hxxps://ability-nosoftware-3662[.]my[.]salesforce-sites[.]com/cj

Resubmissions

26/03/2025, 04:29 UTC

250326-e4hwqs1kv7 10

26/03/2025, 04:25 UTC

250326-e17qpaxvfz 10

Analysis

max time kernel
144s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20250314-en
resource tags

arch:x64arch:x86image:win10v2004-20250314-enlocale:en-usos:windows10-2004-x64system
submitted
26/03/2025, 04:29 UTC

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://ability-nosoftware-3662.my.salesforce-sites.com/cj

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Program Files directory 16 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping212_1842752532\LICENSE	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping212_1842752532\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping212_1842752532\sets.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping212_1842752532\_metadata\verified_contents.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping212_1638526460\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping212_1638526460\manifest.fingerprint	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping212_356790259\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping212_356790259\manifest.fingerprint	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping212_1842752532\manifest.fingerprint	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping212_98811293\keys.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping212_98811293\LICENSE	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping212_1638526460\data.txt	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping212_98811293\manifest.fingerprint	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping212_356790259\typosquatting_list.pb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping212_98811293\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping212_98811293\_metadata\verified_contents.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133874369872685103"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1062200478-553497403-3857448183-1000\{B171C3D9-20D5-4304-A126-C0110AD56D3D}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5180	msedge.exe
5180	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe
212	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 212 wrote to memory of 4536	212	msedge.exe	85
PID 212 wrote to memory of 4536	212	msedge.exe	85
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 4204	212	msedge.exe	87
PID 212 wrote to memory of 4204	212	msedge.exe	87
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 1892	212	msedge.exe	86
PID 212 wrote to memory of 2944	212	msedge.exe	88
PID 212 wrote to memory of 2944	212	msedge.exe	88
PID 212 wrote to memory of 2944	212	msedge.exe	88
PID 212 wrote to memory of 2944	212	msedge.exe	88
PID 212 wrote to memory of 2944	212	msedge.exe	88
PID 212 wrote to memory of 2944	212	msedge.exe	88
PID 212 wrote to memory of 2944	212	msedge.exe	88
PID 212 wrote to memory of 2944	212	msedge.exe	88
PID 212 wrote to memory of 2944	212	msedge.exe	88

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument https://ability-nosoftware-3662.my.salesforce-sites.com/cj
1⤵
- Drops file in Program Files directory
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=133.0.6943.99 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=133.0.3065.69 --initial-client-data=0x23c,0x240,0x244,0x238,0x264,0x7ff9b0b3f208,0x7ff9b0b3f214,0x7ff9b0b3f220
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --string-annotations --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=2236,i,14778791524058584350,4149062995020199878,262144 --variations-seed-version --mojo-platform-channel-handle=2264 /prefetch:2
  2⤵
  PID:1892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --always-read-main-dll --field-trial-handle=1928,i,14778791524058584350,4149062995020199878,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:3
  2⤵
  PID:4204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --always-read-main-dll --field-trial-handle=2460,i,14778791524058584350,4149062995020199878,262144 --variations-seed-version --mojo-platform-channel-handle=2856 /prefetch:8
  2⤵
  PID:2944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --field-trial-handle=3428,i,14778791524058584350,4149062995020199878,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:2032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --field-trial-handle=3488,i,14778791524058584350,4149062995020199878,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:1776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --field-trial-handle=4780,i,14778791524058584350,4149062995020199878,262144 --variations-seed-version --mojo-platform-channel-handle=4956 /prefetch:1
  2⤵
  PID:1980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4252,i,14778791524058584350,4149062995020199878,262144 --variations-seed-version --mojo-platform-channel-handle=5008 /prefetch:8
  2⤵
  PID:2192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=3752,i,14778791524058584350,4149062995020199878,262144 --variations-seed-version --mojo-platform-channel-handle=3588 /prefetch:8
  2⤵
  PID:3052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5576,i,14778791524058584350,4149062995020199878,262144 --variations-seed-version --mojo-platform-channel-handle=5584 /prefetch:8
  2⤵
  PID:2136
- C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5620,i,14778791524058584350,4149062995020199878,262144 --variations-seed-version --mojo-platform-channel-handle=5720 /prefetch:8
  2⤵
  PID:4980
- C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5620,i,14778791524058584350,4149062995020199878,262144 --variations-seed-version --mojo-platform-channel-handle=5720 /prefetch:8
  2⤵
  PID:4128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=564,i,14778791524058584350,4149062995020199878,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5724,i,14778791524058584350,4149062995020199878,262144 --variations-seed-version --mojo-platform-channel-handle=5644 /prefetch:8
  2⤵
  PID:6104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5892,i,14778791524058584350,4149062995020199878,262144 --variations-seed-version --mojo-platform-channel-handle=5684 /prefetch:8
  2⤵
  PID:5756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5280,i,14778791524058584350,4149062995020199878,262144 --variations-seed-version --mojo-platform-channel-handle=5264 /prefetch:8
  2⤵
  PID:752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5572,i,14778791524058584350,4149062995020199878,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:8
  2⤵
  PID:5812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5136,i,14778791524058584350,4149062995020199878,262144 --variations-seed-version --mojo-platform-channel-handle=5316 /prefetch:8
  2⤵
  PID:4284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5672,i,14778791524058584350,4149062995020199878,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:5308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=6128,i,14778791524058584350,4149062995020199878,262144 --variations-seed-version --mojo-platform-channel-handle=5324 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5360,i,14778791524058584350,4149062995020199878,262144 --variations-seed-version --mojo-platform-channel-handle=3396 /prefetch:8
  2⤵
  PID:4624

C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\elevation_service.exe"
1⤵
PID:440

Network

DNS

edge.microsoft.com

msedge.exe

Remote address:

8.8.8.8:53

Request

edge.microsoft.com

IN A

Response

edge.microsoft.com

IN CNAME

edge-domain.trafficmanager.net

edge-domain.trafficmanager.net

IN CNAME

edge-microsoft-com.ax-0002.ax-msedge.net

edge-microsoft-com.ax-0002.ax-msedge.net

IN CNAME

ax-0002.ax-msedge.net

ax-0002.ax-msedge.net

IN A

150.171.27.11

ax-0002.ax-msedge.net

IN A

150.171.28.11
DNS

edge.microsoft.com

msedge.exe

Remote address:

8.8.8.8:53

Request

edge.microsoft.com

IN Unknown

Response

edge.microsoft.com

IN CNAME

edge-domain.trafficmanager.net

edge-domain.trafficmanager.net

IN CNAME

edge-microsoft-com.ax-0002.ax-msedge.net
DNS

ability-nosoftware-3662.my.salesforce-sites.com

msedge.exe

Remote address:

8.8.8.8:53

Request

ability-nosoftware-3662.my.salesforce-sites.com

IN A

Response

ability-nosoftware-3662.my.salesforce-sites.com

IN CNAME

h.edge2.salesforce.com

h.edge2.salesforce.com

IN CNAME

st1.edge.sfdc-5pakla.edge2.salesforce.com

st1.edge.sfdc-5pakla.edge2.salesforce.com

IN A

35.176.92.20

st1.edge.sfdc-5pakla.edge2.salesforce.com

IN A

35.176.92.19

st1.edge.sfdc-5pakla.edge2.salesforce.com

IN A

35.176.92.21
DNS

ability-nosoftware-3662.my.salesforce-sites.com

msedge.exe

Remote address:

8.8.8.8:53

Request

ability-nosoftware-3662.my.salesforce-sites.com

IN Unknown

Response

ability-nosoftware-3662.my.salesforce-sites.com

IN CNAME

h.edge2.salesforce.com

h.edge2.salesforce.com

IN CNAME

st1.edge.sfdc-5pakla.edge2.salesforce.com
DNS

edge.microsoft.com

msedge.exe

Remote address:

8.8.8.8:53

Request

edge.microsoft.com

IN A

Response

edge.microsoft.com

IN CNAME

edge-domain.trafficmanager.net

edge-domain.trafficmanager.net

IN CNAME

edge-microsoft-com.dual-a-0036.a-msedge.net

edge-microsoft-com.dual-a-0036.a-msedge.net

IN CNAME

dual-a-0036.a-msedge.net

dual-a-0036.a-msedge.net

IN A

204.79.197.239

dual-a-0036.a-msedge.net

IN A

13.107.21.239
DNS

edge.microsoft.com

msedge.exe

Remote address:

8.8.8.8:53

Request

edge.microsoft.com

IN Unknown

Response

edge.microsoft.com

IN CNAME

edge-domain.trafficmanager.net

edge-domain.trafficmanager.net

IN CNAME

edge-microsoft-com.ax-0002.ax-msedge.net
GET

http://edge.microsoft.com/browsernetworktime/time/1/current?cup2key=2:aXHxHRHrsLEjGqZWpQLt_odpAWB3zeg1Giqd8XQWT_0&cup2hreq=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

msedge.exe

Remote address:

150.171.27.11:80

Request

GET /browsernetworktime/time/1/current?cup2key=2:aXHxHRHrsLEjGqZWpQLt_odpAWB3zeg1Giqd8XQWT_0&cup2hreq=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP/1.1
Host: edge.microsoft.com
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
Sec-Mesh-Client-Edge-Version: 133.0.3065.69
Sec-Mesh-Client-Edge-Channel: stable
Sec-Mesh-Client-OS: Windows
Sec-Mesh-Client-OS-Version: 10.0.19041
Sec-Mesh-Client-Arch: x86_64
Sec-Mesh-Client-WebView: 0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK

Cache-Control: no-store, must-revalidate, no-cache, max-age=0
Pragma: no-cache
Content-Length: 98
Content-Type: application/json
Content-Encoding: gzip
Expires: Mon, 01 Jan 1990 00:00:00 GMT
X-Frame-Options: sameorigin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
x-cup-server-proof: 30440220592285D93F40D0CC533830CC3A7B37278CCADFDB5A8C15F598C0C25E24B0597A02204B4FD8F2D98D47A34FFE504D04C50372C6C871839DA140997A426D384CD6B60A:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Content-Disposition: attachment; filename='json.txt'
X-Cache: CONFIG_NOCACHE
X-MSEdge-Ref: Ref A: D25B9062D466432A8BE938D66318360A Ref B: LON04EDGE1120 Ref C: 2025-03-26T04:29:42Z
Date: Wed, 26 Mar 2025 04:29:42 GMT
GET

https://ability-nosoftware-3662.my.salesforce-sites.com/cj

msedge.exe

Remote address:

35.176.92.20:443

Request

GET /cj HTTP/2.0
host: ability-nosoftware-3662.my.salesforce-sites.com
sec-ch-ua: "Not(A:Brand";v="99", "Microsoft Edge";v="133", "Chromium";v="133"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
dnt: 1
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
sec-fetch-site: none
sec-fetch-mode: navigate
sec-fetch-user: ?1
sec-fetch-dest: document
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=0, i

Response

HTTP/2.0 200

date: Wed, 26 Mar 2025 04:29:42 GMT
content-type: text/html;charset=UTF-8
x-frame-options: SAMEORIGIN
vary: Accept-Encoding
content-security-policy: upgrade-insecure-requests
content-security-policy: frame-ancestors 'self'
set-cookie: CookieConsentPolicy=0:1; path=/; expires=Thu, 26-Mar-2026 04:29:42 GMT; Max-Age=31536000; secure; SameSite=None
set-cookie: LSKey-c$CookieConsentPolicy=0:1; path=/; expires=Thu, 26-Mar-2026 04:29:42 GMT; Max-Age=31536000; secure; SameSite=None
set-cookie: BrowserId=8ENGnQn6EfCf_KEMbiaIlg; path=/; expires=Thu, 26-Mar-2026 04:29:42 GMT; Max-Age=31536000; secure; SameSite=None
expires: Wed, 26 Mar 2025 04:39:42 GMT
x-content-type-options: nosniff
p3p: CP="CUR OTR STA"
strict-transport-security: max-age=63072000; includeSubDomains
content-encoding: gzip
referrer-policy: origin-when-cross-origin
last-modified: Wed, 26 Mar 2025 04:29:42 GMT
origin-trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
cache-control: public,max-age=600
server: sfdcedge
x-sfdc-request-id: f02dc76bddd06777502818c33ce66c2f
x-request-id: f02dc76bddd06777502818c33ce66c2f
x-sfdc-edge-cache: EXPIRED
DNS

api.edgeoffer.microsoft.com

msedge.exe

Remote address:

8.8.8.8:53

Request

api.edgeoffer.microsoft.com

IN A

Response

api.edgeoffer.microsoft.com

IN CNAME

bingadsedgeextension-prod.trafficmanager.net

bingadsedgeextension-prod.trafficmanager.net

IN CNAME

bingadsedgeextension-prod-europe.azurewebsites.net

bingadsedgeextension-prod-europe.azurewebsites.net

IN CNAME

ssl.bingadsedgeextension-prod-europe.azurewebsites.net

ssl.bingadsedgeextension-prod-europe.azurewebsites.net

IN A

94.245.104.56
DNS

api.edgeoffer.microsoft.com

msedge.exe

Remote address:

8.8.8.8:53

Request

api.edgeoffer.microsoft.com

IN Unknown

Response

api.edgeoffer.microsoft.com

IN CNAME

bingadsedgeextension-prod.trafficmanager.net

bingadsedgeextension-prod.trafficmanager.net

IN CNAME

bingadsedgeextension-prod-europe.azurewebsites.net

bingadsedgeextension-prod-europe.azurewebsites.net

IN CNAME

ssl.bingadsedgeextension-prod-europe.azurewebsites.net
DNS

copilot.microsoft.com

msedge.exe

Remote address:

8.8.8.8:53

Request

copilot.microsoft.com

IN A

Response

copilot.microsoft.com

IN CNAME

copilot-copilot-msft-com.trafficmanager.net

copilot-copilot-msft-com.trafficmanager.net

IN CNAME

copilot.microsoft.com.edgekey.net

copilot.microsoft.com.edgekey.net

IN CNAME

e107108.dscx.akamaiedge.net

e107108.dscx.akamaiedge.net

IN A

95.100.153.183

e107108.dscx.akamaiedge.net

IN A

95.100.153.132
DNS

copilot.microsoft.com

msedge.exe

Remote address:

8.8.8.8:53

Request

copilot.microsoft.com

IN Unknown

Response

copilot.microsoft.com

IN CNAME

copilot-copilot-msft-com.trafficmanager.net

copilot-copilot-msft-com.trafficmanager.net

IN CNAME

copilot.microsoft.com.edgekey.net

copilot.microsoft.com.edgekey.net

IN CNAME

e107108.dscx.akamaiedge.net
GET

https://edge.microsoft.com/serviceexperimentation/v3/?osname=win&channel=stable&osver=10.0.19041&devicefamily=desktop&installdate=1741933560&clientversion=133.0.3065.69&experimentationmode=2&scpguard=0&scpfull=0&scpver=0

msedge.exe

Remote address:

204.79.197.239:443

Request

GET /serviceexperimentation/v3/?osname=win&channel=stable&osver=10.0.19041&devicefamily=desktop&installdate=1741933560&clientversion=133.0.3065.69&experimentationmode=2&scpguard=0&scpfull=0&scpver=0 HTTP/2.0
host: edge.microsoft.com
pragma: no-cache
cache-control: no-cache
sec-mesh-client-edge-version: 133.0.3065.69
sec-mesh-client-edge-channel: stable
sec-mesh-client-os: Windows
sec-mesh-client-os-version: 10.0.19041
sec-mesh-client-arch: x86_64
sec-mesh-client-webview: 0
x-client-data: eyIxIjoiMCIsIjIiOiIwIiwiMyI6IjAiLCI0IjoiNTcwMTIzMTMyMDY5Njk0MzA3NCIsIjYiOiJzdGFibGUiLCI5IjoiZGVza3RvcCJ9
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=4, i

Response

HTTP/2.0 200

cache-control: max-age=0, no-cache, no-store, must-revalidate
content-length: 1272
content-type: application/json; charset=utf-8
content-security-policy: base-uri 'self';block-all-mixed-content;default-src 'self';img-src 'self';object-src 'none';script-src 'none';style-src 'self';upgrade-insecure-requests;
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: BC6D0634309D4D95ADA9C3576729A862 Ref B: LON04EDGE0820 Ref C: 2025-03-26T04:29:42Z
date: Wed, 26 Mar 2025 04:29:41 GMT
GET

https://copilot.microsoft.com/c/api/user/eligibility

msedge.exe

Remote address:

95.100.153.183:443

Request

GET /c/api/user/eligibility HTTP/2.0
host: copilot.microsoft.com
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
sec-fetch-storage-access: active
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=4, i

Response

HTTP/2.0 200

x-ceto-ref: 67e382b6419a41aa9d6111e68f1834a4|AFD:67e382b6419a41aa9d6111e68f1834a4|2025-03-26T04:29:42.596Z
content-length: 0
date: Wed, 26 Mar 2025 04:29:42 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.b798645f.1742963382.1b6a80da
GET

https://api.edgeoffer.microsoft.com/edgeoffer/pb/experiments?appId=edge-extensions&country=US

msedge.exe

Remote address:

94.245.104.56:443

Request

GET /edgeoffer/pb/experiments?appId=edge-extensions&country=US HTTP/1.1
Host: api.edgeoffer.microsoft.com
Connection: keep-alive
Sec-Fetch-Site: none
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: empty
Sec-Fetch-Storage-Access: active
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 200 OK

Content-Length: 0
Content-Type: application/x-protobuf; charset=utf-8
Date: Wed, 26 Mar 2025 04:29:42 GMT
Server: Microsoft-IIS/10.0
Set-Cookie: ARRAffinity=a42f45623c970528b8181f7c9703b33ceddfb6bc954f36256b96edca01c69f46;Path=/;HttpOnly;Secure;Domain=api.edgeoffer.microsoft.com
Set-Cookie: ARRAffinitySameSite=a42f45623c970528b8181f7c9703b33ceddfb6bc954f36256b96edca01c69f46;Path=/;HttpOnly;SameSite=None;Secure;Domain=api.edgeoffer.microsoft.com
Request-Context: appId=cid-v1:48af8e22-9427-456d-9a55-67a1e42a1bd9
X-Powered-By: ASP.NET
GET

https://ability-nosoftware-3662.my.salesforce-sites.com/cj/sCSS/63.0/sprites/946684800000/Theme3/default/base/common.css

msedge.exe

Remote address:

35.176.92.20:443

Request

GET /cj/sCSS/63.0/sprites/946684800000/Theme3/default/base/common.css HTTP/2.0
host: ability-nosoftware-3662.my.salesforce-sites.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0
sec-ch-ua: "Not(A:Brand";v="99", "Microsoft Edge";v="133", "Chromium";v="133"
dnt: 1
sec-ch-ua-mobile: ?0
accept: text/css,*/*;q=0.1
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://ability-nosoftware-3662.my.salesforce-sites.com/cj
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
cookie: CookieConsentPolicy=0:1
cookie: LSKey-c$CookieConsentPolicy=0:1
cookie: BrowserId=8ENGnQn6EfCf_KEMbiaIlg
priority: u=0

Response

HTTP/2.0 200

date: Wed, 26 Mar 2025 04:29:42 GMT
content-type: text/css
content-length: 6021
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains
last-modified: Sat, 1 Jan 2000 00:00:00 GMT
cache-control: private,max-age=3888000
vary: Accept-Encoding
p3p: CP="CUR OTR STA"
referrer-policy: origin-when-cross-origin
origin-trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
content-encoding: gzip
expires: Sat, 10 May 2025 04:29:42 GMT
server: sfdcedge
x-sfdc-request-id: 087b2f3b39e45861393aba23f48692b3
x-request-id: 087b2f3b39e45861393aba23f48692b3
x-sfdc-edge-cache: MISS
GET

https://ability-nosoftware-3662.my.salesforce-sites.com/cj/sCSS/63.0/sprites/946684800000/Theme3/default/base/setup.css

msedge.exe

Remote address:

35.176.92.20:443

Request

GET /cj/sCSS/63.0/sprites/946684800000/Theme3/default/base/setup.css HTTP/2.0
host: ability-nosoftware-3662.my.salesforce-sites.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0
sec-ch-ua: "Not(A:Brand";v="99", "Microsoft Edge";v="133", "Chromium";v="133"
dnt: 1
sec-ch-ua-mobile: ?0
accept: text/css,*/*;q=0.1
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://ability-nosoftware-3662.my.salesforce-sites.com/cj
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
cookie: CookieConsentPolicy=0:1
cookie: LSKey-c$CookieConsentPolicy=0:1
cookie: BrowserId=8ENGnQn6EfCf_KEMbiaIlg
priority: u=0

Response

HTTP/2.0 200

date: Wed, 26 Mar 2025 04:29:42 GMT
content-type: text/css
content-length: 8645
cache-control: private,max-age=3888000
p3p: CP="CUR OTR STA"
expires: Sat, 10 May 2025 04:29:42 GMT
content-encoding: gzip
origin-trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
x-content-type-options: nosniff
last-modified: Sat, 1 Jan 2000 00:00:00 GMT
referrer-policy: origin-when-cross-origin
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains
server: sfdcedge
x-sfdc-request-id: bcf3b923182f7125012472bfbae87d74
x-request-id: bcf3b923182f7125012472bfbae87d74
x-sfdc-edge-cache: MISS
GET

https://ability-nosoftware-3662.my.salesforce-sites.com/cj/sCSS/63.0/sprites/946684800000/Theme3/default/base/extended.css

msedge.exe

Remote address:

35.176.92.20:443

Request

GET /cj/sCSS/63.0/sprites/946684800000/Theme3/default/base/extended.css HTTP/2.0
host: ability-nosoftware-3662.my.salesforce-sites.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0
sec-ch-ua: "Not(A:Brand";v="99", "Microsoft Edge";v="133", "Chromium";v="133"
dnt: 1
sec-ch-ua-mobile: ?0
accept: text/css,*/*;q=0.1
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://ability-nosoftware-3662.my.salesforce-sites.com/cj
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
cookie: CookieConsentPolicy=0:1
cookie: LSKey-c$CookieConsentPolicy=0:1
cookie: BrowserId=8ENGnQn6EfCf_KEMbiaIlg
priority: u=0

Response

HTTP/2.0 200

date: Wed, 26 Mar 2025 04:29:42 GMT
content-type: application/x-javascript
strict-transport-security: max-age=63072000; includeSubDomains
cache-control: public,max-age=10368000
content-encoding: gzip
last-modified: Sat, 01 Jan 2000 00:00:00 GMT
vary: Accept-Encoding
expires: Thu, 24 Jul 2025 04:29:42 GMT
referrer-policy: origin-when-cross-origin
origin-trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
x-content-type-options: nosniff
server: sfdcedge
x-sfdc-request-id: c8d02ae8e7860a0a4cee0cdabe072c06
x-request-id: c8d02ae8e7860a0a4cee0cdabe072c06
x-sfdc-edge-cache: MISS
GET

https://ability-nosoftware-3662.my.salesforce-sites.com/cj/sCSS/63.0/sprites/946684800000/Theme3/default/base/elements.css

msedge.exe

Remote address:

35.176.92.20:443

Request

GET /cj/sCSS/63.0/sprites/946684800000/Theme3/default/base/elements.css HTTP/2.0
host: ability-nosoftware-3662.my.salesforce-sites.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0
sec-ch-ua: "Not(A:Brand";v="99", "Microsoft Edge";v="133", "Chromium";v="133"
dnt: 1
sec-ch-ua-mobile: ?0
accept: text/css,*/*;q=0.1
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://ability-nosoftware-3662.my.salesforce-sites.com/cj
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
cookie: CookieConsentPolicy=0:1
cookie: LSKey-c$CookieConsentPolicy=0:1
cookie: BrowserId=8ENGnQn6EfCf_KEMbiaIlg
priority: u=0

Response

HTTP/2.0 200

date: Wed, 26 Mar 2025 04:29:43 GMT
content-type: application/x-javascript
x-content-type-options: nosniff
last-modified: Sat, 01 Jan 2000 00:00:00 GMT
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains
expires: Thu, 24 Jul 2025 04:29:42 GMT
referrer-policy: origin-when-cross-origin
vary: Accept-Encoding
origin-trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
accept-ranges: bytes
cache-control: no-cache,must-revalidate,max-age=0,no-store,private
server: sfdcedge
x-sfdc-request-id: 6874d4f9d4cfa08f38d6bd089d10e409
x-request-id: 6874d4f9d4cfa08f38d6bd089d10e409
x-sfdc-edge-cache: MISS
GET

https://ability-nosoftware-3662.my.salesforce-sites.com/cj/sCSS/63.0/sprites/946684800000/Theme3/default/base/zen-componentsCompatible.css

msedge.exe

Remote address:

35.176.92.20:443

Request

GET /cj/sCSS/63.0/sprites/946684800000/Theme3/default/base/zen-componentsCompatible.css HTTP/2.0
host: ability-nosoftware-3662.my.salesforce-sites.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0
sec-ch-ua: "Not(A:Brand";v="99", "Microsoft Edge";v="133", "Chromium";v="133"
dnt: 1
sec-ch-ua-mobile: ?0
accept: text/css,*/*;q=0.1
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://ability-nosoftware-3662.my.salesforce-sites.com/cj
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
cookie: CookieConsentPolicy=0:1
cookie: LSKey-c$CookieConsentPolicy=0:1
cookie: BrowserId=8ENGnQn6EfCf_KEMbiaIlg
priority: u=0

Response

HTTP/2.0 200

date: Wed, 26 Mar 2025 04:29:43 GMT
content-type: text/css
content-length: 17061
cache-control: private,max-age=3888000
content-encoding: gzip
p3p: CP="CUR OTR STA"
last-modified: Sat, 1 Jan 2000 00:00:00 GMT
referrer-policy: origin-when-cross-origin
x-content-type-options: nosniff
expires: Sat, 10 May 2025 04:29:42 GMT
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains
origin-trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
server: sfdcedge
x-sfdc-request-id: 5f76e96ba104837e878c3406371adfe5
x-request-id: 5f76e96ba104837e878c3406371adfe5
x-sfdc-edge-cache: MISS
GET

https://ability-nosoftware-3662.my.salesforce-sites.com/sCSS/63.0/sprites/946684800000/Theme3/base/dStandard.css

msedge.exe

Remote address:

35.176.92.20:443

Request

GET /sCSS/63.0/sprites/946684800000/Theme3/base/dStandard.css HTTP/2.0
host: ability-nosoftware-3662.my.salesforce-sites.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0
sec-ch-ua: "Not(A:Brand";v="99", "Microsoft Edge";v="133", "Chromium";v="133"
dnt: 1
sec-ch-ua-mobile: ?0
accept: text/css,*/*;q=0.1
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://ability-nosoftware-3662.my.salesforce-sites.com/cj
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
cookie: CookieConsentPolicy=0:1
cookie: LSKey-c$CookieConsentPolicy=0:1
cookie: BrowserId=8ENGnQn6EfCf_KEMbiaIlg
priority: u=0

Response

HTTP/2.0 200

date: Wed, 26 Mar 2025 04:29:43 GMT
content-type: text/css
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains
expires: Sat, 10 May 2025 04:29:42 GMT
last-modified: Sat, 1 Jan 2000 00:00:00 GMT
cache-control: private,max-age=3888000
vary: Accept-Encoding
p3p: CP="CUR OTR STA"
referrer-policy: origin-when-cross-origin
origin-trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
content-encoding: gzip
server: sfdcedge
x-sfdc-request-id: 651ccefcf5f7207c255f94fcaca6b9fb
x-request-id: 651ccefcf5f7207c255f94fcaca6b9fb
x-sfdc-edge-cache: MISS
GET

https://ability-nosoftware-3662.my.salesforce-sites.com/cj/static/111213/js/perf/stub.js

msedge.exe

Remote address:

35.176.92.20:443

Request

GET /cj/static/111213/js/perf/stub.js HTTP/2.0
host: ability-nosoftware-3662.my.salesforce-sites.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0
sec-ch-ua: "Not(A:Brand";v="99", "Microsoft Edge";v="133", "Chromium";v="133"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://ability-nosoftware-3662.my.salesforce-sites.com/cj
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
cookie: CookieConsentPolicy=0:1
cookie: LSKey-c$CookieConsentPolicy=0:1
cookie: BrowserId=8ENGnQn6EfCf_KEMbiaIlg
priority: u=1

Response

HTTP/2.0 200

date: Wed, 26 Mar 2025 04:29:43 GMT
content-type: text/css
strict-transport-security: max-age=63072000; includeSubDomains
cache-control: private,max-age=3888000
last-modified: Sat, 1 Jan 2000 00:00:00 GMT
p3p: CP="CUR OTR STA"
vary: Accept-Encoding
content-encoding: gzip
expires: Sat, 10 May 2025 04:29:42 GMT
origin-trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
server: sfdcedge
x-sfdc-request-id: 4b192ab8a44d1e1960c2e821d1741872
x-request-id: 4b192ab8a44d1e1960c2e821d1741872
x-sfdc-edge-cache: MISS
GET

https://ability-nosoftware-3662.my.salesforce-sites.com/cj/jslibrary/946684800254/sfdc/main.js

msedge.exe

Remote address:

35.176.92.20:443

Request

GET /cj/jslibrary/946684800254/sfdc/main.js HTTP/2.0
host: ability-nosoftware-3662.my.salesforce-sites.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0
sec-ch-ua: "Not(A:Brand";v="99", "Microsoft Edge";v="133", "Chromium";v="133"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://ability-nosoftware-3662.my.salesforce-sites.com/cj
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
cookie: CookieConsentPolicy=0:1
cookie: LSKey-c$CookieConsentPolicy=0:1
cookie: BrowserId=8ENGnQn6EfCf_KEMbiaIlg
priority: u=1

Response

HTTP/2.0 200

date: Wed, 26 Mar 2025 04:29:43 GMT
content-type: application/x-javascript
content-encoding: gzip
vary: Accept-Encoding
cache-control: no-cache,must-revalidate,max-age=0,no-store,private
accept-ranges: bytes
origin-trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
expires: Thu, 24 Jul 2025 04:29:43 GMT
last-modified: Sat, 01 Jan 2000 00:00:00 GMT
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=63072000; includeSubDomains
x-content-type-options: nosniff
server: sfdcedge
x-sfdc-request-id: 11e715001ceccf0a7671aac9a9643c53
x-request-id: 11e715001ceccf0a7671aac9a9643c53
x-sfdc-edge-cache: MISS
GET

https://ability-nosoftware-3662.my.salesforce-sites.com/cj/jslibrary/jslabels/946684800000/en_US.js

msedge.exe

Remote address:

35.176.92.20:443

Request

GET /cj/jslibrary/jslabels/946684800000/en_US.js HTTP/2.0
host: ability-nosoftware-3662.my.salesforce-sites.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0
sec-ch-ua: "Not(A:Brand";v="99", "Microsoft Edge";v="133", "Chromium";v="133"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://ability-nosoftware-3662.my.salesforce-sites.com/cj
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
cookie: CookieConsentPolicy=0:1
cookie: LSKey-c$CookieConsentPolicy=0:1
cookie: BrowserId=8ENGnQn6EfCf_KEMbiaIlg
priority: u=1

Response

HTTP/2.0 200

date: Wed, 26 Mar 2025 04:29:43 GMT
content-type: text/css
content-length: 6402
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains
last-modified: Sat, 1 Jan 2000 00:00:00 GMT
cache-control: private,max-age=3888000
vary: Accept-Encoding
p3p: CP="CUR OTR STA"
referrer-policy: origin-when-cross-origin
origin-trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
content-encoding: gzip
expires: Sat, 10 May 2025 04:29:43 GMT
server: sfdcedge
x-sfdc-request-id: a7cbc4ca1b1845063afd302cd78ae85e
x-request-id: a7cbc4ca1b1845063afd302cd78ae85e
x-sfdc-edge-cache: MISS
GET

https://ability-nosoftware-3662.my.salesforce-sites.com/cj/jslibrary/946684800254/sfdc/NetworkTracking.js

msedge.exe

Remote address:

35.176.92.20:443

Request

GET /cj/jslibrary/946684800254/sfdc/NetworkTracking.js HTTP/2.0
host: ability-nosoftware-3662.my.salesforce-sites.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0
sec-ch-ua: "Not(A:Brand";v="99", "Microsoft Edge";v="133", "Chromium";v="133"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://ability-nosoftware-3662.my.salesforce-sites.com/cj
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
cookie: CookieConsentPolicy=0:1
cookie: LSKey-c$CookieConsentPolicy=0:1
cookie: BrowserId=8ENGnQn6EfCf_KEMbiaIlg
priority: u=1

Response

HTTP/2.0 200

date: Wed, 26 Mar 2025 04:29:43 GMT
content-type: text/javascript;charset=UTF-8
cache-control: public,max-age=3888000
content-encoding: gzip
p3p: CP="CUR OTR STA"
last-modified: Sat, 1 Jan 2000 00:00:00 GMT
referrer-policy: origin-when-cross-origin
x-content-type-options: nosniff
expires: Sat, 10 May 2025 04:29:43 GMT
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains
origin-trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
server: sfdcedge
x-sfdc-request-id: a62df7fe70a929e52c9584b82c3b598a
x-request-id: a62df7fe70a929e52c9584b82c3b598a
x-sfdc-edge-cache: MISS
DNS

g.bing.com

Remote address:

8.8.8.8:53

Request

g.bing.com

IN A

Response

g.bing.com

IN CNAME

g-bing-com.ax-0001.ax-msedge.net

g-bing-com.ax-0001.ax-msedge.net

IN CNAME

ax-0001.ax-msedge.net

ax-0001.ax-msedge.net

IN A

150.171.28.10

ax-0001.ax-msedge.net

IN A

150.171.27.10
GET

https://g.bing.com/neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=44016938df094cccb94fcd0005713cb2&localId=w:21C1CCEE-160B-F796-E0D9-10C0675E4A84&deviceId=6896216935942425&anid=

Remote address:

150.171.28.10:443

Request

GET /neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=44016938df094cccb94fcd0005713cb2&localId=w:21C1CCEE-160B-F796-E0D9-10C0675E4A84&deviceId=6896216935942425&anid= HTTP/2.0
host: g.bing.com
accept-encoding: gzip, deflate
user-agent: WindowsShellClient/9.0.40929.0 (Windows)

Response

HTTP/2.0 204

cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=023EC99EB06E6C2C0B11DC25B18E6D6B; domain=.bing.com; expires=Mon, 20-Apr-2026 04:29:43 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 7D6E10FE28A74FE7848CCE68C4B73C4B Ref B: LON04EDGE1010 Ref C: 2025-03-26T04:29:43Z
date: Wed, 26 Mar 2025 04:29:43 GMT
GET

https://g.bing.com/neg/0?action=emptycreative&adUnitId=11730597&publisherId=251978541&rid=44016938df094cccb94fcd0005713cb2&localId=w:21C1CCEE-160B-F796-E0D9-10C0675E4A84&deviceId=6896216935942425&anid=

Remote address:

150.171.28.10:443

Request

GET /neg/0?action=emptycreative&adUnitId=11730597&publisherId=251978541&rid=44016938df094cccb94fcd0005713cb2&localId=w:21C1CCEE-160B-F796-E0D9-10C0675E4A84&deviceId=6896216935942425&anid= HTTP/2.0
host: g.bing.com
accept-encoding: gzip, deflate
user-agent: WindowsShellClient/9.0.40929.0 (Windows)
cookie: MUID=023EC99EB06E6C2C0B11DC25B18E6D6B

Response

HTTP/2.0 204

cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MSPTC=Fr1u-yXOTIqBz0x43nzWFPZ1LZ6pcpxc8NPAqiGYz7U; domain=.bing.com; expires=Mon, 20-Apr-2026 04:29:43 GMT; path=/; Partitioned; secure; SameSite=None
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 767EEAB9C927444AA77D828163419AB9 Ref B: LON04EDGE1010 Ref C: 2025-03-26T04:29:43Z
date: Wed, 26 Mar 2025 04:29:43 GMT
GET

https://g.bing.com/neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=44016938df094cccb94fcd0005713cb2&localId=w:21C1CCEE-160B-F796-E0D9-10C0675E4A84&deviceId=6896216935942425&anid=

Remote address:

150.171.28.10:443

Request

GET /neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=44016938df094cccb94fcd0005713cb2&localId=w:21C1CCEE-160B-F796-E0D9-10C0675E4A84&deviceId=6896216935942425&anid= HTTP/2.0
host: g.bing.com
accept-encoding: gzip, deflate
user-agent: WindowsShellClient/9.0.40929.0 (Windows)
cookie: MUID=023EC99EB06E6C2C0B11DC25B18E6D6B; MSPTC=Fr1u-yXOTIqBz0x43nzWFPZ1LZ6pcpxc8NPAqiGYz7U

Response

HTTP/2.0 204

cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 9471A5E3691E4490B78E2193AF67B51B Ref B: LON04EDGE1010 Ref C: 2025-03-26T04:29:43Z
date: Wed, 26 Mar 2025 04:29:43 GMT
GET

https://ability-nosoftware-3662.my.salesforce-sites.com/favicon.ico

msedge.exe

Remote address:

35.176.92.20:443

Request

GET /favicon.ico HTTP/2.0
host: ability-nosoftware-3662.my.salesforce-sites.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0
sec-ch-ua: "Not(A:Brand";v="99", "Microsoft Edge";v="133", "Chromium";v="133"
dnt: 1
sec-ch-ua-mobile: ?0
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://ability-nosoftware-3662.my.salesforce-sites.com/cj
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
cookie: CookieConsentPolicy=0:1
cookie: LSKey-c$CookieConsentPolicy=0:1
cookie: BrowserId=8ENGnQn6EfCf_KEMbiaIlg
priority: u=1, i

Response

HTTP/2.0 200

date: Wed, 26 Mar 2025 04:29:44 GMT
content-type: image/x-icon
cache-control: public,max-age=3888000
expires: Sat, 10 May 2025 04:29:44 GMT
strict-transport-security: max-age=63072000; includeSubDomains
origin-trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
server: sfdcedge
x-sfdc-request-id: 755f94a428d6d46b0a754ebca645c4ed
x-request-id: 755f94a428d6d46b0a754ebca645c4ed
x-sfdc-edge-cache: MISS
DNS

accountsystem-businessmanager.com

msedge.exe

Remote address:

8.8.8.8:53

Request

accountsystem-businessmanager.com

IN A

Response

accountsystem-businessmanager.com

IN A

172.67.167.217

accountsystem-businessmanager.com

IN A

104.21.34.34
DNS

accountsystem-businessmanager.com

msedge.exe

Remote address:

8.8.8.8:53

Request

accountsystem-businessmanager.com

IN Unknown

Response

accountsystem-businessmanager.com

IN Unknown

h3h2h""�C��GE� Ao R�@Z�T��m�L%��"��z5�@,e�,cloudflare-ech.com &G00�C��&G04h""
GET

https://www.bing.com/api/shopping/v1/user/shoppingsettings?EnabledServiceFeaturesv2=edgeServerUX.shopping.aablockth,edgeServerUX.shopping.block99,edgeServerUX.shopping.disableCashbackOnCouponCopy,edgeServerUX.shopping.highttaablocksrth,edgeServerUX.shopping.highttaablockth,edgeServerUX.shopping.migrateClippingToOmnibox,edgeServerUX.shopping.msEdgeShoppingCashbackDismissTimeout2s,edgeServerUX.shopping.nrtLogging

msedge.exe

Remote address:

95.100.153.157:443

Request

GET /api/shopping/v1/user/shoppingsettings?EnabledServiceFeaturesv2=edgeServerUX.shopping.aablockth,edgeServerUX.shopping.block99,edgeServerUX.shopping.disableCashbackOnCouponCopy,edgeServerUX.shopping.highttaablocksrth,edgeServerUX.shopping.highttaablockth,edgeServerUX.shopping.migrateClippingToOmnibox,edgeServerUX.shopping.msEdgeShoppingCashbackDismissTimeout2s,edgeServerUX.shopping.nrtLogging HTTP/2.0
host: www.bing.com
cookie: ANON=
cookie: MUID=
cookie: _RwBf=
cookie:
x-client-data: eyIxIjoiMCIsIjIiOiIwIiwiMyI6IjAiLCI0IjoiNTcwMTIzMTMyMDY5Njk0MzA3NCIsIjYiOiJzdGFibGUiLCI5IjoiZGVza3RvcCJ9
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
sec-fetch-storage-access: active
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0
accept-encoding: gzip, deflate, br, zsdch, zstd
accept-language: en-US,en;q=0.9
priority: u=4, i

Response

HTTP/2.0 200

cache-control: max-age=0, no-cache, no-store, must-revalidate
content-type: application/json; charset=utf-8
content-encoding: br
vary: Accept-Encoding
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 1AE9C206FC514F128CE11A159FF17912 Ref B: LON04EDGE1008 Ref C: 2025-03-26T04:29:47Z
date: Wed, 26 Mar 2025 04:29:47 GMT
content-length: 425
set-cookie: _EDGE_S=F=1&SID=17C43C1956C56CB4005A29A257256D66; path=/; httponly; domain=bing.com
set-cookie: _EDGE_V=1; path=/; httponly; expires=Mon, 20-Apr-2026 04:29:47 GMT; domain=bing.com
set-cookie: MUID=23380588F8326E280BAB1033F9D26F3D; samesite=none; path=/; secure; expires=Mon, 20-Apr-2026 04:29:47 GMT; domain=bing.com
set-cookie: MUIDB=23380588F8326E280BAB1033F9D26F3D; path=/; httponly; expires=Mon, 20-Apr-2026 04:29:47 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.8f98645f.1742963387.2940f46c
GET

https://edge.microsoft.com/extensionwebstorebase/v1/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=edgecrx&prodchannel=&prodversion=133.0.3065.69&lang=en-US&acceptformat=crx3,puff&x=id%3Djmjflgjpcpepeafmmgdpfkogkghcpiha%26v%3D1.2.1%26installedby%3Dother%26uc%26ping%3Dr%253D12%2526e%253D1

msedge.exe

Remote address:

204.79.197.239:443

Request

GET /extensionwebstorebase/v1/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=edgecrx&prodchannel=&prodversion=133.0.3065.69&lang=en-US&acceptformat=crx3,puff&x=id%3Djmjflgjpcpepeafmmgdpfkogkghcpiha%26v%3D1.2.1%26installedby%3Dother%26uc%26ping%3Dr%253D12%2526e%253D1 HTTP/2.0
host: edge.microsoft.com
edgefeatureflags: {"ExtensionUseNewStoreKeys":true,"UseHttpsForDownload":true}
update-interactivity: bg
ms-cv: hTe1ViCZ93gXphsn0ANsFl
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=4, i

Response

HTTP/2.0 200

cache-control: max-age=0, no-cache, no-store, must-revalidate
content-length: 413
content-type: text/xml; charset=utf-8
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 1DCFEAA6C15B42AA9519701ABC47E8F8 Ref B: LON04EDGE0710 Ref C: 2025-03-26T04:29:47Z
date: Wed, 26 Mar 2025 04:29:46 GMT
GET

https://edge.microsoft.com/entityextractiontemplates/api/v1/assets/find-assets?name=arbitration_priority_list&version=24.*.*&channel=stable&key=d414dd4f9db345fa8003e32adc81b362

msedge.exe

Remote address:

204.79.197.239:443

Request

GET /entityextractiontemplates/api/v1/assets/find-assets?name=arbitration_priority_list&version=24.*.*&channel=stable&key=d414dd4f9db345fa8003e32adc81b362 HTTP/2.0
host: edge.microsoft.com
edge-asset-group: ArbitrationService
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=4, i

Response

HTTP/2.0 200

cache-control: public, max-age=3600
content-length: 271
content-type: application/json; charset=utf-8
x-cache: TCP_HIT
x-frame-options: sameorigin
x-msedge-ref: Ref A: F1B40B29AC4446CBB1B96971762C8A18 Ref B: LON04EDGE0710 Ref C: 2025-03-26T04:29:47Z
date: Wed, 26 Mar 2025 04:29:46 GMT
GET

https://edge.microsoft.com/entityextractiontemplates/api/v1/assets/find-assets?name=edge_hub_apps_manifest_gz&version=4.11.*&channel=stable&key=d414dd4f9db345fa8003e32adc81b362

msedge.exe

Remote address:

204.79.197.239:443

Request

GET /entityextractiontemplates/api/v1/assets/find-assets?name=edge_hub_apps_manifest_gz&version=4.11.*&channel=stable&key=d414dd4f9db345fa8003e32adc81b362 HTTP/2.0
host: edge.microsoft.com
edge-asset-group: Shoreline
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=4, i

Response

HTTP/2.0 200

cache-control: public, max-age=3600
content-length: 266
content-type: application/json; charset=utf-8
x-cache: TCP_HIT
x-frame-options: sameorigin
x-msedge-ref: Ref A: D19BCE527593466487F83DDABBD6D577 Ref B: LON04EDGE0710 Ref C: 2025-03-26T04:29:47Z
date: Wed, 26 Mar 2025 04:29:46 GMT
GET

https://edge.microsoft.com/entityextractiontemplates/api/v1/assets/find-assets?name=domains_config_gz&version=3.*.*&channel=stable&key=d414dd4f9db345fa8003e32adc81b362

msedge.exe

Remote address:

204.79.197.239:443

Request

GET /entityextractiontemplates/api/v1/assets/find-assets?name=domains_config_gz&version=3.*.*&channel=stable&key=d414dd4f9db345fa8003e32adc81b362 HTTP/2.0
host: edge.microsoft.com
edge-asset-group: EntityExtractionDomainsConfig
sec-mesh-client-edge-version: 133.0.3065.69
sec-mesh-client-edge-channel: stable
sec-mesh-client-os: Windows
sec-mesh-client-os-version: 10.0.19041
sec-mesh-client-arch: x86_64
sec-mesh-client-webview: 0
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=4, i

Response

HTTP/2.0 200

cache-control: public, max-age=3600
content-length: 265
content-type: application/json; charset=utf-8
x-cache: TCP_HIT
x-frame-options: sameorigin
x-msedge-ref: Ref A: 9FC532A6AFC44CBAB13BA13E3B66A1CD Ref B: LON04EDGE0710 Ref C: 2025-03-26T04:29:47Z
date: Wed, 26 Mar 2025 04:29:46 GMT
DNS

update.googleapis.com

msedge.exe

Remote address:

8.8.8.8:53

Request

update.googleapis.com

IN A

Response

update.googleapis.com

IN A

142.250.180.3
DNS

update.googleapis.com

msedge.exe

Remote address:

8.8.8.8:53

Request

update.googleapis.com

IN Unknown

Response
POST

https://update.googleapis.com/service/update2/json?cup2key=14:8qYGEddlUH4Cbm7KE4kYk-kagiYA_WmHh4IM79oyS-k&cup2hreq=d3c192cbf9cc7d50c84bebb5477526096b57b0be7ebc9825813a9a393c2dba4d

msedge.exe

Remote address:

142.250.180.3:443

Request

POST /service/update2/json?cup2key=14:8qYGEddlUH4Cbm7KE4kYk-kagiYA_WmHh4IM79oyS-k&cup2hreq=d3c192cbf9cc7d50c84bebb5477526096b57b0be7ebc9825813a9a393c2dba4d HTTP/2.0
host: update.googleapis.com
content-length: 931
x-goog-update-appid: ghbmnnjooekpmoecnnnilnnbdlolhkhi
x-goog-update-interactivity: bg
x-goog-update-updater: chromiumcrx-133.0.3065.69
content-type: application/json
sec-mesh-client-edge-version: 133.0.3065.69
sec-mesh-client-edge-channel: stable
sec-mesh-client-os: Windows
sec-mesh-client-os-version: 10.0.19041
sec-mesh-client-arch: x86_64
sec-mesh-client-webview: 0
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=4, i
DNS

edge.microsoft.com

msedge.exe

Remote address:

8.8.8.8:53

Request

edge.microsoft.com

IN A

Response

edge.microsoft.com

IN CNAME

edge-domain.trafficmanager.net

edge-domain.trafficmanager.net

IN CNAME

edge-microsoft-com.ax-0002.ax-msedge.net

edge-microsoft-com.ax-0002.ax-msedge.net

IN CNAME

ax-0002.ax-msedge.net

ax-0002.ax-msedge.net

IN A

150.171.27.11

ax-0002.ax-msedge.net

IN A

150.171.28.11
DNS

edge.microsoft.com

msedge.exe

Remote address:

8.8.8.8:53

Request

edge.microsoft.com

IN Unknown

Response

edge.microsoft.com

IN CNAME

edge-domain.trafficmanager.net

edge-domain.trafficmanager.net

IN CNAME

edge-microsoft-com.ax-0002.ax-msedge.net

edge-microsoft-com.ax-0002.ax-msedge.net

IN CNAME

ax-0002.ax-msedge.net
GET

https://edge.microsoft.com/abusiveadblocking/api/v1/blocklist

msedge.exe

Remote address:

150.171.27.11:443

Request

GET /abusiveadblocking/api/v1/blocklist HTTP/2.0
host: edge.microsoft.com
if-none-match: "5E25271B8190D943537AD3FDB50874FC133E8B4A00380E2A6A888D63386F728B"
sec-mesh-client-edge-version: 133.0.3065.69
sec-mesh-client-edge-channel: stable
sec-mesh-client-os: Windows
sec-mesh-client-os-version: 10.0.19041
sec-mesh-client-arch: x86_64
sec-mesh-client-webview: 0
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
sec-fetch-storage-access: active
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0
accept-encoding: gzip, deflate, br, zstd
priority: u=4, i

Response

HTTP/2.0 304

cache-control: public, max-age=43200
content-type: application/json; charset=utf-8
content-encoding: gzip
etag: "5E25271B8190D943537AD3FDB50874FC133E8B4A00380E2A6A888D63386F728B"
vary: Accept-Encoding
x-cache: TCP_HIT
x-mesh-client-ttl: 72
strict-transport-security: max-age=0
x-msedge-ref: Ref A: 9F1DFB6D81B8451F9B6A22A1262B1255 Ref B: LON04EDGE1019 Ref C: 2025-03-26T04:29:47Z
date: Wed, 26 Mar 2025 04:29:46 GMT
DNS

edgeassetservice.azureedge.net

msedge.exe

Remote address:

8.8.8.8:53

Request

edgeassetservice.azureedge.net

IN A

Response

edgeassetservice.azureedge.net

IN CNAME

edgeassetservice.afd.azureedge.net

edgeassetservice.afd.azureedge.net

IN CNAME

azureedge-t-prod.trafficmanager.net

azureedge-t-prod.trafficmanager.net

IN CNAME

shed.dual-low.s-part-0036.t-0009.t-msedge.net

shed.dual-low.s-part-0036.t-0009.t-msedge.net

IN CNAME

s-part-0036.t-0009.t-msedge.net

s-part-0036.t-0009.t-msedge.net

IN A

13.107.246.64
DNS

edgeassetservice.azureedge.net

msedge.exe

Remote address:

8.8.8.8:53

Request

edgeassetservice.azureedge.net

IN Unknown

Response

edgeassetservice.azureedge.net

IN CNAME

edgeassetservice.afd.azureedge.net

edgeassetservice.afd.azureedge.net

IN CNAME

azureedge-t-prod.trafficmanager.net

azureedge-t-prod.trafficmanager.net

IN CNAME

shed.dual-low.s-part-0036.t-0009.t-msedge.net

shed.dual-low.s-part-0036.t-0009.t-msedge.net

IN CNAME

s-part-0036.t-0009.t-msedge.net
GET

https://edgeassetservice.azureedge.net/assets/arbitration_priority_list/24.0.4/asset?assetgroup=ArbitrationService

msedge.exe

Remote address:

13.107.246.64:443

Request

GET /assets/arbitration_priority_list/24.0.4/asset?assetgroup=ArbitrationService HTTP/2.0
host: edgeassetservice.azureedge.net
edge-asset-group: ArbitrationService
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=4, i

Response

HTTP/2.0 200

date: Wed, 26 Mar 2025 04:29:47 GMT
content-type: application/octet-stream
content-length: 20242
last-modified: Thu, 20 Mar 2025 17:16:21 GMT
etag: 0x8DD67D2EF6CF554
x-ms-request-id: 9c4996bb-d01e-0003-425c-9b6b00000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
x-azure-ref: 20250326T042947Z-157d97d486cg7xq5hC1LONe6vn0000000y6000000000292g
cache-control: public, max-age=604800
x-fd-int-roxy-purgeid: 69316365
x-cache: TCP_HIT
accept-ranges: bytes
DNS

edge-consumer-static.azureedge.net

msedge.exe

Remote address:

8.8.8.8:53

Request

edge-consumer-static.azureedge.net

IN A

Response

edge-consumer-static.azureedge.net

IN CNAME

edge-consumer-static.afd.azureedge.net

edge-consumer-static.afd.azureedge.net

IN CNAME

azureedge-t-prod.trafficmanager.net

azureedge-t-prod.trafficmanager.net

IN CNAME

shed.dual-low.s-part-0036.t-0009.t-msedge.net

shed.dual-low.s-part-0036.t-0009.t-msedge.net

IN CNAME

s-part-0036.t-0009.t-msedge.net

s-part-0036.t-0009.t-msedge.net

IN A

13.107.246.64
DNS

edge-consumer-static.azureedge.net

msedge.exe

Remote address:

8.8.8.8:53

Request

edge-consumer-static.azureedge.net

IN Unknown

Response

edge-consumer-static.azureedge.net

IN CNAME

edge-consumer-static.afd.azureedge.net

edge-consumer-static.afd.azureedge.net

IN CNAME

azureedge-t-prod.trafficmanager.net

azureedge-t-prod.trafficmanager.net

IN CNAME

shed.dual-low.s-part-0036.t-0009.t-msedge.net

shed.dual-low.s-part-0036.t-0009.t-msedge.net

IN CNAME

s-part-0036.t-0009.t-msedge.net
GET

https://edge-consumer-static.azureedge.net/mouse-gesture/config.json

msedge.exe

Remote address:

13.107.246.64:443

Request

GET /mouse-gesture/config.json HTTP/2.0
host: edge-consumer-static.azureedge.net
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
sec-fetch-storage-access: active
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0
accept-encoding: gzip, deflate, br, zstd
priority: u=4, i

Response

HTTP/2.0 200

date: Wed, 26 Mar 2025 04:30:12 GMT
content-type: application/json
content-length: 101
last-modified: Tue, 24 Oct 2023 08:27:00 GMT
etag: 0x8DBD46AFE482320
x-ms-request-id: 4be7003e-c01e-005f-7d49-97064b000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
x-azure-ref: 20250326T043012Z-157d97d486ctt5hnhC1LONuk2w0000000q8000000000d9w3
x-fd-int-roxy-purgeid: 83582898
x-cache: TCP_HIT
cache-control: public, max-age=432000
accept-ranges: bytes
DNS

tse1.mm.bing.net

Remote address:

8.8.8.8:53

Request

tse1.mm.bing.net

IN A

Response

tse1.mm.bing.net

IN CNAME

mm-mm.bing.net.trafficmanager.net

mm-mm.bing.net.trafficmanager.net

IN CNAME

ax-0001.ax-msedge.net

ax-0001.ax-msedge.net

IN A

150.171.27.10

ax-0001.ax-msedge.net

IN A

150.171.28.10
GET

https://tse1.mm.bing.net/th?id=OADD2.10239339388127_19J9R6J3AKCRQ3IMT&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90

Remote address:

150.171.27.10:443

Request

GET /th?id=OADD2.10239339388127_19J9R6J3AKCRQ3IMT&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/2.0
host: tse1.mm.bing.net
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041

Response

HTTP/2.0 200

cache-control: public, max-age=2592000
content-length: 498769
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 0ECA271487FE46E38C8CB5DCED97CE3A Ref B: LON04EDGE0618 Ref C: 2025-03-26T04:30:13Z
date: Wed, 26 Mar 2025 04:30:13 GMT
GET

https://tse1.mm.bing.net/th?id=OADD2.10239359955653_16Q8BS61PKT108CUW&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90

Remote address:

150.171.27.10:443

Request

GET /th?id=OADD2.10239359955653_16Q8BS61PKT108CUW&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/2.0
host: tse1.mm.bing.net
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041

Response

HTTP/2.0 200

cache-control: public, max-age=2592000
content-length: 540156
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 9B66855506744E3F8BC16678236F0567 Ref B: LON04EDGE0618 Ref C: 2025-03-26T04:30:13Z
date: Wed, 26 Mar 2025 04:30:13 GMT
GET

https://tse1.mm.bing.net/th?id=OADD2.10239360504960_1PLAHYZB4JQO28JRC&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90

Remote address:

150.171.27.10:443

Request

GET /th?id=OADD2.10239360504960_1PLAHYZB4JQO28JRC&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/2.0
host: tse1.mm.bing.net
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041

Response

HTTP/2.0 200

cache-control: public, max-age=2592000
content-length: 730683
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: F74E4C2A0FE848498CFEB8200890116C Ref B: LON04EDGE0618 Ref C: 2025-03-26T04:30:13Z
date: Wed, 26 Mar 2025 04:30:13 GMT
GET

https://tse1.mm.bing.net/th?id=OADD2.10239339388128_1DFVE2FTICTWWY2JO&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90

Remote address:

150.171.27.10:443

Request

GET /th?id=OADD2.10239339388128_1DFVE2FTICTWWY2JO&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/2.0
host: tse1.mm.bing.net
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041

Response

HTTP/2.0 200

cache-control: public, max-age=2592000
content-length: 574648
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: B9547E8DB4E94D79B5FE641C13239B78 Ref B: LON04EDGE0618 Ref C: 2025-03-26T04:30:13Z
date: Wed, 26 Mar 2025 04:30:13 GMT
GET

https://tse1.mm.bing.net/th?id=OADD2.10239359955652_1UH15L5Z2LXM3P8PA&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90

Remote address:

150.171.27.10:443

Request

GET /th?id=OADD2.10239359955652_1UH15L5Z2LXM3P8PA&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/2.0
host: tse1.mm.bing.net
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041

Response

HTTP/2.0 200

cache-control: public, max-age=2592000
content-length: 591970
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: CF794023A9254C4FBBD5A0D83D1BBBD9 Ref B: LON04EDGE0618 Ref C: 2025-03-26T04:30:13Z
date: Wed, 26 Mar 2025 04:30:13 GMT
GET

https://tse1.mm.bing.net/th?id=OADD2.10239360505011_123FH55PMWQ5EA6JP&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90

Remote address:

150.171.27.10:443

Request

GET /th?id=OADD2.10239360505011_123FH55PMWQ5EA6JP&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/2.0
host: tse1.mm.bing.net
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041

Response

HTTP/2.0 200

cache-control: public, max-age=2592000
content-length: 356644
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: EFEC54EB8B084C48A562586A166C32A2 Ref B: LON04EDGE0618 Ref C: 2025-03-26T04:30:13Z
date: Wed, 26 Mar 2025 04:30:13 GMT
DNS

static.edge.microsoftapp.net

msedge.exe

Remote address:

8.8.8.8:53

Request

static.edge.microsoftapp.net

IN A

Response

static.edge.microsoftapp.net

IN CNAME

edge-cloud-resource-static.azureedge.net

edge-cloud-resource-static.azureedge.net

IN CNAME

edge-cloud-resource-static.afd.azureedge.net

edge-cloud-resource-static.afd.azureedge.net

IN CNAME

azureedge-t-prod.trafficmanager.net

azureedge-t-prod.trafficmanager.net

IN CNAME

shed.dual-low.s-part-0036.t-0009.t-msedge.net

shed.dual-low.s-part-0036.t-0009.t-msedge.net

IN CNAME

s-part-0036.t-0009.t-msedge.net

s-part-0036.t-0009.t-msedge.net

IN A

13.107.246.64
DNS

static.edge.microsoftapp.net

msedge.exe

Remote address:

8.8.8.8:53

Request

static.edge.microsoftapp.net

IN Unknown

Response

static.edge.microsoftapp.net

IN CNAME

edge-cloud-resource-static.azureedge.net

edge-cloud-resource-static.azureedge.net

IN CNAME

edge-cloud-resource-static.afd.azureedge.net

edge-cloud-resource-static.afd.azureedge.net

IN CNAME

azureedge-t-prod.trafficmanager.net

azureedge-t-prod.trafficmanager.net

IN CNAME

shed.dual-low.s-part-0036.t-0009.t-msedge.net
HEAD

https://static.edge.microsoftapp.net/default/cloud_config_observers.json

msedge.exe

Remote address:

13.107.246.64:443

Request

HEAD /default/cloud_config_observers.json HTTP/2.0
host: static.edge.microsoftapp.net
pragma: no-cache
cache-control: no-cache
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0
accept-encoding: gzip, deflate, br, zstd
priority: u=4, i

Response

HTTP/2.0 200

date: Wed, 26 Mar 2025 04:30:42 GMT
content-type: application/json
content-length: 493
content-md5: dxSVhjBc0qI1VSYrlV4pBA==
last-modified: Mon, 24 Mar 2025 01:30:34 GMT
etag: 0x8DD6A73794B1656
x-ms-request-id: 57838ab4-401e-003a-405c-9c746e000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
x-azure-ref: 20250326T043042Z-157d97d486c5q8b6hC1LONqpkn0000000yu0000000002rqk
x-fd-int-roxy-purgeid: 83582898
x-cache: TCP_HIT
accept-ranges: bytes
GET

https://static.edge.microsoftapp.net/default/cloud_config_observers.json

msedge.exe

Remote address:

13.107.246.64:443

Request

GET /default/cloud_config_observers.json HTTP/2.0
host: static.edge.microsoftapp.net
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0
accept-encoding: gzip, deflate, br, zstd
priority: u=4, i

Response

HTTP/2.0 200

date: Wed, 26 Mar 2025 04:30:42 GMT
content-type: application/json
content-length: 493
last-modified: Mon, 24 Mar 2025 01:30:34 GMT
etag: 0x8DD6A73794B1656
x-ms-request-id: f75f480b-a01e-0050-395c-9cac46000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
x-azure-ref: 20250326T043042Z-157d97d486c5q8b6hC1LONqpkn0000000yu0000000002rqm
x-fd-int-roxy-purgeid: 83582898
x-cache: TCP_HIT
accept-ranges: bytes
POST

https://edge.microsoft.com/componentupdater/api/v1/update?cup2key=7:mPjFQ253cQnQAcBqXk_EoQ8L1FyGVY0mHfSgo5ua3U0&cup2hreq=f9a2b9230a382e49d541aef486761a552194078b61b275cfef1198d1573f16fe

msedge.exe

Remote address:

150.171.27.11:443

Request

POST /componentupdater/api/v1/update?cup2key=7:mPjFQ253cQnQAcBqXk_EoQ8L1FyGVY0mHfSgo5ua3U0&cup2hreq=f9a2b9230a382e49d541aef486761a552194078b61b275cfef1198d1573f16fe HTTP/2.0
host: edge.microsoft.com
content-length: 12117
x-microsoft-update-appid: fgbafbciocncjfbbonhocjaohoknlaco,mkcgfaeepibomfapiapjaceihcojnphg,llmidpclgepbgbgoecnhcmgfhmfplfao,lkkdlcloifjinapabfonaibjijloebfb,kmkacjgmmfchkbeglfbjjeidfckbnkca,pbdgbpmpeenomngainidcjmopnklimmf,kpfehajjjbbcifeehjgfgnabifknmdad,alpjnmnfbgfkmmpcfpejmmoebdndedno,ojblfafjmiikbkepnnolpgbbhejhlcim,ahmaebgpfccdhgidjaidaoojjcijckba,ndikpojcjlepofdkaaldkinkjbeeebkl,fppmbhmldokgmleojlplaaodlkibgikh,mpicjakjneaggahlnmbojhjpnileolnb,ohckeflnhegojcjlcpbfpciadgikcohk,hjaimielcgmceiphgjjfddlgjklfpdei,jbfaflocpnkhbgcijpkiafdpbjkedane,plbmmhnabegcabfbcejohgjpkamkddhn,jcmcegpcehdchljeldgmmfbgcpnmgedo,eeobbhfgfagbclfofmgbdfoicabjdbkn,oankkpibpaokgecfckkdkgaoafllipag,lfmeghnikdkbonehgjihjebgioakijgn,gllimckfbolmioaaihpppacjccghejen,cllppcmmlnkggcmljjfigkcigaajjmid,hajigopbbjhghbfimgkfmpenfkclmohk,omnckhpgfmaoelhddliebabpgblmmnjp,pdfjdcjjjegpclfiilihfkmdfndkneei
x-microsoft-update-interactivity: bg
x-microsoft-update-service-cohort: 5569
x-microsoft-update-updater: msedge-133.0.3065.69
content-type: application/json
sec-mesh-client-edge-version: 133.0.3065.69
sec-mesh-client-edge-channel: stable
sec-mesh-client-os: Windows
sec-mesh-client-os-version: 10.0.19041
sec-mesh-client-arch: x86_64
sec-mesh-client-webview: 0
x-client-data: CICSywE=
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0
accept-encoding: gzip, deflate, br, zstd
priority: u=4, i

Response

HTTP/2.0 200

cache-control: no-store, must-revalidate, no-cache, max-age=0
pragma: no-cache
content-length: 4378
content-type: application/json
content-encoding: gzip
expires: Mon, 01 Jan 1990 00:00:00 GMT
etag: 304402206331A9860502D2310B728DE49FD94F5338EA7F8A7485AD15DB2EC39A353C4647022064184748630665CB64BD5796AA795A493A2002FF5830BA19E4991DD884CEA96C:f9a2b9230a382e49d541aef486761a552194078b61b275cfef1198d1573f16fe
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-cup-server-proof: 304402206331A9860502D2310B728DE49FD94F5338EA7F8A7485AD15DB2EC39A353C4647022064184748630665CB64BD5796AA795A493A2002FF5830BA19E4991DD884CEA96C:f9a2b9230a382e49d541aef486761a552194078b61b275cfef1198d1573f16fe
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: F6D72250106A475EAD8195217B9A953B Ref B: LON04EDGE1008 Ref C: 2025-03-26T04:30:42Z
date: Wed, 26 Mar 2025 04:30:41 GMT
POST

https://edge.microsoft.com/componentupdater/api/v1/update

msedge.exe

Remote address:

150.171.27.11:443

Request

POST /componentupdater/api/v1/update HTTP/2.0
host: edge.microsoft.com
content-length: 1458
x-microsoft-update-service-cohort: 5569
content-type: application/json
sec-mesh-client-edge-version: 133.0.3065.69
sec-mesh-client-edge-channel: stable
sec-mesh-client-os: Windows
sec-mesh-client-os-version: 10.0.19041
sec-mesh-client-arch: x86_64
sec-mesh-client-webview: 0
x-client-data: CICSywE=
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0
accept-encoding: gzip, deflate, br, zstd
priority: u=4, i

Response

HTTP/2.0 200

cache-control: no-store, must-revalidate, no-cache, max-age=0
pragma: no-cache
content-length: 179
content-type: application/json
content-encoding: gzip
expires: Mon, 01 Jan 1990 00:00:00 GMT
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: CFAE899A3C4141C9947848E305F29EE1 Ref B: LON04EDGE1008 Ref C: 2025-03-26T04:30:54Z
date: Wed, 26 Mar 2025 04:30:53 GMT
POST

https://edge.microsoft.com/componentupdater/api/v1/update

msedge.exe

Remote address:

150.171.27.11:443

Request

POST /componentupdater/api/v1/update HTTP/2.0
host: edge.microsoft.com
content-length: 1457
x-microsoft-update-service-cohort: 5569
content-type: application/json
sec-mesh-client-edge-version: 133.0.3065.69
sec-mesh-client-edge-channel: stable
sec-mesh-client-os: Windows
sec-mesh-client-os-version: 10.0.19041
sec-mesh-client-arch: x86_64
sec-mesh-client-webview: 0
x-client-data: CICSywE=
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0
accept-encoding: gzip, deflate, br, zstd
priority: u=4, i

Response

HTTP/2.0 200

cache-control: no-store, must-revalidate, no-cache, max-age=0
pragma: no-cache
content-length: 179
content-type: application/json
content-encoding: gzip
expires: Mon, 01 Jan 1990 00:00:00 GMT
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 112902496CF64E449B73071AEF4D802E Ref B: LON04EDGE1008 Ref C: 2025-03-26T04:31:11Z
date: Wed, 26 Mar 2025 04:31:10 GMT
POST

https://edge.microsoft.com/componentupdater/api/v1/update

msedge.exe

Remote address:

150.171.27.11:443

Request

POST /componentupdater/api/v1/update HTTP/2.0
host: edge.microsoft.com
content-length: 1432
x-microsoft-update-service-cohort: 5569
content-type: application/json
sec-mesh-client-edge-version: 133.0.3065.69
sec-mesh-client-edge-channel: stable
sec-mesh-client-os: Windows
sec-mesh-client-os-version: 10.0.19041
sec-mesh-client-arch: x86_64
sec-mesh-client-webview: 0
x-client-data: CICSywE=
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0
accept-encoding: gzip, deflate, br, zstd
priority: u=4, i

Response

HTTP/2.0 200

cache-control: no-store, must-revalidate, no-cache, max-age=0
pragma: no-cache
content-length: 179
content-type: application/json
content-encoding: gzip
expires: Mon, 01 Jan 1990 00:00:00 GMT
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: B2D10E1BC52646A89A28B5B536F62E25 Ref B: LON04EDGE1008 Ref C: 2025-03-26T04:31:31Z
date: Wed, 26 Mar 2025 04:31:30 GMT
POST

https://edge.microsoft.com/componentupdater/api/v1/update

msedge.exe

Remote address:

150.171.27.11:443

Request

POST /componentupdater/api/v1/update HTTP/2.0
host: edge.microsoft.com
content-length: 1453
x-microsoft-update-service-cohort: 5569
content-type: application/json
sec-mesh-client-edge-version: 133.0.3065.69
sec-mesh-client-edge-channel: stable
sec-mesh-client-os: Windows
sec-mesh-client-os-version: 10.0.19041
sec-mesh-client-arch: x86_64
sec-mesh-client-webview: 0
x-client-data: CICSywE=
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0
accept-encoding: gzip, deflate, br, zstd
priority: u=4, i

Response

HTTP/2.0 200

cache-control: no-store, must-revalidate, no-cache, max-age=0
pragma: no-cache
content-length: 179
content-type: application/json
content-encoding: gzip
expires: Mon, 01 Jan 1990 00:00:00 GMT
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 64695A3565074D1194D92EC9546CBA1F Ref B: LON04EDGE1008 Ref C: 2025-03-26T04:31:56Z
date: Wed, 26 Mar 2025 04:31:56 GMT
DNS

edge-mobile-static.azureedge.net

msedge.exe

Remote address:

8.8.8.8:53

Request

edge-mobile-static.azureedge.net

IN A

Response

edge-mobile-static.azureedge.net

IN CNAME

edge-mobile-static.afd.azureedge.net

edge-mobile-static.afd.azureedge.net

IN CNAME

azureedge-t-prod.trafficmanager.net

azureedge-t-prod.trafficmanager.net

IN CNAME

shed.dual-low.s-part-0037.t-0009.t-msedge.net

shed.dual-low.s-part-0037.t-0009.t-msedge.net

IN CNAME

s-part-0037.t-0009.t-msedge.net

s-part-0037.t-0009.t-msedge.net

IN A

13.107.246.65
DNS

edge-mobile-static.azureedge.net

msedge.exe

Remote address:

8.8.8.8:53

Request

edge-mobile-static.azureedge.net

IN Unknown

Response

edge-mobile-static.azureedge.net

IN CNAME

edge-mobile-static.afd.azureedge.net

edge-mobile-static.afd.azureedge.net

IN CNAME

azureedge-t-prod.trafficmanager.net

azureedge-t-prod.trafficmanager.net

IN CNAME

shed.dual-low.s-part-0036.t-0009.t-msedge.net

shed.dual-low.s-part-0036.t-0009.t-msedge.net

IN CNAME

s-part-0036.t-0009.t-msedge.net
DNS

edge-cloud-resource-static.azureedge.net

msedge.exe

Remote address:

8.8.8.8:53

Request

edge-cloud-resource-static.azureedge.net

IN A

Response

edge-cloud-resource-static.azureedge.net

IN CNAME

edge-cloud-resource-static.afd.azureedge.net

edge-cloud-resource-static.afd.azureedge.net

IN CNAME

azureedge-t-prod.trafficmanager.net

azureedge-t-prod.trafficmanager.net

IN CNAME

shed.dual-low.s-part-0036.t-0009.t-msedge.net

shed.dual-low.s-part-0036.t-0009.t-msedge.net

IN CNAME

s-part-0036.t-0009.t-msedge.net

s-part-0036.t-0009.t-msedge.net

IN A

13.107.246.64
DNS

edge-cloud-resource-static.azureedge.net

msedge.exe

Remote address:

8.8.8.8:53

Request

edge-cloud-resource-static.azureedge.net

IN Unknown

Response

edge-cloud-resource-static.azureedge.net

IN CNAME

edge-cloud-resource-static.afd.azureedge.net

edge-cloud-resource-static.afd.azureedge.net

IN CNAME

azureedge-t-prod.trafficmanager.net

azureedge-t-prod.trafficmanager.net

IN CNAME

shed.dual-low.s-part-0036.t-0009.t-msedge.net

shed.dual-low.s-part-0036.t-0009.t-msedge.net

IN CNAME

s-part-0036.t-0009.t-msedge.net
GET

https://edge-mobile-static.azureedge.net/eccp/get?settenant=edge-config&setplatform=win&setmkt=en-US&setchannel=stable

msedge.exe

Remote address:

13.107.246.65:443

Request

GET /eccp/get?settenant=edge-config&setplatform=win&setmkt=en-US&setchannel=stable HTTP/2.0
host: edge-mobile-static.azureedge.net
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0
accept-encoding: gzip, deflate, br, zstd
priority: u=4, i

Response

HTTP/2.0 200

date: Wed, 26 Mar 2025 04:30:42 GMT
content-type: application/json
vary: Accept-Encoding
last-modified: Tue, 25 Mar 2025 03:14:49 GMT
x-ms-request-id: 081d227b-c01e-0064-2a97-9db302000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
x-azure-ref: 20250326T043042Z-157d97d486czgxgnhC1LON3gpc0000000wsg00000000e2cn
x-fd-int-roxy-purgeid: 83582898
x-cache: TCP_HIT
content-encoding: br
GET

https://edge-cloud-resource-static.azureedge.net/default/operation_config/default.json

msedge.exe

Remote address:

13.107.246.64:443

Request

GET /default/operation_config/default.json HTTP/2.0
host: edge-cloud-resource-static.azureedge.net
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0
accept-encoding: gzip, deflate, br, zstd
priority: u=4, i

Response

HTTP/2.0 200

date: Wed, 26 Mar 2025 04:30:42 GMT
content-type: application/json
vary: Accept-Encoding
last-modified: Thu, 20 Mar 2025 10:04:30 GMT
x-ms-request-id: 8ba7a46f-601e-0002-6c85-99d0ae000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
x-azure-ref: 20250326T043042Z-157d97d486cnlmf4hC1LONqpxn0000000x2g00000000593m
x-fd-int-roxy-purgeid: 83582898
x-cache: TCP_HIT
content-encoding: br
DNS

a.nel.cloudflare.com

msedge.exe

Remote address:

8.8.8.8:53

Request

a.nel.cloudflare.com

IN A

Response

a.nel.cloudflare.com

IN A

35.190.80.1
DNS

a.nel.cloudflare.com

msedge.exe

Remote address:

8.8.8.8:53

Request

a.nel.cloudflare.com

IN Unknown

Response
OPTIONS

https://a.nel.cloudflare.com/report/v4?s=HWnKkrFgDWpOAa11fCbixjEwl2M9KeAVYmWFRqQ1ROUiYv%2BFDhgfpkJm4x%2FcLHSwgELc1K3jvjOcKiHxJvIj6I4K3%2FF8xvBJIGUmANun7BFYmpsqn%2FLxVf58m4o8MrB%2Bn7gyxBwKZuhpRPPd0MV1ayXx3GI%3D

msedge.exe

Remote address:

35.190.80.1:443

Request

OPTIONS /report/v4?s=HWnKkrFgDWpOAa11fCbixjEwl2M9KeAVYmWFRqQ1ROUiYv%2BFDhgfpkJm4x%2FcLHSwgELc1K3jvjOcKiHxJvIj6I4K3%2FF8xvBJIGUmANun7BFYmpsqn%2FLxVf58m4o8MrB%2Bn7gyxBwKZuhpRPPd0MV1ayXx3GI%3D HTTP/2.0
host: a.nel.cloudflare.com
origin: https://accountsystem-businessmanager.com
access-control-request-method: POST
access-control-request-headers: content-type
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=4, i
POST

https://a.nel.cloudflare.com/report/v4?s=HWnKkrFgDWpOAa11fCbixjEwl2M9KeAVYmWFRqQ1ROUiYv%2BFDhgfpkJm4x%2FcLHSwgELc1K3jvjOcKiHxJvIj6I4K3%2FF8xvBJIGUmANun7BFYmpsqn%2FLxVf58m4o8MrB%2Bn7gyxBwKZuhpRPPd0MV1ayXx3GI%3D

msedge.exe

Remote address:

35.190.80.1:443

Request

POST /report/v4?s=HWnKkrFgDWpOAa11fCbixjEwl2M9KeAVYmWFRqQ1ROUiYv%2BFDhgfpkJm4x%2FcLHSwgELc1K3jvjOcKiHxJvIj6I4K3%2FF8xvBJIGUmANun7BFYmpsqn%2FLxVf58m4o8MrB%2Bn7gyxBwKZuhpRPPd0MV1ayXx3GI%3D HTTP/2.0
host: a.nel.cloudflare.com
content-length: 939
content-type: application/reports+json
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=4, i
DNS

accountsystem-businessmanager.com

msedge.exe

Remote address:

8.8.8.8:53

Request

accountsystem-businessmanager.com

IN A

Response

accountsystem-businessmanager.com

IN A

104.21.34.34

accountsystem-businessmanager.com

IN A

172.67.167.217
DNS

accountsystem-businessmanager.com

msedge.exe

Remote address:

8.8.8.8:53

Request

accountsystem-businessmanager.com

IN Unknown

Response

accountsystem-businessmanager.com

IN Unknown

h3h2h""�C��GE� Ao R�@Z�T��m�L%��"��z5�@,e�,cloudflare-ech.com &G00�C��&G04h""
DNS

msedge.b.tlu.dl.delivery.mp.microsoft.com

Remote address:

8.8.8.8:53

Request

msedge.b.tlu.dl.delivery.mp.microsoft.com

IN A

Response

msedge.b.tlu.dl.delivery.mp.microsoft.com

IN CNAME

star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com

star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com

IN CNAME

cdp-f-tlu-net.trafficmanager.net

cdp-f-tlu-net.trafficmanager.net

IN CNAME

wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net

wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net

IN CNAME

a1847.dscd.akamai.net

a1847.dscd.akamai.net

IN A

2.18.190.98

a1847.dscd.akamai.net

IN A

2.18.190.173
HEAD

http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/2a0d597c-a09c-4400-be86-87596dd2e696?P1=1743003744&P2=404&P3=2&P4=WJ%2fQPNIXIk4ZmPXPx59M8peumqEs0yQBsyUeRXpnNLhHu%2f5rjdTLR%2bHv3TVczbUlHKL4%2bNTlc%2b67v7QNUyDE4A%3d%3d

Remote address:

2.18.190.98:80

Request

HEAD /filestreamingservice/files/2a0d597c-a09c-4400-be86-87596dd2e696?P1=1743003744&P2=404&P3=2&P4=WJ%2fQPNIXIk4ZmPXPx59M8peumqEs0yQBsyUeRXpnNLhHu%2f5rjdTLR%2bHv3TVczbUlHKL4%2bNTlc%2b67v7QNUyDE4A%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
User-Agent: Microsoft BITS/7.8
Host: msedge.b.tlu.dl.delivery.mp.microsoft.com

Response

HTTP/1.1 200 OK

Accept-Ranges: bytes
Cache-Control: public, max-age=17280000
Content-Type: application/x-chrome-extension
ETag: "3AWVl34DSMJKHl2C217ukEQM0Mw="
Last-Modified: Mon, 11 Nov 2024 00:17:54 GMT
MS-CorrelationId: a51b7417-6a19-42fa-9ac5-9728cd844a69
MS-CV: Uhws1dIzmUy9z6OD.0
MS-RequestId: cb9f760f-388b-496e-9f43-47f385abd2dc
Server: ECAcc (sac/255C)
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Content-Length: 6252
Date: Wed, 26 Mar 2025 04:30:46 GMT
Connection: keep-alive
X-CID: 2
X-CCC: GB
GET

http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/2a0d597c-a09c-4400-be86-87596dd2e696?P1=1743003744&P2=404&P3=2&P4=WJ%2fQPNIXIk4ZmPXPx59M8peumqEs0yQBsyUeRXpnNLhHu%2f5rjdTLR%2bHv3TVczbUlHKL4%2bNTlc%2b67v7QNUyDE4A%3d%3d

Remote address:

2.18.190.98:80

Request

GET /filestreamingservice/files/2a0d597c-a09c-4400-be86-87596dd2e696?P1=1743003744&P2=404&P3=2&P4=WJ%2fQPNIXIk4ZmPXPx59M8peumqEs0yQBsyUeRXpnNLhHu%2f5rjdTLR%2bHv3TVczbUlHKL4%2bNTlc%2b67v7QNUyDE4A%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Mon, 11 Nov 2024 00:17:54 GMT
Range: bytes=0-1119
User-Agent: Microsoft BITS/7.8
Host: msedge.b.tlu.dl.delivery.mp.microsoft.com

Response

HTTP/1.1 206 Partial Content

Accept-Ranges: bytes
Cache-Control: public, max-age=17280000
Content-Type: application/x-chrome-extension
ETag: "3AWVl34DSMJKHl2C217ukEQM0Mw="
Last-Modified: Mon, 11 Nov 2024 00:17:54 GMT
MS-CorrelationId: a51b7417-6a19-42fa-9ac5-9728cd844a69
MS-CV: Uhws1dIzmUy9z6OD.0
MS-RequestId: cb9f760f-388b-496e-9f43-47f385abd2dc
Server: ECAcc (sac/255C)
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Date: Wed, 26 Mar 2025 04:30:46 GMT
Content-Range: bytes 0-1119/6252
Content-Length: 1120
Connection: keep-alive
X-CID: 2
X-CCC: GB
GET

http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/2a0d597c-a09c-4400-be86-87596dd2e696?P1=1743003744&P2=404&P3=2&P4=WJ%2fQPNIXIk4ZmPXPx59M8peumqEs0yQBsyUeRXpnNLhHu%2f5rjdTLR%2bHv3TVczbUlHKL4%2bNTlc%2b67v7QNUyDE4A%3d%3d

Remote address:

2.18.190.98:80

Request

GET /filestreamingservice/files/2a0d597c-a09c-4400-be86-87596dd2e696?P1=1743003744&P2=404&P3=2&P4=WJ%2fQPNIXIk4ZmPXPx59M8peumqEs0yQBsyUeRXpnNLhHu%2f5rjdTLR%2bHv3TVczbUlHKL4%2bNTlc%2b67v7QNUyDE4A%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Mon, 11 Nov 2024 00:17:54 GMT
Range: bytes=1120-3011
User-Agent: Microsoft BITS/7.8
Host: msedge.b.tlu.dl.delivery.mp.microsoft.com

Response

HTTP/1.1 206 Partial Content

Accept-Ranges: bytes
Cache-Control: public, max-age=17280000
Content-Type: application/x-chrome-extension
ETag: "3AWVl34DSMJKHl2C217ukEQM0Mw="
Last-Modified: Mon, 11 Nov 2024 00:17:54 GMT
MS-CorrelationId: a51b7417-6a19-42fa-9ac5-9728cd844a69
MS-CV: Uhws1dIzmUy9z6OD.0
MS-RequestId: cb9f760f-388b-496e-9f43-47f385abd2dc
Server: ECAcc (sac/255C)
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Date: Wed, 26 Mar 2025 04:30:49 GMT
Content-Range: bytes 1120-3011/6252
Content-Length: 1892
Connection: keep-alive
X-CID: 2
X-CCC: GB
GET

http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/2a0d597c-a09c-4400-be86-87596dd2e696?P1=1743003744&P2=404&P3=2&P4=WJ%2fQPNIXIk4ZmPXPx59M8peumqEs0yQBsyUeRXpnNLhHu%2f5rjdTLR%2bHv3TVczbUlHKL4%2bNTlc%2b67v7QNUyDE4A%3d%3d

Remote address:

2.18.190.98:80

Request

GET /filestreamingservice/files/2a0d597c-a09c-4400-be86-87596dd2e696?P1=1743003744&P2=404&P3=2&P4=WJ%2fQPNIXIk4ZmPXPx59M8peumqEs0yQBsyUeRXpnNLhHu%2f5rjdTLR%2bHv3TVczbUlHKL4%2bNTlc%2b67v7QNUyDE4A%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Mon, 11 Nov 2024 00:17:54 GMT
Range: bytes=3012-6251
User-Agent: Microsoft BITS/7.8
Host: msedge.b.tlu.dl.delivery.mp.microsoft.com

Response

HTTP/1.1 206 Partial Content

Accept-Ranges: bytes
Cache-Control: public, max-age=17280000
Content-Type: application/x-chrome-extension
ETag: "3AWVl34DSMJKHl2C217ukEQM0Mw="
Last-Modified: Mon, 11 Nov 2024 00:17:54 GMT
MS-CorrelationId: a51b7417-6a19-42fa-9ac5-9728cd844a69
MS-CV: Uhws1dIzmUy9z6OD.0
MS-RequestId: cb9f760f-388b-496e-9f43-47f385abd2dc
Server: ECAcc (sac/255C)
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 5.3
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Date: Wed, 26 Mar 2025 04:30:51 GMT
Content-Range: bytes 3012-6251/6252
Content-Length: 3240
Connection: keep-alive
X-CID: 2
X-CCC: GB
HEAD

http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/cd4e6fbf-c0e9-4dc2-9e3d-7f538bc7435a?P1=1743202356&P2=404&P3=2&P4=LbO%2fzPLYeIoyRCCfhFvvXzUnN1CFGASx%2fiyQzLZs5uEVzk%2fPJV9YOjvyHUMeCBr1bYLmgx%2fgAVFiTUTeWVt1qA%3d%3d

Remote address:

2.18.190.98:80

Request

HEAD /filestreamingservice/files/cd4e6fbf-c0e9-4dc2-9e3d-7f538bc7435a?P1=1743202356&P2=404&P3=2&P4=LbO%2fzPLYeIoyRCCfhFvvXzUnN1CFGASx%2fiyQzLZs5uEVzk%2fPJV9YOjvyHUMeCBr1bYLmgx%2fgAVFiTUTeWVt1qA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
User-Agent: Microsoft BITS/7.8
Host: msedge.b.tlu.dl.delivery.mp.microsoft.com

Response

HTTP/1.1 200 OK

Cache-Control: public, max-age=17280000
Content-Type: application/x-chrome-extension
Last-Modified: Fri, 21 Mar 2025 22:19:58 GMT
Accept-Ranges: bytes
ETag: "9iK7xPzAv8q985Zbm4Con5JxafU="
Server: Microsoft-IIS/10.0
X-AspNetMvc-Version: 5.3
MS-CorrelationId: 4164b8f0-e804-4235-ab4d-7a3e79220109
MS-RequestId: 50f1d66c-fc5d-4668-b591-40eca375990c
MS-CV: uZQngVX3/U2gB55V.0
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Content-Length: 7867
Date: Wed, 26 Mar 2025 04:31:07 GMT
Connection: keep-alive
X-CID: 2
X-CCC: GB
GET

http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/cd4e6fbf-c0e9-4dc2-9e3d-7f538bc7435a?P1=1743202356&P2=404&P3=2&P4=LbO%2fzPLYeIoyRCCfhFvvXzUnN1CFGASx%2fiyQzLZs5uEVzk%2fPJV9YOjvyHUMeCBr1bYLmgx%2fgAVFiTUTeWVt1qA%3d%3d

Remote address:

2.18.190.98:80

Request

GET /filestreamingservice/files/cd4e6fbf-c0e9-4dc2-9e3d-7f538bc7435a?P1=1743202356&P2=404&P3=2&P4=LbO%2fzPLYeIoyRCCfhFvvXzUnN1CFGASx%2fiyQzLZs5uEVzk%2fPJV9YOjvyHUMeCBr1bYLmgx%2fgAVFiTUTeWVt1qA%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Fri, 21 Mar 2025 22:19:58 GMT
User-Agent: Microsoft BITS/7.8
Host: msedge.b.tlu.dl.delivery.mp.microsoft.com

Response

HTTP/1.1 200 OK

Cache-Control: public, max-age=17280000
Content-Type: application/x-chrome-extension
Last-Modified: Fri, 21 Mar 2025 22:19:58 GMT
Accept-Ranges: bytes
ETag: "9iK7xPzAv8q985Zbm4Con5JxafU="
Server: Microsoft-IIS/10.0
X-AspNetMvc-Version: 5.3
MS-CorrelationId: 4164b8f0-e804-4235-ab4d-7a3e79220109
MS-RequestId: 50f1d66c-fc5d-4668-b591-40eca375990c
MS-CV: uZQngVX3/U2gB55V.0
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Content-Length: 7867
Date: Wed, 26 Mar 2025 04:31:07 GMT
Connection: keep-alive
X-CID: 2
X-CCC: GB
HEAD

http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/d0729495-2185-4a92-a46f-fde358fd775c?P1=1743554157&P2=404&P3=2&P4=GN5RLsqg8yii3vVmxQEqh3guhQOux1rkYcEIMJwq5VcP81aL8Ow5jiHRA7RZQxTlm97IIaHgXtPeH0ZNUsD0vw%3d%3d

Remote address:

2.18.190.98:80

Request

HEAD /filestreamingservice/files/d0729495-2185-4a92-a46f-fde358fd775c?P1=1743554157&P2=404&P3=2&P4=GN5RLsqg8yii3vVmxQEqh3guhQOux1rkYcEIMJwq5VcP81aL8Ow5jiHRA7RZQxTlm97IIaHgXtPeH0ZNUsD0vw%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
User-Agent: Microsoft BITS/7.8
Host: msedge.b.tlu.dl.delivery.mp.microsoft.com

Response

HTTP/1.1 200 OK

Cache-Control: public, max-age=17280000
Content-Type: application/x-chrome-extension
Last-Modified: Wed, 19 Mar 2025 02:22:48 GMT
Accept-Ranges: bytes
ETag: "80lM3kF5wImi+p7AugEHZ6tdLtc="
Server: Microsoft-IIS/10.0
X-AspNetMvc-Version: 5.3
MS-CorrelationId: 615f14e1-6f9a-4fc6-8815-e31367c1e0ea
MS-RequestId: 632b9e76-f430-47a1-ba67-338cbbcb5826
MS-CV: ToYmrPfSN0COpZbh.0
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Content-Length: 84224
Date: Wed, 26 Mar 2025 04:31:27 GMT
Connection: keep-alive
X-CID: 2
X-CCC: GB
GET

http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/d0729495-2185-4a92-a46f-fde358fd775c?P1=1743554157&P2=404&P3=2&P4=GN5RLsqg8yii3vVmxQEqh3guhQOux1rkYcEIMJwq5VcP81aL8Ow5jiHRA7RZQxTlm97IIaHgXtPeH0ZNUsD0vw%3d%3d

Remote address:

2.18.190.98:80

Request

GET /filestreamingservice/files/d0729495-2185-4a92-a46f-fde358fd775c?P1=1743554157&P2=404&P3=2&P4=GN5RLsqg8yii3vVmxQEqh3guhQOux1rkYcEIMJwq5VcP81aL8Ow5jiHRA7RZQxTlm97IIaHgXtPeH0ZNUsD0vw%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 19 Mar 2025 02:22:48 GMT
Range: bytes=0-18702
User-Agent: Microsoft BITS/7.8
Host: msedge.b.tlu.dl.delivery.mp.microsoft.com

Response

HTTP/1.1 206 Partial Content

Cache-Control: public, max-age=17280000
Content-Type: application/x-chrome-extension
Last-Modified: Wed, 19 Mar 2025 02:22:48 GMT
Accept-Ranges: bytes
ETag: "80lM3kF5wImi+p7AugEHZ6tdLtc="
Server: Microsoft-IIS/10.0
X-AspNetMvc-Version: 5.3
MS-CorrelationId: 615f14e1-6f9a-4fc6-8815-e31367c1e0ea
MS-RequestId: 632b9e76-f430-47a1-ba67-338cbbcb5826
MS-CV: ToYmrPfSN0COpZbh.0
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Date: Wed, 26 Mar 2025 04:31:27 GMT
Content-Range: bytes 0-18702/84224
Content-Length: 18703
Connection: keep-alive
X-CID: 2
X-CCC: GB
GET

http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/d0729495-2185-4a92-a46f-fde358fd775c?P1=1743554157&P2=404&P3=2&P4=GN5RLsqg8yii3vVmxQEqh3guhQOux1rkYcEIMJwq5VcP81aL8Ow5jiHRA7RZQxTlm97IIaHgXtPeH0ZNUsD0vw%3d%3d

Remote address:

2.18.190.98:80

Request

GET /filestreamingservice/files/d0729495-2185-4a92-a46f-fde358fd775c?P1=1743554157&P2=404&P3=2&P4=GN5RLsqg8yii3vVmxQEqh3guhQOux1rkYcEIMJwq5VcP81aL8Ow5jiHRA7RZQxTlm97IIaHgXtPeH0ZNUsD0vw%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 19 Mar 2025 02:22:48 GMT
Range: bytes=18703-65853
User-Agent: Microsoft BITS/7.8
Host: msedge.b.tlu.dl.delivery.mp.microsoft.com

Response

HTTP/1.1 206 Partial Content

Cache-Control: public, max-age=17280000
Content-Type: application/x-chrome-extension
Last-Modified: Wed, 19 Mar 2025 02:22:48 GMT
Accept-Ranges: bytes
ETag: "80lM3kF5wImi+p7AugEHZ6tdLtc="
Server: Microsoft-IIS/10.0
X-AspNetMvc-Version: 5.3
MS-CorrelationId: 615f14e1-6f9a-4fc6-8815-e31367c1e0ea
MS-RequestId: 632b9e76-f430-47a1-ba67-338cbbcb5826
MS-CV: ToYmrPfSN0COpZbh.0
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Date: Wed, 26 Mar 2025 04:31:29 GMT
Content-Range: bytes 18703-65853/84224
Content-Length: 47151
Connection: keep-alive
X-CID: 2
X-CCC: GB
GET

http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/d0729495-2185-4a92-a46f-fde358fd775c?P1=1743554157&P2=404&P3=2&P4=GN5RLsqg8yii3vVmxQEqh3guhQOux1rkYcEIMJwq5VcP81aL8Ow5jiHRA7RZQxTlm97IIaHgXtPeH0ZNUsD0vw%3d%3d

Remote address:

2.18.190.98:80

Request

GET /filestreamingservice/files/d0729495-2185-4a92-a46f-fde358fd775c?P1=1743554157&P2=404&P3=2&P4=GN5RLsqg8yii3vVmxQEqh3guhQOux1rkYcEIMJwq5VcP81aL8Ow5jiHRA7RZQxTlm97IIaHgXtPeH0ZNUsD0vw%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 19 Mar 2025 02:22:48 GMT
Range: bytes=65854-84223
User-Agent: Microsoft BITS/7.8
Host: msedge.b.tlu.dl.delivery.mp.microsoft.com

Response

HTTP/1.1 206 Partial Content

Cache-Control: public, max-age=17280000
Content-Type: application/x-chrome-extension
Last-Modified: Wed, 19 Mar 2025 02:22:48 GMT
Accept-Ranges: bytes
ETag: "80lM3kF5wImi+p7AugEHZ6tdLtc="
Server: Microsoft-IIS/10.0
X-AspNetMvc-Version: 5.3
MS-CorrelationId: 615f14e1-6f9a-4fc6-8815-e31367c1e0ea
MS-RequestId: 632b9e76-f430-47a1-ba67-338cbbcb5826
MS-CV: ToYmrPfSN0COpZbh.0
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Date: Wed, 26 Mar 2025 04:31:30 GMT
Content-Range: bytes 65854-84223/84224
Content-Length: 18370
Connection: keep-alive
X-CID: 2
X-CCC: GB
HEAD

http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/83d6ccea-4fb6-4982-ae85-a8658433aafd?P1=1743497071&P2=404&P3=2&P4=j0CHZV90JWU69EdThxc48Ed644R0PqK3A4Qk9Jj71eXCAal%2fAD6UIZmUhdIwVYRMZ0g2lnBAwxiDkV4PeEaXSQ%3d%3d

Remote address:

2.18.190.98:80

Request

HEAD /filestreamingservice/files/83d6ccea-4fb6-4982-ae85-a8658433aafd?P1=1743497071&P2=404&P3=2&P4=j0CHZV90JWU69EdThxc48Ed644R0PqK3A4Qk9Jj71eXCAal%2fAD6UIZmUhdIwVYRMZ0g2lnBAwxiDkV4PeEaXSQ%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
User-Agent: Microsoft BITS/7.8
Host: msedge.b.tlu.dl.delivery.mp.microsoft.com

Response

HTTP/1.1 200 OK

Cache-Control: public, max-age=17280000
Content-Type: application/x-chrome-extension
Last-Modified: Tue, 25 Mar 2025 07:47:07 GMT
Accept-Ranges: bytes
ETag: "chQL29y4g13UssdPP2aus96xHkk="
Server: Microsoft-IIS/10.0
X-AspNetMvc-Version: 5.3
MS-CorrelationId: e51ccb0e-e048-4b24-8572-fcb77f297d6b
MS-RequestId: ce5ad8e2-f110-473b-aa55-63c2fa7bd788
MS-CV: 33zjhy03t45k2t0wk2t42y.0.2.6.1.1.1.0
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Content-Length: 178205
Date: Wed, 26 Mar 2025 04:31:52 GMT
Connection: keep-alive
X-CID: 2
X-CCC: GB
GET

http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/83d6ccea-4fb6-4982-ae85-a8658433aafd?P1=1743497071&P2=404&P3=2&P4=j0CHZV90JWU69EdThxc48Ed644R0PqK3A4Qk9Jj71eXCAal%2fAD6UIZmUhdIwVYRMZ0g2lnBAwxiDkV4PeEaXSQ%3d%3d

Remote address:

2.18.190.98:80

Request

GET /filestreamingservice/files/83d6ccea-4fb6-4982-ae85-a8658433aafd?P1=1743497071&P2=404&P3=2&P4=j0CHZV90JWU69EdThxc48Ed644R0PqK3A4Qk9Jj71eXCAal%2fAD6UIZmUhdIwVYRMZ0g2lnBAwxiDkV4PeEaXSQ%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Tue, 25 Mar 2025 07:47:07 GMT
Range: bytes=0-149780
User-Agent: Microsoft BITS/7.8
Host: msedge.b.tlu.dl.delivery.mp.microsoft.com

Response

HTTP/1.1 206 Partial Content

Cache-Control: public, max-age=17280000
Content-Type: application/x-chrome-extension
Last-Modified: Tue, 25 Mar 2025 07:47:07 GMT
Accept-Ranges: bytes
ETag: "chQL29y4g13UssdPP2aus96xHkk="
Server: Microsoft-IIS/10.0
X-AspNetMvc-Version: 5.3
MS-CorrelationId: e51ccb0e-e048-4b24-8572-fcb77f297d6b
MS-RequestId: ce5ad8e2-f110-473b-aa55-63c2fa7bd788
MS-CV: 33zjhy03t45k2t0wk2t42y.0.2.6.1.1.1.0
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Date: Wed, 26 Mar 2025 04:31:52 GMT
Content-Range: bytes 0-149780/178205
Content-Length: 149781
Connection: keep-alive
X-CID: 2
X-CCC: GB
GET

http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/83d6ccea-4fb6-4982-ae85-a8658433aafd?P1=1743497071&P2=404&P3=2&P4=j0CHZV90JWU69EdThxc48Ed644R0PqK3A4Qk9Jj71eXCAal%2fAD6UIZmUhdIwVYRMZ0g2lnBAwxiDkV4PeEaXSQ%3d%3d

Remote address:

2.18.190.98:80

Request

GET /filestreamingservice/files/83d6ccea-4fb6-4982-ae85-a8658433aafd?P1=1743497071&P2=404&P3=2&P4=j0CHZV90JWU69EdThxc48Ed644R0PqK3A4Qk9Jj71eXCAal%2fAD6UIZmUhdIwVYRMZ0g2lnBAwxiDkV4PeEaXSQ%3d%3d HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Tue, 25 Mar 2025 07:47:07 GMT
Range: bytes=149781-178204
User-Agent: Microsoft BITS/7.8
Host: msedge.b.tlu.dl.delivery.mp.microsoft.com

Response

HTTP/1.1 206 Partial Content

Cache-Control: public, max-age=17280000
Content-Type: application/x-chrome-extension
Last-Modified: Tue, 25 Mar 2025 07:47:07 GMT
Accept-Ranges: bytes
ETag: "chQL29y4g13UssdPP2aus96xHkk="
Server: Microsoft-IIS/10.0
X-AspNetMvc-Version: 5.3
MS-CorrelationId: e51ccb0e-e048-4b24-8572-fcb77f297d6b
MS-RequestId: ce5ad8e2-f110-473b-aa55-63c2fa7bd788
MS-CV: 33zjhy03t45k2t0wk2t42y.0.2.6.1.1.1.0
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
Date: Wed, 26 Mar 2025 04:31:53 GMT
Content-Range: bytes 149781-178204/178205
Content-Length: 28424
Connection: keep-alive
X-CID: 2
X-CCC: GB
DNS

edge.microsoft.com

msedge.exe

Remote address:

8.8.8.8:53

Request

edge.microsoft.com

IN A

Response

edge.microsoft.com

IN CNAME

edge-domain.trafficmanager.net

edge-domain.trafficmanager.net

IN CNAME

edge-microsoft-com.ax-0002.ax-msedge.net

edge-microsoft-com.ax-0002.ax-msedge.net

IN CNAME

ax-0002.ax-msedge.net

ax-0002.ax-msedge.net

IN A

150.171.27.11

ax-0002.ax-msedge.net

IN A

150.171.28.11
DNS

edge.microsoft.com

msedge.exe

Remote address:

8.8.8.8:53

Request

edge.microsoft.com

IN Unknown

Response

edge.microsoft.com

IN CNAME

edge-domain.trafficmanager.net

edge-domain.trafficmanager.net

IN CNAME

edge-microsoft-com.ax-0002.ax-msedge.net
DNS

msedge.b.tlu.dl.delivery.mp.microsoft.com

Remote address:

8.8.8.8:53

Request

msedge.b.tlu.dl.delivery.mp.microsoft.com

IN A

Response

msedge.b.tlu.dl.delivery.mp.microsoft.com

IN CNAME

star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com

star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com

IN CNAME

cdp-f-tlu-net.trafficmanager.net

cdp-f-tlu-net.trafficmanager.net

IN CNAME

fg.microsoft.map.fastly.net

fg.microsoft.map.fastly.net

IN A

199.232.214.172

fg.microsoft.map.fastly.net

IN A

199.232.210.172
DNS

c.pki.goog

Remote address:

8.8.8.8:53

Request

c.pki.goog

IN A

Response

c.pki.goog

IN CNAME

pki-goog.l.google.com

pki-goog.l.google.com

IN A

142.250.180.3
GET

http://c.pki.goog/r/r1.crl

Remote address:

142.250.180.3:80

Request

GET /r/r1.crl HTTP/1.1
Cache-Control: max-age = 3000
Connection: Keep-Alive
Accept: */*
If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT
User-Agent: Microsoft-CryptoAPI/10.0
Host: c.pki.goog

Response

HTTP/1.1 304 Not Modified

Date: Wed, 26 Mar 2025 04:09:52 GMT
Expires: Wed, 26 Mar 2025 04:59:52 GMT
Age: 1281
Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT
Cache-Control: public, max-age=3000
Vary: Accept-Encoding
DNS

msedge.b.tlu.dl.delivery.mp.microsoft.com

Remote address:

8.8.8.8:53

Request

msedge.b.tlu.dl.delivery.mp.microsoft.com

IN A

Response

msedge.b.tlu.dl.delivery.mp.microsoft.com

IN CNAME

star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com

star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com

IN CNAME

cdp-f-tlu-net.trafficmanager.net

cdp-f-tlu-net.trafficmanager.net

IN CNAME

wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net

wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net

IN CNAME

a1847.dscd.akamai.net

a1847.dscd.akamai.net

IN A

2.18.190.98

a1847.dscd.akamai.net

IN A

2.18.190.173
DNS

edge.microsoft.com

msedge.exe

Remote address:

8.8.8.8:53

Request

edge.microsoft.com

IN A

Response

edge.microsoft.com

IN CNAME

edge-domain.trafficmanager.net

edge-domain.trafficmanager.net

IN CNAME

edge-microsoft-com.ax-0002.ax-msedge.net

edge-microsoft-com.ax-0002.ax-msedge.net

IN CNAME

ax-0002.ax-msedge.net

ax-0002.ax-msedge.net

IN A

150.171.28.11

ax-0002.ax-msedge.net

IN A

150.171.27.11
DNS

edge.microsoft.com

msedge.exe

Remote address:

8.8.8.8:53

Request

edge.microsoft.com

IN Unknown

Response

edge.microsoft.com

IN CNAME

edge-domain.trafficmanager.net

edge-domain.trafficmanager.net

IN CNAME

edge-microsoft-com.ax-0002.ax-msedge.net

edge-microsoft-com.ax-0002.ax-msedge.net

IN CNAME

ax-0002.ax-msedge.net

150.171.27.11:80

http://edge.microsoft.com/browsernetworktime/time/1/current?cup2key=2:aXHxHRHrsLEjGqZWpQLt_odpAWB3zeg1Giqd8XQWT_0&cup2hreq=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

http

msedge.exe

883 B
1.1kB
5
5

HTTP Request

GET http://edge.microsoft.com/browsernetworktime/time/1/current?cup2key=2:aXHxHRHrsLEjGqZWpQLt_odpAWB3zeg1Giqd8XQWT_0&cup2hreq=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Response

200
35.176.92.20:443

https://ability-nosoftware-3662.my.salesforce-sites.com/cj

tls, http2

msedge.exe

3.2kB
7.0kB
14
15

HTTP Request

GET https://ability-nosoftware-3662.my.salesforce-sites.com/cj

HTTP Response

200
204.79.197.239:443

https://edge.microsoft.com/serviceexperimentation/v3/?osname=win&channel=stable&osver=10.0.19041&devicefamily=desktop&installdate=1741933560&clientversion=133.0.3065.69&experimentationmode=2&scpguard=0&scpfull=0&scpver=0

tls, http2

msedge.exe

3.5kB
8.9kB
16
18

HTTP Request

GET https://edge.microsoft.com/serviceexperimentation/v3/?osname=win&channel=stable&osver=10.0.19041&devicefamily=desktop&installdate=1741933560&clientversion=133.0.3065.69&experimentationmode=2&scpguard=0&scpfull=0&scpver=0

HTTP Response

200
95.100.153.183:443

https://copilot.microsoft.com/c/api/user/eligibility

tls, http2

msedge.exe

3.0kB
5.5kB
15
18

HTTP Request

GET https://copilot.microsoft.com/c/api/user/eligibility

HTTP Response

200
94.245.104.56:443

https://api.edgeoffer.microsoft.com/edgeoffer/pb/experiments?appId=edge-extensions&country=US

tls, http

msedge.exe

3.5kB
7.4kB
12
13

HTTP Request

GET https://api.edgeoffer.microsoft.com/edgeoffer/pb/experiments?appId=edge-extensions&country=US

HTTP Response

200
35.176.92.20:443

https://ability-nosoftware-3662.my.salesforce-sites.com/cj/jslibrary/946684800254/sfdc/NetworkTracking.js

tls, http2

msedge.exe

13.6kB
542.5kB
219
398

HTTP Request

GET https://ability-nosoftware-3662.my.salesforce-sites.com/cj/sCSS/63.0/sprites/946684800000/Theme3/default/base/common.css

HTTP Request

GET https://ability-nosoftware-3662.my.salesforce-sites.com/cj/sCSS/63.0/sprites/946684800000/Theme3/default/base/setup.css

HTTP Request

GET https://ability-nosoftware-3662.my.salesforce-sites.com/cj/sCSS/63.0/sprites/946684800000/Theme3/default/base/extended.css

HTTP Request

GET https://ability-nosoftware-3662.my.salesforce-sites.com/cj/sCSS/63.0/sprites/946684800000/Theme3/default/base/elements.css

HTTP Request

GET https://ability-nosoftware-3662.my.salesforce-sites.com/cj/sCSS/63.0/sprites/946684800000/Theme3/default/base/zen-componentsCompatible.css

HTTP Request

GET https://ability-nosoftware-3662.my.salesforce-sites.com/sCSS/63.0/sprites/946684800000/Theme3/base/dStandard.css

HTTP Request

GET https://ability-nosoftware-3662.my.salesforce-sites.com/cj/static/111213/js/perf/stub.js

HTTP Request

GET https://ability-nosoftware-3662.my.salesforce-sites.com/cj/jslibrary/946684800254/sfdc/main.js

HTTP Request

GET https://ability-nosoftware-3662.my.salesforce-sites.com/cj/jslibrary/jslabels/946684800000/en_US.js

HTTP Request

GET https://ability-nosoftware-3662.my.salesforce-sites.com/cj/jslibrary/946684800254/sfdc/NetworkTracking.js

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200
150.171.28.10:443

https://g.bing.com/neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=44016938df094cccb94fcd0005713cb2&localId=w:21C1CCEE-160B-F796-E0D9-10C0675E4A84&deviceId=6896216935942425&anid=

tls, http2

2.0kB
9.4kB
21
19

HTTP Request

GET https://g.bing.com/neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=44016938df094cccb94fcd0005713cb2&localId=w:21C1CCEE-160B-F796-E0D9-10C0675E4A84&deviceId=6896216935942425&anid=

HTTP Response

204

HTTP Request

GET https://g.bing.com/neg/0?action=emptycreative&adUnitId=11730597&publisherId=251978541&rid=44016938df094cccb94fcd0005713cb2&localId=w:21C1CCEE-160B-F796-E0D9-10C0675E4A84&deviceId=6896216935942425&anid=

HTTP Response

204

HTTP Request

GET https://g.bing.com/neg/0?action=emptycreativeimpression&adUnitId=11730597&publisherId=251978541&rid=44016938df094cccb94fcd0005713cb2&localId=w:21C1CCEE-160B-F796-E0D9-10C0675E4A84&deviceId=6896216935942425&anid=

HTTP Response

204
35.176.92.20:443

https://ability-nosoftware-3662.my.salesforce-sites.com/favicon.ico

tls, http2

msedge.exe

3.3kB
7.0kB
15
16

HTTP Request

GET https://ability-nosoftware-3662.my.salesforce-sites.com/favicon.ico

HTTP Response

200
95.100.153.157:443

https://www.bing.com/api/shopping/v1/user/shoppingsettings?EnabledServiceFeaturesv2=edgeServerUX.shopping.aablockth,edgeServerUX.shopping.block99,edgeServerUX.shopping.disableCashbackOnCouponCopy,edgeServerUX.shopping.highttaablocksrth,edgeServerUX.shopping.highttaablockth,edgeServerUX.shopping.migrateClippingToOmnibox,edgeServerUX.shopping.msEdgeShoppingCashbackDismissTimeout2s,edgeServerUX.shopping.nrtLogging

tls, http2

msedge.exe

3.4kB
6.6kB
15
17

HTTP Request

GET https://www.bing.com/api/shopping/v1/user/shoppingsettings?EnabledServiceFeaturesv2=edgeServerUX.shopping.aablockth,edgeServerUX.shopping.block99,edgeServerUX.shopping.disableCashbackOnCouponCopy,edgeServerUX.shopping.highttaablocksrth,edgeServerUX.shopping.highttaablockth,edgeServerUX.shopping.migrateClippingToOmnibox,edgeServerUX.shopping.msEdgeShoppingCashbackDismissTimeout2s,edgeServerUX.shopping.nrtLogging

HTTP Response

200
204.79.197.239:443

https://edge.microsoft.com/entityextractiontemplates/api/v1/assets/find-assets?name=domains_config_gz&version=3.*.*&channel=stable&key=d414dd4f9db345fa8003e32adc81b362

tls, http2

msedge.exe

4.5kB
9.6kB
21
26

HTTP Request

GET https://edge.microsoft.com/extensionwebstorebase/v1/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=edgecrx&prodchannel=&prodversion=133.0.3065.69&lang=en-US&acceptformat=crx3,puff&x=id%3Djmjflgjpcpepeafmmgdpfkogkghcpiha%26v%3D1.2.1%26installedby%3Dother%26uc%26ping%3Dr%253D12%2526e%253D1

HTTP Response

200

HTTP Request

GET https://edge.microsoft.com/entityextractiontemplates/api/v1/assets/find-assets?name=arbitration_priority_list&version=24.*.*&channel=stable&key=d414dd4f9db345fa8003e32adc81b362

HTTP Request

GET https://edge.microsoft.com/entityextractiontemplates/api/v1/assets/find-assets?name=edge_hub_apps_manifest_gz&version=4.11.*&channel=stable&key=d414dd4f9db345fa8003e32adc81b362

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://edge.microsoft.com/entityextractiontemplates/api/v1/assets/find-assets?name=domains_config_gz&version=3.*.*&channel=stable&key=d414dd4f9db345fa8003e32adc81b362

HTTP Response

200
142.250.180.3:443

https://update.googleapis.com/service/update2/json?cup2key=14:8qYGEddlUH4Cbm7KE4kYk-kagiYA_WmHh4IM79oyS-k&cup2hreq=d3c192cbf9cc7d50c84bebb5477526096b57b0be7ebc9825813a9a393c2dba4d

tls, http2

msedge.exe

4.4kB
8.6kB
18
18

HTTP Request

POST https://update.googleapis.com/service/update2/json?cup2key=14:8qYGEddlUH4Cbm7KE4kYk-kagiYA_WmHh4IM79oyS-k&cup2hreq=d3c192cbf9cc7d50c84bebb5477526096b57b0be7ebc9825813a9a393c2dba4d
150.171.27.11:443

https://edge.microsoft.com/abusiveadblocking/api/v1/blocklist

tls, http2

msedge.exe

3.2kB
7.3kB
14
15

HTTP Request

GET https://edge.microsoft.com/abusiveadblocking/api/v1/blocklist

HTTP Response

304
13.107.246.64:443

edgeassetservice.azureedge.net

tls

msedge.exe

3.0kB
7.7kB
14
12
13.107.246.64:443

https://edgeassetservice.azureedge.net/assets/arbitration_priority_list/24.0.4/asset?assetgroup=ArbitrationService

tls, http2

msedge.exe

4.2kB
30.1kB
29
36

HTTP Request

GET https://edgeassetservice.azureedge.net/assets/arbitration_priority_list/24.0.4/asset?assetgroup=ArbitrationService

HTTP Response

200
13.107.246.64:443

https://edge-consumer-static.azureedge.net/mouse-gesture/config.json

tls, http2

msedge.exe

3.6kB
9.3kB
18
21

HTTP Request

GET https://edge-consumer-static.azureedge.net/mouse-gesture/config.json

HTTP Response

200
150.171.27.10:443

tse1.mm.bing.net

tls, http2

1.2kB
6.9kB
15
13
150.171.27.10:443

tse1.mm.bing.net

tls, http2

1.2kB
6.9kB
15
13
150.171.27.10:443

tse1.mm.bing.net

tls, http2

1.2kB
6.9kB
15
13
150.171.27.10:443

tse1.mm.bing.net

tls, http2

1.2kB
6.9kB
15
13
150.171.27.10:443

https://tse1.mm.bing.net/th?id=OADD2.10239360505011_123FH55PMWQ5EA6JP&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90

tls, http2

116.8kB
3.4MB
2474
2470

HTTP Request

GET https://tse1.mm.bing.net/th?id=OADD2.10239339388127_19J9R6J3AKCRQ3IMT&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90

HTTP Request

GET https://tse1.mm.bing.net/th?id=OADD2.10239359955653_16Q8BS61PKT108CUW&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90

HTTP Request

GET https://tse1.mm.bing.net/th?id=OADD2.10239360504960_1PLAHYZB4JQO28JRC&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90

HTTP Request

GET https://tse1.mm.bing.net/th?id=OADD2.10239339388128_1DFVE2FTICTWWY2JO&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90

HTTP Request

GET https://tse1.mm.bing.net/th?id=OADD2.10239359955652_1UH15L5Z2LXM3P8PA&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://tse1.mm.bing.net/th?id=OADD2.10239360505011_123FH55PMWQ5EA6JP&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90

HTTP Response

200
13.107.246.64:443

https://static.edge.microsoftapp.net/default/cloud_config_observers.json

tls, http2

msedge.exe

3.7kB
9.7kB
16
18

HTTP Request

HEAD https://static.edge.microsoftapp.net/default/cloud_config_observers.json

HTTP Response

200

HTTP Request

GET https://static.edge.microsoftapp.net/default/cloud_config_observers.json

HTTP Response

200
150.171.27.11:443

https://edge.microsoft.com/componentupdater/api/v1/update

tls, http2

msedge.exe

24.2kB
15.4kB
49
54

HTTP Request

POST https://edge.microsoft.com/componentupdater/api/v1/update?cup2key=7:mPjFQ253cQnQAcBqXk_EoQ8L1FyGVY0mHfSgo5ua3U0&cup2hreq=f9a2b9230a382e49d541aef486761a552194078b61b275cfef1198d1573f16fe

HTTP Response

200

HTTP Request

POST https://edge.microsoft.com/componentupdater/api/v1/update

HTTP Response

200

HTTP Request

POST https://edge.microsoft.com/componentupdater/api/v1/update

HTTP Response

200

HTTP Request

POST https://edge.microsoft.com/componentupdater/api/v1/update

HTTP Response

200

HTTP Request

POST https://edge.microsoft.com/componentupdater/api/v1/update

HTTP Response

200
13.107.246.65:443

https://edge-mobile-static.azureedge.net/eccp/get?settenant=edge-config&setplatform=win&setmkt=en-US&setchannel=stable

tls, http2

msedge.exe

3.6kB
12.9kB
16
21

HTTP Request

GET https://edge-mobile-static.azureedge.net/eccp/get?settenant=edge-config&setplatform=win&setmkt=en-US&setchannel=stable

HTTP Response

200
13.107.246.64:443

https://edge-cloud-resource-static.azureedge.net/default/operation_config/default.json

tls, http2

msedge.exe

3.4kB
9.7kB
15
18

HTTP Request

GET https://edge-cloud-resource-static.azureedge.net/default/operation_config/default.json

HTTP Response

200
35.190.80.1:443

https://a.nel.cloudflare.com/report/v4?s=HWnKkrFgDWpOAa11fCbixjEwl2M9KeAVYmWFRqQ1ROUiYv%2BFDhgfpkJm4x%2FcLHSwgELc1K3jvjOcKiHxJvIj6I4K3%2FF8xvBJIGUmANun7BFYmpsqn%2FLxVf58m4o8MrB%2Bn7gyxBwKZuhpRPPd0MV1ayXx3GI%3D

tls, http2

msedge.exe

4.5kB
4.8kB
17
18

HTTP Request

OPTIONS https://a.nel.cloudflare.com/report/v4?s=HWnKkrFgDWpOAa11fCbixjEwl2M9KeAVYmWFRqQ1ROUiYv%2BFDhgfpkJm4x%2FcLHSwgELc1K3jvjOcKiHxJvIj6I4K3%2FF8xvBJIGUmANun7BFYmpsqn%2FLxVf58m4o8MrB%2Bn7gyxBwKZuhpRPPd0MV1ayXx3GI%3D

HTTP Request

POST https://a.nel.cloudflare.com/report/v4?s=HWnKkrFgDWpOAa11fCbixjEwl2M9KeAVYmWFRqQ1ROUiYv%2BFDhgfpkJm4x%2FcLHSwgELc1K3jvjOcKiHxJvIj6I4K3%2FF8xvBJIGUmANun7BFYmpsqn%2FLxVf58m4o8MrB%2Bn7gyxBwKZuhpRPPd0MV1ayXx3GI%3D
2.18.190.98:80

http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/83d6ccea-4fb6-4982-ae85-a8658433aafd?P1=1743497071&P2=404&P3=2&P4=j0CHZV90JWU69EdThxc48Ed644R0PqK3A4Qk9Jj71eXCAal%2fAD6UIZmUhdIwVYRMZ0g2lnBAwxiDkV4PeEaXSQ%3d%3d

http

11.0kB
293.7kB
126
221

HTTP Request

HEAD http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/2a0d597c-a09c-4400-be86-87596dd2e696?P1=1743003744&P2=404&P3=2&P4=WJ%2fQPNIXIk4ZmPXPx59M8peumqEs0yQBsyUeRXpnNLhHu%2f5rjdTLR%2bHv3TVczbUlHKL4%2bNTlc%2b67v7QNUyDE4A%3d%3d

HTTP Response

200

HTTP Request

GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/2a0d597c-a09c-4400-be86-87596dd2e696?P1=1743003744&P2=404&P3=2&P4=WJ%2fQPNIXIk4ZmPXPx59M8peumqEs0yQBsyUeRXpnNLhHu%2f5rjdTLR%2bHv3TVczbUlHKL4%2bNTlc%2b67v7QNUyDE4A%3d%3d

HTTP Response

206

HTTP Request

GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/2a0d597c-a09c-4400-be86-87596dd2e696?P1=1743003744&P2=404&P3=2&P4=WJ%2fQPNIXIk4ZmPXPx59M8peumqEs0yQBsyUeRXpnNLhHu%2f5rjdTLR%2bHv3TVczbUlHKL4%2bNTlc%2b67v7QNUyDE4A%3d%3d

HTTP Response

206

HTTP Request

GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/2a0d597c-a09c-4400-be86-87596dd2e696?P1=1743003744&P2=404&P3=2&P4=WJ%2fQPNIXIk4ZmPXPx59M8peumqEs0yQBsyUeRXpnNLhHu%2f5rjdTLR%2bHv3TVczbUlHKL4%2bNTlc%2b67v7QNUyDE4A%3d%3d

HTTP Response

206

HTTP Request

HEAD http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/cd4e6fbf-c0e9-4dc2-9e3d-7f538bc7435a?P1=1743202356&P2=404&P3=2&P4=LbO%2fzPLYeIoyRCCfhFvvXzUnN1CFGASx%2fiyQzLZs5uEVzk%2fPJV9YOjvyHUMeCBr1bYLmgx%2fgAVFiTUTeWVt1qA%3d%3d

HTTP Response

200

HTTP Request

GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/cd4e6fbf-c0e9-4dc2-9e3d-7f538bc7435a?P1=1743202356&P2=404&P3=2&P4=LbO%2fzPLYeIoyRCCfhFvvXzUnN1CFGASx%2fiyQzLZs5uEVzk%2fPJV9YOjvyHUMeCBr1bYLmgx%2fgAVFiTUTeWVt1qA%3d%3d

HTTP Response

200

HTTP Request

HEAD http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/d0729495-2185-4a92-a46f-fde358fd775c?P1=1743554157&P2=404&P3=2&P4=GN5RLsqg8yii3vVmxQEqh3guhQOux1rkYcEIMJwq5VcP81aL8Ow5jiHRA7RZQxTlm97IIaHgXtPeH0ZNUsD0vw%3d%3d

HTTP Response

200

HTTP Request

GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/d0729495-2185-4a92-a46f-fde358fd775c?P1=1743554157&P2=404&P3=2&P4=GN5RLsqg8yii3vVmxQEqh3guhQOux1rkYcEIMJwq5VcP81aL8Ow5jiHRA7RZQxTlm97IIaHgXtPeH0ZNUsD0vw%3d%3d

HTTP Response

206

HTTP Request

GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/d0729495-2185-4a92-a46f-fde358fd775c?P1=1743554157&P2=404&P3=2&P4=GN5RLsqg8yii3vVmxQEqh3guhQOux1rkYcEIMJwq5VcP81aL8Ow5jiHRA7RZQxTlm97IIaHgXtPeH0ZNUsD0vw%3d%3d

HTTP Response

206

HTTP Request

GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/d0729495-2185-4a92-a46f-fde358fd775c?P1=1743554157&P2=404&P3=2&P4=GN5RLsqg8yii3vVmxQEqh3guhQOux1rkYcEIMJwq5VcP81aL8Ow5jiHRA7RZQxTlm97IIaHgXtPeH0ZNUsD0vw%3d%3d

HTTP Response

206

HTTP Request

HEAD http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/83d6ccea-4fb6-4982-ae85-a8658433aafd?P1=1743497071&P2=404&P3=2&P4=j0CHZV90JWU69EdThxc48Ed644R0PqK3A4Qk9Jj71eXCAal%2fAD6UIZmUhdIwVYRMZ0g2lnBAwxiDkV4PeEaXSQ%3d%3d

HTTP Response

200

HTTP Request

GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/83d6ccea-4fb6-4982-ae85-a8658433aafd?P1=1743497071&P2=404&P3=2&P4=j0CHZV90JWU69EdThxc48Ed644R0PqK3A4Qk9Jj71eXCAal%2fAD6UIZmUhdIwVYRMZ0g2lnBAwxiDkV4PeEaXSQ%3d%3d

HTTP Response

206

HTTP Request

GET http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/83d6ccea-4fb6-4982-ae85-a8658433aafd?P1=1743497071&P2=404&P3=2&P4=j0CHZV90JWU69EdThxc48Ed644R0PqK3A4Qk9Jj71eXCAal%2fAD6UIZmUhdIwVYRMZ0g2lnBAwxiDkV4PeEaXSQ%3d%3d

HTTP Response

206
142.250.180.3:80

http://c.pki.goog/r/r1.crl

http

384 B
355 B
4
3

HTTP Request

GET http://c.pki.goog/r/r1.crl

HTTP Response

304

8.8.8.8:53

edge.microsoft.com

dns

msedge.exe

64 B
205 B
1
1

DNS Request

edge.microsoft.com

DNS Response

150.171.27.11

150.171.28.11
8.8.8.8:53

edge.microsoft.com

dns

msedge.exe

64 B
206 B
1
1

DNS Request

edge.microsoft.com
8.8.8.8:53

ability-nosoftware-3662.my.salesforce-sites.com

dns

msedge.exe

93 B
209 B
1
1

DNS Request

ability-nosoftware-3662.my.salesforce-sites.com

DNS Response

35.176.92.20

35.176.92.19

35.176.92.21
8.8.8.8:53

ability-nosoftware-3662.my.salesforce-sites.com

dns

msedge.exe

93 B
226 B
1
1

DNS Request

ability-nosoftware-3662.my.salesforce-sites.com
8.8.8.8:53

edge.microsoft.com

dns

msedge.exe

64 B
208 B
1
1

DNS Request

edge.microsoft.com

DNS Response

204.79.197.239

13.107.21.239
8.8.8.8:53

edge.microsoft.com

dns

msedge.exe

64 B
206 B
1
1

DNS Request

edge.microsoft.com
8.8.8.8:53

api.edgeoffer.microsoft.com

dns

msedge.exe

73 B
226 B
1
1

DNS Request

api.edgeoffer.microsoft.com

DNS Response

94.245.104.56
8.8.8.8:53

api.edgeoffer.microsoft.com

dns

msedge.exe

73 B
271 B
1
1

DNS Request

api.edgeoffer.microsoft.com
8.8.8.8:53

copilot.microsoft.com

dns

msedge.exe

67 B
238 B
1
1

DNS Request

copilot.microsoft.com

DNS Response

95.100.153.183

95.100.153.132
8.8.8.8:53

copilot.microsoft.com

dns

msedge.exe

67 B
267 B
1
1

DNS Request

copilot.microsoft.com
8.8.8.8:53

g.bing.com

dns

56 B
148 B
1
1

DNS Request

g.bing.com

DNS Response

150.171.28.10

150.171.27.10
8.8.8.8:53

accountsystem-businessmanager.com

dns

msedge.exe

79 B
111 B
1
1

DNS Request

accountsystem-businessmanager.com

DNS Response

172.67.167.217

104.21.34.34
8.8.8.8:53

accountsystem-businessmanager.com

dns

msedge.exe

79 B
227 B
1
1

DNS Request

accountsystem-businessmanager.com
172.67.167.217:443

accountsystem-businessmanager.com

https

msedge.exe

6.9kB
18.4kB
18
25
8.8.8.8:53

update.googleapis.com

dns

msedge.exe

67 B
83 B
1
1

DNS Request

update.googleapis.com

DNS Response

142.250.180.3
8.8.8.8:53

update.googleapis.com

dns

msedge.exe

67 B
124 B
1
1

DNS Request

update.googleapis.com
8.8.8.8:53

edge.microsoft.com

dns

msedge.exe

64 B
205 B
1
1

DNS Request

edge.microsoft.com

DNS Response

150.171.27.11

150.171.28.11
8.8.8.8:53

edge.microsoft.com

dns

msedge.exe

64 B
220 B
1
1

DNS Request

edge.microsoft.com
8.8.8.8:53

edgeassetservice.azureedge.net

dns

msedge.exe

76 B
243 B
1
1

DNS Request

edgeassetservice.azureedge.net

DNS Response

13.107.246.64
8.8.8.8:53

edgeassetservice.azureedge.net

dns

msedge.exe

76 B
287 B
1
1

DNS Request

edgeassetservice.azureedge.net
224.0.0.251:5353

msedge.exe

204 B
3
8.8.8.8:53

edge-consumer-static.azureedge.net

dns

msedge.exe

80 B
251 B
1
1

DNS Request

edge-consumer-static.azureedge.net

DNS Response

13.107.246.64
8.8.8.8:53

edge-consumer-static.azureedge.net

dns

msedge.exe

80 B
295 B
1
1

DNS Request

edge-consumer-static.azureedge.net
8.8.8.8:53

tse1.mm.bing.net

dns

62 B
170 B
1
1

DNS Request

tse1.mm.bing.net

DNS Response

150.171.27.10

150.171.28.10
8.8.8.8:53

static.edge.microsoftapp.net

dns

msedge.exe

74 B
302 B
1
1

DNS Request

static.edge.microsoftapp.net

DNS Response

13.107.246.64
8.8.8.8:53

static.edge.microsoftapp.net

dns

msedge.exe

74 B
332 B
1
1

DNS Request

static.edge.microsoftapp.net
8.8.8.8:53

edge-mobile-static.azureedge.net

dns

msedge.exe

78 B
247 B
1
1

DNS Request

edge-mobile-static.azureedge.net

DNS Response

13.107.246.65
8.8.8.8:53

edge-mobile-static.azureedge.net

dns

msedge.exe

78 B
291 B
1
1

DNS Request

edge-mobile-static.azureedge.net
8.8.8.8:53

edge-cloud-resource-static.azureedge.net

dns

msedge.exe

86 B
263 B
1
1

DNS Request

edge-cloud-resource-static.azureedge.net

DNS Response

13.107.246.64
8.8.8.8:53

edge-cloud-resource-static.azureedge.net

dns

msedge.exe

86 B
307 B
1
1

DNS Request

edge-cloud-resource-static.azureedge.net
8.8.8.8:53

a.nel.cloudflare.com

dns

msedge.exe

66 B
82 B
1
1

DNS Request

a.nel.cloudflare.com

DNS Response

35.190.80.1
8.8.8.8:53

a.nel.cloudflare.com

dns

msedge.exe

66 B
117 B
1
1

DNS Request

a.nel.cloudflare.com
35.190.80.1:443

a.nel.cloudflare.com

https

msedge.exe

2.9kB
5.3kB
5
8
8.8.8.8:53

accountsystem-businessmanager.com

dns

msedge.exe

79 B
111 B
1
1

DNS Request

accountsystem-businessmanager.com

DNS Response

104.21.34.34

172.67.167.217
8.8.8.8:53

accountsystem-businessmanager.com

dns

msedge.exe

79 B
227 B
1
1

DNS Request

accountsystem-businessmanager.com
104.21.34.34:443

accountsystem-businessmanager.com

https

msedge.exe

3.2kB
6.3kB
9
12
8.8.8.8:53

msedge.b.tlu.dl.delivery.mp.microsoft.com

dns

87 B
328 B
1
1

DNS Request

msedge.b.tlu.dl.delivery.mp.microsoft.com

DNS Response

2.18.190.98

2.18.190.173
95.100.153.157:443

www.bing.com

https

msedge.exe

3.1kB
6.8kB
10
14
8.8.8.8:53

edge.microsoft.com

dns

msedge.exe

64 B
205 B
1
1

DNS Request

edge.microsoft.com

DNS Response

150.171.27.11

150.171.28.11
8.8.8.8:53

edge.microsoft.com

dns

msedge.exe

64 B
206 B
1
1

DNS Request

edge.microsoft.com
8.8.8.8:53

msedge.b.tlu.dl.delivery.mp.microsoft.com

dns

87 B
266 B
1
1

DNS Request

msedge.b.tlu.dl.delivery.mp.microsoft.com

DNS Response

199.232.214.172

199.232.210.172
8.8.8.8:53

c.pki.goog

dns

56 B
107 B
1
1

DNS Request

c.pki.goog

DNS Response

142.250.180.3
104.21.34.34:443

accountsystem-businessmanager.com

https

msedge.exe

3.1kB
6.3kB
8
12
8.8.8.8:53

msedge.b.tlu.dl.delivery.mp.microsoft.com

dns

87 B
328 B
1
1

DNS Request

msedge.b.tlu.dl.delivery.mp.microsoft.com

DNS Response

2.18.190.98

2.18.190.173
8.8.8.8:53

edge.microsoft.com

dns

msedge.exe

64 B
205 B
1
1

DNS Request

edge.microsoft.com

DNS Response

150.171.28.11

150.171.27.11
8.8.8.8:53

edge.microsoft.com

dns

msedge.exe

64 B
220 B
1
1

DNS Request

edge.microsoft.com

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files\chrome_Unpacker_BeginUnzipping212_1638526460\manifest.json

Filesize
53B

MD5
22b68a088a69906d96dc6d47246880d2

SHA1
06491f3fd9c4903ac64980f8d655b79082545f82

SHA256
94be212fe6bcf42d4b13fabd22da97d6a7ef8fdf28739989aba90a7cf181ac88

SHA512
8c755fdc617fa3a196e048e222a2562622f43362b8ef60c047e540e997153a446a448e55e062b14ed4d0adce7230df643a1bd0b06a702dc1e6f78e2553aadfff

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping212_1842752532\LICENSE

Filesize
1KB

MD5
ee002cb9e51bb8dfa89640a406a1090a

SHA1
49ee3ad535947d8821ffdeb67ffc9bc37d1ebbb2

SHA256
3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b

SHA512
d1fdcc436b8ca8c68d4dc7077f84f803a535bf2ce31d9eb5d0c466b62d6567b2c59974995060403ed757e92245db07e70c6bddbf1c3519fed300cc5b9bf9177c

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping212_1842752532\manifest.json

Filesize
85B

MD5
c3419069a1c30140b77045aba38f12cf

SHA1
11920f0c1e55cadc7d2893d1eebb268b3459762a

SHA256
db9a702209807ba039871e542e8356219f342a8d9c9ca34bcd9a86727f4a3a0f

SHA512
c5e95a4e9f5919cb14f4127539c4353a55c5f68062bf6f95e1843b6690cebed3c93170badb2412b7fb9f109a620385b0ae74783227d6813f26ff8c29074758a1

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping212_356790259\manifest.json

Filesize
118B

MD5
3004ab7c9e3747e5109246e7f6b3859b

SHA1
ac4c574c03611b8bc675e878a1be8124bc32fb48

SHA256
1cb88f273e7906a853670161b6c75fabdd67f67c91b96a78171e2877b88eee96

SHA512
f81e8de5d3010bce31b311de7545353b72a9befd01249cca99e870f141090ba66913991c458f4b5cdfb80902fd116fecd54981cc0a0f4049102247c273f905e0

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping212_98811293\manifest.json

Filesize
79B

MD5
7f4b594a35d631af0e37fea02df71e72

SHA1
f7bc71621ea0c176ca1ab0a3c9fe52dbca116f57

SHA256
530882d7f535ae57a4906ca735b119c9e36480cbb780c7e8ad37c9c8fdf3d9b1

SHA512
bf3f92f5023f0fbad88526d919252a98db6d167e9ca3e15b94f7d71ded38a2cfb0409f57ef24708284ddd965bda2d3207cd99c008b1c9c8c93705fd66ac86360

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
280B

MD5
690f9d619434781cadb75580a074a84d

SHA1
9c952a5597941ab800cae7262842ab6ac0b82ab1

SHA256
fc2e4954dbe6b72d5b09e1dc6360ea699437a2551355c2950da0b3d3a4779fc1

SHA512
d6b1da8e7febf926e8b6c316164efbbac22c7c3d9e4933a19fffba3d1667e1993cdeb5064aa53816c0c53f9d2c53e204772de987eb18adbb094a0fb84ae61fa9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
cb20a0b516369f3a103199a574173804

SHA1
4c9b6c3c3974e565ecf2bf6c148ac943cb24bae5

SHA256
c11ada5f2b15c1fcf21f67a590b223a8671d498243f121df9238b34680450601

SHA512
77470a27324c3f6214f25e9c747877bd5b9faa050ed45bc10ecd296147ca8c5bcdbd93509c026697a62c3f79cf28ee67e8cfc837f7616f9b1a187cce617ca922

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe57cb5e.TMP

Filesize
3KB

MD5
ba61f23754219f986dcc9d94ca46f86f

SHA1
9aa558a4d65ba33f42f6acabcad5a953993d3b1b

SHA256
8d266a3ac96dab604eeafc09ad2a1324fa2a9fe2047287afc47704f4319d0df2

SHA512
314a2f2995daf3622c5cfaabeacb55af717fccaa75af37dad5659fbbb72b2dbdcc99b29f7df4298c3d0ed17a2e5dadff184ffed20e66b6d08d8540dee6e44245

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps

Filesize
107KB

MD5
40e2018187b61af5be8caf035fb72882

SHA1
72a0b7bcb454b6b727bf90da35879b3e9a70621e

SHA256
b3efd9d75856016510dd0bdb5e22359925cee7f2056b3cde6411c55ae8ae8ee5

SHA512
a21b8f3f7d646909d6aed605ad5823269f52fda1255aa9bb4d4643e165a7b11935572bf9e0a6a324874f99c20a6f3b6d1e457c7ccd30adcac83c15febc063d12

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
b3d4816b86881d5317dd095110370be3

SHA1
fc4d29bd690bf6c56836d548c2e5f08b452deaa1

SHA256
377c0d55d06f2dbf0e04442c48ad8c0653d5d2c1bdee7d5bb45ce5b36ca4d2b4

SHA512
4cc12e1aad11ea55606de35f665e363842090739422d09dcf9f653a46c275fc8d69b26f4dca2addec190a843d76cecc3bd31fdb45ec639f75ecd8a4866110044

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
9aae7d27dacfdaa42f2a5276cc17187e

SHA1
cae9e6773b904e40236d87dd211e6c8ecb527f6f

SHA256
b953e783f78ac0a06dc0b6fa9fd81b23da806f5753a9d44db8014c375aefdc3e

SHA512
aaf99f79c69e6a13bb23aef663d15357a236570a831b39cacd10a767b0e97bf7810ad0657f2e98d9d1dab12379d4259bf8941ba6948f193dc0e8699e38f24577

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
8551d7341b9dac3f416b40a183b3f99d

SHA1
d1de8c7b64d2d570de4c6165e0aa12ffd4e6b7f2

SHA256
f724e7710bc9bed4cbeb6d83fa37152aa11446f68aa1351d402840b0ad76110b

SHA512
19ac0044ee851507f4887dbdcedc6dd77f79a913d20f55a6bd7e289157da775b0c5bc4444e73781ec2ecfedbca0ddffef103cbb8201be192d2ba6cdb49cdedb5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries

Filesize
40B

MD5
20d4b8fa017a12a108c87f540836e250

SHA1
1ac617fac131262b6d3ce1f52f5907e31d5f6f00

SHA256
6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d

SHA512
507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
17KB

MD5
225372c9af805c800b35eb9cd109b624

SHA1
5c3ca587fb1c4614cd8c3009cd06292c0e491a8e

SHA256
ba4f08a536b952ce4e4d5c6254a560016eab51635e650cd4eba98044123b1473

SHA512
7de91bd07c41543416bfc91ea419acd88cc4df80e36a17543faa09cbfb875f8f19bdc3a73790f45a5d39479107c641e37f3c4bd494a4ea64f4c168bb27bc175e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
17KB

MD5
19e2f9ecfb46921b90afc0b5fa85bcc2

SHA1
151465f45a50c98d8c5e653dd1b5b6c5dd31d566

SHA256
c2fefbb8c7b65104ede183a9922df51c56fff838dd3528c10a6ca13370f2c135

SHA512
de8f576f070210aa20182c0e8b02b6bca636b696d97f4a827235d753fe2ce513f56f2504dcf25211b14aa8b50730e9b7e012ea9a5a24dafe08fc3b3ae298e784

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
36KB

MD5
ee6b30b30586d78ba6e75d9cd561c34f

SHA1
63ac7a9179725784c1b34d1784b6de9e338a57e7

SHA256
bf13d533b8fc0104170a07a5cfe9ea09018a99be29e8efd98126ae408a394567

SHA512
08b3941ef94dbe14618e54fb691119ee51312c03065116fe6c59e7d67b0ecc6b747333c3ba0cb3619254fce2f3c2a343feae967d8a8a46acb0c6e25c237e176d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log

Filesize
22KB

MD5
d0081ceab4e153423f1be5ab45d55ad8

SHA1
a5ec9909c0dc786e46e1dae1e6250460d7249872

SHA256
380fd4f65d84a094785b0b2773229d723d78225b634b623eba31b611263109ad

SHA512
58d97cb7b7d8e9afeae9ee476754bd7a356e04efab9abe2a7821f174953a29b46f9d0fa648fbb697b91d2639e653bb327adaf42e5177f99b0f9df4243be8ce21

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.3.10\data.txt

Filesize
113KB

MD5
60beb7140ed66301648ef420cbaad02d

SHA1
7fac669b6758bb7b8e96e92a53569cf4360ab1aa

SHA256
95276c09f44b28100c0a21c161766eda784a983f019fc471290b1381e7ed9985

SHA512
6dfa4eca42aea86fba18bc4a3ab0eed87948ea1831e33d43426b3aca1816070ecb7fd024856ad571ca2734214a98cc55e413502b3deef2c4a101228a7377e9d5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\CloudConfigLog

Filesize
467B

MD5
e22125340b26bcaeae8c7af746055821

SHA1
7b3f491db9cc601d52a9d26d2d56f0b5a8dc30ae

SHA256
d0b57dc01cab970f08b1331de9b20bba1726dacee3d202b25c28015fb1c0fde6

SHA512
84cd4158e2dd28783adad558fe52df8cac66d9832ebd43a71be7a52f563436e02003bf3956baa3d0620a670a145c3e761d8d8865340916f28250373f32840274

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\CloudConfigLog

Filesize
23KB

MD5
8a53d7d76409a4005a09b6d785c4133c

SHA1
b9ffd966987ac052a30ad10c0bad14dabbed4561

SHA256
df799d7e3f3d4f0c4e71f09fdee4903f0ab02321c89de0e0af6ad49ecd397c34

SHA512
0f405c8d149a1bc27bc12392822caa4f73e4189aa0c765662c5c7ff50fe314c1d4db01b469b6bd0e9ef3b0f09bdbdb39b0ba3c2118606904ac602f58c2082465

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\CloudConfigLog

Filesize
900B

MD5
9d7b264cff09a6521956aa9374aff4dd

SHA1
a0037c58cd69bc9ea69d85fe72a909999554a46d

SHA256
60e4a00dae051e609f377cf3ea456c783e5d3c370fa75892bee335b6a08637a1

SHA512
0ccf694ce9478de499742bcce6549ed047db18674f5e6fe3159f65aec64582d14ea61fddd3dd7b86038832b51ac142cc611a94bda512c6fbd7d6e58e3ad23d30

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig

Filesize
19KB

MD5
41c1930548d8b99ff1dbb64ba7fecb3d

SHA1
d8acfeaf7c74e2b289be37687f886f50c01d4f2f

SHA256
16cee17a989167242dd7ee2755721e357dd23bcfcb61f5789cc19deafe7ca502

SHA512
a684d61324c71ac15f3a907788ab2150f61e7e2b2bf13ca08c14e9822b22336d0d45d9ff2a2a145aa7321d28d6b71408f9515131f8a1bd9f4927b105e6471b75

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
40KB

MD5
4cd0ffef034967e0e50c7e8315378774

SHA1
496a92dc7320ee0c076fea571eae01b1a5e1d954

SHA256
0a449c67d178c72ae4684c20a6e971ff84b2ee226ca9e38a421acc194f7cecdb

SHA512
55e7d13495ed8b1f6b16d43fc39aa9bc236d09e4461e316f00318d7d9cf301560dc56c4c447e14f0684fec363f9f68572d9bbe3fa8bb1333b44fab3958b17c29

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
49KB

MD5
e55d230df4b3866332f9fe0756e7956b

SHA1
00fa0ed7e2db83c062a804138e97dc82e5fa9d71

SHA256
c1ceaaed13482fde7f5d1e9f161e7be78042ee4a987ad8e08db3a2ef2a319874

SHA512
d5e8ac148345beb82e033094f9224a90b37ca2f4907a99b2b495f0690ef26a2c2f41beea248c912fc0f50c8a202e2883dcbc5c670ed11a1e1ab18d9f2c067e24

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
54KB

MD5
5c2621126ff4af3f7a632af9547998bf

SHA1
c0ef2543eb0f6a3668dde15974acf1d1a1c0af4b

SHA256
6479f68430b14491f2a169caf6b30eaec2b62bc7499d2ad63091453e93f3de6a

SHA512
4143cbf67bfcdb0c02a725c1c412c4233892b186e1b65d23721fb94d9ec0529c8e39330190208eeba1652ec2d2f5ac63a1b40a9fbae8466e036f0faa7caecbea

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\TrustTokenKeyCommitments\2025.1.17.1\keys.json

Filesize
6KB

MD5
bef4f9f856321c6dccb47a61f605e823

SHA1
8e60af5b17ed70db0505d7e1647a8bc9f7612939

SHA256
fd1847df25032c4eef34e045ba0333f9bd3cb38c14344f1c01b48f61f0cfd5c5

SHA512
bdec3e243a6f39bfea4130c85b162ea00a4974c6057cd06a05348ac54517201bbf595fcc7c22a4ab2c16212c6009f58df7445c40c82722ab4fa1c8d49d39755c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Typosquatting\2025.3.25.1\typosquatting_list.pb

Filesize
628KB

MD5
c26015b2460d1acf6859aad730dc8f4a

SHA1
9c772753b62eaf995e39ea5ce1ef86454b58f169

SHA256
5d816db5713aa5d2fa0c1de5461729250439d7609d95bd65623c0ea62da192c7

SHA512
ef72f6e7a4ac1eab4c59ef0d90f884e29880a305ca262869b87a90462897d182a45b38fb074d704205a422cb886214c05aea6d0701715917b3092cb15559a6d2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Filesize
2KB

MD5
a1ffd6b5be7139b3fe6e266dd48904a7

SHA1
6d367825f97f1bd0790752f26a7879bf5a24afb8

SHA256
321d3f983e8fad5da37c545adb8430f20c6ac878aabdd40eac5ec593b3fdecf0

SHA512
1d364eb6ace1d39d4b77268ee9ccd0c899978e7bc745035c7e9b7da4a20d596b7cc978fe74fbf50fce8b8f5dbdb4d3f5b570ba5a68db31161e21771f48a9aecd

Download Submit

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request