5988880dfdba7ac2c9b6a333ce8659645fcb42b6764413b3459294fcd34d46f5

Analysis

max time kernel
33s
max time network
33s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
04/09/2024, 20:12 UTC

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

sample.html
Size

15KB
MD5

317d3d959fd05983161f1c9dac42804f
SHA1

82968cfe6348440a83e7ee57714370486f0917da
SHA256

5988880dfdba7ac2c9b6a333ce8659645fcb42b6764413b3459294fcd34d46f5
SHA512

df6c88f1d5c783b4313541abaf7be8c165fff99792f04e4304368e1b2b22428b5243a37b51412b1e7c8689b7ce183e9fc775de2e4cad1c8f007fa5626c77db62
SSDEEP

384:qTg+oJkNifIOBWQAxYHcI65wPTDKH6FiN:WoJkOxpGCPTDSN

Score

4^/10

Malware Config

Signatures

Drops file in Windows directory 6 IoCs

description	ioc	Process
File created	C:\Windows\rescache\_merged\3720402701\1568373884.pri	MicrosoftEdge.exe
File opened for modification	C:\Windows\Debug\ESE.TXT	MicrosoftEdge.exe
File created	C:\Windows\rescache\_merged\3720402701\1568373884.pri	MicrosoftEdgeCP.exe
File created	C:\Windows\rescache\_merged\3720402701\1568373884.pri	MicrosoftEdgeCP.exe
File created	C:\Windows\rescache\_merged\3720402701\1568373884.pri	MicrosoftEdgeCP.exe
File created	C:\Windows\rescache\_merged\3720402701\1568373884.pri	MicrosoftEdgeCP.exe

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000\Software\Microsoft\Internet Explorer\Main	browser_broker.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000\Software\Microsoft\Internet Explorer\Main	MicrosoftEdgeCP.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000\Software\Microsoft\Internet Explorer\Main	MicrosoftEdgeCP.exe

Modifies registry class 64 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\Revision = "0"	MicrosoftEdge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\DOMStorage\bing.com\Total = "23"	MicrosoftEdgeCP.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\DataStore	MicrosoftEdge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Settings\Cache\Cookies\CachePrefix = "Cookie:"	MicrosoftEdgeCP.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\006\ACGStatus\DynamicCodePolicy = 00000000	MicrosoftEdgeCP.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\DOMStorage\Total\ = "703"	MicrosoftEdgeCP.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\TypedURLsTime\url3 = 0000000000000000	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore	MicrosoftEdge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\EdpDomStorage\bing.com\NumberOfSubdomain = "0"	MicrosoftEdgeCP.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\DOMStorage\www.bing.com\ = "541"	MicrosoftEdgeCP.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\ACGStatus	MicrosoftEdgeCP.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\DOMStorage\Total\ = "124"	MicrosoftEdgeCP.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\DOMStorage\bing.com\Total = "132"	MicrosoftEdgeCP.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Recovery\Active	MicrosoftEdge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Settings\Cache\Content\CachePrefix	MicrosoftEdgeCP.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\CIStatus	MicrosoftEdgeCP.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BrowserEmulation	MicrosoftEdge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Settings\Cache\Content\CacheLimit = "256000"	MicrosoftEdgeCP.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\TypedURLsVisitCount\url3 = "0"	MicrosoftEdge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\TypedURLs\url5 = "https://login.live.com/"	MicrosoftEdge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Protected - It is a violation of Windows Policy to modify = "1"	MicrosoftEdge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BrowserEmulation\CVListXMLVersionLow = "0"	MicrosoftEdge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\Internet Explorer\Main\OperationalData = "1"	MicrosoftEdgeCP.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Settings\Cache\Content\CachePrefix	MicrosoftEdgeCP.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\TypedURLsTime\url5 = 0000000000000000	MicrosoftEdge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\DOMStorage\Total\ = "233"	MicrosoftEdgeCP.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\IETld\LowMic	MicrosoftEdge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Internet Settings\Cache\History\CachePrefix = "Visited:"	MicrosoftEdge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\ACGStatus\DynamicCodePolicy = 05000000	MicrosoftEdgeCP.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU	MicrosoftEdgeCP.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Settings\Cache\Content\CachePrefix	MicrosoftEdgeCP.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus\CIStatusTimestamp = 5a70b7d306ffda01	MicrosoftEdge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Internet Settings\Zones\3\{AEBA21FA-782A-4A90-978D-B72164 = 1a3761592352350c7a5f20172f1e1a190e2b017313371312141a152a	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\006\CIStatus	MicrosoftEdgeCP.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\CIStatus\CIPolicyState = "0"	MicrosoftEdgeCP.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BrowserEmulation\IECompatVersionHigh = "268435456"	MicrosoftEdge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\VersionHigh = "0"	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Settings	MicrosoftEdgeCP.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Settings\Cache\Extensible Cache	MicrosoftEdgeCP.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Settings\Cache\Cookies	MicrosoftEdgeCP.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\ACGStatus\DynamicCodePolicy = 05000000	MicrosoftEdgeCP.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\TypedURLs\url1 = "http://nezur.io/"	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\TypedURLs	MicrosoftEdge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Settings\Cache\Content\CachePrefix	MicrosoftEdgeCP.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Internet Settings\Cache\Content\CachePrefix	MicrosoftEdge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus\CIStatusTimestamp = 0e0604d106ffda01	MicrosoftEdge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\DOMStorage\www.bing.com\ = "18038"	MicrosoftEdgeCP.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\ACGStatus\DynamicCodePolicy = 05000000	MicrosoftEdgeCP.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\TypedURLsTime\url6 = 0000000000000000	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\Main	MicrosoftEdgeCP.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ServiceUI	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Protected - It is a violation of Windows Policy to modify	MicrosoftEdge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\VersionLow = "0"	MicrosoftEdge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Settings\Cache\History\CacheLimit = "1"	MicrosoftEdgeCP.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\DOMStorage\www.bing.com\ = "132"	MicrosoftEdgeCP.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Settings\Cache\History\CachePrefix = "Visited:"	MicrosoftEdgeCP.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\AdapterInfo = "vendorId=\"0x1414\",deviceID=\"0x8c\",subSysID=\"0x0\",revision=\"0x0\",version=\"10.0.15063.0\"hypervisor=\"No Hypervisor (No SLAT)\""	MicrosoftEdgeCP.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\EdpDomStorage	MicrosoftEdgeCP.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Settings\Cache\Cookies\CachePrefix = "Cookie:"	MicrosoftEdgeCP.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\DOMStorage\www.msn.com\ = "101"	MicrosoftEdgeCP.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\DOMStorage\bing.com\NumberOfSubdomains = "1"	MicrosoftEdgeCP.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\DOMStorage\Total\ = "642"	MicrosoftEdgeCP.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\CIStatus	MicrosoftEdgeCP.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\CIStatus\SignaturePolicy = 06000000	MicrosoftEdgeCP.exe

Suspicious behavior: MapViewOfSection 14 IoCs

pid	Process
4152	MicrosoftEdgeCP.exe
4152	MicrosoftEdgeCP.exe
4152	MicrosoftEdgeCP.exe
4152	MicrosoftEdgeCP.exe
4152	MicrosoftEdgeCP.exe
4152	MicrosoftEdgeCP.exe
4152	MicrosoftEdgeCP.exe
4152	MicrosoftEdgeCP.exe
4152	MicrosoftEdgeCP.exe
4152	MicrosoftEdgeCP.exe
4152	MicrosoftEdgeCP.exe
4152	MicrosoftEdgeCP.exe
4152	MicrosoftEdgeCP.exe
4152	MicrosoftEdgeCP.exe

Suspicious use of AdjustPrivilegeToken 7 IoCs

description	pid	Process
Token: SeDebugPrivilege	4940	MicrosoftEdgeCP.exe
Token: SeDebugPrivilege	4940	MicrosoftEdgeCP.exe
Token: SeDebugPrivilege	4940	MicrosoftEdgeCP.exe
Token: SeDebugPrivilege	4940	MicrosoftEdgeCP.exe
Token: SeDebugPrivilege	4988	MicrosoftEdgeCP.exe
Token: SeDebugPrivilege	4988	MicrosoftEdgeCP.exe
Token: SeDebugPrivilege	4988	MicrosoftEdgeCP.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2532	MicrosoftEdge.exe
4152	MicrosoftEdgeCP.exe
4940	MicrosoftEdgeCP.exe
4152	MicrosoftEdgeCP.exe
4084	MicrosoftEdgeCP.exe
4084	MicrosoftEdgeCP.exe

Suspicious use of WriteProcessMemory 9 IoCs

description	pid	Process	procid_target
PID 4152 wrote to memory of 4988	4152	MicrosoftEdgeCP.exe	77
PID 4152 wrote to memory of 4988	4152	MicrosoftEdgeCP.exe	77
PID 4152 wrote to memory of 4988	4152	MicrosoftEdgeCP.exe	77
PID 4152 wrote to memory of 4808	4152	MicrosoftEdgeCP.exe	81
PID 4152 wrote to memory of 4808	4152	MicrosoftEdgeCP.exe	81
PID 4152 wrote to memory of 4808	4152	MicrosoftEdgeCP.exe	81
PID 4152 wrote to memory of 4808	4152	MicrosoftEdgeCP.exe	81
PID 4152 wrote to memory of 4808	4152	MicrosoftEdgeCP.exe	81
PID 4152 wrote to memory of 4808	4152	MicrosoftEdgeCP.exe	81

C:\Windows\system32\LaunchWinApp.exe
"C:\Windows\system32\LaunchWinApp.exe" "C:\Users\Admin\AppData\Local\Temp\sample.html"
1⤵
PID:1472

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca
1⤵
- Drops file in Windows directory
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:2532

C:\Windows\system32\browser_broker.exe
C:\Windows\system32\browser_broker.exe -Embedding
1⤵
- Modifies Internet Explorer settings
PID:4980

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
1⤵
- Modifies registry class
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4152

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
1⤵
- Drops file in Windows directory
- Modifies Internet Explorer settings
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:4940

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
1⤵
- Drops file in Windows directory
- Modifies Internet Explorer settings
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
PID:4988

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
1⤵
- Drops file in Windows directory
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4084

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
1⤵
- Modifies registry class
PID:3996

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
1⤵
- Drops file in Windows directory
- Modifies registry class
PID:4808

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
1⤵
- Modifies registry class
PID:2480

Network

DNS

www.msn.com

MicrosoftEdge.exe

Remote address:

8.8.8.8:53

Request

www.msn.com

IN A

Response

www.msn.com

IN CNAME

www-msn-com.a-0003.a-msedge.net

www-msn-com.a-0003.a-msedge.net

IN CNAME

a-0003.a-msedge.net

a-0003.a-msedge.net

IN A

204.79.197.203
DNS

assets.msn.com

MicrosoftEdgeCP.exe

Remote address:

8.8.8.8:53

Request

assets.msn.com

IN A

Response

assets.msn.com

IN CNAME

assets.msn.com.edgekey.net

assets.msn.com.edgekey.net

IN CNAME

e28578.d.akamaiedge.net

e28578.d.akamaiedge.net

IN A

95.101.143.235

e28578.d.akamaiedge.net

IN A

95.101.143.250

e28578.d.akamaiedge.net

IN A

95.101.143.176

e28578.d.akamaiedge.net

IN A

95.101.143.234

e28578.d.akamaiedge.net

IN A

95.101.143.227

e28578.d.akamaiedge.net

IN A

95.101.143.171

e28578.d.akamaiedge.net

IN A

95.101.143.251

e28578.d.akamaiedge.net

IN A

95.101.143.233

e28578.d.akamaiedge.net

IN A

95.101.143.248
GET

https://assets.msn.com/bundles/v1/edge/latest/common.5dd7cff85de67632bfd7.js

MicrosoftEdgeCP.exe

Remote address:

95.101.143.235:443

Request

GET /bundles/v1/edge/latest/common.5dd7cff85de67632bfd7.js HTTP/2.0
host: assets.msn.com
accept: application/javascript, */*;q=0.8
referer: https://www.msn.com/spartan/dhp?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
origin: https://www.msn.com
accept-encoding: gzip, deflate, br

Response

HTTP/2.0 200

content-length: 33972
content-md5: YzySdh8ykm7KVsyrxDpMLg==
last-modified: Mon, 26 Jul 2021 22:18:52 GMT
etag: 0x8D9508359704919
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 60f35eac-c01e-0047-572d-7168a1000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
content-encoding: br
date: Wed, 04 Sep 2024 20:12:56 GMT
alt-svc: h3=":443"; ma=86400
akamai-request-bc: [a=95.101.143.149,b=462630950,c=g,n=GB_EN_LONDON,o=20940]
server-timing: clientrtt; dur=48, clienttt; dur=0, origin; dur=0, cdntime; dur=0, wpo;dur=0,1s;dur=0
akamai-cache-status: Hit from child
content-type: application/javascript
akamai-server-ip: 95.101.143.149
akamai-request-id: 1b933026
access-control-allow-credentials: true
access-control-allow-origin: https://www.msn.com
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1}
cache-control: public, no-transform, max-age=31535892
timing-allow-origin: *
akamai-grn: 0.958f655f.1725480776.1b933026
vary: Origin
GET

https://assets.msn.com/bundles/v1/edge/latest/vendors.c47bf4f4981f23895ddb.js

MicrosoftEdgeCP.exe

Remote address:

95.101.143.235:443

Request

GET /bundles/v1/edge/latest/vendors.c47bf4f4981f23895ddb.js HTTP/2.0
host: assets.msn.com
accept: application/javascript, */*;q=0.8
referer: https://www.msn.com/spartan/dhp?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
origin: https://www.msn.com
accept-encoding: gzip, deflate, br

Response

HTTP/2.0 200

content-length: 161886
content-md5: 4Qqx/5ghQW9cUY3TgpoINQ==
last-modified: Mon, 26 Jul 2021 22:18:30 GMT
etag: 0x8D950834C94BC27
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: f5b2cfb7-601e-00a1-390e-7187da000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
content-encoding: br
date: Wed, 04 Sep 2024 20:12:56 GMT
alt-svc: h3=":443"; ma=86400
akamai-request-bc: [a=95.101.143.149,b=462630946,c=g,n=GB_EN_LONDON,o=20940]
server-timing: clientrtt; dur=48, clienttt; dur=0, origin; dur=0, cdntime; dur=0, wpo;dur=0,1s;dur=0
akamai-cache-status: Hit from child
content-type: application/javascript
akamai-server-ip: 95.101.143.149
akamai-request-id: 1b933022
access-control-allow-credentials: true
access-control-allow-origin: https://www.msn.com
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1}
cache-control: public, no-transform, max-age=31535892
timing-allow-origin: *
akamai-grn: 0.958f655f.1725480776.1b933022
vary: Origin
GET

https://assets.msn.com/staticsb/statics/latest/oneTrust/1.9/scripttemplates/otSDKStub.js

MicrosoftEdgeCP.exe

Remote address:

95.101.143.235:443

Request

GET /staticsb/statics/latest/oneTrust/1.9/scripttemplates/otSDKStub.js HTTP/2.0
host: assets.msn.com
accept: application/javascript, */*;q=0.8
referer: https://www.msn.com/spartan/dhp?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br
cookie: USRLOC=; MUID=337EFB27000363380CC6EF7001886258; _EDGE_V=1; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+04+2024+12%3A45%3A25+GMT%2B0000+(Coordinated+Universal+Time)&version=202310.2.0&browserGpcFlag=0&isIABGlobal=false

Response

HTTP/2.0 200

content-length: 53557
content-md5: YrPejprI4tG+2X4ekLKlAg==
last-modified: Mon, 26 Jul 2021 22:19:35 GMT
etag: 0x8D9508373717114
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: facf2bbe-701e-003c-1fc8-58bfb6000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
content-encoding: br
date: Wed, 04 Sep 2024 20:12:56 GMT
alt-svc: h3=":443"; ma=86400
akamai-request-bc: [a=95.101.143.149,b=462630947,c=g,n=GB_EN_LONDON,o=20940]
server-timing: clientrtt; dur=48, clienttt; dur=0, origin; dur=0, cdntime; dur=0, wpo;dur=0,1s;dur=0
akamai-cache-status: Hit from child
content-type: application/javascript
akamai-server-ip: 95.101.143.149
akamai-request-id: 1b933023
access-control-allow-credentials: true
access-control-allow-origin: https://www.msn.com
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1}
cache-control: public, no-transform, max-age=31535892
timing-allow-origin: *
akamai-grn: 0.958f655f.1725480776.1b933023
vary: Origin
GET

https://assets.msn.com/bundles/v1/edge/latest/microsoft.8aa91a5fe4f5d8517ae1.js

MicrosoftEdgeCP.exe

Remote address:

95.101.143.235:443

Request

GET /bundles/v1/edge/latest/microsoft.8aa91a5fe4f5d8517ae1.js HTTP/2.0
host: assets.msn.com
accept: application/javascript, */*;q=0.8
referer: https://www.msn.com/spartan/dhp?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
origin: https://www.msn.com
accept-encoding: gzip, deflate, br

Response

HTTP/2.0 200

content-type: application/javascript
content-md5: SrH4iQ0luJkTRyZ3V7l1ZA==
last-modified: Tue, 03 Sep 2024 20:41:03 GMT
etag: 0x8DCCC58BA30CBF2
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 493b8db0-c01e-001b-2f97-fe641c000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
content-encoding: gzip
date: Wed, 04 Sep 2024 20:12:56 GMT
content-length: 7369
alt-svc: h3=":443"; ma=86400
akamai-request-bc: [a=95.101.143.149,b=462630948,c=g,n=GB_EN_LONDON,o=20940]
server-timing: clientrtt; dur=48, clienttt; dur=0, origin; dur=0, cdntime; dur=0, wpo;dur=0,1s;dur=0
akamai-cache-status: Hit from child
akamai-server-ip: 95.101.143.149
akamai-request-id: 1b933024
cache-control: public, max-age=1209600
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1}
timing-allow-origin: *
akamai-grn: 0.958f655f.1725480776.1b933024
vary: Origin
GET

https://assets.msn.com/staticsb/statics/latest/oneTrust/1.9/consent/55a804ab-e5c6-4b97-9319-86263d365d28/55a804ab-e5c6-4b97-9319-86263d365d28.json

MicrosoftEdgeCP.exe

Remote address:

95.101.143.235:443

Request

GET /staticsb/statics/latest/oneTrust/1.9/consent/55a804ab-e5c6-4b97-9319-86263d365d28/55a804ab-e5c6-4b97-9319-86263d365d28.json HTTP/2.0
host: assets.msn.com
accept: */*
origin: https://www.msn.com
referer: https://www.msn.com/spartan/dhp?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br

Response

HTTP/2.0 200

content-type: application/json
content-md5: tBDiswOqCRnxNKBPFOr30w==
last-modified: Tue, 03 Sep 2024 20:42:14 GMT
etag: 0x8DCCC58E476189C
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 263583ef-901e-009e-2f87-fee1b1000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
content-encoding: gzip
date: Wed, 04 Sep 2024 20:12:56 GMT
content-length: 1854
alt-svc: h3=":443"; ma=86400
akamai-request-bc: [a=95.101.143.149,b=462631213,c=g,n=GB_EN_LONDON,o=20940]
server-timing: clientrtt; dur=46, clienttt; dur=0, origin; dur=0, cdntime; dur=0, wpo;dur=0,1s;dur=0
akamai-cache-status: Hit from child
akamai-server-ip: 95.101.143.149
akamai-request-id: 1b93312d
access-control-allow-credentials: true
access-control-allow-origin: https://www.msn.com
cache-control: public, max-age=1209600
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1}
timing-allow-origin: *
akamai-grn: 0.958f655f.1725480776.1b93312d
vary: Origin
GET

https://assets.msn.com/staticsb/statics/latest/oneTrust/1.9/scripttemplates/202310.2.0/otBannerSdk.js

MicrosoftEdgeCP.exe

Remote address:

95.101.143.235:443

Request

GET /staticsb/statics/latest/oneTrust/1.9/scripttemplates/202310.2.0/otBannerSdk.js HTTP/2.0
host: assets.msn.com
accept: application/javascript, */*;q=0.8
referer: https://www.msn.com/spartan/dhp?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br
cookie: USRLOC=; MUID=337EFB27000363380CC6EF7001886258; _EDGE_V=1; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+04+2024+12%3A45%3A25+GMT%2B0000+(Coordinated+Universal+Time)&version=202310.2.0&browserGpcFlag=0&isIABGlobal=false

Response

HTTP/2.0 200

content-type: application/javascript
content-md5: lAfvoXufoJKI/4M+6xEcxw==
last-modified: Wed, 04 Sep 2024 12:14:11 GMT
etag: 0x8DCCCDB16054F72
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 708fcc1c-601e-00f6-13d5-fe2f51000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
content-encoding: gzip
date: Wed, 04 Sep 2024 20:12:56 GMT
content-length: 105160
alt-svc: h3=":443"; ma=86400
akamai-request-bc: [a=95.101.143.149,b=462631385,c=g,n=GB_EN_LONDON,o=20940]
server-timing: clientrtt; dur=47, clienttt; dur=0, origin; dur=0, cdntime; dur=0, wpo;dur=0,1s;dur=0
akamai-cache-status: Hit from child
akamai-server-ip: 95.101.143.149
akamai-request-id: 1b9331d9
cache-control: public, max-age=1209600
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1}
timing-allow-origin: *
akamai-grn: 0.958f655f.1725480776.1b9331d9
vary: Origin
GET

https://assets.msn.com/staticsb/statics/latest/oneTrust/1.9/scripttemplates/202310.2.0/otTCF.js

MicrosoftEdgeCP.exe

Remote address:

95.101.143.235:443

Request

GET /staticsb/statics/latest/oneTrust/1.9/scripttemplates/202310.2.0/otTCF.js HTTP/2.0
host: assets.msn.com
accept: application/javascript, */*;q=0.8
referer: https://www.msn.com/spartan/dhp?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br
cookie: USRLOC=; MUID=337EFB27000363380CC6EF7001886258; _EDGE_V=1; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+04+2024+12%3A45%3A25+GMT%2B0000+(Coordinated+Universal+Time)&version=202310.2.0&browserGpcFlag=0&isIABGlobal=false

Response

HTTP/2.0 200

content-type: application/javascript
content-md5: zMe9/U/sQ7tOLuJUcFr2+Q==
last-modified: Tue, 03 Sep 2024 20:42:28 GMT
etag: 0x8DCCC58ED39F5BD
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: fab4c007-e01e-00a5-4555-fe0c65000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
content-encoding: gzip
date: Wed, 04 Sep 2024 20:12:57 GMT
content-length: 11711
alt-svc: h3=":443"; ma=86400
akamai-request-bc: [a=95.101.143.149,b=462631470,c=g,n=GB_EN_LONDON,o=20940]
server-timing: clientrtt; dur=47, clienttt; dur=0, origin; dur=0, cdntime; dur=0, wpo;dur=0,1s;dur=0
akamai-cache-status: Hit from child
akamai-server-ip: 95.101.143.149
akamai-request-id: 1b93322e
cache-control: public, max-age=1209600
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1}
timing-allow-origin: *
akamai-grn: 0.958f655f.1725480777.1b93322e
vary: Origin
GET

https://assets.msn.com/staticsb/statics/latest/oneTrust/1.9/consent/55a804ab-e5c6-4b97-9319-86263d365d28/e51556d4-5848-4a4b-a5e2-bc98431e1bf7/en-gb.json

MicrosoftEdgeCP.exe

Remote address:

95.101.143.235:443

Request

GET /staticsb/statics/latest/oneTrust/1.9/consent/55a804ab-e5c6-4b97-9319-86263d365d28/e51556d4-5848-4a4b-a5e2-bc98431e1bf7/en-gb.json HTTP/2.0
host: assets.msn.com
accept: */*
origin: https://www.msn.com
referer: https://www.msn.com/spartan/dhp?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br

Response

HTTP/2.0 200

content-type: application/json
content-md5: Z3GVmx0mQbhR0PePNnG6TQ==
last-modified: Tue, 03 Sep 2024 20:42:10 GMT
etag: 0x8DCCC58E22CBF28
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: c2c0893f-501e-0024-5d7e-fe4ddd000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
content-encoding: gzip
date: Wed, 04 Sep 2024 20:12:57 GMT
content-length: 20340
alt-svc: h3=":443"; ma=86400
akamai-request-bc: [a=95.101.143.149,b=462631474,c=g,n=GB_EN_LONDON,o=20940]
server-timing: clientrtt; dur=47, clienttt; dur=0, origin; dur=0, cdntime; dur=0, wpo;dur=0,1s;dur=0
akamai-cache-status: Hit from child
akamai-server-ip: 95.101.143.149
akamai-request-id: 1b933232
access-control-allow-credentials: true
access-control-allow-origin: https://www.msn.com
cache-control: public, max-age=1209600
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1}
timing-allow-origin: *
akamai-grn: 0.958f655f.1725480777.1b933232
vary: Origin
GET

https://assets.msn.com/staticsb/statics/latest/oneTrust/1.9/consent/55a804ab-e5c6-4b97-9319-86263d365d28/iab2V2Data.json

MicrosoftEdgeCP.exe

Remote address:

95.101.143.235:443

Request

GET /staticsb/statics/latest/oneTrust/1.9/consent/55a804ab-e5c6-4b97-9319-86263d365d28/iab2V2Data.json HTTP/2.0
host: assets.msn.com
accept: */*
origin: https://www.msn.com
referer: https://www.msn.com/spartan/dhp?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br

Response

HTTP/2.0 200

content-type: application/json
content-md5: iB7GIl1dfVgN/rIFCQoYvg==
last-modified: Wed, 04 Sep 2024 12:14:07 GMT
etag: 0x8DCCCDB131D0DE2
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: f35e6ef9-b01e-00c4-7cd4-fe8756000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
content-encoding: gzip
date: Wed, 04 Sep 2024 20:12:57 GMT
content-length: 67471
alt-svc: h3=":443"; ma=86400
akamai-request-bc: [a=95.101.143.149,b=462631475,c=g,n=GB_EN_LONDON,o=20940]
server-timing: clientrtt; dur=47, clienttt; dur=0, origin; dur=0, cdntime; dur=0, wpo;dur=0,1s;dur=0
akamai-cache-status: Hit from child
akamai-server-ip: 95.101.143.149
akamai-request-id: 1b933233
access-control-allow-credentials: true
access-control-allow-origin: https://www.msn.com
cache-control: public, max-age=1209600
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1}
timing-allow-origin: *
akamai-grn: 0.958f655f.1725480777.1b933233
vary: Origin
DNS

235.143.101.95.in-addr.arpa

Remote address:

8.8.8.8:53

Request

235.143.101.95.in-addr.arpa

IN PTR

Response

235.143.101.95.in-addr.arpa

IN PTR

a95-101-143-235deploystaticakamaitechnologiescom
DNS

81.144.22.2.in-addr.arpa

Remote address:

8.8.8.8:53

Request

81.144.22.2.in-addr.arpa

IN PTR

Response

81.144.22.2.in-addr.arpa

IN PTR

a2-22-144-81deploystaticakamaitechnologiescom
GET

https://www.msn.com/bundles/v1/edge/latest/manifest.appcache?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default

MicrosoftEdgeCP.exe

Remote address:

204.79.197.203:443

Request

GET /bundles/v1/edge/latest/manifest.appcache?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default HTTP/2.0
host: www.msn.com
accept: */*
referer: https://www.msn.com/spartan/dhp?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
origin: https://www.msn.com
accept-encoding: gzip, deflate, br
cookie: USRLOC=; MUID=337EFB27000363380CC6EF7001886258; _EDGE_V=1; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+04+2024+12%3A45%3A25+GMT%2B0000+(Coordinated+Universal+Time)&version=202310.2.0&browserGpcFlag=0&isIABGlobal=false; sptmarket=en-US|US|gb|en-gb|en-gb|en||RefA=F414AC9A7B1B4FCE800495416815F0C2.RefC=2024-04-04T12:45:25Z; MUIDB=337EFB27000363380CC6EF7001886258

Response

HTTP/2.0 200

cache-control: public, no-transform, max-age=31535892
content-length: 27593
content-type: application/javascript
content-encoding: br
content-md5: 1RRmuxKE8GUY/7LTdiUWtQ==
last-modified: Mon, 26 Jul 2021 22:19:35 GMT
etag: 0x8D95083735E33E4
vary: Origin
x-cache: TCP_HIT
x-ms-request-id: ebe2136e-a01e-00d8-2aba-edd536000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
akamai-request-bc: [a=2.16.128.68,b=1009762442,c=g,n=GB_EN_LONDON,o=20940],[c=p,n=GB_EN_LONDON,o=20940]
server-timing: clientrtt; dur=3, clienttt; dur=6, origin; dur=0, cdntime; dur=6, wpo;dur=0,1s;dur=0
akamai-cache-status: Miss from child, Hit from parent
akamai-server-ip: 2.16.128.68
akamai-request-id: 3c2fc08a
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1}
timing-allow-origin: *
akamai-grn: 0.44801002.1724843346.3c2fc08a
x-cid: 7
x-ccc: GB
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 09397E7179214C2DB13CC92F47BD8018 Ref B: LON04EDGE1221 Ref C: 2024-09-04T20:12:57Z
date: Wed, 04 Sep 2024 20:12:56 GMT
GET

https://www.msn.com/bundles/v1/edge/latest/web-worker.440858f9fe4973b6d967.js

MicrosoftEdgeCP.exe

Remote address:

204.79.197.203:443

Request

GET /bundles/v1/edge/latest/web-worker.440858f9fe4973b6d967.js HTTP/2.0
host: www.msn.com
accept: application/javascript, */*;q=0.8
referer: https://www.msn.com/spartan/dhp?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br
cookie: USRLOC=; MUID=337EFB27000363380CC6EF7001886258; _EDGE_V=1; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+04+2024+12%3A45%3A25+GMT%2B0000+(Coordinated+Universal+Time)&version=202310.2.0&browserGpcFlag=0&isIABGlobal=false; sptmarket=en-US|US|gb|en-gb|en-gb|en||RefA=F414AC9A7B1B4FCE800495416815F0C2.RefC=2024-04-04T12:45:25Z; MUIDB=337EFB27000363380CC6EF7001886258

Response

HTTP/2.0 200

cache-control: no-cache, no-store, no-transform
content-length: 70
content-type: text/cache-manifest
content-encoding: gzip
content-md5: Rqmsx87pIMK1GFYNCRhAAQ==
last-modified: Mon, 26 Jul 2021 22:20:05 GMT
etag: 0x8D9508385701DBF
vary: Origin
x-ms-request-id: bbfcd959-c01e-0107-2093-58e46c000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
akamai-request-bc: [a=2.16.128.47,b=551478832,c=g,n=GB_EN_LONDON,o=20940]
server-timing: clientrtt; dur=1, clienttt; dur=0, origin; dur=0, cdntime; dur=0, wpo;dur=0,1s;dur=0
akamai-cache-status: Hit from child
akamai-server-ip: 2.16.128.47
akamai-request-id: 20dee630
access-control-allow-credentials: true
access-control-allow-origin: https://www.msn.com
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1}
timing-allow-origin: *
akamai-grn: 0.2f801002.1725480777.20dee630
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 126B305FFEFA48DE8A43C101869B3073 Ref B: LON04EDGE1221 Ref C: 2024-09-04T20:12:57Z
date: Wed, 04 Sep 2024 20:12:56 GMT
DNS

browser.events.data.msn.com

MicrosoftEdgeCP.exe

Remote address:

8.8.8.8:53

Request

browser.events.data.msn.com

IN A

Response

browser.events.data.msn.com

IN CNAME

global.asimov.events.data.trafficmanager.net

global.asimov.events.data.trafficmanager.net

IN CNAME

onedscolprdcus05.centralus.cloudapp.azure.com

onedscolprdcus05.centralus.cloudapp.azure.com

IN A

20.44.10.123
GET

https://www.msn.com/favicon.ico

MicrosoftEdge.exe

Remote address:

204.79.197.203:443

Request

GET /favicon.ico HTTP/2.0
host: www.msn.com
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
dnt: 1

Response

HTTP/2.0 200

cache-control: public, max-age=604800
content-length: 781
content-type: image/x-icon
content-encoding: gzip
content-md5: hMyXfQ6xSBZkgbAdhBjjdQ==
last-modified: Wed, 04 Sep 2024 12:13:32 GMT
etag: 0x8DCCCDAFEA92162
vary: Origin
x-ms-request-id: 4e3c9c91-701e-00e8-44db-fe22eb000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
akamai-request-bc: [a=2.16.198.8,b=136175986,c=g,n=GB_EN_LONDON,o=20940]
server-timing: clientrtt; dur=1, clienttt; dur=0, origin; dur=0, cdntime; dur=0, wpo;dur=0,1s;dur=0
akamai-cache-status: Hit from child
akamai-server-ip: 2.16.198.8
akamai-request-id: 81de172
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1}
timing-allow-origin: *
akamai-grn: 0.08c61002.1725480777.81de172
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 9B0F926CADDA49848AC79F3DAFC54E44 Ref B: LON04EDGE1209 Ref C: 2024-09-04T20:12:57Z
date: Wed, 04 Sep 2024 20:12:57 GMT
POST

https://browser.events.data.msn.com/OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-2.2.2&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1712234726000&w=0&anoncknm=app_anon

MicrosoftEdgeCP.exe

Remote address:

20.44.10.123:443

Request

POST /OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-2.2.2&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1712234726000&w=0&anoncknm=app_anon HTTP/2.0
host: browser.events.data.msn.com
origin: https://www.msn.com
referer: https://www.msn.com/spartan/dhp?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
content-type: text/plain;charset=UTF-8
accept-language: en-US
accept: */*
accept-encoding: gzip, deflate, br
content-length: 3142
cache-control: no-cache
cookie: USRLOC=; MUID=337EFB27000363380CC6EF7001886258; _EDGE_V=1; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+04+2024+12%3A45%3A25+GMT%2B0000+(Coordinated+Universal+Time)&version=202310.2.0&browserGpcFlag=0&isIABGlobal=false

Response

HTTP/2.0 200

content-length: 153
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
set-cookie: MC1=GUID=5ccb507c22e94851833b6957dc420b42&HASH=5ccb&LV=202409&V=4&LU=1725480777425; Domain=.microsoft.com; Expires=Thu, 04 Sep 2025 20:12:57 GMT; Path=/;Secure; SameSite=None
set-cookie: MS0=6c3954861345411ba2a3df8eaab079f3; Domain=.microsoft.com; Expires=Wed, 04 Sep 2024 20:42:57 GMT; Path=/;Secure; SameSite=None
time-delta-millis: 13246051425
access-control-allow-headers: P3P,Set-Cookie,time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://www.msn.com
access-control-expose-headers: time-delta-millis
date: Wed, 04 Sep 2024 20:12:57 GMT
POST

https://browser.events.data.msn.com/OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-2.2.2&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1712234726000&w=0&anoncknm=app_anon

MicrosoftEdgeCP.exe

Remote address:

20.44.10.123:443

Request

POST /OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-2.2.2&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1712234726000&w=0&anoncknm=app_anon HTTP/2.0
host: browser.events.data.msn.com
origin: https://www.msn.com
referer: https://www.msn.com/spartan/dhp?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
content-type: text/plain;charset=UTF-8
accept-language: en-US
accept: */*
accept-encoding: gzip, deflate, br
content-length: 3751
cache-control: no-cache
cookie: USRLOC=; MUID=337EFB27000363380CC6EF7001886258; _EDGE_V=1; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+04+2024+12%3A45%3A25+GMT%2B0000+(Coordinated+Universal+Time)&version=202310.2.0&browserGpcFlag=0&isIABGlobal=false

Response

HTTP/2.0 200

content-length: 153
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
set-cookie: MC1=GUID=97d0aeee42b64ee48f4921fcf6054c51&HASH=97d0&LV=202409&V=4&LU=1725480777425; Domain=.microsoft.com; Expires=Thu, 04 Sep 2025 20:12:57 GMT; Path=/;Secure; SameSite=None
set-cookie: MS0=13c886b5a5ca487785a8aa26a935fa33; Domain=.microsoft.com; Expires=Wed, 04 Sep 2024 20:42:57 GMT; Path=/;Secure; SameSite=None
time-delta-millis: 13246051425
access-control-allow-headers: P3P,Set-Cookie,time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://www.msn.com
access-control-expose-headers: time-delta-millis
date: Wed, 04 Sep 2024 20:12:57 GMT
POST

https://browser.events.data.msn.com/OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-2.2.2&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1712234726000&w=0&anoncknm=app_anon

MicrosoftEdgeCP.exe

Remote address:

20.44.10.123:443

Request

POST /OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-2.2.2&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1712234726000&w=0&anoncknm=app_anon HTTP/2.0
host: browser.events.data.msn.com
origin: https://www.msn.com
referer: https://www.msn.com/spartan/dhp?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
content-type: text/plain;charset=UTF-8
accept-language: en-US
accept: */*
accept-encoding: gzip, deflate, br
content-length: 6996
cache-control: no-cache
cookie: USRLOC=; MUID=337EFB27000363380CC6EF7001886258; _EDGE_V=1; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Sep+04+2024+20%3A12%3A56+GMT%2B0000+(Coordinated+Universal+Time)&version=202310.2.0&browserGpcFlag=0&isIABGlobal=false

Response

HTTP/2.0 200

content-length: 153
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
set-cookie: MC1=GUID=33d5b6c5612f4f3a97fbf2c8fc2ca9bf&HASH=33d5&LV=202409&V=4&LU=1725480777425; Domain=.microsoft.com; Expires=Thu, 04 Sep 2025 20:12:57 GMT; Path=/;Secure; SameSite=None
set-cookie: MS0=98d354ddbfa04b2c81d84a3ffa44ce9d; Domain=.microsoft.com; Expires=Wed, 04 Sep 2024 20:42:57 GMT; Path=/;Secure; SameSite=None
time-delta-millis: 13246051425
access-control-allow-headers: P3P,Set-Cookie,time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://www.msn.com
access-control-expose-headers: time-delta-millis
date: Wed, 04 Sep 2024 20:12:57 GMT
DNS

123.10.44.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

123.10.44.20.in-addr.arpa

IN PTR

Response
GET

https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US

MicrosoftEdgeCP.exe

Remote address:

88.221.135.56:443

Request

GET /AS/API/IEOneBox/V2/Init?setlang=en-US HTTP/2.0
host: www.bing.com
accept: text/html, application/xhtml+xml, image/jxr, */*
accept-language: en-US
x-device-enableregulatorypsm: 0
x-device-enablecpsm: 0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br

Response

HTTP/2.0 200

content-length: 16728
content-type: text/html; charset=utf-8
cache-control: private
content-encoding: gzip
vary: Accept-Encoding
x-eventid: 66d8bf4b28204c9ca5daa92e19107bfb
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
x-ua-compatible: IE=edge
date: Wed, 04 Sep 2024 20:12:59 GMT
set-cookie: MUID=180B088E2867622E06E71C7E29106371; domain=.bing.com; expires=Mon, 29-Sep-2025 20:12:59 GMT; path=/; secure; SameSite=None
set-cookie: MUIDB=180B088E2867622E06E71C7E29106371; expires=Mon, 29-Sep-2025 20:12:59 GMT; path=/; HttpOnly
set-cookie: _EDGE_S=F=1&SID=1B367CA5FB6569B120EB6855FA126830; domain=.bing.com; path=/; HttpOnly
set-cookie: _EDGE_V=1; domain=.bing.com; expires=Mon, 29-Sep-2025 20:12:59 GMT; path=/; HttpOnly
set-cookie: SRCHD=AF=NOFORM; domain=.bing.com; expires=Mon, 29-Sep-2025 20:12:59 GMT; path=/
set-cookie: SRCHUID=V=2&GUID=C290ED31DE59409E973A37280C3DCF5A&dmnchg=1; domain=.bing.com; expires=Mon, 29-Sep-2025 20:12:59 GMT; path=/
set-cookie: SRCHUSR=DOB=20240904; domain=.bing.com; expires=Mon, 29-Sep-2025 20:12:59 GMT; path=/
set-cookie: SRCHHPGUSR=SRCHLANG=en; domain=.bing.com; expires=Mon, 29-Sep-2025 20:12:59 GMT; path=/
set-cookie: _SS=SID=1B367CA5FB6569B120EB6855FA126830; domain=.bing.com; path=/
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.37367a5c.1725480779.4826b9d
GET

https://www.bing.com/rb/19/cir3,ortl,cc,nc/H7yNdbJxRRAcp5Cd9wD9aQLYG6s.css?bu=C6QJlgOrBIAK5QjPCN4GXV3JBF0

MicrosoftEdgeCP.exe

Remote address:

88.221.135.56:443

Request

GET /rb/19/cir3,ortl,cc,nc/H7yNdbJxRRAcp5Cd9wD9aQLYG6s.css?bu=C6QJlgOrBIAK5QjPCN4GXV3JBF0 HTTP/2.0
host: www.bing.com
accept: text/css, */*
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br
cookie: MUID=180B088E2867622E06E71C7E29106371; _EDGE_S=F=1&SID=1B367CA5FB6569B120EB6855FA126830; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C290ED31DE59409E973A37280C3DCF5A&dmnchg=1; SRCHUSR=DOB=20240904; SRCHHPGUSR=SRCHLANG=en; _SS=SID=1B367CA5FB6569B120EB6855FA126830; MUIDB=180B088E2867622E06E71C7E29106371

Response

HTTP/2.0 200

content-length: 4898
content-type: text/css; charset=utf-8
access-control-allow-headers: *
access-control-allow-origin: *
cache-control: public, max-age=432000
content-encoding: br
last-modified: Mon, 27 Sep 2010 21:57:23 GMT
vary: Accept-Encoding
x-eventid: 66d201ad2b584229a312a971141c01b2
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.75}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingrms"}]}
date: Wed, 04 Sep 2024 20:12:59 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.37367a5c.1725480779.4826c65
GET

https://www.bing.com/rb/19/cir3,ortl,cc,nc/2pcIVTIB2WwRV2SiUfazcACdxxA.css?bu=BsMCSK0CUl3KAg

MicrosoftEdgeCP.exe

Remote address:

88.221.135.56:443

Request

GET /rb/19/cir3,ortl,cc,nc/2pcIVTIB2WwRV2SiUfazcACdxxA.css?bu=BsMCSK0CUl3KAg HTTP/2.0
host: www.bing.com
accept: text/css, */*
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br
cookie: MUID=180B088E2867622E06E71C7E29106371; _EDGE_S=F=1&SID=1B367CA5FB6569B120EB6855FA126830; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C290ED31DE59409E973A37280C3DCF5A&dmnchg=1; SRCHUSR=DOB=20240904; SRCHHPGUSR=SRCHLANG=en; _SS=SID=1B367CA5FB6569B120EB6855FA126830; MUIDB=180B088E2867622E06E71C7E29106371

Response

HTTP/2.0 200

content-length: 1247
content-type: text/css; charset=utf-8
access-control-allow-headers: *
access-control-allow-origin: *
cache-control: public, max-age=432000
content-encoding: br
last-modified: Sat, 01 Jan 2011 03:28:38 GMT
vary: Accept-Encoding
x-eventid: 66d70fd9aa264756a459329bb1660c17
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.75}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingrms"}]}
date: Wed, 04 Sep 2024 20:12:59 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.37367a5c.1725480779.4826cca
GET

https://www.bing.com/rb/3D/ortl,cc,nc/4-xJy3tX6bM2BGl5zKioiEcQ1TU.css?bu=A4gCjAKPAg

MicrosoftEdgeCP.exe

Remote address:

88.221.135.56:443

Request

GET /rb/3D/ortl,cc,nc/4-xJy3tX6bM2BGl5zKioiEcQ1TU.css?bu=A4gCjAKPAg HTTP/2.0
host: www.bing.com
accept: text/css, */*
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br
cookie: MUID=180B088E2867622E06E71C7E29106371; _EDGE_S=F=1&SID=1B367CA5FB6569B120EB6855FA126830; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C290ED31DE59409E973A37280C3DCF5A&dmnchg=1; SRCHUSR=DOB=20240904; SRCHHPGUSR=SRCHLANG=en; _SS=SID=1B367CA5FB6569B120EB6855FA126830; MUIDB=180B088E2867622E06E71C7E29106371

Response

HTTP/2.0 200

content-length: 3513
content-type: text/css; charset=utf-8
access-control-allow-headers: *
access-control-allow-origin: *
cache-control: public, max-age=432000
content-encoding: br
last-modified: Thu, 28 Oct 2010 04:13:30 GMT
vary: Accept-Encoding
x-eventid: 66d73d8bb0844ed78568eb4840529674
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.75}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingrms"}]}
date: Wed, 04 Sep 2024 20:12:59 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.37367a5c.1725480779.4826cd2
GET

https://www.bing.com/rb/4M/jnc,nj/TPP8n_y3I3wPSrrWXVsbMe6iTAc.js?bu=D7ws_Cr8AY0rkSuTK5UruivELI0sqyqBEqUsqyjsKw

MicrosoftEdgeCP.exe

Remote address:

88.221.135.56:443

Request

GET /rb/4M/jnc,nj/TPP8n_y3I3wPSrrWXVsbMe6iTAc.js?bu=D7ws_Cr8AY0rkSuTK5UruivELI0sqyqBEqUsqyjsKw HTTP/2.0
host: www.bing.com
accept: application/javascript, */*;q=0.8
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
origin: https://www.bing.com
accept-encoding: gzip, deflate, br

Response

HTTP/2.0 200

content-length: 18362
content-type: application/x-javascript; charset=utf-8
access-control-allow-headers: *
access-control-allow-origin: *
cache-control: public, max-age=432000
content-encoding: br
last-modified: Sat, 31 Aug 2024 13:05:34 GMT
vary: Accept-Encoding
x-eventid: 66d387ad34524d6284707fcfdf06cc76
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.75}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingrms"}]}
date: Wed, 04 Sep 2024 20:12:59 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.37367a5c.1725480779.4826cd3
GET

https://www.bing.com/rp/lZfFRIZsGLf3poBW6xAz2KFILkI.gz.js

MicrosoftEdgeCP.exe

Remote address:

88.221.135.56:443

Request

GET /rp/lZfFRIZsGLf3poBW6xAz2KFILkI.gz.js HTTP/2.0
host: www.bing.com
accept: application/javascript, */*;q=0.8
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
origin: https://www.bing.com
accept-encoding: gzip, deflate, br

Response

HTTP/2.0 200

cache-control: public, max-age=432000, no-transform, immutable
content-length: 3140
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: az+rhZn9p058dpqAVhuB8Q==
last-modified: Tue, 16 Jan 2024 20:09:16 GMT
etag: 0x8DC16CF040314FA
x-ms-request-id: 505c06ae-f01e-0091-1474-fd611e000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
akamai-amd-bc-debug: [a=95.101.236.169,b=1434459495,c=c,d=1725432923,h=200,k=1,l=0,n=GB_EN_LONDON,o=20940,r=1,p=3140]
date: Wed, 04 Sep 2024 20:12:59 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.37367a5c.1725480779.4826cd4
GET

https://www.bing.com/rp/6wzJBpbyuAoCS5bfkKiW0Aw2R6o.gz.js

MicrosoftEdgeCP.exe

Remote address:

88.221.135.56:443

Request

GET /rp/6wzJBpbyuAoCS5bfkKiW0Aw2R6o.gz.js HTTP/2.0
host: www.bing.com
accept: application/javascript, */*;q=0.8
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
origin: https://www.bing.com
accept-encoding: gzip, deflate, br

Response

HTTP/2.0 200

last-modified: Mon, 01 May 2023 19:02:49 GMT
etag: 0x8DB4A76A84F60BD
cache-control: public, no-transform, max-age=322884
expires: Mon, 02 Sep 2024 14:47:25 GMT
akamai-grn: 0.521a1202.1724965561.2cc8effe
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-length: 2740
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: Iiqeb0LJKqyR2JzDblFzqg==
x-ms-request-id: 94f382c0-301e-0045-6c5f-f3d14f000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
akamai-amd-bc-debug: [a=2.17.209.44,b=86127226,c=c,d=1725433015,h=200,k=2,l=0,n=GB_EN_LONDON,o=20940,r=3,p=2740]
date: Wed, 04 Sep 2024 20:12:59 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.37367a5c.1725480779.4826cd5
GET

https://www.bing.com/rp/DicRs1X5x7sMwnmwcxBuO2kpGeI.gz.js

MicrosoftEdgeCP.exe

Remote address:

88.221.135.56:443

Request

GET /rp/DicRs1X5x7sMwnmwcxBuO2kpGeI.gz.js HTTP/2.0
host: www.bing.com
accept: application/javascript, */*;q=0.8
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
origin: https://www.bing.com
accept-encoding: gzip, deflate, br

Response

HTTP/2.0 200

last-modified: Mon, 01 May 2023 19:03:01 GMT
etag: 0x8DB4A76AF96D917
cache-control: public, no-transform, max-age=431784
expires: Fri, 06 Sep 2024 19:13:28 GMT
akamai-grn: 0.bf777b5c.1725218224.243ec25e
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-length: 632
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: vN/bJ41atswBaXroy1h7EA==
x-ms-request-id: aaa455e0-101e-000f-56e9-e972c0000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
vary: Accept-Encoding
date: Wed, 04 Sep 2024 20:12:59 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.37367a5c.1725480779.4826cd7
GET

https://www.bing.com/rp/L3qgZ2pA6whKnPPHkQnZ2_d8WVo.gz.js

MicrosoftEdgeCP.exe

Remote address:

88.221.135.56:443

Request

GET /rp/L3qgZ2pA6whKnPPHkQnZ2_d8WVo.gz.js HTTP/2.0
host: www.bing.com
accept: application/javascript, */*;q=0.8
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
origin: https://www.bing.com
accept-encoding: gzip, deflate, br

Response

HTTP/2.0 200

last-modified: Mon, 01 May 2023 19:03:05 GMT
etag: 0x8DB4A76B1D1C4D5
cache-control: public, no-transform, max-age=43184
expires: Thu, 05 Sep 2024 06:15:34 GMT
akamai-grn: 0.4c1a1202.1725473750.169559b4
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-length: 7056
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: HULyKB2vmYoLN6zt1rirNQ==
x-ms-request-id: 57b2d03d-f01e-0007-5cb9-b768cf000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
vary: Accept-Encoding
date: Wed, 04 Sep 2024 20:12:59 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.37367a5c.1725480779.4826cd8
GET

https://www.bing.com/rp/IOwhK4uDW4Sh2EVXk1BBw5OkHPY.gz.js

MicrosoftEdgeCP.exe

Remote address:

88.221.135.56:443

Request

GET /rp/IOwhK4uDW4Sh2EVXk1BBw5OkHPY.gz.js HTTP/2.0
host: www.bing.com
accept: application/javascript, */*;q=0.8
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
origin: https://www.bing.com
accept-encoding: gzip, deflate, br

Response

HTTP/2.0 200

last-modified: Mon, 01 May 2023 19:03:28 GMT
etag: 0x8DB4A76BFB74FD8
cache-control: public, no-transform, max-age=427519
expires: Fri, 06 Sep 2024 00:30:24 GMT
akamai-grn: 0.60ba1302.1725155105.575da8b5
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-length: 56177
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: nfKKYcA5I3caM/oIeNO/Fg==
x-ms-request-id: ae25a407-801e-0022-28c6-f7c1b3000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
vary: Accept-Encoding
date: Wed, 04 Sep 2024 20:12:59 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.37367a5c.1725480779.4826cd9
GET

https://www.bing.com/rp/dcb-PwRbjINh_Wg-9pEP8tD_qO4.gz.js

MicrosoftEdgeCP.exe

Remote address:

88.221.135.56:443

Request

GET /rp/dcb-PwRbjINh_Wg-9pEP8tD_qO4.gz.js HTTP/2.0
host: www.bing.com
accept: application/javascript, */*;q=0.8
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
origin: https://www.bing.com
accept-encoding: gzip, deflate, br

Response

HTTP/2.0 200

cache-control: public, max-age=432000, no-transform, immutable
content-length: 30744
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: ckQMIJkxhKmvUzx6lypM+w==
last-modified: Mon, 01 May 2023 19:03:00 GMT
etag: 0x8DB4A76AEAF78B0
x-ms-request-id: 58bf1de9-801e-0067-0f8b-26f0ad000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
akamai-amd-bc-debug: [a=2.16.128.76,b=438281232,c=c,d=1725379040,h=200,k=1,l=0,n=GB_EN_LONDON,o=20940,r=1,p=30744]
vary: Accept-Encoding
date: Wed, 04 Sep 2024 20:12:59 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.37367a5c.1725480779.4826cd6
GET

https://www.bing.com/rp/7DRnJ-ywpuG7tVaukb2LDibhBUg.gz.js

MicrosoftEdgeCP.exe

Remote address:

88.221.135.56:443

Request

GET /rp/7DRnJ-ywpuG7tVaukb2LDibhBUg.gz.js HTTP/2.0
host: www.bing.com
accept: application/javascript, */*;q=0.8
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
origin: https://www.bing.com
accept-encoding: gzip, deflate, br

Response

HTTP/2.0 200

last-modified: Mon, 01 May 2023 19:02:52 GMT
etag: 0x8DB4A76AA10009F
cache-control: public, no-transform, max-age=431913
expires: Sun, 08 Sep 2024 17:53:26 GMT
akamai-grn: 0.a1777b5c.1725386093.838f9eb
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-length: 13433
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: 0vIIx74xnsdqiNqpWLtnnQ==
x-ms-request-id: 10bf0ac5-401e-0002-043a-bcba14000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
vary: Accept-Encoding
date: Wed, 04 Sep 2024 20:12:59 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.37367a5c.1725480779.4826cda
GET

https://www.bing.com/rp/t4xaeuTBmu-Lp_KEbPyZVrfX8yw.gz.js

MicrosoftEdgeCP.exe

Remote address:

88.221.135.56:443

Request

GET /rp/t4xaeuTBmu-Lp_KEbPyZVrfX8yw.gz.js HTTP/2.0
host: www.bing.com
accept: application/javascript, */*;q=0.8
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
origin: https://www.bing.com
accept-encoding: gzip, deflate, br

Response

HTTP/2.0 200

last-modified: Mon, 01 May 2023 19:03:32 GMT
etag: 0x8DB4A76C1F875F8
cache-control: public, no-transform, max-age=427700
expires: Thu, 05 Sep 2024 08:12:49 GMT
akamai-grn: 0.a1777b5c.1725096269.9da12da
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-length: 12040
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: yGKm/4jn78W7vO8Nkej9uA==
x-ms-request-id: 57655420-a01e-001a-511a-e86573000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
vary: Accept-Encoding
date: Wed, 04 Sep 2024 20:12:59 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.37367a5c.1725480779.4826cdb
GET

https://www.bing.com/rp/ss3d0sJoMnwEPabtwPxYd3-17LU.gz.js

MicrosoftEdgeCP.exe

Remote address:

88.221.135.56:443

Request

GET /rp/ss3d0sJoMnwEPabtwPxYd3-17LU.gz.js HTTP/2.0
host: www.bing.com
accept: application/javascript, */*;q=0.8
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
origin: https://www.bing.com
accept-encoding: gzip, deflate, br

Response

HTTP/2.0 200

last-modified: Mon, 01 May 2023 19:03:33 GMT
etag: 0x8DB4A76C293B96D
cache-control: public, no-transform, max-age=431898
expires: Sat, 07 Sep 2024 02:45:43 GMT
akamai-grn: 0.a1777b5c.1725245245.19a4666b
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-length: 3782
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: KDfeRVwk5HSPaHRNeOVNSA==
x-ms-request-id: 70f9c7ae-a01e-0025-78ee-e8add0000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
vary: Accept-Encoding
date: Wed, 04 Sep 2024 20:12:59 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.37367a5c.1725480779.4826cdc
GET

https://www.bing.com/manifest/IEOneBox_V2.appcache?setlang=en-US

MicrosoftEdgeCP.exe

Remote address:

88.221.135.56:443

Request

GET /manifest/IEOneBox_V2.appcache?setlang=en-US HTTP/2.0
host: www.bing.com
accept: */*
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
origin: https://www.bing.com
accept-encoding: gzip, deflate, br
cookie: MUID=180B088E2867622E06E71C7E29106371; _EDGE_S=F=1&SID=1B367CA5FB6569B120EB6855FA126830; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C290ED31DE59409E973A37280C3DCF5A&dmnchg=1; SRCHUSR=DOB=20240904; SRCHHPGUSR=SRCHLANG=en; _SS=SID=1B367CA5FB6569B120EB6855FA126830&CPID=1725480779027&AC=0&CPH=a9b5d7f2; MUIDB=180B088E2867622E06E71C7E29106371

Response

HTTP/2.0 200

cache-control: public, max-age=432000, no-transform, immutable
content-length: 197
content-type: text/javascript; charset=utf-8
content-encoding: gzip
content-md5: vDXcSV+KdbhtCq4Z6ChaXg==
last-modified: Mon, 01 May 2023 19:03:17 GMT
etag: 0x8DB4A76B9220C70
x-ms-request-id: 31d59ace-801e-0050-641d-b0c6fc000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
akamai-amd-bc-debug: [a=2.16.128.76,b=251651361,c=c,d=1725186478,h=200,k=1,l=0,n=GB_EN_LONDON,o=20940,r=1,p=197]
date: Wed, 04 Sep 2024 20:13:00 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.37367a5c.1725480780.4826e57
GET

https://www.bing.com/rp/WAAHGo-kP0xCDM16LGm9-alzHb8.gz.js

MicrosoftEdgeCP.exe

Remote address:

88.221.135.56:443

Request

GET /rp/WAAHGo-kP0xCDM16LGm9-alzHb8.gz.js HTTP/2.0
host: www.bing.com
accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br
cookie: MUID=180B088E2867622E06E71C7E29106371; _EDGE_S=F=1&SID=1B367CA5FB6569B120EB6855FA126830; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C290ED31DE59409E973A37280C3DCF5A&dmnchg=1; SRCHUSR=DOB=20240904; SRCHHPGUSR=SRCHLANG=en; _SS=SID=1B367CA5FB6569B120EB6855FA126830&CPID=1725480779027&AC=0&CPH=a9b5d7f2; MUIDB=180B088E2867622E06E71C7E29106371

Response

HTTP/2.0 200

content-length: 541
content-type: text/cache-manifest; charset=utf-8
cache-control: private
content-encoding: gzip
vary: Accept-Encoding
x-eventid: 66d8bf4ca55a47b1a44b899c7ad45ff3
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
date: Wed, 04 Sep 2024 20:13:00 GMT
set-cookie: SRCHHPGUSR=SRCHLANG=en&IPMH=caefd23f&IPMID=1725480779027; domain=.bing.com; expires=Mon, 29-Sep-2025 20:13:00 GMT; path=/
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.37367a5c.1725480780.4826e4e
POST

https://www.bing.com/AS/IEOneBox/xls.aspx

MicrosoftEdgeCP.exe

Remote address:

88.221.135.56:443

Request

POST /AS/IEOneBox/xls.aspx HTTP/2.0
host: www.bing.com
accept: */*
origin: https://www.bing.com
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
content-type: text/xml
x-msedge-externalexptype: JointCoord
x-msedge-externalexp: null
accept-encoding: gzip, deflate, br
content-length: 437
cache-control: no-cache
cookie: MUID=180B088E2867622E06E71C7E29106371; _EDGE_S=F=1&SID=1B367CA5FB6569B120EB6855FA126830; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C290ED31DE59409E973A37280C3DCF5A&dmnchg=1; SRCHUSR=DOB=20240904; SRCHHPGUSR=SRCHLANG=en&IPMH=caefd23f&IPMID=1725480779027; _SS=SID=1B367CA5FB6569B120EB6855FA126830&CPID=1725480779027&AC=0&CPH=a9b5d7f2; MUIDB=180B088E2867622E06E71C7E29106371

Response

HTTP/2.0 404

content-length: 46
content-type: text/html; charset=utf-8
cache-control: private
content-encoding: gzip
vary: Accept-Encoding
x-eventid: 66d8bf4cc33948a49a683cdc7821f5a2
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
x-error-page: 404-custom
date: Wed, 04 Sep 2024 20:13:00 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.37367a5c.1725480780.4826efb
GET

https://www.bing.com/AS/API/IEOneBox/V2/Suggestions?qry=ne&cc=US&setlang=en-US&cp=2&cvid=359417938464406d9e11258e4782bb08&ig=a71b3104d0bf42a7bdc529cdb8b3cf4c

MicrosoftEdgeCP.exe

Remote address:

88.221.135.56:443

Request

GET /AS/API/IEOneBox/V2/Suggestions?qry=ne&cc=US&setlang=en-US&cp=2&cvid=359417938464406d9e11258e4782bb08&ig=a71b3104d0bf42a7bdc529cdb8b3cf4c HTTP/2.0
host: www.bing.com
accept: */*
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
x-device-isoptin: false
x-search-cortanaavailablecapabilities: SpeechLanguage
x-autosuggest-contentwidth: 296
x-search-rpstoken: NA
authorization: Bearer NA
x-bm-clientfeatures: SmallerAnswers
accept-encoding: gzip, deflate, br
cookie: MUID=180B088E2867622E06E71C7E29106371; _EDGE_S=F=1&SID=1B367CA5FB6569B120EB6855FA126830; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C290ED31DE59409E973A37280C3DCF5A&dmnchg=1; SRCHUSR=DOB=20240904; SRCHHPGUSR=SRCHLANG=en&IPMH=caefd23f&IPMID=1725480779027; _SS=SID=1B367CA5FB6569B120EB6855FA126830&CPID=1725480779027&AC=0&CPH=a9b5d7f2; MUIDB=180B088E2867622E06E71C7E29106371

Response

HTTP/2.0 200

content-length: 843
content-type: application/json; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
expires: -1
pragma: no-cache
vary: Accept-Encoding
x-eventid: 66d8bf4c03944ac59e12dad169b9cbed
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
date: Wed, 04 Sep 2024 20:13:00 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.37367a5c.1725480780.4826f17
GET

https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US

MicrosoftEdgeCP.exe

Remote address:

88.221.135.56:443

Request

GET /AS/API/IEOneBox/V2/Init?setlang=en-US HTTP/2.0
host: www.bing.com
accept: */*
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br
cookie: MUID=180B088E2867622E06E71C7E29106371; _EDGE_S=F=1&SID=1B367CA5FB6569B120EB6855FA126830; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C290ED31DE59409E973A37280C3DCF5A&dmnchg=1; SRCHUSR=DOB=20240904; SRCHHPGUSR=SRCHLANG=en&IPMH=caefd23f&IPMID=1725480779027; _SS=SID=1B367CA5FB6569B120EB6855FA126830&CPID=1725480779027&AC=0&CPH=a9b5d7f2; MUIDB=180B088E2867622E06E71C7E29106371

Response

HTTP/2.0 404

content-length: 16688
content-type: text/html; charset=utf-8
cache-control: private
content-encoding: gzip
vary: Accept-Encoding
x-eventid: 66d8bf4c25004d73a68e9d3e9a1cf171
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
x-ua-compatible: IE=edge
date: Wed, 04 Sep 2024 20:13:00 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.37367a5c.1725480780.4826f53
GET

https://www.bing.com/AS/API/IEOneBox/V2/Suggestions?qry=nez&cc=US&setlang=en-US&cp=3&cvid=359417938464406d9e11258e4782bb08&ig=956474c8b89e48d19c2d1ee9d5474c6c

MicrosoftEdgeCP.exe

Remote address:

88.221.135.56:443

Request

GET /AS/API/IEOneBox/V2/Suggestions?qry=nez&cc=US&setlang=en-US&cp=3&cvid=359417938464406d9e11258e4782bb08&ig=956474c8b89e48d19c2d1ee9d5474c6c HTTP/2.0
host: www.bing.com
accept: */*
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
x-device-isoptin: false
x-search-cortanaavailablecapabilities: SpeechLanguage
x-autosuggest-contentwidth: 432
x-search-rpstoken: NA
authorization: Bearer NA
x-bm-clientfeatures: SmallerAnswers
accept-encoding: gzip, deflate, br
cookie: MUID=180B088E2867622E06E71C7E29106371; _EDGE_S=F=1&SID=1B367CA5FB6569B120EB6855FA126830; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C290ED31DE59409E973A37280C3DCF5A&dmnchg=1; SRCHUSR=DOB=20240904; SRCHHPGUSR=SRCHLANG=en&IPMH=caefd23f&IPMID=1725480779027; _SS=SID=1B367CA5FB6569B120EB6855FA126830&CPID=1725480779313&AC=0&CPH=a9b5d7f2; MUIDB=180B088E2867622E06E71C7E29106371

Response

HTTP/2.0 200

content-length: 989
content-type: application/json; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
expires: -1
pragma: no-cache
vary: Accept-Encoding
x-eventid: 66d8bf4cf5f449ac86368e9d2c8441e3
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
date: Wed, 04 Sep 2024 20:13:01 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.37367a5c.1725480780.48274b8
GET

https://www.bing.com/AS/API/IEOneBox/V2/Suggestions?qry=nezu&cc=US&setlang=en-US&cp=4&cvid=359417938464406d9e11258e4782bb08&ig=07d6ce3f4c8e4acd8501b81a6029dec7

MicrosoftEdgeCP.exe

Remote address:

88.221.135.56:443

Request

GET /AS/API/IEOneBox/V2/Suggestions?qry=nezu&cc=US&setlang=en-US&cp=4&cvid=359417938464406d9e11258e4782bb08&ig=07d6ce3f4c8e4acd8501b81a6029dec7 HTTP/2.0
host: www.bing.com
accept: */*
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
x-device-isoptin: false
x-search-cortanaavailablecapabilities: SpeechLanguage
x-autosuggest-contentwidth: 432
x-search-rpstoken: NA
authorization: Bearer NA
x-bm-clientfeatures: SmallerAnswers
accept-encoding: gzip, deflate, br
cookie: MUID=180B088E2867622E06E71C7E29106371; _EDGE_S=F=1&SID=1B367CA5FB6569B120EB6855FA126830; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C290ED31DE59409E973A37280C3DCF5A&dmnchg=1; SRCHUSR=DOB=20240904; SRCHHPGUSR=SRCHLANG=en&IPMH=caefd23f&IPMID=1725480779027; _SS=SID=1B367CA5FB6569B120EB6855FA126830&CPID=1725480779313&AC=0&CPH=a9b5d7f2; MUIDB=180B088E2867622E06E71C7E29106371

Response

HTTP/2.0 200

content-length: 956
content-type: application/json; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
expires: -1
pragma: no-cache
vary: Accept-Encoding
x-eventid: 66d8bf4ddf2b4c97b3e0703fd6b47b32
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
date: Wed, 04 Sep 2024 20:13:01 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.37367a5c.1725480781.482760f
GET

https://www.bing.com/AS/API/IEOneBox/V2/Suggestions?qry=nezur&cc=US&setlang=en-US&cp=5&cvid=359417938464406d9e11258e4782bb08&ig=232d8a58f5c24f518732e1240b9d9e6c

MicrosoftEdgeCP.exe

Remote address:

88.221.135.56:443

Request

GET /AS/API/IEOneBox/V2/Suggestions?qry=nezur&cc=US&setlang=en-US&cp=5&cvid=359417938464406d9e11258e4782bb08&ig=232d8a58f5c24f518732e1240b9d9e6c HTTP/2.0
host: www.bing.com
accept: */*
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
x-device-isoptin: false
x-search-cortanaavailablecapabilities: SpeechLanguage
x-autosuggest-contentwidth: 432
x-search-rpstoken: NA
authorization: Bearer NA
x-bm-clientfeatures: SmallerAnswers
accept-encoding: gzip, deflate, br
cookie: MUID=180B088E2867622E06E71C7E29106371; _EDGE_S=F=1&SID=1B367CA5FB6569B120EB6855FA126830; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C290ED31DE59409E973A37280C3DCF5A&dmnchg=1; SRCHUSR=DOB=20240904; SRCHHPGUSR=SRCHLANG=en&IPMH=caefd23f&IPMID=1725480779027; _SS=SID=1B367CA5FB6569B120EB6855FA126830&CPID=1725480779313&AC=0&CPH=a9b5d7f2; MUIDB=180B088E2867622E06E71C7E29106371

Response

HTTP/2.0 200

content-length: 682
content-type: application/json; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
expires: -1
pragma: no-cache
vary: Accept-Encoding
x-eventid: 66d8bf4da9d9485f9451dc9c5cd30c51
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
date: Wed, 04 Sep 2024 20:13:01 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.37367a5c.1725480781.482776c
GET

https://www.bing.com/AS/API/IEOneBox/V2/Suggestions?qry=nezur.&cc=US&setlang=en-US&cp=6&cvid=359417938464406d9e11258e4782bb08&ig=6f12aea422ee42eb87fdf58b77bb50b4

MicrosoftEdgeCP.exe

Remote address:

88.221.135.56:443

Request

GET /AS/API/IEOneBox/V2/Suggestions?qry=nezur.&cc=US&setlang=en-US&cp=6&cvid=359417938464406d9e11258e4782bb08&ig=6f12aea422ee42eb87fdf58b77bb50b4 HTTP/2.0
host: www.bing.com
accept: */*
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
x-device-isoptin: false
x-search-cortanaavailablecapabilities: SpeechLanguage
x-autosuggest-contentwidth: 432
x-search-rpstoken: NA
authorization: Bearer NA
x-bm-clientfeatures: SmallerAnswers
accept-encoding: gzip, deflate, br
cookie: MUID=180B088E2867622E06E71C7E29106371; _EDGE_S=F=1&SID=1B367CA5FB6569B120EB6855FA126830; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C290ED31DE59409E973A37280C3DCF5A&dmnchg=1; SRCHUSR=DOB=20240904; SRCHHPGUSR=SRCHLANG=en&IPMH=caefd23f&IPMID=1725480779027; _SS=SID=1B367CA5FB6569B120EB6855FA126830&CPID=1725480779313&AC=0&CPH=a9b5d7f2; MUIDB=180B088E2867622E06E71C7E29106371

Response

HTTP/2.0 200

content-length: 549
content-type: application/json; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
expires: -1
pragma: no-cache
vary: Accept-Encoding
x-eventid: 66d8bf4d596c4b68ac8f48f3c77d9963
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
date: Wed, 04 Sep 2024 20:13:01 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.37367a5c.1725480781.4827ab5
GET

https://www.bing.com/AS/API/IEOneBox/V2/Suggestions?qry=nezur.i&cc=US&setlang=en-US&cp=7&cvid=359417938464406d9e11258e4782bb08&ig=b8aa0754665243948dd6d62abbfe583d

MicrosoftEdgeCP.exe

Remote address:

88.221.135.56:443

Request

GET /AS/API/IEOneBox/V2/Suggestions?qry=nezur.i&cc=US&setlang=en-US&cp=7&cvid=359417938464406d9e11258e4782bb08&ig=b8aa0754665243948dd6d62abbfe583d HTTP/2.0
host: www.bing.com
accept: */*
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
x-device-isoptin: false
x-search-cortanaavailablecapabilities: SpeechLanguage
x-autosuggest-contentwidth: 432
x-search-rpstoken: NA
authorization: Bearer NA
x-bm-clientfeatures: SmallerAnswers
accept-encoding: gzip, deflate, br
cookie: MUID=180B088E2867622E06E71C7E29106371; _EDGE_S=F=1&SID=1B367CA5FB6569B120EB6855FA126830; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C290ED31DE59409E973A37280C3DCF5A&dmnchg=1; SRCHUSR=DOB=20240904; SRCHHPGUSR=SRCHLANG=en&IPMH=caefd23f&IPMID=1725480779027; _SS=SID=1B367CA5FB6569B120EB6855FA126830&CPID=1725480779313&AC=0&CPH=a9b5d7f2; MUIDB=180B088E2867622E06E71C7E29106371

Response

HTTP/2.0 200

content-length: 386
content-type: application/json; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
expires: -1
pragma: no-cache
vary: Accept-Encoding
x-eventid: 66d8bf4e96314850967b3ec2dd84b927
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
date: Wed, 04 Sep 2024 20:13:02 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.37367a5c.1725480782.4827e7d
GET

https://www.bing.com/AS/API/IEOneBox/V2/Suggestions?qry=nezur.io&cc=US&setlang=en-US&cp=8&cvid=359417938464406d9e11258e4782bb08&ig=ba61e430407e4560b6a6919c0ac656a6

MicrosoftEdgeCP.exe

Remote address:

88.221.135.56:443

Request

GET /AS/API/IEOneBox/V2/Suggestions?qry=nezur.io&cc=US&setlang=en-US&cp=8&cvid=359417938464406d9e11258e4782bb08&ig=ba61e430407e4560b6a6919c0ac656a6 HTTP/2.0
host: www.bing.com
accept: */*
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
x-device-isoptin: false
x-search-cortanaavailablecapabilities: SpeechLanguage
x-autosuggest-contentwidth: 432
x-search-rpstoken: NA
authorization: Bearer NA
x-bm-clientfeatures: SmallerAnswers
accept-encoding: gzip, deflate, br
cookie: MUID=180B088E2867622E06E71C7E29106371; _EDGE_S=F=1&SID=1B367CA5FB6569B120EB6855FA126830; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C290ED31DE59409E973A37280C3DCF5A&dmnchg=1; SRCHUSR=DOB=20240904; SRCHHPGUSR=SRCHLANG=en&IPMH=caefd23f&IPMID=1725480779027; _SS=SID=1B367CA5FB6569B120EB6855FA126830&CPID=1725480779313&AC=0&CPH=a9b5d7f2; MUIDB=180B088E2867622E06E71C7E29106371

Response

HTTP/2.0 200

content-length: 386
content-type: application/json; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
expires: -1
pragma: no-cache
vary: Accept-Encoding
x-eventid: 66d8bf4eb8564527bc39864446ff92ae
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
date: Wed, 04 Sep 2024 20:13:02 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.37367a5c.1725480782.482801f
GET

https://www.bing.com/AS/API/IEOneBox/V2/Suggestions?qry=nezur.o&cc=US&setlang=en-US&cp=7&cvid=359417938464406d9e11258e4782bb08&ig=7bb391abf7e34993841662aaec678d9c

MicrosoftEdgeCP.exe

Remote address:

88.221.135.56:443

Request

GET /AS/API/IEOneBox/V2/Suggestions?qry=nezur.o&cc=US&setlang=en-US&cp=7&cvid=359417938464406d9e11258e4782bb08&ig=7bb391abf7e34993841662aaec678d9c HTTP/2.0
host: www.bing.com
accept: */*
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
x-device-isoptin: false
x-search-cortanaavailablecapabilities: SpeechLanguage
x-autosuggest-contentwidth: 432
x-search-rpstoken: NA
authorization: Bearer NA
x-bm-clientfeatures: SmallerAnswers
accept-encoding: gzip, deflate, br
cookie: MUID=180B088E2867622E06E71C7E29106371; _EDGE_S=F=1&SID=1B367CA5FB6569B120EB6855FA126830; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C290ED31DE59409E973A37280C3DCF5A&dmnchg=1; SRCHUSR=DOB=20240904; SRCHHPGUSR=SRCHLANG=en&IPMH=caefd23f&IPMID=1725480779027; _SS=SID=1B367CA5FB6569B120EB6855FA126830&CPID=1725480779313&AC=0&CPH=a9b5d7f2; MUIDB=180B088E2867622E06E71C7E29106371

Response

HTTP/2.0 200

content-length: 593
content-type: application/json; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
expires: -1
pragma: no-cache
vary: Accept-Encoding
x-eventid: 66d8bf50b3f44e81bfb5fd6900460c9f
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
date: Wed, 04 Sep 2024 20:13:04 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.37367a5c.1725480784.4828e38
GET

https://www.bing.com/AS/API/IEOneBox/V2/Suggestions?qry=nezur.oi&cc=US&setlang=en-US&cp=8&cvid=359417938464406d9e11258e4782bb08&ig=2717df3e45e24a80820c3d3ab52052c9

MicrosoftEdgeCP.exe

Remote address:

88.221.135.56:443

Request

GET /AS/API/IEOneBox/V2/Suggestions?qry=nezur.oi&cc=US&setlang=en-US&cp=8&cvid=359417938464406d9e11258e4782bb08&ig=2717df3e45e24a80820c3d3ab52052c9 HTTP/2.0
host: www.bing.com
accept: */*
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
x-device-isoptin: false
x-search-cortanaavailablecapabilities: SpeechLanguage
x-autosuggest-contentwidth: 432
x-search-rpstoken: NA
authorization: Bearer NA
x-bm-clientfeatures: SmallerAnswers
accept-encoding: gzip, deflate, br
cookie: MUID=180B088E2867622E06E71C7E29106371; _EDGE_S=F=1&SID=1B367CA5FB6569B120EB6855FA126830; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C290ED31DE59409E973A37280C3DCF5A&dmnchg=1; SRCHUSR=DOB=20240904; SRCHHPGUSR=SRCHLANG=en&IPMH=caefd23f&IPMID=1725480779027; _SS=SID=1B367CA5FB6569B120EB6855FA126830&CPID=1725480779313&AC=0&CPH=a9b5d7f2; MUIDB=180B088E2867622E06E71C7E29106371

Response

HTTP/2.0 200

content-length: 441
content-type: application/json; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
expires: -1
pragma: no-cache
vary: Accept-Encoding
x-eventid: 66d8bf509a734ec9aaa16ef122882fed
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
date: Wed, 04 Sep 2024 20:13:04 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.37367a5c.1725480784.4828f54
POST

https://www.bing.com/AS/IEOneBox/xls.aspx

MicrosoftEdgeCP.exe

Remote address:

88.221.135.56:443

Request

POST /AS/IEOneBox/xls.aspx HTTP/2.0
host: www.bing.com
accept: */*
origin: https://www.bing.com
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
content-type: text/xml
x-msedge-externalexptype: JointCoord
x-msedge-externalexp: null
accept-encoding: gzip, deflate, br
content-length: 41282
cache-control: no-cache
cookie: MUID=180B088E2867622E06E71C7E29106371; _EDGE_S=F=1&SID=1B367CA5FB6569B120EB6855FA126830; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C290ED31DE59409E973A37280C3DCF5A&dmnchg=1; SRCHUSR=DOB=20240904; SRCHHPGUSR=SRCHLANG=en&IPMH=caefd23f&IPMID=1725480779027; _SS=SID=1B367CA5FB6569B120EB6855FA126830&CPID=1725480779313&AC=0&CPH=a9b5d7f2; MUIDB=180B088E2867622E06E71C7E29106371

Response

HTTP/2.0 404

content-length: 46
content-type: text/html; charset=utf-8
cache-control: private
content-encoding: gzip
vary: Accept-Encoding
x-eventid: 66d8bf51a7b844eb90d92e1b307b2736
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
x-error-page: 404-custom
date: Wed, 04 Sep 2024 20:13:05 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.37367a5c.1725480785.48293da
POST

https://www.bing.com/AS/IEOneBox/xls.aspx

MicrosoftEdgeCP.exe

Remote address:

88.221.135.56:443

Request

POST /AS/IEOneBox/xls.aspx HTTP/2.0
host: www.bing.com
accept: */*
origin: https://www.bing.com
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
content-type: text/xml
x-msedge-externalexptype: JointCoord
x-msedge-externalexp: null
accept-encoding: gzip, deflate, br
content-length: 23075
cache-control: no-cache
cookie: MUID=180B088E2867622E06E71C7E29106371; _EDGE_S=F=1&SID=1B367CA5FB6569B120EB6855FA126830; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C290ED31DE59409E973A37280C3DCF5A&dmnchg=1; SRCHUSR=DOB=20240904; SRCHHPGUSR=SRCHLANG=en&IPMH=caefd23f&IPMID=1725480779027; _SS=SID=1B367CA5FB6569B120EB6855FA126830&CPID=1725480779313&AC=0&CPH=a9b5d7f2; MUIDB=180B088E2867622E06E71C7E29106371

Response

HTTP/2.0 404

content-length: 46
content-type: text/html; charset=utf-8
cache-control: private
content-encoding: gzip
vary: Accept-Encoding
x-eventid: 66d8bf52142147a4bea3897454174baf
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
x-error-page: 404-custom
date: Wed, 04 Sep 2024 20:13:06 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.37367a5c.1725480786.4829c6b
POST

https://www.bing.com/AS/IEOneBox/xls.aspx

MicrosoftEdgeCP.exe

Remote address:

88.221.135.56:443

Request

POST /AS/IEOneBox/xls.aspx HTTP/2.0
host: www.bing.com
accept: */*
origin: https://www.bing.com
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
content-type: text/xml
x-msedge-externalexptype: JointCoord
x-msedge-externalexp: null
accept-encoding: gzip, deflate, br
content-length: 18032
cache-control: no-cache
cookie: MUID=180B088E2867622E06E71C7E29106371; _EDGE_S=F=1&SID=1B367CA5FB6569B120EB6855FA126830; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C290ED31DE59409E973A37280C3DCF5A&dmnchg=1; SRCHUSR=DOB=20240904; SRCHHPGUSR=SRCHLANG=en&IPMH=caefd23f&IPMID=1725480779027; _SS=SID=1B367CA5FB6569B120EB6855FA126830&CPID=1725480779313&AC=0&CPH=a9b5d7f2; MUIDB=180B088E2867622E06E71C7E29106371

Response

HTTP/2.0 404

content-length: 46
content-type: text/html; charset=utf-8
cache-control: private
content-encoding: gzip
vary: Accept-Encoding
x-eventid: 66d8bf537b1c44a6b7721dfe94cc1061
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
x-error-page: 404-custom
date: Wed, 04 Sep 2024 20:13:07 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.37367a5c.1725480787.482a4a9
POST

https://www.bing.com/AS/IEOneBox/xls.aspx

MicrosoftEdgeCP.exe

Remote address:

88.221.135.56:443

Request

POST /AS/IEOneBox/xls.aspx HTTP/2.0
host: www.bing.com
accept: */*
origin: https://www.bing.com
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
content-type: text/xml
x-msedge-externalexptype: JointCoord
x-msedge-externalexp: null
accept-encoding: gzip, deflate, br
content-length: 9147
cache-control: no-cache
cookie: MUID=180B088E2867622E06E71C7E29106371; _EDGE_S=F=1&SID=1B367CA5FB6569B120EB6855FA126830; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C290ED31DE59409E973A37280C3DCF5A&dmnchg=1; SRCHUSR=DOB=20240904; SRCHHPGUSR=SRCHLANG=en&IPMH=caefd23f&IPMID=1725480779027; _SS=SID=1B367CA5FB6569B120EB6855FA126830&CPID=1725480779313&AC=0&CPH=a9b5d7f2; MUIDB=180B088E2867622E06E71C7E29106371

Response

HTTP/2.0 404

content-length: 46
content-type: text/html; charset=utf-8
cache-control: private
content-encoding: gzip
vary: Accept-Encoding
x-eventid: 66d8bf5494c047289943f29c58b320ba
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
x-error-page: 404-custom
date: Wed, 04 Sep 2024 20:13:08 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.37367a5c.1725480788.482acb5
POST

https://www.bing.com/AS/IEOneBox/xls.aspx

MicrosoftEdgeCP.exe

Remote address:

88.221.135.56:443

Request

POST /AS/IEOneBox/xls.aspx HTTP/2.0
host: www.bing.com
accept: */*
origin: https://www.bing.com
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
content-type: text/xml
x-msedge-externalexptype: JointCoord
x-msedge-externalexp: null
accept-encoding: gzip, deflate, br
content-length: 18891
cache-control: no-cache
cookie: MUID=180B088E2867622E06E71C7E29106371; _EDGE_S=F=1&SID=1B367CA5FB6569B120EB6855FA126830; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C290ED31DE59409E973A37280C3DCF5A&dmnchg=1; SRCHUSR=DOB=20240904; SRCHHPGUSR=SRCHLANG=en&IPMH=caefd23f&IPMID=1725480779027; _SS=SID=1B367CA5FB6569B120EB6855FA126830&CPID=1725480779313&AC=0&CPH=a9b5d7f2; MUIDB=180B088E2867622E06E71C7E29106371

Response

HTTP/2.0 404

content-length: 46
content-type: text/html; charset=utf-8
cache-control: private
content-encoding: gzip
vary: Accept-Encoding
x-eventid: 66d8bf54c1be497393e98f8780ac18c5
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
x-error-page: 404-custom
date: Wed, 04 Sep 2024 20:13:08 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.37367a5c.1725480788.482aea0
POST

https://www.bing.com/AS/IEOneBox/xls.aspx

MicrosoftEdgeCP.exe

Remote address:

88.221.135.56:443

Request

POST /AS/IEOneBox/xls.aspx HTTP/2.0
host: www.bing.com
accept: */*
origin: https://www.bing.com
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
content-type: text/xml
x-msedge-externalexptype: JointCoord
x-msedge-externalexp: null
accept-encoding: gzip, deflate, br
content-length: 14027
cache-control: no-cache
cookie: MUID=180B088E2867622E06E71C7E29106371; _EDGE_S=F=1&SID=1B367CA5FB6569B120EB6855FA126830; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C290ED31DE59409E973A37280C3DCF5A&dmnchg=1; SRCHUSR=DOB=20240904; SRCHHPGUSR=SRCHLANG=en&IPMH=caefd23f&IPMID=1725480779027; _SS=SID=1B367CA5FB6569B120EB6855FA126830&CPID=1725480779313&AC=0&CPH=a9b5d7f2; MUIDB=180B088E2867622E06E71C7E29106371

Response

HTTP/2.0 404

content-length: 46
content-type: text/html; charset=utf-8
cache-control: private
content-encoding: gzip
vary: Accept-Encoding
x-eventid: 66d8bf558f5d4d26b026a5e62879085c
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
x-error-page: 404-custom
date: Wed, 04 Sep 2024 20:13:09 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.37367a5c.1725480789.482b550
POST

https://www.bing.com/AS/IEOneBox/xls.aspx

MicrosoftEdgeCP.exe

Remote address:

88.221.135.56:443

Request

POST /AS/IEOneBox/xls.aspx HTTP/2.0
host: www.bing.com
accept: */*
origin: https://www.bing.com
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
content-type: text/xml
x-msedge-externalexptype: JointCoord
x-msedge-externalexp: null
accept-encoding: gzip, deflate, br
content-length: 7101
cache-control: no-cache
cookie: MUID=180B088E2867622E06E71C7E29106371; _EDGE_S=F=1&SID=1B367CA5FB6569B120EB6855FA126830; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C290ED31DE59409E973A37280C3DCF5A&dmnchg=1; SRCHUSR=DOB=20240904; SRCHHPGUSR=SRCHLANG=en&IPMH=caefd23f&IPMID=1725480779027; _SS=SID=1B367CA5FB6569B120EB6855FA126830&CPID=1725480779313&AC=0&CPH=a9b5d7f2; MUIDB=180B088E2867622E06E71C7E29106371

Response

HTTP/2.0 404

content-length: 46
content-type: text/html; charset=utf-8
cache-control: private
content-encoding: gzip
vary: Accept-Encoding
x-eventid: 66d8bf56b1314d389f13096c3c7143ac
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
x-error-page: 404-custom
date: Wed, 04 Sep 2024 20:13:10 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.37367a5c.1725480790.482bde7
POST

https://www.bing.com/AS/IEOneBox/xls.aspx

MicrosoftEdgeCP.exe

Remote address:

88.221.135.56:443

Request

POST /AS/IEOneBox/xls.aspx HTTP/2.0
host: www.bing.com
accept: */*
origin: https://www.bing.com
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
content-type: text/xml
x-msedge-externalexptype: JointCoord
x-msedge-externalexp: null
accept-encoding: gzip, deflate, br
content-length: 11030
cache-control: no-cache
cookie: MUID=180B088E2867622E06E71C7E29106371; _EDGE_S=F=1&SID=1B367CA5FB6569B120EB6855FA126830; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C290ED31DE59409E973A37280C3DCF5A&dmnchg=1; SRCHUSR=DOB=20240904; SRCHHPGUSR=SRCHLANG=en&IPMH=caefd23f&IPMID=1725480779027; _SS=SID=1B367CA5FB6569B120EB6855FA126830&CPID=1725480779313&AC=0&CPH=a9b5d7f2; MUIDB=180B088E2867622E06E71C7E29106371

Response

HTTP/2.0 404

content-length: 46
content-type: text/html; charset=utf-8
cache-control: private
content-encoding: gzip
vary: Accept-Encoding
x-eventid: 66d8bf587f084e209ef3fd16e04071ee
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
x-error-page: 404-custom
date: Wed, 04 Sep 2024 20:13:12 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.37367a5c.1725480792.482c82b
POST

https://www.bing.com/AS/IEOneBox/xls.aspx

MicrosoftEdgeCP.exe

Remote address:

88.221.135.56:443

Request

POST /AS/IEOneBox/xls.aspx HTTP/2.0
host: www.bing.com
accept: */*
origin: https://www.bing.com
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
content-type: text/xml
x-msedge-externalexptype: JointCoord
x-msedge-externalexp: null
accept-encoding: gzip, deflate, br
content-length: 810
cache-control: no-cache
cookie: MUID=180B088E2867622E06E71C7E29106371; _EDGE_S=F=1&SID=1B367CA5FB6569B120EB6855FA126830; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C290ED31DE59409E973A37280C3DCF5A&dmnchg=1; SRCHUSR=DOB=20240904; SRCHHPGUSR=SRCHLANG=en&IPMH=caefd23f&IPMID=1725480779027; _SS=SID=1B367CA5FB6569B120EB6855FA126830&CPID=1725480779313&AC=0&CPH=a9b5d7f2; MUIDB=180B088E2867622E06E71C7E29106371

Response

HTTP/2.0 404

content-length: 46
content-type: text/html; charset=utf-8
cache-control: private
content-encoding: gzip
vary: Accept-Encoding
x-eventid: 66d8bf59c3984f09ad26b14c3c081f41
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
x-error-page: 404-custom
date: Wed, 04 Sep 2024 20:13:13 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.37367a5c.1725480793.482d15d
POST

https://www.bing.com/AS/IEOneBox/xls.aspx

MicrosoftEdgeCP.exe

Remote address:

88.221.135.56:443

Request

POST /AS/IEOneBox/xls.aspx HTTP/2.0
host: www.bing.com
accept: */*
origin: https://www.bing.com
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
content-type: text/xml
x-msedge-externalexptype: JointCoord
x-msedge-externalexp: null
accept-encoding: gzip, deflate, br
content-length: 673
cache-control: no-cache
cookie: MUID=180B088E2867622E06E71C7E29106371; _EDGE_S=F=1&SID=1B367CA5FB6569B120EB6855FA126830; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C290ED31DE59409E973A37280C3DCF5A&dmnchg=1; SRCHUSR=DOB=20240904; SRCHHPGUSR=SRCHLANG=en&IPMH=caefd23f&IPMID=1725480779027; _SS=SID=1B367CA5FB6569B120EB6855FA126830&CPID=1725480779313&AC=0&CPH=a9b5d7f2; MUIDB=180B088E2867622E06E71C7E29106371

Response

HTTP/2.0 404

content-length: 46
content-type: text/html; charset=utf-8
cache-control: private
content-encoding: gzip
vary: Accept-Encoding
x-eventid: 66d8bf5984594078a10526c7dc4a33a1
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
x-error-page: 404-custom
date: Wed, 04 Sep 2024 20:13:13 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.37367a5c.1725480793.482d6b2
POST

https://www.bing.com/AS/IEOneBox/xls.aspx

MicrosoftEdgeCP.exe

Remote address:

88.221.135.56:443

Request

POST /AS/IEOneBox/xls.aspx HTTP/2.0
host: www.bing.com
accept: */*
origin: https://www.bing.com
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
content-type: text/xml
x-msedge-externalexptype: JointCoord
x-msedge-externalexp: null
accept-encoding: gzip, deflate, br
content-length: 8436
cache-control: no-cache
cookie: MUID=180B088E2867622E06E71C7E29106371; _EDGE_S=F=1&SID=1B367CA5FB6569B120EB6855FA126830; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C290ED31DE59409E973A37280C3DCF5A&dmnchg=1; SRCHUSR=DOB=20240904; SRCHHPGUSR=SRCHLANG=en&IPMH=caefd23f&IPMID=1725480779027; _SS=SID=1B367CA5FB6569B120EB6855FA126830&CPID=1725480779313&AC=0&CPH=a9b5d7f2; MUIDB=180B088E2867622E06E71C7E29106371

Response

HTTP/2.0 404

content-length: 46
content-type: text/html; charset=utf-8
cache-control: private
content-encoding: gzip
vary: Accept-Encoding
x-eventid: 66d8bf5ac356404e8479a49b0da1beb0
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
x-error-page: 404-custom
date: Wed, 04 Sep 2024 20:13:14 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.37367a5c.1725480794.482dab3
POST

https://www.bing.com/AS/IEOneBox/xls.aspx

MicrosoftEdgeCP.exe

Remote address:

88.221.135.56:443

Request

POST /AS/IEOneBox/xls.aspx HTTP/2.0
host: www.bing.com
accept: */*
origin: https://www.bing.com
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
content-type: text/xml
x-msedge-externalexptype: JointCoord
x-msedge-externalexp: null
accept-encoding: gzip, deflate, br
content-length: 12148
cache-control: no-cache
cookie: MUID=180B088E2867622E06E71C7E29106371; _EDGE_S=F=1&SID=1B367CA5FB6569B120EB6855FA126830; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C290ED31DE59409E973A37280C3DCF5A&dmnchg=1; SRCHUSR=DOB=20240904; SRCHHPGUSR=SRCHLANG=en&IPMH=caefd23f&IPMID=1725480779027; _SS=SID=1B367CA5FB6569B120EB6855FA126830&CPID=1725480779313&AC=0&CPH=a9b5d7f2; MUIDB=180B088E2867622E06E71C7E29106371

Response

HTTP/2.0 404

content-length: 46
content-type: text/html; charset=utf-8
cache-control: private
content-encoding: gzip
vary: Accept-Encoding
x-eventid: 66d8bf5b400f4c5982cdac3ba0ba859d
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
x-error-page: 404-custom
date: Wed, 04 Sep 2024 20:13:15 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.37367a5c.1725480795.482e312
GET

https://www.bing.com/AS/API/IEOneBox/V2/Suggestions?qry=&cc=US&setlang=en-US&cp=0&cvid=00ea958f35e14e078f0f1edda758e995&ig=8485d99a87c74c74a3821c3fb6cf4756

MicrosoftEdgeCP.exe

Remote address:

88.221.135.56:443

Request

GET /AS/API/IEOneBox/V2/Suggestions?qry=&cc=US&setlang=en-US&cp=0&cvid=00ea958f35e14e078f0f1edda758e995&ig=8485d99a87c74c74a3821c3fb6cf4756 HTTP/2.0
host: www.bing.com
accept: */*
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
x-device-isoptin: false
x-search-cortanaavailablecapabilities: SpeechLanguage
x-autosuggest-contentwidth: 296
x-search-rpstoken: NA
authorization: Bearer NA
x-bm-clientfeatures: SmallerAnswers
accept-encoding: gzip, deflate, br
cookie: MUID=180B088E2867622E06E71C7E29106371; _EDGE_S=F=1&SID=1B367CA5FB6569B120EB6855FA126830; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C290ED31DE59409E973A37280C3DCF5A&dmnchg=1; SRCHUSR=DOB=20240904; SRCHHPGUSR=SRCHLANG=en&IPMH=caefd23f&IPMID=1725480779027; _SS=SID=1B367CA5FB6569B120EB6855FA126830&CPID=1725480779313&AC=0&CPH=a9b5d7f2; MUIDB=180B088E2867622E06E71C7E29106371

Response

HTTP/2.0 200

content-length: 677
content-type: application/json; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
expires: -1
pragma: no-cache
vary: Accept-Encoding
x-eventid: 66d8bf5cff724c11bd97781071548567
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
date: Wed, 04 Sep 2024 20:13:16 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.37367a5c.1725480796.482e70b
POST

https://www.bing.com/AS/IEOneBox/xls.aspx

MicrosoftEdgeCP.exe

Remote address:

88.221.135.56:443

Request

POST /AS/IEOneBox/xls.aspx HTTP/2.0
host: www.bing.com
accept: */*
origin: https://www.bing.com
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
content-type: text/xml
x-msedge-externalexptype: JointCoord
x-msedge-externalexp: null
accept-encoding: gzip, deflate, br
content-length: 6842
cache-control: no-cache
cookie: MUID=180B088E2867622E06E71C7E29106371; _EDGE_S=F=1&SID=1B367CA5FB6569B120EB6855FA126830; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C290ED31DE59409E973A37280C3DCF5A&dmnchg=1; SRCHUSR=DOB=20240904; SRCHHPGUSR=SRCHLANG=en&IPMH=caefd23f&IPMID=1725480779027; _SS=SID=1B367CA5FB6569B120EB6855FA126830&CPID=1725480779313&AC=0&CPH=a9b5d7f2; MUIDB=180B088E2867622E06E71C7E29106371

Response

HTTP/2.0 404

content-length: 46
content-type: text/html; charset=utf-8
cache-control: private
content-encoding: gzip
vary: Accept-Encoding
x-eventid: 66d8bf5c89b840aebfe50f26d8805ce4
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
x-error-page: 404-custom
date: Wed, 04 Sep 2024 20:13:16 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.37367a5c.1725480796.482eb34
POST

https://www.bing.com/AS/IEOneBox/xls.aspx

MicrosoftEdgeCP.exe

Remote address:

88.221.135.56:443

Request

POST /AS/IEOneBox/xls.aspx HTTP/2.0
host: www.bing.com
accept: */*
origin: https://www.bing.com
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
content-type: text/xml
x-msedge-externalexptype: JointCoord
x-msedge-externalexp: null
accept-encoding: gzip, deflate, br
content-length: 3643
cache-control: no-cache
cookie: MUID=180B088E2867622E06E71C7E29106371; _EDGE_S=F=1&SID=1B367CA5FB6569B120EB6855FA126830; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C290ED31DE59409E973A37280C3DCF5A&dmnchg=1; SRCHUSR=DOB=20240904; SRCHHPGUSR=SRCHLANG=en&IPMH=caefd23f&IPMID=1725480779027; _SS=SID=1B367CA5FB6569B120EB6855FA126830&CPID=1725480779313&AC=0&CPH=a9b5d7f2; MUIDB=180B088E2867622E06E71C7E29106371

Response

HTTP/2.0 404

content-length: 46
content-type: text/html; charset=utf-8
cache-control: private
content-encoding: gzip
vary: Accept-Encoding
x-eventid: 66d8bf5dd3aa41af8614f27f0577de3a
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
x-error-page: 404-custom
date: Wed, 04 Sep 2024 20:13:17 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.37367a5c.1725480797.482f390
POST

https://www.bing.com/AS/IEOneBox/xls.aspx

MicrosoftEdgeCP.exe

Remote address:

88.221.135.56:443

Request

POST /AS/IEOneBox/xls.aspx HTTP/2.0
host: www.bing.com
accept: */*
origin: https://www.bing.com
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
content-type: text/xml
x-msedge-externalexptype: JointCoord
x-msedge-externalexp: null
accept-encoding: gzip, deflate, br
content-length: 10483
cache-control: no-cache
cookie: MUID=180B088E2867622E06E71C7E29106371; _EDGE_S=F=1&SID=1B367CA5FB6569B120EB6855FA126830; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C290ED31DE59409E973A37280C3DCF5A&dmnchg=1; SRCHUSR=DOB=20240904; SRCHHPGUSR=SRCHLANG=en&IPMH=caefd23f&IPMID=1725480779027; _SS=SID=1B367CA5FB6569B120EB6855FA126830&CPID=1725480779313&AC=0&CPH=a9b5d7f2; MUIDB=180B088E2867622E06E71C7E29106371

Response

HTTP/2.0 404

content-length: 46
content-type: text/html; charset=utf-8
cache-control: private
content-encoding: gzip
vary: Accept-Encoding
x-eventid: 66d8bf5e0c244b5391cd492f185a05c5
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
x-error-page: 404-custom
date: Wed, 04 Sep 2024 20:13:18 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.37367a5c.1725480798.482fbe5
POST

https://www.bing.com/AS/IEOneBox/xls.aspx

MicrosoftEdgeCP.exe

Remote address:

88.221.135.56:443

Request

POST /AS/IEOneBox/xls.aspx HTTP/2.0
host: www.bing.com
accept: */*
origin: https://www.bing.com
referer: https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; ServiceUI 9) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
content-type: text/xml
x-msedge-externalexptype: JointCoord
x-msedge-externalexp: null
accept-encoding: gzip, deflate, br
content-length: 2190
cache-control: no-cache
cookie: MUID=180B088E2867622E06E71C7E29106371; _EDGE_S=F=1&SID=1B367CA5FB6569B120EB6855FA126830; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=C290ED31DE59409E973A37280C3DCF5A&dmnchg=1; SRCHUSR=DOB=20240904; SRCHHPGUSR=SRCHLANG=en&IPMH=caefd23f&IPMID=1725480779027; _SS=SID=1B367CA5FB6569B120EB6855FA126830&CPID=1725480779313&AC=0&CPH=a9b5d7f2; MUIDB=180B088E2867622E06E71C7E29106371

Response

HTTP/2.0 404

content-length: 46
content-type: text/html; charset=utf-8
cache-control: private
content-encoding: gzip
vary: Accept-Encoding
x-eventid: 66d8bf5ffa034deab7dea71d467e3e14
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
x-error-page: 404-custom
date: Wed, 04 Sep 2024 20:13:19 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.37367a5c.1725480799.482fc96
GET

https://www.bing.com/partner/warmup.gif

MicrosoftEdgeCP.exe

Remote address:

88.221.135.56:443

Request

GET /partner/warmup.gif HTTP/2.0
host: www.bing.com
accept: */*
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br

Response

HTTP/2.0 200

cache-control: no-cache
pragma: no-cache
content-length: 43
content-type: image/gif
expires: -1
x-eventid: 66d8bf4c23fb46b2ab71a13b05e3d4d4
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: A049DE205F7C46D3BA2781C702B2CF75 Ref B: LON601060105031 Ref C: 2024-09-04T20:13:00Z
date: Wed, 04 Sep 2024 20:13:00 GMT
set-cookie: MUID=012E21D9865D6B8C02613529879F6A91; domain=.bing.com; expires=Mon, 29-Sep-2025 20:13:00 GMT; path=/; secure; SameSite=None
set-cookie: MUIDB=012E21D9865D6B8C02613529879F6A91; expires=Mon, 29-Sep-2025 20:13:00 GMT; path=/; HttpOnly
set-cookie: _EDGE_S=F=1&SID=3B8B062DE58969C3396F12DDE44B6882; domain=.bing.com; path=/; HttpOnly
set-cookie: _EDGE_V=1; domain=.bing.com; expires=Mon, 29-Sep-2025 20:13:00 GMT; path=/; HttpOnly
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.4c367a5c.1725480780.2630926d
GET

https://www.bing.com/partner/warmup.gif

MicrosoftEdgeCP.exe

Remote address:

88.221.135.56:443

Request

GET /partner/warmup.gif HTTP/2.0
host: www.bing.com
accept: */*
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br
cookie: MUID=012E21D9865D6B8C02613529879F6A91; SRCHHPGUSR=SRCHLANG=en&IPMH=caefd23f&IPMID=1725480779027; _EDGE_S=F=1&SID=3B8B062DE58969C3396F12DDE44B6882; _EDGE_V=1; MUIDB=012E21D9865D6B8C02613529879F6A91

Response

HTTP/2.0 200

cache-control: no-cache
pragma: no-cache
content-length: 43
content-type: image/gif
expires: -1
x-eventid: 66d8bf5cc5394b01af6782bc4433fa6a
useragentreductionoptout: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 6AD9E8B9CA4949218BA57FB53DC5E4D8 Ref B: LON601060105031 Ref C: 2024-09-04T20:13:16Z
date: Wed, 04 Sep 2024 20:13:16 GMT
set-cookie: MUIDB=012E21D9865D6B8C02613529879F6A91; expires=Mon, 29-Sep-2025 20:13:16 GMT; path=/; HttpOnly
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.4c367a5c.1725480796.26311895
DNS

56.135.221.88.in-addr.arpa

Remote address:

8.8.8.8:53

Request

56.135.221.88.in-addr.arpa

IN PTR

Response

56.135.221.88.in-addr.arpa

IN PTR

a88-221-135-56deploystaticakamaitechnologiescom
DNS

nezur.io

MicrosoftEdge.exe

Remote address:

8.8.8.8:53

Request

nezur.io

IN A

Response

nezur.io

IN A

104.26.6.104

nezur.io

IN A

104.26.7.104

nezur.io

IN A

172.67.74.136
GET

http://nezur.io/

MicrosoftEdgeCP.exe

Remote address:

104.26.6.104:80

Request

GET / HTTP/1.1
Accept: text/html, application/xhtml+xml, image/jxr, */*
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
Accept-Encoding: gzip, deflate
Host: nezur.io
Connection: Keep-Alive

Response

HTTP/1.1 301 Moved Permanently

Date: Wed, 04 Sep 2024 20:13:09 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Wed, 04 Sep 2024 21:13:09 GMT
Location: https://nezur.io/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ByYa8CgrdSchZMoSngvgF3971JQJ5b1slV%2B%2BUfEqvmitrHdYAXhI92zLREmN2YRIdrNd3piyPUNUJfiV%2F7gn%2F%2FwcY2zLYse49uq8GjFUDV2EcYiFMhARofGC"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8be0a376d912771d-LHR
alt-svc: h3=":443"; ma=86400
GET

https://nezur.io/

MicrosoftEdgeCP.exe

Remote address:

104.26.6.104:443

Request

GET / HTTP/2.0
host: nezur.io
accept: text/html, application/xhtml+xml, image/jxr, */*
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br

Response

HTTP/2.0 403

date: Wed, 04 Sep 2024 20:13:10 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-content-options: nosniff
x-frame-options: SAMEORIGIN
cf-mitigated: challenge
cf-chl-out: 6W3XvRuV+ilNwKFoqWXfhCYz6aiyLREz4z2aAiV3CVE8XEJzEASLkcjSZfzzyfFh5TQYCgQSSDJz+L+eX/fr+hf1jyPjQ3Qt2AKFI2zZxrru/NsN8Iu3BHaxwM2ARvFiwycMTdGW7NSN2ROHqk0zQQ==$i+sYSrkPsd/7aAh5sqL1dg==
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q5qKvh%2BTXlQEvOTWMqM7fUZeAE%2Ffgl80xKvUPxEvQpUpRhmhbTA1MrQqz6p3llAjMEq%2B2mcCxW2X0g8KHdB8d4YYVrF8RHeEesIEhlScEmejTwSB7RWQpODk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8be0a3797cfe418f-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET

https://nezur.io/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=8be0a3797cfe418f

MicrosoftEdgeCP.exe

Remote address:

104.26.6.104:443

Request

GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=8be0a3797cfe418f HTTP/2.0
host: nezur.io
accept: application/javascript, */*;q=0.8
referer: https://nezur.io/
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br

Response

HTTP/2.0 200

date: Wed, 04 Sep 2024 20:13:10 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z13BX1p1%2F5ObCNO%2B%2BD93Ab3Qc198WCU1oWoHAjrfA8BZUxgAH9GPR5QnfKTpkLOQSA8fJrQy4R4OGrNjXEV%2BXBIc7qxUpIzEW9evF2F3%2FE2RxUyDTHrRwsD8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8be0a37c89ca418f-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
POST

https://nezur.io/cdn-cgi/challenge-platform/h/b/flow/ov1/371162727:1725477291:drR3e2YZ7BWdLtq5FsikAtpNnlnDKRtwCf--0ykajP8/8be0a3797cfe418f/848a0521fa4d948

MicrosoftEdgeCP.exe

Remote address:

104.26.6.104:443

Request

POST /cdn-cgi/challenge-platform/h/b/flow/ov1/371162727:1725477291:drR3e2YZ7BWdLtq5FsikAtpNnlnDKRtwCf--0ykajP8/8be0a3797cfe418f/848a0521fa4d948 HTTP/2.0
host: nezur.io
accept: */*
origin: https://nezur.io
referer: https://nezur.io/
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
content-type: application/x-www-form-urlencoded
cf-challenge: 848a0521fa4d948
accept-encoding: gzip, deflate, br
content-length: 1943
cache-control: no-cache

Response

HTTP/2.0 200

date: Wed, 04 Sep 2024 20:13:10 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: mAbZ/wR/vBWAIDfpfqMdwVoDYAeYdmjJqPFcF5v435t1yeRp8KiaAbyAuBUNypwzGAKdW3bo2w==$/EkDes1QFhzkGk2R
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BJOIwf336HwU0I%2FaIewj4jZnFttP7KeKylZl%2BP8y8BxU1OAT78%2BXF6cQMy1ajUn1q3NxNqbDV20PvEfSmnjnpFlebu5IGwQEFBQCcKtATlSNWtAsbjpUPNL7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8be0a37e0bdb418f-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
POST

https://nezur.io/cdn-cgi/challenge-platform/h/b/flow/ov1/371162727:1725477291:drR3e2YZ7BWdLtq5FsikAtpNnlnDKRtwCf--0ykajP8/8be0a3797cfe418f/848a0521fa4d948

MicrosoftEdgeCP.exe

Remote address:

104.26.6.104:443

Request

POST /cdn-cgi/challenge-platform/h/b/flow/ov1/371162727:1725477291:drR3e2YZ7BWdLtq5FsikAtpNnlnDKRtwCf--0ykajP8/8be0a3797cfe418f/848a0521fa4d948 HTTP/2.0
host: nezur.io
accept: */*
origin: https://nezur.io
referer: https://nezur.io/
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
content-type: application/x-www-form-urlencoded
cf-challenge: 848a0521fa4d948
accept-encoding: gzip, deflate, br
content-length: 2535
cache-control: no-cache

Response

HTTP/2.0 200

date: Wed, 04 Sep 2024 20:13:11 GMT
content-type: text/html; charset=UTF-8
cf-chl-out: Gmk16+b8cyyfY4wVfvB6JP/3a/CPgj6RWqfj6PESWyqGk5Q9zWzFv65oIfXOY4XfzX1RCIe3mGC57pT6gcRjqnUbaS5tP6gxamOu4xWJmleOzX0s1zBW/g==$lDATwxemFa+XkXqY
cf-chl-out-s: 7ri8m/Avmsgq7tRtHLd7+MIGnbVlR8jqkxK4BUMCr9M9B8dV1hZRophyWs5t2YFQ36OKv1JtwA0xoCwXSA0+C1bsv6OkLfyOVgI+7vedgX9cx/N9XTW/ncbCrJ3NtJvEs2Ruq73iLTNUsahD/3aHo14AX/qghWDmBaXXccmL1yl2USmUCU5rYMd+rG/PHUV/2ClONuh4OCDFblg9NNCdORivr5EylQfkrQVijPXci6UcfvUUI7cbEC8xAU72MJgbTBa2vLyUMvPZMJmUxyOw5MUbpSg8ue/v84KHG5hbwE8Il0J+FdTwupV3QUslIcnNXblru/sHTCy2nT4I+A==$j4FUQgbaz08U0xpk
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BfBRZWC93Ind%2FSP6FKdfgm230574sgU60a7HUPixP9ZuxfBVKyY6VSzBBYh0oNzGNFk4DouNtvpWQQaCdOn%2F2%2FR%2F14656IqX2vJXEE0CZ8uuw7P8Zv9IUMUk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8be0a3802eb0418f-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
DNS

c.pki.goog

MicrosoftEdge.exe

Remote address:

8.8.8.8:53

Request

c.pki.goog

IN A

Response

c.pki.goog

IN CNAME

pki-goog.l.google.com

pki-goog.l.google.com

IN A

216.58.214.67
GET

http://c.pki.goog/r/gsr1.crl

MicrosoftEdgeCP.exe

Remote address:

216.58.214.67:80

Request

GET /r/gsr1.crl HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/10.0
Host: c.pki.goog

Response

HTTP/1.1 200 OK

Accept-Ranges: bytes
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
Content-Length: 1739
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 04 Sep 2024 19:40:02 GMT
Expires: Wed, 04 Sep 2024 20:30:02 GMT
Cache-Control: public, max-age=3000
Age: 1987
Last-Modified: Mon, 08 Jul 2024 07:38:00 GMT
Content-Type: application/pkix-crl
Vary: Accept-Encoding
GET

http://c.pki.goog/r/r4.crl

MicrosoftEdgeCP.exe

Remote address:

216.58.214.67:80

Request

GET /r/r4.crl HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/10.0
Host: c.pki.goog

Response

HTTP/1.1 200 OK

Accept-Ranges: bytes
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
Content-Length: 436
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 04 Sep 2024 19:33:12 GMT
Expires: Wed, 04 Sep 2024 20:23:12 GMT
Cache-Control: public, max-age=3000
Age: 2397
Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT
Content-Type: application/pkix-crl
Vary: Accept-Encoding
DNS

104.6.26.104.in-addr.arpa

Remote address:

8.8.8.8:53

Request

104.6.26.104.in-addr.arpa

IN PTR

Response
GET

https://nezur.io/favicon.ico

MicrosoftEdge.exe

Remote address:

104.26.6.104:443

Request

GET /favicon.ico HTTP/2.0
host: nezur.io
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
dnt: 1

Response

HTTP/2.0 403

date: Wed, 04 Sep 2024 20:13:11 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-content-options: nosniff
x-frame-options: SAMEORIGIN
cf-mitigated: challenge
cf-chl-out: jZLXU2yFfmZsCGp8htGk1FKkYhhj/1iwjrz9MF1wdTi/z6d2OMmGi9ekksTEICygJwwwOW9g3h8XdrA97a7nIStd+WwDnRAXT7fgCSDac7V6MHaw+udYtHLvur57gAuY2M6cRncHOTJCtaRDqyoxoA==$QISaO+2bTmlHqG4uxzkOwA==
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=56uS7V29E6fNwW%2FmehwE8bECxARmXJEFNJ5PqzN8ecMEcmB685pHFWF94IWiveY2K3spBD%2FBZqqXlMiyHM9r%2BnJNRSM4%2BNEkg19cY%2FJixp2f2Ob1LBoJS5GT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8be0a37eacd09428-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
DNS

challenges.cloudflare.com

MicrosoftEdgeCP.exe

Remote address:

8.8.8.8:53

Request

challenges.cloudflare.com

IN A

Response

challenges.cloudflare.com

IN A

104.18.94.41

challenges.cloudflare.com

IN A

104.18.95.41
GET

https://challenges.cloudflare.com/turnstile/v0/b/a5b175b00260/api.js?onload=sHIF2&render=explicit

MicrosoftEdgeCP.exe

Remote address:

104.18.94.41:443

Request

GET /turnstile/v0/b/a5b175b00260/api.js?onload=sHIF2&render=explicit HTTP/2.0
host: challenges.cloudflare.com
accept: application/javascript, */*;q=0.8
referer: https://nezur.io/
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063
accept-encoding: gzip, deflate, br

Response

HTTP/2.0 200

date: Wed, 04 Sep 2024 20:13:10 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Mon, 02 Sep 2024 16:25:39 GMT
cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 8be0a37f7baa94aa-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET

http://c.pki.goog/r/gsr1.crl

MicrosoftEdge.exe

Remote address:

216.58.214.67:80

Request

GET /r/gsr1.crl HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/10.0
Host: c.pki.goog

Response

HTTP/1.1 200 OK

Accept-Ranges: bytes
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
Content-Length: 1739
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 04 Sep 2024 19:40:02 GMT
Expires: Wed, 04 Sep 2024 20:30:02 GMT
Cache-Control: public, max-age=3000
Age: 1988
Last-Modified: Mon, 08 Jul 2024 07:38:00 GMT
Content-Type: application/pkix-crl
Vary: Accept-Encoding
GET

http://c.pki.goog/r/r4.crl

MicrosoftEdge.exe

Remote address:

216.58.214.67:80

Request

GET /r/r4.crl HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/10.0
Host: c.pki.goog

Response

HTTP/1.1 200 OK

Accept-Ranges: bytes
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
Content-Length: 436
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 04 Sep 2024 19:33:12 GMT
Expires: Wed, 04 Sep 2024 20:23:12 GMT
Cache-Control: public, max-age=3000
Age: 2398
Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT
Content-Type: application/pkix-crl
Vary: Accept-Encoding
DNS

67.214.58.216.in-addr.arpa

Remote address:

8.8.8.8:53

Request

67.214.58.216.in-addr.arpa

IN PTR

Response

67.214.58.216.in-addr.arpa

IN PTR

par10s39-in-f31e100net

67.214.58.216.in-addr.arpa

IN PTR

fra15s10-in-f3�G

67.214.58.216.in-addr.arpa

IN PTR

fra15s10-in-f67�G
DNS

41.94.18.104.in-addr.arpa

Remote address:

8.8.8.8:53

Request

41.94.18.104.in-addr.arpa

IN PTR

Response
DNS

168.245.100.95.in-addr.arpa

Remote address:

8.8.8.8:53

Request

168.245.100.95.in-addr.arpa

IN PTR

Response

168.245.100.95.in-addr.arpa

IN PTR

a95-100-245-168deploystaticakamaitechnologiescom
DNS

161.19.199.152.in-addr.arpa

Remote address:

8.8.8.8:53

Request

161.19.199.152.in-addr.arpa

IN PTR

Response

95.101.143.235:443

assets.msn.com

tls, http2

MicrosoftEdgeCP.exe

1.1kB
4.7kB
15
13
95.101.143.235:443

assets.msn.com

tls, http2

MicrosoftEdgeCP.exe

1.1kB
4.7kB
15
13
95.101.143.235:443

assets.msn.com

tls, http2

MicrosoftEdgeCP.exe

1.1kB
4.7kB
15
13
95.101.143.235:443

https://assets.msn.com/staticsb/statics/latest/oneTrust/1.9/consent/55a804ab-e5c6-4b97-9319-86263d365d28/iab2V2Data.json

tls, http2

MicrosoftEdgeCP.exe

19.0kB
491.6kB
374
366

HTTP Request

GET https://assets.msn.com/bundles/v1/edge/latest/common.5dd7cff85de67632bfd7.js

HTTP Request

GET https://assets.msn.com/bundles/v1/edge/latest/vendors.c47bf4f4981f23895ddb.js

HTTP Request

GET https://assets.msn.com/staticsb/statics/latest/oneTrust/1.9/scripttemplates/otSDKStub.js

HTTP Request

GET https://assets.msn.com/bundles/v1/edge/latest/microsoft.8aa91a5fe4f5d8517ae1.js

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://assets.msn.com/staticsb/statics/latest/oneTrust/1.9/consent/55a804ab-e5c6-4b97-9319-86263d365d28/55a804ab-e5c6-4b97-9319-86263d365d28.json

HTTP Response

200

HTTP Request

GET https://assets.msn.com/staticsb/statics/latest/oneTrust/1.9/scripttemplates/202310.2.0/otBannerSdk.js

HTTP Response

200

HTTP Request

GET https://assets.msn.com/staticsb/statics/latest/oneTrust/1.9/scripttemplates/202310.2.0/otTCF.js

HTTP Request

GET https://assets.msn.com/staticsb/statics/latest/oneTrust/1.9/consent/55a804ab-e5c6-4b97-9319-86263d365d28/e51556d4-5848-4a4b-a5e2-bc98431e1bf7/en-gb.json

HTTP Request

GET https://assets.msn.com/staticsb/statics/latest/oneTrust/1.9/consent/55a804ab-e5c6-4b97-9319-86263d365d28/iab2V2Data.json

HTTP Response

200

HTTP Response

200

HTTP Response

200
204.79.197.203:443

www.msn.com

tls, http2

MicrosoftEdgeCP.exe

1.1kB
7.0kB
14
13
204.79.197.203:443

https://www.msn.com/bundles/v1/edge/latest/web-worker.440858f9fe4973b6d967.js

tls, http2

MicrosoftEdgeCP.exe

3.0kB
37.2kB
37
36

HTTP Request

GET https://www.msn.com/bundles/v1/edge/latest/manifest.appcache?locale=en-US&market=US&enableregulatorypsm=0&enablecpsm=0&ishostisolationenforced=0&targetexperience=default

HTTP Request

GET https://www.msn.com/bundles/v1/edge/latest/web-worker.440858f9fe4973b6d967.js

HTTP Response

200

HTTP Response

200
204.79.197.203:443

www.msn.com

tls, http2

MicrosoftEdge.exe

1.3kB
7.0kB
14
13
204.79.197.203:443

https://www.msn.com/favicon.ico

tls, http2

MicrosoftEdge.exe

1.6kB
8.9kB
17
16

HTTP Request

GET https://www.msn.com/favicon.ico

HTTP Response

200
20.44.10.123:443

https://browser.events.data.msn.com/OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-2.2.2&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1712234726000&w=0&anoncknm=app_anon

tls, http2

MicrosoftEdgeCP.exe

16.9kB
9.1kB
31
21

HTTP Request

POST https://browser.events.data.msn.com/OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-2.2.2&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1712234726000&w=0&anoncknm=app_anon

HTTP Request

POST https://browser.events.data.msn.com/OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-2.2.2&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1712234726000&w=0&anoncknm=app_anon

HTTP Request

POST https://browser.events.data.msn.com/OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-2.2.2&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1712234726000&w=0&anoncknm=app_anon

HTTP Response

200

HTTP Response

200

HTTP Response

200
20.44.10.123:443

browser.events.data.msn.com

tls, http2

MicrosoftEdgeCP.exe

1.1kB
6.9kB
14
11
20.44.10.123:443

browser.events.data.msn.com

tls, http2

MicrosoftEdgeCP.exe

1.1kB
6.9kB
14
11
88.221.135.56:443

https://www.bing.com/AS/IEOneBox/xls.aspx

tls, http2

MicrosoftEdgeCP.exe

215.4kB
246.0kB
443
351

HTTP Request

GET https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US

HTTP Response

200

HTTP Request

GET https://www.bing.com/rb/19/cir3,ortl,cc,nc/H7yNdbJxRRAcp5Cd9wD9aQLYG6s.css?bu=C6QJlgOrBIAK5QjPCN4GXV3JBF0

HTTP Response

200

HTTP Request

GET https://www.bing.com/rb/19/cir3,ortl,cc,nc/2pcIVTIB2WwRV2SiUfazcACdxxA.css?bu=BsMCSK0CUl3KAg

HTTP Request

GET https://www.bing.com/rb/3D/ortl,cc,nc/4-xJy3tX6bM2BGl5zKioiEcQ1TU.css?bu=A4gCjAKPAg

HTTP Request

GET https://www.bing.com/rb/4M/jnc,nj/TPP8n_y3I3wPSrrWXVsbMe6iTAc.js?bu=D7ws_Cr8AY0rkSuTK5UruivELI0sqyqBEqUsqyjsKw

HTTP Request

GET https://www.bing.com/rp/lZfFRIZsGLf3poBW6xAz2KFILkI.gz.js

HTTP Request

GET https://www.bing.com/rp/6wzJBpbyuAoCS5bfkKiW0Aw2R6o.gz.js

HTTP Request

GET https://www.bing.com/rp/DicRs1X5x7sMwnmwcxBuO2kpGeI.gz.js

HTTP Request

GET https://www.bing.com/rp/L3qgZ2pA6whKnPPHkQnZ2_d8WVo.gz.js

HTTP Request

GET https://www.bing.com/rp/IOwhK4uDW4Sh2EVXk1BBw5OkHPY.gz.js

HTTP Request

GET https://www.bing.com/rp/dcb-PwRbjINh_Wg-9pEP8tD_qO4.gz.js

HTTP Request

GET https://www.bing.com/rp/7DRnJ-ywpuG7tVaukb2LDibhBUg.gz.js

HTTP Request

GET https://www.bing.com/rp/t4xaeuTBmu-Lp_KEbPyZVrfX8yw.gz.js

HTTP Request

GET https://www.bing.com/rp/ss3d0sJoMnwEPabtwPxYd3-17LU.gz.js

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://www.bing.com/manifest/IEOneBox_V2.appcache?setlang=en-US

HTTP Request

GET https://www.bing.com/rp/WAAHGo-kP0xCDM16LGm9-alzHb8.gz.js

HTTP Response

200

HTTP Response

200

HTTP Request

POST https://www.bing.com/AS/IEOneBox/xls.aspx

HTTP Request

GET https://www.bing.com/AS/API/IEOneBox/V2/Suggestions?qry=ne&cc=US&setlang=en-US&cp=2&cvid=359417938464406d9e11258e4782bb08&ig=a71b3104d0bf42a7bdc529cdb8b3cf4c

HTTP Request

GET https://www.bing.com/AS/API/IEOneBox/V2/Init?setlang=en-US

HTTP Response

404

HTTP Response

200

HTTP Response

404

HTTP Request

GET https://www.bing.com/AS/API/IEOneBox/V2/Suggestions?qry=nez&cc=US&setlang=en-US&cp=3&cvid=359417938464406d9e11258e4782bb08&ig=956474c8b89e48d19c2d1ee9d5474c6c

HTTP Response

200

HTTP Request

GET https://www.bing.com/AS/API/IEOneBox/V2/Suggestions?qry=nezu&cc=US&setlang=en-US&cp=4&cvid=359417938464406d9e11258e4782bb08&ig=07d6ce3f4c8e4acd8501b81a6029dec7

HTTP Response

200

HTTP Request

GET https://www.bing.com/AS/API/IEOneBox/V2/Suggestions?qry=nezur&cc=US&setlang=en-US&cp=5&cvid=359417938464406d9e11258e4782bb08&ig=232d8a58f5c24f518732e1240b9d9e6c

HTTP Response

200

HTTP Request

GET https://www.bing.com/AS/API/IEOneBox/V2/Suggestions?qry=nezur.&cc=US&setlang=en-US&cp=6&cvid=359417938464406d9e11258e4782bb08&ig=6f12aea422ee42eb87fdf58b77bb50b4

HTTP Response

200

HTTP Request

GET https://www.bing.com/AS/API/IEOneBox/V2/Suggestions?qry=nezur.i&cc=US&setlang=en-US&cp=7&cvid=359417938464406d9e11258e4782bb08&ig=b8aa0754665243948dd6d62abbfe583d

HTTP Response

200

HTTP Request

GET https://www.bing.com/AS/API/IEOneBox/V2/Suggestions?qry=nezur.io&cc=US&setlang=en-US&cp=8&cvid=359417938464406d9e11258e4782bb08&ig=ba61e430407e4560b6a6919c0ac656a6

HTTP Response

200

HTTP Request

GET https://www.bing.com/AS/API/IEOneBox/V2/Suggestions?qry=nezur.o&cc=US&setlang=en-US&cp=7&cvid=359417938464406d9e11258e4782bb08&ig=7bb391abf7e34993841662aaec678d9c

HTTP Response

200

HTTP Request

GET https://www.bing.com/AS/API/IEOneBox/V2/Suggestions?qry=nezur.oi&cc=US&setlang=en-US&cp=8&cvid=359417938464406d9e11258e4782bb08&ig=2717df3e45e24a80820c3d3ab52052c9

HTTP Response

200

HTTP Request

POST https://www.bing.com/AS/IEOneBox/xls.aspx

HTTP Response

404

HTTP Request

POST https://www.bing.com/AS/IEOneBox/xls.aspx

HTTP Response

404

HTTP Request

POST https://www.bing.com/AS/IEOneBox/xls.aspx

HTTP Response

404

HTTP Request

POST https://www.bing.com/AS/IEOneBox/xls.aspx

HTTP Response

404

HTTP Request

POST https://www.bing.com/AS/IEOneBox/xls.aspx

HTTP Response

404

HTTP Request

POST https://www.bing.com/AS/IEOneBox/xls.aspx

HTTP Response

404

HTTP Request

POST https://www.bing.com/AS/IEOneBox/xls.aspx

HTTP Response

404

HTTP Request

POST https://www.bing.com/AS/IEOneBox/xls.aspx

HTTP Response

404

HTTP Request

POST https://www.bing.com/AS/IEOneBox/xls.aspx

HTTP Response

404

HTTP Request

POST https://www.bing.com/AS/IEOneBox/xls.aspx

HTTP Response

404

HTTP Request

POST https://www.bing.com/AS/IEOneBox/xls.aspx

HTTP Response

404

HTTP Request

POST https://www.bing.com/AS/IEOneBox/xls.aspx

HTTP Response

404

HTTP Request

GET https://www.bing.com/AS/API/IEOneBox/V2/Suggestions?qry=&cc=US&setlang=en-US&cp=0&cvid=00ea958f35e14e078f0f1edda758e995&ig=8485d99a87c74c74a3821c3fb6cf4756

HTTP Response

200

HTTP Request

POST https://www.bing.com/AS/IEOneBox/xls.aspx

HTTP Response

404

HTTP Request

POST https://www.bing.com/AS/IEOneBox/xls.aspx

HTTP Response

404

HTTP Request

POST https://www.bing.com/AS/IEOneBox/xls.aspx

HTTP Request

POST https://www.bing.com/AS/IEOneBox/xls.aspx

HTTP Response

404

HTTP Response

404
88.221.135.56:443

www.bing.com

tls, http2

MicrosoftEdgeCP.exe

1.1kB
4.8kB
15
13
88.221.135.56:443

https://www.bing.com/partner/warmup.gif

tls, http2

MicrosoftEdgeCP.exe

1.6kB
6.8kB
17
16

HTTP Request

GET https://www.bing.com/partner/warmup.gif

HTTP Response

200

HTTP Request

GET https://www.bing.com/partner/warmup.gif

HTTP Response

200
88.221.135.56:443

www.bing.com

tls, http2

MicrosoftEdgeCP.exe

1.1kB
4.8kB
15
13
104.26.6.104:80

nezur.io

MicrosoftEdgeCP.exe

150 B
104 B
3
2
104.26.6.104:80

http://nezur.io/

http

MicrosoftEdgeCP.exe

854 B
956 B
5
3

HTTP Request

GET http://nezur.io/

HTTP Response

301
104.26.6.104:443

https://nezur.io/cdn-cgi/challenge-platform/h/b/flow/ov1/371162727:1725477291:drR3e2YZ7BWdLtq5FsikAtpNnlnDKRtwCf--0ykajP8/8be0a3797cfe418f/848a0521fa4d948

tls, http2

MicrosoftEdgeCP.exe

27.1kB
597.5kB
463
453

HTTP Request

GET https://nezur.io/

HTTP Response

403

HTTP Request

GET https://nezur.io/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=8be0a3797cfe418f

HTTP Response

200

HTTP Request

POST https://nezur.io/cdn-cgi/challenge-platform/h/b/flow/ov1/371162727:1725477291:drR3e2YZ7BWdLtq5FsikAtpNnlnDKRtwCf--0ykajP8/8be0a3797cfe418f/848a0521fa4d948

HTTP Response

200

HTTP Request

POST https://nezur.io/cdn-cgi/challenge-platform/h/b/flow/ov1/371162727:1725477291:drR3e2YZ7BWdLtq5FsikAtpNnlnDKRtwCf--0ykajP8/8be0a3797cfe418f/848a0521fa4d948

HTTP Response

200
216.58.214.67:80

http://c.pki.goog/r/r4.crl

http

MicrosoftEdgeCP.exe

510 B
3.8kB
6
5

HTTP Request

GET http://c.pki.goog/r/gsr1.crl

HTTP Response

200

HTTP Request

GET http://c.pki.goog/r/r4.crl

HTTP Response

200
104.26.6.104:443

nezur.io

tls, http2

MicrosoftEdge.exe

865 B
3.7kB
10
9
104.26.6.104:443

https://nezur.io/favicon.ico

tls, http2

MicrosoftEdge.exe

13.2kB
352.0kB
273
271

HTTP Request

GET https://nezur.io/favicon.ico

HTTP Response

403
104.18.94.41:443

https://challenges.cloudflare.com/turnstile/v0/b/a5b175b00260/api.js?onload=sHIF2&render=explicit

tls, http2

MicrosoftEdgeCP.exe

2.0kB
21.5kB
28
24

HTTP Request

GET https://challenges.cloudflare.com/turnstile/v0/b/a5b175b00260/api.js?onload=sHIF2&render=explicit

HTTP Response

200
104.18.94.41:443

challenges.cloudflare.com

tls, http2

MicrosoftEdgeCP.exe

924 B
4.7kB
11
8
216.58.214.67:80

http://c.pki.goog/r/r4.crl

http

MicrosoftEdge.exe

510 B
3.8kB
6
5

HTTP Request

GET http://c.pki.goog/r/gsr1.crl

HTTP Response

200

HTTP Request

GET http://c.pki.goog/r/r4.crl

HTTP Response

200

8.8.8.8:53

www.msn.com

dns

MicrosoftEdge.exe

57 B
132 B
1
1

DNS Request

www.msn.com

DNS Response

204.79.197.203
8.8.8.8:53

assets.msn.com

dns

MicrosoftEdgeCP.exe

60 B
278 B
1
1

DNS Request

assets.msn.com

DNS Response

95.101.143.235

95.101.143.250

95.101.143.176

95.101.143.234

95.101.143.227

95.101.143.171

95.101.143.251

95.101.143.233

95.101.143.248
8.8.8.8:53

235.143.101.95.in-addr.arpa

dns

73 B
139 B
1
1

DNS Request

235.143.101.95.in-addr.arpa
8.8.8.8:53

81.144.22.2.in-addr.arpa

dns

70 B
133 B
1
1

DNS Request

81.144.22.2.in-addr.arpa
8.8.8.8:53

browser.events.data.msn.com

dns

MicrosoftEdgeCP.exe

73 B
203 B
1
1

DNS Request

browser.events.data.msn.com

DNS Response

20.44.10.123
8.8.8.8:53

123.10.44.20.in-addr.arpa

dns

71 B
145 B
1
1

DNS Request

123.10.44.20.in-addr.arpa
8.8.8.8:53

56.135.221.88.in-addr.arpa

dns

72 B
137 B
1
1

DNS Request

56.135.221.88.in-addr.arpa
8.8.8.8:53

nezur.io

dns

MicrosoftEdge.exe

54 B
102 B
1
1

DNS Request

nezur.io

DNS Response

104.26.6.104

104.26.7.104

172.67.74.136
8.8.8.8:53

c.pki.goog

dns

MicrosoftEdge.exe

56 B
107 B
1
1

DNS Request

c.pki.goog

DNS Response

216.58.214.67
8.8.8.8:53

104.6.26.104.in-addr.arpa

dns

71 B
133 B
1
1

DNS Request

104.6.26.104.in-addr.arpa
8.8.8.8:53

challenges.cloudflare.com

dns

MicrosoftEdgeCP.exe

71 B
103 B
1
1

DNS Request

challenges.cloudflare.com

DNS Response

104.18.94.41

104.18.95.41
8.8.8.8:53

67.214.58.216.in-addr.arpa

dns

72 B
169 B
1
1

DNS Request

67.214.58.216.in-addr.arpa
8.8.8.8:53

41.94.18.104.in-addr.arpa

dns

71 B
133 B
1
1

DNS Request

41.94.18.104.in-addr.arpa
8.8.8.8:53

168.245.100.95.in-addr.arpa

dns

73 B
139 B
1
1

DNS Request

168.245.100.95.in-addr.arpa
8.8.8.8:53

161.19.199.152.in-addr.arpa

dns

73 B
144 B
1
1

DNS Request

161.19.199.152.in-addr.arpa

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\XCFODRP5\edgecompatviewlist[1].xml

Filesize
74KB

MD5
d4fc49dc14f63895d997fa4940f24378

SHA1
3efb1437a7c5e46034147cbbc8db017c69d02c31

SHA256
853d2f4eb81c9fdcea2ee079f6faf98214b111b77cdf68709b38989d123890f1

SHA512
cc60d79b4afe5007634ac21dc4bc92081880be4c0d798a1735b63b27e936c02f399964f744dc73711987f01e8a1064b02a4867dd6cac27538e5fbe275cc61e0a

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\Q627GJ7O\warmup[1].gif

Filesize
43B

MD5
325472601571f31e1bf00674c368d335

SHA1
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a

SHA256
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b

SHA512
717ea0ff7f3f624c268eccb244e24ec1305ab21557abb3d6f1a7e183ff68a2d28f13d1d2af926c9ef6d1fb16dd8cbe34cd98cacf79091dddc7874dcee21ecfdc

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\User\Default\DOMStore\38W0ZDYP\www.bing[1].xml

Filesize
1KB

MD5
387a2bfa518629167b3221509ba138e1

SHA1
ca1ba4d00d7aa36d42c9f4446ffb92df6fa52973

SHA256
2722c6daa7e079880ebb755eb1aa598ca75c91fe1decf7675a2b92132ca05559

SHA512
74ff4d293d9c35daf76cd870e81d95b36e42857a2131c0144f35c52aae07ea3eaa2a1dc06d167a434ed9325c9c67b1b6c883bd9c08d03a47fc08724975e250f2

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\Cache\P68QH4OW\favicon[1].ico

Filesize
758B

MD5
84cc977d0eb148166481b01d8418e375

SHA1
00e2461bcd67d7ba511db230415000aefbd30d2d

SHA256
bbf8da37d92138cc08ffeec8e3379c334988d5ae99f4415579999bfbbb57a66c

SHA512
f47a507077f9173fb07ec200c2677ba5f783d645be100f12efe71f701a74272a98e853c4fab63740d685853935d545730992d0004c9d2fe8e1965445cab509c3

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\Microsoft\CryptnetUrlCache\Content\57C8EDB95DF3F0AD4EE2DC2B8CFD4157

Filesize
4KB

MD5
1bfe591a4fe3d91b03cdf26eaacd8f89

SHA1
719c37c320f518ac168c86723724891950911cea

SHA256
9cf94355051bf0f4a45724ca20d1cc02f76371b963ab7d1e38bd8997737b13d8

SHA512
02f88da4b610678c31664609bcfa9d61db8d0b0617649981af948f670f41a6207b4ec19fecce7385a24e0c609cbbf3f2b79a8acaf09a03c2c432cc4dce75e9db

Download Submit
memory/2532-0-0x000001FFF7020000-0x000001FFF7030000-memory.dmp

Filesize
64KB

Download
memory/2532-35-0x000001FFF44E0000-0x000001FFF44E2000-memory.dmp

Filesize
8KB

Download
memory/2532-16-0x000001FFF7120000-0x000001FFF7130000-memory.dmp

Filesize
64KB

Download
memory/2532-142-0x000001FFFFAE0000-0x000001FFFFAE1000-memory.dmp

Filesize
4KB

Download
memory/2532-143-0x000001FFFFAF0000-0x000001FFFFAF1000-memory.dmp

Filesize
4KB

Download
memory/4084-400-0x000001EC98DF0000-0x000001EC98E00000-memory.dmp

Filesize
64KB

Download
memory/4084-403-0x000001EC98DF0000-0x000001EC98E00000-memory.dmp

Filesize
64KB

Download
memory/4084-95-0x000001ECAA060000-0x000001ECAA160000-memory.dmp

Filesize
1024KB

Download
memory/4084-101-0x000001ECAAA80000-0x000001ECAAAA0000-memory.dmp

Filesize
128KB

Download
memory/4084-129-0x000001ECBBAA0000-0x000001ECBBBA0000-memory.dmp

Filesize
1024KB

Download
memory/4084-65-0x000001EC99580000-0x000001EC99680000-memory.dmp

Filesize
1024KB

Download
memory/4084-406-0x000001EC98DF0000-0x000001EC98E00000-memory.dmp

Filesize
64KB

Download
memory/4084-405-0x000001EC98DF0000-0x000001EC98E00000-memory.dmp

Filesize
64KB

Download
memory/4084-404-0x000001EC98DF0000-0x000001EC98E00000-memory.dmp

Filesize
64KB

Download
memory/4084-164-0x000001ECAB900000-0x000001ECABA00000-memory.dmp

Filesize
1024KB

Download
memory/4084-210-0x000001ECBBDE0000-0x000001ECBBE00000-memory.dmp

Filesize
128KB

Download
memory/4084-217-0x000001ECBC170000-0x000001ECBC190000-memory.dmp

Filesize
128KB

Download
memory/4084-94-0x000001ECA9D00000-0x000001ECA9D20000-memory.dmp

Filesize
128KB

Download
memory/4084-248-0x000001ECBBFF0000-0x000001ECBC010000-memory.dmp

Filesize
128KB

Download
memory/4084-402-0x000001EC98DF0000-0x000001EC98E00000-memory.dmp

Filesize
64KB

Download
memory/4940-43-0x0000022290140000-0x0000022290240000-memory.dmp

Filesize
1024KB

Download
memory/4988-52-0x000002AF77840000-0x000002AF77940000-memory.dmp

Filesize
1024KB

Download
memory/4988-51-0x000002AF77840000-0x000002AF77940000-memory.dmp

Filesize
1024KB

Download
memory/4988-59-0x000002AF77DB0000-0x000002AF77DB2000-memory.dmp

Filesize
8KB

Download
memory/4988-57-0x000002AF77D90000-0x000002AF77D92000-memory.dmp

Filesize
8KB

Download
memory/4988-55-0x000002AF77D70000-0x000002AF77D72000-memory.dmp

Filesize
8KB

Download
memory/4988-50-0x000002AF77840000-0x000002AF77940000-memory.dmp

Filesize
1024KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Response

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request