Analysis
-
max time kernel
1688s -
max time network
1693s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
-
submitted
11/12/2024, 18:37 UTC
General
-
Target
Fiddler.exe
-
Size
3.5MB
-
MD5
87bc17f56e744e74408e6ae8bb28b724
-
SHA1
3aa572388083ff00a95405d34d1189c99c7ff5be
-
SHA256
ffb24fc36ade87988f9908e848d0333ce7ffb2b4e4d0ffb43f6556246069d057
-
SHA512
cbeee155c97b87a22b92b808f86fee25c18db51ab43a36b657d532d2d47d3a7db2f4507a699b72af904bf6d5ed851d1ae1fcfb4833a57096e6c7787211c0f35d
-
SSDEEP
49152:cbvLSgf+VOdx3Vw5+mbSgwJKI0Qpvs3c2KTn4Xj9Bh:cTmgf+VOdc5vbSgwJKDP24Rf
Score
3/10
Malware Config
Signatures
-
Browser Information Discovery 1 TTPs
Enumerate browser information.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Modifies system certificate store 2 TTPs 10 IoCs
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of FindShellTrayWindow 25 IoCs
-
Suspicious use of SendNotifyMessage 12 IoCs
-
Suspicious use of WriteProcessMemory 64 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Fiddler.exe"C:\Users\Admin\AppData\Local\Temp\Fiddler.exe"1⤵
- Modifies system certificate store
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://api.getfiddler.com/r/?Win8EL2⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffca9d43cb8,0x7ffca9d43cc8,0x7ffca9d43cd83⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1880,17228562099184347047,10870408560424859030,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1872 /prefetch:23⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1880,17228562099184347047,10870408560424859030,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2392 /prefetch:33⤵
- Suspicious behavior: EnumeratesProcesses
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1880,17228562099184347047,10870408560424859030,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2804 /prefetch:83⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,17228562099184347047,10870408560424859030,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3340 /prefetch:13⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,17228562099184347047,10870408560424859030,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3348 /prefetch:13⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,17228562099184347047,10870408560424859030,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4696 /prefetch:13⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1880,17228562099184347047,10870408560424859030,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4120 /prefetch:83⤵
- Suspicious behavior: EnumeratesProcesses
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1880,17228562099184347047,10870408560424859030,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5508 /prefetch:83⤵
- Suspicious behavior: EnumeratesProcesses
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,17228562099184347047,10870408560424859030,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5528 /prefetch:13⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,17228562099184347047,10870408560424859030,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5544 /prefetch:13⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,17228562099184347047,10870408560424859030,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4852 /prefetch:13⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,17228562099184347047,10870408560424859030,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3580 /prefetch:13⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1880,17228562099184347047,10870408560424859030,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=2096 /prefetch:23⤵
- Suspicious behavior: EnumeratesProcesses
-
-
-
C:\Users\Admin\AppData\Local\Temp\EnableLoopback.exe"C:\Users\Admin\AppData\Local\Temp\EnableLoopback.exe"2⤵
- System Location Discovery: System Language Discovery
-
-
C:\Windows\system32\wbem\WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe1⤵
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵
Network
-
DNSapi.getfiddler.comRemote address:8.8.8.8:53Requestapi.getfiddler.comIN AResponseapi.getfiddler.comIN A18.239.69.37api.getfiddler.comIN A18.239.69.16api.getfiddler.comIN A18.239.69.86api.getfiddler.comIN A18.239.69.3 -
DNS8.8.8.8.in-addr.arpaRemote address:8.8.8.8:53Request8.8.8.8.in-addr.arpaIN PTRResponse8.8.8.8.in-addr.arpaIN PTRdnsgoogle
-
DNSconfig.edge.skype.comRemote address:8.8.8.8:53Requestconfig.edge.skype.comIN AResponseconfig.edge.skype.comIN CNAMEconfig.edge.skype.com.trafficmanager.netconfig.edge.skype.com.trafficmanager.netIN CNAMEl-0007.config.skype.coml-0007.config.skype.comIN CNAMEconfig-edge-skype.l-0007.l-msedge.netconfig-edge-skype.l-0007.l-msedge.netIN CNAMEl-0007.l-msedge.netl-0007.l-msedge.netIN A13.107.42.16
-
DNSctldl.windowsupdate.comRemote address:8.8.8.8:53Requestctldl.windowsupdate.comIN AResponsectldl.windowsupdate.comIN CNAMEctldl.windowsupdate.com.delivery.microsoft.comctldl.windowsupdate.com.delivery.microsoft.comIN CNAMEwu-b-net.trafficmanager.netwu-b-net.trafficmanager.netIN CNAMEdownload.windowsupdate.com.edgesuite.netdownload.windowsupdate.com.edgesuite.netIN CNAMEa767.dspw65.akamai.neta767.dspw65.akamai.netIN A2.22.144.73a767.dspw65.akamai.netIN A2.22.144.81
-
DNSocsp.digicert.comRemote address:8.8.8.8:53Requestocsp.digicert.comIN AResponseocsp.digicert.comIN CNAMEocsp.edge.digicert.comocsp.edge.digicert.comIN CNAMEfp2e7a.wpc.2be4.phicdn.netfp2e7a.wpc.2be4.phicdn.netIN CNAMEfp2e7a.wpc.phicdn.netfp2e7a.wpc.phicdn.netIN A192.229.221.95
-
DNSwcpstatic.microsoft.comRemote address:8.8.8.8:53Requestwcpstatic.microsoft.comIN AResponsewcpstatic.microsoft.comIN CNAMEconsentdeliveryfd.azurefd.netconsentdeliveryfd.azurefd.netIN CNAMEfirstparty-azurefd-prod.trafficmanager.netfirstparty-azurefd-prod.trafficmanager.netIN CNAMEshed.dual-low.s-part-0036.t-0009.t-msedge.netshed.dual-low.s-part-0036.t-0009.t-msedge.netIN CNAMEs-part-0036.t-0009.t-msedge.nets-part-0036.t-0009.t-msedge.netIN A13.107.246.64
-
DNSbrowser.events.data.microsoft.comRemote address:8.8.8.8:53Requestbrowser.events.data.microsoft.comIN AResponsebrowser.events.data.microsoft.comIN CNAMEbrowser.events.data.trafficmanager.netbrowser.events.data.trafficmanager.netIN CNAMEonedscolprdeus03.eastus.cloudapp.azure.comonedscolprdeus03.eastus.cloudapp.azure.comIN A20.42.73.24
-
DNS144.245.100.95.in-addr.arpaRemote address:8.8.8.8:53Request144.245.100.95.in-addr.arpaIN PTRResponse144.245.100.95.in-addr.arpaIN PTRa95-100-245-144deploystaticakamaitechnologiescom
-
GEThttps://api.getfiddler.com/fc/latest?ver=5.0.20245.10105&tele=true&meta=trueRemote address:18.239.69.37:443RequestGET /fc/latest?ver=5.0.20245.10105&tele=true&meta=true HTTP/1.1
User-Agent: Fiddler/5.0.20245.10105 (.NET 4.8; WinNT 10.0.22000.0; en-US; 8xAMD64; Auto Update; Full Instance; Extensions: APITesting, AutoSaveExt, EventLog, FiddlerOrchestraAddon, HostsFile, RulesTab2, SAZClipboardFactory, SimpleFilter, Timeline)
Pragma: no-cache
Host: api.getfiddler.com
Accept-Language: en-US
Accept-Encoding: gzip, deflate
Connection: close
ResponseHTTP/1.1 200 OK
Content-Type: text/plain
Transfer-Encoding: chunked
Connection: close
Date: Wed, 11 Dec 2024 18:37:52 GMT
Signature: SignedHeaders=content-type;x-date, Signature=AAAAWzBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABNsAzGwa7Q3iTZFqv3xYHemw/qxkwk0sIC/usJVi7713VJv0B1JbfuiDXxHfScNyyQjkuaHKtwbn5qUeHjFwpGbcx4pKUMlaS+V4X9ndhSwOsFT3btW1r7Zrnwf0pnzEl94mMXPZRShTVkOFbqs9gLA5gvRSProKnn/o81fil4jl
api-supported-versions: 1.0
Server: Kestrel
Content-Encoding: gzip
Vary: Accept-Encoding
X-Date: Wed, 11 Dec 2024 18:37:52 GMT
X-Cache: Miss from cloudfront
Via: 1.1 9dfbacf2c8a61beb17591bdaab142956.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P4
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: _sm0akz-TUAeS-GV-fmeVSsJQusZsTu_I3SIZ3J01_qi541SS2yF5A==
-
DNS37.69.239.18.in-addr.arpaRemote address:8.8.8.8:53Request37.69.239.18.in-addr.arpaIN PTRResponse37.69.239.18.in-addr.arpaIN PTRserver-18-239-69-37ams58r cloudfrontnet
-
DNSlogin.live.comRemote address:8.8.8.8:53Requestlogin.live.comIN AResponselogin.live.comIN CNAMElogin.msa.msidentity.comlogin.msa.msidentity.comIN CNAMEwww.tm.lg.prod.aadmsa.trafficmanager.netwww.tm.lg.prod.aadmsa.trafficmanager.netIN CNAMEprdv4a.aadg.msidentity.comprdv4a.aadg.msidentity.comIN CNAMEwww.tm.v4.a.prd.aadg.trafficmanager.netwww.tm.v4.a.prd.aadg.trafficmanager.netIN A20.190.159.64www.tm.v4.a.prd.aadg.trafficmanager.netIN A40.126.31.69www.tm.v4.a.prd.aadg.trafficmanager.netIN A20.190.159.4www.tm.v4.a.prd.aadg.trafficmanager.netIN A40.126.31.73www.tm.v4.a.prd.aadg.trafficmanager.netIN A40.126.31.67www.tm.v4.a.prd.aadg.trafficmanager.netIN A40.126.31.71www.tm.v4.a.prd.aadg.trafficmanager.netIN A20.190.159.23www.tm.v4.a.prd.aadg.trafficmanager.netIN A20.190.159.75
-
DNSblogs.msdn.microsoft.comRemote address:8.8.8.8:53Requestblogs.msdn.microsoft.comIN AResponseblogs.msdn.microsoft.comIN CNAMEmsdn-redirection-arfxbpadcbf7ajba.z01.azurefd.netmsdn-redirection-arfxbpadcbf7ajba.z01.azurefd.netIN CNAMEstar-azurefd-prod.trafficmanager.netstar-azurefd-prod.trafficmanager.netIN CNAMEshed.dual-low.s-part-0036.t-0009.t-msedge.netshed.dual-low.s-part-0036.t-0009.t-msedge.netIN CNAMEs-part-0036.t-0009.t-msedge.nets-part-0036.t-0009.t-msedge.netIN A13.107.246.64
-
DNSlearn.microsoft.comRemote address:8.8.8.8:53Requestlearn.microsoft.comIN AResponselearn.microsoft.comIN CNAMElearn-public.trafficmanager.netlearn-public.trafficmanager.netIN CNAMElearn.microsoft.com.edgekey.netlearn.microsoft.com.edgekey.netIN CNAMElearn.microsoft.com.edgekey.net.globalredir.akadns.netlearn.microsoft.com.edgekey.net.globalredir.akadns.netIN CNAMEe13636.dscb.akamaiedge.nete13636.dscb.akamaiedge.netIN A95.100.246.21
-
DNSjs.monitor.azure.comRemote address:8.8.8.8:53Requestjs.monitor.azure.comIN AResponsejs.monitor.azure.comIN CNAMEaijscdn2-bwfdfxezdubebtb0.z01.azurefd.netaijscdn2-bwfdfxezdubebtb0.z01.azurefd.netIN CNAMEstar-azurefd-prod.trafficmanager.netstar-azurefd-prod.trafficmanager.netIN CNAMEshed.dual-low.s-part-0036.t-0009.t-msedge.netshed.dual-low.s-part-0036.t-0009.t-msedge.netIN CNAMEs-part-0036.t-0009.t-msedge.nets-part-0036.t-0009.t-msedge.netIN A13.107.246.64
-
DNS24.73.42.20.in-addr.arpaRemote address:8.8.8.8:53Request24.73.42.20.in-addr.arpaIN PTRResponse
-
DNSnexusrules.officeapps.live.comRemote address:8.8.8.8:53Requestnexusrules.officeapps.live.comIN AResponsenexusrules.officeapps.live.comIN CNAMEprod.nexusrules.live.com.akadns.netprod.nexusrules.live.com.akadns.netIN A52.111.227.11
-
GEThttps://api.getfiddler.com/r/?Win8ELRemote address:18.239.69.37:443RequestGET /r/?Win8EL HTTP/2.0
host: api.getfiddler.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
sec-ch-ua-mobile: ?0
dnt: 1
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: none
sec-fetch-mode: navigate
sec-fetch-user: ?1
sec-fetch-dest: document
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 301
content-length: 0
location: https://blogs.msdn.microsoft.com/fiddler/2011/12/10/revisiting-fiddler-and-win8-immersive-applications
date: Wed, 11 Dec 2024 18:37:56 GMT
server: Kestrel
x-cache: Miss from cloudfront
via: 1.1 38ff23673937c3eba42a4eefb2007078.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS58-P4
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: tTCX7gbeiE_MDPP5F9QjpF2-f2fvxShQrgEe5Xnh558mEt4j59SKgw==
-
GEThttps://blogs.msdn.microsoft.com/fiddler/2011/12/10/revisiting-fiddler-and-win8-immersive-applicationsRemote address:13.107.246.64:443RequestGET /fiddler/2011/12/10/revisiting-fiddler-and-win8-immersive-applications HTTP/2.0
host: blogs.msdn.microsoft.com
dnt: 1
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: none
sec-fetch-mode: navigate
sec-fetch-user: ?1
sec-fetch-dest: document
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
sec-ch-ua-mobile: ?0
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 301
date: Wed, 11 Dec 2024 18:37:56 GMT
content-length: 0
cache-control: public,max-age=600
location: https://learn.microsoft.com/archive/blogs/fiddler/revisiting-fiddler-and-win8-immersive-applications
strict-transport-security: max-age=2592000
request-context: appId=cid-v1:7e600cf7-f366-4fe9-bfba-d9b4d65b6970
x-content-type-options: nosniff
x-azure-ref: 20241211T183756Z-er1bd968f9chz4schC1LONg4cn0000000hag000000012ydz
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
x-cache-info: L1_T2
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://mdec.nelreports.net/api/report?cat=mtps-redirect"}]}
-
GEThttps://learn.microsoft.com/archive/blogs/fiddler/revisiting-fiddler-and-win8-immersive-applicationsRemote address:95.100.246.21:443RequestGET /archive/blogs/fiddler/revisiting-fiddler-and-win8-immersive-applications HTTP/2.0
host: learn.microsoft.com
dnt: 1
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: none
sec-fetch-mode: navigate
sec-fetch-user: ?1
sec-fetch-dest: document
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
sec-ch-ua-mobile: ?0
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 302
content-length: 0
location: /en-us/archive/blogs/fiddler/revisiting-fiddler-and-win8-immersive-applications
content-security-policy: default-src *;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.microsoft.com js.monitor.azure.com dc.services.visualstudio.com try-ppe.dot.net aznb-ame-prod.azureedge.net client-api.arkoselabs.com afd-markdowneditor-public-bvaydge8egfggtbs.b01.azurefd.net h64.online-metrix.net;style-src 'self' 'unsafe-inline' *.microsoft.com aznb-ame-prod.azureedge.net try-ppe.dot.net afd-markdowneditor-public-bvaydge8egfggtbs.b01.azurefd.net;img-src * data: blob:;frame-ancestors docs.microsoft.com *.docs.microsoft.com learn.microsoft.com *.learn.microsoft.com labclient.labondemand.com portal.azure.com *.portal.azure.com portal.azure.us portal.azure.cn *.onecloud.azure-test.net *.sharepoint.com localhost:3000;worker-src 'self' blob: *.microsoft.com aznb-ame-prod.azureedge.net;form-action 'self' *.microsoft.com *.azure.cn *.pearsonvue.com;media-src 'self' blob: *.microsoft.com *.azure.cn videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net videoencodingpubdevwus.blob.core.windows.net videoencodingpublicwus.blob.core.windows.net;base-uri 'self';font-src 'self' https: data:;object-src 'none';script-src-attr 'none';upgrade-insecure-requests
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
origin-agent-cluster: ?1
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
x-buildversion: 0.4.028726178
x-azure-ref: 20241211T183756Z-er1bd968f9clxgzshC1LONkw7g0000000mh000000000n5mf
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://mdec.nelreports.net/api/report?cat=mdocs"}]}
cache-control: max-age=0
expires: Wed, 11 Dec 2024 18:37:57 GMT
date: Wed, 11 Dec 2024 18:37:57 GMT
akamai-cache-status: Miss from child, NotCacheable from parent
strict-transport-security: max-age=31536000; includeSubDomains; preload
-
GEThttps://learn.microsoft.com/en-us/archive/blogs/fiddler/revisiting-fiddler-and-win8-immersive-applicationsRemote address:95.100.246.21:443RequestGET /en-us/archive/blogs/fiddler/revisiting-fiddler-and-win8-immersive-applications HTTP/2.0
host: learn.microsoft.com
dnt: 1
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: none
sec-fetch-mode: navigate
sec-fetch-user: ?1
sec-fetch-dest: document
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
sec-ch-ua-mobile: ?0
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 301
content-length: 0
location: /en-us/archive/blogs/content-removed
content-security-policy: default-src *;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.microsoft.com js.monitor.azure.com dc.services.visualstudio.com try-ppe.dot.net aznb-ame-prod.azureedge.net client-api.arkoselabs.com afd-markdowneditor-public-bvaydge8egfggtbs.b01.azurefd.net h64.online-metrix.net;style-src 'self' 'unsafe-inline' *.microsoft.com aznb-ame-prod.azureedge.net try-ppe.dot.net afd-markdowneditor-public-bvaydge8egfggtbs.b01.azurefd.net;img-src * data: blob:;frame-ancestors docs.microsoft.com *.docs.microsoft.com learn.microsoft.com *.learn.microsoft.com labclient.labondemand.com portal.azure.com *.portal.azure.com portal.azure.us portal.azure.cn *.onecloud.azure-test.net *.sharepoint.com localhost:3000;worker-src 'self' blob: *.microsoft.com aznb-ame-prod.azureedge.net;form-action 'self' *.microsoft.com *.azure.cn *.pearsonvue.com;media-src 'self' blob: *.microsoft.com *.azure.cn videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net videoencodingpubdevwus.blob.core.windows.net videoencodingpublicwus.blob.core.windows.net;base-uri 'self';font-src 'self' https: data:;object-src 'none';script-src-attr 'none';upgrade-insecure-requests
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
origin-agent-cluster: ?1
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
x-buildversion: 0.4.028726178
x-azure-ref: 20241211T182554Z-er1bd968f9cnlwpphC1LONr40c0000001ds0000000003e8f
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://mdec.nelreports.net/api/report?cat=mdocs"}]}
cache-control: public, max-age=1081
expires: Wed, 11 Dec 2024 18:55:58 GMT
date: Wed, 11 Dec 2024 18:37:57 GMT
akamai-cache-status: Redirect from child
strict-transport-security: max-age=31536000; includeSubDomains; preload
-
GEThttps://learn.microsoft.com/en-us/archive/blogs/content-removedRemote address:95.100.246.21:443RequestGET /en-us/archive/blogs/content-removed HTTP/2.0
host: learn.microsoft.com
dnt: 1
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: none
sec-fetch-mode: navigate
sec-fetch-user: ?1
sec-fetch-dest: document
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
sec-ch-ua-mobile: ?0
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 301
content-length: 0
location: /en-us/archive/blogs/
content-security-policy: default-src *;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.microsoft.com js.monitor.azure.com dc.services.visualstudio.com try-ppe.dot.net aznb-ame-prod.azureedge.net client-api.arkoselabs.com afd-markdowneditor-public-bvaydge8egfggtbs.b01.azurefd.net h64.online-metrix.net;style-src 'self' 'unsafe-inline' *.microsoft.com aznb-ame-prod.azureedge.net try-ppe.dot.net afd-markdowneditor-public-bvaydge8egfggtbs.b01.azurefd.net;img-src * data: blob:;frame-ancestors docs.microsoft.com *.docs.microsoft.com learn.microsoft.com *.learn.microsoft.com labclient.labondemand.com portal.azure.com *.portal.azure.com portal.azure.us portal.azure.cn *.onecloud.azure-test.net *.sharepoint.com localhost:3000;worker-src 'self' blob: *.microsoft.com aznb-ame-prod.azureedge.net;form-action 'self' *.microsoft.com *.azure.cn *.pearsonvue.com;media-src 'self' blob: *.microsoft.com *.azure.cn videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net videoencodingpubdevwus.blob.core.windows.net videoencodingpublicwus.blob.core.windows.net;base-uri 'self';font-src 'self' https: data:;object-src 'none';script-src-attr 'none';upgrade-insecure-requests
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
origin-agent-cluster: ?1
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
x-buildversion: 0.4.028726178
x-azure-ref: 20241211T182554Z-er1bd968f9c5s6kxhC1LONsug00000000ez00000000116w5
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://mdec.nelreports.net/api/report?cat=mdocs"}]}
cache-control: public, max-age=1081
expires: Wed, 11 Dec 2024 18:55:58 GMT
date: Wed, 11 Dec 2024 18:37:57 GMT
akamai-cache-status: Redirect from child
strict-transport-security: max-age=31536000; includeSubDomains; preload
-
GEThttps://learn.microsoft.com/en-us/archive/blogs/Remote address:95.100.246.21:443RequestGET /en-us/archive/blogs/ HTTP/2.0
host: learn.microsoft.com
dnt: 1
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: none
sec-fetch-mode: navigate
sec-fetch-user: ?1
sec-fetch-dest: document
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
sec-ch-ua-mobile: ?0
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
last-modified: Thu, 08 Feb 2024 09:41:10 GMT
etag: "tBOMSJegkVqVdLbNTSVk6m/nkyk="
content-type: text/html
content-security-policy: default-src *;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.microsoft.com js.monitor.azure.com dc.services.visualstudio.com try-ppe.dot.net aznb-ame-prod.azureedge.net client-api.arkoselabs.com afd-markdowneditor-public-bvaydge8egfggtbs.b01.azurefd.net h64.online-metrix.net;style-src 'self' 'unsafe-inline' *.microsoft.com aznb-ame-prod.azureedge.net try-ppe.dot.net afd-markdowneditor-public-bvaydge8egfggtbs.b01.azurefd.net;img-src * data: blob:;frame-ancestors docs.microsoft.com *.docs.microsoft.com learn.microsoft.com *.learn.microsoft.com labclient.labondemand.com portal.azure.com *.portal.azure.com portal.azure.us portal.azure.cn *.onecloud.azure-test.net *.sharepoint.com localhost:3000;worker-src 'self' blob: *.microsoft.com aznb-ame-prod.azureedge.net;form-action 'self' *.microsoft.com *.azure.cn *.pearsonvue.com;media-src 'self' blob: *.microsoft.com *.azure.cn videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net videoencodingpubdevwus.blob.core.windows.net videoencodingpublicwus.blob.core.windows.net;base-uri 'self';font-src 'self' https: data:;object-src 'none';script-src-attr 'none';upgrade-insecure-requests
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
origin-agent-cluster: ?1
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
x-buildversion: 0.4.028726178
x-azure-ref: 20241113T034352Z-r1559f78f6bbdknlhC1LONm5440000000feg00000000kwsg
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://mdec.nelreports.net/api/report?cat=mdocs"}]}
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 7221
cache-control: public, max-age=367
expires: Wed, 11 Dec 2024 18:44:04 GMT
date: Wed, 11 Dec 2024 18:37:57 GMT
akamai-cache-status: Hit from child
strict-transport-security: max-age=31536000; includeSubDomains; preload
-
GEThttps://learn.microsoft.com/static/assets/0.4.028726178/styles/site-ltr.cssRemote address:95.100.246.21:443RequestGET /static/assets/0.4.028726178/styles/site-ltr.css HTTP/2.0
host: learn.microsoft.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: text/css,*/*;q=0.1
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://learn.microsoft.com/en-us/archive/blogs/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 12 Nov 2024 19:41:48 GMT
etag: 0x8DD03520C182A6E
x-ms-request-id: 487d8dd0-c01e-0065-23de-46abc9000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20241211T183757Z-er1bd968f9cnlwpphC1LONr40c0000001dhg00000001tyc4
x-fd-int-roxy-purgeid: 61262308
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://mdec.nelreports.net/api/report?cat=mdocs"}]}
x-content-type-options: nosniff
accept-ranges: bytes
content-encoding: gzip
cache-control: max-age=31536000
expires: Thu, 11 Dec 2025 18:37:57 GMT
date: Wed, 11 Dec 2024 18:37:57 GMT
content-length: 579
akamai-cache-status: Hit from child
strict-transport-security: max-age=31536000; includeSubDomains; preload
-
GEThttps://learn.microsoft.com/static/assets/0.4.028726178/global/deprecation.jsRemote address:95.100.246.21:443RequestGET /static/assets/0.4.028726178/global/deprecation.js HTTP/2.0
host: learn.microsoft.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://learn.microsoft.com/en-us/archive/blogs/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: text/css
vary: Accept-Encoding
last-modified: Tue, 12 Nov 2024 19:40:06 GMT
etag: 0x8DD0351CF5C3D8C
x-ms-request-id: 4def9b3f-a01e-007e-5ddc-46855b000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20241211T183757Z-er1bd968f9clrxr9hC1LONgkss0000000bng0000000175dr
x-fd-int-roxy-purgeid: 61262308
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://mdec.nelreports.net/api/report?cat=mdocs"}]}
x-content-type-options: nosniff
accept-ranges: bytes
content-encoding: gzip
cache-control: max-age=31536000
expires: Thu, 11 Dec 2025 18:37:57 GMT
date: Wed, 11 Dec 2024 18:37:57 GMT
akamai-cache-status: Hit from child
strict-transport-security: max-age=31536000; includeSubDomains; preload
-
GEThttps://learn.microsoft.com/static/assets/0.4.028726178/scripts/en-us/index-docs.jsRemote address:95.100.246.21:443RequestGET /static/assets/0.4.028726178/scripts/en-us/index-docs.js HTTP/2.0
host: learn.microsoft.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://learn.microsoft.com/en-us/archive/blogs/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 12 Nov 2024 19:40:42 GMT
etag: 0x8DD0351E4AD490A
x-ms-request-id: 70913f40-401e-0012-57de-462e88000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20241211T183757Z-er1bd968f9cp27hkhC1LONpw340000001dag00000001s6az
x-fd-int-roxy-purgeid: 61262308
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://mdec.nelreports.net/api/report?cat=mdocs"}]}
x-content-type-options: nosniff
accept-ranges: bytes
content-encoding: gzip
cache-control: max-age=31536000
expires: Thu, 11 Dec 2025 18:37:57 GMT
date: Wed, 11 Dec 2024 18:37:57 GMT
akamai-cache-status: Hit from child
strict-transport-security: max-age=31536000; includeSubDomains; preload
-
GEThttps://learn.microsoft.com/en-us/content-nav/site-header/site-header.json?Remote address:95.100.246.21:443RequestGET /en-us/content-nav/site-header/site-header.json? HTTP/2.0
host: learn.microsoft.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://learn.microsoft.com/en-us/archive/blogs/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: application/json
content-encoding: gzip
etag: "9CAC9QN2CdzA17lWnEk82tJRrp0="
last-modified: Tue, 05 Nov 2024 19:50:58 GMT
content-security-policy: default-src *;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.microsoft.com js.monitor.azure.com dc.services.visualstudio.com try-ppe.dot.net aznb-ame-prod.azureedge.net client-api.arkoselabs.com afd-markdowneditor-public-bvaydge8egfggtbs.b01.azurefd.net h64.online-metrix.net;style-src 'self' 'unsafe-inline' *.microsoft.com aznb-ame-prod.azureedge.net try-ppe.dot.net afd-markdowneditor-public-bvaydge8egfggtbs.b01.azurefd.net;img-src * data: blob:;frame-ancestors docs.microsoft.com *.docs.microsoft.com learn.microsoft.com *.learn.microsoft.com labclient.labondemand.com portal.azure.com *.portal.azure.com portal.azure.us portal.azure.cn *.onecloud.azure-test.net *.sharepoint.com localhost:3000;worker-src 'self' blob: *.microsoft.com aznb-ame-prod.azureedge.net;form-action 'self' *.microsoft.com *.azure.cn *.pearsonvue.com;media-src 'self' blob: *.microsoft.com *.azure.cn videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net videoencodingpubdevwus.blob.core.windows.net videoencodingpublicwus.blob.core.windows.net;base-uri 'self';font-src 'self' https: data:;object-src 'none';script-src-attr 'none';upgrade-insecure-requests
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
origin-agent-cluster: ?1
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
x-buildversion: 0.4.028726178
x-azure-ref: 20241113T033914Z-r1559f78f6bq5pbhhC1LONqhuc0000000fgg00000000tppa
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://mdec.nelreports.net/api/report?cat=mdocs"}]}
content-length: 1404
vary: Accept-Encoding
cache-control: public, max-age=295
expires: Wed, 11 Dec 2024 18:42:52 GMT
date: Wed, 11 Dec 2024 18:37:57 GMT
akamai-cache-status: Hit from child
strict-transport-security: max-age=31536000; includeSubDomains; preload
-
GEThttps://learn.microsoft.com/en-us/archive/blogs/toc.jsonRemote address:95.100.246.21:443RequestGET /en-us/archive/blogs/toc.json HTTP/2.0
host: learn.microsoft.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://learn.microsoft.com/en-us/archive/blogs/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
last-modified: Tue, 20 Jun 2023 07:37:01 GMT
etag: "e4Cm9XHx94EKe1EqNdknBIMbsYM="
content-type: application/json
content-encoding: gzip
content-security-policy: default-src *;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.microsoft.com js.monitor.azure.com dc.services.visualstudio.com try-ppe.dot.net aznb-ame-prod.azureedge.net client-api.arkoselabs.com afd-markdowneditor-public-bvaydge8egfggtbs.b01.azurefd.net h64.online-metrix.net;style-src 'self' 'unsafe-inline' *.microsoft.com aznb-ame-prod.azureedge.net try-ppe.dot.net afd-markdowneditor-public-bvaydge8egfggtbs.b01.azurefd.net;img-src * data: blob:;frame-ancestors docs.microsoft.com *.docs.microsoft.com learn.microsoft.com *.learn.microsoft.com labclient.labondemand.com portal.azure.com *.portal.azure.com portal.azure.us portal.azure.cn *.onecloud.azure-test.net *.sharepoint.com localhost:3000;worker-src 'self' blob: *.microsoft.com aznb-ame-prod.azureedge.net;form-action 'self' *.microsoft.com *.azure.cn *.pearsonvue.com;media-src 'self' blob: *.microsoft.com *.azure.cn videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net videoencodingpubdevwus.blob.core.windows.net videoencodingpublicwus.blob.core.windows.net;base-uri 'self';font-src 'self' https: data:;object-src 'none';script-src-attr 'none';upgrade-insecure-requests
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
origin-agent-cluster: ?1
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
x-buildversion: 0.4.028726178
x-azure-ref: 20241113T063755Z-r1559f78f6b7bl2jhC1LONn6ks00000002vg00000000v74n
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://mdec.nelreports.net/api/report?cat=mdocs"}]}
content-length: 487
vary: Accept-Encoding
cache-control: public, max-age=82
expires: Wed, 11 Dec 2024 18:39:19 GMT
date: Wed, 11 Dec 2024 18:37:57 GMT
akamai-cache-status: Hit from child
strict-transport-security: max-age=31536000; includeSubDomains; preload
-
GEThttps://learn.microsoft.com/en-us/archive/blogs/bread/toc.jsonRemote address:95.100.246.21:443RequestGET /en-us/archive/blogs/bread/toc.json HTTP/2.0
host: learn.microsoft.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://learn.microsoft.com/en-us/archive/blogs/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
last-modified: Thu, 08 Feb 2024 09:36:08 GMT
etag: "vZEK/V3FhryIycKOVEgnmm7gnoM="
content-type: application/json
content-encoding: gzip
content-security-policy: default-src *;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.microsoft.com js.monitor.azure.com dc.services.visualstudio.com try-ppe.dot.net aznb-ame-prod.azureedge.net client-api.arkoselabs.com afd-markdowneditor-public-bvaydge8egfggtbs.b01.azurefd.net h64.online-metrix.net;style-src 'self' 'unsafe-inline' *.microsoft.com aznb-ame-prod.azureedge.net try-ppe.dot.net afd-markdowneditor-public-bvaydge8egfggtbs.b01.azurefd.net;img-src * data: blob:;frame-ancestors docs.microsoft.com *.docs.microsoft.com learn.microsoft.com *.learn.microsoft.com labclient.labondemand.com portal.azure.com *.portal.azure.com portal.azure.us portal.azure.cn *.onecloud.azure-test.net *.sharepoint.com localhost:3000;worker-src 'self' blob: *.microsoft.com aznb-ame-prod.azureedge.net;form-action 'self' *.microsoft.com *.azure.cn *.pearsonvue.com;media-src 'self' blob: *.microsoft.com *.azure.cn videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net videoencodingpubdevwus.blob.core.windows.net videoencodingpublicwus.blob.core.windows.net;base-uri 'self';font-src 'self' https: data:;object-src 'none';script-src-attr 'none';upgrade-insecure-requests
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
origin-agent-cluster: ?1
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
x-buildversion: 0.4.028726178
x-azure-ref: 20241113T034354Z-r1559f78f6bfvqnphC1LONcveg0000000c3000000000wc2p
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://mdec.nelreports.net/api/report?cat=mdocs"}]}
content-length: 151626
vary: Accept-Encoding
cache-control: public, max-age=82
expires: Wed, 11 Dec 2024 18:39:19 GMT
date: Wed, 11 Dec 2024 18:37:57 GMT
akamai-cache-status: Hit from child
strict-transport-security: max-age=31536000; includeSubDomains; preload
-
GEThttps://learn.microsoft.com/en-us/banners/index.jsonRemote address:95.100.246.21:443RequestGET /en-us/banners/index.json HTTP/2.0
host: learn.microsoft.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://learn.microsoft.com/en-us/archive/blogs/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: application/json
content-encoding: gzip
etag: "3ROAb2SuHnLF9qo4dcw8ZkVeDxE="
last-modified: Tue, 10 Dec 2024 22:11:11 GMT
content-security-policy: default-src *;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.microsoft.com js.monitor.azure.com dc.services.visualstudio.com try-ppe.dot.net aznb-ame-prod.azureedge.net client-api.arkoselabs.com afd-markdowneditor-public-bvaydge8egfggtbs.b01.azurefd.net h64.online-metrix.net;style-src 'self' 'unsafe-inline' *.microsoft.com aznb-ame-prod.azureedge.net try-ppe.dot.net afd-markdowneditor-public-bvaydge8egfggtbs.b01.azurefd.net;img-src * data: blob:;frame-ancestors docs.microsoft.com *.docs.microsoft.com learn.microsoft.com *.learn.microsoft.com labclient.labondemand.com portal.azure.com *.portal.azure.com portal.azure.us portal.azure.cn *.onecloud.azure-test.net *.sharepoint.com localhost:3000;worker-src 'self' blob: *.microsoft.com aznb-ame-prod.azureedge.net;form-action 'self' *.microsoft.com *.azure.cn *.pearsonvue.com;media-src 'self' blob: *.microsoft.com *.azure.cn videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net videoencodingpubdevwus.blob.core.windows.net videoencodingpublicwus.blob.core.windows.net;base-uri 'self';font-src 'self' https: data:;object-src 'none';script-src-attr 'none';upgrade-insecure-requests
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
origin-agent-cluster: ?1
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
x-buildversion: 0.4.028726178
x-azure-ref: 20241210T221735Z-er1bd968f9cz69zfhC1LONywen0000000kcg000000008pd9
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://mdec.nelreports.net/api/report?cat=mdocs"}]}
content-length: 5128
vary: Accept-Encoding
cache-control: public, max-age=210
expires: Wed, 11 Dec 2024 18:41:27 GMT
date: Wed, 11 Dec 2024 18:37:57 GMT
akamai-cache-status: Hit from child
strict-transport-security: max-age=31536000; includeSubDomains; preload
-
GEThttps://learn.microsoft.com/static/assets/0.4.028726178/styles/docons.a1ef6ef.34a85e0c.woff2Remote address:95.100.246.21:443RequestGET /static/assets/0.4.028726178/styles/docons.a1ef6ef.34a85e0c.woff2 HTTP/2.0
host: learn.microsoft.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
origin: https://learn.microsoft.com
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
dnt: 1
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: font
referer: https://learn.microsoft.com/static/assets/0.4.028726178/styles/site-ltr.css
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: MicrosoftApplicationsTelemetryDeviceId=92956607-5ae5-4125-9755-6dc52d751dc0
cookie: ai_session=fwPJ+sIGZKg3dNgi/S8U/Q|1733942277227|1733942277227
ResponseHTTP/2.0 200
content-type: font/woff2
content-length: 19696
last-modified: Tue, 12 Nov 2024 19:40:06 GMT
etag: 0x8DD0351CF856A54
x-ms-request-id: 4afae7f2-d01e-0094-127c-357a5a000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20241113T033240Z-r1559f78f6bhxrkshC1LONk5gs0000000fh00000000057yb
x-fd-int-roxy-purgeid: 61262308
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://mdec.nelreports.net/api/report?cat=mdocs"}]}
x-content-type-options: nosniff
accept-ranges: bytes
cache-control: max-age=29062457
expires: Thu, 13 Nov 2025 03:32:15 GMT
date: Wed, 11 Dec 2024 18:37:58 GMT
akamai-cache-status: Hit from child
strict-transport-security: max-age=31536000; includeSubDomains; preload
-
GEThttps://learn.microsoft.com/en-us/media/event-banners/banner-learn-challenge-2024.jpgRemote address:95.100.246.21:443RequestGET /en-us/media/event-banners/banner-learn-challenge-2024.jpg HTTP/2.0
host: learn.microsoft.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://learn.microsoft.com/static/assets/0.4.028726178/styles/site-ltr.css
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: MicrosoftApplicationsTelemetryDeviceId=92956607-5ae5-4125-9755-6dc52d751dc0
cookie: ai_session=fwPJ+sIGZKg3dNgi/S8U/Q|1733942277227|1733942277227
ResponseHTTP/2.0 200
last-modified: Mon, 04 Nov 2024 14:50:18 GMT
etag: "+vU7xkjugqC94aYy6QMSMCDVUXE="
content-type: image/jpeg
content-security-policy: default-src *;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.microsoft.com js.monitor.azure.com dc.services.visualstudio.com try-ppe.dot.net aznb-ame-prod.azureedge.net client-api.arkoselabs.com afd-markdowneditor-public-bvaydge8egfggtbs.b01.azurefd.net h64.online-metrix.net;style-src 'self' 'unsafe-inline' *.microsoft.com aznb-ame-prod.azureedge.net try-ppe.dot.net afd-markdowneditor-public-bvaydge8egfggtbs.b01.azurefd.net;img-src * data: blob:;frame-ancestors docs.microsoft.com *.docs.microsoft.com learn.microsoft.com *.learn.microsoft.com labclient.labondemand.com portal.azure.com *.portal.azure.com portal.azure.us portal.azure.cn *.onecloud.azure-test.net *.sharepoint.com localhost:3000;worker-src 'self' blob: *.microsoft.com aznb-ame-prod.azureedge.net;form-action 'self' *.microsoft.com *.azure.cn *.pearsonvue.com;media-src 'self' blob: *.microsoft.com *.azure.cn videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net videoencodingpubdevwus.blob.core.windows.net videoencodingpublicwus.blob.core.windows.net;base-uri 'self';font-src 'self' https: data:;object-src 'none';script-src-attr 'none';upgrade-insecure-requests
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
origin-agent-cluster: ?1
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
x-buildversion: 0.4.028726178
x-azure-ref: 20241113T035540Z-r1559f78f6bfvqnphC1LONcveg0000000c200000000140be
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://mdec.nelreports.net/api/report?cat=mdocs"}]}
content-length: 64291
cache-control: public, max-age=1275
expires: Wed, 11 Dec 2024 18:59:13 GMT
date: Wed, 11 Dec 2024 18:37:58 GMT
akamai-cache-status: Hit from child
strict-transport-security: max-age=31536000; includeSubDomains; preload
-
GEThttps://learn.microsoft.com/favicon.icoRemote address:95.100.246.21:443RequestGET /favicon.ico HTTP/2.0
host: learn.microsoft.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://learn.microsoft.com/en-us/archive/blogs/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: MicrosoftApplicationsTelemetryDeviceId=92956607-5ae5-4125-9755-6dc52d751dc0
cookie: ai_session=fwPJ+sIGZKg3dNgi/S8U/Q|1733942277227|1733942277227
ResponseHTTP/2.0 200
etag: W/"4316-19321e2e838"
last-modified: Tue, 12 Nov 2024 19:38:59 GMT
content-security-policy: default-src *;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.microsoft.com js.monitor.azure.com dc.services.visualstudio.com try-ppe.dot.net aznb-ame-prod.azureedge.net client-api.arkoselabs.com afd-markdowneditor-public-bvaydge8egfggtbs.b01.azurefd.net h64.online-metrix.net;style-src 'self' 'unsafe-inline' *.microsoft.com aznb-ame-prod.azureedge.net try-ppe.dot.net afd-markdowneditor-public-bvaydge8egfggtbs.b01.azurefd.net;img-src * data: blob:;frame-ancestors docs.microsoft.com *.docs.microsoft.com learn.microsoft.com *.learn.microsoft.com labclient.labondemand.com portal.azure.com *.portal.azure.com portal.azure.us portal.azure.cn *.onecloud.azure-test.net *.sharepoint.com localhost:3000;worker-src 'self' blob: *.microsoft.com aznb-ame-prod.azureedge.net;form-action 'self' *.microsoft.com *.azure.cn *.pearsonvue.com;media-src 'self' blob: *.microsoft.com *.azure.cn videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net videoencodingpubdevwus.blob.core.windows.net videoencodingpublicwus.blob.core.windows.net;base-uri 'self';font-src 'self' https: data:;object-src 'none';script-src-attr 'none';upgrade-insecure-requests
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
origin-agent-cluster: ?1
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
x-buildversion: 0.4.028726178
x-azure-ref: 20241211T063921Z-17964fc66b7xhvrdhC1DUS31g800000000wg000000008yt9
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.01,"failure_fraction":1.0}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://mdec.nelreports.net/api/report?cat=mdocs"}]}
content-type: image/vnd.microsoft.icon
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 540
cache-control: public, max-age=561509
expires: Wed, 18 Dec 2024 06:36:27 GMT
date: Wed, 11 Dec 2024 18:37:58 GMT
akamai-cache-status: Hit from child
strict-transport-security: max-age=31536000; includeSubDomains; preload
-
DNS64.159.190.20.in-addr.arpaRemote address:8.8.8.8:53Request64.159.190.20.in-addr.arpaIN PTRResponse
-
DNSocsp.globalsign.comRemote address:8.8.8.8:53Requestocsp.globalsign.comIN AResponseocsp.globalsign.comIN CNAMEglobal.prd.cdn.globalsign.comglobal.prd.cdn.globalsign.comIN CNAMEprod.globalsign.map.fastly.netprod.globalsign.map.fastly.netIN A151.101.2.133prod.globalsign.map.fastly.netIN A151.101.66.133prod.globalsign.map.fastly.netIN A151.101.194.133prod.globalsign.map.fastly.netIN A151.101.130.133
-
DNSself.events.data.microsoft.comRemote address:8.8.8.8:53Requestself.events.data.microsoft.comIN AResponseself.events.data.microsoft.comIN CNAMEself-events-data.trafficmanager.netself-events-data.trafficmanager.netIN CNAMEonedscolprdeus01.eastus.cloudapp.azure.comonedscolprdeus01.eastus.cloudapp.azure.comIN A52.168.112.66
-
DNS73.144.22.2.in-addr.arpaRemote address:8.8.8.8:53Request73.144.22.2.in-addr.arpaIN PTRResponse73.144.22.2.in-addr.arpaIN PTRa2-22-144-73deploystaticakamaitechnologiescom
-
DNSsecure.globalsign.comRemote address:8.8.8.8:53Requestsecure.globalsign.comIN AResponsesecure.globalsign.comIN CNAMEglobal.prd.cdn.globalsign.comglobal.prd.cdn.globalsign.comIN CNAMEcdn.globalsigncdn.com.cdn.cloudflare.netcdn.globalsigncdn.com.cdn.cloudflare.netIN A104.18.20.226cdn.globalsigncdn.com.cdn.cloudflare.netIN A104.18.21.226
-
DNS11.227.111.52.in-addr.arpaRemote address:8.8.8.8:53Request11.227.111.52.in-addr.arpaIN PTRResponse
-
DNS64.246.107.13.in-addr.arpaRemote address:8.8.8.8:53Request64.246.107.13.in-addr.arpaIN PTRResponse
-
DNSwww.microsoft.comRemote address:8.8.8.8:53Requestwww.microsoft.comIN AResponsewww.microsoft.comIN CNAMEwww.microsoft.com-c-3.edgekey.netwww.microsoft.com-c-3.edgekey.netIN CNAMEwww.microsoft.com-c-3.edgekey.net.globalredir.akadns.netwww.microsoft.com-c-3.edgekey.net.globalredir.akadns.netIN CNAMEe13678.dscb.akamaiedge.nete13678.dscb.akamaiedge.netIN A95.100.245.144
-
DNS66.112.168.52.in-addr.arpaRemote address:8.8.8.8:53Request66.112.168.52.in-addr.arpaIN PTRResponse
-
DNS95.221.229.192.in-addr.arpaRemote address:8.8.8.8:53Request95.221.229.192.in-addr.arpaIN PTRResponse
-
DNS226.20.18.104.in-addr.arpaRemote address:8.8.8.8:53Request226.20.18.104.in-addr.arpaIN PTRResponse
-
DNS21.246.100.95.in-addr.arpaRemote address:8.8.8.8:53Request21.246.100.95.in-addr.arpaIN PTRResponse21.246.100.95.in-addr.arpaIN PTRa95-100-246-21deploystaticakamaitechnologiescom
-
DNS133.2.101.151.in-addr.arpaRemote address:8.8.8.8:53Request133.2.101.151.in-addr.arpaIN PTRResponse
-
GEThttps://wcpstatic.microsoft.com/mscc/lib/v2/wcp-consent.jsRemote address:13.107.246.64:443RequestGET /mscc/lib/v2/wcp-consent.js HTTP/2.0
host: wcpstatic.microsoft.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://learn.microsoft.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
date: Wed, 11 Dec 2024 18:37:57 GMT
content-type: application/javascript
content-length: 81726
content-encoding: gzip
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 19905
cache-control: max-age=43200
content-md5: X1JOIM5h9UISVFS6+GfEew==
etag: 0x8DA85F6EA62BF74
last-modified: Wed, 24 Aug 2022 17:34:36 GMT
vary: Accept-Encoding
x-cache: CONFIG_NOCACHE
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: d79901ac-001e-008f-4bcd-4b49b5000000
x-ms-version: 2009-09-19
x-azure-ref: 20241211T183757Z-er1bd968f9cxmjbjhC1LONsm600000000y2g00000000eg24
accept-ranges: bytes
-
GEThttps://js.monitor.azure.com/scripts/c/ms.jsll-4.min.jsRemote address:13.107.246.64:443RequestGET /scripts/c/ms.jsll-4.min.js HTTP/2.0
host: js.monitor.azure.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://learn.microsoft.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
date: Wed, 11 Dec 2024 18:37:57 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
cache-control: no-transform, public, max-age=1800, immutable
last-modified: Mon, 14 Oct 2024 17:27:31 GMT
x-ms-request-id: caeca2cf-801e-00ce-316c-40fccf000000
x-ms-version: 2009-09-19
x-ms-meta-jssdkver: 4.3.3
x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20241211T183757Z-er1bd968f9cmwckmhC1LONry880000000b2000000000860r
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
content-encoding: br
-
OPTIONShttps://browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0Remote address:20.42.73.24:443RequestOPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/2.0
host: browser.events.data.microsoft.com
accept: */*
access-control-request-method: POST
access-control-request-headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
origin: https://learn.microsoft.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
sec-fetch-mode: cors
sec-fetch-site: same-site
sec-fetch-dest: empty
referer: https://learn.microsoft.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://learn.microsoft.com
date: Wed, 11 Dec 2024 18:37:59 GMT
-
OPTIONShttps://browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D065dc4497e684ee98ee95e0c3f9709d6%26HASH%3D065d%26LV%3D202412%26V%3D4%26LU%3D1733942279931&w=0Remote address:20.42.73.24:443RequestOPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D065dc4497e684ee98ee95e0c3f9709d6%26HASH%3D065d%26LV%3D202412%26V%3D4%26LU%3D1733942279931&w=0 HTTP/2.0
host: browser.events.data.microsoft.com
accept: */*
access-control-request-method: POST
access-control-request-headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time
origin: https://learn.microsoft.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
sec-fetch-mode: cors
sec-fetch-site: same-site
sec-fetch-dest: empty
referer: https://learn.microsoft.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
cache-control: public, 3600
content-length: 0
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
access-control-allow-credentials: true
access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody
access-control-max-age: 3600
access-control-allow-origin: https://learn.microsoft.com
date: Wed, 11 Dec 2024 18:38:03 GMT
-
POSThttps://browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0Remote address:20.42.73.24:443RequestPOST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/2.0
host: browser.events.data.microsoft.com
content-length: 4092
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
upload-time: 1733942278239
dnt: 1
sec-ch-ua-mobile: ?0
client-version: 1DS-Web-JS-4.3.3
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
time-delta-to-apply-millis: use-collector-delta
content-type: application/x-json-stream
cache-control: no-cache, no-store
apikey: c6c27850c9c24cbfae921778d2465031-4c28c161-db47-426b-9d28-733d45d05dd9-7278
client-id: NO_AUTH
accept: */*
origin: https://learn.microsoft.com
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://learn.microsoft.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-length: 153
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
set-cookie: MC1=GUID=065dc4497e684ee98ee95e0c3f9709d6&HASH=065d&LV=202412&V=4&LU=1733942279931; Domain=.microsoft.com; Expires=Thu, 11 Dec 2025 18:37:59 GMT; Path=/;Secure; SameSite=None
set-cookie: MS0=37812b795fde4a6e8eb225314b762071; Domain=.microsoft.com; Expires=Wed, 11 Dec 2024 19:07:59 GMT; Path=/;Secure; SameSite=None
time-delta-millis: 1692
access-control-allow-headers: P3P,Set-Cookie,time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://learn.microsoft.com
access-control-expose-headers: time-delta-millis
date: Wed, 11 Dec 2024 18:37:59 GMT
-
POSThttps://browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0Remote address:20.42.73.24:443RequestPOST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/2.0
host: browser.events.data.microsoft.com
content-length: 4048
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
upload-time: 1733942279317
dnt: 1
sec-ch-ua-mobile: ?0
client-version: 1DS-Web-JS-4.3.3
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
time-delta-to-apply-millis: 1692
content-type: application/x-json-stream
cache-control: no-cache, no-store
apikey: c6c27850c9c24cbfae921778d2465031-4c28c161-db47-426b-9d28-733d45d05dd9-7278
client-id: NO_AUTH
accept: */*
origin: https://learn.microsoft.com
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://learn.microsoft.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: MC1=GUID=065dc4497e684ee98ee95e0c3f9709d6&HASH=065d&LV=202412&V=4&LU=1733942279931
cookie: MS0=37812b795fde4a6e8eb225314b762071
ResponseHTTP/2.0 200
content-length: 153
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 817
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://learn.microsoft.com
access-control-expose-headers: time-delta-millis
date: Wed, 11 Dec 2024 18:37:59 GMT
-
POSThttps://browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D065dc4497e684ee98ee95e0c3f9709d6%26HASH%3D065d%26LV%3D202412%26V%3D4%26LU%3D1733942279931&w=0Remote address:20.42.73.24:443RequestPOST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D065dc4497e684ee98ee95e0c3f9709d6%26HASH%3D065d%26LV%3D202412%26V%3D4%26LU%3D1733942279931&w=0 HTTP/2.0
host: browser.events.data.microsoft.com
content-length: 2252
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
upload-time: 1733942282828
dnt: 1
sec-ch-ua-mobile: ?0
client-version: 1DS-Web-JS-4.3.3
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
time-delta-to-apply-millis: 1692
content-type: application/x-json-stream
cache-control: no-cache, no-store
apikey: c6c27850c9c24cbfae921778d2465031-4c28c161-db47-426b-9d28-733d45d05dd9-7278
client-id: NO_AUTH
accept: */*
origin: https://learn.microsoft.com
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://learn.microsoft.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: MC1=GUID=065dc4497e684ee98ee95e0c3f9709d6&HASH=065d&LV=202412&V=4&LU=1733942279931
cookie: MS0=37812b795fde4a6e8eb225314b762071
ResponseHTTP/2.0 200
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 916
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://learn.microsoft.com
access-control-expose-headers: time-delta-millis
date: Wed, 11 Dec 2024 18:38:02 GMT
-
POSThttps://browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D065dc4497e684ee98ee95e0c3f9709d6%26HASH%3D065d%26LV%3D202412%26V%3D4%26LU%3D1733942279931&w=0Remote address:20.42.73.24:443RequestPOST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D065dc4497e684ee98ee95e0c3f9709d6%26HASH%3D065d%26LV%3D202412%26V%3D4%26LU%3D1733942279931&w=0 HTTP/2.0
host: browser.events.data.microsoft.com
content-length: 2254
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
upload-time: 1733942299373
dnt: 1
sec-ch-ua-mobile: ?0
client-version: 1DS-Web-JS-4.3.3
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
time-delta-to-apply-millis: 1692
content-type: application/x-json-stream
cache-control: no-cache, no-store
apikey: c6c27850c9c24cbfae921778d2465031-4c28c161-db47-426b-9d28-733d45d05dd9-7278
client-id: NO_AUTH
accept: */*
origin: https://learn.microsoft.com
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://learn.microsoft.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: MC1=GUID=065dc4497e684ee98ee95e0c3f9709d6&HASH=065d&LV=202412&V=4&LU=1733942279931
cookie: MS0=37812b795fde4a6e8eb225314b762071
ResponseHTTP/2.0 200
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 808
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://learn.microsoft.com
access-control-expose-headers: time-delta-millis
date: Wed, 11 Dec 2024 18:38:19 GMT
-
POSThttps://browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D065dc4497e684ee98ee95e0c3f9709d6%26HASH%3D065d%26LV%3D202412%26V%3D4%26LU%3D1733942279931&w=0Remote address:20.42.73.24:443RequestPOST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D065dc4497e684ee98ee95e0c3f9709d6%26HASH%3D065d%26LV%3D202412%26V%3D4%26LU%3D1733942279931&w=0 HTTP/2.0
host: browser.events.data.microsoft.com
content-length: 2277
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
upload-time: 1733942301064
dnt: 1
sec-ch-ua-mobile: ?0
client-version: 1DS-Web-JS-4.3.3
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
time-delta-to-apply-millis: 1692
content-type: application/x-json-stream
cache-control: no-cache, no-store
apikey: c6c27850c9c24cbfae921778d2465031-4c28c161-db47-426b-9d28-733d45d05dd9-7278
client-id: NO_AUTH
accept: */*
origin: https://learn.microsoft.com
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://learn.microsoft.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: MC1=GUID=065dc4497e684ee98ee95e0c3f9709d6&HASH=065d&LV=202412&V=4&LU=1733942279931
cookie: MS0=37812b795fde4a6e8eb225314b762071
ResponseHTTP/2.0 200
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 820
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://learn.microsoft.com
access-control-expose-headers: time-delta-millis
date: Wed, 11 Dec 2024 18:38:20 GMT
-
POSThttps://browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D065dc4497e684ee98ee95e0c3f9709d6%26HASH%3D065d%26LV%3D202412%26V%3D4%26LU%3D1733942279931&w=0Remote address:20.42.73.24:443RequestPOST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D065dc4497e684ee98ee95e0c3f9709d6%26HASH%3D065d%26LV%3D202412%26V%3D4%26LU%3D1733942279931&w=0 HTTP/2.0
host: browser.events.data.microsoft.com
content-length: 2253
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
upload-time: 1733942303104
dnt: 1
sec-ch-ua-mobile: ?0
client-version: 1DS-Web-JS-4.3.3
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
time-delta-to-apply-millis: 1692
content-type: application/x-json-stream
cache-control: no-cache, no-store
apikey: c6c27850c9c24cbfae921778d2465031-4c28c161-db47-426b-9d28-733d45d05dd9-7278
client-id: NO_AUTH
accept: */*
origin: https://learn.microsoft.com
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://learn.microsoft.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: MC1=GUID=065dc4497e684ee98ee95e0c3f9709d6&HASH=065d&LV=202412&V=4&LU=1733942279931
cookie: MS0=37812b795fde4a6e8eb225314b762071
ResponseHTTP/2.0 200
content-length: 24
content-type: application/json
server: Microsoft-HTTPAPI/2.0
strict-transport-security: max-age=31536000
time-delta-millis: 812
access-control-allow-headers: time-delta-millis
access-control-allow-methods: POST
access-control-allow-credentials: true
access-control-allow-origin: https://learn.microsoft.com
access-control-expose-headers: time-delta-millis
date: Wed, 11 Dec 2024 18:38:22 GMT
-
GEThttp://www.microsoft.com/pkiops/crl/Microsoft%20Identity%20Verification%20Root%20Certificate%20Authority%202020.crlRemote address:95.100.245.144:80RequestGET /pkiops/crl/Microsoft%20Identity%20Verification%20Root%20Certificate%20Authority%202020.crl HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/10.0
Host: www.microsoft.com
ResponseHTTP/1.1 200 OK
Content-Length: 913
Content-Type: application/octet-stream
Content-MD5: Tnn4rUHdqiwVudxqy5WC3Q==
Last-Modified: Mon, 18 Nov 2024 23:29:49 GMT
ETag: 0x8DD0828E56064FF
x-ms-request-id: 3f9bf8d9-f01e-005c-5617-3a02b2000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Wed, 11 Dec 2024 18:38:30 GMT
Connection: keep-alive
TLS_version: UNKNOWN
ms-cv: CASMicrosoftCV1db72b3b.0
ms-cv-esi: CASMicrosoftCV1db72b3b.0
X-RTag: RT
-
GEThttp://www.microsoft.com/pkiops/crl/Microsoft%20Public%20RSA%20Timestamping%20CA%202020.crlRemote address:95.100.245.144:80RequestGET /pkiops/crl/Microsoft%20Public%20RSA%20Timestamping%20CA%202020.crl HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/10.0
Host: www.microsoft.com
ResponseHTTP/1.1 200 OK
Content-Length: 784
Content-Type: application/octet-stream
Content-MD5: 3D7bHph3DXx7YGJ01VMrTw==
Last-Modified: Fri, 15 Nov 2024 23:28:25 GMT
ETag: 0x8DD05CD343D7B3D
x-ms-request-id: db7c452f-401e-0076-08b6-37dda2000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Wed, 11 Dec 2024 18:38:30 GMT
Connection: keep-alive
TLS_version: UNKNOWN
ms-cv: CASMicrosoftCV1db72cdb.0
ms-cv-esi: CASMicrosoftCV1db72cdb.0
X-RTag: RT
-
18.239.69.37:443https://api.getfiddler.com/fc/latest?ver=5.0.20245.10105&tele=true&meta=truetls, http
HTTP Request
GET https://api.getfiddler.com/fc/latest?ver=5.0.20245.10105&tele=true&meta=trueHTTP Response
200 -
18.239.69.37:443api.getfiddler.comtls
-
18.239.69.37:443https://api.getfiddler.com/r/?Win8ELtls, http2
HTTP Request
GET https://api.getfiddler.com/r/?Win8ELHTTP Response
301 -
13.107.246.64:443https://blogs.msdn.microsoft.com/fiddler/2011/12/10/revisiting-fiddler-and-win8-immersive-applicationstls, http2
HTTP Request
GET https://blogs.msdn.microsoft.com/fiddler/2011/12/10/revisiting-fiddler-and-win8-immersive-applicationsHTTP Response
301 -
95.100.246.21:443https://learn.microsoft.com/favicon.icotls, http2
HTTP Request
GET https://learn.microsoft.com/archive/blogs/fiddler/revisiting-fiddler-and-win8-immersive-applicationsHTTP Response
302HTTP Request
GET https://learn.microsoft.com/en-us/archive/blogs/fiddler/revisiting-fiddler-and-win8-immersive-applicationsHTTP Response
301HTTP Request
GET https://learn.microsoft.com/en-us/archive/blogs/content-removedHTTP Response
301HTTP Request
GET https://learn.microsoft.com/en-us/archive/blogs/HTTP Response
200HTTP Request
GET https://learn.microsoft.com/static/assets/0.4.028726178/styles/site-ltr.cssHTTP Request
GET https://learn.microsoft.com/static/assets/0.4.028726178/global/deprecation.jsHTTP Request
GET https://learn.microsoft.com/static/assets/0.4.028726178/scripts/en-us/index-docs.jsHTTP Response
200HTTP Response
200HTTP Response
200HTTP Request
GET https://learn.microsoft.com/en-us/content-nav/site-header/site-header.json?HTTP Request
GET https://learn.microsoft.com/en-us/archive/blogs/toc.jsonHTTP Request
GET https://learn.microsoft.com/en-us/archive/blogs/bread/toc.jsonHTTP Response
200HTTP Response
200HTTP Response
200HTTP Request
GET https://learn.microsoft.com/en-us/banners/index.jsonHTTP Response
200HTTP Request
GET https://learn.microsoft.com/static/assets/0.4.028726178/styles/docons.a1ef6ef.34a85e0c.woff2HTTP Response
200HTTP Request
GET https://learn.microsoft.com/en-us/media/event-banners/banner-learn-challenge-2024.jpgHTTP Response
200HTTP Request
GET https://learn.microsoft.com/favicon.icoHTTP Response
200 -
13.107.246.64:443https://wcpstatic.microsoft.com/mscc/lib/v2/wcp-consent.jstls, http2
HTTP Request
GET https://wcpstatic.microsoft.com/mscc/lib/v2/wcp-consent.jsHTTP Response
200 -
13.107.246.64:443https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.jstls, http2
HTTP Request
GET https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.jsHTTP Response
200 -
20.42.73.24:443https://browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D065dc4497e684ee98ee95e0c3f9709d6%26HASH%3D065d%26LV%3D202412%26V%3D4%26LU%3D1733942279931&w=0tls, http2
HTTP Request
OPTIONS https://browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0HTTP Response
200HTTP Request
OPTIONS https://browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D065dc4497e684ee98ee95e0c3f9709d6%26HASH%3D065d%26LV%3D202412%26V%3D4%26LU%3D1733942279931&w=0HTTP Response
200 -
127.0.0.1:8888 -
127.0.0.1:8888
-
127.0.0.1:8888
-
20.42.73.24:443https://browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D065dc4497e684ee98ee95e0c3f9709d6%26HASH%3D065d%26LV%3D202412%26V%3D4%26LU%3D1733942279931&w=0tls, http2
HTTP Request
POST https://browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0HTTP Response
200HTTP Request
POST https://browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0HTTP Response
200HTTP Request
POST https://browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D065dc4497e684ee98ee95e0c3f9709d6%26HASH%3D065d%26LV%3D202412%26V%3D4%26LU%3D1733942279931&w=0HTTP Response
200HTTP Request
POST https://browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D065dc4497e684ee98ee95e0c3f9709d6%26HASH%3D065d%26LV%3D202412%26V%3D4%26LU%3D1733942279931&w=0HTTP Response
200HTTP Request
POST https://browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D065dc4497e684ee98ee95e0c3f9709d6%26HASH%3D065d%26LV%3D202412%26V%3D4%26LU%3D1733942279931&w=0HTTP Response
200HTTP Request
POST https://browser.events.data.microsoft.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&ext.intweb.msfpc=GUID%3D065dc4497e684ee98ee95e0c3f9709d6%26HASH%3D065d%26LV%3D202412%26V%3D4%26LU%3D1733942279931&w=0HTTP Response
200 -
127.0.0.1:8888
-
127.0.0.1:8888
-
127.0.0.1:8888
-
127.0.0.1:8888
-
127.0.0.1:8888
-
127.0.0.1:8888
-
127.0.0.1:8888
-
127.0.0.1:8888
-
127.0.0.1:8888
-
127.0.0.1:8888
-
127.0.0.1:8888
-
127.0.0.1:8888
-
127.0.0.1:8888
-
127.0.0.1:8888
-
127.0.0.1:8888
-
127.0.0.1:8888
-
127.0.0.1:8888
-
127.0.0.1:8888
-
95.100.245.144:80http://www.microsoft.com/pkiops/crl/Microsoft%20Public%20RSA%20Timestamping%20CA%202020.crlhttp
HTTP Request
GET http://www.microsoft.com/pkiops/crl/Microsoft%20Identity%20Verification%20Root%20Certificate%20Authority%202020.crlHTTP Response
200HTTP Request
GET http://www.microsoft.com/pkiops/crl/Microsoft%20Public%20RSA%20Timestamping%20CA%202020.crlHTTP Response
200 -
127.0.0.1:8888
-
127.0.0.1:8888
-
127.0.0.1:8888
-
127.0.0.1:8888
-
8.8.8.8:53api.getfiddler.comdns
DNS Request
api.getfiddler.com
DNS Response
18.239.69.3718.239.69.1618.239.69.8618.239.69.3
DNS Request
8.8.8.8.in-addr.arpa
DNS Request
config.edge.skype.com
DNS Response
13.107.42.16
DNS Request
ctldl.windowsupdate.com
DNS Response
2.22.144.732.22.144.81
DNS Request
ocsp.digicert.com
DNS Response
192.229.221.95
DNS Request
wcpstatic.microsoft.com
DNS Response
13.107.246.64
DNS Request
browser.events.data.microsoft.com
DNS Response
20.42.73.24
DNS Request
144.245.100.95.in-addr.arpa
-
224.0.0.251:5353
-
8.8.8.8:5337.69.239.18.in-addr.arpadns
DNS Request
37.69.239.18.in-addr.arpa
DNS Request
login.live.com
DNS Response
20.190.159.6440.126.31.6920.190.159.440.126.31.7340.126.31.6740.126.31.7120.190.159.2320.190.159.75
DNS Request
blogs.msdn.microsoft.com
DNS Response
13.107.246.64
DNS Request
learn.microsoft.com
DNS Response
95.100.246.21
DNS Request
js.monitor.azure.com
DNS Response
13.107.246.64
DNS Request
24.73.42.20.in-addr.arpa
DNS Request
nexusrules.officeapps.live.com
DNS Response
52.111.227.11
-
8.8.8.8:5364.159.190.20.in-addr.arpadns
DNS Request
64.159.190.20.in-addr.arpa
DNS Request
ocsp.globalsign.com
DNS Response
151.101.2.133151.101.66.133151.101.194.133151.101.130.133
DNS Request
self.events.data.microsoft.com
DNS Response
52.168.112.66
-
8.8.8.8:5373.144.22.2.in-addr.arpadns
DNS Request
73.144.22.2.in-addr.arpa
DNS Request
secure.globalsign.com
DNS Response
104.18.20.226104.18.21.226
DNS Request
11.227.111.52.in-addr.arpa
-
8.8.8.8:5364.246.107.13.in-addr.arpadns
DNS Request
64.246.107.13.in-addr.arpa
DNS Request
www.microsoft.com
DNS Response
95.100.245.144
DNS Request
66.112.168.52.in-addr.arpa
-
8.8.8.8:5395.221.229.192.in-addr.arpadns
DNS Request
95.221.229.192.in-addr.arpa
DNS Request
226.20.18.104.in-addr.arpa
-
8.8.8.8:5321.246.100.95.in-addr.arpadns
DNS Request
21.246.100.95.in-addr.arpa
DNS Request
133.2.101.151.in-addr.arpa
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
152B
MD5a28bb0d36049e72d00393056dce10a26
SHA1c753387b64cc15c0efc80084da393acdb4fc01d0
SHA256684d797e28b7fd86af84bfb217d190e4f5e03d92092d988a6091b2c7bbbd67c1
SHA51220940fee33aa2194c36a3db92d4fd314ce7eacc2aa745abec62aa031c2a53ba4ff89f2568626e7bd2536090175f8d045c3bb52c5faa5ecc8da8410ab5fc519f7
-
Filesize
152B
MD5554d6d27186fa7d6762d95dde7a17584
SHA193ea7b20b8fae384cf0be0d65e4295097112fdca
SHA2562fa6145571e1f1ece9850a1ac94661213d3e0d82f1cef7ac1286ff6b2c2017cb
SHA51257d9008ccabc315bd0e829b19fe91e24bab6ef20bcfab651b937b0f38eec840b58d0aed092a3bbedd2d6a95d5c150372a1e51087572de55672172adc1fc468a7
-
Filesize
144B
MD53762575fecdc42643b73733441993068
SHA17d1636ef23eacb77b417d52ff7a7f237e35d9a6d
SHA256e7076e688b33b659b4b6158ea83c95b177e2cc30fd8f89e0ca73c7ec47ad5534
SHA512f424b3fe3ce9ff74462768fab91314af6e84eaf79662a89f506b4af09f86769b24526a9ec54de0c2d60f012c39ec6b76a2018c93e2d0b73a52f831ec17cf3dfa
-
Filesize
595B
MD571cebabc1e80c4739046127b6a2e93a1
SHA110f10fa243012807248b3c6bfa832439de4e3126
SHA256be9e174e336200b5249c9cd19b05fe3b38f4e2888b5727c6204a8f7c017df6b6
SHA512e9c9749978dbbccf3ca071f7754170380826d02ab0f6bd89b5c87f37fe0d29175a7998f3c82dda773643b91596ccc55d8045a8d077de790c844dbfa8e3b95823
-
Filesize
111B
MD5285252a2f6327d41eab203dc2f402c67
SHA1acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA2565dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
SHA51211ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
-
Filesize
5KB
MD5890772b89065106700868972cda04d91
SHA195ae0a5987673b1976a3a01cd6d049413cc72629
SHA25626d2b311f3b3e9dd8b3379c2840f57044bc5a4ab1ba2a80bcb0dc3a28ff5ce7f
SHA5120edc68c0b5881c9a1a9a71f8a580b0b6d9a8e2b5a8381c77b5cc763ee70a945fe7c37109a26ed694b823f64d75b7b748e217666600a2716d0537edeb2d229e5e
-
Filesize
6KB
MD59e1e9d88331d449056e4cb1e6c672457
SHA1016af7a13386769f2750c612eb975b673a2006d4
SHA2562491cf81722f29c7ba1897f6e34271f6d6998560f121da94a1de4eeb7ca9f7d6
SHA512035aa5b4352c2c5ea606de7553fd42ea63648dd0db533c608ddda78f9a9c42930f26314a9b0fadb0ef39ffedbfb15480b16ba79d35c80e171ff8377ce04e0122
-
Filesize
539B
MD5d312c9e7c52ff271c773f767ff720c2e
SHA18a9a6ade71823d254a0304973a3d7710c4de2848
SHA256c75b833ebb732b9ead83a2125b158f5f9dc823ab70e3b558fd9ee569b1908608
SHA51222dfd915747de2e13015b2e49e6c50713e9ec1c9a3d6007f6b4255db0bf8420e99ab68e5b011b5996433021daaeef6aacfdead51b321b9b46de549fb9293f940
-
Filesize
539B
MD521c608020c79063e31de623c94a18e7d
SHA1158b903c79f8137afaf8b5b06703537f02aa1211
SHA2564c5540807db6394f53ceb61b3626d729ecd37540de2c43c4eb8450c08fa4af3e
SHA512ef735f9d421b70fdb70661e22ea832c60e3be2b6ec574b0db1bc58a0bab516f1caad3b9798047aa30f9425b07f3ceb0da6defbc0cf0be4d08bc71f9659ed440f
-
Filesize
16B
MD546295cac801e5d4857d09837238a6394
SHA144e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA2560f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA5128969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
-
Filesize
16B
MD5206702161f94c5cd39fadd03f4014d98
SHA1bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA2561005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA5120af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
-
Filesize
10KB
MD58f014f0da208f8b910e12593b60d9ff6
SHA13633c881d9829a9d95e1dd45cfbf9446f0ad90cc
SHA256764520d8dd02a77579d2e0e88c6e7a64fabb9de9b292f2ca22876f9c2059b4b1
SHA512f8ca6e02f74e135c19b53efb5e439eefd0e64dd09b98ac0798bbed47af5e78901c27d12cb5c2ed7963c8d9fc01d70783b78c36d221fd107b42e489a7838ba3df
-
Filesize
10KB
MD54a9e6ad0e979ce3c2eac7765842ae805
SHA14d25786567a0f6d0166b055e8ec53d045ef18aeb
SHA256b093dde905c6560cad9fb3ff12fef3a26716c486454c070d5d96d31d96a1d758
SHA5126b2890c687ec7211625cc1e68325ee9c8b6604a88ef55c3f2c724c3abf056543d006e56b29c887086168720686e4f51182019728d509bf7c36b1b5f38f8ffbe5
-
Filesize
1KB
MD58a49925b2ed0098f1709a1298f886f4b
SHA19679c057d1b110624dd4534759d724a4431cdbbf
SHA2568654d616f450e62306ccbfbe08e9194f1c14df799fdd0b6d7378e8d247b51b63
SHA5129e5ed87255e34a9df45e45a4d3c495a95640c737f698b7253e6dee3f3aa1f5cb3b158a2125d5abb480be7e196b1f9162097ba713f19451a4634b71d8e40dcb14
-
Filesize
1KB
MD58be0891196af8c12401496fed708db13
SHA19427cfc1691dc71bf560fa3100a5f31e66e32690
SHA25668a6a4f13debd20c958bd5f5115a119fac6aa55b573442e02521e511101a3ea0
SHA512255e5cf5340d250a8fef7b6a72bd8f308ec559178ea9f930d5dd57dfdde00e6c572b2369266930da546a574c196e79c1809a83f5bdbde0feceb2642a32974935
-
Filesize
966B
MD567ee6dd965dc6c692dd0f810affbb09b
SHA1e93ec78d1dd0d066e92f2ed9b4bee25046811b55
SHA25614c7fcbe71449c51a23fab4ccd661f5bc53fe9d0aba633f0e1dbcf3492574d70
SHA5121a880967daa9f8f6f6c15d9bdd67b60a058fa61693519da9059ead7a266979a41456e72a2d3558c26052eb610eb9c264369db8ec39f7edf42ebca778c29a5417
-
Filesize
40KB
-
Filesize
584KB
-
Filesize
5.6MB
-
Filesize
96KB
-
Filesize
10.8MB
-
Filesize
64KB
-
Filesize
320KB
-
Filesize
8KB
-
Filesize
712KB
-
Filesize
8KB
-
Filesize
152KB
-
Filesize
56KB
-
Filesize
5.6MB
-
Filesize
1.9MB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
48KB
-
Filesize
10.8MB
-
Filesize
32KB
-
Filesize
72KB
-
Filesize
10.8MB
-
Filesize
264KB
-
Filesize
10.8MB
-
Filesize
48KB
-
Filesize
296KB
-
Filesize
48KB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
744KB
-
Filesize
104KB
-
Filesize
40KB
-
Filesize
32KB
-
Filesize
3.5MB