Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

12022025_0...33.exe

windows7-x64

7

12022025_0...33.exe

windows10-2004-x64

10

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

8

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

8

Analysis

  • max time kernel
    96s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250211-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250211-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/02/2025, 02:15 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    12022025_0209_2435433.exe

  • Size

    935KB

  • MD5

    b2133aba6fde5e6b68bb3f5b1ed8ed29

  • SHA1

    cce05c4dfe8286601e5e36d1d2f2486758cd53d1

  • SHA256

    0cd8b00f33a98cc494f251b51a95d4454f2bee979dbee98555accee3dfe37db4

  • SHA512

    3c51c879a3fdeff67b2b29a08fb0c48cfd83a4331832313c75df692fd429d89e24481c67ed7829a9de3c01c3ebabcd0d42459bbd3fa5b5713545568543bd1813

  • SSDEEP

    24576:8s2NlZQ0XKoayZAMMOKjgfWmVRpkVoJfCMoU8Z1A:glZQdoayZ6YW8lCLU8ZC

Score
10/10
guloaderdiscoverydownloader

Malware Config

Signatures

  • Guloader family
    guloader
  • Guloader,Cloudeye

    A shellcode based downloader first seen in 2020.

    downloaderguloader
  • Downloads MZ/PE file 1 IoCs
  • Loads dropped DLL 6 IoCs
  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs
  • Suspicious use of NtCreateThreadExHideFromDebugger 1 IoCs
  • Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 1 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

    discovery
  • Suspicious behavior: EnumeratesProcesses 14 IoCs
  • Suspicious behavior: MapViewOfSection 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
    "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource core
    1⤵
    • System Location Discovery: System Language Discovery
    PID:3304
  • C:\Users\Admin\AppData\Local\Temp\12022025_0209_2435433.exe
    "C:\Users\Admin\AppData\Local\Temp\12022025_0209_2435433.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: MapViewOfSection
    • Suspicious use of WriteProcessMemory
    PID:4824
    • C:\Users\Admin\AppData\Local\Temp\12022025_0209_2435433.exe
      "C:\Users\Admin\AppData\Local\Temp\12022025_0209_2435433.exe"
      2⤵
      • Suspicious use of NtCreateThreadExHideFromDebugger
      • Suspicious use of NtSetInformationThreadHideFromDebugger
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      PID:4732
  • C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
    "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping 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-PGFwcCBhcHBpZD0iezhBNjlEMzQ1LUQ1NjQtNDYzYy1BRkYxLUE2OUQ5RTUzMEY5Nn0iIHZlcnNpb249IjEyMy4wLjYzMTIuMTIzIiBuZXh0dmVyc2lvbj0iIiBsYW5nPSJlbiIgYnJhbmQ9IkdHTFMiIGNsaWVudD0iIiBpbnN0YWxsYWdlPSIwIiBpbnN0YWxsZGF0ZXRpbWU9IjE3MzkyODMyMzYiIG9vYmVfaW5zdGFsbF90aW1lPSIxMzM4Mzc1NDI1MTE0ODAwMDAiPjxldmVudCBldmVudHR5cGU9IjMxIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIyMTc5ODYyIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI1NDQ0MjkyMDM2Ii8-PC9hcHA-PC9yZXF1ZXN0Pg
    1⤵
    • System Location Discovery: System Language Discovery
    • System Network Configuration Discovery: Internet Connection Discovery
    PID:3352

Network

  • flag-us
    DNS
    g.bing.com
    Remote address:
    8.8.8.8:53
    Request
    g.bing.com
    IN A
    Response
    g.bing.com
    IN CNAME
    g-bing-com.ax-0001.ax-msedge.net
    g-bing-com.ax-0001.ax-msedge.net
    IN CNAME
    ax-0001.ax-msedge.net
    ax-0001.ax-msedge.net
    IN A
    150.171.28.10
    ax-0001.ax-msedge.net
    IN A
    150.171.27.10
  • flag-us
    DNS
    g.bing.com
    Remote address:
    8.8.8.8:53
    Request
    g.bing.com
    IN A
  • flag-us
    DNS
    g.bing.com
    Remote address:
    8.8.8.8:53
    Request
    g.bing.com
    IN A
  • flag-us
    GET
    https://g.bing.com/neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=c6c481e1f5e14c87a00e68fcadab916e&localId=w:41DB1DC1-977A-8BD5-2560-B615C7BC3215&deviceId=6966574999063966&anid=
    Remote address:
    150.171.28.10:443
    Request
    GET /neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=c6c481e1f5e14c87a00e68fcadab916e&localId=w:41DB1DC1-977A-8BD5-2560-B615C7BC3215&deviceId=6966574999063966&anid= HTTP/2.0
    host: g.bing.com
    accept-encoding: gzip, deflate
    user-agent: WindowsShellClient/9.0.40929.0 (Windows)
    Response
    HTTP/2.0 204
    cache-control: no-cache, must-revalidate
    pragma: no-cache
    expires: Fri, 01 Jan 1990 00:00:00 GMT
    set-cookie: MUID=3D723FE6D61D6DE33B7E2A77D7966CBF; domain=.bing.com; expires=Mon, 09-Mar-2026 02:16:00 GMT; path=/; SameSite=None; Secure; Priority=High;
    strict-transport-security: max-age=31536000; includeSubDomains; preload
    access-control-allow-origin: *
    x-cache: CONFIG_NOCACHE
    accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
    x-msedge-ref: Ref A: 4DAB314FC0AE4B52AED853D83C7EA0A3 Ref B: FRA31EDGE0220 Ref C: 2025-02-12T02:16:00Z
    date: Wed, 12 Feb 2025 02:16:00 GMT
  • flag-us
    GET
    https://g.bing.com/neg/0?action=emptycreative&adUnitId=11730597&publisherId=251978541&rid=c6c481e1f5e14c87a00e68fcadab916e&localId=w:41DB1DC1-977A-8BD5-2560-B615C7BC3215&deviceId=6966574999063966&anid=
    Remote address:
    150.171.28.10:443
    Request
    GET /neg/0?action=emptycreative&adUnitId=11730597&publisherId=251978541&rid=c6c481e1f5e14c87a00e68fcadab916e&localId=w:41DB1DC1-977A-8BD5-2560-B615C7BC3215&deviceId=6966574999063966&anid= HTTP/2.0
    host: g.bing.com
    accept-encoding: gzip, deflate
    user-agent: WindowsShellClient/9.0.40929.0 (Windows)
    cookie: MUID=3D723FE6D61D6DE33B7E2A77D7966CBF
    Response
    HTTP/2.0 204
    cache-control: no-cache, must-revalidate
    pragma: no-cache
    expires: Fri, 01 Jan 1990 00:00:00 GMT
    set-cookie: MSPTC=XM26RBv2Pbn6y9zAHwRBmiXTL1VE4rtVhJ06Gw81m7A; domain=.bing.com; expires=Mon, 09-Mar-2026 02:16:00 GMT; path=/; Partitioned; secure; SameSite=None
    strict-transport-security: max-age=31536000; includeSubDomains; preload
    access-control-allow-origin: *
    x-cache: CONFIG_NOCACHE
    accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
    x-msedge-ref: Ref A: 5A3D70BB24524CE4820A03429052DBBB Ref B: FRA31EDGE0220 Ref C: 2025-02-12T02:16:00Z
    date: Wed, 12 Feb 2025 02:16:00 GMT
  • flag-us
    GET
    https://g.bing.com/neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=c6c481e1f5e14c87a00e68fcadab916e&localId=w:41DB1DC1-977A-8BD5-2560-B615C7BC3215&deviceId=6966574999063966&anid=
    Remote address:
    150.171.28.10:443
    Request
    GET /neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=c6c481e1f5e14c87a00e68fcadab916e&localId=w:41DB1DC1-977A-8BD5-2560-B615C7BC3215&deviceId=6966574999063966&anid= HTTP/2.0
    host: g.bing.com
    accept-encoding: gzip, deflate
    user-agent: WindowsShellClient/9.0.40929.0 (Windows)
    cookie: MUID=3D723FE6D61D6DE33B7E2A77D7966CBF; MSPTC=XM26RBv2Pbn6y9zAHwRBmiXTL1VE4rtVhJ06Gw81m7A
    Response
    HTTP/2.0 204
    cache-control: no-cache, must-revalidate
    pragma: no-cache
    expires: Fri, 01 Jan 1990 00:00:00 GMT
    strict-transport-security: max-age=31536000; includeSubDomains; preload
    access-control-allow-origin: *
    x-cache: CONFIG_NOCACHE
    accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
    x-msedge-ref: Ref A: 6CE05E5CACF04E7B8D837B48DCF1DCA9 Ref B: FRA31EDGE0220 Ref C: 2025-02-12T02:16:01Z
    date: Wed, 12 Feb 2025 02:16:00 GMT
  • flag-us
    DNS
    msedge.api.cdp.microsoft.com
    Remote address:
    8.8.8.8:53
    Request
    msedge.api.cdp.microsoft.com
    IN A
    Response
    msedge.api.cdp.microsoft.com
    IN CNAME
    api.cdp.microsoft.com
    api.cdp.microsoft.com
    IN CNAME
    glb.api.prod.dcat.dsp.trafficmanager.net
    glb.api.prod.dcat.dsp.trafficmanager.net
    IN A
    4.151.228.221
  • flag-us
    POST
    https://msedge.api.cdp.microsoft.com/api/v2/contents/Browser/namespaces/Default/names?action=batchupdates
    Remote address:
    4.151.228.221:443
    Request
    POST /api/v2/contents/Browser/namespaces/Default/names?action=batchupdates HTTP/2.0
    host: msedge.api.cdp.microsoft.com
    cache-control: no-cache
    pragma: no-cache
    content-type: application/json
    user-agent: Microsoft Edge Update/1.3.195.43;winhttp
    x-old-uid: {67315C04-7D4F-4C34-A5ED-280FF30C343F}; age=-1; cnt=2
    ms-correlationid: {502D8D63-9D9E-4FF9-86CD-7207BD86FB8E}
    ms-requestid: {B09379BC-9EBA-470B-ADFA-3CC3A6D0DA25}
    ms-cv: Y40tUJ6d+U+GzXIHvYb7jg.0
    x-last-hr: 0x0
    x-last-http-status-code: 0
    x-retry-count: 0
    x-http-attempts: 1
    content-length: 2540
    Response
    HTTP/2.0 200
    content-type: text/plain; charset=utf-8
    content-type: application/json; charset=utf-8
    date: Wed, 12 Feb 2025 02:16:31 GMT
    content-length: 298
    ms-correlationid: 502d8d63-9d9e-4ff9-86cd-7207bd86fb8e
    ms-requestid: b09379bc-9eba-470b-adfa-3cc3a6d0da25
    ms-cv: {502D8D63-9D9E-4FF9-86CD-7207BD86FB8E}.0
  • flag-us
    POST
    https://msedge.api.cdp.microsoft.com/api/v1.1/internal/contents/Browser/namespaces/Default/names/msedge-stable-win-x64/versions/132.0.2957.140/files?action=GenerateDownloadInfo&foregroundPriority=false
    Remote address:
    4.151.228.221:443
    Request
    POST /api/v1.1/internal/contents/Browser/namespaces/Default/names/msedge-stable-win-x64/versions/132.0.2957.140/files?action=GenerateDownloadInfo&foregroundPriority=false HTTP/2.0
    host: msedge.api.cdp.microsoft.com
    cache-control: no-cache
    pragma: no-cache
    content-type: application/json
    user-agent: Microsoft Edge Update/1.3.195.43;winhttp
    x-old-uid: {67315C04-7D4F-4C34-A5ED-280FF30C343F}; age=-1; cnt=2
    ms-correlationid: {502D8D63-9D9E-4FF9-86CD-7207BD86FB8E}
    ms-requestid: {E614A0CB-BD17-4872-95A9-B266AEE44835}
    ms-cv: Y40tUJ6d+U+GzXIHvYb7jg.1
    x-last-hr: 0x0
    x-last-http-status-code: 0
    x-retry-count: 0
    x-http-attempts: 1
    content-length: 2
    Response
    HTTP/2.0 200
    content-type: text/plain; charset=utf-8
    content-type: application/json; charset=utf-8
    date: Wed, 12 Feb 2025 02:16:31 GMT
    content-length: 5359
    ms-correlationid: 502d8d63-9d9e-4ff9-86cd-7207bd86fb8e
    ms-requestid: e614a0cb-bd17-4872-95a9-b266aee44835
    ms-cv: {502D8D63-9D9E-4FF9-86CD-7207BD86FB8E}.0
  • flag-us
    DNS
    drive.google.com
    12022025_0209_2435433.exe
    Remote address:
    8.8.8.8:53
    Request
    drive.google.com
    IN A
    Response
    drive.google.com
    IN A
    142.250.187.206
  • flag-us
    DNS
    drive.google.com
    12022025_0209_2435433.exe
    Remote address:
    8.8.8.8:53
    Request
    drive.google.com
    IN A
  • flag-us
    DNS
    drive.google.com
    12022025_0209_2435433.exe
    Remote address:
    8.8.8.8:53
    Request
    drive.google.com
    IN A
  • flag-us
    DNS
    msedge.b.tlu.dl.delivery.mp.microsoft.com
    Remote address:
    8.8.8.8:53
    Request
    msedge.b.tlu.dl.delivery.mp.microsoft.com
    IN A
    Response
    msedge.b.tlu.dl.delivery.mp.microsoft.com
    IN CNAME
    star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com
    star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com
    IN CNAME
    cdp-f-tlu-net.trafficmanager.net
    cdp-f-tlu-net.trafficmanager.net
    IN CNAME
    wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net
    wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net
    IN CNAME
    a1847.dscd.akamai.net
    a1847.dscd.akamai.net
    IN A
    2.20.12.95
    a1847.dscd.akamai.net
    IN A
    2.20.12.74
  • flag-us
    DNS
    msedge.b.tlu.dl.delivery.mp.microsoft.com
    Remote address:
    8.8.8.8:53
    Request
    msedge.b.tlu.dl.delivery.mp.microsoft.com
    IN A
  • flag-us
    DNS
    msedge.b.tlu.dl.delivery.mp.microsoft.com
    Remote address:
    8.8.8.8:53
    Request
    msedge.b.tlu.dl.delivery.mp.microsoft.com
    IN A
  • flag-gb
    HEAD
    http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d
    Remote address:
    2.20.12.95:80
    Request
    HEAD /filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    Accept-Encoding: identity
    User-Agent: Microsoft BITS/7.8
    X-Old-UID: {67315C04-7D4F-4C34-A5ED-280FF30C343F}; age=-1; cnt=2
    X-Last-HR: 0x80070422
    X-Last-HTTP-Status-Code: 500
    X-Retry-Count: 0
    X-HTTP-Attempts: 2
    Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
    Response
    HTTP/1.1 200 OK
    Cache-Control: public, max-age=17280000
    Content-Length: 177180216
    Content-Type: application/octet-stream
    Last-Modified: Thu, 30 Jan 2025 22:24:43 GMT
    Accept-Ranges: bytes
    ETag: "Zn30nCFs7P9yX7o9FILxqytRM2k="
    Server: Microsoft-IIS/10.0
    X-AspNetMvc-Version: 5.3
    MS-CorrelationId: 57bc4fdb-5120-49b5-8001-a2329fc1e2df
    MS-RequestId: 9991e830-be9e-4e5d-a5d5-93f0bb823527
    MS-CV: CF4EFJgeEUeGqOzu.0
    X-AspNet-Version: 4.0.30319
    X-Powered-By: ASP.NET
    X-Powered-By: ARR/3.0
    X-Powered-By: ASP.NET
    Date: Wed, 12 Feb 2025 02:16:38 GMT
    Connection: keep-alive
    X-CID: 2
    X-CCC: GB
  • flag-gb
    GET
    http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d
    Remote address:
    2.20.12.95:80
    Request
    GET /filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    Accept-Encoding: identity
    If-Unmodified-Since: Thu, 30 Jan 2025 22:24:43 GMT
    Range: bytes=0-1119
    User-Agent: Microsoft BITS/7.8
    X-Old-UID: {67315C04-7D4F-4C34-A5ED-280FF30C343F}; age=-1; cnt=2
    X-Last-HR: 0x80070422
    X-Last-HTTP-Status-Code: 500
    X-Retry-Count: 0
    X-HTTP-Attempts: 2
    Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
    Response
    HTTP/1.1 206 Partial Content
    Cache-Control: public, max-age=17280000
    Content-Type: application/octet-stream
    Accept-Ranges: bytes
    Server: Microsoft-IIS/10.0
    X-AspNetMvc-Version: 5.3
    MS-CorrelationId: 6f60f8cc-e39b-44d3-b4d4-339059ed8366
    MS-RequestId: c8e2eff3-3eeb-4f9c-9dc9-9aaf7fc8a933
    MS-CV: y9dBBsu9vkmE74iU.0
    X-AspNet-Version: 4.0.30319
    X-Powered-By: ASP.NET
    X-Powered-By: ARR/3.0
    X-Powered-By: ASP.NET
    Last-Modified: Thu, 30 Jan 2025 22:24:43 GMT
    ETag: "Zn30nCFs7P9yX7o9FILxqytRM2k="
    Date: Wed, 12 Feb 2025 02:16:38 GMT
    Content-Range: bytes 0-1119/177180216
    Content-Length: 1120
    Connection: keep-alive
    X-CID: 2
    X-CCC: GB
  • flag-gb
    GET
    http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d
    Remote address:
    2.20.12.95:80
    Request
    GET /filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    Accept-Encoding: identity
    If-Unmodified-Since: Thu, 30 Jan 2025 22:24:43 GMT
    Range: bytes=1120-2414
    User-Agent: Microsoft BITS/7.8
    X-Old-UID: {67315C04-7D4F-4C34-A5ED-280FF30C343F}; age=-1; cnt=2
    X-Last-HR: 0x80070422
    X-Last-HTTP-Status-Code: 500
    X-Retry-Count: 0
    X-HTTP-Attempts: 2
    Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
    Response
    HTTP/1.1 206 Partial Content
    Cache-Control: public, max-age=17280000
    Content-Type: application/octet-stream
    Accept-Ranges: bytes
    Server: Microsoft-IIS/10.0
    X-AspNetMvc-Version: 5.3
    MS-CorrelationId: 6f60f8cc-e39b-44d3-b4d4-339059ed8366
    MS-RequestId: c8e2eff3-3eeb-4f9c-9dc9-9aaf7fc8a933
    MS-CV: y9dBBsu9vkmE74iU.0
    X-AspNet-Version: 4.0.30319
    X-Powered-By: ASP.NET
    X-Powered-By: ARR/3.0
    X-Powered-By: ASP.NET
    Last-Modified: Thu, 30 Jan 2025 22:24:43 GMT
    ETag: "Zn30nCFs7P9yX7o9FILxqytRM2k="
    Date: Wed, 12 Feb 2025 02:16:41 GMT
    Content-Range: bytes 1120-2414/177180216
    Content-Length: 1295
    Connection: keep-alive
    X-CID: 2
    X-CCC: GB
  • flag-gb
    GET
    http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d
    Remote address:
    2.20.12.95:80
    Request
    GET /filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    Accept-Encoding: identity
    If-Unmodified-Since: Thu, 30 Jan 2025 22:24:43 GMT
    Range: bytes=2415-6265
    User-Agent: Microsoft BITS/7.8
    X-Old-UID: {67315C04-7D4F-4C34-A5ED-280FF30C343F}; age=-1; cnt=2
    X-Last-HR: 0x80070422
    X-Last-HTTP-Status-Code: 500
    X-Retry-Count: 0
    X-HTTP-Attempts: 2
    Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
    Response
    HTTP/1.1 206 Partial Content
    Cache-Control: public, max-age=17280000
    Content-Type: application/octet-stream
    Accept-Ranges: bytes
    Server: Microsoft-IIS/10.0
    X-AspNetMvc-Version: 5.3
    MS-CorrelationId: 6f60f8cc-e39b-44d3-b4d4-339059ed8366
    MS-RequestId: c8e2eff3-3eeb-4f9c-9dc9-9aaf7fc8a933
    MS-CV: y9dBBsu9vkmE74iU.0
    X-AspNet-Version: 4.0.30319
    X-Powered-By: ASP.NET
    X-Powered-By: ARR/3.0
    X-Powered-By: ASP.NET
    Last-Modified: Thu, 30 Jan 2025 22:24:43 GMT
    ETag: "Zn30nCFs7P9yX7o9FILxqytRM2k="
    Date: Wed, 12 Feb 2025 02:16:43 GMT
    Content-Range: bytes 2415-6265/177180216
    Content-Length: 3851
    Connection: keep-alive
    X-CID: 2
    X-CCC: GB
  • flag-gb
    GET
    http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d
    Remote address:
    2.20.12.95:80
    Request
    GET /filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    Accept-Encoding: identity
    If-Unmodified-Since: Thu, 30 Jan 2025 22:24:43 GMT
    Range: bytes=6266-7654
    User-Agent: Microsoft BITS/7.8
    X-Old-UID: {67315C04-7D4F-4C34-A5ED-280FF30C343F}; age=-1; cnt=2
    X-Last-HR: 0x80070422
    X-Last-HTTP-Status-Code: 500
    X-Retry-Count: 0
    X-HTTP-Attempts: 2
    Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
    Response
    HTTP/1.1 206 Partial Content
    Cache-Control: public, max-age=17280000
    Content-Type: application/octet-stream
    Accept-Ranges: bytes
    Server: Microsoft-IIS/10.0
    X-AspNetMvc-Version: 5.3
    MS-CorrelationId: 6f60f8cc-e39b-44d3-b4d4-339059ed8366
    MS-RequestId: c8e2eff3-3eeb-4f9c-9dc9-9aaf7fc8a933
    MS-CV: y9dBBsu9vkmE74iU.0
    X-AspNet-Version: 4.0.30319
    X-Powered-By: ASP.NET
    X-Powered-By: ARR/3.0
    X-Powered-By: ASP.NET
    Last-Modified: Thu, 30 Jan 2025 22:24:43 GMT
    ETag: "Zn30nCFs7P9yX7o9FILxqytRM2k="
    Date: Wed, 12 Feb 2025 02:16:44 GMT
    Content-Range: bytes 6266-7654/177180216
    Content-Length: 1389
    Connection: keep-alive
    X-CID: 2
    X-CCC: GB
  • flag-gb
    GET
    http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d
    Remote address:
    2.20.12.95:80
    Request
    GET /filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    Accept-Encoding: identity
    If-Unmodified-Since: Thu, 30 Jan 2025 22:24:43 GMT
    Range: bytes=7655-23492
    User-Agent: Microsoft BITS/7.8
    X-Old-UID: {67315C04-7D4F-4C34-A5ED-280FF30C343F}; age=-1; cnt=2
    X-Last-HR: 0x80070422
    X-Last-HTTP-Status-Code: 500
    X-Retry-Count: 0
    X-HTTP-Attempts: 2
    Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
    Response
    HTTP/1.1 206 Partial Content
    Cache-Control: public, max-age=17280000
    Content-Type: application/octet-stream
    Accept-Ranges: bytes
    Server: Microsoft-IIS/10.0
    X-AspNetMvc-Version: 5.3
    MS-CorrelationId: 6f60f8cc-e39b-44d3-b4d4-339059ed8366
    MS-RequestId: c8e2eff3-3eeb-4f9c-9dc9-9aaf7fc8a933
    MS-CV: y9dBBsu9vkmE74iU.0
    X-AspNet-Version: 4.0.30319
    X-Powered-By: ASP.NET
    X-Powered-By: ARR/3.0
    X-Powered-By: ASP.NET
    Last-Modified: Thu, 30 Jan 2025 22:24:43 GMT
    ETag: "Zn30nCFs7P9yX7o9FILxqytRM2k="
    Date: Wed, 12 Feb 2025 02:16:45 GMT
    Content-Range: bytes 7655-23492/177180216
    Content-Length: 15838
    Connection: keep-alive
    X-CID: 2
    X-CCC: GB
  • flag-gb
    GET
    http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d
    Remote address:
    2.20.12.95:80
    Request
    GET /filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    Accept-Encoding: identity
    If-Unmodified-Since: Thu, 30 Jan 2025 22:24:43 GMT
    Range: bytes=23493-63382
    User-Agent: Microsoft BITS/7.8
    X-Old-UID: {67315C04-7D4F-4C34-A5ED-280FF30C343F}; age=-1; cnt=2
    X-Last-HR: 0x80070422
    X-Last-HTTP-Status-Code: 500
    X-Retry-Count: 0
    X-HTTP-Attempts: 2
    Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
    Response
    HTTP/1.1 206 Partial Content
    Cache-Control: public, max-age=17280000
    Content-Type: application/octet-stream
    Accept-Ranges: bytes
    Server: Microsoft-IIS/10.0
    X-AspNetMvc-Version: 5.3
    MS-CorrelationId: 6f60f8cc-e39b-44d3-b4d4-339059ed8366
    MS-RequestId: c8e2eff3-3eeb-4f9c-9dc9-9aaf7fc8a933
    MS-CV: y9dBBsu9vkmE74iU.0
    X-AspNet-Version: 4.0.30319
    X-Powered-By: ASP.NET
    X-Powered-By: ARR/3.0
    X-Powered-By: ASP.NET
    Last-Modified: Thu, 30 Jan 2025 22:24:43 GMT
    ETag: "Zn30nCFs7P9yX7o9FILxqytRM2k="
    Date: Wed, 12 Feb 2025 02:16:49 GMT
    Content-Range: bytes 23493-63382/177180216
    Content-Length: 39890
    Connection: keep-alive
    X-CID: 2
    X-CCC: GB
  • flag-gb
    GET
    http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d
    Remote address:
    2.20.12.95:80
    Request
    GET /filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    Accept-Encoding: identity
    If-Unmodified-Since: Thu, 30 Jan 2025 22:24:43 GMT
    Range: bytes=63383-157446
    User-Agent: Microsoft BITS/7.8
    X-Old-UID: {67315C04-7D4F-4C34-A5ED-280FF30C343F}; age=-1; cnt=2
    X-Last-HR: 0x80070422
    X-Last-HTTP-Status-Code: 500
    X-Retry-Count: 0
    X-HTTP-Attempts: 2
    Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
    Response
    HTTP/1.1 206 Partial Content
    Cache-Control: public, max-age=17280000
    Content-Type: application/octet-stream
    Accept-Ranges: bytes
    Server: Microsoft-IIS/10.0
    X-AspNetMvc-Version: 5.3
    MS-CorrelationId: 6f60f8cc-e39b-44d3-b4d4-339059ed8366
    MS-RequestId: c8e2eff3-3eeb-4f9c-9dc9-9aaf7fc8a933
    MS-CV: y9dBBsu9vkmE74iU.0
    X-AspNet-Version: 4.0.30319
    X-Powered-By: ASP.NET
    X-Powered-By: ARR/3.0
    X-Powered-By: ASP.NET
    Last-Modified: Thu, 30 Jan 2025 22:24:43 GMT
    ETag: "Zn30nCFs7P9yX7o9FILxqytRM2k="
    Date: Wed, 12 Feb 2025 02:16:51 GMT
    Content-Range: bytes 63383-157446/177180216
    Content-Length: 94064
    Connection: keep-alive
    X-CID: 2
    X-CCC: GB
  • flag-gb
    GET
    http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d
    Remote address:
    2.20.12.95:80
    Request
    GET /filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    Accept-Encoding: identity
    If-Unmodified-Since: Thu, 30 Jan 2025 22:24:43 GMT
    Range: bytes=157447-181632
    User-Agent: Microsoft BITS/7.8
    X-Old-UID: {67315C04-7D4F-4C34-A5ED-280FF30C343F}; age=-1; cnt=2
    X-Last-HR: 0x80070422
    X-Last-HTTP-Status-Code: 500
    X-Retry-Count: 0
    X-HTTP-Attempts: 2
    Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
    Response
    HTTP/1.1 206 Partial Content
    Cache-Control: public, max-age=17280000
    Content-Type: application/octet-stream
    Accept-Ranges: bytes
    Server: Microsoft-IIS/10.0
    X-AspNetMvc-Version: 5.3
    MS-CorrelationId: 6f60f8cc-e39b-44d3-b4d4-339059ed8366
    MS-RequestId: c8e2eff3-3eeb-4f9c-9dc9-9aaf7fc8a933
    MS-CV: y9dBBsu9vkmE74iU.0
    X-AspNet-Version: 4.0.30319
    X-Powered-By: ASP.NET
    X-Powered-By: ARR/3.0
    X-Powered-By: ASP.NET
    Last-Modified: Thu, 30 Jan 2025 22:24:43 GMT
    ETag: "Zn30nCFs7P9yX7o9FILxqytRM2k="
    Date: Wed, 12 Feb 2025 02:16:57 GMT
    Content-Range: bytes 157447-181632/177180216
    Content-Length: 24186
    Connection: keep-alive
    X-CID: 2
    X-CCC: GB
  • flag-gb
    GET
    http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d
    Remote address:
    2.20.12.95:80
    Request
    GET /filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    Accept-Encoding: identity
    If-Unmodified-Since: Thu, 30 Jan 2025 22:24:43 GMT
    Range: bytes=181633-438673
    User-Agent: Microsoft BITS/7.8
    X-Old-UID: {67315C04-7D4F-4C34-A5ED-280FF30C343F}; age=-1; cnt=2
    X-Last-HR: 0x80070422
    X-Last-HTTP-Status-Code: 500
    X-Retry-Count: 0
    X-HTTP-Attempts: 2
    Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
    Response
    HTTP/1.1 206 Partial Content
    Cache-Control: public, max-age=17280000
    Content-Type: application/octet-stream
    Accept-Ranges: bytes
    Server: Microsoft-IIS/10.0
    X-AspNetMvc-Version: 5.3
    MS-CorrelationId: 6f60f8cc-e39b-44d3-b4d4-339059ed8366
    MS-RequestId: c8e2eff3-3eeb-4f9c-9dc9-9aaf7fc8a933
    MS-CV: y9dBBsu9vkmE74iU.0
    X-AspNet-Version: 4.0.30319
    X-Powered-By: ASP.NET
    X-Powered-By: ARR/3.0
    X-Powered-By: ASP.NET
    Last-Modified: Thu, 30 Jan 2025 22:24:43 GMT
    ETag: "Zn30nCFs7P9yX7o9FILxqytRM2k="
    Date: Wed, 12 Feb 2025 02:16:58 GMT
    Content-Range: bytes 181633-438673/177180216
    Content-Length: 257041
    Connection: keep-alive
    X-CID: 2
    X-CCC: GB
  • flag-gb
    GET
    http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d
    Remote address:
    2.20.12.95:80
    Request
    GET /filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    Accept-Encoding: identity
    If-Unmodified-Since: Thu, 30 Jan 2025 22:24:43 GMT
    Range: bytes=438674-955496
    User-Agent: Microsoft BITS/7.8
    X-Old-UID: {67315C04-7D4F-4C34-A5ED-280FF30C343F}; age=-1; cnt=2
    X-Last-HR: 0x80070422
    X-Last-HTTP-Status-Code: 500
    X-Retry-Count: 0
    X-HTTP-Attempts: 2
    Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
    Response
    HTTP/1.1 206 Partial Content
    Cache-Control: public, max-age=17280000
    Content-Type: application/octet-stream
    Accept-Ranges: bytes
    Server: Microsoft-IIS/10.0
    X-AspNetMvc-Version: 5.3
    MS-CorrelationId: 6f60f8cc-e39b-44d3-b4d4-339059ed8366
    MS-RequestId: c8e2eff3-3eeb-4f9c-9dc9-9aaf7fc8a933
    MS-CV: y9dBBsu9vkmE74iU.0
    X-AspNet-Version: 4.0.30319
    X-Powered-By: ASP.NET
    X-Powered-By: ARR/3.0
    X-Powered-By: ASP.NET
    Last-Modified: Thu, 30 Jan 2025 22:24:43 GMT
    ETag: "Zn30nCFs7P9yX7o9FILxqytRM2k="
    Date: Wed, 12 Feb 2025 02:16:59 GMT
    Content-Range: bytes 438674-955496/177180216
    Content-Length: 516823
    Connection: keep-alive
    X-CID: 2
    X-CCC: GB
  • flag-gb
    GET
    http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d
    Remote address:
    2.20.12.95:80
    Request
    GET /filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    Accept-Encoding: identity
    If-Unmodified-Since: Thu, 30 Jan 2025 22:24:43 GMT
    Range: bytes=955497-2497275
    User-Agent: Microsoft BITS/7.8
    X-Old-UID: {67315C04-7D4F-4C34-A5ED-280FF30C343F}; age=-1; cnt=2
    X-Last-HR: 0x80070422
    X-Last-HTTP-Status-Code: 500
    X-Retry-Count: 0
    X-HTTP-Attempts: 2
    Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
    Response
    HTTP/1.1 206 Partial Content
    Cache-Control: public, max-age=17280000
    Content-Type: application/octet-stream
    Accept-Ranges: bytes
    Server: Microsoft-IIS/10.0
    X-AspNetMvc-Version: 5.3
    MS-CorrelationId: 6f60f8cc-e39b-44d3-b4d4-339059ed8366
    MS-RequestId: c8e2eff3-3eeb-4f9c-9dc9-9aaf7fc8a933
    MS-CV: y9dBBsu9vkmE74iU.0
    X-AspNet-Version: 4.0.30319
    X-Powered-By: ASP.NET
    X-Powered-By: ARR/3.0
    X-Powered-By: ASP.NET
    Last-Modified: Thu, 30 Jan 2025 22:24:43 GMT
    ETag: "Zn30nCFs7P9yX7o9FILxqytRM2k="
    Date: Wed, 12 Feb 2025 02:17:00 GMT
    Content-Range: bytes 955497-2497275/177180216
    Content-Length: 1541779
    Connection: keep-alive
    X-CID: 2
    X-CCC: GB
  • flag-gb
    GET
    http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d
    Remote address:
    2.20.12.95:80
    Request
    GET /filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    Accept-Encoding: identity
    If-Unmodified-Since: Thu, 30 Jan 2025 22:24:43 GMT
    Range: bytes=2497276-4547046
    User-Agent: Microsoft BITS/7.8
    X-Old-UID: {67315C04-7D4F-4C34-A5ED-280FF30C343F}; age=-1; cnt=2
    X-Last-HR: 0x80070422
    X-Last-HTTP-Status-Code: 500
    X-Retry-Count: 0
    X-HTTP-Attempts: 2
    Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
    Response
    HTTP/1.1 206 Partial Content
    Cache-Control: public, max-age=17280000
    Content-Type: application/octet-stream
    Accept-Ranges: bytes
    Server: Microsoft-IIS/10.0
    X-AspNetMvc-Version: 5.3
    MS-CorrelationId: 6f60f8cc-e39b-44d3-b4d4-339059ed8366
    MS-RequestId: c8e2eff3-3eeb-4f9c-9dc9-9aaf7fc8a933
    MS-CV: y9dBBsu9vkmE74iU.0
    X-AspNet-Version: 4.0.30319
    X-Powered-By: ASP.NET
    X-Powered-By: ARR/3.0
    X-Powered-By: ASP.NET
    Last-Modified: Thu, 30 Jan 2025 22:24:43 GMT
    ETag: "Zn30nCFs7P9yX7o9FILxqytRM2k="
    Date: Wed, 12 Feb 2025 02:17:01 GMT
    Content-Range: bytes 2497276-4547046/177180216
    Content-Length: 2049771
    Connection: keep-alive
    X-CID: 2
    X-CCC: GB
  • flag-gb
    GET
    http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d
    Remote address:
    2.20.12.95:80
    Request
    GET /filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    Accept-Encoding: identity
    If-Unmodified-Since: Thu, 30 Jan 2025 22:24:43 GMT
    Range: bytes=4547047-6052540
    User-Agent: Microsoft BITS/7.8
    X-Old-UID: {67315C04-7D4F-4C34-A5ED-280FF30C343F}; age=-1; cnt=2
    X-Last-HR: 0x80070422
    X-Last-HTTP-Status-Code: 500
    X-Retry-Count: 0
    X-HTTP-Attempts: 2
    Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
    Response
    HTTP/1.1 206 Partial Content
    Cache-Control: public, max-age=17280000
    Content-Type: application/octet-stream
    Accept-Ranges: bytes
    Server: Microsoft-IIS/10.0
    X-AspNetMvc-Version: 5.3
    MS-CorrelationId: 6f60f8cc-e39b-44d3-b4d4-339059ed8366
    MS-RequestId: c8e2eff3-3eeb-4f9c-9dc9-9aaf7fc8a933
    MS-CV: y9dBBsu9vkmE74iU.0
    X-AspNet-Version: 4.0.30319
    X-Powered-By: ASP.NET
    X-Powered-By: ARR/3.0
    X-Powered-By: ASP.NET
    Last-Modified: Thu, 30 Jan 2025 22:24:43 GMT
    ETag: "Zn30nCFs7P9yX7o9FILxqytRM2k="
    Date: Wed, 12 Feb 2025 02:17:04 GMT
    Content-Range: bytes 4547047-6052540/177180216
    Content-Length: 1505494
    Connection: keep-alive
    X-CID: 2
    X-CCC: GB
  • flag-gb
    GET
    http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d
    Remote address:
    2.20.12.95:80
    Request
    GET /filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    Accept-Encoding: identity
    If-Unmodified-Since: Thu, 30 Jan 2025 22:24:43 GMT
    Range: bytes=6052541-6321292
    User-Agent: Microsoft BITS/7.8
    X-Old-UID: {67315C04-7D4F-4C34-A5ED-280FF30C343F}; age=-1; cnt=2
    X-Last-HR: 0x80070422
    X-Last-HTTP-Status-Code: 500
    X-Retry-Count: 0
    X-HTTP-Attempts: 2
    Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
    Response
    HTTP/1.1 206 Partial Content
    Cache-Control: public, max-age=17280000
    Content-Type: application/octet-stream
    Accept-Ranges: bytes
    Server: Microsoft-IIS/10.0
    X-AspNetMvc-Version: 5.3
    MS-CorrelationId: 6f60f8cc-e39b-44d3-b4d4-339059ed8366
    MS-RequestId: c8e2eff3-3eeb-4f9c-9dc9-9aaf7fc8a933
    MS-CV: y9dBBsu9vkmE74iU.0
    X-AspNet-Version: 4.0.30319
    X-Powered-By: ASP.NET
    X-Powered-By: ARR/3.0
    X-Powered-By: ASP.NET
    Last-Modified: Thu, 30 Jan 2025 22:24:43 GMT
    ETag: "Zn30nCFs7P9yX7o9FILxqytRM2k="
    Date: Wed, 12 Feb 2025 02:17:05 GMT
    Content-Range: bytes 6052541-6321292/177180216
    Content-Length: 268752
    Connection: keep-alive
    X-CID: 2
    X-CCC: GB
  • flag-gb
    GET
    http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d
    Remote address:
    2.20.12.95:80
    Request
    GET /filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    Accept-Encoding: identity
    If-Unmodified-Since: Thu, 30 Jan 2025 22:24:43 GMT
    Range: bytes=6321293-6566559
    User-Agent: Microsoft BITS/7.8
    X-Old-UID: {67315C04-7D4F-4C34-A5ED-280FF30C343F}; age=-1; cnt=2
    X-Last-HR: 0x80070422
    X-Last-HTTP-Status-Code: 500
    X-Retry-Count: 0
    X-HTTP-Attempts: 2
    Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
    Response
    HTTP/1.1 206 Partial Content
    Cache-Control: public, max-age=17280000
    Content-Type: application/octet-stream
    Accept-Ranges: bytes
    Server: Microsoft-IIS/10.0
    X-AspNetMvc-Version: 5.3
    MS-CorrelationId: 6f60f8cc-e39b-44d3-b4d4-339059ed8366
    MS-RequestId: c8e2eff3-3eeb-4f9c-9dc9-9aaf7fc8a933
    MS-CV: y9dBBsu9vkmE74iU.0
    X-AspNet-Version: 4.0.30319
    X-Powered-By: ASP.NET
    X-Powered-By: ARR/3.0
    X-Powered-By: ASP.NET
    Last-Modified: Thu, 30 Jan 2025 22:24:43 GMT
    ETag: "Zn30nCFs7P9yX7o9FILxqytRM2k="
    Date: Wed, 12 Feb 2025 02:17:06 GMT
    Content-Range: bytes 6321293-6566559/177180216
    Content-Length: 245267
    Connection: keep-alive
    X-CID: 2
    X-CCC: GB
  • flag-gb
    GET
    http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d
    Remote address:
    2.20.12.95:80
    Request
    GET /filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    Accept-Encoding: identity
    If-Unmodified-Since: Thu, 30 Jan 2025 22:24:43 GMT
    Range: bytes=6566560-7521960
    User-Agent: Microsoft BITS/7.8
    X-Old-UID: {67315C04-7D4F-4C34-A5ED-280FF30C343F}; age=-1; cnt=2
    X-Last-HR: 0x80070422
    X-Last-HTTP-Status-Code: 500
    X-Retry-Count: 0
    X-HTTP-Attempts: 2
    Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
    Response
    HTTP/1.1 206 Partial Content
    Cache-Control: public, max-age=17280000
    Content-Type: application/octet-stream
    Accept-Ranges: bytes
    Server: Microsoft-IIS/10.0
    X-AspNetMvc-Version: 5.3
    MS-CorrelationId: 6f60f8cc-e39b-44d3-b4d4-339059ed8366
    MS-RequestId: c8e2eff3-3eeb-4f9c-9dc9-9aaf7fc8a933
    MS-CV: y9dBBsu9vkmE74iU.0
    X-AspNet-Version: 4.0.30319
    X-Powered-By: ASP.NET
    X-Powered-By: ARR/3.0
    X-Powered-By: ASP.NET
    Last-Modified: Thu, 30 Jan 2025 22:24:43 GMT
    ETag: "Zn30nCFs7P9yX7o9FILxqytRM2k="
    Date: Wed, 12 Feb 2025 02:17:07 GMT
    Content-Range: bytes 6566560-7521960/177180216
    Content-Length: 955401
    Connection: keep-alive
    X-CID: 2
    X-CCC: GB
  • flag-gb
    GET
    http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d
    Remote address:
    2.20.12.95:80
    Request
    GET /filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    Accept-Encoding: identity
    If-Unmodified-Since: Thu, 30 Jan 2025 22:24:43 GMT
    Range: bytes=7521961-8135045
    User-Agent: Microsoft BITS/7.8
    X-Old-UID: {67315C04-7D4F-4C34-A5ED-280FF30C343F}; age=-1; cnt=2
    X-Last-HR: 0x80070422
    X-Last-HTTP-Status-Code: 500
    X-Retry-Count: 0
    X-HTTP-Attempts: 2
    Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
    Response
    HTTP/1.1 206 Partial Content
    Cache-Control: public, max-age=17280000
    Content-Type: application/octet-stream
    Accept-Ranges: bytes
    Server: Microsoft-IIS/10.0
    X-AspNetMvc-Version: 5.3
    MS-CorrelationId: 6f60f8cc-e39b-44d3-b4d4-339059ed8366
    MS-RequestId: c8e2eff3-3eeb-4f9c-9dc9-9aaf7fc8a933
    MS-CV: y9dBBsu9vkmE74iU.0
    X-AspNet-Version: 4.0.30319
    X-Powered-By: ASP.NET
    X-Powered-By: ARR/3.0
    X-Powered-By: ASP.NET
    Last-Modified: Thu, 30 Jan 2025 22:24:43 GMT
    ETag: "Zn30nCFs7P9yX7o9FILxqytRM2k="
    Date: Wed, 12 Feb 2025 02:17:46 GMT
    Content-Range: bytes 7521961-8135045/177180216
    Content-Length: 613085
    Connection: keep-alive
    X-CID: 2
    X-CCC: GB
  • flag-gb
    GET
    http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d
    Remote address:
    2.20.12.95:80
    Request
    GET /filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    Accept-Encoding: identity
    If-Unmodified-Since: Thu, 30 Jan 2025 22:24:43 GMT
    Range: bytes=8135046-9098199
    User-Agent: Microsoft BITS/7.8
    X-Old-UID: {67315C04-7D4F-4C34-A5ED-280FF30C343F}; age=-1; cnt=2
    X-Last-HR: 0x80070422
    X-Last-HTTP-Status-Code: 500
    X-Retry-Count: 0
    X-HTTP-Attempts: 2
    Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
    Response
    HTTP/1.1 206 Partial Content
    Cache-Control: public, max-age=17280000
    Content-Type: application/octet-stream
    Accept-Ranges: bytes
    Server: Microsoft-IIS/10.0
    X-AspNetMvc-Version: 5.3
    MS-CorrelationId: 6f60f8cc-e39b-44d3-b4d4-339059ed8366
    MS-RequestId: c8e2eff3-3eeb-4f9c-9dc9-9aaf7fc8a933
    MS-CV: y9dBBsu9vkmE74iU.0
    X-AspNet-Version: 4.0.30319
    X-Powered-By: ASP.NET
    X-Powered-By: ARR/3.0
    X-Powered-By: ASP.NET
    Last-Modified: Thu, 30 Jan 2025 22:24:43 GMT
    ETag: "Zn30nCFs7P9yX7o9FILxqytRM2k="
    Date: Wed, 12 Feb 2025 02:17:47 GMT
    Content-Range: bytes 8135046-9098199/177180216
    Content-Length: 963154
    Connection: keep-alive
    X-CID: 2
    X-CCC: GB
  • flag-gb
    GET
    http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d
    Remote address:
    2.20.12.95:80
    Request
    GET /filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    Accept-Encoding: identity
    If-Unmodified-Since: Thu, 30 Jan 2025 22:24:43 GMT
    Range: bytes=9098200-10377399
    User-Agent: Microsoft BITS/7.8
    X-Old-UID: {67315C04-7D4F-4C34-A5ED-280FF30C343F}; age=-1; cnt=2
    X-Last-HR: 0x80070422
    X-Last-HTTP-Status-Code: 500
    X-Retry-Count: 0
    X-HTTP-Attempts: 2
    Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
    Response
    HTTP/1.1 206 Partial Content
    Cache-Control: public, max-age=17280000
    Content-Type: application/octet-stream
    Accept-Ranges: bytes
    Server: Microsoft-IIS/10.0
    X-AspNetMvc-Version: 5.3
    MS-CorrelationId: 6f60f8cc-e39b-44d3-b4d4-339059ed8366
    MS-RequestId: c8e2eff3-3eeb-4f9c-9dc9-9aaf7fc8a933
    MS-CV: y9dBBsu9vkmE74iU.0
    X-AspNet-Version: 4.0.30319
    X-Powered-By: ASP.NET
    X-Powered-By: ARR/3.0
    X-Powered-By: ASP.NET
    Last-Modified: Thu, 30 Jan 2025 22:24:43 GMT
    ETag: "Zn30nCFs7P9yX7o9FILxqytRM2k="
    Date: Wed, 12 Feb 2025 02:17:48 GMT
    Content-Range: bytes 9098200-10377399/177180216
    Content-Length: 1279200
    Connection: keep-alive
    X-CID: 2
    X-CCC: GB
  • flag-gb
    GET
    http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d
    Remote address:
    2.20.12.95:80
    Request
    GET /filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    Accept-Encoding: identity
    If-Unmodified-Since: Thu, 30 Jan 2025 22:24:43 GMT
    Range: bytes=10377400-11323221
    User-Agent: Microsoft BITS/7.8
    X-Old-UID: {67315C04-7D4F-4C34-A5ED-280FF30C343F}; age=-1; cnt=2
    X-Last-HR: 0x80070422
    X-Last-HTTP-Status-Code: 500
    X-Retry-Count: 0
    X-HTTP-Attempts: 2
    Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
    Response
    HTTP/1.1 206 Partial Content
    Cache-Control: public, max-age=17280000
    Content-Type: application/octet-stream
    Accept-Ranges: bytes
    Server: Microsoft-IIS/10.0
    X-AspNetMvc-Version: 5.3
    MS-CorrelationId: 6f60f8cc-e39b-44d3-b4d4-339059ed8366
    MS-RequestId: c8e2eff3-3eeb-4f9c-9dc9-9aaf7fc8a933
    MS-CV: y9dBBsu9vkmE74iU.0
    X-AspNet-Version: 4.0.30319
    X-Powered-By: ASP.NET
    X-Powered-By: ARR/3.0
    X-Powered-By: ASP.NET
    Last-Modified: Thu, 30 Jan 2025 22:24:43 GMT
    ETag: "Zn30nCFs7P9yX7o9FILxqytRM2k="
    Date: Wed, 12 Feb 2025 02:17:51 GMT
    Content-Range: bytes 10377400-11323221/177180216
    Content-Length: 945822
    Connection: keep-alive
    X-CID: 2
    X-CCC: GB
  • flag-gb
    GET
    http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d
    Remote address:
    2.20.12.95:80
    Request
    GET /filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    Accept-Encoding: identity
    If-Unmodified-Since: Thu, 30 Jan 2025 22:24:43 GMT
    Range: bytes=11323222-11974567
    User-Agent: Microsoft BITS/7.8
    X-Old-UID: {67315C04-7D4F-4C34-A5ED-280FF30C343F}; age=-1; cnt=2
    X-Last-HR: 0x80070422
    X-Last-HTTP-Status-Code: 500
    X-Retry-Count: 0
    X-HTTP-Attempts: 2
    Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
    Response
    HTTP/1.1 206 Partial Content
    Cache-Control: public, max-age=17280000
    Content-Type: application/octet-stream
    Accept-Ranges: bytes
    Server: Microsoft-IIS/10.0
    X-AspNetMvc-Version: 5.3
    MS-CorrelationId: 6f60f8cc-e39b-44d3-b4d4-339059ed8366
    MS-RequestId: c8e2eff3-3eeb-4f9c-9dc9-9aaf7fc8a933
    MS-CV: y9dBBsu9vkmE74iU.0
    X-AspNet-Version: 4.0.30319
    X-Powered-By: ASP.NET
    X-Powered-By: ARR/3.0
    X-Powered-By: ASP.NET
    Last-Modified: Thu, 30 Jan 2025 22:24:43 GMT
    ETag: "Zn30nCFs7P9yX7o9FILxqytRM2k="
    Date: Wed, 12 Feb 2025 02:18:01 GMT
    Content-Range: bytes 11323222-11974567/177180216
    Content-Length: 651346
    Connection: keep-alive
    X-CID: 2
    X-CCC: GB
  • flag-gb
    GET
    http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d
    Remote address:
    2.20.12.95:80
    Request
    GET /filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    Accept-Encoding: identity
    If-Unmodified-Since: Thu, 30 Jan 2025 22:24:43 GMT
    Range: bytes=11974568-12455567
    User-Agent: Microsoft BITS/7.8
    X-Old-UID: {67315C04-7D4F-4C34-A5ED-280FF30C343F}; age=-1; cnt=2
    X-Last-HR: 0x80070422
    X-Last-HTTP-Status-Code: 500
    X-Retry-Count: 0
    X-HTTP-Attempts: 2
    Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
    Response
    HTTP/1.1 206 Partial Content
    Cache-Control: public, max-age=17280000
    Content-Type: application/octet-stream
    Accept-Ranges: bytes
    Server: Microsoft-IIS/10.0
    X-AspNetMvc-Version: 5.3
    MS-CorrelationId: 6f60f8cc-e39b-44d3-b4d4-339059ed8366
    MS-RequestId: c8e2eff3-3eeb-4f9c-9dc9-9aaf7fc8a933
    MS-CV: y9dBBsu9vkmE74iU.0
    X-AspNet-Version: 4.0.30319
    X-Powered-By: ASP.NET
    X-Powered-By: ARR/3.0
    X-Powered-By: ASP.NET
    Last-Modified: Thu, 30 Jan 2025 22:24:43 GMT
    ETag: "Zn30nCFs7P9yX7o9FILxqytRM2k="
    Date: Wed, 12 Feb 2025 02:18:04 GMT
    Content-Range: bytes 11974568-12455567/177180216
    Content-Length: 481000
    Connection: keep-alive
    X-CID: 2
    X-CCC: GB
  • flag-gb
    GET
    http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d
    Remote address:
    2.20.12.95:80
    Request
    GET /filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    Accept-Encoding: identity
    If-Unmodified-Since: Thu, 30 Jan 2025 22:24:43 GMT
    Range: bytes=12455568-13415699
    User-Agent: Microsoft BITS/7.8
    X-Old-UID: {67315C04-7D4F-4C34-A5ED-280FF30C343F}; age=-1; cnt=2
    X-Last-HR: 0x80070422
    X-Last-HTTP-Status-Code: 500
    X-Retry-Count: 0
    X-HTTP-Attempts: 2
    Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
    Response
    HTTP/1.1 206 Partial Content
    Cache-Control: public, max-age=17280000
    Content-Type: application/octet-stream
    Accept-Ranges: bytes
    Server: Microsoft-IIS/10.0
    X-AspNetMvc-Version: 5.3
    MS-CorrelationId: 6f60f8cc-e39b-44d3-b4d4-339059ed8366
    MS-RequestId: c8e2eff3-3eeb-4f9c-9dc9-9aaf7fc8a933
    MS-CV: y9dBBsu9vkmE74iU.0
    X-AspNet-Version: 4.0.30319
    X-Powered-By: ASP.NET
    X-Powered-By: ARR/3.0
    X-Powered-By: ASP.NET
    Last-Modified: Thu, 30 Jan 2025 22:24:43 GMT
    ETag: "Zn30nCFs7P9yX7o9FILxqytRM2k="
    Date: Wed, 12 Feb 2025 02:18:05 GMT
    Content-Range: bytes 12455568-13415699/177180216
    Content-Length: 960132
    Connection: keep-alive
    X-CID: 2
    X-CCC: GB
  • flag-gb
    GET
    http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d
    Remote address:
    2.20.12.95:80
    Request
    GET /filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    Accept-Encoding: identity
    If-Unmodified-Since: Thu, 30 Jan 2025 22:24:43 GMT
    Range: bytes=13415700-14117393
    User-Agent: Microsoft BITS/7.8
    X-Old-UID: {67315C04-7D4F-4C34-A5ED-280FF30C343F}; age=-1; cnt=2
    X-Last-HR: 0x80070422
    X-Last-HTTP-Status-Code: 500
    X-Retry-Count: 0
    X-HTTP-Attempts: 2
    Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
    Response
    HTTP/1.1 206 Partial Content
    Cache-Control: public, max-age=17280000
    Content-Type: application/octet-stream
    Accept-Ranges: bytes
    Server: Microsoft-IIS/10.0
    X-AspNetMvc-Version: 5.3
    MS-CorrelationId: 6f60f8cc-e39b-44d3-b4d4-339059ed8366
    MS-RequestId: c8e2eff3-3eeb-4f9c-9dc9-9aaf7fc8a933
    MS-CV: y9dBBsu9vkmE74iU.0
    X-AspNet-Version: 4.0.30319
    X-Powered-By: ASP.NET
    X-Powered-By: ARR/3.0
    X-Powered-By: ASP.NET
    Last-Modified: Thu, 30 Jan 2025 22:24:43 GMT
    ETag: "Zn30nCFs7P9yX7o9FILxqytRM2k="
    Date: Wed, 12 Feb 2025 02:18:09 GMT
    Content-Range: bytes 13415700-14117393/177180216
    Content-Length: 701694
    Connection: keep-alive
    X-CID: 2
    X-CCC: GB
  • flag-gb
    GET
    http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d
    Remote address:
    2.20.12.95:80
    Request
    GET /filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    Accept-Encoding: identity
    If-Unmodified-Since: Thu, 30 Jan 2025 22:24:43 GMT
    Range: bytes=14117394-14866498
    User-Agent: Microsoft BITS/7.8
    X-Old-UID: {67315C04-7D4F-4C34-A5ED-280FF30C343F}; age=-1; cnt=2
    X-Last-HR: 0x80070422
    X-Last-HTTP-Status-Code: 500
    X-Retry-Count: 0
    X-HTTP-Attempts: 2
    Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
    Response
    HTTP/1.1 206 Partial Content
    Cache-Control: public, max-age=17280000
    Content-Type: application/octet-stream
    Accept-Ranges: bytes
    Server: Microsoft-IIS/10.0
    X-AspNetMvc-Version: 5.3
    MS-CorrelationId: 6f60f8cc-e39b-44d3-b4d4-339059ed8366
    MS-RequestId: c8e2eff3-3eeb-4f9c-9dc9-9aaf7fc8a933
    MS-CV: y9dBBsu9vkmE74iU.0
    X-AspNet-Version: 4.0.30319
    X-Powered-By: ASP.NET
    X-Powered-By: ARR/3.0
    X-Powered-By: ASP.NET
    Last-Modified: Thu, 30 Jan 2025 22:24:43 GMT
    ETag: "Zn30nCFs7P9yX7o9FILxqytRM2k="
    Date: Wed, 12 Feb 2025 02:18:10 GMT
    Content-Range: bytes 14117394-14866498/177180216
    Content-Length: 749105
    Connection: keep-alive
    X-CID: 2
    X-CCC: GB
  • flag-gb
    GET
    http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d
    Remote address:
    2.20.12.95:80
    Request
    GET /filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    Accept-Encoding: identity
    If-Unmodified-Since: Thu, 30 Jan 2025 22:24:43 GMT
    Range: bytes=14866499-15603444
    User-Agent: Microsoft BITS/7.8
    X-Old-UID: {67315C04-7D4F-4C34-A5ED-280FF30C343F}; age=-1; cnt=2
    X-Last-HR: 0x80070422
    X-Last-HTTP-Status-Code: 500
    X-Retry-Count: 0
    X-HTTP-Attempts: 2
    Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
    Response
    HTTP/1.1 206 Partial Content
    Cache-Control: public, max-age=17280000
    Content-Type: application/octet-stream
    Accept-Ranges: bytes
    Server: Microsoft-IIS/10.0
    X-AspNetMvc-Version: 5.3
    MS-CorrelationId: 6f60f8cc-e39b-44d3-b4d4-339059ed8366
    MS-RequestId: c8e2eff3-3eeb-4f9c-9dc9-9aaf7fc8a933
    MS-CV: y9dBBsu9vkmE74iU.0
    X-AspNet-Version: 4.0.30319
    X-Powered-By: ASP.NET
    X-Powered-By: ARR/3.0
    X-Powered-By: ASP.NET
    Last-Modified: Thu, 30 Jan 2025 22:24:43 GMT
    ETag: "Zn30nCFs7P9yX7o9FILxqytRM2k="
    Date: Wed, 12 Feb 2025 02:18:12 GMT
    Content-Range: bytes 14866499-15603444/177180216
    Content-Length: 736946
    Connection: keep-alive
    X-CID: 2
    X-CCC: GB
  • flag-gb
    GET
    http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d
    Remote address:
    2.20.12.95:80
    Request
    GET /filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    Accept-Encoding: identity
    If-Unmodified-Since: Thu, 30 Jan 2025 22:24:43 GMT
    Range: bytes=15603445-16306047
    User-Agent: Microsoft BITS/7.8
    X-Old-UID: {67315C04-7D4F-4C34-A5ED-280FF30C343F}; age=-1; cnt=2
    X-Last-HR: 0x80070422
    X-Last-HTTP-Status-Code: 500
    X-Retry-Count: 0
    X-HTTP-Attempts: 2
    Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
    Response
    HTTP/1.1 206 Partial Content
    Cache-Control: public, max-age=17280000
    Content-Type: application/octet-stream
    Accept-Ranges: bytes
    Server: Microsoft-IIS/10.0
    X-AspNetMvc-Version: 5.3
    MS-CorrelationId: 6f60f8cc-e39b-44d3-b4d4-339059ed8366
    MS-RequestId: c8e2eff3-3eeb-4f9c-9dc9-9aaf7fc8a933
    MS-CV: y9dBBsu9vkmE74iU.0
    X-AspNet-Version: 4.0.30319
    X-Powered-By: ASP.NET
    X-Powered-By: ARR/3.0
    X-Powered-By: ASP.NET
    Last-Modified: Thu, 30 Jan 2025 22:24:43 GMT
    ETag: "Zn30nCFs7P9yX7o9FILxqytRM2k="
    Date: Wed, 12 Feb 2025 02:18:13 GMT
    Content-Range: bytes 15603445-16306047/177180216
    Content-Length: 702603
    Connection: keep-alive
    X-CID: 2
    X-CCC: GB
  • flag-gb
    GET
    http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d
    Remote address:
    2.20.12.95:80
    Request
    GET /filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    Accept-Encoding: identity
    If-Unmodified-Since: Thu, 30 Jan 2025 22:24:43 GMT
    Range: bytes=16306048-16992726
    User-Agent: Microsoft BITS/7.8
    X-Old-UID: {67315C04-7D4F-4C34-A5ED-280FF30C343F}; age=-1; cnt=2
    X-Last-HR: 0x80070422
    X-Last-HTTP-Status-Code: 500
    X-Retry-Count: 0
    X-HTTP-Attempts: 2
    Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
    Response
    HTTP/1.1 206 Partial Content
    Cache-Control: public, max-age=17280000
    Content-Type: application/octet-stream
    Accept-Ranges: bytes
    Server: Microsoft-IIS/10.0
    X-AspNetMvc-Version: 5.3
    MS-CorrelationId: 6f60f8cc-e39b-44d3-b4d4-339059ed8366
    MS-RequestId: c8e2eff3-3eeb-4f9c-9dc9-9aaf7fc8a933
    MS-CV: y9dBBsu9vkmE74iU.0
    X-AspNet-Version: 4.0.30319
    X-Powered-By: ASP.NET
    X-Powered-By: ARR/3.0
    X-Powered-By: ASP.NET
    Last-Modified: Thu, 30 Jan 2025 22:24:43 GMT
    ETag: "Zn30nCFs7P9yX7o9FILxqytRM2k="
    Date: Wed, 12 Feb 2025 02:18:14 GMT
    Content-Range: bytes 16306048-16992726/177180216
    Content-Length: 686679
    Connection: keep-alive
    X-CID: 2
    X-CCC: GB
  • flag-gb
    GET
    http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d
    Remote address:
    2.20.12.95:80
    Request
    GET /filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    Accept-Encoding: identity
    If-Unmodified-Since: Thu, 30 Jan 2025 22:24:43 GMT
    Range: bytes=16992727-18597242
    User-Agent: Microsoft BITS/7.8
    X-Old-UID: {67315C04-7D4F-4C34-A5ED-280FF30C343F}; age=-1; cnt=2
    X-Last-HR: 0x80070422
    X-Last-HTTP-Status-Code: 500
    X-Retry-Count: 0
    X-HTTP-Attempts: 2
    Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
    Response
    HTTP/1.1 206 Partial Content
    Cache-Control: public, max-age=17280000
    Content-Type: application/octet-stream
    Accept-Ranges: bytes
    Server: Microsoft-IIS/10.0
    X-AspNetMvc-Version: 5.3
    MS-CorrelationId: 6f60f8cc-e39b-44d3-b4d4-339059ed8366
    MS-RequestId: c8e2eff3-3eeb-4f9c-9dc9-9aaf7fc8a933
    MS-CV: y9dBBsu9vkmE74iU.0
    X-AspNet-Version: 4.0.30319
    X-Powered-By: ASP.NET
    X-Powered-By: ARR/3.0
    X-Powered-By: ASP.NET
    Last-Modified: Thu, 30 Jan 2025 22:24:43 GMT
    ETag: "Zn30nCFs7P9yX7o9FILxqytRM2k="
    Date: Wed, 12 Feb 2025 02:18:15 GMT
    Content-Range: bytes 16992727-18597242/177180216
    Content-Length: 1604516
    Connection: keep-alive
    X-CID: 2
    X-CCC: GB
  • flag-gb
    GET
    http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d
    Remote address:
    2.20.12.95:80
    Request
    GET /filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    Accept-Encoding: identity
    If-Unmodified-Since: Thu, 30 Jan 2025 22:24:43 GMT
    Range: bytes=18597243-19977077
    User-Agent: Microsoft BITS/7.8
    X-Old-UID: {67315C04-7D4F-4C34-A5ED-280FF30C343F}; age=-1; cnt=2
    X-Last-HR: 0x80070422
    X-Last-HTTP-Status-Code: 500
    X-Retry-Count: 0
    X-HTTP-Attempts: 2
    Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
    Response
    HTTP/1.1 206 Partial Content
    Cache-Control: public, max-age=17280000
    Content-Type: application/octet-stream
    Accept-Ranges: bytes
    Server: Microsoft-IIS/10.0
    X-AspNetMvc-Version: 5.3
    MS-CorrelationId: 6f60f8cc-e39b-44d3-b4d4-339059ed8366
    MS-RequestId: c8e2eff3-3eeb-4f9c-9dc9-9aaf7fc8a933
    MS-CV: y9dBBsu9vkmE74iU.0
    X-AspNet-Version: 4.0.30319
    X-Powered-By: ASP.NET
    X-Powered-By: ARR/3.0
    X-Powered-By: ASP.NET
    Last-Modified: Thu, 30 Jan 2025 22:24:43 GMT
    ETag: "Zn30nCFs7P9yX7o9FILxqytRM2k="
    Date: Wed, 12 Feb 2025 02:18:16 GMT
    Content-Range: bytes 18597243-19977077/177180216
    Content-Length: 1379835
    Connection: keep-alive
    X-CID: 2
    X-CCC: GB
  • flag-gb
    GET
    http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d
    Remote address:
    2.20.12.95:80
    Request
    GET /filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    Accept-Encoding: identity
    If-Unmodified-Since: Thu, 30 Jan 2025 22:24:43 GMT
    Range: bytes=19977078-22802121
    User-Agent: Microsoft BITS/7.8
    X-Old-UID: {67315C04-7D4F-4C34-A5ED-280FF30C343F}; age=-1; cnt=2
    X-Last-HR: 0x80070422
    X-Last-HTTP-Status-Code: 500
    X-Retry-Count: 0
    X-HTTP-Attempts: 2
    Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
    Response
    HTTP/1.1 206 Partial Content
    Cache-Control: public, max-age=17280000
    Content-Type: application/octet-stream
    Accept-Ranges: bytes
    Server: Microsoft-IIS/10.0
    X-AspNetMvc-Version: 5.3
    MS-CorrelationId: 6f60f8cc-e39b-44d3-b4d4-339059ed8366
    MS-RequestId: c8e2eff3-3eeb-4f9c-9dc9-9aaf7fc8a933
    MS-CV: y9dBBsu9vkmE74iU.0
    X-AspNet-Version: 4.0.30319
    X-Powered-By: ASP.NET
    X-Powered-By: ARR/3.0
    X-Powered-By: ASP.NET
    Last-Modified: Thu, 30 Jan 2025 22:24:43 GMT
    ETag: "Zn30nCFs7P9yX7o9FILxqytRM2k="
    Date: Wed, 12 Feb 2025 02:18:17 GMT
    Content-Range: bytes 19977078-22802121/177180216
    Content-Length: 2825044
    Connection: keep-alive
    X-CID: 2
    X-CCC: GB
  • flag-gb
    GET
    http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d
    Remote address:
    2.20.12.95:80
    Request
    GET /filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    Accept-Encoding: identity
    If-Unmodified-Since: Thu, 30 Jan 2025 22:24:43 GMT
    Range: bytes=22802122-26106554
    User-Agent: Microsoft BITS/7.8
    X-Old-UID: {67315C04-7D4F-4C34-A5ED-280FF30C343F}; age=-1; cnt=2
    X-Last-HR: 0x80070422
    X-Last-HTTP-Status-Code: 500
    X-Retry-Count: 0
    X-HTTP-Attempts: 2
    Host: msedge.b.tlu.dl.delivery.mp.microsoft.com
    Response
    HTTP/1.1 206 Partial Content
    Cache-Control: public, max-age=17280000
    Content-Type: application/octet-stream
    Accept-Ranges: bytes
    Server: Microsoft-IIS/10.0
    X-AspNetMvc-Version: 5.3
    MS-CorrelationId: 6f60f8cc-e39b-44d3-b4d4-339059ed8366
    MS-RequestId: c8e2eff3-3eeb-4f9c-9dc9-9aaf7fc8a933
    MS-CV: y9dBBsu9vkmE74iU.0
    X-AspNet-Version: 4.0.30319
    X-Powered-By: ASP.NET
    X-Powered-By: ARR/3.0
    X-Powered-By: ASP.NET
    Last-Modified: Thu, 30 Jan 2025 22:24:43 GMT
    ETag: "Zn30nCFs7P9yX7o9FILxqytRM2k="
    Date: Wed, 12 Feb 2025 02:18:18 GMT
    Content-Range: bytes 22802122-26106554/177180216
    Content-Length: 3304433
    Connection: keep-alive
    X-CID: 2
    X-CCC: GB
  • flag-us
    DNS
    msedge.b.tlu.dl.delivery.mp.microsoft.com
    Remote address:
    8.8.8.8:53
    Request
    msedge.b.tlu.dl.delivery.mp.microsoft.com
    IN A
    Response
    msedge.b.tlu.dl.delivery.mp.microsoft.com
    IN CNAME
    star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com
    star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com
    IN CNAME
    cdp-f-tlu-net.trafficmanager.net
    cdp-f-tlu-net.trafficmanager.net
    IN CNAME
    edge.ds-c7114-microsoft.global.dns.qwilted-cds.cqloud.com
    edge.ds-c7114-microsoft.global.dns.qwilted-cds.cqloud.com
    IN A
    91.80.49.20
    edge.ds-c7114-microsoft.global.dns.qwilted-cds.cqloud.com
    IN A
    91.80.49.85
    edge.ds-c7114-microsoft.global.dns.qwilted-cds.cqloud.com
    IN A
    91.81.130.133
    edge.ds-c7114-microsoft.global.dns.qwilted-cds.cqloud.com
    IN A
    91.80.49.22
    edge.ds-c7114-microsoft.global.dns.qwilted-cds.cqloud.com
    IN A
    91.80.49.21
  • flag-us
    DNS
    msedge.b.tlu.dl.delivery.mp.microsoft.com
    Remote address:
    8.8.8.8:53
    Request
    msedge.b.tlu.dl.delivery.mp.microsoft.com
    IN A
  • flag-us
    DNS
    c.pki.goog
    12022025_0209_2435433.exe
    Remote address:
    8.8.8.8:53
    Request
    c.pki.goog
    IN A
    Response
    c.pki.goog
    IN CNAME
    pki-goog.l.google.com
    pki-goog.l.google.com
    IN A
    172.217.169.3
  • flag-gb
    GET
    http://c.pki.goog/r/r1.crl
    12022025_0209_2435433.exe
    Remote address:
    172.217.169.3:80
    Request
    GET /r/r1.crl HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/10.0
    Host: c.pki.goog
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
    Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
    Content-Length: 854
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Wed, 12 Feb 2025 01:41:42 GMT
    Expires: Wed, 12 Feb 2025 02:31:42 GMT
    Cache-Control: public, max-age=3000
    Age: 2105
    Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT
    Content-Type: application/pkix-crl
    Vary: Accept-Encoding
  • flag-us
    DNS
    o.pki.goog
    12022025_0209_2435433.exe
    Remote address:
    8.8.8.8:53
    Request
    o.pki.goog
    IN A
    Response
    o.pki.goog
    IN CNAME
    pki-goog.l.google.com
    pki-goog.l.google.com
    IN A
    172.217.169.3
  • flag-gb
    GET
    http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEENj6GAUNBVpEvo20UE38mc%3D
    12022025_0209_2435433.exe
    Remote address:
    172.217.169.3:80
    Request
    GET /wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEENj6GAUNBVpEvo20UE38mc%3D HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/10.0
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 471
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Wed, 12 Feb 2025 01:33:21 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 2606
  • flag-gb
    GET
    http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACECMZhqL6oO7XCZBnn%2Fi9HYU%3D
    12022025_0209_2435433.exe
    Remote address:
    172.217.169.3:80
    Request
    GET /wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACECMZhqL6oO7XCZBnn%2Fi9HYU%3D HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/10.0
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 471
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Wed, 12 Feb 2025 01:26:02 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 3047
  • flag-gb
    GET
    https://drive.google.com/uc?export=download&id=1OAIT_Vz3I0gYI-L_tMDlfQx_PQWQD5uN
    12022025_0209_2435433.exe
    Remote address:
    142.250.187.206:443
    Request
    GET /uc?export=download&id=1OAIT_Vz3I0gYI-L_tMDlfQx_PQWQD5uN HTTP/1.1
    User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
    Host: drive.google.com
    Cache-Control: no-cache
    Response
    HTTP/1.1 303 See Other
    Content-Type: application/binary
    Cache-Control: no-cache, no-store, max-age=0, must-revalidate
    Pragma: no-cache
    Expires: Mon, 01 Jan 1990 00:00:00 GMT
    Date: Wed, 12 Feb 2025 02:16:48 GMT
    Location: https://drive.usercontent.google.com/download?id=1OAIT_Vz3I0gYI-L_tMDlfQx_PQWQD5uN&export=download
    Strict-Transport-Security: max-age=31536000
    Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport
    Content-Security-Policy: script-src 'nonce-kyjzdkEwcZii11KMECfEtw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'
    Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/DriveUntrustedContentHttp/cspreport/allowlist
    Permissions-Policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
    Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
    Cross-Origin-Opener-Policy: same-origin
    Server: ESF
    Content-Length: 0
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    X-Content-Type-Options: nosniff
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-us
    DNS
    drive.usercontent.google.com
    12022025_0209_2435433.exe
    Remote address:
    8.8.8.8:53
    Request
    drive.usercontent.google.com
    IN A
    Response
    drive.usercontent.google.com
    IN A
    216.58.212.225
  • flag-us
    DNS
    drive.usercontent.google.com
    12022025_0209_2435433.exe
    Remote address:
    8.8.8.8:53
    Request
    drive.usercontent.google.com
    IN A
  • flag-gb
    GET
    https://drive.usercontent.google.com/download?id=1OAIT_Vz3I0gYI-L_tMDlfQx_PQWQD5uN&export=download
    12022025_0209_2435433.exe
    Remote address:
    216.58.212.225:443
    Request
    GET /download?id=1OAIT_Vz3I0gYI-L_tMDlfQx_PQWQD5uN&export=download HTTP/1.1
    User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
    Cache-Control: no-cache
    Host: drive.usercontent.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    X-GUploader-UploadID: AHMx-iEGXThLkyuyh-rVUT0J0uFHhyi271LymD1E219UqtKwiSnnB98tRwbk24AIfWG9dL5xldjKyl4
    Content-Type: application/octet-stream
    Content-Security-Policy: sandbox
    Content-Security-Policy: default-src 'none'
    Content-Security-Policy: frame-ancestors 'none'
    X-Content-Security-Policy: sandbox
    Cross-Origin-Opener-Policy: same-origin
    Cross-Origin-Embedder-Policy: require-corp
    Cross-Origin-Resource-Policy: same-site
    X-Content-Type-Options: nosniff
    Content-Disposition: attachment; filename="DaJgiY73.bin"
    Access-Control-Allow-Origin: *
    Access-Control-Allow-Credentials: false
    Access-Control-Allow-Headers: Accept, Accept-Language, Authorization, Cache-Control, Content-Disposition, Content-Encoding, Content-Language, Content-Length, Content-MD5, Content-Range, Content-Type, Date, developer-token, financial-institution-id, X-Goog-Sn-Metadata, X-Goog-Sn-PatientId, GData-Version, google-cloud-resource-prefix, linked-customer-id, login-customer-id, x-goog-request-params, Host, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, Origin, OriginToken, Pragma, Range, request-id, Slug, Transfer-Encoding, hotrod-board-name, hotrod-chrome-cpu-model, hotrod-chrome-processors, Want-Digest, X-Ad-Manager-Impersonation, x-chrome-connected, X-ClientDetails, X-Client-Pctx, X-Client-Version, x-debug-settings-metadata, X-Firebase-Locale, X-Goog-Firebase-Installations-Auth, X-Firebase-Client, X-Firebase-Client-Log-Type, X-Firebase-GMPID, X-Firebase-Auth-Token, X-Firebase-AppCheck, X-Firebase-Token, X-Goog-Drive-Client-Version, X-Goog-Drive-Resource-Keys, X-GData-Client, X-GData-Key, X-GoogApps-Allowed-Domains, X-Goog-AdX-Buyer-Impersonation, X-Goog-Api-Client, X-Goog-Visibilities, X-Goog-AuthUser, X-Google-EOM, x-goog-ext-124712974-jspb, x-goog-ext-467253834-jspb, x-goog-ext-353267353-bin, x-goog-ext-353267353-jspb, x-goog-ext-251363160-jspb, x-goog-ext-259736195-jspb, x-goog-ext-477772811-jspb, x-goog-ext-359275022-bin, x-goog-ext-328800237-jspb, x-goog-ext-202735639-bin, x-goog-ext-223435598-bin, X-Goog-PageId, X-Goog-Encode-Response-If-Executable, X-Goog-Correlation-Id, X-Goog-Request-Info, X-Goog-Request-Reason, X-Goog-Request-Time, X-Goog-Experiments, x-goog-iam-authority-selector, x-goog-iam-authorization-token, X-Goog-Spatula, X-Goog-Travel-Bgr, X-Goog-Travel-Settings, X-Goog-Upload-Command, X-Goog-Upload-Content-Disposition, X-Goog-Upload-Content-Length, X-Goog-Upload-Content-Type, X-Goog-Upload-File-Name, X-Goog-Upload-Header-Content-Encoding, X-Goog-Upload-Header-Content-Length, X-Goog-Upload-Header-Content-Type, X-Goog-Upload-Header-Transfer-Encoding, X-Goog-Upload-Offset, X-Goog-Upload-Protocol, x-goog-user-project, X-Goog-Visitor-Id, X-Goog-FieldMask, X-Google-Project-Override, x-goog-maps-api-salt, x-goog-maps-api-signature, x-goog-maps-client-id, X-Goog-Api-Key, x-goog-spanner-database-role, X-HTTP-Method-Override, X-JavaScript-User-Agent, X-Pan-Versionid, X-Proxied-User-IP, X-Origin, X-Referer, X-Requested-With, X-Stadia-Client-Context, X-Upload-Content-Length, X-Upload-Content-Type, X-Use-Alt-Service, X-Use-HTTP-Status-Code-Override, X-Ios-Bundle-Identifier, X-Places-Ios-Sdk, X-Android-Package, X-Android-Cert, X-Places-Android-Sdk, X-Goog-Maps-Ios-Uuid, X-Goog-Maps-Android-Uuid, X-Ariane-Xsrf-Token, X-YouTube-Bootstrap-Logged-In, X-Youtube-Client-Version, X-Youtube-Lava-Device-Context, X-YouTube-VVT, X-YouTube-Page-CL, X-YouTube-Page-Label, X-YouTube-Page-Timestamp, X-Compass-Routing-Destination, x-framework-xsrf-token, X-Goog-Meeting-ABR, X-Goog-Meeting-Botguardid, X-Goog-Meeting-Bot-Info, X-Goog-Meeting-ClientInfo, X-Goog-Meeting-ClientVersion, X-Goog-Meeting-Debugid, X-Goog-Meeting-Identifier, X-Goog-Meeting-Interop-Cohorts, X-Goog-Meeting-Interop-Type, X-Goog-Meeting-OidcIdToken, X-Goog-Meeting-RtcClient, X-Goog-Meeting-StartSource, X-Goog-Meeting-Token, X-Goog-Meeting-Viewer-Token, X-Client-Data, x-sdm-id-token, X-Sfdc-Authorization, MIME-Version, Content-Transfer-Encoding, X-Earth-Engine-App-ID-Token, X-Earth-Engine-Computation-Profile, X-Earth-Engine-Computation-Profiling, X-Play-Console-Experiments-Override, X-Play-Console-Session-Id, x-alkali-account-key, x-alkali-application-key, x-alkali-auth-apps-namespace, x-alkali-auth-entities-namespace, x-alkali-auth-entity, x-alkali-client-locale, EES-S7E-MODE, cast-device-capabilities, X-Server-Timeout, x-foyer-client-environment, x-goog-greenenergyuserappservice-metadata, x-goog-sherlog-context, X-Server-Token, x-rfui-request-context, x-goog-nest-jwt, X-Cloud-Trace-Context, traceparent, x-goog-chat-space-id, x-goog-pan-request-context, X-AppInt-Credentials
    Access-Control-Allow-Methods: GET,HEAD,OPTIONS
    Accept-Ranges: bytes
    Content-Length: 288320
    Last-Modified: Tue, 11 Feb 2025 08:36:42 GMT
    Date: Wed, 12 Feb 2025 02:16:52 GMT
    Expires: Wed, 12 Feb 2025 02:16:52 GMT
    Cache-Control: private, max-age=0
    X-Goog-Hash: crc32c=33wjJA==
    Server: UploadServer
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • 150.171.28.10:443
    https://g.bing.com/neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=c6c481e1f5e14c87a00e68fcadab916e&localId=w:41DB1DC1-977A-8BD5-2560-B615C7BC3215&deviceId=6966574999063966&anid=
    tls, http2
    2.1kB
     9.6kB
     23
    20

    HTTP Request

    GET https://g.bing.com/neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=c6c481e1f5e14c87a00e68fcadab916e&localId=w:41DB1DC1-977A-8BD5-2560-B615C7BC3215&deviceId=6966574999063966&anid=

    HTTP Response

    204

    HTTP Request

    GET https://g.bing.com/neg/0?action=emptycreative&adUnitId=11730597&publisherId=251978541&rid=c6c481e1f5e14c87a00e68fcadab916e&localId=w:41DB1DC1-977A-8BD5-2560-B615C7BC3215&deviceId=6966574999063966&anid=

    HTTP Response

    204

    HTTP Request

    GET https://g.bing.com/neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=c6c481e1f5e14c87a00e68fcadab916e&localId=w:41DB1DC1-977A-8BD5-2560-B615C7BC3215&deviceId=6966574999063966&anid=

    HTTP Response

    204
  • 4.151.228.221:443
    https://msedge.api.cdp.microsoft.com/api/v1.1/internal/contents/Browser/namespaces/Default/names/msedge-stable-win-x64/versions/132.0.2957.140/files?action=GenerateDownloadInfo&foregroundPriority=false
    tls, http2
    6.5kB
     12.6kB
     32
    27

    HTTP Request

    POST https://msedge.api.cdp.microsoft.com/api/v2/contents/Browser/namespaces/Default/names?action=batchupdates

    HTTP Response

    200

    HTTP Request

    POST https://msedge.api.cdp.microsoft.com/api/v1.1/internal/contents/Browser/namespaces/Default/names/msedge-stable-win-x64/versions/132.0.2957.140/files?action=GenerateDownloadInfo&foregroundPriority=false

    HTTP Response

    200
  • 142.250.187.206:443
    drive.google.com
    tls
    12022025_0209_2435433.exe
    1.3kB
     8.4kB
     15
    12
  • 2.20.12.95:80
    http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d
    http
    1.2MB
     25.5MB
     17273
    18995

    HTTP Request

    HEAD http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d

    HTTP Response

    200

    HTTP Request

    GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d

    HTTP Response

    206

    HTTP Request

    GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d

    HTTP Response

    206

    HTTP Request

    GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d

    HTTP Response

    206

    HTTP Request

    GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d

    HTTP Response

    206

    HTTP Request

    GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d

    HTTP Response

    206

    HTTP Request

    GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d

    HTTP Response

    206

    HTTP Request

    GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d

    HTTP Response

    206

    HTTP Request

    GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d

    HTTP Response

    206

    HTTP Request

    GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d

    HTTP Response

    206

    HTTP Request

    GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d

    HTTP Response

    206

    HTTP Request

    GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d

    HTTP Response

    206

    HTTP Request

    GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d

    HTTP Response

    206

    HTTP Request

    GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d

    HTTP Response

    206

    HTTP Request

    GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d

    HTTP Response

    206

    HTTP Request

    GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d

    HTTP Response

    206

    HTTP Request

    GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d

    HTTP Response

    206

    HTTP Request

    GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d

    HTTP Response

    206

    HTTP Request

    GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d

    HTTP Response

    206

    HTTP Request

    GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d

    HTTP Response

    206

    HTTP Request

    GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d

    HTTP Response

    206

    HTTP Request

    GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d

    HTTP Response

    206

    HTTP Request

    GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d

    HTTP Response

    206

    HTTP Request

    GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d

    HTTP Response

    206

    HTTP Request

    GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d

    HTTP Response

    206

    HTTP Request

    GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d

    HTTP Response

    206

    HTTP Request

    GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d

    HTTP Response

    206

    HTTP Request

    GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d

    HTTP Response

    206

    HTTP Request

    GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d

    HTTP Response

    206

    HTTP Request

    GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d

    HTTP Response

    206

    HTTP Request

    GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d

    HTTP Response

    206

    HTTP Request

    GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d

    HTTP Response

    206

    HTTP Request

    GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/0740036a-4e18-456d-96fa-d1d9c4ca4676?P1=1739931392&P2=404&P3=2&P4=J2NWKlKXu733BYMmfdJ%2bySM6NqpuFBYVlJVftlrdA1PsiH8TnkLSlxD1Z858Ctszn8ivgSk%2fZcaKNaI3UUgekw%3d%3d

    HTTP Response

    206
  • 172.217.169.3:80
    http://c.pki.goog/r/r1.crl
    http
    12022025_0209_2435433.exe
    719 B
     1.8kB
     8
    5

    HTTP Request

    GET http://c.pki.goog/r/r1.crl

    HTTP Response

    200
  • 172.217.169.3:80
    http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACECMZhqL6oO7XCZBnn%2Fi9HYU%3D
    http
    12022025_0209_2435433.exe
    840 B
     2.3kB
     8
    5

    HTTP Request

    GET http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEENj6GAUNBVpEvo20UE38mc%3D

    HTTP Response

    200

    HTTP Request

    GET http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACECMZhqL6oO7XCZBnn%2Fi9HYU%3D

    HTTP Response

    200
  • 142.250.187.206:443
    https://drive.google.com/uc?export=download&id=1OAIT_Vz3I0gYI-L_tMDlfQx_PQWQD5uN
    tls, http
    12022025_0209_2435433.exe
    1.5kB
     10.0kB
     17
    12

    HTTP Request

    GET https://drive.google.com/uc?export=download&id=1OAIT_Vz3I0gYI-L_tMDlfQx_PQWQD5uN

    HTTP Response

    303
  • 216.58.212.225:443
    https://drive.usercontent.google.com/download?id=1OAIT_Vz3I0gYI-L_tMDlfQx_PQWQD5uN&export=download
    tls, http
    12022025_0209_2435433.exe
    11.3kB
     313.5kB
     233
    230

    HTTP Request

    GET https://drive.usercontent.google.com/download?id=1OAIT_Vz3I0gYI-L_tMDlfQx_PQWQD5uN&export=download

    HTTP Response

    200
  • 8.8.8.8:53
    g.bing.com
    dns
    168 B
     148 B
     3
    1

    DNS Request

    g.bing.com

    DNS Request

    g.bing.com

    DNS Request

    g.bing.com

    DNS Response

    150.171.28.10
    150.171.27.10

  • 8.8.8.8:53
    msedge.api.cdp.microsoft.com
    dns
    74 B
     158 B
     1
    1

    DNS Request

    msedge.api.cdp.microsoft.com

    DNS Response

    4.151.228.221

  • 8.8.8.8:53
    drive.google.com
    dns
    12022025_0209_2435433.exe
    186 B
     78 B
     3
    1

    DNS Request

    drive.google.com

    DNS Request

    drive.google.com

    DNS Request

    drive.google.com

    DNS Response

    142.250.187.206

  • 8.8.8.8:53
    msedge.b.tlu.dl.delivery.mp.microsoft.com
    dns
    261 B
     328 B
     3
    1

    DNS Request

    msedge.b.tlu.dl.delivery.mp.microsoft.com

    DNS Request

    msedge.b.tlu.dl.delivery.mp.microsoft.com

    DNS Request

    msedge.b.tlu.dl.delivery.mp.microsoft.com

    DNS Response

    2.20.12.95
    2.20.12.74

  • 8.8.8.8:53
    msedge.b.tlu.dl.delivery.mp.microsoft.com
    dns
    174 B
     344 B
     2
    1

    DNS Request

    msedge.b.tlu.dl.delivery.mp.microsoft.com

    DNS Request

    msedge.b.tlu.dl.delivery.mp.microsoft.com

    DNS Response

    91.80.49.20
    91.80.49.85
    91.81.130.133
    91.80.49.22
    91.80.49.21

  • 8.8.8.8:53
    c.pki.goog
    dns
    12022025_0209_2435433.exe
    56 B
     107 B
     1
    1

    DNS Request

    c.pki.goog

    DNS Response

    172.217.169.3

  • 8.8.8.8:53
    o.pki.goog
    dns
    12022025_0209_2435433.exe
    56 B
     107 B
     1
    1

    DNS Request

    o.pki.goog

    DNS Response

    172.217.169.3

  • 8.8.8.8:53
    drive.usercontent.google.com
    dns
    12022025_0209_2435433.exe
    148 B
     90 B
     2
    1

    DNS Request

    drive.usercontent.google.com

    DNS Request

    drive.usercontent.google.com

    DNS Response

    216.58.212.225

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\ProgramData\Microsoft\EdgeUpdate\Log\MicrosoftEdgeUpdate.log
    Filesize

    360KB

    MD5

    6dbb17758874ceb4f82417686e3dcd38

    SHA1

    0444058afd32ab03845065ffbc82cf44a21ea22a

    SHA256

    764084a3d21bbcdb426c458e0be98bf07484f4b4ecc46230746d5c24903f4e46

    SHA512

    3b3d3eb7237a141d0ada70bf7c3021a2451830393ef2d5ed22f3ef81e94540ddb8511f6ff532aed7c05e3091aa6502f6bcb9540810a62806848cd0700c560dea

    Download Submit

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\furriery.ini
    Filesize

    38B

    MD5

    b1ef763e50c5aabcdf24507256cdecb5

    SHA1

    544323e0812a2d71bc5e156e42bbe25f6082afab

    SHA256

    65724906ac58f577bd6b805237a1d03107bd94276121ef81e1fbfd368672abb4

    SHA512

    71c29b23cc8d2f16bb9f4667d25a7d01cf593134425359fc735c6056d154addb113dce0a9899f90d0dac4b3e46a3849fdee9190f3bf067fdba3b89f5b1170c67

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsc4A15.tmp\LangDLL.dll
    Filesize

    5KB

    MD5

    b21a3377e66b941df6d5b7cf8ba7a43a

    SHA1

    e7ed27fce2db9cdc11ca3c640806731dcef3864a

    SHA256

    ba46a03088f690ce966043f49761ff3a3a0dca236160794de841dfecc3588d1e

    SHA512

    f011a824c0ff7f87c6da112898f4afc87e12c5b39fb40ffcc0955012e79a4302597d892224b3b47e8143480605c73275d3799d6d2000cdf179c2912241f86916

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsc4A15.tmp\System.dll
    Filesize

    12KB

    MD5

    792b6f86e296d3904285b2bf67ccd7e0

    SHA1

    966b16f84697552747e0ddd19a4ba8ab5083af31

    SHA256

    c7a20bcaa0197aedddc8e4797bbb33fdf70d980f5e83c203d148121c2106d917

    SHA512

    97edc3410b88ca31abc0af0324258d2b59127047810947d0fb5e7e12957db34d206ffd70a0456add3a26b0546643ff0234124b08423c2c9ffe9bdec6eb210f2c

    Download Submit

  • memory/4732-69-0x0000000000400000-0x0000000001654000-memory.dmp

    Filesize

    18.3MB

    Download

  • memory/4732-50-0x0000000001660000-0x0000000005BD7000-memory.dmp

    Filesize

    69.5MB

    Download

  • memory/4732-51-0x0000000000400000-0x0000000001654000-memory.dmp

    Filesize

    18.3MB

    Download

  • memory/4732-54-0x0000000000400000-0x0000000001654000-memory.dmp

    Filesize

    18.3MB

    Download

  • memory/4732-70-0x0000000001660000-0x0000000005BD7000-memory.dmp

    Filesize

    69.5MB

    Download

  • memory/4732-71-0x0000000000400000-0x0000000001654000-memory.dmp

    Filesize

    18.3MB

    Download

  • memory/4732-72-0x0000000000400000-0x0000000001654000-memory.dmp

    Filesize

    18.3MB

    Download

  • memory/4732-75-0x0000000000400000-0x0000000001654000-memory.dmp

    Filesize

    18.3MB

    Download

  • memory/4824-49-0x0000000073CB5000-0x0000000073CB6000-memory.dmp

    Filesize

    4KB

    Download

  • memory/4824-48-0x0000000077591000-0x00000000776B1000-memory.dmp

    Filesize

    1.1MB

    Download

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.