Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
10Modules/ffmpeg.exe
windows10-ltsc 2021-x64
3Plugins/sqlite3.dll
windows10-ltsc 2021-x64
5Users/real...51.apk
windows10-ltsc 2021-x64
3res/Lib/7z.dll
windows10-ltsc 2021-x64
3res/Lib/7z.exe
windows10-ltsc 2021-x64
10res/Lib/ApkEditor.jar
windows10-ltsc 2021-x64
1res/Lib/aapt.exe
windows10-ltsc 2021-x64
10res/Lib/apksigner.jar
windows10-ltsc 2021-x64
1res/Lib/apktool.jar
windows10-ltsc 2021-x64
1res/Lib/junk.ps1
windows10-ltsc 2021-x64
3res/Lib/li...ni.dll
windows10-ltsc 2021-x64
3res/Lib/li...-1.dll
windows10-ltsc 2021-x64
3platformBi...32.dll
windows10-ltsc 2021-x64
3platformBi...ge.dll
windows10-ltsc 2021-x64
3platformBi...32.dll
windows10-ltsc 2021-x64
3platformBi...ge.dll
windows10-ltsc 2021-x64
3platformBi...32.dll
windows10-ltsc 2021-x64
3platformBi...ge.dll
windows10-ltsc 2021-x64
3platformBi...ol.bat
windows10-ltsc 2021-x64
3platformBi...ol.jar
windows10-ltsc 2021-x64
1platformBi...ch.dll
windows10-ltsc 2021-x64
3platformBi...wt.dll
windows10-ltsc 2021-x64
3platformBi...db.exe
windows10-ltsc 2021-x64
3platformBi...vm.dll
windows10-ltsc 2021-x64
3platformBi...em.dll
windows10-ltsc 2021-x64
3platformBi...et.dll
windows10-ltsc 2021-x64
3platformBi...er.dll
windows10-ltsc 2021-x64
3platformBi...pe.dll
windows10-ltsc 2021-x64
3platformBi...of.dll
windows10-ltsc 2021-x64
3platformBi...db.exe
windows10-ltsc 2021-x64
3platformBi...nt.dll
windows10-ltsc 2021-x64
3platformBi...sc.dll
windows10-ltsc 2021-x64
3Analysis
-
max time kernel
118s -
max time network
127s -
platform
windows10-ltsc 2021_x64 -
resource
win10ltsc2021-20241211-en -
resource tags
arch:x64arch:x86image:win10ltsc2021-20241211-enlocale:en-usos:windows10-ltsc 2021-x64system -
submitted
04/01/2025, 14:00 UTC
Behavioral task
behavioral1
Sample
Modules/ffmpeg.exe
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral2
Sample
Plugins/sqlite3.dll
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral3
Sample
Users/realme 11 Pro 5G/14451.apk
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral4
Sample
res/Lib/7z.dll
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral5
Sample
res/Lib/7z.exe
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral6
Sample
res/Lib/ApkEditor.jar
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral7
Sample
res/Lib/aapt.exe
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral8
Sample
res/Lib/apksigner.jar
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral9
Sample
res/Lib/apktool.jar
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral10
Sample
res/Lib/junk.ps1
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral11
Sample
res/Lib/libaapt2_jni.dll
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral12
Sample
res/Lib/libwinpthread-1.dll
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral13
Sample
platformBinary32/bin/JAWTAccessBridge-32.dll
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral14
Sample
platformBinary32/bin/JAWTAccessBridge.dll
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral15
Sample
platformBinary32/bin/JavaAccessBridge-32.dll
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral16
Sample
platformBinary32/bin/JavaAccessBridge.dll
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral17
Sample
platformBinary32/bin/WindowsAccessBridge-32.dll
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral18
Sample
platformBinary32/bin/WindowsAccessBridge.dll
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral19
Sample
platformBinary32/bin/apktool.bat
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral20
Sample
platformBinary32/bin/apktool.jar
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral21
Sample
platformBinary32/bin/attach.dll
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral22
Sample
platformBinary32/bin/awt.dll
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral23
Sample
platformBinary32/bin/clhsdb.exe
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral24
Sample
platformBinary32/bin/client/jvm.dll
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral25
Sample
platformBinary32/bin/dt_shmem.dll
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral26
Sample
platformBinary32/bin/dt_socket.dll
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral27
Sample
platformBinary32/bin/fontmanager.dll
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral28
Sample
platformBinary32/bin/freetype.dll
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral29
Sample
platformBinary32/bin/hprof.dll
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral30
Sample
platformBinary32/bin/hsdb.exe
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral31
Sample
platformBinary32/bin/instrument.dll
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral32
Sample
platformBinary32/bin/j2pcsc.dll
Resource
win10ltsc2021-20241211-en
General
-
Target
platformBinary32/bin/JavaAccessBridge-32.dll
-
Size
126KB
-
MD5
d382150d3dbfe4752fbe2ee23f10f1c9
-
SHA1
d482e342b8f20d6b5c249ecfa0dd6ab95514f32d
-
SHA256
10380aabe130ebb62ecf3d09620e8e15fd2335a1ea2faf74c41d057d9e06eee4
-
SHA512
72099a0599fd15f4ede5d295cc2e478fa6cd9a7a820f801fd55e634ce03a0cb002471d77329b0d74a72ab964ec8475342f29aeb3b709f0d08d58503dc9fdea2b
-
SSDEEP
3072:kvAznTOzUca38u4nSK/e2Hrgc6kZAn1yEkBKMKy1Zf22QYHJiuzTl8ShzzM+64mf:kvcwUca35BZnQvw
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 4744 wrote to memory of 4832 4744 rundll32.exe 92 PID 4744 wrote to memory of 4832 4744 rundll32.exe 92 PID 4744 wrote to memory of 4832 4744 rundll32.exe 92
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\platformBinary32\bin\JavaAccessBridge-32.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:4744 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\platformBinary32\bin\JavaAccessBridge-32.dll,#12⤵
- System Location Discovery: System Language Discovery
PID:4832
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --string-annotations=is-enterprise-managed=no --field-trial-handle=5056,i,690293423614796501,17475910179943560176,262144 --variations-seed-version --mojo-platform-channel-handle=4020 /prefetch:81⤵PID:1116
Network
-
HEADhttp://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0c269ced-c74b-4e70-9b58-6e7999b292c0?P1=1734261670&P2=404&P3=2&P4=nLreT3w98NYPfyTlUt84lNIIzUpxduRjiAgT%2fzbjbtpv8PHMKYxAxCkLZXXLZY65iMkTwKfLcI6WjhICrUaYZQ%3d%3dRemote address:91.80.49.21:80RequestHEAD /filestreamingservice/files/0c269ced-c74b-4e70-9b58-6e7999b292c0?P1=1734261670&P2=404&P3=2&P4=nLreT3w98NYPfyTlUt84lNIIzUpxduRjiAgT%2fzbjbtpv8PHMKYxAxCkLZXXLZY65iMkTwKfLcI6WjhICrUaYZQ%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
User-Agent: Microsoft BITS/7.8
Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
-
Remote address:8.8.8.8:53Requestedge.microsoft.comIN AResponseedge.microsoft.comIN CNAMEedge-microsoft-com.dual-a-0036.a-msedge.netedge-microsoft-com.dual-a-0036.a-msedge.netIN CNAMEdual-a-0036.a-msedge.netdual-a-0036.a-msedge.netIN A13.107.21.239dual-a-0036.a-msedge.netIN A204.79.197.239
-
Remote address:8.8.8.8:53Requestedge.microsoft.comIN UnknownResponseedge.microsoft.comIN CNAMEedge-microsoft-com.dual-a-0036.a-msedge.net
-
Remote address:8.8.8.8:53Requestedgeassetservice.azureedge.netIN AResponseedgeassetservice.azureedge.netIN CNAMEedgeassetservice.afd.azureedge.netedgeassetservice.afd.azureedge.netIN CNAMEazureedge-t-prod.trafficmanager.netazureedge-t-prod.trafficmanager.netIN CNAMEshed.dual-low.s-part-0036.t-0009.t-msedge.netshed.dual-low.s-part-0036.t-0009.t-msedge.netIN CNAMEs-part-0036.t-0009.t-msedge.nets-part-0036.t-0009.t-msedge.netIN A13.107.246.64
-
Remote address:8.8.8.8:53Requestedgeassetservice.azureedge.netIN UnknownResponseedgeassetservice.azureedge.netIN CNAMEedgeassetservice.afd.azureedge.netedgeassetservice.afd.azureedge.netIN CNAMEazureedge-t-prod.trafficmanager.netazureedge-t-prod.trafficmanager.netIN CNAMEshed.dual-low.s-part-0036.t-0009.t-msedge.netshed.dual-low.s-part-0036.t-0009.t-msedge.netIN CNAMEs-part-0036.t-0009.t-msedge.net
-
Remote address:8.8.8.8:53Request13.86.106.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request4.159.190.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request95.221.229.192.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Requestmsedge.b.tlu.dl.delivery.mp.microsoft.comIN AResponsemsedge.b.tlu.dl.delivery.mp.microsoft.comIN CNAMEstar.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.comstar.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.comIN CNAMEcdp-f-tlu-net.trafficmanager.netcdp-f-tlu-net.trafficmanager.netIN CNAMEwildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.netwildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.netIN CNAMEa1847.dscd.akamai.neta1847.dscd.akamai.netIN A2.16.62.193a1847.dscd.akamai.netIN A2.16.62.82
-
Remote address:8.8.8.8:53Requestmsedge.b.tlu.dl.delivery.mp.microsoft.comIN UnknownResponsemsedge.b.tlu.dl.delivery.mp.microsoft.comIN CNAMEstar.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.comstar.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.comIN CNAMEcdp-f-tlu-net.trafficmanager.netcdp-f-tlu-net.trafficmanager.netIN CNAMEfg.microsoft.map.fastly.net
-
GEThttp://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0c269ced-c74b-4e70-9b58-6e7999b292c0?P1=1734261670&P2=404&P3=2&P4=nLreT3w98NYPfyTlUt84lNIIzUpxduRjiAgT%2fzbjbtpv8PHMKYxAxCkLZXXLZY65iMkTwKfLcI6WjhICrUaYZQ%3d%3dRemote address:2.16.62.193:80RequestGET /filestreamingservice/files/0c269ced-c74b-4e70-9b58-6e7999b292c0?P1=1734261670&P2=404&P3=2&P4=nLreT3w98NYPfyTlUt84lNIIzUpxduRjiAgT%2fzbjbtpv8PHMKYxAxCkLZXXLZY65iMkTwKfLcI6WjhICrUaYZQ%3d%3d HTTP/1.1
Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
Connection: keep-alive
Sec-Mesh-Client-Edge-Version: 131.0.2903.86
Sec-Mesh-Client-Edge-Channel: stable
Sec-Mesh-Client-OS: Windows
Sec-Mesh-Client-OS-Version: 10.0.19044
Sec-Mesh-Client-Arch: x86_64
Sec-Mesh-Client-WebView: 0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0
Accept-Encoding: gzip, deflate
ResponseHTTP/1.1 403 Forbidden
Mime-Version: 1.0
Content-Type: text/html
Content-Length: 507
Expires: Sat, 04 Jan 2025 14:07:15 GMT
Date: Sat, 04 Jan 2025 14:07:15 GMT
Connection: keep-alive
X-CID: 2
X-CCC: DE
-
GEThttp://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/2aaa8eb1-4390-495e-873c-71f03ed02d54?P1=1734258071&P2=404&P3=2&P4=MxkAqOhZ1UQQ8daG%2fM9SJkjqebtteFGtkr8qD7LgEMbMbwxAZcW9t0Mp%2buul0PklwkE9kmaHxKbL8Qo9w0z1Cg%3d%3dRemote address:2.16.62.193:80RequestGET /filestreamingservice/files/2aaa8eb1-4390-495e-873c-71f03ed02d54?P1=1734258071&P2=404&P3=2&P4=MxkAqOhZ1UQQ8daG%2fM9SJkjqebtteFGtkr8qD7LgEMbMbwxAZcW9t0Mp%2buul0PklwkE9kmaHxKbL8Qo9w0z1Cg%3d%3d HTTP/1.1
Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
Connection: keep-alive
Sec-Mesh-Client-Edge-Version: 131.0.2903.86
Sec-Mesh-Client-Edge-Channel: stable
Sec-Mesh-Client-OS: Windows
Sec-Mesh-Client-OS-Version: 10.0.19044
Sec-Mesh-Client-Arch: x86_64
Sec-Mesh-Client-WebView: 0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0
Accept-Encoding: gzip, deflate
ResponseHTTP/1.1 403 Forbidden
Mime-Version: 1.0
Content-Type: text/html
Content-Length: 507
Expires: Sat, 04 Jan 2025 14:07:32 GMT
Date: Sat, 04 Jan 2025 14:07:32 GMT
Connection: keep-alive
X-CID: 2
X-CCC: DE
-
GEThttp://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/ef5f792e-9df7-4748-accf-02ec33a4a2c4?P1=1734261669&P2=404&P3=2&P4=NZVSv%2bbZd2oYP1XeiCgTl1VO2Qx2XjrhXkaTUnQ4vjJt8Xq4zn19kqLj4P33vkhGt1I8GDNXkD%2f4ks4EcinKWw%3d%3dRemote address:2.16.62.193:80RequestGET /filestreamingservice/files/ef5f792e-9df7-4748-accf-02ec33a4a2c4?P1=1734261669&P2=404&P3=2&P4=NZVSv%2bbZd2oYP1XeiCgTl1VO2Qx2XjrhXkaTUnQ4vjJt8Xq4zn19kqLj4P33vkhGt1I8GDNXkD%2f4ks4EcinKWw%3d%3d HTTP/1.1
Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
Connection: keep-alive
Sec-Mesh-Client-Edge-Version: 131.0.2903.86
Sec-Mesh-Client-Edge-Channel: stable
Sec-Mesh-Client-OS: Windows
Sec-Mesh-Client-OS-Version: 10.0.19044
Sec-Mesh-Client-Arch: x86_64
Sec-Mesh-Client-WebView: 0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0
Accept-Encoding: gzip, deflate
ResponseHTTP/1.1 403 Forbidden
Mime-Version: 1.0
Content-Type: text/html
Content-Length: 507
Expires: Sat, 04 Jan 2025 14:07:53 GMT
Date: Sat, 04 Jan 2025 14:07:53 GMT
Connection: keep-alive
X-CID: 2
X-CCC: DE
-
GEThttp://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/376d5b20-4ccf-4ab3-92ec-d2fa66fb039b?P1=1734261669&P2=404&P3=2&P4=dllFEkZa9wQ2uspAjFDDO1ZmM%2bCHxFkFYfaRhioUJzcY1jU2ZYTlgyQ4pEkRSt3IxyXnGy%2b%2f3Gdx77gKXuvTNw%3d%3dRemote address:2.16.62.193:80RequestGET /filestreamingservice/files/376d5b20-4ccf-4ab3-92ec-d2fa66fb039b?P1=1734261669&P2=404&P3=2&P4=dllFEkZa9wQ2uspAjFDDO1ZmM%2bCHxFkFYfaRhioUJzcY1jU2ZYTlgyQ4pEkRSt3IxyXnGy%2b%2f3Gdx77gKXuvTNw%3d%3d HTTP/1.1
Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
Connection: keep-alive
Sec-Mesh-Client-Edge-Version: 131.0.2903.86
Sec-Mesh-Client-Edge-Channel: stable
Sec-Mesh-Client-OS: Windows
Sec-Mesh-Client-OS-Version: 10.0.19044
Sec-Mesh-Client-Arch: x86_64
Sec-Mesh-Client-WebView: 0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0
Accept-Encoding: gzip, deflate
ResponseHTTP/1.1 403 Forbidden
Mime-Version: 1.0
Content-Type: text/html
Content-Length: 507
Expires: Sat, 04 Jan 2025 14:07:57 GMT
Date: Sat, 04 Jan 2025 14:07:57 GMT
Connection: keep-alive
X-CID: 2
X-CCC: DE
-
GEThttp://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/7ea0d449-ab10-4e22-a3ef-f7271d7afdff?P1=1734414699&P2=404&P3=2&P4=KgNHmbKJP0Gni%2fGWkXnBcVhOV0ilLB5ts%2fApSUax5%2fg%2bcLlg0Ox8ql52vViw%2by8760ygCblQFQDd0MBuL3ajjQ%3d%3dRemote address:2.16.62.193:80RequestGET /filestreamingservice/files/7ea0d449-ab10-4e22-a3ef-f7271d7afdff?P1=1734414699&P2=404&P3=2&P4=KgNHmbKJP0Gni%2fGWkXnBcVhOV0ilLB5ts%2fApSUax5%2fg%2bcLlg0Ox8ql52vViw%2by8760ygCblQFQDd0MBuL3ajjQ%3d%3d HTTP/1.1
Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
Connection: keep-alive
Sec-Mesh-Client-Edge-Version: 131.0.2903.86
Sec-Mesh-Client-Edge-Channel: stable
Sec-Mesh-Client-OS: Windows
Sec-Mesh-Client-OS-Version: 10.0.19044
Sec-Mesh-Client-Arch: x86_64
Sec-Mesh-Client-WebView: 0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0
Accept-Encoding: gzip, deflate
ResponseHTTP/1.1 403 Forbidden
Mime-Version: 1.0
Content-Type: text/html
Content-Length: 507
Expires: Sat, 04 Jan 2025 14:08:05 GMT
Date: Sat, 04 Jan 2025 14:08:05 GMT
Connection: keep-alive
X-CID: 2
X-CCC: DE
-
GEThttp://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/4c4fdee0-d69c-42b7-bf5c-3ec046e9dfc9?P1=1734258069&P2=404&P3=2&P4=bsnLt6LK4lshCgKT02R1AEtcffKNSZdKoScZB8wJH9Smwq6zjhmocBbC9gniMIeONVXzCsSbvqq6tXPehAPEPQ%3d%3dRemote address:2.16.62.193:80RequestGET /filestreamingservice/files/4c4fdee0-d69c-42b7-bf5c-3ec046e9dfc9?P1=1734258069&P2=404&P3=2&P4=bsnLt6LK4lshCgKT02R1AEtcffKNSZdKoScZB8wJH9Smwq6zjhmocBbC9gniMIeONVXzCsSbvqq6tXPehAPEPQ%3d%3d HTTP/1.1
Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
Connection: keep-alive
Sec-Mesh-Client-Edge-Version: 131.0.2903.86
Sec-Mesh-Client-Edge-Channel: stable
Sec-Mesh-Client-OS: Windows
Sec-Mesh-Client-OS-Version: 10.0.19044
Sec-Mesh-Client-Arch: x86_64
Sec-Mesh-Client-WebView: 0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0
Accept-Encoding: gzip, deflate
ResponseHTTP/1.1 403 Forbidden
Mime-Version: 1.0
Content-Type: text/html
Content-Length: 507
Expires: Sat, 04 Jan 2025 14:08:18 GMT
Date: Sat, 04 Jan 2025 14:08:18 GMT
Connection: keep-alive
X-CID: 2
X-CCC: DE
-
GEThttp://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/46762b80-7b06-480c-929a-1514bfab47dc?P1=1734509477&P2=404&P3=2&P4=G%2bXhqH86tBIAuteAmNyXBukDZRI39cNIm%2be6c1R%2bWHQnZWeQznu5xCo0GWmB%2byMOaaJf%2beKr31Du89RJq6eHXQ%3d%3dRemote address:2.16.62.193:80RequestGET /filestreamingservice/files/46762b80-7b06-480c-929a-1514bfab47dc?P1=1734509477&P2=404&P3=2&P4=G%2bXhqH86tBIAuteAmNyXBukDZRI39cNIm%2be6c1R%2bWHQnZWeQznu5xCo0GWmB%2byMOaaJf%2beKr31Du89RJq6eHXQ%3d%3d HTTP/1.1
Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
Connection: keep-alive
Sec-Mesh-Client-Edge-Version: 131.0.2903.86
Sec-Mesh-Client-Edge-Channel: stable
Sec-Mesh-Client-OS: Windows
Sec-Mesh-Client-OS-Version: 10.0.19044
Sec-Mesh-Client-Arch: x86_64
Sec-Mesh-Client-WebView: 0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0
Accept-Encoding: gzip, deflate
ResponseHTTP/1.1 403 Forbidden
Mime-Version: 1.0
Content-Type: text/html
Content-Length: 507
Expires: Sat, 04 Jan 2025 14:08:34 GMT
Date: Sat, 04 Jan 2025 14:08:34 GMT
Connection: keep-alive
X-CID: 2
X-CCC: DE
-
GEThttp://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/b2937c84-8cc1-4c00-b1a2-350a9880a217?P1=1734123823&P2=404&P3=2&P4=dScmsqDsz4FkSgqxx0X7AQHzgjNxms0yi9ZX%2fVClGKtgUdO6XvJxFjXcEUCt1HU5KI2Wr4ShrX7nt8mzUefxfQ%3d%3dRemote address:2.16.62.193:80RequestGET /filestreamingservice/files/b2937c84-8cc1-4c00-b1a2-350a9880a217?P1=1734123823&P2=404&P3=2&P4=dScmsqDsz4FkSgqxx0X7AQHzgjNxms0yi9ZX%2fVClGKtgUdO6XvJxFjXcEUCt1HU5KI2Wr4ShrX7nt8mzUefxfQ%3d%3d HTTP/1.1
Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
Connection: keep-alive
Sec-Mesh-Client-Edge-Version: 131.0.2903.86
Sec-Mesh-Client-Edge-Channel: stable
Sec-Mesh-Client-OS: Windows
Sec-Mesh-Client-OS-Version: 10.0.19044
Sec-Mesh-Client-Arch: x86_64
Sec-Mesh-Client-WebView: 0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0
Accept-Encoding: gzip, deflate
ResponseHTTP/1.1 403 Forbidden
Mime-Version: 1.0
Content-Type: text/html
Content-Length: 507
Expires: Sat, 04 Jan 2025 14:08:38 GMT
Date: Sat, 04 Jan 2025 14:08:38 GMT
Connection: keep-alive
X-CID: 2
X-CCC: DE
-
GEThttp://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/2132f61f-f790-4ae6-a355-8cf9a1533800?P1=1734250869&P2=404&P3=2&P4=b5KpK%2bES%2b7p6LHXssDqSUBWrx%2fMb7aUaDag7Zd6DKXA4IOZKJgVYP2rL8lcZgMP%2f%2bysMG%2bjPw9CAJsa1%2fSYVKw%3d%3dRemote address:2.16.62.193:80RequestGET /filestreamingservice/files/2132f61f-f790-4ae6-a355-8cf9a1533800?P1=1734250869&P2=404&P3=2&P4=b5KpK%2bES%2b7p6LHXssDqSUBWrx%2fMb7aUaDag7Zd6DKXA4IOZKJgVYP2rL8lcZgMP%2f%2bysMG%2bjPw9CAJsa1%2fSYVKw%3d%3d HTTP/1.1
Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
Connection: keep-alive
Sec-Mesh-Client-Edge-Version: 131.0.2903.86
Sec-Mesh-Client-Edge-Channel: stable
Sec-Mesh-Client-OS: Windows
Sec-Mesh-Client-OS-Version: 10.0.19044
Sec-Mesh-Client-Arch: x86_64
Sec-Mesh-Client-WebView: 0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0
Accept-Encoding: gzip, deflate
ResponseHTTP/1.1 403 Forbidden
Mime-Version: 1.0
Content-Type: text/html
Content-Length: 507
Expires: Sat, 04 Jan 2025 14:08:47 GMT
Date: Sat, 04 Jan 2025 14:08:47 GMT
Connection: keep-alive
X-CID: 2
X-CCC: DE
-
GEThttp://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/c08f1970-45bc-4dbe-8166-4ecef7a1f617?P1=1734258068&P2=404&P3=2&P4=dyL3hcUzv63SK50l4d4qTkY5yi%2bU5%2fzAAVRtDpCucgd04FGnEPALI7EnZX0SJhiv%2fQSsLjM7NyMKgXYcECDTng%3d%3dRemote address:2.16.62.193:80RequestGET /filestreamingservice/files/c08f1970-45bc-4dbe-8166-4ecef7a1f617?P1=1734258068&P2=404&P3=2&P4=dyL3hcUzv63SK50l4d4qTkY5yi%2bU5%2fzAAVRtDpCucgd04FGnEPALI7EnZX0SJhiv%2fQSsLjM7NyMKgXYcECDTng%3d%3d HTTP/1.1
Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
Connection: keep-alive
Sec-Mesh-Client-Edge-Version: 131.0.2903.86
Sec-Mesh-Client-Edge-Channel: stable
Sec-Mesh-Client-OS: Windows
Sec-Mesh-Client-OS-Version: 10.0.19044
Sec-Mesh-Client-Arch: x86_64
Sec-Mesh-Client-WebView: 0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0
Accept-Encoding: gzip, deflate
ResponseHTTP/1.1 403 Forbidden
Mime-Version: 1.0
Content-Type: text/html
Content-Length: 507
Expires: Sat, 04 Jan 2025 14:08:59 GMT
Date: Sat, 04 Jan 2025 14:08:59 GMT
Connection: keep-alive
X-CID: 2
X-CCC: DE
-
Remote address:8.8.8.8:53Request193.62.16.2.in-addr.arpaIN PTRResponse193.62.16.2.in-addr.arpaIN PTRa2-16-62-193deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request133.211.185.52.in-addr.arpaIN PTRResponse
-
HEADhttp://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/2aaa8eb1-4390-495e-873c-71f03ed02d54?P1=1734258071&P2=404&P3=2&P4=MxkAqOhZ1UQQ8daG%2fM9SJkjqebtteFGtkr8qD7LgEMbMbwxAZcW9t0Mp%2buul0PklwkE9kmaHxKbL8Qo9w0z1Cg%3d%3dRemote address:91.80.49.21:80RequestHEAD /filestreamingservice/files/2aaa8eb1-4390-495e-873c-71f03ed02d54?P1=1734258071&P2=404&P3=2&P4=MxkAqOhZ1UQQ8daG%2fM9SJkjqebtteFGtkr8qD7LgEMbMbwxAZcW9t0Mp%2buul0PklwkE9kmaHxKbL8Qo9w0z1Cg%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
User-Agent: Microsoft BITS/7.8
Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 403 Forbidden
Content-Type: text/html
Content-Length: 141
Connection: keep-alive
Server: Qwilt
X-OC-Service-Type: lo
Ocn-Cache-Status: NA
Ocn-Requestid: 100000029d55fbd9-1286601283-1
Ocn-Served-By: QLT
X-CID: 9
X-CCC: it
-
HEADhttp://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/ef5f792e-9df7-4748-accf-02ec33a4a2c4?P1=1734261669&P2=404&P3=2&P4=NZVSv%2bbZd2oYP1XeiCgTl1VO2Qx2XjrhXkaTUnQ4vjJt8Xq4zn19kqLj4P33vkhGt1I8GDNXkD%2f4ks4EcinKWw%3d%3dRemote address:91.80.49.21:80RequestHEAD /filestreamingservice/files/ef5f792e-9df7-4748-accf-02ec33a4a2c4?P1=1734261669&P2=404&P3=2&P4=NZVSv%2bbZd2oYP1XeiCgTl1VO2Qx2XjrhXkaTUnQ4vjJt8Xq4zn19kqLj4P33vkhGt1I8GDNXkD%2f4ks4EcinKWw%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
User-Agent: Microsoft BITS/7.8
Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 403 Forbidden
Content-Type: text/html
Content-Length: 141
Connection: keep-alive
Server: Qwilt
X-OC-Service-Type: lo
Ocn-Cache-Status: NA
Ocn-Requestid: 100000029d56c32f-1286601283-2
Ocn-Served-By: QLT
X-CID: 9
X-CCC: it
-
HEADhttp://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/376d5b20-4ccf-4ab3-92ec-d2fa66fb039b?P1=1734261669&P2=404&P3=2&P4=dllFEkZa9wQ2uspAjFDDO1ZmM%2bCHxFkFYfaRhioUJzcY1jU2ZYTlgyQ4pEkRSt3IxyXnGy%2b%2f3Gdx77gKXuvTNw%3d%3dRemote address:91.80.49.21:80RequestHEAD /filestreamingservice/files/376d5b20-4ccf-4ab3-92ec-d2fa66fb039b?P1=1734261669&P2=404&P3=2&P4=dllFEkZa9wQ2uspAjFDDO1ZmM%2bCHxFkFYfaRhioUJzcY1jU2ZYTlgyQ4pEkRSt3IxyXnGy%2b%2f3Gdx77gKXuvTNw%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
User-Agent: Microsoft BITS/7.8
Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 403 Forbidden
Content-Type: text/html
Content-Length: 141
Connection: keep-alive
Server: Qwilt
X-OC-Service-Type: lo
Ocn-Cache-Status: NA
Ocn-Requestid: 100000029d56eacf-1286601283-3
Ocn-Served-By: QLT
X-CID: 9
X-CCC: it
-
HEADhttp://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/7ea0d449-ab10-4e22-a3ef-f7271d7afdff?P1=1734414699&P2=404&P3=2&P4=KgNHmbKJP0Gni%2fGWkXnBcVhOV0ilLB5ts%2fApSUax5%2fg%2bcLlg0Ox8ql52vViw%2by8760ygCblQFQDd0MBuL3ajjQ%3d%3dRemote address:91.80.49.21:80RequestHEAD /filestreamingservice/files/7ea0d449-ab10-4e22-a3ef-f7271d7afdff?P1=1734414699&P2=404&P3=2&P4=KgNHmbKJP0Gni%2fGWkXnBcVhOV0ilLB5ts%2fApSUax5%2fg%2bcLlg0Ox8ql52vViw%2by8760ygCblQFQDd0MBuL3ajjQ%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
User-Agent: Microsoft BITS/7.8
Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 403 Forbidden
Content-Type: text/html
Content-Length: 141
Connection: keep-alive
Server: Qwilt
X-OC-Service-Type: lo
Ocn-Cache-Status: NA
Ocn-Requestid: 100000029d573930-1286601283-4
Ocn-Served-By: QLT
X-CID: 9
X-CCC: it
-
HEADhttp://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/4c4fdee0-d69c-42b7-bf5c-3ec046e9dfc9?P1=1734258069&P2=404&P3=2&P4=bsnLt6LK4lshCgKT02R1AEtcffKNSZdKoScZB8wJH9Smwq6zjhmocBbC9gniMIeONVXzCsSbvqq6tXPehAPEPQ%3d%3dRemote address:91.80.49.21:80RequestHEAD /filestreamingservice/files/4c4fdee0-d69c-42b7-bf5c-3ec046e9dfc9?P1=1734258069&P2=404&P3=2&P4=bsnLt6LK4lshCgKT02R1AEtcffKNSZdKoScZB8wJH9Smwq6zjhmocBbC9gniMIeONVXzCsSbvqq6tXPehAPEPQ%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
User-Agent: Microsoft BITS/7.8
Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 403 Forbidden
Content-Type: text/html
Content-Length: 141
Connection: keep-alive
Server: Qwilt
X-OC-Service-Type: lo
Ocn-Cache-Status: NA
Ocn-Requestid: 100000029d57ae2c-1286601283-5
Ocn-Served-By: QLT
X-CID: 9
X-CCC: it
-
HEADhttp://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/46762b80-7b06-480c-929a-1514bfab47dc?P1=1734509477&P2=404&P3=2&P4=G%2bXhqH86tBIAuteAmNyXBukDZRI39cNIm%2be6c1R%2bWHQnZWeQznu5xCo0GWmB%2byMOaaJf%2beKr31Du89RJq6eHXQ%3d%3dRemote address:91.80.49.21:80RequestHEAD /filestreamingservice/files/46762b80-7b06-480c-929a-1514bfab47dc?P1=1734509477&P2=404&P3=2&P4=G%2bXhqH86tBIAuteAmNyXBukDZRI39cNIm%2be6c1R%2bWHQnZWeQznu5xCo0GWmB%2byMOaaJf%2beKr31Du89RJq6eHXQ%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
User-Agent: Microsoft BITS/7.8
Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 403 Forbidden
Content-Type: text/html
Content-Length: 141
Connection: keep-alive
Server: Qwilt
X-OC-Service-Type: lo
Ocn-Cache-Status: NA
Ocn-Requestid: 100000029d584a4f-1286601283-6
Ocn-Served-By: QLT
X-CID: 9
X-CCC: it
-
HEADhttp://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/b2937c84-8cc1-4c00-b1a2-350a9880a217?P1=1734123823&P2=404&P3=2&P4=dScmsqDsz4FkSgqxx0X7AQHzgjNxms0yi9ZX%2fVClGKtgUdO6XvJxFjXcEUCt1HU5KI2Wr4ShrX7nt8mzUefxfQ%3d%3dRemote address:91.80.49.21:80RequestHEAD /filestreamingservice/files/b2937c84-8cc1-4c00-b1a2-350a9880a217?P1=1734123823&P2=404&P3=2&P4=dScmsqDsz4FkSgqxx0X7AQHzgjNxms0yi9ZX%2fVClGKtgUdO6XvJxFjXcEUCt1HU5KI2Wr4ShrX7nt8mzUefxfQ%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
User-Agent: Microsoft BITS/7.8
Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 403 Forbidden
Content-Type: text/html
Content-Length: 141
Connection: keep-alive
Server: Qwilt
X-OC-Service-Type: lo
Ocn-Cache-Status: NA
Ocn-Requestid: 100000029d58729e-1286601283-7
Ocn-Served-By: QLT
X-CID: 9
X-CCC: it
-
HEADhttp://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/2132f61f-f790-4ae6-a355-8cf9a1533800?P1=1734250869&P2=404&P3=2&P4=b5KpK%2bES%2b7p6LHXssDqSUBWrx%2fMb7aUaDag7Zd6DKXA4IOZKJgVYP2rL8lcZgMP%2f%2bysMG%2bjPw9CAJsa1%2fSYVKw%3d%3dRemote address:91.80.49.21:80RequestHEAD /filestreamingservice/files/2132f61f-f790-4ae6-a355-8cf9a1533800?P1=1734250869&P2=404&P3=2&P4=b5KpK%2bES%2b7p6LHXssDqSUBWrx%2fMb7aUaDag7Zd6DKXA4IOZKJgVYP2rL8lcZgMP%2f%2bysMG%2bjPw9CAJsa1%2fSYVKw%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
User-Agent: Microsoft BITS/7.8
Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 403 Forbidden
Content-Type: text/html
Content-Length: 141
Connection: keep-alive
Server: Qwilt
X-OC-Service-Type: lo
Ocn-Cache-Status: NA
Ocn-Requestid: 100000029d58c3ab-1286601283-8
Ocn-Served-By: QLT
X-CID: 9
X-CCC: it
-
HEADhttp://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/c08f1970-45bc-4dbe-8166-4ecef7a1f617?P1=1734258068&P2=404&P3=2&P4=dyL3hcUzv63SK50l4d4qTkY5yi%2bU5%2fzAAVRtDpCucgd04FGnEPALI7EnZX0SJhiv%2fQSsLjM7NyMKgXYcECDTng%3d%3dRemote address:91.80.49.21:80RequestHEAD /filestreamingservice/files/c08f1970-45bc-4dbe-8166-4ecef7a1f617?P1=1734258068&P2=404&P3=2&P4=dyL3hcUzv63SK50l4d4qTkY5yi%2bU5%2fzAAVRtDpCucgd04FGnEPALI7EnZX0SJhiv%2fQSsLjM7NyMKgXYcECDTng%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
User-Agent: Microsoft BITS/7.8
Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 403 Forbidden
Content-Type: text/html
Content-Length: 141
Connection: keep-alive
Server: Qwilt
X-OC-Service-Type: lo
Ocn-Cache-Status: NA
Ocn-Requestid: 100000029d593cd6-1286601283-9
Ocn-Served-By: QLT
X-CID: 9
X-CCC: it
-
HEADhttp://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/297b5139-7919-4cb1-be42-91e5d6367802?P1=1734254468&P2=404&P3=2&P4=lmH4sygBoXArba%2bLHSqZWfITDg8sjf5TcST7lCC0Hz3LjC4z1T6lgBwe1kRq9czXXTm58V%2f3e7l04hT5Gqm2EA%3d%3dRemote address:91.80.49.21:80RequestHEAD /filestreamingservice/files/297b5139-7919-4cb1-be42-91e5d6367802?P1=1734254468&P2=404&P3=2&P4=lmH4sygBoXArba%2bLHSqZWfITDg8sjf5TcST7lCC0Hz3LjC4z1T6lgBwe1kRq9czXXTm58V%2f3e7l04hT5Gqm2EA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
User-Agent: Microsoft BITS/7.8
Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
ResponseHTTP/1.1 403 Forbidden
Content-Type: text/html
Content-Length: 141
Connection: keep-alive
Server: Qwilt
X-OC-Service-Type: lo
Ocn-Cache-Status: NA
Ocn-Requestid: 100000029d59dc88-1286601283-10
Ocn-Served-By: QLT
X-CID: 9
X-CCC: it
-
Remote address:8.8.8.8:53Requestedge.microsoft.comIN AResponseedge.microsoft.comIN CNAMEedge-microsoft-com.dual-a-0036.a-msedge.netedge-microsoft-com.dual-a-0036.a-msedge.netIN CNAMEdual-a-0036.a-msedge.netdual-a-0036.a-msedge.netIN A13.107.21.239dual-a-0036.a-msedge.netIN A204.79.197.239
-
Remote address:8.8.8.8:53Requestedge.microsoft.comIN UnknownResponseedge.microsoft.comIN CNAMEedge-microsoft-com.dual-a-0036.a-msedge.net
-
Remote address:8.8.8.8:53Requestfd.api.iris.microsoft.comIN AResponsefd.api.iris.microsoft.comIN CNAMEfd-api-iris.trafficmanager.netfd-api-iris.trafficmanager.netIN CNAMEiris-de-prod-azsc-v2-neu-b.northeurope.cloudapp.azure.comiris-de-prod-azsc-v2-neu-b.northeurope.cloudapp.azure.comIN A20.223.36.55
-
GEThttps://fd.api.iris.microsoft.com/v4/api/selection?&asid=AF6D2FD5521E4B768442C363BEAC94F2&nct=1&placement=88000677&bcnt=30&country=US&locale=en-US&poptin=0&fmt=json&clr=cdmlite&arch=AMD64&concp=0&d3dfl=D3D_FEATURE_LEVEL_12_1&devfam=Windows.Desktop&devosver=10.0.19044.4529&dinst=1733929142&dmret=0&drgng=244&flightbranch=&flightring=Retail&localid=w%3A0536F3B0-8B64-FBDF-D563-859F5D26F537&osbranch=vb_release&oslocale=en-US&osret=1&ossku=EnterpriseS&osskuid=125&prccn=2&prccs=4192&prcmf=AuthenticAMD&procm=Intel%20Core%20Processor%20%28Broadwell%29&ram=4095&tinst=Client&tl=1&pat=0&smc=0&sac=0&disphorzres=1280&dispsize=14.7&dispvertres=720&ldisphorzres=1280&ldispvertres=720&moncnt=1&cpdsk=241361&frdsk=203801&lo=34507&tsu=34507Remote address:20.223.36.55:443RequestGET /v4/api/selection?&asid=AF6D2FD5521E4B768442C363BEAC94F2&nct=1&placement=88000677&bcnt=30&country=US&locale=en-US&poptin=0&fmt=json&clr=cdmlite&arch=AMD64&concp=0&d3dfl=D3D_FEATURE_LEVEL_12_1&devfam=Windows.Desktop&devosver=10.0.19044.4529&dinst=1733929142&dmret=0&drgng=244&flightbranch=&flightring=Retail&localid=w%3A0536F3B0-8B64-FBDF-D563-859F5D26F537&osbranch=vb_release&oslocale=en-US&osret=1&ossku=EnterpriseS&osskuid=125&prccn=2&prccs=4192&prcmf=AuthenticAMD&procm=Intel%20Core%20Processor%20%28Broadwell%29&ram=4095&tinst=Client&tl=1&pat=0&smc=0&sac=0&disphorzres=1280&dispsize=14.7&dispvertres=720&ldisphorzres=1280&ldispvertres=720&moncnt=1&cpdsk=241361&frdsk=203801&lo=34507&tsu=34507 HTTP/2.0
host: fd.api.iris.microsoft.com
accept-encoding: gzip, deflate
x-sdk-hw-token: t=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&p=
ResponseHTTP/2.0 200
pragma: no-cache
content-length: 131
content-type: application/json; charset=utf-8
expires: Mon, 01 Jan 0001 00:00:00 GMT
server: Microsoft-IIS/10.0
arc-rsp-dbg: [{"DcoPlusDebug":"Status: Ok"},{"OPTOUTSTATE":"256"},{"REGIONALPOLICY":"0"}]
accept-ch: UA, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform, UA-Platform-Version
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
strict-transport-security: max-age=31536000; includeSubDomains
date: Sat, 04 Jan 2025 14:07:41 GMT
-
Remote address:8.8.8.8:53Request55.36.223.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request212.20.149.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request171.39.242.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request13.227.111.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Requestedge.microsoft.comIN AResponseedge.microsoft.comIN CNAMEedge-microsoft-com.dual-a-0036.a-msedge.netedge-microsoft-com.dual-a-0036.a-msedge.netIN CNAMEdual-a-0036.a-msedge.netdual-a-0036.a-msedge.netIN A13.107.21.239dual-a-0036.a-msedge.netIN A204.79.197.239
-
Remote address:8.8.8.8:53Requestedge.microsoft.comIN UnknownResponseedge.microsoft.comIN CNAMEedge-microsoft-com.dual-a-0036.a-msedge.net
-
Remote address:8.8.8.8:53Request225.162.46.104.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Requestedge.microsoft.comIN AResponseedge.microsoft.comIN CNAMEedge-microsoft-com.dual-a-0036.a-msedge.netedge-microsoft-com.dual-a-0036.a-msedge.netIN CNAMEdual-a-0036.a-msedge.netdual-a-0036.a-msedge.netIN A13.107.21.239dual-a-0036.a-msedge.netIN A204.79.197.239
-
Remote address:8.8.8.8:53Requestedge.microsoft.comIN UnknownResponseedge.microsoft.comIN CNAMEedge-microsoft-com.dual-a-0036.a-msedge.net
-
91.80.49.21:80http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0c269ced-c74b-4e70-9b58-6e7999b292c0?P1=1734261670&P2=404&P3=2&P4=nLreT3w98NYPfyTlUt84lNIIzUpxduRjiAgT%2fzbjbtpv8PHMKYxAxCkLZXXLZY65iMkTwKfLcI6WjhICrUaYZQ%3d%3dhttp391 B 40 B 1 1
HTTP Request
HEAD http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0c269ced-c74b-4e70-9b58-6e7999b292c0?P1=1734261670&P2=404&P3=2&P4=nLreT3w98NYPfyTlUt84lNIIzUpxduRjiAgT%2fzbjbtpv8PHMKYxAxCkLZXXLZY65iMkTwKfLcI6WjhICrUaYZQ%3d%3d -
3.6kB 8.4kB 19 24
-
23.0kB 1.2MB 440 845
-
2.16.62.193:80http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/c08f1970-45bc-4dbe-8166-4ecef7a1f617?P1=1734258068&P2=404&P3=2&P4=dyL3hcUzv63SK50l4d4qTkY5yi%2bU5%2fzAAVRtDpCucgd04FGnEPALI7EnZX0SJhiv%2fQSsLjM7NyMKgXYcECDTng%3d%3dhttp7.6kB 8.0kB 23 15
HTTP Request
GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0c269ced-c74b-4e70-9b58-6e7999b292c0?P1=1734261670&P2=404&P3=2&P4=nLreT3w98NYPfyTlUt84lNIIzUpxduRjiAgT%2fzbjbtpv8PHMKYxAxCkLZXXLZY65iMkTwKfLcI6WjhICrUaYZQ%3d%3dHTTP Response
403HTTP Request
GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/2aaa8eb1-4390-495e-873c-71f03ed02d54?P1=1734258071&P2=404&P3=2&P4=MxkAqOhZ1UQQ8daG%2fM9SJkjqebtteFGtkr8qD7LgEMbMbwxAZcW9t0Mp%2buul0PklwkE9kmaHxKbL8Qo9w0z1Cg%3d%3dHTTP Response
403HTTP Request
GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/ef5f792e-9df7-4748-accf-02ec33a4a2c4?P1=1734261669&P2=404&P3=2&P4=NZVSv%2bbZd2oYP1XeiCgTl1VO2Qx2XjrhXkaTUnQ4vjJt8Xq4zn19kqLj4P33vkhGt1I8GDNXkD%2f4ks4EcinKWw%3d%3dHTTP Response
403HTTP Request
GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/376d5b20-4ccf-4ab3-92ec-d2fa66fb039b?P1=1734261669&P2=404&P3=2&P4=dllFEkZa9wQ2uspAjFDDO1ZmM%2bCHxFkFYfaRhioUJzcY1jU2ZYTlgyQ4pEkRSt3IxyXnGy%2b%2f3Gdx77gKXuvTNw%3d%3dHTTP Response
403HTTP Request
GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/7ea0d449-ab10-4e22-a3ef-f7271d7afdff?P1=1734414699&P2=404&P3=2&P4=KgNHmbKJP0Gni%2fGWkXnBcVhOV0ilLB5ts%2fApSUax5%2fg%2bcLlg0Ox8ql52vViw%2by8760ygCblQFQDd0MBuL3ajjQ%3d%3dHTTP Response
403HTTP Request
GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/4c4fdee0-d69c-42b7-bf5c-3ec046e9dfc9?P1=1734258069&P2=404&P3=2&P4=bsnLt6LK4lshCgKT02R1AEtcffKNSZdKoScZB8wJH9Smwq6zjhmocBbC9gniMIeONVXzCsSbvqq6tXPehAPEPQ%3d%3dHTTP Response
403HTTP Request
GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/46762b80-7b06-480c-929a-1514bfab47dc?P1=1734509477&P2=404&P3=2&P4=G%2bXhqH86tBIAuteAmNyXBukDZRI39cNIm%2be6c1R%2bWHQnZWeQznu5xCo0GWmB%2byMOaaJf%2beKr31Du89RJq6eHXQ%3d%3dHTTP Response
403HTTP Request
GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/b2937c84-8cc1-4c00-b1a2-350a9880a217?P1=1734123823&P2=404&P3=2&P4=dScmsqDsz4FkSgqxx0X7AQHzgjNxms0yi9ZX%2fVClGKtgUdO6XvJxFjXcEUCt1HU5KI2Wr4ShrX7nt8mzUefxfQ%3d%3dHTTP Response
403HTTP Request
GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/2132f61f-f790-4ae6-a355-8cf9a1533800?P1=1734250869&P2=404&P3=2&P4=b5KpK%2bES%2b7p6LHXssDqSUBWrx%2fMb7aUaDag7Zd6DKXA4IOZKJgVYP2rL8lcZgMP%2f%2bysMG%2bjPw9CAJsa1%2fSYVKw%3d%3dHTTP Response
403HTTP Request
GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/c08f1970-45bc-4dbe-8166-4ecef7a1f617?P1=1734258068&P2=404&P3=2&P4=dyL3hcUzv63SK50l4d4qTkY5yi%2bU5%2fzAAVRtDpCucgd04FGnEPALI7EnZX0SJhiv%2fQSsLjM7NyMKgXYcECDTng%3d%3dHTTP Response
403 -
2.0kB 40 B 4 1
-
55.9kB 1.2MB 682 905
-
91.80.49.21:80http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/297b5139-7919-4cb1-be42-91e5d6367802?P1=1734254468&P2=404&P3=2&P4=lmH4sygBoXArba%2bLHSqZWfITDg8sjf5TcST7lCC0Hz3LjC4z1T6lgBwe1kRq9czXXTm58V%2f3e7l04hT5Gqm2EA%3d%3dhttp4.5kB 3.4kB 22 15
HTTP Request
HEAD http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/2aaa8eb1-4390-495e-873c-71f03ed02d54?P1=1734258071&P2=404&P3=2&P4=MxkAqOhZ1UQQ8daG%2fM9SJkjqebtteFGtkr8qD7LgEMbMbwxAZcW9t0Mp%2buul0PklwkE9kmaHxKbL8Qo9w0z1Cg%3d%3dHTTP Response
403HTTP Request
HEAD http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/ef5f792e-9df7-4748-accf-02ec33a4a2c4?P1=1734261669&P2=404&P3=2&P4=NZVSv%2bbZd2oYP1XeiCgTl1VO2Qx2XjrhXkaTUnQ4vjJt8Xq4zn19kqLj4P33vkhGt1I8GDNXkD%2f4ks4EcinKWw%3d%3dHTTP Response
403HTTP Request
HEAD http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/376d5b20-4ccf-4ab3-92ec-d2fa66fb039b?P1=1734261669&P2=404&P3=2&P4=dllFEkZa9wQ2uspAjFDDO1ZmM%2bCHxFkFYfaRhioUJzcY1jU2ZYTlgyQ4pEkRSt3IxyXnGy%2b%2f3Gdx77gKXuvTNw%3d%3dHTTP Response
403HTTP Request
HEAD http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/7ea0d449-ab10-4e22-a3ef-f7271d7afdff?P1=1734414699&P2=404&P3=2&P4=KgNHmbKJP0Gni%2fGWkXnBcVhOV0ilLB5ts%2fApSUax5%2fg%2bcLlg0Ox8ql52vViw%2by8760ygCblQFQDd0MBuL3ajjQ%3d%3dHTTP Response
403HTTP Request
HEAD http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/4c4fdee0-d69c-42b7-bf5c-3ec046e9dfc9?P1=1734258069&P2=404&P3=2&P4=bsnLt6LK4lshCgKT02R1AEtcffKNSZdKoScZB8wJH9Smwq6zjhmocBbC9gniMIeONVXzCsSbvqq6tXPehAPEPQ%3d%3dHTTP Response
403HTTP Request
HEAD http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/46762b80-7b06-480c-929a-1514bfab47dc?P1=1734509477&P2=404&P3=2&P4=G%2bXhqH86tBIAuteAmNyXBukDZRI39cNIm%2be6c1R%2bWHQnZWeQznu5xCo0GWmB%2byMOaaJf%2beKr31Du89RJq6eHXQ%3d%3dHTTP Response
403HTTP Request
HEAD http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/b2937c84-8cc1-4c00-b1a2-350a9880a217?P1=1734123823&P2=404&P3=2&P4=dScmsqDsz4FkSgqxx0X7AQHzgjNxms0yi9ZX%2fVClGKtgUdO6XvJxFjXcEUCt1HU5KI2Wr4ShrX7nt8mzUefxfQ%3d%3dHTTP Response
403HTTP Request
HEAD http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/2132f61f-f790-4ae6-a355-8cf9a1533800?P1=1734250869&P2=404&P3=2&P4=b5KpK%2bES%2b7p6LHXssDqSUBWrx%2fMb7aUaDag7Zd6DKXA4IOZKJgVYP2rL8lcZgMP%2f%2bysMG%2bjPw9CAJsa1%2fSYVKw%3d%3dHTTP Response
403HTTP Request
HEAD http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/c08f1970-45bc-4dbe-8166-4ecef7a1f617?P1=1734258068&P2=404&P3=2&P4=dyL3hcUzv63SK50l4d4qTkY5yi%2bU5%2fzAAVRtDpCucgd04FGnEPALI7EnZX0SJhiv%2fQSsLjM7NyMKgXYcECDTng%3d%3dHTTP Response
403HTTP Request
HEAD http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/297b5139-7919-4cb1-be42-91e5d6367802?P1=1734254468&P2=404&P3=2&P4=lmH4sygBoXArba%2bLHSqZWfITDg8sjf5TcST7lCC0Hz3LjC4z1T6lgBwe1kRq9czXXTm58V%2f3e7l04hT5Gqm2EA%3d%3dHTTP Response
403 -
20.223.36.55:443https://fd.api.iris.microsoft.com/v4/api/selection?&asid=AF6D2FD5521E4B768442C363BEAC94F2&nct=1&placement=88000677&bcnt=30&country=US&locale=en-US&poptin=0&fmt=json&clr=cdmlite&arch=AMD64&concp=0&d3dfl=D3D_FEATURE_LEVEL_12_1&devfam=Windows.Desktop&devosver=10.0.19044.4529&dinst=1733929142&dmret=0&drgng=244&flightbranch=&flightring=Retail&localid=w%3A0536F3B0-8B64-FBDF-D563-859F5D26F537&osbranch=vb_release&oslocale=en-US&osret=1&ossku=EnterpriseS&osskuid=125&prccn=2&prccs=4192&prcmf=AuthenticAMD&procm=Intel%20Core%20Processor%20%28Broadwell%29&ram=4095&tinst=Client&tl=1&pat=0&smc=0&sac=0&disphorzres=1280&dispsize=14.7&dispvertres=720&ldisphorzres=1280&ldispvertres=720&moncnt=1&cpdsk=241361&frdsk=203801&lo=34507&tsu=34507tls, http22.7kB 7.4kB 19 12
HTTP Request
GET https://fd.api.iris.microsoft.com/v4/api/selection?&asid=AF6D2FD5521E4B768442C363BEAC94F2&nct=1&placement=88000677&bcnt=30&country=US&locale=en-US&poptin=0&fmt=json&clr=cdmlite&arch=AMD64&concp=0&d3dfl=D3D_FEATURE_LEVEL_12_1&devfam=Windows.Desktop&devosver=10.0.19044.4529&dinst=1733929142&dmret=0&drgng=244&flightbranch=&flightring=Retail&localid=w%3A0536F3B0-8B64-FBDF-D563-859F5D26F537&osbranch=vb_release&oslocale=en-US&osret=1&ossku=EnterpriseS&osskuid=125&prccn=2&prccs=4192&prcmf=AuthenticAMD&procm=Intel%20Core%20Processor%20%28Broadwell%29&ram=4095&tinst=Client&tl=1&pat=0&smc=0&sac=0&disphorzres=1280&dispsize=14.7&dispvertres=720&ldisphorzres=1280&ldispvertres=720&moncnt=1&cpdsk=241361&frdsk=203801&lo=34507&tsu=34507HTTP Response
200
-
64 B 167 B 1 1
DNS Request
edge.microsoft.com
DNS Response
13.107.21.239204.79.197.239
-
64 B 168 B 1 1
DNS Request
edge.microsoft.com
-
76 B 243 B 1 1
DNS Request
edgeassetservice.azureedge.net
DNS Response
13.107.246.64
-
76 B 287 B 1 1
DNS Request
edgeassetservice.azureedge.net
-
71 B 157 B 1 1
DNS Request
13.86.106.20.in-addr.arpa
-
71 B 157 B 1 1
DNS Request
4.159.190.20.in-addr.arpa
-
73 B 144 B 1 1
DNS Request
95.221.229.192.in-addr.arpa
-
87 B 328 B 1 1
DNS Request
msedge.b.tlu.dl.delivery.mp.microsoft.com
DNS Response
2.16.62.1932.16.62.82
-
87 B 292 B 1 1
DNS Request
msedge.b.tlu.dl.delivery.mp.microsoft.com
-
70 B 133 B 1 1
DNS Request
193.62.16.2.in-addr.arpa
-
73 B 147 B 1 1
DNS Request
133.211.185.52.in-addr.arpa
-
64 B 167 B 1 1
DNS Request
edge.microsoft.com
DNS Response
13.107.21.239204.79.197.239
-
64 B 168 B 1 1
DNS Request
edge.microsoft.com
-
71 B 199 B 1 1
DNS Request
fd.api.iris.microsoft.com
DNS Response
20.223.36.55
-
71 B 157 B 1 1
DNS Request
55.36.223.20.in-addr.arpa
-
72 B 146 B 1 1
DNS Request
212.20.149.52.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
171.39.242.20.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
13.227.111.52.in-addr.arpa
-
64 B 167 B 1 1
DNS Request
edge.microsoft.com
DNS Response
13.107.21.239204.79.197.239
-
64 B 168 B 1 1
DNS Request
edge.microsoft.com
-
73 B 147 B 1 1
DNS Request
225.162.46.104.in-addr.arpa
-
64 B 167 B 1 1
DNS Request
edge.microsoft.com
DNS Response
13.107.21.239204.79.197.239
-
64 B 168 B 1 1
DNS Request
edge.microsoft.com