f6062209bed1c52b63637746239868da0da49e HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: text/html
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples
x-requested-with: XMLHttpRequest
cookie: _gh_sess=ErweKtoMtlWijiW2MF%2B5xbMx0M6dBvSq3EAoOzoRelRMqtoZ%2F1G5eO38GtOqU%2F3WVx9IIKOCHruMj%2BaFVfJNoE2R6fmbXc7wMqpXFXM8axwaylJvEw%2BPMxQOmMbYBui7kdQ%2Ft8FgHJOCIYsxViOcCRIh5D25dEwfSS0S2fr1tS2KyzjX417xfm1O362QPnlmOalRsELO9ogjeNoo1T89%2BSvuqeAO47Cb7RGmJPelI2BcCoomhIuZY54xFEaelmiHckGjgZIVKMsecqvxo9IMpg%3D%3D--wI0BjUBYzuvOpYVB--qeW4Jg4R08091lsBe%2BUQ6g%3D%3D
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers
ResponseHTTP/2.0 204
date: Sat, 10 Aug 2024 21:46:04 GMT
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
cache-control: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com api.githubcopilot.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com/v1/engines/github-completion/completions proxy.enterprise.githubcopilot.com/v1/engines/github-completion/completions *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
x-github-request-id: C733:3BA9F4:6326CA:732717:66B7DF9C
-
GEThttps://github.com/kh4sh3i/Ransomware-Samples/hovercards/citation/sidebar_partial?tree_name=mainfirefox.exeRemote address:20.26.156.215:443RequestGET /kh4sh3i/Ransomware-Samples/hovercards/citation/sidebar_partial?tree_name=main HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: text/html
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples
x-requested-with: XMLHttpRequest
cookie: _gh_sess=ErweKtoMtlWijiW2MF%2B5xbMx0M6dBvSq3EAoOzoRelRMqtoZ%2F1G5eO38GtOqU%2F3WVx9IIKOCHruMj%2BaFVfJNoE2R6fmbXc7wMqpXFXM8axwaylJvEw%2BPMxQOmMbYBui7kdQ%2Ft8FgHJOCIYsxViOcCRIh5D25dEwfSS0S2fr1tS2KyzjX417xfm1O362QPnlmOalRsELO9ogjeNoo1T89%2BSvuqeAO47Cb7RGmJPelI2BcCoomhIuZY54xFEaelmiHckGjgZIVKMsecqvxo9IMpg%3D%3D--wI0BjUBYzuvOpYVB--qeW4Jg4R08091lsBe%2BUQ6g%3D%3D
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers
ResponseHTTP/2.0 200
date: Sat, 10 Aug 2024 21:46:04 GMT
content-type: text/fragment+html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
cache-control: max-age=14400, private
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com api.githubcopilot.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com/v1/engines/github-completion/completions proxy.enterprise.githubcopilot.com/v1/engines/github-completion/completions *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
accept-ranges: bytes
content-length: 20
x-github-request-id: C733:3BA9F4:6326CA:732715:66B7DF9C
-
Remote address:20.26.156.215:443RequestGET /kh4sh3i/Ransomware-Samples/used_by_list HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: text/fragment+html
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples
x-requested-with: XMLHttpRequest
cookie: _gh_sess=ErweKtoMtlWijiW2MF%2B5xbMx0M6dBvSq3EAoOzoRelRMqtoZ%2F1G5eO38GtOqU%2F3WVx9IIKOCHruMj%2BaFVfJNoE2R6fmbXc7wMqpXFXM8axwaylJvEw%2BPMxQOmMbYBui7kdQ%2Ft8FgHJOCIYsxViOcCRIh5D25dEwfSS0S2fr1tS2KyzjX417xfm1O362QPnlmOalRsELO9ogjeNoo1T89%2BSvuqeAO47Cb7RGmJPelI2BcCoomhIuZY54xFEaelmiHckGjgZIVKMsecqvxo9IMpg%3D%3D--wI0BjUBYzuvOpYVB--qeW4Jg4R08091lsBe%2BUQ6g%3D%3D
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers
ResponseHTTP/2.0 200
date: Sat, 10 Aug 2024 21:46:04 GMT
content-type: text/plain; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
cache-control: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com api.githubcopilot.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com/v1/engines/github-completion/completions proxy.enterprise.githubcopilot.com/v1/engines/github-completion/completions *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
accept-ranges: bytes
content-length: 20
x-github-request-id: C733:3BA9F4:6326CA:732718:66B7DF9C
-
Remote address:20.26.156.215:443RequestGET /kh4sh3i/Ransomware-Samples/tree/main/TeslaCrypt HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples
cookie: _gh_sess=ErweKtoMtlWijiW2MF%2B5xbMx0M6dBvSq3EAoOzoRelRMqtoZ%2F1G5eO38GtOqU%2F3WVx9IIKOCHruMj%2BaFVfJNoE2R6fmbXc7wMqpXFXM8axwaylJvEw%2BPMxQOmMbYBui7kdQ%2Ft8FgHJOCIYsxViOcCRIh5D25dEwfSS0S2fr1tS2KyzjX417xfm1O362QPnlmOalRsELO9ogjeNoo1T89%2BSvuqeAO47Cb7RGmJPelI2BcCoomhIuZY54xFEaelmiHckGjgZIVKMsecqvxo9IMpg%3D%3D--wI0BjUBYzuvOpYVB--qeW4Jg4R08091lsBe%2BUQ6g%3D%3D
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
upgrade-insecure-requests: 1
sec-fetch-dest: document
sec-fetch-mode: navigate
sec-fetch-site: same-origin
sec-fetch-user: ?1
te: trailers
ResponseHTTP/2.0 200
date: Sat, 10 Aug 2024 21:46:21 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"748e52d77fb69ce5b6986c66279c499e"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com api.githubcopilot.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com/v1/engines/github-completion/completions proxy.enterprise.githubcopilot.com/v1/engines/github-completion/completions *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
accept-ranges: bytes
x-github-request-id: C733:3BA9F4:632C6B:732D99:66B7DF9C
-
Remote address:20.26.156.215:443RequestGET /kh4sh3i/Ransomware-Samples/latest-commit/main/TeslaCrypt HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/tree/main/TeslaCrypt
content-type: application/json
github-verified-fetch: true
x-requested-with: XMLHttpRequest
cookie: _gh_sess=ErweKtoMtlWijiW2MF%2B5xbMx0M6dBvSq3EAoOzoRelRMqtoZ%2F1G5eO38GtOqU%2F3WVx9IIKOCHruMj%2BaFVfJNoE2R6fmbXc7wMqpXFXM8axwaylJvEw%2BPMxQOmMbYBui7kdQ%2Ft8FgHJOCIYsxViOcCRIh5D25dEwfSS0S2fr1tS2KyzjX417xfm1O362QPnlmOalRsELO9ogjeNoo1T89%2BSvuqeAO47Cb7RGmJPelI2BcCoomhIuZY54xFEaelmiHckGjgZIVKMsecqvxo9IMpg%3D%3D--wI0BjUBYzuvOpYVB--qeW4Jg4R08091lsBe%2BUQ6g%3D%3D
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers
ResponseHTTP/2.0 200
date: Sat, 10 Aug 2024 21:46:22 GMT
content-type: application/json; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"d849bff73b652ff7bc2d020e8b055873"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com api.githubcopilot.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com/v1/engines/github-completion/completions proxy.enterprise.githubcopilot.com/v1/engines/github-completion/completions *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
accept-ranges: bytes
content-length: 266
x-github-request-id: C733:3BA9F4:632CE7:732E2F:66B7DFAE
-
Remote address:20.26.156.215:443RequestGET /kh4sh3i/Ransomware-Samples/tree-commit-info/main/TeslaCrypt HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/tree/main/TeslaCrypt
content-type: application/json
github-verified-fetch: true
x-requested-with: XMLHttpRequest
cookie: _gh_sess=ErweKtoMtlWijiW2MF%2B5xbMx0M6dBvSq3EAoOzoRelRMqtoZ%2F1G5eO38GtOqU%2F3WVx9IIKOCHruMj%2BaFVfJNoE2R6fmbXc7wMqpXFXM8axwaylJvEw%2BPMxQOmMbYBui7kdQ%2Ft8FgHJOCIYsxViOcCRIh5D25dEwfSS0S2fr1tS2KyzjX417xfm1O362QPnlmOalRsELO9ogjeNoo1T89%2BSvuqeAO47Cb7RGmJPelI2BcCoomhIuZY54xFEaelmiHckGjgZIVKMsecqvxo9IMpg%3D%3D--wI0BjUBYzuvOpYVB--qeW4Jg4R08091lsBe%2BUQ6g%3D%3D
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers
ResponseHTTP/2.0 200
date: Sat, 10 Aug 2024 21:46:22 GMT
content-type: application/json; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"ae1919b5b4363f2828c5094f8afb49e1"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com api.githubcopilot.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com/v1/engines/github-completion/completions proxy.enterprise.githubcopilot.com/v1/engines/github-completion/completions *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
accept-ranges: bytes
content-length: 181
x-github-request-id: C733:3BA9F4:632CE7:732E30:66B7DFAE
-
Remote address:20.26.156.215:443RequestGET /kh4sh3i/Ransomware-Samples/deferred-metadata/main/TeslaCrypt HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/tree/main/TeslaCrypt
content-type: application/json
github-verified-fetch: true
x-requested-with: XMLHttpRequest
cookie: _gh_sess=ErweKtoMtlWijiW2MF%2B5xbMx0M6dBvSq3EAoOzoRelRMqtoZ%2F1G5eO38GtOqU%2F3WVx9IIKOCHruMj%2BaFVfJNoE2R6fmbXc7wMqpXFXM8axwaylJvEw%2BPMxQOmMbYBui7kdQ%2Ft8FgHJOCIYsxViOcCRIh5D25dEwfSS0S2fr1tS2KyzjX417xfm1O362QPnlmOalRsELO9ogjeNoo1T89%2BSvuqeAO47Cb7RGmJPelI2BcCoomhIuZY54xFEaelmiHckGjgZIVKMsecqvxo9IMpg%3D%3D--wI0BjUBYzuvOpYVB--qeW4Jg4R08091lsBe%2BUQ6g%3D%3D
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers
ResponseHTTP/2.0 200
date: Sat, 10 Aug 2024 21:46:22 GMT
content-type: application/json; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"f5dd1acce1815cffd234470be1d56846"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com api.githubcopilot.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com/v1/engines/github-completion/completions proxy.enterprise.githubcopilot.com/v1/engines/github-completion/completions *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
accept-ranges: bytes
content-length: 425
x-github-request-id: C733:3BA9F4:632CE6:732E2E:66B7DFAD
-
Remote address:20.26.156.215:443RequestGET /kh4sh3i/Ransomware-Samples/tree/main/Jigsaw HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples
cookie: _gh_sess=ErweKtoMtlWijiW2MF%2B5xbMx0M6dBvSq3EAoOzoRelRMqtoZ%2F1G5eO38GtOqU%2F3WVx9IIKOCHruMj%2BaFVfJNoE2R6fmbXc7wMqpXFXM8axwaylJvEw%2BPMxQOmMbYBui7kdQ%2Ft8FgHJOCIYsxViOcCRIh5D25dEwfSS0S2fr1tS2KyzjX417xfm1O362QPnlmOalRsELO9ogjeNoo1T89%2BSvuqeAO47Cb7RGmJPelI2BcCoomhIuZY54xFEaelmiHckGjgZIVKMsecqvxo9IMpg%3D%3D--wI0BjUBYzuvOpYVB--qeW4Jg4R08091lsBe%2BUQ6g%3D%3D
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
upgrade-insecure-requests: 1
sec-fetch-dest: document
sec-fetch-mode: navigate
sec-fetch-site: same-origin
sec-fetch-user: ?1
te: trailers
ResponseHTTP/2.0 200
date: Sat, 10 Aug 2024 21:46:36 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"4b20e619542cecf18f1d4a09741f3caf"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com api.githubcopilot.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com/v1/engines/github-completion/completions proxy.enterprise.githubcopilot.com/v1/engines/github-completion/completions *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
accept-ranges: bytes
x-github-request-id: C733:3BA9F4:63316D:73336F:66B7DFAE
-
Remote address:20.26.156.215:443RequestGET /kh4sh3i/Ransomware-Samples/latest-commit/main/Jigsaw HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/tree/main/Jigsaw
content-type: application/json
github-verified-fetch: true
x-requested-with: XMLHttpRequest
cookie: _gh_sess=ErweKtoMtlWijiW2MF%2B5xbMx0M6dBvSq3EAoOzoRelRMqtoZ%2F1G5eO38GtOqU%2F3WVx9IIKOCHruMj%2BaFVfJNoE2R6fmbXc7wMqpXFXM8axwaylJvEw%2BPMxQOmMbYBui7kdQ%2Ft8FgHJOCIYsxViOcCRIh5D25dEwfSS0S2fr1tS2KyzjX417xfm1O362QPnlmOalRsELO9ogjeNoo1T89%2BSvuqeAO47Cb7RGmJPelI2BcCoomhIuZY54xFEaelmiHckGjgZIVKMsecqvxo9IMpg%3D%3D--wI0BjUBYzuvOpYVB--qeW4Jg4R08091lsBe%2BUQ6g%3D%3D
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers
ResponseHTTP/2.0 200
date: Sat, 10 Aug 2024 21:46:37 GMT
content-type: application/json; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"f5dd1acce1815cffd234470be1d56846"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com api.githubcopilot.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com/v1/engines/github-completion/completions proxy.enterprise.githubcopilot.com/v1/engines/github-completion/completions *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
accept-ranges: bytes
content-length: 425
x-github-request-id: C733:3BA9F4:6331D1:7333E9:66B7DFBC
-
Remote address:20.26.156.215:443RequestGET /kh4sh3i/Ransomware-Samples/tree-commit-info/main/Jigsaw HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/tree/main/Jigsaw
content-type: application/json
github-verified-fetch: true
x-requested-with: XMLHttpRequest
cookie: _gh_sess=ErweKtoMtlWijiW2MF%2B5xbMx0M6dBvSq3EAoOzoRelRMqtoZ%2F1G5eO38GtOqU%2F3WVx9IIKOCHruMj%2BaFVfJNoE2R6fmbXc7wMqpXFXM8axwaylJvEw%2BPMxQOmMbYBui7kdQ%2Ft8FgHJOCIYsxViOcCRIh5D25dEwfSS0S2fr1tS2KyzjX417xfm1O362QPnlmOalRsELO9ogjeNoo1T89%2BSvuqeAO47Cb7RGmJPelI2BcCoomhIuZY54xFEaelmiHckGjgZIVKMsecqvxo9IMpg%3D%3D--wI0BjUBYzuvOpYVB--qeW4Jg4R08091lsBe%2BUQ6g%3D%3D
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers
ResponseHTTP/2.0 200
date: Sat, 10 Aug 2024 21:46:37 GMT
content-type: application/json; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"7b49070d49ce371364bbd958e7f37a3f"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com api.githubcopilot.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com/v1/engines/github-completion/completions proxy.enterprise.githubcopilot.com/v1/engines/github-completion/completions *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
accept-ranges: bytes
content-length: 263
x-github-request-id: C733:3BA9F4:6331D3:7333EB:66B7DFBD
-
Remote address:20.26.156.215:443RequestGET /kh4sh3i/Ransomware-Samples/deferred-metadata/main/Jigsaw HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/tree/main/Jigsaw
content-type: application/json
github-verified-fetch: true
x-requested-with: XMLHttpRequest
cookie: _gh_sess=ErweKtoMtlWijiW2MF%2B5xbMx0M6dBvSq3EAoOzoRelRMqtoZ%2F1G5eO38GtOqU%2F3WVx9IIKOCHruMj%2BaFVfJNoE2R6fmbXc7wMqpXFXM8axwaylJvEw%2BPMxQOmMbYBui7kdQ%2Ft8FgHJOCIYsxViOcCRIh5D25dEwfSS0S2fr1tS2KyzjX417xfm1O362QPnlmOalRsELO9ogjeNoo1T89%2BSvuqeAO47Cb7RGmJPelI2BcCoomhIuZY54xFEaelmiHckGjgZIVKMsecqvxo9IMpg%3D%3D--wI0BjUBYzuvOpYVB--qeW4Jg4R08091lsBe%2BUQ6g%3D%3D
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers
ResponseHTTP/2.0 200
date: Sat, 10 Aug 2024 21:46:37 GMT
content-type: application/json; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"ae1919b5b4363f2828c5094f8afb49e1"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com api.githubcopilot.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com/v1/engines/github-completion/completions proxy.enterprise.githubcopilot.com/v1/engines/github-completion/completions *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
accept-ranges: bytes
content-length: 181
x-github-request-id: C733:3BA9F4:6331D4:7333EE:66B7DFBD
-
GEThttps://github.com/kh4sh3i/Ransomware-Samples/blob/main/TeslaCrypt/Ransomware.TeslaCrypt.zipfirefox.exeRemote address:20.26.156.215:443RequestGET /kh4sh3i/Ransomware-Samples/blob/main/TeslaCrypt/Ransomware.TeslaCrypt.zip HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/blob/main/TeslaCrypt/Ransomware.TeslaCrypt.zip
x-requested-with: XMLHttpRequest
x-github-target: dotcom
x-react-router: json
cookie: _gh_sess=ErweKtoMtlWijiW2MF%2B5xbMx0M6dBvSq3EAoOzoRelRMqtoZ%2F1G5eO38GtOqU%2F3WVx9IIKOCHruMj%2BaFVfJNoE2R6fmbXc7wMqpXFXM8axwaylJvEw%2BPMxQOmMbYBui7kdQ%2Ft8FgHJOCIYsxViOcCRIh5D25dEwfSS0S2fr1tS2KyzjX417xfm1O362QPnlmOalRsELO9ogjeNoo1T89%2BSvuqeAO47Cb7RGmJPelI2BcCoomhIuZY54xFEaelmiHckGjgZIVKMsecqvxo9IMpg%3D%3D--wI0BjUBYzuvOpYVB--qeW4Jg4R08091lsBe%2BUQ6g%3D%3D
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers
ResponseHTTP/2.0 200
date: Sat, 10 Aug 2024 21:46:56 GMT
content-type: application/json; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"9f812079bc013f102dcbccc95e55d947"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com api.githubcopilot.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com/v1/engines/github-completion/completions proxy.enterprise.githubcopilot.com/v1/engines/github-completion/completions *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
accept-ranges: bytes
content-length: 1845
x-github-request-id: C733:3BA9F4:6337AC:733AC0:66B7DFBD
-
GEThttps://github.com/kh4sh3i/Ransomware-Samples/latest-commit/main/TeslaCrypt/Ransomware.TeslaCrypt.zipfirefox.exeRemote address:20.26.156.215:443RequestGET /kh4sh3i/Ransomware-Samples/latest-commit/main/TeslaCrypt/Ransomware.TeslaCrypt.zip HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/blob/main/TeslaCrypt/Ransomware.TeslaCrypt.zip
content-type: application/json
github-verified-fetch: true
x-requested-with: XMLHttpRequest
cookie: _gh_sess=ErweKtoMtlWijiW2MF%2B5xbMx0M6dBvSq3EAoOzoRelRMqtoZ%2F1G5eO38GtOqU%2F3WVx9IIKOCHruMj%2BaFVfJNoE2R6fmbXc7wMqpXFXM8axwaylJvEw%2BPMxQOmMbYBui7kdQ%2Ft8FgHJOCIYsxViOcCRIh5D25dEwfSS0S2fr1tS2KyzjX417xfm1O362QPnlmOalRsELO9ogjeNoo1T89%2BSvuqeAO47Cb7RGmJPelI2BcCoomhIuZY54xFEaelmiHckGjgZIVKMsecqvxo9IMpg%3D%3D--wI0BjUBYzuvOpYVB--qeW4Jg4R08091lsBe%2BUQ6g%3D%3D
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers
ResponseHTTP/2.0 200
date: Sat, 10 Aug 2024 21:46:56 GMT
content-type: application/json; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"f5dd1acce1815cffd234470be1d56846"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com api.githubcopilot.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com/v1/engines/github-completion/completions proxy.enterprise.githubcopilot.com/v1/engines/github-completion/completions *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
accept-ranges: bytes
content-length: 425
x-github-request-id: C733:3BA9F4:6337C7:733ADF:66B7DFD0
-
GEThttps://github.com/kh4sh3i/Ransomware-Samples/deferred-metadata/main/TeslaCrypt/Ransomware.TeslaCrypt.zipfirefox.exeRemote address:20.26.156.215:443RequestGET /kh4sh3i/Ransomware-Samples/deferred-metadata/main/TeslaCrypt/Ransomware.TeslaCrypt.zip HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/blob/main/TeslaCrypt/Ransomware.TeslaCrypt.zip
content-type: application/json
github-verified-fetch: true
x-requested-with: XMLHttpRequest
cookie: _gh_sess=ErweKtoMtlWijiW2MF%2B5xbMx0M6dBvSq3EAoOzoRelRMqtoZ%2F1G5eO38GtOqU%2F3WVx9IIKOCHruMj%2BaFVfJNoE2R6fmbXc7wMqpXFXM8axwaylJvEw%2BPMxQOmMbYBui7kdQ%2Ft8FgHJOCIYsxViOcCRIh5D25dEwfSS0S2fr1tS2KyzjX417xfm1O362QPnlmOalRsELO9ogjeNoo1T89%2BSvuqeAO47Cb7RGmJPelI2BcCoomhIuZY54xFEaelmiHckGjgZIVKMsecqvxo9IMpg%3D%3D--wI0BjUBYzuvOpYVB--qeW4Jg4R08091lsBe%2BUQ6g%3D%3D
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers
ResponseHTTP/2.0 200
date: Sat, 10 Aug 2024 21:46:56 GMT
content-type: application/json; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"ae1919b5b4363f2828c5094f8afb49e1"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com api.githubcopilot.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com/v1/engines/github-completion/completions proxy.enterprise.githubcopilot.com/v1/engines/github-completion/completions *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
accept-ranges: bytes
content-length: 181
x-github-request-id: C733:3BA9F4:6337C7:733AE0:66B7DFD0
-
GEThttps://github.com/kh4sh3i/Ransomware-Samples/raw/main/TeslaCrypt/Ransomware.TeslaCrypt.zipfirefox.exeRemote address:20.26.156.215:443RequestGET /kh4sh3i/Ransomware-Samples/raw/main/TeslaCrypt/Ransomware.TeslaCrypt.zip HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/blob/main/TeslaCrypt/Ransomware.TeslaCrypt.zip
cookie: _gh_sess=ErweKtoMtlWijiW2MF%2B5xbMx0M6dBvSq3EAoOzoRelRMqtoZ%2F1G5eO38GtOqU%2F3WVx9IIKOCHruMj%2BaFVfJNoE2R6fmbXc7wMqpXFXM8axwaylJvEw%2BPMxQOmMbYBui7kdQ%2Ft8FgHJOCIYsxViOcCRIh5D25dEwfSS0S2fr1tS2KyzjX417xfm1O362QPnlmOalRsELO9ogjeNoo1T89%2BSvuqeAO47Cb7RGmJPelI2BcCoomhIuZY54xFEaelmiHckGjgZIVKMsecqvxo9IMpg%3D%3D--wI0BjUBYzuvOpYVB--qeW4Jg4R08091lsBe%2BUQ6g%3D%3D
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers
ResponseHTTP/2.0 302
date: Sat, 10 Aug 2024 21:46:58 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
access-control-allow-origin:
location: https://raw.githubusercontent.com/kh4sh3i/Ransomware-Samples/main/TeslaCrypt/Ransomware.TeslaCrypt.zip
cache-control: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com api.githubcopilot.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com/v1/engines/github-completion/completions proxy.enterprise.githubcopilot.com/v1/engines/github-completion/completions *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
content-length: 0
x-github-request-id: C733:3BA9F4:633884:733BB1:66B7DFD0
-
GEThttps://github.com/kh4sh3i/Ransomware-Samples/blob/main/Jigsaw/Ransomware.Jigsaw.zipfirefox.exeRemote address:20.26.156.215:443RequestGET /kh4sh3i/Ransomware-Samples/blob/main/Jigsaw/Ransomware.Jigsaw.zip HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/blob/main/Jigsaw/Ransomware.Jigsaw.zip
x-requested-with: XMLHttpRequest
x-github-target: dotcom
x-react-router: json
cookie: _gh_sess=ErweKtoMtlWijiW2MF%2B5xbMx0M6dBvSq3EAoOzoRelRMqtoZ%2F1G5eO38GtOqU%2F3WVx9IIKOCHruMj%2BaFVfJNoE2R6fmbXc7wMqpXFXM8axwaylJvEw%2BPMxQOmMbYBui7kdQ%2Ft8FgHJOCIYsxViOcCRIh5D25dEwfSS0S2fr1tS2KyzjX417xfm1O362QPnlmOalRsELO9ogjeNoo1T89%2BSvuqeAO47Cb7RGmJPelI2BcCoomhIuZY54xFEaelmiHckGjgZIVKMsecqvxo9IMpg%3D%3D--wI0BjUBYzuvOpYVB--qeW4Jg4R08091lsBe%2BUQ6g%3D%3D
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers
ResponseHTTP/2.0 200
date: Sat, 10 Aug 2024 21:47:04 GMT
content-type: application/json; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"8b9a2379369603f9ecc016a27604d930"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com api.githubcopilot.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com/v1/engines/github-completion/completions proxy.enterprise.githubcopilot.com/v1/engines/github-completion/completions *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
accept-ranges: bytes
content-length: 1835
x-github-request-id: C733:3BA9F4:633ABF:733E59:66B7DFD2
-
GEThttps://github.com/kh4sh3i/Ransomware-Samples/latest-commit/main/Jigsaw/Ransomware.Jigsaw.zipfirefox.exeRemote address:20.26.156.215:443RequestGET /kh4sh3i/Ransomware-Samples/latest-commit/main/Jigsaw/Ransomware.Jigsaw.zip HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/blob/main/Jigsaw/Ransomware.Jigsaw.zip
content-type: application/json
github-verified-fetch: true
x-requested-with: XMLHttpRequest
cookie: _gh_sess=ErweKtoMtlWijiW2MF%2B5xbMx0M6dBvSq3EAoOzoRelRMqtoZ%2F1G5eO38GtOqU%2F3WVx9IIKOCHruMj%2BaFVfJNoE2R6fmbXc7wMqpXFXM8axwaylJvEw%2BPMxQOmMbYBui7kdQ%2Ft8FgHJOCIYsxViOcCRIh5D25dEwfSS0S2fr1tS2KyzjX417xfm1O362QPnlmOalRsELO9ogjeNoo1T89%2BSvuqeAO47Cb7RGmJPelI2BcCoomhIuZY54xFEaelmiHckGjgZIVKMsecqvxo9IMpg%3D%3D--wI0BjUBYzuvOpYVB--qeW4Jg4R08091lsBe%2BUQ6g%3D%3D
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers
ResponseHTTP/2.0 200
date: Sat, 10 Aug 2024 21:47:05 GMT
content-type: application/json; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"f5dd1acce1815cffd234470be1d56846"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com api.githubcopilot.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com/v1/engines/github-completion/completions proxy.enterprise.githubcopilot.com/v1/engines/github-completion/completions *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
accept-ranges: bytes
content-length: 425
x-github-request-id: C733:3BA9F4:633AE7:733E88:66B7DFD8
-
GEThttps://github.com/kh4sh3i/Ransomware-Samples/deferred-metadata/main/Jigsaw/Ransomware.Jigsaw.zipfirefox.exeRemote address:20.26.156.215:443RequestGET /kh4sh3i/Ransomware-Samples/deferred-metadata/main/Jigsaw/Ransomware.Jigsaw.zip HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/blob/main/Jigsaw/Ransomware.Jigsaw.zip
content-type: application/json
github-verified-fetch: true
x-requested-with: XMLHttpRequest
cookie: _gh_sess=ErweKtoMtlWijiW2MF%2B5xbMx0M6dBvSq3EAoOzoRelRMqtoZ%2F1G5eO38GtOqU%2F3WVx9IIKOCHruMj%2BaFVfJNoE2R6fmbXc7wMqpXFXM8axwaylJvEw%2BPMxQOmMbYBui7kdQ%2Ft8FgHJOCIYsxViOcCRIh5D25dEwfSS0S2fr1tS2KyzjX417xfm1O362QPnlmOalRsELO9ogjeNoo1T89%2BSvuqeAO47Cb7RGmJPelI2BcCoomhIuZY54xFEaelmiHckGjgZIVKMsecqvxo9IMpg%3D%3D--wI0BjUBYzuvOpYVB--qeW4Jg4R08091lsBe%2BUQ6g%3D%3D
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers
ResponseHTTP/2.0 200
date: Sat, 10 Aug 2024 21:47:05 GMT
content-type: application/json; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"ae1919b5b4363f2828c5094f8afb49e1"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com api.githubcopilot.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com/v1/engines/github-completion/completions proxy.enterprise.githubcopilot.com/v1/engines/github-completion/completions *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
accept-ranges: bytes
content-length: 181
x-github-request-id: C733:3BA9F4:633AE7:733E89:66B7DFD9
-
Remote address:20.26.156.215:443RequestGET /kh4sh3i/Ransomware-Samples/raw/main/Jigsaw/Ransomware.Jigsaw.zip HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/blob/main/Jigsaw/Ransomware.Jigsaw.zip
cookie: _gh_sess=ErweKtoMtlWijiW2MF%2B5xbMx0M6dBvSq3EAoOzoRelRMqtoZ%2F1G5eO38GtOqU%2F3WVx9IIKOCHruMj%2BaFVfJNoE2R6fmbXc7wMqpXFXM8axwaylJvEw%2BPMxQOmMbYBui7kdQ%2Ft8FgHJOCIYsxViOcCRIh5D25dEwfSS0S2fr1tS2KyzjX417xfm1O362QPnlmOalRsELO9ogjeNoo1T89%2BSvuqeAO47Cb7RGmJPelI2BcCoomhIuZY54xFEaelmiHckGjgZIVKMsecqvxo9IMpg%3D%3D--wI0BjUBYzuvOpYVB--qeW4Jg4R08091lsBe%2BUQ6g%3D%3D
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers
ResponseHTTP/2.0 302
date: Sat, 10 Aug 2024 21:47:06 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
access-control-allow-origin:
location: https://raw.githubusercontent.com/kh4sh3i/Ransomware-Samples/main/Jigsaw/Ransomware.Jigsaw.zip
cache-control: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com api.githubcopilot.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com/v1/engines/github-completion/completions proxy.enterprise.githubcopilot.com/v1/engines/github-completion/completions *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
content-length: 0
x-github-request-id: C733:3BA9F4:633B57:733F08:66B7DFD9
-
Remote address:8.8.8.8:53Requestgithub.comIN AResponsegithub.comIN A20.26.156.215
-
Remote address:8.8.8.8:53Requestgithub.comIN AResponsegithub.comIN A20.26.156.215
-
Remote address:8.8.8.8:53Requestgithub.comIN AAAAResponse
-
Remote address:8.8.8.8:53Requestgithub.comIN AAAAResponse
-
Remote address:8.8.8.8:53Request80.5.107.13.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request80.5.107.13.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request215.156.26.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request215.156.26.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Requestgithub.githubassets.comIN AResponsegithub.githubassets.comIN A185.199.109.154github.githubassets.comIN A185.199.108.154github.githubassets.comIN A185.199.110.154github.githubassets.comIN A185.199.111.154
-
Remote address:8.8.8.8:53Requestgithub.githubassets.comIN AResponsegithub.githubassets.comIN A185.199.111.154github.githubassets.comIN A185.199.109.154github.githubassets.comIN A185.199.110.154github.githubassets.comIN A185.199.108.154
-
Remote address:185.199.109.154:443RequestGET /assets/light-efd2f2257c96.css HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: text/css,*/*;q=0.1
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: style
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: text/css
last-modified: Thu, 20 Jun 2024 15:04:39 GMT
etag: 0x8DC913A4EE7222B
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 1150583
x-served-by: cache-iad-kjyo7100087-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 92, 14753
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 919a2d80ed9da23923189581e914fcd8971cf1f4
content-length: 6777
-
Remote address:185.199.109.154:443RequestGET /assets/react-lib-7b7b5264f6c1.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 23 Jul 2024 20:26:50 GMT
etag: 0x8DCAB55C856ACEA
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 1466825
x-served-by: cache-iad-kjyo7100029-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 23, 17177
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: fabd7c6b56b5849b9fe8bb0d5f00af6a0c0a7ee9
content-length: 54857
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_primer_octicons-react_di-b40d97-06881c63f955.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_primer_octicons-react_di-b40d97-06881c63f955.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Fri, 26 Jul 2024 02:43:54 GMT
etag: 0x8DCAD1CCA71DF1B
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 942543
x-served-by: cache-iad-kjyo7100043-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 70, 13111
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: ea543569b2d3f0302905b21bcadd206f65934cb1
content-length: 4233
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Box_Box_js-55a9038b54f0.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_primer_react_lib-esm_Box_Box_js-55a9038b54f0.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 23 Jul 2024 20:26:54 GMT
etag: 0x8DCAB55CAB9BA4E
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 1064054
x-served-by: cache-iad-kjyo7100061-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 23, 16400
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: fed881eaf39c257cb36024cf796f99bae33f9436
content-length: 4777
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Button_Button_js-b0edbfb6a9e5.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_primer_react_lib-esm_Button_Button_js-b0edbfb6a9e5.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 06 Aug 2024 20:29:19 GMT
etag: 0x8DCB65673021528
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 273722
x-served-by: cache-iad-kcgs7200073-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 23, 7019
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: ebff8ad5ca900c813a18aabe726debee203305e7
content-length: 4499
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_TooltipV2_Tooltip_js-4d5019830e3c.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_primer_react_lib-esm_TooltipV2_Tooltip_js-4d5019830e3c.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 30 Jul 2024 14:28:35 GMT
etag: 0x8DCB0A3E5A62F1C
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 273722
x-served-by: cache-iad-kiad7000160-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 22, 7028
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 6e41ed7eb64d1c5f468547b52665bde8ddb6c624
content-length: 4950
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_clsx_dist_clsx_m_js-node_modules_primer_react_node_modules_primer_octico-c56103-e91295e60abd.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_clsx_dist_clsx_m_js-node_modules_primer_react_node_modules_primer_octico-c56103-e91295e60abd.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 23 Jul 2024 20:26:52 GMT
etag: 0x8DCAB55C9B32E84
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 1466824
x-served-by: cache-iad-kiad7000030-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 23, 16466
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 21e3f073d017dcab5f3e812f2aba1e070da8707c
content-length: 7009
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_ActionList_index_js-c4c6e3be7790.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_primer_react_lib-esm_ActionList_index_js-c4c6e3be7790.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: text/css
last-modified: Fri, 02 Aug 2024 19:20:41 GMT
etag: 0x8DCB32832D35CCA
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 449513
x-served-by: cache-iad-kcgs7200168-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 18, 8675
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 905a40120c9a8f62fe52eec34ff54bbe0077f73d
content-length: 5040
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_ActionMenu_ActionMenu_js-node_modules_primer_react_-5b2420-048f91dcedb3.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_primer_react_lib-esm_ActionMenu_ActionMenu_js-node_modules_primer_react_-5b2420-048f91dcedb3.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: text/css
last-modified: Mon, 05 Aug 2024 16:06:17 GMT
etag: 0x8DCB56889BF04A0
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 449510
x-served-by: cache-iad-kcgs7200041-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 4, 7017
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: a695228209d368808bcb056763155cbfba891aa5
content-length: 5605
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Text_Text_js-node_modules_primer_react_lib-esm_Text-7845da-3bcd176ee601.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_primer_react_lib-esm_Text_Text_js-node_modules_primer_react_lib-esm_Text-7845da-3bcd176ee601.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Fri, 09 Aug 2024 23:34:20 GMT
etag: 0x8DCB8CBCB433963
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 33014
x-served-by: cache-iad-kcgs7200104-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 8, 832
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: b60dae6daea1d50208bdec4cfba943f0b00b5859
content-length: 13996
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_FormControl_FormControl_js-e73d967c1bb4.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_primer_react_lib-esm_FormControl_FormControl_js-e73d967c1bb4.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 23 Jul 2024 20:26:52 GMT
etag: 0x8DCAB55C9F23A95
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 1466825
x-served-by: cache-iad-kjyo7100027-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 24, 15686
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 4e584a652a6c3202978b216eda1562f9dac399a5
content-length: 7912
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_SelectPanel_SelectPanel_js-da4b9b447323.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_primer_react_lib-esm_SelectPanel_SelectPanel_js-da4b9b447323.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 30 Jul 2024 14:28:35 GMT
etag: 0x8DCB0A3E5A62F1C
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 273722
x-served-by: cache-iad-kiad7000160-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 22, 7027
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: bb4595060e3768f78beda76e5f2dd44de4296855
content-length: 4950
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Dialog_js-node_modules_primer_react_lib-esm_Feature-c10078-a365ebbc3112.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_primer_react_lib-esm_Dialog_js-node_modules_primer_react_lib-esm_Feature-c10078-a365ebbc3112.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 06 Aug 2024 20:29:19 GMT
etag: 0x8DCB65673021528
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 273722
x-served-by: cache-iad-kcgs7200073-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 23, 7018
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 9cd53e63238ae0466b7c24fe5ba230b6d17970de
content-length: 4499
-
GEThttps://github.githubassets.com/assets/ui_packages_react-core_create-browser-history_ts-ui_packages_safe-storage_safe-storage_ts-ui_-682c2c-7a1e99981675.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/ui_packages_react-core_create-browser-history_ts-ui_packages_safe-storage_safe-storage_ts-ui_-682c2c-7a1e99981675.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 23 Jul 2024 20:26:54 GMT
etag: 0x8DCAB55CAB9BA4E
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 1064054
x-served-by: cache-iad-kjyo7100061-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 23, 16399
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 7946e277a51c816b037d56864a131644c4b8d596
content-length: 4777
-
GEThttps://github.githubassets.com/assets/notifications-subscriptions-menu-7732df7cded3.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/notifications-subscriptions-menu-7732df7cded3.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Fri, 02 Aug 2024 22:13:06 GMT
etag: 0x8DCB34048D4C780
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 273722
x-served-by: cache-iad-kcgs7200055-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 22, 7148
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: a01b324d749fa417bf84708270fede9448d97b75
content-length: 140777
-
Remote address:185.199.109.154:443RequestGET /assets/react-lib-7b7b5264f6c1.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 23 Jul 2024 20:26:52 GMT
etag: 0x8DCAB55C9B32E84
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 1466824
x-served-by: cache-iad-kiad7000030-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 23, 16465
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: c5379cc29a1439c205c684b5478afab2d83e04b8
content-length: 7009
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_primer_octicons-react_di-b40d97-06881c63f955.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_primer_octicons-react_di-b40d97-06881c63f955.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Fri, 26 Jul 2024 02:43:54 GMT
etag: 0x8DCAD1CCA172CCD
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 942544
x-served-by: cache-iad-kiad7000058-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 78, 13711
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: ac60af90a87e8f02a2e3ebacd0568cd25c74659c
content-length: 3763
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Box_Box_js-55a9038b54f0.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_primer_react_lib-esm_Box_Box_js-55a9038b54f0.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Fri, 02 Aug 2024 22:13:06 GMT
etag: 0x8DCB34048F82D3E
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 273722
x-served-by: cache-iad-kiad7000136-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 23, 6984
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 48312270f967f1cdd6cdcc6f850e40fffd742dc9
content-length: 8526
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Button_Button_js-b0edbfb6a9e5.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_primer_react_lib-esm_Button_Button_js-b0edbfb6a9e5.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 23 Jul 2024 20:26:52 GMT
etag: 0x8DCAB55C9EF7E8A
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 1466825
x-served-by: cache-iad-kiad7000146-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 24, 15548
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 64332c9d5ecc0d9d91ea70e4f18da7f73b45eeb0
content-length: 3000
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_TooltipV2_Tooltip_js-4d5019830e3c.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_primer_react_lib-esm_TooltipV2_Tooltip_js-4d5019830e3c.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Thu, 08 Aug 2024 21:22:13 GMT
etag: 0x8DCB7F02C0A4B45
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 33014
x-served-by: cache-iad-kiad7000025-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 8, 825
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 3c3538ab08858dd4fb0a28d72b0fdf6fb329b293
content-length: 7833
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_clsx_dist_clsx_m_js-node_modules_primer_react_node_modules_primer_octico-c56103-e91295e60abd.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_clsx_dist_clsx_m_js-node_modules_primer_react_node_modules_primer_octico-c56103-e91295e60abd.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Wed, 07 Aug 2024 18:42:14 GMT
etag: 0x8DCB710A7C0EAB3
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 100372
x-served-by: cache-iad-kjyo7100105-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 52, 1474
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 1158adcd38971144dc64afcd6d5bcbe725fcd210
content-length: 8265
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_ActionList_index_js-c4c6e3be7790.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_primer_react_lib-esm_ActionList_index_js-c4c6e3be7790.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Fri, 26 Jul 2024 02:43:54 GMT
etag: 0x8DCAD1CCA172CCD
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 942544
x-served-by: cache-iad-kiad7000058-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 78, 13712
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 24247766c3f41a716a4b34adc8841b5ca0a360bb
content-length: 3763
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_ActionMenu_ActionMenu_js-node_modules_primer_react_-5b2420-048f91dcedb3.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_primer_react_lib-esm_ActionMenu_ActionMenu_js-node_modules_primer_react_-5b2420-048f91dcedb3.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 23 Jul 2024 20:26:50 GMT
etag: 0x8DCAB55C856ACEA
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 1466825
x-served-by: cache-iad-kjyo7100029-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 23, 17178
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 6bc42428e8ed5fde4e071ebecbe46000a10134ba
content-length: 54857
-
GEThttps://github.githubassets.com/assets/ui_packages_react-core_create-browser-history_ts-ui_packages_safe-storage_safe-storage_ts-ui_-682c2c-7a1e99981675.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/ui_packages_react-core_create-browser-history_ts-ui_packages_safe-storage_safe-storage_ts-ui_-682c2c-7a1e99981675.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 30 Jul 2024 14:28:35 GMT
etag: 0x8DCB0A3E5A6A3D2
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 273722
x-served-by: cache-iad-kjyo7100146-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 23, 5330
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 249949486fdd05b0588e531b9548a00b0d196327
content-length: 10680
-
Remote address:185.199.109.154:443RequestGET /assets/repository-992e95451f25.css HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: text/css,*/*;q=0.1
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: style
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Fri, 02 Aug 2024 22:13:06 GMT
etag: 0x8DCB34048F82D3E
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 273722
x-served-by: cache-iad-kiad7000136-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 23, 6985
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 3108e84c6c27c96e0dc7cfcb4b2d0edc4183713c
content-length: 8526
-
Remote address:185.199.109.154:443RequestGET /assets/code-34406d39e629.css HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: text/css,*/*;q=0.1
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: style
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Fri, 26 Jul 2024 02:43:54 GMT
etag: 0x8DCAD1CCA73B1CC
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 942544
x-served-by: cache-iad-kiad7000107-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 69, 12900
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: e42047348353ca2c57bfc25085af05557516645b
content-length: 5697
-
Remote address:185.199.109.154:443RequestGET /assets/wp-runtime-6ea6ec8e4769.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Mon, 05 Aug 2024 19:46:42 GMT
etag: 0x8DCB58754CF6A56
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 356517
x-served-by: cache-iad-kcgs7200158-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 20, 9126
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: cd70992c2a7262352e54a463644296d3abd68bbf
content-length: 4229
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_dompurify_dist_purify_js-89a69c248502.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_dompurify_dist_purify_js-89a69c248502.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Mon, 05 Aug 2024 19:46:42 GMT
etag: 0x8DCB58754CF6A56
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 356517
x-served-by: cache-iad-kcgs7200158-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 20, 9126
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: d530b04be5ed8d3b3177a5b2dc4751710db1e305
content-length: 4229
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_oddbird_popover-polyfill_dist_popover_js-56729c905fe2.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_oddbird_popover-polyfill_dist_popover_js-56729c905fe2.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Thu, 08 Aug 2024 20:27:41 GMT
etag: 0x8DCB7E88D666CAD
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 170984
x-served-by: cache-iad-kiad7000038-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 70, 3093
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 260b108bce76279f9575f97db34566dc118ce30f
content-length: 6237
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_smoothscroll-polyfill_di-75db2e-686488490524.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_smoothscroll-polyfill_di-75db2e-686488490524.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Fri, 02 Aug 2024 22:13:06 GMT
etag: 0x8DCB34048D4C780
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 273722
x-served-by: cache-iad-kcgs7200055-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 22, 7149
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: bcb167f9e9383ef3dee57f2a6c44da2dcecc2a35
content-length: 140777
-
Remote address:185.199.109.154:443RequestGET /assets/environment-cd098098ff2e.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Mon, 05 Aug 2024 19:46:36 GMT
etag: 0x8DCB587514BBE51
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 356517
x-served-by: cache-iad-kjyo7100173-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 20, 8588
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: cb777949085758a195657fb4ab39b80db869e714
content-length: 5255
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_github_selector-observer_dist_index_esm_js-f690fd9ae3d5.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_github_selector-observer_dist_index_esm_js-f690fd9ae3d5.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Mon, 05 Aug 2024 19:46:33 GMT
etag: 0x8DCB5874F4CB0D8
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 356517
x-served-by: cache-iad-kcgs7200163-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 20, 8668
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 53dd54b1eaa6bd1ddc9f629057f7890ae857eebc
content-length: 3595
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_primer_behaviors_dist_esm_focus-zone_js-c9086a4fb62b.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_primer_behaviors_dist_esm_focus-zone_js-c9086a4fb62b.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Wed, 24 Jul 2024 21:36:14 GMT
etag: 0x8DCAC28A4AA6B3B
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 1466825
x-served-by: cache-iad-kcgs7200164-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 24, 15688
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 6a385ade731899d2deb12569d24f252b3f2a992d
content-length: 5472
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_github_relative-time-element_dist_index_js-f9b958f5f2df.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_github_relative-time-element_dist_index_js-f9b958f5f2df.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 06 Aug 2024 18:51:29 GMT
etag: 0x8DCB648C82ABBBA
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 337636
x-served-by: cache-iad-kjyo7100030-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 76, 8342
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 4c3fd12be1cffc026ae956c1469be7430ece0bbc
content-length: 5015
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_primer_behaviors_dist_esm_anchored-position_js-node_modules_github_combo-aea225-dcf5851b6d7d.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_primer_behaviors_dist_esm_anchored-position_js-node_modules_github_combo-aea225-dcf5851b6d7d.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Wed, 07 Aug 2024 07:38:23 GMT
etag: 0x8DCB6B3EAF9522C
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 306662
x-served-by: cache-iad-kiad7000069-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 8, 7928
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 70b1f0a16b1fc17ca82e31bb68a6bf48811e9198
content-length: 7283
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_github_text-expander-element_dist_index_js-cd48220d74d5.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_github_text-expander-element_dist_index_js-cd48220d74d5.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Wed, 07 Aug 2024 17:14:38 GMT
etag: 0x8DCB7046B3F5B20
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 256144
x-served-by: cache-iad-kiad7000038-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 70, 6302
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 54dac307d0c83f6e0d0f02c69d273b92adf08e91
content-length: 21433
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_github_auto-complete-element_dist_index_js-node_modules_github_details-d-ed9a97-841122a1e9d4.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_github_auto-complete-element_dist_index_js-node_modules_github_details-d-ed9a97-841122a1e9d4.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Wed, 07 Aug 2024 07:38:20 GMT
etag: 0x8DCB6B3E8FFE23D
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 306662
x-served-by: cache-iad-kiad7000111-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 8, 7960
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 7281710a05362c3e15fa6f611039325f074dfe09
content-length: 11058
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_delegated-events_dist_in-3efda3-701acb69193f.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_delegated-events_dist_in-3efda3-701acb69193f.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Fri, 26 Jul 2024 02:43:54 GMT
etag: 0x8DCAD1CCA15C92E
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 942544
x-served-by: cache-iad-kiad7000050-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 84, 16269
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 743e8d8e960017911b621df5addaddaaefa95d67
content-length: 3320
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_github_filter-input-element_dist_index_js-node_modules_github_remote-inp-b7d8f4-2355048ff048.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_github_filter-input-element_dist_index_js-node_modules_github_remote-inp-b7d8f4-2355048ff048.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 23 Jul 2024 20:26:53 GMT
etag: 0x8DCAB55CA2435F4
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 1466825
x-served-by: cache-iad-kjyo7100033-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 23, 15509
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 6d1c91fad086301c68201c634a7a63fad9f7a2ce
content-length: 3070
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_github_catalyst_lib_index_js-node_modules_github_clipboard-copy-element_-782ca5-54763cd55b96.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_github_catalyst_lib_index_js-node_modules_github_clipboard-copy-element_-782ca5-54763cd55b96.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 23 Jul 2024 20:26:53 GMT
etag: 0x8DCAB55CA2435F4
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 1466825
x-served-by: cache-iad-kiad7000168-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 24, 15568
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: fefff9fe700bbfa6907a994b8cbcc183215315cd
content-length: 3284
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_github_file-attachment-element_dist_index_js-node_modules_primer_view-co-3959a9-5779869d7165.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_github_file-attachment-element_dist_index_js-node_modules_primer_view-co-3959a9-5779869d7165.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 23 Jul 2024 20:26:52 GMT
etag: 0x8DCAB55C9F1513E
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 1466825
x-served-by: cache-iad-kcgs7200102-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 24, 15602
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 44b583799d9dded9b7c142abf896442eb45905f4
content-length: 4939
-
GEThttps://github.githubassets.com/assets/app_assets_modules_github_onfocus_ts-ui_packages_trusted-types-policies_policy_ts-ui_packages-6fe316-9d50d6f10c3d.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/app_assets_modules_github_onfocus_ts-ui_packages_trusted-types-policies_policy_ts-ui_packages-6fe316-9d50d6f10c3d.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Wed, 31 Jul 2024 16:17:44 GMT
etag: 0x8DCB17C4F94A6D1
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 877800
x-served-by: cache-iad-kcgs7200173-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 52, 16682
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 183e440310431386b17c1e83167148264129435a
content-length: 4754
-
Remote address:185.199.109.154:443RequestGET /assets/github-elements-b5a402753026.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 23 Jul 2024 20:26:53 GMT
etag: 0x8DCAB55CA245CD8
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 813536
x-served-by: cache-iad-kiad7000129-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 23, 15644
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 7952ddc3c635f12735108461bae4ecfa16a541fa
content-length: 4301
-
Remote address:185.199.109.154:443RequestGET /assets/element-registry-2b312e7d31e7.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Mon, 05 Aug 2024 11:58:40 GMT
etag: 0x8DCB545F27BA72C
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 306662
x-served-by: cache-iad-kcgs7200055-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 8, 7915
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 0dcdf5a2c40c9fe480246a598879708f2f805e15
content-length: 6047
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_github_catalyst_lib_index_js-node_modules_github_hydro-analytics-client_-7901e7-dc88587c14ed.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_github_catalyst_lib_index_js-node_modules_github_hydro-analytics-client_-7901e7-dc88587c14ed.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 23 Jul 2024 20:26:53 GMT
etag: 0x8DCAB55CA1E2257
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 1466825
x-served-by: cache-iad-kiad7000080-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 40, 9928
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 8384bf7905126e2c65e5e910bdc373f7b10a1995
content-length: 2607
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_braintree_browser-detection_dist_browser-detection_js-node_modules_stack-68835d-a18220f1db8d.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_braintree_browser-detection_dist_browser-detection_js-node_modules_stack-68835d-a18220f1db8d.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 23 Jul 2024 20:26:54 GMT
etag: 0x8DCAB55CAB9BA4E
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 1064055
x-served-by: cache-iad-kjyo7100061-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 23, 16401
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 7521a7627ade24c20e851ce4d62484c75557204a
content-length: 4777
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_lit-html_lit-html_js-ce7225a304c5.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_lit-html_lit-html_js-ce7225a304c5.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 30 Jul 2024 14:28:35 GMT
etag: 0x8DCB0A3E5A62F1C
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 273723
x-served-by: cache-iad-kiad7000160-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 22, 7029
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 58c03fdb795dc741773a62488a06b1e2f24d68f2
content-length: 4950
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_morphdom_dist_morphdom-e-7c534c-f8a5485c982a.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_morphdom_dist_morphdom-e-7c534c-f8a5485c982a.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 30 Jul 2024 14:28:35 GMT
etag: 0x8DCB0A3E5A6A3D2
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 273723
x-served-by: cache-iad-kjyo7100146-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 23, 5331
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 0724f987ff3b1fda24d21d6f6e1dcc47943d7b65
content-length: 10680
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_github_turbo_dist_turbo_es2017-esm_js-858e043fcf76.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_github_turbo_dist_turbo_es2017-esm_js-858e043fcf76.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Fri, 26 Jul 2024 02:43:54 GMT
etag: 0x8DCAD1CCA73B1CC
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 942544
x-served-by: cache-iad-kiad7000107-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 69, 12901
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 2e9181ae7fae8cbf978f85ec9222062bdbe044d3
content-length: 5697
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-893f9f-6cf3320416b8.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-893f9f-6cf3320416b8.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 23 Jul 2024 20:26:53 GMT
etag: 0x8DCAB55CA2E15EB
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 1466824
x-served-by: cache-iad-kjyo7100041-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 23, 16120
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 3de62403ca24c0210eeea601efac6de05bf54e34
content-length: 18641
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_scroll-anchoring_dist_scroll-anchoring_esm_js-node_modules_github_hotkey-1a1d91-fa9f29a8514b.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_scroll-anchoring_dist_scroll-anchoring_esm_js-node_modules_github_hotkey-1a1d91-fa9f29a8514b.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 06 Aug 2024 18:51:29 GMT
etag: 0x8DCB648C80E530C
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 337637
x-served-by: cache-iad-kjyo7100038-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 76, 8544
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 2b7f526ff805eb3e85b5f39b59030df6f29f77e8
content-length: 5415
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_color-convert_index_js-0e07cc183eed.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_color-convert_index_js-0e07cc183eed.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 23 Jul 2024 20:26:52 GMT
etag: 0x8DCAB55C9B32E84
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 1439331
x-served-by: cache-iad-kjyo7100048-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 23, 15810
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 6fa1508b9ccd0e714286ddd3df905296df3c1ad2
content-length: 6921
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_primer_behaviors_dist_esm_dimensions_js-node_modules_github_jtml_lib_index_js-53b423ede32a.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_primer_behaviors_dist_esm_dimensions_js-node_modules_github_jtml_lib_index_js-53b423ede32a.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 23 Jul 2024 20:26:53 GMT
etag: 0x8DCAB55CA1D5FD6
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 1466825
x-served-by: cache-iad-kjyo7100087-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 24, 15673
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: cff64ca6056006314cdd1fa4e88026a2b193c775
content-length: 2385
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_github_session-resume_dist_index_js-node_modules_primer_behaviors_dist_e-da6ec6-5de3eedc1320.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_github_session-resume_dist_index_js-node_modules_primer_behaviors_dist_e-da6ec6-5de3eedc1320.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 23 Jul 2024 20:26:53 GMT
etag: 0x8DCAB55CA245CD8
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 1466825
x-served-by: cache-iad-kiad7000173-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 23, 15674
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 29e904a3a484a256add4977c5362dcac7ff42bf0
content-length: 3911
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_github_quote-selection_dist_index_js-node_modules_github_textarea-autosi-9e0349-ab4976fc78a6.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_github_quote-selection_dist_index_js-node_modules_github_textarea-autosi-9e0349-ab4976fc78a6.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 23 Jul 2024 20:26:52 GMT
etag: 0x8DCAB55C9E02677
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 1466825
x-served-by: cache-iad-kjyo7100169-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 24, 15680
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 2d4168bfcac944c432e92d81370ebe3e88baf93a
content-length: 4852
-
GEThttps://github.githubassets.com/assets/ui_packages_updatable-content_updatable-content_ts-e15463ecf7e6.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/ui_packages_updatable-content_updatable-content_ts-e15463ecf7e6.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 23 Jul 2024 20:26:54 GMT
etag: 0x8DCAB55CAE50665
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 1069260
x-served-by: cache-iad-kcgs7200053-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 24, 15689
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 55f15961c6240e119902aa28a497e5b514ecbfc4
content-length: 4582
-
GEThttps://github.githubassets.com/assets/app_assets_modules_github_behaviors_task-list_ts-app_assets_modules_github_onfocus_ts-app_ass-421cec-f0e1d31bff9a.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/app_assets_modules_github_behaviors_task-list_ts-app_assets_modules_github_onfocus_ts-app_ass-421cec-f0e1d31bff9a.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 23 Jul 2024 20:26:53 GMT
etag: 0x8DCAB55CA1E2257
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 1466824
x-served-by: cache-iad-kcgs7200153-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 24, 15697
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 90c0d246a2f83919e615422fa0226df62aa95ed7
content-length: 3816
-
GEThttps://github.githubassets.com/assets/app_assets_modules_github_sticky-scroll-into-view_ts-112600808cf9.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/app_assets_modules_github_sticky-scroll-into-view_ts-112600808cf9.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 23 Jul 2024 20:26:53 GMT
etag: 0x8DCAB55CA6B9D0E
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 1466825
x-served-by: cache-iad-kcgs7200046-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 24, 15733
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 10e4b560da1db55d6da3211211e27cea31d58e49
content-length: 3001
-
GEThttps://github.githubassets.com/assets/app_assets_modules_github_behaviors_ajax-error_ts-app_assets_modules_github_behaviors_include-467754-8b1a4442f9b3.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/app_assets_modules_github_behaviors_ajax-error_ts-app_assets_modules_github_behaviors_include-467754-8b1a4442f9b3.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Mon, 05 Aug 2024 19:46:41 GMT
etag: 0x8DCB58753C2D204
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 356517
x-served-by: cache-iad-kiad7000101-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 139, 5571
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: cfc980db6d848c5cd95b326e18b653996d5aa04b
content-length: 20072
-
GEThttps://github.githubassets.com/assets/app_assets_modules_github_behaviors_commenting_edit_ts-app_assets_modules_github_behaviors_ht-83c235-4accd4baf37d.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/app_assets_modules_github_behaviors_commenting_edit_ts-app_assets_modules_github_behaviors_ht-83c235-4accd4baf37d.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Mon, 05 Aug 2024 19:46:35 GMT
etag: 0x8DCB5875099B15B
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 356517
x-served-by: cache-iad-kcgs7200030-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 85, 6362
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: fd912a990d9188b8fda6c90d7733d164f7210b36
content-length: 238
-
GEThttps://github.githubassets.com/assets/app_assets_modules_github_blob-anchor_ts-app_assets_modules_github_filter-sort_ts-app_assets_-6deafe-fc95155e233a.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/app_assets_modules_github_blob-anchor_ts-app_assets_modules_github_filter-sort_ts-app_assets_-6deafe-fc95155e233a.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Fri, 02 Aug 2024 22:13:06 GMT
etag: 0x8DCB34048D4C780
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 273723
x-served-by: cache-iad-kcgs7200055-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 22, 7150
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 784b92493406ce12c81b8dc03e4fbfad642fa760
content-length: 140777
-
Remote address:185.199.109.154:443RequestGET /assets/behaviors-d0c6b90f51b9.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Mon, 05 Aug 2024 19:46:33 GMT
etag: 0x8DCB5874F4B0508
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 356517
x-served-by: cache-iad-kjyo7100032-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 17, 6775
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 9a840e7033194d4bcd36655b30d964bb52830113
content-length: 3258
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_delegated-events_dist_index_js-node_modules_github_catalyst_lib_index_js-06ff531-bf7e5a3732fd.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_delegated-events_dist_index_js-node_modules_github_catalyst_lib_index_js-06ff531-bf7e5a3732fd.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 06 Aug 2024 23:17:40 GMT
etag: 0x8DCB66DF7994741
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 182286
x-served-by: cache-iad-kiad7000033-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 68, 2675
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: b911d641901664dc0135867cee38e3e240f77cbf
content-length: 10211
-
Remote address:185.199.109.154:443RequestGET /assets/notifications-global-3ddac678adaf.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 06 Aug 2024 18:51:29 GMT
etag: 0x8DCB648C82F9865
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 337630
x-served-by: cache-iad-kcgs7200168-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 56, 5229
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 48fc5a91b8588718d1e57afa8b9826f052c7e7ab
content-length: 8056
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_virtualized-list_es_index_js-node_modules_github_template-parts_lib_index_js-96453a51f920.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_virtualized-list_es_index_js-node_modules_github_template-parts_lib_index_js-96453a51f920.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 06 Aug 2024 18:51:29 GMT
etag: 0x8DCB648C812E1CB
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 337616
x-served-by: cache-iad-kcgs7200062-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 50, 5406
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: f20a226c4e5e19cb3f19e9f565a3f2cf80ceccbf
content-length: 17549
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-e53a3f-62113d33abd1.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-e53a3f-62113d33abd1.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Mon, 05 Aug 2024 19:46:33 GMT
etag: 0x8DCB5874F4AB741
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 356517
x-served-by: cache-iad-kcgs7200159-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 84, 6258
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: ae4ed7a606ce6c7e4ac0b0015e7d6da328e54e96
content-length: 3272
-
GEThttps://github.githubassets.com/assets/app_assets_modules_github_ref-selector_ts-00df584d9e79.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/app_assets_modules_github_ref-selector_ts-00df584d9e79.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Mon, 05 Aug 2024 19:46:34 GMT
etag: 0x8DCB5874FAA1F85
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 356517
x-served-by: cache-iad-kcgs7200045-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 20, 8970
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: da1c82d21fa08a52ff80f03b5ace5623d7ad6ec6
content-length: 58566
-
Remote address:185.199.109.154:443RequestGET /assets/codespaces-1f3309c400b4.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Fri, 02 Aug 2024 22:13:06 GMT
etag: 0x8DCB34048F82D3E
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 273723
x-served-by: cache-iad-kiad7000136-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 23, 6986
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 4d1ebc15db8112fb09a0004bc60368dcf6e3a757
content-length: 8526
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_github_file-attachment-element_dist_index_js-node_modules_github_filter--0879fe-bcfcfd976be7.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_github_file-attachment-element_dist_index_js-node_modules_github_filter--0879fe-bcfcfd976be7.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Mon, 05 Aug 2024 19:46:33 GMT
etag: 0x8DCB5874F6AEC62
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 356517
x-served-by: cache-iad-kjyo7100078-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 20, 8682
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: c86264b74de4f8940c525eb06e73978643fcff8e
content-length: 3364
-
GEThttps://github.githubassets.com/assets/app_assets_modules_github_repositories_get-repo-element_ts-4fc152f40452.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/app_assets_modules_github_repositories_get-repo-element_ts-4fc152f40452.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 23 Jul 2024 20:26:52 GMT
etag: 0x8DCAB55C9E07445
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 1053952
x-served-by: cache-iad-kiad7000133-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 1653, 15667
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 54116aa22880ebebb14870892cfe237f5825ba98
content-length: 4125
-
Remote address:185.199.109.154:443RequestGET /assets/repositories-22e89d7b03b0.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 23 Jul 2024 20:26:53 GMT
etag: 0x8DCAB55CA265673
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 1329690
x-served-by: cache-iad-kcgs7200156-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 24, 15868
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 8fc5ab50a8e3df1fe17808c134fada8a46273939
content-length: 9804
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_github_catalyst_lib_inde-dbbea9-e73b311a14f1.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_github_catalyst_lib_inde-dbbea9-e73b311a14f1.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Mon, 05 Aug 2024 19:46:33 GMT
etag: 0x8DCB5874F49A6FE
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 356517
x-served-by: cache-iad-kcgs7200149-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 20, 8675
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: ada81729873898149daeba81328addd74f7c292d
content-length: 5032
-
Remote address:185.199.109.154:443RequestGET /assets/code-menu-a8d08997ac4f.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 06 Aug 2024 20:29:19 GMT
etag: 0x8DCB65673021528
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 273723
x-served-by: cache-iad-kcgs7200073-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 23, 7020
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 49d6e585f14c64dc3f5da970c964e1c7592afcb3
content-length: 4499
-
Remote address:185.199.109.154:443RequestGET /assets/react-lib-7b7b5264f6c1.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Mon, 05 Aug 2024 19:46:39 GMT
etag: 0x8DCB58752FDC79F
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 356517
x-served-by: cache-iad-kiad7000035-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 20, 8709
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 2fcc90c07a9b0505c1a5150e2ed464cbfe4c4008
content-length: 3088
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_primer_octicons-react_di-b40d97-06881c63f955.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_primer_octicons-react_di-b40d97-06881c63f955.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Fri, 26 Jul 2024 02:43:54 GMT
etag: 0x8DCAD1CCA71DF1B
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 942543
x-served-by: cache-iad-kjyo7100043-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 70, 13112
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: ca02fd3d1ba9e39c55f0eda56d4cbfe9f57fb291
content-length: 4233
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Box_Box_js-55a9038b54f0.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_primer_react_lib-esm_Box_Box_js-55a9038b54f0.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Mon, 05 Aug 2024 19:46:33 GMT
etag: 0x8DCB5874F4A4292
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 356517
x-served-by: cache-iad-kcgs7200022-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 20, 8700
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 8dbf5e6185861472ed9175beddc3b12311369898
content-length: 3079
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Button_Button_js-b0edbfb6a9e5.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_primer_react_lib-esm_Button_Button_js-b0edbfb6a9e5.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Wed, 07 Aug 2024 18:42:14 GMT
etag: 0x8DCB710A7C0EAB3
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 100372
x-served-by: cache-iad-kjyo7100105-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 52, 1475
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 8bdb5e6fa938998992cb17e8c97a6d1e8d979c8f
content-length: 8265
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_TooltipV2_Tooltip_js-4d5019830e3c.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_primer_react_lib-esm_TooltipV2_Tooltip_js-4d5019830e3c.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 23 Jul 2024 20:26:50 GMT
etag: 0x8DCAB55C856ACEA
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 1466825
x-served-by: cache-iad-kjyo7100029-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 23, 17179
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 3850532322a0e4fb053e8f95f34ff9b67ee2d6bc
content-length: 54857
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_clsx_dist_clsx_m_js-node_modules_primer_react_node_modules_primer_octico-c56103-e91295e60abd.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_clsx_dist_clsx_m_js-node_modules_primer_react_node_modules_primer_octico-c56103-e91295e60abd.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Mon, 05 Aug 2024 19:46:42 GMT
etag: 0x8DCB58754D2266A
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 356517
x-served-by: cache-iad-kjyo7100077-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 20, 8797
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: a23a7b0233ce0f500c7e7986fec3de31a171cdd0
content-length: 7745
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_ActionList_index_js-c4c6e3be7790.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_primer_react_lib-esm_ActionList_index_js-c4c6e3be7790.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Fri, 26 Jul 2024 02:43:54 GMT
etag: 0x8DCAD1CCA172CCD
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 942544
x-served-by: cache-iad-kiad7000058-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 78, 13713
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 73275148f094b75b9ba060c36003482955a11c18
content-length: 3763
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_ActionMenu_ActionMenu_js-node_modules_primer_react_-5b2420-048f91dcedb3.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_primer_react_lib-esm_ActionMenu_ActionMenu_js-node_modules_primer_react_-5b2420-048f91dcedb3.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Mon, 05 Aug 2024 19:46:33 GMT
etag: 0x8DCB5874F4CFEA0
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 356517
x-served-by: cache-iad-kjyo7100054-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 20, 8702
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: f2914cffe70b46ea512262ca3081b20e6278f1a3
content-length: 5693
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Text_Text_js-node_modules_primer_react_lib-esm_Text-7845da-3bcd176ee601.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_primer_react_lib-esm_Text_Text_js-node_modules_primer_react_lib-esm_Text-7845da-3bcd176ee601.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Fri, 26 Jul 2024 02:43:53 GMT
etag: 0x8DCAD1CC9EFA756
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 942544
x-served-by: cache-iad-kcgs7200068-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 84, 16410
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 6b4184d3d920a6d0e876ed66025e1d1da3e5b905
content-length: 3026
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_FormControl_FormControl_js-e73d967c1bb4.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_primer_react_lib-esm_FormControl_FormControl_js-e73d967c1bb4.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 23 Jul 2024 20:26:52 GMT
etag: 0x8DCAB55C9B32E84
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 1466824
x-served-by: cache-iad-kiad7000030-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 23, 16467
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 02c91554a82e21cebb82c5fd1306fb1e56eeed43
content-length: 7009
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_SelectPanel_SelectPanel_js-da4b9b447323.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_primer_react_lib-esm_SelectPanel_SelectPanel_js-da4b9b447323.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Mon, 05 Aug 2024 19:46:33 GMT
etag: 0x8DCB5874F49A6FE
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 356517
x-served-by: cache-iad-kcgs7200065-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 20, 8777
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 726ede5084bc3489ba0af51ed3e164df7a6e5e1e
content-length: 2401
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Dialog_js-node_modules_primer_react_lib-esm_Feature-c10078-a365ebbc3112.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_primer_react_lib-esm_Dialog_js-node_modules_primer_react_lib-esm_Feature-c10078-a365ebbc3112.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 23 Jul 2024 20:26:54 GMT
etag: 0x8DCAB55CAE8ABD4
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 1331637
x-served-by: cache-iad-kiad7000040-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 23, 12052
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: c483cf2676da391338a5f0d2485c02a3e7847a5c
content-length: 3888
-
GEThttps://github.githubassets.com/assets/ui_packages_react-core_create-browser-history_ts-ui_packages_safe-storage_safe-storage_ts-ui_-682c2c-7a1e99981675.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/ui_packages_react-core_create-browser-history_ts-ui_packages_safe-storage_safe-storage_ts-ui_-682c2c-7a1e99981675.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: text/css
last-modified: Thu, 20 Jun 2024 15:04:38 GMT
etag: 0x8DC913A4DF23CAF
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 1953595
x-served-by: cache-iad-kcgs7200155-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 121, 14826
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: dfd63d9d6ab73aecb444b357d436dbe8f3fae616
content-length: 6751
-
GEThttps://github.githubassets.com/assets/notifications-subscriptions-menu-7732df7cded3.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/notifications-subscriptions-menu-7732df7cded3.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: text/css
last-modified: Thu, 01 Aug 2024 23:26:57 GMT
etag: 0x8DCB2816FEAB4CD
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 256144
x-served-by: cache-iad-kjyo7100146-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 71, 6203
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 99e947c46251a1672c33d16a90952d348c65b32a
content-length: 38563
-
GEThttps://github.githubassets.com/assets/notifications-subscriptions-menu.572fff1cb5c3caef1ac9.module.cssfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/notifications-subscriptions-menu.572fff1cb5c3caef1ac9.module.css HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: text/css,*/*;q=0.1
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: style
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: text/css
last-modified: Fri, 09 Aug 2024 15:46:49 GMT
etag: 0x8DCB88A7B9874BB
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 100384
x-served-by: cache-iad-kjyo7100157-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 41, 1916
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: e1d4ad67acc01cdbf3728271bb39c4c4cd22d7e0
content-length: 38576
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Dialog_Dialog_js-node_modules_primer_react_lib-esm_-bd7638-349234c98e00.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_primer_react_lib-esm_Dialog_Dialog_js-node_modules_primer_react_lib-esm_-bd7638-349234c98e00.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: text/css
last-modified: Mon, 05 Aug 2024 19:14:31 GMT
etag: 0x8DCB582D5828916
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 439089
x-served-by: cache-iad-kjyo7100065-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 119, 10724
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 210a2e5564f9439f0a778e1189d1d19f059041b8
content-length: 21659
-
Remote address:185.199.109.154:443RequestGET /assets/keyboard-shortcuts-dialog-50744f45bf65.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 23 Jul 2024 20:26:53 GMT
etag: 0x8DCAB55CA240F10
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 1265264
x-served-by: cache-iad-kcgs7200022-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 4, 13151
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 24df24df5ed352889bd6bbc3341e58661414a555
content-length: 5219
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-94fd67-9a621ecbf672.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-94fd67-9a621ecbf672.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Mon, 05 Aug 2024 19:46:42 GMT
etag: 0x8DCB58754CF6A56
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 356517
x-served-by: cache-iad-kcgs7200158-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 20, 9127
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: ef69dd26af55e33caea305f276389cf5173459a1
content-length: 4229
-
Remote address:185.199.109.154:443RequestGET /assets/sessions-b81e688feb0f.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Wed, 07 Aug 2024 18:49:10 GMT
etag: 0x8DCB7119FDB03C9
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 100384
x-served-by: cache-iad-kjyo7100125-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 40, 1964
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 852db4cad4e14166110b48039cdc796062c0b297
content-length: 12566
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_react-router-dom_dist_index_js-c5568c29d405.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_react-router-dom_dist_index_js-c5568c29d405.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Wed, 07 Aug 2024 18:49:05 GMT
etag: 0x8DCB7119D09B1D3
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 100384
x-served-by: cache-iad-kjyo7100022-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 40, 1959
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 5c05d1c54be06d4ec62ee3e6a64253efb6586927
content-length: 9930
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_UnderlineNav_index_js-a48891f88da5.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_primer_react_lib-esm_UnderlineNav_index_js-a48891f88da5.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: text/css
last-modified: Fri, 21 Jun 2024 00:59:32 GMT
etag: 0x8DC918D6979838D
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 2809567
x-served-by: cache-iad-kiad7000026-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 42, 11807
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 39f64dd4968e189eb167049c917fc77de6216645
content-length: 476
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_BranchName_BranchName_js-node_modules_primer_react_-5ab9a5-f0ab9737bc0f.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_primer_react_lib-esm_BranchName_BranchName_js-node_modules_primer_react_-5ab9a5-f0ab9737bc0f.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Thu, 08 Aug 2024 20:27:41 GMT
etag: 0x8DCB7E88D666CAD
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 170984
x-served-by: cache-iad-kiad7000038-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 70, 3094
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 7636c81f41707fa8be47498df54ed3dfacb3c80d
content-length: 6237
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_primer_behaviors_dist_esm_anchored-position_js-node_modules_primer_react-463b8d-8ea935c80ae4.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_primer_behaviors_dist_esm_anchored-position_js-node_modules_primer_react-463b8d-8ea935c80ae4.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Mon, 05 Aug 2024 19:46:41 GMT
etag: 0x8DCB5875408B427
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 356395
x-served-by: cache-iad-kjyo7100128-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 22, 6403
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 1a744308f967dfde505af79527041b568ccb617e
content-length: 4078
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_AvatarStack_AvatarStack_js-node_modules_primer_reac-721fcb-c60889ba2d72.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_primer_react_lib-esm_AvatarStack_AvatarStack_js-node_modules_primer_reac-721fcb-c60889ba2d72.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Mon, 29 Jul 2024 23:43:07 GMT
etag: 0x8DCB02832D85A61
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 942541
x-served-by: cache-iad-kjyo7100127-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 54, 2060
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 17dcb1ae0a15fced799973575239c94cccae05b5
content-length: 3596
-
Remote address:185.199.109.154:443RequestGET /assets/ui_packages_paths_index_ts-a5d19f5b3108.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Fri, 26 Jul 2024 02:43:54 GMT
etag: 0x8DCAD1CCA6E6090
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 942538
x-served-by: cache-iad-kjyo7100115-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 57, 9143
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 2d685a88ab5849f706a52758e6d1a7aa82466993
content-length: 3907
-
GEThttps://github.githubassets.com/assets/ui_packages_ref-selector_RefSelector_tsx-a811a847f4e3.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/ui_packages_ref-selector_RefSelector_tsx-a811a847f4e3.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 23 Jul 2024 20:26:54 GMT
etag: 0x8DCAB55CAE5A1FC
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 1466823
x-served-by: cache-iad-kiad7000156-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 24, 9698
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: ed1d9997817c94ce0497577322885d32aaa6fa74
content-length: 3475
-
GEThttps://github.githubassets.com/assets/ui_packages_code-view-shared_hooks_use-canonical-object_ts-ui_packages_code-view-shared_hooks-d56ca1-c6b3e84f88d7.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/ui_packages_code-view-shared_hooks_use-canonical-object_ts-ui_packages_code-view-shared_hooks-d56ca1-c6b3e84f88d7.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Wed, 07 Aug 2024 07:38:24 GMT
etag: 0x8DCB6B3EB3F5B22
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 306638
x-served-by: cache-iad-kcgs7200177-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 1, 4652
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: a8a5ec34b6a675934f77c621485b760776dc676b
content-length: 14537
-
GEThttps://github.githubassets.com/assets/ui_packages_code-view-shared_hooks_use-file-page-payload_ts-ui_packages_copy-to-clipboard_ind-7aee8b-736b82387f3f.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/ui_packages_code-view-shared_hooks_use-file-page-payload_ts-ui_packages_copy-to-clipboard_ind-7aee8b-736b82387f3f.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: text/css
last-modified: Thu, 20 Jun 2024 15:04:40 GMT
etag: 0x8DC913A4F6C3759
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 3477000
x-served-by: cache-iad-kiad7000133-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 100, 14946
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: b4f519a28d76f6c5be1be0489d5ef5897637b632
content-length: 1554
-
Remote address:185.199.109.154:443RequestGET /assets/repos-overview-8b42a5904539.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Thu, 08 Aug 2024 20:27:42 GMT
etag: 0x8DCB7E88DFF41C3
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 170984
x-served-by: cache-iad-kcgs7200160-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 64, 2337
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 1a27893055bce43dd415335697537fde27b5a500
content-length: 23851
-
GEThttps://github.githubassets.com/assets/repos-overview.47cf64b9ae0677ccb350.module.cssfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/repos-overview.47cf64b9ae0677ccb350.module.css HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: text/css,*/*;q=0.1
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: style
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: text/css
last-modified: Mon, 17 Jun 2024 21:24:12 GMT
etag: 0x8DC8F13D5428FE0
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 3490060
x-served-by: cache-iad-kcgs7200145-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 22, 8395
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 91ffd61551152106b5bfd2319984cdb267e5615a
content-length: 220
-
Remote address:185.199.109.154:443RequestGET /assets/dark-6b1e37da2254.css HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: text/css,*/*;q=0.1
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: style
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Mon, 05 Aug 2024 19:46:42 GMT
etag: 0x8DCB58754CECECA
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 356517
x-served-by: cache-iad-kiad7000167-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 19, 7991
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: cfc07be1b71573ba10c099e65f78f8995c24cc5f
content-length: 4751
-
Remote address:185.199.109.154:443RequestGET /assets/primer-primitives-8500c2c7ce5f.css HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: text/css,*/*;q=0.1
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: style
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Thu, 08 Aug 2024 20:27:43 GMT
etag: 0x8DCB7E88E8BC8A6
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 171005
x-served-by: cache-iad-kjyo7100095-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 72, 2603
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 1bc382669d2086e0524330fd40051522c34df9a6
content-length: 14927
-
Remote address:185.199.109.154:443RequestGET /assets/primer-bbda46ca867f.css HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: text/css,*/*;q=0.1
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: style
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Mon, 05 Aug 2024 19:46:42 GMT
etag: 0x8DCB58754D0EF45
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 356517
x-served-by: cache-iad-kiad7000029-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 96, 5599
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: bf987ab01182fb482fa7903663c8eed03f7f77f5
content-length: 6189
-
Remote address:185.199.109.154:443RequestGET /assets/global-6f01bc73955b.css HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: text/css,*/*;q=0.1
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: style
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Wed, 07 Aug 2024 17:56:46 GMT
etag: 0x8DCB70A4E081B01
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 182276
x-served-by: cache-iad-kjyo7100175-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 58, 2764
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 6a7494fa482adffc3eda4039e26d45d926d2373a
content-length: 6946
-
Remote address:185.199.109.154:443RequestGET /assets/github-4bf1effa8118.css HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: text/css,*/*;q=0.1
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: style
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Mon, 29 Jul 2024 23:43:07 GMT
etag: 0x8DCB02832BDC448
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
age: 942541
x-served-by: cache-iad-kiad7000125-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 52, 2074
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 9369b16bfcbaa196670b5c06009e856507967783
content-length: 6575
-
GEThttps://github.githubassets.com/assets/chunk-vendors-node_modules_primer_behaviors_dist_esm_anchored-position_js-node_modules_github_memoi-4b0bd5-b63d4c76d546.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/chunk-vendors-node_modules_primer_behaviors_dist_esm_anchored-position_js-node_modules_github_memoi-4b0bd5-b63d4c76d546.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 23 Jul 2024 20:26:44 GMT
etag: 0x8DCAB55C4C09E55
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:03 GMT
age: 1466825
x-served-by: cache-iad-kcgs7200172-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 3757, 14839
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 905826c6f3cd4a993a5987cfffe0b44ef36eda94
content-length: 3734
-
GEThttps://github.githubassets.com/assets/chunk-app_components_primer_experimental_select-panel-element_ts-72e65e1a9e50.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/chunk-app_components_primer_experimental_select-panel-element_ts-72e65e1a9e50.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 06 Aug 2024 18:04:05 GMT
etag: 0x8DCB64229585E43
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:03 GMT
age: 356518
x-served-by: cache-iad-kcgs7200042-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 20, 8179
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 60ee8eec1c0d78158775693176747e78c3e364bb
content-length: 5556
-
GEThttps://github.githubassets.com/assets/chunk-app_components_primer_experimental_toggle-switch-element_ts-1077a1578034.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/chunk-app_components_primer_experimental_toggle-switch-element_ts-1077a1578034.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 06 Aug 2024 18:51:24 GMT
etag: 0x8DCB648C553CC3E
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:03 GMT
age: 337637
x-served-by: cache-iad-kcgs7200066-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 72, 7475
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: cefe7c8190454528fe1b179866c0067b99763e71
content-length: 5941
-
GEThttps://github.githubassets.com/assets/chunk-vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_stacktrace-parser_dist_s-04fb8f0-1620a267eab5.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/chunk-vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_stacktrace-parser_dist_s-04fb8f0-1620a267eab5.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Mon, 05 Aug 2024 19:46:34 GMT
etag: 0x8DCB5874FFF3321
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:03 GMT
age: 356518
x-served-by: cache-iad-kiad7000047-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 19, 7653
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 74ebe4b027ff098c84b97f93a40b6022042b3eef
content-length: 5076
-
GEThttps://github.githubassets.com/assets/chunk-app_components_search_custom-scopes-element_ts-3a568db843b2.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/chunk-app_components_search_custom-scopes-element_ts-3a568db843b2.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Wed, 07 Aug 2024 11:58:07 GMT
etag: 0x8DCB6D833BE9C72
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:03 GMT
age: 123559
x-served-by: cache-iad-kiad7000101-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 15, 2686
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 3c36c0bd2f28f44363fc90dcd74a9153de9f7f72
content-length: 23705
-
GEThttps://github.githubassets.com/assets/ui_packages_query-builder-element_query-builder-element_ts-ui_packages_safe-storage_safe-storage_ts-90c65e701241.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/ui_packages_query-builder-element_query-builder-element_ts-ui_packages_safe-storage_safe-storage_ts-90c65e701241.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Mon, 05 Aug 2024 19:46:34 GMT
etag: 0x8DCB58750224B38
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:03 GMT
age: 356518
x-served-by: cache-iad-kjyo7100141-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 19, 8117
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 3b3ea28dfa7ffff61ac7cf3d1b976f5628406513
content-length: 543
-
GEThttps://github.githubassets.com/assets/chunk-app_assets_modules_github_jump-to_ts-d6aa6256bf8e.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/chunk-app_assets_modules_github_jump-to_ts-d6aa6256bf8e.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Thu, 08 Aug 2024 16:49:48 GMT
etag: 0x8DCB7CA1D5BA687
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:03 GMT
age: 185761
x-served-by: cache-iad-kjyo7100130-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 102, 3834
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: ca3abf66f8f82893e601bd6fc55167521958bc4d
content-length: 9292
-
GEThttps://github.githubassets.com/assets/chunk-app_components_search_qbsearch-input-element_ts-ui_packages_form-utils_form-utils_ts-ui_packa-cd5fe9-2993ae65b9a8.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/chunk-app_components_search_qbsearch-input-element_ts-ui_packages_form-utils_form-utils_ts-ui_packa-cd5fe9-2993ae65b9a8.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Mon, 05 Aug 2024 19:46:35 GMT
etag: 0x8DCB587503F7682
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:03 GMT
age: 356518
x-served-by: cache-iad-kjyo7100172-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 19, 7698
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: ad2152bcc7a697da9b44bfa139926786b1886278
content-length: 6620
-
GEThttps://github.githubassets.com/assets/chunk-ui_packages_cookie-consent-link-element_cookie-consent-link-element_ts-a30501e51b3a.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/chunk-ui_packages_cookie-consent-link-element_cookie-consent-link-element_ts-a30501e51b3a.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Mon, 05 Aug 2024 19:46:35 GMT
etag: 0x8DCB587506CB977
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:03 GMT
age: 356518
x-served-by: cache-iad-kiad7000124-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 19, 8095
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 134e2a3b0890b246eb5797f5a29658e1a4903600
content-length: 2950
-
GEThttps://github.githubassets.com/assets/chunk-ui_packages_ghcc-consent-element_ghcc-consent-element_ts-b8a0d9bc2ed9.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/chunk-ui_packages_ghcc-consent-element_ghcc-consent-element_ts-b8a0d9bc2ed9.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Mon, 05 Aug 2024 19:46:35 GMT
etag: 0x8DCB587506ABFDE
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:03 GMT
age: 356514
x-served-by: cache-iad-kiad7000113-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 133, 4644
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 7202f6f76b979ac7c053185d61c9b6ace7a24519
content-length: 5220
-
GEThttps://github.githubassets.com/assets/chunk-node_modules_github_mini-throttle_dist_index_js-ui_packages_trusted-types-policies_policy_ts--77a9d9-5febadf19308.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/chunk-node_modules_github_mini-throttle_dist_index_js-ui_packages_trusted-types-policies_policy_ts--77a9d9-5febadf19308.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Mon, 05 Aug 2024 19:46:35 GMT
etag: 0x8DCB5875084BA53
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:03 GMT
age: 356518
x-served-by: cache-iad-kcgs7200147-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 20, 8099
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 88b23c56c6c7ed00e2ee53aafb1646459172479a
content-length: 2790
-
GEThttps://github.githubassets.com/assets/chunk-ui_packages_webauthn-get-element_webauthn-get-element_ts-eba7ee3409f2.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/chunk-ui_packages_webauthn-get-element_webauthn-get-element_ts-eba7ee3409f2.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 06 Aug 2024 21:39:04 GMT
etag: 0x8DCB66031D4ABE1
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:03 GMT
age: 337637
x-served-by: cache-iad-kcgs7200071-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 74, 7454
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 2a81c637a3cee5c36064321679f43e04f63faa6d
content-length: 9899
-
GEThttps://github.githubassets.com/assets/chunk-ui_packages_code-view-shared_components_files-search_FileResultsList_tsx-2cd71482a783.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/chunk-ui_packages_code-view-shared_components_files-search_FileResultsList_tsx-2cd71482a783.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Mon, 05 Aug 2024 19:46:35 GMT
etag: 0x8DCB587506DC9BB
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:03 GMT
age: 356518
x-served-by: cache-iad-kjyo7100167-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 20, 8101
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: ecdac03b1d9dd9970d78ede633c435ed132425b6
content-length: 3184
-
Remote address:185.199.109.154:443RequestGET /favicons/favicon.svg HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
last-modified: Thu, 19 Oct 2023 22:56:36 GMT
etag: 0x8DBD0F6A5D50EA4
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:04 GMT
age: 70
x-served-by: cache-iad-kiad7000081-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 1517404, 1
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 2e26ce4f80b8c66579374b171eabf1345b0ff4af
content-length: 959
-
GEThttps://github.githubassets.com/assets/chunk-vendors-node_modules_consent-banner_dist_consent-banner_js-d06d275cbddc.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/chunk-vendors-node_modules_consent-banner_dist_consent-banner_js-d06d275cbddc.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 23 Jul 2024 20:26:43 GMT
etag: 0x8DCAB55C4A09029
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:04 GMT
age: 1466825
x-served-by: cache-iad-kcgs7200110-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 23, 14394
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 687fcb1faf6bd8503b76f354325aef3ce1497987
content-length: 9412
-
Remote address:185.199.109.154:443RequestGET /assets/primer-bbda46ca867f.css HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: text/css,*/*;q=0.1
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: style
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: text/css
last-modified: Fri, 09 Aug 2024 15:46:49 GMT
etag: 0x8DCB88A7B9874BB
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:21 GMT
age: 100403
x-served-by: cache-iad-kjyo7100157-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 41, 1918
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 081c3d277d7d2848bf0b2a81ec664589210deb46
content-length: 38576
-
Remote address:185.199.109.154:443RequestGET /assets/global-6f01bc73955b.css HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: text/css,*/*;q=0.1
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: style
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Fri, 26 Jul 2024 02:43:54 GMT
etag: 0x8DCAD1CCA43FDD0
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:22 GMT
age: 942563
x-served-by: cache-iad-kjyo7100091-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 48, 4989
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 78e2145b50a7aacd206761bfa5083522681b373f
content-length: 4904
-
GEThttps://github.githubassets.com/assets/app_assets_modules_github_blob-anchor_ts-app_assets_modules_github_filter-sort_ts-app_assets_-6deafe-fc95155e233a.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/app_assets_modules_github_blob-anchor_ts-app_assets_modules_github_filter-sort_ts-app_assets_-6deafe-fc95155e233a.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Fri, 26 Jul 2024 02:43:54 GMT
etag: 0x8DCAD1CCA72C86E
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:22 GMT
age: 942560
x-served-by: cache-iad-kiad7000165-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 40, 4855
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: b9730e3a0300ccca7add2590b3a818324586ccc2
content-length: 5697
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_ConfirmationDialog_ConfirmationDialog_js-099e8bfead83.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_primer_react_lib-esm_ConfirmationDialog_ConfirmationDialog_js-099e8bfead83.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Mon, 29 Jul 2024 23:43:08 GMT
etag: 0x8DCB02832F9C69A
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:22 GMT
age: 942560
x-served-by: cache-iad-kiad7000078-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 44, 5206
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: b4acb1395cfdc47ccb19210dc26b925e887c207b
content-length: 6177
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Heading_Heading_js-node_modules_primer_react_lib-es-96435f-dbb4ca9db9f8.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_primer_react_lib-esm_Heading_Heading_js-node_modules_primer_react_lib-es-96435f-dbb4ca9db9f8.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Fri, 26 Jul 2024 02:43:54 GMT
etag: 0x8DCAD1CCA1616F2
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:22 GMT
age: 942560
x-served-by: cache-iad-kjyo7100037-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 26, 4721
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 0ee5d43fc68ee53bc158d785fc5e2cc97a8b5187
content-length: 3616
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_TreeView_TreeView_js-1b1a492a9329.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_primer_react_lib-esm_TreeView_TreeView_js-1b1a492a9329.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 06 Aug 2024 16:51:51 GMT
etag: 0x8DCB63811FB8BAC
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:22 GMT
age: 356536
x-served-by: cache-iad-kcgs7200069-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 12, 2987
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 629da292e67ca3c1769de2057b45cd18efd6bb99
content-length: 7462
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_primer_behaviors_dist_esm_scroll-into-view_js-node_modules_primer_react_-91c222-9bca588cddb2.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_primer_behaviors_dist_esm_scroll-into-view_js-node_modules_primer_react_-91c222-9bca588cddb2.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Thu, 08 Aug 2024 20:27:43 GMT
etag: 0x8DCB7E88E9B6E7C
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:22 GMT
age: 171025
x-served-by: cache-iad-kcgs7200053-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 77, 1145
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 3681b3d8a04536eba3dcb9e6d4dbb98ee9332cb6
content-length: 7452
-
GEThttps://github.githubassets.com/assets/ui_packages_react-core_register-app_ts-d92f692cd90a.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/ui_packages_react-core_register-app_ts-d92f692cd90a.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Mon, 05 Aug 2024 19:46:42 GMT
etag: 0x8DCB58754D2E8DA
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:22 GMT
age: 356536
x-served-by: cache-iad-kiad7000048-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 70, 2658
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 3d157334d24aef3f09f7cd7baaa04444cab77884
content-length: 13931
-
GEThttps://github.githubassets.com/assets/ui_packages_commit-attribution_index_ts-ui_packages_commit-checks-status_index_ts-ui_packages-f45efb-404435465b5f.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/ui_packages_commit-attribution_index_ts-ui_packages_commit-checks-status_index_ts-ui_packages-f45efb-404435465b5f.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: text/css
last-modified: Mon, 24 Jun 2024 14:52:43 GMT
etag: 0x8DC945D4D8528F9
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:22 GMT
age: 2644936
x-served-by: cache-iad-kcgs7200050-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 20, 4304
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 68ab26c6940998527657a0c997c6f2a962c78889
content-length: 583
-
GEThttps://github.githubassets.com/assets/ui_packages_repos-file-tree-view_repos-file-tree-view_ts-ui_packages_feature-request_FeatureR-ec5225-2554f1c99329.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/ui_packages_repos-file-tree-view_repos-file-tree-view_ts-ui_packages_feature-request_FeatureR-ec5225-2554f1c99329.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Fri, 09 Aug 2024 15:44:31 GMT
etag: 0x8DCB88A29349ECF
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:22 GMT
age: 105671
x-served-by: cache-iad-kjyo7100107-IAD, cache-lcy-eglc8600059-LCY
x-cache: HIT, HIT
x-cache-hits: 36, 489
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
strict-transport-security: max-age=31536000
x-fastly-request-id: 2fa7adedcb8b58d40f268c912e276166d5d5c8a1
content-length: 75624
-
Remote address:185.199.109.154:443RequestGET /assets/react-code-view-5dc60bcae5de.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
-
GEThttps://github.githubassets.com/assets/react-code-view.234ae39ff1fa1232236c.module.cssfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/react-code-view.234ae39ff1fa1232236c.module.css HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: text/css,*/*;q=0.1
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: style
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
-
Remote address:8.8.8.8:53Requestgithub.githubassets.comIN AResponsegithub.githubassets.comIN A185.199.108.154github.githubassets.comIN A185.199.109.154github.githubassets.comIN A185.199.111.154github.githubassets.comIN A185.199.110.154
-
Remote address:8.8.8.8:53Requestgithub.githubassets.comIN AResponsegithub.githubassets.comIN A185.199.110.154github.githubassets.comIN A185.199.108.154github.githubassets.comIN A185.199.111.154github.githubassets.comIN A185.199.109.154
-
Remote address:8.8.8.8:53Requestgithub.githubassets.comIN AAAAResponse
-
Remote address:8.8.8.8:53Requestgithub.githubassets.comIN AAAAResponse
-
Remote address:8.8.8.8:53Requestraw.githubusercontent.comIN AResponseraw.githubusercontent.comIN A185.199.110.133raw.githubusercontent.comIN A185.199.109.133raw.githubusercontent.comIN A185.199.111.133raw.githubusercontent.comIN A185.199.108.133
-
Remote address:8.8.8.8:53Requestraw.githubusercontent.comIN AResponseraw.githubusercontent.comIN A185.199.108.133raw.githubusercontent.comIN A185.199.111.133raw.githubusercontent.comIN A185.199.109.133raw.githubusercontent.comIN A185.199.110.133
-
Remote address:185.199.110.133:443RequestGET /kh4sh3i/Ransomware-Samples/main/ransomware.png HTTP/2.0
host: raw.githubusercontent.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox
content-type: image/png
etag: W/"25c33a443df8665f58e4583363248d473e3a29cad2eda84913d3104810c92569"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: deny
x-xss-protection: 1; mode=block
x-github-request-id: 9942:27E46E:39A04F:480997:66B7DF9A
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:02 GMT
via: 1.1 varnish
x-served-by: cache-lon420089-LON
x-cache: MISS
x-cache-hits: 0
x-timer: S1723326363.784677,VS0,VE139
vary: Authorization,Accept-Encoding,Origin
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-fastly-request-id: dfd935f6f7c3a9f43e0c0faeca6db694e6fdd0fe
expires: Sat, 10 Aug 2024 21:51:02 GMT
source-age: 0
content-length: 36870
-
Remote address:185.199.110.133:443RequestGET /u/64693844?v=4&size=40 HTTP/2.0
host: avatars.githubusercontent.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-security-policy: default-src 'none'
content-type: image/jpeg
etag: "8db50e64b91068ff6e747fa58fb1ac6cb9d882cf6123204f9b409101417f4652"
last-modified: Mon, 07 Nov 2022 17:46:55 GMT
strict-transport-security: max-age=31557600
timing-allow-origin: https://github.com
x-content-type-options: nosniff
x-frame-options: deny
x-github-tenant:
x-xss-protection: 1; mode=block
x-github-request-id: CDC4:38F50:3739D8:465BB4:66B1EC1E
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:04 GMT
via: 1.1 varnish
x-served-by: cache-lon420089-LON
x-cache: HIT
x-cache-hits: 0
x-timer: S1723326365.743983,VS0,VE1
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-fastly-request-id: 326395ced3087dd86b146fb5444ed740126f2a16
expires: Sat, 10 Aug 2024 21:51:04 GMT
source-age: 390014
vary: Authorization,Accept-Encoding
content-length: 797
-
GEThttps://raw.githubusercontent.com/kh4sh3i/Ransomware-Samples/main/TeslaCrypt/Ransomware.TeslaCrypt.zipfirefox.exeRemote address:185.199.110.133:443RequestGET /kh4sh3i/Ransomware-Samples/main/TeslaCrypt/Ransomware.TeslaCrypt.zip HTTP/2.0
host: raw.githubusercontent.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox
content-type: application/zip
etag: W/"6571157664549d1ea677d4a49c2d0b87296a9887842ad97f76da8d5e81f4ad17"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: deny
x-xss-protection: 1; mode=block
x-github-request-id: D230:2D2A4D:534F8F:67BCA4:66B7DFD0
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:46:58 GMT
via: 1.1 varnish
x-served-by: cache-lon420089-LON
x-cache: MISS
x-cache-hits: 0
x-timer: S1723326418.495859,VS0,VE137
vary: Authorization,Accept-Encoding,Origin
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-fastly-request-id: a6d6e6ca30b7ac9307fd5f072cdc55bfd9ba7098
expires: Sat, 10 Aug 2024 21:51:58 GMT
source-age: 0
content-length: 491332
-
GEThttps://raw.githubusercontent.com/kh4sh3i/Ransomware-Samples/main/Jigsaw/Ransomware.Jigsaw.zipfirefox.exeRemote address:185.199.110.133:443RequestGET /kh4sh3i/Ransomware-Samples/main/Jigsaw/Ransomware.Jigsaw.zip HTTP/2.0
host: raw.githubusercontent.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox
content-type: application/zip
etag: W/"f2f120ea4aa0c31ce4bde6520d5edfcdbb2d8b0c4a5323f34930f910c851e526"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: deny
x-xss-protection: 1; mode=block
x-github-request-id: A582:18764:25272F:2EE0BC:66B7DFD9
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:47:06 GMT
via: 1.1 varnish
x-served-by: cache-lon420089-LON
x-cache: MISS
x-cache-hits: 0
x-timer: S1723326427.586297,VS0,VE115
vary: Authorization,Accept-Encoding,Origin
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-fastly-request-id: bbfbd2e9ff4dd7d64828b574f2b1f0334ea6165c
expires: Sat, 10 Aug 2024 21:52:06 GMT
source-age: 0
content-length: 245631
-
Remote address:8.8.8.8:53Requestraw.githubusercontent.comIN AResponseraw.githubusercontent.comIN A185.199.108.133raw.githubusercontent.comIN A185.199.109.133raw.githubusercontent.comIN A185.199.111.133raw.githubusercontent.comIN A185.199.110.133
-
Remote address:8.8.8.8:53Requestraw.githubusercontent.comIN AResponseraw.githubusercontent.comIN A185.199.109.133raw.githubusercontent.comIN A185.199.110.133raw.githubusercontent.comIN A185.199.111.133raw.githubusercontent.comIN A185.199.108.133
-
Remote address:8.8.8.8:53Requestraw.githubusercontent.comIN AAAAResponseraw.githubusercontent.comIN AAAA2606:50c0:8002::154raw.githubusercontent.comIN AAAA2606:50c0:8000::154raw.githubusercontent.comIN AAAA2606:50c0:8003::154raw.githubusercontent.comIN AAAA2606:50c0:8001::154
-
Remote address:8.8.8.8:53Requestraw.githubusercontent.comIN AAAA
-
Remote address:8.8.8.8:53Requestwww.tm.v4.a.prd.aadg.trafficmanager.netIN AResponsewww.tm.v4.a.prd.aadg.trafficmanager.netIN A40.126.32.72www.tm.v4.a.prd.aadg.trafficmanager.netIN A20.190.160.20www.tm.v4.a.prd.aadg.trafficmanager.netIN A40.126.32.74www.tm.v4.a.prd.aadg.trafficmanager.netIN A40.126.32.140www.tm.v4.a.prd.aadg.trafficmanager.netIN A40.126.32.133www.tm.v4.a.prd.aadg.trafficmanager.netIN A40.126.32.136www.tm.v4.a.prd.aadg.trafficmanager.netIN A40.126.32.76www.tm.v4.a.prd.aadg.trafficmanager.netIN A40.126.32.68
-
Remote address:8.8.8.8:53Requestwww.tm.v4.a.prd.aadg.trafficmanager.netIN AResponsewww.tm.v4.a.prd.aadg.trafficmanager.netIN A20.190.159.23www.tm.v4.a.prd.aadg.trafficmanager.netIN A20.190.159.68www.tm.v4.a.prd.aadg.trafficmanager.netIN A20.190.159.73www.tm.v4.a.prd.aadg.trafficmanager.netIN A40.126.31.73www.tm.v4.a.prd.aadg.trafficmanager.netIN A20.190.159.64www.tm.v4.a.prd.aadg.trafficmanager.netIN A20.190.159.4www.tm.v4.a.prd.aadg.trafficmanager.netIN A40.126.31.69www.tm.v4.a.prd.aadg.trafficmanager.netIN A20.190.159.75
-
Remote address:8.8.8.8:53Requestwww.tm.v4.a.prd.aadg.trafficmanager.netIN AAAAResponse
-
Remote address:8.8.8.8:53Request154.109.199.185.in-addr.arpaIN PTRResponse154.109.199.185.in-addr.arpaIN PTRcdn-185-199-109-154githubcom
-
Remote address:8.8.8.8:53Request154.109.199.185.in-addr.arpaIN PTR
-
Remote address:8.8.8.8:53Request133.110.199.185.in-addr.arpaIN PTRResponse133.110.199.185.in-addr.arpaIN PTRcdn-185-199-110-133githubcom
-
Remote address:8.8.8.8:53Request133.110.199.185.in-addr.arpaIN PTR
-
Remote address:8.8.8.8:53Request4.159.190.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request4.159.190.20.in-addr.arpaIN PTR
-
Remote address:8.8.8.8:53Requestcollector.github.comIN AResponsecollector.github.comIN CNAMEglb-db52c2cf8be544.github.comglb-db52c2cf8be544.github.comIN A140.82.113.21
-
Remote address:8.8.8.8:53Requestcollector.github.comIN AResponsecollector.github.comIN CNAMEglb-db52c2cf8be544.github.comglb-db52c2cf8be544.github.comIN A140.82.113.21
-
Remote address:8.8.8.8:53Requestavatars.githubusercontent.comIN AResponseavatars.githubusercontent.comIN A185.199.110.133avatars.githubusercontent.comIN A185.199.111.133avatars.githubusercontent.comIN A185.199.109.133avatars.githubusercontent.comIN A185.199.108.133
-
Remote address:8.8.8.8:53Requestavatars.githubusercontent.comIN AResponseavatars.githubusercontent.comIN A185.199.108.133avatars.githubusercontent.comIN A185.199.110.133avatars.githubusercontent.comIN A185.199.111.133avatars.githubusercontent.comIN A185.199.109.133
-
Remote address:140.82.113.21:443RequestPOST /github/collect HTTP/2.0
host: collector.github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples
content-type: text/plain;charset=UTF-8
content-length: 1276
origin: https://github.com
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers
ResponseHTTP/2.0 204
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: Content-Type
access-control-allow-credentials: true
access-control-allow-origin: *
cache-control: no-cache
x-runtime: 0.001875
strict-transport-security: max-age=631138519
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-github-backend: Kubernetes
x-github-request-id: C805:22D06:594FB:AD529:66B7DF9C
-
Remote address:140.82.113.21:443RequestPOST /github/collect HTTP/2.0
host: collector.github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples
content-type: text/plain;charset=UTF-8
content-length: 981
origin: https://github.com
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers
ResponseHTTP/2.0 204
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: Content-Type
access-control-allow-credentials: true
access-control-allow-origin: *
cache-control: no-cache
x-runtime: 0.003290
strict-transport-security: max-age=631138519
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-github-backend: Kubernetes
x-github-request-id: C805:22D06:59501:AD536:66B7DF9D
-
Remote address:140.82.113.21:443RequestPOST /github/collect HTTP/2.0
host: collector.github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples
content-type: text/plain;charset=UTF-8
content-length: 1346
origin: https://github.com
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers
ResponseHTTP/2.0 204
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: Content-Type
access-control-allow-credentials: true
access-control-allow-origin: *
cache-control: no-cache
x-runtime: 0.003111
strict-transport-security: max-age=631138519
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-github-backend: Kubernetes
x-github-request-id: C805:22D06:59CFA:AE46B:66B7DF9D
-
Remote address:140.82.113.21:443RequestPOST /github/collect HTTP/2.0
host: collector.github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/tree/main/TeslaCrypt
content-type: text/plain;charset=UTF-8
content-length: 1069
origin: https://github.com
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers
ResponseHTTP/2.0 204
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: Content-Type
access-control-allow-credentials: true
access-control-allow-origin: *
cache-control: no-cache
x-runtime: 0.002109
strict-transport-security: max-age=631138519
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-github-backend: Kubernetes
x-github-request-id: C805:22D06:59DA8:AE5DB:66B7DFAD
-
Remote address:140.82.113.21:443RequestPOST /github/collect HTTP/2.0
host: collector.github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/tree/main/TeslaCrypt
content-type: text/plain;charset=UTF-8
content-length: 1039
origin: https://github.com
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers
ResponseHTTP/2.0 204
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: Content-Type
access-control-allow-credentials: true
access-control-allow-origin: *
cache-control: no-cache
x-runtime: 0.002795
strict-transport-security: max-age=631138519
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-github-backend: Kubernetes
x-github-request-id: C805:22D06:59DB4:AE5F3:66B7DFAE
-
Remote address:140.82.113.21:443RequestPOST /github/collect HTTP/2.0
host: collector.github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/tree/main/TeslaCrypt
content-type: text/plain;charset=UTF-8
content-length: 1323
origin: https://github.com
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers
ResponseHTTP/2.0 204
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: Content-Type
access-control-allow-credentials: true
access-control-allow-origin: *
cache-control: no-cache
x-runtime: 0.002048
strict-transport-security: max-age=631138519
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-github-backend: Kubernetes
x-github-request-id: C805:22D06:59DE7:AE651:66B7DFAE
-
Remote address:140.82.113.21:443RequestPOST /github/collect HTTP/2.0
host: collector.github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/tree/main/Jigsaw
content-type: text/plain;charset=UTF-8
content-length: 1061
origin: https://github.com
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers
ResponseHTTP/2.0 204
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: Content-Type
access-control-allow-credentials: true
access-control-allow-origin: *
cache-control: no-cache
x-runtime: 0.002391
strict-transport-security: max-age=631138519
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-github-backend: Kubernetes
x-github-request-id: C805:22D06:5A3F9:AF2C8:66B7DFAF
-
Remote address:140.82.113.21:443RequestPOST /github/collect HTTP/2.0
host: collector.github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/tree/main/Jigsaw
content-type: text/plain;charset=UTF-8
content-length: 1031
origin: https://github.com
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers
ResponseHTTP/2.0 204
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: Content-Type
access-control-allow-credentials: true
access-control-allow-origin: *
cache-control: no-cache
x-runtime: 0.002420
strict-transport-security: max-age=631138519
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-github-backend: Kubernetes
x-github-request-id: C805:22D06:5A411:AF303:66B7DFBD
-
Remote address:140.82.113.21:443RequestPOST /github/collect HTTP/2.0
host: collector.github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/tree/main/Jigsaw
content-type: text/plain;charset=UTF-8
content-length: 1315
origin: https://github.com
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers
ResponseHTTP/2.0 204
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: Content-Type
access-control-allow-credentials: true
access-control-allow-origin: *
cache-control: no-cache
x-runtime: 0.002446
strict-transport-security: max-age=631138519
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-github-backend: Kubernetes
x-github-request-id: C805:22D06:5A62A:AF76B:66B7DFBE
-
Remote address:140.82.113.21:443RequestPOST /github/collect HTTP/2.0
host: collector.github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/blob/main/TeslaCrypt/Ransomware.TeslaCrypt.zip
content-type: text/plain;charset=UTF-8
content-length: 1116
origin: https://github.com
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers
ResponseHTTP/2.0 204
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: Content-Type
access-control-allow-credentials: true
access-control-allow-origin: *
cache-control: no-cache
x-runtime: 0.003195
strict-transport-security: max-age=631138519
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-github-backend: Kubernetes
x-github-request-id: C805:22D06:5AAD9:B01F1:66B7DFC3
-
Remote address:140.82.113.21:443RequestPOST /github/collect HTTP/2.0
host: collector.github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/blob/main/TeslaCrypt/Ransomware.TeslaCrypt.zip
content-type: text/plain;charset=UTF-8
content-length: 1121
origin: https://github.com
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers
ResponseHTTP/2.0 204
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: Content-Type
access-control-allow-credentials: true
access-control-allow-origin: *
cache-control: no-cache
x-runtime: 0.002397
strict-transport-security: max-age=631138519
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-github-backend: Kubernetes
x-github-request-id: C805:22D06:5AAD9:B01F3:66B7DFD0
-
Remote address:140.82.113.21:443RequestPOST /github/collect HTTP/2.0
host: collector.github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/blob/main/TeslaCrypt/Ransomware.TeslaCrypt.zip
content-type: text/plain;charset=UTF-8
content-length: 1106
origin: https://github.com
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers
ResponseHTTP/2.0 204
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: Content-Type
access-control-allow-credentials: true
access-control-allow-origin: *
cache-control: no-cache
x-runtime: 0.002204
strict-transport-security: max-age=631138519
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-github-backend: Kubernetes
x-github-request-id: C805:22D06:5AADC:B01F4:66B7DFD0
-
Remote address:140.82.113.21:443RequestPOST /github/collect HTTP/2.0
host: collector.github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/blob/main/TeslaCrypt/Ransomware.TeslaCrypt.zip
content-type: text/plain;charset=UTF-8
content-length: 1511
origin: https://github.com
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers
ResponseHTTP/2.0 204
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: Content-Type
access-control-allow-credentials: true
access-control-allow-origin: *
cache-control: no-cache
x-runtime: 0.003068
strict-transport-security: max-age=631138519
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-github-backend: Kubernetes
x-github-request-id: C805:22D06:5AAE9:B020F:66B7DFD0
-
Remote address:140.82.113.21:443RequestPOST /github/collect HTTP/2.0
host: collector.github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/blob/main/Jigsaw/Ransomware.Jigsaw.zip
content-type: text/plain;charset=UTF-8
content-length: 1104
origin: https://github.com
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers
ResponseHTTP/2.0 204
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: Content-Type
access-control-allow-credentials: true
access-control-allow-origin: *
cache-control: no-cache
x-runtime: 0.002454
strict-transport-security: max-age=631138519
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-github-backend: Kubernetes
x-github-request-id: C805:22D06:5AE72:B0962:66B7DFD9
-
Remote address:140.82.113.21:443RequestPOST /github/collect HTTP/2.0
host: collector.github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/blob/main/Jigsaw/Ransomware.Jigsaw.zip
content-type: text/plain;charset=UTF-8
content-length: 1105
origin: https://github.com
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers
ResponseHTTP/2.0 204
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: Content-Type
access-control-allow-credentials: true
access-control-allow-origin: *
cache-control: no-cache
x-runtime: 0.003046
strict-transport-security: max-age=631138519
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-github-backend: Kubernetes
x-github-request-id: C805:22D06:5AE72:B0961:66B7DFD0
-
Remote address:140.82.113.21:443RequestPOST /github/collect HTTP/2.0
host: collector.github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/blob/main/Jigsaw/Ransomware.Jigsaw.zip
content-type: text/plain;charset=UTF-8
content-length: 1090
origin: https://github.com
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers
ResponseHTTP/2.0 204
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: Content-Type
access-control-allow-credentials: true
access-control-allow-origin: *
cache-control: no-cache
x-runtime: 0.003197
strict-transport-security: max-age=631138519
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-github-backend: Kubernetes
x-github-request-id: C805:22D06:5AE72:B0963:66B7DFD9
-
Remote address:140.82.113.21:443RequestPOST /github/collect HTTP/2.0
host: collector.github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/blob/main/Jigsaw/Ransomware.Jigsaw.zip
content-type: text/plain;charset=UTF-8
content-length: 1495
origin: https://github.com
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers
ResponseHTTP/2.0 204
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: Content-Type
access-control-allow-credentials: true
access-control-allow-origin: *
cache-control: no-cache
x-runtime: 0.002603
strict-transport-security: max-age=631138519
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-github-backend: Kubernetes
x-github-request-id: C805:22D06:5AE7D:B096E:66B7DFD9
-
Remote address:8.8.8.8:53Requestglb-db52c2cf8be544.github.comIN AResponseglb-db52c2cf8be544.github.comIN A140.82.113.21
-
Remote address:8.8.8.8:53Requestglb-db52c2cf8be544.github.comIN AResponseglb-db52c2cf8be544.github.comIN A140.82.113.21
-
Remote address:8.8.8.8:53Requestglb-db52c2cf8be544.github.comIN AAAAResponse
-
Remote address:8.8.8.8:53Requestglb-db52c2cf8be544.github.comIN AAAAResponse
-
Remote address:8.8.8.8:53Requestapi.github.comIN AResponseapi.github.comIN A20.26.156.210
-
Remote address:8.8.8.8:53Requestapi.github.comIN AResponseapi.github.comIN A20.26.156.210
-
Remote address:8.8.8.8:53Requestwww.bing.com.cdn.cloudflare.netIN AResponsewww.bing.com.cdn.cloudflare.netIN A104.18.33.89www.bing.com.cdn.cloudflare.netIN A172.64.154.167
-
Remote address:8.8.8.8:53Requestwww.bing.com.cdn.cloudflare.netIN AResponsewww.bing.com.cdn.cloudflare.netIN A104.18.33.89www.bing.com.cdn.cloudflare.netIN A172.64.154.167
-
Remote address:8.8.8.8:53Requestavatars.githubusercontent.comIN AAAAResponseavatars.githubusercontent.comIN AAAA2606:50c0:8001::154avatars.githubusercontent.comIN AAAA2606:50c0:8003::154avatars.githubusercontent.comIN AAAA2606:50c0:8002::154avatars.githubusercontent.comIN AAAA2606:50c0:8000::154
-
Remote address:8.8.8.8:53Requestavatars.githubusercontent.comIN AAAAResponseavatars.githubusercontent.comIN AAAA2606:50c0:8000::154avatars.githubusercontent.comIN AAAA2606:50c0:8003::154avatars.githubusercontent.comIN AAAA2606:50c0:8001::154avatars.githubusercontent.comIN AAAA2606:50c0:8002::154
-
Remote address:20.26.156.210:443RequestPOST /_private/browser/stats HTTP/2.0
host: api.github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples
content-type: text/plain;charset=UTF-8
content-length: 442
origin: https://github.com
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers
ResponseHTTP/2.0 200
content-type: text/plain
content-length: 0
cache-control: no-cache
x-ratelimit-limit: 60
x-ratelimit-remaining: 60
x-ratelimit-reset: 1723329965
x-ratelimit-used: 0
x-ratelimit-resource: core
x-github-media-type: github.v3; format=json
x-github-api-version-selected: 2022-11-28
access-control-expose-headers: ETag, Link, Location, Retry-After, X-GitHub-OTP, X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Used, X-RateLimit-Resource, X-RateLimit-Reset, X-OAuth-Scopes, X-Accepted-OAuth-Scopes, X-Poll-Interval, X-GitHub-Media-Type, X-GitHub-SSO, X-GitHub-Request-Id, Deprecation, Sunset
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
content-security-policy: default-src 'none'
vary: Accept-Encoding, Accept, X-Requested-With
server: github.com
x-github-request-id: C810:DBAB2:5E1C17:640108:66B7DF9C
-
Remote address:20.26.156.210:443RequestPOST /_private/browser/stats HTTP/2.0
host: api.github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples
content-type: text/plain;charset=UTF-8
content-length: 195
origin: https://github.com
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers
ResponseHTTP/2.0 200
content-type: text/plain
content-length: 0
cache-control: no-cache
x-ratelimit-limit: 60
x-ratelimit-remaining: 60
x-ratelimit-reset: 1723329969
x-ratelimit-used: 0
x-ratelimit-resource: core
x-github-media-type: github.v3; format=json
x-github-api-version-selected: 2022-11-28
access-control-expose-headers: ETag, Link, Location, Retry-After, X-GitHub-OTP, X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Used, X-RateLimit-Resource, X-RateLimit-Reset, X-OAuth-Scopes, X-Accepted-OAuth-Scopes, X-Poll-Interval, X-GitHub-Media-Type, X-GitHub-SSO, X-GitHub-Request-Id, Deprecation, Sunset
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
content-security-policy: default-src 'none'
vary: Accept-Encoding, Accept, X-Requested-With
server: github.com
x-github-request-id: C810:DBAB2:5E1E15:64031C:66B7DF9D
-
Remote address:20.26.156.210:443RequestPOST /_private/browser/stats HTTP/2.0
host: api.github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples
content-type: text/plain;charset=UTF-8
content-length: 259
origin: https://github.com
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers
ResponseHTTP/2.0 200
content-type: text/plain
content-length: 0
cache-control: no-cache
x-ratelimit-limit: 60
x-ratelimit-remaining: 60
x-ratelimit-reset: 1723329981
x-ratelimit-used: 0
x-ratelimit-resource: core
x-github-media-type: github.v3; format=json
x-github-api-version-selected: 2022-11-28
access-control-expose-headers: ETag, Link, Location, Retry-After, X-GitHub-OTP, X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Used, X-RateLimit-Resource, X-RateLimit-Reset, X-OAuth-Scopes, X-Accepted-OAuth-Scopes, X-Poll-Interval, X-GitHub-Media-Type, X-GitHub-SSO, X-GitHub-Request-Id, Deprecation, Sunset
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
content-security-policy: default-src 'none'
vary: Accept-Encoding, Accept, X-Requested-With
server: github.com
x-github-request-id: C810:DBAB2:5E2290:6407DD:66B7DFA1
-
Remote address:20.26.156.210:443RequestPOST /_private/browser/stats HTTP/2.0
host: api.github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/tree/main/Jigsaw
content-type: text/plain;charset=UTF-8
content-length: 304
origin: https://github.com
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers
ResponseHTTP/2.0 200
content-type: text/plain
content-length: 0
cache-control: no-cache
x-ratelimit-limit: 60
x-ratelimit-remaining: 60
x-ratelimit-reset: 1723330001
x-ratelimit-used: 0
x-ratelimit-resource: core
x-github-media-type: github.v3; format=json
x-github-api-version-selected: 2022-11-28
access-control-expose-headers: ETag, Link, Location, Retry-After, X-GitHub-OTP, X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Used, X-RateLimit-Resource, X-RateLimit-Reset, X-OAuth-Scopes, X-Accepted-OAuth-Scopes, X-Poll-Interval, X-GitHub-Media-Type, X-GitHub-SSO, X-GitHub-Request-Id, Deprecation, Sunset
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
content-security-policy: default-src 'none'
vary: Accept-Encoding, Accept, X-Requested-With
server: github.com
x-github-request-id: C810:DBAB2:5E2A98:641058:66B7DFAD
-
Remote address:20.26.156.210:443RequestPOST /_private/browser/stats HTTP/2.0
host: api.github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/blob/main/TeslaCrypt/Ransomware.TeslaCrypt.zip
content-type: text/plain;charset=UTF-8
content-length: 739
origin: https://github.com
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers
ResponseHTTP/2.0 200
content-type: text/plain
content-length: 0
cache-control: no-cache
x-ratelimit-limit: 60
x-ratelimit-remaining: 60
x-ratelimit-reset: 1723330016
x-ratelimit-used: 0
x-ratelimit-resource: core
x-github-media-type: github.v3; format=json
x-github-api-version-selected: 2022-11-28
access-control-expose-headers: ETag, Link, Location, Retry-After, X-GitHub-OTP, X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Used, X-RateLimit-Resource, X-RateLimit-Reset, X-OAuth-Scopes, X-Accepted-OAuth-Scopes, X-Poll-Interval, X-GitHub-Media-Type, X-GitHub-SSO, X-GitHub-Request-Id, Deprecation, Sunset
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
content-security-policy: default-src 'none'
vary: Accept-Encoding, Accept, X-Requested-With
server: github.com
x-github-request-id: C810:DBAB2:5E30F7:64170E:66B7DFC1
-
Remote address:20.26.156.210:443RequestPOST /_private/browser/stats HTTP/2.0
host: api.github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/blob/main/Jigsaw/Ransomware.Jigsaw.zip
content-type: text/plain;charset=UTF-8
content-length: 723
origin: https://github.com
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers
ResponseHTTP/2.0 200
content-type: text/plain
content-length: 0
cache-control: no-cache
x-ratelimit-limit: 60
x-ratelimit-remaining: 60
x-ratelimit-reset: 1723330025
x-ratelimit-used: 0
x-ratelimit-resource: core
x-github-media-type: github.v3; format=json
x-github-api-version-selected: 2022-11-28
access-control-expose-headers: ETag, Link, Location, Retry-After, X-GitHub-OTP, X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Used, X-RateLimit-Resource, X-RateLimit-Reset, X-OAuth-Scopes, X-Accepted-OAuth-Scopes, X-Poll-Interval, X-GitHub-Media-Type, X-GitHub-SSO, X-GitHub-Request-Id, Deprecation, Sunset
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
content-security-policy: default-src 'none'
vary: Accept-Encoding, Accept, X-Requested-With
server: github.com
x-github-request-id: C810:DBAB2:5E34B6:641B13:66B7DFD0
-
Remote address:8.8.8.8:53Requestapi.github.comIN AResponseapi.github.comIN A20.26.156.210
-
Remote address:8.8.8.8:53Requestapi.github.comIN AResponseapi.github.comIN A20.26.156.210
-
Remote address:8.8.8.8:53Requestwww.bing.com.cdn.cloudflare.netIN AAAAResponsewww.bing.com.cdn.cloudflare.netIN AAAA2606:4700:4400::6812:2159www.bing.com.cdn.cloudflare.netIN AAAA2606:4700:4400::ac40:9aa7
-
Remote address:8.8.8.8:53Requestwww.bing.com.cdn.cloudflare.netIN AAAAResponsewww.bing.com.cdn.cloudflare.netIN AAAA2606:4700:4400::6812:2159www.bing.com.cdn.cloudflare.netIN AAAA2606:4700:4400::ac40:9aa7
-
Remote address:8.8.8.8:53Request167.154.64.172.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request167.154.64.172.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request21.113.82.140.in-addr.arpaIN PTRResponse21.113.82.140.in-addr.arpaIN PTRlb-140-82-113-21-iadgithubcom
-
Remote address:8.8.8.8:53Request21.113.82.140.in-addr.arpaIN PTRResponse21.113.82.140.in-addr.arpaIN PTRlb-140-82-113-21-iadgithubcom
-
Remote address:8.8.8.8:53Requestapi.github.comIN AAAAResponse
-
Remote address:8.8.8.8:53Requestapi.github.comIN AAAAResponse
-
Remote address:8.8.8.8:53Request210.156.26.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request210.156.26.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Requestcollector.github.comIN AResponsecollector.github.comIN CNAMEglb-db52c2cf8be544.github.comglb-db52c2cf8be544.github.comIN A140.82.112.22
-
Remote address:8.8.8.8:53Requestcollector.github.comIN AResponsecollector.github.comIN CNAMEglb-db52c2cf8be544.github.comglb-db52c2cf8be544.github.comIN A140.82.112.22
-
Remote address:8.8.8.8:53Requestglb-db52c2cf8be544.github.comIN AResponseglb-db52c2cf8be544.github.comIN A140.82.112.22
-
Remote address:8.8.8.8:53Requestglb-db52c2cf8be544.github.comIN AResponseglb-db52c2cf8be544.github.comIN A140.82.112.21
-
Remote address:8.8.8.8:53Requestglb-db52c2cf8be544.github.comIN AAAAResponse
-
Remote address:8.8.8.8:53Requestglb-db52c2cf8be544.github.comIN AAAAResponse
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=147411976-148288419
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 876444
Connection: keep-alive
Age: 39
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: fe6049c2-f332-480f-9fad-e21033f49fdf
MS-CV: qBPTYo5ju0WxrJcF.0
MS-RequestId: 81c30029-01d8-446d-91f1-311eb994a3c6
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa88aaf-1135283894-1
Content-Range: bytes 147411976-148288419/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=148288420-150223173
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 1934754
Connection: keep-alive
Age: 39
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: fe6049c2-f332-480f-9fad-e21033f49fdf
MS-CV: qBPTYo5ju0WxrJcF.0
MS-RequestId: 81c30029-01d8-446d-91f1-311eb994a3c6
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa89c7f-1135283894-2
Content-Range: bytes 148288420-150223173/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=150223174-153006991
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 2783818
Connection: keep-alive
Age: 39
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: fe6049c2-f332-480f-9fad-e21033f49fdf
MS-CV: qBPTYo5ju0WxrJcF.0
MS-RequestId: 81c30029-01d8-446d-91f1-311eb994a3c6
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa8b98d-1135283894-3
Content-Range: bytes 150223174-153006991/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=153006992-156433228
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 3426237
Connection: keep-alive
Age: 52
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 71c37867-b0a6-4902-9ef6-145b47010fec
MS-CV: O3z/nvMWiUykMqrP4dMZYg.0.2.7.1.1.31.0
MS-RequestId: 3c89ad7a-2b92-40bb-a62c-813ec4d8c57c
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa8dc24-1135283894-4
Content-Range: bytes 153006992-156433228/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=156433229-158816697
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 2383469
Connection: keep-alive
Age: 52
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 71c37867-b0a6-4902-9ef6-145b47010fec
MS-CV: O3z/nvMWiUykMqrP4dMZYg.0.2.7.1.1.31.0
MS-RequestId: 3c89ad7a-2b92-40bb-a62c-813ec4d8c57c
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa91716-1135283894-5
Content-Range: bytes 156433229-158816697/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=158816698-159985350
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 1168653
Connection: keep-alive
Age: 52
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 71c37867-b0a6-4902-9ef6-145b47010fec
MS-CV: O3z/nvMWiUykMqrP4dMZYg.0.2.7.1.1.31.0
MS-RequestId: 3c89ad7a-2b92-40bb-a62c-813ec4d8c57c
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa96aaa-1135283894-6
Content-Range: bytes 158816698-159985350/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=159985351-160996295
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 1010945
Connection: keep-alive
Age: 57
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 3f036ac3-7245-4ccf-95ad-3c6b9c29a1bf
MS-CV: emZ0flSeK0WOvldRIO23nQ.0.1.1.6.1.1.9.0
MS-RequestId: ed8b9c5e-329e-443d-85ae-212dff33a051
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa99a27-1135283894-7
Content-Range: bytes 159985351-160996295/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=160996296-162677001
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 1680706
Connection: keep-alive
Age: 57
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 3f036ac3-7245-4ccf-95ad-3c6b9c29a1bf
MS-CV: emZ0flSeK0WOvldRIO23nQ.0.1.1.6.1.1.9.0
MS-RequestId: ed8b9c5e-329e-443d-85ae-212dff33a051
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa9b49a-1135283894-8
Content-Range: bytes 160996296-162677001/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=162677002-164917942
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 2240941
Connection: keep-alive
Age: 57
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 3f036ac3-7245-4ccf-95ad-3c6b9c29a1bf
MS-CV: emZ0flSeK0WOvldRIO23nQ.0.1.1.6.1.1.9.0
MS-RequestId: ed8b9c5e-329e-443d-85ae-212dff33a051
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa9d338-1135283894-9
Content-Range: bytes 162677002-164917942/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=164917943-167701719
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 2783777
Connection: keep-alive
Age: 57
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 3f036ac3-7245-4ccf-95ad-3c6b9c29a1bf
MS-CV: emZ0flSeK0WOvldRIO23nQ.0.1.1.6.1.1.9.0
MS-RequestId: ed8b9c5e-329e-443d-85ae-212dff33a051
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022fa9f511-1135283894-10
Content-Range: bytes 164917943-167701719/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=167701720-169016682
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 1314963
Connection: keep-alive
Age: 57
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: 3f036ac3-7245-4ccf-95ad-3c6b9c29a1bf
MS-CV: emZ0flSeK0WOvldRIO23nQ.0.1.1.6.1.1.9.0
MS-RequestId: ed8b9c5e-329e-443d-85ae-212dff33a051
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022faa4d8d-1135283894-11
Content-Range: bytes 167701720-169016682/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
GEThttp://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dRemote address:217.20.58.36:80RequestGET /filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 07 Aug 2024 17:57:07 GMT
Range: bytes=169016683-170826679
User-Agent: Microsoft BITS/7.8
X-Old-UID: cnt=0
X-Last-HR: 0x0
X-Last-HTTP-Status-Code: 0
X-Retry-Count: 0
X-HTTP-Attempts: 1
Host: msedge.f.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 206 Partial Content
Content-Type: application/octet-stream
Content-Length: 1809997
Connection: keep-alive
Age: 37
Cache-Control: public, max-age=17280000
Etag: "8ntfiR0vpJw4pKf2SKIUKX5jonc="
Last-Modified: Wed, 07 Aug 2024 17:57:07 GMT
MS-CorrelationId: f454dad2-099c-4585-affa-ca20b85e7744
MS-CV: emZ0flSeK0WOvldRIO23nQ.0.1.1.6.1.1.14.0
MS-RequestId: 6d58becf-9f9e-4042-82d7-25ad5ebc1dd5
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Cache: HIT
X-CCC: fr
X-CID: 9
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Ocn-Cache-Status: HIT
Ocn-Served-By: QLT
Ocn-Requestid: 100000022faa6b2c-1135283894-12
Content-Range: bytes 169016683-170826679/172606408
Server: Qwilt
X-OC-Service-Type: lo
-
Remote address:8.8.8.8:53Requestgithub.comIN AResponsegithub.comIN A20.26.156.215
-
Remote address:8.8.8.8:53Requestgithub.comIN A
-
Remote address:8.8.8.8:53Requestgithub.comIN AResponsegithub.comIN A20.26.156.215
-
Remote address:8.8.8.8:53Requestgithub.comIN A
-
Remote address:8.8.8.8:53Requestgithub.comIN AAAAResponse
-
Remote address:8.8.8.8:53Requestgithub.comIN AAAAResponse
-
Remote address:8.8.8.8:53Requestapi.github.comIN AResponseapi.github.comIN A20.26.156.210
-
Remote address:8.8.8.8:53Requestapi.github.comIN AResponseapi.github.comIN A20.26.156.210
-
Remote address:8.8.8.8:53Requestapi.github.comIN AAAAResponse
-
Remote address:8.8.8.8:53Requestapi.github.comIN AAAAResponse
-
Remote address:8.8.8.8:53Request200.64.52.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request200.64.52.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Requestbtc.blockr.ioIN AResponse
-
Remote address:8.8.8.8:53Requestbtc.blockr.ioIN AResponse
-
Remote address:8.8.8.8:53Requestbtc.blockr.ioIN AResponse
-
Remote address:8.8.8.8:53Requestbtc.blockr.ioIN AResponse
-
Remote address:8.8.8.8:53Requestprod.balrog.prod.cloudops.mozgcp.netIN AResponseprod.balrog.prod.cloudops.mozgcp.netIN A35.244.181.201
-
Remote address:8.8.8.8:53Requestprod.balrog.prod.cloudops.mozgcp.netIN AResponseprod.balrog.prod.cloudops.mozgcp.netIN A35.244.181.201
-
Remote address:8.8.8.8:53Requestprod.balrog.prod.cloudops.mozgcp.netIN AAAAResponse
-
Remote address:8.8.8.8:53Requestprod.balrog.prod.cloudops.mozgcp.netIN AAAAResponse
-
Remote address:8.8.8.8:53Requestprod.content-signature-chains.prod.webservices.mozgcp.netIN AResponseprod.content-signature-chains.prod.webservices.mozgcp.netIN A34.160.144.191
-
Remote address:8.8.8.8:53Requestprod.content-signature-chains.prod.webservices.mozgcp.netIN AResponseprod.content-signature-chains.prod.webservices.mozgcp.netIN A34.160.144.191
-
Remote address:8.8.8.8:53Requestprod.content-signature-chains.prod.webservices.mozgcp.netIN AAAAResponseprod.content-signature-chains.prod.webservices.mozgcp.netIN AAAA2600:1901:0:92a9::
-
Remote address:8.8.8.8:53Requestprod.content-signature-chains.prod.webservices.mozgcp.netIN AAAAResponseprod.content-signature-chains.prod.webservices.mozgcp.netIN AAAA2600:1901:0:92a9::
-
Remote address:8.8.8.8:53Request201.181.244.35.in-addr.arpaIN PTRResponse201.181.244.35.in-addr.arpaIN PTR20118124435bcgoogleusercontentcom
-
Remote address:8.8.8.8:53Requestredirector.gvt1.comIN AResponseredirector.gvt1.comIN A142.250.179.174
-
Remote address:8.8.8.8:53Requestredirector.gvt1.comIN AResponseredirector.gvt1.comIN A142.250.179.174
-
Remote address:8.8.8.8:53Requestciscobinary.openh264.orgIN AResponseciscobinary.openh264.orgIN CNAMEa21ed24aedde648804e7-228765c84088fef4ff5e70f2710398e9.r17.cf1.rackcdn.coma21ed24aedde648804e7-228765c84088fef4ff5e70f2710398e9.r17.cf1.rackcdn.comIN CNAMEa17.rackcdn.coma17.rackcdn.comIN CNAMEa17.rackcdn.com.mdc.edgesuite.neta17.rackcdn.com.mdc.edgesuite.netIN CNAMEa19.dscg10.akamai.neta19.dscg10.akamai.netIN A88.221.134.209a19.dscg10.akamai.netIN A88.221.134.155
-
Remote address:8.8.8.8:53Requestciscobinary.openh264.orgIN AResponseciscobinary.openh264.orgIN CNAMEa21ed24aedde648804e7-228765c84088fef4ff5e70f2710398e9.r17.cf1.rackcdn.coma21ed24aedde648804e7-228765c84088fef4ff5e70f2710398e9.r17.cf1.rackcdn.comIN CNAMEa17.rackcdn.coma17.rackcdn.comIN CNAMEa17.rackcdn.com.mdc.edgesuite.neta17.rackcdn.com.mdc.edgesuite.netIN CNAMEa19.dscg10.akamai.neta19.dscg10.akamai.netIN A88.221.134.209a19.dscg10.akamai.netIN A88.221.134.155
-
Remote address:8.8.8.8:53Requestredirector.gvt1.comIN AResponseredirector.gvt1.comIN A142.250.179.174
-
Remote address:8.8.8.8:53Requestredirector.gvt1.comIN AResponseredirector.gvt1.comIN A142.250.179.174
-
GEThttp://ciscobinary.openh264.org/openh264-win64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zipfirefox.exeRemote address:88.221.134.209:80RequestGET /openh264-win64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip HTTP/1.1
Host: ciscobinary.openh264.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
ResponseHTTP/1.1 200 OK
ETag: 85430baed3398695717b0263807cf97c
X-Trans-Id: txa53a50fa3dbb460ab7097-00663d0dccdfw1
Content-Length: 453023
Accept-Ranges: bytes
X-Timestamp: 1712774667.41880
Content-Type: application/zip
Cache-Control: public, max-age=178531
Expires: Mon, 12 Aug 2024 23:29:12 GMT
Date: Sat, 10 Aug 2024 21:53:41 GMT
Connection: keep-alive
-
Remote address:8.8.8.8:53Requesta19.dscg10.akamai.netIN AResponsea19.dscg10.akamai.netIN A88.221.134.209a19.dscg10.akamai.netIN A88.221.134.155
-
Remote address:8.8.8.8:53Requesta19.dscg10.akamai.netIN AResponsea19.dscg10.akamai.netIN A88.221.134.209a19.dscg10.akamai.netIN A88.221.134.155
-
Remote address:8.8.8.8:53Requesta19.dscg10.akamai.netIN AAAAResponsea19.dscg10.akamai.netIN AAAA2a02:26f0:a1::58dd:86d1a19.dscg10.akamai.netIN AAAA2a02:26f0:a1::58dd:869b
-
Remote address:8.8.8.8:53Requesta19.dscg10.akamai.netIN AAAAResponsea19.dscg10.akamai.netIN AAAA2a02:26f0:a1::58dd:869ba19.dscg10.akamai.netIN AAAA2a02:26f0:a1::58dd:86d1
-
Remote address:8.8.8.8:53Requestredirector.gvt1.comIN AAAAResponseredirector.gvt1.comIN AAAA2a00:1450:400e:802::200e
-
Remote address:8.8.8.8:53Requestredirector.gvt1.comIN AAAAResponseredirector.gvt1.comIN AAAA2a00:1450:400e:802::200e
-
Remote address:8.8.8.8:53Requestr5---sn-4g5lzney.gvt1.comIN AResponser5---sn-4g5lzney.gvt1.comIN CNAMEr5.sn-4g5lzney.gvt1.comr5.sn-4g5lzney.gvt1.comIN A74.125.163.138
-
Remote address:8.8.8.8:53Requestr5---sn-4g5lzney.gvt1.comIN AResponser5---sn-4g5lzney.gvt1.comIN CNAMEr5.sn-4g5lzney.gvt1.comr5.sn-4g5lzney.gvt1.comIN A74.125.163.138
-
Remote address:8.8.8.8:53Requestr5.sn-4g5lzney.gvt1.comIN AResponser5.sn-4g5lzney.gvt1.comIN A74.125.163.138
-
Remote address:8.8.8.8:53Requestr5.sn-4g5lzney.gvt1.comIN AResponser5.sn-4g5lzney.gvt1.comIN A74.125.163.138
-
Remote address:8.8.8.8:53Requestr5.sn-4g5lzney.gvt1.comIN AAAAResponser5.sn-4g5lzney.gvt1.comIN AAAA2a00:1450:4001:1b::a
-
Remote address:8.8.8.8:53Requestr5.sn-4g5lzney.gvt1.comIN AAAAResponser5.sn-4g5lzney.gvt1.comIN AAAA2a00:1450:4001:1b::a
-
Remote address:8.8.8.8:53Request209.134.221.88.in-addr.arpaIN PTRResponse209.134.221.88.in-addr.arpaIN PTRa88-221-134-209deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request209.134.221.88.in-addr.arpaIN PTR
-
Remote address:8.8.8.8:53Request174.179.250.142.in-addr.arpaIN PTRResponse174.179.250.142.in-addr.arpaIN PTRams15s41-in-f141e100net
-
Remote address:8.8.8.8:53Request174.179.250.142.in-addr.arpaIN PTR
-
Remote address:8.8.8.8:53Request138.163.125.74.in-addr.arpaIN PTRResponse138.163.125.74.in-addr.arpaIN PTRfra24s19-in-f101e100net
-
Remote address:8.8.8.8:53Request138.163.125.74.in-addr.arpaIN PTR
-
Remote address:8.8.8.8:53Request56.28.101.95.in-addr.arpaIN PTRResponse56.28.101.95.in-addr.arpaIN PTRa95-101-28-56deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request56.28.101.95.in-addr.arpaIN PTRResponse56.28.101.95.in-addr.arpaIN PTRa95-101-28-56deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request7tno4hib47vlep5o.tor2web.orgIN AResponse7tno4hib47vlep5o.tor2web.orgIN A103.198.0.111
-
Remote address:8.8.8.8:53Request7tno4hib47vlep5o.tor2web.orgIN AResponse7tno4hib47vlep5o.tor2web.orgIN A103.198.0.111
-
Remote address:8.8.8.8:53Request7tno4hib47vlep5o.tor2web.blutmagie.deIN AResponse
-
Remote address:8.8.8.8:53Request7tno4hib47vlep5o.tor2web.blutmagie.deIN AResponse
-
Remote address:8.8.8.8:53Request7tno4hib47vlep5o.tor2web.fiIN AResponse
-
Remote address:8.8.8.8:53Request7tno4hib47vlep5o.tor2web.fiIN AResponse
-
Remote address:8.8.8.8:53Requestbitcoin.toshi.ioIN AResponse
-
Remote address:8.8.8.8:53Requestbitcoin.toshi.ioIN AResponse
-
Remote address:8.8.8.8:53Request7tno4hib47vlep5o.tor2web.blutmagie.deIN AResponse
-
Remote address:8.8.8.8:53Request7tno4hib47vlep5o.tor2web.blutmagie.deIN AResponse
-
Remote address:8.8.8.8:53Requestbitcoin.toshi.ioIN AResponse
-
Remote address:8.8.8.8:53Requestbitcoin.toshi.ioIN AResponse
-
Remote address:8.8.8.8:53Request7tno4hib47vlep5o.tor2web.fiIN AResponse
-
Remote address:8.8.8.8:53Request7tno4hib47vlep5o.tor2web.fiIN AResponse
-
Remote address:8.8.8.8:53Requestgithub.comIN AResponsegithub.comIN A20.26.156.215
-
Remote address:8.8.8.8:53Requestgithub.comIN AResponsegithub.comIN A20.26.156.215
-
Remote address:8.8.8.8:53Requestgithub.comIN AAAAResponse
-
Remote address:8.8.8.8:53Requestgithub.comIN AAAAResponse
-
Remote address:20.26.156.215:443RequestGET /kh4sh3i/Ransomware-Samples/tree/main/WannaCry HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples
cookie: _gh_sess=ErweKtoMtlWijiW2MF%2B5xbMx0M6dBvSq3EAoOzoRelRMqtoZ%2F1G5eO38GtOqU%2F3WVx9IIKOCHruMj%2BaFVfJNoE2R6fmbXc7wMqpXFXM8axwaylJvEw%2BPMxQOmMbYBui7kdQ%2Ft8FgHJOCIYsxViOcCRIh5D25dEwfSS0S2fr1tS2KyzjX417xfm1O362QPnlmOalRsELO9ogjeNoo1T89%2BSvuqeAO47Cb7RGmJPelI2BcCoomhIuZY54xFEaelmiHckGjgZIVKMsecqvxo9IMpg%3D%3D--wI0BjUBYzuvOpYVB--qeW4Jg4R08091lsBe%2BUQ6g%3D%3D
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
upgrade-insecure-requests: 1
sec-fetch-dest: document
sec-fetch-mode: navigate
sec-fetch-site: same-origin
sec-fetch-user: ?1
te: trailers
ResponseHTTP/2.0 200
date: Sat, 10 Aug 2024 21:55:56 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"65a1ca0f7a4c89d0b260113bfff709fb"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com api.githubcopilot.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com/v1/engines/github-completion/completions proxy.enterprise.githubcopilot.com/v1/engines/github-completion/completions *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
accept-ranges: bytes
x-github-request-id: F3FB:3D726:11B6A44:141E86D:66B7E1EB
-
Remote address:20.26.156.215:443RequestGET /kh4sh3i/Ransomware-Samples/latest-commit/main/WannaCry HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/tree/main/WannaCry
content-type: application/json
github-verified-fetch: true
x-requested-with: XMLHttpRequest
cookie: _gh_sess=ErweKtoMtlWijiW2MF%2B5xbMx0M6dBvSq3EAoOzoRelRMqtoZ%2F1G5eO38GtOqU%2F3WVx9IIKOCHruMj%2BaFVfJNoE2R6fmbXc7wMqpXFXM8axwaylJvEw%2BPMxQOmMbYBui7kdQ%2Ft8FgHJOCIYsxViOcCRIh5D25dEwfSS0S2fr1tS2KyzjX417xfm1O362QPnlmOalRsELO9ogjeNoo1T89%2BSvuqeAO47Cb7RGmJPelI2BcCoomhIuZY54xFEaelmiHckGjgZIVKMsecqvxo9IMpg%3D%3D--wI0BjUBYzuvOpYVB--qeW4Jg4R08091lsBe%2BUQ6g%3D%3D
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers
ResponseHTTP/2.0 200
date: Sat, 10 Aug 2024 21:55:57 GMT
content-type: application/json; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"138ac1ec4b47574e1dc547cb7199c9cc"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com api.githubcopilot.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com/v1/engines/github-completion/completions proxy.enterprise.githubcopilot.com/v1/engines/github-completion/completions *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
accept-ranges: bytes
content-length: 260
x-github-request-id: F3FB:3D726:11B6AA9:141E8F3:66B7E1EC
-
Remote address:20.26.156.215:443RequestGET /kh4sh3i/Ransomware-Samples/tree-commit-info/main/WannaCry HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/tree/main/WannaCry
content-type: application/json
github-verified-fetch: true
x-requested-with: XMLHttpRequest
cookie: _gh_sess=ErweKtoMtlWijiW2MF%2B5xbMx0M6dBvSq3EAoOzoRelRMqtoZ%2F1G5eO38GtOqU%2F3WVx9IIKOCHruMj%2BaFVfJNoE2R6fmbXc7wMqpXFXM8axwaylJvEw%2BPMxQOmMbYBui7kdQ%2Ft8FgHJOCIYsxViOcCRIh5D25dEwfSS0S2fr1tS2KyzjX417xfm1O362QPnlmOalRsELO9ogjeNoo1T89%2BSvuqeAO47Cb7RGmJPelI2BcCoomhIuZY54xFEaelmiHckGjgZIVKMsecqvxo9IMpg%3D%3D--wI0BjUBYzuvOpYVB--qeW4Jg4R08091lsBe%2BUQ6g%3D%3D
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers
ResponseHTTP/2.0 200
date: Sat, 10 Aug 2024 21:55:57 GMT
content-type: application/json; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"ae1919b5b4363f2828c5094f8afb49e1"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com api.githubcopilot.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com/v1/engines/github-completion/completions proxy.enterprise.githubcopilot.com/v1/engines/github-completion/completions *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
accept-ranges: bytes
content-length: 181
x-github-request-id: F3FB:3D726:11B6AA9:141E8F5:66B7E1EC
-
Remote address:20.26.156.215:443RequestGET /kh4sh3i/Ransomware-Samples/deferred-metadata/main/WannaCry HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/tree/main/WannaCry
content-type: application/json
github-verified-fetch: true
x-requested-with: XMLHttpRequest
cookie: _gh_sess=ErweKtoMtlWijiW2MF%2B5xbMx0M6dBvSq3EAoOzoRelRMqtoZ%2F1G5eO38GtOqU%2F3WVx9IIKOCHruMj%2BaFVfJNoE2R6fmbXc7wMqpXFXM8axwaylJvEw%2BPMxQOmMbYBui7kdQ%2Ft8FgHJOCIYsxViOcCRIh5D25dEwfSS0S2fr1tS2KyzjX417xfm1O362QPnlmOalRsELO9ogjeNoo1T89%2BSvuqeAO47Cb7RGmJPelI2BcCoomhIuZY54xFEaelmiHckGjgZIVKMsecqvxo9IMpg%3D%3D--wI0BjUBYzuvOpYVB--qeW4Jg4R08091lsBe%2BUQ6g%3D%3D
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers
ResponseHTTP/2.0 200
date: Sat, 10 Aug 2024 21:55:57 GMT
content-type: application/json; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"36e3ec3fc2b5d5beb354086916b67ef1"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com api.githubcopilot.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com/v1/engines/github-completion/completions proxy.enterprise.githubcopilot.com/v1/engines/github-completion/completions *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
accept-ranges: bytes
content-length: 421
x-github-request-id: F3FB:3D726:11B6AA9:141E8F2:66B7E1EC
-
Remote address:20.26.156.215:443RequestGET /kh4sh3i/Ransomware-Samples/security/overall-count HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: text/fragment+html
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/tree/main/WannaCry
x-requested-with: XMLHttpRequest
cookie: _gh_sess=ErweKtoMtlWijiW2MF%2B5xbMx0M6dBvSq3EAoOzoRelRMqtoZ%2F1G5eO38GtOqU%2F3WVx9IIKOCHruMj%2BaFVfJNoE2R6fmbXc7wMqpXFXM8axwaylJvEw%2BPMxQOmMbYBui7kdQ%2Ft8FgHJOCIYsxViOcCRIh5D25dEwfSS0S2fr1tS2KyzjX417xfm1O362QPnlmOalRsELO9ogjeNoo1T89%2BSvuqeAO47Cb7RGmJPelI2BcCoomhIuZY54xFEaelmiHckGjgZIVKMsecqvxo9IMpg%3D%3D--wI0BjUBYzuvOpYVB--qeW4Jg4R08091lsBe%2BUQ6g%3D%3D
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers
ResponseHTTP/2.0 200
date: Sat, 10 Aug 2024 21:56:01 GMT
content-type: application/json; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"fae61e7007b36b4dd058bfef958b9b0f"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com api.githubcopilot.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com/v1/engines/github-completion/completions proxy.enterprise.githubcopilot.com/v1/engines/github-completion/completions *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
accept-ranges: bytes
content-length: 1906
x-github-request-id: F3FB:3D726:11B6C5D:141EAE9:66B7E1ED
-
GEThttps://github.com/kh4sh3i/Ransomware-Samples/blob/main/WannaCry/Ransomware.WannaCry.zipfirefox.exeRemote address:20.26.156.215:443RequestGET /kh4sh3i/Ransomware-Samples/blob/main/WannaCry/Ransomware.WannaCry.zip HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/blob/main/WannaCry/Ransomware.WannaCry.zip
x-requested-with: XMLHttpRequest
x-github-target: dotcom
x-react-router: json
cookie: _gh_sess=ErweKtoMtlWijiW2MF%2B5xbMx0M6dBvSq3EAoOzoRelRMqtoZ%2F1G5eO38GtOqU%2F3WVx9IIKOCHruMj%2BaFVfJNoE2R6fmbXc7wMqpXFXM8axwaylJvEw%2BPMxQOmMbYBui7kdQ%2Ft8FgHJOCIYsxViOcCRIh5D25dEwfSS0S2fr1tS2KyzjX417xfm1O362QPnlmOalRsELO9ogjeNoo1T89%2BSvuqeAO47Cb7RGmJPelI2BcCoomhIuZY54xFEaelmiHckGjgZIVKMsecqvxo9IMpg%3D%3D--wI0BjUBYzuvOpYVB--qeW4Jg4R08091lsBe%2BUQ6g%3D%3D
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers
ResponseHTTP/2.0 200
date: Sat, 10 Aug 2024 21:56:01 GMT
content-type: application/json; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"36e3ec3fc2b5d5beb354086916b67ef1"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com api.githubcopilot.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com/v1/engines/github-completion/completions proxy.enterprise.githubcopilot.com/v1/engines/github-completion/completions *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
accept-ranges: bytes
content-length: 421
x-github-request-id: F3FB:3D726:11B6C8D:141EB27:66B7E1F1
-
GEThttps://github.com/kh4sh3i/Ransomware-Samples/latest-commit/main/WannaCry/Ransomware.WannaCry.zipfirefox.exeRemote address:20.26.156.215:443RequestGET /kh4sh3i/Ransomware-Samples/latest-commit/main/WannaCry/Ransomware.WannaCry.zip HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/blob/main/WannaCry/Ransomware.WannaCry.zip
content-type: application/json
github-verified-fetch: true
x-requested-with: XMLHttpRequest
cookie: _gh_sess=ErweKtoMtlWijiW2MF%2B5xbMx0M6dBvSq3EAoOzoRelRMqtoZ%2F1G5eO38GtOqU%2F3WVx9IIKOCHruMj%2BaFVfJNoE2R6fmbXc7wMqpXFXM8axwaylJvEw%2BPMxQOmMbYBui7kdQ%2Ft8FgHJOCIYsxViOcCRIh5D25dEwfSS0S2fr1tS2KyzjX417xfm1O362QPnlmOalRsELO9ogjeNoo1T89%2BSvuqeAO47Cb7RGmJPelI2BcCoomhIuZY54xFEaelmiHckGjgZIVKMsecqvxo9IMpg%3D%3D--wI0BjUBYzuvOpYVB--qeW4Jg4R08091lsBe%2BUQ6g%3D%3D
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers
ResponseHTTP/2.0 200
date: Sat, 10 Aug 2024 21:56:01 GMT
content-type: application/json; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
etag: W/"ae1919b5b4363f2828c5094f8afb49e1"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com api.githubcopilot.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com/v1/engines/github-completion/completions proxy.enterprise.githubcopilot.com/v1/engines/github-completion/completions *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
content-encoding: gzip
accept-ranges: bytes
content-length: 181
x-github-request-id: F3FB:3D726:11B6C8F:141EB2A:66B7E1F1
-
GEThttps://github.com/kh4sh3i/Ransomware-Samples/deferred-metadata/main/WannaCry/Ransomware.WannaCry.zipfirefox.exeRemote address:20.26.156.215:443RequestGET /kh4sh3i/Ransomware-Samples/deferred-metadata/main/WannaCry/Ransomware.WannaCry.zip HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: application/json
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/blob/main/WannaCry/Ransomware.WannaCry.zip
content-type: application/json
github-verified-fetch: true
x-requested-with: XMLHttpRequest
cookie: _gh_sess=ErweKtoMtlWijiW2MF%2B5xbMx0M6dBvSq3EAoOzoRelRMqtoZ%2F1G5eO38GtOqU%2F3WVx9IIKOCHruMj%2BaFVfJNoE2R6fmbXc7wMqpXFXM8axwaylJvEw%2BPMxQOmMbYBui7kdQ%2Ft8FgHJOCIYsxViOcCRIh5D25dEwfSS0S2fr1tS2KyzjX417xfm1O362QPnlmOalRsELO9ogjeNoo1T89%2BSvuqeAO47Cb7RGmJPelI2BcCoomhIuZY54xFEaelmiHckGjgZIVKMsecqvxo9IMpg%3D%3D--wI0BjUBYzuvOpYVB--qeW4Jg4R08091lsBe%2BUQ6g%3D%3D
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers
ResponseHTTP/2.0 302
date: Sat, 10 Aug 2024 21:56:04 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
access-control-allow-origin:
location: https://raw.githubusercontent.com/kh4sh3i/Ransomware-Samples/main/WannaCry/Ransomware.WannaCry.zip
cache-control: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com api.githubcopilot.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com/v1/engines/github-completion/completions proxy.enterprise.githubcopilot.com/v1/engines/github-completion/completions *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
content-length: 0
x-github-request-id: F3FB:3D726:11B6DC2:141EC64:66B7E1F1
-
GEThttps://github.com/kh4sh3i/Ransomware-Samples/raw/main/WannaCry/Ransomware.WannaCry.zipfirefox.exeRemote address:20.26.156.215:443RequestGET /kh4sh3i/Ransomware-Samples/raw/main/WannaCry/Ransomware.WannaCry.zip HTTP/2.0
host: github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/blob/main/WannaCry/Ransomware.WannaCry.zip
cookie: _gh_sess=ErweKtoMtlWijiW2MF%2B5xbMx0M6dBvSq3EAoOzoRelRMqtoZ%2F1G5eO38GtOqU%2F3WVx9IIKOCHruMj%2BaFVfJNoE2R6fmbXc7wMqpXFXM8axwaylJvEw%2BPMxQOmMbYBui7kdQ%2Ft8FgHJOCIYsxViOcCRIh5D25dEwfSS0S2fr1tS2KyzjX417xfm1O362QPnlmOalRsELO9ogjeNoo1T89%2BSvuqeAO47Cb7RGmJPelI2BcCoomhIuZY54xFEaelmiHckGjgZIVKMsecqvxo9IMpg%3D%3D--wI0BjUBYzuvOpYVB--qeW4Jg4R08091lsBe%2BUQ6g%3D%3D
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers
-
GEThttps://github.githubassets.com/assets/vendors-node_modules_react-router-dom_dist_index_js-c5568c29d405.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/vendors-node_modules_react-router-dom_dist_index_js-c5568c29d405.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
-
GEThttps://github.githubassets.com/assets/ui_packages_repos-file-tree-view_repos-file-tree-view_ts-ui_packages_feature-request_FeatureR-ec5225-2554f1c99329.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/ui_packages_repos-file-tree-view_repos-file-tree-view_ts-ui_packages_feature-request_FeatureR-ec5225-2554f1c99329.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
-
GEThttps://github.githubassets.com/assets/chunk-vendors-node_modules_primer_behaviors_dist_esm_anchored-position_js-node_modules_github_memoi-4b0bd5-b63d4c76d546.jsfirefox.exeRemote address:185.199.109.154:443RequestGET /assets/chunk-vendors-node_modules_primer_behaviors_dist_esm_anchored-position_js-node_modules_github_memoi-4b0bd5-b63d4c76d546.js HTTP/2.0
host: github.githubassets.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
-
Remote address:8.8.8.8:53Requestcollector.github.comIN AResponsecollector.github.comIN CNAMEglb-db52c2cf8be544.github.comglb-db52c2cf8be544.github.comIN A140.82.112.21
-
Remote address:8.8.8.8:53Requestcollector.github.comIN AResponsecollector.github.comIN CNAMEglb-db52c2cf8be544.github.comglb-db52c2cf8be544.github.comIN A140.82.113.21
-
Remote address:8.8.8.8:53Requestglb-db52c2cf8be544.github.comIN AResponseglb-db52c2cf8be544.github.comIN A140.82.113.22
-
Remote address:8.8.8.8:53Requestglb-db52c2cf8be544.github.comIN AResponseglb-db52c2cf8be544.github.comIN A140.82.113.22
-
Remote address:140.82.112.21:443RequestPOST /github/collect HTTP/2.0
host: collector.github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/tree/main/WannaCry
content-type: text/plain;charset=UTF-8
content-length: 1066
origin: https://github.com
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers
ResponseHTTP/2.0 204
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: Content-Type
access-control-allow-credentials: true
access-control-allow-origin: *
cache-control: no-cache
x-runtime: 0.002393
strict-transport-security: max-age=631138519
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-github-backend: Kubernetes
x-github-request-id: F464:17484A:2441452:368B4A6:66B7E1ED
-
Remote address:140.82.112.21:443RequestPOST /github/collect HTTP/2.0
host: collector.github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/tree/main/WannaCry
content-type: text/plain;charset=UTF-8
content-length: 1036
origin: https://github.com
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers
ResponseHTTP/2.0 204
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: Content-Type
access-control-allow-credentials: true
access-control-allow-origin: *
cache-control: no-cache
x-runtime: 0.003136
strict-transport-security: max-age=631138519
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-github-backend: Kubernetes
x-github-request-id: F464:17484A:2441452:368B4A5:66B7E1ED
-
Remote address:140.82.112.21:443RequestPOST /github/collect HTTP/2.0
host: collector.github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/tree/main/WannaCry
content-type: text/plain;charset=UTF-8
content-length: 1321
origin: https://github.com
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers
ResponseHTTP/2.0 204
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: Content-Type
access-control-allow-credentials: true
access-control-allow-origin: *
cache-control: no-cache
x-runtime: 0.002816
strict-transport-security: max-age=631138519
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-github-backend: Kubernetes
x-github-request-id: F464:17484A:2441464:368B4CE:66B7E1ED
-
Remote address:140.82.112.21:443RequestPOST /github/collect HTTP/2.0
host: collector.github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/blob/main/WannaCry/Ransomware.WannaCry.zip
content-type: text/plain;charset=UTF-8
content-length: 1124
origin: https://github.com
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers
ResponseHTTP/2.0 204
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: Content-Type
access-control-allow-credentials: true
access-control-allow-origin: *
cache-control: no-cache
x-runtime: 0.001810
strict-transport-security: max-age=631138519
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-github-backend: Kubernetes
x-github-request-id: F464:17484A:24415DA:368B80B:66B7E1F1
-
Remote address:140.82.112.21:443RequestPOST /github/collect HTTP/2.0
host: collector.github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/blob/main/WannaCry/Ransomware.WannaCry.zip
content-type: text/plain;charset=UTF-8
content-length: 1114
origin: https://github.com
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers
ResponseHTTP/2.0 204
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: Content-Type
access-control-allow-credentials: true
access-control-allow-origin: *
cache-control: no-cache
x-runtime: 0.002481
strict-transport-security: max-age=631138519
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-github-backend: Kubernetes
x-github-request-id: F464:17484A:24415DA:368B809:66B7E1ED
-
Remote address:140.82.112.21:443RequestPOST /github/collect HTTP/2.0
host: collector.github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/blob/main/WannaCry/Ransomware.WannaCry.zip
content-type: text/plain;charset=UTF-8
content-length: 1099
origin: https://github.com
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers
ResponseHTTP/2.0 204
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: Content-Type
access-control-allow-credentials: true
access-control-allow-origin: *
cache-control: no-cache
x-runtime: 0.002656
strict-transport-security: max-age=631138519
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-github-backend: Kubernetes
x-github-request-id: F464:17484A:24415DA:368B80A:66B7E1F1
-
Remote address:140.82.112.21:443RequestPOST /github/collect HTTP/2.0
host: collector.github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/blob/main/WannaCry/Ransomware.WannaCry.zip
content-type: text/plain;charset=UTF-8
content-length: 1505
origin: https://github.com
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers
ResponseHTTP/2.0 204
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: Content-Type
access-control-allow-credentials: true
access-control-allow-origin: *
cache-control: no-cache
x-runtime: 0.002673
strict-transport-security: max-age=631138519
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-github-backend: Kubernetes
x-github-request-id: F464:17484A:24415E2:368B81C:66B7E1F1
-
Remote address:8.8.8.8:53Requestapi.github.comIN AResponseapi.github.comIN A20.26.156.210
-
Remote address:8.8.8.8:53Requestapi.github.comIN AResponseapi.github.comIN A20.26.156.210
-
Remote address:8.8.8.8:53Requestglb-db52c2cf8be544.github.comIN AAAAResponse
-
Remote address:8.8.8.8:53Requestglb-db52c2cf8be544.github.comIN AAAAResponse
-
Remote address:8.8.8.8:53Requestapi.github.comIN AResponseapi.github.comIN A20.26.156.210
-
Remote address:8.8.8.8:53Requestapi.github.comIN AResponseapi.github.comIN A20.26.156.210
-
Remote address:20.26.156.210:443RequestPOST /_private/browser/stats HTTP/2.0
host: api.github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/tree/main/WannaCry
content-type: text/plain;charset=UTF-8
content-length: 431
origin: https://github.com
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers
ResponseHTTP/2.0 200
content-type: text/plain
content-length: 0
cache-control: no-cache
x-ratelimit-limit: 60
x-ratelimit-remaining: 60
x-ratelimit-reset: 1723330557
x-ratelimit-used: 0
x-ratelimit-resource: core
x-github-media-type: github.v3; format=json
x-github-api-version-selected: 2022-11-28
access-control-expose-headers: ETag, Link, Location, Retry-After, X-GitHub-OTP, X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Used, X-RateLimit-Resource, X-RateLimit-Reset, X-OAuth-Scopes, X-Accepted-OAuth-Scopes, X-Poll-Interval, X-GitHub-Media-Type, X-GitHub-SSO, X-GitHub-Request-Id, Deprecation, Sunset
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
content-security-policy: default-src 'none'
vary: Accept-Encoding, Accept, X-Requested-With
server: github.com
x-github-request-id: F466:42180:1A82D67:1C0CADF:66B7E1ED
-
Remote address:20.26.156.210:443RequestPOST /_private/browser/stats HTTP/2.0
host: api.github.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/kh4sh3i/Ransomware-Samples/tree/main/WannaCry
content-type: text/plain;charset=UTF-8
content-length: 290
origin: https://github.com
cookie: _octo=GH1.1.1794739429.1723326361
cookie: logged_in=no
cookie: preferred_color_mode=light
cookie: tz=UTC
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers
ResponseHTTP/2.0 200
content-type: text/plain
content-length: 0
cache-control: no-cache
x-ratelimit-limit: 60
x-ratelimit-remaining: 60
x-ratelimit-reset: 1723330557
x-ratelimit-used: 0
x-ratelimit-resource: core
x-github-media-type: github.v3; format=json
x-github-api-version-selected: 2022-11-28
access-control-expose-headers: ETag, Link, Location, Retry-After, X-GitHub-OTP, X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Used, X-RateLimit-Resource, X-RateLimit-Reset, X-OAuth-Scopes, X-Accepted-OAuth-Scopes, X-Poll-Interval, X-GitHub-Media-Type, X-GitHub-SSO, X-GitHub-Request-Id, Deprecation, Sunset
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
content-security-policy: default-src 'none'
vary: Accept-Encoding, Accept, X-Requested-With
server: github.com
x-github-request-id: F466:42180:1A82D7A:1C0CAFA:66B7E1ED
-
Remote address:8.8.8.8:53Requestapi.github.comIN AAAAResponse
-
Remote address:8.8.8.8:53Requestapi.github.comIN AAAA
-
Remote address:185.199.110.133:443RequestGET /u/64693844?v=4&size=40 HTTP/2.0
host: avatars.githubusercontent.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://github.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: cross-site
if-modified-since: Mon, 07 Nov 2022 17:46:55 GMT
if-none-match: "8db50e64b91068ff6e747fa58fb1ac6cb9d882cf6123204f9b409101417f4652"
te: trailers
ResponseHTTP/2.0 304
via: 1.1 varnish
cache-control: max-age=300
etag: "8db50e64b91068ff6e747fa58fb1ac6cb9d882cf6123204f9b409101417f4652"
x-served-by: cache-lcy-eglc8600078-LCY
x-cache: HIT
x-cache-hits: 0
x-timer: S1723326958.686980,VS0,VE1
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-fastly-request-id: f464a7dbc0f72e0b55fdc459f165b7ab1847162d
expires: Sat, 10 Aug 2024 22:00:57 GMT
vary: Authorization,Accept-Encoding
-
Remote address:8.8.8.8:53Request21.112.82.140.in-addr.arpaIN PTRResponse21.112.82.140.in-addr.arpaIN PTRlb-140-82-112-21-iadgithubcom
-
Remote address:8.8.8.8:53Request21.112.82.140.in-addr.arpaIN PTRResponse21.112.82.140.in-addr.arpaIN PTRlb-140-82-112-21-iadgithubcom
-
GEThttps://raw.githubusercontent.com/kh4sh3i/Ransomware-Samples/main/WannaCry/Ransomware.WannaCry.zipfirefox.exeRemote address:185.199.110.133:443RequestGET /kh4sh3i/Ransomware-Samples/main/WannaCry/Ransomware.WannaCry.zip HTTP/2.0
host: raw.githubusercontent.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
origin: https://github.com
referer: https://github.com/
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
ResponseHTTP/2.0 200
content-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox
content-type: application/zip
etag: W/"91b6a300afb75099d6a3242567354e1533d411750cd5e786d4cfa491b4ad2420"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: deny
x-xss-protection: 1; mode=block
x-github-request-id: 883C:256887:667A30:7F27E9:66B7E1EF
accept-ranges: bytes
date: Sat, 10 Aug 2024 21:56:04 GMT
via: 1.1 varnish
x-served-by: cache-lon4240-LON
x-cache: MISS
x-cache-hits: 0
x-timer: S1723326964.272682,VS0,VE143
vary: Authorization,Accept-Encoding,Origin
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-fastly-request-id: c092a1fc4b5023a59756c76dd47c7395064a4b71
expires: Sat, 10 Aug 2024 22:01:04 GMT
source-age: 0
content-length: 3481589
-
Remote address:8.8.8.8:53Requestprod.balrog.prod.cloudops.mozgcp.netIN AResponseprod.balrog.prod.cloudops.mozgcp.netIN A35.244.181.201
-
Remote address:8.8.8.8:53Requestprod.balrog.prod.cloudops.mozgcp.netIN A
-
Remote address:8.8.8.8:53Requestprod.balrog.prod.cloudops.mozgcp.netIN AAAAResponse
-
Remote address:8.8.8.8:53Requestprod.balrog.prod.cloudops.mozgcp.netIN AAAAResponse
-
Remote address:8.8.8.8:53Requestprod.remote-settings.prod.webservices.mozgcp.netIN AResponseprod.remote-settings.prod.webservices.mozgcp.netIN A34.149.100.209
-
Remote address:8.8.8.8:53Requestprod.remote-settings.prod.webservices.mozgcp.netIN AResponseprod.remote-settings.prod.webservices.mozgcp.netIN A34.149.100.209
-
Remote address:8.8.8.8:53Requestprod.remote-settings.prod.webservices.mozgcp.netIN AAAAResponse
-
Remote address:8.8.8.8:53Requestprod.remote-settings.prod.webservices.mozgcp.netIN AAAA
-
Remote address:8.8.8.8:53Requestprod.content-signature-chains.prod.webservices.mozgcp.netIN AResponseprod.content-signature-chains.prod.webservices.mozgcp.netIN A34.160.144.191
-
Remote address:8.8.8.8:53Requestprod.content-signature-chains.prod.webservices.mozgcp.netIN AResponseprod.content-signature-chains.prod.webservices.mozgcp.netIN A34.160.144.191
-
Remote address:8.8.8.8:53Requestprod.content-signature-chains.prod.webservices.mozgcp.netIN AAAAResponseprod.content-signature-chains.prod.webservices.mozgcp.netIN AAAA2600:1901:0:92a9::
-
Remote address:8.8.8.8:53Requestprod.content-signature-chains.prod.webservices.mozgcp.netIN AAAAResponseprod.content-signature-chains.prod.webservices.mozgcp.netIN AAAA2600:1901:0:92a9::
-
Remote address:8.8.8.8:53Requeste86303.dscx.akamaiedge.netIN AResponsee86303.dscx.akamaiedge.netIN A95.101.143.201e86303.dscx.akamaiedge.netIN A95.101.143.219
-
Remote address:8.8.8.8:53Requeste86303.dscx.akamaiedge.netIN AResponsee86303.dscx.akamaiedge.netIN A95.101.143.219e86303.dscx.akamaiedge.netIN A95.101.143.201
-
Remote address:8.8.8.8:53Requeste86303.dscx.akamaiedge.netIN AAAAResponsee86303.dscx.akamaiedge.netIN AAAA2a02:26f0:1780:d::213:f823e86303.dscx.akamaiedge.netIN AAAA2a02:26f0:1780:d::213:f81f
-
Remote address:8.8.8.8:53Requeste86303.dscx.akamaiedge.netIN AAAA
-
Remote address:8.8.8.8:53Requestr.bing.comIN AResponser.bing.comIN CNAMEp-static.bing.trafficmanager.netp-static.bing.trafficmanager.netIN CNAMEr.bing.com.edgekey.netr.bing.com.edgekey.netIN CNAMEe86303.dscx.akamaiedge.nete86303.dscx.akamaiedge.netIN A95.101.143.219e86303.dscx.akamaiedge.netIN A95.101.143.201
-
Remote address:8.8.8.8:53Requestr.bing.comIN AResponser.bing.comIN CNAMEp-static.bing.trafficmanager.netp-static.bing.trafficmanager.netIN CNAMEr.bing.com.edgekey.netr.bing.com.edgekey.netIN CNAMEe86303.dscx.akamaiedge.nete86303.dscx.akamaiedge.netIN A95.101.143.219e86303.dscx.akamaiedge.netIN A95.101.143.201
-
Remote address:8.8.8.8:53Requestth.bing.comIN AResponseth.bing.comIN CNAMEp-th.bing.com.trafficmanager.netp-th.bing.com.trafficmanager.netIN CNAMEth.bing.com.edgekey.netth.bing.com.edgekey.netIN CNAMEe86303.dscx.akamaiedge.nete86303.dscx.akamaiedge.netIN A95.101.143.201e86303.dscx.akamaiedge.netIN A95.101.143.219
-
Remote address:8.8.8.8:53Requestth.bing.comIN AResponseth.bing.comIN CNAMEp-th.bing.com.trafficmanager.netp-th.bing.com.trafficmanager.netIN CNAMEth.bing.com.edgekey.netth.bing.com.edgekey.netIN CNAMEe86303.dscx.akamaiedge.nete86303.dscx.akamaiedge.netIN A95.101.143.219e86303.dscx.akamaiedge.netIN A95.101.143.201e86303.dscx.akamaiedge.netIN A88.221.135.33
-
Remote address:8.8.8.8:53Requestwww.bing.com.cdn.cloudflare.netIN AResponsewww.bing.com.cdn.cloudflare.netIN A172.64.154.167www.bing.com.cdn.cloudflare.netIN A104.18.33.89
-
Remote address:8.8.8.8:53Requestwww.bing.com.cdn.cloudflare.netIN AResponsewww.bing.com.cdn.cloudflare.netIN A104.18.33.89www.bing.com.cdn.cloudflare.netIN A172.64.154.167
-
Remote address:8.8.8.8:53Requestwww.bing.com.cdn.cloudflare.netIN AAAAResponsewww.bing.com.cdn.cloudflare.netIN AAAA2606:4700:4400::ac40:9aa7www.bing.com.cdn.cloudflare.netIN AAAA2606:4700:4400::6812:2159
-
Remote address:8.8.8.8:53Requestwww.bing.com.cdn.cloudflare.netIN AAAAResponsewww.bing.com.cdn.cloudflare.netIN AAAA2606:4700:4400::6812:2159www.bing.com.cdn.cloudflare.netIN AAAA2606:4700:4400::ac40:9aa7
-
Remote address:8.8.8.8:53Requestlocation.services.mozilla.comIN AResponselocation.services.mozilla.comIN CNAMEprod.classify-client.prod.webservices.mozgcp.netprod.classify-client.prod.webservices.mozgcp.netIN A35.190.72.216
-
Remote address:8.8.8.8:53Requestlocation.services.mozilla.comIN AResponselocation.services.mozilla.comIN CNAMEprod.classify-client.prod.webservices.mozgcp.netprod.classify-client.prod.webservices.mozgcp.netIN A35.190.72.216
-
GEThttps://location.services.mozilla.com/v1/country?key=7e40f68c-7938-4c5d-9f95-e61647c213ebfirefox.exeRemote address:35.190.72.216:443RequestGET /v1/country?key=7e40f68c-7938-4c5d-9f95-e61647c213eb HTTP/2.0
host: location.services.mozilla.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
content-type: application/json
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: cross-site
te: trailers
-
Remote address:8.8.8.8:53Requestprod.classify-client.prod.webservices.mozgcp.netIN AResponseprod.classify-client.prod.webservices.mozgcp.netIN A35.190.72.216
-
Remote address:8.8.8.8:53Requestprod.classify-client.prod.webservices.mozgcp.netIN AResponseprod.classify-client.prod.webservices.mozgcp.netIN A35.190.72.216
-
Remote address:8.8.8.8:53Requestprod.classify-client.prod.webservices.mozgcp.netIN AAAAResponse
-
Remote address:8.8.8.8:53Requestprod.classify-client.prod.webservices.mozgcp.netIN AAAAResponse
-
Remote address:8.8.8.8:53Request216.72.190.35.in-addr.arpaIN PTRResponse216.72.190.35.in-addr.arpaIN PTR2167219035bcgoogleusercontentcom
-
Remote address:8.8.8.8:53Request216.72.190.35.in-addr.arpaIN PTRResponse216.72.190.35.in-addr.arpaIN PTR2167219035bcgoogleusercontentcom
-
Remote address:8.8.8.8:53Request189.40.188.131.in-addr.arpaIN PTRResponse189.40.188.131.in-addr.arpaIN PTRdespari informatikuni-erlangende
-
Remote address:8.8.8.8:53Request189.40.188.131.in-addr.arpaIN PTRResponse189.40.188.131.in-addr.arpaIN PTRdespari informatikuni-erlangende
-
Remote address:8.8.8.8:53Request244.244.23.193.in-addr.arpaIN PTRResponse244.244.23.193.in-addr.arpaIN PTRdannenbergtorauthde
-
Remote address:8.8.8.8:53Request244.244.23.193.in-addr.arpaIN PTRResponse244.244.23.193.in-addr.arpaIN PTRdannenbergtorauthde
-
Remote address:8.8.8.8:53Request78.193.25.171.in-addr.arpaIN PTRResponse78.193.25.171.in-addr.arpaIN PTRtor-exit-read-medfrise
-
Remote address:8.8.8.8:53Request78.193.25.171.in-addr.arpaIN PTRResponse78.193.25.171.in-addr.arpaIN PTRtor-exit-read-medfrise
-
Remote address:8.8.8.8:53Request9.193.25.171.in-addr.arpaIN PTRResponse9.193.25.171.in-addr.arpaIN PTRmaatuska4711se
-
Remote address:8.8.8.8:53Request9.193.25.171.in-addr.arpaIN PTRResponse9.193.25.171.in-addr.arpaIN PTRmaatuska4711se
-
Remote address:8.8.8.8:53Request12.48.183.95.in-addr.arpaIN PTRResponse12.48.183.95.in-addr.arpaIN PTRhosted-bysolarcomch
-
Remote address:8.8.8.8:53Request12.48.183.95.in-addr.arpaIN PTRResponse12.48.183.95.in-addr.arpaIN PTRhosted-bysolarcomch
-
46 B 1
-
95.100.245.144:443https://www.microsoft.com/en-us/edge/server/download?form=MA13FJtls, http2MicrosoftEdgeCP.exe2.6kB 20.0kB 31 26
HTTP Request
GET https://www.microsoft.com/en-us/edge/server/download?form=MA13FJHTTP Response
200 -
1.5kB 7.0kB 19 16
-
1.3kB 7.4kB 18 15
-
152.199.19.160:443https://ajax.aspnetcdn.com/ajax/jquery.ui/1.11.1/jquery-ui.min.jstls, http2MicrosoftEdgeCP.exe4.9kB 106.1kB 90 84
HTTP Request
GET https://ajax.aspnetcdn.com/ajax/jQuery/jquery-3.6.4.min.jsHTTP Request
GET https://ajax.aspnetcdn.com/ajax/jquery.ui/1.11.1/jquery-ui.min.jsHTTP Response
200HTTP Response
200 -
1.3kB 7.8kB 19 16
-
1.4kB 7.8kB 20 17
-
13.107.246.64:443https://edgestatic.azureedge.net/shared/edgeweb/fonts/segoeui-vf-display-bold.2756fcb.woff2tls, http2MicrosoftEdgeCP.exe72.8kB 2.1MB 1533 1515
HTTP Request
GET https://edgestatic.azureedge.net/shared/edgeweb/css/b2275d2.cssHTTP Request
GET https://edgestatic.azureedge.net/shared/edgeweb/css/5c176d7.cssHTTP Request
GET https://edgestatic.azureedge.net/shared/edgeweb/css/97af919.cssHTTP Request
GET https://edgestatic.azureedge.net/shared/edgeweb/css/f94b2c3.cssHTTP Request
GET https://edgestatic.azureedge.net/shared/edgeweb/5d56b21.jsHTTP Request
GET https://edgestatic.azureedge.net/shared/edgeweb/96ca61e.jsHTTP Request
GET https://edgestatic.azureedge.net/shared/edgeweb/b8f89d1.jsHTTP Request
GET https://edgestatic.azureedge.net/shared/edgeweb/e286996.jsHTTP Request
GET https://edgestatic.azureedge.net/shared/edgeweb/761c495.jsHTTP Request
GET https://edgestatic.azureedge.net/shared/edgeweb/f4d8389.jsHTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Request
GET https://edgestatic.azureedge.net/shared/edgeweb/fonts/segoeui-vf-display-light.e452665.woff2HTTP Request
GET https://edgestatic.azureedge.net/shared/edgeweb/fonts/segoeui-vf-display-semilight.1338e9a.woff2HTTP Request
GET https://edgestatic.azureedge.net/shared/edgeweb/fonts/segoeui-vf-display.e85854a.woff2HTTP Request
GET https://edgestatic.azureedge.net/shared/edgeweb/fonts/segoeui-vf-display-semibold.1977a17.woff2HTTP Request
GET https://edgestatic.azureedge.net/shared/edgeweb/fonts/segoeui-vf-display-bold.2756fcb.woff2HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200 -
1.3kB 7.9kB 19 17
-
1.4kB 7.8kB 20 17
-
1.3kB 7.9kB 19 16
-
1.3kB 7.8kB 19 17
-
13.107.246.64:443https://edgestatic.azureedge.net/welcome/static/favicon.pngtls, http2MicrosoftEdge.exe2.3kB 16.5kB 27 24
HTTP Request
GET https://edgestatic.azureedge.net/welcome/static/favicon.pngHTTP Response
200 -
1.3kB 7.1kB 18 15
-
152.199.21.175:443https://msedge.sf.dl.delivery.mp.microsoft.com/filestreamingservice/files/930b8c80-17c1-4850-b5ee-3dd601265f34/MicrosoftEdgeSetup.exetls, http2MicrosoftEdgeCP.exe179.6kB 5.1MB 3704 3689
HTTP Request
GET https://msedge.sf.dl.delivery.mp.microsoft.com/filestreamingservice/files/930b8c80-17c1-4850-b5ee-3dd601265f34/MicrosoftEdgeSetup.exeHTTP Response
200HTTP Request
GET https://msedge.sf.dl.delivery.mp.microsoft.com/filestreamingservice/files/930b8c80-17c1-4850-b5ee-3dd601265f34/MicrosoftEdgeSetup.exeHTTP Response
200HTTP Request
GET https://msedge.sf.dl.delivery.mp.microsoft.com/filestreamingservice/files/930b8c80-17c1-4850-b5ee-3dd601265f34/MicrosoftEdgeSetup.exeHTTP Response
200 -
1.3kB 7.0kB 17 16
-
204.79.197.203:443https://www.msn.com/bundles/v1/edge/latest/manifest.appcache?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=defaulttls, http2MicrosoftEdgeCP.exe10.3kB 154.1kB 149 146
HTTP Request
GET https://www.msn.com/spartan/ntp?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=defaultHTTP Response
200HTTP Request
GET https://www.msn.com/bundles/v1/edge/latest/manifest.appcache?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=defaultHTTP Response
200HTTP Request
GET https://www.msn.com/spartan/ntp?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=defaultHTTP Response
200HTTP Request
GET https://www.msn.com/bundles/v1/edge/latest/manifest.appcache?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=defaultHTTP Response
200 -
1.1kB 4.6kB 15 14
-
95.101.143.105:443https://assets.msn.com/staticsb/statics/latest/oneTrust/1.9/scripttemplates/202310.2.0/otTCF.jstls, http2MicrosoftEdgeCP.exe19.9kB 491.5kB 376 369
HTTP Request
GET https://assets.msn.com/staticsb/statics/latest/oneTrust/1.9/scripttemplates/otSDKStub.jsHTTP Request
GET https://assets.msn.com/bundles/v1/edge/latest/common.5dd7cff85de67632bfd7.jsHTTP Request
GET https://assets.msn.com/bundles/v1/edge/latest/vendors.c47bf4f4981f23895ddb.jsHTTP Request
GET https://assets.msn.com/bundles/v1/edge/latest/microsoft.8aa91a5fe4f5d8517ae1.jsHTTP Response
200HTTP Response
200HTTP Request
GET https://assets.msn.com/staticsb/statics/latest/oneTrust/1.9/consent/55a804ab-e5c6-4b97-9319-86263d365d28/55a804ab-e5c6-4b97-9319-86263d365d28.jsonHTTP Response
200HTTP Response
200HTTP Response
200HTTP Request
GET https://assets.msn.com/staticsb/statics/latest/oneTrust/1.9/scripttemplates/202310.2.0/otBannerSdk.jsHTTP Response
200HTTP Request
GET https://assets.msn.com/staticsb/statics/latest/oneTrust/1.9/consent/55a804ab-e5c6-4b97-9319-86263d365d28/e51556d4-5848-4a4b-a5e2-bc98431e1bf7/en-gb.jsonHTTP Request
GET https://assets.msn.com/staticsb/statics/latest/oneTrust/1.9/consent/55a804ab-e5c6-4b97-9319-86263d365d28/iab2V2Data.jsonHTTP Request
GET https://assets.msn.com/staticsb/statics/latest/oneTrust/1.9/scripttemplates/202310.2.0/otTCF.jsHTTP Response
200HTTP Response
200HTTP Response
200 -
1.1kB 4.6kB 15 14
-
1.1kB 4.6kB 15 13
-
1.3kB 6.9kB 17 11
-
13.89.178.27:443https://browser.events.data.msn.com/OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-2.2.2&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1723326221000&w=0&anoncknm=app_anontls, http2MicrosoftEdgeCP.exe25.4kB 10.0kB 41 23
HTTP Request
POST https://browser.events.data.msn.com/OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-2.2.2&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1723326221000&w=0&anoncknm=app_anonHTTP Request
POST https://browser.events.data.msn.com/OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-2.2.2&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1723326221000&w=0&anoncknm=app_anonHTTP Request
POST https://browser.events.data.msn.com/OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-2.2.2&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1723326221000&w=0&anoncknm=app_anonHTTP Response
200HTTP Response
200HTTP Response
200 -
1.8kB 10.3kB 20 19
HTTP Request
GET https://www.msn.com/favicon.icoHTTP Response
200 -
1.4kB 8.4kB 17 16
-
20.114.58.89:443https://msedge.api.cdp.microsoft.com/api/v1.1/internal/contents/Browser/namespaces/Default/names/msedge-stable-win-x64/versions/127.0.2651.98/files?action=GenerateDownloadInfo&foregroundPriority=truetls, httpMicrosoftEdgeUpdate.exe3.1kB 12.3kB 14 16
HTTP Request
POST https://msedge.api.cdp.microsoft.com/api/v2/contents/Browser/namespaces/Default/names?action=batchupdatesHTTP Response
200HTTP Request
POST https://msedge.api.cdp.microsoft.com/api/v1.1/internal/contents/Browser/namespaces/Default/names/msedge-stable-win-x64/versions/127.0.2651.98/files?action=GenerateDownloadInfo&foregroundPriority=trueHTTP Response
200 -
217.20.58.36:80http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dhttp729 B 959 B 6 5
HTTP Request
HEAD http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
200 -
217.20.58.36:80http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dhttp2.5MB 151.8MB 51374 108746
HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206 -
1.2kB 8.2kB 16 15
-
1.2kB 4.9kB 16 15
-
95.101.143.201:443https://www.bing.com/cortanaassist/rules?cc=US&version=6tls, http2MicrosoftEdge.exe3.5kB 64.5kB 61 58
HTTP Request
GET https://www.bing.com/cortanaassist/rules?cc=US&version=6HTTP Response
404 -
-
-
5.7kB 184.9kB 78 147
HTTP Request
GET https://www.bing.com/search?form=MOZLBR&pc=MOZI&q=ransoware+data+base+githubHTTP Response
200HTTP Request
GET https://www.bing.com/rp/B6jGHby7hXuEC7enS8xiNSUwqXw.pngHTTP Response
200 -
1.3kB 5.1kB 12 11
-
2.2kB 14.3kB 22 30
HTTP Request
GET https://r.bing.com/rp/NrVxAJRIC-KRKL-qHvM71lVoCPs.br.cssHTTP Response
200 -
1.4kB 5.1kB 13 12
-
1.3kB 5.0kB 12 10
-
1.3kB 5.2kB 12 12
-
1.3kB 5.1kB 12 12
-
1.3kB 5.2kB 12 14
-
1.3kB 5.1kB 11 12
-
40.126.31.69:443https://login.microsoftonline.com/common/oauth2/authorize?client_id=9ea1ad79-fdb6-4f9a-8bc3-2b70f96e34c7&response_type=id_token+code&nonce=20bc090e-636b-4a61-8891-1b90a7018730&redirect_uri=https%3a%2f%2fwww.bing.com%2forgid%2fidtoken%2fconditional&scope=openid%20email%20profile%209ea1ad79-fdb6-4f9a-8bc3-2b70f96e34c7/.default&response_mode=form_post&instance_aware=true&msafed=0&prompt=none&state=%7b%22ig%22%3a%2264DA08D00105497A9890DC74AC2CACB8%22%7dtls, httpfirefox.exe2.6kB 7.6kB 23 22
HTTP Request
GET https://login.microsoftonline.com/common/oauth2/authorize?client_id=9ea1ad79-fdb6-4f9a-8bc3-2b70f96e34c7&response_type=id_token+code&nonce=20bc090e-636b-4a61-8891-1b90a7018730&redirect_uri=https%3a%2f%2fwww.bing.com%2forgid%2fidtoken%2fconditional&scope=openid%20email%20profile%209ea1ad79-fdb6-4f9a-8bc3-2b70f96e34c7/.default&response_mode=form_post&instance_aware=true&msafed=0&prompt=none&state=%7b%22ig%22%3a%2264DA08D00105497A9890DC74AC2CACB8%22%7dHTTP Response
200 -
13.107.5.80:443https://services.bingapis.com/suggestionchips/api/v1/cannedChipstls, http2firefox.exe2.7kB 10.2kB 24 25
HTTP Request
OPTIONS https://services.bingapis.com/suggestionchips/api/v1/cannedChipsHTTP Response
204HTTP Request
POST https://services.bingapis.com/suggestionchips/api/v1/cannedChipsHTTP Response
200 -
1.4kB 8.3kB 13 14
-
20.26.156.215:443https://github.com/kh4sh3i/Ransomware-Samples/raw/main/Jigsaw/Ransomware.Jigsaw.ziptls, http2firefox.exe10.1kB 324.4kB 99 297
HTTP Request
GET https://github.com/kh4sh3i/Ransomware-SamplesHTTP Response
200HTTP Request
GET https://github.com/kh4sh3i/Ransomware-Samples/raw/main/ransomware.pngHTTP Response
302HTTP Request
GET https://github.com/kh4sh3i/Ransomware-Samples/refs?type=branchHTTP Request
GET https://github.com/kh4sh3i/Ransomware-Samples/latest-commit/mainHTTP Request
GET https://github.com/kh4sh3i/Ransomware-Samples/tree-commit-info/mainHTTP Request
GET https://github.com/kh4sh3i/Ransomware-Samples/overview-files/mainHTTP Request
GET https://github.com/kh4sh3i/Ransomware-Samples/branch-countHTTP Request
GET https://github.com/kh4sh3i/Ransomware-Samples/tag-countHTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Request
GET https://github.com/fluidicon.pngHTTP Response
200HTTP Request
GET https://github.com/kh4sh3i/Ransomware-Samples/security/overall-countHTTP Request
GET https://github.com/kh4sh3i/Ransomware-Samples/spoofed_commit_check/71f6062209bed1c52b63637746239868da0da49eHTTP Request
GET https://github.com/kh4sh3i/Ransomware-Samples/hovercards/citation/sidebar_partial?tree_name=mainHTTP Request
GET https://github.com/kh4sh3i/Ransomware-Samples/used_by_listHTTP Response
200HTTP Response
204HTTP Response
200HTTP Response
200HTTP Request
GET https://github.com/kh4sh3i/Ransomware-Samples/tree/main/TeslaCryptHTTP Response
200HTTP Request
GET https://github.com/kh4sh3i/Ransomware-Samples/latest-commit/main/TeslaCryptHTTP Request
GET https://github.com/kh4sh3i/Ransomware-Samples/tree-commit-info/main/TeslaCryptHTTP Request
GET https://github.com/kh4sh3i/Ransomware-Samples/deferred-metadata/main/TeslaCryptHTTP Response
200HTTP Response
200HTTP Response
200HTTP Request
GET https://github.com/kh4sh3i/Ransomware-Samples/tree/main/JigsawHTTP Response
200HTTP Request
GET https://github.com/kh4sh3i/Ransomware-Samples/latest-commit/main/JigsawHTTP Request
GET https://github.com/kh4sh3i/Ransomware-Samples/tree-commit-info/main/JigsawHTTP Request
GET https://github.com/kh4sh3i/Ransomware-Samples/deferred-metadata/main/JigsawHTTP Response
200HTTP Response
200HTTP Response
200HTTP Request
GET https://github.com/kh4sh3i/Ransomware-Samples/blob/main/TeslaCrypt/Ransomware.TeslaCrypt.zipHTTP Response
200HTTP Request
GET https://github.com/kh4sh3i/Ransomware-Samples/latest-commit/main/TeslaCrypt/Ransomware.TeslaCrypt.zipHTTP Request
GET https://github.com/kh4sh3i/Ransomware-Samples/deferred-metadata/main/TeslaCrypt/Ransomware.TeslaCrypt.zipHTTP Response
200HTTP Response
200HTTP Request
GET https://github.com/kh4sh3i/Ransomware-Samples/raw/main/TeslaCrypt/Ransomware.TeslaCrypt.zipHTTP Response
302HTTP Request
GET https://github.com/kh4sh3i/Ransomware-Samples/blob/main/Jigsaw/Ransomware.Jigsaw.zipHTTP Response
200HTTP Request
GET https://github.com/kh4sh3i/Ransomware-Samples/latest-commit/main/Jigsaw/Ransomware.Jigsaw.zipHTTP Request
GET https://github.com/kh4sh3i/Ransomware-Samples/deferred-metadata/main/Jigsaw/Ransomware.Jigsaw.zipHTTP Response
200HTTP Response
200HTTP Request
GET https://github.com/kh4sh3i/Ransomware-Samples/raw/main/Jigsaw/Ransomware.Jigsaw.zipHTTP Response
302 -
185.199.109.154:443https://github.githubassets.com/assets/react-code-view.234ae39ff1fa1232236c.module.csstls, http2firefox.exe70.4kB 1.7MB 851 1348
HTTP Request
GET https://github.githubassets.com/assets/light-efd2f2257c96.cssHTTP Request
GET https://github.githubassets.com/assets/react-lib-7b7b5264f6c1.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_primer_octicons-react_di-b40d97-06881c63f955.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Box_Box_js-55a9038b54f0.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Button_Button_js-b0edbfb6a9e5.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_TooltipV2_Tooltip_js-4d5019830e3c.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_clsx_dist_clsx_m_js-node_modules_primer_react_node_modules_primer_octico-c56103-e91295e60abd.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_ActionList_index_js-c4c6e3be7790.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_ActionMenu_ActionMenu_js-node_modules_primer_react_-5b2420-048f91dcedb3.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Text_Text_js-node_modules_primer_react_lib-esm_Text-7845da-3bcd176ee601.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_FormControl_FormControl_js-e73d967c1bb4.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_SelectPanel_SelectPanel_js-da4b9b447323.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Dialog_js-node_modules_primer_react_lib-esm_Feature-c10078-a365ebbc3112.jsHTTP Request
GET https://github.githubassets.com/assets/ui_packages_react-core_create-browser-history_ts-ui_packages_safe-storage_safe-storage_ts-ui_-682c2c-7a1e99981675.jsHTTP Request
GET https://github.githubassets.com/assets/notifications-subscriptions-menu-7732df7cded3.jsHTTP Request
GET https://github.githubassets.com/assets/react-lib-7b7b5264f6c1.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_primer_octicons-react_di-b40d97-06881c63f955.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Box_Box_js-55a9038b54f0.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Button_Button_js-b0edbfb6a9e5.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_TooltipV2_Tooltip_js-4d5019830e3c.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_clsx_dist_clsx_m_js-node_modules_primer_react_node_modules_primer_octico-c56103-e91295e60abd.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_ActionList_index_js-c4c6e3be7790.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_ActionMenu_ActionMenu_js-node_modules_primer_react_-5b2420-048f91dcedb3.jsHTTP Request
GET https://github.githubassets.com/assets/ui_packages_react-core_create-browser-history_ts-ui_packages_safe-storage_safe-storage_ts-ui_-682c2c-7a1e99981675.jsHTTP Request
GET https://github.githubassets.com/assets/repository-992e95451f25.cssHTTP Request
GET https://github.githubassets.com/assets/code-34406d39e629.cssHTTP Request
GET https://github.githubassets.com/assets/wp-runtime-6ea6ec8e4769.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_dompurify_dist_purify_js-89a69c248502.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_oddbird_popover-polyfill_dist_popover_js-56729c905fe2.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_smoothscroll-polyfill_di-75db2e-686488490524.jsHTTP Request
GET https://github.githubassets.com/assets/environment-cd098098ff2e.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_github_selector-observer_dist_index_esm_js-f690fd9ae3d5.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_primer_behaviors_dist_esm_focus-zone_js-c9086a4fb62b.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_github_relative-time-element_dist_index_js-f9b958f5f2df.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_primer_behaviors_dist_esm_anchored-position_js-node_modules_github_combo-aea225-dcf5851b6d7d.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_github_text-expander-element_dist_index_js-cd48220d74d5.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_github_auto-complete-element_dist_index_js-node_modules_github_details-d-ed9a97-841122a1e9d4.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_delegated-events_dist_in-3efda3-701acb69193f.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_github_filter-input-element_dist_index_js-node_modules_github_remote-inp-b7d8f4-2355048ff048.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_github_catalyst_lib_index_js-node_modules_github_clipboard-copy-element_-782ca5-54763cd55b96.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_github_file-attachment-element_dist_index_js-node_modules_primer_view-co-3959a9-5779869d7165.jsHTTP Request
GET https://github.githubassets.com/assets/app_assets_modules_github_onfocus_ts-ui_packages_trusted-types-policies_policy_ts-ui_packages-6fe316-9d50d6f10c3d.jsHTTP Request
GET https://github.githubassets.com/assets/github-elements-b5a402753026.jsHTTP Request
GET https://github.githubassets.com/assets/element-registry-2b312e7d31e7.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_github_catalyst_lib_index_js-node_modules_github_hydro-analytics-client_-7901e7-dc88587c14ed.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_braintree_browser-detection_dist_browser-detection_js-node_modules_stack-68835d-a18220f1db8d.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_lit-html_lit-html_js-ce7225a304c5.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_morphdom_dist_morphdom-e-7c534c-f8a5485c982a.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_github_turbo_dist_turbo_es2017-esm_js-858e043fcf76.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-893f9f-6cf3320416b8.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_scroll-anchoring_dist_scroll-anchoring_esm_js-node_modules_github_hotkey-1a1d91-fa9f29a8514b.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_color-convert_index_js-0e07cc183eed.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_primer_behaviors_dist_esm_dimensions_js-node_modules_github_jtml_lib_index_js-53b423ede32a.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_github_session-resume_dist_index_js-node_modules_primer_behaviors_dist_e-da6ec6-5de3eedc1320.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_github_quote-selection_dist_index_js-node_modules_github_textarea-autosi-9e0349-ab4976fc78a6.jsHTTP Request
GET https://github.githubassets.com/assets/ui_packages_updatable-content_updatable-content_ts-e15463ecf7e6.jsHTTP Request
GET https://github.githubassets.com/assets/app_assets_modules_github_behaviors_task-list_ts-app_assets_modules_github_onfocus_ts-app_ass-421cec-f0e1d31bff9a.jsHTTP Request
GET https://github.githubassets.com/assets/app_assets_modules_github_sticky-scroll-into-view_ts-112600808cf9.jsHTTP Request
GET https://github.githubassets.com/assets/app_assets_modules_github_behaviors_ajax-error_ts-app_assets_modules_github_behaviors_include-467754-8b1a4442f9b3.jsHTTP Request
GET https://github.githubassets.com/assets/app_assets_modules_github_behaviors_commenting_edit_ts-app_assets_modules_github_behaviors_ht-83c235-4accd4baf37d.jsHTTP Request
GET https://github.githubassets.com/assets/app_assets_modules_github_blob-anchor_ts-app_assets_modules_github_filter-sort_ts-app_assets_-6deafe-fc95155e233a.jsHTTP Request
GET https://github.githubassets.com/assets/behaviors-d0c6b90f51b9.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_delegated-events_dist_index_js-node_modules_github_catalyst_lib_index_js-06ff531-bf7e5a3732fd.jsHTTP Request
GET https://github.githubassets.com/assets/notifications-global-3ddac678adaf.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_virtualized-list_es_index_js-node_modules_github_template-parts_lib_index_js-96453a51f920.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-e53a3f-62113d33abd1.jsHTTP Request
GET https://github.githubassets.com/assets/app_assets_modules_github_ref-selector_ts-00df584d9e79.jsHTTP Request
GET https://github.githubassets.com/assets/codespaces-1f3309c400b4.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_github_file-attachment-element_dist_index_js-node_modules_github_filter--0879fe-bcfcfd976be7.jsHTTP Request
GET https://github.githubassets.com/assets/app_assets_modules_github_repositories_get-repo-element_ts-4fc152f40452.jsHTTP Request
GET https://github.githubassets.com/assets/repositories-22e89d7b03b0.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_github_catalyst_lib_inde-dbbea9-e73b311a14f1.jsHTTP Request
GET https://github.githubassets.com/assets/code-menu-a8d08997ac4f.jsHTTP Request
GET https://github.githubassets.com/assets/react-lib-7b7b5264f6c1.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_primer_octicons-react_di-b40d97-06881c63f955.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Box_Box_js-55a9038b54f0.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Button_Button_js-b0edbfb6a9e5.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_TooltipV2_Tooltip_js-4d5019830e3c.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_clsx_dist_clsx_m_js-node_modules_primer_react_node_modules_primer_octico-c56103-e91295e60abd.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_ActionList_index_js-c4c6e3be7790.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_ActionMenu_ActionMenu_js-node_modules_primer_react_-5b2420-048f91dcedb3.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Text_Text_js-node_modules_primer_react_lib-esm_Text-7845da-3bcd176ee601.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_FormControl_FormControl_js-e73d967c1bb4.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_SelectPanel_SelectPanel_js-da4b9b447323.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Dialog_js-node_modules_primer_react_lib-esm_Feature-c10078-a365ebbc3112.jsHTTP Request
GET https://github.githubassets.com/assets/ui_packages_react-core_create-browser-history_ts-ui_packages_safe-storage_safe-storage_ts-ui_-682c2c-7a1e99981675.jsHTTP Request
GET https://github.githubassets.com/assets/notifications-subscriptions-menu-7732df7cded3.jsHTTP Request
GET https://github.githubassets.com/assets/notifications-subscriptions-menu.572fff1cb5c3caef1ac9.module.cssHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Dialog_Dialog_js-node_modules_primer_react_lib-esm_-bd7638-349234c98e00.jsHTTP Request
GET https://github.githubassets.com/assets/keyboard-shortcuts-dialog-50744f45bf65.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-94fd67-9a621ecbf672.jsHTTP Request
GET https://github.githubassets.com/assets/sessions-b81e688feb0f.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_react-router-dom_dist_index_js-c5568c29d405.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_UnderlineNav_index_js-a48891f88da5.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_BranchName_BranchName_js-node_modules_primer_react_-5ab9a5-f0ab9737bc0f.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_primer_behaviors_dist_esm_anchored-position_js-node_modules_primer_react-463b8d-8ea935c80ae4.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_AvatarStack_AvatarStack_js-node_modules_primer_reac-721fcb-c60889ba2d72.jsHTTP Request
GET https://github.githubassets.com/assets/ui_packages_paths_index_ts-a5d19f5b3108.jsHTTP Request
GET https://github.githubassets.com/assets/ui_packages_ref-selector_RefSelector_tsx-a811a847f4e3.jsHTTP Request
GET https://github.githubassets.com/assets/ui_packages_code-view-shared_hooks_use-canonical-object_ts-ui_packages_code-view-shared_hooks-d56ca1-c6b3e84f88d7.jsHTTP Response
200HTTP Request
GET https://github.githubassets.com/assets/ui_packages_code-view-shared_hooks_use-file-page-payload_ts-ui_packages_copy-to-clipboard_ind-7aee8b-736b82387f3f.jsHTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Request
GET https://github.githubassets.com/assets/repos-overview-8b42a5904539.jsHTTP Request
GET https://github.githubassets.com/assets/repos-overview.47cf64b9ae0677ccb350.module.cssHTTP Request
GET https://github.githubassets.com/assets/dark-6b1e37da2254.cssHTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Request
GET https://github.githubassets.com/assets/primer-primitives-8500c2c7ce5f.cssHTTP Request
GET https://github.githubassets.com/assets/primer-bbda46ca867f.cssHTTP Request
GET https://github.githubassets.com/assets/global-6f01bc73955b.cssHTTP Request
GET https://github.githubassets.com/assets/github-4bf1effa8118.cssHTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Request
GET https://github.githubassets.com/assets/chunk-vendors-node_modules_primer_behaviors_dist_esm_anchored-position_js-node_modules_github_memoi-4b0bd5-b63d4c76d546.jsHTTP Request
GET https://github.githubassets.com/assets/chunk-app_components_primer_experimental_select-panel-element_ts-72e65e1a9e50.jsHTTP Request
GET https://github.githubassets.com/assets/chunk-app_components_primer_experimental_toggle-switch-element_ts-1077a1578034.jsHTTP Request
GET https://github.githubassets.com/assets/chunk-vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_stacktrace-parser_dist_s-04fb8f0-1620a267eab5.jsHTTP Request
GET https://github.githubassets.com/assets/chunk-app_components_search_custom-scopes-element_ts-3a568db843b2.jsHTTP Request
GET https://github.githubassets.com/assets/ui_packages_query-builder-element_query-builder-element_ts-ui_packages_safe-storage_safe-storage_ts-90c65e701241.jsHTTP Request
GET https://github.githubassets.com/assets/chunk-app_assets_modules_github_jump-to_ts-d6aa6256bf8e.jsHTTP Request
GET https://github.githubassets.com/assets/chunk-app_components_search_qbsearch-input-element_ts-ui_packages_form-utils_form-utils_ts-ui_packa-cd5fe9-2993ae65b9a8.jsHTTP Request
GET https://github.githubassets.com/assets/chunk-ui_packages_cookie-consent-link-element_cookie-consent-link-element_ts-a30501e51b3a.jsHTTP Request
GET https://github.githubassets.com/assets/chunk-ui_packages_ghcc-consent-element_ghcc-consent-element_ts-b8a0d9bc2ed9.jsHTTP Request
GET https://github.githubassets.com/assets/chunk-node_modules_github_mini-throttle_dist_index_js-ui_packages_trusted-types-policies_policy_ts--77a9d9-5febadf19308.jsHTTP Request
GET https://github.githubassets.com/assets/chunk-ui_packages_webauthn-get-element_webauthn-get-element_ts-eba7ee3409f2.jsHTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Request
GET https://github.githubassets.com/assets/chunk-ui_packages_code-view-shared_components_files-search_FileResultsList_tsx-2cd71482a783.jsHTTP Response
200HTTP Response
200HTTP Response
200HTTP Request
GET https://github.githubassets.com/favicons/favicon.svgHTTP Response
200HTTP Response
200HTTP Request
GET https://github.githubassets.com/assets/chunk-vendors-node_modules_consent-banner_dist_consent-banner_js-d06d275cbddc.jsHTTP Response
200HTTP Request
GET https://github.githubassets.com/assets/primer-bbda46ca867f.cssHTTP Request
GET https://github.githubassets.com/assets/global-6f01bc73955b.cssHTTP Response
200HTTP Request
GET https://github.githubassets.com/assets/app_assets_modules_github_blob-anchor_ts-app_assets_modules_github_filter-sort_ts-app_assets_-6deafe-fc95155e233a.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_ConfirmationDialog_ConfirmationDialog_js-099e8bfead83.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Heading_Heading_js-node_modules_primer_react_lib-es-96435f-dbb4ca9db9f8.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_TreeView_TreeView_js-1b1a492a9329.jsHTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_primer_behaviors_dist_esm_scroll-into-view_js-node_modules_primer_react_-91c222-9bca588cddb2.jsHTTP Request
GET https://github.githubassets.com/assets/ui_packages_react-core_register-app_ts-d92f692cd90a.jsHTTP Request
GET https://github.githubassets.com/assets/ui_packages_commit-attribution_index_ts-ui_packages_commit-checks-status_index_ts-ui_packages-f45efb-404435465b5f.jsHTTP Request
GET https://github.githubassets.com/assets/ui_packages_repos-file-tree-view_repos-file-tree-view_ts-ui_packages_feature-request_FeatureR-ec5225-2554f1c99329.jsHTTP Request
GET https://github.githubassets.com/assets/react-code-view-5dc60bcae5de.jsHTTP Request
GET https://github.githubassets.com/assets/react-code-view.234ae39ff1fa1232236c.module.cssHTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200 -
1.5kB 4.7kB 11 9
-
1.5kB 4.7kB 11 9
-
1.5kB 4.1kB 11 8
-
1.6kB 4.7kB 12 9
-
1.5kB 4.7kB 11 9
-
185.199.110.133:443https://raw.githubusercontent.com/kh4sh3i/Ransomware-Samples/main/Jigsaw/Ransomware.Jigsaw.ziptls, http2firefox.exe11.7kB 807.5kB 220 607
HTTP Request
GET https://raw.githubusercontent.com/kh4sh3i/Ransomware-Samples/main/ransomware.pngHTTP Response
200HTTP Request
GET https://avatars.githubusercontent.com/u/64693844?v=4&size=40HTTP Response
200HTTP Request
GET https://raw.githubusercontent.com/kh4sh3i/Ransomware-Samples/main/TeslaCrypt/Ransomware.TeslaCrypt.zipHTTP Response
200HTTP Request
GET https://raw.githubusercontent.com/kh4sh3i/Ransomware-Samples/main/Jigsaw/Ransomware.Jigsaw.zipHTTP Response
200 -
27.0kB 16.3kB 74 74
HTTP Request
POST https://collector.github.com/github/collectHTTP Request
POST https://collector.github.com/github/collectHTTP Response
204HTTP Response
204HTTP Request
POST https://collector.github.com/github/collectHTTP Response
204HTTP Request
POST https://collector.github.com/github/collectHTTP Request
POST https://collector.github.com/github/collectHTTP Response
204HTTP Response
204HTTP Request
POST https://collector.github.com/github/collectHTTP Response
204HTTP Request
POST https://collector.github.com/github/collectHTTP Response
204HTTP Request
POST https://collector.github.com/github/collectHTTP Response
204HTTP Request
POST https://collector.github.com/github/collectHTTP Response
204HTTP Request
POST https://collector.github.com/github/collectHTTP Request
POST https://collector.github.com/github/collectHTTP Request
POST https://collector.github.com/github/collectHTTP Request
POST https://collector.github.com/github/collectHTTP Response
204HTTP Response
204HTTP Response
204HTTP Response
204HTTP Request
POST https://collector.github.com/github/collectHTTP Request
POST https://collector.github.com/github/collectHTTP Request
POST https://collector.github.com/github/collectHTTP Request
POST https://collector.github.com/github/collectHTTP Response
204HTTP Response
204HTTP Response
204HTTP Response
204 -
1.4kB 5.0kB 14 13
-
1.2kB 4.8kB 10 11
-
747 B 219 B 5 5
-
6.4kB 11.1kB 37 31
HTTP Request
POST https://api.github.com/_private/browser/statsHTTP Response
200HTTP Request
POST https://api.github.com/_private/browser/statsHTTP Response
200HTTP Request
POST https://api.github.com/_private/browser/statsHTTP Response
200HTTP Request
POST https://api.github.com/_private/browser/statsHTTP Response
200HTTP Request
POST https://api.github.com/_private/browser/statsHTTP Response
200HTTP Request
POST https://api.github.com/_private/browser/statsHTTP Response
200 -
217.20.58.36:80http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dhttp314.5kB 23.3MB 6583 16668
HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206HTTP Request
GET http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/529a41cd-5c0c-4cd0-8061-b71feaa8a336?P1=1723931026&P2=404&P3=2&P4=XF0JCuB7q%2b7sieeyeU6cDVFx%2fjkBFt7DL0fM0RdKQbKqJdrUuUocEHLl2CCb5w5nuCqWbJywu2IqexJfuWYAAA%3d%3dHTTP Response
206 -
1.6kB 8.7kB 17 18
-
88.221.134.209:80http://ciscobinary.openh264.org/openh264-win64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.ziphttpfirefox.exe8.2kB 467.5kB 172 349
HTTP Request
GET http://ciscobinary.openh264.org/openh264-win64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zipHTTP Response
200 -
301.9kB 9.4MB 4531 6762
-
156 B 3
-
156 B 3
-
156 B 3
-
20.26.156.215:443https://github.com/kh4sh3i/Ransomware-Samples/raw/main/WannaCry/Ransomware.WannaCry.ziptls, http2firefox.exe4.6kB 77.7kB 37 82
HTTP Request
GET https://github.com/kh4sh3i/Ransomware-Samples/tree/main/WannaCryHTTP Response
200HTTP Request
GET https://github.com/kh4sh3i/Ransomware-Samples/latest-commit/main/WannaCryHTTP Request
GET https://github.com/kh4sh3i/Ransomware-Samples/tree-commit-info/main/WannaCryHTTP Request
GET https://github.com/kh4sh3i/Ransomware-Samples/deferred-metadata/main/WannaCryHTTP Request
GET https://github.com/kh4sh3i/Ransomware-Samples/security/overall-countHTTP Response
200HTTP Response
200HTTP Response
200HTTP Request
GET https://github.com/kh4sh3i/Ransomware-Samples/blob/main/WannaCry/Ransomware.WannaCry.zipHTTP Response
200HTTP Request
GET https://github.com/kh4sh3i/Ransomware-Samples/latest-commit/main/WannaCry/Ransomware.WannaCry.zipHTTP Request
GET https://github.com/kh4sh3i/Ransomware-Samples/deferred-metadata/main/WannaCry/Ransomware.WannaCry.zipHTTP Response
200HTTP Response
200HTTP Request
GET https://github.com/kh4sh3i/Ransomware-Samples/raw/main/WannaCry/Ransomware.WannaCry.zipHTTP Response
302 -
185.199.109.154:443https://github.githubassets.com/assets/chunk-vendors-node_modules_primer_behaviors_dist_esm_anchored-position_js-node_modules_github_memoi-4b0bd5-b63d4c76d546.jstls, http2firefox.exe4.3kB 1.6kB 24 22
HTTP Request
GET https://github.githubassets.com/assets/vendors-node_modules_react-router-dom_dist_index_js-c5568c29d405.jsHTTP Request
GET https://github.githubassets.com/assets/ui_packages_repos-file-tree-view_repos-file-tree-view_ts-ui_packages_feature-request_FeatureR-ec5225-2554f1c99329.jsHTTP Request
GET https://github.githubassets.com/assets/chunk-vendors-node_modules_primer_behaviors_dist_esm_anchored-position_js-node_modules_github_memoi-4b0bd5-b63d4c76d546.js -
12.1kB 9.6kB 37 38
HTTP Request
POST https://collector.github.com/github/collectHTTP Request
POST https://collector.github.com/github/collectHTTP Response
204HTTP Response
204HTTP Request
POST https://collector.github.com/github/collectHTTP Response
204HTTP Request
POST https://collector.github.com/github/collectHTTP Request
POST https://collector.github.com/github/collectHTTP Request
POST https://collector.github.com/github/collectHTTP Request
POST https://collector.github.com/github/collectHTTP Response
204HTTP Response
204HTTP Response
204HTTP Response
204 -
3.0kB 6.6kB 19 19
HTTP Request
POST https://api.github.com/_private/browser/statsHTTP Response
200HTTP Request
POST https://api.github.com/_private/browser/statsHTTP Response
200 -
98 B 52 B 2 1
-
185.199.110.133:443https://avatars.githubusercontent.com/u/64693844?v=4&size=40tls, http2firefox.exe2.9kB 2.1kB 20 19
HTTP Request
GET https://avatars.githubusercontent.com/u/64693844?v=4&size=40HTTP Response
304 -
185.199.110.133:443https://raw.githubusercontent.com/kh4sh3i/Ransomware-Samples/main/WannaCry/Ransomware.WannaCry.ziptls, http2firefox.exe65.7kB 3.6MB 1354 2603
HTTP Request
GET https://raw.githubusercontent.com/kh4sh3i/Ransomware-Samples/main/WannaCry/Ransomware.WannaCry.zipHTTP Response
200 -
1.5kB 1.2kB 11 13
-
1.4kB 1.0kB 10 9
-
1.4kB 1.0kB 10 9
-
747 B 219 B 5 5
-
35.190.72.216:443https://location.services.mozilla.com/v1/country?key=7e40f68c-7938-4c5d-9f95-e61647c213ebtls, http2firefox.exe1.7kB 4.6kB 13 15
HTTP Request
GET https://location.services.mozilla.com/v1/country?key=7e40f68c-7938-4c5d-9f95-e61647c213eb -
-
3.1kB 7.4kB 13 12
-
156 B 3
-
-
156 B 3
-
156 B 3
-
3.0kB 6.2kB 11 10
-
156 B 120 B 3 3
-
773 B 3.5kB 9 8
-
2.9kB 5.6kB 9 8
-
790 B 3.5kB 9 8
-
-
-
5.1kB 6.2kB 12 9
-
736 B 4.0kB 8 9
-
144 B 158 B 2 1
DNS Request
14.227.111.52.in-addr.arpa
DNS Request
14.227.111.52.in-addr.arpa
-
193 B 299 B 3 3
DNS Request
174.117.168.52.in-addr.arpa
DNS Request
api.github.com
DNS Request
api.github.com
DNS Response
20.26.156.210
DNS Response
20.26.156.210
-
74 B 128 B 1 1
DNS Request
172.210.232.199.in-addr.arpa
-
70 B 133 B 1 1
DNS Request
57.110.18.2.in-addr.arpa
-
63 B 230 B 1 1
DNS Request
www.microsoft.com
DNS Response
95.100.245.144
-
73 B 139 B 1 1
DNS Request
144.245.100.95.in-addr.arpa
-
64 B 146 B 1 1
DNS Request
ajax.aspnetcdn.com
DNS Response
152.199.19.160
-
70 B 231 B 1 1
DNS Request
edgestatic.azureedge.net
DNS Response
13.107.246.64
-
72 B 158 B 1 1
DNS Request
64.246.107.13.in-addr.arpa
-
84 B 342 B 1 1
DNS Request
msedge.sf.dl.delivery.mp.microsoft.com
DNS Response
152.199.21.175
-
73 B 144 B 1 1
DNS Request
175.21.199.152.in-addr.arpa
-
72 B 146 B 1 1
DNS Request
253.15.104.51.in-addr.arpa
-
57 B 132 B 1 1
DNS Request
www.msn.com
DNS Response
204.79.197.203
-
60 B 166 B 1 1
DNS Request
assets.msn.com
DNS Response
95.101.143.10595.101.143.242
-
73 B 203 B 1 1
DNS Request
browser.events.data.msn.com
DNS Response
13.89.178.27
-
73 B 139 B 1 1
DNS Request
105.143.101.95.in-addr.arpa
-
71 B 145 B 1 1
DNS Request
27.178.89.13.in-addr.arpa
-
74 B 158 B 1 1
DNS Request
msedge.api.cdp.microsoft.com
DNS Response
20.114.58.89
-
71 B 157 B 1 1
DNS Request
89.58.114.20.in-addr.arpa
-
87 B 392 B 1 1
DNS Request
msedge.f.tlu.dl.delivery.mp.microsoft.com
DNS Response
217.20.58.36217.20.58.24217.20.58.22217.20.58.99217.20.58.21217.20.58.37217.20.58.98217.20.58.101
-
71 B 131 B 1 1
DNS Request
36.58.20.217.in-addr.arpa
-
73 B 144 B 1 1
DNS Request
161.19.199.152.in-addr.arpa
-
63 B 230 B 1 1
DNS Request
www.microsoft.com
DNS Response
95.100.245.144
-
73 B 106 B 1 1
DNS Request
200.197.79.204.in-addr.arpa
-
73 B 139 B 1 1
DNS Request
201.143.101.95.in-addr.arpa
-
68 B 116 B 1 1
DNS Request
shavar.prod.mozaws.net
DNS Response
44.239.110.20035.165.99.16135.155.86.205
-
103 B 119 B 1 1
DNS Request
prod.content-signature-chains.prod.webservices.mozgcp.net
DNS Response
34.160.144.191
-
136 B 306 B 2 2
DNS Request
shavar.prod.mozaws.net
DNS Request
shavar.prod.mozaws.net
-
206 B 262 B 2 2
DNS Request
prod.content-signature-chains.prod.webservices.mozgcp.net
DNS Response
2600:1901:0:92a9::
DNS Request
prod.content-signature-chains.prod.webservices.mozgcp.net
DNS Response
2600:1901:0:92a9::
-
94 B 110 B 1 1
DNS Request
prod.remote-settings.prod.webservices.mozgcp.net
DNS Response
34.149.100.209
-
188 B 374 B 2 2
DNS Request
prod.remote-settings.prod.webservices.mozgcp.net
DNS Request
prod.remote-settings.prod.webservices.mozgcp.net
-
146 B 252 B 2 2
DNS Request
166.188.117.34.in-addr.arpa
DNS Request
166.188.117.34.in-addr.arpa
-
144 B 270 B 2 2
DNS Request
161.99.165.35.in-addr.arpa
DNS Request
161.99.165.35.in-addr.arpa
-
130 B 310 B 2 2
DNS Request
support.mozilla.org
DNS Request
support.mozilla.org
DNS Response
34.149.128.2
DNS Response
34.149.128.2
-
122 B 222 B 2 2
DNS Request
www.mozilla.org
DNS Request
www.mozilla.org
DNS Response
143.204.72.186
DNS Response
143.204.72.186
-
124 B 342 B 2 2
DNS Request
wiki.mozilla.org
DNS Request
wiki.mozilla.org
DNS Response
34.208.162.10452.24.175.2935.163.213.45
DNS Response
52.24.175.2934.208.162.10435.163.213.45
-
184 B 216 B 2 2
DNS Request
us-west1.prod.sumo.prod.webservices.mozgcp.net
DNS Request
us-west1.prod.sumo.prod.webservices.mozgcp.net
DNS Response
34.149.128.2
DNS Response
34.149.128.2
-
132 B 164 B 2 2
DNS Request
www.mozorg.moz.works
DNS Request
www.mozorg.moz.works
DNS Response
143.204.72.186
DNS Response
143.204.72.186
-
186 B 282 B 2 2
DNS Request
wiki-prod-850398177.us-west-2.elb.amazonaws.com
DNS Request
wiki-prod-850398177.us-west-2.elb.amazonaws.com
DNS Response
52.24.175.2934.208.162.10435.163.213.45
DNS Response
52.24.175.2934.208.162.10435.163.213.45
-
328 B 486 B 4 3
DNS Request
us-west1.prod.sumo.prod.webservices.mozgcp.net
DNS Request
us-west1.prod.sumo.prod.webservices.mozgcp.net
DNS Request
61.85.100.185.in-addr.arpa
DNS Request
61.85.100.185.in-addr.arpa
-
186 B 342 B 2 2
DNS Request
wiki-prod-850398177.us-west-2.elb.amazonaws.com
DNS Request
wiki-prod-850398177.us-west-2.elb.amazonaws.com
-
132 B 294 B 2 2
DNS Request
www.mozorg.moz.works
DNS Request
www.mozorg.moz.works
-
144 B 208 B 2 2
DNS Request
e86303.dscx.akamaiedge.net
DNS Request
e86303.dscx.akamaiedge.net
DNS Response
95.101.143.20195.101.143.219
DNS Response
95.101.143.20195.101.143.219
-
144 B 256 B 2 2
DNS Request
e86303.dscx.akamaiedge.net
DNS Request
e86303.dscx.akamaiedge.net
DNS Response
2a02:26f0:1780:d::213:f8232a02:26f0:1780:d::213:f81f
DNS Response
2a02:26f0:1780:d::213:f8232a02:26f0:1780:d::213:f81f
-
146 B 278 B 2 2
DNS Request
219.143.101.95.in-addr.arpa
DNS Request
219.143.101.95.in-addr.arpa
-
211.2kB 2.4MB 535 2092
-
112 B 408 B 2 2
DNS Request
r.bing.com
DNS Request
r.bing.com
DNS Response
95.101.143.20195.101.143.219
DNS Response
95.101.143.20195.101.143.219
-
1.9kB 5.5kB 6 4
-
114 B 412 B 2 2
DNS Request
th.bing.com
DNS Request
th.bing.com
DNS Response
95.101.143.21995.101.143.201
DNS Response
95.101.143.20195.101.143.219
-
1.9kB 6.9kB 7 5
-
142 B 628 B 2 2
DNS Request
login.microsoftonline.com
DNS Request
login.microsoftonline.com
DNS Response
40.126.31.6920.190.159.040.126.31.6720.190.159.6420.190.159.440.126.31.7120.190.159.7120.190.159.73
DNS Response
20.190.159.6420.190.159.020.190.159.7340.126.31.6940.126.31.7120.190.159.440.126.31.6720.190.159.71
-
166 B 422 B 2 2
DNS Request
www.tm.ak.prd.aadg.trafficmanager.net
DNS Request
www.tm.ak.prd.aadg.trafficmanager.net
DNS Response
40.126.31.6720.190.159.220.190.159.7520.190.159.020.190.159.6840.126.31.6920.190.159.420.190.159.64
DNS Response
40.126.31.6740.126.31.6920.190.159.020.190.159.6420.190.159.420.190.159.220.190.159.7520.190.159.68
-
166 B 307 B 2 1
DNS Request
www.tm.ak.prd.aadg.trafficmanager.net
DNS Request
www.tm.ak.prd.aadg.trafficmanager.net
DNS Response
2603:1027:1:158::82603:1026:3000:150::52603:1026:3000:150::82603:1026:3000:150::c2603:1027:1:158::a2603:1026:3000:150::62603:1027:1:158::c2603:1026:3000:150::a
-
142 B 314 B 2 2
DNS Request
69.31.126.40.in-addr.arpa
DNS Request
69.31.126.40.in-addr.arpa
-
134 B 304 B 2 2
DNS Request
services.bingapis.com
DNS Request
services.bingapis.com
DNS Response
13.107.5.80
DNS Response
13.107.5.80
-
130 B 162 B 2 2
DNS Request
e-0001.e-msedge.net
DNS Request
e-0001.e-msedge.net
DNS Response
13.107.5.80
DNS Response
13.107.5.80
-
130 B 250 B 2 2
DNS Request
e-0001.e-msedge.net
DNS Request
e-0001.e-msedge.net
-
262 B 350 B 4 3
DNS Request
github.com
DNS Request
github.com
DNS Response
20.26.156.215
DNS Request
avatars.githubusercontent.com
DNS Request
avatars.githubusercontent.com
DNS Response
185.199.111.133185.199.110.133185.199.109.133185.199.108.133
DNS Response
185.199.109.133185.199.110.133185.199.108.133185.199.111.133
-
112 B 144 B 2 2
DNS Request
github.com
DNS Request
github.com
DNS Response
20.26.156.215
DNS Response
20.26.156.215
-
112 B 242 B 2 2
DNS Request
github.com
DNS Request
github.com
-
140 B 312 B 2 2
DNS Request
80.5.107.13.in-addr.arpa
DNS Request
80.5.107.13.in-addr.arpa
-
144 B 316 B 2 2
DNS Request
215.156.26.20.in-addr.arpa
DNS Request
215.156.26.20.in-addr.arpa
-
138 B 266 B 2 2
DNS Request
github.githubassets.com
DNS Request
github.githubassets.com
DNS Response
185.199.109.154185.199.108.154185.199.110.154185.199.111.154
DNS Response
185.199.111.154185.199.109.154185.199.110.154185.199.108.154
-
138 B 266 B 2 2
DNS Request
github.githubassets.com
DNS Request
github.githubassets.com
DNS Response
185.199.108.154185.199.109.154185.199.111.154185.199.110.154
DNS Response
185.199.110.154185.199.108.154185.199.111.154185.199.109.154
-
138 B 268 B 2 2
DNS Request
github.githubassets.com
DNS Request
github.githubassets.com
-
142 B 270 B 2 2
DNS Request
raw.githubusercontent.com
DNS Request
raw.githubusercontent.com
DNS Response
185.199.110.133185.199.109.133185.199.111.133185.199.108.133
DNS Response
185.199.108.133185.199.111.133185.199.109.133185.199.110.133
-
142 B 270 B 2 2
DNS Request
raw.githubusercontent.com
DNS Request
raw.githubusercontent.com
DNS Response
185.199.108.133185.199.109.133185.199.111.133185.199.110.133
DNS Response
185.199.109.133185.199.110.133185.199.111.133185.199.108.133
-
142 B 183 B 2 1
DNS Request
raw.githubusercontent.com
DNS Request
raw.githubusercontent.com
DNS Response
2606:50c0:8002::1542606:50c0:8000::1542606:50c0:8003::1542606:50c0:8001::154
-
170 B 426 B 2 2
DNS Request
www.tm.v4.a.prd.aadg.trafficmanager.net
DNS Request
www.tm.v4.a.prd.aadg.trafficmanager.net
DNS Response
40.126.32.7220.190.160.2040.126.32.7440.126.32.14040.126.32.13340.126.32.13640.126.32.7640.126.32.68
DNS Response
20.190.159.2320.190.159.6820.190.159.7340.126.31.7320.190.159.6420.190.159.440.126.31.6920.190.159.75
-
85 B 146 B 1 1
DNS Request
www.tm.v4.a.prd.aadg.trafficmanager.net
-
148 B 118 B 2 1
DNS Request
154.109.199.185.in-addr.arpa
DNS Request
154.109.199.185.in-addr.arpa
-
148 B 118 B 2 1
DNS Request
133.110.199.185.in-addr.arpa
DNS Request
133.110.199.185.in-addr.arpa
-
142 B 157 B 2 1
DNS Request
4.159.190.20.in-addr.arpa
DNS Request
4.159.190.20.in-addr.arpa
-
132 B 230 B 2 2
DNS Request
collector.github.com
DNS Request
collector.github.com
DNS Response
140.82.113.21
DNS Response
140.82.113.21
-
150 B 278 B 2 2
DNS Request
avatars.githubusercontent.com
DNS Request
avatars.githubusercontent.com
DNS Response
185.199.110.133185.199.111.133185.199.109.133185.199.108.133
DNS Response
185.199.108.133185.199.110.133185.199.111.133185.199.109.133
-
150 B 182 B 2 2
DNS Request
glb-db52c2cf8be544.github.com
DNS Request
glb-db52c2cf8be544.github.com
DNS Response
140.82.113.21
DNS Response
140.82.113.21
-
150 B 299 B 2 2
DNS Request
glb-db52c2cf8be544.github.com
DNS Request
glb-db52c2cf8be544.github.com
-
120 B 152 B 2 2
DNS Request
api.github.com
DNS Request
api.github.com
DNS Response
20.26.156.210
DNS Response
20.26.156.210
-
154 B 218 B 2 2
DNS Request
www.bing.com.cdn.cloudflare.net
DNS Request
www.bing.com.cdn.cloudflare.net
DNS Response
104.18.33.89172.64.154.167
DNS Response
104.18.33.89172.64.154.167
-
150 B 374 B 2 2
DNS Request
avatars.githubusercontent.com
DNS Request
avatars.githubusercontent.com
DNS Response
2606:50c0:8001::1542606:50c0:8003::1542606:50c0:8002::1542606:50c0:8000::154
DNS Response
2606:50c0:8000::1542606:50c0:8003::1542606:50c0:8001::1542606:50c0:8002::154
-
120 B 152 B 2 2
DNS Request
api.github.com
DNS Request
api.github.com
DNS Response
20.26.156.210
DNS Response
20.26.156.210
-
154 B 266 B 2 2
DNS Request
www.bing.com.cdn.cloudflare.net
DNS Request
www.bing.com.cdn.cloudflare.net
DNS Response
2606:4700:4400::6812:21592606:4700:4400::ac40:9aa7
DNS Response
2606:4700:4400::6812:21592606:4700:4400::ac40:9aa7
-
146 B 270 B 2 2
DNS Request
167.154.64.172.in-addr.arpa
DNS Request
167.154.64.172.in-addr.arpa
-
144 B 234 B 2 2
DNS Request
21.113.82.140.in-addr.arpa
DNS Request
21.113.82.140.in-addr.arpa
-
120 B 250 B 2 2
DNS Request
api.github.com
DNS Request
api.github.com
-
144 B 316 B 2 2
DNS Request
210.156.26.20.in-addr.arpa
DNS Request
210.156.26.20.in-addr.arpa
-
132 B 230 B 2 2
DNS Request
collector.github.com
DNS Request
collector.github.com
DNS Response
140.82.112.22
DNS Response
140.82.112.22
-
150 B 182 B 2 2
DNS Request
glb-db52c2cf8be544.github.com
DNS Request
glb-db52c2cf8be544.github.com
DNS Response
140.82.112.22
DNS Response
140.82.112.21
-
150 B 280 B 2 2
DNS Request
glb-db52c2cf8be544.github.com
DNS Request
glb-db52c2cf8be544.github.com
-
112 B 72 B 2 1
DNS Request
github.com
DNS Request
github.com
DNS Response
20.26.156.215
-
112 B 72 B 2 1
DNS Request
github.com
DNS Request
github.com
DNS Response
20.26.156.215
-
112 B 242 B 2 2
DNS Request
github.com
DNS Request
github.com
-
120 B 152 B 2 2
DNS Request
api.github.com
DNS Request
api.github.com
DNS Response
20.26.156.210
DNS Response
20.26.156.210
-
120 B 269 B 2 2
DNS Request
api.github.com
DNS Request
api.github.com
-
142 B 314 B 2 2
DNS Request
200.64.52.20.in-addr.arpa
DNS Request
200.64.52.20.in-addr.arpa
-
118 B 250 B 2 2
DNS Request
btc.blockr.io
DNS Request
btc.blockr.io
-
118 B 250 B 2 2
DNS Request
btc.blockr.io
DNS Request
btc.blockr.io
-
164 B 196 B 2 2
DNS Request
prod.balrog.prod.cloudops.mozgcp.net
DNS Request
prod.balrog.prod.cloudops.mozgcp.net
DNS Response
35.244.181.201
DNS Response
35.244.181.201
-
164 B 350 B 2 2
DNS Request
prod.balrog.prod.cloudops.mozgcp.net
DNS Request
prod.balrog.prod.cloudops.mozgcp.net
-
206 B 238 B 2 2
DNS Request
prod.content-signature-chains.prod.webservices.mozgcp.net
DNS Request
prod.content-signature-chains.prod.webservices.mozgcp.net
DNS Response
34.160.144.191
DNS Response
34.160.144.191
-
206 B 262 B 2 2
DNS Request
prod.content-signature-chains.prod.webservices.mozgcp.net
DNS Request
prod.content-signature-chains.prod.webservices.mozgcp.net
DNS Response
2600:1901:0:92a9::
DNS Response
2600:1901:0:92a9::
-
73 B 126 B 1 1
DNS Request
201.181.244.35.in-addr.arpa
-
130 B 162 B 2 2
DNS Request
redirector.gvt1.com
DNS Request
redirector.gvt1.com
DNS Response
142.250.179.174
DNS Response
142.250.179.174
-
140 B 572 B 2 2
DNS Request
ciscobinary.openh264.org
DNS Request
ciscobinary.openh264.org
DNS Response
88.221.134.20988.221.134.155
DNS Response
88.221.134.20988.221.134.155
-
130 B 162 B 2 2
DNS Request
redirector.gvt1.com
DNS Request
redirector.gvt1.com
DNS Response
142.250.179.174
DNS Response
142.250.179.174
-
134 B 198 B 2 2
DNS Request
a19.dscg10.akamai.net
DNS Request
a19.dscg10.akamai.net
DNS Response
88.221.134.20988.221.134.155
DNS Response
88.221.134.20988.221.134.155
-
134 B 246 B 2 2
DNS Request
a19.dscg10.akamai.net
DNS Request
a19.dscg10.akamai.net
DNS Response
2a02:26f0:a1::58dd:86d12a02:26f0:a1::58dd:869b
DNS Response
2a02:26f0:a1::58dd:869b2a02:26f0:a1::58dd:86d1
-
130 B 186 B 2 2
DNS Request
redirector.gvt1.com
DNS Request
redirector.gvt1.com
DNS Response
2a00:1450:400e:802::200e
DNS Response
2a00:1450:400e:802::200e
-
3.3kB 9.3kB 8 10
-
142 B 232 B 2 2
DNS Request
r5---sn-4g5lzney.gvt1.com
DNS Request
r5---sn-4g5lzney.gvt1.com
DNS Response
74.125.163.138
DNS Response
74.125.163.138
-
138 B 170 B 2 2
DNS Request
r5.sn-4g5lzney.gvt1.com
DNS Request
r5.sn-4g5lzney.gvt1.com
DNS Response
74.125.163.138
DNS Response
74.125.163.138
-
138 B 194 B 2 2
DNS Request
r5.sn-4g5lzney.gvt1.com
DNS Request
r5.sn-4g5lzney.gvt1.com
DNS Response
2a00:1450:4001:1b::a
DNS Response
2a00:1450:4001:1b::a
-
1.8kB 5.9kB 5 7
-
146 B 139 B 2 1
DNS Request
209.134.221.88.in-addr.arpa
DNS Request
209.134.221.88.in-addr.arpa
-
148 B 113 B 2 1
DNS Request
174.179.250.142.in-addr.arpa
DNS Request
174.179.250.142.in-addr.arpa
-
146 B 112 B 2 1
DNS Request
138.163.125.74.in-addr.arpa
DNS Request
138.163.125.74.in-addr.arpa
-
142 B 270 B 2 2
DNS Request
56.28.101.95.in-addr.arpa
DNS Request
56.28.101.95.in-addr.arpa
-
148 B 180 B 2 2
DNS Request
7tno4hib47vlep5o.tor2web.org
DNS Request
7tno4hib47vlep5o.tor2web.org
DNS Response
103.198.0.111
DNS Response
103.198.0.111
-
166 B 278 B 2 2
DNS Request
7tno4hib47vlep5o.tor2web.blutmagie.de
DNS Request
7tno4hib47vlep5o.tor2web.blutmagie.de
-
146 B 266 B 2 2
DNS Request
7tno4hib47vlep5o.tor2web.fi
DNS Request
7tno4hib47vlep5o.tor2web.fi
-
124 B 124 B 2 2
DNS Request
bitcoin.toshi.io
DNS Request
bitcoin.toshi.io
-
166 B 278 B 2 2
DNS Request
7tno4hib47vlep5o.tor2web.blutmagie.de
DNS Request
7tno4hib47vlep5o.tor2web.blutmagie.de
-
124 B 124 B 2 2
DNS Request
bitcoin.toshi.io
DNS Request
bitcoin.toshi.io
-
146 B 266 B 2 2
DNS Request
7tno4hib47vlep5o.tor2web.fi
DNS Request
7tno4hib47vlep5o.tor2web.fi
-
112 B 144 B 2 2
DNS Request
github.com
DNS Request
github.com
DNS Response
20.26.156.215
DNS Response
20.26.156.215
-
112 B 242 B 2 2
DNS Request
github.com
DNS Request
github.com
-
132 B 230 B 2 2
DNS Request
collector.github.com
DNS Request
collector.github.com
DNS Response
140.82.112.21
DNS Response
140.82.113.21
-
150 B 182 B 2 2
DNS Request
glb-db52c2cf8be544.github.com
DNS Request
glb-db52c2cf8be544.github.com
DNS Response
140.82.113.22
DNS Response
140.82.113.22
-
120 B 152 B 2 2
DNS Request
api.github.com
DNS Request
api.github.com
DNS Response
20.26.156.210
DNS Response
20.26.156.210
-
150 B 280 B 2 2
DNS Request
glb-db52c2cf8be544.github.com
DNS Request
glb-db52c2cf8be544.github.com
-
120 B 152 B 2 2
DNS Request
api.github.com
DNS Request
api.github.com
DNS Response
20.26.156.210
DNS Response
20.26.156.210
-
120 B 144 B 2 1
DNS Request
api.github.com
DNS Request
api.github.com
-
144 B 234 B 2 2
DNS Request
21.112.82.140.in-addr.arpa
DNS Request
21.112.82.140.in-addr.arpa
-
164 B 98 B 2 1
DNS Request
prod.balrog.prod.cloudops.mozgcp.net
DNS Request
prod.balrog.prod.cloudops.mozgcp.net
DNS Response
35.244.181.201
-
164 B 350 B 2 2
DNS Request
prod.balrog.prod.cloudops.mozgcp.net
DNS Request
prod.balrog.prod.cloudops.mozgcp.net
-
188 B 220 B 2 2
DNS Request
prod.remote-settings.prod.webservices.mozgcp.net
DNS Request
prod.remote-settings.prod.webservices.mozgcp.net
DNS Response
34.149.100.209
DNS Response
34.149.100.209
-
188 B 187 B 2 1
DNS Request
prod.remote-settings.prod.webservices.mozgcp.net
DNS Request
prod.remote-settings.prod.webservices.mozgcp.net
-
206 B 238 B 2 2
DNS Request
prod.content-signature-chains.prod.webservices.mozgcp.net
DNS Request
prod.content-signature-chains.prod.webservices.mozgcp.net
DNS Response
34.160.144.191
DNS Response
34.160.144.191
-
206 B 262 B 2 2
DNS Request
prod.content-signature-chains.prod.webservices.mozgcp.net
DNS Request
prod.content-signature-chains.prod.webservices.mozgcp.net
DNS Response
2600:1901:0:92a9::
DNS Response
2600:1901:0:92a9::
-
144 B 208 B 2 2
DNS Request
e86303.dscx.akamaiedge.net
DNS Request
e86303.dscx.akamaiedge.net
DNS Response
95.101.143.20195.101.143.219
DNS Response
95.101.143.21995.101.143.201
-
137.3kB 307.2kB 301 451
-
144 B 128 B 2 1
DNS Request
e86303.dscx.akamaiedge.net
DNS Request
e86303.dscx.akamaiedge.net
DNS Response
2a02:26f0:1780:d::213:f8232a02:26f0:1780:d::213:f81f
-
112 B 408 B 2 2
DNS Request
r.bing.com
DNS Request
r.bing.com
DNS Response
95.101.143.21995.101.143.201
DNS Response
95.101.143.21995.101.143.201
-
114 B 428 B 2 2
DNS Request
th.bing.com
DNS Request
th.bing.com
DNS Response
95.101.143.20195.101.143.219
DNS Response
95.101.143.21995.101.143.20188.221.135.33
-
154 B 218 B 2 2
DNS Request
www.bing.com.cdn.cloudflare.net
DNS Request
www.bing.com.cdn.cloudflare.net
DNS Response
172.64.154.167104.18.33.89
DNS Response
104.18.33.89172.64.154.167
-
154 B 266 B 2 2
DNS Request
www.bing.com.cdn.cloudflare.net
DNS Request
www.bing.com.cdn.cloudflare.net
DNS Response
2606:4700:4400::ac40:9aa72606:4700:4400::6812:2159
DNS Response
2606:4700:4400::6812:21592606:4700:4400::ac40:9aa7
-
150 B 306 B 2 2
DNS Request
location.services.mozilla.com
DNS Request
location.services.mozilla.com
DNS Response
35.190.72.216
DNS Response
35.190.72.216
-
188 B 220 B 2 2
DNS Request
prod.classify-client.prod.webservices.mozgcp.net
DNS Request
prod.classify-client.prod.webservices.mozgcp.net
DNS Response
35.190.72.216
DNS Response
35.190.72.216
-
188 B 374 B 2 2
DNS Request
prod.classify-client.prod.webservices.mozgcp.net
DNS Request
prod.classify-client.prod.webservices.mozgcp.net
-
1.8kB 4.2kB 5 6
-
144 B 248 B 2 2
DNS Request
216.72.190.35.in-addr.arpa
DNS Request
216.72.190.35.in-addr.arpa
-
146 B 242 B 2 2
DNS Request
189.40.188.131.in-addr.arpa
DNS Request
189.40.188.131.in-addr.arpa
-
146 B 216 B 2 2
DNS Request
244.244.23.193.in-addr.arpa
DNS Request
244.244.23.193.in-addr.arpa
-
144 B 220 B 2 2
DNS Request
78.193.25.171.in-addr.arpa
DNS Request
78.193.25.171.in-addr.arpa
-
142 B 202 B 2 2
DNS Request
9.193.25.171.in-addr.arpa
DNS Request
9.193.25.171.in-addr.arpa
-
142 B 212 B 2 2
DNS Request
12.48.183.95.in-addr.arpa
DNS Request
12.48.183.95.in-addr.arpa
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
2Component Object Model Hijacking
1Image File Execution Options Injection
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
2Component Object Model Hijacking
1Image File Execution Options Injection
1Defense Evasion
Direct Volume Access
1File and Directory Permissions Modification
2Windows File and Directory Permissions Modification
1Hide Artifacts
1Hidden Files and Directories
1Indicator Removal
4Clear Persistence
1File Deletion
3Modify Registry
4Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
240KB
MD57bf2b57f2a205768755c07f238fb32cc
SHA145356a9dd616ed7161a3b9192e2f318d0ab5ad10
SHA256b9c5d4339809e0ad9a00d4d3dd26fdf44a32819a54abf846bb9b560d81391c25
SHA51291a39e919296cb5c6eccba710b780519d90035175aa460ec6dbe631324e5e5753bd8d87f395b5481bcd7e1ad623b31a34382d81faae06bef60ec28b49c3122a9
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_remove_18.svg.fun
Filesize720B
MD575a585c1b60bd6c75d496d3b042738d5
SHA102c310d7bf79b32a43acd367d031b6a88c7e95ed
SHA2565ebbfc6df60e21044486a5df3cb47ccdcd7a4d5f197804555715ffd9bf6c5834
SHA512663a302e651b9167f4c4e6ae30028307b4d8da0dda3a0e5fd414104951d50419862fc9396c5b39fe5c4b696efd3efbf0b575688983b1d341f3ef38becf500505
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\themes\dark\icons.png.fun
Filesize7KB
MD572269cd78515bde3812a44fa4c1c028c
SHA187cada599a01acf0a43692f07a58f62f5d90d22c
SHA2567c78b3da50c1135a9e1ecace9aea4ea7ac8622d2a87b952fc917c81010c953f7
SHA5123834b7a8866e8656bbdbf711fc400956e9b7a14e192758f26ccf31d8f6ab8e34f7b1983c1845dc84e45ff70555e423d54a475f6a668511d3bcbdd1d460eeb4b0
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\themes\dark\icons_ie8.gif.fun
Filesize7KB
MD5eda4add7a17cc3d53920dd85d5987a5f
SHA1863dcc28a16e16f66f607790807299b4578e6319
SHA25697f6348eaa48800e603d11fa22c62e10682ad919e7af2b2e59d6bd53937618f2
SHA512d59fa9648dc7cb76a5163014f91b6d65d33aaa86fc9d9c73bf147943a3254b4c4f77f06b2e95bb8f94246a982ea466eb33dac9573dd62f40953fd23de1c1b498
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\themes\dark\icons_retina.png.fun
Filesize15KB
MD57dbb12df8a1a7faae12a7df93b48a7aa
SHA107800ce598bee0825598ad6f5513e2ba60d56645
SHA256aecde4eb94a19095495d76ef3189a9abd45bcfd41acbed7705d22b4c7d00aa77
SHA51296e454ebb4c96573e8edc6822290c22d425f4c7f7adbab35e6dc4b3ce04a5916ae9254c2c312c98299835ecbf3c5aa95da2939b8408ac25fbae44ba87a3795dc
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\themes\dark\new_icons.png.fun
Filesize8KB
MD582a2e835674d50f1a9388aaf1b935002
SHA1e09d0577da42a15ec1b71a887ff3e48cfbfeff1a
SHA256904372666ca3c40f92b20317d92ca531678958affbc34591401e338146fe0ecb
SHA512b10a8e384d0bd088443a5085f5c22a296f6f4d295a053d4526690ba65846e887daec47d01cf18fdf1160db98061a8b7c4040de56e6e604451a821fadccf32698
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\themes\dark\new_icons_retina.png.fun
Filesize17KB
MD5150c9a9ed69b12d54ada958fcdbb1d8a
SHA1804c540a51a8d14c6019d3886ece68f32f1631d5
SHA2562dee41184747742fbdc527b2023d67fecec1ccdfdf258439a06cd75d4fd33f43
SHA51270193ee6f0919eb14311f43b5a5da041deacb568db55fc43290ee76e17af902ac468435b37a150630ea3b7871c724073915ae5dcba3c301ac42f2d68dd598e2f
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon.png.fun
Filesize448B
MD5880833ad1399589728c877f0ebf9dce0
SHA10a98c8a78b48c4b1b4165a2c6b612084d9d26dce
SHA2567a27d891097df183fbf0031e3894bdac0ce77aef15d666ddd9f6a04e9836fb27
SHA5120ddf247892a72a390437390d535debf6e41d12e51b31eb4f0353b710ec380c5fbc531a48e76935088063a41aca843287d3def9c1cd46be05b8dcb69f5017a464
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_2x.png.fun
Filesize624B
MD5409a8070b50ad164eda5691adf5a2345
SHA1e84e10471f3775d5d706a3b7e361100c9fbfaf74
SHA256a91790b778026db625c9dedfe1c6d94b884818b33d7977e86b2f9c2f3c500796
SHA512767a75edd37d29b3433040ce21cda849cd11ba549f27581f7edc6416c433ba7047c56908d40956422393ab0f35ede61617d4bd2aad0bde3d1ebd276584c858c7
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_hover.png.fun
Filesize400B
MD52884524604c89632ebbf595e1d905df9
SHA1b6053c85110b0364766e18daab579ac048b36545
SHA256ae2facd997527426fc4def82e0db68be29b44499bfff86a28c36f7c31b177d4f
SHA5120b506397627823a1768796129c6b37d146821471b89338b5f2d0fd3aea707fd46a8e197ee0e298ddfb3b50eef0a0b064946006346b060f733ef19cbd5d24fc90
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_hover_2x.png.fun
Filesize560B
MD5e092d14d26938d98728ce4698ee49bc3
SHA19f8ee037664b4871ec02ed6bba11a5317b9e784a
SHA2565e8ec278a273be22199884d519a79f748801baa3a45b76e57569fdfffe96e7fb
SHA512b2fcb5d46339cdf6b5a954f2a083cf913779e57cb6e8699bc5da1fba1c370c41117b7ddefb50075622067eb7b02a20268bc047171bd883bcda4a497c2ec64ea4
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon.png.fun
Filesize400B
MD50c680b0b1e428ebc7bff87da2553d512
SHA1f801dedfc3796d7ec52ee8ba85f26f24bbd2627c
SHA2569433084e61062d2b709c1390e298ddaf3fb0226656662c04c0b7026a44dee750
SHA5122d1399a6bf225b048d2b12656e941ad912636acae2dec387f92f33ac80629a1e504bca63580ba73a8ed073788f697274d5eb76ea1b089f0555fd397a8f5cbbff
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png.fun
Filesize560B
MD5be26a499465cfbb09a281f34012eada0
SHA1b8544b9f569724a863e85209f81cd952acdea561
SHA2569095e9b4759e823e96984981af41b7a9915a5ecaa6be769f89c13484cef9e0f5
SHA51228196e5de9670e9f63adcf648368bd3ea5926a03e28a13adc2fb69c567fba2f84e4f162637c487acb64eda2e30993f849806f2313820ba693c7e70303542d04f
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png.fun
Filesize400B
MD52de4e157bf747db92c978efce8754951
SHA1c8d31effbb9621aefac55cf3d4ecf8db5e77f53d
SHA256341976b4fe312824d02512d74770a6df9e1c37123781655532bd9cd97ea65fa9
SHA5123042a742c38434ae3ee4fe10f7137462cdebad5cae0f9a85fb61063d15a30e1b54ac878b1af65f699c6ca1a9d2c3e58d245e54bdebfadc460cbd060836734e11
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png.fun
Filesize560B
MD5ad091690b979144c795c59933373ea3f
SHA15d9e481bc96e6f53b6ff148b0da8417f63962ada
SHA2567805ac9d0e05d560023e5aabed960d842e4f3ec2aa3db45a9cfb541688e2edb1
SHA51223b4c799a7b25f70962e8dd0ec7286ba7150053cab7c88f5fb1efc1095c2987bd6f3572e7fb3ee4b2238958e52a763de2c84a74615df7a6d3a19a034584fd687
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\generic-rhp-app\images\example_icons.png.fun
Filesize688B
MD565368c6dd915332ad36d061e55d02d6f
SHA1fb4bc0862b192ad322fcb8215a33bd06c4077c6b
SHA2566f9c7ebec5a707de439e3fd2e278fdfa07a39465d56157b70b24f091509bf76f
SHA5128bb9a7690aeb3c0b9e14e1a6ebc5741536d354cf2324fd74ee0c3e4ef511718f7795039a94c8d2df94b6e6d0fb1762191cb649089d1def12abdf34003f0cdd0f
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\generic-rhp-app\images\example_icons2x.png.fun
Filesize1KB
MD50d35b2591dc256d3575b38c748338021
SHA1313f42a267f483e16e9dd223202c6679f243f02d
SHA2561ca0cfc2df0354c8d886285ae5e743d9c7cc030e1afd68ac113c0f2ce43ad5fa
SHA512f6c58c27bbde7508a866bd0e7fabadb13a4f020378cd8b8cfc0c9fa23f645d811d6cdea04b81afdf30c064c6248152e74b3e6a78ec7a3d1d19037a0db8897d7e
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\themes\dark\bg_pattern_RHP.png.fun
Filesize192B
MD5b8454390c3402747f7c5e46c69bea782
SHA1e922c30891ff05939441d839bfe8e71ad9805ec0
SHA25676f8ed1dd50e50c7d62b804a0d6901a93e5534787d7b38467933d4c12ce98a0d
SHA51222b26c62473e80d17c1f78df14757ccfb6c7175faa541705edc153c02baa7ab0982b5daabe8dd2c8c9efb92af81f55ccaeeecffe8ed9a0b3c26e89135ca50923
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\themes\dark\bg_patterns_header.png.fun
Filesize704B
MD56e333be79ea4454e2ae4a0649edc420d
SHA195a545127e10daea20fd38b29dcc66029bd3b8bc
SHA256112f72ef2bc57de697b82b731775fba3f518d1ae072120cd11b732bf4a782e36
SHA512bed5906c7373814acc8a54c1631428a17f0aa69282920447a1575d8db826afd5dab262301dc6da610ff8bb81d24ec6babd3d9fb99fd6945f1aca9cb9c76ec2c9
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\themes\dark\illustrations.png.fun
Filesize8KB
MD53ae8789eb89621255cfd5708f5658dea
SHA16c3b530412474f62b91fd4393b636012c29217df
SHA2567c5b1d8469e232a58359ccbcb89e619c81c20e6d2c7579e4292eb9a19849bc5a
SHA512f6998dbae1a2fa56f962045261a11a50b8e03573d9d4cf39083da3be341cc104e0ecf5908076f03961bcdb1356d05a7450d69940ec3aaab73623a6fe180e7051
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\themes\dark\illustrations_retina.png.fun
Filesize19KB
MD5b7c62677ce78fbd3fb9c047665223fea
SHA13218c7b6fd8be5e0a8b67d3953d37d5dbd0c71d8
SHA256aa638be6e1107ed1f14e8430abedd6f6d0a837a31b1b63e6a7741d6d417eddc2
SHA5129e0cc29835845f2a0260a6989c1b362bac22a8e0c2825bc18f1dde812ce7868503881d2deaf951429a80b5017b6ce31e785ff524883e08d730aa38b36a2fb074
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\en-gb\ui-strings.js.fun
Filesize832B
MD5117d6f863b5406cd4f2ac4ceaa4ba2c6
SHA15cac25f217399ea050182d28b08301fd819f2b2e
SHA25673acdc730d8a9ec8f340c724b4db96fc222bb1eaf836cec69dfe3fab8d6ac362
SHA512e10883029c1e0fbc64bec9aac0a6957a8499af255e1790843717212077926474e02b2870c5dd04b057c956b97ad4bb1747fe73e731ea61b891f4b38dd80494d7
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\ui-strings.js.fun
Filesize1KB
MD5433755fcc2552446eb1345dd28c924eb
SHA123863f5257bdc268015f31ab22434728e5982019
SHA256d6c290e942ee665d71e288229423a1f1866842988eac01f886910b0ec383aa9b
SHA512de83b580ce27012a7677e1da867c91e2a42dbc6b5872dcf756ace51c2862801814665ecca997171f2e550e8b9a3de19994d2516a4e5d4d57e16c7b4b823236c0
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\ui-strings.js.fun
Filesize1KB
MD5781ed8cdd7186821383d43d770d2e357
SHA199638b49b4cfec881688b025467df9f6f15371e8
SHA256a955039cd9e53674395f4b758218e4d59c89e99a0c4d2a909e49f6008b8f5dd4
SHA51287cb9c4288586df232200f7bbacee3dee04f31c9444902dd369ad5c392d71e9837ebf8b3bb0fcb4a5db8a879cf757e97ce248939e3316c6bf3a3fe7cbe579534
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\bun.png.fun
Filesize2KB
MD551da980061401d9a49494b58225b2753
SHA13445ffbf33f012ff638c1435f0834db9858f16d3
SHA2563fb25ddd378ab756ec9faa56f16b76691cf6d9c7405bb9a09ce542a6f5b94e44
SHA512ecc5eb2a045ce2508d461b999f16caba6cce55aa0c00b34bd73a33e0458795f93a77caff5026212912684164057be016f51dc57ec83821c2a1f2e27417c47b2c
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview.png.fun
Filesize2KB
MD52863e8df6fbbe35b81b590817dd42a04
SHA1562824deb05e2bfe1b57cd0abd3fc7fbec141b7c
SHA2567f1238332901b740cde70db622abcfb533fc02f71e93101340073552f4820dad
SHA5127b2d95465ea66951ea05c341549535a0a939d26dbde365b212e3983e4047fa6912c37d737cb8054c41bb1a7d92586d968a0154c666572a70ebc59a4776897f38
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview2x.png.fun
Filesize4KB
MD579f6f006c95a4eb4141d6cedc7b2ebeb
SHA1012ca3de08fb304f022f4ea9565ae465f53ab9e8
SHA256e9847d0839d3cf1039bebdc49820ee7813d70941347ce420990592e5e3bd998e
SHA512c143a4cf1ccfa98039b73214978722408188535ee4aa3dac08a34760b94bdf6d36ad0ff0de893da5b17fd69c96a6dfb25098ab7fec219fad1a77532113d0353e
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\dd_arrow_small.png.fun
Filesize304B
MD5b88e3983f77632fa21f1d11ac7e27a64
SHA103a2b008cc3fe914910b0250ed4d49bd6b021393
SHA2568469b8a64e80d662eec71c50513f6d295ef4a3a9992763dbcac9d81253cef9d5
SHA5125bf93d4f4250ca96169f3d27d4e648cc5d6e00b7558a3ef32e07edcbae36dadb8008d7ba5f83ac3ed812b72c9d52730e866191b4de7a339df57b5697e00df50d
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\dd_arrow_small2x.png.fun
Filesize400B
MD5f77086a1d20bca6ba75b8f2fef2f0247
SHA1db7c58faaecd10e4b3473b74c1277603a75d6624
SHA256cf10d2a22b638cf0978cf30ecaf39ecb5bb0e3ad78cd920afa433ad60cc1290d
SHA512a77a897c0b41f4052cb9546d4cfd6e0856b288b6b8583a86d6c7e79059a05b19cc2593599251581e79107235e9d5cd589c392bf490452be04ff57e944cd19df3
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\nub.png.fun
Filesize1008B
MD5e03c9cd255f1d8d6c03b52fee7273894
SHA1d0e9a9e6efd1746bc9ccb4eb8e7701c1cd707e2e
SHA25622a34c8321384fc7682102e40d082e7812232a9109e4d4e8fa2152fda3f260f6
SHA512d4bd002197b725316e1f1f2dd0a70ee44a82a53ac0dafa8c6b1166343adc406e147d0c4cca30d65a32aa545f1b327c6b69c0ec1d15330af48a6faa234dc4b5ac
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\share_icons.png.fun
Filesize1KB
MD562b1443d82968878c773a1414de23c82
SHA1192bbf788c31bc7e6fe840c0ea113992a8d8621c
SHA2564e96529c023168df8dde241a9acdbf4788ea65bc35605e18febff2b2071f1e24
SHA51275c8604ea65e0cdd9ea74b4802930444dd16a945da1e7f0af4a9a3762259ee9eb41ea96973555d06f4814ee2f6b73ab662c6b314b97876e9628fa5d4536e771c
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\share_icons2x.png.fun
Filesize2KB
MD5bca915870ae4ad0d86fcaba08a10f1fa
SHA17531259f5edae780e684a25635292bf4b2bb1aac
SHA256d153ed6c5ea8c2c2f1839f8dadcc730f61bd8cd86ad732bab002a258dea1d037
SHA51203f23de6b0ae10e63c41e73308b3844d49379c55d2df75fa1dc00771b26253d832c21081d8289f04260369df996e31273b7c0788cf3b5c78a27ec909f14a283a
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\nl-nl\ui-strings.js.fun
Filesize848B
MD514145467d1e7bd96f1ffe21e0ae79199
SHA15db5fbd88779a088fd1c4319ff26beb284ad0ff3
SHA2567a75b8ec8809c460301f30e1960b13c518680792e5c743ce7e9a7f691cfafc38
SHA512762d499c54c5a25aba4357a50bb4e6b47451babeda84fa62cfbd649f8350bca55204ad002883b9147e78dda3dbabaae8da1dc94b716204226bb53326030772b7
-
C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_US_POSIX.txt.fun
Filesize32KB
MD5829165ca0fd145de3c2c8051b321734f
SHA1f5cc3af85ab27c3ea2c2f7cbb8295b28a76a459e
SHA256a193ee2673e0ba5ebc5ea6e65665b8a28bd7611f06d2b0174ec2076e22d94356
SHA5127d380cda12b342a770def9d4e9c078c97874f3a30cd9f531355e3744a8fef2308f79878ffeb12ce26953325cb6a17bc7e54237dfdc2ee72b140ec295676adbcb
-
Filesize
12KB
MD5369bbc37cff290adb8963dc5e518b9b8
SHA1de0ef569f7ef55032e4b18d3a03542cc2bbac191
SHA2563d7ec761bef1b1af418b909f1c81ce577c769722957713fdafbc8131b0a0c7d3
SHA5124f8ec1fd4de8d373a4973513aa95e646dfc5b1069549fafe0d125614116c902bfc04b0e6afd12554cc13ca6c53e1f258a3b14e54ac811f6b06ed50c9ac9890b1
-
Filesize
182KB
MD5b69894fc1c3f26c77b1826ef8b5a9fc5
SHA1cff7b4299253beda53fb015408dd840db59901a1
SHA256b91bad4c618eb6049b19364f62827470095e30519d07f4e0f2ccc387ddd5f1bf
SHA5128361e97d84082f8e888262d0657bac47c152bd72f972628f446f58cbeacf37c05f484dce3fb0d38c4f0da2a2dcbb0813639d201d127ec7f072b942d43b216755
-
Filesize
201KB
MD5136e8226d68856da40a4f60e70581b72
SHA16c1a09e12e3e07740feef7b209f673b06542ab62
SHA256b4b8a2f87ee9c5f731189fe9f622cb9cd18fa3d55b0e8e0ae3c3a44a0833709f
SHA5129a0215830e3f3a97e8b2cdcf1b98053ce266f0c6cb537942aec1f40e22627b60cb5bb499faece768481c41f7d851fcd5e10baa9534df25c419664407c6e5a399
-
Filesize
215KB
MD5205590d4fb4b1914d2853ab7a9839ccf
SHA1d9bbf8941df5993f72ffcf46beefcfcd88694ebd
SHA2565f82471d58b6e700248d9602ce4a0a5cda4d2e2863ef1eb9fee4effcc07f3767
SHA512bce1447d5d3210c22d52dec3b846db091b65ed03fd9d7cd11c6c4dbd2aa5a943d881360bc033c29abd61011581ff9354b35cbe421719d92568ed99997bfbbae8
-
Filesize
261KB
MD5b07ab49ee8453853021c7dac2b2131db
SHA1e1d87d6a6e7503d0d2b288ea5f034fe2f346196a
SHA256f8535d5d73ebebed15adc6ae2ced6bb4889aa23e6ffe55faeabd961bf77b05e4
SHA5125eaae533fbe71430ae2a717f7668fd0a26ec37624e198a32f09bfdbee7e3b6e93d64e4fbb78cbdb05c4fe390a864490ea997d11849ecd371f5153bc8bfafccc3
-
Filesize
4KB
MD56dd5bf0743f2366a0bdd37e302783bcd
SHA1e5ff6e044c40c02b1fc78304804fe1f993fed2e6
SHA25691d3fc490565ded7621ff5198960e501b6db857d5dd45af2fe7c3ecd141145f5
SHA512f546c1dff8902a3353c0b7c10ca9f69bb77ebd276e4d5217da9e0823a0d8d506a5267773f789343d8c56b41a0ee6a97d4470a44bbd81ceaa8529e5e818f4951e
-
Filesize
2.1MB
MD55d89123f9b96098d8fad74108bdd5f7e
SHA16309551b9656527563d2b2f3c335fd6805da0501
SHA25603c3c918886e58f096aa8e919b1e9f8dcd5a9f2a4765971049bf8da305476f44
SHA5129d8190e5374cd1b4adbbfb87c27fa40d4de529d7c0a20654e0ce189a4cb9a53d3708c4ce657a7a5469b015df7efbbff495fc844579d9cd363b329b7e007e85c8
-
Filesize
29KB
MD54f860d5995ab77e6efa8f589a758c6d2
SHA107536839ccfd3c654ec5dc2161020f729973196d
SHA2569841d787142dd54fea6b033bd897f05f3e617b48b051de0ee3cf5865b3393150
SHA5120b9a661b76360f1fb2eb3ee25c6bf2cbab7ec74e2363e0af321dc4d0afb3cad301dddd16ea367d588451a40a2c2ed41f21d7afae48307e1e4a4ec5b24165b378
-
Filesize
24KB
MD5f624de37750fd191eb29d4de36818f8b
SHA1b647dae9b9a3c673980afa651d73ce0a4985aae6
SHA256e284453cd512e446fcbf9440013f8cb2348ffd6b1acec5366f2511cdf88b1794
SHA512d1d65e29ed59e34d4ff66df11a2368f1a724730e32eb245022d4f3d1fadf16d445ba8532460afb0e6e91f8be60a7240d13577403193042d1e912a67e4bf23b1a
-
Filesize
26KB
MD55de3f4dabb5f033f24e29033142e7349
SHA15c446985de443501b545d75f6886a143c748b033
SHA2562533d443b68c5288468b0b20cc3a70dc05f0498369d5321368a97dd5bf3268c8
SHA512c96296e6f67edeff2be5dc03014a8eb65fc287fb899357d4608c36c07b4610827aa18cbec6ccd47b66230a12341af488aca8bd02632fa768f84ca7b1d9c9d065
-
Filesize
29KB
MD51fb14c6c4fee7bfabe41badb7c5acff8
SHA1953d94cd73951943db14c08cce37b2d3ac821b02
SHA256cd32339fd7e4a5959e93eb5bfd6e009e4137e15c5e6c2e861d7891487216da49
SHA512a93b081935fbe48fafa8071a9cd593ae7b19205c70eaf48c724397019a04161460c66d6d8c6ffd872f4d52a4a7aa25ba1cba04181b9ebaca04b76d111ea588d2
-
Filesize
29KB
MD5d3345579310f3bd080b406de47b2305f
SHA116aefb27ea6d81c684f041aa50ebb49fdd403d83
SHA256b4ea3c63fa0104093a2b2034f950428e66d2cf3d55f0fc5bd688483392d60d69
SHA51265e4aa8587bc579b5109d91e02745f6de96a23b6ac2962cdeb6d9d536b51abab12b2bbaeca72572c3ae1971dac5bd24430eb2ae5ccf44a7068427594e4afdd7a
-
Filesize
29KB
MD5ecf3405e9e712d685ef1e8a5377296ea
SHA19872cdf450adf4257d77282a39b75822ce1c8375
SHA256e400415638a7b7dcc28b14a257a28e93e423c396e89a02cba51623fdfbdc6b0b
SHA51237e5f1b3bdd97a4370718dc2a46d78ab5b66865d3cdb66a20a7dc20a9d423ccde954c08f97e574fbab24e8dfa905351cbfb94bd3e6692a9b6526097ea3dc911d
-
Filesize
29KB
MD5051c429fa2beec9c2842c403a86c0e7b
SHA10a06a45200a1f5c81c48fbd2d03549fc9fac3a58
SHA2561a8465922bbb05a97a24f6c2200fcc7afd8bd0ace245c2eda9d9d335d4fb9353
SHA512bb59b41804328f27ba8861af32824266ca69ddcfdaaa11551b1edd4e129dbba630da8070abedb28e180045f8d0ddc1209cd901919f6b9aa421c457188af795c6
-
Filesize
29KB
MD582711e45d2b0764997abc1e0678a73bb
SHA147908e8885c86477a6f52eea5fddb005ec5b3fa3
SHA2562bb7455999b8f53a2a0834588ca4da4703f4da362a127d01cc6bd60ca0303799
SHA5124b517796edc954ab7f5a26a5d6605925dc7e84b611bcf59352b3b95f719cedc72c77a465fb1e7bc2d2f422d596c97968dac5b57292c82967d5cfaff980128fc2
-
Filesize
28KB
MD5a0a1f791984f1de2f03a36171232d18d
SHA171f69d8fe47640ba9705725d7d627a05519c8016
SHA256d2c7da8f4745b81874a9666c7d10a779a9956b4de0ebdaa1647bf78d4e17d85a
SHA512a4267911846cd55eb91227b0117ccbfdf8ef6c4ed0b8935b08e5d41a91aeabd9259988c71da8606cfb2876c4d69df6ca5a246687440283f1625105624305eb33
-
Filesize
30KB
MD5897712b508931dab76d39b209611740c
SHA19d80e07c2dc744e2efce3b67aa9876949fb9edfe
SHA256ee64fdefdb3381ce61fc445190cc44b015e7b65a3a16d28f3477f68de6079f1b
SHA5123329e37318dd9b11f282301e453af106168d3d10beff1ed62ffdcda60c6b4edb6b9c69ac6b9bb8abce3c9a9686a0152404524012dbff025e571de2cfcb3b5d56
-
Filesize
30KB
MD5e90155442b28008992a7d899ca730222
SHA11d448e9709de0d301ded6d75caaeba4348a4793d
SHA2566ae98b5e2eda22a0236434b7e952d732e3cd5d9cae2e51cd70222f1fd5278563
SHA512a91d8357ca976db2eb5a081077304a50edc1b55b2775c00cfde05e03831f98bd04e43f0dba5b3efd5a6370afcb10b23bbf307412467502e9ef57e0beae636013
-
Filesize
28KB
MD51de961b662a374c3af918c18225f4364
SHA1e8f1c438e57b322f43b4b851698bf38c129eb6ae
SHA256bb1365c5770dacbb918af27b47b02f269504f4d2396cf3f82bf5ecb2551c5021
SHA512c6bf62b684039f62744f1aab07f4751948e0c175f7fb7fe126f20903ce23fcdd2e284f1b794922621dae7eaa15c6dae0177ad102289a18f967721486f21073a1
-
Filesize
28KB
MD529f027d2d5fd486bdc20386ace925603
SHA166b8605f23871b4a8302bef0aaccb36ee1e72755
SHA25603c8566f749e8fa349d97101849bc3b2cc0b7561b565a2b0928bf8fe901da813
SHA5123348bdf10b2d964b34b791a774e28c97d3caf28d7f90e36b948cc2cb6c21e84cda933b7ddbd51c8fc604a450361cb834322c15ddbe0f4851154d05e5a2a2ea42
-
Filesize
28KB
MD5b0ae9aa0d5c17ee7abfc57d21cdcbae6
SHA101019eb6ba9c123be528136e12192b0bb33df407
SHA256d10938919e3d28d71e8e3ba2d8e02e0f9dc2faf148cdedc21c166fd994c603e2
SHA5124cba25c8159df865231b08fe650eedfb92d54c3037d28b2b9af010c8a59fa23669041a6c393622fe69b0194c2532f71f02b740f7e26e0bbf7ef34a421d6747b8
-
Filesize
30KB
MD5ad5b530eabff0540078c5d17f27b9610
SHA17e53dbbf64e70e561d37669e69f50eb0da8e37d1
SHA25649f512316a51e51027b4e70de4ffe8c8ecb188e126439a90a5d12d52a0393966
SHA512e1cc853d96589220676d39d91d4108633ce56304640f770e7d22b97a9b3be9452d5fb94e4e7fcd1400b62f0c398da8255c53a31853194a9e7b7784982b5ff40f
-
Filesize
30KB
MD5a7e64339a5314e3576c0d170171fa52a
SHA16c12aab6c97c30aff3245b78f7a3afeea604215e
SHA2564e9ccecb8e4383395f2134347fbad00521345ec9c857d8fa102d5257c7bea9bf
SHA512a4ca3fb60a7f4bda50847544dd1289d750f0d4b3565929290a8392b92822ef1856cec15a1f63f2c6fe1ef2e7cc0936a35bdb38ee5d904eb08cd32f05addc6ee4
-
Filesize
27KB
MD574d4cf3b8efb6cc3d0acc3eac38bd5b7
SHA19337803aadad9042c895b6f418b4c733b81221e0
SHA256b83c8981d8835e4c78250bf265faa6d64693204b77764c8e349abc4365ae9871
SHA512e6112ef60d56101aa16327042162d6ef43519bc56668ca8eaa7fd3e1aaadc75c7df75c1e41583a292ff1a9bdc7d9ad9f5c0d97fa84964532dca2d5f3df604c23
-
Filesize
27KB
MD519dc1f6d1f309eb7abf1e0c8257f41f8
SHA1e2d3e86fe22c6af6b8ee5b359315dfa6ac4d52ec
SHA256046f6c532fcabd969c6e63bb7ee0d7a83d806fa659006508e1c3a9485190d6ef
SHA512478d6a84452cfadc48547930e336ad459eec188dd3d9e4c778cded4ec3d34e00b2b8c0538366aa644ee67f878b29c5c73444c1406c66e8394761bb0979c6483c
-
Filesize
29KB
MD58f7f515d78d2df371993fd70f863ab8d
SHA1dfae1b47e80f91abf2d9c2aac009c0a1767bc59d
SHA256ba57fbb9d3a32b84d6a76054b9ad180b6510e53206b9804bb9ea18ff73c2ae3e
SHA512308a62af00a4410551eac967bb9f2cea7adf7c13b471dd28b276bda40b1e4c0b4ebb60aec29b6165069d40180bc45b4f5da5baddc374ce7bc5a5bb223afb4e96
-
Filesize
29KB
MD56af05d448c842027f876e93f8ac58b65
SHA1f34c988e3875a1d1b267b082476fcfb8d7505a73
SHA25636876b14a214cf98dda5100a7e7134d7ebb78e895535d6bd7562099574607867
SHA512412031db59de0367a102a026f73072244b33d726adc5bb9fd079db3dd37b5d6a24d7420a9811576d0a356933b5ba15cc9e2a92046d2d6e6d6fef37e9d840aec6
-
Filesize
28KB
MD5ae9bdf6416c3630c4b0b5b119308a135
SHA1d7218c677b098d2a93cc91ead39c83d3a2c653b6
SHA25662da90c9417a70632aa190fecc17c31ecf433c1f84f82b08d7d7290669cabf32
SHA5124333ac6cd3737f25e6e1d429b195da781ced4340b89808cbd5d5d2aae2e79bcc700419d613123d632252e31ac44d95b7718f23da5b82ab5054407e80106a64a7
-
Filesize
28KB
MD5fe73dbc305da6223d1e94e1cf548c000
SHA1b16f2c40d68cd9718eaaa9b6db9c8e5c4b6acb9e
SHA2561ef64088a613a4e10b4cf4206f95f5414ee27872798747234a6574b7e5c70a7d
SHA512d9900720d89defffa52198dbe63515995095c94aa0cbbe4f32a1c09d26809cec480e92926d2240702604b8c13fcdc0032cc46910ade8e4c1d2fc9a4bd1b63858
-
Filesize
28KB
MD5367ea715e942c81dd3cb734274969a0b
SHA1f92f1ec2a5be9b775e67c4252a07c37ed0ca508b
SHA256082da1c09782c026c9cd73456dc12539a226f0bf5d113e59bc93b29c1e98b37c
SHA512c94e787ba3bdb56d1827a0477461cbba6b7cc68986722275e0d04ea7dc70db83b5d03887eec810bf9b67f70b18bd3c7b7d28f0e554938b81d3501bc11f97830a
-
Filesize
28KB
MD55a30bc4216af48a493eeb0f3a9f02607
SHA12fdf65a4002d91818d56a23fb8bfd08ab715002f
SHA2565131c23915ad6b5b469bcbff31d0ae31ef34ded28ca0ffff9f1eb998bba98aa1
SHA51234b3a4865f31ebdb8665780011b384ada768a0f71bff77f91706b140eb8cc07fff8787f710cdb1ee14a449cae8f22ee5fddadcc501cf1c921eea078e97dc2f89
-
Filesize
29KB
MD584c4736cf301b93998028ed7678caec1
SHA13b6f1f6b9eb3dd7d9a13c11dfd3ac56c93f1b10f
SHA2563c8dcb7e982dac3159298009a86909b1e1000ccf6f4d333341f16d4d6fbd84ad
SHA5125a1b77ef9450c32802e94e473a5b4e43e892c923ef368ee9bbbbb5b0090429320263cc79a4da0b281930c1a60861519211abd0bd67a9d9ee370bdda2230d2e81
-
Filesize
30KB
MD58993c0784111fc7cd6a90a82303e5f44
SHA18d1ff2fed98ebc608604c555ceb46ca628afb285
SHA2563d0ba88267018f592141ea86592757cf1ecaac1a3a18f99203e0fc5c5eacbd62
SHA512124d16d848dc8ea0a93b292b10ce1fbad23b56b13771d904cf14c19d54478614d214441b05f6cd9e1999b8310fdd26d1c6ecae784be00aecee7e80c96ba4ac88
-
Filesize
30KB
MD5a640aa4ff33662e06a474765df0b2a8d
SHA1c6265225532e389e48c6057bd717b69de2125b61
SHA256078b1943bf7f7955b90abc40f691b27e04376f8c43dd3abc4791614286cd4f23
SHA51259791eef021f94efd9c18737d6c46fbc45add582eec92d5b997cfd66993abc7da872720a037766c3c70862f0654ccf30d122d4a5a6b305151bf8bf1c053a466d
-
Filesize
29KB
MD55bcc643a969559317d09a9c87f53d04e
SHA13602d51cde97de16d8c018225a39d505c803e0fc
SHA256b48f57e90ea9db6d6a296c01e87f8db71e47ab05ab6c2a664cfa9f52cf1d2c18
SHA5124c65772f77e61e64d572df5b1f62733aceb02a5c967c296b303ff17c5d49831e5b7fc3d662724ae3ae1e88cd0fdcb704e838af5d4ae20f2d82b9577f57159159
-
Filesize
30KB
MD5aea23f526ef0c5bb3d2f8fdf192a49ea
SHA14d7695e33ed43c3efb95f304e29675ea885b2939
SHA2563cfe866c151a7e8a208af725c0c6f2a47fc3ada35f9ad3509b16b8d5229318b9
SHA512412e4742ebd46ce38010b4f6a46d8d524025f929ab4658040e271d768e79115d90903403b2f1e51ab910bbdf9677b49439eb3c8afc5959477af198efb0c7c3c9
-
Filesize
29KB
MD5295cd30c00f43d9131621baf4859578f
SHA1cab79a6263b7b0a799461f3e6df41f815029cded
SHA256b851c5a60cb6d1e8dd9aa161106cba99ccea047d0b39d007beaa7b9ef4a83397
SHA5125f5c1e62e6c0e11a63fad68928765e3f504f33cdbb1d9a05cd53cbc3ed145bf3528960a10e3d57e8c83b07c030c72257f403b9a57d12975d3ef8bc255418ad6c
-
Filesize
28KB
MD5c43c1ab37cd93e54068443bc330fb3d2
SHA1ab51a2cbc51b3c17cf184c6d99ac480c02eb63af
SHA2560c26a367355e766402c31fbab102dd1c35300d4a1301417c75be5fc4b3d54680
SHA512ff0193189fb846eb3c4188bb599dad8e6f415ec9612da567d95c9c513defb148b6013208371798d174569b46f443a744e4e8b83aaf139d68c31f7de0f94e63f9
-
Filesize
29KB
MD5a5544f517f7c1bfd1ec6a2e355d5a84c
SHA134a2a4a576300ad55b6757171bcba0fab005daa5
SHA2568274c64bb778b55d912929625cd849adfe733b2dd674d94895d53af8dfaabeca
SHA5129069bcfb736e13499250844dddef40e2cf64937e33ee1f81fc4968f024f7d7b89c6a778866bf1bff98d770686569e4752a473c0adfad4d4099cceda84da3cac3
-
Filesize
29KB
MD5c09876a180731c172fa2532f8be90a3d
SHA14359c7840ddb23142a40aff85129b9920360e954
SHA25650fd548ea12e2b72fc563bc082b870a89a523e8b3a4a0e9b65fe673384da2b58
SHA51291cee1b10fc12a01a2a285e67dba583d6f1bee0716cc89103fee0c7d0f52fadc0f9ac5b13e833834e7279963726950d3897847e7acac61857257fc031692033e
-
Filesize
29KB
MD5ee19156c12d2d7cce9b12e515f9ac6c5
SHA119ad46e40b3c1cb6195231bfcf45bb68ee1b43bf
SHA256c290883b4b99758792284755efa52c12eb09039f0f8027d8ba3b1d4bb2f3846f
SHA512631364472a450519ad8959971d6c319610570ca37b4486ea12d6af5b46aaecbf336aadddd1f3fefba841534ff82adf905b1e1a008638ed784bf08870a3b86ee1
-
Filesize
28KB
MD5eacd4638369bf96ccc7c23af37e15b5d
SHA115c4878b78c06095981abcc589c4a6f265ef96a3
SHA256a53c0fd74995090dbf48bbba4a00560e3cc344ce8120b8b2bfa1f9b953b536ef
SHA51219cc8d25bd8fd84481f77d301f79636208df5807647ddc6cb6beff3882d94672db49daa4ddfff0c334b584742f9d2fea3af73977032d7dfccd0cfd1314af4ae6
-
Filesize
28KB
MD519d44de8f930e07f41f9343478ed5c1d
SHA183ee0c5a86997dd491bd8312d221dde2b2e7d44a
SHA25669d3a21b7723e4df8b7b97e39493081e41231e2d3a3f5a4de462db41339987ec
SHA5124edb82aedfeca743a03815a889eca766fec8083afd0defa098593297a52edaf1780dbd5ad1d3325c614d815d34d8c57ec2283a0db215f94f42819f1890089c4a
-
Filesize
30KB
MD526cbb965c6976f59ac385ef9408bf81a
SHA116bb0530338e600fdfd13a7b03523a715e633bcb
SHA256bed996b25f77c7d4328d96147ed388f1b457abfc0510eb8956be4339d103821a
SHA5121efb1bdf0276de17f8516cde4d435e0be8fd066f52fb5d4c9e2fe2e17a135296ab6b34f523284941beae438e97d7e65de26f0541b7c437bceff229b60da4bb0d
-
Filesize
25KB
MD598f79d77ab05304bba8d60e50914418f
SHA1957590adc0f8a7274e765e2a804c1de7c76e3040
SHA2563764941b873ed59d5bc1097f6b9382ba59c06d443a96ff71ba6b693f161da522
SHA5129ca6af5c14193dce7b50251f1b9205870435e60b5495ab1a9f0d42ca14b98b78fef51bf3cd4165394ca5ba28d0e98bea7642ec67039c0f146383136145c7de59
-
Filesize
24KB
MD5b89ba9ecc6d4c77abff61b1c75fff16c
SHA1f381408f26be2c77c7b59681ad6280a701ccb472
SHA256bbd2c970f747a6ee8e4735939225f607ae630ddc6e2e39954e0300ca9a7a88b2
SHA51253a3db82f4cf5a300a5eab7692f4084451b987ad72ae24d9118d80f18692ac3604981c0e871c7a7625c5153803aea0e093d91822d33af0c10a07bcb6e766a5b6
-
Filesize
29KB
MD5d464fd223ba898e6fef4e485a3118394
SHA159c78983ce859485fea5458ba4e7803c38012b9d
SHA256066c5c4b4c87ffd201d0dbfc43cb7566cfb03a6ed2fbf8698220fb919637294d
SHA5126ac1d5fc59e6b7a10532902b059ac25a2bf58b0a63ab586e89b293e2de732c1d5d580c75ff28e4a2660a6ee3f0389f49e388567bcc07dd6e1cfd5d019db3ea52
-
Filesize
28KB
MD51b1202fc3e46d7b46ce3cb46cdc5ab21
SHA1e76d1065035d86eef011feb3cad3ac38eecd0b7d
SHA256b660a0e1d5161765881e0a7fd9d714abce341403b21f63667ffdedf7d5a254d0
SHA5127f11d5d6995f27bb4f8705ac7310273f070a71adc73cdb70d74766c89437b3e7a10453fc55588ac223fe3b449564758a49380168d779fdb6a4fac3b5cde767ea
-
Filesize
27KB
MD5126036b98853a9d31937f874484dcb83
SHA127ffb8f3f6e966c3b79824357e79eac4ec8ce0a7
SHA25690908e9108adcb0b4df84e4fbd9724e5e7a2d2eb54720fe49f37bdce977be635
SHA512b384657e0ca90270b96cb724aa55c52f5c8b569fdb1a7ee7085c18d6822c39fc81a490128bd42d0aec1c0ddac1853e30718710968f5921a5331211bd33e89316
-
Filesize
29KB
MD5e20f7a758cc9bab3d458d89d828521cc
SHA1cae0a6d29e5b3f0aed0db2d66fe19d5463c09cfb
SHA25692858a377f1ddc353b51bb44ec04f571ff2b4913d3c8104aa01359b72f91f2eb
SHA5128bf9b8c6765820db6dd95303cb996b97649796e14e67b465fded3c24ef180891d58f9fdcb06243ef1d4c5cdd4148f58f64d74d2ceb2cb214051718d33efc9707
-
Filesize
23KB
MD5f7dbd944a9126dbe568faf2489ecf053
SHA116ad534b4fa48d95224c74b8ca4d3d4533c76425
SHA256b1dd9c0fdd11a5f83ed5b7d1fbcd417bfaa94e42035647ca45f20e332b531703
SHA5120b6843fd208ea9448179e63b485c01b5ff824d555cad57cdb6575234bf43d6cf253e9494fa74150b9fa9ace9d1d1ce749e1a77c7b342c10498dd7bd3953d9a27
-
Filesize
28KB
MD5c1557eba649fc78356ed198d6754416d
SHA11ab42e71a88b127c40f8dd6d1b0660f271442a11
SHA2568c5a7b3e9f5a3a64214ca8e9d43ea152f69fc2633f47c0783b90385e00551ef9
SHA512e2f92c8c6ea823e1d716732b4bb5295d34da02d270079f645d9290261728bcf822b7f845f4a37dc2ef844580d6a3650a53c3e80be875eac5dffef651e8607993
-
Filesize
30KB
MD5b61c9c9ea8340b6b3a873162a2710cfe
SHA15017b90dbd61add602681b76542b0bd3974639af
SHA256f3eb2d26173d9ea8e26e234c3c5f91f9eb145fdf8b2b3e5011e0f33394fd8737
SHA5120d32f6a880509472a51ceaa9539e3169505bc6b508664d28c9dfdd1a3a72abec665574dfb89e385c18522166221f1d73741fe62e4ea0860bc132e198614cccf2
-
Filesize
27KB
MD56e6f49c35d2b74090529fc1d8d12eb2e
SHA15a0fc9397872d7d26803276292962cdb0a5e4739
SHA2566a25fc0ab6e2c73eb938b8e0f38578b9a02feb3a0634a16ac41ebc2a9642d260
SHA512d3838a88908b2ab9bf6018dfa4c6f784371774cc0bcc82e180761673a9e527e126fee17a150a51c6d0a1159575e2060c12f85ae751e7a95f0285e816799540bd
-
Filesize
28KB
MD5071ee832762aab532c59b858c7d3a46a
SHA10a976bd2c76d8db1f831a8912184d43e02ecf293
SHA256a47e46963fbc7020dfc9dd08eb5d7d8c4c2a9f0b0a8f51f1256453058a6a19f2
SHA51250ec7ff32da6f0d022ce067bcc160ccec00c4676ca56b789bc6ba1efc7f34ad485297f4cca6f6ed40be1c59018a7287c7fb490e6adcdd74f3f72b4526332a522
-
Filesize
29KB
MD5bf10592aafe1b8446c005ee9e5c305a8
SHA119b81a238e07c958f1757488440e42ba99b59b53
SHA2565cb166b350b425009080d39efa3b6ff5c0bf78f4276cc1ffce3043d4ef1a687f
SHA512b69d55757047170a7583f3f0525307e09e670adfe05906d30bf208dd78b70b3e18a19adf59aeccc861857c2e37cb08412e4729d597ffb45960d285e12357b4ff
-
Filesize
160B
MD5580ee0344b7da2786da6a433a1e84893
SHA160f8c4dd5457e9834f5402cb326b1a2d3ca0ba7e
SHA25698b6c2ddfefc628d03ceaef9d69688674a6bc32eb707f9ed86bc8c75675c4513
SHA512356d2cdea3321e894b5b46ad1ea24c0e3c8be8e3c454b5bd300b7340cbb454e71fc89ca09ea0785b373b483e67c2f6f6bb408e489b0de4ff82d5ed69a75613ba
-
Filesize
16KB
MD5fa7104db29e2fd9f71be138adf179d8d
SHA1fe0ad17c184b80491b9d290580e2d75c13b24003
SHA256c1d31d2f0e84a9edf76651a0fc14d596ab2f3ca9b7cdff705ecc82226ca4c868
SHA512bb42f8d477ebcadb7174cfc4e1d4f873c4aa1dd64f9a2439f9261d3c1d8d4065fd18343b5c15dd057b16783411579986e91a1b56440985eae2bf1f3bfc383439
-
C:\ProgramData\Microsoft\Provisioning\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\MasterDatastore.xml.fun
Filesize272B
MD5cbedb0911fdd4d66adc7bef7e898b2e4
SHA1563eb113d2b1064f45f594ee6f697c25bc6862d5
SHA256d117f7dff2b8d650108c43c9d2d7ffdf0452723f8996d74283a3e9bd29587f68
SHA512203b347e01e67f359ae40f42b6f472f036489e9a456f2b4821fc6409fedc0502d2cfe890dd922cd32f80826f9e026f4e1023e781888ba2112287468342e7f529
-
Filesize
283KB
MD52773e3dc59472296cb0024ba7715a64e
SHA127d99fbca067f478bb91cdbcb92f13a828b00859
SHA2563ae96f73d805e1d3995253db4d910300d8442ea603737a1428b613061e7f61e7
SHA5126ef530b209f8ec459cca66dbf2c31ec96c5f7d609f17fa3b877d276968032fbc6132ea4a45ed1450fb6c5d730a7c9349bf4481e28befaea6b119ec0ded842262
-
Filesize
74KB
MD5d4fc49dc14f63895d997fa4940f24378
SHA13efb1437a7c5e46034147cbbc8db017c69d02c31
SHA256853d2f4eb81c9fdcea2ee079f6faf98214b111b77cdf68709b38989d123890f1
SHA512cc60d79b4afe5007634ac21dc4bc92081880be4c0d798a1735b63b27e936c02f399964f744dc73711987f01e8a1064b02a4867dd6cac27538e5fbe275cc61e0a
-
Filesize
27KB
MD59575382151e5c39c9bb019d369cb02f8
SHA1b0aa14ffb3201a4595cfc1fb29f4e8e7243db2ac
SHA2562deda2c78e11752539cf10d62a771afca09a19a309f5dceef6edf0e97eecb93b
SHA5124717d02ee30e732025b1a63c22cc15a97d066ff07e3d476dcbac51a8df1b5ab94a2d8895eee2dae6713158e945e86f3a91b4f46060256955f51ad130d8c61506
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\01ABD05F24B7C929E9BBF7B620E2289C4EE00CD6
Filesize68KB
MD5cffe39d7c1afcc02d637f5eeccf33ae5
SHA1958c0986d77c9cf52dd14ff5ed642f05342dfdb7
SHA2568d0bcf15d158ccc781647be80e1838288241bbf68d028c9db10cfdf6e74be0d3
SHA512c1231b0dc4f4eccc720ee73897af3132b0db685ca81ad32bb9df2f64f4ff2306d6b40c4f52e041a7d3860b8795696107f8e5435801ffa70ad83be0f164f4ce8e
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\01F54350C8B73F18E7F6B5242B37A11BD26EA91C
Filesize297KB
MD5a7393f87bbe57d049fb30b8fe8a5f392
SHA1269241b9b2c9a54a2f77bafc33426e04b83d59f3
SHA2562f9cda079f3901b25ca1430311e52b544d43f4d1e2f824ab87d8759ef03e70c9
SHA5120a36feaa07122905779465bcd089f7343cc22cb1921e1da7c321d2a75edd2c481e674003e262ead0a0122f58603eb19f14eec6978c2ddbe1a4f253e3cfad1622
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\03C5414C101F2F03E0251F68E14AC8998D89E1D8
Filesize18KB
MD527b7d11d718875f4866c2c6ae68f584b
SHA11330e3b92845a924b1ffe41ea5289efbf4df07ab
SHA2560a565f2dfd7322f33b43ec68863c4af68e08f4668becb23c3d2fcc728c4198d8
SHA512ead46775d1946823bfc08c349e33aa6cadbfe85b0d8ee747d244e7644c71404bc26d4eb3e79566657deaba7d602ba225df09f063914553dc1018531a6ec904ee
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\067740F68252BECC354D15C656C6286D001C3D12
Filesize98KB
MD59235c6de0379657ffd5dd5d01b1d0980
SHA16c53d8b42658daec1ee3db323fe510a5952f9e3b
SHA256aa32823bae83818e7fe16d066cc912380f6121a7f511f9ff61217f4dbda51f6b
SHA512f41f3b15c485ad4175550143c8c1cd2b3ceaddcb627d8332e59f9cdb71b00d163db5626a56f7bc7567610cbfa65297ecd743930b91e732904970a71590b70bfa
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\07B1309DEF390EBACE90867D2E52A5A5DE90072E
Filesize183KB
MD5e9b0f33112ff721aee938abcc87cd071
SHA1bc8e960b9e249fb93b04701b61f5892feff8b675
SHA25694c04b441c7253ac69f236e91fba5a12a671850d2c660f118ab5391eee3ebb56
SHA51279f704298179eed395be657392b53ed688bb2638d3e3654e526e4d34c2bc1c078b06ba792a3a80dd18a899e5d7dd3710560865186f8c0f01b58e94fab5bc73d5
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\07CEAD446DB7F115A165E2479580FACACBE7C320
Filesize17.6MB
MD5cddba564c21f17f5e46e725b8a259c32
SHA1a06a29230b8b1b2a352b50faa3cbfbb401f9889a
SHA256fbcd70d4683f801ca776e7f30f008bc4207116f03048c06622821ecd223d67b4
SHA5121b584f73ec5d54de35f8439ff2e69c0d49e3c468c43f2ccf588dee25fdc2de967b351a31ed78b8876874aee68d8529cdec0f421e48e270ca9647398e4d0220e8
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\0A14640657965B8513D3F26C8B0E6802EF353192
Filesize72KB
MD529f43945a23b3c4561c77f4f4812e3d9
SHA10287083ed42da3f5534ba7dd57891106a788a4c8
SHA256ec79494fc3ca44bfae8225a95e77daec25ed8cc5a5c55b9abe2f362499c9392d
SHA51233bd1cf415ab527fe427f657a51a9f7eec838b2d41e312d271f32f38c16200176526710867b53a6bd17c6e4a9806d464176973d077ca7c400b8f38ad838d11f1
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\0B6CD5CA4E54040DDC05DAE0A839F91585DF5F7F
Filesize14KB
MD5f4a6d297014c447de84a72828935b391
SHA12b0867da1b5e2d438ccb89f40e44f46f187e4278
SHA2563a088600a25b92b655ec5244af78deb349e7b7586c8bab9b0ced5ae003e40012
SHA51259564dd3caacd0b10ab4b22b187995baaf1e3508f279634117c175c4d6c28ea5d2e0b976a346179341ebd95eb38e6180a3deffc75e2dcbcb994d4775b44aeaf3
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\0CD118557D68EC222F6FD9E6C877957D659E844F
Filesize15KB
MD552bd763abc82230056acb576a9518fc3
SHA1b1f133f61934c45e772ee457df80f6ea480e25f2
SHA2566b70002895250779c0b538ff0a266efae2bcc1544e974d1a58d24597b4e2af6e
SHA512095af53304ed656ca212e0510a50e1aba447f9c28b4c6cd1659b53fc8c0a4911abf73a7aa9c42d341f2c0aa1714e1c50c9bb38888f21d9ba0c252c0ad0cd4dcb
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\0D2FCEF5530165A1D25C0E404458F2BAC00BAA9A
Filesize158KB
MD5a1d85f2e62c178cbeacc428a2cebc77c
SHA14e47882c0b204bb7037cf1a3fa997212a79efa7b
SHA2560b273b4e1474611fb8e5eef528751e28bf69807db116c0f35e01ecbac61e3225
SHA512f75216131f4ece2fefcfeb61d6928a9a38772cd34575e6426b62661e1b654bf4f3560b76e57c3012c146f9277df5f492dcccdcdcdfae5d14dfab742ff356865f
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\0DA8E3CCBEFD3FB45A22D2C49FC763AE23AA30DB
Filesize16KB
MD51791ad23b3f28933259f754621d2c791
SHA14f3466a7196e0437047b10450eca3a75a82d8a6c
SHA2566be1837ad0e6506bc31725c49cd3b088536534f842e2369e316599821de44918
SHA5128c326ff59e0b2a26b2599895a07022b3efa79915d6a41d0eb5a58f870a998a60d270ecd808cc153e9e1202435dcd44cc92709ff9de7fd98127454e4f9578cb6e
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\0FC0D2E39B11CB3765F534386C8F9B92E09CA1E1
Filesize84KB
MD5e0adf4a2ca3781857780ce8dbc7e9587
SHA12e0c0d24dc9383c6fa82b8ad97787d71ce4ced22
SHA256ced28d3ee680f7bdd514a5b006e2178a513b7338dca9873833e3377db4f53f46
SHA51203506493e55acb15f04da52eda5009e55062ae9f09dd3afdc8cdef6897f567ac1a91329b659c19125ac4381e22b72a186cdc01da6743f758c98860730d8440a8
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\1243152E7867EAA24697321508C34F9CEF98EF1A
Filesize111KB
MD5fe3cd6b4ca4b2772a323b3d3d19a540b
SHA19a2d0f9e0f8341d45100eaf0a7701a71a8ae0120
SHA25623bf0f906545e3f1a6ede7a0efc1e665f0c51186d9da665e35fb226b61f0659d
SHA5126d7cf04788e3efd59676a794c0a2b55f1020beab85843ef2bafbeebd407c1f1eb1d688a26a8f18c42105b4ed35a92d81410cd34c2a2ac4cc4df13e42b20f5493
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\14CC450048B26323976C3F9913B909D1CF763966
Filesize20KB
MD5d336928a696bdd869c0fdd69b45f3a0e
SHA1a9dc8606e0fc0c660c28c715df3e8ec7659114ad
SHA2560e293c1d07790dc4f9678c4ef7c7081d4b1d5fe9a15b38ed8b2ee3ace3afdd7b
SHA5129a617b5f4c411e7d87c6bb6cee165f09d1cab2c36a6922a1d909c0f2c4b5f5d07b986e25591102c27202e2e8aeae6f2b97ffdb5adc4476604c4b6109dad8eab4
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\166C7CD42D77DCA59102CACBFA6286C8B1656A3C
Filesize165KB
MD57ed8869c83bfc85823689f2525a5fce3
SHA15ebe9abe9c8771622990c3e59e73aba6b5da2fa1
SHA25604f04b818c63e50a97231442bf8263e38ed4dd1a90c56880341f53442c94d879
SHA51270d0f4df443a1656cea0962cb34023b1b679310dc1030da2daa744f738348bbd531c7f738300b34d666d8b75b6d227f6fcc79ee83ad25bd169def213ed29c594
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\16D3E6A057A124E8E3BC96689FCEB5904949EBB5
Filesize83KB
MD50c28b742422e556a4d977602c6482689
SHA10ca6ea27201fcbe0d3af1506912f5c67db81122a
SHA25602d42647feb00e700ec05a822e52daac1677cb011926e7f22cd8276c5e042c32
SHA512cb729bf4a1fdc5e5e613fa43b98958c6946f06a2b1aa61c2ddd83f3e25b2cfac783ddaec6f748bedcd3b08d3177bb631927c9f7e6240e6015b12c8edbdc2e5b6
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\18CA28E6E62173D42A705044C717CAA487C6ABF1
Filesize599KB
MD524d1c8f2d4f3897419d925d5ca3bf718
SHA1889509db8dc7a873cbf40510dfa60ffbc14930db
SHA25601b02af2a6fc420a6457a2f7adb6a1695e2cb2d55a81cc03c86e97ade49631f8
SHA5124856cfa549ddf860034ba6806761794b274c3743c78a81492c55694cb095bd577170945f3f0ae675aa14e3d71a83e841c964e8d3b4aedbde479d76981b991123
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\2492994A253B970917AF5CDF605580B1C2DC16A0
Filesize63KB
MD5cfb97efcefcccb776e34ca307693ccb1
SHA1bb1ad83ce0caf02d95399f0db3a0a156345695f0
SHA25642adf4eac299ef874260f81db7575ccb3fd680edef94fd43a42fdefdab90279a
SHA5122f558c3c066a577b3bbfc94bb029599a13dd19acf6585408d87b7106426482f0a653afe502ec866f1f1f774a86d92f37b7c103ee160e07b3c2580b67c81505de
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\2F3861875D7D2242E3C91445723C028161E4E9E8
Filesize192KB
MD568cac40bd40febbc585eab3aa179f7ce
SHA1ed8d545bcada0bf661faa606bf3699faf2ac9797
SHA2565152d8a20ba7a158bb6d0780bdcfe7b3fcd077cb797625ec4a6d64931f892ae9
SHA51246b46dc927f161674ca9fe4c1dbfba47fdb9ce0e77f4df10f9ed163a9bdb7ec58c9750930591369ee44eb76ca95cba52dade78bb0a1bd179ad2339f530f0df79
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\30AC9E9C28EC1FE2B05598F46EBAED7EC52CEEF8
Filesize134KB
MD57bf2bc0465e52d27601b9f08a87e3780
SHA153fc6b644f0c26db82f3ed3d95a5303796dee778
SHA256d5242d96bd927777d373472a733bab4fde2b33f9a986e0d8c42f188076e1dbac
SHA512a5db07b1f2ea2763fc4cc6af3ad3289f7bc41766b889f85cfd144ddcd71e1a40efa8839bbb7581c72dc63a098151f951290ce93691954b875ac7cf3ab3301c5b
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\393B1F4FE526C4C8D151B46BA23E5DE86F139A27
Filesize47KB
MD51faa56e67800bec3096a06d51b52a2eb
SHA1556adef03a1cd846f3db5d63c2bfa7d2c76fa545
SHA256ed6d695ec686674d0af3dfccbf6ced95e4b2d0e07e704ed5d1402ac9cc231ff6
SHA512460f7e27dce611a80fa36546e4e51c27c9f4dffeb3c3115979590be1ef7623f854310565f01e260316f50801dbc3ac7bf44b51d7ac7d4f576afefbd63bd482a3
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\3AD23E86A3343C363347EEA965A69627350C7329
Filesize30KB
MD5de3eafbb1b90d237e07e7f4ba3228111
SHA1796ccb5d658119698519bfdc05cafd46eea5a42d
SHA2563a88b4b6014cfb0b6c359fd9d10609c48b7f98ff2aba36516cc6d16bb47dfb4d
SHA51297749d49d4f782bcfb162f9c94670c67f75ffb9777d710199f461089eae9f244ffa20d15ccc2598c05bc3957d145d17311dcdee6805dd59b9ce343877953877a
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\3D584BDB44A0B3D98FC14440ED20A6CE1D060D6D
Filesize96KB
MD59e57a9046c04c9c7dc073bb3aa683bc1
SHA1dc735ab7aacb9f74cf9e75ee0202b2deda6c9d9b
SHA256eee341ba3a836dc810c421cb3ecf218bdc2733ae9c8c744f579aa176936c8ef7
SHA512dd1c5c561ff832aefb26f66033789aac53ecb5e232e6483fd95e42db57a75242084b4bc4671e66bcab0bceb97261e502ee5d07978e95449ec7fcbb21c318e563
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\3DDA16BC6DDABAD758EAAD1BB9028434BF62D323
Filesize75KB
MD5974a2ef6ed9bf12b075657d6ffc61f54
SHA17b83a11151cf3f5ceef884ac887faf0a406a4421
SHA256d9d516f568b345f5cd7fa61e4725ee547399ee435fbf9ce3ce2623ccf6f0cfaf
SHA512f173e4d25ab0030121a8bcfda6e4d559b5c281114549fac1b08b337cef6125790b29aec0167aaf121ea8c095320247112e9521a6c2eeea277328bf483fea9e9b
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\45C13727B6DB444F70F2FAA20129C63BE433735D
Filesize62KB
MD5da2cebc3ef36f44da47597e43706e4fc
SHA169d1055af2f118a4027edbab06cb4dc805fa0191
SHA256d27391ff26ee9344e5360f5a936a0635033fefddec8e06e446cc449f571815b4
SHA512776bb40b95848f565dd4399654f276be08f87197d014be7ced242884403c387546be10cd633add8589afa660bc3084a2568eb044804bb708d83efc4e82d6c915
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\4BCF7D608B2663D7D1515223C0F13E5D72484770
Filesize14KB
MD547a426cd7428d866af7f5c8888ade6a1
SHA1c8c82af5ee1c117ff46a4fb50c063675d39cd373
SHA256923d3d4ee551e1c21e1f23170d424400cef268b374e9a20aa67faaad5fde80e5
SHA5124e606d4a841cd3b7f34002016ea90ddf1b7af88c3fb999864b4f4a923e1a6ddc814994431a17c32d8a772a144fab2d51f1d6d2548b5f6f59c1d7c1be6ee36dc9
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\4E1FA8895859AE255C87F68D64DE589F84DC3626
Filesize244KB
MD530c74b419580516d9b39fb7cf7d01dfe
SHA1572886f694d7fd19cee0b0588064e289d1927832
SHA256ad458234dbf41b14e7ee82d1d14765a425a2249b13bebf445e2f0512be9cd332
SHA51286b44e9ee4e5374575c81fedced1228a68409d30ebeab4ef12d4146163ddca3709f140753e3265595f74eb2f61ef477ad024112d6bf67cfa762ef4199383e024
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\569310489AA355180F229B54E68092E3E2C0B048
Filesize104KB
MD58b1de9e7a6a5bd1ac738e2900ff29b5a
SHA10e74390b2d5379d8d139a603229ede2d332083d5
SHA256819957f1607a5ac6eead68a85484c26de3191c49f613c3610ba30d7a63813107
SHA512e7fff01856e415a0f615dc2fdff5f81dc24b24eeda8011fb0dfdcb150bd4216ef3b3bb7a436cc15cfcbfad68eda82f3cc73123c79929e91bfc2951b8656e2e00
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\594A37D74B576C00BDD5DE5CEE5353E7EAD1DCC1
Filesize102KB
MD5756f9eabea06088732c52d9687f8cbd5
SHA1b128e30375a11576c4837abb7e9e6b0c0d498f37
SHA256296a70f725e1946bcf2a171ff2496cd0880c9bf16162ce6a18d5406a903424de
SHA512447d836d35743c6a00d2a875b264bcf5e2793cb848117cd9db54a3d6de08df60d1a78ac0cd31940b691da8d922cf35ea66b8351d3b873b15e0c25f11493efd66
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\5BB66A8F6778DEB9D595D468945EFF9C7D66B934
Filesize13KB
MD597353acff6ff8f00634cc8ce19c71f85
SHA137745f883afe8bedb1ce811fc12779f28de08c44
SHA2566fe5f659a7af2fbd64c9f109b15ac24b7d26913239cc43b94a7a457c472504c5
SHA5128f3a428e8702f1d053b159c4a55e97de90bb5fdb1ed7c5a612db4ecc8c00d618c3825af283ec0c2ce7d3eb5d979bfcf22d2bdb4ed8146b69a00a7665ea9f586f
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\618D9AB1809CC9B5842D1F113F88DFAE9C6C3098
Filesize101KB
MD522a15de79d12ee1a6006c80da1799c22
SHA1c12e89a51b0f3c13edeb954124cf62de595d9007
SHA25638120e96f735394df9edc8dd8f6223c1b21ed3dda93a60864465c09fd870a75e
SHA512822347d10105a49f8bbed0ea99cc3373ccfb4bb20e82535006cf454a22c2bc7dbd2cf12e4da6ec6abc34151710b29b9e73f14d58cfd5a420cf2c7398cc3bf9fb
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\6B4DB52338644A6A772A175E61E5FE1628EBC513
Filesize76KB
MD5b1cbafcd9c63d723077dde56bc4bdfec
SHA18f6a5f66f33dde1d1ddba9abf30838ff5574e9d3
SHA25640bff6fdb1648eefcfc0a277d6017f7a300af880115e196492e3b4057440eea7
SHA512f8a1985317724bb3af67eb0e19d726cc2fb99a2681f5779c48fcddd84ae83f32ef53d8c3b5ffe39e93f01e258c5ff8b13347cfca599c68e3bc43891d37b60b88
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\6CA49CF400300157554A25EB3C1AC6A292A66B3C
Filesize173KB
MD533a3782ae50d1cb5891b59060c134e24
SHA185b53485ae47d5aa2bee407343e8c706550f2a0b
SHA256b6f5a07900e3289683a5e1522b5efd24ff87b9cdfa66c5bec8d09960e8283f7f
SHA512f773ebaf9f0534b34a09764d3be73714a5d891131f49d1c993a3801ace17923b20ae517cf029b1b8ae1556fea982511741e24281b29a751493e8b8f9c8b3aaff
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\6CEE2727CF2F7831FFE7912B9B073F4BA25A9DE5
Filesize65KB
MD52ad091cda1fb38b9eb607be1ee3ae6aa
SHA1457c490cb832b2e770d6d7487a28fa66c3524414
SHA2560ab6346b3782bfada698a6ed1a7762644f041824135a9bd81b8da1f908bc069c
SHA512b1e9c81f09c40c6b2620a927a19777f6d1e53e7c14134ffc4310bda8f7c3c3cd1160133a0de7bcf04b1b01526f61cf86cca16e811cefd62934628a8a038503b9
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\6DC564E164FD75A340F0A4D4FBC10EC8C9D97EF2
Filesize336KB
MD5f3e646e6bb39287c3cf207dc1cceb984
SHA1c78da0e1f95e5f2082d44bf8283f641185642668
SHA2562b48a2e47f60699bac5ce18c7f157a74e08d25e4529b6d1f297901d2bb2899b1
SHA512106724b723b1c82da4240de147765912c4868d5bfb33876c1ccdfa1ec3bea9246616c3f6094f05de85b0dc34ee37f5ddff4ffe56466a381d8e20cc959045e785
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\705EEC7711E1081A5A4278AA905A36700F726042
Filesize217KB
MD5cb4b7e7d72408dda47cc93ac98f8b3af
SHA1e137802ff5ecffbfbb7c4b4308a5cc8a247de835
SHA2562010a27f85d4fe42a808db75fdfa894a1d74f688f581fde7aa73e0b444142cbc
SHA512b430ac6d3111dbb550e0f811a5ff3b7dae0fd06313e9eed72d27b13a779223a703272f6e15d010461838907348fe76f58f017cbd2ec6e752f8c6dc6a8f2ccf85
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\742570624180D4F1FE9BA504E9572FC06F5732DA
Filesize171KB
MD56fe5fd6f1d94d165b483449474627717
SHA1be63bde0092e1781bd2ee6ad34c963e400ff92e6
SHA256e115a057642ed9bea154b4d5be74f13abfebdc32074901babde6fb4864a7ef49
SHA51242f4df1d143110e84f97d8adc470b6e6d919964b16b6f0134392eb9da6737065d7d06b31c90cb584f3baeba8452385f454e6703475cfe68779a6fa0e38ce66af
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\78F46BFEACF3898E8940DFE6C8421DE8908450EE
Filesize75KB
MD5936fb7e50d1cff18eb105a2a540ca722
SHA14182c321198e46d3b2401d7ea0898b6b689e8118
SHA256859cf0156fa0870576478bb25f3ff7896ec8bb72c9abc423d296749a6f86e978
SHA51235e9544e509b1bd12d1f685eb970c45bc5b62ce7391cac512a032629f9ab13e57145f9b48d81e14288b1c2b3d92b92d23782eb29408fabbbab7bdda0eae22c17
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\79AA3703A952AF8FF4E8A6BB1DA7C486DDD36E48
Filesize161KB
MD525e5668d5bb67f3ac941f3c58f9edd4c
SHA11814d84ba8ea1eb3a2085f49cd9c01ab21b82f4d
SHA256558551f515864b1c6b08843ea41776fad987141e460eb80b6b1b10a7b10380e0
SHA5127a1b58780c75bcf57065386dbea9f9a7d1d531d737728e55723ea61dcd7ebfe589378a5f72d121913e1665670dea6385e18951b44589de84488ade72c8fa5fc8
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\7FD2E447348A399199F0E593753118D660C52C19
Filesize15KB
MD58def98079aae2d757a642c0b2e2b688d
SHA16b1222406918c9051f1d36e9b68af53b0c474ebd
SHA2560dfb0f718d6d2cd9845499c98974544636463c1139aea57476e258b0099935cb
SHA5122b8ed4de03f6d92f1893de96d5da6a11ee5135358c7d64d1e8548350244b5ccf638714b7f13acd067a8ecca9e6f9c835172e37ad52b593b9d87ce298286d867e
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\80285EC16EDB2FCB53FE4D6500B0396AC776DCD0
Filesize1.1MB
MD59b8cb3de1f8caf5ae9f3e53d0cd387de
SHA136427140426b9b2beac95ed2814c2a4d7fe97d6d
SHA256003a550480e1dc140ec08a0849b244c00f30f8a04fcb06f28cdcd7f0cf695a10
SHA51233a5844b3c6ad5bbe5497d9e1710cb5168a7ea99557cdaea5f80ecd4b9b3833d743c22920f04708d9a62f3bb556b8b18c2eedce1f8c5b9fbce394884e05f23fd
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\835A4839D6A39CAA733ED874F649B48AFF73BA56
Filesize412KB
MD595857854564e59ca086f420efa16db39
SHA1d92a60a82e5ad15786baddbffb812be5ad63c70c
SHA256488cdcee00cc49442e519c5110f161f77065dff1418f05e01989df331972200b
SHA5122f3ac129ee4b8d3ba6841dce877fff6ec2bcd4fc53bdb93c298ea4ed55fac80139e919690c6310714ce92d88ff1d896c1eb2e57554aea6e98c0475dac7101efe
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\8B2EF5E7C200034B9D66055C0C2B57587E121BA6
Filesize144KB
MD54719dae9bd68e2fa821141b833078543
SHA1388809a5a06f90873e755c7d6338d1b60c1072e0
SHA256876a74cc1bad5108b7986c8095fbc57b19a293b4e040015d37f5aeaf10d68ebf
SHA512ea88a25f54acce91270f96402e810a6d54d84419b0ba0d9dd22f0bcd56c222fc28de2b6bc2920feede553361fb3620703564d31eab31146c434556702cb1773e
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\93A3F61C53110DFB2A449EAE79580128ABAB08D7
Filesize137KB
MD59118476a12426367ed995f882ef2f780
SHA1278daac33d5ef9ee472e43b6144611a64c491aa3
SHA2567d2479eba5750928b403d57a88ec52231e200e7b6a727b0765e587c1d8cda16f
SHA51271ee9357b1d0d80647960c3c24d26097d33f0bf1d89f1a98e82ebf8bdd9d555c8cde1c73b01a611c1c832ef9a18a1e76c2da41ee58f4a81c4a421a0de5c69f57
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\98D70A04175F12872A9CDC60C5E95AF55040F134
Filesize89KB
MD509115f7f738d474b1bbad139a1e20115
SHA16fa07a65ef186992a3d51d9ecb82787b9df4f69f
SHA256edbf440fa2c157cb9e2cc588a9e9c80942bd8b0831b9bcb589b37f57817dbe80
SHA512c41387cc1b2aa22ceb3dc85744b6db9a638659629ff2830c9fe3967a3a4ad225fabbd24896b7b322d42d0a699b23348889935d2724b2cfa5724ce14f2c5c58f7
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\9A163BD740F6979C863FCC91748292FC05AE55AA
Filesize87KB
MD54abab5b9ad22d269f3fb202e044ff4e0
SHA164477f5ef566b47881ec0cd7d9be58b7418aace8
SHA2567d610652133324708b5a55483d5c3aa59deca0fb447e69f43803d2ecd041eb21
SHA512cc9c72d3dabdc759d9b4650bdf28c58caa14e12a5cec9212d62ae7c0ec2f938a93df49811367554f72318a5c2b54ce29fd474de2100cd50d73a0a2d447423447
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\9A4AA513BF56A7AB641F6E9EB6E3B4567F7DEF5D
Filesize122KB
MD582d3cdc1c11c828ef78343b1e2b1cfa1
SHA10fd59b1cb765632892b3143578dbab49292f82fb
SHA256f9a9c4eeb4561ca4494b876585c21caebbcab3bf58ff810b2602d097424ea082
SHA51226131f0aeea3f3e540fb7a75473b9c5f374b1ca75affe98f5e1f92b860a8683b61d451edddc03b9cb6f8111f9ed81694828919b1dccc2eab188829753ec43f6d
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\9D8812F6A558D1927D5A858D18A6FEBD8A1B6869
Filesize81KB
MD549261504df4d8e5dbecd99e8a02460a3
SHA18ea26e3c791546f860972a4f96c878d9129c1602
SHA256b47bf10f677b7c995818c12f017d83f8f6913c869caa680e3d31d631751d7ab6
SHA512dbcd4f42da7c08ee1be4e6c6ff6917c4f28182590740c040d13b88dbc1813af8127608f1c0ff695cf300281c689f12c2a668d1f061f962458dbf467a18c2622b
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\ADB77CF89BB7C3EACBA0400910D8956D4F8A5D23
Filesize2.0MB
MD521595f4d9419aacab8fa0cc8ad6e88ae
SHA1458c4ad5bd56f0a96ca055a1d50694123953df64
SHA256f73525c6b33ac37716972232c51708bb80a8c7a4840dee321ec31c56c9b33da6
SHA5120e3e06e76639fe3e6e629a18c560b66e4f344c34558bef3c98c01ba39604803c71a40de2f2b1af014e8695f953c4d7f188a0c69f086f18b3708d403b84b1e75b
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\AF6E7B7DB9908D7B867517AC33D094ABD56E38F7
Filesize14KB
MD5e69b943844f29125f71d904ce3f42727
SHA1064b8c3566e9dd4edada119150287f1caee441b9
SHA2562982c5f61829e9089fa4eccad654af02df054265378305d3676888d8e144391b
SHA5124fcb42a97086b174b9a32d474c44fdd1d564e0bf4c375ceca347bc41e93a37867a8b2734b337caf8f5f7fef3fcf54d72259785b8ccb05763bc27ce364727c36d
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\B5F57F18B38F075423434044438291B3FD84AA31
Filesize110KB
MD5bc5ee99a423f6952c3db9c79da2dd846
SHA1ecc3f605ed43fabc3e8ffc082f808c4b36514c29
SHA256de0ba8e4157fa2058c27017c704f23b756eb34fd880754707c557ebb52b90713
SHA5129b8e346f603eabc5db93515d99439c6cf1fc1b07a232cbe4c7dbaf52bce2a121fd78b051cddf713e7aca3ba81315da5da18ba8585561ab2e4f2f6bd2eba2d186
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\B6112E34CEA1F7F53B6C52D3C5799C6C2B45B8BF
Filesize19KB
MD592fecb5d9e774e219128d5f4eeadaec1
SHA165fd9075baee307cd22693b7fc308a27eec4c336
SHA256fbcea6f8ba55bfccb939a4f28d02eba619d703d400bfc7e896cfa35c5069896e
SHA512c4b312d1e7bb1ad0c2f3f61c25de298be9514ddfed37dfe92e7ead295107b6dc682d7b8f4a6d7b7d2c0266b7b830b5a8988306e7b84101563e0cb27eda91720e
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\BAAC7403EC992CCDB291ED02096648475B95F796
Filesize47KB
MD560f029b4bdcb71a1e4f6cf422cfd5f7b
SHA1aa231f9794743c5caac284531a76c665bdd0b2e5
SHA2565226486c7563e4e90867ab2697eb77e58a2ecb75ee1e48f8ddc583324685aad4
SHA512fc174957b0ebccda8403550088600d6873c6998aa26efff6ce4030c0596c55f721de0e9042d9ad575ab1a312c513703d94e4879a2de13a13906908154f243b9d
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\BB5FB70C74C290CCB9F25BF1EAEDFF4CAF215688
Filesize97KB
MD5ac6486496ee22fdc6865cc6726857566
SHA1f401a86c84f12080cbc1c8e1be7292671677bce1
SHA256fcdbc74ef76061d0ef858cbf2297afdf4b7283c836f13c053625790da0d3fcdc
SHA512fcb2d7fe7ac70928d3f7b098ce5866a13ade845fcf793e9baf618e44dafe4dc97795d7fa052429f17d25ff36757616f834c4b313a8ca05e7ca3cf52475c15ca7
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\BBD71EB7C6FFDB728EA9C264F063F7938A56C418
Filesize15KB
MD589e9f564ce6ad0040ac5b977d90b44e6
SHA1c11c3a10ba8923e8251e69e4755e8b30dc585a79
SHA25678c30407b3962d869845119602bf5ec6206195103d62d61fff9224ebeec07b78
SHA512c2655cac84300d09035933aa328d6f464586a38eee6d0fae5298c0267f25278cf5280da6fdab9d3365e3047f7a7767f6128f0a261398304f3677494299a48e64
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\BD518506D48E5D9A2A1A812001B343D87149620C
Filesize314KB
MD571c1e3f711e8e777f82a48e37afadd4c
SHA120fea651e2639ddd4b336311e1975b83bf91c003
SHA256b42dd8a3c4a6f543a538323903c218b142d4663044e0a26749b4dd6a45846899
SHA512c9799e306044bb42cab57214c0d8e8c1de66784b4b7a8e37dd0a670e96fe9a0c1b975b1b2694ee9998cd715f9d0694f5fbcf76230515a867456ca5e780c58192
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\BF0923D6C9AC3F4148AB74C98E937ACD57DCEAD3
Filesize16KB
MD59f159c75260b633321be263924d6f3a4
SHA1dacde954d452a779995e4c67affcfbd50434dd95
SHA2562c3a44f0c7faa0142ec525fd7b1e32fe52ab5ab7e7035ae2c438076269161954
SHA512c4b3569d75a65ff4229f26c82c04226aa8c5ffd27891e1af19f41ba9a8f5902f982f47297ad4f554a922afdf8a4495686d712015b9fcc6e5af52b62bc6821c3c
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\BFEF5B7F3B00F0A81ED1F7E43EA7F8DE07A9D010
Filesize102KB
MD58b6097b0158af619e0dba4c9ff58c81f
SHA1f4bf6a0102a441acd41b237130699ffb681ee5db
SHA25606b9b0e92cd0b6859d86d653110cb605878f96094e43bc5e9f0a4745a003a64f
SHA512a75b67746093e2c58f42b720f4c9e087240283a57ae9e97ce26513ab7cd2dc486f9ba0b20ac9276e5923e24d6775faefc8b4df59a385ccd7163ac78c3b817d1d
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\C7DEA2A9A19F7731BAA5D3F9210E74AB08047E3C
Filesize102KB
MD55df47cab65bb1312a252b5b9147b9b5f
SHA1ff2ea79e0c8802e5d17e9fd1f081bbc57d98fd0b
SHA2569884c82da7aa21b6693ce1bcf32af084f5dfb6a601c9d0ae51c1fd3644ce3543
SHA512f4d9cd57e66db9202c3ce916caa2b6e88251f48fd7ccfe165f05fffa99e7eeefe2c4675299838a6f83ae386712580434848749dbef7717c6eaa3d7d53bcc4dc8
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\C7F3BDB645B2CB752401A31681C973E76B91554F
Filesize130KB
MD526fd9a5cfa0a9fd399363c724eeada74
SHA19a4fd5988b6f87cb4918703d7e1b5a88bba4ec51
SHA2565fee0c33df574a96018b80f6ac1c0061192c92b744549d493e3f49e0b5f45c0e
SHA512a989cc76b071ccb1ba87e1347614e8f2e2b062c6787feb62e2983190076e9118bb8d03d6b6c0dddeaac8e47c28decdb7356382b58c9bcb93e0fb0eef2be78d32
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\C88FE6FE8ED0018995E76FB6B4CAEB37655B5835
Filesize147KB
MD51a4770da356c202d5bed5f7d3c4d810c
SHA16a4599c8917016b3c450888e6369db2516c72728
SHA2563946aca2913de53ed63ad26b0228d8bced364086f9fb2e6e0a15874ed0059342
SHA512ae3dffc7d7d8c9e4be201537e014d0c892e9cd2a3a6fee10f6b3447e154f8d29d50c771658bc07f39e390a2327c76d84f5be76704e7ee760b03eb3d6bdfce1b3
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\D105AB5F954C0907C9073BF810F90A3C36C6D3E5
Filesize1.3MB
MD597f5ac0988ea390f16dbc3764fff3aba
SHA14ae76f2f7a27ec9a199f8cc13eb4b21f11c18643
SHA256e1935e9c08f3e67da02dbfc18c3af75a24f3c686bd913f2b47ca4910404e2d88
SHA512e87bcbd0633b52b701229af85355cd9ffa76d323d507d898f6838eeaacad98f3cbd5f77f435864aa3dda1a66f499e15c300c713a1ad8234237f67532ece06c5c
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\D207CA89781848E7ECA4C658F22D4AEF1B168DD3
Filesize361KB
MD53fa75b6beea26072cd9eec809b6254fd
SHA1ee69850b1493c2daa7a7bae45acfe05149b7b532
SHA2565b85ad7f84203a665b8e05e13cd628860bcd33763d08ed960505fa400cb7e5ee
SHA512059f3864682c2d36adf200c76683f1b17a0d1d70eefa464a4c7eb63ccf34100075703cee0125a90d50f1e33715174780cf71daadf68f816604b4f8f487197d4f
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\D2764A516583A378D0BA2325F933EF3C538EF129
Filesize88KB
MD583f45eafec5a7c8ad226c62c5b0a6e17
SHA17992dd9621b2be73d526bbdbf297f44ff648f7c8
SHA256c73c00c4d3abc1e2db2c2f359c4b1bb9bcccad2c33beacce6743da876676af7f
SHA512452083f1c66aa43e3d0ca8a8bb7839ceb6d895e21f26c45429d4652eb4f0dafc5a66a9ee4d76568b2094e6c0eb0826fc765c1ee6b91f029e70a1ceee439a3da5
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\E44D8EA2BB95FA202605B58E615B3400B72A14D2
Filesize13KB
MD59279c07fc474c4c664d55d28e21ca64a
SHA1d83247d6f7b1c835776061eb5087b00be6fa31f5
SHA256ac145d11c5a893a5bbf66aef293e6e675a46f4848babe5052129ecf0e123a2f6
SHA5124db83a819f7b432b66b12dbebb21efe7051e99cae5b74d36521416e38fffbb1b7488c175d572412bc1ee1e9ff51f10de88001de708c60e660697af559fb180cf
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\E46AC26CE1CFDEAC46577B910A1E38F95ABD3ADF
Filesize85KB
MD57a4fed45ae46d485bc5d7c561287285a
SHA1128d8391b576ad47caae893866965bd2d783e3c6
SHA256bd502b83ed6645b05523822685c4010131522848e19aeb96ddbc88f0c2d40d2a
SHA512fba6b049f98df83d04ee0a3556e974e66c8a24012909146f342907e01e734fc039e405233108bc4365ef221c196d88cc13a1b557f24444c97887ffdc609bc025
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\E6C22A3DFCD18E3C6145370266896FF76AE3F7EC
Filesize14KB
MD504dd4381a5828b9f089e8d9337b304ae
SHA1d6509ff0768f8e836244611f9769efd9de9c1827
SHA256cda2713cef95c6f5f1b64520a46448361843d201aef51cd9716bcaa603d0a6ff
SHA512c1b57e09f44194d4c8456c110e2995a191e4dfa9db40b3808158f85b6755605df68fe49e49ff0c7ac19060d856ad47da51671e9a87865a316411aed582000c02
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\EB7DD385477F8D3CCDE2B439033C907AA695EA66
Filesize418KB
MD5d3d0e5ad49f27fa97123bb928904e7bf
SHA1349d90ca24ab3da39346b2bd3f6533c5bbb84aaa
SHA2568017286d8ccc5518a38019a508389afb9858449b0c25878275254e191437127d
SHA5128cd529449ca5e403ee303a845c68ef00b6983840717ec211bde309fa662b5dd02af3a0150bc7c928fe2811120fc54c875122609611c749128dd092da00179709
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\ECE281212C7D34C2D33214DAB8505B450499A76C
Filesize13KB
MD5c69e49dbf3d1c04dc4a792778505089f
SHA1a7bdd9848764732a6e913a188a31d6622cbb0a61
SHA2569ae3f34485acf7ce6a3c712bf6b56d8f0faff6b7db5e5964f5431a5f1818a6fc
SHA512a95a9ffe5401b9618cb175c31b41d0533014b0732ba2f37ffc11b42a0597dbf816feae6624add646266bd9e805a3fef0511e0a817b4af55ade293845364658e8
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\ED89A8EA2C7978EEE027335C1D7BACAF53D6AE06
Filesize1.0MB
MD5307ee815da04f0901d4d89c7374bdeb6
SHA1740e8e3d4f41565ff2e28d78a85243898be3decb
SHA256d40ac62bbedc3e698e87429060ea7b6b8c999988fd356ba0964c797cec1e59d8
SHA5126a778d5c305b626cc3975374bcaa2498f075325daf094893865f72f20c3a36c0b634cd911a795d740c3698a7b86aef3f8432c55ef61f355def83a81d79bdf3fe
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\F042D0F0CB1D03F626670DE9F0BE80F1C09C7CB5
Filesize16KB
MD551af412154c90c905e53fdfa81d51de7
SHA104e6d6ce0725406a56fee67535fae2bbaec9fdd5
SHA256758675e5a9d1d1e8145a2b69611248f1bed88a3068015fce4af03ecd116f3b35
SHA512307b4d47f1b416d146ab421b4680787d65ed70c3a893709ef1eae174eb602b8aeb935ca1d74bff9ecf3b22dac96da38e3eb358dcc5002aa9bbfa5cf791cf7cba
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\F54E7030F181831909BFCE5EACACBD3D867BDC0E
Filesize141KB
MD51ddf5366be61aebf2200d95e6c369213
SHA1b68f5f50c152e5d5f346976fcfefe9b9830c8ab2
SHA2566237829c6915f314392014facf5fe7a5fd67bbbd4e30183905502121ced48517
SHA512dcab0f7a80d322c00ddb4e80ae1684e599be9794f7bd5d6a8e0b3823b400c37a12d1435b186da511712e4ac8881fdede5d1c62e5b3ee4ce2a0ef7efbfa1d67be
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\F5A1FBDEF4E6F115791D6C8EF1598942067B8080
Filesize14KB
MD5bc491d7972488693381f4040b46dda2e
SHA11b08754a42c0c1233dcdd9d296afd30acd4906f9
SHA256a3cc3faf50fc657fdff4bba113beea5a6786d9a9fd42bd047ade33a254a2df0a
SHA5128dd4953bf5846af2a6459fde4797974855ddc9b6702c06d642998b563a233a3dd2ba4fd65f6a5c5e7180ad53b46e6ce86f07b6471fba9e6604fe57b90912c1c4
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\F8E551FE6EF3E6467F170041C4FF2EFDFD32BFF4
Filesize139KB
MD534b7e2a59b50dc251916f0973e2002c2
SHA16ea3deed5d788d9b69a20da8449fff7eb496be10
SHA256f39b61e0a3e8b910bee20c5b9edd8ac285c95b45a97103c3769de54c0ee0ddb3
SHA5126e8017aff77f22d74d4ea5f1a08bfdfcef4a81c50a8d41c8e735455d737c2f4b7b8cab7ece6f463eb76c95216a243a39e82306794136704cb387fa7519d5a77b
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\F8FD20B3FEDC40556B36AD9EF0C3340C3B574766
Filesize138KB
MD5d1fd9e0d2b4a579f9d97feb01ed34e2a
SHA1eb686902b7a6d77e800dfee293e36766216b682f
SHA2567779b3961dc6501c8429060196cc280896a86057824dca4525fd9417af6aabf6
SHA512aeb21493ab1172af541ad42011fefb75576396a7f7a92c6eca6caa4cbe917400c2ea9864bdf5b462f71b2bd39b7ed774c9f8907975c67af30e024135fffafe93
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\F9E08E893200B96E510F048C397A0CAA5DCCB312
Filesize122KB
MD5a6ebe1ebe67fae128ab5614c67d94857
SHA10e32f32483e0fea3cdfb5479ed27c834167e66a5
SHA2560d32c7073f69e512c6853422759fb26cb69f00cedf44d3920092bf3632a4f3ef
SHA512784d8e575b8a704f82f363b6cbeec05cd5cfc41c6bc513f70b09f6cdc436806b0c652b3015c100d2c23c253a04cda5e66baed85a0737c9a1c9524f242cbabb52
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\FBE15710F23A8E7EF7FD3D6A4385AFF0D22B7450
Filesize91KB
MD5a6b886feb588ff0743daa4db0ac12784
SHA1471131aa1765cbdbdb97fc687c88b7048640060d
SHA256934f93663d9ec90537abd0a44318b168d38201b76a3aea0e869aaf808d7d4bf4
SHA512cd03d2eabbf95e63328f4c6f6249981d3fe5358f913a33dd268efe46f66d295071d439d060ecb4c4608c4397d446485625973d3fba2b0b2f5f008faa25791b4f
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\jumpListCache\Pu0RoiPWpidWCc_T5i3n5A==.ico
Filesize25KB
MD56b120367fa9e50d6f91f30601ee58bb3
SHA19a32726e2496f78ef54f91954836b31b9a0faa50
SHA25692c62d192e956e966fd01a0c1f721d241b9b6f256b308a2be06187a7b925f9e0
SHA512c8d55a2c10a2ef484dedded911b8f3c2f5ecb996be6f6f425c5bd4b4f53eb620a2baccd48bac1915a81da9a792971d95ff36c3f216075d93e5fd7a462ecd784f
-
Filesize
8KB
MD5f22599af9343cac74a6c5412104d748c
SHA1e2ac4c57fa38f9d99f3d38c2f6582b4334331df5
SHA25636537e56d60910ab6aa548e64ca4adafdcabde9d60739013993e12ba061dfd65
SHA5125c8afc025e1d8342d93b7842dc7ef22eca61085857a80a08ba9b3f156ee3b814606bb32bc244bd525a7913e7915bdf3a86771d39577f4a1176ade04dc381c6d4
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\LJ0KVT43\MicrosoftEdgeSetup[1].exe
Filesize1.4MB
MD5e29fb25de8a2bce61b80ea697fc58046
SHA1d7d4f0d09447cd6d9757a136fd9dc579832ddbda
SHA256add59705195dc4f59e03ba54c1b9d39af4815e9f9f0261bd0095356fa81c0e7f
SHA512f90592f5b8ae2ca7c000064665b37148f3fdfaed0059e0d27479b89de5de285ccc58002a4ce70a4ef6717d55fd294de878c6f7babeb3269efe9ab156292917cb
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\Cache\E988WVBY\favicon[1].ico
Filesize758B
MD584cc977d0eb148166481b01d8418e375
SHA100e2461bcd67d7ba511db230415000aefbd30d2d
SHA256bbf8da37d92138cc08ffeec8e3379c334988d5ae99f4415579999bfbbb57a66c
SHA512f47a507077f9173fb07ec200c2677ba5f783d645be100f12efe71f701a74272a98e853c4fab63740d685853935d545730992d0004c9d2fe8e1965445cab509c3
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\Cache\FTWLAAPN\favicon[1].png
Filesize7KB
MD59e3fe8db4c9f34d785a3064c7123a480
SHA10f77f9aa982c19665c642fa9b56b9b20c44983b6
SHA2564d755ac02a070a1b4bb1b6f1c88ab493440109a8ac1e314aaced92f94cdc98e9
SHA51220d8b416bd34f3d80a77305c6fcd597e9c2d92ab1db3f46ec5ac84f5cc6fb55dfcdccd03ffdc5d5de146d0add6d19064662ac3c83a852f3be8b8f650998828d1
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\Cache\Z67AFBYO\suggestions[1].en-US
Filesize17KB
MD55a34cb996293fde2cb7a4ac89587393a
SHA13c96c993500690d1a77873cd62bc639b3a10653f
SHA256c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad
SHA512e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\TempState\Downloads\MicrosoftEdgeSetup.exe.8wr61oq.partial
Filesize1.6MB
MD5eafddc990b5572ea18f4b853e7bf2795
SHA1a55c000c2277a16238425951d81b8859bec25f10
SHA256d1007b1720418b703df8cf104012518f3d615a02aedeb5a77d1239bc99b1ed54
SHA512ed0c4ede114aeee51f95eea292a7049e1fece6741c819393ecdbad008e9aeceb9b86d447b21e3a1ea20603011640412bc5e91d0a2798a6081e6de2e088cd3908
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{f9239a44-9c4f-45f9-b520-0e38464e9918}\0.1.filtertrie.intermediate.txt.fun
Filesize16B
MD51fd532d45d20d5c86da0196e1af3f59a
SHA134adcab9d06e04ea6771fa6c9612b445fe261fab
SHA256dae6420ea1d7dbe55ab9d32b04270a2b7092a9b6645ed4e87ad2c2da5fdd6bae
SHA512f778cd0256eda2c1d8724a46f82e18ab760221181f75649e49dd32e9a2558bec0e9c52c5306ad17b18ab60395d83c438742103fe9adddf808e40c3d8384ea0b0
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{f9239a44-9c4f-45f9-b520-0e38464e9918}\0.2.filtertrie.intermediate.txt.fun
Filesize16B
MD5f405f596786198c6260d9c5c2b057999
SHA1f8f3345eb5abc30606964a460d8eef43d3304076
SHA25658e3090edb9316d9141065ac654a08169f2833091e6eb3a53b5a774a61b7e30a
SHA512a0b3573dae218ade265709a6fdee5f7700c9754eb10747de5af34af340ae95909d0a8902159a735e82eb5d7091f50a7997113661a7ec3fcc2b408fb6c78a4c39
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\LJ0KVT43\MicrosoftEdgeSetup[1].exe
Filesize32KB
MD543f7fa481058fff21c28086ab12f9730
SHA1879891fe75edf26688252cf5c7b2bd3614d3567a
SHA25625c331913a33b26136450022a23f19dd51163d6f102651f226c5c79b68a30c38
SHA5128b3c19150a9d1c1664ae266cdd0de0ad80d7972378e9528308cbe2c8c94c2a95711bda7b6cc3716de3b71d690a335218300f0f3c9b3b4613917c19bc60a55a2e
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\LJ0KVT43\MicrosoftEdgeSetup[1].exe
Filesize128KB
MD599117e3957cfc7c4dfa05925a5d3c643
SHA146d7d0dbb5a783a88849c7b27911e2c8e637af30
SHA2568a1b16fc26711a3596930d84dbadf4575cb8c4d301e63cef9992789ad3524f75
SHA51291d589634d708591d6fa0314d122e2af004281914dd5ca67e6b67f1e1a72cee619322f4fa0a0d84815ce2d84f4d70c0eff9d8676f0bb4689c2d3cdc71ef283b4
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\LJ0KVT43\MicrosoftEdgeSetup[1].exe
Filesize112KB
MD5e6720c1b2878b78e0cb93e85abac7599
SHA1e976c4ff69d878e0faf7a80022da0d6effe78d10
SHA256f3e253407980d346db3c7a6c7b419ef442841b09ba581bb5cf111c48d4f6dfd6
SHA51284a563379a1470dfbd34f065c926ec5b44480c9adcaf6f5ff9155871a68d3532f3cc4046a65f31501ccc75ecb2656a03d2af160a1ac15b98a00c8571fdd82592
-
Filesize
3.3MB
MD5efe76bf09daba2c594d2bc173d9b5cf0
SHA1ba5de52939cb809eae10fdbb7fac47095a9599a7
SHA256707a9f323556179571bc832e34fa592066b1d5f2cac4a7426fe163597e3e618a
SHA5124a1df71925cf2eb49c38f07c6a95bea17752b025f0114c6fd81bc0841c1d1f2965b5dda1469e454b9e8207c2e0dfd3df0959e57166620ccff86eeeb5cf855029
-
Filesize
442KB
MD585430baed3398695717b0263807cf97c
SHA1fffbee923cea216f50fce5d54219a188a5100f41
SHA256a9f4281f82b3579581c389e8583dc9f477c7fd0e20c9dfc91a2e611e21e3407e
SHA51206511f1f6c6d44d076b3c593528c26a602348d9c41689dbf5ff716b671c3ca5756b12cb2e5869f836dedce27b1a5cfe79b93c707fd01f8e84b620923bb61b5f1
-
Filesize
8.0MB
MD5a01c5ecd6108350ae23d2cddf0e77c17
SHA1c6ac28a2cd979f1f9a75d56271821d5ff665e2b6
SHA256345d44e3aa3e1967d186a43d732c8051235c43458169a5d7d371780a6475ee42
SHA512b046dd1b26ec0b810ee441b7ad4dc135e3f1521a817b9f3db60a32976352e8f7e53920e1a77fc5b4130aac260d79deef7e823267b4414e9cc774d8bffca56a72
-
Filesize
16B
MD58ebcc5ca5ac09a09376801ecdd6f3792
SHA181187142b138e0245d5d0bc511f7c46c30df3e14
SHA256619e246fc0ac11320ff9e322a979948d949494b0c18217f4d794e1b398818880
SHA512cec50bfc6ad2f57f16da99459f40f2d424c6d5691685fa1053284f46c8c8c8a975d7bcb1f3521c4f3fbdc310cf4714e29404aa23be6021e2e267c97b090dc650
-
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
Filesize5KB
MD5a62bfe9d116bc86b513563a81f001ebe
SHA17590da87162da32b605399c3ba76eb43579c8845
SHA256e11ecb154a82258a5c1008ed43af93c2f007a94e24c8c97e067180ef84342a94
SHA512e587c52e9b0ae80709027e4cbfe0e2991205668a8f2e4706efa1a268db88a61fb6978fc44da78bd6dc7b90348d5c2d075a67c56b06f0141d62bafa838d5631b3
-
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
Filesize20KB
MD5da3bec3223b24fac4ceef9d5b18ed6d7
SHA1c9862c25255876995d990472704c7f41776ff9d1
SHA2566b0a7a0e6f71dfd1f99e28f029ed058a218a1a8f6d447800d64a7afea0a3309f
SHA512b361308ad095fa64382a824d25a9c9e8a19b961d1b3c92dd1f1adc4736466598d33b3cac74f1105069ccb481a3635c266f2ea7efdf7c8463e45bb0d4be6a0376
-
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
Filesize5KB
MD58861d31f346ec54cbbc2a59d697ad281
SHA14748f443858bf9905bfc4f82b54c99b6bdc8289d
SHA256489cb29eaecb9ba0decdefe271acb474eb85e001cac948e45d5b79054da4551f
SHA512ddd277c78a9b614ea83dd1179a354f5d9830a5979ec6a56078403340bdc55957591edbc48ef360623321cb0445484e3904a05b3e83bea2410effa64b3f3a0c81
-
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
Filesize5KB
MD5407035b35b3e5acd0e6d09b4578ffd6d
SHA13f12c446dd1de4267d9382fe43a4944a2aa9d77d
SHA256eda751ac11f7c5cd19836e512c2f4ce87017f0d0a71bee0655c3d0901d1d57c5
SHA5126aa064013484212e4351816ec82298e0c6b04c6395bfc3dfeb7feb88ba47b20fe71ee414b65042493ce03bc2b61664ff0e0884ee4412cf29e0066d7adaaf90ff
-
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
Filesize5KB
MD572ce5a700814f34a3a210f410714516d
SHA1dab66982d68344cca4c30162190633efa77c9df5
SHA256dfbbd52e6b675d0bbb6eba0b7acb07c49795b9b42f5c8be4d7e079488a657b95
SHA512deb3fb3474570b38d3f0c117e5f118758853013ceb7939f98404ab5145821f57a2777d620d72828de6289ce0539e93ee97b45a7b252dd97bb15ca49dd5199a6f
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\datareporting\glean\db\data.safe.bin
Filesize2KB
MD58807e467463e755b72a148fb65f72e47
SHA1d1efedb4ba843ecb53ae24f560df42f3a2e2ba22
SHA256448c92e628e700a4b369f7f027418f1b033a2627c8dd027b980e5361ae5f133f
SHA512ecca55a2c66bcf0c0cc7cbd7499b98b12c5599016a66e56729e9845357179023fa3767b3ba0630bc037a8a362b52d5ca7d97c70865c8054cb9abe2cc13ffb15f
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\datareporting\glean\db\data.safe.bin
Filesize2KB
MD5440ff2b392f2633a2815c16dd54eafc2
SHA1997ca0fea1da54895925b976208a6ccf36082dfb
SHA2562e3ce4feabeb9ce4865851534033405c5208ad3e271294fe8732fe7434539c64
SHA51201bdea1a9bbe0330cc76cb4b66a4e592393567877ce3147bdc7540d7b6d34be38f928e20a2e0d70059089988ec9fa12eb1dec348e3a0375a6cd2a04b6d2f34c1
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\datareporting\glean\db\data.safe.bin
Filesize2KB
MD55619aa6612fcc2674e512280fa7c3624
SHA1695ac6bf8736c03c9413b09b46afc14aff031cd5
SHA256140163e379d644eea69024ecd0ab0757238d270c6bae005f73f51fd37521d73c
SHA512b3fe2def80e979454b1aead46e5795050dc8d444e6553bbb146c61e5bd0d8e0d414ddeb1010a698475385b7d62dc2c19bd739e651c2609c49a41b97154103346
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\datareporting\glean\pending_pings\4ae3e03a-2b1f-42ea-ba0e-00ae968ca870
Filesize934B
MD568fad4cdee3e47217879aa2a9c4f1e77
SHA1fe122928ee985892016a68423a8c8dadc1c95352
SHA256618c81ed13f51e9160cb0e8790e2652a261f10d6d2a7b1057be62e1e1048889d
SHA512610a62b662cfe2be4676fe04c68024d375a68f93d5c512c30ab39787155c760ac5138a21f09b989bc06ebebf793ab6549b2ad3d1c844688e694f912a7ce6b551
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\datareporting\glean\pending_pings\751a4989-a4e6-4fbf-bfa0-2d9e8c670dfd
Filesize11KB
MD576b56d700ac2942d03a4c37bc92a1efb
SHA10e1a86b803d60d7d307f16c447d479031e054fab
SHA256be312e50689d0a6b26dc50e125a45029b69d63ddc40811138d3c2de720233753
SHA512d6d4fa0b3c8100296a0151b29c692f03c1ec0a9163bde097991d251527a5c74239f30be223b807ec6dd882d5db8f18ca98d7ebd214c04d77982ced6236d23ee0
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\datareporting\glean\pending_pings\af43e607-3bc0-4480-8d97-16d9662f1fd0
Filesize856B
MD5f86e529ba11c052299ca00f523db26fd
SHA1a971e775286b13bd9b1f27d9965809370787070f
SHA256f9f1a4df48d7aaaa47d383bd48cc972ef1a995bbb12c208f05631d2207b83b6b
SHA5129b6938c7a34c243f94b46643140f2cdda70fdd94a195c0b2fa363e6537b528752f3fa6304b61cedbed1d2ed0e9e7d873f988ba40d97cd8cf3ef26a12ad4e0796
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\datareporting\glean\pending_pings\c2c128e0-31a2-4e1f-8ad0-2fae506896a8
Filesize746B
MD57515480395b4f23a2d8d1c7117cb2492
SHA16dc5ac995a7b85b194c76a83bca0923bb103ad67
SHA2561a839c68293eebd4f8bf2d8166e942141cf599c14c330eb6fc330780e53d4434
SHA5129a0011dd4b14dd2bcb5e0884022436d824a0ef826aea5545e549cf157c2922278bb1d12c4da1cce6ebfd936a97128bd60eb022002195ef4dc5ba45b7c06c4dd8
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.dll
Filesize997KB
MD5fe3355639648c417e8307c6d051e3e37
SHA1f54602d4b4778da21bc97c7238fc66aa68c8ee34
SHA2561ed7877024be63a049da98733fd282c16bd620530a4fb580dacec3a78ace914e
SHA5128f4030bb2464b98eccbea6f06eb186d7216932702d94f6b84c56419e9cf65a18309711ab342d1513bf85aed402bc3535a70db4395874828f0d35c278dd2eac9c
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.info
Filesize116B
MD53d33cdc0b3d281e67dd52e14435dd04f
SHA14db88689282fd4f9e9e6ab95fcbb23df6e6485db
SHA256f526e9f98841d987606efeaff7f3e017ba9fd516c4be83890c7f9a093ea4c47b
SHA512a4a96743332cc8ef0f86bc2e6122618bfc75ed46781dadbac9e580cd73df89e74738638a2cccb4caa4cbbf393d771d7f2c73f825737cdb247362450a0d4a4bc1
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\gmp-widevinecdm\4.10.2557.0\LICENSE.txt
Filesize479B
MD549ddb419d96dceb9069018535fb2e2fc
SHA162aa6fea895a8b68d468a015f6e6ab400d7a7ca6
SHA2562af127b4e00f7303de8271996c0c681063e4dc7abdc7b2a8c3fe5932b9352539
SHA51248386217dabf7556e381ab3f5924b123a0a525969ff98f91efb03b65477c94e48a15d9abcec116b54616d36ad52b6f1d7b8b84c49c204e1b9b43f26f2af92da2
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\gmp-widevinecdm\4.10.2557.0\manifest.json
Filesize372B
MD58be33af717bb1b67fbd61c3f4b807e9e
SHA17cf17656d174d951957ff36810e874a134dd49e0
SHA256e92d3394635edfb987a7528e0ccd24360e07a299078df2a6967ca3aae22fa2dd
SHA5126125f60418e25fee896bf59f5672945cd8f36f03665c721837bb50adf5b4dfef2dddbfcfc817555027dcfa90e1ef2a1e80af1219e8063629ea70263d2fc936a7
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll
Filesize11.8MB
MD533bf7b0439480effb9fb212efce87b13
SHA1cee50f2745edc6dc291887b6075ca64d716f495a
SHA2568ee42d9258e20bbc5bfdfae61605429beb5421ffeaaa0d02b86d4978f4b4ac4e
SHA512d329a1a1d98e302142f2776de8cc2cd45a465d77cb21c461bdf5ee58c68073a715519f449cb673977288fe18401a0abcce636c85abaec61a4a7a08a16c924275
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.lib
Filesize1KB
MD5688bed3676d2104e7f17ae1cd2c59404
SHA1952b2cdf783ac72fcb98338723e9afd38d47ad8e
SHA25633899a3ebc22cb8ed8de7bd48c1c29486c0279b06d7ef98241c92aef4e3b9237
SHA5127a0e3791f75c229af79dd302f7d0594279f664886fea228cfe78e24ef185ae63aba809aa1036feb3130066deadc8e78909c277f0a7ed1e3485df3cf2cd329776
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.sig
Filesize1KB
MD5937326fead5fd401f6cca9118bd9ade9
SHA14526a57d4ae14ed29b37632c72aef3c408189d91
SHA25668a03f075db104f84afdd8fca45a7e4bff7b55dc1a2a24272b3abe16d8759c81
SHA512b232f6cf3f88adb346281167ac714c4c4c7aac15175087c336911946d12d63d3a3a458e06b298b41a7ec582ef09fe238da3a3166ff89c450117228f7485c22d2
-
Filesize
6KB
MD5dec2e65f53994f642d71fbf98ae4c6ce
SHA1e25df8951f453faed7e4b41b58218b0629f849ad
SHA25618e2d0043d2adb60b4eb6b3c274affdbf62c424b779da12ae66674d21395e4b6
SHA5124c06aad230e54932034e54e36f43eb2cf1567d3fd6df61eec1a22871a96fe2a9dbe0c6339603df9d6c2f9692455e51daa13fed557477f889319dece2c20f48a5
-
Filesize
6KB
MD59af1b1606f55390eedbed50ff8ab737a
SHA142afb3696cf53b4438f503bd5f80dc0a207eb2d6
SHA2568b2e8babbc7e626c2a37824687f7b1b134a10448a339d127eee87737d06aba45
SHA512777933df7091a9088ab27ac51c86f663968c456ac09f2c4ecfacdb5e6685ac8d151fc725c6c7d4ca2a8a2bbf918b717a89bdb6e7c3f304242137774d4071fa73
-
Filesize
6KB
MD5fee25eb010ec3139f607536cc06f9dec
SHA1ff79ab1a2d512ed5dd9b495c55b41a83713e878b
SHA25670f67fc72131039a1d0cbc67366c2f21d2002c2990a2f96efcfa1da0f4294461
SHA512c574c1f061dce0fbe51271c1c50ffc8f5c87fb7c25c339f41101bbafa12d5da5c8cc38477d99fdcac6b815600a8691518a1d181307f06395e859c289b0c9e294
-
Filesize
7KB
MD5b910d7cda64fe951b85f6d4df303dc6e
SHA191fffd128cacd90ecc745ed5486e18c2a6dfb235
SHA2568f806b666d65e5c64cb0f5d09891ad3e79b099be717275dc9024f2aafce85873
SHA5125d5ea0ff1f0d8665c17685af814685c100cc4987cc54ecd67d7b86934655fad9fbc070d4e76d0b273e7aad80616cee59e18c649002edb0762e500246f678858f
-
Filesize
8KB
MD572de963a22968daeeb92e47a0e835d55
SHA18f7b961f6ecd430b36c91a826247b4749d518c77
SHA256218f16a1beeeed060a2cd2c0905e2fc9398b97e0ed9621f8b9f52ffbad747a30
SHA51273595ed89f3f07826bff7cc5cb548432496bb4d8bc09382235e6e58051159cc598307c435296a5b39e74515b884c0f29aa5e9df69f9936fdbcd557a31857ae3b
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\sessionstore-backups\recovery.jsonlz4
Filesize1KB
MD5084296645da469dfaa79a89fc1c2b69e
SHA10c73f95143d959e070ba29281154de2572c20b6c
SHA2561085125472654478c9c6a541965ffab00c1843649f746ab1cd08b82b272ed770
SHA512c53940ddb0a09699fe51bcef961be3a8dbe1af8479b498b9524477b310875e61173abea0e2518a07073dd294606a675c1f3b7191b194c5359da819a31f9aaebe
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\sessionstore-backups\recovery.jsonlz4
Filesize1KB
MD5dd69b9c49b4d41e15388189ec99a744a
SHA1c827795d30ae4e3203294133e5686673d69401ca
SHA2568fe6a8f4d128d62e030b361cf7b5e5885734d0224ffb9febeaf3d85a7ab270ed
SHA512ada707154f6c270258472e6a9918ec83e905ac2ee1b9415119445c335479aa11f96a64522a7fab583ade6a54c3170a587ea9bde568511befc4330a28835590d2
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\sessionstore-backups\recovery.jsonlz4
Filesize3KB
MD5dec05d1219d0d77e6b0e50eadde40086
SHA143af0fbe5a590a6c33cb5bc408bf149b5ff3ff5d
SHA25688f34ef8a387f73811c6ed61b7716ffeea7e37bff4e3ed57193f9e518f8bddb3
SHA51221ef8738cf902470331a0673f124432f4b70af719475a8e39c91f1f298d12af90ab16f7910dfa53d2f2c8df8375fc807b6b980253ee9c29a2010c673dac98052
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\sessionstore-backups\recovery.jsonlz4
Filesize6KB
MD554b2cecef951d8b00dfddaa287932cf0
SHA15798a05234583546f43751f0580719efade00aef
SHA256c430b7b58dfe24c2376044ad2c82425e13fded30ef41e22597af61ea798e0d61
SHA512485e0a3ac61e84d9cfbf60e5ac9854f7cffaf9c238d8655bdf583e08bd3d0db95ec685eb314bd24ddc0a8149f45ee1c784b9b0f39f3f474e2063c9eaecb99b5e
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\sessionstore-backups\recovery.jsonlz4
Filesize1KB
MD5da536144c089346a12f59157be20a4b6
SHA1a0286a541cd60bb2ba75972b37e59fb0c62add74
SHA2565e61dff7a357d164d8f185015e61e36dd4bea512c06f8cc18ac81110558abdea
SHA51200141911419a4312ab4b1d60db7c12cb29cbd17fd2b374a9a078ac08f774e89bd9942c5a3f5b56f76ca4f1366998fc81bfcedd81dd85e8b599cdfb56d3e351b6
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\sessionstore-backups\recovery.jsonlz4
Filesize11KB
MD531b3b7e970d2f27689170cfcfb2d5d9f
SHA10ff6f970d51947695a744a0dc8f5f8e33f8d92d4
SHA256e541c7a229ccb6ca66a75728bd3f5e69bc49670f342116accc30698cd11dba1b
SHA5120594daf1ed1afa3811890d42243158cf3f1011bf31e79de5c464fb43a266f157f85d95bd22f26c9ede2356ed0057eb5e0323e12bce999a5d974f9f22bd9915f4
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\sessionstore-backups\recovery.jsonlz4
Filesize7KB
MD59f2241b658886c8c17d660592964dd18
SHA1ff245f74596c880f4338f257ae31b06da303b772
SHA256855ea22989d6cb62c1f011afbe27120d764595c20a4abf9bbb6a9189d456cc21
SHA5125a5d49508093d86fa2b2c9e94b2aec2d9e7811c08c18ecba83eab0a64ec1b90c38c47a81505944939335f2f22cfd847b78be50e84ce2456df4e7333a5fe408e5
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\sessionstore-backups\recovery.jsonlz4
Filesize10KB
MD55979e8561aabc660b750d1f84649274b
SHA1c7347ea6efac3b197c3a0e8641c34df99ad4067d
SHA256db69098446a623625ce7302429da4ed52a23f41bed5b28c9c308bcdbe1903ef7
SHA51201b471a7ac6665a5bf4d7eafd8cd401dc3178bcaedd799c260a3c203929fe5b59bb2dc4fcb4f74343518783ae35c424e0f0975db26f65644c2744af6cba3b992
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\sessionstore-backups\recovery.jsonlz4
Filesize12KB
MD52985a553a2492a6722fb61ce09728fd9
SHA134b4332b5c81d4d794055a2efd87d3c97139bbe2
SHA2565b572c47906adbf9f17d9215556e762c49e039fc1967ed9ebf3cc161aedf494c
SHA5127ddebb8e75e3755785ccb76faa5573357a99cb2043d2622f776b2abc10dbf54d1cf9292d833b5d2dfbc818e9177b41f3815bb19377e7e9b789a40089a4311aba
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\sessionstore-backups\recovery.jsonlz4
Filesize10KB
MD5409cf4f7912b8624d4ef516f38b112ce
SHA149ec142cf3e2701defbd505cbd22271ecb838f18
SHA256875b103849f39df1a4046409978bbcd67933b639e0e5498aad56af7e61ec22fa
SHA512e8bf22b9e4ebc7f89738a5d4504da325f4bbb4d71bc5188ef8b0657e8f4dfc17973fbda0f3470df80c71971f1a99b07939fa37bf17cc5e3f2b8ec33b26a3be67
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\sessionstore-backups\recovery.jsonlz4
Filesize11KB
MD537ed9d4e822227f91dffd79dbecb299f
SHA17c404ff999a4fed3befaf0da56c1ed857c995e80
SHA25688585ccaa488283a5b23e916f2b66506435c9e05ee9b376d85c974747bb750b8
SHA512c49829733f46c803212312a84c053940ff4b7c765745e227b164b3209b1222e5f2fd57f8336a92d32d8e11994c8a34ba567deef65d6099aa7ca198f29ab94ff9
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\sessionstore-backups\recovery.jsonlz4
Filesize11KB
MD5280895a6106d45e79166d32044f13f99
SHA1042fe7555154a1e0a7bdf6bc7c33f62eaf432b91
SHA25624c5b19ad71895f2356b2aeb37a64b9a6cf9629911dd57f46b125fa4e0b84be2
SHA512df811bd639f818c11b18f579d8b6f79c9fe2fad6ba35ec1792a4f71902841c24388a62d3cd6e7b62f59097b868660dfc26e984dff2547a7b2f458e5bc5848851
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\sessionstore-backups\recovery.jsonlz4
Filesize11KB
MD5c83cdcb275c868f88e8f6d1e2638f114
SHA1c604a14d3ee9cd939c1a502ca3c650b9e3e65dd7
SHA2569874ac26ac352270da8234e94ab0f5a502b298abc84b597dedcf55e5a7ccdd2e
SHA51243d2f40a01636444c85c5044977fcc289a83b2685da022b4527a98917264784a388ca55bafa3d976e683ab5b7e9a5078b29421d7daaefa5b05a2d099cf635098
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\sessionstore-backups\recovery.jsonlz4
Filesize12KB
MD5491e43b153e216a39a8b4ab6c42799a5
SHA1bd0293c3e2a780bb1a1184000116f5556c19aa84
SHA2562569fa8e8a125bdbb55377c0a0989a8c964c81a4dcc46e785c1359d383e1ce5c
SHA5128c7416e6fdea747286db5e80fe0418e8ab16d8a5c1303c56c041b048a5a5f1e7535b9b58ee0d48137454e64e7a08ba5da81c58fb9f06bb27de9fb9ff2e567b2d
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Filesize192KB
MD55752d7c69a51a64b6755d474f00134bf
SHA1c2280f2b2d71b556255319983496aff8789799ab
SHA256bf71ecc96318d9411b8bb7add48bd54dcc7eda5c40d8d27a05f18394408014ab
SHA512352c6ac22a7a4df8c64adcf5ab7f096591362b00f8f83f86cef0adfa614749a908484160a7f4a1d30a3615790ed3f61320d87c5b1b5870f8a542d5b8a0f24678
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Filesize184KB
MD50d0013d9708d9fef539adc917f5b87f6
SHA15e071e6b4d8abf007c8bb78ee948caf5bb0439e1
SHA256f416d29cdbaa66b7d04483831d2a593a735316fafb643414a12df78da0ab054b
SHA512851e9965a0fed9e0f5195ce655635cf13687d18678e4a9df807ab22cbc53c02cd2006fd65d93cd80b2a06d709e59122ea9933ba5cec551c6d51f5e9b4c175388
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\weave\toFetch\tabs.json.tmp
Filesize10B
MD5f20674a0751f58bbd67ada26a34ad922
SHA172a8da9e69d207c3b03adcd315cab704d55d5d5f
SHA2568f05bafd61f29998ca102b333f853628502d4e45d53cff41148d6dd15f011792
SHA5122bce112a766304daa2725740622d2afb6fe2221b242e4cb0276a8665d631109fbd498a57ca43f9ca67b14e52402abe900f5bac9502eac819a6617d133c1ba6a3
-
Filesize
933B
MD57a2726bb6e6a79fb1d092b7f2b688af0
SHA1b3effadce8b76aee8cd6ce2eccbb8701797468a2
SHA256840ab19c411c918ea3e7526d0df4b9cb002de5ea15e854389285df0d1ea9a8e5
SHA5124e107f661e6be183659fdd265e131a64cce2112d842226305f6b111d00109a970fda0b5abfb1daa9f64428e445e3b472332392435707c9aebbfe94c480c72e54
-
Filesize
3.0MB
MD5fe7eb54691ad6e6af77f8a9a0b6de26d
SHA153912d33bec3375153b7e4e68b78d66dab62671a
SHA256e48673680746fbe027e8982f62a83c298d6fb46ad9243de8e79b7e5a24dcd4eb
SHA5128ac6dc5bb016afc869fcbb713f6a14d3692e866b94f4f1ee83b09a7506a8cb58768bd47e081cf6e97b2dacf9f9a6a8ca240d7d20d0b67dbd33238cc861deae8f
-
Filesize
37KB
MD535c2f97eea8819b1caebd23fee732d8f
SHA1e354d1cc43d6a39d9732adea5d3b0f57284255d2
SHA2561adfee058b98206cb4fbe1a46d3ed62a11e1dee2c7ff521c1eef7c706e6a700e
SHA512908149a6f5238fcccd86f7c374986d486590a0991ef5243f0cd9e63cc8e208158a9a812665233b09c3a478233d30f21e3d355b94f36b83644795556f147345bf
-
Filesize
239KB
MD53ad6374a3558149d09d74e6af72344e3
SHA1e7be9f22578027fc0b6ddb94c09b245ee8ce1620
SHA25686a391fe7a237f4f17846c53d71e45820411d1a9a6e0c16f22a11ebc491ff9ff
SHA51221c21b36be200a195bfa648e228c64e52262b06d19d294446b8a544ff1d81f81eb2af74ddbdebc59915168db5dba76d0f0585e83471801d9ee37e59af0620720
-
Filesize
479KB
MD5f755a44bbb97e9ba70bf38f1bdc67722
SHA1f70331eb64fd893047f263623ffb1e74e6fe4187
SHA2563b246faa7e4b2a8550aa619f4da893db83721aacf62b46e5863644a5249aa87e
SHA512f8ce666ae273e6c5cd57447189a8cf0e53c7704cf269fa120068f21e6faf6c89e2e75f37aee43cac83f4534790c5c6f1827621684034ef3eb7e94d7ee1ac365e
-
Filesize
1.4MB
MD5c17170262312f3be7027bc2ca825bf0c
SHA1f19eceda82973239a1fdc5826bce7691e5dcb4fb
SHA256d5e0e8694ddc0548d8e6b87c83d50f4ab85c1debadb106d6a6a794c3e746f4fa
SHA512c6160fd03ad659c8dd9cf2a83f9fdcd34f2db4f8f27f33c5afd52aced49dfa9ce4909211c221a0479dbbb6e6c985385557c495fc04d3400ff21a0fbbae42ee7c