Edit tour

Windows Analysis Report
http://livespoints.com/sso.dsv.com

Overview

General Information

Sample URL:	http://livespoints.com/sso.dsv.com
Analysis ID:	1376240
Infos:

Detection

Score:	60
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Snort IDS alert for network traffic

Downloads suspicious files via Chrome

Creates files inside the system directory

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 3572 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://livespoints.com/sso.dsv.com MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5364 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1708 --field-trial-handle=1816,i,17546062226923162170,5333689487827866675,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

msedge.exe (PID: 1644 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 6640 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2336 --field-trial-handle=2044,i,4245092213263531658,3503183306970251283,262144 /prefetch:3 MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 772 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=6748 --field-trial-handle=2044,i,4245092213263531658,3503183306970251283,262144 /prefetch:8 MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 2600 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=5388 --field-trial-handle=2044,i,4245092213263531658,3503183306970251283,262144 /prefetch:8 MD5: 69222B8101B0601CC6663F8381E7E00F)

cleanup

Snort Signatures

ET TROJAN [ANY.RUN] DarkCrystal Rat Check-in (POST) - Source IP: 192.168.2.4 - Destination IP: 172.67.129.42

Timestamp:	192.168.2.4172.67.129.4249729802048095 01/17/24-17:57:04.092422
SID:	2048095
Source Port:	49729
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://livespoints.com/sso.dsv.com

Avira URL Cloud: detection malicious, Label: malware

Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.16:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.1.237.25:443 -> 192.168.2.16:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.16:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.1.237.25:443 -> 192.168.2.16:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.1.237.25:443 -> 192.168.2.16:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.1.237.25:443 -> 192.168.2.16:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.222.162.7:443 -> 192.168.2.16:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.1.237.25:443 -> 192.168.2.16:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.222.162.7:443 -> 192.168.2.16:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.222:443 -> 192.168.2.16:49791 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.150.240.254:443 -> 192.168.2.16:49803 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.152.20:443 -> 192.168.2.16:49821 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.222:443 -> 192.168.2.16:49823 version: TLS 1.2

Networking

Snort IDS alert for network traffic

Source: Traffic

Snort IDS: 2048095 ET TROJAN [ANY.RUN] DarkCrystal Rat Check-in (POST) 192.168.2.4:49729 -> 172.67.129.42:80

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /sso.dsv.com HTTP/1.1Host: livespoints.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-117.0.5938.132Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=LXzxN+gks9rgPkR&MD=5L6ccdVB HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
Source: global traffic	HTTP traffic detected: GET /async/ddljson?async=ntp:2 HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
Source: global traffic	HTTP traffic detected: GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
Source: global traffic	HTTP traffic detected: GET /async/newtab_promos HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
Source: global traffic	HTTP traffic detected: GET /sorry/index?continue=https://www.google.com/async/ddljson%3Fasync%3Dntp:2&q=EgSaEMDBGPaRoK0GIjBpKTHiB1lPo_5ATCg0Y_ljqTVs7ue04FDQN5c5AD6uoZOpeYxmac5SIbVe0AdqKFUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17
Source: global traffic	HTTP traffic detected: GET /sorry/index?continue=https://www.google.com/async/newtab_ogb%3Fhl%3Den-US%26async%3Dfixed:0&hl=en-US&q=EgSaEMDBGPaRoK0GIjAOmc_Jz_xko-DVZ3W6HjcHc-LSn50Hw9wU35RfFftRpCgvJh2nGsSEOSSQ-FATfUYyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17
Source: global traffic	HTTP traffic detected: GET /sorry/index?continue=https://www.google.com/async/newtab_promos&q=EgSaEMDBGPaRoK0GIjDHIK5GDWyi_yBUojY6f3APLSPB3LXuVUksurPyV3H7YBYbhCbZ720KHz0XUrjTBv8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=7&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=w&oit=1&cp=1&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=www&oit=1&cp=3&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=ww&oit=1&cp=2&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=w&oit=1&cp=1&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=www&oit=1&cp=3&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=www.&oit=1&cp=4&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=www.l&oit=1&cp=5&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=www.li&oit=3&cp=6&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=www.liv&oit=1&cp=7&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=www.live&oit=3&cp=8&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=www.lives&oit=1&cp=9&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=www.livesp&oit=1&cp=10&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=www.livespo&oit=1&cp=11&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=www.livespoi&oit=1&cp=12&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=www.livespoin&oit=1&cp=13&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=www.livespoints&oit=1&cp=15&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=www.livespoints.&oit=1&cp=16&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=www.livespoints.co&oit=3&cp=18&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=www.livespoints.com&oit=3&cp=19&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=LXzxN+gks9rgPkR&MD=5L6ccdVB HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=httplivespoints.com%2Fsso.dsv.com&oit=3&cp=4&pgcl=4&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=http%3Alivespoints.com%2Fsso.dsv.com&oit=3&cp=5&pgcl=4&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=http%3A%2F%2Flivespoints.com%2Fsso.dsv.com&oit=3&cp=7&pgcl=4&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17
Source: global traffic	HTTP traffic detected: GET /sso.dsv.com HTTP/1.1Host: livespoints.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AS/API/WindowsCortanaPane/V2/Suggestions?qry=ed&setlang=en-CH&cc=CH&nohs=1&qfm=1&cp=2&cvid=e5c7eea5cf654d86bbefdf8942a16aca&ig=b50e108383ee4693805619e02be324a4 HTTP/1.1Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: /Accept-Language: en-CHX-Agent-DeviceId: 01000A4109009A83X-BM-CBT: 1696585056X-BM-ClientFeatures: FontV22,LightAnswers,PreviewPaneAvailable,RevStoreX-BM-DateFormat: dd/MM/yyyyX-BM-DeviceDimensions: 784x984X-BM-DeviceDimensionsLogical: 784x984X-BM-DeviceScale: 100X-BM-DTZ: 120X-BM-Market: CHX-BM-Theme: 000000;0078d7X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E,FX:2C89765X-Device-ClientSession: 8B0BADD9680C444587B50653454AB647X-Device-isOptin: falseX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-Device-OSSKU: 48X-Device-Touch: falseX-DeviceID: 01000A4109009A83X-MSEdge-ExternalExp: bfbscope1003t3,bfbwsbpphmemqcf,bfbwsbrs0830cf,d-thshld78,d-thshldspcl40,disfbcthas2_1,fliptrat6,spofglclicksh-c2,wsbqfasmsall_c,wsbref-cX-MSEdge-ExternalExpType: JointCoordX-PositionerType: DesktopX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIX-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateX-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard TimeX-UserAgeClass: UnknownAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comConnection: Keep-AliveCookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=1F9344FA7B5C6D050D8557587A606C51&CPID=1696585056799&AC=1&CPH=074c06b2&CBV=39996767; _EDGE_S=SID=1F9344FA7B5C6D050D8557587A606C51; SRCHUID=V=2&GUID=1365D4FE3DA84D19A46408EFC15FC823&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231006; SRCHHPGUSR=SRCHLANG=en&HV=1705511220&IPMH=5e4190f4&IPMID=1696585056345&LUT=1696585056224; CortanaAppUID=646BA1FF24F806DFED4199E1E0EFF63E; MUIDB=5047E5942BB2460EA35B53CCF78DDB3D
Source: global traffic	HTTP traffic detected: GET /manifest/threshold.appcache HTTP/1.1Accept: /Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitOrigin: https://www.bing.comAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comConnection: Keep-AliveCookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=1F9344FA7B5C6D050D8557587A606C51&CPID=1696585056799&AC=1&CPH=074c06b2&CBV=39996767; _EDGE_S=SID=1F9344FA7B5C6D050D8557587A606C51; SRCHUID=V=2&GUID=1365D4FE3DA84D19A46408EFC15FC823&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231006; SRCHHPGUSR=SRCHLANG=en&HV=1705511220&IPMH=5e4190f4&IPMID=1696585056345&LUT=1696585056224; CortanaAppUID=646BA1FF24F806DFED4199E1E0EFF63E; MUIDB=5047E5942BB2460EA35B53CCF78DDB3D
Source: global traffic	HTTP traffic detected: GET /AS/API/WindowsCortanaPane/V2/Suggestions?qry=ed&setlang=en-CH&cc=CH&nohs=1&qfm=1&cp=2&cvid=e5c7eea5cf654d86bbefdf8942a16aca&ig=b50e108383ee4693805619e02be324a4 HTTP/1.1Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: /Accept-Language: en-CHX-Agent-DeviceId: 01000A4109009A83X-BM-CBT: 1696585056X-BM-ClientFeatures: FontV22,LightAnswers,PreviewPaneAvailable,RevStoreX-BM-DateFormat: dd/MM/yyyyX-BM-DeviceDimensions: 784x984X-BM-DeviceDimensionsLogical: 784x984X-BM-DeviceScale: 100X-BM-DTZ: 120X-BM-Market: CHX-BM-Theme: 000000;0078d7X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E,FX:2C89765X-Device-ClientSession: 8B0BADD9680C444587B50653454AB647X-Device-isOptin: falseX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-Device-OSSKU: 48X-Device-Touch: falseX-DeviceID: 01000A4109009A83X-MSEdge-ExternalExp: bfbscope1003t3,bfbwsbpphmemqcf,bfbwsbrs0830cf,d-thshld78,d-thshldspcl40,disfbcthas2_1,fliptrat6,spofglclicksh-c2,wsbqfasmsall_c,wsbref-cX-MSEdge-ExternalExpType: JointCoordX-PositionerType: DesktopX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIX-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateX-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard TimeX-UserAgeClass: UnknownAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comConnection: Keep-AliveCookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=1F9344FA7B5C6D050D8557587A606C51&CPID=1696585056799&AC=1&CPH=074c06b2&CBV=39996767; _EDGE_S=SID=1F9344FA7B5C6D050D8557587A606C51; SRCHUID=V=2&GUID=1365D4FE3DA84D19A46408EFC15FC823&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231006; SRCHHPGUSR=SRCHLANG=en&HV=1705511220&IPMH=5e4190f4&IPMID=1696585056345&LUT=1696585056224; CortanaAppUID=646BA1FF24F806DFED4199E1E0EFF63E; MUIDB=5047E5942BB2460EA35B53CCF78DDB3D
Source: global traffic	HTTP traffic detected: GET /rb/19/jnc,nj/6hU_LneafI_NFLeDvM367ebFaKQ.js?bu=DyYvcn6BAYQBe3V4tgG5AS-pAS-8AQ&or=w HTTP/1.1Accept: /Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: r.bing.comConnection: Keep-AliveCookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=1F9344FA7B5C6D050D8557587A606C51&CPID=1696585056799&AC=1&CPH=074c06b2&CBV=39996767; _EDGE_S=SID=1F9344FA7B5C6D050D8557587A606C51; SRCHUID=V=2&GUID=1365D4FE3DA84D19A46408EFC15FC823&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231006; SRCHHPGUSR=SRCHLANG=en&HV=1705511220&IPMH=4babde7b&IPMID=1696585056799&LUT=1696585056224; CortanaAppUID=646BA1FF24F806DFED4199E1E0EFF63E
Source: global traffic	HTTP traffic detected: GET /PPRelatedSearch?query=Classic_%7Bf56fbb39-e6d9-4b6d-9c29-ae82cff2925f%7D&lang=en-CH HTTP/1.1Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: /Accept-Language: en-CHX-Agent-DeviceId: 01000A4109009A83X-BM-CBT: 1696585056X-BM-DateFormat: dd/MM/yyyyX-BM-DeviceDimensions: 784x984X-BM-DeviceDimensionsLogical: 784x984X-BM-DeviceScale: 100X-BM-DTZ: 120X-BM-Market: CHX-BM-Theme: 000000;0078d7X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E,FX:2C89765X-Device-ClientSession: 8B0BADD9680C444587B50653454AB647X-Device-isOptin: falseX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-Device-OSSKU: 48X-Device-Touch: falseX-DeviceID: 01000A4109009A83X-MSEdge-ExternalExp: bfbscope1003t3,bfbwsbpphmemqcf,bfbwsbrs0830cf,d-thshld78,d-thshldspcl40,disfbcthas2_1,fliptrat6,spofglclicksh-c2,wsbqfasmsall_c,wsbref-cX-MSEdge-ExternalExpType: JointCoordX-PositionerType: DesktopX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIX-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateX-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard TimeX-UserAgeClass: UnknownAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comConnection: Keep-AliveCookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=1F9344FA7B5C6D050D8557587A606C51&CPID=1696585056799&AC=1&CPH=074c06b2&CBV=39996767; _EDGE_S=SID=1F9344FA7B5C6D050D8557587A606C51&mkt=de-ch; SRCHUID=V=2&GUID=1365D4FE3DA84D19A46408EFC15FC823&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231006; SRCHHPGUSR=SRCHLANG=de&HV=1705511220&IPMH=5e4190f4&IPMID=1696585056345&LUT=1696585056224; CortanaAppUID=646BA1FF24F806DFED4199E1E0EFF63E; MUIDB=5047E5942BB2460EA35B53CCF78DDB3D
Source: global traffic	HTTP traffic detected: GET /rb/1c/cir3,ortl,cc,nc/n7LMSoHYYIBGa1VPMlnTzxBvlfA.css?bu=B6UCSJMCe11drgI&or=w HTTP/1.1Accept: /Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: r.bing.comConnection: Keep-AliveCookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=1F9344FA7B5C6D050D8557587A606C51&CPID=1696585056799&AC=1&CPH=074c06b2&CBV=39996767; _EDGE_S=SID=1F9344FA7B5C6D050D8557587A606C51&mkt=de-ch; SRCHUID=V=2&GUID=1365D4FE3DA84D19A46408EFC15FC823&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231006; SRCHHPGUSR=SRCHLANG=de&HV=1705511222&IPMH=5e4190f4&IPMID=1696585056345&LUT=1696585056224; CortanaAppUID=646BA1FF24F806DFED4199E1E0EFF63E
Source: global traffic	HTTP traffic detected: GET /rb/1c/cir3,ortl,cc,nc/uANxnX_BheDjd2-cdR8N9DEWlds.css?bu=C4kH-ALbA98H0wbABvUEXV1dXQ&or=w HTTP/1.1Accept: /Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: r.bing.comConnection: Keep-AliveCookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=1F9344FA7B5C6D050D8557587A606C51&CPID=1696585056799&AC=1&CPH=074c06b2&CBV=39996767; _EDGE_S=SID=1F9344FA7B5C6D050D8557587A606C51&mkt=de-ch; SRCHUID=V=2&GUID=1365D4FE3DA84D19A46408EFC15FC823&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231006; SRCHHPGUSR=SRCHLANG=de&HV=1705511222&IPMH=5e4190f4&IPMID=1696585056345&LUT=1696585056224; CortanaAppUID=646BA1FF24F806DFED4199E1E0EFF63E
Source: global traffic	HTTP traffic detected: GET /rb/49/ortl,cc,nc/4-xJy3tX6bM2BGl5zKioiEcQ1TU.css?bu=A4gCjAKPAg&or=w HTTP/1.1Accept: /Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: r.bing.comConnection: Keep-AliveCookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=1F9344FA7B5C6D050D8557587A606C51&CPID=1696585056799&AC=1&CPH=074c06b2&CBV=39996767; _EDGE_S=SID=1F9344FA7B5C6D050D8557587A606C51&mkt=de-ch; SRCHUID=V=2&GUID=1365D4FE3DA84D19A46408EFC15FC823&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231006; SRCHHPGUSR=SRCHLANG=de&HV=1705511222&IPMH=5e4190f4&IPMID=1696585056345&LUT=1696585056224; CortanaAppUID=646BA1FF24F806DFED4199E1E0EFF63E
Source: global traffic	HTTP traffic detected: GET /rb/74/cir3,ortl,cc,nc/sdlTQLOhyqEaX9abuwz8T4BNCbs.css?bu=GOAJ3QnyCZ0K6QnmCdcJlwr1CdcJ_wmCCtcJ1wmICtcJiwqUCo4KtgrXCaAK1wndCg&or=w HTTP/1.1Accept: /Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: r.bing.comConnection: Keep-AliveCookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=1F9344FA7B5C6D050D8557587A606C51&CPID=1696585056799&AC=1&CPH=074c06b2&CBV=39996767; _EDGE_S=SID=1F9344FA7B5C6D050D8557587A606C51&mkt=de-ch; SRCHUID=V=2&GUID=1365D4FE3DA84D19A46408EFC15FC823&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231006; SRCHHPGUSR=SRCHLANG=de&HV=1705511222&IPMH=5e4190f4&IPMID=1696585056345&LUT=1696585056224; CortanaAppUID=646BA1FF24F806DFED4199E1E0EFF63E
Source: global traffic	HTTP traffic detected: GET /conf/v2/asgw/fpconfig.min.json?monitorId=asgw HTTP/1.1Origin: https://www.bing.comReferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: /Accept-Language: en-CHAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: fp.msedge.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /rb/74/ortl,cc,nc/QNBBNqWD9F_Blep-UqQSqnMp-FI.css?bu=AdcJ&or=w HTTP/1.1Accept: /Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: r.bing.comConnection: Keep-AliveCookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=1F9344FA7B5C6D050D8557587A606C51&CPID=1696585056799&AC=1&CPH=074c06b2&CBV=39996767; _EDGE_S=SID=1F9344FA7B5C6D050D8557587A606C51&mkt=de-ch; SRCHUID=V=2&GUID=1365D4FE3DA84D19A46408EFC15FC823&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231006; SRCHHPGUSR=SRCHLANG=de&HV=1705511222&IPMH=5e4190f4&IPMID=1696585056345&LUT=1696585056224; CortanaAppUID=646BA1FF24F806DFED4199E1E0EFF63E
Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromiumcrx&prodchannel=&prodversion=117.0.2045.47&lang=en-GB&acceptformat=crx3,puff&x=id%3Dghbmnnjooekpmoecnnnilnnbdlolhkhi%26v%3D0.0.0.0%26installedby%3Dexternal%26uc HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: ghbmnnjooekpmoecnnnilnnbdlolhkhiX-Goog-Update-Updater: chromiumcrx-117.0.2045.47MS-CV: ep8hyp2dzS1uxVmA+Vj7iwSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /work/api/v2/tenant/my/settingswithflights?&clienttype=edge-omnibox HTTP/1.1Host: business.bing.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /api/v1/user/token/microsoftgraph?&clienttype=edge-omnibox HTTP/1.1Host: business.bing.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /edgeoffer/pb/experiments?appId=edge-extensions&country=CH HTTP/1.1Host: api.edgeoffer.microsoft.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /rb/74/ortl,cc,nc/UAaYFJgFpEHrvDo6xXg7recODbU.css?bu=CckK1wnOCtcJ0grXCdcJ1wnXCQ&or=w HTTP/1.1Accept: /Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: r.bing.comConnection: Keep-AliveCookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=1F9344FA7B5C6D050D8557587A606C51&CPID=1696585056799&AC=1&CPH=074c06b2&CBV=39996767; _EDGE_S=SID=1F9344FA7B5C6D050D8557587A606C51&mkt=de-ch; SRCHUID=V=2&GUID=1365D4FE3DA84D19A46408EFC15FC823&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231006; SRCHHPGUSR=SRCHLANG=de&HV=1705511222&IPMH=5e4190f4&IPMID=1696585056345&LUT=1696585056224; CortanaAppUID=646BA1FF24F806DFED4199E1E0EFF63E
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?e41ff04bbaf934739ffcb512be3a76ae HTTP/1.1Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5Accept-Language: en-CHAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: arm-ring.msedge.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?08484a812b6fe23ef87caf8ad18324c2 HTTP/1.1Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5Accept-Language: en-CHAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: arm-ring.msedge.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /rp/1N_0t7ZmnqiHZmEIq4uIlIUT1DI.js HTTP/1.1Accept: /Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: r.bing.comConnection: Keep-AliveCookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=1F9344FA7B5C6D050D8557587A606C51&CPID=1696585056799&AC=1&CPH=074c06b2&CBV=39996767; _EDGE_S=SID=1F9344FA7B5C6D050D8557587A606C51&mkt=de-ch; SRCHUID=V=2&GUID=1365D4FE3DA84D19A46408EFC15FC823&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231006; SRCHHPGUSR=SRCHLANG=de&HV=1705511222&IPMH=5e4190f4&IPMID=1696585056345&LUT=1696585056224; CortanaAppUID=646BA1FF24F806DFED4199E1E0EFF63E
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?8f86e0ff46dee7ba47f008a3984db753 HTTP/1.1Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5Accept-Language: en-CHAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: 58e6a35818525043c79d25fe433d7024.clo.footprintdns.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /b?rn=1705511230793&c1=2&c2=3000001&cs_ucfr=1&c7=https%3A%2F%2Fntp.msn.com%2Fedge%2Fntp%3Flocale%3Den-GB%26title%3DNew%2Btab%26dsp%3D1%26sp%3DBing%26isFREModalBackground%3D1%26startpage%3D1%26PC%3DU531%26ocid%3Dmsedgdhp%26mkt%3Den-us&c8=New+tab&c9= HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /b2?rn=1705511230793&c1=2&c2=3000001&cs_ucfr=1&c7=https%3A%2F%2Fntp.msn.com%2Fedge%2Fntp%3Flocale%3Den-GB%26title%3DNew%2Btab%26dsp%3D1%26sp%3DBing%26isFREModalBackground%3D1%26startpage%3D1%26PC%3DU531%26ocid%3Dmsedgdhp%26mkt%3Den-us&c8=New+tab&c9= HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: UID=1FF6367ecc4656ad6cd0ca71705511231
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/storyManager.9459c0c5f5a9a5d50691.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /service/msn/user?apikey=1hYoJsIRvPEnSkk0hlnJF2092mHqiz7xFenIFKa9uc&activityId=EDA7CB09-C52C-41B1-9707-B0A727D882E0&ocid=pdp-peregrine&cm=en-us&it=app&user=m-2136D0069C246D353F30C40F9D676C20 HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: _C_ETH=1; USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/sticky-peek.842ac331368b174e475a.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/common-feed-libs.f7c40fd5b5301a22c853.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/common-cscore.e732cc9b00c74f2421e6.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/super-nav.b8dc75adef24ffb464ab.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/shopping-notification.636d24050cb676260eed.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AAc9vHK.img HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /staticsb/statics//latest/icons-wc/icons/MicrosoftStartLogo_dark.svg HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: _C_ETH=1; USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA1hk7Sh.img HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA1mcm86.img HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/BB14D0jG.img HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AAdTRDX.img HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA19A5r1.img HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /assets/edge_hub_apps_manifest_gz/4.7.107/asset?sv=2017-07-29&sr=c&sig=ODCnll3A%2Fpr7IBDaNsDR2zA%2FOssZl6xdmLkM6vzzbZ0%3D&st=2021-01-01T00%3A00%3A00Z&se=2024-03-31T00%3A00%3A00Z&sp=r&assetgroup=Shoreline HTTP/1.1Host: edgeassetservice.azureedge.netConnection: keep-aliveEdge-Asset-Group: ShorelineSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /v4/api/selection?nct=1&fmt=json&nocookie=1&locale=en-us&country=US&muid=2136D0069C246D353F30C40F9D676C20&bcnt=1&placement=88000244&ACHANNEL=4&ABUILD=117.0.5938.132&clr=esdk&edgeid=-7805640675387128533&ADEFAB=1&devosver=10.0.19045.2006&OPSYS=WIN10&poptin=0&UITHEME=light&pageConfig=547&asid=2cb6967668c04312e7a5bd50e133f776 HTTP/1.1Host: arc.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: _C_ETH=1; USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/scroll-down-button.67b8880230bd0e4c2f33.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/common-others.c3460f2dae1a325c87e5.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AAcHSdq.img HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA15KYc7.img HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /assets/domains_config_gz/2.8.75/asset?sv=2017-07-29&sr=c&sig=ODCnll3A%2Fpr7IBDaNsDR2zA%2FOssZl6xdmLkM6vzzbZ0%3D&st=2021-01-01T00%3A00%3A00Z&se=2024-03-31T00%3A00%3A00Z&sp=r&assetgroup=EntityExtractionDomainsConfig HTTP/1.1Host: edgeassetservice.azureedge.netConnection: keep-aliveEdge-Asset-Group: EntityExtractionDomainsConfigSec-Mesh-Client-Edge-Version: 117.0.2045.47Sec-Mesh-Client-Edge-Channel: stableSec-Mesh-Client-OS: WindowsSec-Mesh-Client-OS-Version: 10.0.19045Sec-Mesh-Client-Arch: x86_64Sec-Mesh-Client-WebView: 0Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/common-windows-widget-shared.43a2d05d1d74cbc18745.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/channel-store.c3f39e5ab746e5b2b068.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/edge-shopping.24a021aa8f84839027f3.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/libs_ads-constants_dist_AdsFlights_js-libs_ads-utils_dist_logging_sendAdImageLoadError_js-lib-45f8f9.d95a2091d2ab871e1d9e.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/libs_ads-constants_dist_AdsFlights_js-libs_ads-utils_dist_logging_sendAdImageLoadError_js-lib-e9c969.26a84d1571f555d023ba.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/node_modules_sortablejs_modular_sortable_esm_js.6985524dca6d732452d7.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /cms/api/am/imageFileData/RW198v0?ver=d539 HTTP/1.1Host: img-prod-cms-rt-microsoft-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /assets/edge_hub_apps_action_center_maximal_light.png/1.2.1/asset HTTP/1.1Host: edgeassetservice.azureedge.netConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /assets/edge_hub_apps_search_maximal_light.png/1.3.6/asset HTTP/1.1Host: edgeassetservice.azureedge.netConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /assets/edge_hub_apps_shopping_maximal_light.png/1.4.0/asset HTTP/1.1Host: edgeassetservice.azureedge.netConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /assets/edge_hub_apps_toolbox_maximal_light.png/1.5.13/asset HTTP/1.1Host: edgeassetservice.azureedge.netConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /assets/edge_hub_apps_games_maximal_light.png/1.7.1/asset HTTP/1.1Host: edgeassetservice.azureedge.netConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /assets/edge_hub_apps_M365_light.png/1.7.32/asset HTTP/1.1Host: edgeassetservice.azureedge.netConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/diagnostic-web-vitals.8e31afd07dfeb48aea72.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /service/news/feed/pages/ntp?User=m-2136D0069C246D353F30C40F9D676C20&activityId=EDA7CB09-C52C-41B1-9707-B0A727D882E0&apikey=0QfOX3Vn51YCzitbLaRkTTBadtWpgTN8NZLW0C1SEM&audienceMode=adult&cm=en-us&column=c3&disablecontent=true&infopaneCount=17&it=app&memory=8&newsSkip=0&newsTop=48&ocid=anaheim-ntp-feeds&pgc=547&timeOut=1000&vpSize=1232x876&wposchema=byregion HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; MUIDB=2136D0069C246D353F30C40F9D676C20; _SS=SID=00
Source: global traffic	HTTP traffic detected: GET /assets/edge_hub_apps_outlook_light.png/1.9.10/asset HTTP/1.1Host: edgeassetservice.azureedge.netConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /assets/edge_hub_apps_edrop_maximal_light.png/1.1.12/asset HTTP/1.1Host: edgeassetservice.azureedge.netConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /v3/Delivery/Events/Impression?PID=425882902&TID=700466140&CID=128000000004387309&BID=679763595&PG=IRIS000001.0000000244&TPID=425882902&REQASID=2CB6967668C04312E7A5BD50E133F776&ASID=acf1f206c917485589ee2cd4ed9c512b&SLOT=1&REQT=20240117T170713&MA_Score=2&EDGEID=-7805640675387128533&DS_EVTID=acf1f206c917485589ee2cd4ed9c512b&BCNT=1&PG=IRIS000001.0000000244&UNID=88000244&MAP_TID=4D114F87-B22F-49DB-9DC2-EE0754B84DF0&NCT=1&ASID=2CB6967668C04312E7A5BD50E133F776&REQASID=2CB6967668C04312E7A5BD50E133F776&ARC=1&EMS=1&LOCALE=EN-US&COUNTRY=US&HTD=-1&LANG=1033&DEVLANG=EN&CIP=154.16.192.193&ID=-7805640675387128533&OPTOUTSTATE=256&HTTPS=1&DEVOSVER=10.0.19045.2006&DEVOSMAJ=10&DEVOSMIN=0&DEVOSBLD=19045&DEVOSMINBLD=2006&ABUILD=117.0.5938.132&AMAJOR=117&AMINOR=0&ABLD=5938&APATCH=132&MARKETBASEDCOUNTRY=US&CLR=ESDK&CFMT=&H=0&W=0&FESVER=1.3&ACHANNEL=4&ADEFAB=1&OPSYS=WIN10&UITHEME=LIGHT&PAGECONFIG=547&CHNL=CFD&UIT=E HTTP/1.1Host: arc.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/ocvFeedback.afc5eaf466f4c6a075f1.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/autosMarketplaceCard.4ad0b0c0ac93f4d8ec62.js HTTP/1.1Host: assets.msn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/background-gallery.51b38e9d7a8ceb385408.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/conditionalBannerWC.c5b3394c61c248b33797.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/common-settings-edgenext.fc618f2b72574c13fece.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/super-coach-mark-wc.80f3254d7775d84bbb65.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/waffle-wc.c1a2f7ab3d1226ddd602.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/common-segments.f57339d038f6992ea243.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/libs_core_dist_interaction-tracker_MouseTracker_js-libs_weather-shared-wc_dist_weather-card_i-242a89.2cbbef1acf0f863b23f9.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/welcomeGreetingLight.cb14641cfd139c8fb23d.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/libs_social-data-service_dist_service_SocialService_js.699363c393f9330cadc6.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/notification-bell-wc.5c9b17182f3d3e78c11b.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/boost-ad-card.2abb4a2f79dee41491a2.js HTTP/1.1Host: assets.msn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/feedback.62b90df367cfe4903710.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/feeds-notification-toast.df21c05a4ff3486bc6f3.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/superBreakingNews.d1730a88be81c7d36ff0.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/ms-rewards-wc.7f8185e0914181ef2e50.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/sign-in-control-wc.817df57519f0cbb1eb3f.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /crx/blobs/AeKPYwzuPHdG7KXik3HHcL6a-Kv5-SV7bEMYguq8BAeQOhsYur09l08rkkrr-edY1Bt1nCKffdNkY-OZrUTKLWF5ESV93vCk6AcDyeyIE9UUl8AQVch1AMZSmuV-bagaPLO2mX-Kra1bZfrs-ijM4A/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_73_0_0.crx HTTP/1.1Host: clients2.googleusercontent.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/mobile-app-upsell.b8d6ed42cd17473a04ef.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/codex-bing-chat.f8ae41c0c9bda0e934e1.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/card-actions-wc.094e958a7da9dfa633df.js HTTP/1.1Host: assets.msn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/libs_location-service_dist_AutoSuggestService_index_js-libs_location-service_dist_profiles_We-d085cf.9f10c53864a61091eef2.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/weather-card-data-connector.36a9bcbc4691ff2deb78.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/SignInData.f80799da3bfdfbad7245.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /breakingnews/v1/cms/api/amp/article/AA157JY HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/RewardsData.2abf4e86ad20ef1b6bc6.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /staticsb/statics/latest/common/icons/copilot_color.svg HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; MUIDB=2136D0069C246D353F30C40F9D676C20; _SS=SID=00; _C_ETH=1
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/RewardsCoachmarkData.83abf4e96155e10a98d3.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/MarketMismatchCoachMark.0d128b2ec30808e7f4d0.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /service/News/Users/me/Rewards?apikey=1hYoJsIRvPEnSkk0hlnJF2092mHqiz7xFenIFKa9uc&activityId=EDA7CB09-C52C-41B1-9707-B0A727D882E0&ocid=rewards-peregrine&cm=en-us&it=app&user=m-2136D0069C246D353F30C40F9D676C20&scn=APP_ANON&version=2 HTTP/1.1Host: assets.msn.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; MUIDB=2136D0069C246D353F30C40F9D676C20; _SS=SID=00; _C_ETH=1
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/channel-filter-card.feaa9939796e7d03c4cd.js HTTP/1.1Host: assets.msn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /staticsb/statics/latest/marketmismatch/bannerDisplayString/en-gb.json HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /service/v1/news/users/me/locations?apikey=1hYoJsIRvPEnSkk0hlnJF2092mHqiz7xFenIFKa9uc&activityId=EDA7CB09-C52C-41B1-9707-B0A727D882E0&ocid=pdp-peregrine&cm=en-us&it=app&user=m-2136D0069C246D353F30C40F9D676C20 HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; MUIDB=2136D0069C246D353F30C40F9D676C20; _SS=SID=00; _C_ETH=1
Source: global traffic	HTTP traffic detected: GET /service/graph/actions?%24top=20&%24filter=actionType+eq+%27Follow%27+and+%28targetType+eq+%27Location%27%29&apikey=1hYoJsIRvPEnSkk0hlnJF2092mHqiz7xFenIFKa9uc&activityId=EDA7CB09-C52C-41B1-9707-B0A727D882E0&ocid=pdp-peregrine&cm=en-us&it=app&user=m-2136D0069C246D353F30C40F9D676C20 HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; MUIDB=2136D0069C246D353F30C40F9D676C20; _SS=SID=00
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/components_weather-popup_dist_index_js.3e8679ded20ad762dbad.js HTTP/1.1Host: assets.msn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /service/msn/user?apikey=1hYoJsIRvPEnSkk0hlnJF2092mHqiz7xFenIFKa9uc&activityId=EDA7CB09-C52C-41B1-9707-B0A727D882E0&ocid=pdp-peregrine&cm=en-us&it=app&user=m-2136D0069C246D353F30C40F9D676C20 HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: _C_Auth=; USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; MUIDB=2136D0069C246D353F30C40F9D676C20; _SS=SID=00; _C_ETH=1
Source: global traffic	HTTP traffic detected: GET /service/v1/news/users/me/locations?apikey=1hYoJsIRvPEnSkk0hlnJF2092mHqiz7xFenIFKa9uc&activityId=EDA7CB09-C52C-41B1-9707-B0A727D882E0&ocid=pdp-peregrine&cm=en-us&it=app&user=m-2136D0069C246D353F30C40F9D676C20 HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: _C_Auth=; USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; MUIDB=2136D0069C246D353F30C40F9D676C20; _SS=SID=00
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/digest-card.fba514af47dbcda937ef.js HTTP/1.1Host: assets.msn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /service/segments/recoitems/weather?apikey=UhJ4G66OjyLbn9mXARgajXLiLw6V75sHnfpU60aJBB&activityId=EDA7CB09-C52C-41B1-9707-B0A727D882E0&ocid=weather-peregrine&cm=en-us&it=app&user=m-2136D0069C246D353F30C40F9D676C20&units=F&appId=4de6fc9f-3262-47bf-9c99-e189a8234fa2&wrapodata=false&includemapsmetadata=true&cuthour=true&filterRule=card&distanceinkm=0&regionDataCount=20&orderby=distance&days=5&pageOcid=anaheim-dhp-peregrine&source=undefined_csr&hours=13&fdhead=prg-1sw-wxmptreplace%2Cprg-1sw-wxovsig%2Cprg-1sw-wxcfinst%2Cprg-1sw-wxtr75%2Cprg-1sw-wxhurac-c&contentcount=3&region=us&market=en-us&locale=en-us&lat=40.748390197753906&lon=-73.98461151123047 HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/edge/ntp?locale=en-GB&title=New%20tab&dsp=1&sp=Bing&isFREModalBackground=1&startpage=1&PC=U531Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/experiences_shopping-entry-base-experience_dist_ShoppingEntryBaseExperience_js.9e97ec872b7d429883e8.js HTTP/1.1Host: assets.msn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /weathermapdata/1/static/weather/Icons/taskbar_v10/Condition_Card/SunnyDayV3.svg HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; MUIDB=2136D0069C246D353F30C40F9D676C20; _SS=SID=00; _C_ETH=1
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/feedDependencies.6c5d7347d7d905277a84.js HTTP/1.1Host: assets.msn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/following-fre-full-width.31ea4a66f592f4aa0931.js HTTP/1.1Host: assets.msn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/grid-view-feed.dbad88b95d905bbfb268.js HTTP/1.1Host: assets.msn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/interest-fre-card.30b26f782d4747b20e34.js HTTP/1.1Host: assets.msn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/interest-management-card.5ebfebb76fcb498ca938.js HTTP/1.1Host: assets.msn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/interests-wc.7283e39bc3c5cdc59ca2.js HTTP/1.1Host: assets.msn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/libs_location-service_dist_AutoSuggestService_index_js-libs_traffic_dist_index_js-web-compone-c76c45.af455fc99785123935e1.js HTTP/1.1Host: assets.msn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/libs_super-feed_dist_feed-manager_FeedManagerWithClientAd_js-node_modules_fluentui_svg-icons_-8f340f.6ccd673195b9f91ac607.js HTTP/1.1Host: assets.msn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/libs_weather-shared-wc_dist_index_js.b0b1c6ea76f00067ae41.js HTTP/1.1Host: assets.msn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/money-info-service.1113b8acce7ac8e42dec.js HTTP/1.1Host: assets.msn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/money-info.8fe15acccf9401ca66ec.js HTTP/1.1Host: assets.msn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/money-quote-vertical-quote-list.e462ace6cbe4d83aa137.js HTTP/1.1Host: assets.msn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/money-quote-vertical-watchlist.28b33b8557da261310cb.js HTTP/1.1Host: assets.msn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /fwlink/?linkid=2132659&form=MT004A&OCID=MT004A HTTP/1.1Host: go.microsoft.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/na-trending.1db8b7da756dc53852b0.js HTTP/1.1Host: assets.msn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /edge/welcome?form=MT00LJ HTTP/1.1Host: www.microsoft.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /fwlink/?linkid=2132659&form=MT004A&OCID=MT004A HTTP/1.1Host: go.microsoft.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/nas-highlight-v1.16d693a412d24530c315.js HTTP/1.1Host: assets.msn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /edge/welcome?form=MT00LJ HTTP/1.1Host: www.microsoft.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version: "117.0.2045.47"sec-ch-ua-arch: "x86"sec-ch-ua-bitness: "64"Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/nas-highlight-v3v4.e4e248522529ebc8634f.js HTTP/1.1Host: assets.msn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /en-gb/edge/welcome?ep=254&form=MT00L7&es=59 HTTP/1.1Host: www.microsoft.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.2045.47"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-bitness: "64"Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/nativeadstemplates.28fc2d89edd62e8e6701.js HTTP/1.1Host: assets.msn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/news-groups-card.98d340916dc4d07f1bca.js HTTP/1.1Host: assets.msn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /shared/edgeweb/css/0098d6e.css HTTP/1.1Host: edgestatic.azureedge.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /resolver/api/resolve/v3/config/?expType=AppConfig&expInstance=default&apptype=edgeChromium&v=20240117.5&targetScope={%22audienceMode%22:%22adult%22,%22browser%22:{%22browserType%22:%22edgeChromium%22,%22version%22:%22117%22,%22ismobile%22:%22false%22},%22deviceFormFactor%22:%22desktop%22,%22domain%22:%22ntp.msn.com%22,%22locale%22:{%22content%22:{%22language%22:%22en%22,%22market%22:%22us%22},%22display%22:{%22language%22:%22en%22,%22market%22:%22us%22}},%22ocid%22:%22MT004B%22,%22os%22:%22windows%22,%22platform%22:%22web%22,%22pageType%22:%22ntp%22,%22pageExperiments%22:[%22prg-1s-finunit5%22,%22prg-1s-wpocfp1%22,%22prg-1sw-cprefix%22,%22prg-1sw-ctal1%22,%22prg-1sw-enableact%22,%22prg-1sw-exp1-p2%22,%22prg-1sw-fagaipc%22,%22prg-1sw-finored%22,%22prg-1sw-finvldcc%22,%22prg-1sw-fnccombo%22,%22prg-1sw-heavysnow%22,%22prg-1sw-p1wtrclm%22,%22prg-1sw-p2-sdfuu-ho%22,%22prg-1sw-pde0%22,%22prg-1sw-rr2fn%22,%22prg-1sw-rr2fp%22,%22prg-1sw-rxrpbt%22,%22prg-1sw-sa-caqualityscore04%22,%22prg-1sw-sa-vblv_no3d_prod%22,%22prg-1sw-sageu2upc%22,%22prg-1sw-saproditen0%22,%22prg-1sw-shipfin%22,%22prg-1sw-snaccp12%22,%22prg-1sw-snaccp13%22,%22prg-1sw-snaccp1t%22,%22prg-1sw-spaipv2%22,%22prg-1sw-spnot2%22,%22prg-1sw-srdus%22,%22prg-1sw-tbrcounter%22,%22prg-1sw-tfgas-rev%22,%22prg-1sw-twv2en%22,%22prg-1sw-uclam%22,%22prg-1sw-v1tweb2en%22,%22prg-1sw-wxcfinst%22,%22prg-1sw-wxhurac-c%22,%22prg-1sw-wxmptreplace%22,%22prg-1sw-wxovsig%22,%22prg-1sw-wxtr75%22,%22prg-1sw-xaptraffic-cf2%22,%22prg-ad-pdedupe-rf%22,%22prg-adspeek%22,%22prg-autos-cvaos%22,%22prg-bd-top-f2%22,%22prg-boost-p2-ww%22,%22prg-cg-cap-ob-fill2-c%22,%22prg-cg-in-gm-gl-pl%22,%22prg-cg-in-gm-rwd-ads-c%22,%22prg-cg-in-gm-xn-ads%22,%22prg-cg-in-gm-xn-pl-c%22,%22prg-cg-ingames-xn-ads%22,%22prg-cg-notf2-c%22,%22prg-ctr-nocf%22,%22prg-hp-cgin%22,%22prg-hp-stripev2%22,%22prg-msncgstripe%22,%22prg-p2-wxnsmien%22,%22prg-peslt%22,%22prg-pr2-boostww%22,%22prg-pr2-c-railatf%22,%22prg-pr2-fidoptc%22,%22prg-search%22,%22prg-sh-bd-bng%22,%22prg-sh-bd-cb%22,%22prg-sh-bd-cb-03-rate%22,%22prg-sh-bd-df2%22,%22prg-sh-bd-disgb%22,%22prg-sh-bd-msnudarat%22,%22prg-sh-bd-newbanner%22,%22prg-sh-bd-newchckot%22,%22prg-sh-bd-newpdp3%22,%22prg-sh-bd-no-price%22,%22prg-sh-bd-nwchk%22,%22prg-sh-bd-perf%22,%22prg-sh-bd-sson%22,%22prg-sh-bd-strads%22,%22prg-sh-bd-sttop%22,%22prg-sh-bd-udarat%22,%22prg-sh-bd-xtracash%22,%22prg-sh-bdrating%22,%22prg-sh-dealsdaypdp%22,%22prg-sh-frnrc%22,%22prg-sh-pricewc%22,%22prg-sh-pricewct1%22,%22prg-sh-recopdp%22,%22prg-sh-rmitmlnk-c%22,%22prg-sh-sson%22,%22prg-sh-uapiratings%22,%22prg-sh-usecshk%22,%22prg-sh-usecshkpdp%22,%22prg-sld-pre%22,%22prg-sp-liveapi%22,%22prg-spr-bd-optidxv2c%22,%22prg-spr-enstfhp%22,%22prg-strrtng-g1%22,%22prg-uaskafka-t%22,%22prg-ugc-likechange%22,%22prg-upsaip-r-t%22,%22prg-upsaip-w1-t%22,%22prg-upscache-t%22,%22prg-vidad-cmb60%22,%22prg-viewautostsp-c%22,%22prg-wpo-pnpc%22,%22prg-wx-fredlg%22,%22prg-wx-fredlgm%22,%22prg-wxmnns%22]} HTTP/1.1Host: assets.msn.comConnec
Source: global traffic	HTTP traffic detected: GET /shared/edgeweb/b7dd4a4.js HTTP/1.1Host: edgestatic.azureedge.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /shared/edgeweb/0c6fc55.js HTTP/1.1Host: edgestatic.azureedge.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /weathermapdata/1/static/background/v2.0/jpg/sunny.jpg HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; MUIDB=2136D0069C246D353F30C40F9D676C20; _SS=SID=00
Source: global traffic	HTTP traffic detected: GET /th?id=ORMS.1ba6db1e5892f363bafd56fbc865effb&pid=Wdp&w=612&h=304&qlt=90&c=1&rs=1&dpr=1&p=0 HTTP/1.1Host: th.bing.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-MS-GEC: 31A9747F126316250F67243D1061023017EAB84104F11C1801266F585CB7B15ASec-MS-GEC-Version: 1-117.0.2045.47Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: MUID=2136D0069C246D353F30C40F9D676C20
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AAywGC0?w=16&h=16&q=100&m=6&f=png&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /staticsb/statics/latest/icons-wc/icons/TrendingLight.svg HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /weathermapdata/1/static/weather/Icons/taskbar_v10/cold.svg HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; MUIDB=2136D0069C246D353F30C40F9D676C20; _SS=SID=00
Source: global traffic	HTTP traffic detected: GET /th?id=ORMS.1408cdc6ba91fcfe70afafc1ce7dff0a&pid=Wdp&w=300&h=156&qlt=90&c=1&rs=1&dpr=1&p=0 HTTP/1.1Host: th.bing.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-MS-GEC: 31A9747F126316250F67243D1061023017EAB84104F11C1801266F585CB7B15ASec-MS-GEC-Version: 1-117.0.2045.47Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: MUID=2136D0069C246D353F30C40F9D676C20
Source: global traffic	HTTP traffic detected: GET /th?id=ORMS.47d5965c126fecffb10d5127191d7763&pid=Wdp&w=612&h=304&qlt=90&c=1&rs=1&dpr=1&p=0 HTTP/1.1Host: th.bing.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-MS-GEC: 31A9747F126316250F67243D1061023017EAB84104F11C1801266F585CB7B15ASec-MS-GEC-Version: 1-117.0.2045.47Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: MUID=2136D0069C246D353F30C40F9D676C20
Source: global traffic	HTTP traffic detected: GET /th?id=ORMS.13ea43a651ff6493c22a7207123d9055&pid=Wdp&w=612&h=304&qlt=90&c=1&rs=1&dpr=1&p=0 HTTP/1.1Host: th.bing.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-MS-GEC: 31A9747F126316250F67243D1061023017EAB84104F11C1801266F585CB7B15ASec-MS-GEC-Version: 1-117.0.2045.47Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: MUID=2136D0069C246D353F30C40F9D676C20
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA42cl9?w=16&h=16&q=100&m=6&f=png&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA15spNo.img?w=16&h=16&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/BBNvr53.img?w=16&h=16&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AAywGC0.img?w=16&h=16&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA1l83GT?w=16&h=16&q=100&m=6&f=png&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/BB16AQdF?w=16&h=16&q=100&m=6&f=png&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/nextdoor-card.437034546d0a289e581a.js HTTP/1.1Host: assets.msn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /weathermapdata/1/static/weather/Icons/taskbar_v10/NoColor_Card/rightArrow.svg HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; MUIDB=2136D0069C246D353F30C40F9D676C20; _SS=SID=00
Source: global traffic	HTTP traffic detected: GET /weathermapdata/1/static/weather/Icons/taskbar_v10/Condition_Card/ClearNightV3.svg HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; MUIDB=2136D0069C246D353F30C40F9D676C20; _SS=SID=00
Source: global traffic	HTTP traffic detected: GET /weathermapdata/1/static/weather/Icons/taskbar_v10/NoColor_Card/waterDrop.svg HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; MUIDB=2136D0069C246D353F30C40F9D676C20; _SS=SID=00
Source: global traffic	HTTP traffic detected: GET /staticsb/statics/latest/icons/NtpTopStories.svg HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; MUIDB=2136D0069C246D353F30C40F9D676C20; _SS=SID=00
Source: global traffic	HTTP traffic detected: GET /shared/edgeweb/css/5ac15a1.css HTTP/1.1Host: edgestatic.azureedge.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /staticsb/statics/latest/icons-wc/icons/traffic/TrafficTitle.svg HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; MUIDB=2136D0069C246D353F30C40F9D676C20; _SS=SID=00
Source: global traffic	HTTP traffic detected: GET /REST/v1/Imagery/Map/RoadVibrant/40.7360,-73.9273/13?ms=266,192&ml=Basemap,OsmBuildings,TrafficFlow&key=AoyTpSR4rZ82ACunlVljE1ihA5yanCDx6D-acnj31k3Qp4hmUjE-uBGXnMPa1L94&c=en-us&fmt=png&od=1&logo=n&da=ro&maxAge=1200&pushpin=40.736003,-73.927275;cnst.f HTTP/1.1Host: ecn-us.dev.virtualearth.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /shared/edgeweb/css/97dbb03.css HTTP/1.1Host: edgestatic.azureedge.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /shared/edgeweb/css/676e4a6.css HTTP/1.1Host: edgestatic.azureedge.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /shared/edgeweb/css/2c1a379.css HTTP/1.1Host: edgestatic.azureedge.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/pill-wc.d069865e9104f4bc5917.js HTTP/1.1Host: assets.msn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /shared/edgeweb/css/63e3356.css HTTP/1.1Host: edgestatic.azureedge.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /shared/edgeweb/css/029223e.css HTTP/1.1Host: edgestatic.azureedge.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /shared/edgeweb/css/069d68d.css HTTP/1.1Host: edgestatic.azureedge.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/common-fast-msft-web-components.28ad475ec08175ee00d3.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/poweredByData.92964448d29db84543e7.js HTTP/1.1Host: assets.msn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/libs_experiences-telemetry-data-mapper_dist_helpers_TelemetryObjectForBehaviorType_js-libs_fe-fc6773.facf011cfc8d53d217a7.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /shared/edgeweb/4af7371.js HTTP/1.1Host: edgestatic.azureedge.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/libs_sports-data-service_dist_SportsDataMapper_js.6f14df7ca3d855f79932.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/libs_feed-layout_dist_card-templates_top-stories-card_TopStoriesCardDataMapper_js-libs_feed-l-1afd74.2e82a29e33833a0c1055.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/weather-card-wc.7979f047935ee43a48d8.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /service/msn/user?apikey=1hYoJsIRvPEnSkk0hlnJF2092mHqiz7xFenIFKa9uc&activityId=07358B43-4719-4149-9E61-F4325F4E0424&ocid=pdp-peregrine&cm=en-us&it=app&user=m-2136D0069C246D353F30C40F9D676C20 HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: _C_Auth=; USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; MUIDB=2136D0069C246D353F30C40F9D676C20; _SS=SID=00
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/traffic-card-wc.f9bc3ae43f2351c4fe72.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /service/News/Users/me/Rewards?apikey=1hYoJsIRvPEnSkk0hlnJF2092mHqiz7xFenIFKa9uc&activityId=07358B43-4719-4149-9E61-F4325F4E0424&ocid=rewards-peregrine&cm=en-us&it=app&user=m-2136D0069C246D353F30C40F9D676C20&scn=APP_ANON&version=2 HTTP/1.1Host: assets.msn.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: _C_Auth=; USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; MUIDB=2136D0069C246D353F30C40F9D676C20; _SS=SID=00
Source: global traffic	HTTP traffic detected: GET /shared/edgeweb/2089cbe.js HTTP/1.1Host: edgestatic.azureedge.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /service/segments/recoitems/shopping?$filter=ebay.com,msn.com&$select=BatchStoresCashbackWorkflow&activityId=749e3d6c9c1d4ea9c893e2c6c48babd1&apiKey=ogTIEkUJTNRKfuviV6imfOBW6i874Wsn2XeWZBW83k&cm=en-us&ocid=anaheim-shopping-topsites HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; MUIDB=2136D0069C246D353F30C40F9D676C20; _SS=SID=00; _C_ETH=1
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/real-estate-card.1ebb35808932c691cf18.js HTTP/1.1Host: assets.msn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /content/v1/cms/api/amp/Document/BBI4MeJ HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /shared/edgeweb/e575734.js HTTP/1.1Host: edgestatic.azureedge.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/toast-wc.88317531b642eeef7348.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/dompurify-library.439652e2348091e52459.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /setuid?partner=microsoftSsp&dbredirect=true&dnt=0&gdpr=0&gdpr_consent= HTTP/1.1Host: px.ads.linkedin.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/social-bar-wc.eab7adce9d3aec38f5e1.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /mapuid?suid=2136D0069C246D353F30C40F9D676C20&sid=16&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /cksync.php?type=nms&cs=3&ovsid=2136D0069C246D353F30C40F9D676C20&gdpr=0&gdpr_consent= HTTP/1.1Host: hbx.media.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /m?cdsp=516415&c=2136D0069C246D353F30C40F9D676C20&mode=inverse&msn_src=ntp&&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.mgid.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /uidmappixel?ext_uid=2136D0069C246D353F30C40F9D676C20&pname=MSN&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.outbrain.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /sg/msn/1/cm?taboola_hm=2136D0069C246D353F30C40F9D676C20&gdpr=0&gdpr_consent= HTTP/1.1Host: trc.taboola.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/weather-card-wc-init-account-type.ec5511d59ad31a725a33.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /staticsb/statics/latest/interests-manager/interest-fre-header.png HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; MUIDB=2136D0069C246D353F30C40F9D676C20; _SS=SID=00
Source: global traffic	HTTP traffic detected: GET /shared/edgeweb/d9135b6.js HTTP/1.1Host: edgestatic.azureedge.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /sync/msn?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/web-components_traffic-card_dist_index_js.7dd615b29fbed0e07b71.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA13DuSa.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AAtK5aP.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AAtJYsP.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /visitor/sync?uid=9871605be8d4b2a982914bf5c9348e7b&name=MSN&visitor=2136D0069C246D353F30C40F9D676C20&external=true&gdpr=0&gdpr_consent= HTTP/1.1Host: visitor.omnitagjs.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA1911iL.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA163JKI.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /sync?ssp=msn&id=2136D0069C246D353F30C40F9D676C20&gdpr=0&gdpr_consent= HTTP/1.1Host: code.yengo.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA19O7qe.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /service/segments/recoitems/shopping?$filter=ebay.com,msn.com&$select=BatchStoresCashbackWorkflow&activityId=d749b6f214fb4679f43b4425f389c544&apiKey=ogTIEkUJTNRKfuviV6imfOBW6i874Wsn2XeWZBW83k&cm=en-us&ocid=anaheim-shopping-topsites HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: _C_Auth=; USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; MUIDB=2136D0069C246D353F30C40F9D676C20; _SS=SID=00; _C_ETH=1
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/select-carousel.e0371dfc8168bf7083f6.js HTTP/1.1Host: assets.msn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /getuid?ld=1&gdpr=0&cmp_cs=&us_privacy= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA19I1ex.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/web-components_super-cards_dist_cards_super-infopane_CardActionTemplates_js.2c3fb7de7612b1fcd279.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/publisher-subscribe-follow-button.c0e0939dcdddedb7068b.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA1e73r2.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA163low.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA1a2iS9.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /getuid?https://c.bing.com/c.gif?anx_uid=$UID&Red3=MSAN_pd&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /oRTB?redirect={PubRedirectUrl}&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.inmobi.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /cs/msn?id=2136D0069C246D353F30C40F9D676C20&gdpr=0&gdpr_consent= HTTP/1.1Host: trace.mediago.ioConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AAtJV1E.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /mapuid?member=280&user=2136D0069C246D353F30C40F9D676C20;&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fm.adnxs.com%2Fseg%3Fadd%3D5159620%26redir%3Dhttps%253A%252F%252Fib.adnxs.com%252Fsetuid%253Fentity%253D483%2526code%253D2136D0069C246D353F30C40F9D676C20%2526gdpr%253D0%2526gdpr_consent%253D HTTP/1.1Host: m.adnxs.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA1e8B7k.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /shared/edgeweb/d9be31d.js HTTP/1.1Host: edgestatic.azureedge.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/super-nav-coach-mark.5cb7eb9eada750e1f168.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ntp.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /shared/edgeweb/5543c8e.js HTTP/1.1Host: edgestatic.azureedge.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /shared/edgeweb/8675ee9.js HTTP/1.1Host: edgestatic.azureedge.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA19WLjq.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /cs/msn?id=2136D0069C246D353F30C40F9D676C20&gdpr=0&gdpr_consent= HTTP/1.1Host: trace.popin.ccConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA19JHhj.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fc.bing.com%2Fc.gif%3Fanx_uid%3D%24UID%26Red3%3DMSAN_pd%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: XANDR_PANID=AMF5BzG0c98h7ITTneAaVFNcIOAH2caroG7o2-nOVrrsu-W9ZiwfkE4-hluZSzDfJK-rx-EhSsoxcQY7Vt275KSNSpotjIGiRcAbCm5Vphs.; uuid2=5253291415427901022
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fmapuid%3Fmember%3D280%26user%3D2136D0069C246D353F30C40F9D676C20%3B%26gdpr%3D0%26gdpr_consent%3D%26redir%3Dhttps%253A%252F%252Fm.adnxs.com%252Fseg%253Fadd%253D5159620%2526redir%253Dhttps%25253A%25252F%25252Fib.adnxs.com%25252Fsetuid%25253Fentity%25253D483%252526code%25253D2136D0069C246D353F30C40F9D676C20%252526gdpr%25253D0%252526gdpr_consent%25253D HTTP/1.1Host: m.adnxs.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: XANDR_PANID=oySA8MClCQH7vbMGE-366hkJmbFF6sBQH8b7tCh0g9T614FCL8E5Som0MfPdgTlsxXNw_Sx_8x7bw3Qqglqc7uoVjzYt5aQCvo8EqByReEU.; uuid2=6324846154276582513
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AAtKhln.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AAtK5fd.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/shopping-card-wce.fc63d4b59e942b8d82be.js HTTP/1.1Host: assets.msn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/BB15WdTm.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA19JlZb.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/BBEK0AD.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /i/495/0.gif?gdpr_consent=&gdpr=0&callback= HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA163k2h.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AAufg2e.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /seg?add=5159620&redir=https%3A%2F%2Fib.adnxs.com%2Fsetuid%3Fentity%3D483%26code%3D2136D0069C246D353F30C40F9D676C20%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1Host: m.adnxs.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: XANDR_PANID=_mTLHUjwEGsYdt5wx57SYNZmmEk8m3oPxp4vPtekqr4U9eF7TielXmn7cqxjLl4FnC9Pyk2a6uF3y1J-YtkHIeW4pOT_IjqkaUEKbGipwaA.; anj=dTM7k!M4/8CxrEQF']wIg2GTsq'-(%!]tbP6j2F-XstGt!@DWZ$h:W'; uuid2=6324846154276582513
Source: global traffic	HTTP traffic detected: GET /shared/edgeweb/954ecf0.js HTTP/1.1Host: edgestatic.azureedge.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA19WyNz.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AAtJSmw.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA1a84bh.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /shared/cms/lrs1c69a1j/logos/5a74283229e24d0ca59fb94ed941c3a0.png HTTP/1.1Host: edgestatic.azureedge.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA1a8lf8.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/shopping-events-deal-card.fa55d71e81238c262037.js HTTP/1.1Host: assets.msn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA1a8uES.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA16sXzp.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /mapuid?member=280&user=2136D0069C246D353F30C40F9D676C20&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fm.adnxs.com%2Fseg%3Fadd%3D5159620%26redir%3Dhttps%253A%252F%252Fib.adnxs.com%252Fsetuid%253Fentity%253D483%2526code%253D2136D0069C246D353F30C40F9D676C20%2526gdpr%253D0%2526gdpr_consent%253D HTTP/1.1Host: m.adnxs.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: XANDR_PANID=_mTLHUjwEGsYdt5wx57SYNZmmEk8m3oPxp4vPtekqr4U9eF7TielXmn7cqxjLl4FnC9Pyk2a6uF3y1J-YtkHIeW4pOT_IjqkaUEKbGipwaA.; anj=dTM7k!M4/8CxrEQF']wIg2GTsq'-(%!]tbP6j2F-XstGt!@DWZ$h:W'; uuid2=6324846154276582513
Source: global traffic	HTTP traffic detected: GET /setuid?entity=483&code=2136D0069C246D353F30C40F9D676C20&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: uuid2=6324846154276582513; XANDR_PANID=myllpZ44gzPT_pZ4qxLBSL052oaBS9lZ_UzJtRO_s9gAtWhg8ZrbLjZ-ldrqD379JYp4lgN_i7s0gbxFZimEJE_D-wCZhkiLRtsdx0WJris.; anj=dTM7k!M4/8D>6NRF']wIg2GTsq'-(%!fst<)<V)+PlZ[C[-kX-dbbHh
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/BB3YhSJ?w=16&h=16&q=100&m=6&f=png&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/BBph6Sm?w=16&h=16&q=100&m=6&f=png&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA36Tom?w=16&h=16&q=100&m=6&f=png&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AAywOab?w=16&h=16&q=100&m=6&f=png&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/BBNvr53?w=16&h=16&q=100&m=6&f=png&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA1igmhi?w=16&h=16&q=100&m=6&f=png&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/shopping-sd-card.8c52f62f656c03f3cd4c.js HTTP/1.1Host: assets.msn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /c/495/0/0/1.gif?gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /seg?add=5159620&redir=https%3A%2F%2Fib.adnxs.com%2Fsetuid%3Fentity%3D483%26code%3D2136D0069C246D353F30C40F9D676C20%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1Host: m.adnxs.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: uuid2=6324846154276582513; XANDR_PANID=agNsu9ReRXCcgy1HISfIvnHyM1xlkrP0YWY9Dq9FyOkZDgJCzu0pEdMHHZ1_oFieW48Np9O1oYGc5hJ3TfOAcCjhZ265N-DArSbqZL9Uybg.; anj=dTM7k!M4/8CxrEQF']wIg2GTsq'-(%!]tc58bhzs#DIgl#XsfVhRuLP
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AAzMHd0?w=16&h=16&q=100&m=6&f=png&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA17TFZv?w=16&h=16&q=100&m=6&f=png&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/BBtOBsY?w=16&h=16&q=100&m=6&f=png&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA179OEj?w=16&h=16&q=100&m=6&f=png&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA1a7YMQ.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA19Ibq9.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /setuid?entity=483&code=2136D0069C246D353F30C40F9D676C20&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: uuid2=6324846154276582513; XANDR_PANID=4IetkXWoZZtNLGNJ0cb-AqhQhIczE6TRaApvkXU5KMvRVBthT958pVCnd0_WojkVf5Iyp3RPabh0W6kOzFJGPGNqBxa8PZrJ3PvxhU9Xebw.; anj=dTM7k!M4/8D>6NRF']wIg2GTsq'-(%!m5LRe#ns'cd#A^e+.<Q!8n7U[wR/#
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA1a2sH6.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA163kJY.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AAAs0Yp.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AAtJPVD.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA1e6ZHH.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/sports-info.b57b5de78e8c3e24947b.js HTTP/1.1Host: assets.msn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA1a2I3O.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /shared/edgeweb/img/arrow-left.a26976f.svg HTTP/1.1Host: edgestatic.azureedge.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.microsoft.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /shared/edgeweb/img/arrow-right.654b408.svg HTTP/1.1Host: edgestatic.azureedge.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.microsoft.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /shared/edgeweb/fonts/segoeui-vf-display-semibold.1977a17.woff2 HTTP/1.1Host: edgestatic.azureedge.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.microsoft.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://edgestatic.azureedge.net/shared/edgeweb/css/676e4a6.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /shared/edgeweb/fonts/segoeui-vf-display.e85854a.woff2 HTTP/1.1Host: edgestatic.azureedge.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.microsoft.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://edgestatic.azureedge.net/shared/edgeweb/css/676e4a6.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /shared/edgeweb/img/fluent-info.f3f3f3d.svg HTTP/1.1Host: edgestatic.azureedge.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.microsoft.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /shared/edgeweb/img/fluent-qr.0da4543.svg HTTP/1.1Host: edgestatic.azureedge.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.microsoft.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AANXkGJ.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA1e6Z00.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AAtJXs0.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA13Dog2.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA1e6YZU.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA19HRHV.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/sports-match-list.86f101f78317d598ef59.js HTTP/1.1Host: assets.msn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA14twXt.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AAtJQ6K.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA1a8pVP.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AAtJQ83.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA1a8bzM.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /shared/edgeweb/img/fluent-link.cb49784.svg HTTP/1.1Host: edgestatic.azureedge.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.microsoft.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AAY2WeD?w=16&h=16&q=100&m=6&f=png&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /shared/edgeweb/img/fluent-close.a72d9a4.svg HTTP/1.1Host: edgestatic.azureedge.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.microsoft.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-3.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /dmp/up/pixie.js HTTP/1.1Host: acdn.adnxs.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: uuid2=6324846154276582513; anj=dTM7k!M4.FEVNsVF']wIg2GTsq'-(%!m5LRe#nszZ=f1CByY$Nd<y!Ygk1F8glT4he9C6UjGe%zcyL_Eh0oWXlx#Lr8nG7m#e+i>bpRzqF1`b^n:Q@cN
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA1n8mnK.img?w=300&h=156&q=90&m=6&f=jpg&x=1493&y=943&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA12I8qo?w=16&h=16&q=100&m=6&f=png&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/travel-destination.968ea4b102d3cee567ea.js HTTP/1.1Host: assets.msn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tag/edvmnysmkk HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /shared/cms/lrs1c69a1j/section-images/3f7d8e4af23a4f65a4fe44c490942f50.png HTTP/1.1Host: edgestatic.azureedge.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/waterfall-view-feed.acd823fd4382a7f925d4.js HTTP/1.1Host: assets.msn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /li.lms-analytics/insight.min.js HTTP/1.1Host: snap.licdn.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /pixie?e=LandingPage&pi=e8619ae9-c189-46ef-bfc8-f39e0ac838fd&it=1705511259070&v=0.0.20&u=https%3A%2F%2Fwww.microsoft.com%2Fen-gb%2Fedge%2Fwelcome%3Fep%3D254%26form%3DMT00L7%26es%3D59&st=1705511259069&et=1705511259070&if=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: uuid2=6324846154276582513; anj=dTM7k!M4.FEVNsVF']wIg2GTsq'-(%!m5LRe#nszZ=f1CByY$Nd<y!Ygk1F8glT4he9C6UjGe%zcyL_Eh0oWXlx#Lr8nG7m#e+i>bpRzqF1`b^n:*Q@cN
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/weather-card-wc-deferred.2655ffd88761419c04f5.js HTTP/1.1Host: assets.msn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /shared/edgeweb/img/fluent-centered-play.069bb71.svg HTTP/1.1Host: edgestatic.azureedge.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.microsoft.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /shared/edgeweb/img/fluent-bold-play.9b1100e.svg HTTP/1.1Host: edgestatic.azureedge.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.microsoft.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /shared/edgeweb/img/fluent-bold-refresh.2078820.svg HTTP/1.1Host: edgestatic.azureedge.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.microsoft.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /shared/edgeweb/img/fluent-bold-up.5232098.svg HTTP/1.1Host: edgestatic.azureedge.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.microsoft.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /shared/edgeweb/img/fluent-bold-down.52a4c29.svg HTTP/1.1Host: edgestatic.azureedge.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.microsoft.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/weather-minimap-wc.183a1248bcaaadf24897.js HTTP/1.1Host: assets.msn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /shared/cms/lrs1c69a1j/section-images/f387152096bf40159e24d6e45c2d82cd.png HTTP/1.1Host: edgestatic.azureedge.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /shared/cms/lrs1c69a1j/section-images/166ba0e92d8b4ad0b18bdf3455bfce5c.jpg HTTP/1.1Host: edgestatic.azureedge.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /shared/cms/lrs1c69a1j/section-images/007727067ab54281b51ab6f7f6fa82b6.jpg HTTP/1.1Host: edgestatic.azureedge.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /bundles/v1/edgeChromium/latest/web-components_native-ad-video_dist_index_js.1fb7ba016bba38edad90.js HTTP/1.1Host: assets.msn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA1cLbwq?w=168&h=168&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /shared/cms/lrs1c69a1j/section-images/bcc5763b4a00425dbbc61ff5f745e67a.jpg HTTP/1.1Host: edgestatic.azureedge.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /shared/cms/lrs1c69a1j/section-images/4133408e7272452bae43ed64ad95c7c7.jpg HTTP/1.1Host: edgestatic.azureedge.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /tenant/amp/entityid/AA1cEE23?w=168&h=168&q=60&m=6&f=jpg&u=t HTTP/1.1Host: img-s-msn-com.akamaized.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: /Origin: https://ntp.msn.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ntp.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8

Source: Favicons.11.dr	String found in binary or memory: https://edge.microsoft.com/favicon/v1?client=chrome_desktop&nfrp=2&check_seen=true&size=32&min_size=16&max_size=256&fallback_opts=TYPE,SIZE,URL&url=https://www.facebook.com/&origin=PinningWizard equals www.facebook.com (Facebook)
Source: Favicons.11.dr	String found in binary or memory: https://edge.microsoft.com/favicon/v1?client=chrome_desktop&nfrp=2&check_seen=true&size=32&min_size=16&max_size=256&fallback_opts=TYPE,SIZE,URL&url=https://www.youtube.com/&origin=PinningWizard equals www.youtube.com (Youtube)
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: "url": "https://www.youtube.com" equals www.youtube.com (Youtube)
Source: 000003.log3.11.dr	String found in binary or memory: "www.facebook.com": "{\"Tier1\": [1103, 6061], \"Tier2\": [5445, 1780, 8220]}", equals www.facebook.com (Facebook)
Source: 000003.log3.11.dr	String found in binary or memory: "www.linkedin.com": "{\"Tier1\": [1103, 214, 6061], \"Tier2\": [2771, 9515, 1780, 1303, 1099, 6081, 5581, 9396]}", equals www.linkedin.com (Linkedin)
Source: 000003.log3.11.dr	String found in binary or memory: "www.youtube.com": "{\"Tier1\": [983, 6061, 1103], \"Tier2\": [2413, 8118, 1720, 5007]}", equals www.youtube.com (Youtube)
Source: Favicons.11.dr	String found in binary or memory: ?https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: chromecache_590.1.dr	String found in binary or memory: ["www.l",["www.l","www.lesplan/links","www.logmein123.com remote support","www.lexiacore5","www.labour.gov.on/english/hs/training/workers.php","www.lcbo/giftcards","www.lynxair","www.lindecanada/billpay.ca","http://www.linkedin.com","http://www.lululemon.com"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestrelevance":[851,601,600,555,554,552,551,550,401,400],"google:suggestsubtypes":[[512,650,433,131],[512],[512,433],[512],[512],[512],[512],[512],[44],[44]],"google:suggesttype":["QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","NAVIGATION","NAVIGATION"],"google:verbatimrelevance":851}] equals www.linkedin.com (Linkedin)
Source: Favicons.11.dr	String found in binary or memory: https://edge.microsoft.com/favicon/v1?client=chrome_desktop&nfrp=2&check_seen=true&size=32&min_size=16&max_size=256&fallback_opts=TYPE,SIZE,URL&url=https://www.youtube.com/&origin=PinningWizard equals www.youtube.com (Youtube)
Source: Favicons.11.dr	String found in binary or memory: https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: load_statistics.db-wal.11.dr	String found in binary or memory: www.microsoft.comconnect.facebook.net equals www.facebook.com (Facebook)

Source: unknown

DNS traffic detected: queries for: livespoints.com

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Length: 0Content-Type: application/jsonCache-Control: privateX-EventID: 65a80936d2664633b348f065c50aafccUserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=X-XSS-Protection: 0P3P: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"Date: Wed, 17 Jan 2024 17:07:02 GMTConnection: closeAlt-Svc: h3=":443"; ma=93600X-CDN-TraceID: 0.15ed0117.1705511222.64fc8f4
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Access-Control-Allow-Headers: TicketType,RequestContinuationKey,AuthToken,Content-Type,x-client-activityid,ms-cv,OneSvc-Uni-Feat-Tun,signedInCookieName,muid,appid,User-Location,user-location,userauthtoken,usertickettype,sitename,s2sauthtoken,thumbprint,Authorization,Ent-Authorization,UserIdToken,DDD-TMPL,DDD-ActivityId,DDD-FeatureSet,DDD-Session-ID,Date,date,ads-referer,ads-referer,taboola-sessionId,taboola-sessionid,Akamai-Request-ID,Akamai-Server-IP,X-MSEdge-Ref,DDD-DebugId,s-xbox-token,OneWebServiceLatency,X-FD-Features,DDD-UserType,traceparent,Widgets,MutedAccess-Control-Expose-Headers: TicketType,RequestContinuationKey,AuthToken,Content-Type,x-client-activityid,ms-cv,OneSvc-Uni-Feat-Tun,signedInCookieName,muid,appid,User-Location,user-location,userauthtoken,usertickettype,sitename,s2sauthtoken,thumbprint,Authorization,Ent-Authorization,UserIdToken,DDD-TMPL,DDD-ActivityId,DDD-FeatureSet,DDD-Session-ID,Date,date,ads-referer,ads-referer,taboola-sessionId,taboola-sessionid,Akamai-Request-ID,Akamai-Server-IP,X-MSEdge-Ref,DDD-DebugId,s-xbox-token,OneWebServiceLatency,X-FD-Features,DDD-UserType,traceparent,Widgets,MutedDDD-AuthenticatedWithJwtFlow: FalseDDD-UserType: AnonymousMuidDDD-ActivityId: 65a80940-5e08-4234-87a7-b8c5b589250bDDD-StrategyExecutionLatency: 00:00:00.0059832,00:00:00.0061583DDD-DebugId: 65a80940-5e08-4234-87a7-b8c5b589250b\|2024-01-17T17:07:12.6788819Z\|fabric_msn\|EUS1\|News_120OneWebServiceLatency: 7X-MSEdge-ResponseInfo: 7Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UAX-Ceto-ref: 65a80940aae441b2aea145d102cec6fa\|2024-01-17T17:07:12.674ZX-MSEdge-Ref: Ref A: 72AB45BF78B2419CB36854E72A64C186 Ref B: EWR30EDGE1120 Ref C: 2024-01-17T17:07:12ZExpires: Wed, 17 Jan 2024 17:07:12 GMTDate: Wed, 17 Jan 2024 17:07:12 GMTContent-Length: 74Connection: closeSet-Cookie: _C_ETH=1; expires=Tue, 16 Jan 2024 17:07:12 GMT; domain=.msn.com; path=/; secure; httponlySet-Cookie: _C_Auth=Set-Cookie: MUIDB=2136D0069C246D353F30C40F9D676C20; expires=Mon, 10 Feb 2025 17:07:12 GMT; path=/; httponlyAkamai-Request-BC: [a=23.218.242.10,b=89859130,c=g,n=US_NJ_EDISON,o=20940],[a=204.79.197.203,c=o]Server-Timing: clientrtt; dur=88, clienttt; dur=25, origin; dur=24 , cdntime; dur=1Akamai-Cache-Status: NotCacheable from childAkamai-Server-IP: 23.218.242.10Akamai-Request-ID: 55b243aAccess-Control-Allow-Methods: PUT,PATCH,POST,GET,OPTIONS,DELETEAccess-Control-Allow-Credentials: trueAccess-Control-Allow-Origin: https://ntp.msn.comX-AS-SuppressSetCookie: 1Cache-Control: private, max-age=0report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]}
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Access-Control-Allow-Headers: TicketType,RequestContinuationKey,AuthToken,Content-Type,x-client-activityid,ms-cv,OneSvc-Uni-Feat-Tun,signedInCookieName,muid,appid,User-Location,user-location,userauthtoken,usertickettype,sitename,s2sauthtoken,thumbprint,Authorization,Ent-Authorization,UserIdToken,DDD-TMPL,DDD-ActivityId,DDD-FeatureSet,DDD-Session-ID,Date,date,ads-referer,ads-referer,taboola-sessionId,taboola-sessionid,Akamai-Request-ID,Akamai-Server-IP,X-MSEdge-Ref,DDD-DebugId,s-xbox-token,OneWebServiceLatency,X-FD-Features,DDD-UserType,traceparent,Widgets,MutedAccess-Control-Expose-Headers: TicketType,RequestContinuationKey,AuthToken,Content-Type,x-client-activityid,ms-cv,OneSvc-Uni-Feat-Tun,signedInCookieName,muid,appid,User-Location,user-location,userauthtoken,usertickettype,sitename,s2sauthtoken,thumbprint,Authorization,Ent-Authorization,UserIdToken,DDD-TMPL,DDD-ActivityId,DDD-FeatureSet,DDD-Session-ID,Date,date,ads-referer,ads-referer,taboola-sessionId,taboola-sessionid,Akamai-Request-ID,Akamai-Server-IP,X-MSEdge-Ref,DDD-DebugId,s-xbox-token,OneWebServiceLatency,X-FD-Features,DDD-UserType,traceparent,Widgets,MutedDDD-AuthenticatedWithJwtFlow: FalseDDD-UserType: AnonymousMuidDDD-ActivityId: 65a80946-3e14-4089-91da-301ee0c72609DDD-StrategyExecutionLatency: 00:00:00.0059299,00:00:00.0061162DDD-DebugId: 65a80946-3e14-4089-91da-301ee0c72609\|2024-01-17T17:07:18.5238574Z\|fabric_msn\|EUS1\|News_400OneWebServiceLatency: 7X-MSEdge-ResponseInfo: 7Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UAX-Ceto-ref: 65a80946463a4695a8b2a7c8458b8dca\|2024-01-17T17:07:18.506ZX-MSEdge-Ref: Ref A: 4737DF9802F946E0A7F711B1D8DA1B31 Ref B: EWR311000101047 Ref C: 2024-01-17T17:07:18ZExpires: Wed, 17 Jan 2024 17:07:18 GMTDate: Wed, 17 Jan 2024 17:07:18 GMTContent-Length: 74Connection: closeSet-Cookie: _C_ETH=1; expires=Tue, 16 Jan 2024 17:07:18 GMT; domain=.msn.com; path=/; secure; httponlySet-Cookie: _C_Auth=Akamai-Request-BC: [a=23.218.242.10,b=89868094,c=g,n=US_NJ_EDISON,o=20940],[a=204.79.197.203,c=o]Server-Timing: clientrtt; dur=90, clienttt; dur=50, origin; dur=46 , cdntime; dur=4Akamai-Cache-Status: NotCacheable from childAkamai-Server-IP: 23.218.242.10Akamai-Request-ID: 55b473eAccess-Control-Allow-Methods: PUT,PATCH,POST,GET,OPTIONS,DELETEAccess-Control-Allow-Credentials: trueAccess-Control-Allow-Origin: https://ntp.msn.comX-AS-SuppressSetCookie: 1Cache-Control: private, max-age=0report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]}nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1}Tim
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-Cache: CONFIG_NOCACHEAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionX-MSEdge-Ref: Ref A: E26EB66C749343E7AE13020B0CB83A0F Ref B: BL2AA2010201011 Ref C: 2024-01-17T17:07:31ZDate: Wed, 17 Jan 2024 17:07:31 GMTConnection: closeContent-Length: 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Access-Control-Allow-Headers: TicketType,RequestContinuationKey,AuthToken,Content-Type,x-client-activityid,ms-cv,OneSvc-Uni-Feat-Tun,signedInCookieName,muid,appid,User-Location,user-location,userauthtoken,usertickettype,sitename,s2sauthtoken,thumbprint,Authorization,Ent-Authorization,UserIdToken,DDD-TMPL,DDD-ActivityId,DDD-FeatureSet,DDD-Session-ID,Date,date,ads-referer,ads-referer,taboola-sessionId,taboola-sessionid,Akamai-Request-ID,Akamai-Server-IP,X-MSEdge-Ref,DDD-DebugId,s-xbox-token,OneWebServiceLatency,X-FD-Features,DDD-UserType,traceparent,Widgets,MutedAccess-Control-Expose-Headers: TicketType,RequestContinuationKey,AuthToken,Content-Type,x-client-activityid,ms-cv,OneSvc-Uni-Feat-Tun,signedInCookieName,muid,appid,User-Location,user-location,userauthtoken,usertickettype,sitename,s2sauthtoken,thumbprint,Authorization,Ent-Authorization,UserIdToken,DDD-TMPL,DDD-ActivityId,DDD-FeatureSet,DDD-Session-ID,Date,date,ads-referer,ads-referer,taboola-sessionId,taboola-sessionid,Akamai-Request-ID,Akamai-Server-IP,X-MSEdge-Ref,DDD-DebugId,s-xbox-token,OneWebServiceLatency,X-FD-Features,DDD-UserType,traceparent,Widgets,MutedDDD-AuthenticatedWithJwtFlow: FalseDDD-UserType: AnonymousMuidDDD-ActivityId: 65a80956-ac8d-4777-9abd-f410aaf55990DDD-StrategyExecutionLatency: 00:00:00.0093750,00:00:00.0097478DDD-DebugId: 65a80956-ac8d-4777-9abd-f410aaf55990\|2024-01-17T17:07:34.2806504Z\|fabric_msn\|EUS1\|News_461OneWebServiceLatency: 13X-MSEdge-ResponseInfo: 13Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UAX-Ceto-ref: 65a80956d7be4a99b063871bc6df4e74\|2024-01-17T17:07:34.234ZX-MSEdge-Ref: Ref A: 25606A4D4C624D63BB8C0736F774CF39 Ref B: EWR30EDGE0909 Ref C: 2024-01-17T17:07:34ZExpires: Wed, 17 Jan 2024 17:07:34 GMTDate: Wed, 17 Jan 2024 17:07:34 GMTContent-Length: 74Connection: closeSet-Cookie: _C_ETH=1; domain=.msn.com; path=/; secure; httponlySet-Cookie: _C_Auth=Akamai-Request-BC: [a=23.218.242.10,b=89892712,c=g,n=US_NJ_EDISON,o=20940],[a=204.79.197.203,c=o]Server-Timing: clientrtt; dur=88, clienttt; dur=81, origin; dur=80 , cdntime; dur=1Akamai-Cache-Status: NotCacheable from childAkamai-Server-IP: 23.218.242.10Akamai-Request-ID: 55ba768Access-Control-Allow-Methods: PUT,PATCH,POST,GET,OPTIONS,DELETEAccess-Control-Allow-Credentials: trueAccess-Control-Allow-Origin: https://ntp.msn.comX-AS-SuppressSetCookie: 1Cache-Control: private, max-age=0report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]}nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1}Timing-Allow-Origin: *Akamai-GRN: 0.0af2

Source: chromecache_588.1.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_599.1.dr	String found in binary or memory: http://livespoints.com/sso.dsv.com
Source: chromecache_603.1.dr	String found in binary or memory: http://typekit.com/eulas/0000000000000000000176ff
Source: chromecache_603.1.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000017701
Source: chromecache_603.1.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000017702
Source: chromecache_603.1.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000017703
Source: chromecache_603.1.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000017704
Source: chromecache_603.1.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000017706
Source: chromecache_590.1.dr	String found in binary or memory: http://www.linkedin.com
Source: chromecache_602.1.dr	String found in binary or memory: http://www.live.com
Source: chromecache_602.1.dr	String found in binary or memory: http://www.livebarn.com
Source: chromecache_601.1.dr	String found in binary or memory: http://www.livescience.com
Source: chromecache_601.1.dr, chromecache_602.1.dr	String found in binary or memory: http://www.livescore.com
Source: chromecache_601.1.dr	String found in binary or memory: http://www.livesinthebalance.org
Source: chromecache_601.1.dr	String found in binary or memory: http://www.livesoccertv.com
Source: chromecache_602.1.dr	String found in binary or memory: http://www.livewell.com
Source: chromecache_590.1.dr	String found in binary or memory: http://www.lululemon.com
Source: Reporting and NEL.12.dr	String found in binary or memory: https://aefd.nelreports.net/api/report?cat=bingcsp
Source: Reporting and NEL.12.dr	String found in binary or memory: https://aefd.nelreports.net/api/report?cat=bingth
Source: chromecache_600.1.dr	String found in binary or memory: https://assets.adobedtm.com/d4d114c60e50/a0e989131fd5/launch-2c94beadc94f-development.min.js
Source: chromecache_600.1.dr	String found in binary or memory: https://assets.adobedtm.com/d4d114c60e50/a0e989131fd5/launch-5dd5dd2177e6.min.js
Source: 2cc80dabc69f58b6_1.11.dr	String found in binary or memory: https://assets.msn.com/service/news/feed/pages/ntp
Source: 2cc80dabc69f58b6_1.11.dr	String found in binary or memory: https://assets.msn.com/service/news/feed/pages/weblayout
Source: 2cc80dabc69f58b6_1.11.dr	String found in binary or memory: https://assets.msn.com/serviceak/news/feed/pages/ntp
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://bard.google.com/
Source: 2cc80dabc69f58b6_1.11.dr	String found in binary or memory: https://bit.ly/wb-precache
Source: Reporting and NEL.12.dr	String found in binary or memory: https://bzib.nelreports.net/api/report?cat=bingbusiness
Source: Web Data.11.dr	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: Web Data.11.dr	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: manifest.json.11.dr	String found in binary or memory: https://chrome.google.com/webstore/
Source: manifest.json.11.dr	String found in binary or memory: https://chromewebstore.google.com/
Source: manifest.json0.11.dr	String found in binary or memory: https://clients2.google.com/service/update2/crx
Source: Reporting and NEL.12.dr	String found in binary or memory: https://deff.nelreports.net/api/report
Source: 2cc80dabc69f58b6_0.11.dr	String found in binary or memory: https://deff.nelreports.net/api/report?cat=msn
Source: Reporting and NEL.12.dr	String found in binary or memory: https://deff.nelreports.net/api/report?cat=msnw
Source: manifest.json0.11.dr	String found in binary or memory: https://docs.google.com/
Source: manifest.json0.11.dr	String found in binary or memory: https://drive-autopush.corp.google.com/
Source: manifest.json0.11.dr	String found in binary or memory: https://drive-daily-0.corp.google.com/
Source: manifest.json0.11.dr	String found in binary or memory: https://drive-daily-1.corp.google.com/
Source: manifest.json0.11.dr	String found in binary or memory: https://drive-daily-2.corp.google.com/
Source: manifest.json0.11.dr	String found in binary or memory: https://drive-daily-3.corp.google.com/
Source: manifest.json0.11.dr	String found in binary or memory: https://drive-daily-4.corp.google.com/
Source: manifest.json0.11.dr	String found in binary or memory: https://drive-daily-5.corp.google.com/
Source: manifest.json0.11.dr	String found in binary or memory: https://drive-daily-6.corp.google.com/
Source: manifest.json0.11.dr	String found in binary or memory: https://drive-preprod.corp.google.com/
Source: manifest.json0.11.dr	String found in binary or memory: https://drive-staging.corp.google.com/
Source: manifest.json0.11.dr	String found in binary or memory: https://drive.google.com/
Source: Web Data.11.dr	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: Web Data.11.dr	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: Web Data.11.dr	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: 000003.log3.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/addressbar_uu_files.en-gb/1.0.2/asset?sv=2017-07-29&sr
Source: 000003.log3.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/arbitration_priority_list/4.0.5/asset?sv=2017-07-29&sr
Source: 000003.log2.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/domains_config_gz/2.8.75/asset?sv=2017-07-29&sr=c&sig=
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_163_music.png/1.0.3/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_M365_dark.png/1.7.32/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_M365_hc.png/1.7.32/asset
Source: HubApps Icons.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_M365_light.png/1.7.32/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_action_center_hc.png/1.2.1/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_action_center_maximal_dark.png/1.2.1/ass
Source: HubApps Icons.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_action_center_maximal_light.png/1.2.1/as
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_amazon_music_light.png/1.4.13/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_apple_music.png/1.4.12/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_bard_light.png/1.0.1/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_active_dark.png/1.1.17/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_active_dark.png/1.6.8/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_active_light.png/1.1.17/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_active_light.png/1.6.8/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_hc.png/1.1.17/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_hc.png/1.6.8/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_collections_hc.png/1.0.3/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_collections_maximal_dark.png/1.0.3/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_collections_maximal_light.png/1.0.3/asse
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_deezer.png/1.4.12/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_demo_dark.png/1.0.6/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_demo_light.png/1.0.6/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_designer_color.png/1.0.14/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_designer_hc.png/1.0.14/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_edrop_hc.png/1.1.12/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_edrop_maximal_dark.png/1.1.12/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr, HubApps Icons.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_edrop_maximal_light.png/1.1.12/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_etree_hc.png/1.2.0/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_etree_maximal_dark.png/1.2.0/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_etree_maximal_light.png/1.2.0/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_excel.png/1.7.32/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_facebook_messenger.png/1.5.14/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_gaana.png/1.0.3/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_hc.png/1.7.1/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_hc_controller.png/1.7.1/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_hc_joystick.png/1.7.1/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_maximal_dark.png/1.7.1/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_maximal_dark_controller.png/1.7.1/
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_maximal_dark_joystick.png/1.7.1/as
Source: HubApps Icons.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_maximal_light.png/1.7.1/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_maximal_light_controller.png/1.7.1
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_maximal_light_joystick.png/1.7.1/a
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_gmail.png/1.5.4/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_help.png/1.0.0/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_history_hc.png/0.1.3/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_history_maximal_dark.png/0.1.3/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_history_maximal_light.png/0.1.3/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_iHeart.png/1.0.3/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_image_creator_hc.png/1.0.14/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_image_creator_maximal_dark.png/1.0.14/as
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_image_creator_maximal_light.png/1.0.14/a
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_instagram.png/1.4.13/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_ku_gou.png/1.0.3/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_last.png/1.0.3/asset
Source: 000003.log3.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_manifest_gz/4.7.107/asset?sv=2017-07-29&
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_maximal_follow_dark.png/1.1.0/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_maximal_follow_hc.png/1.1.0/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_maximal_follow_light.png/1.1.0/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_naver_vibe.png/1.0.3/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_onenote_dark.png/1.4.9/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_onenote_hc.png/1.4.9/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_onenote_light.png/1.4.9/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_outlook_dark.png/1.9.10/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_outlook_hc.png/1.9.10/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr, HubApps Icons.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_outlook_light.png/1.9.10/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_performance_hc.png/1.1.0/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_performance_maximal_dark.png/1.1.0/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_performance_maximal_light.png/1.1.0/asse
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_power_point.png/1.7.32/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_qq.png/1.0.3/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_refresh_dark.png/1.1.12/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_refresh_hc.png/1.1.12/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_refresh_light.png/1.1.12/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_rewards_hc.png/1.1.3/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_rewards_maximal_dark.png/1.1.3/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_rewards_maximal_light.png/1.1.3/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_search_hc.png/1.3.6/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_search_maximal_dark.png/1.3.6/asset
Source: HubApps Icons.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_search_maximal_light.png/1.3.6/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_dark.png/1.1.12/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_dark.png/1.4.0/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_dark.png/1.5.13/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_hc.png/1.1.12/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_hc.png/1.4.0/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_hc.png/1.5.13/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_light.png/1.1.12/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_light.png/1.4.0/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_light.png/1.5.13/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_shopping_hc.png/1.4.0/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_shopping_maximal_dark.png/1.4.0/asset
Source: HubApps Icons.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_shopping_maximal_light.png/1.4.0/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_skype_dark.png/1.3.20/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_skype_hc.png/1.3.20/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_skype_light.png/1.3.20/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_sound_cloud.png/1.0.3/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_spotify.png/1.4.12/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_teams_dark.png/1.2.19/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_teams_hc.png/1.2.19/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_teams_light.png/1.2.19/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_telegram.png/1.0.4/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_theater_hc.png/1.0.5/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_theater_maximal_dark.png/1.0.5/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_theater_maximal_light.png/1.0.5/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_tidal.png/1.0.3/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_tik_tok_light.png/1.0.5/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_toolbox_hc.png/1.5.13/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_toolbox_maximal_dark.png/1.5.13/asset
Source: HubApps Icons.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_toolbox_maximal_light.png/1.5.13/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_twitter_light.png/1.0.9/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_vk.png/1.0.3/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_whats_new.png/1.0.0/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_whatsapp_light.png/1.4.11/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_word.png/1.7.32/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_yandex_music.png/1.0.10/asset
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_youtube.png/1.4.14/asset
Source: 000003.log3.11.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/signal_triggers/1.13.3/asset?sv=2017-07-29&sr=c&sig=Nt
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://excel.new?from=EdgeM365Shoreline
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://gaana.com/
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://i.y.qq.com/n2/m/index.html
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://latest.web.skype.com/?browsername=edge_canary_shoreline
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://m.kugou.com/
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://m.soundcloud.com/
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://m.vk.com/
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://mail.google.com/mail/mu/mp/266/#tl/Inbox
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://manifestdeliveryservice.edgebrowser.microsoft-staging-falcon.io/app/page-context-demo
Source: Cookies.12.dr	String found in binary or memory: https://msn.comXANDR_PANID/$
Source: Cookies.12.dr	String found in binary or memory: https://msn.comXANDR_PANIDv10N
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://music.amazon.com
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://music.apple.com
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://music.yandex.com
Source: 000003.log8.11.dr, 2cc80dabc69f58b6_0.11.dr	String found in binary or memory: https://ntp.msn.com
Source: 000003.log5.11.dr	String found in binary or memory: https://ntp.msn.com/
Source: QuotaManager.11.dr	String found in binary or memory: https://ntp.msn.com/_default
Source: 2cc80dabc69f58b6_1.11.dr	String found in binary or memory: https://ntp.msn.com/edge/ntp/service-worker.js?bundles=latest&riverAgeMinutes=2880&enableNetworkFirs
Source: Session_13349984826961967.11.dr	String found in binary or memory: https://ntp.msn.com/edge/ntp?&form=MT004B&OCID=MT004B
Source: Session_13349984826961967.11.dr	String found in binary or memory: https://ntp.msn.com/edge/ntp?locale=en-GB&title=New%20tab&dsp=1&sp=Bing&isFREModalBackground=1&start
Source: QuotaManager-journal.11.dr, QuotaManager.11.dr	String found in binary or memory: https://ntp.msn.com/ntp.msn.com_default
Source: QuotaManager-journal.11.dr, QuotaManager.11.dr	String found in binary or memory: https://ntp.msn.com/ntp.msn.com_default/m
Source: 2cc80dabc69f58b6_0.11.dr	String found in binary or memory: https://ntp.msn.comService-Worker-Allowed:
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://open.spotify.com
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://outlook.live.com/calendar/view/agenda/quickcapture/moreDetails?isExtension=true
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://outlook.live.com/mail/0/
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://outlook.live.com/mail/compose?isExtension=true
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://outlook.live.com/mail/inbox?isExtension=true&sharedHeader=1&nlp=1&client_flight=outlookedge
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://outlook.office.com/calendar/view/agenda/quickcapture/moreDetails?isExtension=true
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://outlook.office.com/mail/0/
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://outlook.office.com/mail/compose?isExtension=true
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://outlook.office.com/mail/inbox?isExtension=true&sharedHeader=1&client_flight=outlookedge
Source: chromecache_603.1.dr	String found in binary or memory: https://p.typekit.net/p.gif
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://powerpoint.new?from=EdgeM365Shoreline
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://tidal.com/
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://twitter.com/
Source: edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1.11.dr	String found in binary or memory: https://unitedstates1.ss.wd.microsoft.us/
Source: edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1.11.dr	String found in binary or memory: https://unitedstates2.ss.wd.microsoft.us/
Source: edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1.11.dr	String found in binary or memory: https://unitedstates4.ss.wd.microsoft.us/
Source: chromecache_603.1.dr	String found in binary or memory: https://use.typekit.net/af/40207f/0000000000000000000176ff/27/
Source: chromecache_603.1.dr	String found in binary or memory: https://use.typekit.net/af/4b3e87/000000000000000000017706/27/
Source: chromecache_603.1.dr	String found in binary or memory: https://use.typekit.net/af/74ffb1/000000000000000000017702/27/
Source: chromecache_603.1.dr	String found in binary or memory: https://use.typekit.net/af/a2527e/000000000000000000017704/27/
Source: chromecache_603.1.dr	String found in binary or memory: https://use.typekit.net/af/cb695f/000000000000000000017701/27/
Source: chromecache_603.1.dr	String found in binary or memory: https://use.typekit.net/af/eaf09c/000000000000000000017703/27/
Source: chromecache_600.1.dr	String found in binary or memory: https://use.typekit.net/bxf0ivf.js
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://vibe.naver.com/today
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://web.skype.com/?browsername=edge_canary_shoreline
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://web.skype.com/?browsername=edge_stable_shoreline
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://web.telegram.org/
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://web.whatsapp.com
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://word.new?from=EdgeM365Shoreline
Source: Favicons.11.dr	String found in binary or memory: https://www.aliexpress.com/
Source: Favicons.11.dr	String found in binary or memory: https://www.amazon.com/
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://www.deezer.com/
Source: content_new.js.11.dr, content.js.11.dr	String found in binary or memory: https://www.google.com/chrome
Source: Web Data.11.dr	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://www.iheart.com/podcast/
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://www.instagram.com
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://www.last.fm/
Source: Favicons.11.dr	String found in binary or memory: https://www.live.com/
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://www.messenger.com
Source: 2cc80dabc69f58b6_1.11.dr	String found in binary or memory: https://www.msn.com/web-notification-icon-light.png
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://www.msn.com/widgets/fullpage/cgSideBar/widget?experiences=CasualGamesHub&sharedHeader=1
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://www.msn.com/widgets/fullpage/cgSideBar/widget?experiences=CasualGamesHub&sharedHeader=1&game
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://www.msn.com/widgets/fullpage/cgSideBar/widget?experiences=CasualGamesHub&sharedHeader=1&item
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://www.msn.com/widgets/fullpage/gaming/widget?experiences=CasualGamesHub&sharedHeader=1
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://www.msn.com/widgets/fullpage/gaming/widget?experiences=CasualGamesHub&sharedHeader=1&item=fl
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://www.msn.com/widgets/fullpage/gaming/widget?experiences=CasualGamesHub&sharedHeader=1&playInS
Source: Favicons.11.dr	String found in binary or memory: https://www.netflix.com/
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://www.office.com
Source: Favicons.11.dr	String found in binary or memory: https://www.office.com/
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://www.officeplus.cn/?sid=shoreline&endpoint=OPPC&source=OPCNshoreline
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://www.onenote.com/stickynotes?isEdgeHub=true
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://www.onenote.com/stickynotes?isEdgeHub=true&auth=1
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://www.onenote.com/stickynotes?isEdgeHub=true&auth=2
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://www.onenote.com/stickynotesstaging?isEdgeHub=true
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://www.onenote.com/stickynotesstaging?isEdgeHub=true&auth=1
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://www.onenote.com/stickynotesstaging?isEdgeHub=true&auth=2
Source: Favicons.11.dr	String found in binary or memory: https://www.reddit.com/
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://www.tiktok.com/
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://www.youtube.com
Source: Favicons.11.dr	String found in binary or memory: https://www.youtube.com/
Source: 4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	String found in binary or memory: https://y.music.163.com/m/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50191 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831

Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.16:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.1.237.25:443 -> 192.168.2.16:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.16:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.1.237.25:443 -> 192.168.2.16:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.1.237.25:443 -> 192.168.2.16:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.1.237.25:443 -> 192.168.2.16:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.222.162.7:443 -> 192.168.2.16:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.1.237.25:443 -> 192.168.2.16:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.222.162.7:443 -> 192.168.2.16:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.222:443 -> 192.168.2.16:49791 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.150.240.254:443 -> 192.168.2.16:49803 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.152.20:443 -> 192.168.2.16:49821 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.222:443 -> 192.168.2.16:49823 version: TLS 1.2

System Summary

Downloads suspicious files via Chrome

Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	File dump: C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\page_embed_script.js	Jump to dropped file
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	File dump: C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\eventpage_bin_prod.js	Jump to dropped file
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	File dump: C:\Users\user\AppData\Local\Temp\scoped_dir1644_1162706228\CRX_INSTALL\content.js	Jump to dropped file
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	File dump: C:\Users\user\AppData\Local\Temp\scoped_dir1644_1162706228\CRX_INSTALL\content_new.js	Jump to dropped file

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_BITS_3572_1060832441

Jump to behavior

Source: classification engine

Classification label: mal60.win@78/278@46/49

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

File created: C:\Users\user\AppData\Local\Temp\04c6cde2-ac0a-4b67-bbde-666782997ba4.tmp

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://livespoints.com/sso.dsv.com
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1708 --field-trial-handle=1816,i,17546062226923162170,5333689487827866675,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2336 --field-trial-handle=2044,i,4245092213263531658,3503183306970251283,262144 /prefetch:3
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=6748 --field-trial-handle=2044,i,4245092213263531658,3503183306970251283,262144 /prefetch:8
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=5388 --field-trial-handle=2044,i,4245092213263531658,3503183306970251283,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1708 --field-trial-handle=1816,i,17546062226923162170,5333689487827866675,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2336 --field-trial-handle=2044,i,4245092213263531658,3503183306970251283,262144 /prefetch:3	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=6748 --field-trial-handle=2044,i,4245092213263531658,3503183306970251283,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=5388 --field-trial-handle=2044,i,4245092213263531658,3503183306970251283,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: Web Data.11.dr	Binary or memory string: outlook.office365.comVMware20,11696584680t
Source: Web Data.11.dr	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696584680
Source: Web Data.11.dr	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696584680p
Source: Web Data.11.dr	Binary or memory string: Canara Change Transaction PasswordVMware20,11696584680^
Source: Web Data.11.dr	Binary or memory string: Interactive Brokers - EU WestVMware20,11696584680n
Source: Web Data.11.dr	Binary or memory string: Interactive Brokers - HKVMware20,11696584680]
Source: Web Data.11.dr	Binary or memory string: microsoft.visualstudio.comVMware20,11696584680x
Source: Web Data.11.dr	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696584680
Source: Web Data.11.dr	Binary or memory string: outlook.office.comVMware20,11696584680s
Source: Web Data.11.dr	Binary or memory string: secure.bankofamerica.comVMware20,11696584680\|UE
Source: Web Data.11.dr	Binary or memory string: Canara Transaction PasswordVMware20,11696584680x
Source: Web Data.11.dr	Binary or memory string: account.microsoft.com/profileVMware20,11696584680u
Source: Web Data.11.dr	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696584680
Source: Web Data.11.dr	Binary or memory string: ms.portal.azure.comVMware20,11696584680
Source: Web Data.11.dr	Binary or memory string: Canara Transaction PasswordVMware20,11696584680}
Source: Web Data.11.dr	Binary or memory string: bankofamerica.comVMware20,11696584680x
Source: Web Data.11.dr	Binary or memory string: turbotax.intuit.comVMware20,11696584680t
Source: Web Data.11.dr	Binary or memory string: Test URL for global passwords blocklistVMware20,11696584680
Source: Web Data.11.dr	Binary or memory string: Canara Change Transaction PasswordVMware20,11696584680
Source: Web Data.11.dr	Binary or memory string: www.interactivebrokers.co.inVMware20,11696584680~
Source: Web Data.11.dr	Binary or memory string: www.interactivebrokers.comVMware20,11696584680}
Source: Web Data.11.dr	Binary or memory string: AMC password management pageVMware20,11696584680
Source: Web Data.11.dr	Binary or memory string: trackpan.utiitsl.comVMware20,11696584680h
Source: Web Data.11.dr	Binary or memory string: interactivebrokers.comVMware20,11696584680
Source: Web Data.11.dr	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696584680z
Source: Web Data.11.dr	Binary or memory string: tasks.office.comVMware20,11696584680o
Source: Web Data.11.dr	Binary or memory string: discord.comVMware20,11696584680f
Source: Web Data.11.dr	Binary or memory string: global block list test formVMware20,11696584680
Source: Web Data.11.dr	Binary or memory string: netportal.hdfcbank.comVMware20,11696584680
Source: Web Data.11.dr	Binary or memory string: dev.azure.comVMware20,11696584680j
Source: Web Data.11.dr	Binary or memory string: interactivebrokers.co.inVMware20,11696584680d

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact	Resource Development	Reconnaissance
Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	11 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Abuse Accessibility Features	Acquire Infrastructure	Gather Victim Identity Information
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	4 Non-Application Layer Protocol	SIM Card Swap	Obtain Device Cloud Backups	Network Denial of Service	Domains	Credentials
Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	5 Application Layer Protocol			Data Encrypted for Impact	DNS Server	Email Addresses
Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Traffic Duplication	3 Ingress Tool Transfer			Data Destruction	Virtual Private Server	Employee Names

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://livespoints.com/sso.dsv.com	100%	Avira URL Cloud	malware

Source	Detection	Scanner	Label
https://deff.nelreports.net/api/report?cat=msn	0%	URL Reputation	safe
https://aefd.nelreports.net/api/report?cat=bingth	0%	URL Reputation	safe
https://excel.new?from=EdgeM365Shoreline	0%	Avira URL Cloud	safe
https://deff.nelreports.net/api/report	0%	Avira URL Cloud	safe
https://aefd.nelreports.net/api/report?cat=bingcsp	0%	Avira URL Cloud	safe
https://deff.nelreports.net/api/report?cat=msnw	0%	Avira URL Cloud	safe
https://unitedstates1.ss.wd.microsoft.us/	0%	Avira URL Cloud	safe
https://id5-sync.com/c/495/0/0/1.gif?gdpr=0&gdpr_consent=&us_privacy=	0%	Avira URL Cloud	safe
https://sb.scorecardresearch.com/b?rn=1705511230793&c1=2&c2=3000001&cs_ucfr=1&c7=https%3A%2F%2Fntp.msn.com%2Fedge%2Fntp%3Flocale%3Den-GB%26title%3DNew%2Btab%26dsp%3D1%26sp%3DBing%26isFREModalBackground%3D1%26startpage%3D1%26PC%3DU531%26ocid%3Dmsedgdhp%26mkt%3Den-us&c8=New+tab&c9=	0%	Avira URL Cloud	safe
https://bzib.nelreports.net/api/report?cat=bingbusiness	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
chrome.cloudflare-dns.com	162.159.61.3	true	false	unknown
google.com	172.217.165.142	true	false	high
accounts.google.com	172.253.115.84	true	false	high
sb.scorecardresearch.com	18.173.219.113	true	false	unknown
www.google.com	142.250.72.100	true	false	high
clients.l.google.com	142.251.40.174	true	false	high
b-0005.b-dc-msedge.net	13.107.9.158	true	false	unknown
ssl.bingadsedgeextension-prod-eastus.azurewebsites.net	40.71.99.188	true	false	unknown
livespoints.com	172.67.130.252	true	false	unknown
sni1gl.wpc.nucdn.net	152.195.19.97	true	false	unknown
use.typekit.net	unknown	unknown	false	high
assets.msn.com	unknown	unknown	false	high
www.livespoints.com	unknown	unknown	false	unknown
c.msn.com	unknown	unknown	false	high
deff.nelreports.net	unknown	unknown	false	unknown
ntp.msn.com	unknown	unknown	false	high
clients2.google.com	unknown	unknown	false	high
api.msn.com	unknown	unknown	false	high
browser.events.data.msn.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://assets.msn.com/staticsb/statics/latest/icons-wc/icons/TrendingLight.svg	false		high
https://browser.events.data.msn.com/OneCollector/1.0?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1705511255251&w=0&anoncknm=app_anon&NoResponseBody=true	false		high
https://assets.msn.com/service/news/feed/pages/ntp?User=m-2136D0069C246D353F30C40F9D676C20&activityId=EDA7CB09-C52C-41B1-9707-B0A727D882E0&apikey=0QfOX3Vn51YCzitbLaRkTTBadtWpgTN8NZLW0C1SEM&audienceMode=adult&cm=en-us&column=c3&disablecontent=true&infopaneCount=17&it=app&memory=8&newsSkip=0&newsTop=48&ocid=anaheim-ntp-feeds&pgc=547&timeOut=1000&vpSize=1232x876&wposchema=byregion	false		high
https://assets.msn.com/bundles/v1/edgeChromium/latest/common-settings-edgenext.fc618f2b72574c13fece.js	false		high
https://assets.msn.com/bundles/v1/edgeChromium/latest/RewardsCoachmarkData.83abf4e96155e10a98d3.js	false		high
https://assets.msn.com/bundles/v1/edgeChromium/latest/channel-filter-card.feaa9939796e7d03c4cd.js	false		high
https://assets.msn.com/bundles/v1/edgeChromium/latest/interests-wc.7283e39bc3c5cdc59ca2.js	false		high
https://pr-bh.ybp.yahoo.com/sync/msn?gdpr=0&gdpr_consent=	false		high
https://browser.events.data.msn.com/OneCollector/1.0?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1705511252847&time-delta-to-apply-millis=use-collector-delta&w=0&anoncknm=app_anon&NoResponseBody=true	false		high
https://browser.events.data.msn.com/OneCollector/1.0?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1705511247325&w=0&anoncknm=app_anon&NoResponseBody=true	false		high
https://assets.msn.com/weathermapdata/1/static/weather/Icons/taskbar_v10/NoColor_Card/rightArrow.svg	false		high
https://services.bingapis.com/undersideproactive/api/v1/trigger	false		high
https://assets.msn.com/bundles/v1/edgeChromium/latest/pill-wc.d069865e9104f4bc5917.js	false		high
https://assets.msn.com/bundles/v1/edgeChromium/latest/libs_sports-data-service_dist_SportsDataMapper_js.6f14df7ca3d855f79932.js	false		high
https://assets.msn.com/bundles/v1/edgeChromium/latest/sign-in-control-wc.817df57519f0cbb1eb3f.js	false		high
https://assets.msn.com/service/graph/actions?%24top=20&%24filter=actionType+eq+%27Follow%27+and+%28targetType+eq+%27Location%27%29&apikey=1hYoJsIRvPEnSkk0hlnJF2092mHqiz7xFenIFKa9uc&activityId=EDA7CB09-C52C-41B1-9707-B0A727D882E0&ocid=pdp-peregrine&cm=en-us&it=app&user=m-2136D0069C246D353F30C40F9D676C20	false		high
https://assets.msn.com/bundles/v1/edgeChromium/latest/waterfall-view-feed.acd823fd4382a7f925d4.js	false		high
https://assets.msn.com/bundles/v1/edgeChromium/latest/libs_super-feed_dist_feed-manager_FeedManagerWithClientAd_js-node_modules_fluentui_svg-icons_-8f340f.6ccd673195b9f91ac607.js	false		high
https://assets.msn.com/bundles/v1/edgeChromium/latest/weather-card-wc-init-account-type.ec5511d59ad31a725a33.js	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=www.livespoints.co&oit=3&cp=18&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://assets.msn.com/bundles/v1/edgeChromium/latest/weather-card-data-connector.36a9bcbc4691ff2deb78.js	false		high
https://assets.msn.com/bundles/v1/edgeChromium/latest/libs_weather-shared-wc_dist_index_js.b0b1c6ea76f00067ae41.js	false		high
https://assets.msn.com/bundles/v1/edgeChromium/latest/social-bar-wc.eab7adce9d3aec38f5e1.js	false		high
https://assets.msn.com/bundles/v1/edgeChromium/latest/feedback.62b90df367cfe4903710.js	false		high
https://browser.events.data.msn.com/OneCollector/1.0?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1705511257508&w=0&anoncknm=app_anon&NoResponseBody=true	false		high
https://assets.msn.com/service/segments/recoitems/shopping?$filter=ebay.com,msn.com&$select=BatchStoresCashbackWorkflow&activityId=d749b6f214fb4679f43b4425f389c544&apiKey=ogTIEkUJTNRKfuviV6imfOBW6i874Wsn2XeWZBW83k&cm=en-us&ocid=anaheim-shopping-topsites	false		high
https://assets.msn.com/weathermapdata/1/static/weather/Icons/taskbar_v10/Condition_Card/SunnyDayV3.svg	false		high
https://assets.msn.com/bundles/v1/edgeChromium/latest/mobile-app-upsell.b8d6ed42cd17473a04ef.js	false		high
https://assets.msn.com/bundles/v1/edgeChromium/latest/SignInData.f80799da3bfdfbad7245.js	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=ww&oit=1&cp=2&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://id5-sync.com/c/495/0/0/1.gif?gdpr=0&gdpr_consent=&us_privacy=	false	Avira URL Cloud: safe	unknown
https://assets.msn.com/bundles/v1/edgeChromium/latest/feeds-notification-toast.df21c05a4ff3486bc6f3.js	false		high
https://assets.msn.com/bundles/v1/edgeChromium/latest/common-others.c3460f2dae1a325c87e5.js	false		high
https://assets.msn.com/bundles/v1/edgeChromium/latest/libs_ads-constants_dist_AdsFlights_js-libs_ads-utils_dist_logging_sendAdImageLoadError_js-lib-e9c969.26a84d1571f555d023ba.js	false		high
https://assets.msn.com/bundles/v1/edgeChromium/latest/MarketMismatchCoachMark.0d128b2ec30808e7f4d0.js	false		high
https://browser.events.data.msn.com/OneCollector/1.0?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1705511260510&w=0&anoncknm=app_anon&NoResponseBody=true	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=www.livespoints&oit=1&cp=15&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://www.google.com/sorry/index?continue=https://www.google.com/async/ddljson%3Fasync%3Dntp:2&q=EgSaEMDBGPaRoK0GIjBpKTHiB1lPo_5ATCg0Y_ljqTVs7ue04FDQN5c5AD6uoZOpeYxmac5SIbVe0AdqKFUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=www.lives&oit=1&cp=9&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://assets.msn.com/bundles/v1/edgeChromium/latest/news-groups-card.98d340916dc4d07f1bca.js	false		high
https://assets.msn.com/staticsb/statics/latest/marketmismatch/bannerDisplayString/en-gb.json	false		high
https://assets.msn.com/service/msn/user?apikey=1hYoJsIRvPEnSkk0hlnJF2092mHqiz7xFenIFKa9uc&activityId=07358B43-4719-4149-9E61-F4325F4E0424&ocid=pdp-peregrine&cm=en-us&it=app&user=m-2136D0069C246D353F30C40F9D676C20	false		high
https://browser.events.data.msn.com/OneCollector/1.0?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1705511254237&w=0&anoncknm=app_anon&NoResponseBody=true	false		high
https://assets.msn.com/weathermapdata/1/static/weather/Icons/taskbar_v10/Condition_Card/ClearNightV3.svg	false		high
https://assets.msn.com/bundles/v1/edgeChromium/latest/shopping-events-deal-card.fa55d71e81238c262037.js	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=www.livespo&oit=1&cp=11&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://assets.msn.com/bundles/v1/edgeChromium/latest/interest-fre-card.30b26f782d4747b20e34.js	false		high
https://assets.msn.com/bundles/v1/edgeChromium/latest/nas-highlight-v3v4.e4e248522529ebc8634f.js	false		high
https://assets.msn.com/service/segments/recoitems/shopping?$filter=ebay.com,msn.com&$select=BatchStoresCashbackWorkflow&activityId=749e3d6c9c1d4ea9c893e2c6c48babd1&apiKey=ogTIEkUJTNRKfuviV6imfOBW6i874Wsn2XeWZBW83k&cm=en-us&ocid=anaheim-shopping-topsites	false		high
https://assets.msn.com/bundles/v1/edgeChromium/latest/waffle-wc.c1a2f7ab3d1226ddd602.js	false		high
https://assets.msn.com/bundles/v1/edgeChromium/latest/diagnostic-web-vitals.8e31afd07dfeb48aea72.js	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=www.livespoints.com&oit=3&cp=19&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://assets.msn.com/bundles/v1/edgeChromium/latest/channel-store.c3f39e5ab746e5b2b068.js	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=www&oit=1&cp=3&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://assets.msn.com/bundles/v1/edgeChromium/latest/card-actions-wc.094e958a7da9dfa633df.js	false		high
https://hbx.media.net/cksync.php?type=nms&cs=3&ovsid=2136D0069C246D353F30C40F9D676C20&gdpr=0&gdpr_consent=	false		high
https://assets.msn.com/bundles/v1/edgeChromium/latest/common-feed-libs.f7c40fd5b5301a22c853.js	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=www.live&oit=3&cp=8&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://trc.taboola.com/sg/msn/1/cm?taboola_hm=2136D0069C246D353F30C40F9D676C20&gdpr=0&gdpr_consent=	false		high
https://assets.msn.com/bundles/v1/edgeChromium/latest/common-windows-widget-shared.43a2d05d1d74cbc18745.js	false		high
https://sb.scorecardresearch.com/b?rn=1705511230793&c1=2&c2=3000001&cs_ucfr=1&c7=https%3A%2F%2Fntp.msn.com%2Fedge%2Fntp%3Flocale%3Den-GB%26title%3DNew%2Btab%26dsp%3D1%26sp%3DBing%26isFREModalBackground%3D1%26startpage%3D1%26PC%3DU531%26ocid%3Dmsedgdhp%26mkt%3Den-us&c8=New+tab&c9=	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	Web Data.11.dr	false		high
https://duckduckgo.com/ac/?q=	Web Data.11.dr	false		high
https://ntp.msn.com/_default	QuotaManager.11.dr	false		high
https://deff.nelreports.net/api/report?cat=msn	2cc80dabc69f58b6_0.11.dr	false	URL Reputation: safe	unknown
https://aefd.nelreports.net/api/report?cat=bingcsp	Reporting and NEL.12.dr	false	Avira URL Cloud: safe	unknown
https://deff.nelreports.net/api/report	Reporting and NEL.12.dr	false	Avira URL Cloud: safe	unknown
https://docs.google.com/	manifest.json0.11.dr	false		high
https://www.youtube.com	4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	false		high
https://deff.nelreports.net/api/report?cat=msnw	Reporting and NEL.12.dr	false	Avira URL Cloud: safe	unknown
https://www.instagram.com	4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	false		high
https://outlook.live.com/mail/inbox?isExtension=true&sharedHeader=1&nlp=1&client_flight=outlookedge	4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	false		high
https://outlook.office.com/mail/compose?isExtension=true	4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	false		high
https://use.typekit.net/af/74ffb1/000000000000000000017702/27/	chromecache_603.1.dr	false		high
https://i.y.qq.com/n2/m/index.html	4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	false		high
https://www.deezer.com/	4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	false		high
https://web.telegram.org/	4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	false		high
https://assets.msn.com/service/news/feed/pages/weblayout	2cc80dabc69f58b6_1.11.dr	false		high
https://drive-daily-2.corp.google.com/	manifest.json0.11.dr	false		high
https://www.amazon.com/	Favicons.11.dr	false		high
https://unitedstates1.ss.wd.microsoft.us/	edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1.11.dr	false	Avira URL Cloud: safe	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	Web Data.11.dr	false		high
https://drive-daily-1.corp.google.com/	manifest.json0.11.dr	false		high
https://excel.new?from=EdgeM365Shoreline	4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/	Favicons.11.dr	false		high
https://drive-daily-5.corp.google.com/	manifest.json0.11.dr	false		high
https://bzib.nelreports.net/api/report?cat=bingbusiness	Reporting and NEL.12.dr	false	Avira URL Cloud: safe	unknown
https://chromewebstore.google.com/	manifest.json.11.dr	false		high
https://drive-preprod.corp.google.com/	manifest.json0.11.dr	false		high
https://chrome.google.com/webstore/	manifest.json.11.dr	false		high
https://ntp.msn.com/ntp.msn.com_default/m	QuotaManager-journal.11.dr, QuotaManager.11.dr	false		high
https://bard.google.com/	4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	false		high
https://www.office.com	4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	false		high
https://aefd.nelreports.net/api/report?cat=bingth	Reporting and NEL.12.dr	false	URL Reputation: safe	unknown
https://outlook.live.com/mail/0/	4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	false		high
https://tidal.com/	4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	false		high
https://ntp.msn.com	000003.log8.11.dr, 2cc80dabc69f58b6_0.11.dr	false		high
https://gaana.com/	4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	false		high
https://outlook.live.com/mail/compose?isExtension=true	4c7eaf18-2c11-488a-b952-912502a6297a.tmp.11.dr	false		high
http://typekit.com/eulas/0000000000000000000176ff	chromecache_603.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.40	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
23.199.48.23	unknown	United States	20940	AKAMAI-ASN1EU	false
23.51.57.215	unknown	United States	4788	TMNET-AS-APTMNetInternetServiceProviderMY	false
52.0.126.85	unknown	United States	14618	AMAZON-AESUS	false
162.159.61.3	chrome.cloudflare-dns.com	United States	13335	CLOUDFLARENETUS	false
20.25.228.187	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.251.40.174	clients.l.google.com	United States	15169	GOOGLEUS	false
40.71.99.188	ssl.bingadsedgeextension-prod-eastus.azurewebsites.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
68.67.179.153	unknown	United States	29990	ASN-APPNEXUS	false
13.107.213.40	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
20.127.253.7	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
157.240.241.1	unknown	United States	32934	FACEBOOKUS	false
23.44.201.25	unknown	United States	20940	AKAMAI-ASN1EU	false
23.47.169.232	unknown	United States	16625	AKAMAI-ASUS	false
195.244.31.11	unknown	France	63140	IGUANA-WORLDWIDEUS	false
35.213.89.133	unknown	United States	19527	GOOGLE-2US	false
13.107.42.14	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
151.101.1.44	unknown	United States	54113	FASTLYUS	false
68.67.160.75	unknown	United States	29990	ASN-APPNEXUS	false
23.43.85.37	unknown	United States	3257	GTT-BACKBONEGTTDE	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
18.164.96.43	unknown	United States	3	MIT-GATEWAYSUS	false
142.250.72.110	unknown	United States	15169	GOOGLEUS	false
68.67.179.87	unknown	United States	29990	ASN-APPNEXUS	false
172.253.115.84	accounts.google.com	United States	15169	GOOGLEUS	false
184.87.173.82	unknown	United States	20940	AKAMAI-ASN1EU	false
23.96.180.189	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
52.182.143.211	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
70.42.32.191	unknown	United States	22075	AS-OUTBRAINUS	false
13.107.13.80	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.72.100	www.google.com	United States	15169	GOOGLEUS	false
204.79.197.219	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
35.208.249.213	unknown	United States	19527	GOOGLE-2US	false
172.64.41.3	unknown	United States	13335	CLOUDFLARENETUS	false
13.107.9.158	b-0005.b-dc-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
23.199.50.102	unknown	United States	20940	AKAMAI-ASN1EU	false
35.71.139.29	unknown	United States	237	MERIT-AS-14US	false
151.101.65.108	unknown	United States	54113	FASTLYUS	false
18.173.219.113	sb.scorecardresearch.com	United States	3	MIT-GATEWAYSUS	false
23.49.251.10	unknown	United States	16625	AKAMAI-ASUS	false
104.19.130.76	unknown	United States	13335	CLOUDFLARENETUS	false
184.87.173.91	unknown	United States	20940	AKAMAI-ASN1EU	false
23.200.3.26	unknown	United States	20940	AKAMAI-ASN1EU	false
52.159.100.48	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.21.3.175	unknown	United States	13335	CLOUDFLARENETUS	false
142.251.40.97	unknown	United States	15169	GOOGLEUS	false
172.241.51.69	unknown	Netherlands	394380	LEASEWEB-USA-DAL-10US	false
162.19.138.116	unknown	United States	209	CENTURYLINK-US-LEGACY-QWESTUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	38.0.0 Ammolite
Analysis ID:	1376240
Start date and time:	2024-01-17 18:05:12 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 7s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	http://livespoints.com/sso.dsv.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.win@78/278@46/49
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, RuntimeBroker.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, backgroundTaskHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.176.195, 34.104.35.123, 23.48.224.105, 23.48.224.109, 23.63.76.17, 23.63.76.25, 23.204.152.142, 23.204.152.140, 192.229.211.108, 142.251.40.238, 23.206.121.48, 142.251.40.227, 104.102.251.80, 204.79.197.203, 13.107.42.16, 13.107.21.239, 204.79.197.239, 20.225.111.35, 23.55.243.206, 23.55.243.203, 104.117.182.32, 104.117.182.56, 23.44.201.31, 23.44.201.33, 23.44.201.34, 23.44.201.20, 23.44.201.32, 23.44.201.24, 23.44.201.21, 23.44.201.22, 23.44.201.23, 23.200.88.29, 23.200.88.27, 23.200.88.28, 23.200.88.10, 23.200.88.14, 23.200.88.22, 23.200.88.9, 23.200.88.18, 23.200.88.16, 204.79.197.200, 13.107.21.200, 20.110.205.119, 52.237.183.121, 23.55.243.213, 20.42.73.24, 23.101.168.44, 142.251.40.163, 142.251.41.3, 142.250.80.67
Excluded domains from analysis (whitelisted): fp.msedge.net, nav-edge.smartscreen.microsoft.com, slscr.update.microsoft.com, img-s-msn-com.akamaized.net, data-edge.smartscreen.microsoft.com, onedscolprdeus03.eastus.cloudapp.azure.com, clientservices.googleapis.com, tm-prod-wd-csp-edge.trafficmanager.net, e86303.dscx.akamaiedge.net, ocsp.digicert.com, use-stls.adobe.com.edgesuite.net, login.live.com, config-edge-skype.l-0007.l-msedge.net, www-bing-com.dual-a-0001.a-msedge.net, e29329.dsca.akamaiedge.net, update.googleapis.com, www.gstatic.com, l-0007.l-msedge.net, e28578.d.akamaiedge.net, www.bing.com, assets.msn.com.edgekey.net, stls.adobe.com-cn.edgesuite.net.globalredir.akadns.net, bingadsedgeextension-prod.trafficmanager.net, arm-ring.msedge.net, dual-a-0001.a-msedge.net, cdp-tlu-ssl-shim.trafficmanager.net, 58e6a35818525043c79d25fe433d7024.clo.footprintdns.com, deff.nelreports.net.akamaized.net, www-www.bing.com.trafficmanager.net, business-bing-com.b-0005.b-msedge.net, a1834.dscg2.akamai.net, wildcardtlu
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryVolumeInformationFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Report size getting too big, too many NtWriteFile calls found.
Report size getting too big, too many NtWriteVirtualMemory calls found.
VT rate limit hit for: http://livespoints.com/sso.dsv.com

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	64512
Entropy (8bit):	6.105055839875995
Encrypted:	false
SSDEEP:	1536:5+U0eRT8WKWaEeTTvqrvxWY/QbmWsaocoYKBuSZqU:Eet8W6EGTivoY468rKBuWN
MD5:	C0C38F0955877625EB212F8A56705C23
SHA1:	04F295639984C29C592316997ABE62D0471DD6A6
SHA-256:	1EF6C78B9D70AA5313448493F8D89951656D08A554E27DAD5418167342F70783
SHA-512:	FCB52CFA5220E72C03E947ACCEE6380FFC35229E1DDE0DC4901478781AD49C86A5CFE4DB17260475F0629BA1A63CD58B22C252704843816C14C4895495509F56
Malicious:	false
Reputation:	low
Preview:	{"abusive_adblocker_etag":"\"84360B7D463700852C0CF4B438B8ED239FCBD0428E7F4DFE8461E7F2FC2FB7D2\"","browser":{"browser_build_version":"117.0.2045.47","browser_version_of_last_seen_whats_new":"117.0.2045.47","last_seen_whats_new_page_version":"117.0.2045.47"},"continuous_migration":{"local_guid":"58ede637-6441-46dd-802e-bd341ad003a1"},"desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"desktop_session_duration_tracker":{"last_session_end_timestamp":"1705511229"},"domain_actions_config":"H4sIAAAAAAAAAL1dW5PctrH+K6p9SlIerHZ1s5wnH1mOXSeyXY5Srjqp1BYIYkgsQYDCZWY4Kf/30w3O3jQEZpryOQ9xVhw2bmx0f93obvzngm+uboStpbhZSx6ikzeilaK7sRvpnKrlxTf/ueDDoJXgQVnjL7751+GBrG8GC8/Hi28ufh7CzzFcfHVR254rA0+MDGutdkzY/uL3rygkPsRaWT9R/vuri0Sh5NSz4b18TBzGAf/97ebqHU7i+2kO73AKh3ewCZiLh8FffHP1+1cXou6pszN6fL8brJe/aD7+Knk9Ph6318o0hYneU/8GPW6UkY+Jg40sbJZQ9nwHf0sGs1hAzSuxeMgbhhRyKb3mb5gKSyh3a2VUGJd2vOVBtDB6YUt8WWxCNTAACW042wBTLW2m0lGK6DbYkm/

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\42afa554-6b73-4440-ade8-e4d190ec6335.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	58946
Entropy (8bit):	6.106260335252924
Encrypted:	false
SSDEEP:	1536:k/Ps+wsI7yOHaEeTTvqrvxtoYKBuSZ+aoq:k/0+zI7yO6EGTiv9KBuWNR
MD5:	1C2D31813E52E617FF27BC6D1A869EE6
SHA1:	E9DF3161D64326E9B5BCD9278447AED7CE104773
SHA-256:	EE846F329217839CE98B31D62DE7FD2D73890A4410419FEC9402260FE35D115B
SHA-512:	ECF1215AB3C805C365D62840502CB43735596F5E09E61598233CA06D5B97506EDCD2C341046335B56F5B4A1F196B967BB5B8D990A12876F0421305A467F029CA
Malicious:	false
Reputation:	low
Preview:	{"abusive_adblocker_etag":"\"8ABCE35666CBACA121128B98C75E78308AAC1CE803625FAFB4A7AFA722C77CA4\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\562a1de6-1f7e-4e7d-aaee-408cd8de6bb9.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	58458
Entropy (8bit):	6.1034590743430455
Encrypted:	false
SSDEEP:	1536:k/Ps+wsI7ynywEeTTvqrvStDz5oYKBuSZ+aoq:k/0+zI7ynzEGTivStDzXKBuWNR
MD5:	45F0FDE1078239C10C511A922CA9AFF3
SHA1:	D25680F7210FDEF8B0CC1EAD0FC7654B10FBEE2C
SHA-256:	D6B99543ACC48643A4C19C3A57A88C6057989949CD4ADD938ACEB174EF1AC6F5
SHA-512:	DB007F88E7914CD980CE775D33CF80DF170917D5714EC63F252F9C1475AF604AD150847CE0AAD6E3101195049761490C6DA66354B2A5B3A372B919B4F4428520
Malicious:	false
Reputation:	low
Preview:	{"abusive_adblocker_etag":"\"8ABCE35666CBACA121128B98C75E78308AAC1CE803625FAFB4A7AFA722C77CA4\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\7556acb3-b693-4f60-b940-0ccad2d004f2.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	73184
Entropy (8bit):	6.088149563890138
Encrypted:	false
SSDEEP:	1536:w+U0eRT8WKwaEeTTvqrv6mWY/QbmWsaocoYKBuSZqU:Net8WiEGTiv69Y468rKBuWN
MD5:	AB536618719875B21A4B6C0411C4FF37
SHA1:	C5E5FCEA640BBE13B0214963F91D71434E124084
SHA-256:	7966B6CD5B19AA268FD52F09633FCB8F5BC1E7A74B5051CC692EAE5DF8DEAC76
SHA-512:	F5BB90BFA317DAF1C9E5237B18E0636A23B783E9A4C71DEAE028E329C320B3F48AAAF519C3CE6E0669FAB4DA1B3F9FD33E2AB5C9D5085B58FB1EBD75C8105CBF
Malicious:	false
Reputation:	low
Preview:	{"abusive_adblocker_etag":"\"84360B7D463700852C0CF4B438B8ED239FCBD0428E7F4DFE8461E7F2FC2FB7D2\"","browser":{"browser_build_version":"117.0.2045.47","browser_version_of_last_seen_whats_new":"117.0.2045.47","last_seen_whats_new_page_version":"117.0.2045.47"},"continuous_migration":{"local_guid":"58ede637-6441-46dd-802e-bd341ad003a1","scoobe_registry_state":1},"desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"desktop_session_duration_tracker":{"last_session_end_timestamp":"0"},"domain_actions_config":"H4sIAAAAAAAAAL1dW5PctrH+K6p9SlIerHZ1s5wnH1mOXSeyXY5Srjqp1BYIYkgsQYDCZWY4Kf/30w3O3jQEZpryOQ9xVhw2bmx0f93obvzngm+uboStpbhZSx6ikzeilaK7sRvpnKrlxTf/ueDDoJXgQVnjL7751+GBrG8GC8/Hi28ufh7CzzFcfHVR254rA0+MDGutdkzY/uL3rygkPsRaWT9R/vuri0Sh5NSz4b18TBzGAf/97ebqHU7i+2kO73AKh3ewCZiLh8FffHP1+1cXou6pszN6fL8brJe/aD7+Knk9Ph6318o0hYneU/8GPW6UkY+Jg40sbJZQ9nwHf0sGs1hAzSuxeMgbhhRyKb3mb5gKSyh3a2VUGJd2vOVBtDB6YUt8WWxCNTAACW042w

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\1e52338f-a25c-4d01-9728-96ec7ba85a35.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	99662
Entropy (8bit):	4.629393967381547
Encrypted:	false
SSDEEP:	1536:W/lv4EseMN/QKy5Vdc34Psia5+GtDulXrndvaJqYq:+wjQP5VdcIG+a8jdc1q
MD5:	14A4FF41AD8A083B4CD96806A33A63B6
SHA1:	26422B6DFB08A66B38FCE3BB972B4164A82515B9
SHA-256:	7F8ED5B1A67F815DDCBD7DF67DDFFE604942415E3876908F91A07FF9101B114B
SHA-512:	7DD2402EB5BD3A6AA4C153ACFA79F544371B2A31A3800BCAE5D12F52F7316336350E038B7F5F374D997A4EB01E4E8595A12A6D6B8D4C0325F45E8E3B908D2AA2
Malicious:	false
Reputation:	low
Preview:	{"sites":[{"url":"24video.be"},{"url":"7dnifutbol.bg"},{"url":"6tv.dk"},{"url":"9kefa.com"},{"url":"aculpaedoslb.blogspot.pt"},{"url":"aek-live.gr"},{"url":"arcadepunk.co.uk"},{"url":"acidimg.cc"},{"url":"aazah.com"},{"url":"allehensbeverwijk.nl"},{"url":"amateurgonewild.org"},{"url":"aindasoudotempo.blogspot.com"},{"url":"anorthosis365.com"},{"url":"autoreview.bg"},{"url":"alivefoot.us"},{"url":"arbitro10.com"},{"url":"allhard.org"},{"url":"babesnude.info"},{"url":"aysel.today"},{"url":"animepornx.com"},{"url":"bahisideal20.com"},{"url":"analyseindustrie.nl"},{"url":"bahis10line.org"},{"url":"apoel365.net"},{"url":"bahissitelerisikayetleri.com"},{"url":"bambusratte.com"},{"url":"banzaj.pl"},{"url":"barlevegas.com"},{"url":"baston.info"},{"url":"atomcurve.com"},{"url":"atascadocherba.com"},{"url":"astrologer.gr"},{"url":"adultpicz.com"},{"url":"alleporno.com"},{"url":"beaver-tube.com"},{"url":"beachbabes.info"},{"url":"bearworldmagazine.com"},{"url":"bebegimdensonra.com"},{"url":"autoy

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	99662
Entropy (8bit):	4.629393967381547
Encrypted:	false
SSDEEP:	1536:W/lv4EseMN/QKy5Vdc34Psia5+GtDulXrndvaJqYq:+wjQP5VdcIG+a8jdc1q
MD5:	14A4FF41AD8A083B4CD96806A33A63B6
SHA1:	26422B6DFB08A66B38FCE3BB972B4164A82515B9
SHA-256:	7F8ED5B1A67F815DDCBD7DF67DDFFE604942415E3876908F91A07FF9101B114B
SHA-512:	7DD2402EB5BD3A6AA4C153ACFA79F544371B2A31A3800BCAE5D12F52F7316336350E038B7F5F374D997A4EB01E4E8595A12A6D6B8D4C0325F45E8E3B908D2AA2
Malicious:	false
Reputation:	low
Preview:	{"sites":[{"url":"24video.be"},{"url":"7dnifutbol.bg"},{"url":"6tv.dk"},{"url":"9kefa.com"},{"url":"aculpaedoslb.blogspot.pt"},{"url":"aek-live.gr"},{"url":"arcadepunk.co.uk"},{"url":"acidimg.cc"},{"url":"aazah.com"},{"url":"allehensbeverwijk.nl"},{"url":"amateurgonewild.org"},{"url":"aindasoudotempo.blogspot.com"},{"url":"anorthosis365.com"},{"url":"autoreview.bg"},{"url":"alivefoot.us"},{"url":"arbitro10.com"},{"url":"allhard.org"},{"url":"babesnude.info"},{"url":"aysel.today"},{"url":"animepornx.com"},{"url":"bahisideal20.com"},{"url":"analyseindustrie.nl"},{"url":"bahis10line.org"},{"url":"apoel365.net"},{"url":"bahissitelerisikayetleri.com"},{"url":"bambusratte.com"},{"url":"banzaj.pl"},{"url":"barlevegas.com"},{"url":"baston.info"},{"url":"atomcurve.com"},{"url":"atascadocherba.com"},{"url":"astrologer.gr"},{"url":"adultpicz.com"},{"url":"alleporno.com"},{"url":"beaver-tube.com"},{"url":"beachbabes.info"},{"url":"bearworldmagazine.com"},{"url":"bebegimdensonra.com"},{"url":"autoy

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	280
Entropy (8bit):	4.188920072053371
Encrypted:	false
SSDEEP:	3:FiWWltlUEuWZLqpq3TdctBRsaRRUqHFll+BVP/Sh/JzvKo8sBXwlptll:o1UwqAjyBRsa3Nlll+BVsJDKo89
MD5:	0CA181D128AEB73E8D01E0B7A05ACE89
SHA1:	D0840030F458D28E9B2F19CED84319E2E6012507
SHA-256:	0514697A17F7F4DA5E5CADE9B44D795AE6B2503AD8531AD7627B1AB19D950FD2
SHA-512:	A7D555A1C4CB06CBBFF8D9CC0DB406D601EC7F5956F8F49456F04878EEBBEF0EA77EEF4B0032FC026B25BB00AC720014979A73C9895B27F1FEBE625D7BCDC970
Malicious:	false
Reputation:	low
Preview:	sdPC......................z....K..s...x."vfSn8LvoRR6x9HfN//24V2w+A0djSL3uj44qFpD7tBM="..................................................................................47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=....................7dc5f755-0f90-4102-bc8e-37d02917bdc7............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\4c7eaf18-2c11-488a-b952-912502a6297a.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (1597), with CRLF line terminators
Category:	dropped
Size (bytes):	115717
Entropy (8bit):	5.183660917461099
Encrypted:	false
SSDEEP:	1536:utDURN77GZqW3v6PD/469IxVBmB22q7LRks3swn0:utAaE2Jt0
MD5:	3D8183370B5E2A9D11D43EBEF474B305
SHA1:	155AB0A46E019E834FA556F3D818399BFF02162B
SHA-256:	6A30BADAD93601FC8987B8239D8907BCBE65E8F1993E4D045D91A77338A2A5B4
SHA-512:	B7AD04F10CD5DE147BDBBE2D642B18E9ECB2D39851BE1286FDC65FF83985EA30278C95263C98999B6D94683AE1DB86436877C30A40992ACA1743097A2526FE81
Malicious:	false
Reputation:	low
Preview:	{.. "current_locale": "en-GB",.. "hub_apps": [ {.. "auto_show": {.. "enabled": true,.. "fre_notification": {.. "enabled": true,.. "header": "Was opening this pane helpful to you?",.. "show_count": 2,.. "text": "Was opening this pane helpful to you?".. },.. "settings_description": "We'll automatically open Bing Chat in the sidebar to show you relevant web experiences alongside your web content",.. "settings_title": "Automatically open Bing Chat in the sidebar",.. "triggering_configs\|flight:msHubAppsMsnArticleAutoShowTriggering": [ {.. "show_count_basis": "signal",.. "signal_name": "IsMsnArticleAutoOpenFromP1P2",.. "signal_threshold": 0.5.. } ],.. "triggering_configs\|flight:msUndersidePersistentChat": [ {.. "signal_name": "IsUndersidePersistentChatLink",.. "signal_threshold": 0.5.. } ],.. "triggering_co

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\588175e6-fc82-4e18-a7f8-f09a1d5aaabe.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	16459
Entropy (8bit):	5.461740243933037
Encrypted:	false
SSDEEP:	192:stDJ99QTryDigabatSuypMsspzO2h0Pmbk+EiqeBrzfKZcSnjHFI8QbV+FDNQwsS:stDPGKSu4Msspz36epFirObGRQwysF
MD5:	2E80BF405FDB5D76DC2E047BFDF9FAAF
SHA1:	6D5B8248DF56756CF1C744A80788801719A299FD
SHA-256:	0D0DB4583630284BFB242542EDC130A577DD03CBAA434E105BB95401B17505C7
SHA-512:	2091070FDA3F2311E6292BC9B32C7B03095864D208F3E9FB958D7FF7FBC2D0A02B983E876473835E263BDB110E6F711670F2290CB12E2F16BA16A4764018AF36
Malicious:	false
Reputation:	low
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13349984825291347","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13341058280410352","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"2caf0cf4-ea42-4083-b928-29b39da1182b":{"last_path":""},"2cb2db96-3bd0-403e-abe2-9269b3761041":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\625ef2e4-c437-4a3e-a23a-2845d406d057.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Reputation:	low
Preview:	.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Reputation:	low
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	33
Entropy (8bit):	3.5394429593752084
Encrypted:	false
SSDEEP:	3:iWstvhYNrkUn:iptAd
MD5:	F27314DD366903BBC6141EAE524B0FDE
SHA1:	4714D4A11C53CF4258C3A0246B98E5F5A01FBC12
SHA-256:	68C7AD234755B9EDB06832A084D092660970C89A7305E0C47D327B6AC50DD898
SHA-512:	07A0D529D9458DE5E46385F2A9D77E0987567BA908B53DDB1F83D40D99A72E6B2E3586B9F79C2264A83422C4E7FC6559CAC029A6F969F793F7407212BB3ECD51
Malicious:	false
Reputation:	low
Preview:	...m.................DB_VERSION.1

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Reputation:	low
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	303
Entropy (8bit):	5.222566831253569
Encrypted:	false
SSDEEP:	6:HxV0q1RN23oH+Tcwtp3hBtB2KLlt7FIAq2PRN23oH+Tcwtp3hBWsIFUv:HT01Yebp3dFLv7eAvaYebp3eFUv
MD5:	0E1F7CC5C7183EFB0D85811FBED04B3E
SHA1:	118D3413D2072F6F38D21277B9008877C34B7A0E
SHA-256:	6AB373DEF71BE88F9BC010AD47F1BD0477743E95FD11A612A6C0A95187FDC9BD
SHA-512:	B228B54E9AF299F0D196336C074FFFA83AF1104163962E393DEAC4D85516C4878E4B7DBFE8525DB501300C2487C51CE2D5D4DA90E933073150CC126170F019FB
Malicious:	false
Reputation:	low
Preview:	2024/01/17-18:07:11.436 140 Creating DB C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform/auto_show_data.db since it was missing..2024/01/17-18:07:11.824 140 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform/auto_show_data.db/MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Reputation:	low
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	modified
Size (bytes):	2164091
Entropy (8bit):	5.223269290866463
Encrypted:	false
SSDEEP:	24576:F0PkZpV+fc4vX0xuehuljmFFAypENUmixYmk7bc2f:F0MZpV+f20mmx
MD5:	D15D53FBF45D1570298FDA88CFC13E66
SHA1:	3D39679EC244231F7CF3FCAE2E986A7F644298C7
SHA-256:	65EAB01C59BA9C7316E7D5A4EDA07F17390F5B83C4EFB9A77123532C507E4BB6
SHA-512:	3F64F3FB832BEBE90109963A5F48F1EF455439AB7A36CF2A060BFD0383AFB3B7FD4D771506E47A16526F1F70A229769921DCA2146848846A8274A228B8901261
Malicious:	false
Reputation:	low
Preview:	...m.................DB_VERSION.1...8.................QUERY_TIMESTAMP:arbitration_priority_list4...13341056840624329.$QUERY:arbitration_priority_list4....[{"name":"arbitration_priority_list","url":"https://edgeassetservice.azureedge.net/assets/arbitration_priority_list/4.0.5/asset?sv=2017-07-29&sr=c&sig=NtPyTqjbjPElpw2mWa%2FwOk1no4JFJEK8%2BwO4xQdDJO4%3D&st=2021-01-01T00%3A00%3A00Z&se=2023-12-30T00%3A00%3A00Z&sp=r&assetgroup=ArbitrationService","version":{"major":4,"minor":0,"patch":5},"hash":"N0MkrPHaUyfTgQSPaiVpHemLMcVgqoPh/xUYLZyXayg=","size":11749}]...................'ASSET_VERSION:arbitration_priority_list.4.0.5..ASSET:arbitration_priority_list.[{. "configVersion": 32,. "PrivilegedExperiences": [. "ShorelinePrivilegedExperienceID",. "SHOPPING_AUTO_SHOW_COUPONS_CHECKOUT",. "SHOPPING_AUTO_SHOW_LOWER_PRICE_FOUND",. "SHOPPING_AUTO_SHOW_BING_SEARCH",. "SHOPPING_AUTO_SHOW_REBATES",. "SHOPPING_AUTO_SHOW_REBATES_CONFIRMATION",. "SHOPPING_AUTO_SHOW_REBATES_DEACTI

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	332
Entropy (8bit):	5.059435322903251
Encrypted:	false
SSDEEP:	6:HtOvAVq2PRN23oH+Tcwt9Eh1tIFUt8+1AgZmw++F4AIkwORN23oH+Tcwt9Eh15LJ:HtnvaYeb9Eh16FUt8+v/++F25JYeb9Er
MD5:	2C0CF1450D8132D63F8B4CD6D56F705E
SHA1:	146A802DA8146106DE26EAFCE7389EFE86E91123
SHA-256:	0038C7431A06C71FE1A36BD43C5B14F1F49E504EA73DA599C5289C354F1C0173
SHA-512:	D450A3586C9E69AF0A9C603FBF9C7A1458C11DB400CCC730E0F4DFAD722708868936D9BA78A777AEF2BBB19EC6B34E42B950E2A654069A63DEB96A6B50FCEECD
Malicious:	false
Reputation:	low
Preview:	2024/01/17-18:07:11.017 1440 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db/MANIFEST-000001.2024/01/17-18:07:11.023 1440 Recovering log #3.2024/01/17-18:07:11.031 1440 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	332
Entropy (8bit):	5.059435322903251
Encrypted:	false
SSDEEP:	6:HtOvAVq2PRN23oH+Tcwt9Eh1tIFUt8+1AgZmw++F4AIkwORN23oH+Tcwt9Eh15LJ:HtnvaYeb9Eh16FUt8+v/++F25JYeb9Er
MD5:	2C0CF1450D8132D63F8B4CD6D56F705E
SHA1:	146A802DA8146106DE26EAFCE7389EFE86E91123
SHA-256:	0038C7431A06C71FE1A36BD43C5B14F1F49E504EA73DA599C5289C354F1C0173
SHA-512:	D450A3586C9E69AF0A9C603FBF9C7A1458C11DB400CCC730E0F4DFAD722708868936D9BA78A777AEF2BBB19EC6B34E42B950E2A654069A63DEB96A6B50FCEECD
Malicious:	false
Reputation:	low
Preview:	2024/01/17-18:07:11.017 1440 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db/MANIFEST-000001.2024/01/17-18:07:11.023 1440 Recovering log #3.2024/01/17-18:07:11.031 1440 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DIPS

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 7, cookie 0x3, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.4850776927254287
Encrypted:	false
SSDEEP:	24:TLi5YFQq3qh7z3WMYziciNW9WkZ96UwOfBiEI+dSG:TouQq3qh7z3bY2LNW9WMcUvBi5+db
MD5:	602B52CE1E66A755F8D6E40567B32F41
SHA1:	A890C7AA9CF8FF4BA266F5E38F25A625D3AE9CEC
SHA-256:	01B94298667A98060337B3E0104AAEBCB635B3229E3BB929CEDF2617F84E3C60
SHA-512:	495633518664DCB8119B38B638C1E08957B38E3216CF66E94432B61389120B45383D96ACA4853A53544425FA576672E95ED6B59B474C8417BF3015E6F0BF6140
Malicious:	false
Reputation:	low
Preview:	SQLite format 3......@ ..........................................................................j..........g.....8...n................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DashTrackerDatabase

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 5, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 5
Category:	dropped
Size (bytes):	10240
Entropy (8bit):	0.8708334089814068
Encrypted:	false
SSDEEP:	12:LBtW4mqsmvEFUU30dZV3lY7+YNbr1dj3BzA2ycFUxOUDaazMvbKGxiTUwZ79GV:LLaqEt30J2NbDjfy6UOYMvbKGxjgm
MD5:	92F9F7F28AB4823C874D79EDF2F582DE
SHA1:	2D4F1B04C314C79D76B7FF3F50056ECA517C338B
SHA-256:	6318FCD9A092D1F5B30EBD9FB6AEC30B1AEBD241DC15FE1EEED3B501571DA3C7
SHA-512:	86FEF0E05F871A166C3FAB123B0A4B95870DCCECBE20B767AF4BDFD99653184BBBFE4CE1EDF17208B7700C969B65B8166EE264287B613641E7FDD55A6C09E6D4
Malicious:	false
Reputation:	low
Preview:	SQLite format 3......@ ..........................................................................j...v... .. .....M....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	761951
Entropy (8bit):	5.956540608297565
Encrypted:	false
SSDEEP:	12288:p/ZfpcrjVTQll/MQeJyP9pE9XVlvpgUA3jE+Ye1aB+WdCW+Rx3T8CsylGQua:p/lmjVTQXZeJyP9UwTEIa4QCN3hzlR1
MD5:	D1E0D165980D8EF2528916E25C32B790
SHA1:	C28E0F402E00C2D8A74BDEFBD79E434A243AEDD3
SHA-256:	7082E390DD3663E75DA5B99E78E306FB852648ADECA0E9FEE10D662013B3E519
SHA-512:	F24C8AEC16E1035C4BB3F0E8ABB7FC4087AD8400DBD7632539FFBCF0761F26064E3F7B0A06C9C4AF6B0804E6A8CD69C75B7B0AA321B69A85F2D6790636BDA31F
Malicious:	false
Reputation:	low
Preview:	...m.................DB_VERSION.1q.{.................BLOOM_FILTER:...{"numberOfHashFunctions":8,"shiftBase":10,"bloomFilterArraySize":4520148,"primeBases":[5381,5381,5381,5381],"supportedDomains":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\000004.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	224
Entropy (8bit):	5.48504179804763
Encrypted:	false
SSDEEP:	6:OV38D8xSEsIVl+n0PxEWX0stoC6x6YqjaSaLZ4:4MD/Qc0Tkca6Daha
MD5:	D1F05CDFA99ECC34ED0BC5D0285347CC
SHA1:	4AEFA9B32658356CB9C3F4FA344EA8FE6ECF5AC3
SHA-256:	E43B07EAA78014723848DB78719DED0A198FB30725C49CA6F0B561950C8922C3
SHA-512:	4BE3AFB3952AAC1C186CFFF8B349F73A8AA9077E6FD78E7536AD5C8904FC685EFC0FBCEEA6525F560B9DA22B5FB7A72F83A605D062F1838EC92931E97BC7B7FB
Malicious:	false
Reputation:	low
Preview:	M6).9................BLOOM_FILTER_EXPIRY_TIME:.1705597632.247095.+.XG................BLOOM_FILTER_LAST_MODIFIED:.Wed, 17 Jan 2024 13:19:27 GMT.U.K................FLYOUT_STORAGE:-{"personalization_data_consent_enabled":true}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\000005.ldb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	761898
Entropy (8bit):	5.955482997218464
Encrypted:	false
SSDEEP:	12288:D/ZfpcrfVTyllWMueJyP9pK9FVlcpkUuljE6YeKAB++d2Q+RU3TeCoy2vD9N:D/lmfVTyXGeJyP9ej1E5A4o2m3f32rH
MD5:	70B9A461E496517BB03236A4AD7A9A54
SHA1:	8B3CC2CF0D409FFD7339056DFA4140F2F224A7C9
SHA-256:	AA2F55580F545693006B524E3307AEB62F0F634EC5AE4D27FFE479A32E68E92B
SHA-512:	5EE270ECEADAC09D2FBF4BF54CEFBF446D6C8B6835821B23E12AF2EEBE7E8B5A25C5227E9200D34A621CFD6FD89926F8F041D2FA77C5F3E329AAEF1DAEE70E31
Malicious:	false
Reputation:	low
Preview:	.....BLOOM_FILTER:........{"numberOfHashFunctions":8,"shiftBase":10,"bloomFilterArraySize":4520148,"primeBases":[5381,5381,5381,5381],"supportedDomains":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	505
Entropy (8bit):	5.240771387184222
Encrypted:	false
SSDEEP:	12:HbvaYebn9GFUt8+gZ/++RFz5JYebn95Z9tPc2FxWf0vpDxWf/K+pchh:baYeb9ig8JlJYeb9znbhh
MD5:	26A1257CC1B07BD80E7876390049BAF2
SHA1:	E580AC22AFB5A0066EE88E291963E425B76FE139
SHA-256:	630108CD602338B0EAA62A4B165E1E61CCA04F12D047B4416E462B02FA6B464E
SHA-512:	BD3FEBA3667E39318CC6BAB670FC32B1F2C586ED5B52A959B05A57FD45B410FC600F341F538555F9098C280BA899EBC4EF88674399CABC9C740FDF51A10AF326
Malicious:	false
Reputation:	low
Preview:	2024/01/17-18:07:04.609 d60 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons/coupons_data.db/MANIFEST-000001.2024/01/17-18:07:04.625 d60 Recovering log #3.2024/01/17-18:07:04.633 d60 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons/coupons_data.db/000003.log .2024/01/17-18:07:12.279 13a8 Level-0 table #5: started.2024/01/17-18:07:12.309 13a8 Level-0 table #5: 761898 bytes OK.2024/01/17-18:07:12.311 13a8 Delete type=0 #3.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	505
Entropy (8bit):	5.240771387184222
Encrypted:	false
SSDEEP:	12:HbvaYebn9GFUt8+gZ/++RFz5JYebn95Z9tPc2FxWf0vpDxWf/K+pchh:baYeb9ig8JlJYeb9znbhh
MD5:	26A1257CC1B07BD80E7876390049BAF2
SHA1:	E580AC22AFB5A0066EE88E291963E425B76FE139
SHA-256:	630108CD602338B0EAA62A4B165E1E61CCA04F12D047B4416E462B02FA6B464E
SHA-512:	BD3FEBA3667E39318CC6BAB670FC32B1F2C586ED5B52A959B05A57FD45B410FC600F341F538555F9098C280BA899EBC4EF88674399CABC9C740FDF51A10AF326
Malicious:	false
Reputation:	low
Preview:	2024/01/17-18:07:04.609 d60 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons/coupons_data.db/MANIFEST-000001.2024/01/17-18:07:04.625 d60 Recovering log #3.2024/01/17-18:07:04.633 d60 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons/coupons_data.db/000003.log .2024/01/17-18:07:12.279 13a8 Level-0 table #5: started.2024/01/17-18:07:12.309 13a8 Level-0 table #5: 761898 bytes OK.2024/01/17-18:07:12.311 13a8 Delete type=0 #3.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	103
Entropy (8bit):	5.267898014713841
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVj/wIuThinKqoPxFxN3erkEtl:scoBY7j/wZQuPxFDkHl
MD5:	203000AD70257E34A574B226A00C2640
SHA1:	91D2A64105B8194DFAE943028E4F53D565004EC7
SHA-256:	EDBB0AAC8F6DEC2619AEFECED91311902157D166E2464363215492888549B6D9
SHA-512:	F78C6A3573A0E80DB3EFECC1356C5804FB1A08609F83C99CA5A087507E3EAF3AD85BE6D46B84931171092E9D7A852713358C06DEDFF5B9BF686436BC86991E42
Malicious:	false
Reputation:	low
Preview:	.\|.."....leveldb.BytewiseComparator......^.U.7.................BLOOM_FILTER:.........DB_VERSION........

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 6, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 6
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.613425836348184
Encrypted:	false
SSDEEP:	12:TLs9pRSJDBJuqJSEDNvrWjJQ9Dl9np59yDLgHFUxOUDaaTXubHa7mWs7MAqKhXiJ:TLapR+DDNzWjJ0npnyXKUO8+j9pbhXmL
MD5:	D945A2E11EF2A25414A728181A3F183F
SHA1:	66D1E27B7577442FEA0A7C2C47A4DCBDDE5B6103
SHA-256:	92C1E8184510CD370782D6537F7BF118C50EEAAF64CB3B1527C970054F7FC824
SHA-512:	83DA3F39691CB4E851E81CA09EC5B90B369640CAE53FAC28D5D9A2437F98E6F8370D7C5AE02D799472569D8E94619C6AD8ECD2B588237E0E0D7A62FF4DC1D5B9
Malicious:	false
Reputation:	low
Preview:	SQLite format 3......@ ..........................................................................j...%.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Reputation:	low
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	392647
Entropy (8bit):	5.409498577602085
Encrypted:	false
SSDEEP:	6144:4z/imSpx6WLPS+KWFHu5MURafq49QxxEnyEndBuHltBfdK5WNbsVEtiPqCfXtLPb:4c6Mxq49mEndBuHltBfdK5WNbsVEtiPX
MD5:	F604AA63A00A5A54F92BBC05002A62DB
SHA1:	7FCEA97549C4BD4A9884C1937DEAFAA34B00DAD8
SHA-256:	FA0EE3262A6EC826E8375C01498CC300484E8E6AC271FEB57D6C24C8FA8242D0
SHA-512:	4387DBD7938021953CC3CA0584F1151381C1398B37F3A65023A0EAD89CEE40229A414E84386755722508576B1688C88469E8F4D87E55665B1B59535EFBAD2E86
Malicious:	false
Reputation:	low
Preview:	...m.................DB_VERSION.1....................&QUERY_TIMESTAMP:domains_config_gz2...13349984831971597..QUERY:domains_config_gz2....[{"name":"domains_config_gz","url":"https://edgeassetservice.azureedge.net/assets/domains_config_gz/2.8.75/asset?sv=2017-07-29&sr=c&sig=ODCnll3A%2Fpr7IBDaNsDR2zA%2FOssZl6xdmLkM6vzzbZ0%3D&st=2021-01-01T00%3A00%3A00Z&se=2024-03-31T00%3A00%3A00Z&sp=r&assetgroup=EntityExtractionDomainsConfig","version":{"major":2,"minor":8,"patch":75},"hash":"EwG2gkfquexLj6u3yjHyiL4YQwdU318k1Hub+1rSDMI=","size":391864}].....}...............ASSET_VERSION:domains_config_gz.2.8.75..ASSET:domains_config_gz...{"config": {"token_limit": 1600, "page_cutoff": 4320, "default_locale_map": {"bg": "bg-bg", "bs": "bs-ba", "el": "el-gr", "en": "en-us", "es": "es-mx", "et": "et-ee", "cs": "cs-cz", "da": "da-dk", "de": "de-de", "fa": "fa-ir", "fi": "fi-fi", "fr": "fr-fr", "he": "he-il", "hr": "hr-hr", "hu": "hu-hu", "id": "id-id", "is": "is-is", "it": "it-it", "ja": "ja-jp", "ko": "

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Reputation:	low
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	307
Entropy (8bit):	5.155179774863742
Encrypted:	false
SSDEEP:	6:H1Hs1RN23oH+Tcwtk2WwnvB2KLltWUu+q2PRN23oH+Tcwtk2WwnvIFUv:H1H7YebkxwnvFLvTfvaYebkxwnQFUv
MD5:	96702258C087E3DAA772F0F3754627F0
SHA1:	215B3452B1B64ACBCAE0888275EBA663D59ECE66
SHA-256:	2A13D22D0F542D1B6AD54A9C4ACD74FB601DE2EB59DE2A6F70A080263235DCB7
SHA-512:	9A0C5B1B8418331CB49071DDABF637738928F13202147DC60DED7A13D69405B4EF2384A79394912C4143DE8AAAF65E421DEFFA39253E716F60F8E245264B2493
Malicious:	false
Reputation:	low
Preview:	2024/01/17-18:07:11.097 1608 Creating DB C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtractionAssetStore.db since it was missing..2024/01/17-18:07:11.318 1608 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtractionAssetStore.db/MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Reputation:	low
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\domains_config.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	modified
Size (bytes):	374810
Entropy (8bit):	5.396152994116036
Encrypted:	false
SSDEEP:	6144:dWLgimLVvUrsc6rRA81b/18jyJNjfvrfM6Rr:cLBgAg1zfvz
MD5:	52DA4DDABEBE469AE00F841EE7F2E3D5
SHA1:	6DE5E65E9A1AA35FEE6209BA6D6F2BDDBEDA7451
SHA-256:	D82704E7CE708E8E9C0D364D772B3BA20ADDF0646D55348FE64B09EDB33641C4
SHA-512:	9895FCE9AE125747CDE30564F19ADD60CF80AEC7CC804E065972E5A59CC9905FCD373A71477C7B782A2664596A06962D7D413BC7FB46E26FD66306C87B7AC799
Malicious:	false
Reputation:	low
Preview:	{"aee_config":{"ar":{"price_regex":{"ae":"(((ae\|aed\|\\x{062F}\\x{0660}\\x{0625}\\x{0660}\|\\x{062F}\\.\\x{0625}\|dhs\|dh)\\s\\d{1,3})\|(\\d{1,3}\\s(ae\|aed\|\\x{062F}\\x{0660}\\x{0625}\\x{0660}\|\\x{062F}\\.\\x{0625}\|dhs\|dh)))","dz":"(((dzd\|da\|\\x{062F}\\x{062C})\\s\\d{1,3})\|(\\d{1,3}\\s(dzd\|da\|\\x{062F}\\x{062C})))","eg":"(((e\\x{00a3}\|egp)\\s\\d{1,3})\|(\\d{1,3}\\s(e\\x{00a3}\|egp)))","ma":"(((mad\|dhs\|dh)\\s\\d{1,3})\|(\\d{1,3}\\s(mad\|dhs\|dh)))","sa":"((\\d{1,3}\\s(sar\\s\\x{fdfc}\|sar\|sr\|\\x{fdfc}\|\\.\\x{0631}\\.\\x{0633}))\|((sar\\s\\x{fdfc}\|sar\|sr\|\\x{fdfc}\|\\.\\x{0631}\\.\\x{0633})\\s\\d{1,3}))"},"product_terms":"((\\x{0623}\\x{0636}\\x{0641}\\s\\x{0625}\\x{0644}\\x{0649}\\s\\x{0627}\\x{0644}\\x{0639}\\x{0631}\\x{0628}\\x{0629})\|(\\x{0623}\\x{0636}\\x{0641}\\s\\x{0625}\\x{0644}\\x{0649}\\s\\x{0627}\\x{0644}\\x{062D}\\x{0642}\\x{064A}\\x{0628}\\x{0629})\|(\\x{0627}\\x{0634}\\x{062A}\\x{0631}\\x{064A}\\s*\\x{0627}\\x{0644}\\x{0622}\\x{0646})\|(\\x{062E}\\x{064A}\\x{0627}\\x{0631}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	418
Entropy (8bit):	1.8784775129881184
Encrypted:	false
SSDEEP:	6:qTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCT:qWWWWWWWWWWWWWWWWWWWWW
MD5:	BF097D724FDF1FCA9CF3532E86B54696
SHA1:	4039A5DD607F9FB14018185F707944FE7BA25EF7
SHA-256:	1B8B50A996172C16E93AC48BCB94A3592BEED51D3EF03F87585A1A5E6EC37F6B
SHA-512:	31857C157E5B02BCA225B189843CE912A792A7098CEA580B387977B29E90A33C476DF99AD9F45AD5EB8DA1EFFD8AC3A78870988F60A32D05FA2DA8F47794FACE
Malicious:	false
Reputation:	low
Preview:	.f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5...............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	320
Entropy (8bit):	5.180434431315379
Encrypted:	false
SSDEEP:	6:HUIFIq2PRN23oH+Tcwt8aPrqIFUt8+2RFZZmw++0EkwORN23oH+Tcwt8amLJ:HDOvaYebL3FUt8+2/++0E5JYebQJ
MD5:	E508F09BC87A6CA8F2CD77DD150FFA31
SHA1:	8B2B8CFB5C23A7BB35F99D74B24DB74FD8313F3A
SHA-256:	DF2B38CA3DC9B233D93CED6DF25D95D25DC71CDB71922469E2873FC090DCDC2F
SHA-512:	297E48DC3201462F945E27AAE271C0F4B7AF47D4C60DD80D1F19875676D3B55812F7A0C75E5DC0FCEEB56A583F59E1ABFF22AA2B7C80A94AE5D31F0A9AC50EB7
Malicious:	false
Reputation:	low
Preview:	2024/01/17-18:07:04.607 1914 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules/MANIFEST-000001.2024/01/17-18:07:04.657 1914 Recovering log #3.2024/01/17-18:07:04.661 1914 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	320
Entropy (8bit):	5.180434431315379
Encrypted:	false
SSDEEP:	6:HUIFIq2PRN23oH+Tcwt8aPrqIFUt8+2RFZZmw++0EkwORN23oH+Tcwt8amLJ:HDOvaYebL3FUt8+2/++0E5JYebQJ
MD5:	E508F09BC87A6CA8F2CD77DD150FFA31
SHA1:	8B2B8CFB5C23A7BB35F99D74B24DB74FD8313F3A
SHA-256:	DF2B38CA3DC9B233D93CED6DF25D95D25DC71CDB71922469E2873FC090DCDC2F
SHA-512:	297E48DC3201462F945E27AAE271C0F4B7AF47D4C60DD80D1F19875676D3B55812F7A0C75E5DC0FCEEB56A583F59E1ABFF22AA2B7C80A94AE5D31F0A9AC50EB7
Malicious:	false
Reputation:	low
Preview:	2024/01/17-18:07:04.607 1914 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules/MANIFEST-000001.2024/01/17-18:07:04.657 1914 Recovering log #3.2024/01/17-18:07:04.661 1914 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	418
Entropy (8bit):	1.8784775129881184
Encrypted:	false
SSDEEP:	6:qTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCT:qWWWWWWWWWWWWWWWWWWWWW
MD5:	BF097D724FDF1FCA9CF3532E86B54696
SHA1:	4039A5DD607F9FB14018185F707944FE7BA25EF7
SHA-256:	1B8B50A996172C16E93AC48BCB94A3592BEED51D3EF03F87585A1A5E6EC37F6B
SHA-512:	31857C157E5B02BCA225B189843CE912A792A7098CEA580B387977B29E90A33C476DF99AD9F45AD5EB8DA1EFFD8AC3A78870988F60A32D05FA2DA8F47794FACE
Malicious:	false
Reputation:	low
Preview:	.f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5...............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.186831733276891
Encrypted:	false
SSDEEP:	6:Hjq2PRN23oH+Tcwt865IFUt8+CUxZZmw++QxkwORN23oH+Tcwt86+ULJ:HjvaYeb/WFUt8+CO/++Qx5JYeb/+SJ
MD5:	BAB794C7E3592FB63B78CFADF8CD7AB2
SHA1:	52FCD554461E46737A91C4BE0DB1DF4E296DF5BB
SHA-256:	4C06EDC052900018611B1C95A14A5E7277644AD47C012BB8D4468D89A85AD2F0
SHA-512:	16B34C55D0B1227E3E42CEEE9F805DD2FA25277CB756D9D6BFC6B4A9C78713241E348B1CAFC55264A2065F7386C7F8F64734C3FA79919B676216A32533322AD9
Malicious:	false
Reputation:	low
Preview:	2024/01/17-18:07:04.684 1914 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts/MANIFEST-000001.2024/01/17-18:07:04.687 1914 Recovering log #3.2024/01/17-18:07:04.688 1914 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.186831733276891
Encrypted:	false
SSDEEP:	6:Hjq2PRN23oH+Tcwt865IFUt8+CUxZZmw++QxkwORN23oH+Tcwt86+ULJ:HjvaYeb/WFUt8+CO/++Qx5JYeb/+SJ
MD5:	BAB794C7E3592FB63B78CFADF8CD7AB2
SHA1:	52FCD554461E46737A91C4BE0DB1DF4E296DF5BB
SHA-256:	4C06EDC052900018611B1C95A14A5E7277644AD47C012BB8D4468D89A85AD2F0
SHA-512:	16B34C55D0B1227E3E42CEEE9F805DD2FA25277CB756D9D6BFC6B4A9C78713241E348B1CAFC55264A2065F7386C7F8F64734C3FA79919B676216A32533322AD9
Malicious:	false
Reputation:	low
Preview:	2024/01/17-18:07:04.684 1914 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts/MANIFEST-000001.2024/01/17-18:07:04.687 1914 Recovering log #3.2024/01/17-18:07:04.688 1914 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	1254
Entropy (8bit):	1.8784775129881184
Encrypted:	false
SSDEEP:	12:qWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWA:
MD5:	826B4C0003ABB7604485322423C5212A
SHA1:	6B8EF07391CD0301C58BB06E8DEDCA502D59BCB4
SHA-256:	C56783C3A6F28D9F7043D2FB31B8A956369F25E6CE6441EB7C03480334341A63
SHA-512:	0474165157921EA84062102743EE5A6AFE500F1F87DE2E87DBFE36C32CFE2636A0AE43D8946342740A843D5C2502EA4932623C609B930FE8511FE7356D4BAA9C
Malicious:	false
Reputation:	low
Preview:	.f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5........

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	320
Entropy (8bit):	5.181366578264297
Encrypted:	false
SSDEEP:	6:H0N+q2PRN23oH+Tcwt8NIFUt8+fZmw++fVkwORN23oH+Tcwt8+eLJ:HtvaYebpFUt8+f/++N5JYebqJ
MD5:	8D5EF73EA17DE86F582867E4C1AD33EB
SHA1:	40373D41B9F9E26166050BA3B4A2F6BC9E0DA0CA
SHA-256:	200DFC39C90B214AE9B5953296ACC498E0E91108516C80BE438D1A8B0BA9A283
SHA-512:	79B39B76C4F4A9EB88A4D7C009BB279300CA8046F80407FEA268FB8EC0C21456D51D0CCD19FB66900BE4EB45F09AF67B5AE3B71A1704810D806771EC579328E1
Malicious:	false
Reputation:	low
Preview:	2024/01/17-18:07:05.674 13a8 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State/MANIFEST-000001.2024/01/17-18:07:05.675 13a8 Recovering log #3.2024/01/17-18:07:05.675 13a8 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	320
Entropy (8bit):	5.181366578264297
Encrypted:	false
SSDEEP:	6:H0N+q2PRN23oH+Tcwt8NIFUt8+fZmw++fVkwORN23oH+Tcwt8+eLJ:HtvaYebpFUt8+f/++N5JYebqJ
MD5:	8D5EF73EA17DE86F582867E4C1AD33EB
SHA1:	40373D41B9F9E26166050BA3B4A2F6BC9E0DA0CA
SHA-256:	200DFC39C90B214AE9B5953296ACC498E0E91108516C80BE438D1A8B0BA9A283
SHA-512:	79B39B76C4F4A9EB88A4D7C009BB279300CA8046F80407FEA268FB8EC0C21456D51D0CCD19FB66900BE4EB45F09AF67B5AE3B71A1704810D806771EC579328E1
Malicious:	false
Reputation:	low
Preview:	2024/01/17-18:07:05.674 13a8 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State/MANIFEST-000001.2024/01/17-18:07:05.675 13a8 Recovering log #3.2024/01/17-18:07:05.675 13a8 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.0_1\_metadata\computed_hashes.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	429
Entropy (8bit):	5.809747912785553
Encrypted:	false
SSDEEP:	6:Y8U0vEjrAWT0aykI7Nm4vioKFbYiweVHUSENjrAWT0uWIyAmiVcIS9vqiweVHlr/:Y8U5j0panIBmiiq7tNj0pt8cIUcdQ
MD5:	C48BC98847A1126D294B3F163D6C6FA7
SHA1:	A6B1582A789FA6BD9284DBB0DFCE5273538595F6
SHA-256:	33D906D8218FC387B743C787F4C8E105A46EB7A710D0D4FFC986B2A2A3B2C410
SHA-512:	351BDCAFC99712BD4FD77037EE31155067A6784AE145EF5AB9EC0E0CC7AE70C3777D03719E0DFF1A2AC0B2DE26FC43F9BFA20EF1A1691FB6526AE53A258BADF2
Malicious:	false
Reputation:	low
Preview:	{"file_hashes":[{"block_hashes":["OdZL4YFLwCTKbdslekC6/+U9KTtDUk+T+nnpVOeRzUc=","U6xN0M1gK4De+dC3MDF1FCcunY+wsWQetm3T9Jpm5Ok=","FDzuJGfyhdS4sc7hqlsg8j1JPKb129yMDWulF0Hequ0="],"block_size":4096,"path":"content.js"},{"block_hashes":["OdZL4YFLwCTKbdslekC6/+U9KTtDUk+T+nnpVOeRzUc=","9lSvuLszpAzBYcT4yhsBxUumDceknO8taDs/0xaHU8A=","c6lVJE29m5/3fZJhBN9bOVj0MRIlAOQg9/UMckNE2qs="],"block_size":4096,"path":"content_new.js"}],"version":2}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Favicons

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 2, database pages 18, cookie 0x8, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	36864
Entropy (8bit):	4.70328265066336
Encrypted:	false
SSDEEP:	768:R/7FrQydqooflrcKR0XFoEpya9fgbPyxqS:R/7FrQydqooflrcKR0XaECzycS
MD5:	D86CC8EE71652FF3D537B8DD458B1967
SHA1:	7824814E01D3F67F4E4781E900AF43AC1DC459C5
SHA-256:	774D10FF1AB0474ABD84A66923EA35440D3A7C8CCABA18DAFD238A3AAC9770AA
SHA-512:	D5C25501E51DC279B21134073CDD3534DEC984160C98D0506996233773A6403F346B95BA9E1741B64A31B20E8FFFEC6B1E4D3901FE97539EC61718814F3B9485
Malicious:	false
Reputation:	low
Preview:	SQLite format 3......@ ..........................................................................j..........g....._.c...~.2.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................s...;+...indexfavicon_bitmaps_icon_idfavico

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 2, database pages 38, cookie 0x1f, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	155648
Entropy (8bit):	0.6392840383069586
Encrypted:	false
SSDEEP:	96:uHyWAfiV79aqHvNWpjWyejzH+bDoYysX0IxQz+kHtpVJNlYDLjGQLBE3CeE0kEnN:b29a4thH+bDo3iN0+2TVJkXBBE3ybeYQ
MD5:	09E821226ED0398D0D8D9260AA37F868
SHA1:	D6D6C7D950CAA930D4490609AEC903C46BD21732
SHA-256:	D795EC9FAD34950612468CF5DEF5689C791BA67789D67EC0D19B30CB74568410
SHA-512:	C7D5408E50D9043A2F3F0A022F97F403A3BB20B5D5F0B50D89E493214DD41B5F039C866E700F60D3E57C86F42ACD5363DACF93B668C07AE3CE78A3543762DE68
Malicious:	false
Reputation:	low
Preview:	SQLite format 3......@ .......&..................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\HubApps (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (1597), with CRLF line terminators
Category:	dropped
Size (bytes):	115717
Entropy (8bit):	5.183660917461099
Encrypted:	false
SSDEEP:	1536:utDURN77GZqW3v6PD/469IxVBmB22q7LRks3swn0:utAaE2Jt0
MD5:	3D8183370B5E2A9D11D43EBEF474B305
SHA1:	155AB0A46E019E834FA556F3D818399BFF02162B
SHA-256:	6A30BADAD93601FC8987B8239D8907BCBE65E8F1993E4D045D91A77338A2A5B4
SHA-512:	B7AD04F10CD5DE147BDBBE2D642B18E9ECB2D39851BE1286FDC65FF83985EA30278C95263C98999B6D94683AE1DB86436877C30A40992ACA1743097A2526FE81
Malicious:	false
Reputation:	low
Preview:	{.. "current_locale": "en-GB",.. "hub_apps": [ {.. "auto_show": {.. "enabled": true,.. "fre_notification": {.. "enabled": true,.. "header": "Was opening this pane helpful to you?",.. "show_count": 2,.. "text": "Was opening this pane helpful to you?".. },.. "settings_description": "We'll automatically open Bing Chat in the sidebar to show you relevant web experiences alongside your web content",.. "settings_title": "Automatically open Bing Chat in the sidebar",.. "triggering_configs\|flight:msHubAppsMsnArticleAutoShowTriggering": [ {.. "show_count_basis": "signal",.. "signal_name": "IsMsnArticleAutoOpenFromP1P2",.. "signal_threshold": 0.5.. } ],.. "triggering_configs\|flight:msUndersidePersistentChat": [ {.. "signal_name": "IsUndersidePersistentChatLink",.. "signal_threshold": 0.5.. } ],.. "triggering_co

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\HubApps Icons

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 12, cookie 0x3, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	3.64804800095487
Encrypted:	false
SSDEEP:	384:aj9P00Qjlkcl773pLQP/KbtDQkQerWhCgam6ItRKToaAu:adWlHl7KP/Ae2Wv9RKcC
MD5:	D7F34BE1686C94C8A255628FC5D18754
SHA1:	0F13479E607B858203A1F52B5AB753619A99AA42
SHA-256:	B42823762657094B059FDCA0E1A9FFE5D41879706897C4F80964740730374AFB
SHA-512:	F9DD9AA4E94E852EA2429EE28B54AC32860B2D95C7E455D51A3FF1BA2AFED4616B5176D7578EC88B4E0C49293CF97C21C077AEB2EE111454DA5ABBF3B5EE9CD3
Malicious:	false
Reputation:	low
Preview:	SQLite format 3......@ ..........................................................................j..........g...:.8....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	404
Entropy (8bit):	5.267972600848
Encrypted:	false
SSDEEP:	12:HPvaYeb8rcHEZrELFUt8+nZ/++wK5JYeb8rcHEZrEZSJ:XaYeb8nZrExg8WJYeb8nZrEZe
MD5:	6D960C9204E05568E71728DEC6E3D001
SHA1:	E6092AB333A1683745CF233719450E0B4BE7883B
SHA-256:	52CDC69C7C2DDC405070496875E8E7FEDCC4F9974CD542BE4BB64111171ED086
SHA-512:	37C8F1867DA942AF45786E076AA4E67799F7921FD042D2D67DE7A5651414C72A2BA477524D747A8B03EE154E73810532FB6709B0CF3CDEF3DE665210A211DC65
Malicious:	false
Reputation:	low
Preview:	2024/01/17-18:07:09.508 13a8 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold/MANIFEST-000001.2024/01/17-18:07:09.509 13a8 Recovering log #3.2024/01/17-18:07:09.510 13a8 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	404
Entropy (8bit):	5.267972600848
Encrypted:	false
SSDEEP:	12:HPvaYeb8rcHEZrELFUt8+nZ/++wK5JYeb8rcHEZrEZSJ:XaYeb8nZrExg8WJYeb8nZrEZe
MD5:	6D960C9204E05568E71728DEC6E3D001
SHA1:	E6092AB333A1683745CF233719450E0B4BE7883B
SHA-256:	52CDC69C7C2DDC405070496875E8E7FEDCC4F9974CD542BE4BB64111171ED086
SHA-512:	37C8F1867DA942AF45786E076AA4E67799F7921FD042D2D67DE7A5651414C72A2BA477524D747A8B03EE154E73810532FB6709B0CF3CDEF3DE665210A211DC65
Malicious:	false
Reputation:	low
Preview:	2024/01/17-18:07:09.508 13a8 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold/MANIFEST-000001.2024/01/17-18:07:09.509 13a8 Recovering log #3.2024/01/17-18:07:09.510 13a8 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	930
Entropy (8bit):	5.58576831165619
Encrypted:	false
SSDEEP:	12:C5TlW1lsnU2MHR+Yea70nW88tlp14YOzHbFqBn9Ra8IeuNKHe8E3pohF20HRTieO:4ZWbYUlHRTCW8gQXTVW4uG
MD5:	F77EF191EE6DC930A3E6222122A30C55
SHA1:	A410CAF56ADF0042C7FC2EB12292BC0527515A49
SHA-256:	57825FDC36BC4BCC763ACCE4D30B4477FC6D83C614C09D4521060D2C8C43C98D
SHA-512:	A640BA256166996278A2A3BF72CF186401E869C2A925A682FA07A761A09F10EEA9B3BD31D58D21D60D109D2537D676948326FC031C304858EEA6B605D99A3625
Malicious:	false
Reputation:	low
Preview:	<..8.................VERSION.1..META:https://ntp.msn.com.............._https://ntp.msn.com..FallbackNavigationResult?.{"r":"edgenext-base-v1-empty. NetworkCall","ic":true,"te":628}.!_https://ntp.msn.com..LastKnownPV..1705511231292.-_https://ntp.msn.com..LastVisuallyReadyMarker..1705511233444.._https://ntp.msn.com..bkgdV~.{"cachedVideoId":-1,"lastUpdatedTime":1705511231398,"schedule":[21,33,-1,-1,16,-1,-1],"scheduleFixed":[21,33,-1,-1,16,-1,-1]}.%_https://ntp.msn.com..clean_meta_flag..1.5_https://ntp.msn.com..enableUndersideAutoOpenFromEdge..false."_https://ntp.msn.com..nurturingUid..1705511231275344."_https://ntp.msn.com..pageVersions..{"dhp":"20240117.5"}.*_https://ntp.msn.com..pivotSelectionSource..sticky.&_https://ntp.msn.com..spVisitsMetadata..1.#_https://ntp.msn.com..switchedPivot..myFeed.X_https://ntp.msn.com..Wed Jan 17 2024 18:07:10 GMT+0100 (Central European Standard Time).!_https://ntp.msn.com..storageTest

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	332
Entropy (8bit):	5.115339253904229
Encrypted:	false
SSDEEP:	6:Ht+q2PRN23oH+Tcwt8a2jMGIFUt8+tS5Zmw++w8VkwORN23oH+Tcwt8a2jMmLJ:HovaYeb8EFUt8+tS5/++w85JYeb8bJ
MD5:	C77E537551EE5417B4DBBD297810B03A
SHA1:	83A1E83BA1B62855BD87A8122400F09E602240E4
SHA-256:	D5E4532A774DAC936FA18AC9189B41C4CB7C0EBA813F17876B6F8E43B46864DD
SHA-512:	6B77FC4FCE75C0C797D08264B969F86B34D1D6666B7827FB71C5D3B9D6BE7DB678F1D701538099B55F13389BC1292ACBC3466B5CF1BA3FE38683F24694BE7D68
Malicious:	false
Reputation:	low
Preview:	2024/01/17-18:07:05.182 1078 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb/MANIFEST-000001.2024/01/17-18:07:05.185 1078 Recovering log #3.2024/01/17-18:07:05.201 1078 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	332
Entropy (8bit):	5.115339253904229
Encrypted:	false
SSDEEP:	6:Ht+q2PRN23oH+Tcwt8a2jMGIFUt8+tS5Zmw++w8VkwORN23oH+Tcwt8a2jMmLJ:HovaYeb8EFUt8+tS5/++w85JYeb8bJ
MD5:	C77E537551EE5417B4DBBD297810B03A
SHA1:	83A1E83BA1B62855BD87A8122400F09E602240E4
SHA-256:	D5E4532A774DAC936FA18AC9189B41C4CB7C0EBA813F17876B6F8E43B46864DD
SHA-512:	6B77FC4FCE75C0C797D08264B969F86B34D1D6666B7827FB71C5D3B9D6BE7DB678F1D701538099B55F13389BC1292ACBC3466B5CF1BA3FE38683F24694BE7D68
Malicious:	false
Reputation:	low
Preview:	2024/01/17-18:07:05.182 1078 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb/MANIFEST-000001.2024/01/17-18:07:05.185 1078 Recovering log #3.2024/01/17-18:07:05.201 1078 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\02e1da5b-b817-4afb-bdf3-5496028ebdb8.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Reputation:	low
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\4e400302-b3d5-4814-8107-225325cf41da.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Reputation:	low
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\50d8ec3f-6145-4a2d-9ed5-778d9c9a4a89.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Reputation:	low
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\76d5dc4f-0dfc-4199-8a49-c7cf9b41923d.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Reputation:	low
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\79b016fc-dda5-4c66-acbf-3a87e023b7f0.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Reputation:	low
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 8, database pages 7, cookie 0x5, schema 4, UTF-8, version-valid-for 8
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	2.6871932018945657
Encrypted:	false
SSDEEP:	192:nlOk0kM/zb3a/GICX3nw+NlGfHhxi6lpMv7eTHXwvERei:H0kM7b32GHXA+NlyBppo7e0vEJ
MD5:	4A2BE8189C926EEEC3D2F6DFB2792C63
SHA1:	00B2546BB4F86873427112F689C457DB7D9D1C76
SHA-256:	0B9BA86CFCAC40DA97C34F7231F82FA46632DB3720475190B8F3900017F8CC8D
SHA-512:	CF0746EA1737F1DB4D4EE6FE5A01FE7A2EB548EFEDD2E7FC16C068A0B01DAB84DAFD5D2AD16F71847225EE0684BF03855EC4145C342A629A3C6261485A513F7B
Malicious:	false
Reputation:	low
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 8, database pages 9, cookie 0x4, schema 4, UTF-8, version-valid-for 8
Category:	dropped
Size (bytes):	36864
Entropy (8bit):	1.6325860696322845
Encrypted:	false
SSDEEP:	96:OIEumQv8m1ccnvSwBJYT4wGONhwrWUcqw1a:OIEumQv8m1ccnvSwdwrNOr+qr
MD5:	684F2CE1ABC92011080C544017860286
SHA1:	EC77AA7F97996474CF4C3E8A7C7914675A233EE4
SHA-256:	91E67EEEF58A601AF00151ADF47F442378E2AA715C98228131EC90A29041317E
SHA-512:	7677C6EF64CE45309D2BD917D0842AEFBA91CAA2F38B505E3DC018D17ABF0E86A4CBDB9C8B615D1261B7E03D9A09124399E64B7FA348854CC59505B03BEC939B
Malicious:	false
Reputation:	low
Preview:	SQLite format 3......@ ..........................................................................j..........g...D.........7............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Reputation:	low
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports~RF3f01e.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Reputation:	low
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports~RF40684.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Reputation:	low
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports~RF40f7d.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Reputation:	low
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Reputation:	low
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Nurturing\campaign_history

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 3, database pages 5, cookie 0x2, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.8304922788470294
Encrypted:	false
SSDEEP:	24:TLSOUOq0afDdWec9sJLR7Az7fN4URK2z8r8L0Kj7J5fc:T+OUzDbg3MR7Az6iK2zBTfc
MD5:	9CF32FFAB435976C9C0B50CB2F4B6F39
SHA1:	6B967D6B2ACD94651651164E8ACDA00DA6744DC7
SHA-256:	5E714B7443F2A0FA068234ECFC5AFD403EECA3A7F24D5A876B5E21894921262D
SHA-512:	D80008708042DE68D4589FEB8282E9F1E84DBEFDD9CBF8B100453C86D16AA599C21B1969A42B595AEFFC31CD3BCA07DC103F74C9C00252EBFB39D63DD10C5656
Malicious:	false
Reputation:	low
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	15680
Entropy (8bit):	5.417260438781817
Encrypted:	false
SSDEEP:	192:stDJ99QTryDigabatSuypMsspzO2hjk+EiqeBrzfKZcSnjHFI8QbV+FDNQwsRsur:stDPGKSu4Msspz3jFirObGRQwyso
MD5:	5999DA3EEC7C95B7555E25DEA6A0F59A
SHA1:	6DA36CFEB5DD37465A8912C0FCB5A70AAE7C2383
SHA-256:	71E794ABC2FA39B7FA31D9154B4FE632E1FC156CE07976E5EC463EDA2AE92328
SHA-512:	94DD2DBB4BC46955865F01B1235A58D4B9285F9F9A099AF0725E6EB5871BDF1C4526FED22B631272CF9686FB50737ECA9C24A2C4AC7497387BFC1F66CA760903
Malicious:	false
Reputation:	low
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13349984825291347","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13341058280410352","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"2caf0cf4-ea42-4083-b928-29b39da1182b":{"last_path":""},"2cb2db96-3bd0-403e-abe2-9269b3761041":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF42f88.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	15680
Entropy (8bit):	5.417260438781817
Encrypted:	false
SSDEEP:	192:stDJ99QTryDigabatSuypMsspzO2hjk+EiqeBrzfKZcSnjHFI8QbV+FDNQwsRsur:stDPGKSu4Msspz3jFirObGRQwyso
MD5:	5999DA3EEC7C95B7555E25DEA6A0F59A
SHA1:	6DA36CFEB5DD37465A8912C0FCB5A70AAE7C2383
SHA-256:	71E794ABC2FA39B7FA31D9154B4FE632E1FC156CE07976E5EC463EDA2AE92328
SHA-512:	94DD2DBB4BC46955865F01B1235A58D4B9285F9F9A099AF0725E6EB5871BDF1C4526FED22B631272CF9686FB50737ECA9C24A2C4AC7497387BFC1F66CA760903
Malicious:	false
Reputation:	low
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13349984825291347","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13341058280410352","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"2caf0cf4-ea42-4083-b928-29b39da1182b":{"last_path":""},"2cb2db96-3bd0-403e-abe2-9269b3761041":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF45c55.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	15680
Entropy (8bit):	5.417260438781817
Encrypted:	false
SSDEEP:	192:stDJ99QTryDigabatSuypMsspzO2hjk+EiqeBrzfKZcSnjHFI8QbV+FDNQwsRsur:stDPGKSu4Msspz3jFirObGRQwyso
MD5:	5999DA3EEC7C95B7555E25DEA6A0F59A
SHA1:	6DA36CFEB5DD37465A8912C0FCB5A70AAE7C2383
SHA-256:	71E794ABC2FA39B7FA31D9154B4FE632E1FC156CE07976E5EC463EDA2AE92328
SHA-512:	94DD2DBB4BC46955865F01B1235A58D4B9285F9F9A099AF0725E6EB5871BDF1C4526FED22B631272CF9686FB50737ECA9C24A2C4AC7497387BFC1F66CA760903
Malicious:	false
Reputation:	low
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13349984825291347","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13341058280410352","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"2caf0cf4-ea42-4083-b928-29b39da1182b":{"last_path":""},"2cb2db96-3bd0-403e-abe2-9269b3761041":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	35113
Entropy (8bit):	5.555684022094889
Encrypted:	false
SSDEEP:	768:0/DAFvWPWUfAx8F1+UoAYDCx9Tuqh0VfUC9xbog/OVXhwpTrwkdWMqKpatuD:0/DAFvWPWUfAxu1jauapokdWVztQ
MD5:	7A69A603242190C6324A350BE287D490
SHA1:	6C78BF018CB689CB2091AFAB38D40E74D23DEE52
SHA-256:	0A90F4920DAA3957DA2D7D9A1211BF826A68E01AEEB98E92ABAA9F5302D95774
SHA-512:	DF41737A27A12F4FDCA929EA090E3A369F8E2A46466EF69EC6B7A3B9AF6F5D5174B6A6A6ECD404CCCA49A048CD0C90A76A4D1EA4DC797676E91396BBF10C8BE0
Malicious:	false
Reputation:	low
Preview:	{"edge_fundamentals_appdefaults":{"ess_lightweight_version":101},"ess_kv_states":{"restore_on_startup":{"closed_notification":false,"decrypt_success":true,"key":"restore_on_startup","notification_popup_count":0},"startup_urls":{"closed_notification":false,"decrypt_success":true,"key":"startup_urls","notification_popup_count":0},"template_url_data":{"closed_notification":false,"decrypt_success":true,"key":"template_url_data","notification_popup_count":0}},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13349984824466642","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13349984824466642","location":5,"ma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences~RF42c2d.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	35113
Entropy (8bit):	5.555684022094889
Encrypted:	false
SSDEEP:	768:0/DAFvWPWUfAx8F1+UoAYDCx9Tuqh0VfUC9xbog/OVXhwpTrwkdWMqKpatuD:0/DAFvWPWUfAxu1jauapokdWVztQ
MD5:	7A69A603242190C6324A350BE287D490
SHA1:	6C78BF018CB689CB2091AFAB38D40E74D23DEE52
SHA-256:	0A90F4920DAA3957DA2D7D9A1211BF826A68E01AEEB98E92ABAA9F5302D95774
SHA-512:	DF41737A27A12F4FDCA929EA090E3A369F8E2A46466EF69EC6B7A3B9AF6F5D5174B6A6A6ECD404CCCA49A048CD0C90A76A4D1EA4DC797676E91396BBF10C8BE0
Malicious:	false
Reputation:	low
Preview:	{"edge_fundamentals_appdefaults":{"ess_lightweight_version":101},"ess_kv_states":{"restore_on_startup":{"closed_notification":false,"decrypt_success":true,"key":"restore_on_startup","notification_popup_count":0},"startup_urls":{"closed_notification":false,"decrypt_success":true,"key":"startup_urls","notification_popup_count":0},"template_url_data":{"closed_notification":false,"decrypt_success":true,"key":"template_url_data","notification_popup_count":0}},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13349984824466642","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13349984824466642","location":5,"ma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Reputation:	low
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	80
Entropy (8bit):	4.323098996850684
Encrypted:	false
SSDEEP:	3:chltUQ2Hm4kxH4xRNwBgzNnNurkXn:chXUQI2xH8BzNmen
MD5:	8DA62954B0B14642CF287A260418E39B
SHA1:	E82BF98669AE1D73BBD9294D9F454044D5C2622E
SHA-256:	B7E25784D1B3A3653C618822715DAE7CC86BF0B05FFF0CF3C5D6A1FB169F0614
SHA-512:	E44DC92CAA0579A81CBF176A589493421AAD851D7006603B54684EE8CBFC67F572F2B0219F4483227F3FF9CC614D882B2ADB8060873E358C7D6870CAF9E3865C
Malicious:	false
Reputation:	low
Preview:	....I................URES:0...INITDATA_NEXT_RESOURCE_ID.1..INITDATA_DB_VERSION.2

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Reputation:	low
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	295
Entropy (8bit):	5.16553860243552
Encrypted:	false
SSDEEP:	6:HwRRM1RN23oH+TcwtE/a252KLlt5SVq2PRN23oH+TcwtE/a2ZIFUv:Hw3bYeb8xLv5SVvaYeb8J2FUv
MD5:	AACA892EF8CBEF87938ED19D7ED03F53
SHA1:	0219A67479C67FE322F4A5A388963EEDC706133A
SHA-256:	1FAB0F8CE4701A371BC074459F67081C5F9252F1CE28B0B400AEBC82CBC91319
SHA-512:	8B411AB8F38377958B0A4C6270815D40E06A112015D5F7855A4FF5B8633F9678E0F1B915C28132558C9D76202DAA1D29978E337ED68828141DE8468331FC612A
Malicious:	false
Reputation:	low
Preview:	2024/01/17-18:07:13.417 1b54 Creating DB C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database since it was missing..2024/01/17-18:07:13.433 1b54 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database/MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Reputation:	low
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\2cc80dabc69f58b6_0

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	118332
Entropy (8bit):	5.578129329957667
Encrypted:	false
SSDEEP:	3072:V9/MxPXfOxndTw6eucyrQ8/S/hti8/ozsimUL/SL/5L/x1:fndTwOjMFi1zsiLL/SL/5L/x1
MD5:	4911B84B4B6A47D15DBFFEA7AE84D7FA
SHA1:	68C0DDC3069F7E2AF617C6BBECCBFB6BF4EBFE30
SHA-256:	B7DC3EC6E2B42E6E7B44DE713BAB3CFACF4247465EA1B66BDD59AB244475A5CE
SHA-512:	5ED3A938E2B2159D4CB3486B8FC416D6760CFFE263D87A2D056018B93E3A94A31FF0224653D28F429EDD146337929931DF07AB5D07E0B54A57329829B8E038E8
Malicious:	false
Reputation:	low
Preview:	0\r..m..........rSG.....0!function(e,t){if("object"==typeof exports&&"object"==typeof module)module.exports=t();else if("function"==typeof define&&define.amd)define([],t);else{var s=t();for(var a in s)("object"==typeof exports?exports:e)[a]=s[a]}}(self,(()=>(()=>{"use strict";var e={894:()=>{try{self["workbox:cacheable-response:6.4.0"]&&_()}catch(e){}},81:()=>{try{self["workbox:core:6.4.0"]&&_()}catch(e){}},485:()=>{try{self["workbox:expiration:6.4.0"]&&_()}catch(e){}},484:()=>{try{self["workbox:navigation-preload:6.4.0"]&&_()}catch(e){}},248:()=>{try{self["workbox:precaching:6.4.0"]&&_()}catch(e){}},492:()=>{try{self["workbox:routing:6.4.0"]&&_()}catch(e){}},154:()=>{try{self["workbox:strategies:6.4.0"]&&_()}catch(e){}}},t={};function s(a){var n=t[a];if(void 0!==n)return n.exports;var r=t[a]={exports:{}};return e[a](r,r.exports,s),r.exports}s.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(e){if("object"==typeof window

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\2cc80dabc69f58b6_1

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	199489
Entropy (8bit):	6.399069027140982
Encrypted:	false
SSDEEP:	3072:HpNU8/2Q5sQI5ArwFQPLpQCBMgv1ex8BN+JXFnn5xANWR2hbBsRL/WnHz82fk:9/z0ArwaL6ENP05uNWR2hVsRL/SFk
MD5:	2FC4D2B43EA69615EEB6B175DA434261
SHA1:	6619A0112F39905410A280C06437E88CD6BA8CBF
SHA-256:	4387355A4E31FD22259523973463E4322E4168CAA5E50F52DD7506E4931A1D06
SHA-512:	35BB99D180646B69B069D03E4E1170B3C1136FD3D1500B70BE7E33CD4861F1000758D70A89209C2E548F5740AD807F8E5F22175FEB7E09A233F924694753371D
Malicious:	false
Reputation:	low
Preview:	0\r..m..........rSG.....0....z3.................;K....x..........,T.8..`,.....L`.....,T...`......L`......Rc........exports...Rc.4.....module....Rc:.ZF....define....Rb.o......amd....D..H...........".. ...".. ...!...a..2....]".. ...!...-.....!...\|..c.....>a...8v............*.........".. ...!........./..4.....).....$Sb............I`....Da......... ..f..........`...p...0...j...p..H.......Q....L.....https://ntp.msn.com/edge/ntp/service-worker.js?bundles=latest&riverAgeMinutes=2880&enableNetworkFirst=true&navAgeMinutes=2880&enableNavPreload=true&enableEmptySectionRoute=true&enableFallbackVerticalsFeed=true&networkTimeoutSeconds=5...a........Db............D`........A.`............,T.,.`......L`.....,T...`>....DL`.....DSb.....................q....c................I`....Da.....x...,T.`.`z.....L`..........a............a.........Dr8................/....-.......}....4.........../...-..........\....-........(Sb.............q.`....Da....z....T...d..........0..........0e........@............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.1431558784658327
Encrypted:	false
SSDEEP:	3:m+l:m
MD5:	54CB446F628B2EA4A5BCE5769910512E
SHA1:	C27CA848427FE87F5CF4D0E0E3CD57151B0D820D
SHA-256:	FBCFE23A2ECB82B7100C50811691DDE0A33AA3DA8D176BE9882A9DB485DC0F2D
SHA-512:	8F6ED2E91AED9BD415789B1DBE591E7EAB29F3F1B48FDFA5E864D7BF4AE554ACC5D82B4097A770DABC228523253623E4296C5023CF48252E1B94382C43123CB0
Malicious:	false
Reputation:	low
Preview:	0\r..m..................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	3.5376346459829513
Encrypted:	false
SSDEEP:	3:ZfXl/lJ/lln/lxEgh/llB6tzl:Z6ltJ
MD5:	0D851D288BA34CB4F2266E469E2380C2
SHA1:	C0D4BEDE040D8E54DD0EE2ACC69F323884F7E806
SHA-256:	C182E2E2958B0A7E7710E30B5F4B9526DF2F573131E7DA29F8E42199C5008198
SHA-512:	EB4682DCDFB55BD7979FC7067A29AEE8C7F22726672C6B2FC555359EAA15BDCD8CC78BDDDF6DBEAD0E83E4FE7447BF303F6CC4E8C33B0FE2E7D98B936292FA78
Malicious:	false
Reputation:	low
Preview:	@...l..foy retne.........................X....,................d...m/.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	3.5376346459829513
Encrypted:	false
SSDEEP:	3:ZfXl/lJ/lln/lxEgh/llB6tzl:Z6ltJ
MD5:	0D851D288BA34CB4F2266E469E2380C2
SHA1:	C0D4BEDE040D8E54DD0EE2ACC69F323884F7E806
SHA-256:	C182E2E2958B0A7E7710E30B5F4B9526DF2F573131E7DA29F8E42199C5008198
SHA-512:	EB4682DCDFB55BD7979FC7067A29AEE8C7F22726672C6B2FC555359EAA15BDCD8CC78BDDDF6DBEAD0E83E4FE7447BF303F6CC4E8C33B0FE2E7D98B936292FA78
Malicious:	false
Reputation:	low
Preview:	@...l..foy retne.........................X....,................d...m/.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RF44f55.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	3.5376346459829513
Encrypted:	false
SSDEEP:	3:ZfXl/lJ/lln/lxEgh/llB6tzl:Z6ltJ
MD5:	0D851D288BA34CB4F2266E469E2380C2
SHA1:	C0D4BEDE040D8E54DD0EE2ACC69F323884F7E806
SHA-256:	C182E2E2958B0A7E7710E30B5F4B9526DF2F573131E7DA29F8E42199C5008198
SHA-512:	EB4682DCDFB55BD7979FC7067A29AEE8C7F22726672C6B2FC555359EAA15BDCD8CC78BDDDF6DBEAD0E83E4FE7447BF303F6CC4E8C33B0FE2E7D98B936292FA78
Malicious:	false
Reputation:	low
Preview:	@...l..foy retne.........................X....,................d...m/.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	5647
Entropy (8bit):	3.4679907928300486
Encrypted:	false
SSDEEP:	96:G99NwqadytWbryvS3vdKWy7N0h4DOWjcD/r9L1IUNqZ:UCXdytwrfvdTuNpjcDD9Vy
MD5:	56E6BD7EB193FEE91548C0FAEB93FFC2
SHA1:	A345C7041D9B74E46B447B32D00C1316B75A5AF7
SHA-256:	E39E6965FA4B119E03DA5C5146B5605312EC3FB0FC6E64BAA2F04CD4FA07E0B0
SHA-512:	CC66F3B423E86661A9F8E5AA01323C55D94CBF9EEB7389A04975B3F249FEB7EC03BFE8067AB42D8B3F0E8B6B87207FA20C59D2DE3BB29A766159825C5AC44BC8
Malicious:	false
Reputation:	low
Preview:	*...#................version.1..namespace-..&f.................&f.................&f.................&f.................&f................\..b................next-map-id.1.Cnamespace-964d23ee_7fe3_4e90_a840_96f68457cb3b-https://ntp.msn.com/.0.8..H................map-0-shd_sweeper.({.".x.-.m.s.-.f.l.i.g.h.t.I.d.".:.".m.s.n.a.l.l.e.x.p.u.s.e.r.s.,.p.r.g.-.s.p.-.l.i.v.e.a.p.i.,.i.n.f.r.a.-.c.e.t.o.1.-.t.,.p.r.g.-.s.h.-.b.d.-.s.t.t.o.p.,.p.r.g.-.b.d.-.t.o.p.-.f.2.,.p.r.g.-.s.h.-.b.d.-.d.f.2.,.p.r.g.-.s.h.-.b.d.-.p.e.r.f.,.p.r.g.-.s.h.-.b.d.-.s.t.r.a.d.s.,.p.r.g.-.1.s.w.-.s.a.p.r.o.d.i.t.e.n.0.,.p.r.g.-.1.s.w.-.s.a.-.c.a.q.u.a.l.i.t.y.s.c.o.r.e.0.4.,.p.r.g.-.1.s.w.-.s.a.g.e.u.2.u.p.c.,.p.r.g.-.1.s.w.-.s.a.-.v.b.l.v._.n.o.3.d._.p.r.o.d.,.p.r.g.-.1.s.w.-.t.w.v.2.e.n.,.p.r.g.-.1.s.w.-.v.1.t.w.e.b.2.e.n.,.1.s.-.k.s.f.a.s.t.-.p.r.1.c.,.s.p.r.-.t.-.l.i.m.i.t.2.,.1.s.-.s.h.p.-.r.c.-.t.-.e.0.0.f.,.1.s.-.s.h.p.-.r.c.-.t.m.-.l.i.m.i.t.2.,.1.s.-.s.h.p.-.x.p.-.l.e.b.0.0.,.p.r.g.-.s.p.r.-.e.n.s.t.f.h.p.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	320
Entropy (8bit):	5.134786871947871
Encrypted:	false
SSDEEP:	6:H4+q2PRN23oH+TcwtrQMxIFUt8+ZDZmw++qVkwORN23oH+TcwtrQMFLJ:HNvaYebCFUt8+p/++C5JYebtJ
MD5:	9283535E4E2838D217515FEB149F0507
SHA1:	B6F9706F4A6299A893605AF4D8AEC4AC7AE88AE7
SHA-256:	EF904854C7CD7AF46B6A34A2B9D1FA22D156C7F88B891477B7BA0D08072EB7AE
SHA-512:	0AD7703B144C3993B4C97096BEFC76D97E97D71E0467DDD8CDBA19D07BC018F697CDC26EEA3F28B376D34B88094098B60A695A43DA36BC495EC7D7D5FED0212B
Malicious:	false
Reputation:	low
Preview:	2024/01/17-18:07:05.439 1078 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage/MANIFEST-000001.2024/01/17-18:07:05.443 1078 Recovering log #3.2024/01/17-18:07:05.451 1078 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	320
Entropy (8bit):	5.134786871947871
Encrypted:	false
SSDEEP:	6:H4+q2PRN23oH+TcwtrQMxIFUt8+ZDZmw++qVkwORN23oH+TcwtrQMFLJ:HNvaYebCFUt8+p/++C5JYebtJ
MD5:	9283535E4E2838D217515FEB149F0507
SHA1:	B6F9706F4A6299A893605AF4D8AEC4AC7AE88AE7
SHA-256:	EF904854C7CD7AF46B6A34A2B9D1FA22D156C7F88B891477B7BA0D08072EB7AE
SHA-512:	0AD7703B144C3993B4C97096BEFC76D97E97D71E0467DDD8CDBA19D07BC018F697CDC26EEA3F28B376D34B88094098B60A695A43DA36BC495EC7D7D5FED0212B
Malicious:	false
Reputation:	low
Preview:	2024/01/17-18:07:05.439 1078 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage/MANIFEST-000001.2024/01/17-18:07:05.443 1078 Recovering log #3.2024/01/17-18:07:05.451 1078 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sessions\Session_13349984826961967

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	11475
Entropy (8bit):	3.8233779721630445
Encrypted:	false
SSDEEP:	96:37nBsp2+k6EOuvK/UK1bsp2+k6ZOu9dmtQmQdmtQmQdmtQmQdmtQmOdmtQmPXlO8:37Bso+UC/UWbso+vjfffh8zuyZN3
MD5:	85673F108920D1AF4A59EC36F5C92A50
SHA1:	4937D63CB321DD04EAA5F15BB4E1E182B73412D8
SHA-256:	03CFEA13354792915B153FE94C7F0CCA554544B94F4A43504BE498033BCBCA29
SHA-512:	1D42CAEEF1FE9D947C4B887F1F753498FE25EAE85FF87E243437981AFFDA7369F517ABC7BEB935A2CC6204CD3D0662159C13E27C081035F34114E6507D91672B
Malicious:	false
Reputation:	low
Preview:	SNSS.......S.;z...........S.;z......"S.;z...........S.;z.......S.;z.......T.;z.......T.;z....!..T.;z...............................S.;zT.;z1..,...T.;z$...964d23ee_7fe3_4e90_a840_96f68457cb3b...S.;z.......T.;z...............S.;z...S.;z.......................S.;z....................5..0...S.;z&...{1E0EB698-B9B7-4961-B591-EC148C400099}.....S.;z.......T.;z...........T.;z........edge://newtab/......N.e.w. .t.a.b...........!...............................................................x...............................x........4.F'....4.F'................................... ...................................................r...h.t.t.p.s.:././.n.t.p...m.s.n...c.o.m./.e.d.g.e./.n.t.p.?.l.o.c.a.l.e.=.e.n.-.G.B.&.t.i.t.l.e.=.N.e.w.%.2.0.t.a.b.&.d.s.p.=.1.&.s.p.=.B.i.n.g.&.i.s.F.R.E.M.o.d.a.l.B.a.c.k.g.r.o.u.n.d.=.1.&.s.t.a.r.t.p.a.g.e.=.1.&.P.C.=.U.5.3.1.....................................8.......0.......8....................................................................... ..................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Shortcuts

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 5, cookie 0x2, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.44194574462308833
Encrypted:	false
SSDEEP:	12:TLiNCcUMskMVcIWGhWxBzEXx7AAQlvsdFxOUwa5qgufTJpbZ75fOS:TLisVMnYPhIY5Qlvsd6UwccNp15fB
MD5:	B35F740AA7FFEA282E525838EABFE0A6
SHA1:	A67822C17670CCE0BA72D3E9C8DA0CE755A3421A
SHA-256:	5D599596D116802BAD422497CF68BE59EEB7A9135E3ED1C6BEACC48F73827161
SHA-512:	05C0D33516B2C1AB6928FB34957AD3E03CB0A8B7EEC0FD627DD263589655A16DEA79100B6CC29095C3660C95FD2AFB2E4DD023F0597BD586DD664769CABB67F8
Malicious:	false
Reputation:	low
Preview:	SQLite format 3......@ ..........................................................................j..........g....."....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	100
Entropy (8bit):	4.525875388957411
Encrypted:	false
SSDEEP:	3:41tt0diERGDwenVLcrSUAAhVH2FKi/Ij:et084ehVLcrlDso
MD5:	B87C281F9DD2D01D269E008E13C233BC
SHA1:	4B76BE6EC7DE2EFE6FF49B2E8FF1E8E06249C86B
SHA-256:	355D10E7B5A0DD3751E3B0C1F67A8AF49A7E4BCA08AE7D8DF10A22FA0EF31DB0
SHA-512:	92866B81CFEF9A8E9B88B2C5EF538B0D2B1809F410E34CF3A6A705BA130888D6FAF3D224A729757BD755E6FC811A7BA2E21E57C9F9E2472F646CBA830EBECA2D
Malicious:	false
Reputation:	low
Preview:	.On.!................database_metadata.1..;5............... 806b9ba4c71ee770bde1effc5f33c190......

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	345
Entropy (8bit):	5.173519515597222
Encrypted:	false
SSDEEP:	6:HAX9+q2PRN23oH+Tcwt7Uh2ghZIFUt8+NZZmw++tVkwORN23oH+Tcwt7Uh2gnLJ:HK4vaYebIhHh2FUt8+f/++T5JYebIhHd
MD5:	22901CD9EF343DD79CF9B432687DCAC7
SHA1:	ED3AA91E7F0AF5693950448A9DD49FD6C5BA4603
SHA-256:	5A08353C27D194CE496AC033D1E5F0453EA7B5AF2E54D4B4E22E5137F76D55E6
SHA-512:	C49AE48C55FF71A9F216889E74E4843BC4CA15F7F9860BE90D55A36F39DD215CCBD486344F3CD1A073EFBD4BBCDFDECF5EF3A5D9DDB9125CE8E83AC57305C16E
Malicious:	false
Reputation:	low
Preview:	2024/01/17-18:07:04.585 638 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database/MANIFEST-000001.2024/01/17-18:07:04.591 638 Recovering log #3.2024/01/17-18:07:04.603 638 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	345
Entropy (8bit):	5.173519515597222
Encrypted:	false
SSDEEP:	6:HAX9+q2PRN23oH+Tcwt7Uh2ghZIFUt8+NZZmw++tVkwORN23oH+Tcwt7Uh2gnLJ:HK4vaYebIhHh2FUt8+f/++T5JYebIhHd
MD5:	22901CD9EF343DD79CF9B432687DCAC7
SHA1:	ED3AA91E7F0AF5693950448A9DD49FD6C5BA4603
SHA-256:	5A08353C27D194CE496AC033D1E5F0453EA7B5AF2E54D4B4E22E5137F76D55E6
SHA-512:	C49AE48C55FF71A9F216889E74E4843BC4CA15F7F9860BE90D55A36F39DD215CCBD486344F3CD1A073EFBD4BBCDFDECF5EF3A5D9DDB9125CE8E83AC57305C16E
Malicious:	false
Reputation:	low
Preview:	2024/01/17-18:07:04.585 638 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database/MANIFEST-000001.2024/01/17-18:07:04.591 638 Recovering log #3.2024/01/17-18:07:04.603 638 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\DawnCache\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	0.0012471779557650352
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2zE:/M/xT02z
MD5:	F50F89A0A91564D0B8A211F8921AA7DE
SHA1:	112403A17DD69D5B9018B8CEDE023CB3B54EAB7D
SHA-256:	B1E963D702392FB7224786E7D56D43973E9B9EFD1B89C17814D7C558FFC0CDEC
SHA-512:	BF8CDA48CF1EC4E73F0DD1D4FA5562AF1836120214EDB74957430CD3E4A2783E801FA3F4ED2AFB375257CAEED4ABE958265237D6E0AACF35A9EDE7A2E8898D58
Malicious:	false
Reputation:	low
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\GPUCache\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	0.0012471779557650352
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2zE:/M/xT02z
MD5:	F50F89A0A91564D0B8A211F8921AA7DE
SHA1:	112403A17DD69D5B9018B8CEDE023CB3B54EAB7D
SHA-256:	B1E963D702392FB7224786E7D56D43973E9B9EFD1B89C17814D7C558FFC0CDEC
SHA-512:	BF8CDA48CF1EC4E73F0DD1D4FA5562AF1836120214EDB74957430CD3E4A2783E801FA3F4ED2AFB375257CAEED4ABE958265237D6E0AACF35A9EDE7A2E8898D58
Malicious:	false
Reputation:	low
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	430
Entropy (8bit):	5.2287878258285865
Encrypted:	false
SSDEEP:	6:H6U4t+q2PRN23oH+TcwtzjqEKj3K/2jMGIFUt8+aZmw++UVkwORN23oH+Tcwtzjk:H6MvaYebvqBQFUt8+a/++05JYebvqBvJ
MD5:	DF20F5D1D74A28B75286838EFCFB8F01
SHA1:	255F41279C0C7E200318F2DFACBF046CB0AB2C2D
SHA-256:	3271855A4E23E765AE525353CF660F3522B922133FFD9542150484BE59718FE6
SHA-512:	5ADF1628D7AE58D63BDC3B45C06C0B62890B5C2F036B44550523C225ED1859FADF1C0E3293177C21FA0263FE39F421BF2BA5E901404A940E726CFCF4DC7FA4CB
Malicious:	false
Reputation:	low
Preview:	2024/01/17-18:07:05.488 1078 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb/MANIFEST-000001.2024/01/17-18:07:05.491 1078 Recovering log #3.2024/01/17-18:07:05.534 1078 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	430
Entropy (8bit):	5.2287878258285865
Encrypted:	false
SSDEEP:	6:H6U4t+q2PRN23oH+TcwtzjqEKj3K/2jMGIFUt8+aZmw++UVkwORN23oH+Tcwtzjk:H6MvaYebvqBQFUt8+a/++05JYebvqBvJ
MD5:	DF20F5D1D74A28B75286838EFCFB8F01
SHA1:	255F41279C0C7E200318F2DFACBF046CB0AB2C2D
SHA-256:	3271855A4E23E765AE525353CF660F3522B922133FFD9542150484BE59718FE6
SHA-512:	5ADF1628D7AE58D63BDC3B45C06C0B62890B5C2F036B44550523C225ED1859FADF1C0E3293177C21FA0263FE39F421BF2BA5E901404A940E726CFCF4DC7FA4CB
Malicious:	false
Reputation:	low
Preview:	2024/01/17-18:07:05.488 1078 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb/MANIFEST-000001.2024/01/17-18:07:05.491 1078 Recovering log #3.2024/01/17-18:07:05.534 1078 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\8f5756dd-7843-4138-8a6f-5f9dbb2547ae.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Reputation:	low
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\SCT Auditing Pending Reports (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Reputation:	low
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\SCT Auditing Pending Reports~RF40694.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Reputation:	low
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\SCT Auditing Pending Reports~RF40f7d.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Reputation:	low
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Sdch Dictionaries (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Reputation:	low
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Trust Tokens

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 9, cookie 0x7, schema 4, UTF-8, version-valid-for 4
Category:	dropped
Size (bytes):	36864
Entropy (8bit):	0.3886039372934488
Encrypted:	false
SSDEEP:	24:TLqEeWOT/kIAoDJ84l5lDlnDMlRlyKDtM6UwccWfp15fBIe:T2EeWOT/nDtX5nDOvyKDhU1cSB
MD5:	DEA619BA33775B1BAEEC7B32110CB3BD
SHA1:	949B8246021D004B2E772742D34B2FC8863E1AAA
SHA-256:	3669D76771207A121594B439280A67E3A6B1CBAE8CE67A42C8312D33BA18854B
SHA-512:	7B9741E0339B30D73FACD4670A9898147BE62B8F063A59736AFDDC83D3F03B61349828F2AE88F682D42C177AE37E18349FD41654AEBA50DDF10CD6DC70FA5879
Malicious:	false
Reputation:	low
Preview:	SQLite format 3......@ ..........................................................................j..........g...}.....$.X..............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\a4345c0d-a618-471a-a88a-c437ddea0e69.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Reputation:	low
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\cc350b00-2e20-47c5-b9cc-e4cf3b13fb05.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Reputation:	low
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\f3a68c23-a575-4a46-999a-a7324a4adf9b.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Reputation:	low
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	80
Entropy (8bit):	3.4921535629071894
Encrypted:	false
SSDEEP:	3:S8ltHlS+QUl1ASEGhTFljl:S85aEFljl
MD5:	69449520FD9C139C534E2970342C6BD8
SHA1:	230FE369A09DEF748F8CC23AD70FD19ED8D1B885
SHA-256:	3F2E9648DFDB2DDB8E9D607E8802FEF05AFA447E17733DD3FD6D933E7CA49277
SHA-512:	EA34C39AEA13B281A6067DE20AD0CDA84135E70C97DB3CDD59E25E6536B19F7781E5FC0CA4A11C3618D43FC3BD3FBC120DD5C1C47821A248B8AD351F9F4E6367
Malicious:	false
Reputation:	low
Preview:	*...#................version.1..namespace-..&f.................&f...............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	418
Entropy (8bit):	5.256093144264199
Encrypted:	false
SSDEEP:	12:HqvaYebvqBZFUt8+b5/++g35JYebvqBaJ:waYebvyg8BJYebvL
MD5:	B1F9758CFC0A5F9AFE9E5CC48B97EB7E
SHA1:	EFE713ACAA720C3F5FBDC3C9F305E6BDF3BFEAB8
SHA-256:	4EBD899C5262BE0BDB927E6E84E53946B7526F185AD0CB260B6E5B7043811A89
SHA-512:	C817366EE5D11D1CAE232E5AB088D3086CD7B7C63D56B4BFC329795FE2BFEF52E15BA6B8E2395FF8E3EC145DAE46FC896A9D4CEF47DDBC8AC394877E8D1F1FC5
Malicious:	false
Reputation:	low
Preview:	2024/01/17-18:07:23.944 1078 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage/MANIFEST-000001.2024/01/17-18:07:23.946 1078 Recovering log #3.2024/01/17-18:07:23.950 1078 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	418
Entropy (8bit):	5.256093144264199
Encrypted:	false
SSDEEP:	12:HqvaYebvqBZFUt8+b5/++g35JYebvqBaJ:waYebvyg8BJYebvL
MD5:	B1F9758CFC0A5F9AFE9E5CC48B97EB7E
SHA1:	EFE713ACAA720C3F5FBDC3C9F305E6BDF3BFEAB8
SHA-256:	4EBD899C5262BE0BDB927E6E84E53946B7526F185AD0CB260B6E5B7043811A89
SHA-512:	C817366EE5D11D1CAE232E5AB088D3086CD7B7C63D56B4BFC329795FE2BFEF52E15BA6B8E2395FF8E3EC145DAE46FC896A9D4CEF47DDBC8AC394877E8D1F1FC5
Malicious:	false
Reputation:	low
Preview:	2024/01/17-18:07:23.944 1078 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage/MANIFEST-000001.2024/01/17-18:07:23.946 1078 Recovering log #3.2024/01/17-18:07:23.950 1078 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	321
Entropy (8bit):	5.19697764195201
Encrypted:	false
SSDEEP:	6:HO+q2PRN23oH+TcwtpIFUt8+pNJZmw++tVkwORN23oH+Tcwta/WLJ:H/vaYebmFUt8+jJ/++T5JYebaUJ
MD5:	51510A940EA9A5D5F5AED6610A92AA86
SHA1:	3445F1A0D45D22D3053967BB86AB4C85CE14F402
SHA-256:	ECD680FFF476F5889104B821843122FFBCFD0A146EDE4386F7F877345A3E74BC
SHA-512:	1865661DBBCAB4306A0CA495916FA9441A6A29BED61817E1A1FA6164D979E69819673A52D5B8E49C5E384B14C4B5B506714E95506C4FB825258B0B5F62E6E98E
Malicious:	false
Reputation:	low
Preview:	2024/01/17-18:07:04.565 4e8 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB/MANIFEST-000001.2024/01/17-18:07:04.584 4e8 Recovering log #3.2024/01/17-18:07:04.588 4e8 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	321
Entropy (8bit):	5.19697764195201
Encrypted:	false
SSDEEP:	6:HO+q2PRN23oH+TcwtpIFUt8+pNJZmw++tVkwORN23oH+Tcwta/WLJ:H/vaYebmFUt8+jJ/++T5JYebaUJ
MD5:	51510A940EA9A5D5F5AED6610A92AA86
SHA1:	3445F1A0D45D22D3053967BB86AB4C85CE14F402
SHA-256:	ECD680FFF476F5889104B821843122FFBCFD0A146EDE4386F7F877345A3E74BC
SHA-512:	1865661DBBCAB4306A0CA495916FA9441A6A29BED61817E1A1FA6164D979E69819673A52D5B8E49C5E384B14C4B5B506714E95506C4FB825258B0B5F62E6E98E
Malicious:	false
Reputation:	low
Preview:	2024/01/17-18:07:04.565 4e8 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB/MANIFEST-000001.2024/01/17-18:07:04.584 4e8 Recovering log #3.2024/01/17-18:07:04.588 4e8 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Visited Links

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	131072
Entropy (8bit):	0.005582420312713277
Encrypted:	false
SSDEEP:	3:ImtV5/x/tVg4B/lktt/MvsI:IiV5/XB/6v/M0I
MD5:	89C7FDF9031B987229CA9660587C466C
SHA1:	D420581EB909CAA856DB758DF588DBC0D0CDD300
SHA-256:	650E71CA43C5A8DDB4E73E71334077C0C21F34138F6C18574E154D7DEC667783
SHA-512:	FA9D6BCD8F2312840E91E90A258BCEABD5E1C25EC2C73BE931332E4FFF7DA35DE75BF53C82662E21CC49CCF31BC9516648F788859C4AEC9AD14882469614BD26
Malicious:	false
Reputation:	low
Preview:	VLnk.....?.......v\|..lON................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Web Data

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 9, database pages 91, cookie 0x36, schema 4, UTF-8, version-valid-for 9
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	1.2654138275418128
Encrypted:	false
SSDEEP:	384:KrJ/2qOB1nxCkM2SAELyKOMq+8mKQ0MPVumi:K0q+n0J29ELyKOMq+8m5hG
MD5:	A374ED325BB9A972D606E77C959A5E1F
SHA1:	134F007D147DD9F5D9C61E00D4B4354C16E37791
SHA-256:	85725B5AAF2B1DB6CE5E6E0A13ADD753BCD658EE4371FB2939C5C7F340F7B477
SHA-512:	D11C7F4F63BBB7B43AE18AC37B35BEDE5BB1BDF339AD48095008CD72ADC6D4768023B340541B02AB0635E4CC4D9B84CFA878761F551C37F8A1534CB4C3B6D38D
Malicious:	false
Reputation:	low
Preview:	SQLite format 3......@ .......[...........6......................................................j............W........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\QuotaManager

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 10, cookie 0x7, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.4657060504991053
Encrypted:	false
SSDEEP:	48:Tnj7dojKsKmjKZKAsjZNOjAhts3N8g1j3UcBB672:v7doKsKuKZKlZNmu46yjxgi
MD5:	24C5899B77F872351CF52FDC7A4EB399
SHA1:	0CD6868AC519FACA07EBEC68433052DF19BA92D5
SHA-256:	1C8780B32C16EAC5A7EE86D0821966425F0375DB309C512111FC18E6D560CF72
SHA-512:	953C64CCF16B39E9EF84B068D36E46C1956BE89567E748CCFD8B0165994FE72328BC5CEE96F097033CE821D9DAA7718FBE98E4E2304553ADF2C0C1007E52D4C1
Malicious:	false
Reputation:	low
Preview:	SQLite format 3......@ ..........................................................................j.......w..g...........M...w..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\QuotaManager-journal

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	12824
Entropy (8bit):	0.1350540537034711
Encrypted:	false
SSDEEP:	3:yJ/1/lNllv/etXlyfTOx74l1qvTv4RRfs21d7jdtQfQIHlflRTOx2eXtXlyfTOJ:yolUOerpRS+dndiH31OQalUOJ
MD5:	87308F6A293384DDC3CB23A9175138C4
SHA1:	A5807718246570DE646B38C1541A9ED348B80AAE
SHA-256:	0089D078EAFB1C5CE2BE188BDC77E3B2308FAB15CF24A599B46124DBA229C9E5
SHA-512:	0AAFD52D9E3F3287A04340A4E30A07276FA9F19B032E5F4EF6BD9244C7901D374284F896CF0DBBC86FB4F286222643B3AA890E5204074D8F26BDAB97920EC8FE
Malicious:	false
Reputation:	low
Preview:	............6...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\aad848bc-6de4-4678-a331-0635b8db64c5.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Reputation:	low
Preview:	.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\af6f1d8c-ee24-4275-809f-f3a9b757c176.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40390
Entropy (8bit):	5.5621007480353155
Encrypted:	false
SSDEEP:	768:0/DA76LoLCFvWPWUfrx8F1+UoAYDCx9Tuqh0VfUC9xbog/OV8b3hwpTrwkdXbqKo:0/DA7gWCFvWPWUfrxu1jaBb3apokdX+V
MD5:	12914F31FEF4C9BE6794EA1428616CDC
SHA1:	184D8EAD187C34180B53099313318ECD2D7E90EC
SHA-256:	EE678BEBCA3EB3C302397750140AA82D087648270BFF9CE5C067ABBE90A2EA2E
SHA-512:	236F4249010AD34CCA75B6E4D3C67E07DBE9432429EEA7614BFBDB43EF1D847809F311F4C54917FF324301B18CE1EA88CA6F1F4FE20431B8AA26B1E5627DC207
Malicious:	false
Reputation:	low
Preview:	{"edge_fundamentals_appdefaults":{"ess_lightweight_version":101},"ess_kv_states":{"restore_on_startup":{"closed_notification":false,"decrypt_success":true,"key":"restore_on_startup","notification_popup_count":0},"startup_urls":{"closed_notification":false,"decrypt_success":true,"key":"startup_urls","notification_popup_count":0},"template_url_data":{"closed_notification":false,"decrypt_success":true,"key":"template_url_data","notification_popup_count":0}},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13349984824466642","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13349984824466642","location":5,"ma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\arbitration_service_config.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (3951), with CRLF line terminators
Category:	dropped
Size (bytes):	11755
Entropy (8bit):	5.190465908239046
Encrypted:	false
SSDEEP:	192:hH4vrmqRBB4W4PoiUDNaxvR5FCHFcoaSbqGEDI:hH4vrmUB6W4jR3GaSbqGEDI
MD5:	07301A857C41B5854E6F84CA00B81EA0
SHA1:	7441FC1018508FF4F3DBAA139A21634C08ED979C
SHA-256:	2343C541E095E1D5F202E8D2A0807113E69E1969AF8E15E3644C51DB0BF33FBF
SHA-512:	00ADE38E9D2F07C64648202F1D5F18A2DFB2781C0517EAEBCD567D8A77DBB7CB40A58B7C7D4EC03336A63A20D2E11DD64448F020C6FF72F06CA870AA2B4765E0
Malicious:	false
Reputation:	low
Preview:	{.. "DefaultCohort": {.. "21f3388b-c2a5-4791-8f6e-a4cad6d17f4f.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.BingHomePage.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Covid.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Finance.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Jobs.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.KnowledgeCard.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Local.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.NTP3PCLICK.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.NotifySearchPage.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Recipe.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.SearchPage.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Sports.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Travel.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Weather.Bubble": 1,.. "2cb2db96-3bd0-403e-abe2-9269b3761041.Bubble": 1,.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\b6e607ec-53a0-4c3c-b6ab-14ec636c1bd8.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	18816
Entropy (8bit):	5.438124764070432
Encrypted:	false
SSDEEP:	384:stDPGohSu4lsstz36ehCi3jbGl4QewsrW:s9OoEuiz3tzjbGZpP
MD5:	EA4083B7B43B73BA756A619F7C047C0D
SHA1:	5F19E0F70C3169309850B11B4FE48969730F1E2A
SHA-256:	448AE14DDCE306C4983A22F428170DDDBC9B2187B06B22D061002E87029849F4
SHA-512:	4D5600AD573C22538839B6EF2935B9C314A61E6DD0047E245640F118C2DC6E600821B646F5683BD95A2443DBB35D1E26F48A3BC05CB184CC00B218E48DBD4802
Malicious:	false
Reputation:	low
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13349984825291347","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13341058280410352","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"2caf0cf4-ea42-4083-b928-29b39da1182b":{"last_path":""},"2cb2db96-3bd0-403e-abe2-9269b3761041":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\bca84f7f-a8a7-4b6a-acc8-109d268ee261.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	35113
Entropy (8bit):	5.555684022094889
Encrypted:	false
SSDEEP:	768:0/DAFvWPWUfAx8F1+UoAYDCx9Tuqh0VfUC9xbog/OVXhwpTrwkdWMqKpatuD:0/DAFvWPWUfAxu1jauapokdWVztQ
MD5:	7A69A603242190C6324A350BE287D490
SHA1:	6C78BF018CB689CB2091AFAB38D40E74D23DEE52
SHA-256:	0A90F4920DAA3957DA2D7D9A1211BF826A68E01AEEB98E92ABAA9F5302D95774
SHA-512:	DF41737A27A12F4FDCA929EA090E3A369F8E2A46466EF69EC6B7A3B9AF6F5D5174B6A6A6ECD404CCCA49A048CD0C90A76A4D1EA4DC797676E91396BBF10C8BE0
Malicious:	false
Reputation:	low
Preview:	{"edge_fundamentals_appdefaults":{"ess_lightweight_version":101},"ess_kv_states":{"restore_on_startup":{"closed_notification":false,"decrypt_success":true,"key":"restore_on_startup","notification_popup_count":0},"startup_urls":{"closed_notification":false,"decrypt_success":true,"key":"startup_urls","notification_popup_count":0},"template_url_data":{"closed_notification":false,"decrypt_success":true,"key":"template_url_data","notification_popup_count":0}},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13349984824466642","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13349984824466642","location":5,"ma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\databases\Databases.db

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 7, cookie 0x4, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.3410017321959524
Encrypted:	false
SSDEEP:	12:TLiqi/nGb0EiDFIlTSFbyrKZb9YwFOqAyl+FxOUwa5qgufTJpbZ75fOSG:TLiMNiD+lZk/Fj+6UwccNp15fBG
MD5:	98643AF1CA5C0FE03CE8C687189CE56B
SHA1:	ECADBA79A364D72354C658FD6EA3D5CF938F686B
SHA-256:	4DC3BF7A36AB5DA80C0995FAF61ED0F96C4DE572F2D6FF9F120F9BC44B69E444
SHA-512:	68B69FCE8EF5AB1DDA2994BA4DB111136BD441BC3EFC0251F57DC20A3095B8420669E646E2347EAB7BAF30CACA4BCF74BD88E049378D8DE57DE72E4B8A5FF74B
Malicious:	false
Reputation:	low
Preview:	SQLite format 3......@ ..........................................................................j..........g.....P....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\f900ca8d-6799-48f7-b83d-96dcb8dd11f5.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	15680
Entropy (8bit):	5.417260438781817
Encrypted:	false
SSDEEP:	192:stDJ99QTryDigabatSuypMsspzO2hjk+EiqeBrzfKZcSnjHFI8QbV+FDNQwsRsur:stDPGKSu4Msspz3jFirObGRQwyso
MD5:	5999DA3EEC7C95B7555E25DEA6A0F59A
SHA1:	6DA36CFEB5DD37465A8912C0FCB5A70AAE7C2383
SHA-256:	71E794ABC2FA39B7FA31D9154B4FE632E1FC156CE07976E5EC463EDA2AE92328
SHA-512:	94DD2DBB4BC46955865F01B1235A58D4B9285F9F9A099AF0725E6EB5871BDF1C4526FED22B631272CF9686FB50737ECA9C24A2C4AC7497387BFC1F66CA760903
Malicious:	false
Reputation:	low
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13349984825291347","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13341058280410352","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"2caf0cf4-ea42-4083-b928-29b39da1182b":{"last_path":""},"2cb2db96-3bd0-403e-abe2-9269b3761041":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db-shm

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.7392949830771431
Encrypted:	false
SSDEEP:	48:pHOonnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnE/yjyjyjyjyjy3:pHO5kyTXvkFA
MD5:	7ABD325A28EB521EDCE1E054AB795C23
SHA1:	0AC765100D2C75E48716C2CD8698297E1343B7A9
SHA-256:	4E792057D7126F6B46CF95E0739935B6BA0653F01470CF6E83EC47B617D8ADBB
SHA-512:	24DEFCDA67DC77DFC37EFB066BA31C13B4B73026C8CCE5AF23EE884A45030D95F33886080ED8643F95AF06755981464730C5470174D19855FDD12DBD2ACFC6FC
Malicious:	false
Reputation:	low
Preview:	..-.....................W..8....^..>l_..{.\..D.p..-.....................W..8....^..>l_..{.\..D.p........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db-wal

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite Write-Ahead Log, version 3007000
Category:	dropped
Size (bytes):	3180672
Entropy (8bit):	3.9646288701716883
Encrypted:	false
SSDEEP:	98304:13Mdv+In3opST4G94NOazr+A5rwwljbNrPkUEnQIW5:7
MD5:	85E3561093E286635FD642D087E65993
SHA1:	C8867A7F0CCD6433CE79902551E8598F93050296
SHA-256:	267938B85F4136805F200531202CD54EFEDA7A899CF81B73C17C386987785F17
SHA-512:	A7D075268669635BBEC2174EE4F8938C34311B3864124D0F04EBBDE07BC018B2FE01829CBE72305B9592863472B3D2F7ADCA94DB072A01D3C3028F87DA748571
Malicious:	false
Reputation:	low
Preview:	7....-..........^..>l_.....q..$.........^..>l_..X....9I4SQLite format 3......@ ..........................................................................j.............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	506
Entropy (8bit):	3.475179881953772
Encrypted:	false
SSDEEP:	6:/XntM+Hmtl3sedhOkrOuuuuuuuuuuuuuuuu6lkBilln3:fmtlc8pOuuuuuuuuuuuuuuuu6+Ulln3
MD5:	FDF5050FB9113BD125C2977927AE008B
SHA1:	28EB06F0F548F5F27E892C52ECD85445D821533C
SHA-256:	E4492CCBBE0F17AC11C1A09B3B500B365A02465162B415CE0D974444183BE89C
SHA-512:	29C90C9E1983E9E7CA4E1C90BB0A10B3C462E0F28641F880F8BDA789437E30BB2FCF772E4D7A067D4DA22969BAA77C8E79DB10B3B70498611E641FD5B61891DD
Malicious:	false
Reputation:	low
Preview:	A..r.................20_1_1...1.,U.................20_1_1...1?.Q;0................39_config..........6.....n ...1u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=.................5;...............#38_h.......6.Z..W.F.......B.......B..........

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	320
Entropy (8bit):	5.2635114267705685
Encrypted:	false
SSDEEP:	6:HCIHVq2PRN23oH+TcwtfrK+IFUt8+L0gZmw++L0IkwORN23oH+TcwtfrUeLJ:HCIHVvaYeb23FUt8+og/++oI5JYeb3J
MD5:	B4825EDA1BC47A920F1AF520FEE35682
SHA1:	D13C3F1B2A7F5914D755AC399F494C85B6EFE6F9
SHA-256:	EB9E6B8053E1FC39C3C6E75F93B72671D7F3009D6BEA8473FA056BBD07316C26
SHA-512:	6D605FEF1DE1C22EB2E93B8AF0912DB562B591380825744614F41B52114558443CD324B05E326B5A1D674F5865B1BA1E6D5D0C73F5A1AA573DBAE39413BEF9C1
Malicious:	false
Reputation:	low
Preview:	2024/01/17-18:07:05.365 1b54 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db/MANIFEST-000001.2024/01/17-18:07:05.366 1b54 Recovering log #3.2024/01/17-18:07:05.366 1b54 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	320
Entropy (8bit):	5.2635114267705685
Encrypted:	false
SSDEEP:	6:HCIHVq2PRN23oH+TcwtfrK+IFUt8+L0gZmw++L0IkwORN23oH+TcwtfrUeLJ:HCIHVvaYeb23FUt8+og/++oI5JYeb3J
MD5:	B4825EDA1BC47A920F1AF520FEE35682
SHA1:	D13C3F1B2A7F5914D755AC399F494C85B6EFE6F9
SHA-256:	EB9E6B8053E1FC39C3C6E75F93B72671D7F3009D6BEA8473FA056BBD07316C26
SHA-512:	6D605FEF1DE1C22EB2E93B8AF0912DB562B591380825744614F41B52114558443CD324B05E326B5A1D674F5865B1BA1E6D5D0C73F5A1AA573DBAE39413BEF9C1
Malicious:	false
Reputation:	low
Preview:	2024/01/17-18:07:05.365 1b54 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db/MANIFEST-000001.2024/01/17-18:07:05.366 1b54 Recovering log #3.2024/01/17-18:07:05.366 1b54 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	782
Entropy (8bit):	4.049291162962452
Encrypted:	false
SSDEEP:	12:G0nYUtTNop//z32m5t/yVf9HqlIZfkBA//DtKhKg+rOyBrgxvB1ys:G0nYUtypD32m3yWlIZMBA5NgKIvB8s
MD5:	FDF465758A7489458B387EB41C7D42B0
SHA1:	9509283CF1BD7397790091C5A7580CBA353A1143
SHA-256:	C5A7592A847D101DCB71AEE0A234835548121C647E6D99EF794337823A347703
SHA-512:	9E40B768990B3FAC6960274C5C78F9B86585100DBFE92BC885FC5384937F2922C3ED435B44C42DEAC138E8FB22CD1EED865DBB984CFFDAE8ED0BE96EDADA1698
Malicious:	false
Reputation:	low
Preview:	.h.6.................__global... .t...................__global... .9..b.................33_..........................33_........v.................21_.....vuNX.................21_.....<...................20_.....X...................20_.....W.J+.................19_......qY.................18_.....'}2..................37_.......c..................38_......i...................39_.....Owa..................20_.....4.9..................20_.....B.I..................19_..........................18_.....2.1..................37_..........................38_......=.%.................39_.....p.j..................9_.....JJ...................9_.....\|.&R.................__global... ./....................__global... ..T...................__global... ...G..................__global... .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	338
Entropy (8bit):	5.232333473307013
Encrypted:	false
SSDEEP:	6:HAHVq2PRN23oH+TcwtfrzAdIFUt8+qjSgZmw++kuHQ0IkwORN23oH+TcwtfrzILJ:HWVvaYeb9FUt8+qug/++VHQ0I5JYeb2J
MD5:	1E62B39E0959827474EC557814DA4262
SHA1:	802AD05FCFF0F295A29E534DAF88DCFBF69E6A1D
SHA-256:	EE6A1108E1DB233E1D735C8BC0A5714F824F0D0C3936FCCD43DB03A8A81FB210
SHA-512:	FA0A43B4A18D4C525A13424D433F37871DD6D846446EB5D08897637C11B32EEC4DB7B317BE74880EA94035129FBC8E823B7AC07969C6B202959E4DA59F5D3880
Malicious:	false
Reputation:	low
Preview:	2024/01/17-18:07:05.337 1b54 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata/MANIFEST-000001.2024/01/17-18:07:05.347 1b54 Recovering log #3.2024/01/17-18:07:05.349 1b54 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	338
Entropy (8bit):	5.232333473307013
Encrypted:	false
SSDEEP:	6:HAHVq2PRN23oH+TcwtfrzAdIFUt8+qjSgZmw++kuHQ0IkwORN23oH+TcwtfrzILJ:HWVvaYeb9FUt8+qug/++VHQ0I5JYeb2J
MD5:	1E62B39E0959827474EC557814DA4262
SHA1:	802AD05FCFF0F295A29E534DAF88DCFBF69E6A1D
SHA-256:	EE6A1108E1DB233E1D735C8BC0A5714F824F0D0C3936FCCD43DB03A8A81FB210
SHA-512:	FA0A43B4A18D4C525A13424D433F37871DD6D846446EB5D08897637C11B32EEC4DB7B317BE74880EA94035129FBC8E823B7AC07969C6B202959E4DA59F5D3880
Malicious:	false
Reputation:	low
Preview:	2024/01/17-18:07:05.337 1b54 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata/MANIFEST-000001.2024/01/17-18:07:05.347 1b54 Recovering log #3.2024/01/17-18:07:05.349 1b54 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Last Browser

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	120
Entropy (8bit):	3.32524464792714
Encrypted:	false
SSDEEP:	3:tbloIlrJFlXnpQoWcNylRjlgbYnPdJiG6R7lZAUAl:tbdlrYoWcV0n1IGi7kBl
MD5:	A397E5983D4A1619E36143B4D804B870
SHA1:	AA135A8CC2469CFD1EF2D7955F027D95BE5DFBD4
SHA-256:	9C70F766D3B84FC2BB298EFA37CC9191F28BEC336329CC11468CFADBC3B137F4
SHA-512:	4159EA654152D2810C95648694DD71957C84EA825FCCA87B36F7E3282A72B30EF741805C610C5FA847CA186E34BDE9C289AAA7B6931C5B257F1D11255CD2A816
Malicious:	false
Reputation:	low
Preview:	C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.M.i.c.r.o.s.o.f.t.\.E.d.g.e.\.A.p.p.l.i.c.a.t.i.o.n.\.m.s.e.d.g.e...e.x.e.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Last Version

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	13
Entropy (8bit):	2.7192945256669794
Encrypted:	false
SSDEEP:	3:NYLFRQI:ap2I
MD5:	BF16C04B916ACE92DB941EBB1AF3CB18
SHA1:	FA8DAEAE881F91F61EE0EE21BE5156255429AA8A
SHA-256:	7FC23C9028A316EC0AC25B09B5B0D61A1D21E58DFCF84C2A5F5B529129729098
SHA-512:	F0B7DF5517596B38D57C57B5777E008D6229AB5B1841BBE74602C77EEA2252BF644B8650C7642BD466213F62E15CC7AB5A95B28E26D3907260ED1B96A74B65FB
Malicious:	false
Reputation:	low
Preview:	117.0.2045.47

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	58458
Entropy (8bit):	6.1034590743430455
Encrypted:	false
SSDEEP:	1536:k/Ps+wsI7ynywEeTTvqrvStDz5oYKBuSZ+aoq:k/0+zI7ynzEGTivStDzXKBuWNR
MD5:	45F0FDE1078239C10C511A922CA9AFF3
SHA1:	D25680F7210FDEF8B0CC1EAD0FC7654B10FBEE2C
SHA-256:	D6B99543ACC48643A4C19C3A57A88C6057989949CD4ADD938ACEB174EF1AC6F5
SHA-512:	DB007F88E7914CD980CE775D33CF80DF170917D5714EC63F252F9C1475AF604AD150847CE0AAD6E3101195049761490C6DA66354B2A5B3A372B919B4F4428520
Malicious:	false
Reputation:	low
Preview:	{"abusive_adblocker_etag":"\"8ABCE35666CBACA121128B98C75E78308AAC1CE803625FAFB4A7AFA722C77CA4\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF3dcf3.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	58458
Entropy (8bit):	6.1034590743430455
Encrypted:	false
SSDEEP:	1536:k/Ps+wsI7ynywEeTTvqrvStDz5oYKBuSZ+aoq:k/0+zI7ynzEGTivStDzXKBuWNR
MD5:	45F0FDE1078239C10C511A922CA9AFF3
SHA1:	D25680F7210FDEF8B0CC1EAD0FC7654B10FBEE2C
SHA-256:	D6B99543ACC48643A4C19C3A57A88C6057989949CD4ADD938ACEB174EF1AC6F5
SHA-512:	DB007F88E7914CD980CE775D33CF80DF170917D5714EC63F252F9C1475AF604AD150847CE0AAD6E3101195049761490C6DA66354B2A5B3A372B919B4F4428520
Malicious:	false
Reputation:	low
Preview:	{"abusive_adblocker_etag":"\"8ABCE35666CBACA121128B98C75E78308AAC1CE803625FAFB4A7AFA722C77CA4\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF40367.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	58458
Entropy (8bit):	6.1034590743430455
Encrypted:	false
SSDEEP:	1536:k/Ps+wsI7ynywEeTTvqrvStDz5oYKBuSZ+aoq:k/0+zI7ynzEGTivStDzXKBuWNR
MD5:	45F0FDE1078239C10C511A922CA9AFF3
SHA1:	D25680F7210FDEF8B0CC1EAD0FC7654B10FBEE2C
SHA-256:	D6B99543ACC48643A4C19C3A57A88C6057989949CD4ADD938ACEB174EF1AC6F5
SHA-512:	DB007F88E7914CD980CE775D33CF80DF170917D5714EC63F252F9C1475AF604AD150847CE0AAD6E3101195049761490C6DA66354B2A5B3A372B919B4F4428520
Malicious:	false
Reputation:	low
Preview:	{"abusive_adblocker_etag":"\"8ABCE35666CBACA121128B98C75E78308AAC1CE803625FAFB4A7AFA722C77CA4\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF45c55.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	58458
Entropy (8bit):	6.1034590743430455
Encrypted:	false
SSDEEP:	1536:k/Ps+wsI7ynywEeTTvqrvStDz5oYKBuSZ+aoq:k/0+zI7ynzEGTivStDzXKBuWNR
MD5:	45F0FDE1078239C10C511A922CA9AFF3
SHA1:	D25680F7210FDEF8B0CC1EAD0FC7654B10FBEE2C
SHA-256:	D6B99543ACC48643A4C19C3A57A88C6057989949CD4ADD938ACEB174EF1AC6F5
SHA-512:	DB007F88E7914CD980CE775D33CF80DF170917D5714EC63F252F9C1475AF604AD150847CE0AAD6E3101195049761490C6DA66354B2A5B3A372B919B4F4428520
Malicious:	false
Reputation:	low
Preview:	{"abusive_adblocker_etag":"\"8ABCE35666CBACA121128B98C75E78308AAC1CE803625FAFB4A7AFA722C77CA4\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Nurturing\campaign_history

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 12, database pages 5, cookie 0x2, schema 4, UTF-8, version-valid-for 12
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6802719685957235
Encrypted:	false
SSDEEP:	24:TLCOUOq0afDdWec9sJvKqhYkk3fsuZ7J5fc:TuOUzDbg3/qhYPfsu9c
MD5:	52E7E2F1500A1339EDFD453DE08D7447
SHA1:	25981B8DEABA823BEA0A218EDB7D1979BE594844
SHA-256:	75FB701E045B7B97B294E5840796B5AD05B93C894D4C5F8E708D06765D517C09
SHA-512:	8C8001F8FDA839F034C958C3567EBF2AFA4BF54633615BDD29D197181BF0909EF5D6F20469EC38987231CAC46F466D23C62B26A73242CE67D1DF0E8EFF8B8DED
Malicious:	false
Reputation:	low
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\customSettings

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	47
Entropy (8bit):	4.3818353308528755
Encrypted:	false
SSDEEP:	3:2jRo6jhM6ceYcUtS2djIn:5I2uxUt5Mn
MD5:	48324111147DECC23AC222A361873FC5
SHA1:	0DF8B2267ABBDBD11C422D23338262E3131A4223
SHA-256:	D8D672F953E823063955BD9981532FC3453800C2E74C0CC3653D091088ABD3B3
SHA-512:	E3B5DB7BA5E4E3DE3741F53D91B6B61D6EB9ECC8F4C07B6AE1C2293517F331B716114BAB41D7935888A266F7EBDA6FABA90023EFFEC850A929986053853F1E02
Malicious:	false
Reputation:	low
Preview:	customSettings_F95BA787499AB4FA9EFFF472CE383A14

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\customSettings_F95BA787499AB4FA9EFFF472CE383A14

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	35
Entropy (8bit):	4.014438730983427
Encrypted:	false
SSDEEP:	3:YDMGA2ADH/AYKEqsYq:YQXT/bKE1F
MD5:	BB57A76019EADEDC27F04EB2FB1F1841
SHA1:	8B41A1B995D45B7A74A365B6B1F1F21F72F86760
SHA-256:	2BAE8302F9BD2D87AE26ACF692663DF1639B8E2068157451DA4773BD8BD30A2B
SHA-512:	A455D7F8E0BE9A27CFB7BE8FE0B0E722B35B4C8F206CAD99064473F15700023D5995CC2C4FAFDB8FBB50F0BAB3EC8B241E9A512C0766AAAE1A86C3472C589FFD
Malicious:	false
Reputation:	low
Preview:	{"forceServiceDetermination":false}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\edgeSettings

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	81
Entropy (8bit):	4.3439888556902035
Encrypted:	false
SSDEEP:	3:kDnaV6bVsFUIMf1HDOWg3djTHXoSWDSQ97P:kDYaoUIe1HDM3oskP
MD5:	177F4D75F4FEE84EF08C507C3476C0D2
SHA1:	08E17AEB4D4066AC034207420F1F73DD8BE3FAA0
SHA-256:	21EE7A30C2409E0041CDA6C04EEE72688EB92FE995DC94487FF93AD32BD8F849
SHA-512:	94FC142B3CC4844BF2C0A72BCE57363C554356C799F6E581AA3012E48375F02ABD820076A8C2902A3C6BE6AC4D8FA8D4F010D4FF261327E878AF5E5EE31038FB
Malicious:	false
Reputation:	low
Preview:	edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	130439
Entropy (8bit):	3.80180718117079
Encrypted:	false
SSDEEP:	1536:RlIyFAMrwvaGbyLWzDr6PDofI8vsUnPRLz+PMh:weWGP7Eh
MD5:	EB75CEFFE37E6DF9C171EE8380439EDA
SHA1:	F00119BA869133D64E4F7F0181161BD47968FA23
SHA-256:	48B11410DC937A1723BF4C5AD33ECDB286D8EC69544241BC373F753E64B396C1
SHA-512:	044C5113D877CE2E3B42CF07670620937ED7BE2D8B3BF2BAB085C43EF4F64598A7AC56328DDBBE7F0F3CFB9EA49D38CA332BB4ECBFEDBE24AE53B14334A30C8E
Malicious:	false
Reputation:	low
Preview:	{.. "geoidMaps": {.. "au": "https://australia.smartscreen.microsoft.com/",.. "ch": "https://switzerland.smartscreen.microsoft.com/",.. "eu": "https://europe.smartscreen.microsoft.com/",.. "ffl4": "https://unitedstates1.ss.wd.microsoft.us/",.. "ffl4mod": "https://unitedstates4.ss.wd.microsoft.us/",.. "ffl5": "https://unitedstates2.ss.wd.microsoft.us/",.. "in": "https://india.smartscreen.microsoft.com/",.. "test": "https://eu-9.smartscreen.microsoft.com/",.. "uk": "https://unitedkingdom.smartscreen.microsoft.com/",.. "us": "https://unitedstates.smartscreen.microsoft.com/",.. "gw_au": "https://australia.smartscreen.microsoft.com/",.. "gw_ch": "https://switzerland.smartscreen.microsoft.com/",.. "gw_eu": "https://europe.smartscreen.microsoft.com/",.. "gw_ffl4": "https://unitedstates1.ss.wd.microsoft.us/",.. "gw_ffl4mod": "https://unitedstates4.ss.wd.microsoft.us/",.. "gw_ffl5": "https://unitedstates2.ss.wd.microsoft.us/",.. "gw_in": "https

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\synchronousLookupUris

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.346439344671015
Encrypted:	false
SSDEEP:	3:kfKbUPVXXMVQX:kygV5
MD5:	6A3A60A3F78299444AACAA89710A64B6
SHA1:	2A052BF5CF54F980475085EEF459D94C3CE5EF55
SHA-256:	61597278D681774EFD8EB92F5836EB6362975A74CEF807CE548E50A7EC38E11F
SHA-512:	C5D0419869A43D712B29A5A11DC590690B5876D1D95C1F1380C2F773CA0CB07B173474EE16FE66A6AF633B04CC84E58924A62F00DCC171B2656D554864BF57A4
Malicious:	false
Reputation:	low
Preview:	synchronousLookupUris_638343870221005468

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\synchronousLookupUris_638343870221005468

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	57
Entropy (8bit):	4.556488479039065
Encrypted:	false
SSDEEP:	3:GSCIPPlzYxi21goD:bCWBYx99D
MD5:	3A05EAEA94307F8C57BAC69C3DF64E59
SHA1:	9B852B902B72B9D5F7B9158E306E1A2C5F6112C8
SHA-256:	A8EF112DF7DAD4B09AAA48C3E53272A2EEC139E86590FD80E2B7CBD23D14C09E
SHA-512:	6080AEF2339031FAFDCFB00D3179285E09B707A846FD2EA03921467DF5930B3F9C629D37400D625A8571B900BC46021047770BAC238F6BAC544B48FB3D522FB0
Malicious:	false
Reputation:	low
Preview:	9.......murmur3.............,M.h...Z...8.\..<&Li.H..[.?m

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\topTraffic

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	29
Entropy (8bit):	4.030394788231021
Encrypted:	false
SSDEEP:	3:0xXeZUSXkcVn:0Re5kcV
MD5:	52E2839549E67CE774547C9F07740500
SHA1:	B172E16D7756483DF0CA0A8D4F7640DD5D557201
SHA-256:	F81B7B9CE24F5A2B94182E817037B5F1089DC764BC7E55A9B0A6227A7E121F32
SHA-512:	D80E7351E4D83463255C002D3FDCE7E5274177C24C4C728D7B7932D0BE3EBCFEB68E1E65697ED5E162E1B423BB8CDFA0864981C4B466D6AD8B5E724D84B4203B
Malicious:	false
Reputation:	low
Preview:	topTraffic_638004170464094982

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\topTraffic_170540185939602997400506234197983529371

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	575056
Entropy (8bit):	7.999649474060713
Encrypted:	true
SSDEEP:	12288:fXdhUG0PlM/EXEBQlbk19RrH76Im4u8C1jJodha:Ji80e9Rb7Tm4u8CnR
MD5:	BE5D1A12C1644421F877787F8E76642D
SHA1:	06C46A95B4BD5E145E015FA7E358A2D1AC52C809
SHA-256:	C1CE928FBEF4EF5A4207ABAFD9AB6382CC29D11DDECC215314B0522749EF6A5A
SHA-512:	FD5B100E2F192164B77F4140ADF6DE0322F34D7B6F0CF14AED91BACAB18BB8F195F161F7CF8FB10651122A598CE474AC4DC39EDF47B6A85C90C854C2A3170960
Malicious:	false
Reputation:	low
Preview:	...._+jE.`..}....S..1....G}s..E....y".Wh.^.W.H...-...#.A...KR...9b........>k......bU.IVo...D......Y..[l.yx.......'c=..I0.....E.d...-...1 ....m../C...OQ.........qW..<:N.....38.u..X-..s....<..U.,Mi..._.......`.Y/.........^..,.E..........j@..G8..N.... ..Ea...4.+.79k.!T.-5W..!..@+..!.P..LDG.....V."....L.... .(#..$..&......C.....%A.T}....K_.S..'Q.".d....s....(j.D!......Ov..)d0)."(..%..-..G..L.}....i.....m9;.....t.w..0....f?..-..M.c.3.....N7K.T..D>.3.x...z..u$5!..4..T.....U.O^L{.5..=E..'..;.}(\|.6.:..f!.>...?M.8......P.D.J.I4.<....y.E....>....i%.6..Y.@..n.....M..r..C.f.;..<..0.H...F....h.......HB1]1....u..:...H..k....B.Q..J...@}j~.#...'Y.J~....I...ub.&..L[z..1.W/.Ck....M.......[.......N.F..z.{nZ~d.V.4.u.K.V.......X.<p..cz..>....X...W..da3(..g..Z$.L4.j=~.p.l.\.[e.&&.Y ...U)..._.^r0.,.{_......`S..[....(.\..p.bt.g..%.$+....f.....d....Im..f...W ......G..i_8a..ae..7....pS.....z-H..A.s.4.3..O.r.....u.S......a.}..v.-/..... ...a.x#./:...sS&U.().xL...pg

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\topTraffic_638004170464094982

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	raw G3 (Group 3) FAX, byte-padded
Category:	dropped
Size (bytes):	460992
Entropy (8bit):	7.999625908035124
Encrypted:	true
SSDEEP:	12288:KaRwcD8XXTZGZJHXBjOVX3xFttENr4+3eGPnKvJWXrydqb:KaR5oZ2MBFt8r4+3eG/URdqb
MD5:	E9C502DB957CDB977E7F5745B34C32E6
SHA1:	DBD72B0D3F46FA35A9FE2527C25271AEC08E3933
SHA-256:	5A6B49358772DB0B5C682575F02E8630083568542B984D6D00727740506569D4
SHA-512:	B846E682427CF144A440619258F5AA5C94CAEE7612127A60E4BD3C712F8FF614DA232D9A488E27FC2B0D53FD6ACF05409958AEA3B21EA2C1127821BD8E87A5CA
Malicious:	false
Reputation:	low
Preview:	...2lI.5.<C.;.{....._+jE.`..}....-...#.A...KR...l.M0,s...).9..........x.......F.b......jU....y.h'....L<.....Z..%...._...g.4yu...........'c=..I0..........qW..<:N....<..U.,Mi..._......'(..U.9.!........u....7...4. ..Ea...4.+.79k.!T.-5W..!..@+..$..t\|1.E..7F...+..xf....z&_Q...-.B...)8R.c....0.......B.M.Z...0....&v..<..H...3.....N7K.T..D>.8......P.D.J.I4.B.H.VHy...@.Wc.Cl..6aD..j.....E..4..mI..X]2.GH.G.L...E.F.=.J...@}j~.#...'Y.L[z..1.W/.Ck....L..X........J.NYd........>...N.F..z.{nZ~d.N..../..6.\L...Q...+.w..p...>.S.iG...0]..8....S..)`B#.v..^..T.?...Z.rz.D'.!.T.w....S..8....V.4.u.K.V.......W.6s...Y.).[.c.X.S..........5.X7F...tQ....z.L.X..(3#j...8...i.[..j$.Q....0...]"W.c.H..n..2Te.ak...c..-F(..W2.b....3.]......c.d\|.../....._...f.....d....Im..g.b..R.q.<xx...i2..r.I()Iat..b.j.r@K.+5..C.....nJ.>P,.V@.....s.4.3..O.r.....smd7...L.....].u&1../t.*.......uXb...=@.....wv......]....#.{$.w......i.....\|.....?....E7...}$+..t).E.U..Q..~.`.)..Y@.6.h.......%(

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\local\uriCache

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	9
Entropy (8bit):	3.169925001442312
Encrypted:	false
SSDEEP:	3:CMzOn:CM6
MD5:	B6F7A6B03164D4BF8E3531A5CF721D30
SHA1:	A2134120D4712C7C629CDCEEF9DE6D6E48CA13FA
SHA-256:	3D6F3F8F1456D7CE78DD9DFA8187318B38E731A658E513F561EE178766E74D39
SHA-512:	4B473F45A5D45D420483EA1D9E93047794884F26781BBFE5370A554D260E80AD462E7EEB74D16025774935C3A80CBB2FD1293941EE3D7B64045B791B365F2B63
Malicious:	false
Reputation:	low
Preview:	uriCache_

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\local\uriCache_

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	483
Entropy (8bit):	5.000298495481321
Encrypted:	false
SSDEEP:	12:YWLSGI2jfaAIVj/T8TbVfn/m1kv/NxfK753/m1kv/NmvN:YWLSijzIJKbBm1k+lvm1kwl
MD5:	6EA1B20F756D60B3A523F3BDDD819A2D
SHA1:	6FBE7E0FAB9F191CC7F2F3446D73BA26184F3A90
SHA-256:	7EC2C926A827FA65CCD9C2692C5AD0596BCA933E14C002CDD56BDD0B87F7C604
SHA-512:	5AACE0CB2E6B34DBC6D9364301E6AF10BA799F6C25430D438725948B35184B2BA80CDB58FB58A7AD2C0D12F00E4A6DC9E838DA1BEF7DC6B360B2F271FEED4D6C
Malicious:	false
Reputation:	low
Preview:	{"version":1,"cache_data":[{"file_hash":"4f403bcc9dfbabe3","server_context":"1;f94c025f-7523-6972-b613-ce2c246c55ce;unkn:100;0.01","result":1,"expiration_time":1705612049891517},{"file_hash":"dba5990f9aa95ab2","server_context":"1;c5faad59-a2e3-31f2-b86e-aaf958e12824;phsh:005;7e-05","result":0,"expiration_time":1705612048641490},{"file_hash":"8bb02c2e63c7c7d2","server_context":"1;c5faad59-a2e3-31f2-b86e-aaf958e12824;phsh:005;7e-05","result":0,"expiration_time":1705612048061653}]}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Variations

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.3751917412896075
Encrypted:	false
SSDEEP:	3:YQ3JYq9xSs0dMEJAELJ2rjozQw:YQ3Kq9X0dMgAEwj2
MD5:	16B7586B9EBA5296EA04B791FC3D675E
SHA1:	8890767DD7EB4D1BEAB829324BA8B9599051F0B0
SHA-256:	474D668707F1CB929FEF1E3798B71B632E50675BD1A9DCEAAB90C9587F72F680
SHA-512:	58668D0C28B63548A1F13D2C2DFA19BCC14C0B7406833AD8E72DFC07F46D8DF6DED46265D74A042D07FBC88F78A59CB32389EF384EC78A55976DFC2737868771
Malicious:	false
Reputation:	low
Preview:	{"user_experience_metrics.stability.exited_cleanly":false,"variations_crash_streak":2}

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	2278
Entropy (8bit):	3.8534478808425408
Encrypted:	false
SSDEEP:	48:uiTrlKxrgx2nxl9Il8uG7n2fcDcgILmjVYMud1rc:mVTYIIcYLOYMF
MD5:	E316977AA120E6E7E14FF4F652A841E5
SHA1:	7D402F24117B95B051CF3A370BF4E309F7755AE7
SHA-256:	9029DF17EE73730DF24B1E26D6553908B132107A5442E744FF21DD88DB88D644
SHA-512:	A44B1343EC8FA8DE1E258A56F68DFEB8B262981B357FE0053D750FBED83A727B37603C0CE7E72E346B789BA1026530460F0FF7FCA801867D42A5FDA97820EFE0
Malicious:	false
Reputation:	low
Preview:	{.".T.B.D.a.t.a.S.t.o.r.e.O.b.j.e.c.t.".:.{.".H.e.a.d.e.r.".:.{.".O.b.j.e.c.t.T.y.p.e.".:.".T.o.k.e.n.R.e.s.p.o.n.s.e.".,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.a.j.o.r.".:.2.,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.i.n.o.r.".:.1.}.,.".O.b.j.e.c.t.D.a.t.a.".:.{.".S.y.s.t.e.m.D.e.f.i.n.e.d.P.r.o.p.e.r.t.i.e.s.".:.{.".R.e.q.u.e.s.t.I.n.d.e.x.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".W.i.p.w.W.M.+.N.H.l.b.C.D.m.s.Z.p.8.S.O.s.j.h.t.F.B.s.=.".}.,.".E.x.p.i.r.a.t.i.o.n.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".g.E.S.p./.G.9.J.2.g.E.=.".}.,.".S.t.a.t.u.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.A.A.A.A.A.=.=.".}.,.".R.e.s.p.o.n.s.e.B.y.t.e.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.t.r.u.e.,.".V.a.l.u.e.".:.".A.Q.A.A.A.N.C.M.n.d.8.B.F.d.E.R.j.H.o.A.w.E./.C.l.+.s.B.A.A.A.A.r.F.h.X.H.q.

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\cf7513a936f7effbb38627e56f8d1fce10eb12cc.tbres

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4622
Entropy (8bit):	3.9945542227551685
Encrypted:	false
SSDEEP:	96:XYOIpailcWTcjoF2UP1Z+iRP/2Q6QzSLpUuSZmJ:XwailJSA2UP1Z+ihqdkmJ
MD5:	9800A1BCB333FAF397C00425B06B2905
SHA1:	05FC7BCCE44D51E5938212E15654CE61296F3AF3
SHA-256:	A4A322D9C6B1B00C05E5BABACF26A40AD6E7A9AC2FAAAC1D97B252F07432C098
SHA-512:	6327162E8A4180787A693C2D94B7DD1600CF1C9F0B85B05FC3CEE5E0B68919910A3CA3AE28F8276B7A0ED3C4088FB826D57B95E6CE3DC515F7644F985DAD498E
Malicious:	false
Reputation:	low
Preview:	{.".T.B.D.a.t.a.S.t.o.r.e.O.b.j.e.c.t.".:.{.".H.e.a.d.e.r.".:.{.".O.b.j.e.c.t.T.y.p.e.".:.".T.o.k.e.n.R.e.s.p.o.n.s.e.".,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.a.j.o.r.".:.2.,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.i.n.o.r.".:.1.}.,.".O.b.j.e.c.t.D.a.t.a.".:.{.".S.y.s.t.e.m.D.e.f.i.n.e.d.P.r.o.p.e.r.t.i.e.s.".:.{.".R.e.q.u.e.s.t.I.n.d.e.x.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".z.3.U.T.q.T.b.3.7./.u.z.h.i.f.l.b.4.0.f.z.h.D.r.E.s.w.=.".}.,.".E.x.p.i.r.a.t.i.o.n.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".Y.z.I.H.4.m.d.J.2.g.E.=.".}.,.".S.t.a.t.u.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.w.A.A.A.A.=.=.".}.,.".R.e.s.p.o.n.s.e.B.y.t.e.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.t.r.u.e.,.".V.a.l.u.e.".:.".A.Q.A.A.A.N.C.M.n.d.8.B.F.d.E.R.j.H.o.A.w.E./.C.l.+.s.B.A.A.A.A.r.F.h.X.H.q.

C:\Users\user\AppData\Local\Temp\04c6cde2-ac0a-4b67-bbde-666782997ba4.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2017 (Macintosh), datetime=2019:01:23 13:24:18], baseline, precision 8, 401x402, components 3
Category:	dropped
Size (bytes):	1104322
Entropy (8bit):	7.920509965711701
Encrypted:	false
SSDEEP:	24576:HUbEwH7FkYsWFKpDPhj9Ui2DJ0feOOWEsqe995BNQVtvw9p:HUbL7FqO+tWmWOtp995BNutoH
MD5:	5DE8834F77DBE1538A8A467A6328BE6E
SHA1:	30FCA44E062F5898F47169610F5287B4DAB33ECB
SHA-256:	FA5462F9D579A41BEFCD165F5F03CE9191961FF1BB5F4FFC33DDF50958AE359A
SHA-512:	B17B12DCFB6F86A262A61983EDB58728F8674B90A77F163A7390690EB3CA6F2C95058EEDA1A09D30AE3FE587FD0C1CD2E195C82E4E69CB683197D24DFBF20325
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,......Exif..MM..............................b...........j.(...........1.....$...r.2...........i...............-....'..-....'.Adobe Photoshop CC 2017 (Macintosh).2019:01:23 13:24:18.....................................................................$...........,.(.....................4...................H.......H.........C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......w.w..!............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..4..}Z...5uB. c v..?..........My4.....f..O.I.?....

C:\Users\user\AppData\Local\Temp\2d87592d-49ee-4a03-9373-07974e7fc812.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	17801
Entropy (8bit):	7.964191646854066
Encrypted:	false
SSDEEP:	384:rLPqHRqitFZuAtbut9FNW4GYz6BPOGg3SK0xz+jBt34ERxLR:HyxqiggboFWS2B2il+jPoEh
MD5:	6883495923FAD33EFDA44B0AD8E73E2E
SHA1:	4C0614D6C45D6503AC66FA4434C97BFC097A64D2
SHA-256:	54E356821627B34C2CC6B0A932848F581A3A6B939E6CF5C71F3F3E27EBB33ED4
SHA-512:	160DCA1AA1B1CDA14A84D53A471AD42B191A0FB746A625EC7283617621CCE672761A9868297F33F5311F09B909FAC7FC5D2D74EC00FB4F01760B70419A79BD65
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....IDATX..?Hr_....#...k.E.."..ISe.........55....DS..B.b.....a 4ES.Q!-..........{.........x.....>.H)...@eG9DLO...B.R..~.0=)..5/g.`z.<....Z..?...o...n(....!._..k.[. @.4.<...u....#..J)..A\|.......J..a..4...........T555H&..s............Z.H&......zM)%..(..B........prr.M.P[[....<==auu..T.---......=...N...z1<<..?~ .......@..ahR....Rr)..~2)%.B0)%SJ....VWW.677......Y.V........lee%.......n.....R.\3;r..O.!.RJ....G[[...(..s.]...x<..B`..D".).....Bp...b....a..1.m..P.4p..f.^...H.....RJ.`jj.......E(.... t]..}.....x................#.............cnn..D.###D..u].GGGhhh..n.B.... .....rakk..d.k...Bt....;8...Bt.o....E....0.....\__cgg..hmmEuu5....9....^]].L&......4./.. ........fn...a.\|>.b1....."..z{{...JZ...BVUU..1.b1......s.............x<...!.:.......l~.A....d0.D.....\|>....i:...p.www.....B..iE.3{......3.....e...lyy.)...R&......Ng.....y.}........!&''.5....t``.[,...A........)%G.m....d2.....CSJI..4....r......\[^2....<..I..R......K)?.J)s..y.

C:\Users\user\AppData\Local\Temp\540b0ee5-678f-4ce4-a95e-6e713facd38f.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Reputation:	low
Preview:	.

C:\Users\user\AppData\Local\Temp\608ce779-2184-40d4-9a77-cb05a5af39db.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	10987
Entropy (8bit):	7.9533289149420625
Encrypted:	false
SSDEEP:	192:BEhlw81PmHlmu6H0wbcosQxhTHGPJz4y4iqooeIfU+TEsegckOE7A4t:eP1+H8h0YNF3rGP+y4eIfUoEtkO+AA
MD5:	7AA0C0B17FEED14023C4FB189AA6072D
SHA1:	0B571B13F28AFCD96915108042BEB13A623A3CDA
SHA-256:	78AD07BCACBCB23C274D025F38746FF766FA4EBA41EE1AA68C238E329837DC09
SHA-512:	9C0E3D35EB32E8C1E907C6D1C45776235E31B979C8BE05767E6802186EDDB4D9EE337972A39E150DBE1C464E8BA391F401ABC69FB41700DA4E70E2EC624901E6
Malicious:	false
Reputation:	low
Preview:	Cr24..............0.."0....H.............0.........N.......E#......9e.u.q...VYY..@.+.C..k.O..bK.`..6.G..%.....3Z...e _.6....F..1p..K.Z......./ .3...OT..`..0...Y...FT..43.th.y...}....p.L...2S.&i.`..o...f.oH.....N..:..ijT.3.F{.0.,.f?'f.CQt;b_"Pc.. ..~S.I.c.8Z.;.....{G.a......k...>.`.o..%.$>;.....g........l....O.<. ]...U....E_.%=...N/`.^M^..<...t....g...z..^.H.Z.-....P.[F..@..`?.9X.%.. .7.}.Ul#.^....kZ.~n....N`..}S.V....$.co.....&..A/..?~aR.I..3S...`q5........AX....h.s.[h..`......3..._sQ...k.+....;..Jm.H.......k.-.<...%.?`.d7ti.p..D:.........0.."0....H.............0.........^SUd%Q.L].......Cl2o...\[.....'*...;R=....N.C5....d. .....J.C>u.kr..Y..syJC.XS.q..E.n?....(G.5..)2.G..!.M.SS.{..U....!.EE..M[.#qs.A.1...g)nQ.c..G....Bd..7... .O.BI..KXQ..4.d.K.0......g.....-p....Z.E{...M&.~n.TE7..{0....5.#.C+3.y)pd9.e..............U.:..R.....\|.0+....Z.......s.<.=e.pkS..>.b.)..M-%.......Oe.A.W.x]\|.4o....ij..c...La$.%.W.KU.A#.8....9..F}....?...

C:\Users\user\AppData\Local\Temp\a9381b96-7199-4283-827c-2fe67f78b009.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1366x720, components 3
Category:	dropped
Size (bytes):	103469
Entropy (8bit):	7.5851113512003785
Encrypted:	false
SSDEEP:	1536:5WcDWyRKNVd2M/IxMuYEDlymsTQ+2LaELsgBlr3EBvSEoFH8jR9xPEEcfBp3+g:5WcDW3D2an0GM+2LaEVBCBvsUrPql
MD5:	37CF67E6E5D3AE47CF40406A1E8BE94F
SHA1:	2A6F868ADC761DB9C03869E238BEA0D67D1FE6CE
SHA-256:	B4B4DBE335296D0CCF9C659D671A54C2FA06F8B4E41228CF03E1D21F7C8F9D03
SHA-512:	51F2C8B56592237378BE92C3EFCD814FC3E144120D109B15A7341AB03F9674251EE8B21BB172E6E021100F4EF792A5114D5B94F86EE0B157FD3386975BEC94CD
Malicious:	false
Reputation:	low
Preview:	......Exif..II.................Ducky.......2......Adobe.d...........................................................#"""#''''''''''..................................................!! !!''''''''''........V.."....................................................................................!1..AQ..aq."2....R..T....Br.#S.U..b..3Cs...t6.c.$D.5uV...4d.E&....%F......................!1..AQaq....."2......BRbr3CS....#..4.............?......1f.n..T......TP....E...........P.....@.........E..@......E.P........@........E.....P.P..A@@.E..@.P.P..AP.P..AP..@....T..AP.E..P.Z .. ....."... .....7.H...w.....t.....T....M.."... P..n.n..t5..B.P..(......................................( .................... .".... .".......(.. ."....... ....o......E.6... ....."........."J......Ah......@.@@....:@{6..wCp..3...((.(.........................@..(...."............................ ........T.......@.@@........AP.P..@.E@....E@.d.E@.@@..@.P.T..@..@..P.D...@M........EO..."...=.wCp.....R......P.@......

C:\Users\user\AppData\Local\Temp\cfecf0e7-1dab-42af-8689-50f5e8a625c4.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Reputation:	low
Preview:	.

C:\Users\user\AppData\Local\Temp\cv_debug.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1420
Entropy (8bit):	5.414732506413488
Encrypted:	false
SSDEEP:	24:YemMjYJ52mMtmZ52mMRb0VA0I+dt50qC0yZRj05NsP07F6L51P0Upp5KD45KmI0h:YIE5QwZ5Q50i0Im50l0yZ505NsP07F6L
MD5:	4DA0690E1921ED592403B083AB6CD2A9
SHA1:	776259817B9AB71E67F676B9D23AF54E05C52B5C
SHA-256:	D7191D286BF3B2A6F7C78699006D67336A1CD6443890E5E818F1D1B85825E363
SHA-512:	76C1A70B453CB66FA09CEF6EA6B43969644CC88A8AFAB918AE7A97BF03802D69CEC4B6EE1A155E61EEF57314D785DD046509D03BEB7F227C2499167AEE275126
Malicious:	false
Reputation:	low
Preview:	{"logTime": "1006/090722", "correlationVector":"rmkayOhJfEabcRCB2/Bp31","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1006/090722", "correlationVector":"jqHPV/yTVN5KYgOfDN/5Rr","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1006/090722", "correlationVector":"25C1A0EE3BD244A1BB83CF2641B12F1A","action":"FETCH_UX_CONFIG", "result":""}.{"logTime": "1006/093120", "correlationVector":"a/GaihlkzouX6tpAQ3civy","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1006/093121", "correlationVector":"2831F27CA5B645488E2DF2452C16A59E","action":"FETCH_UX_CONFIG", "result":""}.{"logTime": "1006/093243", "correlationVector":"7DhT8FK3VbHYWFgub0ZtsN","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1006/093243", "correlationVector":"83EFC8979E1A419495133BAFAFA5A23F","action":"FETCH_UX_CONFIG", "result":""}.{"logTime": "1006/093745", "correlationVector":"Bxyvid0fodNJ7Wehc/BC7P","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1006/093746", "correlationVector":"B1516CBB

C:\Users\user\AppData\Local\Temp\ecb707e8-477c-4566-940a-884d3b3c800a.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	91671
Entropy (8bit):	7.8774767243532695
Encrypted:	false
SSDEEP:	1536:B2Y2RUm46OClYKr5DXyzN0iFD8xPT4jobgdNhBKDyU4W3NrUeNWy4cSbJUl4yv:8L9prNyzFB8hGXnhouer/W0KJ+4i
MD5:	2BBD469CC894351258066DB2023D206B
SHA1:	3EF9EA3B62E43301B6287361B16AC01F5780AD35
SHA-256:	70CE55C69127635BCB579E1878C4C74F7707BD708CD57273E8B4891459A6A0EF
SHA-512:	421F3D78F5C132243B78C73FE7660BB3E045E83E30C0B3A2D6597E0C9E3C19DD4681491981E3C3A649C1E4E2A91BD982529234DA8DA1BFFB46651B74321E34D4
Malicious:	false
Reputation:	low
Preview:	Cr24....e"........0.."0....H.............0.........^...1"...w.g..t..2J.G1.)X4..=&.?[j,Lz..j.u.e[I.qBa/X...P.h..L.....2%3_o.......H.)'.=.e...?.......j..3UH.\|.X.M..u..s[...?$....F%....I....)..,-./.e5).f..O.q.^........9..(.._.ph2..^.YBPXf_8....h[.v...S.1`.#..5.SF.:f-.#.65.i..b.]9...y2.'....k[........V....h.[..9..?..R...a.y..x....P..o...Tc.<^.N..S.....c$j.jZ...t.A.3...H..._....Q.Sx.{7...<......wO.......%>..ZGs......K...&..ua#.>......E.a..2u;...\|.^yU........o......!.;7..E;.3.~..B......W.a!....O.q.z...yd...)3.6...f..?.B..G.......]'-.....[0Y0....H.=.....H.=....B..............r...2..+Y.I...k..bR.j5Sl..8.......H"i.-l..`.Q.{...F0D. ..O7..~.y.G..!s(........Faul.... .G..GZ.. <tS..28/22dlO.V...&...".>...........\|]s.<{._.........l...X".}.:.{...A`....y.{..y..v.=....d..\|-].k-.........4.O.......4myn.ij>...?.......?..87......Sy.R..k.U.kI.Z..........\|,.....[........(C=..[..t4..c....>....=..^.._.._P.......z.}).;.9>}./m,..Z..u...`.g6...P.....k

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\128.png

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4982
Entropy (8bit):	7.929761711048726
Encrypted:	false
SSDEEP:	96:L7Rf7U1ylWb3KfyEfOXE+PIcvBirQFiAql1ZwKREkXCSAk:pTvWqfD+gl0sAql1u7kySAk
MD5:	913064ADAAA4C4FA2A9D011B66B33183
SHA1:	99EA751AC2597A080706C690612AEEEE43161FC1
SHA-256:	AFB4CE8882EF7AE80976EBA7D87F6E07FCDDC8E9E84747E8D747D1E996DEA8EB
SHA-512:	162BF69B1AD5122C6154C111816E4B87A8222E6994A72743ED5382D571D293E1467A2ED2FC6CC27789B644943CF617A56DA530B6A6142680C5B2497579A632B5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............>a....=IDATx..]}...U..;...O.Q..QH.I(....v..E....GUb..R[.4@%..hK..B..(.B..". ....&)U#.%...jZ...JC.8.....{.cfvgf.3;.....}ow.....{...P.B...T.P.B...*Tx...=.Q..wv.w.....\|.e.1.$.P.?..l_\.n.}...~.g.....Q...A.f....m.....{,...C2 %..X.......FE.1.N..f...Q..D.K87.....:g..Q.{............3@$.8.....{.....q....G.. .....5..y......)XK..F...D.......... ."8...J#.eM.i....H.E.....a.RIP.`......)..T.....! .[p`X.`..L.a....e. .T..2.....H..p$..02...j....\..........s{...Ymm~.a........f.$./.[.{..C.2:.0..6..]....`....NW.....0..o.T..$;k.2......_...k..{,.+........{..6...L..... .dw...l$..}...K...EV....0......P...e....k....+Go....qw.9.1...X2\..qfw0v.....N...{...l.."....f.A..I..+#.v....'..~E.N-k.........{...l.$..ga..1...$......x$X=}.N..S..B$p..`..`.ZG:c..RA.(.0......Gg.A.I..>...3u.u........_..KO.m.........C...,..c.......0...@_..m...-..7.......4LZ......j@.......\..'....u. QJ.:G..I`.w'B0..w.H..'b.0- ......\|..}./.....e..,.K.1........W.u.v. ...\.o

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\af\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	908
Entropy (8bit):	4.512512697156616
Encrypted:	false
SSDEEP:	12:1HASvgMTCBxNB+kCIww3v+BBJ/wjsV8lCBxeBeRiGTCSU8biHULaBg/4srCBhUJJ:1HAkkJ+kCIwEg/wwbw0PXa22QLWmSDg
MD5:	12403EBCCE3AE8287A9E823C0256D205
SHA1:	C82D43C501FAE24BFE05DB8B8F95ED1C9AC54037
SHA-256:	B40BDE5B612CFFF936370B32FB0C58CC205FC89937729504C6C0B527B60E2CBA
SHA-512:	153401ECDB13086D2F65F9B9F20ACB3CEFE5E2AEFF1C31BA021BE35BF08AB0634812C33D1D34DA270E5693A8048FC5E2085E30974F6A703F75EA1622A0CA0FFD
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "SKEP NUWE".. },.. "explanationofflinedisabled": {.. "message": "Jy is vanlyn. As jy Google Dokumente sonder 'n internetverbinding wil gebruik, moet jy die volgende keer as jy aan die internet gekoppel is na instellings op die Google Dokumente-tuisblad gaan en vanlynsinkronisering aanskakel.".. },.. "explanationofflineenabled": {.. "message": "Jy is vanlyn, maar jy kan nog steeds beskikbare l.ers redigeer of nuwes skep.".. },.. "extdesc": {.. "message": "Skep, wysig en bekyk jou dokumente, sigblaaie en aanbiedings . alles sonder toegang tot die internet.".. },.. "extname": {.. "message": "Google Vanlyn Dokumente".. },.. "learnmore": {.. "message": "Kom meer te wete".. },.. "popuphelptext": {.. "message": "Skryf, redigeer en werk saam, waar jy ook al is, met of sonder 'n internetverbinding.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\am\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1285
Entropy (8bit):	4.702209356847184
Encrypted:	false
SSDEEP:	24:1HAn6bfEpxtmqMI91ivWjm/6GcCIoToCZzlgkX/Mj:W6bMt3MITFjm/Pcd4oCZhg6k
MD5:	9721EBCE89EC51EB2BAEB4159E2E4D8C
SHA1:	58979859B28513608626B563138097DC19236F1F
SHA-256:	3D0361A85ADFCD35D0DE74135723A75B646965E775188F7DCDD35E3E42DB788E
SHA-512:	FA3689E8663565D3C1C923C81A620B006EA69C99FB1EB15D07F8F45192ED9175A6A92315FA424159C1163382A3707B25B5FC23E590300C62CBE2DACE79D84871
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "... ...".. },.. "explanationofflinedisabled": {.. "message": "..... .. .... Google ..... ........ ..... ..... .Google .... ... .. .. .. ..... .... ....... .. ....... ... .. .. ..... .. ..... ....".. },.. "explanationofflineenabled": {.. "message": "..... .. .... ... .. .... .... ..... .... ... ..... .... .....".. },.. "extdesc": {.. "message": "...... ..... .... ... .. ..... ...... ..... .... .. ..... . .... .. ...... .....".. },.. "extname": {.. "message": "..... .. Goog

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\ar\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1244
Entropy (8bit):	4.5533961615623735
Encrypted:	false
SSDEEP:	12:1HASvgPCBxNhieFTr9ogjIxurIyJCCBxeh6wAZKn7uCSUhStuysUm+WCBhSueW1Y:1HAgJzoaC6VEn7Css8yoXzzd
MD5:	3EC93EA8F8422FDA079F8E5B3F386A73
SHA1:	24640131CCFB21D9BC3373C0661DA02D50350C15
SHA-256:	ABD0919121956AB535E6A235DE67764F46CFC944071FCF2302148F5FB0E8C65A
SHA-512:	F40E879F85BC9B8120A9B7357ED44C22C075BF065F45BEA42BD5316AF929CBD035D5D6C35734E454AEF5B79D378E51A77A71FA23F9EBD0B3754159718FCEB95C
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "..... ....".. },.. "explanationofflinedisabled": {.. "message": "... ... ...... ........ ....... Google ... ..... .......... ..... ... ......... .. ...... ........ ........ Google ..... ........ ... ..... .. ..... ....... .... .... .... ..........".. },.. "explanationofflineenabled": {.. "message": "... ... ...... .... .. .... ....... ..... ....... ....... .. ..... ..... ......".. },.. "extdesc": {.. "message": "..... ......... ...... ........ ....... ......... ........ ....... .. ... ... ..... .........".. },.. "extname": {.. "message": "....... Google ... ......".. },.. "learnmore": {.. "messa

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\az\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	977
Entropy (8bit):	4.867640976960053
Encrypted:	false
SSDEEP:	24:1HAWNjbwlmyuAoW32Md+80cVLdUSERHtRo3SjX:J3wlzs42m+8TV+S4H0CjX
MD5:	9A798FD298008074E59ECC253E2F2933
SHA1:	1E93DA985E880F3D3350FC94F5CCC498EFC8C813
SHA-256:	628145F4281FA825D75F1E332998904466ABD050E8B0DC8BB9B6A20488D78A66
SHA-512:	9094480379F5AB711B3C32C55FD162290CB0031644EA09A145E2EF315DA12F2E55369D824AF218C3A7C37DD9A276AEEC127D8B3627D3AB45A14B0191ED2BBE70
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "YEN.S.N. YARADIN".. },.. "explanationofflinedisabled": {.. "message": "Oflayns.n.z. Google S.n.di internet ba.lant.s. olmadan istifad. etm.k ist.yirsinizs., Google S.n.din .sas s.hif.sind. ayarlara gedin v. n.vb.ti d.f. internet. qo.ulanda oflayn sinxronizasiyan. aktiv edin.".. },.. "explanationofflineenabled": {.. "message": "Oflayns.n.z, amma m.vcud fayllar. redakt. ed. v. yenil.rini yarada bil.rsiniz.".. },.. "extdesc": {.. "message": "S.n.d, c.dv.l v. t.qdimatlar.n ham.s.n. internet olmadan redakt. edin, yarad.n v. bax.n.".. },.. "extname": {.. "message": "Google S.n.d Oflayn".. },.. "learnmore": {.. "message": ".trafl. M.lumat".. },.. "popuphelptext": {.. "message": "Harda olma..n.zdan v. internet. qo.ulu olub-olmad...n.zdan as.l. olmayaraq, yaz.n, redakt. edin v. .m.kda.l.q edin.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\be\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3107
Entropy (8bit):	3.535189746470889
Encrypted:	false
SSDEEP:	48:YOWdTQ0QRk+QyJQAy6Qg4QWSe+QECTQLHQlQIfyQ0fnWQjQDrTQik+QvkZTQ+89b:GdTbyRvwgbCTEHQhyVues9oOT3rOCkV
MD5:	68884DFDA320B85F9FC5244C2DD00568
SHA1:	FD9C01E03320560CBBB91DC3D1917C96D792A549
SHA-256:	DDF16859A15F3EB3334D6241975CA3988AC3EAFC3D96452AC3A4AFD3644C8550
SHA-512:	7FF0FBD555B1F9A9A4E36B745CBFCAD47B33024664F0D99E8C080BE541420D1955D35D04B5E973C07725573E592CD0DD84FDBB867C63482BAFF6929ADA27CCDE
Malicious:	false
Reputation:	low
Preview:	{"createnew":{"message":"\u0421\u0422\u0412\u0410\u0420\u042b\u0426\u042c \u041d\u041e\u0412\u042b"},"explanationofflinedisabled":{"message":"\u0412\u044b \u045e \u043f\u0430\u0437\u0430\u0441\u0435\u0442\u043a\u0430\u0432\u044b\u043c \u0440\u044d\u0436\u044b\u043c\u0435. \u041a\u0430\u0431 \u043a\u0430\u0440\u044b\u0441\u0442\u0430\u0446\u0446\u0430 \u0414\u0430\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0456 Google \u0431\u0435\u0437 \u043f\u0430\u0434\u043a\u043b\u044e\u0447\u044d\u043d\u043d\u044f \u0434\u0430 \u0456\u043d\u0442\u044d\u0440\u043d\u044d\u0442\u0443, \u043f\u0435\u0440\u0430\u0439\u0434\u0437\u0456\u0446\u0435 \u0434\u0430 \u043d\u0430\u043b\u0430\u0434 \u043d\u0430 \u0433\u0430\u043b\u043e\u045e\u043d\u0430\u0439 \u0441\u0442\u0430\u0440\u043e\u043d\u0446\u044b \u0414\u0430\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u045e Google \u0456 \u045e\u043a\u043b\u044e\u0447\u044b\u0446\u0435 \u0441\u0456\u043d\u0445\u0440\u0430\u043d\u0456\u0437\u0430\u0446\u044b\u044e

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\bg\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1389
Entropy (8bit):	4.561317517930672
Encrypted:	false
SSDEEP:	24:1HAp1DQqUfZ+Yann08VOeadclUZbyMzZzsYvwUNn7nOyRK8/nn08V7:g1UTfZ+Ya08Uey3tflCRE08h
MD5:	2E6423F38E148AC5A5A041B1D5989CC0
SHA1:	88966FFE39510C06CD9F710DFAC8545672FFDCEB
SHA-256:	AC4A8B5B7C0B0DD1C07910F30DCFBDF1BCB701CFCFD182B6153FD3911D566C0E
SHA-512:	891FCDC6F07337970518322C69C6026896DD3588F41F1E6C8A1D91204412CAE01808F87F9F2DEA1754458D70F51C3CEF5F12A9E3FC011165A42B0844C75EC683
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": ".........".. },.. "explanationofflinedisabled": {.. "message": "...... .... .. .. .......... Google ......... ... ........ ......, ........ ........... . ......... ........ .. Google ......... . ........ ...... .............. ......... ..., ...... ..... ...... . .........".. },.. "explanationofflineenabled": {.. "message": "...... ..., .. ... ...... .. ........... ......... ....... ... .. ......... .....".. },.. "extdesc": {.. "message": "............, .......... . ............ ...... ........., .......... ....... . ........... . ...... .... ... ...... .. .........".. },..

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\bn\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1763
Entropy (8bit):	4.25392954144533
Encrypted:	false
SSDEEP:	24:1HABGtNOtIyHmVd+q+3X2AFl2DhrR7FAWS9+SMzI8QVAEq8yB0XtfOyvU7D:oshmm/+H2Ml2DrFPS9+S99EzBd7D
MD5:	651375C6AF22E2BCD228347A45E3C2C9
SHA1:	109AC3A912326171D77869854D7300385F6E628C
SHA-256:	1DBF38E425C5C7FC39E8077A837DF0443692463BA1FBE94E288AB5A93242C46E
SHA-512:	958AA7CF645FAB991F2ECA0937BA734861B373FB1C8BCC001599BE57C65E0917F7833A971D93A7A6423C5F54A4839D3A4D5F100C26EFA0D2A068516953989F9D
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": ".... .... ....".. },.. "explanationofflinedisabled": {.. "message": ".... ....... ....... .... ......... ..... ..... Google ........ ....... ...., Google .......... ........ ....... ... ... .... ... .... ... ........... .... ....... .... ... ...... ..... .... .....".. },.. "explanationofflineenabled": {.. "message": ".... ....... ......, ...... .... .... ...... .......... ........ .... .. .... .... .... .... .......".. },.. "extdesc":

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\ca\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	930
Entropy (8bit):	4.569672473374877
Encrypted:	false
SSDEEP:	12:1HASvggoSCBxNFT0sXuqgEHQ2fTq9blUJYUJaw9CBxejZFPLOjCSUuE44pMiiDat:1HAtqs+BEHGpURxSp1iUPWCAXtRKe
MD5:	D177261FFE5F8AB4B3796D26835F8331
SHA1:	4BE708E2FFE0F018AC183003B74353AD646C1657
SHA-256:	D6E65238187A430FF29D4C10CF1C46B3F0FA4B91A5900A17C5DFD16E67FFC9BD
SHA-512:	E7D730304AED78C0F4A78DADBF835A22B3D8114FB41D67B2B26F4FE938B572763D3E127B7C1C81EBE7D538DA976A7A1E7ADC40F918F88AFADEA2201AE8AB47D0
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "CREA'N UN DE NOU".. },.. "explanationofflinedisabled": {.. "message": "No tens connexi.. Per utilitzar Documents de Google sense connexi. a Internet, ves a la configuraci. de la p.gina d'inici d'aquest servei i activa l'opci. per sincronitzar-se sense connexi. la propera vegada que estiguis connectat a la xarxa.".. },.. "explanationofflineenabled": {.. "message": "Tot i que no tens connexi., pots editar o crear fitxers.".. },.. "extdesc": {.. "message": "Edita, crea i consulta documents, fulls de c.lcul i presentacions, tot sense acc.s a Internet.".. },.. "extname": {.. "message": "Documents de Google sense connexi.".. },.. "learnmore": {.. "message": "M.s informaci.".. },.. "popuphelptext": {.. "message": "Escriu text, edita fitxers i col.labora-hi siguis on siguis, amb o sense connexi. a Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\cs\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	913
Entropy (8bit):	4.947221919047
Encrypted:	false
SSDEEP:	12:1HASvgdsbCBxNBmobXP15Dxoo60n40h6qCBxeBeGG/9jZCSUKFPDLZ2B2hCBhPLm:1HApJmoZ5e50nzQhwAd7dvYB2kDSGGKs
MD5:	CCB00C63E4814F7C46B06E4A142F2DE9
SHA1:	860936B2A500CE09498B07A457E0CCA6B69C5C23
SHA-256:	21AE66CE537095408D21670585AD12599B0F575FF2CB3EE34E3A48F8CC71CFAB
SHA-512:	35839DAC6C985A6CA11C1BFF5B8B5E59DB501FCB91298E2C41CB0816B6101BF322445B249EAEA0CEF38F76D73A4E198F2B6E25EEA8D8A94EA6007D386D4F1055
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "VYTVO.IT".. },.. "explanationofflinedisabled": {.. "message": "Jste offline. Pokud chcete Dokumenty Google pou..vat bez p.ipojen. k.internetu, a. budete p...t. online, p.ejd.te do nastaven. na domovsk. str.nce Dokument. Google a.zapn.te offline synchronizaci.".. },.. "explanationofflineenabled": {.. "message": "Jste offline, ale st.le m..ete upravovat dostupn. soubory nebo vytv..et nov..".. },.. "extdesc": {.. "message": "Upravujte, vytv..ejte a.zobrazujte sv. dokumenty, tabulky a.prezentace . v.e bez p..stupu k.internetu.".. },.. "extname": {.. "message": "Dokumenty Google offline".. },.. "learnmore": {.. "message": "Dal.. informace".. },.. "popuphelptext": {.. "message": "Pi.te, upravujte a.spolupracujte kdekoli, s.p.ipojen.m k.internetu i.bez n.j.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\cy\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	806
Entropy (8bit):	4.815663786215102
Encrypted:	false
SSDEEP:	12:YGo35xMxy6gLr4Dn1eBVa1xzxyn1VFQB6FDVgdAJex9QH7uy+XJEjENK32J21j:Y735+yoeeRG54uDmdXx9Q7u3r83Xj
MD5:	A86407C6F20818972B80B9384ACFBBED
SHA1:	D1531CD0701371E95D2A6BB5EDCB79B949D65E7C
SHA-256:	A482663292A913B02A9CDE4635C7C92270BF3C8726FD274475DC2C490019A7C9
SHA-512:	D9FBF675514A890E9656F83572208830C6D977E34D5744C298A012515BC7EB5A17726ADD0D9078501393BABD65387C4F4D3AC0CC0F7C60C72E09F336DCA88DE7
Malicious:	false
Reputation:	low
Preview:	{"createnew":{"message":"CREU NEWYDD"},"explanationofflinedisabled":{"message":"Rydych chi all-lein. I ddefnyddio Dogfennau Google heb gysylltiad \u00e2'r rhyngrwyd, ewch i'r gosodiadau ar dudalen hafan Dogfennau Google a throi 'offine sync' ymlaen y tro nesaf y byddwch wedi'ch cysylltu \u00e2'r rhyngrwyd."},"explanationofflineenabled":{"message":"Rydych chi all-lein, ond gallwch barhau i olygu'r ffeiliau sydd ar gael neu greu rhai newydd."},"extdesc":{"message":"Gallwch olygu, creu a gweld eich dogfennau, taenlenni a chyflwyniadau \u2013 i gyd heb fynediad i'r rhyngrwyd."},"extname":{"message":"Dogfennau Google All-lein"},"learnmore":{"message":"DYSGU MWY"},"popuphelptext":{"message":"Ysgrifennwch, golygwch a chydweithiwch lle bynnag yr ydych, gyda chysylltiad \u00e2'r rhyngrwyd neu hebddo."}}.

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\da\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	883
Entropy (8bit):	4.5096240460083905
Encrypted:	false
SSDEEP:	24:1HA4EFkQdUULMnf1yo+9qgpukAXW9bGJTvDyqdr:zEFkegfw9qwAXWNs/yu
MD5:	B922F7FD0E8CCAC31B411FC26542C5BA
SHA1:	2D25E153983E311E44A3A348B7D97AF9AAD21A30
SHA-256:	48847D57C75AF51A44CBF8F7EF1A4496C2007E58ED56D340724FDA1604FF9195
SHA-512:	AD0954DEEB17AF04858DD5EC3D3B3DA12DFF7A666AF4061DEB6FD492992D95DB3BAF751AB6A59BEC7AB22117103A93496E07632C2FC724623BB3ACF2CA6093F3
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "OPRET NYT".. },.. "explanationofflinedisabled": {.. "message": "Du er offline. Hvis du vil bruge Google Docs uden en internetforbindelse, kan du g. til indstillinger p. startsiden for Google Docs og aktivere offlinesynkronisering, n.ste gang du har internetforbindelse.".. },.. "explanationofflineenabled": {.. "message": "Du er offline, men du kan stadig redigere tilg.ngelige filer eller oprette nye.".. },.. "extdesc": {.. "message": "Rediger, opret og se dine dokumenter, regneark og pr.sentationer helt uden internetadgang.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "F. flere oplysninger".. },.. "popuphelptext": {.. "message": "Skriv, rediger og samarbejd, uanset hvor du er, og uanset om du har internetforbindelse.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\de\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1031
Entropy (8bit):	4.621865814402898
Encrypted:	false
SSDEEP:	24:1HA6sZnqWd77ykJzCkhRhoe1HMNaAJPwG/p98HKpy2kX/R:WZqWxykJzthRhoQma+tpyHX2O/R
MD5:	D116453277CC860D196887CEC6432FFE
SHA1:	0AE00288FDE696795CC62FD36EABC507AB6F4EA4
SHA-256:	36AC525FA6E28F18572D71D75293970E0E1EAD68F358C20DA4FDC643EEA2C1C5
SHA-512:	C788C3202A27EC220E3232AE25E3C855F3FDB8F124848F46A3D89510C564641A2DFEA86D5014CEA20D3D2D3C1405C96DBEB7CCAD910D65C55A32FDCA8A33FDD4
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "NEU ERSTELLEN".. },.. "explanationofflinedisabled": {.. "message": "Sie sind offline. Um Google Docs ohne Internetverbindung zu verwenden, gehen Sie auf der Google Docs-Startseite auf \"Einstellungen\" und schalten die Offlinesynchronisierung ein, wenn Sie das n.chste Mal mit dem Internet verbunden sind.".. },.. "explanationofflineenabled": {.. "message": "Sie sind offline, aber k.nnen weiterhin verf.gbare Dateien bearbeiten oder neue Dateien erstellen.".. },.. "extdesc": {.. "message": "Mit der Erweiterung k.nnen Sie Dokumente, Tabellen und Pr.sentationen bearbeiten, erstellen und aufrufen.. ganz ohne Internetverbindung.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Weitere Informationen".. },.. "popuphelptext": {.. "message": "Mit oder ohne Internetverbindung: Sie k.nnen von .berall Dokumente erstellen, .ndern und zusammen mit anderen

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\el\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1613
Entropy (8bit):	4.618182455684241
Encrypted:	false
SSDEEP:	24:1HAJKan4EITDZGoziRAc2Z8eEfkTJfLhGX7b0UBNoAcGpVyhxefSmuq:SKzTD0IK85JlwsGOUyaSk
MD5:	9ABA4337C670C6349BA38FDDC27C2106
SHA1:	1FC33BE9AB4AD99216629BC89FBB30E7AA42B812
SHA-256:	37CA6AB271D6E7C9B00B846FDB969811C9CE7864A85B5714027050795EA24F00
SHA-512:	8564F93AD8485C06034A89421CE74A4E719BBAC865E33A7ED0B87BAA80B7F7E54B240266F2EDB595DF4E6816144428DB8BE18A4252CBDCC1E37B9ECC9F9D7897
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": ".......... ....".. },.. "explanationofflinedisabled": {.. "message": "..... ..... ......... ... .. ............... .. ....... Google ..... ....... ... ........., ......... .... ......... .... ...... ...... ... ........ Google ... ............. ... ........... ..... ........ ... ....... .... ... .. ..... ............ ... ..........".. },.. "explanationofflineenabled": {.. "message": "..... ..... ........ .... ........ .. .............. .. ......... ...... . .. ............. ... .......".. },.. "extdesc": {.. "message": ".............., ............ ... ..... .. ......., .

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\en\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	851
Entropy (8bit):	4.4858053753176526
Encrypted:	false
SSDEEP:	12:1HASvgg4eCBxNdN3Pj1NzXW6iFryCBxesJGceKCSUuvNn3AwCBhUufz1tHaXRdAv:1HA3dj/BNzXviFrpj4sNQXJezAa6
MD5:	07FFBE5F24CA348723FF8C6C488ABFB8
SHA1:	6DC2851E39B2EE38F88CF5C35A90171DBEA5B690
SHA-256:	6895648577286002F1DC9C3366F558484EB7020D52BBF64A296406E61D09599C
SHA-512:	7ED2C8DB851A84F614D5DAF1D5FE633BD70301FD7FF8A6723430F05F642CEB3B1AD0A40DE65B224661C782FFCEC69D996EBE3E5BB6B2F478181E9A07D8CD41F6
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "CREATE NEW".. },.. "explanationofflinedisabled": {.. "message": "You're offline. To use Google Docs without an internet connection, go to settings on the Google Docs homepage and turn on offline sync the next time you're connected to the internet.".. },.. "explanationofflineenabled": {.. "message": "You're offline, but you can still edit available files or create new ones.".. },.. "extdesc": {.. "message": "Edit, create, and view your documents, spreadsheets, and presentations . all without internet access.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Learn More".. },.. "popuphelptext": {.. "message": "Write, edit, and collaborate wherever you are, with or without an internet connection.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\en_CA\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	851
Entropy (8bit):	4.4858053753176526
Encrypted:	false
SSDEEP:	12:1HASvgg4eCBxNdN3Pj1NzXW6iFryCBxesJGceKCSUuvNn3AwCBhUufz1tHaXRdAv:1HA3dj/BNzXviFrpj4sNQXJezAa6
MD5:	07FFBE5F24CA348723FF8C6C488ABFB8
SHA1:	6DC2851E39B2EE38F88CF5C35A90171DBEA5B690
SHA-256:	6895648577286002F1DC9C3366F558484EB7020D52BBF64A296406E61D09599C
SHA-512:	7ED2C8DB851A84F614D5DAF1D5FE633BD70301FD7FF8A6723430F05F642CEB3B1AD0A40DE65B224661C782FFCEC69D996EBE3E5BB6B2F478181E9A07D8CD41F6
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "CREATE NEW".. },.. "explanationofflinedisabled": {.. "message": "You're offline. To use Google Docs without an internet connection, go to settings on the Google Docs homepage and turn on offline sync the next time you're connected to the internet.".. },.. "explanationofflineenabled": {.. "message": "You're offline, but you can still edit available files or create new ones.".. },.. "extdesc": {.. "message": "Edit, create, and view your documents, spreadsheets, and presentations . all without internet access.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Learn More".. },.. "popuphelptext": {.. "message": "Write, edit, and collaborate wherever you are, with or without an internet connection.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\en_GB\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	848
Entropy (8bit):	4.494568170878587
Encrypted:	false
SSDEEP:	12:1HASvgg4eCBxNdN3vRyc1NzXW6iFrSCBxesJGceKCSUuvlvOgwCBhUufz1tnaXrQ:1HA3djfR3NzXviFrJj4sJXJ+bA6RM
MD5:	3734D498FB377CF5E4E2508B8131C0FA
SHA1:	AA23E39BFE526B5E3379DE04E00EACBA89C55ADE
SHA-256:	AB5CDA04013DCE0195E80AF714FBF3A67675283768FFD062CF3CF16EDB49F5D4
SHA-512:	56D9C792954214B0DE56558983F7EB7805AC330AF00E944E734340BE41C68E5DD03EDDB17A63BC2AB99BDD9BE1F2E2DA5BE8BA7C43D938A67151082A9041C7BA
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "CREATE NEW".. },.. "explanationofflinedisabled": {.. "message": "You're offline. To use Google Docs without an Internet connection, go to settings on the Google Docs homepage and turn on offline sync the next time you're connected to the Internet.".. },.. "explanationofflineenabled": {.. "message": "You're offline, but you can still edit available files or create new ones.".. },.. "extdesc": {.. "message": "Edit, create and view your documents, spreadsheets and presentations . all without Internet access.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Learn more".. },.. "popuphelptext": {.. "message": "Write, edit and collaborate wherever you are, with or without an Internet connection.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\en_US\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1425
Entropy (8bit):	4.461560329690825
Encrypted:	false
SSDEEP:	24:1HA6Krbbds5Kna/BNzXviFrpsCxKU4irpNQ0+qWK5yOJAaCB7MAa6:BKrbBs5Kna/BNzXvi3sCxKZirA0jWK5m
MD5:	578215FBB8C12CB7E6CD73FBD16EC994
SHA1:	9471D71FA6D82CE1863B74E24237AD4FD9477187
SHA-256:	102B586B197EA7D6EDFEB874B97F95B05D229EA6A92780EA8544C4FF1E6BC5B1
SHA-512:	E698B1A6A6ED6963182F7D25AC12C6DE06C45D14499DDC91E81BDB35474E7EC9071CFEBD869B7D129CB2CD127BC1442C75E408E21EB8E5E6906A607A3982B212
Malicious:	false
Reputation:	low
Preview:	{.. "createNew": {.. "description": "Text shown in the extension pop up for creating a new document",.. "message": "CREATE NEW".. },.. "explanationOfflineDisabled": {.. "description": "Text shown in the extension popup when the user is offline and offline is disabled.",.. "message": "You're offline. To use Google Docs without an internet connection, go to settings on the Google Docs homepage and turn on offline sync the next time you're connected to the internet.".. },.. "explanationOfflineEnabled": {.. "description": "Text shown in the extension popup when the user is offline and offline is enabled.",.. "message": "You're offline, but you can still edit available files or create new ones.".. },.. "extDesc": {.. "description": "Extension description",.. "message": "Edit, create, and view your documents, spreadsheets, and presentations . all without internet access.".. },.. "extName": {.. "description": "Extension name",..

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\es\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	961
Entropy (8bit):	4.537633413451255
Encrypted:	false
SSDEEP:	12:1HASvggeCBxNFxcw2CVcfamedatqWCCBxeFxCF/m+rWAaFQbCSUuExqIQdO06stp:1HAqn0gcfa9dc/5mCpmIWck02USfWmk
MD5:	F61916A206AC0E971CDCB63B29E580E3
SHA1:	994B8C985DC1E161655D6E553146FB84D0030619
SHA-256:	2008F4FAAB71AB8C76A5D8811AD40102C380B6B929CE0BCE9C378A7CADFC05EB
SHA-512:	D9C63B2F99015355ACA04D74A27FD6B81170750C4B4BE7293390DC81EF4CD920EE9184B05C61DC8979B6C2783528949A4AE7180DBF460A2620DBB0D3FD7A05CF
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "CREAR".. },.. "explanationofflinedisabled": {.. "message": "No tienes conexi.n. Para usar Documentos de Google sin conexi.n a Internet, ve a Configuraci.n en la p.gina principal de Documentos de Google y activa la sincronizaci.n sin conexi.n la pr.xima vez que te conectes a Internet.".. },.. "explanationofflineenabled": {.. "message": "No tienes conexi.n. Aun as., puedes crear archivos o editar los que est.n disponibles.".. },.. "extdesc": {.. "message": "Edita, crea y consulta tus documentos, hojas de c.lculo y presentaciones; todo ello, sin acceso a Internet.".. },.. "extname": {.. "message": "Documentos de Google sin conexi.n".. },.. "learnmore": {.. "message": "M.s informaci.n".. },.. "popuphelptext": {.. "message": "Escribe o edita contenido y colabora con otras personas desde cualquier lugar, con o sin conexi.n a Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\es_419\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	959
Entropy (8bit):	4.570019855018913
Encrypted:	false
SSDEEP:	24:1HARn05cfa9dcDmQOTtSprj0zaGUSjSGZ:+n0CfMcDmQOTQprj4qpC
MD5:	535331F8FB98894877811B14994FEA9D
SHA1:	42475E6AFB6A8AE41E2FC2B9949189EF9BBE09FB
SHA-256:	90A560FF82605DB7EDA26C90331650FF9E42C0B596CEDB79B23598DEC1B4988F
SHA-512:	2CE9C69E901AB5F766E6CFC1E592E1AF5A07AA78D154CCBB7898519A12E6B42A21C5052A86783ABE3E7A05043D4BD41B28960FEDDB30169FF7F7FE7208C8CFE9
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "CREAR NUEVO".. },.. "explanationofflinedisabled": {.. "message": "No tienes conexi.n. Para usar Documentos de Google sin conexi.n a Internet, ve a la configuraci.n de la p.gina principal de Documentos de Google y activa la sincronizaci.n sin conexi.n la pr.xima vez que est.s conectado a Internet.".. },.. "explanationofflineenabled": {.. "message": "No tienes conexi.n, pero a.n puedes modificar los archivos disponibles o crear otros nuevos.".. },.. "extdesc": {.. "message": "Edita, crea y consulta tus documentos, hojas de c.lculo y presentaciones aunque no tengas acceso a Internet".. },.. "extname": {.. "message": "Documentos de Google sin conexi.n".. },.. "learnmore": {.. "message": "M.s informaci.n".. },.. "popuphelptext": {.. "message": "Escribe, modifica y colabora dondequiera que est.s, con conexi.n a Internet o sin ella.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\et\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	968
Entropy (8bit):	4.633956349931516
Encrypted:	false
SSDEEP:	24:1HA5WG6t306+9sihHvMfdJLjUk4NJPNczGr:mWGY0cOUdJODPmzs
MD5:	64204786E7A7C1ED9C241F1C59B81007
SHA1:	586528E87CD670249A44FB9C54B1796E40CDB794
SHA-256:	CC31B877238DA6C1D51D9A6155FDE565727A1956572F466C387B7E41C4923A29
SHA-512:	44FCF93F3FB10A3DB68D74F9453995995AB2D16863EC89779DB451A4D90F19743B8F51095EEC3ECEF5BD0C5C60D1BF3DFB0D64DF288DCCFBE70C129AE350B2C6
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "LOO UUS".. },.. "explanationofflinedisabled": {.. "message": "Teil ei ole v.rgu.hendust. Teenuse Google.i dokumendid kasutamiseks ilma Interneti-.henduseta avage j.rgmine kord, kui olete Internetiga .hendatud, teenuse Google.i dokumendid avalehel seaded ja l.litage sisse v.rgu.henduseta s.nkroonimine.".. },.. "explanationofflineenabled": {.. "message": "Teil ei ole v.rgu.hendust, kuid saate endiselt saadaolevaid faile muuta v.i uusi luua.".. },.. "extdesc": {.. "message": "Saate luua, muuta ja vaadata oma dokumente, arvustustabeleid ning esitlusi ilma Interneti-.henduseta.".. },.. "extname": {.. "message": "V.rgu.henduseta Google.i dokumendid".. },.. "learnmore": {.. "message": "Lisateave".. },.. "popuphelptext": {.. "message": "Kirjutage, muutke ja tehke koost..d .ksk.ik kus olenemata sellest, kas teil on Interneti-.hendus.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\eu\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	838
Entropy (8bit):	4.4975520913636595
Encrypted:	false
SSDEEP:	24:YnmjggqTWngosqYQqE1kjO39m7OddC0vjWQMmWgqwgQ8KLcxOb:Ynmsgqyngosq9qxTOs0vjWQMbgqchb
MD5:	29A1DA4ACB4C9D04F080BB101E204E93
SHA1:	2D0E4587DDD4BAC1C90E79A88AF3BD2C140B53B1
SHA-256:	A41670D52423BA69C7A65E7E153E7B9994E8DD0370C584BDA0714BD61C49C578
SHA-512:	B7B7A5A0AA8F6724B0FA15D65F25286D9C66873F03080CBABA037BDEEA6AADC678AC4F083BC52C2DB01BEB1B41A755ED67BBDDB9C0FE4E35A004537A3F7FC458
Malicious:	false
Reputation:	low
Preview:	{"createnew":{"message":"SORTU"},"explanationofflinedisabled":{"message":"Ez zaude konektatuta Internetera. Google Dokumentuak konexiorik gabe erabiltzeko, joan Google Dokumentuak zerbitzuaren orri nagusiko ezarpenetara eta aktibatu konexiorik gabeko sinkronizazioa Internetera konektatzen zaren hurrengoan."},"explanationofflineenabled":{"message":"Ez zaude konektatuta Internetera, baina erabilgarri dauden fitxategiak edita ditzakezu, baita beste batzuk sortu ere."},"extdesc":{"message":"Editatu, sortu eta ikusi dokumentuak, kalkulu-orriak eta aurkezpenak Interneteko konexiorik gabe."},"extname":{"message":"Google Dokumentuak konexiorik gabe"},"learnmore":{"message":"Lortu informazio gehiago"},"popuphelptext":{"message":"Edonon zaudela ere, ez duzu zertan konektatuta egon idatzi, editatu eta lankidetzan jardun ahal izateko."}}.

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\fa\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1305
Entropy (8bit):	4.673517697192589
Encrypted:	false
SSDEEP:	24:1HAX9yM7oiI99Rwx4xyQakJbfAEJhmq/RlBu92P7FbNcgYVJ0:JM7ovex4xyQaKjAEyq/p7taX0
MD5:	097F3BA8DE41A0AAF436C783DCFE7EF3
SHA1:	986B8CABD794E08C7AD41F0F35C93E4824AC84DF
SHA-256:	7C4C09D19AC4DA30CC0F7F521825F44C4DFBC19482A127FBFB2B74B3468F48F1
SHA-512:	8114EA7422E3B20AE3F08A3A64A6FFE1517A7579A3243919B8F789EB52C68D6F5A591F7B4D16CEE4BD337FF4DAF4057D81695732E5F7D9E761D04F859359FADB
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "..... ... ....".. },.. "explanationofflinedisabled": {.. "message": "...... ...... .... ....... .. ....... Google .... ..... ........ .... ... .. .. ....... ... ..... .. ....... .. .... .... ....... Google ..... . .......... ...... .. .... .....".. },.. "explanationofflineenabled": {.. "message": "...... ..... ... ...... ......... ......... .. .. .. ..... ..... ...... .... .. ........ ..... ..... .....".. },.. "extdesc": {.. "message": "...... ............ . ........ .. ....... ..... . ...... .... . ... ... ..... .... ...... .. ........".. },.. "extname": {.. "message": "....... Google .

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\fi\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	911
Entropy (8bit):	4.6294343834070935
Encrypted:	false
SSDEEP:	12:1HASvguCBxNMME2BESA7gPQk36xCBxeMMcXYBt+CSU1pfazCBhUunV1tLaX5GI2N:1HAVioESAsPf36O3Xst/p3J8JeEY
MD5:	B38CBD6C2C5BFAA6EE252D573A0B12A1
SHA1:	2E490D5A4942D2455C3E751F96BD9960F93C4B60
SHA-256:	2D752A5DBE80E34EA9A18C958B4C754F3BC10D63279484E4DF5880B8FD1894D2
SHA-512:	6E65207F4D8212736059CC802C6A7104E71A9CC0935E07BD13D17EC46EA26D10BC87AD923CD84D78781E4F93231A11CB9ED8D3558877B6B0D52C07CB005F1C0C
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "LUO UUSI".. },.. "explanationofflinedisabled": {.. "message": "Olet offline-tilassa. Jos haluat k.ytt.. Google Docsia ilman internetyhteytt., siirry Google Docsin etusivulle ja ota asetuksissa k.ytt..n offline-synkronointi, kun seuraavan kerran olet yhteydess. internetiin.".. },.. "explanationofflineenabled": {.. "message": "Olet offline-tilassa. Voit kuitenkin muokata k.ytett.viss. olevia tiedostoja tai luoda uusia.".. },.. "extdesc": {.. "message": "Muokkaa, luo ja katso dokumentteja, laskentataulukoita ja esityksi. ilman internetyhteytt..".. },.. "extname": {.. "message": "Google Docsin offline-tila".. },.. "learnmore": {.. "message": "Lis.tietoja".. },.. "popuphelptext": {.. "message": "Kirjoita, muokkaa ja tee yhteisty.t. paikasta riippumatta, my.s ilman internetyhteytt..".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\fil\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	939
Entropy (8bit):	4.451724169062555
Encrypted:	false
SSDEEP:	24:1HAXbH2eZXn6sjLITdRSJpGL/gWFJ3sqixO:ubHfZqsHIT/FLL3qO
MD5:	FCEA43D62605860FFF41BE26BAD80169
SHA1:	F25C2CE893D65666CC46EA267E3D1AA080A25F5B
SHA-256:	F51EEB7AAF5F2103C1043D520E5A4DE0FA75E4DC375E23A2C2C4AFD4D9293A72
SHA-512:	F66F113A26E5BCF54B9AAFA69DAE3C02C9C59BD5B9A05F829C92AF208C06DC8CCC7A1875CBB7B7CE425899E4BA27BFE8CE2CDAF43A00A1B9F95149E855989EE0
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "GUMAWA NG BAGO".. },.. "explanationofflinedisabled": {.. "message": "Naka-offline ka. Upang magamit ang Google Docs nang walang koneksyon sa internet, pumunta sa mga setting sa homepage ng Google Docs at i-on ang offline na pag-sync sa susunod na nakakonekta ka sa internet.".. },.. "explanationofflineenabled": {.. "message": "Naka-offline ka, ngunit maaari mo pa ring i-edit ang mga available na file o gumawa ng mga bago.".. },.. "extdesc": {.. "message": "I-edit, gawin, at tingnan ang iyong mga dokumento, spreadsheet, at presentation . lahat ng ito nang walang access sa internet.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Matuto Pa".. },.. "popuphelptext": {.. "message": "Magsulat, mag-edit at makipag-collaborate nasaan ka man, nang mayroon o walang koneksyon sa internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\fr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	977
Entropy (8bit):	4.622066056638277
Encrypted:	false
SSDEEP:	24:1HAdy42ArMdsH50Jd6Z1PCBolXAJ+GgNHp0X16M1J1:EyfArMS2Jd6Z1PCBolX2+vNmX16Y1
MD5:	A58C0EEBD5DC6BB5D91DAF923BD3A2AA
SHA1:	F169870EEED333363950D0BCD5A46D712231E2AE
SHA-256:	0518287950A8B010FFC8D52554EB82E5D93B6C3571823B7CECA898906C11ABCC
SHA-512:	B04AFD61DE490BC838354E8DC6C22BE5C7AC6E55386FFF78489031ACBE2DBF1EAA2652366F7A1E62CE87CFCCB75576DA3B2645FEA1645B0ECEB38B1FA3A409E8
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "CR.ER".. },.. "explanationofflinedisabled": {.. "message": "Vous .tes hors connexion. Pour pouvoir utiliser Google.Docs sans connexion Internet, acc.dez aux param.tres de la page d'accueil de Google.Docs et activez la synchronisation hors connexion lors de votre prochaine connexion . Internet.".. },.. "explanationofflineenabled": {.. "message": "Vous .tes hors connexion, mais vous pouvez quand m.me modifier les fichiers disponibles ou cr.er des fichiers.".. },.. "extdesc": {.. "message": "Modifiez, cr.ez et consultez des documents, feuilles de calcul et pr.sentations, sans acc.s . Internet.".. },.. "extname": {.. "message": "Google.Docs hors connexion".. },.. "learnmore": {.. "message": "En savoir plus".. },.. "popuphelptext": {.. "message": "R.digez des documents, modifiez-les et collaborez o. que vous soyez, avec ou sans connexion Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\fr_CA\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	972
Entropy (8bit):	4.621319511196614
Encrypted:	false
SSDEEP:	24:1HAdyg2pwbv1V8Cd61PC/vT2fg3YHDyM1J1:EyHpwbpd61C/72Y3YOY1
MD5:	6CAC04BDCC09034981B4AB567B00C296
SHA1:	84F4D0E89E30ED7B7ACD7644E4867FFDB346D2A5
SHA-256:	4CAA46656ECC46A420AA98D3307731E84F5AC1A89111D2E808A228C436D83834
SHA-512:	160590B6EC3DCF48F3EA7A5BAA11A8F6FA4131059469623E00AD273606B468B3A6E56D199E97DAA0ECB6C526260EBAE008570223F2822811F441D1C900DC33D6
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "CR.ER".. },.. "explanationofflinedisabled": {.. "message": "Vous .tes hors connexion. Pour utiliser Google.Documents sans connexion Internet, acc.dez aux param.tres sur la page d'accueil Google.Documents et activez la synchronisation hors ligne la prochaine fois que vous .tes connect. . Internet.".. },.. "explanationofflineenabled": {.. "message": "Vous .tes hors connexion, mais vous pouvez toujours modifier les fichiers disponibles ou en cr.er.".. },.. "extdesc": {.. "message": "Modifiez, cr.ez et consultez vos documents, vos feuilles de calcul et vos pr.sentations, le tout sans acc.s . Internet.".. },.. "extname": {.. "message": "Google.Documents hors connexion".. },.. "learnmore": {.. "message": "En savoir plus".. },.. "popuphelptext": {.. "message": ".crivez, modifiez et collaborez o. que vous soyez, avec ou sans connexion Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\gl\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	990
Entropy (8bit):	4.497202347098541
Encrypted:	false
SSDEEP:	12:1HASvggECBxNbWVqMjlMgaPLqXPhTth0CBxebWbMRCSUCjAKFCSIj0tR7tCBhP1l:1HACzWsMlajIhJhHKWbFKFC0tR8oNK5
MD5:	6BAAFEE2F718BEFBC7CD58A04CCC6C92
SHA1:	CE0BDDDA2FA1F0AD222B604C13FF116CBB6D02CF
SHA-256:	0CF098DFE5BBB46FC0132B3CF0C54B06B4D2C8390D847EE2A65D20F9B7480F4C
SHA-512:	3DA23E74CD6CF9C0E2A0C4DBA60301281D362FB0A2A908F39A55ABDCA4CC69AD55638C63CC3BEFD44DC032F9CBB9E2FDC1B4C4ABE292917DF8272BA25B82AF20
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "CREAR NOVO".. },.. "explanationofflinedisabled": {.. "message": "Est.s sen conexi.n. Para utilizar Documentos de Google sen conexi.n a Internet, accede .s opci.ns de configuraci.n na p.xina de inicio de Documentos de Google e activa a sincronizaci.n sen conexi.n a pr.xima vez que esteas conectado a Internet.".. },.. "explanationofflineenabled": {.. "message": "Est.s sen conexi.n. A.nda podes editar os ficheiros dispo.ibles ou crear outros novos.".. },.. "extdesc": {.. "message": "Modifica, crea e consulta os teus documentos, follas de c.lculo e presentaci.ns sen necesidade de acceder a Internet.".. },.. "extname": {.. "message": "Documentos de Google sen conexi.n".. },.. "learnmore": {.. "message": "M.is informaci.n".. },.. "popuphelptext": {.. "message": "Escribe, edita e colabora esteas onde esteas, tanto se tes conexi.n a Internet como se non a tes.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\gu\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1658
Entropy (8bit):	4.294833932445159
Encrypted:	false
SSDEEP:	24:1HA3k3FzEVeXWuvLujNzAK11RiqRC2sA0O3cEiZ7dPRFFOPtZdK0A41yG3BczKT3:Q4pE4rCjNjw6/0y+5j8ZHA4PBSKr
MD5:	BC7E1D09028B085B74CB4E04D8A90814
SHA1:	E28B2919F000B41B41209E56B7BF3A4448456CFE
SHA-256:	FE8218DF25DB54E633927C4A1640B1A41B8E6CB3360FA386B5382F833B0B237C
SHA-512:	040A8267D67DB05BBAA52F1FAC3460F58D35C5B73AA76BBF17FA78ACC6D3BFB796A870DD44638F9AC3967E35217578A20D6F0B975CEEEEDBADFC9F65BE7E72C9
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": ".... .....".. },.. "explanationofflinedisabled": {.. "message": "... ...... ... ........ ....... ... Google .......... ..... .... ...., ... .... .... ...... ........ .... ...... ... ...... Google ........ ...... .. ........ .. ... ... ...... ....... .... ....".. },.. "explanationofflineenabled": {.. "message": "... ...... .., ..... ... ... .. ...... ..... ....... ... ... .. .... ... ..... ... ...".. },.. "extdesc": {.. "message": "..... ........., ..

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\hi\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1672
Entropy (8bit):	4.314484457325167
Encrypted:	false
SSDEEP:	48:46G2+ymELbLNzGVx/hXdDtxSRhqv7Qm6/7Lm:4GbxzGVzXdDtx+qzU/7C
MD5:	98A7FC3E2E05AFFFC1CFE4A029F47476
SHA1:	A17E077D6E6BA1D8A90C1F3FAF25D37B0FF5A6AD
SHA-256:	D2D1AFA224CDA388FF1DC8FAC24CDA228D7CE09DE5D375947D7207FA4A6C4F8D
SHA-512:	457E295C760ABFD29FC6BBBB7FC7D4959287BCA7FB0E3E99EB834087D17EED331DEF18138838D35C48C6DDC8A0134AFFFF1A5A24033F9B5607B355D3D48FDF88
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "... .....".. },.. "explanationofflinedisabled": {.. "message": ".. ...... .... ....... ....... .. .... Google ........ .. ..... .... .. ..., .... ... ....... .. ...... .... .. Google ........ .. ........ .. ...... ... .... .. ...... ....... .... .....".. },.. "explanationofflineenabled": {.. "message": ".. ...... ..., ..... .. .. .. ...... ...... ..... .. .... ... .. .. ...... ... .... ....".. },.. "extdesc": {.. "message": ".... .... ....... ...... ..

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\hr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	935
Entropy (8bit):	4.6369398601609735
Encrypted:	false
SSDEEP:	24:1HA7sR5k/I+UX/hrcySxG1fIZ3tp/S/d6Gpb+D:YsE/I+UX/hVSxQ03f/Sj+D
MD5:	25CDFF9D60C5FC4740A48EF9804BF5C7
SHA1:	4FADECC52FB43AEC084DF9FF86D2D465FBEBCDC0
SHA-256:	73E6E246CEEAB9875625CD4889FBF931F93B7B9DEAA11288AE1A0F8A6E311E76
SHA-512:	EF00B08496427FEB5A6B9FB3FE2E5404525BE7C329D9DD2A417480637FD91885837D134A26980DCF9F61E463E6CB68F09A24402805807E656AF16B116A75E02C
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "IZRADI NOVI".. },.. "explanationofflinedisabled": {.. "message": "Vi ste izvan mre.e. Da biste koristili Google dokumente bez internetske veze, idite na postavke na po.etnoj stranici Google dokumenata i uklju.ite izvanmre.nu sinkronizaciju sljede.i put kada se pove.ete s internetom.".. },.. "explanationofflineenabled": {.. "message": "Vi ste izvan mre.e, no i dalje mo.ete ure.ivati dostupne datoteke i izra.ivati nove.".. },.. "extdesc": {.. "message": "Uredite, izradite i pregledajte dokumente, prora.unske tablice i prezentacije . sve bez pristupa internetu.".. },.. "extname": {.. "message": "Google dokumenti izvanmre.no".. },.. "learnmore": {.. "message": "Saznajte vi.e".. },.. "popuphelptext": {.. "message": "Pi.ite, ure.ujte i sura.ujte gdje god se nalazili, povezani s internetom ili izvanmre.no.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\hu\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1065
Entropy (8bit):	4.816501737523951
Encrypted:	false
SSDEEP:	24:1HA6J54gEYwFFMxv4gvyB9FzmxlsN147g/zJcYwJgrus4QY2jom:NJ54gEYwUmgKHFzmsG7izJcYOgKgYjm
MD5:	8930A51E3ACE3DD897C9E61A2AEA1D02
SHA1:	4108506500C68C054BA03310C49FA5B8EE246EA4
SHA-256:	958C0F664FCA20855FA84293566B2DDB7F297185619143457D6479E6AC81D240
SHA-512:	126B80CD3428C0BC459EEAAFCBE4B9FDE2541A57F19F3EC7346BAF449F36DC073A9CF015594A57203255941551B25F6FAA6D2C73C57C44725F563883FF902606
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": ".J L.TREHOZ.SA".. },.. "explanationofflinedisabled": {.. "message": "Jelenleg offline .llapotban van. Ha a Google Dokumentumokat internetkapcsolat n.lk.l szeretn. haszn.lni, a legk.zelebbi internethaszn.lata sor.n nyissa meg a Google Dokumentumok kezd.oldal.n tal.lhat. be.ll.t.sokat, .s tiltsa le az offline szinkroniz.l.s be.ll.t.st.".. },.. "explanationofflineenabled": {.. "message": "Offline .llapotban van, de az el.rhet. f.jlokat .gy is szerkesztheti, valamint l.trehozhat .jakat.".. },.. "extdesc": {.. "message": "Szerkesszen, hozzon l.tre .s tekintsen meg dokumentumokat, t.bl.zatokat .s prezent.ci.kat . ak.r internetkapcsolat n.lk.l is.".. },.. "extname": {.. "message": "Google Dokumentumok Offline".. },.. "learnmore": {.. "message": "Tov.bbi inform.ci.".. },.. "popuphelptext": {.. "message": ".rjon, szerkesszen .s dolgozzon egy.tt m.sokkal

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\hy\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2771
Entropy (8bit):	3.7629875118570055
Encrypted:	false
SSDEEP:	48:Y0Fx+eiYZBZ7K1ZZ/5QQxTuDLoFZaIZSK7lq0iC0mlMO6M3ih1oAgC:lF2BTz6N/
MD5:	55DE859AD778E0AA9D950EF505B29DA9
SHA1:	4479BE637A50C9EE8A2F7690AD362A6A8FFC59B2
SHA-256:	0B16E3F8BD904A767284345AE86A0A9927C47AFE89E05EA2B13AD80009BDF9E4
SHA-512:	EDAB2FCC14CABB6D116E9C2907B42CFBC34F1D9035F43E454F1F4D1F3774C100CBADF6B4C81B025810ED90FA91C22F1AEFE83056E4543D92527E4FE81C7889A8
Malicious:	false
Reputation:	low
Preview:	{"createnew":{"message":"\u054d\u054f\u0535\u0542\u053e\u0535\u053c \u0546\u0548\u0550"},"explanationofflinedisabled":{"message":"Google \u0553\u0561\u057d\u057f\u0561\u0569\u0572\u0569\u0565\u0580\u0568 \u0576\u0561\u0587 \u0561\u0576\u0581\u0561\u0576\u0581 \u057c\u0565\u056a\u056b\u0574\u0578\u0582\u0574 \u0585\u0563\u057f\u0561\u0563\u0578\u0580\u056e\u0565\u056c\u0578\u0582 \u0570\u0561\u0574\u0561\u0580 \u0574\u056b\u0561\u0581\u0565\u0584 \u0570\u0561\u0574\u0561\u0581\u0561\u0576\u0581\u056b\u0576, \u0562\u0561\u0581\u0565\u0584 \u056e\u0561\u057c\u0561\u0575\u0578\u0582\u0569\u0575\u0561\u0576 \u0563\u056c\u056d\u0561\u057e\u0578\u0580 \u0567\u057b\u0568, \u0561\u0576\u0581\u0565\u0584 \u056f\u0561\u0580\u0563\u0561\u057e\u0578\u0580\u0578\u0582\u0574\u0576\u0565\u0580 \u0587 \u0574\u056b\u0561\u0581\u0580\u0565\u0584 \u0561\u0576\u0581\u0561\u0576\u0581 \u0570\u0561\u0574\u0561\u056a\u0561\u0574\u0561\u0581\u0578\u0582\u0574\u0568:"},"explanationofflineenabled":{"message":"\u

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\id\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	858
Entropy (8bit):	4.474411340525479
Encrypted:	false
SSDEEP:	12:1HASvgJX4CBxNpXemNOAJRFqjRpCBxedIdjTi92OvbCSUuoi01uRwCBhUuvz1thK:1HARXzhXemNOQWGcEoeH1eXJNvT2
MD5:	34D6EE258AF9429465AE6A078C2FB1F5
SHA1:	612CAE151984449A4346A66C0A0DF4235D64D932
SHA-256:	E3C86DDD2EFEBE88EED8484765A9868202546149753E03A61EB7C28FD62CFCA1
SHA-512:	20427807B64A0F79A6349F8A923152D9647DA95C05DE19AD3A4BF7DB817E25227F3B99307C8745DD323A6591B515221BD2F1E92B6F1A1783BDFA7142E84601B1
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "BUAT BARU".. },.. "explanationofflinedisabled": {.. "message": "Anda sedang offline. Untuk menggunakan Google Dokumen tanpa koneksi internet, buka setelan di beranda Google Dokumen dan aktifkan sinkronisasi offline saat terhubung ke internet.".. },.. "explanationofflineenabled": {.. "message": "Anda sedang offline, namun Anda masih dapat mengedit file yang tersedia atau membuat file baru.".. },.. "extdesc": {.. "message": "Edit, buat, dan lihat dokumen, spreadsheet, dan presentasi . tanpa perlu akses internet.".. },.. "extname": {.. "message": "Google Dokumen Offline".. },.. "learnmore": {.. "message": "Pelajari Lebih Lanjut".. },.. "popuphelptext": {.. "message": "Tulis, edit, dan gabungkan di mana saja, dengan atau tanpa koneksi internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\is\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	954
Entropy (8bit):	4.631887382471946
Encrypted:	false
SSDEEP:	12:YGXU2rOcxGe+J97f9TP2DBX9tMfxqbTMvOfWWgdraqlifVpm0Ekf95MwP9KkJ+je:YwBrD2J2DBLMfFuWvdpY94vioO+uh
MD5:	1F565FB1C549B18AF8BBFED8DECD5D94
SHA1:	B57F4BDAE06FF3DFC1EB3E56B6F2F204D6F63638
SHA-256:	E16325D1A641EF7421F2BAFCD6433D53543C89D498DD96419B03CBA60B9C7D60
SHA-512:	A60B8E042A9BCDCC136B87948E9924A0B24D67C6CA9803904B876F162A0AD82B9619F1316BE9FF107DD143B44F7E6F5DF604ABFE00818DEB40A7D62917CDA69F
Malicious:	false
Reputation:	low
Preview:	{"createnew":{"message":"B\u00daA TIL N\u00ddTT"},"explanationofflinedisabled":{"message":"\u00de\u00fa ert \u00e1n nettengingar. Til a\u00f0 nota Google skj\u00f6l \u00e1n nettengingar skaltu opna stillingarnar \u00e1 heimas\u00ed\u00f0u Google skjala og virkja samstillingu \u00e1n nettengingar n\u00e6st \u00feegar \u00fe\u00fa tengist netinu."},"explanationofflineenabled":{"message":"Engin nettenging. \u00de\u00fa getur samt sem \u00e1\u00f0ur breytt tilt\u00e6kum skr\u00e1m e\u00f0a b\u00fai\u00f0 til n\u00fdjar."},"extdesc":{"message":"Breyttu, b\u00fa\u00f0u til og sko\u00f0a\u00f0u skj\u00f6lin \u00fe\u00edn, t\u00f6flureikna og kynningar \u2014 allt \u00e1n nettengingar."},"extname":{"message":"Google skj\u00f6l \u00e1n nettengingar"},"learnmore":{"message":"Frekari uppl\u00fdsingar"},"popuphelptext":{"message":"Skrifa\u00f0u, breyttu og starfa\u00f0u me\u00f0 \u00f6\u00f0rum hvort sem nettenging er til sta\u00f0ar e\u00f0a ekki."}}.

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\it\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	899
Entropy (8bit):	4.474743599345443
Encrypted:	false
SSDEEP:	12:1HASvggrCBxNp8WJOJJrJ3WytVCBxep3bjP5CSUCjV8AgJJm2CBhr+z1tWgjqEOW:1HANXJOTBFtKa8Agju4NB3j
MD5:	0D82B734EF045D5FE7AA680B6A12E711
SHA1:	BD04F181E4EE09F02CD53161DCABCEF902423092
SHA-256:	F41862665B13C0B4C4F562EF1743684CCE29D4BCF7FE3EA494208DF253E33885
SHA-512:	01F305A280112482884485085494E871C66D40C0B03DE710B4E5F49C6A478D541C2C1FDA2CEAF4307900485946DEE9D905851E98A2EB237642C80D464D1B3ADA
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "CREA NUOVO".. },.. "explanationofflinedisabled": {.. "message": "Sei offline. Per utilizzare Documenti Google senza una connessione Internet, apri le impostazioni nella home page di Documenti Google e attiva la sincronizzazione offline la prossima volta che ti colleghi a Internet.".. },.. "explanationofflineenabled": {.. "message": "Sei offline, ma puoi comunque modificare i file disponibili o crearne di nuovi.".. },.. "extdesc": {.. "message": "Modifica, crea e visualizza documenti, fogli di lavoro e presentazioni, senza accesso a Internet.".. },.. "extname": {.. "message": "Documenti Google offline".. },.. "learnmore": {.. "message": "Ulteriori informazioni".. },.. "popuphelptext": {.. "message": "Scrivi, modifica e collabora ovunque ti trovi, con o senza una connessione Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\iw\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2230
Entropy (8bit):	3.8239097369647634
Encrypted:	false
SSDEEP:	24:YIiTVLrLD1MEzMEH82LBLjO5YaQEqLytLLBm3dnA5LcqLWAU75yxFLcx+UxWRJLI:YfTFf589rZNgNA12Qzt4/zRz2vc
MD5:	26B1533C0852EE4661EC1A27BD87D6BF
SHA1:	18234E3ABAF702DF9330552780C2F33B83A1188A
SHA-256:	BBB81C32F482BA3216C9B1189C70CEF39CA8C2181AF3538FFA07B4C6AD52F06A
SHA-512:	450BFAF0E8159A4FAE309737EA69CA8DD91CAAFD27EF662087C4E7716B2DCAD3172555898E75814D6F11487F4F254DE8625EF0CFEA8DF0133FC49E18EC7FD5D2
Malicious:	false
Reputation:	low
Preview:	{"createnew":{"message":"\u05d9\u05e6\u05d9\u05e8\u05ea \u05d7\u05d3\u05e9"},"explanationofflinedisabled":{"message":"\u05d0\u05d9\u05df \u05dc\u05da \u05d7\u05d9\u05d1\u05d5\u05e8 \u05dc\u05d0\u05d9\u05e0\u05d8\u05e8\u05e0\u05d8. \u05db\u05d3\u05d9 \u05dc\u05d4\u05e9\u05ea\u05de\u05e9 \u05d1-Google Docs \u05dc\u05dc\u05d0 \u05d7\u05d9\u05d1\u05d5\u05e8 \u05dc\u05d0\u05d9\u05e0\u05d8\u05e8\u05e0\u05d8, \u05d1\u05d4\u05ea\u05d7\u05d1\u05e8\u05d5\u05ea \u05d4\u05d1\u05d0\u05d4 \u05dc\u05d0\u05d9\u05e0\u05d8\u05e8\u05e0\u05d8, \u05d9\u05e9 \u05dc\u05e2\u05d1\u05d5\u05e8 \u05dc\u05e7\u05d8\u05e2 \u05d4\u05d4\u05d2\u05d3\u05e8\u05d5\u05ea \u05d1\u05d3\u05e3 \u05d4\u05d1\u05d9\u05ea \u05e9\u05dc Google Docs \u05d5\u05dc\u05d4\u05e4\u05e2\u05d9\u05dc \u05e1\u05e0\u05db\u05e8\u05d5\u05df \u05d1\u05de\u05e6\u05d1 \u05d0\u05d5\u05e4\u05dc\u05d9\u05d9\u05df."},"explanationofflineenabled":{"message":"\u05d0\u05d9\u05df \u05dc\u05da \u05d7\u05d9\u05d1\u05d5\u05e8 \u05dc\u05d0\u05d9\u05e0\u05d8\u05e

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\ja\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1160
Entropy (8bit):	5.292894989863142
Encrypted:	false
SSDEEP:	24:1HAoc3IiRF1viQ1RF3CMP3rnicCCAFrr1Oo0Y5ReXCCQkb:Dc3zF7F3CMTnOCAFVLHXCFb
MD5:	15EC1963FC113D4AD6E7E59AE5DE7C0A
SHA1:	4017FC6D8B302335469091B91D063B07C9E12109
SHA-256:	34AC08F3C4F2D42962A3395508818B48CA323D22F498738CC9F09E78CB197D73
SHA-512:	427251F471FA3B759CA1555E9600C10F755BC023701D058FF661BEC605B6AB94CFB3456C1FEA68D12B4D815FFBAFABCEB6C12311DD1199FC783ED6863AF97C0F
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "....".. },.. "explanationofflinedisabled": {.. "message": "....................... Google ............................... Google .............. [..] .......[.......] ...........".. },.. "explanationofflineenabled": {.. "message": ".............................................".. },.. "extdesc": {.. "message": ".........................................................".. },.. "extname": {.. "message": "Google ..... ......".. },.. "learnmore": {.. "message": "..".. },.. "popuphelp

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\ka\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3264
Entropy (8bit):	3.586016059431306
Encrypted:	false
SSDEEP:	48:YGFbhVhVn0nM/XGbQTvxnItVJW/476CFdqaxWNlR:HFbhV/n0MfGbw875FkaANlR
MD5:	83F81D30913DC4344573D7A58BD20D85
SHA1:	5AD0E91EA18045232A8F9DF1627007FE506A70E0
SHA-256:	30898BBF51BDD58DB397FF780F061E33431A38EF5CFC288B5177ECF76B399F26
SHA-512:	85F97F12AD4482B5D9A6166BB2AE3C4458A582CF575190C71C1D8E0FB87C58482F8C0EFEAD56E3A70EDD42BED945816DB5E07732AD27B8FFC93F4093710DD58F
Malicious:	false
Reputation:	low
Preview:	{"createnew":{"message":"\u10d0\u10ee\u10da\u10d8\u10e1 \u10e8\u10d4\u10e5\u10db\u10dc\u10d0"},"explanationofflinedisabled":{"message":"\u10d7\u10e5\u10d5\u10d4\u10dc \u10ee\u10d0\u10d6\u10d2\u10d0\u10e0\u10d4\u10e8\u10d4 \u10ee\u10d0\u10e0\u10d7. Google Docs-\u10d8\u10e1 \u10d8\u10dc\u10e2\u10d4\u10e0\u10dc\u10d4\u10e2\u10d7\u10d0\u10dc \u10d9\u10d0\u10d5\u10e8\u10d8\u10e0\u10d8\u10e1 \u10d2\u10d0\u10e0\u10d4\u10e8\u10d4 \u10d2\u10d0\u10db\u10dd\u10e1\u10d0\u10e7\u10d4\u10dc\u10d4\u10d1\u10da\u10d0\u10d3 \u10d2\u10d0\u10d3\u10d0\u10d3\u10d8\u10d7 \u10de\u10d0\u10e0\u10d0\u10db\u10d4\u10e2\u10e0\u10d4\u10d1\u10d6\u10d4 Google Docs-\u10d8\u10e1 \u10db\u10d7\u10d0\u10d5\u10d0\u10e0 \u10d2\u10d5\u10d4\u10e0\u10d3\u10d6\u10d4 \u10d3\u10d0 \u10e9\u10d0\u10e0\u10d7\u10d4\u10d7 \u10ee\u10d0\u10d6\u10d2\u10d0\u10e0\u10d4\u10e8\u10d4 \u10e1\u10d8\u10dc\u10e5\u10e0\u10dd\u10dc\u10d8\u10d6\u10d0\u10ea\u10d8\u10d0, \u10e0\u10dd\u10d3\u10d4\u10e1\u10d0\u10ea \u10e8\u10d4\u10db\u10d3\u10d2\u10dd\u10

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\kk\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3235
Entropy (8bit):	3.6081439490236464
Encrypted:	false
SSDEEP:	96:H3E+6rOEAbeHTln2EQ77Uayg45RjhCSj+OyRdM7AE9qdV:HXcR/nQXUayYV
MD5:	2D94A58795F7B1E6E43C9656A147AD3C
SHA1:	E377DB505C6924B6BFC9D73DC7C02610062F674E
SHA-256:	548DC6C96E31A16CE355DC55C64833B08EF3FBA8BF33149031B4A685959E3AF4
SHA-512:	F51CC857E4CF2D4545C76A2DCE7D837381CE59016E250319BF8D39718BE79F9F6EE74EA5A56DE0E8759E4E586D93430D51651FC902376D8A5698628E54A0F2D8
Malicious:	false
Reputation:	low
Preview:	{"createnew":{"message":"\u0416\u0410\u04a2\u0410\u0421\u042b\u041d \u0416\u0410\u0421\u0410\u0423"},"explanationofflinedisabled":{"message":"\u0421\u0456\u0437 \u043e\u0444\u043b\u0430\u0439\u043d \u0440\u0435\u0436\u0438\u043c\u0456\u043d\u0434\u0435\u0441\u0456\u0437. Google Docs \u049b\u043e\u043b\u0434\u0430\u043d\u0431\u0430\u0441\u044b\u043d \u0436\u0435\u043b\u0456 \u0431\u0430\u0439\u043b\u0430\u043d\u044b\u0441\u044b\u043d\u0441\u044b\u0437 \u049b\u043e\u043b\u0434\u0430\u043d\u0443 \u04af\u0448\u0456\u043d, \u043a\u0435\u043b\u0435\u0441\u0456 \u0436\u043e\u043b\u044b \u0436\u0435\u043b\u0456\u0433\u0435 \u049b\u043e\u0441\u044b\u043b\u0493\u0430\u043d\u0434\u0430, Google Docs \u043d\u0435\u0433\u0456\u0437\u0433\u0456 \u0431\u0435\u0442\u0456\u043d\u0435\u043d \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043b\u0435\u0440 \u0431\u04e9\u043b\u0456\u043c\u0456\u043d \u043a\u0456\u0440\u0456\u043f, \u043e\u0444\u043b\u0430\u0439\u043d \u0440\u0435\u0436\u0438\u043c\u0456\u

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\km\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3122
Entropy (8bit):	3.891443295908904
Encrypted:	false
SSDEEP:	96:/OOrssRU6Bg7VSdL+zsCfoZiWssriWqo2gx7RRCos2sEeBkS7Zesg:H5GRZlXsGdo
MD5:	B3699C20A94776A5C2F90AEF6EB0DAD9
SHA1:	1F9B968B0679A20FA097624C9ABFA2B96C8C0BEA
SHA-256:	A6118F0A0DE329E07C01F53CD6FB4FED43E54C5F53DB4CD1C7F5B2B4D9FB10E6
SHA-512:	1E8D15B8BFF1D289434A244172F9ED42B4BB6BCB6372C1F300B01ACEA5A88167E97FEDABA0A7AE3BEB5E24763D1B09046AE8E30745B80E2E2FE785C94DF362F6
Malicious:	false
Reputation:	low
Preview:	{"createnew":{"message":"\u1794\u1784\u17d2\u1780\u17be\u178f\u200b\u1790\u17d2\u1798\u17b8"},"explanationofflinedisabled":{"message":"\u17a2\u17d2\u1793\u1780\u200b\u1782\u17d2\u1798\u17b6\u1793\u200b\u17a2\u17ca\u17b8\u1793\u1792\u17ba\u178e\u17b7\u178f\u17d4 \u178a\u17be\u1798\u17d2\u1794\u17b8\u200b\u1794\u17d2\u179a\u17be Google \u17af\u1780\u179f\u17b6\u179a\u200b\u1794\u17b6\u1793\u200b\u200b\u178a\u17c4\u1799\u200b\u200b\u1798\u17b7\u1793\u1798\u17b6\u1793\u200b\u200b\u200b\u17a2\u17ca\u17b8\u1793\u1792\u17ba\u178e\u17b7\u178f \u179f\u17bc\u1798\u200b\u200b\u1791\u17c5\u200b\u1780\u17b6\u1793\u17cb\u200b\u1780\u17b6\u179a\u200b\u1780\u17c6\u178e\u178f\u17cb\u200b\u1793\u17c5\u200b\u179b\u17be\u200b\u1782\u17c1\u17a0\u1791\u17c6\u1796\u17d0\u179a Google \u17af\u1780\u179f\u17b6\u179a \u1793\u17b7\u1784\u200b\u1794\u17be\u1780\u200b\u1780\u17b6\u179a\u1792\u17d2\u179c\u17be\u200b\u179f\u1798\u1780\u17b6\u179b\u1780\u1798\u17d2\u1798\u200b\u200b\u200b\u1782\u17d2\u1798\u17b6\u1793

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\kn\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1880
Entropy (8bit):	4.295185867329351
Encrypted:	false
SSDEEP:	48:SHYGuEETiuF6OX5tCYFZt5GurMRRevsY4tVZIGnZRxlKT6/UGG:yYG8iuF6yTCYFH5GjLPtVZVZRxOZZ
MD5:	8E16966E815C3C274EEB8492B1EA6648
SHA1:	7482ED9F1C9FD9F6F9BA91AB15921B19F64C9687
SHA-256:	418FF53FCA505D54268413C796E4DF80E947A09F399AB222A90B81E93113D5B5
SHA-512:	85B28202E874B1CF45B37BA05B87B3D8D6FE38E89C6011C4240CF6B563EA6DA60181D712CCE20D07C364F4A266A4EC90C4934CC8B7BB2013CB3B22D755796E38
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "........ .....".. },.. "explanationofflinedisabled": {.. "message": ".... ..................... ......... ............. Google ...... ....., Google ...... ............ ............... .... ..... ...... .... .... ............ ............. ........ ..... ... .....".. },.. "explanationofflineenabled": {.. "message": ".... ...................., .... .... .... ......... ........... ............ .... ........ .........."..

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\ko\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1042
Entropy (8bit):	5.3945675025513955
Encrypted:	false
SSDEEP:	24:1HAWYsF4dqNfBQH49Hk8YfIhYzTJ+6WJBtl/u4s+6:ZF4wNfvm87mX4LF6
MD5:	F3E59EEEB007144EA26306C20E04C292
SHA1:	83E7BDFA1F18F4C7534208493C3FF6B1F2F57D90
SHA-256:	C52D9B955D229373725A6E713334BBB31EA72EFA9B5CF4FBD76A566417B12CAC
SHA-512:	7808CB5FF041B002CBD78171EC5A0B4DBA3E017E21F7E8039084C2790F395B839BEE04AD6C942EED47CCB53E90F6DE818A725D1450BF81BA2990154AFD3763AF
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": ".. ...".. },.. "explanationofflinedisabled": {.. "message": ".... ...... ... .. .. Google Docs. ..... Google Docs .... .... .... .... .... ..... . .... .... ..... ......".. },.. "explanationofflineenabled": {.. "message": ".... ...... ... .. ... ... ..... ... ... .. . .....".. },.. "extdesc": {.. "message": ".... .... ... .., ...... . ....... .., .., ......".. },.. "extname": {.. "message": "Google Docs ....".. },.. "learnmore": {.. "message": "... ....".. },.. "popuphelptext": {.. "message": "... .. ... .... ..... .... .... .....

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\lo\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2535
Entropy (8bit):	3.8479764584971368
Encrypted:	false
SSDEEP:	48:YRcHe/4raK1EIlZt1wg62FIOg+xGaF8guI5EP9I2yC:+cs4raK1xlZtOgviOfGaF8RI5EP95b
MD5:	E20D6C27840B406555E2F5091B118FC5
SHA1:	0DCECC1A58CEB4936E255A64A2830956BFA6EC14
SHA-256:	89082FB05229826BC222F5D22C158235F025F0E6DF67FF135A18BD899E13BB8F
SHA-512:	AD53FC0B153005F47F9F4344DF6C4804049FAC94932D895FD02EEBE75222CFE77EEDD9CD3FDC4C88376D18C5972055B00190507AA896488499D64E884F84F093
Malicious:	false
Reputation:	low
Preview:	{"createnew":{"message":"\u0eaa\u0ec9\u0eb2\u0e87\u0ec3\u0edd\u0ec8"},"explanationofflinedisabled":{"message":"\u0e97\u0ec8\u0eb2\u0e99\u0ead\u0ead\u0e9a\u0ea5\u0eb2\u0e8d\u0ea2\u0eb9\u0ec8. \u0ec0\u0e9e\u0eb7\u0ec8\u0ead\u0ec3\u0e8a\u0ec9 Google Docs \u0ec2\u0e94\u0e8d\u0e9a\u0ecd\u0ec8\u0ec0\u0e8a\u0eb7\u0ec8\u0ead\u0ea1\u0e95\u0ecd\u0ec8\u0ead\u0eb4\u0e99\u0ec0\u0e95\u0eb5\u0ec0\u0e99\u0eb1\u0e94, \u0ec3\u0eab\u0ec9\u0ec4\u0e9b\u0e97\u0eb5\u0ec8\u0e81\u0eb2\u0e99\u0e95\u0eb1\u0ec9\u0e87\u0e84\u0ec8\u0eb2\u0ec3\u0e99\u0edc\u0ec9\u0eb2 Google Docs \u0ec1\u0ea5\u0ec9\u0ea7\u0ec0\u0e9b\u0eb5\u0e94\u0ec3\u0e8a\u0ec9\u0e81\u0eb2\u0e99\u0e8a\u0eb4\u0ec9\u0e87\u0ec1\u0e9a\u0e9a\u0ead\u0ead\u0e9a\u0ea5\u0eb2\u0e8d\u0ec3\u0e99\u0ec0\u0e97\u0eb7\u0ec8\u0ead\u0e95\u0ecd\u0ec8\u0ec4\u0e9b\u0e97\u0eb5\u0ec8\u0e97\u0ec8\u0eb2\u0e99\u0ec0\u0e8a\u0eb7\u0ec8\u0ead\u0ea1\u0e95\u0ecd\u0ec8\u0ead\u0eb4\u0e99\u0ec0\u0e95\u0eb5\u0ec0\u0e99\u0eb1\u0e94."},"explanationofflineenabled":{"message":"\u0e97\u0ec

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\lt\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1028
Entropy (8bit):	4.797571191712988
Encrypted:	false
SSDEEP:	24:1HAivZZaJ3Rje394+k7IKgpAJjUpSkiQjuRBMd:fZZahBeu7IKgqeMg
MD5:	970544AB4622701FFDF66DC556847652
SHA1:	14BEE2B77EE74C5E38EBD1DB09E8D8104CF75317
SHA-256:	5DFCBD4DFEAEC3ABE973A78277D3BD02CD77AE635D5C8CD1F816446C61808F59
SHA-512:	CC12D00C10B970189E90D47390EEB142359A8D6F3A9174C2EF3AE0118F09C88AB9B689D9773028834839A7DFAF3AAC6747BC1DCB23794A9F067281E20B8DC6EA
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "SUKURTI NAUJ.".. },.. "explanationofflinedisabled": {.. "message": "Esate neprisijung.. Jei norite naudoti .Google. dokumentus be interneto ry.io, pagrindiniame .Google. dokument. puslapyje eikite . nustatym. skilt. ir .junkite sinchronizavim. neprisijungus, kai kit. kart. b.site prisijung. prie interneto.".. },.. "explanationofflineenabled": {.. "message": "Esate neprisijung., bet vis tiek galite redaguoti pasiekiamus failus arba sukurti nauj..".. },.. "extdesc": {.. "message": "Redaguokite, kurkite ir per.i.r.kite savo dokumentus, skai.iuokles ir pristatymus . visk. darykite be prieigos prie interneto.".. },.. "extname": {.. "message": ".Google. dokumentai neprisijungus".. },.. "learnmore": {.. "message": "Su.inoti daugiau".. },.. "popuphelptext": {.. "message": "Ra.ykite, redaguokite ir bendradarbiaukite bet kurioje vietoje naudodami interneto ry.. arba

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\lv\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	994
Entropy (8bit):	4.700308832360794
Encrypted:	false
SSDEEP:	24:1HAaJ7a/uNpoB/Y4vPnswSPkDzLKFQHpp//BpPDB:7J7a/uzQ/Y4vvswhDzDr/LDB
MD5:	A568A58817375590007D1B8ABCAEBF82
SHA1:	B0F51FE6927BB4975FC6EDA7D8A631BF0C1AB597
SHA-256:	0621DE9161748F45D53052ED8A430962139D7F19074C7FFE7223ECB06B0B87DB
SHA-512:	FCFBADEC9F73975301AB404DB6B09D31457FAC7CCAD2FA5BE348E1CAD6800F87CB5B56DE50880C55BBADB3C40423351A6B5C2D03F6A327D898E35F517B1C628C
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "IZVEIDOT JAUNU".. },.. "explanationofflinedisabled": {.. "message": "J.s esat bezsaist.. Lai lietotu pakalpojumu Google dokumenti bez interneta savienojuma, n.kamaj. reiz., kad ir izveidots savienojums ar internetu, atveriet Google dokumentu s.kumlapas iestat.jumu izv.lni un iesl.dziet sinhroniz.ciju bezsaist..".. },.. "explanationofflineenabled": {.. "message": "J.s esat bezsaist., ta.u varat redi..t pieejamos failus un izveidot jaunus.".. },.. "extdesc": {.. "message": "Redi..jiet, veidojiet un skatiet savus dokumentus, izkl.jlapas un prezent.cijas, neizmantojot savienojumu ar internetu.".. },.. "extname": {.. "message": "Google dokumenti bezsaist.".. },.. "learnmore": {.. "message": "Uzziniet vair.k".. },.. "popuphelptext": {.. "message": "Rakstiet, redi..jiet un sadarbojieties ar interneta savienojumu vai bez t. neatkar.gi no t., kur atrodaties.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\ml\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2091
Entropy (8bit):	4.358252286391144
Encrypted:	false
SSDEEP:	24:1HAnHdGc4LtGxVY6IuVzJkeNL5kP13a67wNcYP8j5PIaSTIjPU4ELFPCWJjMupV/:idGcyYPVtkAUl7wqziBsg9DbpN6XoN/
MD5:	4717EFE4651F94EFF6ACB6653E868D1A
SHA1:	B8A7703152767FBE1819808876D09D9CC1C44450
SHA-256:	22CA9415E294D9C3EC3384B9D08CDAF5164AF73B4E4C251559E09E529C843EA6
SHA-512:	487EAB4938F6BC47B1D77DD47A5E2A389B94E01D29849E38E96C95CABC7BD98679451F0E22D3FEA25C045558CD69FDDB6C4FEF7C581141F1C53C4AA17578D7F7
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "....... ............".. },.. "explanationofflinedisabled": {.. "message": "...... ........... ........... ............. ..... Google ....... ..........., Google ....... .......... ............. .... ...... ...... ... ............... .................... '.......... ................' .........".. },.. "explanationofflineenabled": {.. "message": "................., .......... ......... ....... ...... ..............

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\mn\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2778
Entropy (8bit):	3.595196082412897
Encrypted:	false
SSDEEP:	48:Y943BFU1LQ4HwQLQ4LQhlmVQL3QUm6H6ZgFIcwn6Rs2ShpQ3IwjGLQSJ/PYoEQj8:I43BCymz8XNcfuQDXYN2sum
MD5:	83E7A14B7FC60D4C66BF313C8A2BEF0B
SHA1:	1CCF1D79CDED5D65439266DB58480089CC110B18
SHA-256:	613D8751F6CC9D3FA319F4B7EA8B2BD3BED37FD077482CA825929DD7C12A69A8
SHA-512:	3742E24FFC4B5283E6EE496813C1BDC6835630D006E8647D427C3DE8B8E7BF814201ADF9A27BFAB3ABD130B6FEC64EBB102AC0EB8DEDFE7B63D82D3E1233305D
Malicious:	false
Reputation:	low
Preview:	{"createnew":{"message":"\u0428\u0418\u041d\u0418\u0419\u0413 \u04ae\u04ae\u0421\u0413\u042d\u0425"},"explanationofflinedisabled":{"message":"\u0422\u0430 \u043e\u0444\u043b\u0430\u0439\u043d \u0431\u0430\u0439\u043d\u0430. Google \u0414\u043e\u043a\u044b\u0433 \u0438\u043d\u0442\u0435\u0440\u043d\u044d\u0442\u0433\u04af\u0439\u0433\u044d\u044d\u0440 \u0430\u0448\u0438\u0433\u043b\u0430\u0445\u044b\u043d \u0442\u0443\u043b\u0434 \u0434\u0430\u0440\u0430\u0430\u0433\u0438\u0439\u043d \u0443\u0434\u0430\u0430 \u0438\u043d\u0442\u0435\u0440\u043d\u044d\u0442\u044d\u0434 \u0445\u043e\u043b\u0431\u043e\u0433\u0434\u043e\u0445\u0434\u043e\u043e Google \u0414\u043e\u043a\u044b\u043d \u043d\u04af\u04af\u0440 \u0445\u0443\u0443\u0434\u0430\u0441\u043d\u0430\u0430\u0441 \u0442\u043e\u0445\u0438\u0440\u0433\u043e\u043e \u0434\u043e\u0442\u043e\u0440\u0445 \u043e\u0444\u043b\u0430\u0439\u043d \u0441\u0438\u043d\u043a\u0438\u0439\u0433 \u0438\u0434\u044d\u0432\u0445\u0436\u04af\u04af\u043b\u043d\u0

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\mr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1719
Entropy (8bit):	4.287702203591075
Encrypted:	false
SSDEEP:	48:65/5EKaDMw6pEf4I5+jSksOTJqQyrFO8C:65/5EKaAw6pEf4I5+vsOVqQyFO8C
MD5:	3B98C4ED8874A160C3789FEAD5553CFA
SHA1:	5550D0EC548335293D962AAA96B6443DD8ABB9F6
SHA-256:	ADEB082A9C754DFD5A9D47340A3DDCC19BF9C7EFA6E629A2F1796305F1C9A66F
SHA-512:	5139B6C6DF9459C7B5CDC08A98348891499408CD75B46519BA3AC29E99AAAFCC5911A1DEE6C3A57E3413DBD0FAE72D7CBC676027248DCE6364377982B5CE4151
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": ".... .... ...".. },.. "explanationofflinedisabled": {.. "message": "...... ...... ..... ......... ....... ....... ..... Google ....... ............, Google ....... .............. .......... .. ... ..... .... ...... ......... ...... ...... ...... .... .... ....".. },.. "explanationofflineenabled": {.. "message": "...... ...... ...., ..... ...... ...... ...... .... ....... ... ..... .... .... ... .....".. },.. "extdesc": {.. "message": "..... ..

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\ms\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	936
Entropy (8bit):	4.457879437756106
Encrypted:	false
SSDEEP:	24:1HARXIqhmemNKsE27rhdfNLChtyo2JJ/YgTgin:iIqFC7lrDfNLCIBRzn
MD5:	7D273824B1E22426C033FF5D8D7162B7
SHA1:	EADBE9DBE5519BD60458B3551BDFC36A10049DD1
SHA-256:	2824CF97513DC3ECC261F378BFD595AE95A5997E9D1C63F5731A58B1F8CD54F9
SHA-512:	E5B611BBFAB24C9924D1D5E1774925433C65C322769E1F3B116254B1E9C69B6DF1BE7828141EEBBF7524DD179875D40C1D8F29C4FB86D663B8A365C6C60421A7
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "BUAT BAHARU".. },.. "explanationofflinedisabled": {.. "message": "Anda berada di luar talian. Untuk menggunakan Google Docs tanpa sambungan Internet, pergi ke tetapan di halaman utama Google Docs dan hidupkan penyegerakan luar talian apabila anda disambungkan ke Internet selepas ini.".. },.. "explanationofflineenabled": {.. "message": "Anda berada di luar talian, tetapi anda masih boleh mengedit fail yang tersedia atau buat fail baharu.".. },.. "extdesc": {.. "message": "Edit, buat dan lihat dokumen, hamparan dan pembentangan anda . kesemuanya tanpa akses Internet.".. },.. "extname": {.. "message": "Google Docs Luar Talian".. },.. "learnmore": {.. "message": "Ketahui Lebih Lanjut".. },.. "popuphelptext": {.. "message": "Tulis, edit dan bekerjasama di mana-mana sahaja anda berada, dengan atau tanpa sambungan Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\my\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3830
Entropy (8bit):	3.5483353063347587
Encrypted:	false
SSDEEP:	48:Ya+Ivxy6ur1+j3P7Xgr5ELkpeCgygyOxONHO3pj6H57ODyOXOVp6:8Uspsj3P3ty2a66xl09
MD5:	342335A22F1886B8BC92008597326B24
SHA1:	2CB04F892E430DCD7705C02BF0A8619354515513
SHA-256:	243BEFBD6B67A21433DCC97DC1A728896D3A070DC20055EB04D644E1BB955FE7
SHA-512:	CD344D060E30242E5A4705547E807CE3CE2231EE983BB9A8AD22B3E7598A7EC87399094B04A80245AD51D039370F09D74FE54C0B0738583884A73F0C7E888AD8
Malicious:	false
Reputation:	low
Preview:	{"createnew":{"message":"\u1021\u101e\u1005\u103a \u1015\u103c\u102f\u101c\u102f\u1015\u103a\u101b\u1014\u103a"},"explanationofflinedisabled":{"message":"\u101e\u1004\u103a \u1021\u1031\u102c\u1037\u1016\u103a\u101c\u102d\u102f\u1004\u103a\u1038\u1016\u103c\u1005\u103a\u1014\u1031\u1015\u102b\u101e\u100a\u103a\u104b \u1021\u1004\u103a\u1010\u102c\u1014\u1000\u103a\u1001\u103b\u102d\u1010\u103a\u1006\u1000\u103a\u1019\u103e\u102f \u1019\u101b\u103e\u102d\u1018\u1032 Google Docs \u1000\u102d\u102f \u1021\u101e\u102f\u1036\u1038\u1015\u103c\u102f\u101b\u1014\u103a \u1014\u1031\u102c\u1000\u103a\u1010\u1005\u103a\u1000\u103c\u102d\u1019\u103a \u101e\u1004\u103a\u1021\u1004\u103a\u1010\u102c\u1014\u1000\u103a\u1001\u103b\u102d\u1010\u103a\u1006\u1000\u103a\u101e\u100a\u1037\u103a\u1021\u1001\u102b Google Docs \u1015\u1004\u103a\u1019\u1005\u102c\u1019\u103b\u1000\u103a\u1014\u103e\u102c\u101b\u103e\u102d \u1006\u1000\u103a\u1010\u1004\u103a\u1019\u103b\u102c\u1038\u101e\u102d\u102f\u1037\u1

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\ne\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1898
Entropy (8bit):	4.187050294267571
Encrypted:	false
SSDEEP:	24:1HAmQ6ZSWfAx6fLMr48tE/cAbJtUZJScSIQoAfboFMiQ9pdvz48YgqG:TQ6W6MbkcAltUJxQdfbqQ9pp0gqG
MD5:	B1083DA5EC718D1F2F093BD3D1FB4F37
SHA1:	74B6F050D918448396642765DEF1AD5390AB5282
SHA-256:	E6ED0A023EF31705CCCBAF1E07F2B4B2279059296B5CA973D2070417BA16F790
SHA-512:	7102B90ABBE2C811E8EE2F1886A73B1298D4F3D5D05F0FFDB57CF78B9A49A25023A290B255BAA4895BB150B388BAFD9F8432650B8C70A1A9A75083FFFCD74F1A
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": ".... ....... .........".. },.. "explanationofflinedisabled": {.. "message": "..... ...... .......... .... ........ .... .... Google ........ ...... .... ..... ..... ... .......... ....... .... Google ........ .......... ..... .......... .. ...... ..... .... ..... ......... .. ..........".. },.. "explanationofflineenabled": {.. "message": "..... ...... ........., .. ..... ... ... ...... ....... ....... .. .... ....... ....

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\nl\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	914
Entropy (8bit):	4.513485418448461
Encrypted:	false
SSDEEP:	12:1HASvgFARCBxNBv52/fXjOXl6W6ICBxeBvMzU1CSUJAO6SFAIVIbCBhZHdb1tvz+:1HABJx4X6QDwEzlm2uGvYzKU
MD5:	32DF72F14BE59A9BC9777113A8B21DE6
SHA1:	2A8D9B9A998453144307DD0B700A76E783062AD0
SHA-256:	F3FE1FFCB182183B76E1B46C4463168C746A38E461FD25CA91FF2A40846F1D61
SHA-512:	E0966F5CCA5A8A6D91C58D716E662E892D1C3441DAA5D632E5E843839BB989F620D8AC33ED3EDBAFE18D7306B40CD0C4639E5A4E04DA2C598331DACEC2112AAD
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "NIEUW MAKEN".. },.. "explanationofflinedisabled": {.. "message": "Je bent offline. Wil je Google Documenten zonder internetverbinding gebruiken, ga dan de volgende keer dat je verbinding met internet hebt naar 'Instellingen' op de homepage van Google Documenten en zet 'Offline synchronisatie' aan.".. },.. "explanationofflineenabled": {.. "message": "Je bent offline, maar je kunt nog wel beschikbare bestanden bewerken of nieuwe bestanden maken.".. },.. "extdesc": {.. "message": "Bewerk, maak en bekijk je documenten, spreadsheets en presentaties. Allemaal zonder internettoegang.".. },.. "extname": {.. "message": "Offline Documenten".. },.. "learnmore": {.. "message": "Meer informatie".. },.. "popuphelptext": {.. "message": "Overal schrijven, bewerken en samenwerken, met of zonder internetverbinding.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\no\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	878
Entropy (8bit):	4.4541485835627475
Encrypted:	false
SSDEEP:	24:1HAqwwrJ6wky68uk+NILxRGJwBvDyrj9V:nwwQwky6W+NwswVyT
MD5:	A1744B0F53CCF889955B95108367F9C8
SHA1:	6A5A6771DFF13DCB4FD425ED839BA100B7123DE0
SHA-256:	21CEFF02B45A4BFD60D144879DFA9F427949A027DD49A3EB0E9E345BD0B7C9A8
SHA-512:	F55E43F14514EECB89F6727A0D3C234149609020A516B193542B5964D2536D192F40CC12D377E70C683C269A1BDCDE1C6A0E634AA84A164775CFFE776536A961
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "OPPRETT NYTT".. },.. "explanationofflinedisabled": {.. "message": "Du er uten nett. For . bruke Google Dokumenter uten internettilkobling, g. til innstillingene p. Google Dokumenter-nettsiden og sl. p. synkronisering uten nett neste gang du er koblet til Internett.".. },.. "explanationofflineenabled": {.. "message": "Du er uten nett, men du kan likevel endre tilgjengelige filer eller opprette nye.".. },.. "extdesc": {.. "message": "Rediger, opprett og se dokumentene, regnearkene og presentasjonene dine . uten nettilgang.".. },.. "extname": {.. "message": "Google Dokumenter uten nett".. },.. "learnmore": {.. "message": "Finn ut mer".. },.. "popuphelptext": {.. "message": "Skriv, rediger eller samarbeid uansett hvor du er, med eller uten internettilkobling.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\pa\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2766
Entropy (8bit):	3.839730779948262
Encrypted:	false
SSDEEP:	48:YEH6/o0iZbNCbDMUcipdkNtQjsGKIhO9aBjj/nxt9o5nDAj3:p6wbZbEbvJ8jQkIhO9aBjb/90Ab
MD5:	97F769F51B83D35C260D1F8CFD7990AF
SHA1:	0D59A76564B0AEE31D0A074305905472F740CECA
SHA-256:	BBD37D41B7DE6F93948FA2437A7699D4C30A3C39E736179702F212CB36A3133C
SHA-512:	D91F5E2D22FC2D7F73C1F1C4AF79DB98FCFD1C7804069AE9B2348CBC729A6D2DFF7FB6F44D152B0BDABA6E0D05DFF54987E8472C081C4D39315CEC2CBC593816
Malicious:	false
Reputation:	low
Preview:	{"createnew":{"message":"\u0a28\u0a35\u0a3e\u0a02 \u0a2c\u0a23\u0a3e\u0a13"},"explanationofflinedisabled":{"message":"\u0a24\u0a41\u0a38\u0a40\u0a02 \u0a06\u0a2b\u0a3c\u0a32\u0a3e\u0a08\u0a28 \u0a39\u0a4b\u0964 \u0a07\u0a70\u0a1f\u0a30\u0a28\u0a48\u0a71\u0a1f \u0a15\u0a28\u0a48\u0a15\u0a36\u0a28 \u0a26\u0a47 \u0a2c\u0a3f\u0a28\u0a3e\u0a02 Google Docs \u0a28\u0a42\u0a70 \u0a35\u0a30\u0a24\u0a23 \u0a32\u0a08, \u0a05\u0a17\u0a32\u0a40 \u0a35\u0a3e\u0a30 \u0a1c\u0a26\u0a4b\u0a02 \u0a24\u0a41\u0a38\u0a40\u0a02 \u0a07\u0a70\u0a1f\u0a30\u0a28\u0a48\u0a71\u0a1f \u0a26\u0a47 \u0a28\u0a3e\u0a32 \u0a15\u0a28\u0a48\u0a15\u0a1f \u0a39\u0a4b\u0a35\u0a4b \u0a24\u0a3e\u0a02 Google Docs \u0a2e\u0a41\u0a71\u0a16 \u0a2a\u0a70\u0a28\u0a47 '\u0a24\u0a47 \u0a38\u0a48\u0a1f\u0a3f\u0a70\u0a17\u0a3e\u0a02 \u0a35\u0a3f\u0a71\u0a1a \u0a1c\u0a3e\u0a13 \u0a05\u0a24\u0a47 \u0a06\u0a2b\u0a3c\u0a32\u0a3e\u0a08\u0a28 \u0a38\u0a3f\u0a70\u0a15 \u0a28\u0a42\u0a70 \u0a1a\u0a3e\u0a32\u0a42 \u0a15\u0a30\u0a4b\u0964"},"expla

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\pl\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	978
Entropy (8bit):	4.879137540019932
Encrypted:	false
SSDEEP:	24:1HApiJiRelvm3wi8QAYcbm24sK+tFJaSDD:FJMx3whxYcbNp
MD5:	B8D55E4E3B9619784AECA61BA15C9C0F
SHA1:	B4A9C9885FBEB78635957296FDDD12579FEFA033
SHA-256:	E00FF20437599A5C184CA0C79546CB6500171A95E5F24B9B5535E89A89D3EC3D
SHA-512:	266589116EEE223056391C65808255EDAE10EB6DC5C26655D96F8178A41E283B06360AB8E08AC3857D172023C4F616EF073D0BEA770A3B3DD3EE74F5FFB2296B
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "UTW.RZ NOWY".. },.. "explanationofflinedisabled": {.. "message": "Jeste. offline. Aby korzysta. z Dokument.w Google bez po..czenia internetowego, otw.rz ustawienia na stronie g..wnej Dokument.w Google i w..cz synchronizacj. offline nast.pnym razem, gdy b.dziesz mie. dost.p do internetu.".. },.. "explanationofflineenabled": {.. "message": "Jeste. offline, ale nadal mo.esz edytowa. dost.pne pliki i tworzy. nowe.".. },.. "extdesc": {.. "message": "Edytuj, tw.rz i wy.wietlaj swoje dokumenty, arkusze kalkulacyjne oraz prezentacje bez konieczno.ci ..czenia si. z internetem.".. },.. "extname": {.. "message": "Dokumenty Google offline".. },.. "learnmore": {.. "message": "Wi.cej informacji".. },.. "popuphelptext": {.. "message": "Pisz, edytuj i wsp..pracuj, gdziekolwiek jeste. . niezale.nie od tego, czy masz po..czenie z internetem.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\pt_BR\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	907
Entropy (8bit):	4.599411354657937
Encrypted:	false
SSDEEP:	12:1HASvgU30CBxNd6GwXOK1styCJ02OK9+4KbCBxed6X4LBAt4rXgUCSUuYDHIIQka:1HAcXlyCJ5+Tsz4LY4rXSw/Q+ftkC
MD5:	608551F7026E6BA8C0CF85D9AC11F8E3
SHA1:	87B017B2D4DA17E322AF6384F82B57B807628617
SHA-256:	A73EEA087164620FA2260D3910D3FBE302ED85F454EDB1493A4F287D42FC882F
SHA-512:	82F52F8591DB3C0469CC16D7CBFDBF9116F6D5B5D2AD02A3D8FA39CE1378C64C0EA80AB8509519027F71A89EB8BBF38A8702D9AD26C8E6E0F499BF7DA18BF747
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "CRIAR NOVO".. },.. "explanationofflinedisabled": {.. "message": "Voc. est. off-line. Para usar o Documentos Google sem conex.o com a Internet, na pr.xima vez que se conectar, acesse as configura..es na p.gina inicial do Documentos Google e ative a sincroniza..o off-line.".. },.. "explanationofflineenabled": {.. "message": "Voc. est. off-line, mas mesmo assim pode editar os arquivos dispon.veis ou criar novos arquivos.".. },.. "extdesc": {.. "message": "Edite, crie e veja seus documentos, planilhas e apresenta..es sem precisar de acesso . Internet.".. },.. "extname": {.. "message": "Documentos Google off-line".. },.. "learnmore": {.. "message": "Saiba mais".. },.. "popuphelptext": {.. "message": "Escreva, edite e colabore onde voc. estiver, com ou sem conex.o com a Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\pt_PT\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	914
Entropy (8bit):	4.604761241355716
Encrypted:	false
SSDEEP:	24:1HAcXzw8M+N0STDIjxX+qxCjKw5BKriEQFMJXkETs:zXzw0pKXbxqKw5BKri3aNY
MD5:	0963F2F3641A62A78B02825F6FA3941C
SHA1:	7E6972BEAB3D18E49857079A24FB9336BC4D2D48
SHA-256:	E93B8E7FB86D2F7DFAE57416BB1FB6EE0EEA25629B972A5922940F0023C85F90
SHA-512:	22DD42D967124DA5A2209DD05FB6AD3F5D0D2687EA956A22BA1E31C56EC09DEB53F0711CD5B24D672405358502E9D1C502659BB36CED66CAF83923B021CA0286
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "CRIAR NOVO".. },.. "explanationofflinedisabled": {.. "message": "Est. offline. Para utilizar o Google Docs sem uma liga..o . Internet, aceda .s defini..es na p.gina inicial do Google Docs e ative a sincroniza..o offline da pr.xima vez que estiver ligado . Internet.".. },.. "explanationofflineenabled": {.. "message": "Est. offline, mas continua a poder editar os ficheiros dispon.veis ou criar novos ficheiros.".. },.. "extdesc": {.. "message": "Edite, crie e veja os documentos, as folhas de c.lculo e as apresenta..es, tudo sem precisar de aceder . Internet.".. },.. "extname": {.. "message": "Google Docs offline".. },.. "learnmore": {.. "message": "Saber mais".. },.. "popuphelptext": {.. "message": "Escreva edite e colabore onde quer que esteja, com ou sem uma liga..o . Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\ro\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	937
Entropy (8bit):	4.686555713975264
Encrypted:	false
SSDEEP:	24:1HA8dC6e6w+uFPHf2TFMMlecFpweWV4RE:pC6KvHf4plVweCx
MD5:	BED8332AB788098D276B448EC2B33351
SHA1:	6084124A2B32F386967DA980CBE79DD86742859E
SHA-256:	085787999D78FADFF9600C9DC5E3FF4FB4EB9BE06D6BB19DF2EEF8C284BE7B20
SHA-512:	22596584D10707CC1C8179ED3ABE46EF2C314CF9C3D0685921475944B8855AAB660590F8FA1CFDCE7976B4BB3BD9ABBBF053F61F1249A325FD0094E1C95692ED
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "CREEAZ. UN DOCUMENT".. },.. "explanationofflinedisabled": {.. "message": "E.ti offline. Pentru a utiliza Documente Google f.r. conexiune la internet, intr. .n set.rile din pagina principal. Documente Google .i activeaz. sincronizarea offline data viitoare c.nd e.ti conectat(.) la internet.".. },.. "explanationofflineenabled": {.. "message": "E.ti offline, dar po.i .nc. s. editezi fi.ierele disponibile sau s. creezi altele.".. },.. "extdesc": {.. "message": "Editeaz., creeaz. .i acceseaz. documente, foi de calcul .i prezent.ri - totul f.r. acces la internet.".. },.. "extname": {.. "message": "Documente Google Offline".. },.. "learnmore": {.. "message": "Afl. mai multe".. },.. "popuphelptext": {.. "message": "Scrie, editeaz. .i colaboreaz. oriunde ai fi, cu sau f.r. conexiune la internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\ru\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1337
Entropy (8bit):	4.69531415794894
Encrypted:	false
SSDEEP:	24:1HABEapHTEmxUomjsfDVs8THjqBK8/hHUg41v+Lph5eFTHQ:I/VdxUomjsre8Kh4Riph5eFU
MD5:	51D34FE303D0C90EE409A2397FCA437D
SHA1:	B4B9A7B19C62D0AA95D1F10640A5FBA628CCCA12
SHA-256:	BE733625ACD03158103D62BC0EEF272CA3F265AC30C87A6A03467481A177DAE3
SHA-512:	E8670DED44DC6EE30E5F41C8B2040CF8A463CD9A60FC31FA70EB1D4C9AC1A3558369792B5B86FA761A21F5266D5A35E5C2C39297F367DAA84159585C19EC492A
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": ".......".. },.. "explanationofflinedisabled": {.. "message": "..... ............ Google ......... ... ........., ............ . .... . ......... ............. . ......-...... . .......... .. ......... .........".. },.. "explanationofflineenabled": {.. "message": "... ........... . .......... .. ...... ......... ..... ..... . ............. .., . ....... ........ ......-.......".. },.. "extdesc": {.. "message": ".........., .............. . ............ ........., ....... . ........... ... ....... . ..........".. },.. "extname": {.. "message": "Google.......... ......".. },.. "learnmore": {.

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\si\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2846
Entropy (8bit):	3.7416822879702547
Encrypted:	false
SSDEEP:	48:YWi+htQTKEQb3aXQYJLSWy7sTQThQTnQtQTrEmQ6kiLsegQSJFwsQGaiPn779I+S:zhiTK5b3tUGVjTGTnQiTryOLpyaxYf/S
MD5:	B8A4FD612534A171A9A03C1984BB4BDD
SHA1:	F513F7300827FE352E8ECB5BD4BB1729F3A0E22A
SHA-256:	54241EBE651A8344235CC47AFD274C080ABAEBC8C3A25AFB95D8373B6A5670A2
SHA-512:	C03E35BFDE546AEB3245024EF721E7E606327581EFE9EAF8C5B11989D9033BDB58437041A5CB6D567BAA05466B6AAF054C47F976FD940EEEDF69FDF80D79095B
Malicious:	false
Reputation:	low
Preview:	{"createnew":{"message":"\u0db1\u0dc0 \u0dbd\u0dda\u0d9b\u0db1\u0dba\u0d9a\u0dca \u0dc3\u0dcf\u0daf\u0db1\u0dca\u0db1"},"explanationofflinedisabled":{"message":"\u0d94\u0db6 \u0db1\u0ddc\u0db6\u0dd0\u0db3\u0dd2\u0dba. \u0d85\u0db1\u0dca\u0dad\u0dbb\u0dca\u0da2\u0dcf\u0dbd \u0dc3\u0db8\u0dca\u0db6\u0db1\u0dca\u0db0\u0dad\u0dcf\u0dc0\u0d9a\u0dca \u0db1\u0ddc\u0db8\u0dd0\u0dad\u0dd2\u0dc0 Google Docs \u0db7\u0dcf\u0dc0\u0dd2\u0dad \u0d9a\u0dd2\u0dbb\u0dd3\u0db8\u0da7, Google Docs \u0db8\u0dd4\u0dbd\u0dca \u0db4\u0dd2\u0da7\u0dd4\u0dc0 \u0db8\u0dad \u0dc3\u0dd0\u0d9a\u0dc3\u0dd3\u0db8\u0dca \u0dc0\u0dd9\u0dad \u0d9c\u0ddc\u0dc3\u0dca \u0d94\u0db6 \u0d8a\u0dc5\u0d9f \u0d85\u0dc0\u0dc3\u0dca\u0dae\u0dcf\u0dc0\u0dda \u0d85\u0db1\u0dca\u0dad\u0dbb\u0dca\u0da2\u0dcf\u0dbd\u0dba\u0da7 \u0dc3\u0db6\u0dd0\u0db3\u0dd2 \u0dc0\u0dd2\u0da7 \u0db1\u0ddc\u0db6\u0dd0\u0db3\u0dd2 \u0dc3\u0db8\u0db8\u0dd4\u0dc4\u0dd4\u0dbb\u0dca\u0dad \u0d9a\u0dd2\u0dbb\u0dd3\u0db8 \u0d9a\u0dca\u200d\u0dbb\u0dd2\u0dba\u0dc

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\sk\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	934
Entropy (8bit):	4.882122893545996
Encrypted:	false
SSDEEP:	24:1HAF8pMv1RS4LXL22IUjdh8uJwpPqLDEtxKLhSS:hyv1RS4LXx38u36QsS
MD5:	8E55817BF7A87052F11FE554A61C52D5
SHA1:	9ABDC0725FE27967F6F6BE0DF5D6C46E2957F455
SHA-256:	903060EC9E76040B46DEB47BBB041D0B28A6816CB9B892D7342FC7DC6782F87C
SHA-512:	EFF9EC7E72B272DDE5F29123653BC056A4BC2C3C662AE3C448F8CB6A4D1865A0679B7E74C1B3189F3E262109ED6BC8F8D2BDE14AEFC8E87E0F785AE4837D01C7
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "VYTVORI. NOV.".. },.. "explanationofflinedisabled": {.. "message": "Ste offline. Ak chcete pou.i. Dokumenty Google bez pripojenia na internet, po najbli..om pripojen. na internet prejdite do nastaven. na domovskej str.nke Dokumentov Google a.zapnite offline synchroniz.ciu.".. },.. "explanationofflineenabled": {.. "message": "Ste offline, no st.le m..ete upravova. dostupn. s.bory a.vytv.ra. nov..".. },.. "extdesc": {.. "message": ".prava, tvorba a.zobrazenie dokumentov, tabuliek a.prezent.ci.. To v.etko bez pr.stupu na internet.".. },.. "extname": {.. "message": "Dokumenty Google v re.ime offline".. },.. "learnmore": {.. "message": ".al.ie inform.cie".. },.. "popuphelptext": {.. "message": "P..te, upravujte a.spolupracuje, kdeko.vek ste, a.to s.pripojen.m na internet aj bez neho.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\sl\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	963
Entropy (8bit):	4.6041913416245
Encrypted:	false
SSDEEP:	12:1HASvgfECBxNFCEuKXowwJrpvPwNgEcPJJJEfWOCBxeFCJuGuU4KYXCSUXKDxX4A:1HAXMKYw8VYNLcaeDmKYLdX2zJBG5
MD5:	BFAEFEFF32813DF91C56B71B79EC2AF4
SHA1:	F8EDA2B632610972B581724D6B2F9782AC37377B
SHA-256:	AAB9CF9098294A46DC0F2FA468AFFF7CA7C323A1A0EFA70C9DB1E3A4DA05D1D4
SHA-512:	971F2BBF5E9C84DE3D31E5F2A4D1A00D891A2504F8AF6D3F75FC19056BFD059A270C4C9836AF35258ABA586A1888133FB22B484F260C1CBC2D1D17BC3B4451AA
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "USTVARI NOVO".. },.. "explanationofflinedisabled": {.. "message": "Nimate vzpostavljene povezave. .e .elite uporabljati Google Dokumente brez internetne povezave, odprite nastavitve na doma.i strani Google Dokumentov in vklopite sinhronizacijo brez povezave, ko naslednji. vzpostavite internetno povezavo.".. },.. "explanationofflineenabled": {.. "message": "Nimate vzpostavljene povezave, vendar lahko .e vedno urejate razpolo.ljive datoteke ali ustvarjate nove.".. },.. "extdesc": {.. "message": "Urejajte, ustvarjajte in si ogledujte dokumente, preglednice in predstavitve . vse to brez internetnega dostopa.".. },.. "extname": {.. "message": "Google Dokumenti brez povezave".. },.. "learnmore": {.. "message": "Ve. o tem".. },.. "popuphelptext": {.. "message": "Pi.ite, urejajte in sodelujte, kjer koli ste, z internetno povezavo ali brez nje.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\sr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1320
Entropy (8bit):	4.569671329405572
Encrypted:	false
SSDEEP:	24:1HArg/fjQg2JwrfZtUWTrw1P4epMnRGi5TBmuPDRxZQ/XtiCw/Rwh/Q9EVz:ogUg2JwDZe6rwKI8VTP9xK1CwhI94
MD5:	7F5F8933D2D078618496C67526A2B066
SHA1:	B7050E3EFA4D39548577CF47CB119FA0E246B7A4
SHA-256:	4E8B69E864F57CDDD4DC4E4FAF2C28D496874D06016BC22E8D39E0CB69552769
SHA-512:	0FBAB56629368EEF87DEEF2977CA51831BEB7DEAE98E02504E564218425C751853C4FDEAA40F51ECFE75C633128B56AE105A6EB308FD5B4A2E983013197F5DBA
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "....... ....".. },.. "explanationofflinedisabled": {.. "message": "...... .... .. ..... ......... Google ......... ... ........ ...., ..... . .......... .. ........ ........ Google .......... . ........ ...... .............. ... ....... ... ...... ........ .. ...........".. },.. "explanationofflineenabled": {.. "message": "...... ..., ... . .... ...... .. ....... ...... . ........ ........ ... .. ....... .....".. },.. "extdesc": {.. "message": "....... . ........... ........., ...... . ............ . ....... ...... . ... . ... .. ... ........ .........".. },.. "extname": {.. "message

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\sv\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	884
Entropy (8bit):	4.627108704340797
Encrypted:	false
SSDEEP:	24:1HA0NOYT/6McbnX/yzklyOIPRQrJlvDymvBd:vNOcyHnX/yg0P4Bymn
MD5:	90D8FB448CE9C0B9BA3D07FB8DE6D7EE
SHA1:	D8688CAC0245FD7B886D0DEB51394F5DF8AE7E84
SHA-256:	64B1E422B346AB77C5D1C77142685B3FF7661D498767D104B0C24CB36D0EB859
SHA-512:	6D58F49EE3EF0D3186EA036B868B2203FE936CE30DC8E246C32E90B58D9B18C624825419346B62AF8F7D61767DBE9721957280AA3C524D3A5DFB1A3A76C00742
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "SKAPA NYTT".. },.. "explanationofflinedisabled": {.. "message": "Du .r offline. Om du vill anv.nda Google Dokument utan internetuppkoppling, .ppna inst.llningarna p. Google Dokuments startsida och aktivera offlinesynkronisering n.sta g.ng du .r ansluten till internet.".. },.. "explanationofflineenabled": {.. "message": "Du .r offline, men det g.r fortfarande att redigera tillg.ngliga filer eller skapa nya.".. },.. "extdesc": {.. "message": "Redigera, skapa och visa dina dokument, kalkylark och presentationer . helt utan internet.tkomst.".. },.. "extname": {.. "message": "Google Dokument Offline".. },.. "learnmore": {.. "message": "L.s mer".. },.. "popuphelptext": {.. "message": "Skriv, redigera och samarbeta .verallt, med eller utan internetanslutning.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\sw\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	980
Entropy (8bit):	4.50673686618174
Encrypted:	false
SSDEEP:	12:1HASvgNHCBxNx1HMHyMhybK7QGU78oCuafIvfCBxex6EYPE5E1pOCSUJqONtCBh8:1HAGDQ3y0Q/Kjp/zhDoKMkeAT6dBaX
MD5:	D0579209686889E079D87C23817EDDD5
SHA1:	C4F99E66A5891973315D7F2BC9C1DAA524CB30DC
SHA-256:	0D20680B74AF10EF8C754FCDE259124A438DCE3848305B0CAF994D98E787D263
SHA-512:	D59911F91ED6C8FF78FD158389B4D326DAF4C031B940C399569FE210F6985E23897E7F404B7014FC7B0ACEC086C01CC5F76354F7E5D3A1E0DEDEF788C23C2978
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "FUNGUA MPYA".. },.. "explanationofflinedisabled": {.. "message": "Haupo mtandaoni. Ili uweze kutumia Hati za Google bila muunganisho wa intaneti, wakati utakuwa umeunganishwa kwenye intaneti, nenda kwenye sehemu ya mipangilio kwenye ukurasa wa kwanza wa Hati za Google kisha uwashe kipengele cha usawazishaji nje ya mtandao.".. },.. "explanationofflineenabled": {.. "message": "Haupo mtandaoni, lakini bado unaweza kubadilisha faili zilizopo au uunde mpya.".. },.. "extdesc": {.. "message": "Badilisha, unda na uangalie hati, malahajedwali na mawasilisho yako . yote bila kutumia muunganisho wa intaneti.".. },.. "extname": {.. "message": "Hati za Google Nje ya Mtandao".. },.. "learnmore": {.. "message": "Pata Maelezo Zaidi".. },.. "popuphelptext": {.. "message": "Andika hati, zibadilishe na ushirikiane na wengine popote ulipo, iwe una muunganisho wa intaneti au huna.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\ta\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1941
Entropy (8bit):	4.132139619026436
Encrypted:	false
SSDEEP:	24:1HAoTZwEj3YfVLiANpx96zjlXTwB4uNJDZwq3CP1B2xIZiIH1CYFIZ03SoFyxrph:JCEjWiAD0ZXkyYFyPND1L/I
MD5:	DCC0D1725AEAEAAF1690EF8053529601
SHA1:	BB9D31859469760AC93E84B70B57909DCC02EA65
SHA-256:	6282BF9DF12AD453858B0B531C8999D5FD6251EB855234546A1B30858462231A
SHA-512:	6243982D764026D342B3C47C706D822BB2B0CAFFA51F0591D8C878F981EEF2A7FC68B76D012630B1C1EB394AF90EB782E2B49329EB6538DD5608A7F0791FDCF5
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "..... ....... .........".. },.. "explanationofflinedisabled": {.. "message": ".......... ........... .... ....... ..... Google ......... .........., ...... .... ........... ......... ...., Google ... ................... ................ ......, ........ ......... ..........".. },.. "explanationofflineenabled": {.. "message": ".......... ..........., .......... .......... .......... ......... ........... ...... .....

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\te\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1969
Entropy (8bit):	4.327258153043599
Encrypted:	false
SSDEEP:	48:R7jQrEONienBcFNBNieCyOBw0/kCcj+sEf24l+Q+u1LU4ljCj55ONipR41ssrNix:RjQJN1nBcFNBNlCyGcj+RXl+Q+u1LU4s
MD5:	385E65EF723F1C4018EEE6E4E56BC03F
SHA1:	0CEA195638A403FD99BAEF88A360BD746C21DF42
SHA-256:	026C164BAE27DBB36A564888A796AA3F188AAD9E0C37176D48910395CF772CEA
SHA-512:	E55167CB5638E04DF3543D57C8027B86B9483BFCAFA8E7C148EDED66454AEBF554B4C1CF3C33E93EC63D73E43800D6A6E7B9B1A1B0798B6BDB2F699D3989B052
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "..... ...... ........ ......".. },.. "explanationofflinedisabled": {.. "message": ".... ........... ........ ......... ........ ....... Google Docs... .............., .... ............ ....... ..... ...... .... Google Docs .... ...... ............. ......, ........ ........ ... .......".. },.. "explanationofflineenabled": {.. "message": ".... ........... ......., .... .... ........ .......... .... ....... ..... ....... .... ..

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\th\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1674
Entropy (8bit):	4.343724179386811
Encrypted:	false
SSDEEP:	48:fcGjnU3UnGKD1GeU3pktOggV1tL2ggG7Q:f3jnDG1eUk0g6RLE
MD5:	64077E3D186E585A8BEA86FF415AA19D
SHA1:	73A861AC810DABB4CE63AD052E6E1834F8CA0E65
SHA-256:	D147631B2334A25B8AA4519E4A30FB3A1A85B6A0396BC688C68DC124EC387D58
SHA-512:	56DD389EB9DD335A6214E206B3BF5D63562584394D1DE1928B67D369E548477004146E6CB2AD19D291CB06564676E2B2AC078162356F6BC9278B04D29825EF0C
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": ".........".. },.. "explanationofflinedisabled": {.. "message": ".............. ............. Google .................................... ............................... Google ...... .................................................................".. },.. "explanationofflineenabled": {.. "message": "................................................................".. },.. "extdesc": {.. "message": "..... ..... ........

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\tr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1063
Entropy (8bit):	4.853399816115876
Encrypted:	false
SSDEEP:	24:1HAowYuBPgoMC4AGehrgGm7tJ3ckwFrXnRs5m:GYsPgrCtGehkGc3cvXr
MD5:	76B59AAACC7B469792694CF3855D3F4C
SHA1:	7C04A2C1C808FA57057A4CCEEE66855251A3C231
SHA-256:	B9066A162BEE00FD50DC48C71B32B69DFFA362A01F84B45698B017A624F46824
SHA-512:	2E507CA6874DE8028DC769F3D9DFD9E5494C268432BA41B51568D56F7426F8A5F2E5B111DDD04259EB8D9A036BB4E3333863A8FC65AAB793BCEF39EDFE41403B
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "YEN. OLU.TUR".. },.. "explanationofflinedisabled": {.. "message": ".nternet'e ba.l. de.ilsiniz. Google Dok.manlar'. .nternet ba.lant.s. olmadan kullanmak i.in, .nternet'e ba.lanabildi.inizde Google Dok.manlar ana sayfas.nda Ayarlar'a gidin ve .evrimd... senkronizasyonu etkinle.tirin.".. },.. "explanationofflineenabled": {.. "message": ".nternet'e ba.l. de.ilsiniz. Ancak, yine de mevcut dosyalar. d.zenleyebilir veya yeni dosyalar olu.turabilirsiniz.".. },.. "extdesc": {.. "message": "Dok.man, e-tablo ve sunu olu.turun, bunlar. d.zenleyin ve g.r.nt.leyin. T.m bu i.lemleri internet eri.imi olmadan yapabilirsiniz.".. },.. "extname": {.. "message": "Google Dok.manlar .evrimd...".. },.. "learnmore": {.. "message": "Daha Fazla Bilgi".. },.. "popuphelptext": {.. "message": ".nternet ba.lant.n.z olsun veya olmas.n, nerede olursan.z olun yaz.n, d.zenl

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\uk\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1333
Entropy (8bit):	4.686760246306605
Encrypted:	false
SSDEEP:	24:1HAk9oxkm6H4KyGGB9GeGoxPEYMQhpARezTtHUN97zlwpEH7:VKU1GB9GeBc/OARETt+9/WCb
MD5:	970963C25C2CEF16BB6F60952E103105
SHA1:	BBDDACFEEE60E22FB1C130E1EE8EFDA75EA600AA
SHA-256:	9FA26FF09F6ACDE2457ED366C0C4124B6CAC1435D0C4FD8A870A0C090417DA19
SHA-512:	1BED9FE4D4ADEED3D0BC8258D9F2FD72C6A177C713C3B03FC6F5452B6D6C2CB2236C54EA972ECE7DBFD756733805EB2352CAE44BAB93AA8EA73BB80460349504
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "........".. },.. "explanationofflinedisabled": {.. "message": ".. . ...... ....... ... ............. Google ........... ... ......... . .........., ......... . ............ .. ........ ........ Google .......... . ......... ......-............., .... ...... . .......".. },.. "explanationofflineenabled": {.. "message": ".. . ...... ......, ..... ... .... ...... .......... ........ ..... ... .......... .....".. },.. "extdesc": {.. "message": "........., ......... . ............ ........., .......... ....... .. ........... ... ....... .. ..........".. },.. "extname": {.. "message": "Goo

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\ur\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1263
Entropy (8bit):	4.861856182762435
Encrypted:	false
SSDEEP:	24:1HAl3zNEUhN3mNjkSIkmdNpInuUVsqNtOJDhY8Dvp/IkLzx:e3uUhQKvkmd+s11Lp1F
MD5:	8B4DF6A9281333341C939C244DDB7648
SHA1:	382C80CAD29BCF8AAF52D9A24CA5A6ECF1941C6B
SHA-256:	5DA836224D0F3A96F1C5EB5063061AAD837CA9FC6FED15D19C66DA25CF56F8AC
SHA-512:	FA1C015D4EA349F73468C78FDB798D462EEF0F73C1A762298798E19F825E968383B0A133E0A2CE3B3DF95F24C71992235BFC872C69DC98166B44D3183BF8A9E5
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "... ......".. },.. "explanationofflinedisabled": {.. "message": ".. .. .... .... Google Docs .. .... ....... ..... ....... .... ..... .... ... .. .. ....... .. ..... ... .. Google Docs ... ... .. ....... .. ..... ... .. .... ...... ..... .. .. .....".. },.. "explanationofflineenabled": {.. "message": ".. .. .... ... .... .. ... ... ...... ..... ... ..... .. .... ... .. ... ..... ... .... ....".. },.. "extdesc": {.. "message": ".......... .......... ... ....... . .... ... ....... .. ..... .. .... ...... ..... .... ... ..... .......".. },.. "extname": {.. "message": "Google Docs .. ....".. },.. "learnmore": {..

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\vi\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1074
Entropy (8bit):	5.062722522759407
Encrypted:	false
SSDEEP:	24:1HAhBBLEBOVUSUfE+eDFmj4BLErQ7e2CIer32KIxqJ/HtNiE5nIGeU+KCVT:qHCDheDFmjDQgX32/S/hI9jh
MD5:	773A3B9E708D052D6CBAA6D55C8A5438
SHA1:	5617235844595D5C73961A2C0A4AC66D8EA5F90F
SHA-256:	597C5F32BC999746BC5C2ED1E5115C523B7EB1D33F81B042203E1C1DF4BBCAFE
SHA-512:	E5F906729E38B23F64D7F146FA48F3ABF6BAED9AAFC0E5F6FA59F369DC47829DBB4BFA94448580BD61A34E844241F590B8D7AEC7091861105D8EBB2590A3BEE9
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "T.O M.I".. },.. "explanationofflinedisabled": {.. "message": "B.n .ang ngo.i tuy.n. .. s. d.ng Google T.i li.u m. kh.ng c.n k.t n.i Internet, .i ..n c.i ..t tr.n trang ch. c.a Google T.i li.u v. b.t ..ng b. h.a ngo.i tuy.n v.o l.n ti.p theo b.n ...c k.t n.i v.i m.ng Internet.".. },.. "explanationofflineenabled": {.. "message": "B.n .ang ngo.i tuy.n, tuy nhi.n b.n v.n c. th. ch.nh s.a c.c t.p c. s.n ho.c t.o c.c t.p m.i.".. },.. "extdesc": {.. "message": "Ch.nh s.a, t.o v. xem t.i li.u, b.ng t.nh v. b.n tr.nh b.y . t.t c. m. kh.ng c.n truy c.p Internet.".. },.. "extname": {.. "message": "Google T.i li.u ngo.i tuy.n".. },.. "learnmore": {.. "message": "Ti.m hi..u th.m".. },.. "popuphelptext": {.. "message": "Vi.t, ch.nh s.a v. c.ng t.c

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\zh_CN\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	879
Entropy (8bit):	5.7905809868505544
Encrypted:	false
SSDEEP:	12:1HASvgteHCBxNtSBXuetOrgIkA2OrWjMOCBxetSBXK01fg/SOiCSUEQ27e1CBhUj:1HAFsHtrIkA2jqldI/727eggcLk9pf
MD5:	3E76788E17E62FB49FB5ED5F4E7A3DCE
SHA1:	6904FFA0D13D45496F126E58C886C35366EFCC11
SHA-256:	E72D0BB08CC3005556E95A498BD737E7783BB0E56DCC202E7D27A536616F5EE0
SHA-512:	F431E570AB5973C54275C9EEF05E49E6FE2D6C17000F98D672DD31F9A1FAD98E0D50B5B0B9CF85D5BBD3B655B93FD69768C194C8C1688CB962AA75FF1AF9BDB6
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": "..".. },.. "explanationofflinedisabled": {.. "message": "....................... Google ................ Google ....................".. },.. "explanationofflineenabled": {.. "message": ".............................".. },.. "extdesc": {.. "message": "...................... - ........".. },.. "extname": {.. "message": "Google .......".. },.. "learnmore": {.. "message": "....".. },.. "popuphelptext": {.. "message": "...............................".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\zh_HK\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1205
Entropy (8bit):	4.50367724745418
Encrypted:	false
SSDEEP:	24:YWvqB0f7Cr591AhI9Ah8U1F4rw4wtB9G976d6BY9scKUrPoAhNehIrI/uIXS1:YWvl7Cr5JHrw7k7u6BY9trW+rHR
MD5:	524E1B2A370D0E71342D05DDE3D3E774
SHA1:	60D1F59714F9E8F90EF34138D33FBFF6DD39E85A
SHA-256:	30F44CFAD052D73D86D12FA20CFC111563A3B2E4523B43F7D66D934BA8DACE91
SHA-512:	D2225CF2FA94B01A7B0F70A933E1FDCF69CDF92F76C424CE4F9FCC86510C481C9A87A7B71F907C836CBB1CA41A8BEBBD08F68DBC90710984CA738D293F905272
Malicious:	false
Reputation:	low
Preview:	{"createnew":{"message":"\u5efa\u7acb\u65b0\u9805\u76ee"},"explanationofflinedisabled":{"message":"\u60a8\u8655\u65bc\u96e2\u7dda\u72c0\u614b\u3002\u5982\u8981\u5728\u6c92\u6709\u4e92\u806f\u7db2\u9023\u7dda\u7684\u60c5\u6cc1\u4e0b\u4f7f\u7528\u300cGoogle \u6587\u4ef6\u300d\uff0c\u8acb\u524d\u5f80\u300cGoogle \u6587\u4ef6\u300d\u9996\u9801\u7684\u8a2d\u5b9a\uff0c\u4e26\u5728\u4e0b\u6b21\u9023\u63a5\u4e92\u806f\u7db2\u6642\u958b\u555f\u96e2\u7dda\u540c\u6b65\u529f\u80fd\u3002"},"explanationofflineenabled":{"message":"\u60a8\u8655\u65bc\u96e2\u7dda\u72c0\u614b\uff0c\u4f46\u60a8\u4ecd\u53ef\u4ee5\u7de8\u8f2f\u53ef\u7528\u6a94\u6848\u6216\u5efa\u7acb\u65b0\u6a94\u6848\u3002"},"extdesc":{"message":"\u7de8\u8f2f\u3001\u5efa\u7acb\u53ca\u67e5\u770b\u60a8\u7684\u6587\u4ef6\u3001\u8a66\u7b97\u8868\u548c\u7c21\u5831\uff0c\u5b8c\u5168\u4e0d\u9700\u4f7f\u7528\u4e92\u806f\u7db2\u3002"},"extname":{"message":"\u300cGoogle \u6587\u4ef6\u300d\u96e2\u7dda\u7248"},"learnmore":{"message":"\u77ad\u89e3\u8a

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\zh_TW\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	843
Entropy (8bit):	5.76581227215314
Encrypted:	false
SSDEEP:	12:1HASvgmaCBxNtBtA24ZOuAeOEHGOCBxetBtMHQIJECSUnLRNocPNy6CBhU5OGg1O:1HAEfQkekYyLvRmcPGgzcL2kx5U
MD5:	0E60627ACFD18F44D4DF469D8DCE6D30
SHA1:	2BFCB0C3CA6B50D69AD5745FA692BAF0708DB4B5
SHA-256:	F94C6DDEDF067642A1AF18D629778EC65E02B6097A8532B7E794502747AEB008
SHA-512:	6FF517EED4381A61075AC7C8E80C73FAFAE7C0583BA4FA7F4951DD7DBE183C253702DEE44B3276EFC566F295DAC1592271BE5E0AC0C7D2C9F6062054418C7C27
Malicious:	false
Reputation:	low
Preview:	{.. "createnew": {.. "message": ".....".. },.. "explanationofflinedisabled": {.. "message": ".................. Google ................ Google .................".. },.. "explanationofflineenabled": {.. "message": ".........................".. },.. "extdesc": {.. "message": ".............................".. },.. "extname": {.. "message": "Google .....".. },.. "learnmore": {.. "message": "....".. },.. "popuphelptext": {.. "message": "................................".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_locales\zu\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	912
Entropy (8bit):	4.65963951143349
Encrypted:	false
SSDEEP:	24:YlMBKqLnI7EgBLWFQbTQIF+j4h3OadMJzLWnCieqgwLeOvKrCRPE:YlMBKqjI7EQOQb0Pj4heOWqeyaBrMPE
MD5:	71F916A64F98B6D1B5D1F62D297FDEC1
SHA1:	9386E8F723C3F42DA5B3F7E0B9970D2664EA0BAA
SHA-256:	EC78DDD4CCF32B5D76EC701A20167C3FBD146D79A505E4FB0421FC1E5CF4AA63
SHA-512:	30FA4E02120AF1BE6E7CC7DBB15FAE5D50825BD6B3CF28EF21D2F2E217B14AF5B76CFCC165685C3EDC1D09536BFCB10CA07E1E2CC0DA891CEC05E19394AD7144
Malicious:	false
Reputation:	low
Preview:	{"createnew":{"message":"DALA ENTSHA"},"explanationofflinedisabled":{"message":"Awuxhunyiwe ku-inthanethi. Ukuze usebenzise i-Google Amadokhumenti ngaphandle koxhumano lwe-inthanethi, iya kokuthi izilungiselelo ekhasini lasekhaya le-Google Amadokhumenti bese uvula ukuvumelanisa okungaxhunyiwe ku-inthanethi ngesikhathi esilandelayo lapho uxhunywe ku-inthanethi."},"explanationofflineenabled":{"message":"Awuxhunyiwe ku-inthanethi, kodwa usangakwazi ukuhlela amafayela atholakalayo noma udale amasha."},"extdesc":{"message":"Hlela, dala, futhi ubuke amadokhumenti akho, amaspredishithi, namaphrezentheshini \u2014 konke ngaphandle kokufinyelela kwe-inthanethi."},"extname":{"message":"I-Google Amadokhumenti engaxhumekile ku-intanethi"},"learnmore":{"message":"Funda kabanzi"},"popuphelptext":{"message":"Bhala, hlela, futhi hlanganyela noma yikuphi lapho okhona, unalo noma ungenalo uxhumano lwe-inthanethi."}}.

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\_metadata\verified_contents.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	18518
Entropy (8bit):	5.7097772112154646
Encrypted:	false
SSDEEP:	384:cLjrY6QDAwrlbs3jiD1DisLSFqwAqmq9lZjo:2jrSHbMjidLSFxA+lZ8
MD5:	2DC758B77A5496DAB488A0ABD71D4893
SHA1:	C0F2B401A8E68FB6F2C8D6CC8AF2167188C92D92
SHA-256:	D05B97CFF25B0DC4DE9DDABE8A08671BDDC64F0ADFE549BFE53B0C9801C8FBDB
SHA-512:	1BB43A1B470ECA32BF0266E5535B1791F473E2715E16D6D6139F5C359B8BD6E5981FE7DF6CBFA51EAE68C6B5F95A139F59C0ECCB986AEA37F634D722B4CF8546
Malicious:	false
Reputation:	low
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\dasherSettingSchema.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	854
Entropy (8bit):	4.284628987131403
Encrypted:	false
SSDEEP:	12:ont+QByTwnnGNcMbyWM+Q9TZldnnnGGxlF/S0WOtUL0M0r:vOrGe4dDCVGOjWJ0nr
MD5:	4EC1DF2DA46182103D2FFC3B92D20CA5
SHA1:	FB9D1BA3710CF31A87165317C6EDC110E98994CE
SHA-256:	6C69CE0FE6FAB14F1990A320D704FEE362C175C00EB6C9224AA6F41108918CA6
SHA-512:	939D81E6A82B10FF73A35C931052D8D53D42D915E526665079EEB4820DF4D70F1C6AEBAB70B59519A0014A48514833FEFD687D5A3ED1B06482223A168292105D
Malicious:	false
Reputation:	low
Preview:	{. "type": "object",. "properties": {. "allowedDocsOfflineDomains": {. "type": "array",. "items": {. "type": "string". },. "title": "Allow users to enable Docs offline for the specified managed domains.",. "description": "Users on managed devices will be able to enable docs offline if they are part of the specified managed domains.". },. "autoEnabledDocsOfflineDomains": {. "type": "array",. "items": {. "type": "string". },. "title": "Auto enable Docs offline for the specified managed domains in certain eligible situations.",. "description": "Users on managed devices, in certain eligible situations, will be able to automatically access and edit recent files offline for the managed domains set in this property. They can still disable it from Drive settings.". }. }.}.

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\eventpage_bin_prod.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (3422)
Category:	dropped
Size (bytes):	82340
Entropy (8bit):	5.380000995741104
Encrypted:	false
SSDEEP:	1536:1HejtmLJVlfF5z4d+3CNOzcheJm39n3p1jWctudKRwbbwuL:tVIfczcMmhDBt+L
MD5:	4902A531B4D907B2B81AF35251CADF2C
SHA1:	7875EE813923CB16B0F0C4DE3C49C08C85CE52A1
SHA-256:	C3CE23C47225A594425A1290E49CED80FF9F3360D787767B6C45C80314FCF666
SHA-512:	A7B8E713F33B1155D8D45B8B635B318262EA21F3D0856FA0409ED6636F84CB9E38B78FB0E0296C3A253953FBFBF11FD68AF6C5EDB00A17A90A9129161CCDC7EE
Malicious:	true
Reputation:	low
Preview:	'use strict';function m(){return function(){}}var p;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var q=ca(this);function t(a,b){if(b)a:{var c=q;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}}.t("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,g){this.g=f;ba(this,"description",{configurable:!

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\manifest.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2397
Entropy (8bit):	5.423648641408232
Encrypted:	false
SSDEEP:	24:1HEZ4qW4VlELb/KxktGu7VwELb/s2QDkUpvdlmF1exy/Otj1TSVvs:W7WsaLTKQGuxTLT2Rv3mves/OPTSVk
MD5:	807FB975635CF94C90974AF09BAFE5DD
SHA1:	91CF6811EB772D863F003BA0239CCB3025EEDF76
SHA-256:	B05DD3371A32526FDDEE35B45762E86E58DD8FEE0E533B736D6F967EF85101B1
SHA-512:	F6D9AEEFC4E80BC7F091083C6162C8EB07DE5422991A4F006F6D81125320762A69075D9DBA11204BD7EB3AE3A49EC9A8A80194DFE50C092809D743ECEA9A0DC7
Malicious:	false
Reputation:	low
Preview:	{.. "author": {.. "email": "docs-hosted-app-own@google.com".. },.. "background": {.. "persistent": false,.. "scripts": [ "eventpage_bin_prod.js" ].. },.. "content_capabilities": {.. "matches": [ "https://docs.google.com/", "https://drive.google.com/", "https://drive-autopush.corp.google.com/", "https://drive-daily-0.corp.google.com/", "https://drive-daily-1.corp.google.com/", "https://drive-daily-2.corp.google.com/", "https://drive-daily-3.corp.google.com/", "https://drive-daily-4.corp.google.com/", "https://drive-daily-5.corp.google.com/", "https://drive-daily-6.corp.google.com/", "https://drive-preprod.corp.google.com/", "https://drive-staging.corp.google.com/" ],.. "permissions": [ "clipboardRead", "clipboardWrite", "unlimitedStorage" ].. },.. "content_security_policy": "script-src 'self'; object-src 'self'",.. "default_locale": "en_US",.. "description": "__MSG_extDesc__",.. "externally_connectable": {.. "matches": [ "htt

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\CRX_INSTALL\page_embed_script.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	291
Entropy (8bit):	4.644891151983713
Encrypted:	false
SSDEEP:	6:2LGX86tj66rU8j6D3bWq2un/XBtzHrH9Mnj63LK6M23:2Q8KVqb2u/Rt3OnjI
MD5:	EE9839F99DED6F38DC561DB846B51E80
SHA1:	DD2128A473C2FF47471400C81EFF416285DE606E
SHA-256:	06E08E421EB7F0FE7959D68E27D40A9146A54503090D95CFAC6F2FFD72A78769
SHA-512:	C8D77607F00CB8012CD056CE61CB77918EC43621270511303E09577F89CC57D4954E22E2C8C3FB1029AAE29F8142DAAE2E938CD5590AD0E5DE6DB1208AFEF874
Malicious:	true
Reputation:	low
Preview:	(function(){window._docs_chrome_extension_exists=!0;window._docs_chrome_extension_features_version=2;window._docs_chrome_extension_permissions="alarms clipboardRead clipboardWrite storage unlimitedStorage offscreen".split(" ");window._docs_chrome_extension_manifest_version=2;}).call(this);.

C:\Users\user\AppData\Local\Temp\scoped_dir1644_111727691\ecb707e8-477c-4566-940a-884d3b3c800a.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	91671
Entropy (8bit):	7.8774767243532695
Encrypted:	false
SSDEEP:	1536:B2Y2RUm46OClYKr5DXyzN0iFD8xPT4jobgdNhBKDyU4W3NrUeNWy4cSbJUl4yv:8L9prNyzFB8hGXnhouer/W0KJ+4i
MD5:	2BBD469CC894351258066DB2023D206B
SHA1:	3EF9EA3B62E43301B6287361B16AC01F5780AD35
SHA-256:	70CE55C69127635BCB579E1878C4C74F7707BD708CD57273E8B4891459A6A0EF
SHA-512:	421F3D78F5C132243B78C73FE7660BB3E045E83E30C0B3A2D6597E0C9E3C19DD4681491981E3C3A649C1E4E2A91BD982529234DA8DA1BFFB46651B74321E34D4
Malicious:	false
Reputation:	low
Preview:	Cr24....e"........0.."0....H.............0.........^...1"...w.g..t..2J.G1.)X4..=&.?[j,Lz..j.u.e[I.qBa/X...P.h..L.....2%3_o.......H.)'.=.e...?.......j..3UH.\|.X.M..u..s[...?$....F%....I....)..,-./.e5).f..O.q.^........9..(.._.ph2..^.YBPXf_8....h[.v...S.1`.#..5.SF.:f-.#.65.i..b.]9...y2.'....k[........V....h.[..9..?..R...a.y..x....P..o...Tc.<^.N..S.....c$j.jZ...t.A.3...H..._....Q.Sx.{7...<......wO.......%>..ZGs......K...&..ua#.>......E.a..2u;...\|.^yU........o......!.;7..E;.3.~..B......W.a!....O.q.z...yd...)3.6...f..?.B..G.......]'-.....[0Y0....H.=.....H.=....B..............r...2..+Y.I...k..bR.j5Sl..8.......H"i.-l..`.Q.{...F0D. ..O7..~.y.G..!s(........Faul.... .G..GZ.. <tS..28/22dlO.V...&...".>...........\|]s.<{._.........l...X".}.:.{...A`....y.{..y..v.=....d..\|-].k-.........4.O.......4myn.ij>...?.......?..87......Sy.R..k.U.kI.Z..........\|,.....[........(C=..[..t4..c....>....=..^.._.._P.......z.}).;.9>}./m,..Z..u...`.g6...P.....k

C:\Users\user\AppData\Local\Temp\scoped_dir1644_1162706228\608ce779-2184-40d4-9a77-cb05a5af39db.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	10987
Entropy (8bit):	7.9533289149420625
Encrypted:	false
SSDEEP:	192:BEhlw81PmHlmu6H0wbcosQxhTHGPJz4y4iqooeIfU+TEsegckOE7A4t:eP1+H8h0YNF3rGP+y4eIfUoEtkO+AA
MD5:	7AA0C0B17FEED14023C4FB189AA6072D
SHA1:	0B571B13F28AFCD96915108042BEB13A623A3CDA
SHA-256:	78AD07BCACBCB23C274D025F38746FF766FA4EBA41EE1AA68C238E329837DC09
SHA-512:	9C0E3D35EB32E8C1E907C6D1C45776235E31B979C8BE05767E6802186EDDB4D9EE337972A39E150DBE1C464E8BA391F401ABC69FB41700DA4E70E2EC624901E6
Malicious:	false
Reputation:	low
Preview:	Cr24..............0.."0....H.............0.........N.......E#......9e.u.q...VYY..@.+.C..k.O..bK.`..6.G..%.....3Z...e _.6....F..1p..K.Z......./ .3...OT..`..0...Y...FT..43.th.y...}....p.L...2S.&i.`..o...f.oH.....N..:..ijT.3.F{.0.,.f?'f.CQt;b_"Pc.. ..~S.I.c.8Z.;.....{G.a......k...>.`.o..%.$>;.....g........l....O.<. ]...U....E_.%=...N/`.^M^..<...t....g...z..^.H.Z.-....P.[F..@..`?.9X.%.. .7.}.Ul#.^....kZ.~n....N`..}S.V....$.co.....&..A/..?~aR.I..3S...`q5........AX....h.s.[h..`......3..._sQ...k.+....;..Jm.H.......k.-.<...%.?`.d7ti.p..D:.........0.."0....H.............0.........^SUd%Q.L].......Cl2o...\[.....'*...;R=....N.C5....d. .....J.C>u.kr..Y..syJC.XS.q..E.n?....(G.5..)2.G..!.M.SS.{..U....!.EE..M[.#qs.A.1...g)nQ.c..G....Bd..7... .O.BI..KXQ..4.d.K.0......g.....-p....Z.E{...M&.~n.TE7..{0....5.#.C+3.y)pd9.e..............U.:..R.....\|.0+....Z.......s.<.=e.pkS..>.b.)..M-%.......Oe.A.W.x]\|.4o....ij..c...La$.%.W.KU.A#.8....9..F}....?...

C:\Users\user\AppData\Local\Temp\scoped_dir1644_1162706228\CRX_INSTALL\_metadata\verified_contents.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1753
Entropy (8bit):	5.89155070833211
Encrypted:	false
SSDEEP:	48:Pxpr7Xka2NnDpfsfNI1Blg1JUgKm3LJ/JVQXSwxVWo:L3XwNfmKklvQC9o
MD5:	FA0103526BC8F137249060BAEA7EB334
SHA1:	D7CCC22E974F3EFA17E19532E257443A82290714
SHA-256:	D7B6CE9D8657F2E6D13B53B8315EC1BC278F6D9727486D838F7985C0CC699B9A
SHA-512:	F733913883F0D3998B272E400CA6AA8A153D328CC6C36EAFA76E3E8ECECAA6CF89B37E256A015959291D7BE3A2AF9F785B25F5707FFD9CEC7C8DD33DC8BF7E05
Malicious:	false
Reputation:	low
Preview:	[.. {.. "description": "treehash per file",.. "signed_content": {.. "payload": "eyJpdGVtX2lkIjoiam1qZmxnanBjcGVwZWFmbW1nZHBma29na2doY3BpaGEiLCJpdGVtX3ZlcnNpb24iOiIxLjIuMCIsInByb3RvY29sX3ZlcnNpb24iOjEsImNvbnRlbnRfaGFzaGVzIjpbeyJmb3JtYXQiOiJ0cmVlaGFzaCIsImRpZ2VzdCI6InNoYTI1NiIsImJsb2NrX3NpemUiOjQwOTYsImhhc2hfYmxvY2tfc2l6ZSI6NDA5NiwiZmlsZXMiOlt7InBhdGgiOiJjb250ZW50LmpzIiwicm9vdF9oYXNoIjoiWW5VVklaVC1qbnRad3E1NFhSMTNrUFJDVktncDI1a3VFRmU4NFNUVkNNcyJ9LHsicGF0aCI6ImNvbnRlbnRfbmV3LmpzIiwicm9vdF9oYXNoIjoieUI4cVJZVmQ1cjdDRk5odXFqbkYydVhGZTNOQVF0enk5azh3bW5qMjZYVSJ9LHsicGF0aCI6Im1hbmlmZXN0Lmpzb24iLCJyb290X2hhc2giOiJrRS1vVXlDd1otazB5S3JpdkYtbGZCbWQ2N2tFSm9CWE05TlNhbHRERklJIn1dfV19",.. "signatures": [.. {.. "header": {.. "kid": "publisher".. },.. "protected": "eyJhbGciOiJSUzI1NiJ9",.. "signature": "GtI6tGWtTWPfGtw1EiVP9GA4apFSQ733QH7kz_iNOxGMu4rhnGN5fWId7_wPzB0guYbp4zMhae8iGLy6ttZxH5ZASMjchFNF_-0NJUSq30B9sH45bpmgpbVxdWG0hJ095odmP

C:\Users\user\AppData\Local\Temp\scoped_dir1644_1162706228\CRX_INSTALL\content.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Unicode text, UTF-8 text, with very long lines (7633), with no line terminators
Category:	dropped
Size (bytes):	9417
Entropy (8bit):	6.143882972177462
Encrypted:	false
SSDEEP:	192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zoc/ZBMCg:+ThBVq3npozftROQIyVfjRZGB365Ey9F
MD5:	31A2B4AD6ADE485A9C85C5D8BA0B1BB5
SHA1:	5AD37BF6E5ADF2BE8F8C841C44E191D2645F6AE0
SHA-256:	607F1603E5A06EF8F1FF09A93EDF963FD7CEB8EA587D479FAB140E15713E1D60
SHA-512:	0D223571E72582F16168ACE8D4CAE26F286C7D25906C74A91DA1642294BD43DE90DC21706DFD1F08A66B2663E5EF2142104321689CDE09AE226913672E69AAF6
Malicious:	true
Reputation:	low
Preview:	(()=>{"use strict";var e={1:(e,o)=>{Object.defineProperty(o,"__esModule",{value:!0}),o.newCwsPromotionalButtonCta=o.chromeToEdgeCwsButtonCtaMapping=void 0,o.chromeToEdgeCwsButtonCtaMapping={"...... ... Chrome":"...... ....","........ .. Chrome":".....",........:"..........",".......... .. Chrome":"..........","Chrome . .....":"...","Chrome .... ....":"....","Afegeix a Chrome":"Obt.n","Suprimeix de Chrome":"Suprimeix","P.idat do Chromu":"Z.skat","Odstranit z Chromu":"Odebrat","F.j til Chrome":"F.","Fjern fra Chrome":"Fjerne",Hinzuf.gen:"Abrufen","Aus Chrome entfernen":"Entfernen","Add to Chrome":"Get","Remove from Chrome":"Remove","A.adir a Chrome":"Obtener",Desinstalar:"Quitar","Agregar a Chrome":"Obtener","Eliminar de Chrome":"Quitar","Lisa Chrome'i":"Hangi","Chrome'ist eemaldamine":"Eemalda",.......H:"........","......... ... .. Chr

C:\Users\user\AppData\Local\Temp\scoped_dir1644_1162706228\CRX_INSTALL\content_new.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Unicode text, UTF-8 text, with very long lines (7986), with no line terminators
Category:	dropped
Size (bytes):	9770
Entropy (8bit):	6.152063423880213
Encrypted:	false
SSDEEP:	192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3z94o2bpEH:+ThBVq3npozftROQIyVfjRZGB365Ey9U
MD5:	5D88A17EB2F78ED5F4C766A9601E4066
SHA1:	03915AB1933DC1C2FDBF7240AEA75A0DE554D279
SHA-256:	177D0942524E20C6C867CCF3FB749FF444A6F0638955D7F4E819BB7CEFC14C79
SHA-512:	8C4759119A3A307F4628A8D104CC6C4B1C1BA6DBAA30ED26097D4A615872A0FD112A31077C25FCB7587E49A1B446E2B22C7F47D426BB1F64522A53F59E0347F8
Malicious:	true
Reputation:	low
Preview:	(()=>{"use strict";var e={1:(e,o)=>{Object.defineProperty(o,"__esModule",{value:!0}),o.newCwsPromotionalButtonCta=o.chromeToEdgeCwsButtonCtaMapping=void 0,o.chromeToEdgeCwsButtonCtaMapping={"...... ... Chrome":"...... ....","........ .. Chrome":".....",........:"..........",".......... .. Chrome":"..........","Chrome . .....":"...","Chrome .... ....":"....","Afegeix a Chrome":"Obt.n","Suprimeix de Chrome":"Suprimeix","P.idat do Chromu":"Z.skat","Odstranit z Chromu":"Odebrat","F.j til Chrome":"F.","Fjern fra Chrome":"Fjerne",Hinzuf.gen:"Abrufen","Aus Chrome entfernen":"Entfernen","Add to Chrome":"Get","Remove from Chrome":"Remove","A.adir a Chrome":"Obtener",Desinstalar:"Quitar","Agregar a Chrome":"Obtener","Eliminar de Chrome":"Quitar","Lisa Chrome'i":"Hangi","Chrome'ist eemaldamine":"Eemalda",.......H:"........","......... ... .. Chr

C:\Users\user\AppData\Local\Temp\scoped_dir1644_1162706228\CRX_INSTALL\manifest.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	962
Entropy (8bit):	5.698155584916808
Encrypted:	false
SSDEEP:	24:1Hg9+D3DRnbuF2+sUrzUu+Y9VwE+Fg41T1zn:NBqY+6E+F7Jzn
MD5:	7B5D6D911B4201D67D752664C7FA1E2D
SHA1:	D6E04EF6F1BCDAF38CB8F8313D5CB6645EF8E496
SHA-256:	F4797B137EF6F80F2C9C41F45880064163C86D22597C1015B0FF801766B9957C
SHA-512:	08D739B7FA850B32ABDB6731D8F6D4A171A6CEA5A1C8706FA8EB479DE1616CE32E17970EB40968124D29477507A97ED50CA41A98623B355384CFFDC86BCAB25A
Malicious:	false
Reputation:	low
Preview:	{.. "content_scripts": [ {.. "js": [ "content.js" ],.. "matches": [ "https://chrome.google.com/webstore/" ].. }, {.. "js": [ "content_new.js" ],.. "matches": [ "https://chromewebstore.google.com/" ].. } ],.. "description": "Edge relevant text changes on select websites to improve user experience and precisely surfaces the action they want to take.",.. "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu06p2Mjoy6yJDUUjCe8Hnqvtmjll73XqcbylxFZZWe+MCEAEK+1D0Nxrp0+IuWJL02CU3jbuR5KrJYoezA36M1oSGY5lIF/9NhXWEx5GrosxcBjxqEsdWv/eDoOOEbIvIO0ziMv7T1SUnmAA07wwq8DXWYuwlkZU/PA0Mxx0aNZ5+QyMfYqRmMpwxkwPG8gyU7kmacxgCY1v7PmmZo1vSIEOBYrxl064w5Q6s/dpalSJM9qeRnvRMLsszGY/J2bjQ1F0O2JfIlBjCOUg/89+U8ZJ1mObOFrKO4um8QnenXtH0WGmsvb5qBNrvbWNPuFgr2+w5JYlpSQ+O8zUCb8QZwIDAQAB",.. "manifest_version": 3,.. "name": "Edge relevant text changes",.. "update_url": "https://edge.microsoft.com/extensionwebstorebase/v1/crx",.. "version": "1.2.0"..}..

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jan 17 16:05:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9857039706762576
Encrypted:	false
SSDEEP:	48:8nPdUOT0KjRFHZidAKZdA1FehwiZUklqehzxy+3:8nbfp2xy
MD5:	7FDF02CAF00993F9D6CA753291CFCCF0
SHA1:	6EFB67309D9BC627AB48D2D5BA8C19401E2B10D1
SHA-256:	9E3CB741D827F13D3196806EBB39009F53CB063E7C487E1B4408EDCF0542C075
SHA-512:	3D3C96627B71CA90F0D0B5598BE3FF9F4E1B980AEA4977FB200E2BB0D9C9B26AFE7270AFC36A687602F4A12293E15FB308DD162783151BC4490DF7D3889181D4
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......fgI..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I1X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V1X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V1X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V1X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V1X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............P.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jan 17 16:05:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.998582120356657
Encrypted:	false
SSDEEP:	48:8gdUOT0KjRFHZidAKZdA1seh/iZUkAQkqehmxy+2:8Sff9Qhxy
MD5:	1B50353EB7223F895BAB66C6A7B8D05D
SHA1:	4C784E9FB879DDB2B854726379FD6C3187DE83C9
SHA-256:	4C135E8EEEF083F1ADFBD0B7F728D87FE29851811F9CA62B829C8BF50FE5D150
SHA-512:	42213084931D6D29039A34EEDBBBC3CB8826293D5B9A6C05A225FCE292A0A79C6A367C1A196CD267CB56833EEDE73E795147371F022AE23D574099BCF6B11656
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....xqfgI..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I1X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V1X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V1X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V1X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V1X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............P.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.010057598111694
Encrypted:	false
SSDEEP:	48:8kdUOT0KjRAHZidAKZdA14meh7sFiZUkmgqeh7sExy+BX:82f4nKxy
MD5:	CDEA1A54173343F45A835B4AFDE01CD9
SHA1:	345A16952D9546E34FFEA7F67656303E380ECE14
SHA-256:	996E12CCAA5A9AFF7ED089245848CBCB898A65DFC5E7C6BE4F16DB4F902938DB
SHA-512:	1656C4B3B8472D367E9CA8EE92B800BF4F64645F89E7AFCF7DEFD237ACCD91A9EB06546BC3E3F8E13BA8B0FD9A6BADDD69E1B7A88B0DA8DF49AA18A0592E489C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I1X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V1X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V1X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V1X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............P.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jan 17 16:05:40 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.994902205581262
Encrypted:	false
SSDEEP:	48:8HIdUOT0KjRFHZidAKZdA1TehDiZUkwqehixy+R:8HKfs8xy
MD5:	612DFD0962E18562A3CE80394CC40B6A
SHA1:	60C6FDDCB76369C1C981AB8CBCE2C0DEA901CAF1
SHA-256:	CEC7C858D4DD790FD1FA1E38AC417F39214D2C41E03074351A5FFFE45DC6D243
SHA-512:	00FD54D813C354C7E9389B21591A25C559FA87B2DEC9B18D90B08CF6A643B98DA2036359C5406CC0C57C16E9BE7575984193DD21B31CF5A840AA18D52D82C2E6
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....6kfgI..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I1X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V1X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V1X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V1X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V1X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............P.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jan 17 16:05:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.985921352108371
Encrypted:	false
SSDEEP:	48:8zdUOT0KjRFHZidAKZdA1dehBiZUk1W1qehYxy+C:8Pf894xy
MD5:	12607EF9FB5FDB68223C947BB8234614
SHA1:	EB35F4F2F35E6D80B1654AFC3A66B5CCBA2EE988
SHA-256:	7192191704060EF2B34BECD39BA8B104D0BE2AEB969093F583DE592D9E168EBB
SHA-512:	9CEE2D4507C94F6542739308E1DCD9AC69DB5DF438583653AA192DD4C4BA52161A8314597439A80FEA31274AE427EA206FDC6218D9FD2B1CB3C10B2FED29A38C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....5.zfgI..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I1X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V1X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V1X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V1X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V1X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............P.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jan 17 16:05:40 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.997785301404234
Encrypted:	false
SSDEEP:	48:8adUOT0KjRFHZidAKZdA1duTeehOuTbbiZUk5OjqehOuTbKxy+yT+:8gfOTfTbxWOvTbKxy7T
MD5:	218C2C7434547FE5C1F72A6CF1B2F64F
SHA1:	64517F093A79CDA7C16C471B647DE0B4EECAC2DF
SHA-256:	AE6FF7E76B0D82C59EBF3B8AB902DDFEA0602DCD9A5B5D964864EEF2FC63B4E3
SHA-512:	C7BAD1C51DA2689D93A803B29CA4CB68CBFF81B47E8279083906F8ABCEBBCE511345D7E87C5D8593505D3A050B6932CB11E04F6E6B2A271F0BE9E838E809AA83
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......`fgI..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I1X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V1X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V1X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V1X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V1X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............P.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 578

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65527), with no line terminators
Category:	downloaded
Size (bytes):	112096
Entropy (8bit):	5.547242736535998
Encrypted:	false
SSDEEP:	1536:kn38OlwppHzffa940IxmCh3n2Dq9UyVlSZa0XseTO8ILAM+VGn0N75r23JoHc+5C:QwU43Abk2sWBiWE3Z/
MD5:	06A283A400AF62ECAF7C74ECBB4F28A3
SHA1:	0BB13F73A1C30DF5163C0F891B2887ABF03FD1C0
SHA-256:	88E8569F4E9983F93EFB79961168B53D6DCF12D5E870D9BA7DFB5BD0FDE87743
SHA-512:	F23D59255A10ED3ED72C2D58C58EA90AAB65343A0CA2569D8405663133E6F9AE5BF01F4C5E8863725E7D7C1648E781196FB919C4F8A71DF2D30D4F91E02D4F0C
Malicious:	false
Reputation:	low
URL:	https://get.adobe.com/reader/b4869b6f/2769.js
Preview:	"use strict";(self.webpackChunk_name_=self.webpackChunk_name_\|\|[]).push([[2769],{2769:(e,t,n)=>{n.d(t,{Z:()=>ge});var u=n(7294),r=n(5697),a=n.n(r),o=n(3379),l=n.n(o),c=n(7795),i=n.n(c),s=n(569),d=n.n(s),t=n(3565),r=n.n(t),o=n(9216),c=n.n(o),s=n(4589),t=n.n(s),o=n(6879),s={};s.styleTagTransform=t(),s.setAttributes=r(),s.insert=d().bind(null,"head"),s.domAPI=i(),s.insertStyleElement=c();l()(o.Z,s);function m(e){return e=e.children,u.createElement(p,{children:e})}const f=o.Z&&o.Z.locals?o.Z.locals:void 0,p=function(e){e=e.children;return u.createElement("div",{className:"container-fluid ".concat(f.section)},e)};var g=n(2728),E=n(4165),s=n(4450),o={};o.styleTagTransform=t(),o.setAttributes=r(),o.insert=d().bind(null,"head"),o.domAPI=i(),o.insertStyleElement=c();l()(s.Z,o);const h=s.Z&&s.Z.locals?s.Z.locals:void 0;function v(e){var t=e.children,n=e.step,r=e.hideCompleteFooter,a=e.hideFooterDetails,o=e.preinstalled,l=e.exitcode,e=e.page;return u.createElement("div",{className:3!==n?"".concat

Chrome Cache Entry: 579

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 21, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	517
Entropy (8bit):	7.343287434428756
Encrypted:	false
SSDEEP:	12:6v/7uHRtDgQED/Tan+7XtOVq9gd2GFMzsqDS3oLdIsZgUuVzGimJnpz:PXdn+ztOkgdpCGIOEgUuZ6nl
MD5:	5E89D9D677F5070DDBF94B247513B5D7
SHA1:	D6939DC454A9B097BD919F7111936482C6A38238
SHA-256:	1841062FC982D09113EF8C1F44416ADC93F683D11F928AF09F18A33249ECAD88
SHA-512:	CA8F0C36617EF1D00F51FE0C149FDAED540C93F2C9FE4E957F68AD9D38A7B6D02524588F08D5D43E3C0D8B1B2F37A64D8F6A09A502010CCE77D0DE1A5FAB463F
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcQWdsx4aZ4j5_gJZtXRTQ6q7GJowFPjbEGGzl7Oub4&s=10
Preview:	.PNG........IHDR...@.................PLTE..............#o.&p..............o....mBf..F..3u.B}g...0t.N..)q9`.......S...;z..i................]x.(U............k..by..,..d..........Iv........[.....$IDAT8...r.0.E..6.. v..Rh#Z.....[.tW.E..L..g.k.......I..%.....T...0F.'.R".#q.4......`.$..x]k...>.X..'.+6.-..1.>r..#l.....^V..N..5.V .._k...LM3O\|Zl.W..=8.F..Nkc....V.9..n...5y.q.,&.M1J.A....6.......@p.M.F....c4@.I...Nk..\|(R..B.\|J$d%.O...\|..K....l.......p.P5..y....dY. .n.<w.5...}......l......IEND.B`.

Chrome Cache Entry: 580

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	153
Entropy (8bit):	4.712474687360171
Encrypted:	false
SSDEEP:	3:Vw/QUKUIKWWrZITwwBHsLpYJWriFGWjLwWkzXFETH1u4:Vw4UHm1T5BHsL2YriFGAwWeXFEL13
MD5:	389730792AF64610EF45D0DA75DBBB0A
SHA1:	B76FB8D6D382AC9F36617A57CAAE3918B477AB4B
SHA-256:	B1645A92D91C6ED41FFA7AAF8B314A54B55BE9E5BE0B865B944732683411795F
SHA-512:	A7CB7A93AC77EA3D82D391A59FDEA673C21997F010B7A9537A7EDF88BAFA552812F174E586CD5C1D12543EB0A1266E5DDC556A210E4823C64683C6416CD63CBF
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=http%3Alivespoints.com%2Fsso.dsv.com&oit=3&cp=5&pgcl=4&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["http:livespoints.com/sso.dsv.com",[],[],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggesttype":[],"google:verbatimrelevance":851}]

Chrome Cache Entry: 581

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2231)
Category:	downloaded
Size (bytes):	2236
Entropy (8bit):	5.901976611692196
Encrypted:	false
SSDEEP:	48:23yzIqh4KlgTN5Ww9km8kBxELM5bBIrlRwOgBGBxJzh2Q8wuKBFE/MmjfQV+:2CzIujlk9z8bm1I/wOXxJVrFU/1jfQw
MD5:	CF2811F060372FDCDE50B39C88A6A3C6
SHA1:	A9A6D3789C60BF1B199F6B0071772696E74D2232
SHA-256:	67CD56D20B41AC4DCE552DE55795838F035A7FAD7E46B08F54133A5E5C1079B1
SHA-512:	71ED7BA43460F77FA156569C14B4BF5458E978211627D6EF986F916631F81340A27105F9AF57D9478CEA1F11BC5283C8A105385F7B526C283D18D2BBD3E55425
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=w&oit=1&cp=1&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["w",["weather","wordle","weather network","walmart","westjet","whatsapp","weather vancouver","walmart canada","word","wikipedia"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestdetail":[{},{"google:entityinfo":"Cg0vZy8xMXNtY2owNmN0Eg5XZWItYmFzZWQgZ2FtZTJkaHR0cHM6Ly9lbmNyeXB0ZWQtdGJuMC5nc3RhdGljLmNvbS9pbWFnZXM/cT10Ym46QU5kOUdjVDdiZlJCd1RxUzMtSy0wSFpmOHRyaWVva0xhZmN6R2lWTTIyYWxFMUkmcz0xMDoGV29yZGxlSgcjOGI3NTIyUjNnc19zc3A9ZUp6ajR0VlAxemMwTE01TnpqSXdTeTR4WVBSaUs4OHZTc2xKQlFCUzhBYzNwBA\u003d\u003d"},{"google:entityinfo":"CgkvbS8wNGR4d3YSElRlbGV2aXNpb24gY2hhbm5lbDJkaHR0cHM6Ly9lbmNyeXB0ZWQtdGJuMC5nc3RhdGljLmNvbS9pbWFnZXM/cT10Ym46QU5kOUdjU1ZoQWYtNXBJd25Nbm0ya00tcWR5bTFYdlpxMWtDMzVUTjQtSGdMSnMmcz0xMDoTVGhlIFdlYXRoZXIgTmV0d29ya0oHIzAyMzM3NVI/Z3Nfc3NwPWVKemo0dFRQMVRjd1Nha29MMU5nTkdCMFlQRGlMMDlOTE1sSUxWTElTeTBwenlfS0JnQ1Z0d29ScBc\u003d"},{"google:entityinfo":"CggvbS8wODQxdhIUUmV0YWlsZXIgY29ycG9yYXRpb24yZGh0dHBzOi8vZW5jcnlwdGVkLXRibjAuZ3N0YXRp

Chrome Cache Entry: 582

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (795)
Category:	downloaded
Size (bytes):	800
Entropy (8bit):	5.1454119795300235
Encrypted:	false
SSDEEP:	24:0gDNIkESvFjYTBHslgT9lCuABuoB7HHHHHHHYqmffffffo:Zk+FkTKlgZ01BuSEqmffffffo
MD5:	C3E4E22455B790E8FB1632B25A1EE786
SHA1:	73D951E6BFED072A78317A24ECD6E823F15204A9
SHA-256:	E81923F868625F1FDD86693004C472270D6929288524D0688CF1DC560C420530
SHA-512:	F3DB436239B4327E7F862565557620D16C676BB22E5CE184A32156AF5C2B35CB82D3664FEEA81D6DFF4E31A7E1C184C7F15C3E889093943C3C9727CC64713B5A
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["",["adam sandler spaceman trailer","carrols restaurant group","tampa bay lightning gasparilla jersey","nvidia geforce rtx 4070 super","eddie sheerr","one piece chapter 1104 spoilers twitter","rideau canal ice skating","sean strickland ufc 297"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u003d","google:suggestdetail":[{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002}],"google:suggestrelevance":[1257,1256,1255,1254,1253,1252,1251,1250],"google:suggestsubtypes":[[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362]],"google:suggesttype":["QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY"]}]

Chrome Cache Entry: 583

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	139
Entropy (8bit):	4.6808843479944
Encrypted:	false
SSDEEP:	3:VwiQUKUIHJtwwBHsLpHbGWjLwWkzXFETH1u4:VwijH6Jt5BHsLRGAwWeXFEL13
MD5:	F457B9B9CC1B14DCA51BD0FA436BBD65
SHA1:	B72163D8FA7126CD8A214E3771CB37C723BAFF53
SHA-256:	36C9B8A25DB98E32F37EB1D0CAA9817875FD203E58EDB19AF7713BEF28E923EF
SHA-512:	857B5FE52122E5EF34E193F3C1242D82B20BAFF54E92C0591342CFFACB3E16DF7C7F300F6DECAC5D0BB98DCC8F7194A40B446A61BFB9E3165263D8B5F17436A0
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=www.livespoints.com&oit=3&cp=19&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["www.livespoints.com",[],[],[],{"google:clientdata":{"bpc":false,"tlw":true},"google:suggesttype":[],"google:verbatimrelevance":851}]

Chrome Cache Entry: 584

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	497
Entropy (8bit):	7.369089873565208
Encrypted:	false
SSDEEP:	12:6v/7sAw3PViO/UWdt0jEhnc+Dhpl1BxU+Sbd8SLIKyjOEXUtN:qiVFsstaAnc+t9BHC+6
MD5:	8CF86971D17DE66F5A1F4F17DE191A10
SHA1:	400205F66E21AB5C471B1B5ED4C27D09E082418B
SHA-256:	A4536EE57B0B70C810C09D1F8BFDC1245FBDAC6A1F1DF3D2299D31DFF6556166
SHA-512:	15769F79D64F33A87550A06AC8847782F5E1B1BF493CFB37B8F3CF185F6698149B56584EAFAF84AEBC0C714B07E92E27B05DF0CAF66B85749F6575F9F73FAA4D
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcT7bfRBwTqS3-K-0HZf8trieokLafczGiVM22alE1I&s=10
Preview:	.PNG........IHDR...@...@.............PLTE......j.dppp....6n.hm.g=)Aa=......X.S....7MvIf.aVVV...h.b..+..1....3.9333.... .7N4...www......)))......DDD....o&..0.).3O1@e=...9X6i.....%IDATX...n.0.Es.q6L!...Bq.........).......W.9... .x~...H5.....x.....$..j.Q@..t..@....Qk.pt.2RK...S..S..=#0J..((..zA...V.3w.<.B..FsI..&.......`8.HOB..,.JS...v...^p{A.......%g.R.+.-^..7...x..L4..A$.(.[.).$.4......>.T..$.i.x.^......E@......&...(8.DUil......%Vj...s..?..l.M.....[.=....Z.#..5'9....IEND.B`.

Chrome Cache Entry: 585

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	133
Entropy (8bit):	4.654244084569768
Encrypted:	false
SSDEEP:	3:VwiQUKHJtwwBHsLpHbGWjLwWkzXFETH1u4:Vwij4t5BHsLRGAwWeXFEL13
MD5:	3DA067AD651024A3F5F84807DF93C228
SHA1:	B907A755DCE4BD49937A23ED6EF34723F2F2C8B2
SHA-256:	30DE2767C5D0A0ECD0DB5AC53CE7BA167D4C61A264E47A5A96F1C82E891033C5
SHA-512:	D4822CF7CF0AC5875B8F89E5F9585F4D1C46C5DE5B0EF1CECB84FE5C855B51132DC66FF929568DCDCF7509AE17BA3909A8AB64D5DD41418142B2691A1D703C70
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=www.livespoin&oit=1&cp=13&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["www.livespoin",[],[],[],{"google:clientdata":{"bpc":false,"tlw":true},"google:suggesttype":[],"google:verbatimrelevance":851}]

Chrome Cache Entry: 586

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (5425)
Category:	downloaded
Size (bytes):	5431
Entropy (8bit):	5.805455493142759
Encrypted:	false
SSDEEP:	96:X7ligRFd66666d9qh4gUS+MaDlrwdMfqditIN6666V+zh0fXmHVRuCUpgajbUEpY:XRZRFd66666Hqh4gUSTaDlrgMSdiuN6N
MD5:	072020B847936CEC01DC203EEE605DAA
SHA1:	6EC2B1736D0A643389C550EC2316172C1DB77B47
SHA-256:	C1395F46E9505ECC567F29E651545D9756E906E5AF3990510AC28DD9EDBBCE6A
SHA-512:	2F78BA187D609F5101ABD31562CC1F36C7157BE57F7D333CF81B808854ED0CBBD24266918C4DE050F0D76E277E19677388C3D31840E03D88AB870029D3934D29
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["",["jason hipson edmonton","sleep token","kylian mbapp.","frozen corn recalled","the finals update 1.5 patch notes","translink bc","louis rees zammit nfl","tim reid regina"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u003d","google:suggestdetail":[{"zl":10002},{"google:entityinfo":"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

Chrome Cache Entry: 587

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6516), with no line terminators
Category:	downloaded
Size (bytes):	6516
Entropy (8bit):	5.015330784303427
Encrypted:	false
SSDEEP:	192:DgyZqezJKcwDLqs7KA2qiY8qgx8s9Zqrr477vp:ZcD57R2CE9g871
MD5:	94F6994D14B020BCA8386DFA1332D8A7
SHA1:	ABEB8527920A874C9CD1340B449F6AA2611E135B
SHA-256:	7D949D2D53E0EB57174B1549FB1B9E7508BF7A2DB0D70D8C9BCD1AC009EF0767
SHA-512:	EA1012DD34EE25CEE688F804572FD5EE39902384EA3CB5E95F56BC6EBA0C340B7AA85281561D5618F2B078F1003980888CF0195B6D6A268DE4FD9739ABF8F57C
Malicious:	false
Reputation:	low
URL:	https://get.adobe.com/reader/b4869b6f/5666.js
Preview:	(self.webpackChunk_name_=self.webpackChunk_name_\|\|[]).push([[5666],{5666:r=>{r=function(a){"use strict";var u,t=Object.prototype,h=t.hasOwnProperty,r="function"==typeof Symbol?Symbol:{},n=r.iterator\|\|"@@iterator",e=r.asyncIterator\|\|"@@asyncIterator",o=r.toStringTag\|\|"@@toStringTag";function i(t,r,e){return Object.defineProperty(t,r,{value:e,enumerable:!0,configurable:!0,writable:!0}),t[r]}try{i({},"")}catch(t){i=function(t,r,e){return t[r]=e}}function c(t,r,e,n){var o,i,a,c,r=r&&r.prototype instanceof v?r:v,r=Object.create(r.prototype),n=new j(n\|\|[]);return r._invoke=(o=t,i=e,a=n,c=l,function(t,r){if(c===p)throw new Error("Generator is already running");if(c===y){if("throw"===t)throw r;return O()}for(a.method=t,a.arg=r;;){var e=a.delegate;if(e){var n=function t(r,e){var n=r.iterator[e.method];if(n===u){if(e.delegate=null,"throw"===e.method){if(r.iterator.return&&(e.method="return",e.arg=u,t(r,e),"throw"===e.method))return g;e.method="throw",e.arg=new TypeError("The iterator does not pr

Chrome Cache Entry: 588

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (33393)
Category:	downloaded
Size (bytes):	314051
Entropy (8bit):	5.423338018256532
Encrypted:	false
SSDEEP:	6144:zr4gaeSa9FO3/cNE0UzYJc3uLKsJJOa37utWWo:X4f5aLU/cjUmLKsnOou0
MD5:	0A604FA9E5A00C71C0785FC46439E64F
SHA1:	B3FDFFF1CACBEFFD34021CC63F357F3E6F257602
SHA-256:	6EF625E5717784C486E23E4EA8BF046947BE84D022695D3DB109E32CB2085C8C
SHA-512:	E5BE5CDB00DCE385AB9E6F570FDF046576FFFF7FAB284E353C1798851B1D888BE1EF7AC8A604C70368B9AA247C4C835A26F5AC88F6AA13A34CBB43CF34A85369
Malicious:	false
Reputation:	low
URL:	https://get.adobe.com/reader/b4869b6f/1713.js
Preview:	(self.webpackChunk_name_=self.webpackChunk_name_\|\|[]).push([[1713],{5687:(e,t,n)=>{"use strict";n.d(t,{kG:()=>function(e,t,n){void 0===n&&(n=Error);if(!e)throw new n(t)}})},5957:(e,t,n)=>{"use strict";function r(e,t,n,r){var o=null==(o=r)\|\|"number"==typeof o\|\|"boolean"==typeof o?r:n(r),n=t.get(o);return void 0===n&&(n=e.call(this,r),t.set(o,n)),n}function o(e,t,n){var r=Array.prototype.slice.call(arguments,3),o=n(r),n=t.get(o);return void 0===n&&(n=e.apply(this,r),t.set(o,n)),n}function i(e,t,n,r,o){return n.bind(t,e,r,o)}function a(e,t){return i(e,this,1===e.length?r:o,t.cache.create(),t.serializer)}n.d(t,{Z:()=>function(e,t){var n=t&&t.cache?t.cache:u,r=t&&t.serializer?t.serializer:l;return(t&&t.strategy?t.strategy:a)(e,{cache:n,serializer:r})},A:()=>c});var l=function(){return JSON.stringify(arguments)};function s(){this.cache=Object.create(null)}s.prototype.get=function(e){return this.cache[e]},s.prototype.set=function(e,t){this.cache[e]=t};var u={create:function(){return new s}},c

Chrome Cache Entry: 589

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 64x64, components 3
Category:	downloaded
Size (bytes):	960
Entropy (8bit):	7.152546954686777
Encrypted:	false
SSDEEP:	12:7PBpAYbf3kHkP+2hhOO9TNulDdy6iLPhIg64Tr1nVsj/PpdpO:rQUZGA1puJdhu5lVtVsTPp7O
MD5:	67821ECE86D9AAE7A9EC1B79CD6C777B
SHA1:	8BE7441D7C6C2C408B804C21889A8646DA102741
SHA-256:	1B478CEF7F98A61B7C7D612B77BF010482D0AB65003D5A02DBE8C895F631F880
SHA-512:	D213DBDD0A8F10845CDE24BC0DC157448930F2FF006DDFBF52C6F355FA4A7E7932BEE23EB4BE094D4E54B38F53D40AC7A312C03B6B7F1EA3F241852E8E40D184
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcSRmtXyaNWmW0sH7YY_p4pkoWtMJIy28b87QoJ1-YM&s=10
Preview:	......JFIF......................................... ."" ...$(4,$&1'..-=-157:::#+?D?8C49:7...........7%.%77777777777777777777777777777777777777777777777777......@.@..........................................,........................!.1...Q"2Aq..$a.................................)........................1.!AQ.......aq.............?...... .... .... .... .... .... .z.g.....F=maE:........j=.......U.2............my..iiR......S.[W.=.%..H...U`j..Tg.U.:h..%e.N...P.........EL.K...[...<.....-..Af.[..l..K...M^N...8-....k..+...-.^g.]....3....11...3.....PA..;.<......a....`cC.N+..}E...-.. ......7............V...Qj.g.Y..#.=..'(.5O..I'I..K.z....V....KI.g]..~>:....^_.m......O....e...r...Lq.F:y.W.."..]8.7.%.BJ...X..r\|.I<.%K8...O......M}..K..>..8..k.v......].uo..U_D....6..66k......m..X.c.....mUyTJ.$...7..1.2:...6..<.........q3cI.a..M*.N...7-.wD......J.l..o...O....+zk{.w..j.W^.(.R.V..\....l..T[...&....,.@....@....@....@....@....@.....

Chrome Cache Entry: 590

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (657)
Category:	downloaded
Size (bytes):	662
Entropy (8bit):	5.144158850192586
Encrypted:	false
SSDEEP:	12:uFZ44aukP7UFsJvwzp5BTzhBHslriFuQRP8VVDwublJZw4/fffffffswzC3:A4ZnjUiJvwFfhBHslguQRP8/kYlcmffQ
MD5:	441653097688AE8766BA800705A92517
SHA1:	2D7902A9C39AF9B667DCE2CB65FA4A3450C6E7EF
SHA-256:	7DB37DDE42DBE2046CCA81CDC3C907191613CA8466FAB19F4A836E4BFA3D2F41
SHA-512:	E0D348451BA0FD0F68ADBDFACF8A5B4E1A3AC5FDB49DAE1AA7BB036C82E66584EE7568A87C62B5B2D173B68BE1935B7D598A16300D2C47571B70ECD9B456D65B
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=www.l&oit=1&cp=5&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["www.l",["www.l","www.lesplan/links","www.logmein123.com remote support","www.lexiacore5","www.labour.gov.on/english/hs/training/workers.php","www.lcbo/giftcards","www.lynxair","www.lindecanada/billpay.ca","http://www.linkedin.com","http://www.lululemon.com"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestrelevance":[851,601,600,555,554,552,551,550,401,400],"google:suggestsubtypes":[[512,650,433,131],[512],[512,433],[512],[512],[512],[512],[512],[44],[44]],"google:suggesttype":["QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","NAVIGATION","NAVIGATION"],"google:verbatimrelevance":851}]

Chrome Cache Entry: 591

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12028), with no line terminators
Category:	downloaded
Size (bytes):	12028
Entropy (8bit):	5.319608868559704
Encrypted:	false
SSDEEP:	192:eJ+3tYd7Cpn4jCAu1KyVVC0atClMhxEKHERCK/gBdsCpCOGbfPqOH7s+UfBN/mjI:2TCF4RZcC0aAlOESE8SCZrBNECqUwy
MD5:	BDD27FD3A3546B6AD178436C1C75D6A5
SHA1:	53CAC185CB004D54EBAF8CF624AB00E752B8E3EA
SHA-256:	5CCA729FD5605E217B23C882BC7005A7940ACA062B2BE08A6E0C823FAC5F6270
SHA-512:	AA84CD4A12BF244E2C48C1B15B70412887566CBC72F6DD8F2CBCA0694D1FA37986DE3D2A91C4E25C2EFF9E543C699780CC7DE049305A4CDB977E3E99F95C7A18
Malicious:	false
Reputation:	low
URL:	https://get.adobe.com/reader/b4869b6f/1335.js
Preview:	"use strict";(self.webpackChunk_name_=self.webpackChunk_name_\|\|[]).push([[1335],{1335:(n,e,a)=>{a.d(e,{Z:()=>v});a(1358);var i=a(7563),c=a(7294),r=a(9536),u=a(5789);function t(e,n){var a,r=Object.keys(e);return Object.getOwnPropertySymbols&&(a=Object.getOwnPropertySymbols(e),n&&(a=a.filter(function(n){return Object.getOwnPropertyDescriptor(e,n).enumerable})),r.push.apply(r,a)),r}function s(e){for(var n=1;n<arguments.length;n++){var a=null!=arguments[n]?arguments[n]:{};n%2?t(Object(a),!0).forEach(function(n){g(e,n,a[n])}):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):t(Object(a)).forEach(function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(a,n))})}return e}function o(n,e){for(var a=0;a<e.length;a++){var r=e[a];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(n,r.key,r)}}function l(n,e,a){return e&&o(n.prototype,e),a&&o(n,a),Object.defineProperty(n,"prototype",{writable:!1

Chrome Cache Entry: 592

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5163), with no line terminators
Category:	downloaded
Size (bytes):	5163
Entropy (8bit):	5.315970106046623
Encrypted:	false
SSDEEP:	96:oIwkZNr2Z9LcQ1SAXFs8PJvAfT32Y8BX6jyqbvgqnPWO:o7kjr2vLcQ1SUC8PJ4fybFq2O
MD5:	1185C524931E57C6EDD2E7B8F6D4419E
SHA1:	8898FDEE0C4B347669899E0848EEF910064345AC
SHA-256:	238F68AD18B58915C51C9AB503EFCB39CFC02AB5B193B154656BD4633FE9C384
SHA-512:	489E1F1ABC63451897D94BF8DA4CFF8CAF84B6FBA2706E67DF2D7F0ECDAE28340D0DDFDCC17D29DDE43FA828C3CD5F21CC64A1EE1435E6305F1B07A4246F90F7
Malicious:	false
Reputation:	low
URL:	https://get.adobe.com/reader/b4869b6f/bootstrap.js
Preview:	var bootstrap;(()=>{"use strict";var u,r={3645:e=>{e.exports=function(n){var l=[];return l.toString=function(){return this.map(function(e){var t="",r=void 0!==e[5];return e[4]&&(t+="@supports (".concat(e[4],") {")),e[2]&&(t+="@media ".concat(e[2]," {")),r&&(t+="@layer".concat(0<e[5].length?" ".concat(e[5]):""," {")),t+=n(e),r&&(t+="}"),e[2]&&(t+="}"),e[4]&&(t+="}"),t}).join("")},l.i=function(e,t,r,n,o){"string"==typeof e&&(e=[[null,e,void 0]]);var a={};if(r)for(var s=0;s<this.length;s++){var i=this[s][0];null!=i&&(a[i]=!0)}for(var c=0;c<e.length;c++){var u=[].concat(e[c]);r&&a[u[0]]\|\|(void 0!==o&&(void 0===u[5]\|\|(u[1]="@layer".concat(0<u[5].length?" ".concat(u[5]):""," {").concat(u[1],"}")),u[5]=o),t&&(u[2]&&(u[1]="@media ".concat(u[2]," {").concat(u[1],"}")),u[2]=t),n&&(u[4]?(u[1]="@supports (".concat(u[4],") {").concat(u[1],"}"),u[4]=n):u[4]="".concat(n)),l.push(u))}},l}},1667:e=>{e.exports=function(e,t){return t=t\|\|{},e&&(e=String(e.__esModule?e.default:e),/^['"].*['"]$/.test(e)&&(e

Chrome Cache Entry: 593

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 16, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	304
Entropy (8bit):	6.91892047407009
Encrypted:	false
SSDEEP:	6:6v/lhPtFRb8av4S0QOqrWZE7L+liXqtZkQ9ZpH8BhfEDrtht0FblVp:6v/7NoBmOqCCL1Q7pH8B2DrthtWbl7
MD5:	37D664B332BA999FDD781FE80392C521
SHA1:	53778B617D81BABCA456B37BF12C5E6F19A45818
SHA-256:	4A2A30131F8033040C33AC06DD3392A9444F78710B5A7BAE911A304B2D67DEBC
SHA-512:	3CC98B1A50A37A813A7ED4592AA3F0A9A15AD2A975299C3A617A5BCD48BA66C98676DBD53C7E1B1C9A78A0B8C5425CEDEBDF079542CB0A04940857C5D35426CB
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcSmID7KvpHrRhax2NBFV2IMZYUNBaqKib-254eWE-0&s=10
Preview:	.PNG........IHDR...@..........9.....ZPLTE.................).-.......4..d.....z.............q.......B..I...;.....Y.........IDAT8...[..0.DI.}.e..1..m...S...a .4..t....\|P..M.j:.5..</D........=.C.i..9..T...[l...E{......M.@a*/...H.2{.`.U..)r.f...[...?".Q>...5.g<C..}.....r=....IEND.B`.

Chrome Cache Entry: 594

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	136
Entropy (8bit):	4.66616683614804
Encrypted:	false
SSDEEP:	3:VwiQUKX4JHwwBHsLpHbGWjLwWkzXFETH1u4:Vwiju4JH5BHsLRGAwWeXFEL13
MD5:	7D018DB7EFAC8E19D14349A57EFF720E
SHA1:	4267C25C37020202700A501B625A6919FF1C1F74
SHA-256:	2CA192997276BB527BEB38F16E19F0981BBB66FBD10CC7EB6ACC4482DEEA087A
SHA-512:	384E535F447DA52219EA4468E6BDC6070D47A0EE0D86480077B8B08337200D9B1D257C74DDABB84F4A28F51DBD125B83CB0B1C41A8B443BEF37097285A45F93F
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=www.livespoints.&oit=1&cp=16&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["www.livespoints.",[],[],[],{"google:clientdata":{"bpc":false,"tlw":true},"google:suggesttype":[],"google:verbatimrelevance":851}]

Chrome Cache Entry: 595

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65420), with no line terminators
Category:	downloaded
Size (bytes):	79371
Entropy (8bit):	5.553202805089085
Encrypted:	false
SSDEEP:	1536:biWgj7nvjKwpMT12VkccrOh7UWH0BY9muNwKaLAoBY9uGKHb7TgU1ZsaAJHk:rgXnvjpR0BY98K0BY9kz
MD5:	3C9AA440D225887049C002F5B1B20231
SHA1:	21F8CCDD83475BC7BC9FEC472CD9531123C94989
SHA-256:	FFFD40A5EB8761E58B26EE90DE0431FA7947934F133F8157AE8EF21F78E69B53
SHA-512:	08855A01181A1947BF2A8AC406268CEA7236E43B7C11CE1EB1FFBD5B09CF26D22316E1908BC3F03E9FE5D86D2F1C312598D43D7FBD68044053A48DE350398C60
Malicious:	false
Reputation:	low
URL:	https://get.adobe.com/reader/b4869b6f/index.js
Preview:	var index;(()=>{var i,r,o,d,m,n={400:(e,t,n)=>{"use strict";n.d(t,{Z:()=>u});var a=n(7294),l=n(6968),r=n(3379),o=n.n(r),c=n(7795),s=n.n(c),i=n(569),d=n.n(i),t=n(3565),r=n.n(t),c=n(9216),i=n.n(c),t=n(4589),c=n.n(t),t=n(1363),n={};n.styleTagTransform=c(),n.setAttributes=r(),n.insert=d().bind(null,"head"),n.domAPI=s(),n.insertStyleElement=i();o()(t.Z,n);const m=t.Z&&t.Z.locals?t.Z.locals:void 0;const u=function(){return a.createElement("div",{className:m.center}," ",a.createElement(l.Z,{animation:"border",variant:"primary"}))}},5613:(e,t,n)=>{"use strict";n.d(t,{x:()=>o,U:()=>m});var c=n(7294),s=n(5789),i=n(1335),f=n(9536),h=n(2322);function d(){return(d=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var n,a=arguments[t];for(n in a)Object.prototype.hasOwnProperty.call(a,n)&&(e[n]=a[n])}return e}).apply(this,arguments)}function r(t,e){var n,a=Object.keys(t);return Object.getOwnPropertySymbols&&(n=Object.getOwnPropertySymbols(t),e&&(n=n.filter(function(e){return Object.getOw

Chrome Cache Entry: 596

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 64x48, components 3
Category:	downloaded
Size (bytes):	970
Entropy (8bit):	7.2518642358508485
Encrypted:	false
SSDEEP:	12:7PBpAYr/nDkmtdijNWo1TV8OsmnfgYibzG4wthAFXOfmmvdUrRygPpobP6FQnw7W:rQksYfOsegYibTwE5O+sdghiOFa7hL
MD5:	A66D371E6EB171B1CBAD73A8EE4656CB
SHA1:	48A088185ABF289448475DDC5F5220587BB84C6F
SHA-256:	A90E306EA45132298202A7D231D58ADAC685B8DC5692F1EEAB5F5FDE7241B83A
SHA-512:	28C8833D4E48C6864A829881D3475E848F6B75BE8195DF980782222D35759C336A77DF0547E890DAF7235A1B2D739525B49C4B6B0194B462E67A128898C024F7
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcSVhAf-5pIwnMnm2kM-qdym1XvZq1kC35TN4-HgLJs&s=10
Preview:	......JFIF......................................... ."" ...$(4,$&1'..-=-157:::#+?D?8C49:7...........7%.%77777777777777777777777777777777777777777777777777......0.@.........................................+.........................!..1A"2a.Qq....#.....................................................!1..AQ.."#a....q..............?....@(......P..@(......P..PkR...../l!f_e..O...WE.i.u.-.n..h...R.4.V%a..\.....8....>.....x...~..5.D..[.......`.+\|..-.,..r....?.{J{..L.'u.._H.=b.Y.....";.W..i.oL..A.......T..b3.vf.uN...[...fkP.F.kv2..<K....n.+_....).db..e.O.i.k......Y..\.gi]...\.....g$...u'R...y<_...#..m.....1.;......8.9R..e...;rY6..X.5;..m#.b2I".....F...g...L........Wh.j..i..p..nh......x>N.....&.)..J.i]4...~k..]..p..:>.x.n....9.d.<....1.s.k.kS..[o.}\|.x.SJ.%...S..su...C%..G.....l.....=..._.RqJ\..RS..`:..^.of.;we.. &+"7m...2.P.._.\|-.\|.I:.!;..x.{.E.gQ.f.2..m......Ny[.....#.....tn...i...34;B(P...?,.o....N.M~:1....b.@(......P..@(......P..@...

Chrome Cache Entry: 597

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	152
Entropy (8bit):	4.716069699279845
Encrypted:	false
SSDEEP:	3:VwpMFKKUIKWWrZITwwBHsLpYJWriFGWjLwWkzXFETH1u4:VwiFKHm1T5BHsL2YriFGAwWeXFEL13
MD5:	15271BFA0DC267D9BDB631CD1782D46F
SHA1:	B26D5DF4122120843BBB24BB7903F567256DA6C9
SHA-256:	638B67ACC85A76D058608448743B7EE7EB16F74291FB0EB3104993AD4A1E9530
SHA-512:	0BB0766E950D47708DBFAED887A211540E02B69EE00D47AAE7209A44FEF7613CEE39CFC3E6C0703F822413D07C2DA1AF97E5D1B71E527DAFBCB7C8B898F932DB
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=httplivespoints.com%2Fsso.dsv.com&oit=3&cp=4&pgcl=4&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["httplivespoints.com/sso.dsv.com",[],[],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggesttype":[],"google:verbatimrelevance":851}]

Chrome Cache Entry: 598

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	135
Entropy (8bit):	4.652398880799625
Encrypted:	false
SSDEEP:	3:VwiQUKaHwwBHsLpHbGWjLwWkzXFETH1u4:VwijZ5BHsLRGAwWeXFEL13
MD5:	69F8EBDDA208A19EC38C930481F07520
SHA1:	971C708BDFE4B96C098E6DAAFBCAF7B7FD2BE959
SHA-256:	F8D655201D87D5364A67DBA749FA054D83094E9275C07519E2026BBEA7EF3524
SHA-512:	318CFFE686255491C2AF50163F3D85B66222E265A6C151C87A38A4A8032784552B77320FE6228A8549C5A6F3A7AD8E4F374E7C08AEAF04043E4B66FE2CC52E04
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=www.livespoints&oit=1&cp=15&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["www.livespoints",[],[],[],{"google:clientdata":{"bpc":false,"tlw":true},"google:suggesttype":[],"google:verbatimrelevance":851}]

Chrome Cache Entry: 599

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	155
Entropy (8bit):	4.733372145480477
Encrypted:	false
SSDEEP:	3:Vw/KSMwKUIKWWrZITwwBHsLpYJWriFGWjLwWkzXFETH1u4:VwCS1Hm1T5BHsL2YriFGAwWeXFEL13
MD5:	1A2C9B6BAC40B66A0B1BCBABFA31BC5F
SHA1:	6816A5F9B2A9DDB9D0A098288AF6236F7AAB1F0C
SHA-256:	81A2E1840AF2C94B563624C3118CF31CC2D3EDC2B0DDFC752CFBCD71E36A83F1
SHA-512:	A2BC1A004D03D995752D6644E53BDD250E3F66F7FF40185328DC41916EC9A4A58127970947A5EFD849D65E0BD78383B5C34C6B79D0E7FACA0AB5DE8CB5A4766D
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=http%3A%2F%2Flivespoints.com%2Fsso.dsv.com&oit=3&cp=7&pgcl=4&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["http://livespoints.com/sso.dsv.com",[],[],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggesttype":[],"google:verbatimrelevance":851}]

Chrome Cache Entry: 600

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1696)
Category:	downloaded
Size (bytes):	4468
Entropy (8bit):	5.1756168241169185
Encrypted:	false
SSDEEP:	96:zmRtxULRQ/rbSeVnN0UVmTuopSxD3YxAqj/Axa+U7q:aRIVQ/N0UVmC9zHqj/Axaz7q
MD5:	E6359E2D7589299D411ECC97BF7768FB
SHA1:	A793B15A6E66B65AE382C60D5497398E97EDC4FF
SHA-256:	D5AED3B36CFDA362ED2F342DCADD8F6847C689D431849B84AE38559CC61A97ED
SHA-512:	41F8F6DDDCEA20A7EB956C8F7D4B9A8A699ADC81AF3804C6C2D855F728C9C71C06BBA399B5A504AD8A4232A447FCD0CB70C182720962205CAFAC6E8FC560C842
Malicious:	false
Reputation:	low
URL:	https://get.adobe.com/uk/reader/
Preview:	<!doctype html><html lang="en"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>Adobe - Download Adobe Acrobat Reader</title><meta name="description" content="Download free Adobe Acrobat Reader software for your Windows, Mac OS and Android devices to view, print, and comment on PDF documents."><script src="https://use.typekit.net/bxf0ivf.js"></script><script>try{Typekit.load()}catch(o){console.error("error loading typekit fonts")}</script><link rel="icon" type="image/vnd.microsoft.icon" href="/reader/favicon.ico"><style>.no-script {. font-size: 2em;. margin: 0.67em 0;. }. body{. background-color: #f5f5f5;. -webkit-tap-highlight-color: rgba(0,0,0,0);. }</style><script>!function(){var{host:e}=window.location,a=a=>e.indexOf(a)>-1,d="test";if(["dc.dev.dexilab.acrobat.com","dev.acrobat.adobe.com","get.devdc.adobe.com

Chrome Cache Entry: 601

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (671)
Category:	downloaded
Size (bytes):	676
Entropy (8bit):	5.135162042285601
Encrypted:	false
SSDEEP:	12:unA/NIeXLvDyGBHslriFuZsAVVowu6bJZw4/fffffswzC3:yyNIcGGBHslguZsA/hBbcmfffffd+
MD5:	29A0976F426145B8F83C39CC3F45217F
SHA1:	10A50832D673C5DFAE40B057DD09588A73692DE9
SHA-256:	D1355EB5FA55A46333D9F3434FF75AED60C1F1ADC53E071D7BD73C13F7D418A6
SHA-512:	4451CDFC96B69E1BED6831A27D4D6362C651CE98B7780F3527034CEF7C4A072772B7853F561B32996594BAD4012E24E79FA8DDCFCB16D5832B3A21241ECCB2B7
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=www.lives&oit=1&cp=9&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["www.lives",["www.livestream.east","www.livesports24","www.livestock","www.livescores.com today match","www.livescore.com today","www.livescore.com cz","http://www.livescore.com","http://www.livescience.com","http://www.livesoccertv.com","http://www.livesinthebalance.org"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestrelevance":[601,600,553,552,551,550,403,402,401,400],"google:suggestsubtypes":[[512],[512],[512],[512],[512,433,131],[512],[44],[44],[44],[44]],"google:suggesttype":["QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","NAVIGATION","NAVIGATION","NAVIGATION","NAVIGATION"],"google:verbatimrelevance":851}]

Chrome Cache Entry: 602

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (641)
Category:	downloaded
Size (bytes):	646
Entropy (8bit):	5.138735953048733
Encrypted:	false
SSDEEP:	12:uRJLn/KZs0JBHslriFuDpgA7kwuvZw4maffff0wzC3:WlKZsuBHslguD+A7FIquffffV+
MD5:	F84F2BFDB4A9A2104FA92DFCAEF87C9A
SHA1:	B940160BF085979682E7947F973D741CF039FF34
SHA-256:	A497A6F73FC3A8853622182D7B9AAC85AC8743D74A0B79E1C297D92F58C3FE60
SHA-512:	E572246D5D181D31B6296FE1962A86B6A226B32375123B4CEACA3BC2EDAE52F76C10D9B606612D2830E02E3AC633ECA186EA54A065CA48E8B6457727315DFD52
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=www.live&oit=3&cp=8&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["www.live",["http://www.live.com","http://www.livescore.com","http://www.livebarn.com","http://www.livewell.com","www.liveworksheets","www.liverpool fc news","www.livestream.east","www.livebarn.com login","www.livewithkellyandmark","www.live cricket"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestrelevance":[803,802,801,800,601,600,553,552,551,550],"google:suggestsubtypes":[[44],[44],[44],[44],[512],[512],[512],[512],[512],[512]],"google:suggesttype":["NAVIGATION","NAVIGATION","NAVIGATION","NAVIGATION","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY"],"google:verbatimrelevance":851}]

Chrome Cache Entry: 603

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2369)
Category:	downloaded
Size (bytes):	18413
Entropy (8bit):	5.5692261470401165
Encrypted:	false
SSDEEP:	384:S12hpIgIVsUGiRm4lIeU4iDFeFs2NdFJsQF+i:SF7GiRm4X0JqsG7Ui
MD5:	CFE609917C9E7D4EED2C80563DED171B
SHA1:	2E5BBD88B040662BF8023FD6A9D55CC760008695
SHA-256:	AD84B43FFD121E46AC4D2FA817B5863E4802C523BC3FB5E864DB28B3DB0E2514
SHA-512:	1F600E1ABF1814C89589462ADE13F2E5399082236829EB45A530C852AE135910CB332D540B228DA744B60241BC74E85A3E5EB60CBC65B860E8E9148AF79C54D7
Malicious:	false
Reputation:	low
URL:	https://use.typekit.net/bxf0ivf.js
Preview:	/. The Typekit service used to deliver this font or fonts for use on websites. * is provided by Adobe and is subject to these Terms of Use. * http://www.adobe.com/products/eulas/tou_typekit. For font license. * information, see the list below.. . adobe-clean:. * - http://typekit.com/eulas/000000000000000000017701. * - http://typekit.com/eulas/000000000000000000017702. * - http://typekit.com/eulas/000000000000000000017703. * - http://typekit.com/eulas/0000000000000000000176ff. * - http://typekit.com/eulas/000000000000000000017704. * - http://typekit.com/eulas/000000000000000000017706. . . 2009-2024 Adobe Systems Incorporated. All Rights Reserved.. */.if(!window.Typekit)window.Typekit={};window.Typekit.config={"a":"19707152","c":[".tk-adobe-clean","\"adobe-clean\",sans-serif",".tk-adobe-clean-condensed","\"adobe-clean-condensed\",sans-serif"],"fi":[7180,7181,7182,7184,7185,22474],"fc":[{"id":7180,"family":"adobe-clean","src":"https://use.typekit.net/af/cb695f/000000

Chrome Cache Entry: 604

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23952), with no line terminators
Category:	downloaded
Size (bytes):	23952
Entropy (8bit):	5.236176064342974
Encrypted:	false
SSDEEP:	384:FcG/60lszJsLoc8LL5CfNEgzSbfR8pfPoqSrjrbcQIiRbx+E:+G/60lszJsLBCdwEGw8Zf8jrtN+E
MD5:	C39CD1C226C9743240AE89EEFD16BC3D
SHA1:	81CDE9B178B0D88B6A476D74D40C919E6069B87A
SHA-256:	47422BDC8241EA71D944BE9D1089D671DADDEA10AFB800BA9AC2AD47AA57ED0C
SHA-512:	D1F59A5FFE2F058B4F444A331286D5F78CD31C324D482C9B52294106E30B6D49AADF9FBD47FB0290A36E800C76B84E40119B13D834E45247836422409CF0D5D8
Malicious:	false
Reputation:	low
URL:	https://get.adobe.com/reader/b4869b6f/3556.js
Preview:	(self.webpackChunk_name_=self.webpackChunk_name_\|\|[]).push([[3556],{2092:(e,t,i)=>{"use strict";i.d(t,{Z:()=>function(){return(0,n.useState)(null)}});var n=i(7294)},2029:(e,t,i)=>{"use strict";i.d(t,{Z:()=>r});var n=i(7294);const r=function(e){var t=(0,n.useRef)(e);return(0,n.useEffect)(function(){t.current=e},[e]),t}},8146:(e,t,i)=>{"use strict";i.d(t,{Z:()=>function(e){var t=(0,r.Z)(e);return(0,n.useCallback)(function(){return t.current&&t.current.apply(t,arguments)},[t])}});var n=i(7294),r=i(2029)},6454:(e,t,i)=>{"use strict";i.d(t,{Z:()=>function(){var e=(0,n.useRef)(!0),t=(0,n.useRef)(function(){return e.current});return(0,n.useEffect)(function(){return function(){e.current=!1}},[]),t.current}});var n=i(7294)},8833:(e,t,i)=>{"use strict";i.d(t,{Z:()=>function(e){var t=(0,n.useRef)(null);return(0,n.useEffect)(function(){t.current=e}),t.current}});var n=i(7294)},8572:(e,t,i)=>{"use strict";function a(e){return(a="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e)

Chrome Cache Entry: 605

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (776)
Category:	downloaded
Size (bytes):	781
Entropy (8bit):	5.138396356975326
Encrypted:	false
SSDEEP:	24:ooEfevmEbjBHslgT9lCuABuoB7HHHHHHHYqmffffffo:Ef6mgKlgZ01BuSEqmffffffo
MD5:	EF17D8758BB138A95DA59EE19501E0B6
SHA1:	70601E711DCE14D09D3990836B80E6554D436FAA
SHA-256:	7F99879BF81F0BA6EA12D847030F28936E052DE2CE10A0AEF0304546753237E4
SHA-512:	7A4CE28A3D47155885A1E01E1B819E60C25A3650D062226AE3D5255949851176199F2F8E19E8C2B49B7E601CD02B5190E8949FFF5DC015D84A76EC516288304B
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=7&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["",["amd stocks","eddie sheerr","everton vs crystal palace prediction","one piece chapter 1104 spoilers twitter","palworld reviews","hot air balloon crash arizona","lotto max jackpot winning ticket","school closures snow day"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u003d","google:suggestdetail":[{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002}],"google:suggestrelevance":[1257,1256,1255,1254,1253,1252,1251,1250],"google:suggestsubtypes":[[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362]],"google:suggesttype":["QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY"]}]

Chrome Cache Entry: 606

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	174585
Entropy (8bit):	5.0714410683141296
Encrypted:	false
SSDEEP:	1536:Bwm44zUFesUpe6RNoGaa7Vz3g2cweqSzPplIE4w25oJrjY82oULCyIxp37mqipT7:Bwm4hQSzPplIE4w25oJrjY82oULCyIA
MD5:	E087C9EF34A86F8A70F218645268E291
SHA1:	4A692868885A6531A3A43206A87F093025D30FA8
SHA-256:	DCF2BB9BA5826C7592EBA403ACC9B4B334B998F03155A3E7DC59A6F58F8E3C31
SHA-512:	6434A0E04D60353B253CEDBC78DE1E76E7AC6EC082AE310B5C9F6B022219AE7461F4D567CF36AAC0FA3DB1AADC611E233A2DA05622F5F2B401162B984AB9B0A1
Malicious:	false
Reputation:	low
URL:	https://get.adobe.com/reader/b4869b6f/4800.js
Preview:	"use strict";(self.webpackChunk_name_=self.webpackChunk_name_\|\|[]).push([[4800],{4800:(t,r,o)=>{o.d(r,{Z:()=>v});var e=o(8081),a=o.n(e),i=o(3645),n=o.n(i),m=o(1667),l=o.n(m),d=new URL(o(8214),o.b),p=new URL(o(8349),o.b),g=new URL(o(2204),o.b),s=new URL(o(8931),o.b),c=new URL(o(5296),o.b),b=new URL(o(1857),o.b),f=new URL(o(2469),o.b),x=new URL(o(9819),o.b),u=new URL(o(4144),o.b),h=new URL(o(3191),o.b),w=new URL(o(5851),o.b),r=new URL(o(9342),o.b),e=new URL(o(3460),o.b),i=new URL(o(175),o.b),m=new URL(o(5647),o.b),o=new URL(o(1692),o.b),a=n()(a()),d=l()(d),p=l()(p),g=l()(g),s=l()(s),c=l()(c),b=l()(b),f=l()(f),x=l()(x),u=l()(u),h=l()(h),w=l()(w),r=l()(r),e=l()(e),i=l()(i),m=l()(m),o=l()(o);a.push([t.id,'/!\n Bootstrap v5.1.3 (https://getbootstrap.com/)\n * Copyright 2011-2021 The Bootstrap Authors\n * Copyright 2011-2021 Twitter, Inc.\n * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE)\n */:root{--bs-blue: #0d6efd;--bs-indigo: #6610f2;--bs-purple: #6f42c1;--bs-

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
192.168.2.4172.67.129.4249729802048095 01/17/24-17:57:04.092422	TCP	2048095	ET TROJAN [ANY.RUN] DarkCrystal Rat Check-in (POST)	49729	80	192.168.2.4	172.67.129.42

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 17, 2024 18:05:34.038487911 CET	49674	443	192.168.2.16	23.1.237.25
Jan 17, 2024 18:05:34.038589954 CET	49673	443	192.168.2.16	23.1.237.25
Jan 17, 2024 18:05:34.413450956 CET	49672	443	192.168.2.16	23.1.237.25
Jan 17, 2024 18:05:40.019407034 CET	49717	443	192.168.2.16	172.253.115.84
Jan 17, 2024 18:05:40.019442081 CET	443	49717	172.253.115.84	192.168.2.16
Jan 17, 2024 18:05:40.019512892 CET	49717	443	192.168.2.16	172.253.115.84
Jan 17, 2024 18:05:40.019870043 CET	49717	443	192.168.2.16	172.253.115.84
Jan 17, 2024 18:05:40.019885063 CET	443	49717	172.253.115.84	192.168.2.16
Jan 17, 2024 18:05:40.021898031 CET	49718	443	192.168.2.16	142.251.40.174
Jan 17, 2024 18:05:40.021918058 CET	443	49718	142.251.40.174	192.168.2.16
Jan 17, 2024 18:05:40.021985054 CET	49718	443	192.168.2.16	142.251.40.174
Jan 17, 2024 18:05:40.022242069 CET	49718	443	192.168.2.16	142.251.40.174
Jan 17, 2024 18:05:40.022264004 CET	443	49718	142.251.40.174	192.168.2.16
Jan 17, 2024 18:05:40.091695070 CET	49719	443	192.168.2.16	104.21.3.175
Jan 17, 2024 18:05:40.091726065 CET	443	49719	104.21.3.175	192.168.2.16
Jan 17, 2024 18:05:40.091784000 CET	49719	443	192.168.2.16	104.21.3.175
Jan 17, 2024 18:05:40.092215061 CET	49719	443	192.168.2.16	104.21.3.175
Jan 17, 2024 18:05:40.092227936 CET	443	49719	104.21.3.175	192.168.2.16
Jan 17, 2024 18:05:40.225773096 CET	443	49717	172.253.115.84	192.168.2.16
Jan 17, 2024 18:05:40.226202011 CET	49717	443	192.168.2.16	172.253.115.84
Jan 17, 2024 18:05:40.226234913 CET	443	49717	172.253.115.84	192.168.2.16
Jan 17, 2024 18:05:40.228091002 CET	443	49717	172.253.115.84	192.168.2.16
Jan 17, 2024 18:05:40.228185892 CET	49717	443	192.168.2.16	172.253.115.84
Jan 17, 2024 18:05:40.229171991 CET	49717	443	192.168.2.16	172.253.115.84
Jan 17, 2024 18:05:40.229295015 CET	443	49717	172.253.115.84	192.168.2.16
Jan 17, 2024 18:05:40.229425907 CET	49717	443	192.168.2.16	172.253.115.84
Jan 17, 2024 18:05:40.229444027 CET	443	49717	172.253.115.84	192.168.2.16
Jan 17, 2024 18:05:40.271667004 CET	49717	443	192.168.2.16	172.253.115.84
Jan 17, 2024 18:05:40.284287930 CET	443	49719	104.21.3.175	192.168.2.16
Jan 17, 2024 18:05:40.284581900 CET	49719	443	192.168.2.16	104.21.3.175
Jan 17, 2024 18:05:40.284595013 CET	443	49719	104.21.3.175	192.168.2.16
Jan 17, 2024 18:05:40.286147118 CET	443	49719	104.21.3.175	192.168.2.16
Jan 17, 2024 18:05:40.286230087 CET	49719	443	192.168.2.16	104.21.3.175
Jan 17, 2024 18:05:40.287201881 CET	49719	443	192.168.2.16	104.21.3.175
Jan 17, 2024 18:05:40.287283897 CET	443	49719	104.21.3.175	192.168.2.16
Jan 17, 2024 18:05:40.287420034 CET	49719	443	192.168.2.16	104.21.3.175
Jan 17, 2024 18:05:40.287429094 CET	443	49719	104.21.3.175	192.168.2.16
Jan 17, 2024 18:05:40.291774988 CET	443	49718	142.251.40.174	192.168.2.16
Jan 17, 2024 18:05:40.292026043 CET	49718	443	192.168.2.16	142.251.40.174
Jan 17, 2024 18:05:40.292043924 CET	443	49718	142.251.40.174	192.168.2.16
Jan 17, 2024 18:05:40.292381048 CET	443	49718	142.251.40.174	192.168.2.16
Jan 17, 2024 18:05:40.292450905 CET	49718	443	192.168.2.16	142.251.40.174
Jan 17, 2024 18:05:40.292977095 CET	443	49718	142.251.40.174	192.168.2.16
Jan 17, 2024 18:05:40.293039083 CET	49718	443	192.168.2.16	142.251.40.174
Jan 17, 2024 18:05:40.294025898 CET	49718	443	192.168.2.16	142.251.40.174
Jan 17, 2024 18:05:40.294094086 CET	443	49718	142.251.40.174	192.168.2.16
Jan 17, 2024 18:05:40.294162989 CET	49718	443	192.168.2.16	142.251.40.174
Jan 17, 2024 18:05:40.294178963 CET	443	49718	142.251.40.174	192.168.2.16
Jan 17, 2024 18:05:40.335653067 CET	49719	443	192.168.2.16	104.21.3.175
Jan 17, 2024 18:05:40.336127996 CET	49718	443	192.168.2.16	142.251.40.174
Jan 17, 2024 18:05:40.448404074 CET	443	49717	172.253.115.84	192.168.2.16
Jan 17, 2024 18:05:40.448949099 CET	443	49717	172.253.115.84	192.168.2.16
Jan 17, 2024 18:05:40.449011087 CET	49717	443	192.168.2.16	172.253.115.84
Jan 17, 2024 18:05:40.449767113 CET	49717	443	192.168.2.16	172.253.115.84
Jan 17, 2024 18:05:40.449779987 CET	443	49717	172.253.115.84	192.168.2.16
Jan 17, 2024 18:05:40.567157030 CET	443	49718	142.251.40.174	192.168.2.16
Jan 17, 2024 18:05:40.567282915 CET	443	49718	142.251.40.174	192.168.2.16
Jan 17, 2024 18:05:40.567336082 CET	49718	443	192.168.2.16	142.251.40.174
Jan 17, 2024 18:05:40.567949057 CET	49718	443	192.168.2.16	142.251.40.174
Jan 17, 2024 18:05:40.567960024 CET	443	49718	142.251.40.174	192.168.2.16
Jan 17, 2024 18:05:40.852252960 CET	443	49719	104.21.3.175	192.168.2.16
Jan 17, 2024 18:05:40.852328062 CET	443	49719	104.21.3.175	192.168.2.16
Jan 17, 2024 18:05:40.852400064 CET	49719	443	192.168.2.16	104.21.3.175
Jan 17, 2024 18:05:40.852750063 CET	49719	443	192.168.2.16	104.21.3.175
Jan 17, 2024 18:05:40.852767944 CET	443	49719	104.21.3.175	192.168.2.16
Jan 17, 2024 18:05:40.858382940 CET	443	49704	23.1.237.25	192.168.2.16
Jan 17, 2024 18:05:40.858465910 CET	49704	443	192.168.2.16	23.1.237.25
Jan 17, 2024 18:05:43.650752068 CET	49673	443	192.168.2.16	23.1.237.25
Jan 17, 2024 18:05:43.650840998 CET	49674	443	192.168.2.16	23.1.237.25
Jan 17, 2024 18:05:44.017699957 CET	49672	443	192.168.2.16	23.1.237.25
Jan 17, 2024 18:05:44.308286905 CET	49729	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:44.308341980 CET	443	49729	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:44.308420897 CET	49729	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:44.308767080 CET	49729	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:44.308784008 CET	443	49729	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:44.498702049 CET	443	49729	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:44.499073982 CET	49729	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:44.499094963 CET	443	49729	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:44.499953032 CET	443	49729	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:44.500036955 CET	49729	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:44.501544952 CET	49729	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:44.501605034 CET	443	49729	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:44.547667980 CET	49729	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:44.547684908 CET	443	49729	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:44.595670938 CET	49729	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:54.233057022 CET	49733	443	192.168.2.16	20.114.59.183
Jan 17, 2024 18:05:54.233086109 CET	443	49733	20.114.59.183	192.168.2.16
Jan 17, 2024 18:05:54.233345985 CET	49733	443	192.168.2.16	20.114.59.183
Jan 17, 2024 18:05:54.240390062 CET	49733	443	192.168.2.16	20.114.59.183
Jan 17, 2024 18:05:54.240403891 CET	443	49733	20.114.59.183	192.168.2.16
Jan 17, 2024 18:05:54.500053883 CET	443	49729	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:54.500118017 CET	443	49729	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:54.500230074 CET	49729	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:54.677145004 CET	49704	443	192.168.2.16	23.1.237.25
Jan 17, 2024 18:05:54.745546103 CET	443	49733	20.114.59.183	192.168.2.16
Jan 17, 2024 18:05:54.745904922 CET	49733	443	192.168.2.16	20.114.59.183
Jan 17, 2024 18:05:54.749494076 CET	49733	443	192.168.2.16	20.114.59.183
Jan 17, 2024 18:05:54.749500036 CET	443	49733	20.114.59.183	192.168.2.16
Jan 17, 2024 18:05:54.749908924 CET	443	49733	20.114.59.183	192.168.2.16
Jan 17, 2024 18:05:54.794907093 CET	49733	443	192.168.2.16	20.114.59.183
Jan 17, 2024 18:05:54.830837011 CET	443	49704	23.1.237.25	192.168.2.16
Jan 17, 2024 18:05:54.832417965 CET	443	49704	23.1.237.25	192.168.2.16
Jan 17, 2024 18:05:54.832439899 CET	443	49704	23.1.237.25	192.168.2.16
Jan 17, 2024 18:05:54.832457066 CET	443	49704	23.1.237.25	192.168.2.16
Jan 17, 2024 18:05:54.832473040 CET	443	49704	23.1.237.25	192.168.2.16
Jan 17, 2024 18:05:54.832503080 CET	49704	443	192.168.2.16	23.1.237.25
Jan 17, 2024 18:05:54.832503080 CET	49704	443	192.168.2.16	23.1.237.25
Jan 17, 2024 18:05:54.832582951 CET	49704	443	192.168.2.16	23.1.237.25
Jan 17, 2024 18:05:54.856492996 CET	49733	443	192.168.2.16	20.114.59.183
Jan 17, 2024 18:05:54.897950888 CET	443	49733	20.114.59.183	192.168.2.16
Jan 17, 2024 18:05:55.179133892 CET	49704	443	192.168.2.16	23.1.237.25
Jan 17, 2024 18:05:55.222233057 CET	443	49733	20.114.59.183	192.168.2.16
Jan 17, 2024 18:05:55.222284079 CET	443	49733	20.114.59.183	192.168.2.16
Jan 17, 2024 18:05:55.222305059 CET	443	49733	20.114.59.183	192.168.2.16
Jan 17, 2024 18:05:55.222346067 CET	443	49733	20.114.59.183	192.168.2.16
Jan 17, 2024 18:05:55.222356081 CET	49733	443	192.168.2.16	20.114.59.183
Jan 17, 2024 18:05:55.222373962 CET	443	49733	20.114.59.183	192.168.2.16
Jan 17, 2024 18:05:55.222383976 CET	443	49733	20.114.59.183	192.168.2.16
Jan 17, 2024 18:05:55.222402096 CET	49733	443	192.168.2.16	20.114.59.183
Jan 17, 2024 18:05:55.222426891 CET	49733	443	192.168.2.16	20.114.59.183
Jan 17, 2024 18:05:55.222505093 CET	443	49733	20.114.59.183	192.168.2.16
Jan 17, 2024 18:05:55.222569942 CET	49733	443	192.168.2.16	20.114.59.183
Jan 17, 2024 18:05:55.222575903 CET	443	49733	20.114.59.183	192.168.2.16
Jan 17, 2024 18:05:55.222702026 CET	443	49733	20.114.59.183	192.168.2.16
Jan 17, 2024 18:05:55.222749949 CET	49733	443	192.168.2.16	20.114.59.183
Jan 17, 2024 18:05:55.246244907 CET	49733	443	192.168.2.16	20.114.59.183
Jan 17, 2024 18:05:55.246258974 CET	443	49733	20.114.59.183	192.168.2.16
Jan 17, 2024 18:05:55.246284962 CET	49733	443	192.168.2.16	20.114.59.183
Jan 17, 2024 18:05:55.246289968 CET	443	49733	20.114.59.183	192.168.2.16
Jan 17, 2024 18:05:55.332849026 CET	443	49704	23.1.237.25	192.168.2.16
Jan 17, 2024 18:05:55.333142042 CET	443	49704	23.1.237.25	192.168.2.16
Jan 17, 2024 18:05:55.333209038 CET	49704	443	192.168.2.16	23.1.237.25
Jan 17, 2024 18:05:55.336548090 CET	49704	443	192.168.2.16	23.1.237.25
Jan 17, 2024 18:05:55.336723089 CET	49704	443	192.168.2.16	23.1.237.25
Jan 17, 2024 18:05:55.337007046 CET	49704	443	192.168.2.16	23.1.237.25
Jan 17, 2024 18:05:55.337058067 CET	49704	443	192.168.2.16	23.1.237.25
Jan 17, 2024 18:05:55.489680052 CET	443	49704	23.1.237.25	192.168.2.16
Jan 17, 2024 18:05:55.489696026 CET	443	49704	23.1.237.25	192.168.2.16
Jan 17, 2024 18:05:55.489840031 CET	443	49704	23.1.237.25	192.168.2.16
Jan 17, 2024 18:05:55.489948034 CET	443	49704	23.1.237.25	192.168.2.16
Jan 17, 2024 18:05:55.489967108 CET	443	49704	23.1.237.25	192.168.2.16
Jan 17, 2024 18:05:55.490031004 CET	49704	443	192.168.2.16	23.1.237.25
Jan 17, 2024 18:05:55.490031004 CET	49704	443	192.168.2.16	23.1.237.25
Jan 17, 2024 18:05:55.492378950 CET	443	49704	23.1.237.25	192.168.2.16
Jan 17, 2024 18:05:55.534342051 CET	443	49704	23.1.237.25	192.168.2.16
Jan 17, 2024 18:05:55.534362078 CET	443	49704	23.1.237.25	192.168.2.16
Jan 17, 2024 18:05:55.534415960 CET	49704	443	192.168.2.16	23.1.237.25
Jan 17, 2024 18:05:55.534415960 CET	49704	443	192.168.2.16	23.1.237.25
Jan 17, 2024 18:05:55.543054104 CET	49704	443	192.168.2.16	23.1.237.25
Jan 17, 2024 18:05:55.737420082 CET	443	49704	23.1.237.25	192.168.2.16
Jan 17, 2024 18:05:56.070319891 CET	49729	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:56.070343018 CET	443	49729	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:57.953407049 CET	49735	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:57.953444958 CET	443	49735	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:57.953742027 CET	49735	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:57.953883886 CET	49735	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:57.953897953 CET	443	49735	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:58.147974968 CET	443	49735	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:58.164674044 CET	49735	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:58.164686918 CET	443	49735	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:58.166112900 CET	443	49735	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:58.176110983 CET	49735	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:58.176301956 CET	443	49735	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:58.176554918 CET	49736	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:58.176599026 CET	443	49736	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:58.176680088 CET	49736	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:58.176769972 CET	49735	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:58.178081036 CET	49736	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:58.178097963 CET	443	49736	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:58.217906952 CET	443	49735	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:58.228751898 CET	49737	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:58.228787899 CET	443	49737	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:58.228852987 CET	49737	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:58.229111910 CET	49737	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:58.229124069 CET	443	49737	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:58.351125956 CET	443	49735	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:58.351259947 CET	443	49735	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:58.351418972 CET	49735	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:58.351433039 CET	443	49735	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:58.354588985 CET	443	49735	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:58.354805946 CET	49735	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:58.354940891 CET	49735	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:58.354955912 CET	443	49735	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:58.369072914 CET	443	49736	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:58.369539976 CET	49736	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:58.369554043 CET	443	49736	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:58.369848013 CET	443	49736	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:58.370155096 CET	49736	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:58.370210886 CET	443	49736	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:58.370327950 CET	49736	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:58.413903952 CET	443	49736	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:58.426975012 CET	443	49737	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:58.428282976 CET	49737	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:58.428303003 CET	443	49737	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:58.429176092 CET	443	49737	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:58.429462910 CET	49737	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:58.429523945 CET	443	49737	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:58.429979086 CET	49738	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:58.430017948 CET	443	49738	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:58.430054903 CET	49737	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:58.430100918 CET	49738	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:58.430320024 CET	49738	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:58.430334091 CET	443	49738	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:58.477912903 CET	443	49737	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:58.627156019 CET	443	49738	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:58.627525091 CET	49738	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:58.627557993 CET	443	49738	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:58.628022909 CET	443	49738	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:58.628418922 CET	49738	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:58.628499985 CET	443	49738	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:58.628557920 CET	49738	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:58.673901081 CET	443	49738	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:58.924436092 CET	443	49736	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:58.924518108 CET	49736	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:58.924546003 CET	443	49736	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:58.924560070 CET	443	49736	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:58.924654961 CET	49736	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:58.925401926 CET	49736	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:58.925416946 CET	443	49736	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:58.927346945 CET	49739	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:58.927378893 CET	443	49739	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:58.927484035 CET	49739	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:58.927757025 CET	49739	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:58.927768946 CET	443	49739	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:58.931806087 CET	443	49737	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:58.931982994 CET	49737	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:58.932012081 CET	443	49737	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:58.932153940 CET	443	49737	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:58.932226896 CET	49737	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:58.932388067 CET	49737	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:58.932404995 CET	443	49737	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:58.932414055 CET	49737	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:58.932447910 CET	49737	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:59.114658117 CET	443	49739	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:59.121179104 CET	49739	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:59.121189117 CET	443	49739	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:59.121479034 CET	443	49739	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:59.123533964 CET	49739	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:59.123589039 CET	443	49739	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:59.124022961 CET	49740	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:59.124047041 CET	443	49740	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:59.124116898 CET	49740	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:59.124366999 CET	49739	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:59.124629021 CET	49740	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:59.124643087 CET	443	49740	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:59.169903040 CET	443	49739	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:59.245673895 CET	443	49738	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:59.245768070 CET	49738	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:59.245837927 CET	443	49738	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:59.246117115 CET	443	49738	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:59.246179104 CET	49738	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:59.246572018 CET	49738	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:59.246596098 CET	443	49738	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:59.246608973 CET	49738	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:59.246654987 CET	49738	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:59.248786926 CET	49741	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:59.248816013 CET	443	49741	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:59.248882055 CET	49741	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:59.249109983 CET	49741	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:59.249125004 CET	443	49741	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:59.301162958 CET	443	49739	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:59.301193953 CET	443	49739	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:59.301239967 CET	443	49739	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:59.301273108 CET	49739	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:59.301287889 CET	443	49739	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:59.301301956 CET	443	49739	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:59.301347971 CET	49739	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:59.301939011 CET	49739	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:59.301948071 CET	443	49739	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:59.320545912 CET	443	49740	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:59.320831060 CET	49740	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:59.320842981 CET	443	49740	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:59.321295023 CET	443	49740	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:59.321605921 CET	49740	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:59.321665049 CET	443	49740	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:59.321748018 CET	49740	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:59.361928940 CET	443	49740	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:59.449493885 CET	443	49741	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:59.453777075 CET	49741	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:59.453789949 CET	443	49741	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:59.454277992 CET	443	49741	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:59.454596996 CET	49741	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:59.454674006 CET	443	49741	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:59.454783916 CET	49741	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:59.497930050 CET	443	49741	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:59.506007910 CET	443	49740	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:59.506149054 CET	443	49740	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:59.506206036 CET	49740	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:59.506217957 CET	443	49740	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:59.506439924 CET	443	49740	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:59.506582022 CET	49740	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:59.546200037 CET	49740	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:59.546211004 CET	443	49740	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:59.642035961 CET	443	49741	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:59.642168999 CET	443	49741	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:59.642221928 CET	49741	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:59.642232895 CET	443	49741	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:59.642478943 CET	443	49741	142.250.72.100	192.168.2.16
Jan 17, 2024 18:05:59.642551899 CET	49741	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:59.644131899 CET	49741	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:05:59.644143105 CET	443	49741	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:00.764487028 CET	49742	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:00.764539957 CET	443	49742	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:00.764640093 CET	49742	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:00.764940977 CET	49742	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:00.764955997 CET	443	49742	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:00.961802006 CET	443	49742	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:00.962225914 CET	49742	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:00.962268114 CET	443	49742	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:00.962745905 CET	443	49742	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:00.963224888 CET	49742	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:00.963303089 CET	443	49742	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:00.963597059 CET	49743	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:00.963634014 CET	443	49743	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:00.963706017 CET	49743	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:00.963814974 CET	49742	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:00.964117050 CET	49743	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:00.964131117 CET	443	49743	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:01.009912014 CET	443	49742	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:01.150441885 CET	443	49743	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:01.157347918 CET	49743	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:01.157361031 CET	443	49743	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:01.157730103 CET	443	49743	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:01.158113003 CET	49743	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:01.158169985 CET	443	49743	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:01.158261061 CET	49743	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:01.172661066 CET	443	49742	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:01.172792912 CET	443	49742	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:01.172904015 CET	49742	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:01.172939062 CET	443	49742	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:01.175326109 CET	443	49742	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:01.175493002 CET	49742	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:01.175493002 CET	49742	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:01.205902100 CET	443	49743	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:01.363739014 CET	443	49743	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:01.363768101 CET	443	49743	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:01.363835096 CET	49743	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:01.363857031 CET	443	49743	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:01.366736889 CET	443	49743	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:01.366799116 CET	49743	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:01.366904974 CET	49743	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:01.366914988 CET	443	49743	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:01.475847960 CET	49742	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:01.475893974 CET	443	49742	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:03.728241920 CET	49744	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:03.728283882 CET	443	49744	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:03.728368998 CET	49744	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:03.728794098 CET	49744	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:03.728811026 CET	443	49744	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:03.926387072 CET	443	49744	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:03.926820040 CET	49744	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:03.926843882 CET	443	49744	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:03.928288937 CET	443	49744	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:03.928734064 CET	49744	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:03.928831100 CET	443	49744	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:03.928865910 CET	49744	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:03.973902941 CET	443	49744	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:03.978668928 CET	49744	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:04.138844967 CET	443	49744	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:04.138962030 CET	443	49744	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:04.139040947 CET	443	49744	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:04.139107943 CET	49744	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:04.139137983 CET	443	49744	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:04.140136003 CET	49744	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:04.447478056 CET	443	49744	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:04.447706938 CET	443	49744	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:04.447798014 CET	49744	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:04.447822094 CET	443	49744	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:04.447838068 CET	49744	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:04.447870970 CET	49744	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:04.624578953 CET	49750	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:04.624608040 CET	443	49750	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:04.624676943 CET	49750	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:04.625031948 CET	49750	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:04.625042915 CET	443	49750	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:04.717804909 CET	49751	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:04.717907906 CET	443	49751	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:04.718040943 CET	49751	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:04.718280077 CET	49751	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:04.718311071 CET	443	49751	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:04.820919037 CET	443	49750	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:04.825021029 CET	49750	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:04.825032949 CET	443	49750	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:04.825489044 CET	49752	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:04.825510025 CET	443	49750	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:04.825512886 CET	443	49752	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:04.825577021 CET	49752	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:04.826224089 CET	49750	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:04.826312065 CET	443	49750	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:04.826746941 CET	49752	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:04.826761961 CET	443	49752	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:04.827013969 CET	49750	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:04.869900942 CET	443	49750	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:04.913875103 CET	443	49751	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:04.914166927 CET	49751	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:04.914223909 CET	443	49751	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:04.915705919 CET	443	49751	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:04.916088104 CET	49751	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:04.916285992 CET	443	49751	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:04.966666937 CET	49751	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:05.030592918 CET	443	49752	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:05.031055927 CET	49752	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:05.031065941 CET	443	49752	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:05.031443119 CET	443	49750	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:05.031483889 CET	443	49750	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:05.031533003 CET	49750	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:05.031543970 CET	443	49750	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:05.032125950 CET	443	49752	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:05.032198906 CET	49752	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:05.032577038 CET	49752	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:05.032639980 CET	443	49752	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:05.035747051 CET	443	49750	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:05.035805941 CET	49750	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:05.035994053 CET	49750	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:05.036005020 CET	443	49750	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:05.078691006 CET	49752	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:05.078699112 CET	443	49752	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:05.126667023 CET	49752	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:05.224998951 CET	49751	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:05.255868912 CET	49751	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:05.255892992 CET	443	49751	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:05.256016970 CET	443	49751	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:05.256100893 CET	49751	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:06.153914928 CET	49752	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:06.197904110 CET	443	49752	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:06.296025038 CET	443	49752	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:06.296166897 CET	443	49752	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:06.296237946 CET	49752	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:06.296241045 CET	443	49752	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:06.296269894 CET	443	49752	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:06.296346903 CET	49752	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:06.301636934 CET	443	49752	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:06.301786900 CET	49752	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:06.301810026 CET	443	49752	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:06.301829100 CET	443	49752	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:06.301877975 CET	49752	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:06.301907063 CET	49752	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:06.322043896 CET	49753	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:06.322108030 CET	443	49753	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:06.322228909 CET	49753	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:06.322926998 CET	49753	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:06.322954893 CET	443	49753	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:06.507901907 CET	49754	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:06.507936001 CET	443	49754	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:06.507993937 CET	49754	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:06.508534908 CET	49754	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:06.508543968 CET	443	49754	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:06.516678095 CET	443	49753	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:06.538572073 CET	49753	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:06.538583994 CET	443	49753	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:06.539149046 CET	443	49753	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:06.540580034 CET	49753	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:06.540676117 CET	443	49753	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:06.540834904 CET	49753	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:06.581898928 CET	443	49753	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:06.604490995 CET	49753	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:06.604552031 CET	443	49753	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:06.604620934 CET	49753	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:06.606340885 CET	49755	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:06.606385946 CET	443	49755	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:06.606473923 CET	49755	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:06.606878996 CET	49755	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:06.606898069 CET	443	49755	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:06.698761940 CET	443	49754	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:06.699306011 CET	49754	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:06.699327946 CET	443	49754	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:06.699692011 CET	443	49754	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:06.700133085 CET	49754	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:06.700197935 CET	443	49754	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:06.700334072 CET	49754	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:06.745901108 CET	443	49754	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:06.795161963 CET	443	49755	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:06.795751095 CET	49755	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:06.795780897 CET	443	49755	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:06.797427893 CET	443	49755	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:06.797508955 CET	49755	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:06.797875881 CET	49755	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:06.797969103 CET	443	49755	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:06.842677116 CET	49755	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:06.842703104 CET	443	49755	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:06.877091885 CET	49754	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:06.877207041 CET	443	49754	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:06.877293110 CET	49754	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:06.878596067 CET	49755	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:06.921910048 CET	443	49755	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:07.015183926 CET	443	49755	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:07.015249014 CET	443	49755	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:07.015316963 CET	49755	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:07.015350103 CET	443	49755	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:07.018860102 CET	443	49755	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:07.018939018 CET	49755	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:07.019046068 CET	49755	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:07.019076109 CET	443	49755	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:07.119271040 CET	49756	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:07.119302034 CET	443	49756	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:07.119371891 CET	49756	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:07.119780064 CET	49756	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:07.119797945 CET	443	49756	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:07.308280945 CET	443	49756	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:07.308666945 CET	49756	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:07.308680058 CET	443	49756	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:07.309179068 CET	443	49756	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:07.309576988 CET	49756	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:07.309670925 CET	443	49756	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:07.309952021 CET	49756	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:07.357899904 CET	443	49756	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:07.469693899 CET	49756	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:07.469966888 CET	443	49756	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:07.470046043 CET	49756	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:07.471560001 CET	49757	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:07.471625090 CET	443	49757	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:07.471704960 CET	49757	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:07.472099066 CET	49757	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:07.472115040 CET	443	49757	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:07.661298037 CET	443	49757	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:07.661575079 CET	49757	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:07.661597013 CET	443	49757	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:07.663279057 CET	443	49757	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:07.663358927 CET	49757	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:07.663738012 CET	49757	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:07.663830996 CET	443	49757	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:07.663922071 CET	49757	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:07.663935900 CET	443	49757	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:07.676268101 CET	49757	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:07.676331043 CET	443	49757	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:07.676409960 CET	49757	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:07.677417994 CET	49758	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:07.677448034 CET	443	49758	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:07.677527905 CET	49758	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:07.677795887 CET	49758	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:07.677809954 CET	443	49758	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:07.870075941 CET	443	49758	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:07.891865969 CET	49758	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:07.891875982 CET	443	49758	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:07.895792961 CET	443	49758	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:07.895884991 CET	49758	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:07.896470070 CET	49758	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:07.896660089 CET	443	49758	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:07.896688938 CET	49758	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:07.938082933 CET	443	49758	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:07.942706108 CET	49758	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:07.942713022 CET	443	49758	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:07.988687992 CET	49758	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:08.089819908 CET	443	49758	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:08.090730906 CET	443	49758	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:08.090810061 CET	49758	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:08.090821028 CET	443	49758	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:08.093291998 CET	443	49758	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:08.093375921 CET	49758	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:08.093496084 CET	49758	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:08.093504906 CET	443	49758	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:08.599515915 CET	49759	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:08.599559069 CET	443	49759	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:08.599668980 CET	49759	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:08.599956036 CET	49759	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:08.599971056 CET	443	49759	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:08.797254086 CET	443	49759	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:08.797558069 CET	49759	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:08.797566891 CET	443	49759	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:08.798589945 CET	443	49759	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:08.798904896 CET	49759	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:08.798990011 CET	443	49759	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:08.799040079 CET	49759	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:08.841979980 CET	443	49759	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:08.850761890 CET	49759	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:09.025518894 CET	443	49759	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:09.025566101 CET	443	49759	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:09.025640965 CET	49759	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:09.025654078 CET	443	49759	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:09.030349970 CET	443	49759	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:09.030441999 CET	49759	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:09.030538082 CET	49759	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:09.030550957 CET	443	49759	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:09.111893892 CET	49760	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:09.111979961 CET	443	49760	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:09.112076044 CET	49760	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:09.112588882 CET	49760	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:09.112627983 CET	443	49760	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:09.304825068 CET	443	49760	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:09.305222034 CET	49760	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:09.305280924 CET	443	49760	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:09.305751085 CET	443	49760	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:09.306046963 CET	49760	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:09.306135893 CET	443	49760	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:09.306186914 CET	49760	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:09.315525055 CET	49760	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:09.315551043 CET	443	49760	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:09.315573931 CET	443	49760	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:09.315670013 CET	49760	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:09.316742897 CET	49761	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:09.316765070 CET	443	49761	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:09.316859961 CET	49761	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:09.317095995 CET	49761	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:09.317114115 CET	443	49761	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:09.517071962 CET	443	49761	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:09.517358065 CET	49761	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:09.517371893 CET	443	49761	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:09.520788908 CET	443	49761	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:09.520865917 CET	49761	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:09.522073984 CET	49761	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:09.522161007 CET	443	49761	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:09.522299051 CET	49761	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:09.522308111 CET	443	49761	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:09.553633928 CET	49761	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:09.553719044 CET	443	49761	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:09.553809881 CET	49761	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:09.554903030 CET	49762	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:09.554987907 CET	443	49762	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:09.555090904 CET	49762	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:09.555362940 CET	49762	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:09.555396080 CET	443	49762	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:09.751482964 CET	443	49762	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:09.751734972 CET	49762	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:09.751797915 CET	443	49762	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:09.753257990 CET	443	49762	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:09.753345966 CET	49762	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:09.753606081 CET	49762	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:09.753704071 CET	443	49762	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:09.753736019 CET	49762	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:09.793905973 CET	443	49762	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:09.806819916 CET	49762	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:09.806879997 CET	443	49762	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:09.854688883 CET	49762	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:10.000349998 CET	49762	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:10.000488997 CET	443	49762	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:10.000571966 CET	49762	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:10.002290010 CET	49763	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:10.002341032 CET	443	49763	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:10.002429962 CET	49763	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:10.002732992 CET	49763	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:10.002752066 CET	443	49763	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:10.200975895 CET	443	49763	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:10.201275110 CET	49763	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:10.201292038 CET	443	49763	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:10.202744961 CET	443	49763	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:10.202822924 CET	49763	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:10.203095913 CET	49763	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:10.203175068 CET	443	49763	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:10.203217983 CET	49763	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:10.245944023 CET	443	49763	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:10.252680063 CET	49763	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:10.252692938 CET	443	49763	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:10.300683975 CET	49763	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:10.435180902 CET	443	49763	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:10.436778069 CET	443	49763	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:10.436872959 CET	49763	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:10.438035011 CET	49763	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:10.438052893 CET	443	49763	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:10.622311115 CET	49764	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:10.622404099 CET	443	49764	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:10.622517109 CET	49764	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:10.625447989 CET	49764	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:10.625483036 CET	443	49764	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:10.731002092 CET	49765	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:10.731040001 CET	443	49765	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:10.731112003 CET	49765	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:10.731595039 CET	49765	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:10.731607914 CET	443	49765	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:10.823524952 CET	443	49764	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:10.823885918 CET	49764	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:10.823920012 CET	443	49764	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:10.824609995 CET	443	49764	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:10.824997902 CET	49764	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:10.825093985 CET	443	49764	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:10.825159073 CET	49764	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:10.865911961 CET	443	49764	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:10.873682976 CET	49764	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:10.920420885 CET	443	49765	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:10.920906067 CET	49765	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:10.920917988 CET	443	49765	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:10.921241045 CET	443	49765	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:10.921638012 CET	49765	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:10.921701908 CET	443	49765	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:10.969680071 CET	49765	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:11.055896997 CET	443	49764	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:11.059108019 CET	443	49764	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:11.059355974 CET	49764	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:11.060873032 CET	49764	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:11.060914040 CET	443	49764	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:13.095088005 CET	49765	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:13.137936115 CET	443	49765	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:13.223336935 CET	443	49765	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:13.227444887 CET	443	49765	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:13.227535963 CET	49765	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:13.228718996 CET	49765	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:13.228738070 CET	443	49765	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:13.446346045 CET	49766	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:13.446429968 CET	443	49766	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:13.446548939 CET	49766	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:13.446857929 CET	49766	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:13.446897984 CET	443	49766	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:13.573918104 CET	49767	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:13.573954105 CET	443	49767	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:13.574089050 CET	49767	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:13.574410915 CET	49767	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:13.574424982 CET	443	49767	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:13.648053885 CET	443	49766	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:13.648442030 CET	49766	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:13.648503065 CET	443	49766	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:13.649204016 CET	443	49766	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:13.649492979 CET	49766	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:13.649593115 CET	443	49766	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:13.649662971 CET	49766	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:13.689935923 CET	443	49766	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:13.698849916 CET	49766	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:13.701169014 CET	49766	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:13.701256037 CET	443	49766	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:13.701332092 CET	49766	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:13.702488899 CET	49768	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:13.702533007 CET	443	49768	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:13.702620029 CET	49768	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:13.703102112 CET	49768	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:13.703140974 CET	443	49768	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:13.770360947 CET	443	49767	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:13.770962000 CET	49767	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:13.770976067 CET	443	49767	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:13.771425962 CET	443	49767	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:13.771821022 CET	49767	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:13.771821976 CET	49767	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:13.771835089 CET	443	49767	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:13.771878958 CET	443	49767	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:13.825915098 CET	49767	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:13.897562981 CET	443	49768	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:13.898197889 CET	49768	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:13.898264885 CET	443	49768	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:13.899740934 CET	443	49768	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:13.899821997 CET	49768	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:13.900183916 CET	49768	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:13.900270939 CET	443	49768	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:13.952677965 CET	49768	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:13.952712059 CET	443	49768	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:13.988569021 CET	443	49767	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:13.991679907 CET	443	49767	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:13.991904974 CET	49767	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:13.992593050 CET	49767	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:13.992605925 CET	443	49767	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:14.000808954 CET	49768	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:23.944735050 CET	443	49768	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:23.944897890 CET	443	49768	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:23.944993019 CET	49768	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:24.072376013 CET	49768	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:24.072402000 CET	443	49768	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:31.785507917 CET	49771	443	192.168.2.16	20.114.59.183
Jan 17, 2024 18:06:31.785552025 CET	443	49771	20.114.59.183	192.168.2.16
Jan 17, 2024 18:06:31.785667896 CET	49771	443	192.168.2.16	20.114.59.183
Jan 17, 2024 18:06:31.786361933 CET	49771	443	192.168.2.16	20.114.59.183
Jan 17, 2024 18:06:31.786382914 CET	443	49771	20.114.59.183	192.168.2.16
Jan 17, 2024 18:06:32.285429001 CET	443	49771	20.114.59.183	192.168.2.16
Jan 17, 2024 18:06:32.285568953 CET	49771	443	192.168.2.16	20.114.59.183
Jan 17, 2024 18:06:32.290987015 CET	49771	443	192.168.2.16	20.114.59.183
Jan 17, 2024 18:06:32.291001081 CET	443	49771	20.114.59.183	192.168.2.16
Jan 17, 2024 18:06:32.291209936 CET	443	49771	20.114.59.183	192.168.2.16
Jan 17, 2024 18:06:32.306479931 CET	49771	443	192.168.2.16	20.114.59.183
Jan 17, 2024 18:06:32.349904060 CET	443	49771	20.114.59.183	192.168.2.16
Jan 17, 2024 18:06:32.769648075 CET	443	49771	20.114.59.183	192.168.2.16
Jan 17, 2024 18:06:32.769706964 CET	443	49771	20.114.59.183	192.168.2.16
Jan 17, 2024 18:06:32.769750118 CET	443	49771	20.114.59.183	192.168.2.16
Jan 17, 2024 18:06:32.769917965 CET	49771	443	192.168.2.16	20.114.59.183
Jan 17, 2024 18:06:32.769917965 CET	49771	443	192.168.2.16	20.114.59.183
Jan 17, 2024 18:06:32.769937992 CET	443	49771	20.114.59.183	192.168.2.16
Jan 17, 2024 18:06:32.770024061 CET	443	49771	20.114.59.183	192.168.2.16
Jan 17, 2024 18:06:32.770062923 CET	49771	443	192.168.2.16	20.114.59.183
Jan 17, 2024 18:06:32.770070076 CET	443	49771	20.114.59.183	192.168.2.16
Jan 17, 2024 18:06:32.770092964 CET	49771	443	192.168.2.16	20.114.59.183
Jan 17, 2024 18:06:32.770117044 CET	49771	443	192.168.2.16	20.114.59.183
Jan 17, 2024 18:06:32.770123005 CET	443	49771	20.114.59.183	192.168.2.16
Jan 17, 2024 18:06:32.770165920 CET	49771	443	192.168.2.16	20.114.59.183
Jan 17, 2024 18:06:32.770226955 CET	443	49771	20.114.59.183	192.168.2.16
Jan 17, 2024 18:06:32.770282030 CET	49771	443	192.168.2.16	20.114.59.183
Jan 17, 2024 18:06:32.779732943 CET	49771	443	192.168.2.16	20.114.59.183
Jan 17, 2024 18:06:32.779753923 CET	443	49771	20.114.59.183	192.168.2.16
Jan 17, 2024 18:06:32.779911041 CET	49771	443	192.168.2.16	20.114.59.183
Jan 17, 2024 18:06:32.779918909 CET	443	49771	20.114.59.183	192.168.2.16
Jan 17, 2024 18:06:37.159924984 CET	49772	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:37.160037041 CET	443	49772	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:37.160159111 CET	49772	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:37.160614967 CET	49772	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:37.160650969 CET	443	49772	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:37.353230000 CET	443	49772	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:37.353781939 CET	49772	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:37.353802919 CET	443	49772	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:37.354460001 CET	443	49772	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:37.354818106 CET	49772	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:37.354938984 CET	443	49772	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:37.354990959 CET	49772	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:37.401910067 CET	443	49772	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:37.408674955 CET	49772	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:37.561655045 CET	443	49772	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:37.561800003 CET	443	49772	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:37.561914921 CET	443	49772	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:37.561917067 CET	49772	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:37.561964035 CET	443	49772	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:37.562005997 CET	49772	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:37.567327023 CET	443	49772	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:37.567404985 CET	49772	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:37.567420959 CET	443	49772	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:37.570077896 CET	443	49772	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:37.570153952 CET	49772	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:37.570282936 CET	49772	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:37.570313931 CET	443	49772	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:42.958847046 CET	49774	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:42.958885908 CET	443	49774	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:42.958947897 CET	49774	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:42.959949017 CET	49774	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:42.959964037 CET	443	49774	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:43.159255981 CET	443	49774	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:43.159676075 CET	49774	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:43.159693956 CET	443	49774	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:43.160408974 CET	443	49774	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:43.160809040 CET	49774	443	192.168.2.16	142.250.72.100
Jan 17, 2024 18:06:43.160901070 CET	443	49774	142.250.72.100	192.168.2.16
Jan 17, 2024 18:06:43.161003113 CET	49774	443	192.168.2.16	142.250.72.100

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 17, 2024 18:05:39.800159931 CET	192.168.2.16	1.1.1.1	0x819f	Standard query (0)	livespoints.com	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:05:39.800468922 CET	192.168.2.16	1.1.1.1	0x5bf	Standard query (0)	livespoints.com	65	IN (0x0001)	false
Jan 17, 2024 18:05:39.927440882 CET	192.168.2.16	1.1.1.1	0x8b6a	Standard query (0)	clients2.google.com	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:05:39.928164005 CET	192.168.2.16	1.1.1.1	0x7cef	Standard query (0)	clients2.google.com	65	IN (0x0001)	false
Jan 17, 2024 18:05:39.929193974 CET	192.168.2.16	1.1.1.1	0x6f1b	Standard query (0)	accounts.google.com	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:05:39.929429054 CET	192.168.2.16	1.1.1.1	0xb74a	Standard query (0)	accounts.google.com	65	IN (0x0001)	false
Jan 17, 2024 18:05:39.943420887 CET	192.168.2.16	1.1.1.1	0xf91c	Standard query (0)	livespoints.com	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:05:39.943752050 CET	192.168.2.16	1.1.1.1	0xec6d	Standard query (0)	livespoints.com	65	IN (0x0001)	false
Jan 17, 2024 18:05:41.346723080 CET	192.168.2.16	1.1.1.1	0xe8e	Standard query (0)	use.typekit.net	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:05:41.347033978 CET	192.168.2.16	1.1.1.1	0x6b23	Standard query (0)	use.typekit.net	65	IN (0x0001)	false
Jan 17, 2024 18:05:44.218118906 CET	192.168.2.16	1.1.1.1	0xd88f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:05:44.218655109 CET	192.168.2.16	1.1.1.1	0xf897	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 17, 2024 18:06:33.587004900 CET	192.168.2.16	1.1.1.1	0x8503	Standard query (0)	www.livespoints.com	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:06:33.587358952 CET	192.168.2.16	1.1.1.1	0x206b	Standard query (0)	www.livespoints.com	65	IN (0x0001)	false
Jan 17, 2024 18:06:33.709270000 CET	192.168.2.16	1.1.1.1	0xee90	Standard query (0)	www.livespoints.com	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:06:33.816107035 CET	192.168.2.16	1.1.1.1	0x3c56	Standard query (0)	www.livespoints.com	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:06:33.816359997 CET	192.168.2.16	1.1.1.1	0x5626	Standard query (0)	www.livespoints.com	65	IN (0x0001)	false
Jan 17, 2024 18:06:33.932198048 CET	192.168.2.16	8.8.8.8	0xaa1	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:06:33.932717085 CET	192.168.2.16	1.1.1.1	0xa040	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:06:34.941967010 CET	192.168.2.16	1.1.1.1	0xd14a	Standard query (0)	www.livespoints.com	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:06:34.942266941 CET	192.168.2.16	1.1.1.1	0x4cfd	Standard query (0)	www.livespoints.com	65	IN (0x0001)	false
Jan 17, 2024 18:06:40.111660004 CET	192.168.2.16	1.1.1.1	0x13ae	Standard query (0)	www.livespoints.com	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:06:40.112313032 CET	192.168.2.16	1.1.1.1	0xf235	Standard query (0)	www.livespoints.com	65	IN (0x0001)	false
Jan 17, 2024 18:06:40.204292059 CET	192.168.2.16	1.1.1.1	0x9c99	Standard query (0)	www.livespoints.com	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:07:06.774099112 CET	192.168.2.16	1.1.1.1	0xd88b	Standard query (0)	ntp.msn.com	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:07:06.775986910 CET	192.168.2.16	1.1.1.1	0xe8d4	Standard query (0)	ntp.msn.com	65	IN (0x0001)	false
Jan 17, 2024 18:07:06.917901993 CET	192.168.2.16	1.1.1.1	0x746e	Standard query (0)	clients2.google.com	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:07:06.918328047 CET	192.168.2.16	1.1.1.1	0x78ab	Standard query (0)	clients2.google.com	65	IN (0x0001)	false
Jan 17, 2024 18:07:08.035222054 CET	192.168.2.16	1.1.1.1	0x8e1c	Standard query (0)	deff.nelreports.net	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:07:08.035754919 CET	192.168.2.16	1.1.1.1	0x6ef4	Standard query (0)	deff.nelreports.net	65	IN (0x0001)	false
Jan 17, 2024 18:07:08.867592096 CET	192.168.2.16	1.1.1.1	0x7594	Standard query (0)	sb.scorecardresearch.com	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:07:08.867860079 CET	192.168.2.16	1.1.1.1	0x4166	Standard query (0)	sb.scorecardresearch.com	65	IN (0x0001)	false
Jan 17, 2024 18:07:08.908653975 CET	192.168.2.16	1.1.1.1	0xec4d	Standard query (0)	assets.msn.com	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:07:08.909468889 CET	192.168.2.16	1.1.1.1	0xb9cb	Standard query (0)	assets.msn.com	65	IN (0x0001)	false
Jan 17, 2024 18:07:08.957741022 CET	192.168.2.16	1.1.1.1	0x9d4c	Standard query (0)	c.msn.com	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:07:08.958061934 CET	192.168.2.16	1.1.1.1	0x678e	Standard query (0)	c.msn.com	65	IN (0x0001)	false
Jan 17, 2024 18:07:09.052071095 CET	192.168.2.16	1.1.1.1	0x78cd	Standard query (0)	api.msn.com	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:07:09.052251101 CET	192.168.2.16	1.1.1.1	0xefdd	Standard query (0)	api.msn.com	65	IN (0x0001)	false
Jan 17, 2024 18:07:11.496211052 CET	192.168.2.16	1.1.1.1	0xc616	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:07:11.496633053 CET	192.168.2.16	1.1.1.1	0xb376	Standard query (0)	chrome.cloudflare-dns.com	65	IN (0x0001)	false
Jan 17, 2024 18:07:11.497565985 CET	192.168.2.16	1.1.1.1	0x9752	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:07:11.499216080 CET	192.168.2.16	1.1.1.1	0x74a	Standard query (0)	chrome.cloudflare-dns.com	65	IN (0x0001)	false
Jan 17, 2024 18:07:11.564871073 CET	192.168.2.16	1.1.1.1	0x8965	Standard query (0)	browser.events.data.msn.com	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:07:11.565181017 CET	192.168.2.16	1.1.1.1	0x2f9	Standard query (0)	browser.events.data.msn.com	65	IN (0x0001)	false
Jan 17, 2024 18:07:11.611211061 CET	192.168.2.16	1.1.1.1	0xe947	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:07:11.611408949 CET	192.168.2.16	1.1.1.1	0x20b8	Standard query (0)	chrome.cloudflare-dns.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 17, 2024 18:05:39.891204119 CET	1.1.1.1	192.168.2.16	0x819f	No error (0)	livespoints.com		172.67.130.252	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:05:39.891204119 CET	1.1.1.1	192.168.2.16	0x819f	No error (0)	livespoints.com		104.21.3.175	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:05:39.891772032 CET	1.1.1.1	192.168.2.16	0x5bf	No error (0)	livespoints.com			65	IN (0x0001)	false
Jan 17, 2024 18:05:40.015651941 CET	1.1.1.1	192.168.2.16	0x8b6a	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 17, 2024 18:05:40.015651941 CET	1.1.1.1	192.168.2.16	0x8b6a	No error (0)	clients.l.google.com		142.251.40.174	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:05:40.016658068 CET	1.1.1.1	192.168.2.16	0x6f1b	No error (0)	accounts.google.com		172.253.115.84	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:05:40.021509886 CET	1.1.1.1	192.168.2.16	0x7cef	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 17, 2024 18:05:40.090485096 CET	1.1.1.1	192.168.2.16	0xec6d	No error (0)	livespoints.com			65	IN (0x0001)	false
Jan 17, 2024 18:05:40.091180086 CET	1.1.1.1	192.168.2.16	0xf91c	No error (0)	livespoints.com		104.21.3.175	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:05:40.091180086 CET	1.1.1.1	192.168.2.16	0xf91c	No error (0)	livespoints.com		172.67.130.252	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:05:41.434760094 CET	1.1.1.1	192.168.2.16	0x6b23	No error (0)	use.typekit.net	use-stls.adobe.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 17, 2024 18:05:41.435729980 CET	1.1.1.1	192.168.2.16	0xe8e	No error (0)	use.typekit.net	use-stls.adobe.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 17, 2024 18:05:44.305896997 CET	1.1.1.1	192.168.2.16	0xd88f	No error (0)	www.google.com		142.250.72.100	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:05:44.306952000 CET	1.1.1.1	192.168.2.16	0xf897	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 17, 2024 18:06:33.677609921 CET	1.1.1.1	192.168.2.16	0x8503	Name error (3)	www.livespoints.com	none	none	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:06:33.734694004 CET	1.1.1.1	192.168.2.16	0x206b	Name error (3)	www.livespoints.com	none	none	65	IN (0x0001)	false
Jan 17, 2024 18:06:33.800196886 CET	1.1.1.1	192.168.2.16	0xee90	Name error (3)	www.livespoints.com	none	none	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:06:33.904565096 CET	1.1.1.1	192.168.2.16	0x3c56	Name error (3)	www.livespoints.com	none	none	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:06:33.908196926 CET	1.1.1.1	192.168.2.16	0x5626	Name error (3)	www.livespoints.com	none	none	65	IN (0x0001)	false
Jan 17, 2024 18:06:34.021027088 CET	1.1.1.1	192.168.2.16	0xa040	No error (0)	google.com		172.217.165.142	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:06:34.022435904 CET	8.8.8.8	192.168.2.16	0xaa1	No error (0)	google.com		172.253.62.113	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:06:34.022435904 CET	8.8.8.8	192.168.2.16	0xaa1	No error (0)	google.com		172.253.62.101	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:06:34.022435904 CET	8.8.8.8	192.168.2.16	0xaa1	No error (0)	google.com		172.253.62.139	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:06:34.022435904 CET	8.8.8.8	192.168.2.16	0xaa1	No error (0)	google.com		172.253.62.138	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:06:34.022435904 CET	8.8.8.8	192.168.2.16	0xaa1	No error (0)	google.com		172.253.62.102	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:06:34.022435904 CET	8.8.8.8	192.168.2.16	0xaa1	No error (0)	google.com		172.253.62.100	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:06:35.033216953 CET	1.1.1.1	192.168.2.16	0x4cfd	Name error (3)	www.livespoints.com	none	none	65	IN (0x0001)	false
Jan 17, 2024 18:06:35.088021040 CET	1.1.1.1	192.168.2.16	0xd14a	Name error (3)	www.livespoints.com	none	none	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:06:40.201457977 CET	1.1.1.1	192.168.2.16	0xf235	Name error (3)	www.livespoints.com	none	none	65	IN (0x0001)	false
Jan 17, 2024 18:06:40.203355074 CET	1.1.1.1	192.168.2.16	0x13ae	Name error (3)	www.livespoints.com	none	none	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:06:40.292843103 CET	1.1.1.1	192.168.2.16	0x9c99	Name error (3)	www.livespoints.com	none	none	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:07:06.862489939 CET	1.1.1.1	192.168.2.16	0xd88b	No error (0)	ntp.msn.com	www-msn-com.a-0003.a-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 17, 2024 18:07:06.864779949 CET	1.1.1.1	192.168.2.16	0xe8d4	No error (0)	ntp.msn.com	www-msn-com.a-0003.a-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 17, 2024 18:07:07.006077051 CET	1.1.1.1	192.168.2.16	0x746e	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 17, 2024 18:07:07.006077051 CET	1.1.1.1	192.168.2.16	0x746e	No error (0)	clients.l.google.com		142.250.72.110	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:07:07.006088972 CET	1.1.1.1	192.168.2.16	0x78ab	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 17, 2024 18:07:07.147538900 CET	1.1.1.1	192.168.2.16	0xb1f6	No error (0)	bingadsedgeextension-prod-eastus.azurewebsites.net	ssl.bingadsedgeextension-prod-eastus.azurewebsites.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 17, 2024 18:07:07.147538900 CET	1.1.1.1	192.168.2.16	0xb1f6	No error (0)	ssl.bingadsedgeextension-prod-eastus.azurewebsites.net		40.71.99.188	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:07:07.149066925 CET	1.1.1.1	192.168.2.16	0xef21	No error (0)	bingadsedgeextension-prod-eastus.azurewebsites.net	ssl.bingadsedgeextension-prod-eastus.azurewebsites.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 17, 2024 18:07:07.149471045 CET	1.1.1.1	192.168.2.16	0x5785	No error (0)	b-0005.b-dc-msedge.net		13.107.9.158	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:07:08.123202085 CET	1.1.1.1	192.168.2.16	0x8e1c	No error (0)	deff.nelreports.net	deff.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 17, 2024 18:07:08.124495983 CET	1.1.1.1	192.168.2.16	0x6ef4	No error (0)	deff.nelreports.net	deff.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 17, 2024 18:07:08.955779076 CET	1.1.1.1	192.168.2.16	0x7594	No error (0)	sb.scorecardresearch.com		18.173.219.113	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:07:08.955779076 CET	1.1.1.1	192.168.2.16	0x7594	No error (0)	sb.scorecardresearch.com		18.173.219.111	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:07:08.955779076 CET	1.1.1.1	192.168.2.16	0x7594	No error (0)	sb.scorecardresearch.com		18.173.219.40	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:07:08.955779076 CET	1.1.1.1	192.168.2.16	0x7594	No error (0)	sb.scorecardresearch.com		18.173.219.84	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:07:08.996387005 CET	1.1.1.1	192.168.2.16	0xec4d	No error (0)	assets.msn.com	assets.msn.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 17, 2024 18:07:08.997088909 CET	1.1.1.1	192.168.2.16	0xb9cb	No error (0)	assets.msn.com	assets.msn.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 17, 2024 18:07:09.045443058 CET	1.1.1.1	192.168.2.16	0x9d4c	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 17, 2024 18:07:09.046345949 CET	1.1.1.1	192.168.2.16	0x678e	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 17, 2024 18:07:09.140253067 CET	1.1.1.1	192.168.2.16	0x78cd	No error (0)	api.msn.com	api-msn-com.a-0003.a-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 17, 2024 18:07:09.140393019 CET	1.1.1.1	192.168.2.16	0xefdd	No error (0)	api.msn.com	api-msn-com.a-0003.a-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 17, 2024 18:07:10.334552050 CET	1.1.1.1	192.168.2.16	0x993	No error (0)	scdn1f005.wpc.ad629.nucdn.net	sni1gl.wpc.nucdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 17, 2024 18:07:10.334552050 CET	1.1.1.1	192.168.2.16	0x993	No error (0)	sni1gl.wpc.nucdn.net		152.195.19.97	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:07:11.584693909 CET	1.1.1.1	192.168.2.16	0xc616	No error (0)	chrome.cloudflare-dns.com		162.159.61.3	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:07:11.584693909 CET	1.1.1.1	192.168.2.16	0xc616	No error (0)	chrome.cloudflare-dns.com		172.64.41.3	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:07:11.584845066 CET	1.1.1.1	192.168.2.16	0xb376	No error (0)	chrome.cloudflare-dns.com			65	IN (0x0001)	false
Jan 17, 2024 18:07:11.586038113 CET	1.1.1.1	192.168.2.16	0x9752	No error (0)	chrome.cloudflare-dns.com		162.159.61.3	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:07:11.586038113 CET	1.1.1.1	192.168.2.16	0x9752	No error (0)	chrome.cloudflare-dns.com		172.64.41.3	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:07:11.587862015 CET	1.1.1.1	192.168.2.16	0x74a	No error (0)	chrome.cloudflare-dns.com			65	IN (0x0001)	false
Jan 17, 2024 18:07:11.657804012 CET	1.1.1.1	192.168.2.16	0x2f9	No error (0)	browser.events.data.msn.com	global.asimov.events.data.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 17, 2024 18:07:11.657861948 CET	1.1.1.1	192.168.2.16	0x8965	No error (0)	browser.events.data.msn.com	global.asimov.events.data.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 17, 2024 18:07:11.699546099 CET	1.1.1.1	192.168.2.16	0xe947	No error (0)	chrome.cloudflare-dns.com		172.64.41.3	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:07:11.699546099 CET	1.1.1.1	192.168.2.16	0xe947	No error (0)	chrome.cloudflare-dns.com		162.159.61.3	A (IP address)	IN (0x0001)	false
Jan 17, 2024 18:07:11.699753046 CET	1.1.1.1	192.168.2.16	0x20b8	No error (0)	chrome.cloudflare-dns.com			65	IN (0x0001)	false

HTTPS Connections

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Jan 17, 2024 18:05:54.832457066 CET	23.1.237.25	443	192.168.2.16	49704	CN=r.bing.com, O=Microsoft Corporation, L=Redmond, ST=WA, C=US CN=Microsoft Azure ECC TLS Issuing CA 05, O=Microsoft Corporation, C=US	CN=Microsoft Azure ECC TLS Issuing CA 05, O=Microsoft Corporation, C=US CN=DigiCert Global Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Oct 18 22:32:40 CEST 2023 Wed Aug 12 02:00:00 CEST 2020	Fri Jun 28 01:59:59 CEST 2024 Fri Jun 28 01:59:59 CEST 2024	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-5-10-11-13-35-16-23-65281,29-23-24,0	28a2c9bd18a11de089ef85a160da29e4
Jan 17, 2024 18:05:54.832457066 CET	23.1.237.25	443	192.168.2.16	49704	CN=Microsoft Azure ECC TLS Issuing CA 05, O=Microsoft Corporation, C=US	CN=DigiCert Global Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Aug 12 02:00:00 CEST 2020	Fri Jun 28 01:59:59 CEST 2024		28a2c9bd18a11de089ef85a160da29e4

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.16	49715	23.51.58.94	443

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:05:33 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-01-17 17:05:33 UTC	456	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0778) X-CID: 11 Cache-Control: public, max-age=144582 Date: Wed, 17 Jan 2024 17:05:33 GMT Content-Length: 55 Connection: close X-CID: 2
2024-01-17 17:05:33 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49717	172.253.115.84	443	5364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:05:40 UTC	680	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
2024-01-17 17:05:40 UTC	1	OUT	Data Raw: 20 Data Ascii:
2024-01-17 17:05:40 UTC	1627	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: https://www.google.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 17 Jan 2024 17:05:40 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Security-Policy: script-src 'report-sample' 'nonce-hrns_E5PbILnnU-OihtNnQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdentityListAccountsHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdentityListAccountsHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/IdentityListAccountsHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-17 17:05:40 UTC	23	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2024-01-17 17:05:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49719	104.21.3.175	443	5364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:05:40 UTC	669	OUT	GET /sso.dsv.com HTTP/1.1 Host: livespoints.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-17 17:05:40 UTC	643	IN	HTTP/1.1 302 Found Date: Wed, 17 Jan 2024 17:05:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.1.26 Location: https://get.adobe.com/uk/reader/ CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ixT%2BM75egjiDoBciKDgKcfWbhj0vMvnAqIzSj1tyUNnPSZg6JX6mMKlTXSuv3EKyjcMAPau7E1bjFFG3PBIWvDdzzEM50Tig8PMY4K974g6a96VcwbAcKPMZRNdhxluvkZI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 84702f33cdc7c32e-EWR alt-svc: h3=":443"; ma=86400
2024-01-17 17:05:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49718	142.251.40.174	443	5364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:05:40 UTC	752	OUT	GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1 Host: clients2.google.com Connection: keep-alive X-Goog-Update-Interactivity: fg X-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda X-Goog-Update-Updater: chromecrx-117.0.5938.132 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-17 17:05:40 UTC	732	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-tRwzRr2bxcQ1b_bRUe7SAw' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 17 Jan 2024 17:05:40 GMT Content-Type: text/xml; charset=UTF-8 X-Daynum: 6225 X-Daystart: 32740 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-17 17:05:40 UTC	520	IN	Data Raw: 32 63 39 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 36 32 32 35 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 33 32 37 34 30 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 Data Ascii: 2c9<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="6225" elapsed_seconds="32740"/><app appid="nmmhkkegccagdldgiimedpiccmgmieda" cohort="1::" cohortname=""
2024-01-17 17:05:40 UTC	200	IN	Data Raw: 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 7a 65 3d 22 32 34 38 35 33 31 22 20 73 74 61 74 75 73 3d 22 6f 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 2e 30 2e 36 22 2f 3e 3c 2f 61 70 70 3e 3c 2f 67 75 70 64 61 74 65 3e 0d 0a Data Ascii: 723f56b8717175c536685c5450122b30789464ad82" hash_sha256="81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" protected="0" size="248531" status="ok" version="1.0.0.6"/></app></gupdate>
2024-01-17 17:05:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49733	20.114.59.183	443

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:05:54 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=LXzxN+gks9rgPkR&MD=5L6ccdVB HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-01-17 17:05:55 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 418f1544-18c9-4cc4-97d0-507034f422eb MS-RequestId: e645dbad-1526-4182-8678-def4230b6067 MS-CV: VK3QQERwk0aro4Ms.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 17 Jan 2024 17:05:54 GMT Connection: close Content-Length: 24490
2024-01-17 17:05:55 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-01-17 17:05:55 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49735	142.250.72.100	443	5364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:05:58 UTC	816	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
2024-01-17 17:05:58 UTC	1880	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:05:58 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-BcMERn4j3wFeZxAcPq_9fw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: CONSENT=PENDING+679; expires=Fri, 16-Jan-2026 17:05:58 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-17 17:05:58 UTC	807	IN	Data Raw: 33 32 30 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 61 64 61 6d 20 73 61 6e 64 6c 65 72 20 73 70 61 63 65 6d 61 6e 20 74 72 61 69 6c 65 72 22 2c 22 63 61 72 72 6f 6c 73 20 72 65 73 74 61 75 72 61 6e 74 20 67 72 6f 75 70 22 2c 22 74 61 6d 70 61 20 62 61 79 20 6c 69 67 68 74 6e 69 6e 67 20 67 61 73 70 61 72 69 6c 6c 61 20 6a 65 72 73 65 79 22 2c 22 6e 76 69 64 69 61 20 67 65 66 6f 72 63 65 20 72 74 78 20 34 30 37 30 20 73 75 70 65 72 22 2c 22 65 64 64 69 65 20 73 68 65 65 72 72 22 2c 22 6f 6e 65 20 70 69 65 63 65 20 63 68 61 70 74 65 72 20 31 31 30 34 20 73 70 6f 69 6c 65 72 73 20 74 77 69 74 74 65 72 22 2c 22 72 69 64 65 61 75 20 63 61 6e 61 6c 20 69 63 65 20 73 6b 61 74 69 6e 67 22 2c 22 73 65 61 6e 20 73 74 72 69 63 6b 6c 61 6e 64 20 75 66 63 20 32 39 37 22 Data Ascii: 320)]}'["",["adam sandler spaceman trailer","carrols restaurant group","tampa bay lightning gasparilla jersey","nvidia geforce rtx 4070 super","eddie sheerr","one piece chapter 1104 spoilers twitter","rideau canal ice skating","sean strickland ufc 297"
2024-01-17 17:05:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49736	142.250.72.100	443	5364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:05:58 UTC	542	OUT	GET /async/ddljson?async=ntp:2 HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
2024-01-17 17:05:58 UTC	1631	IN	HTTP/1.1 302 Found Location: https://www.google.com/sorry/index?continue=https://www.google.com/async/ddljson%3Fasync%3Dntp:2&q=EgSaEMDBGPaRoK0GIjBpKTHiB1lPo_5ATCg0Y_ljqTVs7ue04FDQN5c5AD6uoZOpeYxmac5SIbVe0AdqKFUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM x-hallmonitor-challenge: CgwI9pGgrQYQxvbvmQMSBJoQwME Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Wed, 17 Jan 2024 17:05:58 GMT Server: gws Content-Length: 427 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: 1P_JAR=2024-01-17-17; expires=Fri, 16-Feb-2024 17:05:58 GMT; path=/; domain=.google.com; Secure; SameSite=none Set-Cookie: CONSENT=PENDING+573; expires=Fri, 16-Jan-2026 17:05:58 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-17 17:05:58 UTC	427	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 6f 72 72 79 2f 69 6e 64 65 78 3f 63 6f 6e 74 69 6e 75 65 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 73 79 6e 63 2f 64 64 6c 6a 73 6f 6e 25 33 46 61 73 79 6e Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.com/sorry/index?continue=https://www.google.com/async/ddljson%3Fasyn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49737	142.250.72.100	443	5364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:05:58 UTC	719	OUT	GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
2024-01-17 17:05:58 UTC	1658	IN	HTTP/1.1 302 Found Location: https://www.google.com/sorry/index?continue=https://www.google.com/async/newtab_ogb%3Fhl%3Den-US%26async%3Dfixed:0&hl=en-US&q=EgSaEMDBGPaRoK0GIjAOmc_Jz_xko-DVZ3W6HjcHc-LSn50Hw9wU35RfFftRpCgvJh2nGsSEOSSQ-FATfUYyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM x-hallmonitor-challenge: CgwI9pGgrQYQxtWooQMSBJoQwME Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Wed, 17 Jan 2024 17:05:58 GMT Server: gws Content-Length: 458 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: 1P_JAR=2024-01-17-17; expires=Fri, 16-Feb-2024 17:05:58 GMT; path=/; domain=.google.com; Secure; SameSite=none Set-Cookie: CONSENT=PENDING+742; expires=Fri, 16-Jan-2026 17:05:58 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-17 17:05:58 UTC	458	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 6f 72 72 79 2f 69 6e 64 65 78 3f 63 6f 6e 74 69 6e 75 65 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 73 79 6e 63 2f 6e 65 77 74 61 62 5f 6f 67 62 25 33 46 68 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.com/sorry/index?continue=https://www.google.com/async/newtab_ogb%3Fh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49738	142.250.72.100	443	5364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:05:58 UTC	542	OUT	GET /async/newtab_promos HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
2024-01-17 17:05:59 UTC	1575	IN	HTTP/1.1 302 Found Location: https://www.google.com/sorry/index?continue=https://www.google.com/async/newtab_promos&q=EgSaEMDBGPaRoK0GIjDHIK5GDWyi_yBUojY6f3APLSPB3LXuVUksurPyV3H7YBYbhCbZ720KHz0XUrjTBv8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM x-hallmonitor-challenge: CgsI95GgrQYQ3P2hVxIEmhDAwQ Content-Type: text/html; charset=UTF-8 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Wed, 17 Jan 2024 17:05:59 GMT Server: gws Content-Length: 417 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: 1P_JAR=2024-01-17-17; expires=Fri, 16-Feb-2024 17:05:59 GMT; path=/; domain=.google.com; Secure; SameSite=none Set-Cookie: CONSENT=PENDING+176; expires=Fri, 16-Jan-2026 17:05:58 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-17 17:05:59 UTC	417	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 6f 72 72 79 2f 69 6e 64 65 78 3f 63 6f 6e 74 69 6e 75 65 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 73 79 6e 63 2f 6e 65 77 74 61 62 5f 70 72 6f 6d 6f 73 26 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.com/sorry/index?continue=https://www.google.com/async/newtab_promos&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49739	142.250.72.100	443	5364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:05:59 UTC	742	OUT	GET /sorry/index?continue=https://www.google.com/async/ddljson%3Fasync%3Dntp:2&q=EgSaEMDBGPaRoK0GIjBpKTHiB1lPo_5ATCg0Y_ljqTVs7ue04FDQN5c5AD6uoZOpeYxmac5SIbVe0AdqKFUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17
2024-01-17 17:05:59 UTC	356	IN	HTTP/1.1 429 Too Many Requests Date: Wed, 17 Jan 2024 17:05:59 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html Server: HTTP server (unknown) Content-Length: 3131 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-17 17:05:59 UTC	896	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 74 69 74 6c 65 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 73 79 6e 63 2f 64 64 6c 6a 73 6f 6e 3f 61 73 79 6e 63 3d 6e 74 70 3a 32 3c 2f 74 69 74 6c 65 3e Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"><meta name="viewport" content="initial-scale=1"><title>https://www.google.com/async/ddljson?async=ntp:2</title>
2024-01-17 17:05:59 UTC	1252	IN	Data Raw: 62 6d 69 74 43 61 6c 6c 62 61 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 28 72 65 73 70 6f 6e 73 65 29 20 7b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 61 70 74 63 68 61 2d 66 6f 72 6d 27 29 2e 73 75 62 6d 69 74 28 29 3b 7d 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 64 69 76 20 69 64 3d 22 72 65 63 61 70 74 63 68 61 22 20 63 6c 61 73 73 3d 22 67 2d 72 65 63 61 70 74 63 68 61 22 20 64 61 74 61 2d 73 69 74 65 6b 65 79 3d 22 36 4c 66 77 75 79 55 54 41 41 41 41 41 4f 41 6d 6f 53 30 66 64 71 69 6a 43 32 50 62 62 64 48 34 6b 6a 71 36 32 59 31 62 22 20 64 61 74 61 2d 63 61 6c 6c 62 61 63 6b 3d 22 73 75 62 6d 69 74 43 61 6c 6c 62 61 63 6b 22 20 64 61 74 61 2d 73 3d 22 66 76 34 6c 4f 78 4a 6b 6f 71 77 66 58 53 43 6b 4f 4c 6f 75 37 6d 6f 6b Data Ascii: bmitCallback = function(response) {document.getElementById('captcha-form').submit();};</script><div id="recaptcha" class="g-recaptcha" data-sitekey="6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b" data-callback="submitCallback" data-s="fv4lOxJkoqwfXSCkOLou7mok
2024-01-17 17:05:59 UTC	983	IN	Data Raw: 67 65 20 61 70 70 65 61 72 73 20 77 68 65 6e 20 47 6f 6f 67 6c 65 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 64 65 74 65 63 74 73 20 72 65 71 75 65 73 74 73 20 63 6f 6d 69 6e 67 20 66 72 6f 6d 20 79 6f 75 72 20 63 6f 6d 70 75 74 65 72 20 6e 65 74 77 6f 72 6b 20 77 68 69 63 68 20 61 70 70 65 61 72 20 74 6f 20 62 65 20 69 6e 20 76 69 6f 6c 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 3c 61 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 6f 6c 69 63 69 65 73 2f 74 65 72 6d 73 2f 22 3e 54 65 72 6d 73 20 6f 66 20 53 65 72 76 69 63 65 3c 2f 61 3e 2e 20 54 68 65 20 62 6c 6f 63 6b 20 77 69 6c 6c 20 65 78 70 69 72 65 20 73 68 6f 72 74 6c 79 20 61 66 74 65 72 20 74 68 6f 73 65 20 72 65 71 75 65 73 74 73 20 73 74 6f 70 2e 20 20 49 6e 20 74 68 Data Ascii: ge appears when Google automatically detects requests coming from your computer network which appear to be in violation of the <a href="//www.google.com/policies/terms/">Terms of Service</a>. The block will expire shortly after those requests stop. In th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49740	142.250.72.100	443	5364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:05:59 UTC	932	OUT	GET /sorry/index?continue=https://www.google.com/async/newtab_ogb%3Fhl%3Den-US%26async%3Dfixed:0&hl=en-US&q=EgSaEMDBGPaRoK0GIjAOmc_Jz_xko-DVZ3W6HjcHc-LSn50Hw9wU35RfFftRpCgvJh2nGsSEOSSQ-FATfUYyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17
2024-01-17 17:05:59 UTC	356	IN	HTTP/1.1 429 Too Many Requests Date: Wed, 17 Jan 2024 17:05:59 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html Server: HTTP server (unknown) Content-Length: 3185 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-17 17:05:59 UTC	896	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 74 69 74 6c 65 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 73 79 6e 63 2f 6e 65 77 74 61 62 5f 6f 67 62 3f 68 6c 3d 65 6e 2d 55 53 26 61 6d 70 3b 61 73 79 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"><meta name="viewport" content="initial-scale=1"><title>https://www.google.com/async/newtab_ogb?hl=en-US&asy
2024-01-17 17:05:59 UTC	1252	IN	Data Raw: 70 74 3e 0a 3c 73 63 72 69 70 74 3e 76 61 72 20 73 75 62 6d 69 74 43 61 6c 6c 62 61 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 28 72 65 73 70 6f 6e 73 65 29 20 7b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 61 70 74 63 68 61 2d 66 6f 72 6d 27 29 2e 73 75 62 6d 69 74 28 29 3b 7d 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 64 69 76 20 69 64 3d 22 72 65 63 61 70 74 63 68 61 22 20 63 6c 61 73 73 3d 22 67 2d 72 65 63 61 70 74 63 68 61 22 20 64 61 74 61 2d 73 69 74 65 6b 65 79 3d 22 36 4c 66 77 75 79 55 54 41 41 41 41 41 4f 41 6d 6f 53 30 66 64 71 69 6a 43 32 50 62 62 64 48 34 6b 6a 71 36 32 59 31 62 22 20 64 61 74 61 2d 63 61 6c 6c 62 61 63 6b 3d 22 73 75 62 6d 69 74 43 61 6c 6c 62 61 63 6b 22 20 64 61 74 61 2d 73 3d 22 38 2d 2d 42 4a 35 Data Ascii: pt><script>var submitCallback = function(response) {document.getElementById('captcha-form').submit();};</script><div id="recaptcha" class="g-recaptcha" data-sitekey="6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b" data-callback="submitCallback" data-s="8--BJ5
2024-01-17 17:05:59 UTC	1037	IN	Data Raw: 31 35 70 78 20 30 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 65 6d 3b 22 3e 0a 54 68 69 73 20 70 61 67 65 20 61 70 70 65 61 72 73 20 77 68 65 6e 20 47 6f 6f 67 6c 65 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 64 65 74 65 63 74 73 20 72 65 71 75 65 73 74 73 20 63 6f 6d 69 6e 67 20 66 72 6f 6d 20 79 6f 75 72 20 63 6f 6d 70 75 74 65 72 20 6e 65 74 77 6f 72 6b 20 77 68 69 63 68 20 61 70 70 65 61 72 20 74 6f 20 62 65 20 69 6e 20 76 69 6f 6c 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 3c 61 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 6f 6c 69 63 69 65 73 2f 74 65 72 6d 73 2f 22 3e 54 65 72 6d 73 20 6f 66 20 53 65 72 76 69 63 65 3c 2f 61 3e 2e 20 54 68 65 20 62 6c 6f 63 6b 20 77 69 6c 6c 20 65 78 70 69 72 65 20 73 68 6f 72 74 Data Ascii: 15px 0; line-height:1.4em;">This page appears when Google automatically detects requests coming from your computer network which appear to be in violation of the <a href="//www.google.com/policies/terms/">Terms of Service</a>. The block will expire short

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49741	142.250.72.100	443	5364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:05:59 UTC	738	OUT	GET /sorry/index?continue=https://www.google.com/async/newtab_promos&q=EgSaEMDBGPaRoK0GIjDHIK5GDWyi_yBUojY6f3APLSPB3LXuVUksurPyV3H7YBYbhCbZ720KHz0XUrjTBv8yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17
2024-01-17 17:05:59 UTC	356	IN	HTTP/1.1 429 Too Many Requests Date: Wed, 17 Jan 2024 17:05:59 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html Server: HTTP server (unknown) Content-Length: 3113 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-17 17:05:59 UTC	896	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 74 69 74 6c 65 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 73 79 6e 63 2f 6e 65 77 74 61 62 5f 70 72 6f 6d 6f 73 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"><meta name="viewport" content="initial-scale=1"><title>https://www.google.com/async/newtab_promos</title></head
2024-01-17 17:05:59 UTC	1252	IN	Data Raw: 6c 6c 62 61 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 28 72 65 73 70 6f 6e 73 65 29 20 7b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 61 70 74 63 68 61 2d 66 6f 72 6d 27 29 2e 73 75 62 6d 69 74 28 29 3b 7d 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 64 69 76 20 69 64 3d 22 72 65 63 61 70 74 63 68 61 22 20 63 6c 61 73 73 3d 22 67 2d 72 65 63 61 70 74 63 68 61 22 20 64 61 74 61 2d 73 69 74 65 6b 65 79 3d 22 36 4c 66 77 75 79 55 54 41 41 41 41 41 4f 41 6d 6f 53 30 66 64 71 69 6a 43 32 50 62 62 64 48 34 6b 6a 71 36 32 59 31 62 22 20 64 61 74 61 2d 63 61 6c 6c 62 61 63 6b 3d 22 73 75 62 6d 69 74 43 61 6c 6c 62 61 63 6b 22 20 64 61 74 61 2d 73 3d 22 36 68 44 4b 31 53 35 49 54 33 4e 41 48 77 4e 69 6d 72 75 6c 38 43 68 61 37 71 66 5a 4a 4b Data Ascii: llback = function(response) {document.getElementById('captcha-form').submit();};</script><div id="recaptcha" class="g-recaptcha" data-sitekey="6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b" data-callback="submitCallback" data-s="6hDK1S5IT3NAHwNimrul8Cha7qfZJK
2024-01-17 17:05:59 UTC	965	IN	Data Raw: 68 65 6e 20 47 6f 6f 67 6c 65 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 64 65 74 65 63 74 73 20 72 65 71 75 65 73 74 73 20 63 6f 6d 69 6e 67 20 66 72 6f 6d 20 79 6f 75 72 20 63 6f 6d 70 75 74 65 72 20 6e 65 74 77 6f 72 6b 20 77 68 69 63 68 20 61 70 70 65 61 72 20 74 6f 20 62 65 20 69 6e 20 76 69 6f 6c 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 3c 61 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 6f 6c 69 63 69 65 73 2f 74 65 72 6d 73 2f 22 3e 54 65 72 6d 73 20 6f 66 20 53 65 72 76 69 63 65 3c 2f 61 3e 2e 20 54 68 65 20 62 6c 6f 63 6b 20 77 69 6c 6c 20 65 78 70 69 72 65 20 73 68 6f 72 74 6c 79 20 61 66 74 65 72 20 74 68 6f 73 65 20 72 65 71 75 65 73 74 73 20 73 74 6f 70 2e 20 20 49 6e 20 74 68 65 20 6d 65 61 6e 74 69 6d 65 2c 20 Data Ascii: hen Google automatically detects requests coming from your computer network which appear to be in violation of the <a href="//www.google.com/policies/terms/">Terms of Service</a>. The block will expire shortly after those requests stop. In the meantime,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49742	142.250.72.100	443	5364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:06:00 UTC	824	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17
2024-01-17 17:06:01 UTC	1880	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:06:01 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-jWkvc8cOEz6i02RrZAl8YQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: CONSENT=PENDING+463; expires=Fri, 16-Jan-2026 17:06:01 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-17 17:06:01 UTC	788	IN	Data Raw: 33 30 64 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 61 6d 64 20 73 74 6f 63 6b 73 22 2c 22 65 64 64 69 65 20 73 68 65 65 72 72 22 2c 22 65 76 65 72 74 6f 6e 20 76 73 20 63 72 79 73 74 61 6c 20 70 61 6c 61 63 65 20 70 72 65 64 69 63 74 69 6f 6e 22 2c 22 6f 6e 65 20 70 69 65 63 65 20 63 68 61 70 74 65 72 20 31 31 30 34 20 73 70 6f 69 6c 65 72 73 20 74 77 69 74 74 65 72 22 2c 22 70 61 6c 77 6f 72 6c 64 20 72 65 76 69 65 77 73 22 2c 22 68 6f 74 20 61 69 72 20 62 61 6c 6c 6f 6f 6e 20 63 72 61 73 68 20 61 72 69 7a 6f 6e 61 22 2c 22 6c 6f 74 74 6f 20 6d 61 78 20 6a 61 63 6b 70 6f 74 20 77 69 6e 6e 69 6e 67 20 74 69 63 6b 65 74 22 2c 22 73 63 68 6f 6f 6c 20 63 6c 6f 73 75 72 65 73 20 73 6e 6f 77 20 64 61 79 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 Data Ascii: 30d)]}'["",["amd stocks","eddie sheerr","everton vs crystal palace prediction","one piece chapter 1104 spoilers twitter","palworld reviews","hot air balloon crash arizona","lotto max jackpot winning ticket","school closures snow day"],["","","","","","
2024-01-17 17:06:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49743	142.250.72.100	443	5364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:06:01 UTC	837	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=7&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17
2024-01-17 17:06:01 UTC	1880	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:06:01 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-xJh9PTj6j3zJUJBLfePngA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: CONSENT=PENDING+231; expires=Fri, 16-Jan-2026 17:06:01 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-17 17:06:01 UTC	788	IN	Data Raw: 33 30 64 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 61 6d 64 20 73 74 6f 63 6b 73 22 2c 22 65 64 64 69 65 20 73 68 65 65 72 72 22 2c 22 65 76 65 72 74 6f 6e 20 76 73 20 63 72 79 73 74 61 6c 20 70 61 6c 61 63 65 20 70 72 65 64 69 63 74 69 6f 6e 22 2c 22 6f 6e 65 20 70 69 65 63 65 20 63 68 61 70 74 65 72 20 31 31 30 34 20 73 70 6f 69 6c 65 72 73 20 74 77 69 74 74 65 72 22 2c 22 70 61 6c 77 6f 72 6c 64 20 72 65 76 69 65 77 73 22 2c 22 68 6f 74 20 61 69 72 20 62 61 6c 6c 6f 6f 6e 20 63 72 61 73 68 20 61 72 69 7a 6f 6e 61 22 2c 22 6c 6f 74 74 6f 20 6d 61 78 20 6a 61 63 6b 70 6f 74 20 77 69 6e 6e 69 6e 67 20 74 69 63 6b 65 74 22 2c 22 73 63 68 6f 6f 6c 20 63 6c 6f 73 75 72 65 73 20 73 6e 6f 77 20 64 61 79 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 Data Ascii: 30d)]}'["",["amd stocks","eddie sheerr","everton vs crystal palace prediction","one piece chapter 1104 spoilers twitter","palworld reviews","hot air balloon crash arizona","lotto max jackpot winning ticket","school closures snow day"],["","","","","","
2024-01-17 17:06:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49744	142.250.72.100	443	5364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:06:03 UTC	858	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=w&oit=1&cp=1&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17
2024-01-17 17:06:04 UTC	1880	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:06:04 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-nsG1ZoNaWTcNnqglRu-aYA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: CONSENT=PENDING+591; expires=Fri, 16-Jan-2026 17:06:04 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-17 17:06:04 UTC	1880	IN	Data Raw: 38 62 63 0d 0a 29 5d 7d 27 0a 5b 22 77 22 2c 5b 22 77 65 61 74 68 65 72 22 2c 22 77 6f 72 64 6c 65 22 2c 22 77 65 61 74 68 65 72 20 6e 65 74 77 6f 72 6b 22 2c 22 77 61 6c 6d 61 72 74 22 2c 22 77 65 73 74 6a 65 74 22 2c 22 77 68 61 74 73 61 70 70 22 2c 22 77 65 61 74 68 65 72 20 76 61 6e 63 6f 75 76 65 72 22 2c 22 77 61 6c 6d 61 72 74 20 63 61 6e 61 64 61 22 2c 22 77 6f 72 64 22 2c 22 77 69 6b 69 70 65 64 69 61 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 64 65 74 61 69 6c 22 3a 5b 7b 7d 2c 7b 22 67 6f 6f Data Ascii: 8bc)]}'["w",["weather","wordle","weather network","walmart","westjet","whatsapp","weather vancouver","walmart canada","word","wikipedia"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestdetail":[{},{"goo
2024-01-17 17:06:04 UTC	363	IN	Data Raw: 2c 36 30 30 2c 35 35 36 2c 35 35 35 2c 35 35 34 2c 35 35 33 2c 35 35 32 2c 35 35 31 2c 35 35 30 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 73 75 62 74 79 70 65 73 22 3a 5b 5b 35 31 32 2c 34 33 33 2c 31 33 31 5d 2c 5b 35 31 32 2c 34 33 33 2c 31 33 31 5d 2c 5b 35 31 32 2c 34 33 33 2c 31 33 31 2c 31 39 39 2c 34 36 35 5d 2c 5b 35 31 32 2c 34 33 33 2c 31 39 39 2c 34 36 35 5d 2c 5b 35 31 32 2c 34 33 33 2c 31 33 31 2c 31 39 39 2c 34 36 35 5d 2c 5b 35 31 32 2c 34 33 33 2c 31 33 31 5d 2c 5b 35 31 32 2c 36 35 30 2c 34 33 33 2c 31 33 31 5d 2c 5b 35 31 32 2c 34 33 33 2c 31 39 39 2c 34 36 35 5d 2c 5b 35 31 32 5d 2c 5b 35 31 32 2c 34 33 33 2c 31 33 31 5d 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 74 79 70 65 22 3a 5b 22 51 55 45 52 59 22 2c 22 45 4e 54 Data Ascii: ,600,556,555,554,553,552,551,550],"google:suggestsubtypes":[[512,433,131],[512,433,131],[512,433,131,199,465],[512,433,199,465],[512,433,131,199,465],[512,433,131],[512,650,433,131],[512,433,199,465],[512],[512,433,131]],"google:suggesttype":["QUERY","ENT
2024-01-17 17:06:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49750	142.250.72.100	443	5364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:06:04 UTC	860	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=www&oit=1&cp=3&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17
2024-01-17 17:06:05 UTC	1880	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:06:04 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-CqyNQ-OiytaxuM53p2XDMQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: CONSENT=PENDING+833; expires=Fri, 16-Jan-2026 17:06:04 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-17 17:06:05 UTC	662	IN	Data Raw: 32 38 66 0d 0a 29 5d 7d 27 0a 5b 22 77 77 77 22 2c 5b 22 77 77 77 22 2c 22 77 77 77 2e 72 6f 62 6c 6f 78 2f 72 65 64 65 65 6d 22 2c 22 77 77 77 2e 63 72 61 76 65 2e 63 61 20 61 63 74 69 76 61 74 65 22 2c 22 68 74 74 70 3a 2f 2f 77 77 77 2e 68 6f 74 6d 61 69 6c 2e 63 6f 6d 22 2c 22 68 74 74 70 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6d 61 69 6c 2e 63 6f 6d 22 2c 22 68 74 74 70 3a 2f 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 22 2c 22 68 74 74 70 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 61 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 Data Ascii: 28f)]}'["www",["www","www.roblox/redeem","www.crave.ca activate","http://www.hotmail.com","http://www.facebook.com","https://www.google.com","http://www.gmail.com","http://www.youtube.com","http://www.yahoo.com","https://www.google.ca"],["","","","",""
2024-01-17 17:06:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49751	142.250.72.100	443	5364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:06:05 UTC	859	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=ww&oit=1&cp=2&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49752	142.250.72.100	443	5364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:06:06 UTC	858	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=w&oit=1&cp=1&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17
2024-01-17 17:06:06 UTC	1880	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:06:06 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-JGgRedMuj_-NsE8o7TzDuQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: CONSENT=PENDING+984; expires=Fri, 16-Jan-2026 17:06:06 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-17 17:06:06 UTC	1880	IN	Data Raw: 38 62 63 0d 0a 29 5d 7d 27 0a 5b 22 77 22 2c 5b 22 77 65 61 74 68 65 72 22 2c 22 77 6f 72 64 6c 65 22 2c 22 77 65 61 74 68 65 72 20 6e 65 74 77 6f 72 6b 22 2c 22 77 61 6c 6d 61 72 74 22 2c 22 77 65 73 74 6a 65 74 22 2c 22 77 68 61 74 73 61 70 70 22 2c 22 77 65 61 74 68 65 72 20 76 61 6e 63 6f 75 76 65 72 22 2c 22 77 61 6c 6d 61 72 74 20 63 61 6e 61 64 61 22 2c 22 77 6f 72 64 22 2c 22 77 69 6b 69 70 65 64 69 61 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 64 65 74 61 69 6c 22 3a 5b 7b 7d 2c 7b 22 67 6f 6f Data Ascii: 8bc)]}'["w",["weather","wordle","weather network","walmart","westjet","whatsapp","weather vancouver","walmart canada","word","wikipedia"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestdetail":[{},{"goo
2024-01-17 17:06:06 UTC	363	IN	Data Raw: 2c 36 30 30 2c 35 35 36 2c 35 35 35 2c 35 35 34 2c 35 35 33 2c 35 35 32 2c 35 35 31 2c 35 35 30 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 73 75 62 74 79 70 65 73 22 3a 5b 5b 35 31 32 2c 34 33 33 2c 31 33 31 5d 2c 5b 35 31 32 2c 34 33 33 2c 31 33 31 5d 2c 5b 35 31 32 2c 34 33 33 2c 31 33 31 2c 31 39 39 2c 34 36 35 5d 2c 5b 35 31 32 2c 34 33 33 2c 31 39 39 2c 34 36 35 5d 2c 5b 35 31 32 2c 34 33 33 2c 31 33 31 2c 31 39 39 2c 34 36 35 5d 2c 5b 35 31 32 2c 34 33 33 2c 31 33 31 5d 2c 5b 35 31 32 2c 36 35 30 2c 34 33 33 2c 31 33 31 5d 2c 5b 35 31 32 2c 34 33 33 2c 31 39 39 2c 34 36 35 5d 2c 5b 35 31 32 5d 2c 5b 35 31 32 2c 34 33 33 2c 31 33 31 5d 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 74 79 70 65 22 3a 5b 22 51 55 45 52 59 22 2c 22 45 4e 54 Data Ascii: ,600,556,555,554,553,552,551,550],"google:suggestsubtypes":[[512,433,131],[512,433,131],[512,433,131,199,465],[512,433,199,465],[512,433,131,199,465],[512,433,131],[512,650,433,131],[512,433,199,465],[512],[512,433,131]],"google:suggesttype":["QUERY","ENT
2024-01-17 17:06:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49753	142.250.72.100	443	5364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:06:06 UTC	860	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=www&oit=1&cp=3&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49754	142.250.72.100	443	5364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:06:06 UTC	861	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=www.&oit=1&cp=4&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49755	142.250.72.100	443	5364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:06:06 UTC	862	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=www.l&oit=1&cp=5&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17
2024-01-17 17:06:07 UTC	1880	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:06:06 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-tGC661AOWa3jfeYzRscdzw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: CONSENT=PENDING+845; expires=Fri, 16-Jan-2026 17:06:06 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-17 17:06:07 UTC	669	IN	Data Raw: 32 39 36 0d 0a 29 5d 7d 27 0a 5b 22 77 77 77 2e 6c 22 2c 5b 22 77 77 77 2e 6c 22 2c 22 77 77 77 2e 6c 65 73 70 6c 61 6e 2f 6c 69 6e 6b 73 22 2c 22 77 77 77 2e 6c 6f 67 6d 65 69 6e 31 32 33 2e 63 6f 6d 20 72 65 6d 6f 74 65 20 73 75 70 70 6f 72 74 22 2c 22 77 77 77 2e 6c 65 78 69 61 63 6f 72 65 35 22 2c 22 77 77 77 2e 6c 61 62 6f 75 72 2e 67 6f 76 2e 6f 6e 2f 65 6e 67 6c 69 73 68 2f 68 73 2f 74 72 61 69 6e 69 6e 67 2f 77 6f 72 6b 65 72 73 2e 70 68 70 22 2c 22 77 77 77 2e 6c 63 62 6f 2f 67 69 66 74 63 61 72 64 73 22 2c 22 77 77 77 2e 6c 79 6e 78 61 69 72 22 2c 22 77 77 77 2e 6c 69 6e 64 65 63 61 6e 61 64 61 2f 62 69 6c 6c 70 61 79 2e 63 61 22 2c 22 68 74 74 70 3a 2f 2f 77 77 77 2e 6c 69 6e 6b 65 64 69 6e 2e 63 6f 6d 22 2c 22 68 74 74 70 3a 2f 2f 77 77 77 2e Data Ascii: 296)]}'["www.l",["www.l","www.lesplan/links","www.logmein123.com remote support","www.lexiacore5","www.labour.gov.on/english/hs/training/workers.php","www.lcbo/giftcards","www.lynxair","www.lindecanada/billpay.ca","http://www.linkedin.com","http://www.
2024-01-17 17:06:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49756	142.250.72.100	443	5364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:06:07 UTC	863	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=www.li&oit=3&cp=6&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49757	142.250.72.100	443	5364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:06:07 UTC	864	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=www.liv&oit=1&cp=7&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49758	142.250.72.100	443	5364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:06:07 UTC	865	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=www.live&oit=3&cp=8&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17
2024-01-17 17:06:08 UTC	1880	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:06:08 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-H689SJfOXLgtkHJovHak0w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: CONSENT=PENDING+027; expires=Fri, 16-Jan-2026 17:06:08 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-17 17:06:08 UTC	653	IN	Data Raw: 32 38 36 0d 0a 29 5d 7d 27 0a 5b 22 77 77 77 2e 6c 69 76 65 22 2c 5b 22 68 74 74 70 3a 2f 2f 77 77 77 2e 6c 69 76 65 2e 63 6f 6d 22 2c 22 68 74 74 70 3a 2f 2f 77 77 77 2e 6c 69 76 65 73 63 6f 72 65 2e 63 6f 6d 22 2c 22 68 74 74 70 3a 2f 2f 77 77 77 2e 6c 69 76 65 62 61 72 6e 2e 63 6f 6d 22 2c 22 68 74 74 70 3a 2f 2f 77 77 77 2e 6c 69 76 65 77 65 6c 6c 2e 63 6f 6d 22 2c 22 77 77 77 2e 6c 69 76 65 77 6f 72 6b 73 68 65 65 74 73 22 2c 22 77 77 77 2e 6c 69 76 65 72 70 6f 6f 6c 20 66 63 20 6e 65 77 73 22 2c 22 77 77 77 2e 6c 69 76 65 73 74 72 65 61 6d 2e 65 61 73 74 22 2c 22 77 77 77 2e 6c 69 76 65 62 61 72 6e 2e 63 6f 6d 20 6c 6f 67 69 6e 22 2c 22 77 77 77 2e 6c 69 76 65 77 69 74 68 6b 65 6c 6c 79 61 6e 64 6d 61 72 6b 22 2c 22 77 77 77 2e 6c 69 76 65 20 63 72 Data Ascii: 286)]}'["www.live",["http://www.live.com","http://www.livescore.com","http://www.livebarn.com","http://www.livewell.com","www.liveworksheets","www.liverpool fc news","www.livestream.east","www.livebarn.com login","www.livewithkellyandmark","www.live cr
2024-01-17 17:06:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49759	142.250.72.100	443	5364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:06:08 UTC	866	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=www.lives&oit=1&cp=9&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17
2024-01-17 17:06:09 UTC	1880	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:06:08 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-WSjROJW6lQBcBf3huJZo_Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: CONSENT=PENDING+238; expires=Fri, 16-Jan-2026 17:06:08 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-17 17:06:09 UTC	683	IN	Data Raw: 32 61 34 0d 0a 29 5d 7d 27 0a 5b 22 77 77 77 2e 6c 69 76 65 73 22 2c 5b 22 77 77 77 2e 6c 69 76 65 73 74 72 65 61 6d 2e 65 61 73 74 22 2c 22 77 77 77 2e 6c 69 76 65 73 70 6f 72 74 73 32 34 22 2c 22 77 77 77 2e 6c 69 76 65 73 74 6f 63 6b 22 2c 22 77 77 77 2e 6c 69 76 65 73 63 6f 72 65 73 2e 63 6f 6d 20 74 6f 64 61 79 20 6d 61 74 63 68 22 2c 22 77 77 77 2e 6c 69 76 65 73 63 6f 72 65 2e 63 6f 6d 20 74 6f 64 61 79 22 2c 22 77 77 77 2e 6c 69 76 65 73 63 6f 72 65 2e 63 6f 6d 20 63 7a 22 2c 22 68 74 74 70 3a 2f 2f 77 77 77 2e 6c 69 76 65 73 63 6f 72 65 2e 63 6f 6d 22 2c 22 68 74 74 70 3a 2f 2f 77 77 77 2e 6c 69 76 65 73 63 69 65 6e 63 65 2e 63 6f 6d 22 2c 22 68 74 74 70 3a 2f 2f 77 77 77 2e 6c 69 76 65 73 6f 63 63 65 72 74 76 2e 63 6f 6d 22 2c 22 68 74 74 70 3a Data Ascii: 2a4)]}'["www.lives",["www.livestream.east","www.livesports24","www.livestock","www.livescores.com today match","www.livescore.com today","www.livescore.com cz","http://www.livescore.com","http://www.livescience.com","http://www.livesoccertv.com","http:
2024-01-17 17:06:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49760	142.250.72.100	443	5364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:06:09 UTC	868	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=www.livesp&oit=1&cp=10&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49761	142.250.72.100	443	5364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:06:09 UTC	869	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=www.livespo&oit=1&cp=11&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49762	142.250.72.100	443	5364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:06:09 UTC	870	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=www.livespoi&oit=1&cp=12&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49763	142.250.72.100	443	5364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:06:10 UTC	871	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=www.livespoin&oit=1&cp=13&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17
2024-01-17 17:06:10 UTC	1880	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:06:10 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-GJ7IdyV8Ak3XhP6x_ql4LQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: CONSENT=PENDING+076; expires=Fri, 16-Jan-2026 17:06:10 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-17 17:06:10 UTC	139	IN	Data Raw: 38 35 0d 0a 29 5d 7d 27 0a 5b 22 77 77 77 2e 6c 69 76 65 73 70 6f 69 6e 22 2c 5b 5d 2c 5b 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 74 72 75 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 74 79 70 65 22 3a 5b 5d 2c 22 67 6f 6f 67 6c 65 3a 76 65 72 62 61 74 69 6d 72 65 6c 65 76 61 6e 63 65 22 3a 38 35 31 7d 5d 0d 0a Data Ascii: 85)]}'["www.livespoin",[],[],[],{"google:clientdata":{"bpc":false,"tlw":true},"google:suggesttype":[],"google:verbatimrelevance":851}]
2024-01-17 17:06:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49764	142.250.72.100	443	5364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:06:10 UTC	873	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=www.livespoints&oit=1&cp=15&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17
2024-01-17 17:06:11 UTC	1880	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:06:11 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-C5nlyY-kHj9fBSxdzTv4-g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: CONSENT=PENDING+878; expires=Fri, 16-Jan-2026 17:06:10 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-17 17:06:11 UTC	141	IN	Data Raw: 38 37 0d 0a 29 5d 7d 27 0a 5b 22 77 77 77 2e 6c 69 76 65 73 70 6f 69 6e 74 73 22 2c 5b 5d 2c 5b 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 74 72 75 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 74 79 70 65 22 3a 5b 5d 2c 22 67 6f 6f 67 6c 65 3a 76 65 72 62 61 74 69 6d 72 65 6c 65 76 61 6e 63 65 22 3a 38 35 31 7d 5d 0d 0a Data Ascii: 87)]}'["www.livespoints",[],[],[],{"google:clientdata":{"bpc":false,"tlw":true},"google:suggesttype":[],"google:verbatimrelevance":851}]
2024-01-17 17:06:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49765	142.250.72.100	443	5364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:06:13 UTC	874	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=www.livespoints.&oit=1&cp=16&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17
2024-01-17 17:06:13 UTC	1880	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:06:13 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-OFPsrr6gYAstui8PUW-HfA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: CONSENT=PENDING+293; expires=Fri, 16-Jan-2026 17:06:13 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-17 17:06:13 UTC	142	IN	Data Raw: 38 38 0d 0a 29 5d 7d 27 0a 5b 22 77 77 77 2e 6c 69 76 65 73 70 6f 69 6e 74 73 2e 22 2c 5b 5d 2c 5b 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 74 72 75 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 74 79 70 65 22 3a 5b 5d 2c 22 67 6f 6f 67 6c 65 3a 76 65 72 62 61 74 69 6d 72 65 6c 65 76 61 6e 63 65 22 3a 38 35 31 7d 5d 0d 0a Data Ascii: 88)]}'["www.livespoints.",[],[],[],{"google:clientdata":{"bpc":false,"tlw":true},"google:suggesttype":[],"google:verbatimrelevance":851}]
2024-01-17 17:06:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49766	142.250.72.100	443	5364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:06:13 UTC	876	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=www.livespoints.co&oit=3&cp=18&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49767	142.250.72.100	443	5364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:06:13 UTC	877	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=www.livespoints.com&oit=3&cp=19&pgcl=7&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17
2024-01-17 17:06:13 UTC	1880	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:06:13 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-Cs_lAT22QKzWmhZC1Fu-Hw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: CONSENT=PENDING+168; expires=Fri, 16-Jan-2026 17:06:13 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-17 17:06:13 UTC	145	IN	Data Raw: 38 62 0d 0a 29 5d 7d 27 0a 5b 22 77 77 77 2e 6c 69 76 65 73 70 6f 69 6e 74 73 2e 63 6f 6d 22 2c 5b 5d 2c 5b 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 74 72 75 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 74 79 70 65 22 3a 5b 5d 2c 22 67 6f 6f 67 6c 65 3a 76 65 72 62 61 74 69 6d 72 65 6c 65 76 61 6e 63 65 22 3a 38 35 31 7d 5d 0d 0a Data Ascii: 8b)]}'["www.livespoints.com",[],[],[],{"google:clientdata":{"bpc":false,"tlw":true},"google:suggesttype":[],"google:verbatimrelevance":851}]
2024-01-17 17:06:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49771	20.114.59.183	443

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:06:32 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=LXzxN+gks9rgPkR&MD=5L6ccdVB HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-01-17 17:06:32 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: 042b102f-dffc-41eb-862b-141c27aa506f MS-RequestId: 28a6af20-4077-4f3c-a024-a327c91b361f MS-CV: CSZTQAcvb0OtSR65.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 17 Jan 2024 17:06:32 GMT Connection: close Content-Length: 25457
2024-01-17 17:06:32 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-01-17 17:06:32 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49772	142.250.72.100	443	5364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:06:37 UTC	824	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17
2024-01-17 17:06:37 UTC	1880	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:06:37 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-Xbtc0BZNyI7BoRtzxZfKmQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: CONSENT=PENDING+650; expires=Fri, 16-Jan-2026 17:06:37 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-17 17:06:37 UTC	1880	IN	Data Raw: 31 31 61 36 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 6a 61 73 6f 6e 20 68 69 70 73 6f 6e 20 65 64 6d 6f 6e 74 6f 6e 22 2c 22 73 6c 65 65 70 20 74 6f 6b 65 6e 22 2c 22 6b 79 6c 69 61 6e 20 6d 62 61 70 70 c3 a9 22 2c 22 66 72 6f 7a 65 6e 20 63 6f 72 6e 20 72 65 63 61 6c 6c 65 64 22 2c 22 74 68 65 20 66 69 6e 61 6c 73 20 75 70 64 61 74 65 20 31 2e 35 20 70 61 74 63 68 20 6e 6f 74 65 73 22 2c 22 74 72 61 6e 73 6c 69 6e 6b 20 62 63 22 2c 22 6c 6f 75 69 73 20 72 65 65 73 20 7a 61 6d 6d 69 74 20 6e 66 6c 22 2c 22 74 69 6d 20 72 65 69 64 20 72 65 67 69 6e 61 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 Data Ascii: 11a6)]}'["",["jason hipson edmonton","sleep token","kylian mbapp","frozen corn recalled","the finals update 1.5 patch notes","translink bc","louis rees zammit nfl","tim reid regina"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw
2024-01-17 17:06:37 UTC	1880	IN	Data Raw: 45 6b 31 53 43 74 4e 63 6e 4a 54 61 44 52 76 4d 57 74 61 63 56 56 71 57 57 64 6e 5a 58 52 5a 4e 6d 78 32 4f 45 46 69 55 32 39 77 53 55 70 44 55 31 49 34 4e 54 52 35 61 6e 49 33 56 6a 4e 58 53 54 67 78 4c 7a 6c 35 53 30 68 31 4d 30 6c 69 55 57 6c 70 56 6b 46 4b 63 30 70 57 4e 45 6f 7a 59 32 35 36 55 45 68 34 61 57 35 50 4b 32 35 76 53 57 70 36 64 7a 49 77 61 47 77 32 54 54 41 34 4d 47 74 72 4e 31 5a 58 52 47 5a 79 57 58 68 44 55 33 42 6f 55 6c 4e 5a 4e 6b 5a 30 5a 79 39 35 55 58 42 58 4e 45 45 72 65 48 68 45 54 6a 56 30 61 56 52 75 56 48 52 52 61 32 46 69 53 31 52 4b 61 55 78 44 53 46 46 44 51 56 4e 4d 52 6b 67 79 65 57 4e 6b 4e 6d 39 4e 63 6c 4e 72 65 46 70 71 57 6b 78 36 59 6a 4e 6a 55 58 42 42 63 45 70 31 4e 33 5a 75 61 6d 78 58 52 46 46 36 55 46 42 44 Data Ascii: Ek1SCtNcnJTaDRvMWtacVVqWWdnZXRZNmx2OEFiU29wSUpDU1I4NTR5anI3VjNXSTgxLzl5S0h1M0liUWlpVkFKc0pWNEozY256UEh4aW5PK25vSWp6dzIwaGw2TTA4MGtrN1ZXRGZyWXhDU3BoUlNZNkZ0Zy95UXBXNEEreHhETjV0aVRuVHRRa2FiS1RKaUxDSFFDQVNMRkgyeWNkNm9NclNreFpqWkx6YjNjUXBBcEp1N3ZuamxXRFF6UFBD
2024-01-17 17:06:37 UTC	766	IN	Data Raw: 7a 4d 35 59 57 63 79 4d 30 56 47 65 48 46 46 62 54 49 30 59 6d 52 4e 5a 6b 56 72 62 57 78 74 4e 30 64 56 4e 6b 45 31 57 56 5a 70 4c 32 68 7a 63 6b 78 32 4d 30 39 78 55 6d 70 43 4e 6a 51 31 5a 54 4e 75 56 57 70 59 56 58 52 4f 57 6e 52 4b 51 6d 46 54 5a 47 39 42 61 44 64 34 52 30 4e 45 56 54 4e 57 54 47 31 53 54 44 42 31 63 30 74 4f 53 55 4a 35 59 56 45 30 53 48 42 57 52 46 49 31 59 6e 45 31 55 44 68 42 4e 6d 52 73 61 47 68 6e 61 55 35 55 5a 32 55 35 52 7a 46 35 52 6a 52 32 51 7a 56 68 54 57 38 33 53 7a 52 33 65 57 74 6e 61 6e 6c 4f 5a 6d 46 51 62 55 4e 43 55 31 52 71 5a 6c 52 5a 63 6c 70 69 59 57 56 44 52 30 39 4e 59 6a 4a 71 5a 47 74 59 51 6d 4e 75 62 6a 4e 32 54 54 68 71 65 69 74 32 4d 47 38 31 59 6b 56 42 61 32 56 6b 57 47 31 50 52 48 4e 77 5a 54 6c 6f Data Ascii: zM5YWcyM0VGeHFFbTI0YmRNZkVrbWxtN0dVNkE1WVZpL2hzckx2M09xUmpCNjQ1ZTNuVWpYVXROWnRKQmFTZG9BaDd4R0NEVTNWTG1STDB1c0tOSUJ5YVE0SHBWRFI1YnE1UDhBNmRsaGhnaU5UZ2U5RzF5RjR2QzVhTW83SzR3eWtnanlOZmFQbUNCU1RqZlRZclpiYWVDR09NYjJqZGtYQmNubjN2TThqeit2MG81YkVBa2VkWG1PRHNwZTlo
2024-01-17 17:06:37 UTC	89	IN	Data Raw: 35 33 0d 0a 56 5a 75 53 57 35 49 5a 55 5a 53 64 47 4a 78 59 53 39 33 51 6b 6c 30 4e 33 6b 30 59 6d 4e 5a 62 69 39 45 54 53 39 71 64 56 56 42 61 6c 42 78 63 6b 52 75 4f 55 52 59 64 55 74 44 4d 33 56 4d 61 46 70 59 56 55 59 78 52 30 49 7a 61 56 42 31 53 79 39 6a 0d 0a Data Ascii: 53VZuSW5IZUZSdGJxYS93Qkl0N3k0YmNZbi9ETS9qdVVBalBxckRuOURYdUtDM3VMaFpYVUYxR0IzaVB1Sy9j
2024-01-17 17:06:37 UTC	837	IN	Data Raw: 33 33 65 0d 0a 53 7a 4a 57 4e 6d 56 49 5a 46 5a 6c 56 30 5a 73 63 33 6b 34 54 58 46 47 65 47 70 6a 5a 54 68 77 53 79 74 5a 54 31 4a 36 4e 6d 51 79 63 30 55 33 57 45 5a 78 4b 7a 5a 4b 5a 48 6c 71 64 7a 67 32 65 6d 74 36 54 6e 4e 6f 63 47 46 78 52 69 39 42 57 47 78 58 57 58 4a 58 4d 56 4e 56 64 57 78 77 52 55 70 45 4d 57 4d 31 59 79 39 4b 63 57 35 6b 57 45 4a 71 63 32 70 4a 4e 44 56 4a 54 54 67 72 57 48 52 53 64 55 78 70 51 6d 6c 42 64 6a 52 6b 4f 44 6c 4e 51 33 52 43 62 58 56 4d 65 46 5a 4e 4c 32 4e 71 51 6e 6c 4a 4f 44 56 36 4e 6a 42 47 62 6e 52 58 55 54 52 46 57 56 68 79 56 55 35 4a 61 7a 45 31 53 56 6b 33 57 55 6c 4b 4d 56 6b 33 55 54 56 34 61 30 68 33 53 47 31 6a 5a 32 4e 78 54 54 4e 58 5a 7a 5a 75 57 6b 35 4c 64 48 68 77 4f 54 42 76 61 55 4a 4d 64 55 Data Ascii: 33eSzJWNmVIZFZlV0Zsc3k4TXFGeGpjZThwSytZT1J6NmQyc0U3WEZxKzZKZHlqdzg2emt6TnNocGFxRi9BWGxXWXJXMVNVdWxwRUpEMWM1Yy9KcW5kWEJqc2pJNDVJTTgrWHRSdUxpQmlBdjRkODlNQ3RCbXVMeFZNL2NqQnlJODV6NjBGbnRXUTRFWVhyVU5JazE1SVk3WUlKMVk3UTV4a0h3SG1jZ2NxTTNXZzZuWk5LdHhwOTBvaUJMdU
2024-01-17 17:06:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	49774	142.250.72.100	443	5364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:06:43 UTC	890	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=httplivespoints.com%2Fsso.dsv.com&oit=3&cp=4&pgcl=4&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17
2024-01-17 17:06:43 UTC	1880	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:06:43 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-wrVJ2Z4l8fyEaTHKaBGK1w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: CONSENT=PENDING+218; expires=Fri, 16-Jan-2026 17:06:43 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-17 17:06:43 UTC	158	IN	Data Raw: 39 38 0d 0a 29 5d 7d 27 0a 5b 22 68 74 74 70 6c 69 76 65 73 70 6f 69 6e 74 73 2e 63 6f 6d 2f 73 73 6f 2e 64 73 76 2e 63 6f 6d 22 2c 5b 5d 2c 5b 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 74 79 70 65 22 3a 5b 5d 2c 22 67 6f 6f 67 6c 65 3a 76 65 72 62 61 74 69 6d 72 65 6c 65 76 61 6e 63 65 22 3a 38 35 31 7d 5d 0d 0a Data Ascii: 98)]}'["httplivespoints.com/sso.dsv.com",[],[],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggesttype":[],"google:verbatimrelevance":851}]
2024-01-17 17:06:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	49775	142.250.72.100	443	5364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:06:44 UTC	893	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=http%3Alivespoints.com%2Fsso.dsv.com&oit=3&cp=5&pgcl=4&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17
2024-01-17 17:06:44 UTC	1880	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:06:44 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-4TpZ-0KDyAE66sDVdKrivQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: CONSENT=PENDING+559; expires=Fri, 16-Jan-2026 17:06:44 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-17 17:06:44 UTC	159	IN	Data Raw: 39 39 0d 0a 29 5d 7d 27 0a 5b 22 68 74 74 70 3a 6c 69 76 65 73 70 6f 69 6e 74 73 2e 63 6f 6d 2f 73 73 6f 2e 64 73 76 2e 63 6f 6d 22 2c 5b 5d 2c 5b 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 74 79 70 65 22 3a 5b 5d 2c 22 67 6f 6f 67 6c 65 3a 76 65 72 62 61 74 69 6d 72 65 6c 65 76 61 6e 63 65 22 3a 38 35 31 7d 5d 0d 0a Data Ascii: 99)]}'["http:livespoints.com/sso.dsv.com",[],[],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggesttype":[],"google:verbatimrelevance":851}]
2024-01-17 17:06:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	49776	142.250.72.100	443	5364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:06:45 UTC	899	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=http%3A%2F%2Flivespoints.com%2Fsso.dsv.com&oit=3&cp=7&pgcl=4&gs_rn=42&psi=ph7cMmgUfJ-azYhU&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8; 1P_JAR=2024-01-17-17
2024-01-17 17:06:45 UTC	1880	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:06:45 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-HebESDfvujFpkTTYyDrSaA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: CONSENT=PENDING+208; expires=Fri, 16-Jan-2026 17:06:45 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-17 17:06:45 UTC	161	IN	Data Raw: 39 62 0d 0a 29 5d 7d 27 0a 5b 22 68 74 74 70 3a 2f 2f 6c 69 76 65 73 70 6f 69 6e 74 73 2e 63 6f 6d 2f 73 73 6f 2e 64 73 76 2e 63 6f 6d 22 2c 5b 5d 2c 5b 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 74 79 70 65 22 3a 5b 5d 2c 22 67 6f 6f 67 6c 65 3a 76 65 72 62 61 74 69 6d 72 65 6c 65 76 61 6e 63 65 22 3a 38 35 31 7d 5d 0d 0a Data Ascii: 9b)]}'["http://livespoints.com/sso.dsv.com",[],[],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggesttype":[],"google:verbatimrelevance":851}]
2024-01-17 17:06:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	49778	104.21.3.175	443	5364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:06:48 UTC	669	OUT	GET /sso.dsv.com HTTP/1.1 Host: livespoints.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-17 17:06:50 UTC	649	IN	HTTP/1.1 302 Found Date: Wed, 17 Jan 2024 17:06:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.1.26 Location: https://get.adobe.com/uk/reader/ CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rz521ck7%2BbrglSBt5N%2BAR%2BXRk9UeCLn6pQ1Ksdg5hYDWSLLosp6I27VokzVqDK820ywrJvX3GVbQgF%2F5QaqD68Tt9dzOhd9gA6kNLXaYq7auqlySkWslRGELxd5nanu4Bh0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 847030dd8c96c34e-EWR alt-svc: h3=":443"; ma=86400
2024-01-17 17:06:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.16	49782	23.1.237.25	443

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:01 UTC	2386	OUT	GET /AS/API/WindowsCortanaPane/V2/Suggestions?qry=ed&setlang=en-CH&cc=CH&nohs=1&qfm=1&cp=2&cvid=e5c7eea5cf654d86bbefdf8942a16aca&ig=b50e108383ee4693805619e02be324a4 HTTP/1.1 Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH X-Agent-DeviceId: 01000A4109009A83 X-BM-CBT: 1696585056 X-BM-ClientFeatures: FontV22,LightAnswers,PreviewPaneAvailable,RevStore X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E,FX:2C89765 X-Device-ClientSession: 8B0BADD9680C444587B50653454AB647 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A4109009A83 X-MSEdge-ExternalExp: bfbscope1003t3,bfbwsbpphmemqcf,bfbwsbrs0830cf,d-thshld78,d-thshldspcl40,disfbcthas2_1,fliptrat6,spofglclicksh-c2,wsbqfasmsall_c,wsbref-c X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Connection: Keep-Alive Cookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=1F9344FA7B5C6D050D8557587A606C51&CPID=1696585056799&AC=1&CPH=074c06b2&CBV=39996767; _EDGE_S=SID=1F9344FA7B5C6D050D8557587A606C51; SRCHUID=V=2&GUID=1365D4FE3DA84D19A46408EFC15FC823&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231006; SRCHHPGUSR=SRCHLANG=en&HV=1705511220&IPMH=5e4190f4&IPMID=1696585056345&LUT=1696585056224; CortanaAppUID=646BA1FF24F806DFED4199E1E0EFF63E; MUIDB=5047E5942BB2460EA35B53CCF78DDB3D
2024-01-17 17:07:01 UTC	1064	IN	HTTP/1.1 200 OK Content-Length: 5098 Content-Type: application/json; charset=utf-8 Cache-Control: no-cache, no-store, must-revalidate Expires: -1 Pragma: no-cache X-EventID: 65a8093545de4684b0ad95ebb967ab44 X-AS-SetSessionMarket: de-ch UserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0= X-XSS-Protection: 0 P3P: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND" Date: Wed, 17 Jan 2024 17:07:01 GMT Connection: close Set-Cookie: _EDGE_S=SID=1F9344FA7B5C6D050D8557587A606C51&mkt=de-ch; domain=.bing.com; path=/; HttpOnly Set-Cookie: SRCHHPGUSR=SRCHLANG=de&HV=1705511220&IPMH=5e4190f4&IPMID=1696585056345&LUT=1696585056224; domain=.bing.com; expires=Mon, 10-Feb-2025 17:07:01 GMT; path=/; secure; SameSite=None Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.15ed0117.1705511221.64fc52d
2024-01-17 17:07:01 UTC	5098	IN	Data Raw: 7b 22 52 65 73 6f 75 72 63 65 73 22 3a 7b 22 53 74 79 6c 65 73 22 3a 7b 22 43 73 73 48 65 61 64 4e 6f 72 6d 61 6c 22 3a 7b 7d 2c 22 43 73 73 48 65 61 64 4f 76 65 72 72 69 64 65 22 3a 7b 7d 7d 2c 22 53 63 72 69 70 74 73 22 3a 7b 22 4a 73 48 65 61 64 54 6f 70 6d 6f 73 74 22 3a 7b 7d 2c 22 4a 73 48 65 61 64 4e 6f 72 6d 61 6c 22 3a 7b 7d 2c 22 4a 73 45 6e 64 4f 66 43 68 75 6e 6b 22 3a 7b 7d 2c 22 4a 73 42 65 66 6f 72 65 43 6f 6e 74 65 6e 74 22 3a 7b 7d 2c 22 4a 73 41 66 74 65 72 43 6f 6e 74 65 6e 74 22 3a 7b 7d 2c 22 4a 73 41 66 74 65 72 4f 6e 4c 6f 61 64 22 3a 7b 7d 7d 7d 2c 22 53 75 67 67 65 73 74 69 6f 6e 73 22 3a 5b 7b 22 41 74 74 72 69 62 75 74 65 73 22 3a 7b 22 75 72 6c 22 3a 22 2f 73 65 61 72 63 68 3f 71 3d 65 64 67 65 22 2c 22 71 75 65 72 79 22 3a 22 Data Ascii: {"Resources":{"Styles":{"CssHeadNormal":{},"CssHeadOverride":{}},"Scripts":{"JsHeadTopmost":{},"JsHeadNormal":{},"JsEndOfChunk":{},"JsBeforeContent":{},"JsAfterContent":{},"JsAfterOnLoad":{}}},"Suggestions":[{"Attributes":{"url":"/search?q=edge","query":"

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.16	49781	23.1.237.25	443

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:01 UTC	881	OUT	GET /manifest/threshold.appcache HTTP/1.1 Accept: / Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Origin: https://www.bing.com Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Connection: Keep-Alive Cookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=1F9344FA7B5C6D050D8557587A606C51&CPID=1696585056799&AC=1&CPH=074c06b2&CBV=39996767; _EDGE_S=SID=1F9344FA7B5C6D050D8557587A606C51; SRCHUID=V=2&GUID=1365D4FE3DA84D19A46408EFC15FC823&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231006; SRCHHPGUSR=SRCHLANG=en&HV=1705511220&IPMH=5e4190f4&IPMID=1696585056345&LUT=1696585056224; CortanaAppUID=646BA1FF24F806DFED4199E1E0EFF63E; MUIDB=5047E5942BB2460EA35B53CCF78DDB3D
2024-01-17 17:07:01 UTC	874	IN	HTTP/1.1 200 OK Content-Length: 3248 Content-Type: text/cache-manifest; charset=utf-8 Cache-Control: private X-EventID: 65a80935bfcb42d1ad75883b12b9def4 UserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0= X-XSS-Protection: 0 P3P: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND" Date: Wed, 17 Jan 2024 17:07:01 GMT Connection: close Set-Cookie: SRCHHPGUSR=SRCHLANG=en&HV=1705511220&IPMH=4babde7b&IPMID=1696585056799&LUT=1696585056224; domain=.bing.com; expires=Sat, 17-Jan-2026 17:07:01 GMT; path=/; secure; SameSite=None Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.15ed0117.1705511221.64fc512
2024-01-17 17:07:01 UTC	3248	IN	Data Raw: 43 41 43 48 45 20 4d 41 4e 49 46 45 53 54 0d 0a 23 20 56 65 72 73 69 6f 6e 3a 34 62 61 62 64 65 37 62 0d 0a 43 41 43 48 45 3a 0d 0a 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 0d 0a 2f 72 70 2f 68 2d 4f 59 5f 56 6b 36 37 39 6a 65 50 6a 4c 44 70 66 6d 63 56 49 6b 66 44 4f 59 2e 6a 73 0d 0a 68 74 74 70 73 3a 2f 2f 72 2e 62 69 6e 67 2e 63 6f 6d 2f 72 62 2f 31 39 2f 6a 6e 63 2c 6e 6a 2f 36 68 55 5f 4c 6e 65 61 66 49 5f 4e 46 4c 65 44 76 4d 33 36 37 65 62 46 61 4b 51 2e 6a 73 3f 62 75 3d 44 79 59 76 63 6e 36 42 41 59 51 42 65 33 56 34 74 67 47 35 41 53 2d 70 41 53 2d 38 41 51 26 6f 72 3d 77 0d 0a 68 74 74 70 73 3a 2f 2f 72 2e 62 69 6e 67 2e 63 6f 6d 2f 72 62 2f 31 63 2f 63 69 72 33 2c 6f 72 74 6c 2c 63 Data Ascii: CACHE MANIFEST# Version:4babde7bCACHE:/AS/API/WindowsCortanaPane/V2/Init/rp/h-OY_Vk679jePjLDpfmcVIkfDOY.jshttps://r.bing.com/rb/19/jnc,nj/6hU_LneafI_NFLeDvM367ebFaKQ.js?bu=DyYvcn6BAYQBe3V4tgG5AS-pAS-8AQ&or=whttps://r.bing.com/rb/1c/cir3,ortl,c

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.16	49783	23.1.237.25	443

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:01 UTC	2386	OUT	GET /AS/API/WindowsCortanaPane/V2/Suggestions?qry=ed&setlang=en-CH&cc=CH&nohs=1&qfm=1&cp=2&cvid=e5c7eea5cf654d86bbefdf8942a16aca&ig=b50e108383ee4693805619e02be324a4 HTTP/1.1 Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH X-Agent-DeviceId: 01000A4109009A83 X-BM-CBT: 1696585056 X-BM-ClientFeatures: FontV22,LightAnswers,PreviewPaneAvailable,RevStore X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E,FX:2C89765 X-Device-ClientSession: 8B0BADD9680C444587B50653454AB647 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A4109009A83 X-MSEdge-ExternalExp: bfbscope1003t3,bfbwsbpphmemqcf,bfbwsbrs0830cf,d-thshld78,d-thshldspcl40,disfbcthas2_1,fliptrat6,spofglclicksh-c2,wsbqfasmsall_c,wsbref-c X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Connection: Keep-Alive Cookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=1F9344FA7B5C6D050D8557587A606C51&CPID=1696585056799&AC=1&CPH=074c06b2&CBV=39996767; _EDGE_S=SID=1F9344FA7B5C6D050D8557587A606C51; SRCHUID=V=2&GUID=1365D4FE3DA84D19A46408EFC15FC823&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231006; SRCHHPGUSR=SRCHLANG=en&HV=1705511220&IPMH=5e4190f4&IPMID=1696585056345&LUT=1696585056224; CortanaAppUID=646BA1FF24F806DFED4199E1E0EFF63E; MUIDB=5047E5942BB2460EA35B53CCF78DDB3D
2024-01-17 17:07:02 UTC	1064	IN	HTTP/1.1 200 OK Content-Length: 5098 Content-Type: application/json; charset=utf-8 Cache-Control: no-cache, no-store, must-revalidate Expires: -1 Pragma: no-cache X-EventID: 65a809359a3741569e893aac1c16870b X-AS-SetSessionMarket: de-ch UserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0= X-XSS-Protection: 0 P3P: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND" Date: Wed, 17 Jan 2024 17:07:01 GMT Connection: close Set-Cookie: _EDGE_S=SID=1F9344FA7B5C6D050D8557587A606C51&mkt=de-ch; domain=.bing.com; path=/; HttpOnly Set-Cookie: SRCHHPGUSR=SRCHLANG=de&HV=1705511220&IPMH=5e4190f4&IPMID=1696585056345&LUT=1696585056224; domain=.bing.com; expires=Mon, 10-Feb-2025 17:07:01 GMT; path=/; secure; SameSite=None Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.15ed0117.1705511221.64fc601
2024-01-17 17:07:02 UTC	5098	IN	Data Raw: 7b 22 52 65 73 6f 75 72 63 65 73 22 3a 7b 22 53 74 79 6c 65 73 22 3a 7b 22 43 73 73 48 65 61 64 4e 6f 72 6d 61 6c 22 3a 7b 7d 2c 22 43 73 73 48 65 61 64 4f 76 65 72 72 69 64 65 22 3a 7b 7d 7d 2c 22 53 63 72 69 70 74 73 22 3a 7b 22 4a 73 48 65 61 64 54 6f 70 6d 6f 73 74 22 3a 7b 7d 2c 22 4a 73 48 65 61 64 4e 6f 72 6d 61 6c 22 3a 7b 7d 2c 22 4a 73 45 6e 64 4f 66 43 68 75 6e 6b 22 3a 7b 7d 2c 22 4a 73 42 65 66 6f 72 65 43 6f 6e 74 65 6e 74 22 3a 7b 7d 2c 22 4a 73 41 66 74 65 72 43 6f 6e 74 65 6e 74 22 3a 7b 7d 2c 22 4a 73 41 66 74 65 72 4f 6e 4c 6f 61 64 22 3a 7b 7d 7d 7d 2c 22 53 75 67 67 65 73 74 69 6f 6e 73 22 3a 5b 7b 22 41 74 74 72 69 62 75 74 65 73 22 3a 7b 22 75 72 6c 22 3a 22 2f 73 65 61 72 63 68 3f 71 3d 65 64 67 65 22 2c 22 71 75 65 72 79 22 3a 22 Data Ascii: {"Resources":{"Styles":{"CssHeadNormal":{},"CssHeadOverride":{}},"Scripts":{"JsHeadTopmost":{},"JsHeadNormal":{},"JsEndOfChunk":{},"JsBeforeContent":{},"JsAfterContent":{},"JsAfterOnLoad":{}}},"Suggestions":[{"Attributes":{"url":"/search?q=edge","query":"

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.16	49784	173.222.162.7	443

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:02 UTC	864	OUT	GET /rb/19/jnc,nj/6hU_LneafI_NFLeDvM367ebFaKQ.js?bu=DyYvcn6BAYQBe3V4tgG5AS-pAS-8AQ&or=w HTTP/1.1 Accept: / Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: r.bing.com Connection: Keep-Alive Cookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=1F9344FA7B5C6D050D8557587A606C51&CPID=1696585056799&AC=1&CPH=074c06b2&CBV=39996767; _EDGE_S=SID=1F9344FA7B5C6D050D8557587A606C51; SRCHUID=V=2&GUID=1365D4FE3DA84D19A46408EFC15FC823&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231006; SRCHHPGUSR=SRCHLANG=en&HV=1705511220&IPMH=4babde7b&IPMID=1696585056799&LUT=1696585056224; CortanaAppUID=646BA1FF24F806DFED4199E1E0EFF63E
2024-01-17 17:07:02 UTC	1225	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Server: Kestrel Access-Control-Allow-Headers: * Access-Control-Allow-Origin: * Last-Modified: Wed, 23 Aug 2023 10:48:11 GMT X-EventID: 65a5c9a716d24633a2d05e72c4c87576 UserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0= X-AS-InstrumentationOptions: AppServerLoggingMaster=1 X-AS-MACHINENAME: MWHEEEAP0024F79 X-AS-SuppressSetCookie: 1 X-XSS-Protection: 0 cross-origin-resource-policy: cross-origin nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.5} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingrms"}]} Cache-Control: public, max-age=284636 Expires: Sun, 21 Jan 2024 00:10:58 GMT Date: Wed, 17 Jan 2024 17:07:02 GMT Content-Length: 21849 Connection: close Alt-Svc: h3=":443"; ma=93600 Akamai-GRN: 0.07a6dc17.1705511222.8b8fe2a Timing-Allow-Origin: *
2024-01-17 17:07:02 UTC	15159	IN	Data Raw: 2f 2a 21 44 69 73 61 62 6c 65 4a 61 76 61 73 63 72 69 70 74 50 72 6f 66 69 6c 65 72 2a 2f 0a 76 61 72 20 42 4d 3d 42 4d 7c 7c 7b 7d 3b 42 4d 2e 63 6f 6e 66 69 67 3d 7b 42 3a 7b 74 69 6d 65 6f 75 74 3a 31 65 33 2c 64 65 6c 61 79 3a 37 35 30 2c 6d 61 78 55 72 6c 4c 65 6e 67 74 68 3a 33 30 30 2c 73 65 6e 64 6c 69 6d 69 74 3a 32 30 2c 6d 61 78 50 61 79 6c 6f 61 64 53 69 7a 65 3a 37 65 33 7d 2c 56 3a 7b 64 69 73 74 61 6e 63 65 3a 32 30 7d 2c 4e 3a 7b 6d 61 78 55 72 6c 4c 65 6e 67 74 68 3a 33 30 30 7d 2c 45 3a 7b 62 75 66 66 65 72 3a 33 30 2c 74 69 6d 65 6f 75 74 3a 35 65 33 2c 6d 61 78 55 72 6c 4c 65 6e 67 74 68 3a 33 30 30 7d 2c 43 3a 7b 64 69 73 74 61 6e 63 65 3a 35 30 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 76 74 28 29 7b 69 Data Ascii: /!DisableJavascriptProfiler/var BM=BM\|\|{};BM.config={B:{timeout:1e3,delay:750,maxUrlLength:300,sendlimit:20,maxPayloadSize:7e3},V:{distance:20},N:{maxUrlLength:300},E:{buffer:30,timeout:5e3,maxUrlLength:300},C:{distance:50}},function(n){function vt(){i
2024-01-17 17:07:02 UTC	6690	IN	Data Raw: 64 2c 69 29 2c 70 74 3d 74 28 6f 2e 72 65 71 75 65 73 74 53 74 61 72 74 2c 69 29 2c 77 74 3d 74 28 6f 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 2c 69 29 2c 62 74 3d 74 28 6f 2e 72 65 73 70 6f 6e 73 65 45 6e 64 2c 69 29 2c 6f 74 3d 6e 75 6c 6c 2c 73 74 3d 6e 2e 6c 61 79 6f 75 74 28 29 3b 66 6f 72 28 74 74 3d 30 3b 74 74 3c 73 74 2e 6c 65 6e 67 74 68 3b 74 74 2b 2b 29 7b 76 61 72 20 62 3d 73 74 5b 74 74 5d 2c 64 74 3d 62 2e 5f 65 2c 68 74 3d 62 2e 5f 73 3b 69 66 28 68 74 26 26 67 3d 3d 3d 68 74 29 7b 6f 74 3d 62 2e 69 3b 62 2e 78 3c 68 2e 77 26 26 62 2e 79 3c 68 2e 68 26 26 28 66 3d 65 74 29 3b 62 72 65 61 6b 7d 7d 72 74 3d 7b 5f 72 3a 6f 2c 74 3a 65 74 2c 69 3a 70 2e 6c 65 6e 67 74 68 2c 6c 3a 6f 74 2c 68 3a 77 5b 31 5d 2c 70 3a 77 5b 32 5d 2e 6c 65 6e 67 Data Ascii: d,i),pt=t(o.requestStart,i),wt=t(o.responseStart,i),bt=t(o.responseEnd,i),ot=null,st=n.layout();for(tt=0;tt<st.length;tt++){var b=st[tt],dt=b._e,ht=b._s;if(ht&&g===ht){ot=b.i;b.x<h.w&&b.y<h.h&&(f=et);break}}rt={_r:o,t:et,i:p.length,l:ot,h:w[1],p:w[2].leng

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.16	49785	23.1.237.25	443

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:02 UTC	2247	OUT	GET /PPRelatedSearch?query=Classic_%7Bf56fbb39-e6d9-4b6d-9c29-ae82cff2925f%7D&lang=en-CH HTTP/1.1 Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH X-Agent-DeviceId: 01000A4109009A83 X-BM-CBT: 1696585056 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E,FX:2C89765 X-Device-ClientSession: 8B0BADD9680C444587B50653454AB647 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A4109009A83 X-MSEdge-ExternalExp: bfbscope1003t3,bfbwsbpphmemqcf,bfbwsbrs0830cf,d-thshld78,d-thshldspcl40,disfbcthas2_1,fliptrat6,spofglclicksh-c2,wsbqfasmsall_c,wsbref-c X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Connection: Keep-Alive Cookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=1F9344FA7B5C6D050D8557587A606C51&CPID=1696585056799&AC=1&CPH=074c06b2&CBV=39996767; _EDGE_S=SID=1F9344FA7B5C6D050D8557587A606C51&mkt=de-ch; SRCHUID=V=2&GUID=1365D4FE3DA84D19A46408EFC15FC823&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231006; SRCHHPGUSR=SRCHLANG=de&HV=1705511220&IPMH=5e4190f4&IPMID=1696585056345&LUT=1696585056224; CortanaAppUID=646BA1FF24F806DFED4199E1E0EFF63E; MUIDB=5047E5942BB2460EA35B53CCF78DDB3D
2024-01-17 17:07:02 UTC	670	IN	HTTP/1.1 404 Not Found Content-Length: 0 Content-Type: application/json Cache-Control: private X-EventID: 65a80936d2664633b348f065c50aafcc UserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0= X-XSS-Protection: 0 P3P: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND" Date: Wed, 17 Jan 2024 17:07:02 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.15ed0117.1705511222.64fc8f4

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.16	49786	173.222.162.7	443

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:03 UTC	869	OUT	GET /rb/1c/cir3,ortl,cc,nc/n7LMSoHYYIBGa1VPMlnTzxBvlfA.css?bu=B6UCSJMCe11drgI&or=w HTTP/1.1 Accept: / Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: r.bing.com Connection: Keep-Alive Cookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=1F9344FA7B5C6D050D8557587A606C51&CPID=1696585056799&AC=1&CPH=074c06b2&CBV=39996767; _EDGE_S=SID=1F9344FA7B5C6D050D8557587A606C51&mkt=de-ch; SRCHUID=V=2&GUID=1365D4FE3DA84D19A46408EFC15FC823&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231006; SRCHHPGUSR=SRCHLANG=de&HV=1705511222&IPMH=5e4190f4&IPMID=1696585056345&LUT=1696585056224; CortanaAppUID=646BA1FF24F806DFED4199E1E0EFF63E
2024-01-17 17:07:03 UTC	1208	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Server: Kestrel Access-Control-Allow-Headers: * Access-Control-Allow-Origin: * Last-Modified: Sat, 14 Aug 2010 22:23:56 GMT X-EventID: 6591d6f41d2f435ea5d3b71ea2c0d363 UserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0= X-AS-InstrumentationOptions: AppServerLoggingMaster=1 X-AS-MACHINENAME: MWHEEEAP0024F99 X-AS-SuppressSetCookie: 1 X-XSS-Protection: 0 cross-origin-resource-policy: cross-origin nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.5} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingrms"}]} Cache-Control: public, max-age=197778 Expires: Sat, 20 Jan 2024 00:03:21 GMT Date: Wed, 17 Jan 2024 17:07:03 GMT Content-Length: 5901 Connection: close Alt-Svc: h3=":443"; ma=93600 Akamai-GRN: 0.07a6dc17.1705511223.8b905c0 Timing-Allow-Origin: *
2024-01-17 17:07:03 UTC	5901	IN	Data Raw: 2e 62 5f 73 65 61 72 63 68 62 6f 78 53 75 62 6d 69 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 72 70 2f 34 69 5a 49 7a 5f 6f 41 4c 31 79 70 37 64 69 5f 36 44 39 65 32 65 6e 58 69 4d 4d 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 2d 34 32 70 78 20 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 33 32 30 70 78 20 33 38 70 78 7d 2e 62 5f 6c 6f 67 6f 7b 77 69 64 74 68 3a 32 32 70 78 3b 68 65 69 67 68 74 3a 33 37 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 7d 2e 62 5f 6c 6f 67 6f 3a 61 66 74 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 64 Data Ascii: .b_searchboxSubmit{background:url(/rp/4iZIz_oAL1yp7di_6D9e2enXiMM.png) no-repeat -42px 0;background-size:320px 38px}.b_logo{width:22px;height:37px;position:relative;display:inline-block;overflow:hidden;direction:ltr}.b_logo:after{position:absolute;top:0;d

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.16	49787	173.222.162.7	443

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:03 UTC	880	OUT	GET /rb/1c/cir3,ortl,cc,nc/uANxnX_BheDjd2-cdR8N9DEWlds.css?bu=C4kH-ALbA98H0wbABvUEXV1dXQ&or=w HTTP/1.1 Accept: / Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: r.bing.com Connection: Keep-Alive Cookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=1F9344FA7B5C6D050D8557587A606C51&CPID=1696585056799&AC=1&CPH=074c06b2&CBV=39996767; _EDGE_S=SID=1F9344FA7B5C6D050D8557587A606C51&mkt=de-ch; SRCHUID=V=2&GUID=1365D4FE3DA84D19A46408EFC15FC823&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231006; SRCHHPGUSR=SRCHLANG=de&HV=1705511222&IPMH=5e4190f4&IPMID=1696585056345&LUT=1696585056224; CortanaAppUID=646BA1FF24F806DFED4199E1E0EFF63E
2024-01-17 17:07:04 UTC	1208	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Server: Kestrel Access-Control-Allow-Headers: * Access-Control-Allow-Origin: * Last-Modified: Fri, 18 Nov 2022 01:58:05 GMT X-EventID: 6596f0673ea9410b872f6de37fcf7315 UserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0= X-AS-InstrumentationOptions: AppServerLoggingMaster=1 X-AS-MACHINENAME: MWHEEEAP0024FA4 X-AS-SuppressSetCookie: 1 X-XSS-Protection: 0 cross-origin-resource-policy: cross-origin nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.5} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingrms"}]} Cache-Control: public, max-age=89131 Expires: Thu, 18 Jan 2024 17:52:34 GMT Date: Wed, 17 Jan 2024 17:07:03 GMT Content-Length: 20421 Connection: close Alt-Svc: h3=":443"; ma=93600 Akamai-GRN: 0.07a6dc17.1705511223.8b90c68 Timing-Allow-Origin: *
2024-01-17 17:07:04 UTC	15176	IN	Data Raw: 2e 73 77 5f 70 6c 75 73 2c 2e 73 77 5f 75 70 2c 2e 73 77 5f 64 6f 77 6e 2c 2e 73 77 5f 73 74 2c 2e 73 77 5f 73 74 68 2c 2e 73 77 5f 73 74 65 2c 2e 73 77 5f 74 70 63 62 6b 2c 2e 73 77 5f 70 6c 61 79 2c 2e 73 77 5f 70 6c 61 79 64 2c 2e 73 77 5f 70 6c 61 79 61 2c 2e 73 77 5f 70 6c 61 79 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 65 67 6f 65 20 4d 44 4c 32 20 41 73 73 65 74 73 22 7d 2e 73 77 5f 70 6c 75 73 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 ee 9c 90 22 7d 2e 73 77 5f 70 6c 61 79 3a 61 66 74 65 72 2c 2e 73 77 5f 70 6c 61 79 61 3a 61 66 74 65 72 2c 2e 73 77 5f 70 6c 61 79 64 3a 61 66 74 65 72 2c 2e 73 77 5f 70 6c 61 79 70 3a 61 66 74 65 72 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 36 70 78 3b 63 6f Data Ascii: .sw_plus,.sw_up,.sw_down,.sw_st,.sw_sth,.sw_ste,.sw_tpcbk,.sw_play,.sw_playd,.sw_playa,.sw_playp{font-family:"Segoe MDL2 Assets"}.sw_plus:after{content:""}.sw_play:after,.sw_playa:after,.sw_playd:after,.sw_playp:after{font-size:16px;line-height:16px;co
2024-01-17 17:07:04 UTC	5245	IN	Data Raw: 2b 73 63 72 69 70 74 2b 2e 62 5f 61 6c 67 6f 2c 62 6f 64 79 5b 64 69 72 5d 20 23 62 5f 72 65 73 75 6c 74 73 3e 2e 62 5f 61 6e 73 2b 73 63 72 69 70 74 2b 73 63 72 69 70 74 2b 2e 62 5f 61 6e 73 2c 62 6f 64 79 5b 64 69 72 5d 20 23 62 5f 72 65 73 75 6c 74 73 3e 2e 62 5f 61 6c 67 6f 2b 73 63 72 69 70 74 2b 73 63 72 69 70 74 2b 2e 62 5f 61 6e 73 2c 62 6f 64 79 5b 64 69 72 5d 20 23 62 5f 72 65 73 75 6c 74 73 3e 2e 62 5f 6e 61 76 2b 73 63 72 69 70 74 2b 73 63 72 69 70 74 2b 2e 62 5f 61 6c 67 6f 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 70 78 7d 62 6f 64 79 5b 64 69 72 5d 20 23 62 5f 72 65 73 75 6c 74 73 3e 6c 69 3e 2a 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 62 6f 64 79 5b 64 69 72 5d 20 2e 62 5f 63 61 70 74 69 6f 6e 3e 2a 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 62 6f 64 79 Data Ascii: +script+.b_algo,body[dir] #b_results>.b_ans+script+script+.b_ans,body[dir] #b_results>.b_algo+script+script+.b_ans,body[dir] #b_results>.b_nav+script+script+.b_algo{margin-top:4px}body[dir] #b_results>li>:last-child,body[dir] .b_caption>:last-child,body

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.16	49788	173.222.162.7	443

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:04 UTC	859	OUT	GET /rb/49/ortl,cc,nc/4-xJy3tX6bM2BGl5zKioiEcQ1TU.css?bu=A4gCjAKPAg&or=w HTTP/1.1 Accept: / Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: r.bing.com Connection: Keep-Alive Cookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=1F9344FA7B5C6D050D8557587A606C51&CPID=1696585056799&AC=1&CPH=074c06b2&CBV=39996767; _EDGE_S=SID=1F9344FA7B5C6D050D8557587A606C51&mkt=de-ch; SRCHUID=V=2&GUID=1365D4FE3DA84D19A46408EFC15FC823&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231006; SRCHHPGUSR=SRCHLANG=de&HV=1705511222&IPMH=5e4190f4&IPMID=1696585056345&LUT=1696585056224; CortanaAppUID=646BA1FF24F806DFED4199E1E0EFF63E
2024-01-17 17:07:04 UTC	1209	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Server: Kestrel Access-Control-Allow-Headers: * Access-Control-Allow-Origin: * Last-Modified: Thu, 07 Dec 2023 22:46:56 GMT X-EventID: 659de16bd3374d3a86983d88daf90811 UserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0= X-AS-InstrumentationOptions: AppServerLoggingMaster=1 X-AS-MACHINENAME: MWHEEEAP0024F66 X-AS-SuppressSetCookie: 1 X-XSS-Protection: 0 cross-origin-resource-policy: cross-origin nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.5} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingrms"}]} Cache-Control: public, max-age=155204 Expires: Fri, 19 Jan 2024 12:13:48 GMT Date: Wed, 17 Jan 2024 17:07:04 GMT Content-Length: 15967 Connection: close Alt-Svc: h3=":443"; ma=93600 Akamai-GRN: 0.07a6dc17.1705511224.8b912a4 Timing-Allow-Origin: *
2024-01-17 17:07:04 UTC	15175	IN	Data Raw: 68 74 6d 6c 7b 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 68 69 64 64 65 6e 3b 6f 76 65 72 66 6c 6f 77 2d 78 3a 68 69 64 64 65 6e 3b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 7d 62 6f 64 79 5b 64 69 72 5d 20 74 61 62 6c 65 2c 62 6f 64 79 5b 64 69 72 5d 20 74 64 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 62 6f 64 79 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 65 67 6f 65 20 55 49 22 2c 41 72 69 61 6c 2c 48 65 6c 76 65 74 69 63 61 2c 53 61 6e 73 2d 53 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 30 30 30 7d 62 6f 64 79 5b 64 69 72 5d 7b 6d 61 72 67 69 6e 3a 30 7d 62 6f 64 79 20 2e 74 61 6c 6c 55 78 7b Data Ascii: html{-ms-user-select:none;overflow-y:hidden;overflow-x:hidden;cursor:default}body[dir] table,body[dir] td{margin:0;padding:0}body{font-size:15px;line-height:20px;font-family:"Segoe UI",Arial,Helvetica,Sans-Serif;color:#000}body[dir]{margin:0}body .tallUx{
2024-01-17 17:07:04 UTC	792	IN	Data Raw: 28 2e 73 65 63 6f 6e 64 61 72 79 49 63 6f 6e 29 3a 6e 6f 74 28 2e 63 6f 72 74 61 6e 61 49 63 6f 6e 29 20 2e 69 63 6f 6e 20 69 6d 67 7b 77 69 64 74 68 3a 31 33 70 78 3b 68 65 69 67 68 74 3a 31 33 70 78 7d 2e 61 73 50 61 64 64 69 6e 67 20 2e 64 6f 75 62 6c 65 4c 69 6e 65 20 2e 73 65 63 6f 6e 64 61 72 79 49 63 6f 6e 3e 2e 69 63 6f 6e 7b 6d 69 6e 2d 77 69 64 74 68 3a 34 34 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 34 34 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 34 34 70 78 7d 62 6f 64 79 5b 64 69 72 5d 20 2e 61 73 50 61 64 64 69 6e 67 20 2e 64 6f 75 62 6c 65 4c 69 6e 65 20 2e 73 65 63 6f 6e 64 61 72 79 49 63 6f 6e 3e 2e 69 63 6f 6e 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 36 70 78 7d 2e 61 73 50 61 64 64 69 6e 67 20 2e 6e 6f 72 6d 61 6c 69 7a 65 64 42 69 67 49 Data Ascii: (.secondaryIcon):not(.cortanaIcon) .icon img{width:13px;height:13px}.asPadding .doubleLine .secondaryIcon>.icon{min-width:44px;min-height:44px;max-height:44px}body[dir] .asPadding .doubleLine .secondaryIcon>.icon{padding-top:6px}.asPadding .normalizedBigI

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.16	49789	23.1.237.25	443

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:04 UTC	2285	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A4109009A83 X-BM-CBT: 1696585056 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E,FX:2C89765 X-Device-ClientSession: 8B0BADD9680C444587B50653454AB647 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A4109009A83 X-MSEdge-ExternalExp: bfbscope1003t3,bfbwsbpphmemqcf,bfbwsbrs0830cf,d-thshld78,d-thshldspcl40,disfbcthas2_1,fliptrat6,spofglclicksh-c2,wsbqfasmsall_c,wsbref-c X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 29142 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=1F9344FA7B5C6D050D8557587A606C51&CPID=1696585056799&AC=1&CPH=074c06b2&CBV=39996767; _EDGE_S=SID=1F9344FA7B5C6D050D8557587A606C51&mkt=de-ch; SRCHUID=V=2&GUID=1365D4FE3DA84D19A46408EFC15FC823&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231006; SRCHHPGUSR=SRCHLANG=de&HV=1705511222&IPMH=5e4190f4&IPMID=1696585056345&LUT=1696585056224; CortanaAppUID=646BA1FF24F806DFED4199E1E0EFF63E; MUIDB=5047E5942BB2460EA35B53CCF78DDB3D
2024-01-17 17:07:04 UTC	16355	OUT	Data Raw: 3c 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 35 30 34 37 45 35 39 34 32 42 42 32 34 36 30 45 41 33 35 42 35 33 43 43 46 37 38 44 44 42 33 44 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 50 54 3c 2f 54 3e 3c 49 47 3e 36 34 38 31 41 46 33 32 31 31 46 30 34 33 44 41 39 30 30 39 46 46 31 30 39 32 45 43 36 45 36 46 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 70 70 22 3a 7b 22 53 22 3a 22 4c 22 2c 22 46 43 22 3a 36 35 2c 22 42 43 22 3a 36 35 2c 22 48 22 Data Ascii: <ClientInstRequest><CID>5047E5942BB2460EA35B53CCF78DDB3D</CID><Events><E><T>Event.CPT</T><IG>6481AF3211F043DA9009FF1092EC6E6F</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","pp":{"S":"L","FC":65,"BC":65,"H"
2024-01-17 17:07:04 UTC	12787	OUT	Data Raw: 2d 39 63 32 39 2d 61 65 38 32 63 66 66 32 39 32 35 66 7d 22 2c 22 44 4e 61 6d 65 22 3a 22 45 64 69 74 20 70 6f 77 65 72 20 70 6c 61 6e 22 2c 22 4d 44 4e 22 3a 30 7d 2c 22 52 61 6e 6b 65 72 53 69 67 6e 61 6c 73 22 3a 7b 22 72 61 6e 6b 69 6e 67 53 63 6f 72 65 22 3a 2d 34 2e 33 36 39 39 35 2c 22 66 65 61 74 75 72 65 53 74 6f 72 65 22 3a 7b 22 35 22 3a 30 2e 30 31 33 2c 22 37 22 3a 37 32 33 30 31 2c 22 38 22 3a 31 2c 22 31 30 22 3a 32 2c 22 31 32 22 3a 30 2e 30 30 31 30 32 2c 22 31 36 22 3a 35 32 34 33 2c 22 31 38 22 3a 30 2e 30 32 2c 22 31 39 22 3a 31 2c 22 32 34 22 3a 30 2e 30 31 34 2c 22 32 36 22 3a 30 2e 39 35 32 2c 22 32 38 22 3a 30 2e 30 30 31 2c 22 32 39 22 3a 30 2c 22 33 30 22 3a 30 2c 22 33 31 22 3a 30 2e 30 30 36 2c 22 33 32 22 3a 30 2c 22 33 33 22 Data Ascii: -9c29-ae82cff2925f}","DName":"Edit power plan","MDN":0},"RankerSignals":{"rankingScore":-4.36995,"featureStore":{"5":0.013,"7":72301,"8":1,"10":2,"12":0.00102,"16":5243,"18":0.02,"19":1,"24":0.014,"26":0.952,"28":0.001,"29":0,"30":0,"31":0.006,"32":0,"33"
2024-01-17 17:07:05 UTC	475	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 2742F8B63DDE4CC9B1585713FBEADB5D Ref B: PAOEDGE0518 Ref C: 2024-01-17T17:07:05Z Date: Wed, 17 Jan 2024 17:07:05 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.15ed0117.1705511224.64fd3e1

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.16	49790	173.222.162.7	443

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:05 UTC	920	OUT	GET /rb/74/cir3,ortl,cc,nc/sdlTQLOhyqEaX9abuwz8T4BNCbs.css?bu=GOAJ3QnyCZ0K6QnmCdcJlwr1CdcJ_wmCCtcJ1wmICtcJiwqUCo4KtgrXCaAK1wndCg&or=w HTTP/1.1 Accept: / Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: r.bing.com Connection: Keep-Alive Cookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=1F9344FA7B5C6D050D8557587A606C51&CPID=1696585056799&AC=1&CPH=074c06b2&CBV=39996767; _EDGE_S=SID=1F9344FA7B5C6D050D8557587A606C51&mkt=de-ch; SRCHUID=V=2&GUID=1365D4FE3DA84D19A46408EFC15FC823&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231006; SRCHHPGUSR=SRCHLANG=de&HV=1705511222&IPMH=5e4190f4&IPMID=1696585056345&LUT=1696585056224; CortanaAppUID=646BA1FF24F806DFED4199E1E0EFF63E
2024-01-17 17:07:05 UTC	1246	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Server: Kestrel Access-Control-Allow-Headers: * Access-Control-Allow-Origin: * Last-Modified: Tue, 16 Jan 2024 22:12:09 GMT X-EventID: 65a7c31b15da48d2acba1246a79afec4 UserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0= X-AS-InstrumentationOptions: AppServerLoggingMaster=1 X-AS-MACHINENAME: MWHEEEAP0041B29 X-AS-SuppressSetCookie: 1 X-XSS-Protection: 0 cross-origin-resource-policy: cross-origin nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.5} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingrms"}]} Cache-Control: public, max-age=414074 Expires: Mon, 22 Jan 2024 12:08:19 GMT Date: Wed, 17 Jan 2024 17:07:05 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Alt-Svc: h3=":443"; ma=93600 Akamai-GRN: 0.07a6dc17.1705511225.8b919cb Timing-Allow-Origin: *
2024-01-17 17:07:05 UTC	15138	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 2e 73 63 6f 70 65 73 2d 6c 69 73 74 7b 68 65 69 67 68 74 3a 35 32 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 29 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 62 6f 64 79 5b 64 69 72 5d 20 2e 73 63 6f 70 65 73 2d 6c 69 73 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 70 78 20 30 20 31 70 78 7d 2e 7a 65 72 6f 49 6e 70 75 74 31 39 48 31 20 2e 64 61 72 6b 54 68 65 6d 65 20 2e 73 63 6f 70 65 73 2d 6c 69 73 74 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 32 32 35 2c 32 32 35 2c 32 32 35 2c 2e 31 29 7d 2e 73 63 6f 70 65 73 2d 6c 69 73 74 3e 6c 69 7b 6d 69 6e 2d 77 69 64 74 68 3a 34 38 70 78 7d 2e 73 63 6f 70 65 73 2d 6c 69 Data Ascii: 00006000.scopes-list{height:52px;border-bottom:1px solid rgba(0,0,0,.1);display:flex}body[dir] .scopes-list{padding:0 1px 0 1px}.zeroInput19H1 .darkTheme .scopes-list{border-bottom:1px solid rgba(225,225,225,.1)}.scopes-list>li{min-width:48px}.scopes-li
2024-01-17 17:07:05 UTC	9450	IN	Data Raw: 72 6b 54 68 65 6d 65 3a 6e 6f 74 28 2e 7a 65 72 6f 49 6e 70 75 74 31 39 48 31 29 20 2e 6d 65 74 61 64 61 74 61 43 6f 6e 74 61 69 6e 65 72 20 2e 73 61 5f 68 76 2c 23 72 6f 6f 74 2e 64 61 72 6b 54 68 65 6d 65 3a 6e 6f 74 28 2e 7a 65 72 6f 49 6e 70 75 74 31 39 48 31 29 20 2e 73 65 63 74 69 6f 6e 49 74 65 6d 2e 73 65 6c 65 63 74 61 62 6c 65 2e 73 61 5f 68 76 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 66 7d 23 72 6f 6f 74 2e 64 61 72 6b 54 68 65 6d 65 3a 6e 6f 74 28 2e 7a 65 72 6f 49 6e 70 75 74 31 39 48 31 29 20 2e 6d 65 6e 75 49 74 65 6d 2e 66 6f 63 75 73 61 62 6c 65 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 32 70 78 20 73 6f 6c 69 64 20 23 66 66 66 7d 23 72 6f 6f 74 3a 6e 6f 74 28 2e 7a 65 72 6f 49 6e 70 75 74 31 39 48 31 29 20 2e 74 6f 70 52 65 Data Ascii: rkTheme:not(.zeroInput19H1) .metadataContainer .sa_hv,#root.darkTheme:not(.zeroInput19H1) .sectionItem.selectable.sa_hv{border-color:#fff}#root.darkTheme:not(.zeroInput19H1) .menuItem.focusable:focus{outline:2px solid #fff}#root:not(.zeroInput19H1) .topRe
2024-01-17 17:07:05 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 38 39 35 36 29 7d 2e 64 61 72 6b 54 68 65 6d 65 2e 7a 65 72 6f 49 6e 70 75 74 31 39 48 31 20 2e 70 65 6f 70 6c 65 49 63 6f 6e 20 2e 69 63 6f 6e 43 6f 6e 74 65 6e 74 2c 2e 64 61 72 6b 54 68 65 6d 65 20 2e 70 65 6f 70 6c 65 49 63 6f 6e 20 2e 69 63 6f 6e 43 6f 6e 74 65 6e 74 2c 2e 64 61 72 6b 54 68 65 6d 65 20 2e 75 73 65 72 50 72 6f 66 69 6c 65 4d 65 6e 75 49 63 6f 6e 20 2e 70 65 6f 70 6c 65 49 63 6f 6e 20 2e 69 63 6f 6e 43 6f 6e 74 65 6e 74 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 75 73 65 72 50 72 6f 66 69 6c 65 4d 65 6e 75 49 63 6f 6e 20 2e 70 65 6f 70 6c 65 49 63 6f 6e 20 2e 69 63 6f 6e 43 6f 6e 74 65 6e 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 7d 62 6f 64 79 5b 64 69 72 Data Ascii: 00006000lor:rgba(0,0,0,.8956)}.darkTheme.zeroInput19H1 .peopleIcon .iconContent,.darkTheme .peopleIcon .iconContent,.darkTheme .userProfileMenuIcon .peopleIcon .iconContent{color:#fff}.userProfileMenuIcon .peopleIcon .iconContent{font-size:16px}body[dir
2024-01-17 17:07:05 UTC	8204	IN	Data Raw: 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 23 71 66 50 72 65 76 69 65 77 53 63 72 6f 6c 6c 41 72 65 61 2e 6e 6f 53 63 72 6f 6c 6c 7b 6f 76 65 72 66 6c 6f 77 2d 79 3a 68 69 64 64 65 6e 7d 23 72 6f 6f 74 3a 6e 6f 74 28 2e 64 69 73 6d 69 73 73 65 64 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 7d 62 6f 64 79 5b 64 69 72 5d 20 2e 61 6e 63 68 6f 72 2c 62 6f 64 79 5b 64 69 72 5d 20 2e 62 61 63 6b 42 75 74 74 6f 6e 43 6f 6e 74 61 69 6e 65 72 7b 70 61 64 64 69 6e 67 3a 31 36 70 78 20 32 34 70 78 20 30 20 32 34 70 78 7d 2e 61 6e 63 68 6f 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 61 6e 63 68 6f 72 20 2e 69 63 6f 6e 43 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 Data Ascii: olor:transparent}#qfPreviewScrollArea.noScroll{overflow-y:hidden}#root:not(.dismissed){background-color:#fff}body[dir] .anchor,body[dir] .backButtonContainer{padding:16px 24px 0 24px}.anchor{text-align:center}.anchor .iconContainer{position:relative;width
2024-01-17 17:07:05 UTC	14893	IN	Data Raw: 30 30 30 30 33 41 32 31 0d 0a 74 49 63 6f 6e 20 2e 69 63 6f 6e 43 6f 6e 74 61 69 6e 65 72 2c 2e 61 6e 63 68 6f 72 20 2e 65 6d 61 69 6c 49 63 6f 6e 20 2e 69 63 6f 6e 43 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 33 32 70 78 3b 68 65 69 67 68 74 3a 33 32 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 33 32 70 78 7d 2e 6d 65 6e 75 49 6e 66 6f 20 2e 6d 65 6e 75 48 65 61 64 65 72 54 65 78 74 2c 2e 6f 6e 65 4c 69 6e 65 4d 61 78 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 76 65 72 74 69 63 61 6c 7d 2e 74 77 6f 4c 69 6e 65 4d 61 78 20 2e 73 65 63 6f 6e 64 61 72 79 54 65 78 74 3e 73 70 61 6e 3e 73 70 61 6e 7b 6f 76 65 72 66 6c 6f 77 3a 68 Data Ascii: 00003A21tIcon .iconContainer,.anchor .emailIcon .iconContainer{width:32px;height:32px;font-size:32px}.menuInfo .menuHeaderText,.oneLineMax{overflow:hidden;text-overflow:ellipsis;-webkit-box-orient:vertical}.twoLineMax .secondaryText>span>span{overflow:h
2024-01-17 17:07:05 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 4d 7a 6b 33 49 44 45 7a 4c 6a 6b 32 4f 54 49 67 4f 43 34 31 4d 44 41 34 49 44 45 7a 4c 6a 6b 78 4d 6a 63 67 4f 43 34 30 4f 54 6b 32 4d 79 41 78 4d 79 34 34 4e 54 56 57 4e 53 34 32 4d 6a 45 77 4e 30 4d 34 4c 6a 51 35 4f 54 59 7a 49 44 55 75 4d 7a 59 78 4d 6a 45 67 4f 43 34 33 4d 44 6b 35 4e 79 41 31 4c 6a 45 30 4f 54 45 33 49 44 67 75 4f 54 59 35 4f 54 59 67 4e 53 34 78 4e 44 6b 78 4e 30 4d 35 4c 6a 41 32 4e 7a 51 32 49 44 55 75 4d 54 51 35 4d 54 63 67 4f 53 34 78 4e 54 67 30 4e 69 41 31 4c 6a 45 33 4f 54 59 67 4f 53 34 79 4d 7a 4d 7a 49 44 55 75 4d 6a 49 35 4e 6b 77 78 4d 43 34 32 4e 7a 45 31 49 44 59 75 4d 54 63 79 4e 45 4d 78 4d 43 34 32 4e 7a 6b 78 49 44 59 75 4d 54 63 34 4f 54 49 67 4d 54 41 75 4e 6a 67 33 4e 69 41 32 4c Data Ascii: 00004000Mzk3IDEzLjk2OTIgOC41MDA4IDEzLjkxMjcgOC40OTk2MyAxMy44NTVWNS42MjEwN0M4LjQ5OTYzIDUuMzYxMjEgOC43MDk5NyA1LjE0OTE3IDguOTY5OTYgNS4xNDkxN0M5LjA2NzQ2IDUuMTQ5MTcgOS4xNTg0NiA1LjE3OTYgOS4yMzMzIDUuMjI5NkwxMC42NzE1IDYuMTcyNEMxMC42NzkxIDYuMTc4OTIgMTAuNjg3NiA2L
2024-01-17 17:07:05 UTC	12	IN	Data Raw: 7a 45 35 4e 53 41 78 4e 69 34 0d 0a Data Ascii: zE5NSAxNi4
2024-01-17 17:07:05 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 7a 4d 44 51 79 49 44 67 75 4f 54 67 35 4e 6a 49 67 4d 54 55 75 4e 44 51 31 4e 30 4d 34 4c 6a 63 30 4d 54 51 32 49 44 45 31 4c 6a 41 31 4d 7a 51 67 4f 43 34 31 4e 7a 63 79 4f 53 41 78 4e 43 34 32 4d 44 4d 78 49 44 67 75 4e 54 49 78 4e 7a 6b 67 4d 54 51 75 4d 54 45 35 4d 30 4d 34 4c 6a 59 7a 4f 44 49 35 49 44 45 30 4c 6a 63 34 4d 44 55 67 4f 53 34 79 4d 54 49 32 4d 69 41 78 4e 53 34 79 4f 44 45 34 49 44 6b 75 4f 54 41 30 4f 54 55 67 4d 54 55 75 4d 6a 67 78 4f 45 4d 78 4d 43 34 78 4e 44 63 32 49 44 45 31 4c 6a 49 34 4d 54 67 67 4d 54 41 75 4d 7a 63 31 4d 79 41 78 4e 53 34 79 4d 6a 41 32 49 44 45 77 4c 6a 55 33 4e 44 4d 67 4d 54 55 75 4d 54 45 79 4d 30 4d 78 4d 43 34 31 4e 7a 55 34 49 44 45 31 4c 6a 45 78 4d 54 51 67 4d 54 41 75 Data Ascii: 00004000zMDQyIDguOTg5NjIgMTUuNDQ1N0M4Ljc0MTQ2IDE1LjA1MzQgOC41NzcyOSAxNC42MDMxIDguNTIxNzkgMTQuMTE5M0M4LjYzODI5IDE0Ljc4MDUgOS4yMTI2MiAxNS4yODE4IDkuOTA0OTUgMTUuMjgxOEMxMC4xNDc2IDE1LjI4MTggMTAuMzc1MyAxNS4yMjA2IDEwLjU3NDMgMTUuMTEyM0MxMC41NzU4IDE1LjExMTQgMTAu
2024-01-17 17:07:05 UTC	12	IN	Data Raw: 3a 61 63 74 69 76 65 29 3a 62 0d 0a Data Ascii: :active):b
2024-01-17 17:07:05 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 65 66 6f 72 65 2c 2e 6d 65 73 73 61 67 65 2e 69 74 65 6d 54 6f 6f 6c 74 69 70 20 23 6c 61 75 6e 63 68 49 6e 64 65 78 69 6e 67 4f 70 74 69 6f 6e 73 3a 66 6f 63 75 73 3a 6e 6f 74 28 3a 61 63 74 69 76 65 29 3a 61 66 74 65 72 7b 2d 2d 73 63 61 6c 65 3a 31 7d 2e 66 6f 63 75 73 61 62 6c 65 3a 6e 6f 74 28 2e 65 78 70 61 6e 64 65 64 29 3a 66 6f 63 75 73 3a 6e 6f 74 28 3a 61 63 74 69 76 65 29 7b 6f 75 74 6c 69 6e 65 3a 32 70 78 20 73 6f 6c 69 64 20 23 30 30 30 3b 7a 2d 69 6e 64 65 78 3a 31 7d 23 6d 69 6e 69 53 65 72 70 50 61 6e 65 3e 2e 66 6f 6f 74 65 72 2e 66 6f 63 75 73 61 62 6c 65 3a 66 6f 63 75 73 2c 23 65 72 72 6f 72 50 61 6e 65 3e 2e 66 6f 6f 74 65 72 2e 66 6f 63 75 73 61 62 6c 65 3a 66 6f 63 75 73 2c 23 65 72 72 6f 72 46 6f 6f Data Ascii: 00006000efore,.message.itemTooltip #launchIndexingOptions:focus:not(:active):after{--scale:1}.focusable:not(.expanded):focus:not(:active){outline:2px solid #000;z-index:1}#miniSerpPane>.footer.focusable:focus,#errorPane>.footer.focusable:focus,#errorFoo

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.16	49791	204.79.197.222	443

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:05 UTC	462	OUT	GET /conf/v2/asgw/fpconfig.min.json?monitorId=asgw HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: fp.msedge.net Connection: Keep-Alive
2024-01-17 17:07:05 UTC	429	IN	HTTP/1.1 200 OK Cache-Control: public,max-age=900 Content-Length: 17958 Content-Type: application/json; charset=utf-8 ETag: "1474684246" Access-Control-Allow-Origin: * Request-Context: appId=cid-v1:b183296d-485b-49fc-81c7-a511e61d1309 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: DD332B6A4D2D40109897A47C63384B94 Ref B: TEB31EDGE0309 Ref C: 2024-01-17T17:07:05Z Date: Wed, 17 Jan 2024 17:07:04 GMT Connection: close
2024-01-17 17:07:05 UTC	3750	IN	Data Raw: 7b 22 73 22 3a 35 30 30 30 2c 22 6e 22 3a 33 2c 22 65 22 3a 5b 7b 22 65 22 3a 22 2a 2e 61 7a 72 2e 66 6f 6f 74 70 72 69 6e 74 64 6e 73 2e 63 6f 6d 22 2c 22 77 22 3a 35 30 30 30 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 2a 2e 63 6c 6f 2e 66 6f 6f 74 70 72 69 6e 74 64 6e 73 2e 63 6f 6d 22 2c 22 77 22 3a 32 30 30 30 2c 22 6d 22 3a 31 7d 2c 7b 22 65 22 3a 22 2a 2e 63 6c 6f 2e 66 6f 6f 74 70 72 69 6e 74 64 6e 73 2e 63 6f 6d 22 2c 22 77 22 3a 31 30 30 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 2a 2e 6e 72 62 2e 66 6f 6f 74 70 72 69 6e 74 64 6e 73 2e 63 6f 6d 22 2c 22 77 22 3a 34 32 30 2c 22 6d 22 3a 33 7d 2c 7b 22 65 22 3a 22 61 66 64 78 74 65 73 74 2e 7a 30 31 2e 61 7a 75 72 65 66 64 2e 6e 65 74 22 2c 22 77 22 3a 35 30 30 2c 22 6d 22 3a 31 7d 2c 7b Data Ascii: {"s":5000,"n":3,"e":[{"e":".azr.footprintdns.com","w":5000,"m":128},{"e":".clo.footprintdns.com","w":2000,"m":1},{"e":".clo.footprintdns.com","w":100,"m":128},{"e":".nrb.footprintdns.com","w":420,"m":3},{"e":"afdxtest.z01.azurefd.net","w":500,"m":1},{
2024-01-17 17:07:05 UTC	48	IN	Data Raw: 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 64 6f 68 32 31 70 72 64 61 70 70 30 31 2d 63 61 6e 61 72 79 2d 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e Data Ascii: m":128},{"e":"doh21prdapp01-canary-opaph.netmon.
2024-01-17 17:07:05 UTC	4096	IN	Data Raw: 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 64 6f 68 32 31 70 72 64 61 70 70 30 32 2d 63 61 6e 61 72 79 2d 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 64 6f 68 32 32 70 72 64 61 70 70 30 31 2d 63 61 6e 61 72 79 2d 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 64 6f 68 32 32 70 72 64 61 70 70 30 32 2d 63 61 6e 61 72 79 2d 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 64 73 6d 30 36 70 72 64 61 70 70 30 32 2d 63 61 6e 61 72 79 2e 6e 65 74 6d Data Ascii: azure.com","w":3,"m":128},{"e":"doh21prdapp02-canary-opaph.netmon.azure.com","w":3,"m":128},{"e":"doh22prdapp01-canary-opaph.netmon.azure.com","w":3,"m":128},{"e":"doh22prdapp02-canary-opaph.netmon.azure.com","w":3,"m":128},{"e":"dsm06prdapp02-canary.netm
2024-01-17 17:07:05 UTC	4096	IN	Data Raw: 6a 67 61 32 30 70 72 64 61 70 70 30 31 2d 63 61 6e 61 72 79 2d 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 7d 2c 7b 22 65 22 3a 22 6a 67 61 32 30 70 72 64 61 70 70 30 31 2d 63 61 6e 61 72 79 2d 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 6a 67 61 32 30 70 72 64 61 70 70 30 32 2d 63 61 6e 61 72 79 2d 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 6a 68 7a 32 30 70 72 64 61 70 70 30 31 2d 63 61 6e 61 72 79 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a Data Ascii: jga20prdapp01-canary-opaph.netmon.azure.com","w":3,"m":1},{"e":"jga20prdapp01-canary-opaph.netmon.azure.com","w":3,"m":128},{"e":"jga20prdapp02-canary-opaph.netmon.azure.com","w":3,"m":128},{"e":"jhz20prdapp01-canary.netmon.azure.com","w":3,"m":128},{"e":
2024-01-17 17:07:05 UTC	4096	IN	Data Raw: 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 70 68 78 31 30 70 72 64 61 70 70 30 31 2d 63 61 6e 61 72 79 2d 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 70 68 78 31 30 70 72 64 61 70 70 30 32 2d 63 61 6e 61 72 79 2d 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 70 68 78 37 30 70 72 64 61 70 70 30 32 2d 63 61 6e 61 72 79 2d 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 70 68 78 38 30 70 72 64 61 70 70 30 31 2d 63 61 6e 61 72 79 2d 6f 70 61 70 Data Ascii: azure.com","w":3,"m":128},{"e":"phx10prdapp01-canary-opaph.netmon.azure.com","w":3,"m":128},{"e":"phx10prdapp02-canary-opaph.netmon.azure.com","w":3,"m":128},{"e":"phx70prdapp02-canary-opaph.netmon.azure.com","w":3,"m":128},{"e":"phx80prdapp01-canary-opap
2024-01-17 17:07:05 UTC	1872	IN	Data Raw: 77 22 3a 32 30 30 30 2c 22 6d 22 3a 33 7d 2c 7b 22 65 22 3a 22 74 2d 73 31 2d 72 69 6e 67 2e 6d 73 65 64 67 65 2e 6e 65 74 22 2c 22 77 22 3a 35 30 2c 22 6d 22 3a 33 7d 2c 7b 22 65 22 3a 22 74 2d 73 32 2d 72 69 6e 67 2e 6d 73 65 64 67 65 2e 6e 65 74 22 2c 22 77 22 3a 32 30 30 2c 22 6d 22 3a 33 7d 2c 7b 22 65 22 3a 22 74 79 31 70 72 64 61 70 70 30 31 2d 63 61 6e 61 72 79 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 74 79 6f 32 30 70 72 64 61 70 70 30 31 2d 63 61 6e 61 72 79 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 74 79 6f 32 30 70 72 64 61 70 70 30 32 2d 63 61 6e 61 72 79 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 Data Ascii: w":2000,"m":3},{"e":"t-s1-ring.msedge.net","w":50,"m":3},{"e":"t-s2-ring.msedge.net","w":200,"m":3},{"e":"ty1prdapp01-canary.netmon.azure.com","w":3,"m":128},{"e":"tyo20prdapp01-canary.netmon.azure.com","w":3,"m":128},{"e":"tyo20prdapp02-canary.netmon.azu

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.16	49792	173.222.162.7	443

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:06 UTC	853	OUT	GET /rb/74/ortl,cc,nc/QNBBNqWD9F_Blep-UqQSqnMp-FI.css?bu=AdcJ&or=w HTTP/1.1 Accept: / Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: r.bing.com Connection: Keep-Alive Cookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=1F9344FA7B5C6D050D8557587A606C51&CPID=1696585056799&AC=1&CPH=074c06b2&CBV=39996767; _EDGE_S=SID=1F9344FA7B5C6D050D8557587A606C51&mkt=de-ch; SRCHUID=V=2&GUID=1365D4FE3DA84D19A46408EFC15FC823&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231006; SRCHHPGUSR=SRCHLANG=de&HV=1705511222&IPMH=5e4190f4&IPMID=1696585056345&LUT=1696585056224; CortanaAppUID=646BA1FF24F806DFED4199E1E0EFF63E
2024-01-17 17:07:07 UTC	1205	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Server: Kestrel Access-Control-Allow-Headers: * Access-Control-Allow-Origin: * Last-Modified: Mon, 15 Aug 2022 10:51:34 GMT X-EventID: 65a57300c7ef468fbfa2eb964e68bdab UserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0= X-AS-InstrumentationOptions: AppServerLoggingMaster=1 X-AS-MACHINENAME: MWHEEEAP0024F78 X-AS-SuppressSetCookie: 1 X-XSS-Protection: 0 cross-origin-resource-policy: cross-origin nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.5} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingrms"}]} Cache-Control: public, max-age=262420 Expires: Sat, 20 Jan 2024 18:00:47 GMT Date: Wed, 17 Jan 2024 17:07:07 GMT Content-Length: 6 Connection: close Alt-Svc: h3=":443"; ma=93600 Akamai-GRN: 0.07a6dc17.1705511227.8b92b95 Timing-Allow-Origin: *
2024-01-17 17:07:07 UTC	6	IN	Data Raw: 7a 7b 61 3a 31 7d Data Ascii: z{a:1}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.16	49795	142.250.72.110	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:07 UTC	773	OUT	GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromiumcrx&prodchannel=&prodversion=117.0.2045.47&lang=en-GB&acceptformat=crx3,puff&x=id%3Dghbmnnjooekpmoecnnnilnnbdlolhkhi%26v%3D0.0.0.0%26installedby%3Dexternal%26uc HTTP/1.1 Host: clients2.google.com Connection: keep-alive X-Goog-Update-Interactivity: fg X-Goog-Update-AppId: ghbmnnjooekpmoecnnnilnnbdlolhkhi X-Goog-Update-Updater: chromiumcrx-117.0.2045.47 MS-CV: ep8hyp2dzS1uxVmA+Vj7iw Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:07 UTC	732	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce--QsficvEK3ELYNwYkRzCTw' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 17 Jan 2024 17:07:07 GMT Content-Type: text/xml; charset=UTF-8 X-Daynum: 6225 X-Daystart: 32827 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-17 17:07:07 UTC	520	IN	Data Raw: 33 30 61 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 36 32 32 35 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 33 32 38 32 37 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 67 68 62 6d 6e 6e 6a 6f 6f 65 6b 70 6d 6f 65 63 6e 6e 6e 69 6c 6e 6e 62 64 6c 6f 6c 68 6b 68 69 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 Data Ascii: 30a<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="6225" elapsed_seconds="32827"/><app appid="ghbmnnjooekpmoecnnnilnnbdlolhkhi" cohort="1::" cohortname=""
2024-01-17 17:07:07 UTC	265	IN	Data Raw: 4f 45 4b 50 4d 4f 45 43 4e 4e 4e 49 4c 4e 4e 42 44 4c 4f 4c 48 4b 48 49 5f 31 5f 37 33 5f 30 5f 30 2e 63 72 78 22 20 66 70 3d 22 31 2e 37 30 63 65 35 35 63 36 39 31 32 37 36 33 35 62 63 62 35 37 39 65 31 38 37 38 63 34 63 37 34 66 37 37 30 37 62 64 37 30 38 63 64 35 37 32 37 33 65 38 62 34 38 39 31 34 35 39 61 36 61 30 65 66 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 37 30 63 65 35 35 63 36 39 31 32 37 36 33 35 62 63 62 35 37 39 65 31 38 37 38 63 34 63 37 34 66 37 37 30 37 62 64 37 30 38 63 64 35 37 32 37 33 65 38 62 34 38 39 31 34 35 39 61 36 61 30 65 66 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 7a 65 3d 22 39 31 36 37 31 22 20 73 74 61 74 75 73 3d 22 6f 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 37 33 2e 30 22 2f 3e 3c 2f 61 70 70 3e 3c 2f Data Ascii: OEKPMOECNNNILNNBDLOLHKHI_1_73_0_0.crx" fp="1.70ce55c69127635bcb579e1878c4c74f7707bd708cd57273e8b4891459a6a0ef" hash_sha256="70ce55c69127635bcb579e1878c4c74f7707bd708cd57273e8b4891459a6a0ef" protected="0" size="91671" status="ok" version="1.73.0"/></app></
2024-01-17 17:07:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.16	49797	13.107.9.158	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:07 UTC	427	OUT	GET /work/api/v2/tenant/my/settingswithflights?&clienttype=edge-omnibox HTTP/1.1 Host: business.bing.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:08 UTC	919	IN	HTTP/1.1 401 Unauthorized Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Length: 585 Content-Type: application/json; charset=utf-8 Strict-Transport-Security: max-age=31536000 nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://bzib.nelreports.net/api/report?cat=bingbusiness"}]} X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 15D11AB434C441E5BB4F8B30B25F4EFC Ref B: BL2AA2010205023 Ref C: 2024-01-17T17:07:08Z Set-Cookie: MUIDB=15D8D916594867CF1AA3CD1F58DC663F; path=/; httponly; expires=Mon, 10-Feb-2025 17:07:08 GMT Date: Wed, 17 Jan 2024 17:07:07 GMT Connection: close
2024-01-17 17:07:08 UTC	390	IN	Data Raw: 7b 22 74 65 6e 61 6e 74 53 65 74 74 69 6e 67 73 22 3a 7b 22 66 72 69 65 6e 64 6c 79 4e 61 6d 65 22 3a 22 22 2c 22 74 65 6e 61 6e 74 4f 62 6a 65 63 74 49 64 22 3a 22 22 2c 22 74 65 6e 61 6e 74 49 64 22 3a 22 22 2c 22 74 65 6e 61 6e 74 44 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 22 2c 22 69 63 6f 6e 4c 61 72 67 65 22 3a 22 22 2c 22 69 63 6f 6e 4c 61 72 67 65 43 68 65 63 6b 73 75 6d 22 3a 22 22 2c 22 74 68 65 6d 65 22 3a 22 22 2c 22 61 64 6d 69 6e 45 6d 61 69 6c 22 3a 22 22 2c 22 69 63 6f 6e 4c 61 72 67 65 49 73 44 65 66 61 75 6c 74 22 3a 66 61 6c 73 65 2c 22 74 65 6e 61 6e 74 47 72 6f 75 70 22 3a 22 22 2c 22 73 74 61 74 75 73 22 3a 22 43 6f 6d 70 6c 65 74 65 22 2c 22 76 61 72 69 61 6e 74 73 22 3a 5b 5d 2c 22 65 78 70 6c 6f 72 65 51 75 65 72 69 65 73 22 3a 5b Data Ascii: {"tenantSettings":{"friendlyName":"","tenantObjectId":"","tenantId":"","tenantDisplayName":"","iconLarge":"","iconLargeChecksum":"","theme":"","adminEmail":"","iconLargeIsDefault":false,"tenantGroup":"","status":"Complete","variants":[],"exploreQueries":[
2024-01-17 17:07:08 UTC	195	IN	Data Raw: 30 34 39 2d 39 36 35 37 2d 35 65 36 37 32 31 30 39 30 38 65 36 22 2c 22 74 72 61 63 65 49 64 22 3a 22 31 35 44 31 31 41 42 34 33 34 43 34 34 31 45 35 42 42 34 46 38 42 33 30 42 32 35 46 34 45 46 43 22 2c 22 63 6f 72 72 65 6c 61 74 69 6f 6e 49 64 22 3a 22 31 35 44 31 31 41 42 34 33 34 43 34 34 31 45 35 42 42 34 46 38 42 33 30 42 32 35 46 34 45 46 43 22 2c 22 72 65 71 75 65 73 74 49 64 22 3a 22 2d 34 34 33 38 22 2c 22 7a 6f 6e 65 22 3a 22 45 61 73 74 41 73 69 61 22 2c 22 65 64 67 65 45 6e 76 69 72 6f 6e 6d 65 6e 74 22 3a 22 45 64 67 65 2d 50 72 6f 64 2d 42 4c 32 72 38 62 22 7d 7d Data Ascii: 049-9657-5e67210908e6","traceId":"15D11AB434C441E5BB4F8B30B25F4EFC","correlationId":"15D11AB434C441E5BB4F8B30B25F4EFC","requestId":"-4438","zone":"EastAsia","edgeEnvironment":"Edge-Prod-BL2r8b"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.16	49798	13.107.9.158	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:07 UTC	418	OUT	GET /api/v1/user/token/microsoftgraph?&clienttype=edge-omnibox HTTP/1.1 Host: business.bing.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:08 UTC	514	IN	HTTP/1.1 401 Unauthorized WWW-Authenticate: Bearer WWW-Authenticate: Bearer Strict-Transport-Security: max-age=31536000 X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 9BB0A4658D9B4DA8AF12B19A361408D8 Ref B: BL2AA2030104003 Ref C: 2024-01-17T17:07:08Z Date: Wed, 17 Jan 2024 17:07:07 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.16	49799	40.71.99.188	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:07 UTC	428	OUT	GET /edgeoffer/pb/experiments?appId=edge-extensions&country=CH HTTP/1.1 Host: api.edgeoffer.microsoft.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:08 UTC	584	IN	HTTP/1.1 200 OK Content-Length: 0 Connection: close Content-Type: application/x-protobuf; charset=utf-8 Date: Wed, 17 Jan 2024 17:07:07 GMT Server: Microsoft-IIS/10.0 Set-Cookie: ARRAffinity=6dca0757fa52ee8d450692bdd68aadcaac7078750cedf1d2646a22175575e8b8;Path=/;HttpOnly;Secure;Domain=api.edgeoffer.microsoft.com Set-Cookie: ARRAffinitySameSite=6dca0757fa52ee8d450692bdd68aadcaac7078750cedf1d2646a22175575e8b8;Path=/;HttpOnly;SameSite=None;Secure;Domain=api.edgeoffer.microsoft.com Request-Context: appId=cid-v1:cfede706-9043-4d8c-a950-efefc8624cae X-Powered-By: ASP.NET

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.16	49800	173.222.162.7	443

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:08 UTC	875	OUT	GET /rb/74/ortl,cc,nc/UAaYFJgFpEHrvDo6xXg7recODbU.css?bu=CckK1wnOCtcJ0grXCdcJ1wnXCQ&or=w HTTP/1.1 Accept: / Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: r.bing.com Connection: Keep-Alive Cookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=1F9344FA7B5C6D050D8557587A606C51&CPID=1696585056799&AC=1&CPH=074c06b2&CBV=39996767; _EDGE_S=SID=1F9344FA7B5C6D050D8557587A606C51&mkt=de-ch; SRCHUID=V=2&GUID=1365D4FE3DA84D19A46408EFC15FC823&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231006; SRCHHPGUSR=SRCHLANG=de&HV=1705511222&IPMH=5e4190f4&IPMID=1696585056345&LUT=1696585056224; CortanaAppUID=646BA1FF24F806DFED4199E1E0EFF63E
2024-01-17 17:07:08 UTC	1246	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Server: Kestrel Access-Control-Allow-Headers: * Access-Control-Allow-Origin: * Last-Modified: Thu, 28 Dec 2023 15:25:40 GMT X-EventID: 65a57300b09a4f14907d36e63373a8d1 UserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0= X-AS-InstrumentationOptions: AppServerLoggingMaster=1 X-AS-MACHINENAME: MWHEEEAP0025023 X-AS-SuppressSetCookie: 1 X-XSS-Protection: 0 cross-origin-resource-policy: cross-origin nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.5} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingrms"}]} Cache-Control: public, max-age=262443 Expires: Sat, 20 Jan 2024 18:01:11 GMT Date: Wed, 17 Jan 2024 17:07:08 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Alt-Svc: h3=":443"; ma=93600 Akamai-GRN: 0.07a6dc17.1705511228.8b939f5 Timing-Allow-Origin: *
2024-01-17 17:07:08 UTC	15138	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 23 74 6f 70 52 65 73 75 6c 74 73 20 2e 73 75 67 67 65 73 74 69 6f 6e 2e 6d 73 62 2d 70 65 6f 70 6c 65 20 2e 69 63 6f 6e 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 23 74 6f 70 52 65 73 75 6c 74 73 20 2e 73 75 67 67 65 73 74 69 6f 6e 2e 6d 73 62 2d 70 65 6f 70 6c 65 20 2e 69 63 6f 6e 3e 69 6d 67 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 7d 23 67 72 6f 75 70 73 20 2e 73 75 67 67 65 73 74 69 6f 6e 2e 6d 73 62 2d 70 65 6f 70 6c 65 20 2e 69 63 6f 6e 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 7d 23 67 72 6f 75 70 73 20 2e 73 75 67 67 65 73 74 69 6f 6e 2e 6d 73 62 2d 70 65 6f 70 6c 65 20 2e 69 63 6f 6e 3e 69 6d 67 7b Data Ascii: 00006000#topResults .suggestion.msb-people .icon{vertical-align:middle}#topResults .suggestion.msb-people .icon>img{border-radius:50%;height:100%;width:100%}#groups .suggestion.msb-people .icon{border-radius:50%}#groups .suggestion.msb-people .icon>img{
2024-01-17 17:07:08 UTC	9450	IN	Data Raw: 72 6b 54 68 65 6d 65 20 2e 70 72 65 76 69 65 77 43 6f 6e 74 61 69 6e 65 72 2e 6d 73 62 50 72 65 76 69 65 77 43 6f 6e 74 61 69 6e 65 72 20 23 62 5f 62 66 62 20 23 62 66 62 5f 63 6f 6e 74 65 6e 74 20 2e 6d 73 2d 73 65 61 72 63 68 2d 63 6f 6e 74 61 63 74 2d 61 63 74 69 6f 6e 73 2d 63 6f 6e 74 61 69 6e 65 72 2e 6d 73 2d 73 65 61 72 63 68 2d 74 65 78 74 3e 61 3e 73 70 61 6e 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 64 61 72 6b 54 68 65 6d 65 20 2e 70 72 65 76 69 65 77 43 6f 6e 74 61 69 6e 65 72 2e 6d 73 62 50 72 65 76 69 65 77 43 6f 6e 74 61 69 6e 65 72 20 23 62 5f 62 66 62 20 23 62 66 62 5f 63 6f 6e 74 65 6e 74 20 2e 6d 73 2d 73 65 61 72 63 68 2d 6d 64 2e 6d 73 2d 73 65 61 72 63 68 2d 74 65 78 74 5b 63 6c 61 73 73 2a 3d 22 6d 61 72 6b 64 6f 77 6e 43 6f 6e 74 61 Data Ascii: rkTheme .previewContainer.msbPreviewContainer #b_bfb #bfb_content .ms-search-contact-actions-container.ms-search-text>a>span{color:#fff}.darkTheme .previewContainer.msbPreviewContainer #b_bfb #bfb_content .ms-search-md.ms-search-text[class*="markdownConta
2024-01-17 17:07:08 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 61 63 63 6f 72 64 69 6f 6e 43 6f 6e 74 61 69 6e 65 72 22 5d 20 5b 63 6c 61 73 73 2a 3d 22 61 63 63 6f 72 64 69 6f 6e 43 6f 6e 74 65 6e 74 43 6f 6e 74 61 69 6e 65 72 22 5d 20 75 6c 5b 63 6c 61 73 73 2a 3d 22 6d 65 65 74 69 6e 67 4c 69 73 74 22 5d 20 69 7b 63 6f 6c 6f 72 3a 23 64 32 64 30 63 65 7d 2e 64 61 72 6b 54 68 65 6d 65 20 23 6d 73 62 50 61 6e 65 2e 70 72 65 76 69 65 77 43 6f 6e 74 61 69 6e 65 72 2e 6d 73 62 50 72 65 76 69 65 77 43 6f 6e 74 61 69 6e 65 72 20 23 62 5f 62 66 62 20 2e 6d 73 2d 73 65 61 72 63 68 2d 72 69 62 62 6f 6e 20 23 62 66 62 5f 63 6f 6e 74 65 6e 74 20 5b 63 6c 61 73 73 2a 3d 22 61 63 63 6f 72 64 69 6f 6e 43 6f 6e 74 61 69 6e 65 72 22 5d 20 5b 63 6c 61 73 73 2a 3d 22 61 63 63 6f 72 64 69 6f 6e 43 6f 6e Data Ascii: 00006000accordionContainer"] [class="accordionContentContainer"] ul[class="meetingList"] i{color:#d2d0ce}.darkTheme #msbPane.previewContainer.msbPreviewContainer #b_bfb .ms-search-ribbon #bfb_content [class="accordionContainer"] [class="accordionCon
2024-01-17 17:07:08 UTC	8204	IN	Data Raw: 6d 70 6c 65 43 6f 6e 74 61 69 6e 65 72 20 2e 66 72 65 43 6f 6e 74 65 6e 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 36 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 65 67 6f 65 20 55 49 22 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 2e 6d 73 62 46 72 65 43 6f 6e 74 61 69 6e 65 72 20 2e 66 72 65 45 78 61 6d 70 6c 65 43 6f 6e 74 61 69 6e 65 72 20 2e 66 72 65 45 78 61 6d 70 6c 65 48 65 61 64 65 72 7b 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 38 39 35 36 29 7d 62 6f 64 79 5b 64 69 72 5d 20 2e 6d 73 62 46 72 65 43 6f 6e 74 61 69 6e 65 72 20 2e 66 72 65 45 78 61 6d 70 6c 65 43 6f 6e 74 61 69 6e 65 72 20 2e 66 72 65 45 78 61 6d 70 6c 65 48 Data Ascii: mpleContainer .freContent{font-size:13px;font-weight:600;line-height:16px;font-family:"Segoe UI";font-style:normal}.msbFreContainer .freExampleContainer .freExampleHeader{color:rgba(0,0,0,.8956)}body[dir] .msbFreContainer .freExampleContainer .freExampleH
2024-01-17 17:07:08 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 68 74 3a 32 33 36 70 78 7d 2e 64 73 62 46 75 6c 6c 57 69 64 74 68 20 2e 64 73 62 2d 68 65 72 6f 20 2e 64 73 62 2d 68 65 72 6f 5f 5f 69 6d 67 2d 63 6f 6e 74 61 69 6e 65 72 2e 77 68 6f 6c 65 70 61 67 65 74 61 62 73 5f 5f 63 6f 6e 74 61 69 6e 65 72 2c 2e 64 73 62 46 75 6c 6c 57 69 64 74 68 20 2e 64 73 62 2d 68 65 72 6f 20 2e 64 73 62 2d 68 65 72 6f 5f 5f 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 2e 77 68 6f 6c 65 70 61 67 65 74 61 62 73 5f 5f 63 6f 6e 74 61 69 6e 65 72 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 38 70 78 20 38 70 78 20 30 20 30 7d 2e 64 73 62 2d 68 65 72 6f 3a 66 6f 63 75 73 2c 2e 64 73 62 2d 68 65 72 6f 5f 5f 64 69 73 6d 69 73 73 2d 69 63 6f 6e 3a 66 6f 63 75 73 2c 3a 6e 6f 74 28 2e 6f 76 65 72 6c 61 Data Ascii: 00004000ht:236px}.dsbFullWidth .dsb-hero .dsb-hero__img-container.wholepagetabs__container,.dsbFullWidth .dsb-hero .dsb-hero__content-container.wholepagetabs__container{border-radius:8px 8px 0 0}.dsb-hero:focus,.dsb-hero__dismiss-icon:focus,:not(.overla
2024-01-17 17:07:08 UTC	12	IN	Data Raw: 79 3a 61 75 74 6f 7d 62 6f 64 0d 0a Data Ascii: y:auto}bod
2024-01-17 17:07:08 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 79 5b 64 69 72 5d 20 23 6d 73 62 5f 64 73 62 5f 72 6f 6f 74 20 2e 6d 73 62 64 73 62 2d 6d 70 2d 68 65 61 64 65 72 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 62 6f 64 79 5b 64 69 72 5d 20 23 6d 73 62 5f 64 73 62 5f 72 6f 6f 74 20 2e 6d 73 62 64 73 62 5f 6d 61 69 6e 70 61 67 65 5f 66 61 6c 6c 62 61 63 6b 5f 62 6f 75 6e 64 61 72 79 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 30 7d 23 6d 73 62 5f 64 73 62 5f 72 6f 6f 74 20 2e 6d 73 62 64 73 62 5f 65 72 72 6f 72 62 6f 75 6e 64 61 72 79 5f 6d 73 69 74 5f 62 6c 6f 63 6b 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 23 6d 73 62 5f 64 73 62 5f Data Ascii: 00004000y[dir] #msb_dsb_root .msbdsb-mp-header{margin-bottom:10px}body[dir] #msb_dsb_root .msbdsb_mainpage_fallback_boundary{padding-top:0}#msb_dsb_root .msbdsb_errorboundary_msit_block{display:flex;flex-direction:column;justify-content:center}#msb_dsb_
2024-01-17 17:07:08 UTC	12	IN	Data Raw: 64 69 72 3d 27 6c 74 72 27 5d 0d 0a Data Ascii: dir='ltr']
2024-01-17 17:07:08 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 20 23 6d 73 62 5f 64 73 62 5f 72 6f 6f 74 20 2e 6d 73 62 64 73 62 2d 6d 70 2d 63 6f 6e 74 65 6e 74 20 2e 6d 73 62 5f 64 73 62 5f 73 63 6f 70 65 5f 65 6e 74 72 79 5f 62 75 74 74 6f 6e 5f 70 65 6f 70 6c 65 20 2e 6d 73 62 5f 64 73 62 5f 73 63 6f 70 65 5f 65 6e 74 72 79 5f 62 75 74 74 6f 6e 5f 74 65 78 74 7b 6c 65 66 74 3a 35 30 70 78 7d 62 6f 64 79 5b 64 69 72 3d 27 72 74 6c 27 5d 20 23 6d 73 62 5f 64 73 62 5f 72 6f 6f 74 20 2e 6d 73 62 64 73 62 2d 6d 70 2d 63 6f 6e 74 65 6e 74 20 2e 6d 73 62 5f 64 73 62 5f 73 63 6f 70 65 5f 65 6e 74 72 79 5f 62 75 74 74 6f 6e 5f 70 65 6f 70 6c 65 20 2e 6d 73 62 5f 64 73 62 5f 73 63 6f 70 65 5f 65 6e 74 72 79 5f 62 75 74 74 6f 6e 5f 74 65 78 74 7b 72 69 67 68 74 3a 35 30 70 78 7d 62 6f 64 79 5b Data Ascii: 00006000 #msb_dsb_root .msbdsb-mp-content .msb_dsb_scope_entry_button_people .msb_dsb_scope_entry_button_text{left:50px}body[dir='rtl'] #msb_dsb_root .msbdsb-mp-content .msb_dsb_scope_entry_button_people .msb_dsb_scope_entry_button_text{right:50px}body[
2024-01-17 17:07:08 UTC	8204	IN	Data Raw: 63 61 72 64 5f 69 74 65 6d 20 2e 6f 72 61 6e 67 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 65 34 64 32 7d 2e 64 61 72 6b 54 68 65 6d 65 20 23 6d 73 62 5f 64 73 62 5f 72 6f 6f 74 20 2e 6d 73 62 64 73 62 2d 6d 70 2d 63 6f 6e 74 65 6e 74 20 2e 6d 73 62 64 73 62 2d 6d 70 2d 65 64 75 2d 63 61 72 64 20 2e 6d 73 62 5f 64 73 62 5f 65 64 75 5f 63 61 72 64 20 2e 6d 73 62 5f 64 73 62 5f 65 64 75 5f 63 61 72 64 5f 69 74 65 6d 20 2e 6f 72 61 6e 67 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 30 36 39 38 29 7d 23 6d 73 62 5f 64 73 62 5f 72 6f 6f 74 20 2e 6d 73 62 64 73 62 2d 6d 70 2d 63 6f 6e 74 65 6e 74 20 2e 6d 73 62 64 73 62 2d 6d 70 2d 65 64 75 2d 63 61 72 64 20 2e 6d 73 62 5f Data Ascii: card_item .orange{background-color:#ffe4d2}.darkTheme #msb_dsb_root .msbdsb-mp-content .msbdsb-mp-edu-card .msb_dsb_edu_card .msb_dsb_edu_card_item .orange{background-color:rgba(255,255,255,.0698)}#msb_dsb_root .msbdsb-mp-content .msbdsb-mp-edu-card .msb_

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.16	49803	4.150.240.254	443

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:08 UTC	483	OUT	GET /apc/trans.gif?e41ff04bbaf934739ffcb512be3a76ae HTTP/1.1 Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 Accept-Language: en-CH Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: arm-ring.msedge.net Connection: Keep-Alive
2024-01-17 17:07:08 UTC	709	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Length: 43 Content-Type: image/gif Last-Modified: Tue, 19 Dec 2023 16:10:38 GMT Accept-Ranges: bytes ETag: 0x0DA2C2C0C44B11E89E6C66FF4F731D7D Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-EndPoint, X-FrontEnd, X-UserHostAddress, X-MSEdge-Ref, X-MachineName Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-Endpoint: MNZ22r5b X-Frontend: AFD X-Machinename: MNZ221060609027 X-Userhostaddress: 154.16.192.0 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 1D69AA7C2E3543399A3AC5EF2BCC7BC0 Ref B: MNZ221060609027 Ref C: 2024-01-17T17:07:08Z Date: Wed, 17 Jan 2024 17:07:07 GMT Connection: close
2024-01-17 17:07:08 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.16	49807	4.150.240.254	443

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:09 UTC	483	OUT	GET /apc/trans.gif?08484a812b6fe23ef87caf8ad18324c2 HTTP/1.1 Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 Accept-Language: en-CH Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: arm-ring.msedge.net Connection: Keep-Alive
2024-01-17 17:07:09 UTC	709	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Length: 43 Content-Type: image/gif Last-Modified: Tue, 19 Dec 2023 16:10:38 GMT Accept-Ranges: bytes ETag: 0x0DA2C2C0C44B11E89E6C66FF4F731D7D Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-EndPoint, X-FrontEnd, X-UserHostAddress, X-MSEdge-Ref, X-MachineName Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-Endpoint: MNZ22r5b X-Frontend: AFD X-Machinename: MNZ221060610045 X-Userhostaddress: 154.16.192.0 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 69FE1BB0A43743F3B41D75AEDBA23A91 Ref B: MNZ221060610045 Ref C: 2024-01-17T17:07:09Z Date: Wed, 17 Jan 2024 17:07:08 GMT Connection: close
2024-01-17 17:07:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.16	49822	173.222.162.7	443

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:09 UTC	825	OUT	GET /rp/1N_0t7ZmnqiHZmEIq4uIlIUT1DI.js HTTP/1.1 Accept: / Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: r.bing.com Connection: Keep-Alive Cookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=1F9344FA7B5C6D050D8557587A606C51&CPID=1696585056799&AC=1&CPH=074c06b2&CBV=39996767; _EDGE_S=SID=1F9344FA7B5C6D050D8557587A606C51&mkt=de-ch; SRCHUID=V=2&GUID=1365D4FE3DA84D19A46408EFC15FC823&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231006; SRCHHPGUSR=SRCHLANG=de&HV=1705511222&IPMH=5e4190f4&IPMID=1696585056345&LUT=1696585056224; CortanaAppUID=646BA1FF24F806DFED4199E1E0EFF63E
2024-01-17 17:07:09 UTC	903	IN	HTTP/1.1 200 OK Content-Length: 343555 Content-Type: text/javascript; charset=utf-8 Content-MD5: WnJMv/ZumA0i1lDJtlhgOA== Last-Modified: Wed, 17 Jan 2024 06:12:32 GMT ETag: 0x8DC17234B050B52 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 80702d02-901e-005d-0e3c-4910a2000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Allow-Origin: * Cache-Control: public, no-transform, max-age=413708 Expires: Mon, 22 Jan 2024 12:02:17 GMT Date: Wed, 17 Jan 2024 17:07:09 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 Akamai-GRN: 0.07a6dc17.1705511229.8b9489b Timing-Allow-Origin: * report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingaotak"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
2024-01-17 17:07:09 UTC	1047	IN	Data Raw: 76 61 72 20 57 53 42 3b 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 63 6c 61 73 73 20 74 7b 73 74 61 74 69 63 20 69 6e 69 74 28 29 7b 74 2e 61 61 64 56 65 72 69 66 69 63 61 74 69 6f 6e 43 6f 6e 74 61 69 6e 65 72 3d 5f 67 65 28 22 61 61 64 56 65 72 69 66 69 63 61 74 69 6f 6e 43 6f 6e 74 61 69 6e 65 72 22 29 3b 74 2e 64 69 61 6c 6f 67 42 6f 78 3d 5f 67 65 28 22 64 69 61 6c 6f 67 42 6f 78 22 29 3b 74 2e 64 79 6e 61 6d 69 63 50 61 6e 65 3d 5f 67 65 28 22 64 79 6e 61 6d 69 63 2d 70 61 6e 65 22 29 3b 74 2e 6d 73 62 44 73 62 52 6f 6f 74 3d 5f 67 65 28 22 6d 73 62 5f 64 73 62 5f 72 6f 6f 74 22 29 3b 74 2e 64 79 6e 61 6d 69 63 50 61 6e 65 46 75 6c 6c 57 69 64 74 68 3d 5f 67 65 28 22 64 79 6e 61 6d 69 63 2d 70 61 6e 65 2d 66 75 6c 6c 22 29 3b 74 2e 66 6c 79 6f 75 74 43 Data Ascii: var WSB;(function(n){class t{static init(){t.aadVerificationContainer=_ge("aadVerificationContainer");t.dialogBox=_ge("dialogBox");t.dynamicPane=_ge("dynamic-pane");t.msbDsbRoot=_ge("msb_dsb_root");t.dynamicPaneFullWidth=_ge("dynamic-pane-full");t.flyoutC
2024-01-17 17:07:09 UTC	16384	IN	Data Raw: 3b 74 2e 6d 65 73 73 61 67 65 42 61 6e 6e 65 72 42 6f 74 74 6f 6d 3d 5f 67 65 28 22 6d 65 73 73 61 67 65 42 61 6e 6e 65 72 42 6f 74 74 6f 6d 22 29 3b 74 2e 6d 65 73 73 61 67 65 42 61 6e 6e 65 72 54 6f 70 3d 5f 67 65 28 22 6d 65 73 73 61 67 65 42 61 6e 6e 65 72 22 29 3b 74 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 42 61 6e 6e 65 72 3d 5f 67 65 28 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 42 61 6e 6e 65 72 22 29 3b 74 2e 63 68 61 74 49 66 72 61 6d 65 3d 5f 67 65 28 22 71 66 2d 63 68 61 74 22 29 7d 7d 6e 2e 53 74 61 74 69 63 48 74 6d 6c 45 6c 65 6d 65 6e 74 73 3d 74 7d 29 28 57 53 42 7c 7c 28 57 53 42 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 69 66 28 21 6e 2e 69 73 4d 69 6e 69 53 65 72 70 45 6e 61 62 6c 65 64 28 Data Ascii: ;t.messageBannerBottom=_ge("messageBannerBottom");t.messageBannerTop=_ge("messageBanner");t.notificationBanner=_ge("notificationBanner");t.chatIframe=_ge("qf-chat")}}n.StaticHtmlElements=t})(WSB\|\|(WSB={})),function(n){function u(){if(!n.isMiniSerpEnabled(
2024-01-17 17:07:10 UTC	8192	IN	Data Raw: 5f 53 54 41 52 54 29 2c 74 68 69 73 2e 5f 6b 65 79 73 74 72 6f 6b 65 73 4b 56 61 6c 75 65 73 5b 72 5d 3d 2b 2b 74 2c 74 7d 7d 74 2e 41 70 70 4e 53 3d 69 2e 44 45 46 41 55 4c 54 5f 41 50 50 5f 4e 41 4d 45 53 50 41 43 45 3b 74 2e 53 75 66 66 69 78 3d 69 2e 4b 56 41 4c 55 45 5f 53 55 46 46 49 58 5f 53 54 41 52 54 3b 74 2e 5f 6b 65 79 73 74 72 6f 6b 65 73 4b 56 61 6c 75 65 73 3d 7b 7d 3b 6e 2e 49 6e 73 74 72 75 6d 65 6e 74 65 64 49 74 65 6d 3d 74 7d 28 57 53 42 7c 7c 28 57 53 42 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 64 74 28 29 7b 72 65 74 75 72 6e 20 6d 61 74 63 68 4d 65 64 69 61 28 22 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 29 22 29 2e 6d 61 74 63 68 65 73 7d 66 75 6e Data Ascii: _START),this._keystrokesKValues[r]=++t,t}}t.AppNS=i.DEFAULT_APP_NAMESPACE;t.Suffix=i.KVALUE_SUFFIX_START;t._keystrokesKValues={};n.InstrumentedItem=t}(WSB\|\|(WSB={})),function(n){function dt(){return matchMedia("screen and (-ms-high-contrast)").matches}fun
2024-01-17 17:07:10 UTC	16384	IN	Data Raw: 61 74 65 3d 2d 31 31 36 34 34 34 37 33 36 65 35 3b 6e 2e 69 73 56 61 6c 69 64 44 61 74 65 3d 61 74 3b 6e 2e 67 65 74 54 69 6d 65 44 69 66 66 49 6e 44 61 79 73 3d 76 74 3b 6e 2e 6f 6c 64 65 72 54 68 61 6e 32 57 65 65 6b 73 3d 74 75 3b 6e 2e 76 65 72 74 69 63 61 6c 54 6f 48 61 6e 64 6f 66 66 54 79 70 65 3d 69 75 3b 63 6c 61 73 73 20 79 74 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 5f 63 61 6e 63 65 6c 6c 61 74 69 6f 6e 73 3d 7b 7d 3b 74 68 69 73 2e 5f 6c 61 73 74 49 64 3d 30 7d 72 65 67 69 73 74 65 72 28 6e 2c 74 2c 69 29 7b 6c 65 74 20 72 3d 2b 2b 74 68 69 73 2e 5f 6c 61 73 74 49 64 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 63 61 6e 63 65 6c 6c 61 74 69 6f 6e 73 5b 72 5d 3d 7b 61 63 74 69 6f 6e 3a 6e 2c 73 6b 69 70 4f 6e 44 69 73 6d 69 73 Data Ascii: ate=-116444736e5;n.isValidDate=at;n.getTimeDiffInDays=vt;n.olderThan2Weeks=tu;n.verticalToHandoffType=iu;class yt{constructor(){this._cancellations={};this._lastId=0}register(n,t,i){let r=++this._lastId;return this._cancellations[r]={action:n,skipOnDismis
2024-01-17 17:07:10 UTC	8192	IN	Data Raw: 65 2c 74 2e 54 6f 70 41 70 70 73 2c 74 2e 4d 52 55 48 69 73 74 6f 72 79 2c 74 2e 41 6e 61 68 65 69 6d 44 61 74 61 4c 69 73 74 2c 74 2e 51 75 69 63 6b 57 6f 72 6b 53 65 61 72 63 68 54 6f 70 4c 69 73 74 2c 74 2e 4d 73 62 51 75 69 63 6b 57 6f 72 6b 51 75 65 72 69 65 73 54 6f 70 4c 69 73 74 2c 74 2e 51 75 69 63 6b 57 6f 72 6b 53 65 61 72 63 68 2c 74 2e 52 65 63 6f 6d 6d 65 6e 64 65 64 44 6f 63 73 2c 74 2e 4d 73 62 4f 6e 52 61 6d 70 42 75 74 74 6f 6e 2c 74 2e 54 72 65 6e 64 69 6e 67 53 65 61 72 63 68 44 61 74 61 2c 74 2e 51 75 69 63 6b 53 65 61 72 63 68 2c 74 2e 56 69 73 75 61 6c 53 65 61 72 63 68 2c 5d 3a 28 29 3d 3e 5b 74 2e 41 6e 61 68 65 69 6d 44 61 74 61 54 69 6c 65 2c 74 2e 54 6f 70 41 70 70 73 2c 74 2e 4d 52 55 48 69 73 74 6f 72 79 2c 74 2e 41 6e 61 68 Data Ascii: e,t.TopApps,t.MRUHistory,t.AnaheimDataList,t.QuickWorkSearchTopList,t.MsbQuickWorkQueriesTopList,t.QuickWorkSearch,t.RecommendedDocs,t.MsbOnRampButton,t.TrendingSearchData,t.QuickSearch,t.VisualSearch,]:()=>[t.AnaheimDataTile,t.TopApps,t.MRUHistory,t.Anah
2024-01-17 17:07:10 UTC	16384	IN	Data Raw: 64 69 74 69 6f 6e 61 6c 52 65 71 75 69 72 65 6d 65 6e 74 73 3a 28 29 3d 3e 6e 2e 63 6f 6e 66 69 67 2e 65 6e 61 62 6c 65 5a 65 72 6f 49 6e 70 75 74 53 65 61 72 63 68 48 6f 6d 65 44 6f 63 75 6d 65 6e 74 73 7d 2c 6f 28 22 53 53 55 45 22 2c 74 2e 52 65 63 6f 6d 6d 65 6e 64 65 64 44 6f 63 73 2c 31 2c 21 30 2c 28 29 3d 3e 75 69 28 29 29 2c 6f 28 22 53 52 45 45 22 2c 74 2e 52 65 63 6f 6d 6d 65 6e 64 65 64 44 6f 63 73 2c 31 2c 21 30 2c 28 29 3d 3e 21 31 29 2c 5d 2c 73 68 6f 77 55 70 73 65 6c 6c 4f 6e 53 75 67 67 65 73 74 69 6f 6e 73 4c 69 73 74 3a 28 29 3d 3e 63 28 29 2c 67 65 74 45 6d 70 74 79 5a 49 4d 65 73 73 61 67 65 73 3a 28 29 3d 3e 65 28 69 2e 44 6f 63 75 6d 65 6e 74 73 2c 21 31 29 7d 3b 6e 2e 53 63 6f 70 65 43 6f 6e 66 69 67 5b 69 2e 46 6f 6c 64 65 72 73 Data Ascii: ditionalRequirements:()=>n.config.enableZeroInputSearchHomeDocuments},o("SSUE",t.RecommendedDocs,1,!0,()=>ui()),o("SREE",t.RecommendedDocs,1,!0,()=>!1),],showUpsellOnSuggestionsList:()=>c(),getEmptyZIMessages:()=>e(i.Documents,!1)};n.ScopeConfig[i.Folders
2024-01-17 17:07:10 UTC	8192	IN	Data Raw: 65 61 72 63 68 53 75 67 67 65 73 74 69 6f 6e 73 22 3b 6e 5b 6e 2e 50 61 74 68 43 6f 6d 70 6c 65 74 69 6f 6e 3d 31 32 5d 3d 22 50 61 74 68 43 6f 6d 70 6c 65 74 69 6f 6e 22 3b 6e 5b 6e 2e 5f 50 6f 77 65 72 42 69 3d 31 33 5d 3d 22 5f 50 6f 77 65 72 42 69 22 3b 6e 5b 6e 2e 4a 75 6d 70 4c 69 73 74 54 61 73 6b 73 3d 31 34 5d 3d 22 4a 75 6d 70 4c 69 73 74 54 61 73 6b 73 22 3b 6e 5b 6e 2e 4a 75 6d 70 4c 69 73 74 50 69 6e 6e 65 64 3d 31 35 5d 3d 22 4a 75 6d 70 4c 69 73 74 50 69 6e 6e 65 64 22 3b 6e 5b 6e 2e 4a 75 6d 70 4c 69 73 74 52 65 63 65 6e 74 3d 31 36 5d 3d 22 4a 75 6d 70 4c 69 73 74 52 65 63 65 6e 74 22 3b 6e 5b 6e 2e 4a 75 6d 70 4c 69 73 74 46 72 65 71 75 65 6e 74 3d 31 37 5d 3d 22 4a 75 6d 70 4c 69 73 74 46 72 65 71 75 65 6e 74 22 3b 6e 5b 6e 2e 4a 75 6d Data Ascii: earchSuggestions";n[n.PathCompletion=12]="PathCompletion";n[n._PowerBi=13]="_PowerBi";n[n.JumpListTasks=14]="JumpListTasks";n[n.JumpListPinned=15]="JumpListPinned";n[n.JumpListRecent=16]="JumpListRecent";n[n.JumpListFrequent=17]="JumpListFrequent";n[n.Jum
2024-01-17 17:07:10 UTC	16384	IN	Data Raw: 77 65 72 43 61 73 65 28 29 29 29 72 65 74 75 72 6e 20 74 2e 4e 6f 4d 65 74 61 64 61 74 61 7d 72 65 74 75 72 6e 20 67 74 28 72 2c 75 29 7c 7c 67 74 28 75 2c 72 29 3f 74 2e 4e 6f 4d 65 74 61 64 61 74 61 3a 72 2e 74 79 70 65 3d 3d 3d 22 50 50 4c 22 26 26 75 2e 74 79 70 65 3d 3d 3d 22 50 50 4c 22 26 26 72 2e 75 6e 69 71 75 65 4e 61 6d 65 26 26 75 2e 75 6e 69 71 75 65 4e 61 6d 65 26 26 72 2e 75 6e 69 71 75 65 4e 61 6d 65 2e 74 6f 4c 6f 63 61 6c 65 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 75 2e 75 6e 69 71 75 65 4e 61 6d 65 2e 74 6f 4c 6f 63 61 6c 65 4c 6f 77 65 72 43 61 73 65 28 29 3f 74 2e 4e 6f 4d 65 74 61 64 61 74 61 3a 72 2e 74 79 70 65 3d 3d 3d 22 4f 4c 45 22 26 26 75 2e 74 79 70 65 3d 3d 3d 22 4f 4c 45 22 26 26 72 2e 69 6e 74 65 72 6e 65 74 4d 65 73 73 Data Ascii: werCase()))return t.NoMetadata}return gt(r,u)\|\|gt(u,r)?t.NoMetadata:r.type==="PPL"&&u.type==="PPL"&&r.uniqueName&&u.uniqueName&&r.uniqueName.toLocaleLowerCase()===u.uniqueName.toLocaleLowerCase()?t.NoMetadata:r.type==="OLE"&&u.type==="OLE"&&r.internetMess
2024-01-17 17:07:10 UTC	8192	IN	Data Raw: 2e 72 65 76 49 70 52 65 67 69 6f 6e 43 61 63 68 65 3d 3d 69 7c 7c 6e 2e 72 65 67 69 6f 6e 43 61 63 68 65 3d 3d 69 7c 7c 21 6e 2e 69 73 42 69 6e 67 45 6e 61 62 6c 65 64 28 29 29 72 65 74 75 72 6e 21 31 3b 6c 65 74 20 74 3d 6e 2e 48 6f 73 74 2e 67 65 74 51 75 65 72 79 28 29 3b 72 65 74 75 72 6e 20 70 69 28 74 29 3f 21 31 3a 61 28 74 29 7c 7c 66 28 74 29 3f 21 31 3a 6e 2e 48 6f 73 74 2e 69 73 42 69 74 6d 61 70 49 6e 43 6c 69 70 62 6f 61 72 64 53 75 70 70 6f 72 74 65 64 28 29 7d 66 75 6e 63 74 69 6f 6e 20 65 6f 28 74 29 7b 72 65 74 75 72 6e 20 67 69 28 74 29 26 26 28 21 72 28 21 30 29 7c 7c 6e 2e 63 6f 6e 66 69 67 2e 65 6e 61 62 6c 65 51 75 69 63 6b 53 65 61 72 63 68 26 26 72 28 21 30 29 29 26 26 21 74 72 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 67 69 28 74 29 Data Ascii: .revIpRegionCache==i\|\|n.regionCache==i\|\|!n.isBingEnabled())return!1;let t=n.Host.getQuery();return pi(t)?!1:a(t)\|\|f(t)?!1:n.Host.isBitmapInClipboardSupported()}function eo(t){return gi(t)&&(!r(!0)\|\|n.config.enableQuickSearch&&r(!0))&&!tr(t)}function gi(t)
2024-01-17 17:07:10 UTC	16384	IN	Data Raw: 65 61 72 63 68 41 70 70 57 72 61 70 70 65 72 2e 43 6f 72 74 61 6e 61 41 70 70 2e 65 6e 74 72 79 50 6f 69 6e 74 3d 3d 22 57 4e 53 42 4f 58 22 26 26 21 75 28 29 7c 7c 70 72 28 29 26 26 53 65 61 72 63 68 41 70 70 57 72 61 70 70 65 72 2e 43 6f 72 74 61 6e 61 41 70 70 2e 65 6e 74 72 79 50 6f 69 6e 74 3d 3d 22 57 4e 53 42 4f 58 22 26 26 21 75 28 29 7c 7c 53 65 61 72 63 68 41 70 70 57 72 61 70 70 65 72 2e 43 6f 72 74 61 6e 61 41 70 70 2e 65 6e 74 72 79 50 6f 69 6e 74 3d 3d 22 57 42 51 52 50 4c 22 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 29 7b 72 65 74 75 72 6e 20 74 3f 74 2e 69 73 53 65 61 72 63 68 48 6f 6d 65 5a 49 26 26 74 2e 73 63 6f 70 65 3d 3d 6e 2e 53 63 6f 70 65 2e 41 6c 6c 3a 6e 2e 52 75 6e 74 69 6d 65 43 6f 6e 66 69 67 2e 53 65 61 72 63 68 48 6f 6d 65 41 Data Ascii: earchAppWrapper.CortanaApp.entryPoint=="WNSBOX"&&!u()\|\|pr()&&SearchAppWrapper.CortanaApp.entryPoint=="WNSBOX"&&!u()\|\|SearchAppWrapper.CortanaApp.entryPoint=="WBQRPL"}function s(t){return t?t.isSearchHomeZI&&t.scope==n.Scope.All:n.RuntimeConfig.SearchHomeA

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.16	49823	204.79.197.222	443

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:09 UTC	517	OUT	GET /apc/trans.gif?8f86e0ff46dee7ba47f008a3984db753 HTTP/1.1 Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 Accept-Language: en-CH Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: 58e6a35818525043c79d25fe433d7024.clo.footprintdns.com Connection: Keep-Alive
2024-01-17 17:07:09 UTC	705	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Length: 43 Content-Type: image/gif Last-Modified: Tue, 19 Dec 2023 16:10:38 GMT Accept-Ranges: bytes ETag: 0x0DA2C2C0C44B11E89E6C66FF4F731D7D Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-EndPoint, X-FrontEnd, X-UserHostAddress, X-MSEdge-Ref, X-MachineName Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-Endpoint: TEB31r4a X-Frontend: AFD X-Machinename: TEB31EDGE0214 X-Userhostaddress: 154.16.192.0 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: F66F82E3857248EEBCB351FF126A31A0 Ref B: TEB31EDGE0214 Ref C: 2024-01-17T17:07:09Z Date: Wed, 17 Jan 2024 17:07:09 GMT Connection: close
2024-01-17 17:07:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.16	49821	20.190.152.20	443

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:10 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 3592 Host: login.live.com
2024-01-17 17:07:10 UTC	3592	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-01-17 17:07:10 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 17 Jan 2024 17:06:10 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C107_BL2 x-ms-request-id: 0361f903-bbcf-4df7-b92e-b7ae6c5806cb PPServer: PPV: 30 H: BL02PF316955C13 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 17 Jan 2024 17:07:10 GMT Connection: close Content-Length: 11369
2024-01-17 17:07:10 UTC	11369	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.16	49831	20.190.152.20	443

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:11 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4751 Host: login.live.com
2024-01-17 17:07:11 UTC	4751	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-01-17 17:07:11 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 17 Jan 2024 17:06:11 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C107_BL2 x-ms-request-id: 1a30ef88-4599-45a9-b66b-f5cb9953281a PPServer: PPV: 30 H: BL02PF813246219 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 17 Jan 2024 17:07:10 GMT Connection: close Content-Length: 11389
2024-01-17 17:07:11 UTC	11389	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.16	49818	18.173.219.113	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:11 UTC	846	OUT	GET /b?rn=1705511230793&c1=2&c2=3000001&cs_ucfr=1&c7=https%3A%2F%2Fntp.msn.com%2Fedge%2Fntp%3Flocale%3Den-GB%26title%3DNew%2Btab%26dsp%3D1%26sp%3DBing%26isFREModalBackground%3D1%26startpage%3D1%26PC%3DU531%26ocid%3Dmsedgdhp%26mkt%3Den-us&c8=New+tab&c9= HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:11 UTC	732	IN	HTTP/1.1 302 Found Content-Length: 0 Connection: close Date: Wed, 17 Jan 2024 17:07:11 GMT Location: /b2?rn=1705511230793&c1=2&c2=3000001&cs_ucfr=1&c7=https%3A%2F%2Fntp.msn.com%2Fedge%2Fntp%3Flocale%3Den-GB%26title%3DNew%2Btab%26dsp%3D1%26sp%3DBing%26isFREModalBackground%3D1%26startpage%3D1%26PC%3DU531%26ocid%3Dmsedgdhp%26mkt%3Den-us&c8=New+tab&c9= set-cookie: UID=1FF6367ecc4656ad6cd0ca71705511231; SameSite=None; Secure; domain=.scorecardresearch.com; path=/; max-age=62208000 Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 5773f2f43b989a9f02f459e75620d5f4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P1 X-Amz-Cf-Id: iZM7qSC4MLMmDyCT0ca7jNNZ_TPOWgueW8DCxgDOExLgG0EjbFTMuw==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.16	49837	162.159.61.3	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:11 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2024-01-17 17:07:11 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 54 00 0c 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom)TP
2024-01-17 17:07:11 UTC	247	IN	HTTP/1.1 200 OK Server: cloudflare Date: Wed, 17 Jan 2024 17:07:11 GMT Content-Type: application/dns-message Connection: close Access-Control-Allow-Origin: * Content-Length: 468 CF-RAY: 8470316faebe0f9b-EWR alt-svc: h3=":443"; ma=86400
2024-01-17 17:07:11 UTC	468	IN	Data Raw: 00 00 81 80 00 01 00 01 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 c0 0c 00 01 00 01 00 00 01 2a 00 04 8e fb 28 a3 00 00 29 04 d0 00 00 00 00 01 98 00 0c 01 94 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom*()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.16	49838	162.159.61.3	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:11 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2024-01-17 17:07:11 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 54 00 0c 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom)TP
2024-01-17 17:07:11 UTC	247	IN	HTTP/1.1 200 OK Server: cloudflare Date: Wed, 17 Jan 2024 17:07:11 GMT Content-Type: application/dns-message Connection: close Access-Control-Allow-Origin: * Content-Length: 468 CF-RAY: 8470316fac3c1a07-EWR alt-svc: h3=":443"; ma=86400
2024-01-17 17:07:11 UTC	468	IN	Data Raw: 00 00 81 80 00 01 00 01 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 c0 0c 00 01 00 01 00 00 00 45 00 04 8e fb 29 03 00 00 29 04 d0 00 00 00 00 01 98 00 0c 01 94 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcomE))

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.16	49841	172.64.41.3	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:11 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2024-01-17 17:07:11 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 54 00 0c 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom)TP
2024-01-17 17:07:12 UTC	247	IN	HTTP/1.1 200 OK Server: cloudflare Date: Wed, 17 Jan 2024 17:07:12 GMT Content-Type: application/dns-message Connection: close Access-Control-Allow-Origin: * Content-Length: 468 CF-RAY: 8470317058d478db-EWR alt-svc: h3=":443"; ma=86400
2024-01-17 17:07:12 UTC	468	IN	Data Raw: 00 00 81 80 00 01 00 01 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 c0 0c 00 01 00 01 00 00 01 12 00 04 8e fa 50 43 00 00 29 04 d0 00 00 00 00 01 98 00 0c 01 94 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcomPC)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.16	49843	18.173.219.113	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:11 UTC	894	OUT	GET /b2?rn=1705511230793&c1=2&c2=3000001&cs_ucfr=1&c7=https%3A%2F%2Fntp.msn.com%2Fedge%2Fntp%3Flocale%3Den-GB%26title%3DNew%2Btab%26dsp%3D1%26sp%3DBing%26isFREModalBackground%3D1%26startpage%3D1%26PC%3DU531%26ocid%3Dmsedgdhp%26mkt%3Den-us&c8=New+tab&c9= HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: UID=1FF6367ecc4656ad6cd0ca71705511231
2024-01-17 17:07:12 UTC	326	IN	HTTP/1.1 204 No Content Connection: close Date: Wed, 17 Jan 2024 17:07:12 GMT Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 619f2eec0ea05d2ce0279df117eb9a0c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P1 X-Amz-Cf-Id: RF-YfJ5qB0eSfvv8pzj6xIt5pBKerOtUuwKnf7oU3gp1L2pB5kvVyQ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.16	49840	20.190.152.20	443

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:11 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4751 Host: login.live.com
2024-01-17 17:07:11 UTC	4751	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-01-17 17:07:12 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 17 Jan 2024 17:06:12 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C107_BL2 x-ms-request-id: 2c31eeff-18e9-4ee3-af10-0c42819c6db7 PPServer: PPV: 30 H: BL02PF70586CB5C V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 17 Jan 2024 17:07:11 GMT Connection: close Content-Length: 11369
2024-01-17 17:07:12 UTC	11369	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.16	49849	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:12 UTC	632	OUT	GET /bundles/v1/edgeChromium/latest/storyManager.9459c0c5f5a9a5d50691.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:12 UTC	1148	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: JHtXOCQc74FumxhM1B0m+Q== Last-Modified: Mon, 08 Jan 2024 16:46:12 GMT ETag: 0x8DC106952D5FA38 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 37165289-c01e-0003-6d52-4217b8000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:12 GMT Content-Length: 7350 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89859145,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=1, origin; dur=0 , cdntime; dur=1 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b2449 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511232.55b2449 Vary: Origin
2024-01-17 17:07:12 UTC	7350	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 74 6f 72 79 4d 61 6e 61 67 65 72 22 5d 2c 7b 35 35 39 38 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 72 2e 72 28 74 29 2c 72 2e 64 28 74 2c 7b 53 74 6f 72 79 4d 61 6e 61 67 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 7d 7d 29 3b 76 61 72 20 69 3d 72 28 31 35 35 39 38 29 2c 61 3d 72 28 35 33 30 32 29 2c 73 3d 72 28 39 31 39 38 32 29 2c 6e 3d 72 28 36 31 37 36 30 29 3b 63 6f 6e 73 74 Data Ascii: "use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["storyManager"],{55982:function(e,t,r){r.r(t),r.d(t,{StoryManager:function(){return f}});var i=r(15598),a=r(5302),s=r(91982),n=r(61760);const

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.16	49847	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:12 UTC	880	OUT	GET /service/msn/user?apikey=1hYoJsIRvPEnSkk0hlnJF2092mHqiz7xFenIFKa9uc&activityId=EDA7CB09-C52C-41B1-9707-B0A727D882E0&ocid=pdp-peregrine&cm=en-us&it=app&user=m-2136D0069C246D353F30C40F9D676C20 HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: _C_ETH=1; USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1
2024-01-17 17:07:12 UTC	3187	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Access-Control-Allow-Headers: TicketType,RequestContinuationKey,AuthToken,Content-Type,x-client-activityid,ms-cv,OneSvc-Uni-Feat-Tun,signedInCookieName,muid,appid,User-Location,user-location,userauthtoken,usertickettype,sitename,s2sauthtoken,thumbprint,Authorization,Ent-Authorization,UserIdToken,DDD-TMPL,DDD-ActivityId,DDD-FeatureSet,DDD-Session-ID,Date,date,ads-referer,ads-referer,taboola-sessionId,taboola-sessionid,Akamai-Request-ID,Akamai-Server-IP,X-MSEdge-Ref,DDD-DebugId,s-xbox-token,OneWebServiceLatency,X-FD-Features,DDD-UserType,traceparent,Widgets,Muted Access-Control-Expose-Headers: TicketType,RequestContinuationKey,AuthToken,Content-Type,x-client-activityid,ms-cv,OneSvc-Uni-Feat-Tun,signedInCookieName,muid,appid,User-Location,user-location,userauthtoken,usertickettype,sitename,s2sauthtoken,thumbprint,Authorization,Ent-Authorization,UserIdToken,DDD-TMPL,DDD-ActivityId,DDD-FeatureSet,DDD-Session-ID,Date,date,ads-referer,ads-referer,taboola-sessionId,taboola-sessionid,Akamai-Request-ID,Akamai-Server-IP,X-MSEdge-Ref,DDD-DebugId,s-xbox-token,OneWebServiceLatency,X-FD-Features,DDD-UserType,traceparent,Widgets,Muted DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-ActivityId: 65a80940-5e08-4234-87a7-b8c5b589250b DDD-StrategyExecutionLatency: 00:00:00.0059832,00:00:00.0061583 DDD-DebugId: 65a80940-5e08-4234-87a7-b8c5b589250b\|2024-01-17T17:07:12.6788819Z\|fabric_msn\|EUS1\|News_120 OneWebServiceLatency: 7 X-MSEdge-ResponseInfo: 7 Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA X-Ceto-ref: 65a80940aae441b2aea145d102cec6fa\|2024-01-17T17:07:12.674Z X-MSEdge-Ref: Ref A: 72AB45BF78B2419CB36854E72A64C186 Ref B: EWR30EDGE1120 Ref C: 2024-01-17T17:07:12Z Expires: Wed, 17 Jan 2024 17:07:12 GMT Date: Wed, 17 Jan 2024 17:07:12 GMT Content-Length: 74 Connection: close Set-Cookie: _C_ETH=1; expires=Tue, 16 Jan 2024 17:07:12 GMT; domain=.msn.com; path=/; secure; httponly Set-Cookie: _C_Auth= Set-Cookie: MUIDB=2136D0069C246D353F30C40F9D676C20; expires=Mon, 10 Feb 2025 17:07:12 GMT; path=/; httponly Akamai-Request-BC: [a=23.218.242.10,b=89859130,c=g,n=US_NJ_EDISON,o=20940],[a=204.79.197.203,c=o] Server-Timing: clientrtt; dur=88, clienttt; dur=25, origin; dur=24 , cdntime; dur=1 Akamai-Cache-Status: NotCacheable from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b243a Access-Control-Allow-Methods: PUT,PATCH,POST,GET,OPTIONS,DELETE Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com X-AS-SuppressSetCookie: 1 Cache-Control: private, max-age=0 report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511232.55b243a Vary: Origin
2024-01-17 17:07:12 UTC	74	IN	Data Raw: 7b 20 22 40 6f 64 61 74 61 2e 63 6f 6e 74 65 78 74 22 3a 20 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 6d 73 6e 2e 63 6f 6d 2f 6d 73 6e 2f 24 6d 65 74 61 64 61 74 61 23 75 73 65 72 22 2c 20 22 76 61 6c 75 65 22 3a 20 5b 5d 7d Data Ascii: { "@odata.context": "https://api.msn.com/msn/$metadata#user", "value": []}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.16	49852	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:12 UTC	631	OUT	GET /bundles/v1/edgeChromium/latest/sticky-peek.842ac331368b174e475a.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:12 UTC	1149	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: grf92HioOUWHVoQXdCC7dw== Last-Modified: Mon, 08 Jan 2024 16:46:15 GMT ETag: 0x8DC1069545ABD71 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 75c33413-201e-0109-1d52-424671000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:12 GMT Content-Length: 10380 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89859140,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=2, origin; dur=0 , cdntime; dur=2 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b2444 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511232.55b2444 Vary: Origin
2024-01-17 17:07:12 UTC	10380	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 74 69 63 6b 79 2d 70 65 65 6b 22 5d 2c 7b 34 35 36 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 53 74 69 63 6b 79 50 65 65 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 43 7d 2c 53 74 69 63 6b 79 50 65 65 6b 53 74 79 6c 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 41 7d 2c 53 74 69 63 6b 79 50 65 65 6b 54 65 6d 70 6c 61 74 65 3a 66 Data Ascii: "use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["sticky-peek"],{4560:function(e,t,n){n.r(t),n.d(t,{StickyPeek:function(){return C},StickyPeekStyles:function(){return A},StickyPeekTemplate:f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.16	49848	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:12 UTC	636	OUT	GET /bundles/v1/edgeChromium/latest/common-feed-libs.f7c40fd5b5301a22c853.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:12 UTC	1186	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: qQPTq35+2pJloNO4C+z03A== Last-Modified: Tue, 16 Jan 2024 23:21:34 GMT ETag: 0x8DC16E9E139A9A9 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 4b64e21d-701e-0068-1ad2-48708d000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:12 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Akamai-Request-BC: [a=23.218.242.10,b=89859164,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=5, origin; dur=0 , cdntime; dur=5 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b245c Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511232.55b245c Vary: Origin
2024-01-17 17:07:12 UTC	15198	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 6f 6d 6d 6f 6e 2d 66 65 65 64 2d 6c 69 62 73 22 5d 2c 7b 32 35 37 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 69 2e 64 28 74 2c 7b 75 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 7d 7d 29 3b 63 6f 6e 73 74 20 6e 3d 7b 5f 39 30 78 39 30 3a 7b 77 69 64 74 68 3a 39 30 2c 68 65 69 67 68 74 3a 39 30 7d 2c 5f 32 36 38 78 39 34 3a 7b 77 69 64 74 68 3a 32 36 38 2c 68 Data Ascii: 00006000"use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["common-feed-libs"],{2573:function(e,t,i){i.d(t,{u:function(){return n}});const n={_90x90:{width:90,height:90},_268x94:{width:268,h
2024-01-17 17:07:12 UTC	9390	IN	Data Raw: 74 65 41 72 74 69 63 6c 65 3a 74 2e 44 75 70 6c 69 63 61 74 65 2c 4f 66 66 65 6e 73 69 76 65 43 6f 6e 74 65 6e 74 3a 74 2e 4f 66 66 65 6e 73 69 76 65 2c 56 65 72 74 69 63 61 6c 3a 6e 7d 3b 28 6e 75 6c 6c 3d 3d 3d 28 75 3d 63 2e 41 6c 2e 43 75 72 72 65 6e 74 46 6c 69 67 68 74 53 65 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 75 3f 76 6f 69 64 20 30 3a 75 2e 68 61 73 28 22 70 72 67 2d 72 70 74 32 22 29 29 26 26 28 53 2e 53 75 73 70 65 63 74 65 64 41 49 4f 72 42 6f 74 3d 74 2e 53 75 73 70 65 63 74 65 64 41 49 4f 72 42 6f 74 2c 53 2e 43 6f 70 79 72 69 67 68 74 41 6e 64 54 72 61 64 65 6d 61 72 6b 56 69 6f 6c 61 74 69 6f 6e 3d 74 2e 43 6f 70 79 72 69 67 68 74 41 6e 64 54 72 61 64 65 6d 61 72 6b 56 69 6f 6c 61 74 69 6f 6e 29 3b 63 6f 6e 73 74 20 4d 3d 4a 53 4f 4e 2e Data Ascii: teArticle:t.Duplicate,OffensiveContent:t.Offensive,Vertical:n};(null===(u=c.Al.CurrentFlightSet)\|\|void 0===u?void 0:u.has("prg-rpt2"))&&(S.SuspectedAIOrBot=t.SuspectedAIOrBot,S.CopyrightAndTrademarkViolation=t.CopyrightAndTrademarkViolation);const M=JSON.
2024-01-17 17:07:12 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 65 5a 6f 6e 65 4e 61 6d 65 3a 22 73 68 6f 72 74 22 7d 5d 2c 5b 6e 2e 48 6f 75 72 4d 69 6e 54 69 6d 65 7a 6f 6e 65 2c 7b 68 6f 75 72 3a 22 6e 75 6d 65 72 69 63 22 2c 6d 69 6e 75 74 65 3a 22 6e 75 6d 65 72 69 63 22 2c 74 69 6d 65 5a 6f 6e 65 4e 61 6d 65 3a 22 73 68 6f 72 74 22 7d 5d 2c 5b 6e 2e 48 6f 75 72 54 69 6d 65 7a 6f 6e 65 4c 6f 6e 67 2c 7b 68 6f 75 72 3a 22 6e 75 6d 65 72 69 63 22 2c 74 69 6d 65 5a 6f 6e 65 4e 61 6d 65 3a 22 6c 6f 6e 67 22 7d 5d 2c 5b 6e 2e 48 6f 75 72 4d 69 6e 54 69 6d 65 7a 6f 6e 65 4c 6f 6e 67 2c 7b 68 6f 75 72 3a 22 6e 75 6d 65 72 69 63 22 2c 6d 69 6e 75 74 65 3a 22 6e 75 6d 65 72 69 63 22 2c 74 69 6d 65 5a 6f 6e 65 4e 61 6d 65 3a 22 6c 6f 6e 67 22 7d 5d 2c 5b 6e 2e 57 65 65 6b 2c 7b 77 65 65 6b 64 Data Ascii: 00006000eZoneName:"short"}],[n.HourMinTimezone,{hour:"numeric",minute:"numeric",timeZoneName:"short"}],[n.HourTimezoneLong,{hour:"numeric",timeZoneName:"long"}],[n.HourMinTimezoneLong,{hour:"numeric",minute:"numeric",timeZoneName:"long"}],[n.Week,{weekd
2024-01-17 17:07:12 UTC	8204	IN	Data Raw: 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 6c 6f 74 3d 22 69 6d 61 67 65 22 20 73 72 63 3d 22 24 7b 65 3d 3e 65 2e 70 72 6f 76 69 64 65 72 44 61 74 61 26 26 65 2e 70 72 6f 76 69 64 65 72 44 61 74 61 2e 6c 6f 67 6f 49 6d 61 67 65 7d 22 20 61 6c 74 3d 22 24 7b 65 3d 3e 65 2e 70 72 6f 76 69 64 65 72 44 61 74 61 26 26 65 2e 70 72 6f 76 69 64 65 72 44 61 74 61 2e 6e 61 6d 65 7d 22 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 40 6c 6f 61 64 3d 24 7b 65 3d 3e 65 2e 69 6d 61 67 65 44 61 74 61 26 26 65 2e 69 6d 61 67 65 44 61 74 61 2e 76 69 73 75 61 6c 52 65 61 64 69 6e 65 73 73 43 61 6c 6c 62 61 63 6b 26 26 65 2e 69 6d 61 67 65 44 61 74 61 2e 76 69 73 75 61 6c 52 65 61 64 69 6e 65 73 73 43 61 6c 6c 62 61 63 6b 28 61 2e 75 2e 56 50 2c 61 2e 77 2e 70 72 6f 76 69 64 Data Ascii: <img slot="image" src="${e=>e.providerData&&e.providerData.logoImage}" alt="${e=>e.providerData&&e.providerData.name}" @load=${e=>e.imageData&&e.imageData.visualReadinessCallback&&e.imageData.visualReadinessCallback(a.u.VP,a.w.provid
2024-01-17 17:07:12 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 69 2e 64 28 74 2c 7b 45 55 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 78 7d 2c 6a 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 43 7d 2c 74 44 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 7d 7d 29 3b 76 61 72 20 6e 3d 69 28 39 36 32 30 34 29 2c 61 3d 69 28 34 39 32 31 38 29 2c 6f 3d 69 28 39 33 37 30 33 29 2c 72 3d 69 28 39 37 37 39 29 2c 73 3d 69 28 39 31 37 32 29 2c 64 3d 69 28 33 39 30 37 39 29 2c 6c 3d 69 28 38 33 35 37 32 29 2c 63 3d 69 2e 6e 28 6c 29 2c 75 3d 69 28 37 38 34 30 38 29 2c 70 3d 69 2e 6e 28 75 29 2c 67 3d 69 28 38 30 32 34 31 29 2c 68 3d 69 28 38 36 37 30 34 29 2c 6d 3d 69 28 33 37 30 38 29 2c 66 3d 69 28 38 30 37 Data Ascii: 00004000:function(e,t,i){i.d(t,{EU:function(){return x},jr:function(){return C},tD:function(){return w}});var n=i(96204),a=i(49218),o=i(93703),r=i(9779),s=i(9172),d=i(39079),l=i(83572),c=i.n(l),u=i(78408),p=i.n(u),g=i(80241),h=i(86704),m=i(3708),f=i(807
2024-01-17 17:07:12 UTC	12	IN	Data Raw: 35 20 31 31 2e 32 35 43 34 2e 0d 0a Data Ascii: 5 11.25C4.
2024-01-17 17:07:12 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 33 30 39 36 34 20 31 31 2e 32 35 20 33 2e 37 35 20 31 30 2e 36 39 30 34 20 33 2e 37 35 20 31 30 43 33 2e 37 35 20 39 2e 33 30 39 36 34 20 34 2e 33 30 39 36 34 20 38 2e 37 35 20 35 20 38 2e 37 35 43 35 2e 36 39 30 33 36 20 38 2e 37 35 20 36 2e 32 35 20 39 2e 33 30 39 36 34 20 36 2e 32 35 20 31 30 5a 4d 31 31 2e 32 35 20 31 30 43 31 31 2e 32 35 20 31 30 2e 36 39 30 34 20 31 30 2e 36 39 30 34 20 31 31 2e 32 35 20 31 30 20 31 31 2e 32 35 43 39 2e 33 30 39 36 34 20 31 31 2e 32 35 20 38 2e 37 35 20 31 30 2e 36 39 30 34 20 38 2e 37 35 20 31 30 43 38 2e 37 35 20 39 2e 33 30 39 36 34 20 39 2e 33 30 39 36 34 20 38 2e 37 35 20 31 30 20 38 2e 37 35 43 31 30 2e 36 39 30 34 20 38 2e 37 35 20 31 31 2e 32 35 20 39 2e 33 30 39 36 34 20 31 31 Data Ascii: 0000600030964 11.25 3.75 10.6904 3.75 10C3.75 9.30964 4.30964 8.75 5 8.75C5.69036 8.75 6.25 9.30964 6.25 10ZM11.25 10C11.25 10.6904 10.6904 11.25 10 11.25C9.30964 11.25 8.75 10.6904 8.75 10C8.75 9.30964 9.30964 8.75 10 8.75C10.6904 8.75 11.25 9.30964 11
2024-01-17 17:07:12 UTC	8204	IN	Data Raw: 32 20 36 2e 33 33 30 37 33 20 30 2e 39 39 34 37 39 32 20 36 2e 39 30 36 32 35 20 31 20 37 2e 35 43 31 20 38 2e 30 39 33 37 35 20 31 2e 30 37 38 31 32 20 38 2e 36 36 36 36 37 20 31 2e 32 33 34 33 38 20 39 2e 32 31 38 37 35 43 31 2e 33 39 30 36 32 20 39 2e 37 37 30 38 33 20 31 2e 36 30 39 33 38 20 31 30 2e 32 38 39 31 20 31 2e 38 39 30 36 32 20 31 30 2e 37 37 33 34 43 32 2e 31 37 31 38 38 20 31 31 2e 32 35 37 38 20 32 2e 35 31 30 34 32 20 31 31 2e 36 39 37 39 20 32 2e 39 30 36 32 35 20 31 32 2e 30 39 33 38 43 33 2e 33 30 32 30 38 20 31 32 2e 34 38 39 36 20 33 2e 37 33 39 35 38 20 31 32 2e 38 32 38 31 20 34 2e 32 31 38 37 35 20 31 33 2e 31 30 39 34 43 34 2e 36 39 37 39 32 20 31 33 2e 33 39 30 36 20 35 2e 32 31 36 31 35 20 31 33 2e 36 30 39 34 20 35 2e 37 37 Data Ascii: 2 6.33073 0.994792 6.90625 1 7.5C1 8.09375 1.07812 8.66667 1.23438 9.21875C1.39062 9.77083 1.60938 10.2891 1.89062 10.7734C2.17188 11.2578 2.51042 11.6979 2.90625 12.0938C3.30208 12.4896 3.73958 12.8281 4.21875 13.1094C4.69792 13.3906 5.21615 13.6094 5.77
2024-01-17 17:07:13 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 54 65 78 74 7d 3c 2f 61 3e 3c 2f 64 69 76 3e 60 29 7d 3c 64 69 76 20 63 6c 61 73 73 3d 22 24 7b 65 3d 3e 28 30 2c 73 2e 24 48 29 28 65 2e 65 6e 61 62 6c 65 53 61 66 65 41 64 73 26 26 28 6e 75 6c 6c 3d 3d 3d 72 2e 5a 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 2e 5a 3f 76 6f 69 64 20 30 3a 72 2e 5a 2e 67 65 74 41 64 62 53 74 61 74 75 73 28 29 29 2c 22 61 64 2d 70 72 6f 76 69 64 65 72 22 29 7d 22 3e 3c 61 20 63 6c 61 73 73 3d 22 24 7b 65 3d 3e 28 30 2c 73 2e 24 48 29 28 65 2e 65 6e 61 62 6c 65 53 61 66 65 41 64 73 26 26 28 6e 75 6c 6c 3d 3d 3d 72 2e 5a 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 2e 5a 3f 76 6f 69 64 20 30 3a 72 2e 5a 2e 67 65 74 41 64 62 53 74 61 74 75 73 28 29 29 2c 22 61 64 2d 70 72 6f 76 69 64 65 72 2d 74 65 78 74 22 29 7d Data Ascii: 00006000Text}</a></div>`)}<div class="${e=>(0,s.$H)(e.enableSafeAds&&(null===r.Z\|\|void 0===r.Z?void 0:r.Z.getAdbStatus()),"ad-provider")}"><a class="${e=>(0,s.$H)(e.enableSafeAds&&(null===r.Z\|\|void 0===r.Z?void 0:r.Z.getAdbStatus()),"ad-provider-text")}
2024-01-17 17:07:13 UTC	8204	IN	Data Raw: 75 6e 69 63 6f 64 65 2d 62 69 64 69 3a 20 65 6d 62 65 64 3b 22 3e 24 7b 65 3d 3e 65 2e 70 72 6f 76 69 64 65 72 44 61 74 61 2e 6e 61 6d 65 7d 3c 2f 73 70 61 6e 3e 60 29 7d 20 60 29 7d 20 24 7b 28 30 2c 72 2e 67 29 28 28 65 3d 3e 65 2e 69 73 57 65 62 43 6f 6e 74 65 6e 74 26 26 21 65 2e 6d 65 74 61 64 61 74 61 2e 76 69 64 65 6f 4d 65 74 61 64 61 74 61 29 2c 6f 2e 64 79 60 24 7b 63 28 29 7d 60 29 7d 20 24 7b 28 30 2c 72 2e 67 29 28 28 28 65 2c 74 29 3d 3e 70 28 65 2c 74 2e 70 61 72 65 6e 74 29 29 2c 6f 2e 64 79 60 20 c2 b7 20 60 29 7d 20 24 7b 28 30 2c 72 2e 67 29 28 28 65 3d 3e 65 2e 70 75 62 6c 69 73 68 65 64 44 61 74 65 54 69 6d 65 29 2c 6f 2e 64 79 60 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 75 6e 69 63 6f 64 65 2d 62 69 64 69 3a 20 65 6d 62 65 64 3b 22 3e Data Ascii: unicode-bidi: embed;">${e=>e.providerData.name}</span>`)} `)} ${(0,r.g)((e=>e.isWebContent&&!e.metadata.videoMetadata),o.dy`${c()}`)} ${(0,r.g)(((e,t)=>p(e,t.parent)),o.dy` `)} ${(0,r.g)((e=>e.publishedDateTime),o.dy`<span style="unicode-bidi: embed;">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.16	49856	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:12 UTC	633	OUT	GET /bundles/v1/edgeChromium/latest/common-cscore.e732cc9b00c74f2421e6.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:12 UTC	1186	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: XnzmVIC5KBuc98eY9XyApg== Last-Modified: Mon, 08 Jan 2024 16:46:13 GMT ETag: 0x8DC1069537AF668 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 6f77a721-301e-006c-3952-42dc85000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:12 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Akamai-Request-BC: [a=23.218.242.10,b=89859168,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=87, clienttt; dur=0, origin; dur=0 , cdntime; dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b2460 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511232.55b2460 Vary: Origin
2024-01-17 17:07:12 UTC	15198	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 6f 6d 6d 6f 6e 2d 63 73 63 6f 72 65 22 5d 2c 7b 32 30 30 32 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 69 2e 64 28 74 2c 7b 44 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 7d 7d 29 3b 76 61 72 20 6f 3d 69 28 34 36 35 33 31 29 2c 6e 3d 69 28 36 33 30 37 30 29 2c 73 3d 69 28 37 38 39 32 33 29 2c 72 3d 69 28 32 37 31 38 36 29 2c 61 3d 69 28 36 37 37 33 39 29 2c Data Ascii: 00006000"use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["common-cscore"],{20022:function(e,t,i){i.d(t,{D:function(){return I}});var o=i(46531),n=i(63070),s=i(78923),r=i(27186),a=i(67739),
2024-01-17 17:07:12 UTC	9390	IN	Data Raw: 6b 65 64 3d 22 74 72 75 65 22 5d 29 20 2e 69 6e 64 65 74 65 72 6d 69 6e 61 74 65 2d 69 6e 64 69 63 61 74 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 24 7b 62 2e 48 2e 48 69 67 68 6c 69 67 68 74 54 65 78 74 7d 7d 3a 68 6f 73 74 28 5b 61 72 69 61 2d 63 68 65 63 6b 65 64 3d 22 74 72 75 65 22 5d 29 20 2e 63 6f 6e 74 72 6f 6c 3a 68 6f 76 65 72 20 2e 69 6e 64 65 74 65 72 6d 69 6e 61 74 65 2d 69 6e 64 69 63 61 74 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 24 7b 62 2e 48 2e 48 69 67 68 6c 69 67 68 74 7d 7d 3a 68 6f 73 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 7b 6f 70 61 63 69 74 79 3a 31 7d 3a 68 6f 73 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 20 2e 63 6f 6e 74 72 6f 6c 7b 66 6f 72 63 65 64 2d 63 6f 6c 6f 72 2d 61 64 6a 75 73 74 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 63 Data Ascii: ked="true"]) .indeterminate-indicator{background:${b.H.HighlightText}}:host([aria-checked="true"]) .control:hover .indeterminate-indicator{background:${b.H.Highlight}}:host([disabled]){opacity:1}:host([disabled]) .control{forced-color-adjust:none;border-c
2024-01-17 17:07:12 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 70 6c 61 74 65 43 6f 6c 75 6d 6e 73 43 68 61 6e 67 65 64 28 29 7b 74 68 69 73 2e 24 66 61 73 74 43 6f 6e 74 72 6f 6c 6c 65 72 2e 69 73 43 6f 6e 6e 65 63 74 65 64 26 26 74 68 69 73 2e 75 70 64 61 74 65 52 6f 77 53 74 79 6c 65 28 29 7d 72 6f 77 54 79 70 65 43 68 61 6e 67 65 64 28 29 7b 74 68 69 73 2e 24 66 61 73 74 43 6f 6e 74 72 6f 6c 6c 65 72 2e 69 73 43 6f 6e 6e 65 63 74 65 64 26 26 74 68 69 73 2e 75 70 64 61 74 65 49 74 65 6d 54 65 6d 70 6c 61 74 65 28 29 7d 72 6f 77 44 61 74 61 43 68 61 6e 67 65 64 28 29 7b 6e 75 6c 6c 21 3d 3d 74 68 69 73 2e 72 6f 77 44 61 74 61 26 26 74 68 69 73 2e 69 73 41 63 74 69 76 65 52 6f 77 26 26 28 74 68 69 73 2e 72 65 66 6f 63 75 73 4f 6e 4c 6f 61 64 3d 21 30 29 7d 63 65 6c 6c 49 74 65 6d 54 65 Data Ascii: 00006000plateColumnsChanged(){this.$fastController.isConnected&&this.updateRowStyle()}rowTypeChanged(){this.$fastController.isConnected&&this.updateItemTemplate()}rowDataChanged(){null!==this.rowData&&this.isActiveRow&&(this.refocusOnLoad=!0)}cellItemTe
2024-01-17 17:07:12 UTC	8204	IN	Data Raw: 3d 22 4d 34 2e 30 32 33 20 31 35 2e 32 37 33 4c 31 31 2e 32 39 20 38 20 34 2e 30 32 33 2e 37 32 37 6c 2e 37 30 34 2d 2e 37 30 34 4c 31 32 2e 37 31 20 38 6c 2d 37 2e 39 38 34 20 37 2e 39 37 37 2d 2e 37 30 34 2d 2e 37 30 34 7a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 76 67 3e 0a 20 20 20 20 60 2c 70 72 65 76 69 6f 75 73 3a 78 2e 64 79 60 0a 20 20 20 20 20 20 20 20 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 31 2e 32 37 33 20 31 35 2e 39 37 37 4c 33 2e 32 39 20 38 Data Ascii: ="M4.023 15.273L11.29 8 4.023.727l.704-.704L12.71 8l-7.984 7.977-.704-.704z" /> </svg> `,previous:x.dy` <svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg"> <path d="M11.273 15.977L3.29 8
2024-01-17 17:07:12 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 74 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 6f 6c 65 3d 22 70 72 6f 67 72 65 73 73 62 61 72 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 72 69 61 2d 76 61 6c 75 65 6e 6f 77 3d 22 24 7b 65 3d 3e 65 2e 76 61 6c 75 65 7d 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 72 69 61 2d 76 61 6c 75 65 6d 69 6e 3d 22 24 7b 65 3d 3e 65 2e 6d 69 6e 7d 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 72 69 61 2d 76 61 6c 75 65 6d 61 78 3d 22 24 7b 65 3d 3e 65 2e 6d 61 78 7d 22 0a 20 20 20 20 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 7b 28 30 2c 6d 2e 67 29 28 28 65 3d 3e 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 2e 76 61 6c 75 65 29 2c 76 2e 64 79 60 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: 00004000te role="progressbar" aria-valuenow="${e=>e.value}" aria-valuemin="${e=>e.min}" aria-valuemax="${e=>e.max}" > ${(0,m.g)((e=>"number"==typeof e.value),v.dy` <
2024-01-17 17:07:12 UTC	12	IN	Data Raw: 72 3a 24 7b 62 2e 48 2e 46 69 0d 0a Data Ascii: r:${b.H.Fi
2024-01-17 17:07:12 UTC	10334	IN	Data Raw: 30 30 30 30 32 38 35 32 0d 0a 65 6c 64 54 65 78 74 7d 7d 60 29 29 3b 76 61 72 20 45 3d 69 28 34 39 32 31 38 29 2c 46 3d 69 28 34 37 35 34 38 29 2c 6a 3d 69 28 31 37 35 30 33 29 3b 63 6f 6e 73 74 20 42 3d 66 75 6e 63 74 69 6f 6e 28 65 3d 7b 7d 29 7b 72 65 74 75 72 6e 20 45 2e 64 79 60 0a 20 20 20 20 20 20 20 20 3c 74 65 6d 70 6c 61 74 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 6f 6c 65 3d 22 73 77 69 74 63 68 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 72 69 61 2d 63 68 65 63 6b 65 64 3d 22 24 7b 65 3d 3e 65 2e 63 68 65 63 6b 65 64 7d 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 72 69 61 2d 64 69 73 61 62 6c 65 64 3d 22 24 7b 65 3d 3e 65 2e 64 69 73 61 62 6c 65 64 7d 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 72 69 61 2d 72 65 61 64 6f 6e 6c 79 3d 22 Data Ascii: 00002852eldText}}`));var E=i(49218),F=i(47548),j=i(17503);const B=function(e={}){return E.dy` <template role="switch" aria-checked="${e=>e.checked}" aria-disabled="${e=>e.disabled}" aria-readonly="
2024-01-17 17:07:12 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 5f 3d 7a 2e 64 79 60 0a 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 72 74 3d 22 6c 61 62 65 6c 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 3d 22 63 6f 6e 74 72 6f 6c 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 24 7b 65 3d 3e 65 2e 64 65 66 61 75 6c 74 53 6c 6f 74 74 65 64 4e 6f 64 65 73 26 26 65 2e 64 65 66 61 75 6c 74 53 6c 6f 74 74 65 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 3f 22 6c 61 62 65 6c 22 3a 22 6c 61 62 65 6c 20 6c 61 62 65 6c 5f 5f 68 69 64 64 65 6e 22 7d 22 0a 20 20 20 20 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 6c 6f 74 20 24 7b 28 30 2c 50 2e 51 29 28 22 64 65 66 61 75 6c 74 53 6c 6f 74 74 65 64 4e 6f 64 65 73 22 29 7d 3e 3c Data Ascii: 00004000_=z.dy` <label part="label" for="control" class="${e=>e.defaultSlottedNodes&&e.defaultSlottedNodes.length?"label":"label label__hidden"}" > <slot ${(0,P.Q)("defaultSlottedNodes")}><
2024-01-17 17:07:12 UTC	12	IN	Data Raw: 6f 6c 6f 72 43 6f 6e 74 72 61 0d 0a Data Ascii: olorContra
2024-01-17 17:07:12 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 73 74 28 74 2c 31 34 29 29 2c 64 3d 6c 2b 61 2a 4d 61 74 68 2e 61 62 73 28 69 2d 6f 29 3b 6c 65 74 20 63 2c 68 3b 72 65 74 75 72 6e 28 31 3d 3d 3d 61 3f 69 3c 6f 3a 61 2a 69 3e 61 2a 6f 29 3f 28 63 3d 6c 2c 68 3d 64 29 3a 28 63 3d 64 2c 68 3d 6c 29 2c 7b 72 65 73 74 3a 65 2e 67 65 74 28 63 29 2c 68 6f 76 65 72 3a 65 2e 67 65 74 28 68 29 2c 61 63 74 69 76 65 3a 65 2e 67 65 74 28 63 2b 61 2a 73 29 2c 66 6f 63 75 73 3a 65 2e 67 65 74 28 63 2b 61 2a 72 29 7d 7d 28 65 28 68 2e 79 29 2c 74 7c 7c 65 28 73 2e 49 29 2c 65 28 61 29 2c 65 28 6c 29 2c 65 28 64 29 2c 65 28 63 29 29 7d 29 2c 67 3d 28 75 28 22 6e 65 75 74 72 61 6c 2d 66 69 6c 6c 2d 69 6e 76 65 72 73 65 2d 72 65 73 74 22 2c 28 65 3d 3e 65 28 70 29 2e 65 76 61 6c 75 61 74 65 Data Ascii: 00006000st(t,14)),d=l+aMath.abs(i-o);let c,h;return(1===a?i<o:ai>ao)?(c=l,h=d):(c=d,h=l),{rest:e.get(c),hover:e.get(h),active:e.get(c+as),focus:e.get(c+a*r)}}(e(h.y),t\|\|e(s.I),e(a),e(l),e(d),e(c))}),g=(u("neutral-fill-inverse-rest",(e=>e(p).evaluate

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.16	49850	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:12 UTC	629	OUT	GET /bundles/v1/edgeChromium/latest/super-nav.b8dc75adef24ffb464ab.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:12 UTC	1186	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: d726+PhobVAw+nCbi7ZwYQ== Last-Modified: Sat, 13 Jan 2024 01:22:16 GMT ETag: 0x8DC13D6141CCCBE Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: a3d76c0e-701e-00ec-5fbf-458bd0000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:12 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Akamai-Request-BC: [a=23.218.242.10,b=89859179,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=0, origin; dur=0 , cdntime; dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b246b Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511232.55b246b Vary: Origin
2024-01-17 17:07:12 UTC	15198	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 75 70 65 72 2d 6e 61 76 22 5d 2c 7b 31 32 30 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 72 28 74 29 2c 69 2e 64 28 74 2c 7b 53 75 70 65 72 4e 61 76 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 74 7d 2c 53 75 70 65 72 4e 61 76 53 74 79 6c 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4f 74 7d 2c 53 75 70 65 72 4e 61 76 54 65 6d 70 6c 61 Data Ascii: 00006000(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["super-nav"],{1205:function(e,t,i){"use strict";i.r(t),i.d(t,{SuperNav:function(){return Lt},SuperNavStyles:function(){return Ot},SuperNavTempla
2024-01-17 17:07:13 UTC	9390	IN	Data Raw: 7b 65 3d 3e 65 2e 68 72 65 66 3f 76 6f 69 64 20 30 3a 22 6c 69 6e 6b 22 7d 20 74 61 62 69 6e 64 65 78 3d 22 30 22 20 74 61 72 67 65 74 3d 22 24 7b 65 3d 3e 65 2e 74 61 72 67 65 74 7d 22 20 74 79 70 65 3d 22 24 7b 65 3d 3e 65 2e 74 79 70 65 7d 22 3e 3c 73 6c 6f 74 20 6e 61 6d 65 3d 22 73 74 61 72 74 22 3e 3c 2f 73 6c 6f 74 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 22 20 70 61 72 74 3d 22 63 6f 6e 74 65 6e 74 22 3e 3c 73 6c 6f 74 3e 3c 2f 73 6c 6f 74 3e 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 60 3b 76 61 72 20 58 3d 69 28 32 38 36 33 32 29 2c 4a 3d 69 28 31 30 39 37 30 29 3b 63 6f 6e 73 74 20 65 65 3d 70 2e 69 60 20 3a 68 6f 73 74 7b 2d 2d 68 6f 72 69 7a 6f 6e 74 61 6c 6e 61 76 2d 61 63 74 69 76 65 2d 74 65 78 74 3a 24 7b 24 2e 54 48 2e 64 61 Data Ascii: {e=>e.href?void 0:"link"} tabindex="0" target="${e=>e.target}" type="${e=>e.type}"><slot name="start"></slot><span class="content" part="content"><slot></slot></span></a>`;var X=i(28632),J=i(10970);const ee=p.i` :host{--horizontalnav-active-text:${$.TH.da
2024-01-17 17:07:13 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 2d 2e 38 33 63 2e 33 34 20 30 20 2e 37 2e 30 33 20 31 2e 31 2e 31 33 2e 34 2e 30 36 2e 37 36 2e 31 38 20 31 2e 30 33 2e 32 37 76 32 2e 31 63 2d 2e 33 2d 2e 31 37 2d 2e 36 34 2d 2e 33 36 2d 31 2e 30 33 2d 2e 35 31 61 33 2e 32 20 33 2e 32 20 30 20 30 20 30 2d 31 2e 31 36 2d 2e 32 31 63 2d 2e 34 32 20 30 2d 2e 37 36 2e 30 39 2d 2e 39 37 2e 32 34 61 2e 39 38 2e 39 38 20 30 20 30 20 30 2d 2e 33 34 2e 37 33 5a 6d 35 20 32 2e 33 39 63 30 2d 31 2e 35 36 2e 34 32 2d 32 2e 38 31 20 31 2e 33 2d 33 2e 37 33 61 34 2e 38 35 20 34 2e 38 35 20 30 20 30 20 31 20 33 2e 36 38 2d 31 2e 33 38 63 31 2e 34 36 20 30 20 32 2e 36 31 2e 34 33 20 33 2e 34 34 20 31 2e 33 32 61 35 2e 30 36 20 35 2e 30 36 20 30 20 30 20 31 20 31 2e 32 34 20 33 2e 35 37 63 Data Ascii: 00006000-.83c.34 0 .7.03 1.1.13.4.06.76.18 1.03.27v2.1c-.3-.17-.64-.36-1.03-.51a3.2 3.2 0 0 0-1.16-.21c-.42 0-.76.09-.97.24a.98.98 0 0 0-.34.73Zm5 2.39c0-1.56.42-2.81 1.3-3.73a4.85 4.85 0 0 1 3.68-1.38c1.46 0 2.61.43 3.44 1.32a5.06 5.06 0 0 1 1.24 3.57c
2024-01-17 17:07:13 UTC	8204	IN	Data Raw: 2c 6e 75 6c 6c 3d 3d 3d 28 61 3d 74 68 69 73 2e 72 65 66 48 6f 72 69 7a 6f 6e 74 61 6c 4e 61 76 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 7c 7c 6e 75 6c 6c 3d 3d 3d 28 6e 3d 61 2e 73 68 61 64 6f 77 52 6f 6f 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 77 61 74 63 68 22 29 29 2c 28 30 2c 66 74 2e 46 59 29 28 77 74 2e 5f 2e 77 65 61 74 68 65 72 4e 61 76 2c 6e 75 6c 6c 3d 3d 3d 28 72 3d 74 68 69 73 2e 72 65 66 48 6f 72 69 7a 6f 6e 74 61 6c 4e 61 76 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 7c 7c 6e 75 6c 6c 3d 3d 3d 28 73 3d 72 2e 73 68 61 64 6f 77 52 6f 6f 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 73 3f 76 6f 69 64 20 30 3a 73 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 77 65 61 74 68 Data Ascii: ,null===(a=this.refHorizontalNav)\|\|void 0===a\|\|null===(n=a.shadowRoot)\|\|void 0===n?void 0:n.getElementById("watch")),(0,ft.FY)(wt._.weatherNav,null===(r=this.refHorizontalNav)\|\|void 0===r\|\|null===(s=r.shadowRoot)\|\|void 0===s?void 0:s.getElementById("weath
2024-01-17 17:07:13 UTC	9193	IN	Data Raw: 30 30 30 30 32 33 44 44 0d 0a 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 65 6e 61 62 6c 65 50 65 72 73 6f 6e 61 6c 69 7a 65 42 75 74 74 6f 6e 29 29 2c 6e 3d 2d 31 21 3d 3d 74 68 69 73 2e 73 65 6c 65 63 74 65 64 4e 61 76 49 74 65 6d 49 64 2e 69 6e 64 65 78 4f 66 28 22 5f 22 29 2c 72 3d 6e 26 26 74 68 69 73 2e 73 65 6c 65 63 74 65 64 4e 61 76 49 74 65 6d 49 64 2e 69 6e 64 65 78 4f 66 28 22 5f 22 29 21 3d 3d 74 68 69 73 2e 73 65 6c 65 63 74 65 64 4e 61 76 49 74 65 6d 49 64 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 5f 22 29 3b 69 66 28 61 7c 7c 21 72 29 69 66 28 21 61 26 26 6e 29 7b 76 61 72 20 73 3b 63 6f 6e 73 74 20 65 3d 28 30 2c 48 74 2e 72 29 28 74 68 69 73 2e 73 65 6c 65 63 74 65 64 4e 61 76 49 74 65 6d 49 64 29 2c 74 3d 6e 75 6c 6c 3d 3d 3d Data Ascii: 000023DDid 0===t?void 0:t.enablePersonalizeButton)),n=-1!==this.selectedNavItemId.indexOf("_"),r=n&&this.selectedNavItemId.indexOf("_")!==this.selectedNavItemId.lastIndexOf("_");if(a\|\|!r)if(!a&&n){var s;const e=(0,Ht.r)(this.selectedNavItemId),t=null===
2024-01-17 17:07:13 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 53 6f 75 72 63 65 3a 4a 65 2e 6d 2e 49 6e 74 65 72 6e 61 6c 2c 73 75 72 66 61 63 65 4d 6f 64 65 6c 3a 7b 73 75 72 66 61 63 65 54 79 70 65 3a 65 74 2e 55 2e 43 6f 61 63 68 6d 61 72 6b 2c 73 69 7a 65 3a 6e 74 2e 64 6d 2e 4d 65 64 69 75 6d 2c 70 6f 73 69 74 69 6f 6e 3a 7b 63 6f 61 63 68 6d 61 72 6b 41 6e 63 68 6f 72 3a 69 2c 61 6e 63 68 6f 72 69 6e 67 50 6f 73 69 74 69 6f 6e 3a 6e 74 2e 52 43 2e 41 62 6f 76 65 2c 68 61 73 50 6f 69 6e 74 65 72 3a 21 30 2c 70 6f 69 6e 74 65 72 50 6f 73 69 74 69 6f 6e 3a 6e 74 2e 4a 74 2e 4f 70 70 6f 73 69 74 65 7d 7d 2c 63 6f 6e 74 65 6e 74 4d 6f 64 65 6c 3a 7b 74 69 74 6c 65 3a 28 6e 75 6c 6c 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 66 6f 6c 6c 6f 77 69 6e 67 43 6f 61 63 68 4d 61 72 6b 54 69 74 6c Data Ascii: 00004000Source:Je.m.Internal,surfaceModel:{surfaceType:et.U.Coachmark,size:nt.dm.Medium,position:{coachmarkAnchor:i,anchoringPosition:nt.RC.Above,hasPointer:!0,pointerPosition:nt.Jt.Opposite}},contentModel:{title:(null==a?void 0:a.followingCoachMarkTitl
2024-01-17 17:07:13 UTC	12	IN	Data Raw: 72 67 65 74 45 6c 65 6d 65 6e 0d 0a Data Ascii: rgetElemen
2024-01-17 17:07:13 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 74 42 79 4b 65 79 28 65 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 28 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 68 69 73 2e 5f 72 65 67 69 73 74 72 61 74 69 6f 6e 73 2e 67 65 74 43 6f 61 63 68 4d 61 72 6b 28 65 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 61 6e 63 68 6f 72 45 6c 65 6d 65 6e 74 29 7c 7c 6e 75 6c 6c 7d 67 65 74 41 76 61 69 6c 61 62 6c 65 44 61 74 61 28 65 3d 21 31 2c 74 3d 5b 5d 2c 69 3d 5b 5d 2c 6f 3d 5b 5d 29 7b 63 6f 6e 73 74 20 61 3d 74 68 69 73 2e 5f 64 61 74 61 53 74 6f 72 61 67 65 2e 66 65 74 63 68 44 61 74 61 28 74 2c 69 2c 6f 29 3b 74 68 69 73 2e 69 73 49 6e 74 65 72 6e 61 6c 3d 65 3b 63 6f 6e 73 74 20 6e 3d 41 72 72 61 79 2e 66 72 6f 6d 28 61 2e 76 61 6c 75 65 73 28 29 29 2c 72 3d 74 Data Ascii: 00004000tByKey(e){var t;return(null===(t=this._registrations.getCoachMark(e))\|\|void 0===t?void 0:t.anchorElement)\|\|null}getAvailableData(e=!1,t=[],i=[],o=[]){const a=this._dataStorage.fetchData(t,i,o);this.isInternal=e;const n=Array.from(a.values()),r=t
2024-01-17 17:07:13 UTC	12	IN	Data Raw: 39 2d 2e 30 37 20 31 2e 38 36 0d 0a Data Ascii: 9-.07 1.86
2024-01-17 17:07:13 UTC	6361	IN	Data Raw: 30 30 30 30 31 38 43 44 0d 0a 2d 2e 32 33 20 32 2e 38 34 6c 2d 33 2e 38 34 2d 33 2e 38 34 43 31 33 2e 37 39 20 33 2e 30 39 20 31 34 2e 37 20 33 20 31 35 2e 37 20 33 7a 6d 2d 33 2e 39 35 2e 34 36 6c 34 2e 37 39 20 34 2e 38 63 2d 2e 33 39 20 31 2e 36 2d 31 2e 30 34 20 33 2e 31 39 2d 32 2e 30 37 20 34 2e 35 36 61 31 30 2e 30 31 20 31 30 2e 30 31 20 30 20 30 31 2d 36 2e 31 20 33 2e 38 35 2e 35 2e 35 20 30 20 30 30 2d 2e 30 33 2d 2e 30 32 6c 2d 34 2e 39 33 2d 34 2e 39 33 61 31 31 2e 38 20 31 31 2e 38 20 30 20 30 31 31 2e 39 2d 34 2e 31 37 20 31 30 2e 38 20 31 30 2e 38 20 30 20 30 31 36 2e 34 34 2d 34 2e 30 39 7a 4d 33 2e 31 39 20 31 32 2e 39 6c 33 2e 39 38 20 33 2e 39 39 63 2d 2e 39 2e 31 31 2d 31 2e 38 39 2e 31 35 2d 32 2e 39 36 2e 31 41 31 2e 32 34 20 31 2e Data Ascii: 000018CD-.23 2.84l-3.84-3.84C13.79 3.09 14.7 3 15.7 3zm-3.95.46l4.79 4.8c-.39 1.6-1.04 3.19-2.07 4.56a10.01 10.01 0 01-6.1 3.85.5.5 0 00-.03-.02l-4.93-4.93a11.8 11.8 0 011.9-4.17 10.8 10.8 0 016.44-4.09zM3.19 12.9l3.98 3.99c-.9.11-1.89.15-2.96.1A1.24 1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.16	49851	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:12 UTC	641	OUT	GET /bundles/v1/edgeChromium/latest/shopping-notification.636d24050cb676260eed.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:12 UTC	1148	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: zdlcaCP3H9uSJdxmtsmK4w== Last-Modified: Mon, 08 Jan 2024 16:46:11 GMT ETag: 0x8DC106952645770 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: bc4647a8-701e-0000-6a52-426abe000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:12 GMT Content-Length: 9466 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89859183,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=0, origin; dur=0 , cdntime; dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b246f Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511232.55b246f Vary: Origin
2024-01-17 17:07:12 UTC	9466	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 6f 70 70 69 6e 67 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 22 5d 2c 7b 32 38 39 37 36 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 74 2c 6f 29 7b 6f 2e 72 28 74 29 2c 6f 2e 64 28 74 2c 7b 53 68 6f 70 70 69 6e 67 4e 6f 74 69 66 69 63 61 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 24 7d 2c 53 68 6f 70 70 69 6e 67 4e 6f 74 69 66 69 63 61 74 69 6f 6e 53 74 79 6c 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: "use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["shopping-notification"],{28976:function(i,t,o){o.r(t),o.d(t,{ShoppingNotification:function(){return $},ShoppingNotificationStyles:function()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.16	49861	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:12 UTC	633	OUT	GET /tenant/amp/entityid/AAc9vHK.img HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:12 UTC	515	IN	HTTP/1.1 200 OK Last-Modified: Mon, 08 Jan 2024 13:34:46 GMT Content-Type: image/png Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AAc9vHK X-Source-Length: 1218 X-Datacenter: eastus X-ActivityId: cae06a54-549b-4d81-99c8-cb632689a4e2 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 1218 Cache-Control: public, max-age=419247 Expires: Mon, 22 Jan 2024 13:34:39 GMT Date: Wed, 17 Jan 2024 17:07:12 GMT Connection: close
2024-01-17 17:07:12 UTC	1218	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 71 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 35 2d 63 30 31 34 20 37 39 2e 31 35 31 34 38 31 2c 20 32 30 31 33 2f 30 33 2f 31 33 2d 31 32 3a 30 39 3a 31 35 20 20 Data Ascii: PNGIHDR szztEXtSoftwareAdobe ImageReadyqe<qiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.16	49863	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:12 UTC	782	OUT	GET /staticsb/statics//latest/icons-wc/icons/MicrosoftStartLogo_dark.svg HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: _C_ETH=1; USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1
2024-01-17 17:07:12 UTC	1035	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-MD5: Efv1MR2fa2dtkgEmxNk/5Q== Last-Modified: Tue, 16 Jan 2024 10:45:06 GMT ETag: 0x8DC168034371AB6 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: d7d30f14-201e-0082-6d05-49a413000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:12 GMT Content-Length: 5875 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89859355,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=1, origin; dur=0 , cdntime; dur=1 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b251b Cache-Control: public, max-age=31536000 report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511232.55b251b Vary: Origin
2024-01-17 17:07:12 UTC	5875	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 33 33 22 20 68 65 69 67 68 74 3d 22 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 33 20 32 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0d 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 33 38 2e 39 38 36 20 34 76 31 32 68 2d 32 2e 30 38 33 56 36 2e 35 39 34 68 2d 2e 30 33 34 4c 33 33 2e 31 34 34 20 31 36 68 2d 31 2e 33 38 6c 2d 33 2e 38 31 37 2d 39 2e 34 30 36 68 2d 2e 30 32 35 56 31 36 68 2d 31 2e 39 32 35 56 34 68 32 2e 39 39 6c 33 2e 34 34 36 20 38 2e 38 39 34 68 2e 30 35 4c 33 36 2e 31 32 35 20 34 68 32 2e 38 36 31 5a 6d 31 2e 37 34 35 2e 39 31 31 63 30 2d 2e 33 33 36 2e 31 32 32 2d 2e 36 31 34 2e 33 36 33 Data Ascii: <svg width="133" height="20" viewBox="0 0 133 20" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M38.986 4v12h-2.083V6.594h-.034L33.144 16h-1.38l-3.817-9.406h-.025V16h-1.925V4h2.99l3.446 8.894h.05L36.125 4h2.861Zm1.745.911c0-.336.122-.614.363

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.16	49859	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:12 UTC	634	OUT	GET /tenant/amp/entityid/AA1hk7Sh.img HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:12 UTC	515	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Last-Modified: Sat, 13 Jan 2024 05:35:49 GMT X-Datacenter: westus X-ActivityId: dc15fa19-c4c7-4f75-9d3d-ae584345a88f Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Type: image/png Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA1hk7Sh X-Source-Length: 6962 Content-Length: 6962 Cache-Control: public, max-age=44932 Expires: Thu, 18 Jan 2024 05:36:04 GMT Date: Wed, 17 Jan 2024 17:07:12 GMT Connection: close
2024-01-17 17:07:12 UTC	6962	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 06 00 00 00 1e 3f 88 b1 00 00 0c 3f 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 48 89 95 57 07 58 53 c9 16 9e 5b 92 90 90 84 12 40 40 4a e8 4d 10 a9 01 a4 84 d0 42 ef 08 36 42 12 20 94 18 03 41 c5 8e 2e 2a b8 76 b1 80 0d 5d 15 51 b0 02 62 47 ec 2c 8a bd 2f 16 54 94 75 b1 60 57 de a4 80 ae fb ca f7 e6 fb e6 ce 7f ff 39 f3 9f 33 e7 ce dc 7b 07 00 8d e3 3c 89 24 0f d5 04 20 5f 5c 28 8d 0f 0d 64 8e 4a 4d 63 92 9e 02 0c d0 01 15 38 01 4b 1e bf 40 c2 8e 8d 8d 04 b0 0c b4 7f 2f ef ae 03 44 de 5e 71 94 6b fd b3 ff bf 16 2d 81 b0 80 0f 00 12 0b 71 86 a0 80 9f 0f f1 7e 00 f0 2a be 44 5a 08 00 51 ce 5b 4c 2a 94 c8 31 ac 40 47 0a 03 84 78 be 1c 67 29 71 95 1c 67 28 f1 6e 85 4d 62 3c 07 Data Ascii: PNGIHDR22??iCCPICC ProfileHWXS[@@JMB6B A.v]QbG,/Tu`W93{<$ _\(dJMc8K@/D^qk-q~DZQ[L*1@Gxg)qg(nMb<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.16	49860	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:12 UTC	634	OUT	GET /tenant/amp/entityid/AA1mcm86.img HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:12 UTC	516	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA1mcm86 Last-Modified: Tue, 16 Jan 2024 20:22:22 GMT X-Source-Length: 4503 X-Datacenter: eastus X-ActivityId: 2811ff6b-19ea-42a6-adf8-66338bda0295 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 4503 Cache-Control: public, max-age=357402 Expires: Sun, 21 Jan 2024 20:23:54 GMT Date: Wed, 17 Jan 2024 17:07:12 GMT Connection: close
2024-01-17 17:07:12 UTC	4503	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 06 00 00 00 1e 3f 88 b1 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 84 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 05 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 4a 01 1b 00 05 00 00 00 01 00 00 00 52 01 28 00 03 00 00 00 01 00 02 00 00 87 69 00 04 00 00 00 01 00 00 00 5a 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 32 a0 03 00 04 00 00 00 01 00 00 00 32 00 00 00 00 86 f1 c2 a8 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 Data Ascii: PNGIHDR22?gAMAa cHRMz&u0`:pQ<eXIfMM*JR(iZHH22pHYs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.16	49862	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:12 UTC	634	OUT	GET /tenant/amp/entityid/BB14D0jG.img HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:12 UTC	519	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/BB14D0jG Last-Modified: Fri, 12 Jan 2024 21:52:50 GMT X-Source-Length: 42413 X-Datacenter: eastap X-ActivityId: 02030acb-4e86-4102-9844-10d0b38c3859 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 42413 Cache-Control: public, max-age=405885 Expires: Mon, 22 Jan 2024 09:51:57 GMT Date: Wed, 17 Jan 2024 17:07:12 GMT Connection: close
2024-01-17 17:07:12 UTC	15865	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff e1 0e cc 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 24 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 96 87 69 00 04 00 00 00 01 00 00 00 aa 00 00 00 d6 00 2d c6 c0 00 00 27 10 00 2d c6 c0 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 31 39 3a 30 31 3a 32 33 20 31 33 3a 32 34 3a 31 38 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 01 c3 a0 03 00 04 00 00 00 01 00 00 01 92 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 Data Ascii: JFIF,,ExifMM*bj(1$r2i-'-'Adobe Photoshop CC 2017 (Macintosh)2019:01:23 13:24:18
2024-01-17 17:07:12 UTC	16384	IN	Data Raw: 38 22 2f 3e 0d 0a 09 09 09 09 09 09 09 09 09 3c 72 64 66 3a 6c 69 20 78 6d 70 47 3a 73 77 61 74 63 68 4e 61 6d 65 3d 22 43 3d 37 35 20 4d 3d 31 30 30 20 59 3d 30 20 4b 3d 30 22 20 78 6d 70 47 3a 6d 6f 64 65 3d 22 52 47 42 22 20 78 6d 70 47 3a 74 79 70 65 3d 22 50 52 4f 43 45 53 53 22 20 78 6d 70 47 3a 72 65 64 3d 22 31 30 32 22 20 78 6d 70 47 3a 67 72 65 65 6e 3d 22 34 35 22 20 78 6d 70 47 3a 62 6c 75 65 3d 22 31 34 35 22 2f 3e 0d 0a 09 09 09 09 09 09 09 09 09 3c 72 64 66 3a 6c 69 20 78 6d 70 47 3a 73 77 61 74 63 68 4e 61 6d 65 3d 22 43 3d 35 30 20 4d 3d 31 30 30 20 59 3d 30 20 4b 3d 30 22 20 78 6d 70 47 3a 6d 6f 64 65 3d 22 52 47 42 22 20 78 6d 70 47 3a 74 79 70 65 3d 22 50 52 4f 43 45 53 53 22 20 78 6d 70 47 3a 72 65 64 3d 22 31 34 36 22 20 78 6d 70 47 Data Ascii: 8"/><rdf:li xmpG:swatchName="C=75 M=100 Y=0 K=0" xmpG:mode="RGB" xmpG:type="PROCESS" xmpG:red="102" xmpG:green="45" xmpG:blue="145"/><rdf:li xmpG:swatchName="C=50 M=100 Y=0 K=0" xmpG:mode="RGB" xmpG:type="PROCESS" xmpG:red="146" xmpG
2024-01-17 17:07:12 UTC	2020	IN	Data Raw: 9c b2 16 6f 83 6b fa fe fd a0 7e 03 f8 67 f6 9c f8 37 e2 0f 01 f8 c2 c1 75 2f 0f 78 96 d1 ad 2e a2 3c 32 e7 95 91 0f f0 c8 8c 15 d1 ba ab 28 3d ab f9 5f fd b9 7f 64 0f 10 fe c2 bf b4 cf 89 3e 1c f8 8b 74 d2 69 33 79 96 17 c1 36 47 aa 59 3e 4c 17 28 3d 19 7a 80 4e d7 57 5c 92 a6 be 8b 2f c5 fb 48 f2 4f 75 f8 9e 66 22 8f 23 ba d9 9e 43 5d 57 c1 4f 8c 9e 20 fd 9f 3e 2d f8 77 c6 fe 15 be 6d 3f c4 1e 18 be 8f 50 b1 9c 74 0e 87 3b 58 7f 12 30 ca b2 9e 19 59 81 e0 9a e5 68 af 4b 46 ac ce 6f 33 fa dc fd 8b 3f 6a 7d 0f f6 d4 fd 99 bc 27 f1 23 40 65 8e d7 c4 56 81 ee 2d 77 ee 6d 3e e9 3e 49 ed db de 39 15 97 38 1b 80 0c 38 61 5e b1 9a fc 29 ff 00 83 5d bf 6d 76 f0 0f c6 bf 10 7c 11 d5 ef 36 e9 3e 36 8d f5 8d 09 5d b8 8b 51 82 3f df 46 a3 fe 9a db a6 e3 ef 6a a0 7d Data Ascii: ok~g7u/x.<2(=_d>ti3y6GY>L(=zNW\/HOuf"#C]WO >-wm?Pt;X0YhKFo3?j}'#@eV-wm>>I988a^)]mv\|6>6]Q?Fj}
2024-01-17 17:07:12 UTC	8144	IN	Data Raw: c3 48 d7 a5 cd be af 1b 7d 06 95 76 df cd 45 7c 4b 5f 73 7f c1 b9 da 33 6a 9f f0 55 ff 00 02 ce ab b8 69 ba 7e ad 70 4e 3e e8 3a 7c f1 7f ed 41 f9 d7 66 2b f8 12 f4 66 54 7e 35 ea 7f 49 d4 51 45 7c 89 ec 05 14 51 40 05 14 51 40 05 14 51 40 08 7e f0 aa da cf fc 82 ee 7f eb 8b ff 00 23 56 4f de 15 5b 59 ff 00 90 5d cf fd 71 7f e4 6a 65 b1 a5 1f 8d 7a 9f 8f 34 51 45 7e 07 3f 89 9f de 94 7e 05 e8 82 8a 28 a9 34 0a 28 a2 80 3f 4a 3f e0 9f 43 fe 31 2f c2 ff 00 ef 5d ff 00 e9 5c d5 ed 03 ad 78 bf fc 13 eb fe 4d 2f c2 ff 00 ef 5d ff 00 e9 5c d5 ed 03 ad 7e e1 95 ff 00 b9 d2 ff 00 0c 7f 24 7f 10 71 47 fc 8e 31 5f f5 f2 7f fa 53 0a 28 a2 bd 03 c2 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 3f 2f ff 00 e0 ea 8f 01 36 bb fb 0f f8 27 c4 11 ab 33 68 1e 31 8a 19 30 3e e4 57 16 Data Ascii: H}vE\|K_s3jUi~pN>:\|Af+fT~5IQE\|Q@Q@Q@~#VO[Y]qjez4QE~?~(4(?J?C1/]\xM/]\~$qG1_S((((?/6'3h10>W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.16	49858	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:12 UTC	633	OUT	GET /tenant/amp/entityid/AAdTRDX.img HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:12 UTC	513	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AAdTRDX Last-Modified: Wed, 17 Jan 2024 05:27:33 GMT X-Source-Length: 854 X-Datacenter: eastus X-ActivityId: d8239634-0765-431d-b38f-93130f994352 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 854 Cache-Control: public, max-age=390019 Expires: Mon, 22 Jan 2024 05:27:31 GMT Date: Wed, 17 Jan 2024 17:07:12 GMT Connection: close
2024-01-17 17:07:12 UTC	854	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 02 eb 49 44 41 54 78 5e ed 9b 3f 68 13 51 1c c7 7f 2f f8 af 0e d5 d8 41 5a 0b d6 ae 82 0d 64 50 b0 92 cc 4e 4a 71 14 eb d2 51 33 45 47 bb 49 a6 ce 5d ac 38 74 10 b1 83 ed a2 43 02 0a 3a 14 ad a0 0e 42 ad 10 2c 1d 5a ab 83 31 51 3c df f7 f2 0b 24 08 f7 7e 97 1e f2 ee de 7d 20 7d 2f 2f bf 1b 7e 9f 7b 7f 8f 9e 22 50 7e 34 4a 74 a0 42 a4 0a a4 d4 88 df 96 54 3c ef 8b fe 53 23 6a 95 a9 32 55 57 ed e4 0f ae e9 c4 8f 71 88 1b 78 de 36 51 33 97 f1 ef bc 6b c9 03 a5 86 90 bb 16 a0 8a dc e4 20 aa 90 d1 26 86 f9 9b Data Ascii: PNGIHDR@@iqsRGBgAMAapHYsodIDATx^?hQ/AZdPNJqQ3EGI]8tC:B,Z1Q<$~} }//~{"P~4JtBT<S#j2UWqx6Q3k &

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.16	49857	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:12 UTC	634	OUT	GET /tenant/amp/entityid/AA19A5r1.img HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:12 UTC	517	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Last-Modified: Fri, 12 Jan 2024 23:42:18 GMT X-Datacenter: northeu X-ActivityId: 882ccdf0-58ec-48d3-afba-0934fd9196af Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Type: image/png Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA19A5r1 X-Source-Length: 2163 Content-Length: 2163 Cache-Control: public, max-age=412513 Expires: Mon, 22 Jan 2024 11:42:25 GMT Date: Wed, 17 Jan 2024 17:07:12 GMT Connection: close
2024-01-17 17:07:12 UTC	2163	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 54 00 00 01 54 08 06 00 00 00 7b 92 c4 b5 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 08 08 49 44 41 54 78 5e ed db b1 8d 9d 65 14 45 d1 a9 85 8a 28 81 2a 48 e9 81 02 1c 91 51 01 08 39 74 e8 80 18 39 b2 44 02 46 42 c2 80 83 31 22 7d ef 77 60 f8 e4 d9 47 5a c1 ea e0 dc 9d dd 87 c7 c7 c7 f7 00 fc 7f 82 0a 70 88 a0 02 1c 22 a8 00 87 08 2a c0 21 82 0a 70 88 a0 02 1c 22 a8 00 87 08 2a c0 21 82 0a 70 88 a0 02 1c 22 a8 00 87 08 2a c0 21 82 0a 70 88 a0 02 1c f2 51 41 fd fd f3 cf e0 98 3f bf fe f2 ce d5 ee 6e bd fa f5 f9 9d af be 7f 80 63 5e be 7e 76 e7 6a 8b b7 04 95 27 23 a8 54 09 2a 73 04 95 2a Data Ascii: PNGIHDRTT{sRGBgAMAapHYsodIDATx^eE(HQ9t9DFB1"}w`GZp"!p"!p"!pQA?nc^~vj'#Ts

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.16	49864	13.107.246.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:12 UTC	605	OUT	GET /assets/edge_hub_apps_manifest_gz/4.7.107/asset?sv=2017-07-29&sr=c&sig=ODCnll3A%2Fpr7IBDaNsDR2zA%2FOssZl6xdmLkM6vzzbZ0%3D&st=2021-01-01T00%3A00%3A00Z&se=2024-03-31T00%3A00%3A00Z&sp=r&assetgroup=Shoreline HTTP/1.1 Host: edgeassetservice.azureedge.net Connection: keep-alive Edge-Asset-Group: Shoreline Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:12 UTC	662	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:12 GMT Content-Type: application/octet-stream Content-Length: 306698 Connection: close Content-Encoding: gzip Content-MD5: DLY06IpEajvyCGoNUcMp0A== Last-Modified: Tue, 10 Oct 2023 17:24:31 GMT ETag: "0x8DBC9B5C40EBFF4" x-ms-request-id: 1465f9ba-201e-0059-7852-496d81000000 x-ms-version: 2017-07-29 x-ms-lease-status: unlocked x-ms-lease-state: available x-ms-blob-type: BlockBlob x-ms-server-encrypted: true Cache-Control: public, max-age=604800 x-azure-ref: 20240117T170712Z-ahphrvpahx5097hs26vagkeb0400000000y0000000003eyh X-Cache: TCP_HIT x-fd-int-roxy-purgeid: 59346683 Accept-Ranges: bytes
2024-01-17 17:07:12 UTC	15722	IN	Data Raw: 1f 8b 08 08 cf 88 25 65 02 ff 61 73 73 65 74 00 ec 7d 69 93 db 46 92 e8 5f a9 f0 97 fd e0 96 05 10 00 09 4c c4 8b 17 2d f9 92 6d f9 92 6d 8d fd 66 43 51 00 0a 24 9a 20 40 e1 60 ab 7b 76 fe fb ab cc 2c 10 09 82 07 c8 a6 bc 9e 8d 0d 5b 68 b0 8e bc eb 44 55 e6 3f 3f 59 c9 3c 4d 54 55 bf db a8 b2 4a 8b fc 93 bf 89 4f dc cf ac cf ac 4f 6e c4 27 8b 26 7c 27 d7 eb 4a 27 fe bf 7f 7e 92 c6 90 19 c5 ee d4 f7 65 f0 4c f9 be ff cc f5 95 7c 26 63 df 7e 36 9b da 81 13 7b d3 d0 0e 15 d4 cd e5 4a 41 f9 77 ef 5e bf f9 ea 1d fc 7a f7 0e d2 19 1e fb 33 fd df 0c 12 63 55 45 65 ba ae 4d 06 d5 61 89 54 75 a9 1e 20 f7 f5 ab 57 2f 5e dd dd 7e ff 62 be 7c bf 58 a6 5f 05 f7 d6 8b db 9f be f8 f2 f6 f6 87 97 b7 3f f9 b7 90 ff 72 fe ad 7e ff e2 76 9d 58 77 ee 57 8b 1f de ff 14 f9 fe Data Ascii: %easset}iF_L-mmfCQ$ @`{v,[hDU??Y<MTUJOOn'&\|'J'~eL\|&c~6{JAw^z3cUEeMaTu W/^~b\|X_?r~vXwW
2024-01-17 17:07:12 UTC	16384	IN	Data Raw: 19 13 6b cc 28 62 f6 d8 13 a5 64 e6 6d b1 8e c0 39 d0 3b 1d 35 ac cb 14 39 34 2c de 27 0f 25 e7 bb dc ec 8e 4d 1e 0f 36 52 62 6f 5c f3 a4 79 e4 26 bd 6c 1e f9 fd e2 1f 8d ad 73 72 b1 a6 b7 19 44 b0 85 7d 4c 10 b7 ad e2 24 9f 8b e5 22 a5 38 7d a8 02 c7 0a 04 ba b8 75 26 ce 55 c2 08 bf 5c 90 e7 68 0d 8c 7c 07 bb 14 ee 07 cf ac 5b ca 81 54 5b 25 f6 36 51 93 15 e8 c2 2b 22 50 fc 52 36 6d 55 35 59 19 67 e4 56 be d8 2d df fd 8c 1c b1 48 e9 85 d8 d5 6f a1 88 16 05 b8 ea d5 42 20 2f c6 fa c5 ab 21 ae b4 7e 71 4c 7c 69 3b da be 2c c4 3c 45 31 58 f6 5a d0 75 29 2d 10 91 2f b6 81 a8 f1 77 27 4d cb 46 c3 d1 f2 cb e7 17 7d 3c d0 6a 30 b1 ed 19 11 24 85 30 ed b3 77 98 0a a3 d3 4d 8a a4 58 a6 1a 92 6f 39 a0 66 5b a9 58 c4 f8 d7 db 13 a4 38 9f 53 18 72 e3 d6 58 c9 9c 2a Data Ascii: k(bdm9;594,'%M6Rbo\y&lsrD}L$"8}u&U\h\|[T[%6Q+"PR6mU5YgV-HoB /!~qL\|i;,<E1XZu)-/w'MF}<j0$0wMXo9f[X8SrX*
2024-01-17 17:07:13 UTC	16384	IN	Data Raw: b3 23 8d 34 db 40 60 d6 45 60 49 c9 d4 bd 2e 7c 11 fb b2 a6 99 50 03 fa 25 54 f6 38 cb 53 99 1f 8f 3a eb 83 6a 5b 35 cb f3 ab 69 39 53 0b a1 22 dd ab d0 a3 8d e4 30 22 b3 5a 41 6f 44 0d 8c d6 9b eb 15 92 ab ef 54 e1 d5 35 3b 8a 08 94 56 c6 75 11 82 12 e0 b7 2c 9c d4 28 cd 82 09 ad 54 24 d2 ae 26 b9 4f 37 c4 67 1e 9d 6b d1 e4 03 44 91 0f c7 24 3e 9c a5 f8 80 ce e1 c3 bd 55 1f 7c 0d 7d f0 d6 f4 e1 f6 6d f9 6c 42 78 a7 7a 8f cf 80 2a 42 b1 ca af 46 95 01 06 85 53 be 7a 50 c8 12 ce 7e 7c 44 29 29 63 83 14 66 50 e5 69 9e ba 94 a2 14 a9 44 53 56 22 78 06 d0 d3 7d 25 3d 51 7e fc 63 e8 77 69 11 9c 24 cb 92 42 e9 e0 d4 ac cc c6 c2 0a 92 55 72 f4 61 88 91 31 1f 4c 69 b4 9b 0f a5 64 32 91 6a 99 5a 87 05 9b b8 18 4d b6 69 0c 05 60 46 80 c2 34 75 85 d5 88 cf a4 31 10 Data Ascii: #4@`E`I.\|P%T8S:j[5i9S"0"ZAoDT5;Vu,(T$&O7gkD$>U\|}mlBxz*BFSzP~\|D))cfPiDSV"x}%=Q~cwi$BUra1Lid2jZMi`F4u1
2024-01-17 17:07:13 UTC	16384	IN	Data Raw: dc 4e 90 a6 cb a0 fa 98 d0 04 bd 87 c0 76 a3 e3 10 e7 62 b1 45 8c d3 7f ce e6 7b 31 e3 f2 79 31 db e2 c5 79 85 08 d3 dc 48 52 f5 b6 dd ed 28 17 25 ea d4 61 9c b8 97 49 3a d3 92 94 d0 6f 22 de 01 7f 8b 0d 3f 51 42 08 7f 2e 10 03 ae dd 15 3e 36 a4 6a 67 7e 2a 42 7f 7e 14 be 1b ef d2 39 b9 d3 a0 0f a6 db fd c0 cf 6a 73 b5 e6 a0 67 39 bd 50 cf ce e5 f5 33 b4 5b f6 96 18 f6 1d 3d 5b 1c 62 ee 08 9c b4 27 31 5c bf 95 0d 07 a0 cf bc bf ec e9 f3 e3 25 7d d1 cd 7e e8 fe 69 3f 94 32 74 6d 41 40 30 f4 9d 21 ef 18 ab 09 e0 e5 30 bf 56 97 43 99 8d fb 5c b1 3a 15 2a 0c 9d 5f c9 d3 47 70 60 b0 6e 17 9c 16 bc 33 94 8f dc 87 1c 2e 65 5f 80 b0 c7 e2 bb 6a f4 3b c8 60 00 83 b2 83 02 16 e1 3f 69 68 e4 62 45 17 99 ba 9d 9d b7 00 7d 2a 5a 5f 88 af 8b 22 5d 84 79 61 b8 38 c9 2f Data Ascii: NvbE{1y1yHR(%aI:o"?QB.>6jg~B~9jsg9P3[=[b'1\%}~i?2tmA@0!0VC\:_Gp`n3.e_j;`?ihbE}*Z_"]ya8/
2024-01-17 17:07:13 UTC	16384	IN	Data Raw: 54 9d f2 45 f6 da ac 96 02 5c f4 ef 18 e5 6e 6e 6e be dc 94 19 f2 c8 dd 24 26 52 55 7e 15 d7 69 ba 35 d9 7f 05 57 f6 b2 25 bf ff 57 fd 7e ab 8b 44 67 66 ac f8 97 af 55 69 5a 0e 26 6b 72 f9 5f e5 4a 15 3a fa 16 c9 39 ff c5 fe 5f 5b 93 e5 2e b7 93 a4 b3 90 c2 6b ad 8a 70 f5 34 6b b8 40 3f ab 6c ff 6b b9 2f c1 49 79 7f 7f fe e2 4d 8e 52 97 9f 5c d2 a4 d2 9b 7f 21 19 ca ff db 31 e3 e4 f2 51 b8 7c 74 b3 4c aa e5 59 09 49 a3 cf 51 d6 87 a5 4c 6d 23 e7 30 3b 3e ce a2 ff dd d2 a2 4d 1f 0e 14 fd d7 52 7f fd 1c ea cf 13 55 dc a3 6d 85 4b 4e 63 b4 12 03 65 33 26 36 bd 72 f4 19 04 1a d9 86 f6 84 1c dd 9e ee 21 e8 65 4d aa 2f f0 f8 0a fb d1 85 1e 53 4d 3f 5f a5 fc d4 0d f8 28 79 f7 b1 c1 a5 fc 51 df bc 30 df bf cb 6f cb 2a 09 d7 1f 99 f4 19 6a 7e d9 a5 f8 7e 7b c5 59 Data Ascii: TE\nnn$&RU~i5W%W~DgfUiZ&kr_J:9_[.kp4k@?lk/IyMR\!1Q\|tLYIQLm#0;>MRUmKNce3&6r!eM/SM?_(yQ0o*j~~{Y
2024-01-17 17:07:13 UTC	16384	IN	Data Raw: 51 d2 ce 9a 77 47 49 a9 4c 89 9a e9 a6 c3 96 5c 93 c5 1d 04 3a 52 a2 db 75 ba e8 8c ed ba cf c9 83 cf 2f c1 ab e3 19 e9 5f ea 6c 3a 06 42 6d a9 2b bb 3b 6c e6 11 e2 cc b8 40 0d 66 c4 d6 47 9d 43 48 b6 cf 17 53 19 47 4d 2f 62 63 2e b6 df 26 b7 09 e8 f5 8c 1d c0 e5 f5 0e 81 86 cd d1 7b 9c 8b 16 07 4d 31 65 8e 49 77 c3 9c 0b 06 79 cd 66 e0 72 84 3b 54 b9 74 ef 35 53 7d 3b 8c b0 a9 fd 1b 50 a9 de 74 45 72 7e 1b f0 2a c4 ee 75 56 a9 f1 4f 0b e2 ef 4c 0e 04 e6 c1 13 43 d1 a3 91 83 19 d3 3d c4 08 0f b5 d5 e1 f0 41 7b 02 cf 94 80 35 8c 5f 5f 02 90 85 fa 86 bb ab e1 02 93 a8 c3 01 b8 10 ce 1a 84 70 ba 2a 74 48 e2 74 7c 83 87 f5 42 38 70 15 c2 ce 65 08 08 86 a0 47 21 98 5b b8 58 62 21 c8 96 0d 6c 09 61 e7 32 c4 b3 5e a1 8d a0 20 7d 39 b0 28 5c c6 6d 21 84 b7 80 4c Data Ascii: QwGIL\:Ru/_l:Bm+;l@fGCHSGM/bc.&{M1eIwyfr;Tt5S};PtEr~uVOLC=A{5__ptHt\|B8peG![Xb!la2^ }9(\m!L
2024-01-17 17:07:13 UTC	16384	IN	Data Raw: bb 64 46 5f 6b 3e 56 70 91 6b 03 79 17 bb 77 52 f9 41 7a 72 cd d3 29 b6 f4 30 ff 74 bf bd 70 6d f5 bb 82 98 24 7c 05 bf f0 26 86 5f 75 44 a2 79 ef 2f 9b a0 22 f6 42 ad 43 9d ea 7a f0 ab 62 b1 c4 6b 28 af a2 bb 60 40 0c f9 6c a9 df 35 c0 77 d7 f0 0b 75 ef b4 4f 20 01 c9 6e d7 8b d6 eb 26 ee 09 6d 06 c3 c0 20 42 f6 62 01 a8 b8 2e 41 68 d5 3e af 78 77 09 5e a1 a8 7e 3d bf 65 90 da ff 6d 58 c3 e3 86 29 f6 22 00 98 2a 9c 68 97 65 63 ac 5c ad 09 2b 23 82 8f 3f 2b 34 4c 1f 01 76 0d 06 ed 44 0f a9 a0 b1 63 30 c2 0d f2 ad 15 f9 9d a6 73 4a 64 c6 38 b2 91 d1 0a 38 ec f1 61 a5 51 a1 65 d6 96 da 34 5b b9 be df 70 92 06 98 c1 37 67 b8 7a fd 34 cd 5e 44 c0 aa b0 27 6e 0c f2 e2 f9 5e 7c 0a 17 b4 b4 16 73 66 52 b2 05 40 56 84 20 c3 90 88 0a 5a 8e f1 3d 96 59 b7 5f a7 63 Data Ascii: dF_k>VpkywRAzr)0tpm$\|&_uDy/"BCzbk(`@l5wuO n&m Bb.Ah>xw^~=emX)"*hec\+#?+4LvDc0sJd88aQe4[p7gz4^D'n^\|sfR@V Z=Y_c
2024-01-17 17:07:13 UTC	16384	IN	Data Raw: 34 8c 8b 9e 5c d6 6f 8e 63 b4 f9 f8 32 af 1b 6f 4e 7b bf 39 eb fd e6 bc f7 9b 8b de 6f 2e ff 20 79 9f a4 d2 5f e4 26 50 20 db 05 95 17 3b 79 ef 23 8e fe 61 a0 5f 8a 03 5a f7 44 2d a1 c3 5f 26 90 90 09 18 77 ea a0 62 f3 19 53 9f c9 ea 8f 67 d5 e8 e4 34 eb e6 2c b7 a9 5c 69 a3 75 af d9 ba f6 11 ea 58 64 70 1a 03 5a 75 5c b5 f2 6d d4 e3 16 ed 7d 0a 76 94 c1 8e a7 30 9e 08 64 07 27 9d 18 c0 52 7d e4 67 ff 5d dd ba 83 b1 dc 5d 98 95 9f fd f7 4f 5a 26 c7 8a 7a a4 2b 67 ea ac d1 ee 4b f3 ee 5b 7c 55 87 5f ce 64 5a d1 d6 85 f4 9d 84 43 1d a5 d1 4e 33 c2 52 b6 ac ef d9 7f de 15 61 44 a2 b6 4f fe 03 39 27 95 29 d1 71 16 47 ff 7e 40 2f ff 09 6e 49 c5 ba 2c 58 72 fd b4 fc 2b 2f d4 a3 80 7f e2 4e fd ca 3b f8 f4 09 87 9a 38 33 24 7f 45 a2 7e d3 4f 4e 87 8c cb 8b 02 7f Data Ascii: 4\oc2oN{9o. y_&P ;y#a_ZD-_&wbSg4,\iuXdpZu\m}v0d'R}g]]OZ&z+gK[\|U_dZCN3RaDO9')qG~@/nI,Xr+/N;83$E~ON
2024-01-17 17:07:13 UTC	16384	IN	Data Raw: 70 9d 53 75 cc ea ad 8e 38 96 db c4 ca 58 e1 f4 a0 e0 97 6a 75 f4 83 a7 56 56 e5 47 66 01 d0 88 9b 59 b2 9e 99 56 68 99 88 b5 2f e5 e4 83 4b 34 f7 19 95 75 7a 34 b5 33 5b 5f 63 75 86 c3 94 89 3d c7 cc 48 fc 4b c7 02 6c b4 ac 03 81 46 c8 b1 0e c3 45 a4 cf 34 82 9b a9 e1 c3 b1 e1 46 87 99 95 55 9a b4 be 3b 59 b1 6b f9 9e 4a 6a 38 c3 9d 71 93 60 68 53 6d 70 93 f4 d8 cb 92 d6 1c 64 0c 55 29 d1 f7 86 61 3a 23 da d5 06 e4 b2 85 18 31 bb 0e 46 71 38 52 33 8f 24 f5 9e 43 1a 6d 32 5a be 90 91 0a d3 47 69 32 eb 74 ec 30 03 b3 0a 2f 45 60 14 c3 56 8c 9b d3 2c f6 4c cc 87 6e 54 d0 da 28 ed 5d 8d 3a 4d 4a aa f1 2e 74 2f 9f 56 e9 a4 49 86 4c 15 33 4f 70 79 ad 9c 27 57 fe 5f f1 b5 af dc 2b a5 7e 6a ff d6 06 bc 0c 5d f6 df fe e1 b9 f2 44 21 e0 ef 42 ef 50 c9 9d 6d c4 b7 Data Ascii: pSu8XjuVVGfYVh/K4uz43[_cu=HKlFE4FU;YkJj8q`hSmpdU)a:#1Fq8R3$Cm2ZGi2t0/E`V,LnT(]:MJ.t/VIL3Opy'W_+~j]D!BPm
2024-01-17 17:07:13 UTC	16384	IN	Data Raw: 6f a7 5e ff 0f 71 86 02 5c 4a e4 ef 14 6f f7 2f 70 7c 26 f3 fa c6 c5 01 0c b7 df 31 f9 1b 79 fd 6d d5 1e b6 91 ba 4d 6f c4 e2 d0 88 1b cf 19 e1 5c b5 9e f5 37 3a 4a 54 b0 8c 08 40 04 eb ae 78 fd 3f 38 6a 8d c9 1b 89 67 91 52 ea 51 9c 94 22 1e 7d b0 6a 95 14 85 b6 9f 56 47 3e e9 1b d3 5f a5 ac 50 c3 87 e4 2f 7d 48 49 98 d9 64 0e 08 ef 71 ff 50 b9 f3 86 37 4a 22 88 52 55 4a 91 92 53 0e 3c c2 3f 65 33 a3 28 fd 5a 9a 2e 91 76 ec f5 34 94 dc 1a 84 a2 be c1 0e 7a 8b 67 39 3e 58 c7 23 2c 7e 30 2a a9 04 8f 00 e5 ea b9 90 8e 19 22 31 4f 88 ac 1a 1f 76 bd 44 ab b4 23 ff 6a 0e 16 d3 4b 19 b1 5f 46 1a 8c 28 02 0b 82 4d 75 9f bc a7 ab d3 c0 ac 12 2c 1a e1 ca 61 62 a5 73 bf 90 ea 26 30 cc b6 60 ae a5 03 4b 60 ea 7c b9 bf 27 e4 0d 14 35 5a 3a 2d d3 09 b2 1d da a4 23 ee Data Ascii: o^q\Jo/p\|&1ymMo\7:JT@x?8jgRQ"}jVG>_P/}HIdqP7J"RUJS<?e3(Z.v4zg9>X#,~0*"1OvD#jK_F(Mu,abs&0`K`\|'5Z:-#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.16	49866	20.190.152.20	443

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:12 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4698 Host: login.live.com
2024-01-17 17:07:12 UTC	4698	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-01-17 17:07:13 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 17 Jan 2024 17:06:12 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C107_BL2 x-ms-request-id: f9708e93-26c1-4fb5-a904-0ed6995d033a PPServer: PPV: 30 H: BL02EPF00006861 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 17 Jan 2024 17:07:12 GMT Connection: close Content-Length: 10197
2024-01-17 17:07:13 UTC	10197	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.16	49865	23.96.180.189	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:12 UTC	1010	OUT	GET /v4/api/selection?nct=1&fmt=json&nocookie=1&locale=en-us&country=US&muid=2136D0069C246D353F30C40F9D676C20&bcnt=1&placement=88000244&ACHANNEL=4&ABUILD=117.0.5938.132&clr=esdk&edgeid=-7805640675387128533&ADEFAB=1&devosver=10.0.19045.2006&OPSYS=WIN10&poptin=0&UITHEME=light&pageConfig=547&asid=2cb6967668c04312e7a5bd50e133f776 HTTP/1.1 Host: arc.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: _C_ETH=1; USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1
2024-01-17 17:07:13 UTC	754	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Length: 1942 Content-Type: application/json; charset=utf-8 Expires: Mon, 01 Jan 0001 00:00:00 GMT Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [{"DcoPlusDebug":"Status: Ok"},{"RADIDS":"1,P425882902-T700466140-C128000000004387309+B+P80+S1"},{"BATCH_REDIRECT_STORE":"B128000000004387309+P0+S0"},{"OPTOUTSTATE":"256"}] Accept-CH: UA, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform, UA-Platform-Version Access-Control-Allow-Origin: https://ntp.msn.com Access-Control-Allow-Credentials: true X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Wed, 17 Jan 2024 17:07:12 GMT Connection: close
2024-01-17 17:07:13 UTC	1942	IN	Data Raw: 7b 22 62 61 74 63 68 72 73 70 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 69 74 65 6d 73 22 3a 5b 7b 22 69 74 65 6d 22 3a 22 7b 5c 22 66 5c 22 3a 5c 22 72 61 66 5c 22 2c 5c 22 76 5c 22 3a 5c 22 31 2e 30 5c 22 2c 5c 22 72 64 72 5c 22 3a 5b 7b 5c 22 63 5c 22 3a 5c 22 4d 53 4e 41 6e 61 68 65 69 6d 4e 65 77 73 4e 54 50 49 6d 61 67 65 48 6f 74 73 70 6f 74 73 5c 22 2c 5c 22 75 5c 22 3a 5c 22 4d 53 4e 41 6e 61 68 65 69 6d 4e 65 77 73 4e 54 50 49 6d 61 67 65 73 5c 22 7d 5d 2c 5c 22 61 64 5c 22 3a 7b 5c 22 75 70 64 61 74 65 5f 70 65 72 69 6f 64 5c 22 3a 5c 22 38 36 34 30 30 5c 22 2c 5c 22 4c 41 4e 44 53 43 41 50 45 5c 22 3a 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 69 6d 67 2d 70 72 6f 64 2d 63 6d 73 2d 72 74 2d 6d 69 63 72 6f 73 6f 66 74 2d 63 6f 6d 2e 61 6b 61 6d Data Ascii: {"batchrsp":{"ver":"1.0","items":[{"item":"{\"f\":\"raf\",\"v\":\"1.0\",\"rdr\":[{\"c\":\"MSNAnaheimNewsNTPImageHotspots\",\"u\":\"MSNAnaheimNewsNTPImages\"}],\"ad\":{\"update_period\":\"86400\",\"LANDSCAPE\":\"https:\/\/img-prod-cms-rt-microsoft-com.akam

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.16	49868	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:12 UTC	638	OUT	GET /bundles/v1/edgeChromium/latest/scroll-down-button.67b8880230bd0e4c2f33.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:13 UTC	1149	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: fvIPDuLl8fcOOdaVf0mKPA== Last-Modified: Sat, 13 Jan 2024 01:22:13 GMT ETag: 0x8DC13D612CF5587 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 17cbc35b-901e-001e-73bf-457881000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:13 GMT Content-Length: 11981 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89859911,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=89, clienttt; dur=0, origin; dur=0 , cdntime; dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b2747 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511233.55b2747 Vary: Origin
2024-01-17 17:07:13 UTC	11981	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 63 72 6f 6c 6c 2d 64 6f 77 6e 2d 62 75 74 74 6f 6e 22 5d 2c 7b 37 37 37 33 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 74 29 7b 74 2e 72 28 6f 29 2c 74 2e 64 28 6f 2c 7b 50 6f 77 65 72 65 64 62 79 4c 65 67 65 6e 64 57 43 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 7d 2c 50 6f 77 65 72 65 64 62 79 4c 65 67 65 6e 64 57 43 53 74 79 6c 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d Data Ascii: "use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["scroll-down-button"],{77733:function(e,o,t){t.r(o),t.d(o,{PoweredbyLegendWC:function(){return f},PoweredbyLegendWCStyles:function(){return m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.16	49867	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:12 UTC	633	OUT	GET /bundles/v1/edgeChromium/latest/common-others.c3460f2dae1a325c87e5.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:13 UTC	1186	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: ch6ThImKSN9AK01+SWbPAQ== Last-Modified: Wed, 10 Jan 2024 03:17:36 GMT ETag: 0x8DC118AB1E05C21 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 52685183-601e-0035-5573-43cca5000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:13 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Akamai-Request-BC: [a=23.218.242.10,b=89859892,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=89, clienttt; dur=0, origin; dur=0 , cdntime; dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b2734 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511233.55b2734 Vary: Origin
2024-01-17 17:07:13 UTC	15198	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 6f 6d 6d 6f 6e 2d 6f 74 68 65 72 73 22 5d 2c 7b 36 36 38 35 37 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 64 28 65 2c 7b 5f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 2c 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 7d 29 3b 76 61 72 20 61 3d 69 28 35 33 30 32 29 2c 6e 3d 69 28 34 34 31 33 32 29 3b 6c 65 74 20 6f 2c 72 3b 63 6f 6e Data Ascii: 00006000(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["common-others"],{66857:function(t,e,i){"use strict";i.d(e,{_:function(){return l},k:function(){return s}});var a=i(5302),n=i(44132);let o,r;con
2024-01-17 17:07:13 UTC	9390	IN	Data Raw: 22 3e 24 7b 43 2e 64 79 60 24 7b 28 30 2c 4d 2e 72 78 29 28 28 74 3d 3e 5b 74 2e 61 63 74 69 6f 6e 42 75 74 74 6f 6e 5d 29 2c 48 29 7d 60 7d 3c 2f 73 70 61 6e 3e 60 29 7d 60 2c 4e 3d 43 2e 64 79 60 20 24 7b 28 30 2c 6b 2e 67 29 28 28 74 3d 3e 22 62 75 74 74 6f 6e 22 3d 3d 3d 74 2e 74 79 70 65 29 2c 48 29 7d 20 24 7b 28 30 2c 6b 2e 67 29 28 28 74 3d 3e 22 69 63 6f 6e 22 3d 3d 3d 74 2e 74 79 70 65 29 2c 43 2e 64 79 60 3c 69 6d 67 20 63 6c 61 73 73 3d 22 24 7b 74 3d 3e 74 2e 64 61 72 6b 4d 6f 64 65 49 6d 61 67 65 3f 22 22 3a 22 61 64 64 6f 6e 2d 69 63 6f 6e 20 69 63 6f 6e 2d 6f 6e 6c 79 22 7d 22 20 73 72 63 3d 22 24 7b 74 3d 3e 74 2e 69 6d 61 67 65 7d 22 20 61 6c 74 3d 22 24 7b 74 3d 3e 74 2e 6c 61 62 65 6c 7d 22 20 2f 3e 60 29 7d 60 2c 5f 3d 43 2e 64 79 60 Data Ascii: ">${C.dy`${(0,M.rx)((t=>[t.actionButton]),H)}`}</span>`)}`,N=C.dy` ${(0,k.g)((t=>"button"===t.type),H)} ${(0,k.g)((t=>"icon"===t.type),C.dy`<img class="${t=>t.darkModeImage?"":"addon-icon icon-only"}" src="${t=>t.image}" alt="${t=>t.label}" />`)}`,_=C.dy`
2024-01-17 17:07:13 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 75 74 69 6f 6e 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 33 70 78 7d 2e 6f 6e 65 49 74 65 6d 4c 69 73 74 20 2e 61 72 74 69 63 6c 65 54 69 74 6c 65 7b 68 65 69 67 68 74 3a 33 38 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 39 70 78 7d 2e 74 77 6f 49 74 65 6d 4c 69 73 74 20 2e 61 72 74 69 63 6c 65 54 69 74 6c 65 7b 68 65 69 67 68 74 3a 38 30 70 78 3b 2d 2d 73 75 70 65 72 2d 6c 69 73 74 2d 74 69 74 6c 65 2d 6c 69 6e 65 68 65 69 67 68 74 3a 34 7d 60 2e 77 69 74 68 42 65 68 61 76 69 6f 72 73 28 28 30 2c 63 2e 55 75 29 28 64 29 29 3b 76 61 72 20 68 3d 69 28 33 31 30 39 36 29 2c 75 3d 69 28 33 31 38 38 32 29 3b 63 6f 6e 73 74 20 67 3d 73 2e 69 60 0a 2e 61 72 74 69 63 6c 65 43 6f 6e 74 65 6e 74 3a 61 63 74 69 76 65 2c 2e 61 72 Data Ascii: 00006000ution{margin-bottom:3px}.oneItemList .articleTitle{height:38px;line-height:19px}.twoItemList .articleTitle{height:80px;--super-list-title-lineheight:4}`.withBehaviors((0,c.Uu)(d));var h=i(31096),u=i(31882);const g=s.i`.articleContent:active,.ar
2024-01-17 17:07:13 UTC	8204	IN	Data Raw: 6c 6f 74 3d 22 6d 6f 72 65 2d 61 63 74 69 6f 6e 73 22 20 61 70 70 65 61 72 61 6e 63 65 3d 22 73 74 65 61 6c 74 68 22 20 69 64 3d 22 24 7b 74 3d 3e 74 2e 69 64 7d 41 63 74 69 6f 6e 4d 65 6e 75 22 20 40 63 6c 69 63 6b 3d 24 7b 28 74 2c 65 29 3d 3e 65 2e 70 61 72 65 6e 74 2e 74 6f 67 67 6c 65 41 63 74 69 6f 6e 4d 65 6e 75 28 65 2e 65 76 65 6e 74 2c 21 65 2e 70 61 72 65 6e 74 2e 69 73 41 63 74 69 6f 6e 4d 65 6e 75 4f 70 65 6e 2c 74 2e 68 65 61 64 65 72 44 61 74 61 2e 61 63 74 69 6f 6e 4d 65 6e 75 44 61 74 61 2e 73 6b 69 70 45 76 65 6e 74 44 65 6c 65 67 61 74 65 29 7d 20 70 61 72 74 3d 22 61 63 74 69 6f 6e 2d 6d 65 6e 75 22 20 74 69 74 6c 65 3d 22 24 7b 28 74 2c 65 29 3d 3e 65 2e 70 61 72 65 6e 74 2e 73 74 72 69 6e 67 73 2e 61 63 74 69 6f 6e 4d 65 6e 75 54 6f Data Ascii: lot="more-actions" appearance="stealth" id="${t=>t.id}ActionMenu" @click=${(t,e)=>e.parent.toggleActionMenu(e.event,!e.parent.isActionMenuOpen,t.headerData.actionMenuData.skipEventDelegate)} part="action-menu" title="${(t,e)=>e.parent.strings.actionMenuTo
2024-01-17 17:07:13 UTC	13207	IN	Data Raw: 30 30 30 30 33 33 38 42 0d 0a 70 6c 61 74 65 3a 73 74 7d 29 7d 2c 31 36 35 38 37 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 64 28 65 2c 7b 59 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 7d 7d 29 3b 76 61 72 20 61 3d 69 28 35 33 30 38 35 29 2c 6e 3d 69 28 37 30 39 36 37 29 2c 6f 3d 69 28 38 30 36 34 31 29 2c 72 3d 69 28 33 39 31 35 33 29 2c 6c 3d 69 28 33 35 34 32 32 29 2c 73 3d 69 28 35 38 37 33 31 29 2c 63 3d 69 28 37 37 32 37 37 29 2c 64 3d 69 28 36 30 39 30 34 29 2c 70 3d 69 28 34 33 38 39 32 29 2c 68 3d 69 28 36 34 30 33 32 29 2c 75 3d 69 28 36 31 32 37 30 29 2c 67 3d 69 28 37 37 36 31 35 29 2c 76 3d 69 28 36 33 39 36 29 3b 63 6f 6e 73 74 20 6d 3d 28 29 3d 3e 7b 6f 2e 44 2e 64 65 66 Data Ascii: 0000338Bplate:st})},16587:function(t,e,i){"use strict";i.d(e,{Y:function(){return m}});var a=i(53085),n=i(70967),o=i(80641),r=i(39153),l=i(35422),s=i(58731),c=i(77277),d=i(60904),p=i(43892),h=i(64032),u=i(61270),g=i(77615),v=i(6396);const m=()=>{o.D.def
2024-01-17 17:07:13 UTC	12399	IN	Data Raw: 30 30 30 30 33 30 36 33 0d 0a 20 63 61 6c 63 28 28 24 7b 6f 2e 76 78 7d 20 2d 20 24 7b 6f 2e 48 7d 29 20 2a 20 31 70 78 29 20 24 7b 72 2e 79 47 7d 20 69 6e 73 65 74 7d 3a 68 6f 73 74 28 5b 6d 75 6c 74 69 70 6c 65 5d 29 20 3a 3a 73 6c 6f 74 74 65 64 28 5b 61 72 69 61 2d 73 65 6c 65 63 74 65 64 3d 22 74 72 75 65 22 5d 29 7b 2d 2d 69 6e 74 65 72 65 73 74 2d 6f 70 74 69 6f 6e 2d 69 6e 64 69 63 61 74 6f 72 2d 66 69 6c 6c 3a 24 7b 6c 2e 41 76 7d 7d 60 3b 63 6f 6e 73 74 20 70 3d 28 30 2c 69 28 31 39 30 31 31 29 2e 4b 29 28 29 2c 68 3d 6e 2e 62 2e 63 6f 6d 70 6f 73 65 28 7b 6e 61 6d 65 3a 60 24 7b 61 2e 73 2e 70 72 65 66 69 78 7d 2d 69 6e 6c 69 6e 65 2d 61 63 74 69 6f 6e 73 2d 6c 69 73 74 62 6f 78 60 2c 73 74 79 6c 65 73 3a 64 2c 74 65 6d 70 6c 61 74 65 3a 70 7d Data Ascii: 00003063 calc((${o.vx} - ${o.H}) * 1px) ${r.yG} inset}:host([multiple]) ::slotted([aria-selected="true"]){--interest-option-indicator-fill:${l.Av}}`;const p=(0,i(19011).K)(),h=n.b.compose({name:`${a.s.prefix}-inline-actions-listbox`,styles:d,template:p}
2024-01-17 17:07:13 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.16	49870	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:13 UTC	633	OUT	GET /tenant/amp/entityid/AAcHSdq.img HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:13 UTC	514	IN	HTTP/1.1 200 OK Last-Modified: Wed, 10 Jan 2024 23:09:03 GMT Content-Type: image/png Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AAcHSdq X-Source-Length: 348 X-Datacenter: northeu X-ActivityId: f65e5c8e-e384-42b5-a4c8-8c2362855876 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 348 Cache-Control: public, max-age=237704 Expires: Sat, 20 Jan 2024 11:08:57 GMT Date: Wed, 17 Jan 2024 17:07:13 GMT Connection: close
2024-01-17 17:07:13 UTC	348	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2b 00 00 00 2b 08 06 00 00 00 e1 5d 71 c0 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 e9 49 44 41 54 78 da ec 97 b1 0d c2 30 14 44 4d 16 08 14 ac 40 91 29 d8 00 8f 04 9b fc 11 fe 28 d0 50 d0 51 d3 b0 81 f1 00 89 14 89 bb 2f 9f e2 93 5c 59 b2 9e ce 4f 89 ff ae 94 92 96 f2 99 4e cb 9b f3 39 1c 9f af ef 9f e7 dd ea 19 d7 b9 8d 21 61 93 13 31 9b 86 bd d4 ab de ab c0 52 db dd 3c 2c 4d 85 81 54 42 ee b0 24 58 8a 0a 2c 58 4a bb 1d 96 a5 02 13 16 de 2e 1b f6 dc 9b 25 65 ac de e6 96 60 1f 51 ed 22 60 4d 09 f6 5e d7 3b 42 05 94 b3 1e d1 2e 0a d6 64 60 eb 34 1a a2 02 f2 d3 Data Ascii: PNGIHDR++]qpHYs+tEXtSoftwareAdobe ImageReadyqe<IDATx0DM@)(PQ/\YON9!a1R<,MTB$X,XJ.%e`Q"`M^;B.d`4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.16	49871	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:13 UTC	634	OUT	GET /tenant/amp/entityid/AA15KYc7.img HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:13 UTC	518	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Last-Modified: Sun, 31 Dec 2023 03:03:25 GMT X-Datacenter: eastus X-ActivityId: 54b3b724-c53f-4f97-9388-b3b691d32031 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Type: image/jpeg Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA15KYc7 X-Source-Length: 71105 Content-Length: 71105 Cache-Control: public, max-age=78962 Expires: Thu, 18 Jan 2024 15:03:15 GMT Date: Wed, 17 Jan 2024 17:07:13 GMT Connection: close
2024-01-17 17:07:13 UTC	15866	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 00 68 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 04 01 1a 00 05 00 00 00 01 00 00 00 3e 01 1b 00 05 00 00 00 01 00 00 00 46 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 11 00 00 00 4e 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 70 61 69 6e 74 2e 6e 65 74 20 34 2e 33 2e 31 32 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a Data Ascii: JFIF``hExifMM*>F(1N``paint.net 4.3.12CC
2024-01-17 17:07:13 UTC	16384	IN	Data Raw: 1e 58 7c 55 38 d4 a7 2d 1c 65 15 28 bf 54 d3 4f e6 7b 6f c3 df f8 2a 8f ed b9 f0 fb ca 83 fe 16 df f6 e5 ac 5f f2 eb e2 1d 3a 1b 9d ff 00 ef 4b b4 4c 7f ef ba f7 6f 87 7f f0 5d bf 18 5b 79 76 ff 00 16 3e 03 69 b7 b9 e2 4b af 0f 6a 92 5b 6d f7 11 4c 25 dd ff 00 7d 8a fd 07 27 f1 2b 3a cb ed 0c 5a 55 a1 e7 a4 97 fd bc 96 bf f6 f2 6d f7 47 e0 3c 5d f4 71 e1 0c ef 9a b6 53 27 84 aa f5 b2 f7 e9 37 fe 06 ef 1f fb 76 49 2f e5 67 ba 7c 3d ff 00 82 ca fe c6 de 31 2b 0f 89 75 0f 10 78 5e 43 80 c7 58 d1 8c b1 ee f6 6b 56 94 e3 dc 85 fc 2b dd 3e 1d fe d3 bf b3 bf c5 9f 2e 3f 87 5f 1a fc 33 ab 4d 2f dc b3 b7 d6 22 fb 47 e3 0b 11 20 fc 54 57 ea d9 3f 1b 70 fe 73 68 42 a7 24 df d9 9f ba fe 4e fc ae fd 12 77 f2 3f 97 78 bb c1 de 3b e0 ee 6a b8 8c 37 b5 a2 bf e5 e5 2b ce Data Ascii: X\|U8-e(TO{o*_:KLo][yv>iKj[mL%}'+:ZUmG<]qS'7vI/g\|=1+ux^CXkV+>.?_3M/"G TW?pshB$Nw?x;j7+
2024-01-17 17:07:13 UTC	2207	IN	Data Raw: d9 cf bf 35 3f 76 ef ce 51 51 97 fd bc 14 57 cc 9f a5 05 14 00 51 40 05 14 00 51 40 05 14 00 51 40 05 74 df 05 35 96 f0 e7 c6 5f 08 f8 85 5b 69 b0 f1 35 85 c0 6f 4d 97 08 df d2 ba 30 b2 e4 c5 42 5d a4 9f e2 70 e6 54 fd b6 5b 5a 9f 78 49 7d f1 68 fd fa a2 bf b0 0f f2 44 28 a0 02 8a 00 28 a0 02 8a 00 c8 f8 81 a9 ff 00 62 f8 0f 5b d6 77 63 ec 9a 45 cc d9 f4 db 13 37 f4 af e7 da bf 17 f1 6a 5f be c2 47 ca 7f fb 67 f9 1f d8 df 45 5a 76 c2 e6 d3 ef 2a 2b ee 55 7f cc 28 af c7 cf eb 60 a2 80 0a 28 00 a2 80 0a 28 00 a2 80 0a 28 00 a7 46 92 4a eb 14 48 cc cc d8 55 51 92 4f a5 01 b6 ac fd c2 fd 87 7f 67 6b 6f d9 87 f6 6d f0 ff 00 c3 79 6d 95 75 59 21 fb 7f 88 a4 51 cc 97 d3 00 d2 02 7b 84 1b 62 07 ba c4 b5 eb 95 fd 6d 93 e0 bf b3 b2 9a 18 6f e4 84 53 f5 4b 5f bd dd Data Ascii: 5?vQQWQ@Q@Q@t5_[i5oM0B]pT[ZxI}hD((b[wcE7j_GgEZv*+U(`(((FJHUQOgkomymuY!Q{bmoSK_
2024-01-17 17:07:13 UTC	16384	IN	Data Raw: 00 28 a0 02 8a 00 28 a0 02 8a 00 28 a0 02 be 10 ff 00 82 ed c9 10 f8 53 e0 28 8f df 6f 10 dd 15 fa 08 06 7f 98 af 91 e3 bf f9 24 f1 37 ed 1f fd 2e 27 ea 9e 09 dd f8 a5 96 db f9 a7 ff 00 a6 e6 7e 67 51 5f cc a7 fa 50 14 50 01 45 00 14 50 01 45 00 14 50 01 45 00 14 50 07 ef 9f c0 20 c3 e0 4f 82 83 fd ef f8 44 b4 dd df f8 0b 1d 75 b5 fd 81 83 ff 00 74 a7 fe 15 f9 23 fc 93 cd bf e4 69 5f fc 72 ff 00 d2 98 51 5d 07 9e 14 50 01 45 00 14 50 07 01 fb 57 c4 6e 3f 65 af 89 50 28 e5 fc 01 ac af e7 63 35 7e 0f 57 e1 fe 2c 7f bf e1 bf c3 2f cc fe d4 fa 2c bf f8 42 cc 57 fd 3c 87 fe 92 c2 8a fc 9c fe a8 0a 28 00 a2 80 0a 28 00 a2 80 0a 28 00 a2 80 0a fb 8b fe 08 5d e2 c8 ac 3e 3a 78 c7 c1 72 4b b5 b5 3f 0b 25 d4 6a 7f 89 ad ee 11 71 f5 c4 e4 fd 33 5f 51 c1 55 3d 97 14 Data Ascii: (((S(o$7.'~gQ_PPEPEPEP ODut#i_rQ]PEPWn?eP(c5~W,/,BW<(((]>:xrK?%jq3_QU=
2024-01-17 17:07:13 UTC	16384	IN	Data Raw: 85 2c f5 cb 3c cd 63 77 fe e4 a0 70 4f 5d 8e 15 c0 ea a2 bc ca bf 98 33 0c bf 17 95 e3 27 85 c4 c7 96 71 76 7f a3 5d d3 dd 33 fd 2e e1 de 21 ca b8 ab 27 a5 99 e5 d5 39 e9 54 57 5d d3 eb 19 2e 92 8b d1 ae fe 5a 85 15 c4 7b 61 45 00 6d 78 4f e2 47 c4 4f 01 4b f6 8f 03 78 f7 5a d1 64 dd 9d fa 4e a9 35 b1 cf ae 63 61 5e 9b e1 7f f8 28 7f ed b1 e1 00 a3 4a fd a3 7c 43 36 de 9f da 92 c7 7d f9 fd a5 5f 3f 8d 7a d9 7e 7b 9c 65 56 fa a5 79 41 76 4f dd ff 00 c0 5d e2 fe 68 f9 2c fb 80 f8 37 8a 1b 96 67 81 a7 52 4f ed 38 da 7f f8 1c 6d 3f fc 98 ee 74 4f f8 2c 17 ed c3 a5 2a ad f7 8e 34 7d 4b 1f c5 7d e1 db 75 cf fd f9 54 ae 92 cb fe 0b 75 fb 5d da 8c 4f e1 5f 01 dc fb cd a3 dd 0c ff 00 df 17 4b 5f 55 87 f1 2b 89 e8 2b 4e 50 9f f8 a3 6f fd 25 c4 fc c3 1d f4 6f f0 df Data Ascii: ,<cwpO]3'qv]3.!'9TW].Z{aEmxOGOKxZdN5ca^(J\|C6}_?z~{eVyAvO]h,7gRO8m?tO,*4}K}uTu]O_K_U++NPo%o
2024-01-17 17:07:13 UTC	3880	IN	Data Raw: d7 cd 7f 1f 7f e0 94 9f b2 77 c6 d3 71 ab 68 fe 18 93 c1 ba c4 d9 6f ed 0f 0c ed 8a 16 6f f6 ed 88 31 11 9e 4e c0 8c 7f bd 5e 1e 7d c3 f9 77 10 e1 7d 8e 26 3a af 86 4b e2 8b f2 f2 ee 9e 8f d6 cc fb 6e 07 e3 ee 20 e0 1c d3 eb 79 6c fd d9 5b 9e 9b d6 13 4b a4 97 46 ba 49 59 ae 8e cd a7 f1 27 c7 5f f8 23 df ed 51 f0 a8 cd a9 f8 0a da cf c7 1a 5c 64 95 93 46 6f 2a f0 2f ab 5b 48 72 4f fb 31 b4 86 be 5c d7 bc 3f af f8 57 56 9b 40 f1 3e 87 79 a6 df 5b 36 db 8b 2b fb 57 86 68 9b d1 91 c0 65 3f 51 5f ce bc 41 c3 39 97 0e e2 39 6b ab c1 fc 33 5f 0b ff 00 27 e4 fe 57 5a 9f e8 27 00 f8 95 c3 9e 21 60 7d ae 06 7c b5 a2 bd fa 52 6b 9e 1e 7f de 8d f6 92 d3 6b a8 bd 0a 74 57 ce 9f a1 05 14 00 51 40 05 14 00 51 40 05 14 00 51 40 05 14 00 51 40 05 14 00 51 40 05 14 00 51 Data Ascii: wqhoo1N^}w}&:Kn yl[KFIY'_#Q\dFo*/[HrO1\?WV@>y[6+Whe?Q_A99k3_'WZ'!`}\|RkktWQ@Q@Q@Q@Q@Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.16	49869	13.107.246.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:13 UTC	846	OUT	GET /assets/domains_config_gz/2.8.75/asset?sv=2017-07-29&sr=c&sig=ODCnll3A%2Fpr7IBDaNsDR2zA%2FOssZl6xdmLkM6vzzbZ0%3D&st=2021-01-01T00%3A00%3A00Z&se=2024-03-31T00%3A00%3A00Z&sp=r&assetgroup=EntityExtractionDomainsConfig HTTP/1.1 Host: edgeassetservice.azureedge.net Connection: keep-alive Edge-Asset-Group: EntityExtractionDomainsConfig Sec-Mesh-Client-Edge-Version: 117.0.2045.47 Sec-Mesh-Client-Edge-Channel: stable Sec-Mesh-Client-OS: Windows Sec-Mesh-Client-OS-Version: 10.0.19045 Sec-Mesh-Client-Arch: x86_64 Sec-Mesh-Client-WebView: 0 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:13 UTC	629	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:13 GMT Content-Type: application/octet-stream Content-Length: 79192 Connection: close Content-Encoding: gzip Content-MD5: HTd0YQAlXfzcbv+gIkcx8g== Last-Modified: Thu, 02 Nov 2023 21:25:56 GMT ETag: "0x8DBDBEA4D0A3592" x-ms-request-id: ce42406b-d01e-006e-0d67-49c12e000000 x-ms-version: 2017-07-29 x-ms-lease-status: unlocked x-ms-lease-state: available x-ms-blob-type: BlockBlob x-ms-server-encrypted: true Cache-Control: public, max-age=604800 x-azure-ref: 20240117T170713Z-3uk5gv30hx1xvbdn777qtct6f400000000e000000000139d X-Cache: TCP_MISS Accept-Ranges: bytes
2024-01-17 17:07:13 UTC	15755	IN	Data Raw: 1f 8b 08 08 e4 13 44 65 02 ff 61 73 73 65 74 00 ec bd 0b 97 db 36 b2 30 f8 57 b2 b9 33 b3 dd 89 d5 d6 5b dd d9 cd fa f4 d3 f1 f8 39 6d 3b 19 db f1 d5 01 49 48 a2 45 91 0c 1f 6a ab c3 be bf 7d 0b 05 80 00 08 50 52 db ce 77 ef b7 67 67 9c 16 09 14 0a 40 a1 50 a8 2a 14 c0 3f bf f7 93 78 16 ce bf ff e9 bb 3f bf 2f 92 25 8d a7 51 b8 0a 0b 78 ef 8d bb dd 07 df 7d 9f 92 39 9d fa 65 91 cc 66 90 38 1c f4 59 62 40 67 a4 8c 8a 69 94 f8 24 a2 d3 15 49 11 81 c7 f0 c0 df 0e 3c 00 94 97 e3 6b de f1 08 7b a5 11 7b a5 51 67 9e e1 6b 8c af 71 a7 cc f1 15 81 69 de 59 7d c6 d7 02 5f 8b 0e a5 ec d5 c7 5c 3f ef f8 b7 ec 35 20 ec 35 20 9d 60 89 af 14 5f 69 27 40 e0 19 e6 ce 48 27 c4 8a 66 21 be 86 1d 78 60 af 19 be 66 9d 19 e6 2e b0 ec 82 76 c2 08 5f 31 77 91 75 16 3c b7 c4 d7 Data Ascii: Deasset60W3[9m;IHEj}PRwgg@P*?x?/%Qx}9ef8Yb@gi$I<k{{QgkqiY}_\?5 5 `_i'@H'f!x`f.v_1wu<
2024-01-17 17:07:13 UTC	16384	IN	Data Raw: f8 d0 27 ab 14 e7 97 73 51 99 ea a0 33 60 24 10 5b 4a 78 b6 b3 c4 10 c7 a8 5d 04 fd 27 fc 7d 54 23 be 09 ac 25 f0 d1 4f 12 06 fe 1e 3e b2 4a b0 09 cb 82 45 ac c5 f3 e8 07 bb 82 71 ba da 2a 0b c7 62 2c 30 96 c2 52 09 74 65 c0 2a 8a c3 88 95 9c 7c 3e a9 79 09 d4 fa 9a 9f 30 4a 49 28 2b d7 97 ff 7a 7b f9 fa cd f4 c9 05 68 2b 37 9c c1 08 01 cb 2f 28 f3 02 34 de 08 0c a6 34 da 38 c6 ec 48 27 33 28 96 9f 45 d9 4f 9f 12 f7 54 d2 47 a6 39 87 08 81 e9 6d 4f c1 43 97 10 bf ad 59 55 67 39 13 fe 1e 05 67 65 16 87 6c 9b f5 cb 90 60 eb 3d ea 25 09 33 8b f9 4a fb 10 ef 11 3b 7c e8 61 60 14 a0 60 b9 7c 16 e7 69 54 b1 c3 22 c0 e0 29 df c2 05 4c 8f bc f0 67 5e 04 75 33 51 9a b7 e1 61 1a 61 48 f5 c3 30 f7 62 91 d5 a8 34 39 2a 97 ff 2d f5 aa c1 c2 6c 78 e0 35 33 d1 42 b3 75 Data Ascii: 'sQ3`$[Jx]'}T#%O>JEqb,0Rte\|>y0JI(+z{h+7/(448H'3(EOTG9mOCYUg9gel`=%3J;\|a``\|iT")Lg^u3QaaH0b49*-lx53Bu
2024-01-17 17:07:13 UTC	16384	IN	Data Raw: 39 95 e2 f4 37 11 d2 bf b5 25 ed 62 af a4 32 31 b3 61 32 91 b6 52 dc e0 3a e3 3b 90 da 8d 6d e5 c2 99 3e 5c 28 d4 7d b4 bc 99 59 92 1d 1e 2f 4d 35 19 b9 3f d5 c1 f4 52 a7 67 b3 99 ff bc b7 c2 8e 7c d3 4d 9a a5 bf dc f0 20 15 b1 bc 1f 82 9a 8d 98 a7 af db 80 6b 74 e7 ab 7c e6 18 7d 9a 2b 3e 34 2d 1a e7 c0 d5 e8 b4 a0 0e d4 7d 19 bb 69 52 58 a2 33 32 78 db 4b 2d cd 54 dd d2 2b 9c a0 29 69 1a ba 4a ee 0a 4d 33 5a 7b a7 1a 83 5f f3 f7 fe 2c 2f 84 3b 39 d0 56 82 ef 75 a4 f3 69 57 af 58 09 8c 2a 1d 24 b9 4e 6b cf 63 d0 74 99 e3 02 0f 26 7f 1a 86 a9 a8 69 fa 5a d8 25 83 c1 ea f8 fd 12 62 16 86 38 17 5a 19 6f 13 03 00 e6 6a 07 a4 40 be bb 20 de a6 de bf d1 06 75 32 1f c3 4f 67 41 ad 31 bd b0 9c ee 44 47 33 2a 92 9c d3 f6 35 64 a9 b1 d3 f6 b1 c7 a7 b4 80 af ea c1 Data Ascii: 97%b21a2R:;m>\(}Y/M5?Rg\|M kt\|}+>4-}iRX32xK-T+)iJM3Z{_,/;9VuiWX$Nkct&iZ%b8Zoj@ u2OgA1DG35d
2024-01-17 17:07:13 UTC	16384	IN	Data Raw: fa 82 1f a7 1a 11 ac ad e1 0d 87 5d 09 f6 a3 a6 8d e0 9d c2 49 09 36 cf 76 1a 5c 85 ac d2 47 3c 8c 8d a8 f3 87 91 ad 05 43 31 3b fe 8c 3e 99 dc 5a 2e 69 cf 52 41 9e 48 c8 71 d7 39 94 dd f7 b6 3f 2a 48 d1 b5 2e 37 a4 97 5f 43 54 c9 8d d7 76 7a 14 e4 6f 3b 80 f7 6a 61 e8 6f 47 e9 2d cb 60 84 66 2b c0 b9 77 09 1b c0 32 5c aa 6c 0e 25 81 ed a0 5e 61 25 37 6f 3c a5 bc 1f 04 1a dd b1 04 1d c9 73 16 3a 58 a8 69 4d 12 c1 5e e9 66 5f 14 6c e4 9e d4 61 25 e1 2f c3 fc b8 ed df 80 5d 2b 3a 5b 4c 56 c9 72 1f 59 1d 6a 72 0b d2 b0 4c 8e d5 67 db 16 79 41 90 65 4f 4b 68 63 f6 d1 e5 db b6 6a 18 e6 ca 5f 04 79 2e 71 69 5d 0e 19 cc d9 f6 58 27 58 af 1c 18 04 f1 98 d2 bf 15 1e 37 ce e0 1e 88 54 83 3c 82 f8 a8 05 5f b0 1b 3f 2f 02 8f 31 a4 e9 1d ed 45 e6 e4 85 e6 b9 66 4c fd Data Ascii: ]I6v\G<C1;>Z.iRAHq9?*H.7_CTvzo;jaoG-`f+w2\l%^a%7o<s:XiM^f_la%/]+:[LVrYjrLgyAeOKhcj_y.qi]X'X7T<_?/1EfL
2024-01-17 17:07:13 UTC	14285	IN	Data Raw: db 2e 7d f9 6b 5d 3a 1d 4c 36 2c e1 a2 0a 28 ab fc c9 51 58 2d 8f 7b d5 2a d9 68 1c ba 7c 4a 4b dc 17 0d c0 dc 2d 91 32 1b 70 6b e2 13 1f 96 38 e6 e1 28 aa 7a 68 03 ee 80 b5 3b 12 61 75 e9 1b 80 49 37 e3 81 63 57 87 03 5d 30 c4 2c 68 be 29 95 24 e0 73 e2 94 ba 7c 22 47 ea b4 f3 4a ab de 10 bb 0f 22 b0 e3 03 f1 16 c4 09 e2 54 66 ca 62 e0 bd 45 b4 68 87 69 72 a9 a8 3a 28 8c ad c8 95 24 60 28 0b c5 a8 db e3 d5 17 cd 43 46 b4 fb 46 fd a3 14 49 08 2b a0 d4 0b 48 65 a7 34 02 ce 86 25 ec 4d 18 c8 06 95 b7 db ae 2c d4 04 dd 90 c7 1a 26 c2 da 18 8e c3 e7 b6 d0 48 5c c7 b0 14 4c 7c f1 b4 2a ac 33 ac 8a 9e 31 0d 6c 3e aa 0c 15 a1 45 32 ac 4e d6 6f ba 9a 27 26 95 df 33 99 0b 20 7d af b2 62 2d 9c ea d1 32 e1 30 9b 8a 31 68 6d 15 9c 98 ab c8 c6 e3 7e e5 00 84 e0 e3 a8 Data Ascii: .}k]:L6,(QX-{h\|JK-2pk8(zh;auI7cW]0,h)$s\|"GJ"TfbEhir:($`(CFFI+He4%M,&H\L\|31l>E2No'&3 }b-201hm~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.16	49874	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:13 UTC	648	OUT	GET /bundles/v1/edgeChromium/latest/common-windows-widget-shared.43a2d05d1d74cbc18745.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:13 UTC	1149	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: nJsvC4UhXdJqc9PNyvWltg== Last-Modified: Wed, 17 Jan 2024 03:10:23 GMT ETag: 0x8DC1709D8644C43 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 690c941f-701e-00d0-5af2-485ed8000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:13 GMT Content-Length: 25057 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89860118,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=89, clienttt; dur=1, origin; dur=0 , cdntime; dur=1 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b2816 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511233.55b2816 Vary: Origin
2024-01-17 17:07:13 UTC	15235	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 6f 6d 6d 6f 6e 2d 77 69 6e 64 6f 77 73 2d 77 69 64 67 65 74 2d 73 68 61 72 65 64 22 5d 2c 7b 31 36 34 32 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 69 2e 64 28 74 2c 7b 44 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 3b 76 61 72 20 6e 3d 69 28 36 36 36 35 31 29 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 22 31 2e 30 22 3d 3d 3d 6e 2e 67 4c 2e 67 65 74 28 6e 2e 49 Data Ascii: "use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["common-windows-widget-shared"],{16426:function(e,t,i){i.d(t,{D:function(){return r}});var n=i(66651);function r(){return"1.0"===n.gL.get(n.I
2024-01-17 17:07:13 UTC	9341	IN	Data Raw: 6e 28 30 2c 73 2e 5a 30 29 28 29 7c 7c 6f 2e 4d 30 2e 73 65 6e 64 41 70 70 45 72 72 6f 72 45 76 65 6e 74 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 69 29 2c 7b 70 62 3a 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 69 2e 70 62 29 2c 7b 65 72 72 6f 72 3a 65 7d 29 7d 29 29 2c 6e 75 6c 6c 7d 7d 28 22 4d 55 49 44 22 29 3b 72 65 74 75 72 6e 20 65 28 29 2c 50 28 74 2c 22 4d 55 49 44 46 72 6f 6d 57 69 64 67 65 74 49 6e 73 74 61 6e 63 65 22 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 50 28 65 2c 74 29 7b 63 6f 6e 73 74 20 69 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2c 6e 3d 69 26 26 69 Data Ascii: n(0,s.Z0)()\|\|o.M0.sendAppErrorEvent(Object.assign(Object.assign({},i),{pb:Object.assign(Object.assign({},i.pb),{error:e})})),null}}("MUID");return e(),P(t,"MUIDFromWidgetInstance"),t}function P(e,t){const i=new URLSearchParams(window.location.href),n=i&&i
2024-01-17 17:07:13 UTC	481	IN	Data Raw: 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 77 69 64 67 65 74 47 72 6f 75 70 2d 74 65 73 74 70 61 67 65 22 29 26 26 28 22 77 69 6e 57 69 64 67 65 74 73 22 3d 3d 3d 70 2e 6a 47 2e 41 70 70 54 79 70 65 7c 7c 22 77 69 6e 64 6f 77 73 4e 65 77 73 50 6c 75 73 22 3d 3d 3d 70 2e 6a 47 2e 41 70 70 54 79 70 65 29 29 29 3b 76 61 72 20 50 2c 49 2c 76 2c 53 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 5b 65 2e 6e 6f 6e 65 3d 30 5d 3d 22 6e 6f 6e 65 22 2c 65 5b 65 2e 70 72 6f 64 75 63 74 41 6e 64 53 65 72 76 69 63 65 50 65 72 66 6f 72 6d 61 6e 63 65 3d 31 36 37 37 37 32 31 36 5d 3d 22 70 72 6f 64 75 63 74 41 6e 64 53 65 72 76 69 63 65 50 65 72 66 6f 72 6d 61 6e 63 65 22 7d 28 50 7c 7c 28 50 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 5b 65 2e 41 6c 65 72 74 Data Ascii: tElementById("widgetGroup-testpage")&&("winWidgets"===p.jG.AppType\|\|"windowsNewsPlus"===p.jG.AppType)));var P,I,v,S;!function(e){e[e.none=0]="none",e[e.productAndServicePerformance=16777216]="productAndServicePerformance"}(P\|\|(P={})),function(e){e[e.Alert

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.16	49876	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:13 UTC	633	OUT	GET /bundles/v1/edgeChromium/latest/channel-store.c3f39e5ab746e5b2b068.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:13 UTC	1186	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: DlhkxgAnJynCqLcNYmMbew== Last-Modified: Sat, 13 Jan 2024 01:22:14 GMT ETag: 0x8DC13D612F1D1F8 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 3b205282-401e-0063-1cbf-45559a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:13 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Akamai-Request-BC: [a=23.218.242.10,b=89860217,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=0, origin; dur=0 , cdntime; dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b2879 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511233.55b2879 Vary: Origin
2024-01-17 17:07:13 UTC	15198	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 68 61 6e 6e 65 6c 2d 73 74 6f 72 65 22 5d 2c 7b 37 35 33 38 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 72 28 74 29 2c 69 2e 64 28 74 2c 7b 43 68 61 6e 6e 65 6c 53 74 6f 72 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 24 74 7d 2c 43 68 61 6e 6e 65 6c 53 74 6f 72 65 53 74 79 6c 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 7d 2c 43 Data Ascii: 00006000(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["channel-store"],{75387:function(e,t,i){"use strict";i.r(t),i.d(t,{ChannelStore:function(){return $t},ChannelStoreStyles:function(){return Bo},C
2024-01-17 17:07:13 UTC	9390	IN	Data Raw: 20 61 3f 21 30 3d 3d 3d 61 7c 7c 28 69 3d 4a 65 28 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 7b 69 6e 73 74 61 6e 63 65 49 64 3a 73 2c 61 67 67 72 65 67 61 74 65 64 49 64 3a 61 2e 61 67 67 72 65 67 61 74 6f 72 49 64 2c 63 75 73 74 6f 6d 4d 65 73 73 61 67 65 73 3a 61 2e 63 75 73 74 6f 6d 4d 65 73 73 61 67 65 73 7d 29 2c 7b 2e 2e 2e 61 2c 63 75 73 74 6f 6d 4d 65 73 73 61 67 65 3a 69 7d 29 3a 7b 61 70 70 45 72 72 6f 72 3a 65 2c 6d 65 73 73 61 67 65 3a 74 2c 63 75 73 74 6f 6d 4d 65 73 73 61 67 65 3a 69 2c 65 78 74 72 61 50 62 44 61 74 61 3a 6f 2c 65 72 72 6f 72 3a 6e 7d 7d 72 65 74 75 72 6e 7b 61 70 70 45 72 72 6f 72 3a 65 2c 6d 65 73 73 61 67 65 3a 74 2c 63 75 73 74 6f 6d 4d 65 73 73 61 67 65 3a 69 2c 65 78 74 72 61 50 62 44 61 74 61 3a Data Ascii: a?!0===a\|\|(i=Je(void 0,void 0,void 0,{instanceId:s,aggregatedId:a.aggregatorId,customMessages:a.customMessages}),{...a,customMessage:i}):{appError:e,message:t,customMessage:i,extraPbData:o,error:n}}return{appError:e,message:t,customMessage:i,extraPbData:
2024-01-17 17:07:13 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 61 3d 24 7b 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 29 7d 60 2c 76 6f 69 64 20 30 2c 74 68 69 73 2e 6c 6f 67 67 65 72 49 6e 73 74 61 6e 63 65 49 64 29 2c 6e 75 6c 6c 3b 63 6f 6e 73 74 20 69 3d 6e 65 77 20 4d 61 70 2c 6f 3d 6e 65 77 20 4d 61 70 2c 6e 3d 6e 65 77 20 4d 61 70 3b 6c 65 74 20 73 3d 6e 75 6c 6c 2c 72 3d 6e 75 6c 6c 2c 61 3d 6e 75 6c 6c 2c 6c 3d 6e 75 6c 6c 2c 63 3d 6e 75 6c 6c 3b 63 6f 6e 73 74 20 64 3d 74 68 69 73 2e 67 65 74 54 65 6c 65 6d 65 74 72 79 4f 62 6a 65 63 74 28 6e 74 2e 43 61 72 6f 75 73 65 6c 4e 65 78 74 2c 65 2c 7b 68 65 61 64 6c 69 6e 65 3a 6e 74 2e 43 61 72 6f 75 73 65 6c 4e 65 78 74 7d 29 3b 64 26 26 28 73 3d 64 2e 67 65 74 4d 65 74 61 64 61 74 61 54 61 67 28 29 29 3b 63 6f 6e 73 74 20 70 Data Ascii: 00006000a=${JSON.stringify(t)}`,void 0,this.loggerInstanceId),null;const i=new Map,o=new Map,n=new Map;let s=null,r=null,a=null,l=null,c=null;const d=this.getTelemetryObject(nt.CarouselNext,e,{headline:nt.CarouselNext});d&&(s=d.getMetadataTag());const p
2024-01-17 17:07:13 UTC	8204	IN	Data Raw: 69 73 2e 6e 6f 46 6f 6c 6c 6f 77 65 64 43 68 61 6e 6e 65 6c 73 3d 21 31 2c 74 68 69 73 2e 6e 6f 4d 75 74 65 64 50 75 62 6c 69 73 68 65 72 73 3d 21 31 2c 74 68 69 73 2e 73 65 6c 65 63 74 65 64 4e 61 76 49 64 3d 22 64 69 73 63 6f 76 65 72 22 2c 74 68 69 73 2e 6e 61 76 49 74 65 6d 73 3d 4a 2c 74 68 69 73 2e 66 6c 61 74 74 65 6e 65 64 4e 61 76 49 74 65 6d 73 3d 74 68 69 73 2e 6e 61 76 49 74 65 6d 73 2c 74 68 69 73 2e 6f 6e 41 70 70 45 72 72 6f 72 3d 65 3d 3e 69 65 2e 4d 30 2e 73 65 6e 64 41 70 70 45 72 72 6f 72 45 76 65 6e 74 28 65 29 2c 74 68 69 73 2e 66 65 74 63 68 46 6f 6c 6c 6f 77 65 64 54 6f 70 69 63 73 41 6e 64 50 75 62 6c 69 73 68 65 72 73 3d 61 73 79 6e 63 28 29 3d 3e 7b 61 77 61 69 74 20 74 68 69 73 2e 66 65 74 63 68 46 6f 6c 6c 6f 77 65 64 43 68 61 Data Ascii: is.noFollowedChannels=!1,this.noMutedPublishers=!1,this.selectedNavId="discover",this.navItems=J,this.flattenedNavItems=this.navItems,this.onAppError=e=>ie.M0.sendAppErrorEvent(e),this.fetchFollowedTopicsAndPublishers=async()=>{await this.fetchFollowedCha
2024-01-17 17:07:13 UTC	16384	IN	Data Raw: 30 30 30 30 35 42 37 30 0d 0a 3a 74 68 69 73 2e 63 75 72 72 65 6e 74 54 6f 70 69 63 50 61 67 65 3d 65 29 7d 7d 2c 74 68 69 73 2e 66 6f 6c 6c 6f 77 53 70 6f 72 74 73 45 6e 74 69 74 79 3d 61 73 79 6e 63 20 65 3d 3e 7b 69 66 28 65 29 7b 63 6f 6e 73 74 20 74 3d 65 2e 73 65 6c 65 63 74 65 64 3f 3f 21 31 3b 69 66 28 21 61 77 61 69 74 20 74 68 69 73 2e 66 6f 6c 6c 6f 77 43 61 6c 6c 62 61 63 6b 28 21 74 2c 65 2e 69 64 2c 49 2e 54 6f 70 69 63 2c 65 2e 74 69 74 6c 65 29 29 72 65 74 75 72 6e 20 74 68 69 73 2e 66 61 69 6c 75 72 65 49 6e 74 65 72 65 73 74 54 6f 61 73 74 28 65 2e 69 64 2c 74 3f 22 46 6f 6c 6c 6f 77 22 3a 22 55 6e 66 6f 6c 6c 6f 77 22 29 2c 21 31 3b 74 68 69 73 2e 75 70 64 61 74 65 41 63 74 69 6f 6e 73 4d 61 70 28 74 68 69 73 2e 66 6f 6c 6c 6f 77 41 63 Data Ascii: 00005B70:this.currentTopicPage=e)}},this.followSportsEntity=async e=>{if(e){const t=e.selected??!1;if(!await this.followCallback(!t,e.id,I.Topic,e.title))return this.failureInterestToast(e.id,t?"Follow":"Unfollow"),!1;this.updateActionsMap(this.followAc
2024-01-17 17:07:13 UTC	7036	IN	Data Raw: 73 22 3d 3d 65 2e 74 79 70 65 29 29 3b 74 26 26 74 2e 73 75 62 43 61 72 64 73 26 26 74 2e 73 75 62 43 61 72 64 73 2e 6c 65 6e 67 74 68 3e 30 3f 74 68 69 73 2e 74 6f 70 69 63 73 3d 74 2e 73 75 62 43 61 72 64 73 3f 3f 5b 5d 3a 69 65 2e 4d 30 2e 73 65 6e 64 41 70 70 45 72 72 6f 72 45 76 65 6e 74 28 7b 2e 2e 2e 67 2e 41 54 75 2c 6d 65 73 73 61 67 65 3a 22 45 6d 74 70 79 20 54 6f 70 69 63 73 20 6c 69 73 74 20 66 72 6f 6d 20 72 65 73 70 6f 6e 73 65 2e 22 2c 70 62 3a 7b 2e 2e 2e 67 2e 41 54 75 2e 70 62 2c 75 73 65 72 49 6d 70 61 63 74 3a 21 30 7d 7d 29 3b 63 6f 6e 73 74 20 69 3d 65 2e 66 69 6e 64 28 28 65 3d 3e 22 50 72 6f 76 69 64 65 72 73 22 3d 3d 65 2e 74 79 70 65 29 29 3b 69 26 26 69 2e 73 75 62 43 61 72 64 73 26 26 69 2e 73 75 62 43 61 72 64 73 2e 6c 65 6e Data Ascii: s"==e.type));t&&t.subCards&&t.subCards.length>0?this.topics=t.subCards??[]:ie.M0.sendAppErrorEvent({...g.ATu,message:"Emtpy Topics list from response.",pb:{...g.ATu.pb,userImpact:!0}});const i=e.find((e=>"Providers"==e.type));i&&i.subCards&&i.subCards.len
2024-01-17 17:07:13 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 67 61 70 3a 38 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 34 70 78 3b 70 61 64 64 69 6e 67 3a 32 70 78 7d 2e 74 6f 70 69 63 2d 6c 69 73 74 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 36 70 78 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 65 6e 64 3a 31 30 70 78 7d 2e 61 6e 69 6d 61 74 69 6f 6e 2d 66 61 64 65 7b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 64 65 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 38 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 6c 69 6e 65 61 72 7d 40 6b 65 79 66 72 61 6d 65 73 Data Ascii: 00004000x-direction:column;gap:8px;margin-right:4px;padding:2px}.topic-list{position:relative;margin-top:0px;margin-bottom:16px;margin-inline-end:10px}.animation-fade{animation-name:fade;animation-duration:.8s;animation-timing-function:linear}@keyframes
2024-01-17 17:07:13 UTC	12	IN	Data Raw: 77 69 6e 67 46 65 65 64 2e 67 0d 0a Data Ascii: wingFeed.g
2024-01-17 17:07:13 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 65 74 4d 65 74 61 64 61 74 61 54 61 67 28 29 7d 22 20 40 63 6c 69 63 6b 3d 24 7b 28 65 2c 74 29 3d 3e 65 2e 66 6f 6c 6c 6f 77 69 6e 67 46 65 65 64 43 6c 69 63 6b 28 74 2e 65 76 65 6e 74 29 7d 20 40 6b 65 79 70 72 65 73 73 3d 24 7b 28 65 2c 74 29 3d 3e 65 2e 66 6f 6c 6c 6f 77 69 6e 67 46 65 65 64 43 6c 69 63 6b 28 74 2e 65 76 65 6e 74 29 7d 20 74 61 62 69 6e 64 65 78 3d 22 30 22 3e 24 7b 65 3d 3e 65 2e 73 74 72 69 6e 67 73 26 26 65 2e 73 74 72 69 6e 67 73 2e 64 69 73 63 6f 76 65 72 44 65 73 63 72 69 70 74 69 6f 6e 4c 69 6e 6b 7d 3c 2f 73 70 61 6e 3e 24 7b 65 3d 3e 65 2e 73 74 72 69 6e 67 73 26 26 65 2e 73 74 72 69 6e 67 73 2e 64 69 73 63 6f 76 65 72 44 65 73 63 72 69 70 74 69 6f 6e 2e 73 70 6c 69 74 28 22 7b 30 7d 22 29 5b 31 Data Ascii: 00006000etMetadataTag()}" @click=${(e,t)=>e.followingFeedClick(t.event)} @keypress=${(e,t)=>e.followingFeedClick(t.event)} tabindex="0">${e=>e.strings&&e.strings.discoverDescriptionLink}</span>${e=>e.strings&&e.strings.discoverDescription.split("{0}")[1
2024-01-17 17:07:13 UTC	8204	IN	Data Raw: 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 65 78 70 65 72 69 65 6e 63 65 2d 6c 69 6e 6b 20 64 69 76 7b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 73 74 61 72 74 3a 34 70 78 7d 2e 65 78 70 65 72 69 65 6e 63 65 2d 6c 69 6e 6b 20 73 76 67 7b 77 69 64 74 68 3a 32 30 70 78 3b 68 65 69 67 68 74 3a 32 30 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 34 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 62 6f 74 74 6f 6d 3a 37 70 78 3b 66 69 6c 6c 3a 24 7b 77 6f 2e 44 39 7d 7d 2e 6c 65 66 74 2d 6e 61 76 2d 74 72 65 65 2d 69 74 65 6d 20 73 76 67 7b 77 69 64 74 68 3a 32 30 70 78 3b 68 65 69 67 68 74 3a 32 30 70 78 7d 2e 73 65 6c 65 63 74 65 64 20 73 76 67 7b 66 69 Data Ascii: nt-size:14px;cursor:pointer}.experience-link div{margin-inline-start:4px}.experience-link svg{width:20px;height:20px;padding-left:4px;position:absolute;font-size:14px;bottom:7px;fill:${wo.D9}}.left-nav-tree-item svg{width:20px;height:20px}.selected svg{fi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.16	49878	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:13 UTC	633	OUT	GET /bundles/v1/edgeChromium/latest/edge-shopping.24a021aa8f84839027f3.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:13 UTC	1149	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: WQOYwcwafnhwrSDhLXSvHQ== Last-Modified: Mon, 08 Jan 2024 16:46:14 GMT ETag: 0x8DC106953F5B6A6 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 456df752-001e-00df-5b52-42d7c7000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:13 GMT Content-Length: 28694 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89860392,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=92, clienttt; dur=0, origin; dur=0 , cdntime; dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b2928 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511233.55b2928 Vary: Origin
2024-01-17 17:07:13 UTC	15235	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 65 64 67 65 2d 73 68 6f 70 70 69 6e 67 22 5d 2c 7b 37 32 32 39 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 69 2e 72 28 74 29 2c 69 2e 64 28 74 2c 7b 45 64 67 65 53 68 6f 70 70 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 7d 2c 45 64 67 65 53 68 6f 70 70 69 6e 67 53 74 79 6c 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 65 7d 2c 45 64 67 65 53 68 6f 70 70 69 6e 67 Data Ascii: "use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["edge-shopping"],{72298:function(e,t,i){i.r(t),i.d(t,{EdgeShopping:function(){return I},EdgeShoppingStyles:function(){return me},EdgeShopping
2024-01-17 17:07:13 UTC	9341	IN	Data Raw: 70 3a 30 7d 2e 61 72 72 6f 77 48 65 61 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 37 38 44 34 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 33 70 78 3b 68 65 69 67 68 74 3a 31 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 36 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 61 72 72 6f 77 54 65 78 74 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 70 78 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 Data Ascii: p:0}.arrowHead{background-color:#0078D4;border-bottom-left-radius:3px;border-top-left-radius:3px;height:16px;line-height:16px;display:inline-block;position:relative}.arrowText{padding-left:2px;font-style:normal;font-weight:700;font-size:12px;color:#FFFFFF
2024-01-17 17:07:13 UTC	4118	IN	Data Raw: 6f 70 70 69 6e 67 49 6e 66 6f 3d 22 24 7b 65 3d 3e 65 2e 63 75 72 72 65 6e 74 53 68 6f 70 70 69 6e 67 44 61 74 61 7d 22 20 3a 72 65 6e 64 65 72 53 74 61 74 65 3d 22 24 7b 65 3d 3e 65 2e 72 65 6e 64 65 72 53 74 61 74 65 7d 22 20 3a 77 72 61 70 70 65 72 43 6f 6d 70 6f 6e 65 6e 74 3d 22 24 7b 65 3d 3e 28 7b 66 6c 79 6f 75 74 57 69 64 74 68 3a 65 2e 77 69 64 74 68 2c 6f 6e 43 6c 6f 73 65 64 3a 65 2e 6f 6e 43 6c 6f 73 65 64 2c 72 65 71 75 65 73 74 4f 70 65 6e 3a 65 2e 68 6f 76 65 72 46 6c 79 6f 75 74 4f 70 65 6e 2c 74 61 72 67 65 74 52 65 63 74 3a 65 2e 74 61 72 67 65 74 52 65 63 74 7d 29 7d 22 3e 3c 2f 65 64 67 65 2d 73 68 6f 70 70 69 6e 67 2d 63 61 72 64 3e 60 29 7d 0a 60 2c 67 65 3d 75 2e 64 79 60 0a 24 7b 65 3d 3e 65 2e 72 65 6e 64 65 72 53 74 61 74 65 3d Data Ascii: oppingInfo="${e=>e.currentShoppingData}" :renderState="${e=>e.renderState}" :wrapperComponent="${e=>({flyoutWidth:e.width,onClosed:e.onClosed,requestOpen:e.hoverFlyoutOpen,targetRect:e.targetRect})}"></edge-shopping-card>`)}`,ge=u.dy`${e=>e.renderState=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.16	49879	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:13 UTC	720	OUT	GET /bundles/v1/edgeChromium/latest/libs_ads-constants_dist_AdsFlights_js-libs_ads-utils_dist_logging_sendAdImageLoadError_js-lib-45f8f9.d95a2091d2ab871e1d9e.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:13 UTC	1149	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: hNhFTc4rnCFdxcWWF8VJpw== Last-Modified: Sat, 13 Jan 2024 01:22:13 GMT ETag: 0x8DC13D612D21195 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: a3d7fb6c-701e-00ec-0fbf-458bd0000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:13 GMT Content-Length: 30627 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89860391,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=1, origin; dur=0 , cdntime; dur=1 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b2927 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511233.55b2927 Vary: Origin
2024-01-17 17:07:13 UTC	15235	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6c 69 62 73 5f 61 64 73 2d 63 6f 6e 73 74 61 6e 74 73 5f 64 69 73 74 5f 41 64 73 46 6c 69 67 68 74 73 5f 6a 73 2d 6c 69 62 73 5f 61 64 73 2d 75 74 69 6c 73 5f 64 69 73 74 5f 6c 6f 67 67 69 6e 67 5f 73 65 6e 64 41 64 49 6d 61 67 65 4c 6f 61 64 45 72 72 6f 72 5f 6a 73 2d 6c 69 62 2d 34 35 66 38 66 39 22 2c 22 6c 69 62 73 5f 61 64 73 2d 63 6f 6e 73 74 61 6e 74 73 5f 64 69 73 74 5f 41 64 73 46 6c 69 67 68 74 73 5f 6a 73 2d 6c 69 62 73 5f 61 64 73 2d 75 74 69 Data Ascii: (self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["libs_ads-constants_dist_AdsFlights_js-libs_ads-utils_dist_logging_sendAdImageLoadError_js-lib-45f8f9","libs_ads-constants_dist_AdsFlights_js-libs_ads-uti
2024-01-17 17:07:13 UTC	9341	IN	Data Raw: 65 43 6f 6e 74 65 6e 74 44 61 74 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 66 69 6e 64 49 6e 64 65 78 28 28 74 3d 3e 74 2e 69 64 3d 3d 3d 6f 29 29 2c 64 3d 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 69 6e 66 6f 70 61 6e 65 2d 63 68 61 6e 67 65 22 2c 7b 64 65 74 61 69 6c 3a 7b 61 63 74 69 76 65 49 6e 64 65 78 3a 73 7d 7d 29 3b 64 6f 63 75 6d 65 6e 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 64 29 7d 68 61 6e 64 6c 65 49 6e 66 6f 70 61 6e 65 46 6c 69 70 4e 65 78 74 28 74 29 7b 69 66 28 21 74 68 69 73 2e 64 61 74 61 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 64 61 74 61 2e 63 61 72 64 45 6c 65 6d 65 6e 74 3b 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2e 61 64 6a 75 73 74 Data Ascii: eContentData)\|\|void 0===a?void 0:a.findIndex((t=>t.id===o)),d=new CustomEvent("infopane-change",{detail:{activeIndex:s}});document.dispatchEvent(d)}handleInfopaneFlipNext(t){if(!this.data)return;const e=this.data.cardElement;e&&"function"==typeof e.adjust
2024-01-17 17:07:13 UTC	6051	IN	Data Raw: 69 6e 68 65 72 69 74 7d 5b 73 69 7a 65 3d 22 5f 31 78 5f 32 79 22 5d 20 2e 76 61 2d 74 69 74 6c 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 76 61 2d 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 5b 73 69 7a 65 3d 22 5f 31 78 5f 32 79 22 5d 20 2e 76 61 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 70 78 7d 5b 73 69 7a 65 3d 22 5f 32 78 5f 32 79 22 5d 20 2e 76 61 2d 63 6f 6e 74 61 69 6e 65 72 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 2e 63 6f 6c 75 6d 6e 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 7d 2e 61 73 73 65 74 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 5b 73 69 7a 65 3d 22 5f 31 78 5f Data Ascii: inherit}[size="_1x_2y"] .va-title{font-size:18px !important}.va-container{display:flex}[size="_1x_2y"] .va-container{margin-top:4px}[size="_2x_2y"] .va-container{align-items:center}.column{display:flex;flex-direction:column}.asset{display:flex}[size="_1x_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.16	49880	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:13 UTC	720	OUT	GET /bundles/v1/edgeChromium/latest/libs_ads-constants_dist_AdsFlights_js-libs_ads-utils_dist_logging_sendAdImageLoadError_js-lib-e9c969.26a84d1571f555d023ba.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:13 UTC	1149	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: BGanLb+x5EP1fM9Y4fXpGQ== Last-Modified: Sat, 13 Jan 2024 01:22:13 GMT ETag: 0x8DC13D6127F459B Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: e85c0916-201e-00e1-7bbf-4554cb000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:13 GMT Content-Length: 15890 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89860460,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=0, origin; dur=0 , cdntime; dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b296c Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511233.55b296c Vary: Origin
2024-01-17 17:07:13 UTC	15235	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6c 69 62 73 5f 61 64 73 2d 63 6f 6e 73 74 61 6e 74 73 5f 64 69 73 74 5f 41 64 73 46 6c 69 67 68 74 73 5f 6a 73 2d 6c 69 62 73 5f 61 64 73 2d 75 74 69 6c 73 5f 64 69 73 74 5f 6c 6f 67 67 69 6e 67 5f 73 65 6e 64 41 64 49 6d 61 67 65 4c 6f 61 64 45 72 72 6f 72 5f 6a 73 2d 6c 69 62 2d 65 39 63 39 36 39 22 2c 22 6c 69 62 73 5f 61 64 73 2d 63 6f 6e 73 74 61 6e 74 73 5f 64 69 73 74 5f 41 64 73 46 6c 69 67 68 74 73 5f 6a 73 2d 6c 69 62 73 5f 61 64 73 2d 75 74 69 Data Ascii: (self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["libs_ads-constants_dist_AdsFlights_js-libs_ads-utils_dist_logging_sendAdImageLoadError_js-lib-e9c969","libs_ads-constants_dist_AdsFlights_js-libs_ads-uti
2024-01-17 17:07:13 UTC	655	IN	Data Raw: 36 30 29 2c 72 3d 69 28 33 35 30 36 36 29 2c 73 3d 69 28 32 33 38 35 37 29 2c 6f 3d 69 28 36 38 30 32 35 29 2c 61 3d 69 28 38 36 31 37 36 29 2c 6c 3d 69 28 37 31 31 35 35 29 2c 63 3d 4d 61 74 68 2e 6d 69 6e 3b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 66 6f 72 28 76 61 72 20 64 3d 69 3f 6f 2e 5a 3a 73 2e 5a 2c 75 3d 74 5b 30 5d 2e 6c 65 6e 67 74 68 2c 70 3d 74 2e 6c 65 6e 67 74 68 2c 68 3d 70 2c 67 3d 41 72 72 61 79 28 70 29 2c 66 3d 31 2f 30 2c 6d 3d 5b 5d 3b 68 2d 2d 3b 29 7b 76 61 72 20 76 3d 74 5b 68 5d 3b 68 26 26 65 26 26 28 76 3d 28 30 2c 6e 2e 5a 29 28 76 2c 28 30 2c 61 2e 5a 29 28 65 29 29 29 2c 66 3d 63 28 76 2e 6c 65 6e 67 74 68 2c 66 29 2c 67 5b 68 5d 3d 21 69 26 26 28 65 7c 7c 75 3e 3d 31 32 30 26 26 76 2e 6c 65 6e 67 Data Ascii: 60),r=i(35066),s=i(23857),o=i(68025),a=i(86176),l=i(71155),c=Math.min;var d=function(t,e,i){for(var d=i?o.Z:s.Z,u=t[0].length,p=t.length,h=p,g=Array(p),f=1/0,m=[];h--;){var v=t[h];h&&e&&(v=(0,n.Z)(v,(0,a.Z)(e))),f=c(v.length,f),g[h]=!i&&(e\|\|u>=120&&v.leng

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.16	49882	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:13 UTC	667	OUT	GET /bundles/v1/edgeChromium/latest/node_modules_sortablejs_modular_sortable_esm_js.6985524dca6d732452d7.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:13 UTC	1149	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: qA7jRqtpQG4FyfC7151HiQ== Last-Modified: Wed, 17 Jan 2024 03:10:20 GMT ETag: 0x8DC1709D6995948 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 31186164-b01e-000c-1538-499ea7000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:13 GMT Content-Length: 44857 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89860876,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=0, origin; dur=0 , cdntime; dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b2b0c Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511233.55b2b0c Vary: Origin
2024-01-17 17:07:13 UTC	15235	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 73 6f 72 74 61 62 6c 65 6a 73 5f 6d 6f 64 75 6c 61 72 5f 73 6f 72 74 61 62 6c 65 5f 65 73 6d 5f 6a 73 2e 36 39 38 35 35 32 34 64 63 61 36 64 37 33 32 34 35 32 64 37 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 73 Data Ascii: /! For license information please see node_modules_sortablejs_modular_sortable_esm_js.6985524dca6d732452d7.js.LICENSE.txt /"use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["node_modules_s
2024-01-17 17:07:14 UTC	9341	IN	Data Raw: 74 61 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 73 65 74 44 61 74 61 28 22 54 65 78 74 22 2c 65 2e 74 65 78 74 43 6f 6e 74 65 6e 74 29 7d 2c 64 72 6f 70 42 75 62 62 6c 65 3a 21 31 2c 64 72 61 67 6f 76 65 72 42 75 62 62 6c 65 3a 21 31 2c 64 61 74 61 49 64 41 74 74 72 3a 22 64 61 74 61 2d 69 64 22 2c 64 65 6c 61 79 3a 30 2c 64 65 6c 61 79 4f 6e 54 6f 75 63 68 4f 6e 6c 79 3a 21 31 2c 74 6f 75 63 68 53 74 61 72 74 54 68 72 65 73 68 6f 6c 64 3a 28 4e 75 6d 62 65 72 2e 70 61 72 73 65 49 6e 74 3f 4e 75 6d 62 65 72 3a 77 69 6e 64 6f 77 29 2e 70 61 72 73 65 49 6e 74 28 77 69 6e 64 6f 77 2e 64 65 76 69 63 65 50 69 78 65 6c 52 61 74 69 6f 2c 31 30 29 7c 7c 31 2c 66 6f 72 63 65 46 61 6c 6c 62 61 63 6b 3a 21 31 2c 66 61 6c 6c 62 61 63 6b 43 6c 61 73 73 3a 22 Data Ascii: ta:function(t,e){t.setData("Text",e.textContent)},dropBubble:!1,dragoverBubble:!1,dataIdAttr:"data-id",delay:0,delayOnTouchOnly:!1,touchStartThreshold:(Number.parseInt?Number:window).parseInt(window.devicePixelRatio,10)\|\|1,forceFallback:!1,fallbackClass:"
2024-01-17 17:07:14 UTC	16384	IN	Data Raw: 68 69 6c 64 28 4a 29 29 2c 48 28 21 30 29 3b 76 61 72 20 76 3d 6b 28 61 2c 73 2e 64 72 61 67 67 61 62 6c 65 29 3b 69 66 28 21 76 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 6f 3d 4e 28 6b 28 6e 2e 65 6c 2c 6e 2e 6f 70 74 69 6f 6e 73 2e 64 72 61 67 67 61 62 6c 65 29 29 2c 69 3d 31 30 3b 72 65 74 75 72 6e 20 65 3f 74 2e 63 6c 69 65 6e 74 58 3e 6f 2e 72 69 67 68 74 2b 69 7c 7c 74 2e 63 6c 69 65 6e 74 58 3c 3d 6f 2e 72 69 67 68 74 26 26 74 2e 63 6c 69 65 6e 74 59 3e 6f 2e 62 6f 74 74 6f 6d 26 26 74 2e 63 6c 69 65 6e 74 58 3e 3d 6f 2e 6c 65 66 74 3a 74 2e 63 6c 69 65 6e 74 58 3e 6f 2e 72 69 67 68 74 26 26 74 2e 63 6c 69 65 6e 74 59 3e 6f 2e 74 6f 70 7c 7c 74 2e 63 6c 69 65 6e 74 58 3c 3d 6f 2e 72 69 67 68 74 26 26 74 2e 63 6c 69 65 6e 74 Data Ascii: hild(J)),H(!0);var v=k(a,s.draggable);if(!v\|\|function(t,e,n){var o=N(k(n.el,n.options.draggable)),i=10;return e?t.clientX>o.right+i\|\|t.clientX<=o.right&&t.clientY>o.bottom&&t.clientX>=o.left:t.clientX>o.right&&t.clientY>o.top\|\|t.clientX<=o.right&&t.client
2024-01-17 17:07:14 UTC	3897	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 75 5b 76 5d 3f 6f 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 74 2c 75 5b 76 5d 29 3a 6f 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2c 76 2b 2b 7d 29 29 2c 61 3d 3d 3d 52 28 70 65 29 29 29 7b 76 61 72 20 6d 3d 21 31 3b 6d 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 73 6f 72 74 61 62 6c 65 49 6e 64 65 78 3d 3d 3d 52 28 74 29 7c 7c 28 6d 3d 21 30 29 7d 29 29 2c 6d 26 26 72 28 22 75 70 64 61 74 65 22 29 7d 6d 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 4b 28 74 29 7d 29 29 2c 73 2e 61 6e 69 6d 61 74 65 41 6c 6c 28 29 7d 66 65 3d 73 7d 28 6e 3d 3d 3d 6f 7c 7c 6c 26 26 22 63 6c 6f 6e 65 22 21 3d 3d 6c 2e 6c 61 73 74 50 75 74 4d 6f 64 65 29 26 26 62 65 2e 66 6f 72 45 Data Ascii: (function(t){u[v]?o.insertBefore(t,u[v]):o.appendChild(t),v++})),a===R(pe))){var m=!1;me.forEach((function(t){t.sortableIndex===R(t)\|\|(m=!0)})),m&&r("update")}me.forEach((function(t){K(t)})),s.animateAll()}fe=s}(n===o\|\|l&&"clone"!==l.lastPutMode)&&be.forE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.16	49881	184.87.173.82	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:13 UTC	659	OUT	GET /cms/api/am/imageFileData/RW198v0?ver=d539 HTTP/1.1 Host: img-prod-cms-rt-microsoft-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:13 UTC	620	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://image.prod.cms.rt.microsoft.com/cms/api/am/imageFileData/RW198v0?ver=d539 Last-Modified: Thu, 04 Jan 2024 23:34:07 GMT X-Source-Length: 450646 X-Datacenter: eastus X-ActivityId: 5714ec41-d3bd-4505-8f1b-381ad18d9003 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 450646 Cache-Control: public, max-age=109713 Expires: Thu, 18 Jan 2024 23:35:46 GMT Date: Wed, 17 Jan 2024 17:07:13 GMT Connection: close Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
2024-01-17 17:07:13 UTC	15764	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 2d 00 00 ff e1 03 7f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 33 36 30 2c 20 32 30 32 30 2f 30 32 2f 31 33 2d 30 31 3a 30 37 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky-http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xm
2024-01-17 17:07:13 UTC	16384	IN	Data Raw: 55 44 75 60 b6 a0 41 37 69 5c 14 9d 6a 02 d1 d5 74 a8 51 76 4b 50 9d 6f 4d b2 5e 97 74 d6 a8 05 da 06 b8 c1 e9 45 02 88 ab a5 24 40 b8 8c f3 a8 28 45 32 45 41 51 49 02 fc 2a 01 b1 a3 3a 0b 50 6d ad 52 0c c2 dc 29 b0 34 bd 22 86 d4 d2 3e 95 96 54 5c 9a ad eb 89 bd 50 9a 14 b1 6a 82 6a 97 a9 a1 09 bd 45 eb ad 50 4d 00 36 63 51 73 57 28 4e b5 52 2d 54 15 2c 6a 37 d4 1a a9 53 42 05 57 a2 06 a0 2a 9a 2a 29 bd 0a 35 1f 0d 68 db 2e 28 31 a9 b5 35 10 e5 59 65 40 19 75 aa 15 a6 e4 8e 82 56 92 05 ca 9a a5 b5 a6 8a de ab db f6 aa 00 05 15 49 23 52 28 e5 2d 43 60 68 41 17 4d 6d 41 22 c6 9d 75 a0 3c 57 3a 56 93 20 30 48 ab 6e bd 5b 60 1a 1a a1 16 a0 2c ac 6a 4b 1a 84 ab 91 40 50 31 ab 86 35 0b 61 53 6b d4 01 12 4b 1a 37 74 52 c5 4d 57 73 0a 14 70 4b 52 cd 75 a4 84 b4 Data Ascii: UDu`A7i\jtQvKPoM^tE$@(E2EAQI:PmR)4">T\PjjEPM6cQsW(NR-T,j7SBW*)5h.(15Ye@uVI#R(-C`hAMmA"u<W:V 0Hn[`,jK@P15aSkK7tRMWspKRu
2024-01-17 17:07:13 UTC	3154	IN	Data Raw: 41 ad b8 91 5e 28 e5 3a b9 5d 4d b9 d2 f7 3f 2e ba 0d 2b a0 ca 10 2f ea fc a4 d8 db 8f 1d 3e ea 36 d8 50 87 e5 8d 24 86 c4 5d b4 1a 8b f2 ac f6 83 1d 8e d2 bd b7 1e 83 8f b5 68 ac 1f ad dd de 59 76 d9 54 7c ba fe 6a cd ca 3d bc d1 73 61 b8 7c 2a 53 58 35 c8 b0 98 2c 48 3b 92 97 55 ba e9 b2 fc c8 3c 7e 14 ec f2 a4 4c 51 ca ef 37 dc 07 0a 2c 11 ab 36 e1 a2 b7 cc a3 f9 7c 69 7c cc 7d 90 84 48 c0 2f e9 cb d6 fe b4 6f d5 0c 25 e9 90 1f 51 19 bc ac d7 8d 34 41 b6 df 6d a9 4c 9f 29 3b 10 89 65 d3 a9 86 bf 60 ad 11 e3 a3 78 d7 7d b6 8d 48 a5 e6 f1 d8 fb ba 09 4f 71 5b 4e a6 5a b4 08 a1 91 d7 6d ec 5b 9f 01 a5 5e 44 ed 4b 1e d3 b8 dc 59 b9 de b4 13 06 11 16 e7 90 aa af 3d 35 a4 f2 16 32 6e 86 ea 0e 97 3a de b6 ad 26 5a 8d 47 7c 6f 99 cf 8b 34 3c 32 b6 34 e9 a0 96 Data Ascii: A^(:]M?.+/>6P$]hYvT\|j=sa\|*SX5,H;U<~LQ7,6\|i\|}H/o%Q4AmL);e`x}HOq[NZm[^DKY=52n:&ZG\|o4<24
2024-01-17 17:07:13 UTC	16384	IN	Data Raw: fd 9f 85 09 93 88 24 0b eb ea 2a a6 46 84 8c 50 30 ea 25 47 2d 34 fe 34 bb 62 3e eb c6 43 8f 41 c6 9d 28 07 4b 0e 91 c3 98 aa 05 00 8d ba fb 0d 4f e1 5d 55 da 30 ea 0b 0f 07 2b 33 26 3c 3c 68 8c 99 33 36 d4 8c 71 27 ed ad 2c ff 00 da 7f b9 3c 72 ee c8 c1 90 a1 fc f1 0e ea fd bd bb db ed ae 83 17 35 dd 4a a7 6e df 99 ba 7f df 5b 58 be 57 ce 62 74 c3 e5 25 45 03 44 be f1 a6 9a 2c bb ad 51 fb 84 9f 40 b8 9b 3c 4b 86 bd 9b 88 d0 df 8d 55 22 79 1b 6c 6a 5d bd 14 5e bd 5e 6c 27 3f 25 b3 32 57 ea 32 a4 23 b9 23 e9 7b 68 3a 52 c3 f0 a9 fa 61 1a 81 70 80 f0 44 b2 2f b7 0f ed a8 fd ca e8 8b f6 59 83 8f e1 e4 73 fa c7 67 f7 06 ad fe ea d4 8b 1f 17 15 6c ab 63 6d 75 b9 3f 6d 31 da 45 e9 1a 5f 5d 07 1f 89 a9 18 fb c5 c0 b8 f6 e2 6b 9d f9 a7 57 83 75 e3 4b 44 26 f9 3b Data Ascii: $*FP0%G-44b>CA(KO]U0+3&<<h36q',<r5Jn[XWbt%ED,Q@<KU"ylj]^^l'?%2W2##{h:RapD/Ysglcmu?m1E_]kWuKD&;
2024-01-17 17:07:13 UTC	16384	IN	Data Raw: 91 86 fb ad a6 b4 c6 2a 87 8e f6 1c 7a 8f 03 af 1d 29 6d 13 15 d6 0c e4 20 4c 8d a8 17 17 03 5e 7c a9 8f 25 b4 b2 32 9b 8d 47 dc 79 d5 3b 3b 24 20 8d 11 87 b1 d2 8b 91 06 e8 22 70 47 5b bd 87 03 c6 f5 ac 4a 66 73 0c 16 63 59 99 4e ba 2f d8 6c 2b 3c 15 0d af 0b eb 4e 64 c9 bb 27 5d 41 00 1f 4d 29 66 5d 3d 2f eb c2 b7 55 83 9d 9e 49 56 0b 2e e6 17 5b eb 4d 4b 13 c4 82 51 6d 08 20 ff 00 6d 22 37 29 db 71 6b fa db 85 30 d3 bc ab b5 9b 50 38 7b 54 b5 72 8b 5b 28 72 4e 23 7e b9 20 5c b1 e7 e8 2b 56 25 56 24 fc 9c bf da ff 00 1a c9 c0 46 52 cc 6f d6 c4 80 2e 6c b5 b1 10 dc 55 01 ba 02 09 fb b8 1a e5 c9 a9 d3 8f 28 87 85 ca 93 7b 83 ad b9 eb ce 82 8a 43 e8 07 50 e5 ce b4 55 51 01 0d ad b4 17 1f 81 a4 b3 10 a4 a5 81 d4 6a 39 5e b9 2c 9d 74 1c c4 5d d8 ee 8c 35 8c Data Ascii: *z)m L^\|%2Gy;;$ "pG[JfscYN/l+<Nd']AM)f]=/UIV.[MKQm m"7)qk0P8{Tr[(rN#~ \+V%V$FRo.lU({CPUQj9^,t]5
2024-01-17 17:07:13 UTC	7952	IN	Data Raw: ca 08 fe 74 cb 9b 35 8f 31 7d 7f 1a ac 91 96 3b 94 6e da 2e c3 d6 b4 b4 33 d4 1c b0 b7 68 64 a0 da f1 ea 4b 0b 74 8f 98 7c 29 58 f7 b3 87 8c ed 42 6e 74 bd c5 6a c7 b4 28 6b ee 8d f8 9e 36 3c 2d a5 24 d1 ec 91 c0 f9 18 dc 5f 91 ab 47 a9 9b ad 18 c6 38 4e 23 89 16 a6 96 db 86 bc 6f a5 29 16 8d 61 eb 4e 47 6f 81 1c 6a b5 90 99 59 f1 d6 58 9a 36 1d 2c 08 3f 6d 79 7c ec 11 e3 2c 60 52 44 8d 73 1e 9b 1b 8d f8 f3 af 62 cb 75 a4 72 f1 d6 55 31 c8 a1 d1 bf 29 a2 33 63 13 c7 e4 a6 4b 47 93 16 f8 9d 49 50 48 db a8 e1 7f 7a f4 ca f1 e7 41 b4 b6 d9 56 db d7 4b 86 e4 d6 f4 ac 04 83 b2 a2 2f 9d 54 95 07 83 01 c0 5f e1 4c c4 d2 c3 da c9 8d b7 3c 67 a8 7f 52 73 06 ad ab 3e 62 96 8d 46 d4 36 f7 85 c1 0e 9c fe 34 bc e4 a9 36 e1 7d 4f b5 6d c9 0c 59 31 a4 d1 f1 db b9 1b d4 Data Ascii: t51};n.3hdKt\|)XBntj(k6<-$_G8N#o)aNGojYX6,?my\|,`RDsburU1)3cKGIPHzAVK/T_L<gRs>bF646}OmY1
2024-01-17 17:07:13 UTC	16384	IN	Data Raw: de d6 d0 7c 29 02 44 40 33 ee 72 18 8b 83 6b 69 fd 3e b5 a7 1c 8e 64 28 ea 23 2b a9 7b d8 8f b2 ad 26 3a 4c d6 b2 bb 5b a8 69 cb ed d7 ec ad ab a3 3b 58 81 40 d0 fe 9e ae 4e ed dc ed ef 42 41 25 af b8 23 83 a1 e1 7f 85 a8 f3 24 b8 b3 6c 61 70 57 75 b5 ea 07 d0 8b d5 e1 50 c0 3c d0 9d 9c c8 7b 15 f4 e9 ff 00 7d 1d a1 48 4b a0 de 26 79 37 49 ec 1a d6 bd f8 8f 7b 50 72 63 28 dd e8 45 d0 f1 00 f0 f6 a6 3e 8e 09 23 26 2e 03 e5 b1 b8 bd 2d 33 4b 8e 42 b0 bf a5 63 8f 9a 96 6d 2c 3e cc 59 35 a9 55 6e f2 d9 87 59 1d 36 1a 69 53 1d a3 d4 96 4d 87 52 35 23 df ed a0 77 2c c1 a3 b2 d8 df 6d ec 35 f6 e1 4c 99 43 c6 79 3a eb 7f 53 6e 75 d5 99 43 11 b6 e6 d5 ad ba e7 d4 1b 6b f6 54 98 a3 93 e6 5d af c8 a8 e1 f1 a5 21 95 41 03 4d bf 9b 91 fc 45 3e ac 5d 6f c8 70 06 c1 be Data Ascii: \|)D@3rki>d(#+{&:L[i;X@NBA%#$lapWuP<{}HK&y7I{Prc(E>#&.-3KBcm,>Y5UnY6iSMR5#w,m5LCy:SnuCkT]!AME>]op
2024-01-17 17:07:13 UTC	16384	IN	Data Raw: dc 25 e2 d9 16 de e6 62 e3 ce 76 3a b9 4f ee b2 e8 69 b5 4f ea 00 fc 2a cd f5 80 74 61 ca e3 d5 94 de ab 1b 67 b1 20 e0 c8 2d cc 7f e1 5e 95 ed b9 9a 52 bf 14 5d d5 5d 41 64 63 77 90 a2 48 d1 5f f3 0b 13 4a 1f 19 20 8d 51 e6 69 02 70 7b 90 4f c6 d5 b0 8b 99 6b 1c 39 af 6f 40 7f 98 ab 3a 65 80 09 c5 94 7b 94 ff 00 7d 74 af 0f 35 54 25 f9 07 b1 e4 f3 cb e3 fc 8a ba f6 a7 51 08 3d 60 df 7b 7f c5 ca 99 4c 07 fc e0 b9 fc ac c4 1b 7b 68 06 95 a5 6c bd fa e2 ca 41 f4 4b eb cb f3 73 a2 ac 39 8c 2d f4 33 5c 7f 73 ff 00 ca ad 3a fb 8b 61 ad 3c 91 22 8b a9 86 7c 64 7b af 24 29 25 cd c0 b7 01 4b 4f e2 f1 44 bd d9 54 15 03 60 07 f2 8f c6 bd 31 c3 ce e2 70 a7 d7 d2 30 7f fa a8 6f e3 73 a4 5f ff 00 06 c8 05 b8 30 89 41 1f 79 ad 56 9c f3 d5 7c 48 d5 0f 34 c3 18 10 13 29 Data Ascii: %bv:OiO*tag -^R]]AdcwH_J Qip{Ok9o@:e{}t5T%Q=`{L{hlAKs9-3\s:a<"\|d{$)%KODT`1p0os_0AyV\|H4)
2024-01-17 17:07:13 UTC	7952	IN	Data Raw: 78 b1 c6 c7 ca 76 eb 01 54 42 17 78 b7 1d 0d 81 17 a4 f3 9a 2f a8 8d f1 d1 e2 05 8b 49 2e eb b1 36 e1 b4 5c 0e 1f 8d 73 a5 6b 68 49 3c 68 de 52 68 2c db 26 84 11 47 1e 37 d3 26 41 8b 61 df 26 e7 dd ba fa 14 16 e0 07 a1 d6 a2 20 a9 33 64 c5 24 6b 6b 19 03 35 ae 18 d8 e8 35 14 a0 cb 2c 83 29 3f 4f b8 f6 ec f6 d7 68 d9 61 66 3a de fe f5 dd e2 e0 a3 05 8d ad 65 55 22 da f1 16 e2 07 c2 a3 e3 b6 65 eb f5 7f fe 8d ba a9 93 d0 c3 90 1e 14 2a 3b 8e ec 36 15 65 f9 01 b7 32 6f f3 51 56 61 0b 3d 83 b9 77 da e2 c4 e9 62 ca c3 d8 57 93 83 3a 5c 6d 00 2c a5 ee 1c 29 00 1e 5a 93 ae be d5 a9 86 f9 39 64 f7 4b 45 22 8b 46 75 50 c7 77 ca 2d 6d a3 68 35 c3 97 da 6d 96 da db fc 7e 46 6c 95 a1 25 93 59 f0 a1 1e 46 29 d6 ea 1c 86 70 ba 5c 9f 9a d6 fc 69 ac 9c 17 2d 8e b2 4f 32 Data Ascii: xvTBx/I.6\skhI<hRh,&G7&Aa& 3d$kk55,)?Ohaf:eU"e*;6e2oQVa=wbW:\m,)Z9dKE"FuPw-mh5m~Fl%YF)p\i-O2
2024-01-17 17:07:14 UTC	14330	IN	Data Raw: 07 8d 5d cd 53 6b ac 6e 9b 44 74 49 43 78 92 2e 36 f4 e8 7a 1f 13 e5 33 a6 4f 21 93 8b b8 e5 49 21 dd 28 be e9 11 00 52 77 15 21 78 f5 49 61 b7 86 a6 d5 9d 24 5e 3a 4e e2 a8 96 7c f9 64 52 d9 51 d8 e3 40 a8 3f 59 55 48 b4 84 5e c1 98 71 e7 58 0f 97 27 8e ee e1 63 e4 36 4a ee 3d d9 59 8d 9a e6 f6 55 07 d7 ef 34 78 1f 2a 25 99 71 af 77 85 9e 7e 9e 95 50 2e db cd 8f d9 5a 73 1d d3 4f 6e ef 1e b1 d0 c5 95 97 a7 51 ac 53 95 95 e4 12 3c 4c 63 b1 08 4e d6 3a ee 95 d1 45 da 49 48 52 0b 15 6f 9e dd 35 ed bc d6 46 04 18 69 9f 3c d0 ce 02 b4 18 70 33 46 ab dd 75 10 f7 02 13 f2 c4 7a 6f c2 c0 9a f9 be 2c 7e 58 43 26 76 32 16 05 08 9f 20 5e 25 28 47 c9 1d b6 68 2d ad a8 02 49 b2 42 c9 26 38 ec c6 ea e7 1e 33 b5 4a 8b 0d 5f 8e a3 de ba d3 6a 56 58 7a 56 d9 d1 f9 7f 32 Data Ascii: ]SknDtICx.6z3O!I!(Rw!xIa$^:N\|dRQ@?YUH^qX'c6J=YU4x*%qw~P.ZsOnQS<LcN:EIHRo5Fi<p3Fuzo,~XC&v2 ^%(Gh-IB&83J_jVXzV2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.16	49883	13.107.246.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:13 UTC	438	OUT	GET /assets/edge_hub_apps_action_center_maximal_light.png/1.2.1/asset HTTP/1.1 Host: edgeassetservice.azureedge.net Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:14 UTC	562	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:14 GMT Content-Type: image/png Content-Length: 1579 Connection: close Content-MD5: G8mx/vxTd9cJ5ZE88crtmA== Last-Modified: Fri, 03 Nov 2023 21:43:08 GMT ETag: 0x8DBDCB5DE99522A x-ms-request-id: ec87db88-601e-001a-7d67-494768000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Cache-Control: public, max-age=604800 x-azure-ref: 20240117T170713Z-5g2pdqdy5d455e9xwqqwpw2gnw00000000zg000000000s1r X-Cache: TCP_MISS x-fd-int-roxy-purgeid: 59346683 Accept-Ranges: bytes
2024-01-17 17:07:14 UTC	1579	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 06 00 00 00 8c fe b8 6d 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 05 c0 49 44 41 54 78 01 ed 58 4f 8b 5c 45 10 af 7a f3 66 66 15 c5 fd 00 42 66 f2 05 b2 22 c2 1e 54 d6 4f 90 15 c1 63 d8 e0 49 04 37 01 11 11 25 89 e0 d5 04 0f 1a f0 e0 e6 62 c4 cb 1e 44 50 21 b8 df 20 7b f0 4f 6e 1b 4f 8b 20 cc 7a 89 b3 ef 75 57 f9 ab ea 9e 37 cb 66 77 66 36 93 83 84 ad a4 d3 fd de eb 79 fd 7b bf fa 55 75 75 88 4e ed d4 9e 20 5b d9 dc ed 2d df de ed d1 63 34 a6 39 6c e5 fb c1 4a 54 39 2f 42 ab 22 d2 8b 91 54 a2 92 d4 91 63 90 6d 09 74 57 2a fd fc b7 77 9e df a6 47 b4 47 02 b8 f2 f3 60 29 Data Ascii: PNGIHDR((mpHYs%%IR$sRGBgAMAaIDATxXO\EzffBf"TOcI7%bDP! {OnO zuW7fwf6y{UuuN [-c49lJT9/B"TcmtW*wGG`)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.16	49875	20.190.152.20	443

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:13 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4698 Host: login.live.com
2024-01-17 17:07:13 UTC	4698	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-01-17 17:07:14 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 17 Jan 2024 17:06:13 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C107_BL2 x-ms-request-id: 2d064363-e694-4873-9adb-ffc5eba39d8c PPServer: PPV: 30 H: BL02EPF00006766 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 17 Jan 2024 17:07:13 GMT Connection: close Content-Length: 10197
2024-01-17 17:07:14 UTC	10197	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.16	49888	13.107.246.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:14 UTC	431	OUT	GET /assets/edge_hub_apps_search_maximal_light.png/1.3.6/asset HTTP/1.1 Host: edgeassetservice.azureedge.net Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:14 UTC	562	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:14 GMT Content-Type: image/png Content-Length: 1966 Connection: close Content-MD5: yR0FOE/y+aftchKyufDqXw== Last-Modified: Fri, 03 Nov 2023 21:43:31 GMT ETag: 0x8DBDCB5EC122A94 x-ms-request-id: 3361aad2-501e-0012-1e67-495c1b000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Cache-Control: public, max-age=604800 x-azure-ref: 20240117T170714Z-5v4hk7xnrx4uxd4v2yg2tpq7qn00000000u0000000000zs1 X-Cache: TCP_MISS x-fd-int-roxy-purgeid: 59346683 Accept-Ranges: bytes
2024-01-17 17:07:14 UTC	1966	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 06 00 00 00 8c fe b8 6d 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 07 43 49 44 41 54 78 01 ed 97 5b 68 5c 75 1e c7 7f ff 73 f9 9f 49 d2 49 4f da 98 b4 6a d7 d9 c5 16 bc b0 4e c1 bd c8 6e d8 99 07 1f 74 1f 9a e0 2a 15 77 d7 06 0b 82 0f d5 3c 54 10 1f 3a 41 d0 2a 8a 2d 55 29 68 4d 14 1f 6a d3 92 3c 28 58 45 92 fa d0 0a 82 8e 48 14 6a 6b 53 d0 b4 21 4d e7 cc 64 6e 67 ce cd ef ef 64 4e 48 ed c5 74 d2 e8 4b 7f c3 9f ff b9 cd 39 9f f3 fd ff 6e 87 e8 ba 2d cd c4 62 2f 1c 1a 1a 4a 29 8a b2 c9 f3 bc 44 10 04 3c c8 71 1c 0b fb 59 8c af 71 6e a4 b7 b7 d7 a2 6b 6c bf 0a 38 3c 3c fc Data Ascii: PNGIHDR((mpHYs%%IR$sRGBgAMAaCIDATx[h\usIIOjNntw<T:A-U)hMj<(XEHjkS!MdngdNHtK9n-b/J)D<qYqnkl8<<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.16	49886	13.107.246.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:14 UTC	433	OUT	GET /assets/edge_hub_apps_shopping_maximal_light.png/1.4.0/asset HTTP/1.1 Host: edgeassetservice.azureedge.net Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:14 UTC	561	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:14 GMT Content-Type: image/png Content-Length: 1751 Connection: close Content-MD5: ZORImplCDTT4skCQAy0O8w== Last-Modified: Tue, 17 Oct 2023 00:34:33 GMT ETag: 0x8DBCEA8D5AACC85 x-ms-request-id: e46bf6d9-e01e-004f-653e-49ac1f000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Cache-Control: public, max-age=604800 x-azure-ref: 20240117T170714Z-5k1a3xvaxx4k30d731hnmfeba400000000ng000000006rux X-Cache: TCP_HIT x-fd-int-roxy-purgeid: 59346683 Accept-Ranges: bytes
2024-01-17 17:07:14 UTC	1751	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 06 00 00 00 8c fe b8 6d 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 06 6c 49 44 41 54 78 01 ed 98 4d 6c 54 55 14 c7 cf 9d ce b4 52 09 42 85 b8 40 ed f3 23 44 37 0a b8 32 71 01 71 a1 89 1b dc 08 3b ab 0b 64 87 b8 30 84 10 3a c3 c2 a5 1a 57 b8 52 16 26 6e 8c 10 3f 91 c5 a0 a2 21 0d d1 c6 18 63 34 9a 91 b8 c0 40 6c a1 ed cc 7b ef 7e 1c ff e7 de fb e6 4d 3f a0 1f d4 e8 a2 17 5e de eb ed 9b f7 7e f7 7f ce f9 9f 3b 25 5a 1b 6b e3 bf 1d 8a 56 71 d4 cf f2 2e 36 34 ca 44 bb d8 11 15 07 71 cf 19 ff 71 ad 08 3f 3b 4b 13 4e bb 3f 74 27 1f cf 3a d4 38 71 68 5d eb 5f 03 3c 76 86 9f c7 Data Ascii: PNGIHDR((mpHYs%%IR$sRGBgAMAalIDATxMlTURB@#D72qq;d0:WR&n?!c4@l{~M?^~;%ZkVq.64Dqq?;KN?t':8qh]_<v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.16	49885	13.107.246.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:14 UTC	433	OUT	GET /assets/edge_hub_apps_toolbox_maximal_light.png/1.5.13/asset HTTP/1.1 Host: edgeassetservice.azureedge.net Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:14 UTC	528	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:14 GMT Content-Type: image/png Content-Length: 1427 Connection: close Content-MD5: Jcy20mbH7NvS9u1Vk/1CnQ== Last-Modified: Fri, 03 Nov 2023 21:43:36 GMT ETag: 0x8DBDCB5EF021F8E x-ms-request-id: 16a3ffc5-301e-006f-30f3-48c0d3000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Cache-Control: public, max-age=604800 x-azure-ref: 20240117T170714Z-14vrm4t1bh19d0n53awa60u4dw00000000d000000000180f X-Cache: TCP_HIT Accept-Ranges: bytes
2024-01-17 17:07:14 UTC	1427	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 06 00 00 00 8c fe b8 6d 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 05 28 49 44 41 54 78 01 ed 57 cd 6b 24 45 14 7f af 67 86 c4 5d cd 8e 9b 05 d1 3d ec e8 1f 20 5e 3d 28 eb 41 04 41 44 10 3c 66 d1 53 92 d3 42 40 72 da 11 84 5c b3 7f 80 24 39 48 40 d4 8b 17 2f b2 e2 1f a0 1e 25 a7 01 11 16 17 35 1f f3 d1 dd d5 55 cf 57 df d5 d3 eb 4e 5a f0 22 53 a1 52 9d 57 5d ef fd de ef 7d 74 05 60 39 96 63 39 96 e3 3f 1d 08 ff 62 1c 1f 1f df e6 e5 9e 52 ea 15 5e fb bc 02 11 99 a9 9f f5 e4 41 52 4a 74 7b df f3 7a 77 7b 7b fb 67 68 39 5a 03 3c 3a 3a da 40 c4 43 0f ea 1f 56 3d 34 38 e2 89 Data Ascii: PNGIHDR((mpHYs%%IR$sRGBgAMAa(IDATxWk$Eg]= ^=(AAD<fSB@r\$9H@/%5UWNZ"SRW]}t`9c9?bR^ARJt{zw{{gh9Z<::@CV=48

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.16	49887	13.107.246.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:14 UTC	430	OUT	GET /assets/edge_hub_apps_games_maximal_light.png/1.7.1/asset HTTP/1.1 Host: edgeassetservice.azureedge.net Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:14 UTC	528	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:14 GMT Content-Type: image/png Content-Length: 2008 Connection: close Content-MD5: AAgpFFFnVya3tLN79BwQiw== Last-Modified: Tue, 10 Oct 2023 17:24:26 GMT ETag: 0x8DBC9B5C0C17219 x-ms-request-id: 3b102678-301e-004d-4c53-49aee5000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Cache-Control: public, max-age=604800 x-azure-ref: 20240117T170714Z-zynqkchemt047bg0gws1g6v6x800000004600000000075hm X-Cache: TCP_HIT Accept-Ranges: bytes
2024-01-17 17:07:14 UTC	2008	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 06 00 00 00 8c fe b8 6d 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 07 6d 49 44 41 54 78 01 ed 98 bf 6f 14 47 14 c7 df ec 9d 11 48 48 5c aa 94 de 74 74 18 45 a9 59 24 0a d2 24 54 91 a0 f1 39 44 24 45 24 ec 32 0d be 28 05 44 14 98 2a e9 7c 96 50 e4 26 32 11 2d 02 47 91 02 4d 64 a3 08 25 92 a5 70 fc 05 18 ff 38 df ed af 97 ef 77 76 66 bd 36 07 67 9b 58 69 18 69 34 b3 b3 bb b3 9f fb ce 7b 6f de 9c c8 bb f2 76 c5 c8 21 95 bf 66 35 4c 33 59 8a 33 6d e0 33 53 1f 7e 69 66 38 fe 74 56 c7 b2 54 1e 26 a9 34 f2 4c a6 3e fa ba 18 ff e3 96 36 7b 89 cc 6e f5 45 92 2c 9b f8 b8 55 6f 73 Data Ascii: PNGIHDR((mpHYs%%IR$sRGBgAMAamIDATxoGHH\ttEY$$T9D$E$2(D*\|P&2-GMd%p8wvf6gXii4{ov!f5L3Y3m3S~if8tVT&4L>6{nE,Uos

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.16	49884	13.107.246.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:14 UTC	422	OUT	GET /assets/edge_hub_apps_M365_light.png/1.7.32/asset HTTP/1.1 Host: edgeassetservice.azureedge.net Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:14 UTC	529	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:14 GMT Content-Type: image/png Content-Length: 2229 Connection: close Content-MD5: m1+fngKXTssvJrBIRWryDg== Last-Modified: Wed, 25 Oct 2023 19:48:24 GMT ETag: 0x8DBD59359A9E77B x-ms-request-id: a61c2ba8-001e-0067-5467-49dba0000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Cache-Control: public, max-age=604800 x-azure-ref: 20240117T170714Z-cn8gh4th3t3972fm47bgt03trw00000004ag00000000082b X-Cache: TCP_MISS Accept-Ranges: bytes
2024-01-17 17:07:14 UTC	2229	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 06 00 00 00 8c fe b8 6d 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 08 4a 49 44 41 54 78 01 ed 98 6d 88 5c 57 19 c7 9f e7 dc 7b 37 89 49 9a dd 6c 5e d6 96 c0 c4 36 a1 d5 2f 49 a1 92 22 ea 06 ac a4 41 21 05 41 2a e8 ee 16 a4 82 e0 26 62 a5 b5 92 99 f1 8b 2f 68 b3 fd 92 16 ad 64 fb 29 16 62 53 6d 68 17 15 b2 a2 ed 07 b1 6c a8 95 d6 97 74 36 a9 35 69 d2 90 dd 6d bb 9b 99 7b ce 79 fc 3f e7 dc d9 8d 99 24 b3 2f f9 d8 03 77 9e 7b ce dc b9 e7 77 ff cf cb 39 77 88 3e 6c 4b 6b 4c 37 a8 f5 ee 1d 2b a5 44 25 c2 47 9a d2 f8 c8 8f b6 8f d3 0d 68 4b 06 dc f1 8d df f7 ae cc ba cb 6c a8 Data Ascii: PNGIHDR((mpHYs%%IR$sRGBgAMAaJIDATxm\W{7Il^6/I"A!A*&b/hd)bSmhlt65im{y?$/w{w9w>lKkL7+D%GhKl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.16	49889	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:14 UTC	641	OUT	GET /bundles/v1/edgeChromium/latest/diagnostic-web-vitals.8e31afd07dfeb48aea72.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:14 UTC	1148	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: ClXGXllFgddpQJOHKdaWKQ== Last-Modified: Mon, 08 Jan 2024 16:46:15 GMT ETag: 0x8DC10695454D0AA Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 0e9c6f2c-401e-00a3-0a52-42d1de000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:14 GMT Content-Length: 7944 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89861949,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=2, origin; dur=0 , cdntime; dur=2 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b2f3d Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511234.55b2f3d Vary: Origin
2024-01-17 17:07:14 UTC	7944	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 64 69 61 67 6e 6f 73 74 69 63 2d 77 65 62 2d 76 69 74 61 6c 73 22 5d 2c 7b 38 38 35 31 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 74 2e 72 28 6e 29 2c 74 2e 64 28 6e 2c 7b 43 6c 73 31 30 30 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 58 7d 2c 46 43 50 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 59 7d 2c 46 49 44 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5a 7d 2c 49 Data Ascii: "use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["diagnostic-web-vitals"],{88512:function(e,n,t){t.r(n),t.d(n,{Cls100:function(){return X},FCP:function(){return Y},FID:function(){return Z},I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.16	49891	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:14 UTC	1090	OUT	GET /service/news/feed/pages/ntp?User=m-2136D0069C246D353F30C40F9D676C20&activityId=EDA7CB09-C52C-41B1-9707-B0A727D882E0&apikey=0QfOX3Vn51YCzitbLaRkTTBadtWpgTN8NZLW0C1SEM&audienceMode=adult&cm=en-us&column=c3&disablecontent=true&infopaneCount=17&it=app&memory=8&newsSkip=0&newsTop=48&ocid=anaheim-ntp-feeds&pgc=547&timeOut=1000&vpSize=1232x876&wposchema=byregion HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; MUIDB=2136D0069C246D353F30C40F9D676C20; _SS=SID=00
2024-01-17 17:07:14 UTC	3128	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Headers: TicketType,RequestContinuationKey,AuthToken,Content-Type,x-client-activityid,ms-cv,OneSvc-Uni-Feat-Tun,signedInCookieName,muid,appid,User-Location,user-location,userauthtoken,usertickettype,sitename,s2sauthtoken,thumbprint,Authorization,Ent-Authorization,UserIdToken,DDD-TMPL,DDD-ActivityId,DDD-FeatureSet,DDD-Session-ID,Date,date,ads-referer,ads-referer,taboola-sessionId,taboola-sessionid,Akamai-Request-ID,Akamai-Server-IP,X-MSEdge-Ref,DDD-DebugId,s-xbox-token,OneWebServiceLatency,X-FD-Features,DDD-UserType,traceparent,Widgets,Muted Access-Control-Expose-Headers: TicketType,RequestContinuationKey,AuthToken,Content-Type,x-client-activityid,ms-cv,OneSvc-Uni-Feat-Tun,signedInCookieName,muid,appid,User-Location,user-location,userauthtoken,usertickettype,sitename,s2sauthtoken,thumbprint,Authorization,Ent-Authorization,UserIdToken,DDD-TMPL,DDD-ActivityId,DDD-FeatureSet,DDD-Session-ID,Date,date,ads-referer,ads-referer,taboola-sessionId,taboola-sessionid,Akamai-Request-ID,Akamai-Server-IP,X-MSEdge-Ref,DDD-DebugId,s-xbox-token,OneWebServiceLatency,X-FD-Features,DDD-UserType,traceparent,Widgets,Muted DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid x-wpo-activityId: 65A80942-6087-4E00-AC58-5E965741D6FD\|2024-01-17T17:07:14.7000311Z\|fabric_wpo\|EUS1\|WPO_30 DDD-ActivityId: 65a80942-6087-4e00-ac58-5e965741d6fd DDD-StrategyExecutionLatency: 00:00:00.0493757 DDD-DebugId: 65a80942-6087-4e00-ac58-5e965741d6fd\|2024-01-17T17:07:14.7212883Z\|fabric_msn\|EUS1\|News_90 OneWebServiceLatency: 51 X-MSEdge-ResponseInfo: 51 Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA X-Ceto-ref: 65a80942709249e2ae30cbd3c2eec5de\|2024-01-17T17:07:14.659Z X-MSEdge-Ref: Ref A: 20D0F8D071C34913BA48FD70D8511452 Ref B: EWR311000101023 Ref C: 2024-01-17T17:07:14Z Expires: Wed, 17 Jan 2024 17:07:14 GMT Date: Wed, 17 Jan 2024 17:07:14 GMT Content-Length: 2646 Connection: close Set-Cookie: _C_ETH=1; domain=.msn.com; path=/; secure; httponly Set-Cookie: _C_Auth= Akamai-Request-BC: [a=23.218.242.10,b=89862082,c=g,n=US_NJ_EDISON,o=20940],[a=204.79.197.203,c=o] Server-Timing: clientrtt; dur=88, clienttt; dur=74, origin; dur=73 , cdntime; dur=1 Akamai-Cache-Status: NotCacheable from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b2fc2 Access-Control-Allow-Methods: PUT,PATCH,POST,GET,OPTIONS,DELETE Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com X-AS-SuppressSetCookie: 1 Cache-Control: private, max-age=0 report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511234.55b2fc2 Vary: Origin
2024-01-17 17:07:14 UTC	2646	IN	Data Raw: 7b 22 73 65 63 74 69 6f 6e 73 22 3a 5b 5d 2c 22 73 65 72 76 69 63 65 43 6f 6e 74 65 78 74 22 3a 7b 22 66 64 48 65 61 64 22 3a 22 31 73 2d 64 65 66 61 75 6c 74 73 63 6e 2c 31 73 2d 64 65 66 61 75 6c 74 73 63 6e 77 2c 31 73 2d 65 61 6f 70 31 2c 31 73 2d 66 63 72 79 70 74 2c 31 73 2d 6b 73 66 61 73 74 2d 70 72 31 63 2c 31 73 2d 6d 69 73 65 77 73 2d 6d 73 61 2c 31 73 2d 6e 6f 74 69 66 6d 61 70 70 69 6e 67 2c 31 73 2d 70 31 2d 77 78 6c 6f 63 6b 76 32 2c 31 73 2d 70 32 2d 6c 6f 63 6b 70 72 65 76 2c 31 73 2d 72 70 73 73 65 63 61 75 74 68 74 2c 31 73 2d 73 68 70 2d 72 63 2d 74 32 2d 63 6e 76 31 2c 31 73 2d 73 68 70 2d 72 63 2d 74 32 2d 63 6e 76 6b 2c 31 73 2d 73 68 70 2d 72 63 2d 74 33 2d 63 6e 76 33 2c 31 73 2d 73 68 70 2d 72 63 2d 74 2d 65 30 30 66 2c 31 73 2d Data Ascii: {"sections":[],"serviceContext":{"fdHead":"1s-defaultscn,1s-defaultscnw,1s-eaop1,1s-fcrypt,1s-ksfast-pr1c,1s-misews-msa,1s-notifmapping,1s-p1-wxlockv2,1s-p2-lockprev,1s-rpssecautht,1s-shp-rc-t2-cnv1,1s-shp-rc-t2-cnvk,1s-shp-rc-t3-cnv3,1s-shp-rc-t-e00f,1s-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.16	49896	13.107.246.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:14 UTC	425	OUT	GET /assets/edge_hub_apps_outlook_light.png/1.9.10/asset HTTP/1.1 Host: edgeassetservice.azureedge.net Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:14 UTC	561	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:14 GMT Content-Type: image/png Content-Length: 1154 Connection: close Content-MD5: VINs+LbpDD4/JYhy3hkk5g== Last-Modified: Wed, 25 Oct 2023 19:48:30 GMT ETag: 0x8DBD5935D5B3965 x-ms-request-id: 5ce06493-c01e-0058-733e-496c7c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Cache-Control: public, max-age=604800 x-azure-ref: 20240117T170714Z-5k1a3xvaxx4k30d731hnmfeba400000000rg000000006mm7 X-Cache: TCP_HIT x-fd-int-roxy-purgeid: 59346683 Accept-Ranges: bytes
2024-01-17 17:07:14 UTC	1154	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 06 00 00 00 8c fe b8 6d 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 04 17 49 44 41 54 78 01 ed 97 cf 6f db 64 18 c7 bf 76 6a ea 34 69 e3 26 4b d4 b4 30 d2 f1 ab 4c 9a 96 c1 6e ed a1 30 0e 5c 10 4c b0 d3 0e ed 05 c1 05 35 3d ec 00 97 66 ff 41 72 43 02 a9 1a bb 70 03 c4 0d 6d 62 48 4c e2 f7 3a 0a 62 17 56 6b ab d6 aa cd 1a 37 4d 66 c7 89 fd ee 7d 9d 25 6b 1b 27 b1 1b 57 bd e4 23 39 f1 ef 7e fa 3c ef f3 bc 6f 80 1e 3d 8e 16 ce e9 8d c2 87 3f 24 4d 42 7e 04 88 04 2f e1 20 13 82 ac f9 e5 db 19 bb cb 3c 1c 62 10 73 d1 73 39 06 41 82 03 b7 80 d9 6f 6c df ed 38 82 13 5f 6f 10 b8 Data Ascii: PNGIHDR((mpHYs%%IR$sRGBgAMAaIDATxodvj4i&K0Ln0\L5=fArCpmbHL:bVk7Mf}%k'W#9~<o=?$MB~/ <bss9Aol8_o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.16	49897	13.107.246.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:14 UTC	431	OUT	GET /assets/edge_hub_apps_edrop_maximal_light.png/1.1.12/asset HTTP/1.1 Host: edgeassetservice.azureedge.net Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:15 UTC	529	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:14 GMT Content-Type: image/png Content-Length: 1468 Connection: close Content-MD5: xw5y8uCoJhZdVfyk+U/L8Q== Last-Modified: Fri, 03 Nov 2023 21:43:14 GMT ETag: 0x8DBDCB5E23DFC43 x-ms-request-id: 047f7ba0-e01e-006d-0967-49c229000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Cache-Control: public, max-age=604800 x-azure-ref: 20240117T170714Z-0z1qf7uget4cbdqfm3ud6x68p000000000b0000000001ezm X-Cache: TCP_MISS Accept-Ranges: bytes
2024-01-17 17:07:15 UTC	1468	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 06 00 00 00 8c fe b8 6d 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 05 51 49 44 41 54 78 01 ed 97 4b 6c 54 55 18 c7 ff e7 4e 19 62 da e0 b0 a1 01 03 5c 82 51 7c 52 16 1a 6d 6b 42 57 c4 c7 c2 2e 8c 26 24 46 62 44 17 26 b4 04 62 5c a0 ad 1a 63 dc c8 82 85 89 26 b4 09 68 89 1a a7 18 79 24 1a c6 05 75 41 02 17 19 23 46 03 13 10 4a 35 c8 50 fa 9a b9 f7 9c cf ef 3c ee 74 a6 96 76 da a6 2b e6 4b 4f ef cc b9 e7 9e ef 77 ff df e3 de 01 6a 56 b3 9a d5 ec ce 36 81 45 b6 cd 67 28 85 89 89 14 22 f8 20 e9 4b 0f 29 41 22 25 3c ac 85 42 8a a4 f2 a9 a8 52 8d e1 c5 d4 d5 70 75 3e 49 de a6 Data Ascii: PNGIHDR((mpHYs%%IR$sRGBgAMAaQIDATxKlTUNb\Q\|RmkBW.&$FbD&b\c&hy$uA#FJ5P<tv+KOwjV6Eg(" K)A"%<BRpu>I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.16	49890	23.96.180.189	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:14 UTC	1582	OUT	GET /v3/Delivery/Events/Impression?PID=425882902&TID=700466140&CID=128000000004387309&BID=679763595&PG=IRIS000001.0000000244&TPID=425882902&REQASID=2CB6967668C04312E7A5BD50E133F776&ASID=acf1f206c917485589ee2cd4ed9c512b&SLOT=1&REQT=20240117T170713&MA_Score=2&EDGEID=-7805640675387128533&DS_EVTID=acf1f206c917485589ee2cd4ed9c512b&BCNT=1&PG=IRIS000001.0000000244&UNID=88000244&MAP_TID=4D114F87-B22F-49DB-9DC2-EE0754B84DF0&NCT=1&ASID=2CB6967668C04312E7A5BD50E133F776&REQASID=2CB6967668C04312E7A5BD50E133F776&ARC=1&EMS=1&LOCALE=EN-US&COUNTRY=US&HTD=-1&LANG=1033&DEVLANG=EN&CIP=154.16.192.193&ID=-7805640675387128533&OPTOUTSTATE=256&HTTPS=1&DEVOSVER=10.0.19045.2006&DEVOSMAJ=10&DEVOSMIN=0&DEVOSBLD=19045&DEVOSMINBLD=2006&ABUILD=117.0.5938.132&AMAJOR=117&AMINOR=0&ABLD=5938&APATCH=132&MARKETBASEDCOUNTRY=US&CLR=ESDK&CFMT=&H=0&W=0&FESVER=1.3&ACHANNEL=4&ADEFAB=1&OPSYS=WIN10&UITHEME=LIGHT&PAGECONFIG=547&CHNL=CFD&UIT=E HTTP/1.1 Host: arc.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1
2024-01-17 17:07:14 UTC	484	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/xml; charset=utf-8 Expires: Mon, 01 Jan 0001 00:00:00 GMT Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [] Access-Control-Allow-Origin: https://ntp.msn.com Access-Control-Allow-Credentials: true X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Wed, 17 Jan 2024 17:07:14 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.16	49898	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:14 UTC	631	OUT	GET /bundles/v1/edgeChromium/latest/ocvFeedback.afc5eaf466f4c6a075f1.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:14 UTC	1150	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: xL6whzmLG/gsamzbFr5nbg== Last-Modified: Mon, 08 Jan 2024 16:46:15 GMT ETag: 0x8DC1069547D39CF Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 11c56a1b-401e-0027-5252-422a83000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:14 GMT Content-Length: 5718 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89862344,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=16, origin; dur=0 , cdntime; dur=16 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b30c8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511234.55b30c8 Vary: Origin
2024-01-17 17:07:14 UTC	5718	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6f 63 76 46 65 65 64 62 61 63 6b 22 5d 2c 7b 31 33 38 35 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 72 2e 72 28 74 29 2c 72 2e 64 28 74 2c 7b 54 6f 6f 6c 69 6e 67 49 6e 66 6f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 54 7d 2c 58 62 6f 78 46 65 65 64 57 43 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 7d 2c 58 62 6f 78 46 65 65 64 57 43 53 74 79 6c 65 73 3a 66 75 6e 63 74 69 6f Data Ascii: "use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["ocvFeedback"],{13850:function(e,t,r){r.r(t),r.d(t,{ToolingInfo:function(){return T},XboxFeedWC:function(){return b},XboxFeedWCStyles:functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.16	49900	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:14 UTC	508	OUT	GET /bundles/v1/edgeChromium/latest/autosMarketplaceCard.4ad0b0c0ac93f4d8ec62.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:14 UTC	1186	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: k1B0FVdV4pIkkv9kj+226w== Last-Modified: Wed, 10 Jan 2024 20:07:05 GMT ETag: 0x8DC1217B79AC655 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: e0bdd4c2-001e-00e3-2200-4402cf000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:14 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Akamai-Request-BC: [a=23.218.242.10,b=89862355,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=9, origin; dur=0 , cdntime; dur=9 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b30d3 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511234.55b30d3 Vary: Origin
2024-01-17 17:07:14 UTC	15198	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 61 75 74 6f 73 4d 61 72 6b 65 74 70 6c 61 63 65 43 61 72 64 22 5d 2c 7b 31 39 31 30 38 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 29 7b 61 2e 72 28 65 29 2c 61 2e 64 28 65 2c 7b 41 75 74 6f 73 4d 61 72 6b 65 74 70 6c 61 63 65 43 61 72 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 74 7d 2c 41 75 74 6f 73 4d 61 72 6b 65 74 70 6c 61 63 65 43 61 72 64 53 74 79 6c 65 73 3a Data Ascii: 00006000"use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["autosMarketplaceCard"],{19108:function(t,e,a){a.r(e),a.d(e,{AutosMarketplaceCard:function(){return at},AutosMarketplaceCardStyles:
2024-01-17 17:07:15 UTC	9390	IN	Data Raw: 6b 65 22 3a 22 4c 61 6e 64 20 52 6f 76 65 72 20 52 61 6e 67 65 20 52 6f 76 65 72 22 2c 22 6d 6f 64 65 6c 22 3a 22 56 65 6c 61 72 22 2c 22 6d 69 6c 65 61 67 65 22 3a 30 2c 22 69 6d 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 62 69 6e 67 2e 63 6f 6d 2f 74 68 3f 69 64 3d 4f 41 49 44 2e 32 62 62 37 39 66 65 65 64 38 34 32 31 34 63 35 35 39 66 32 30 61 34 38 32 63 65 63 32 66 38 38 26 77 3d 35 30 26 68 3d 35 30 26 63 3d 32 26 72 73 3d 31 26 71 6c 74 3d 38 30 26 63 64 76 3d 31 26 70 69 64 3d 31 36 2e 31 26 77 3d 34 30 30 26 68 3d 33 31 36 22 2c 22 64 65 74 61 69 6c 50 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 73 6e 2e 63 6f 6d 2f 65 6e 2d 67 62 2f 63 61 72 73 2f 6d 61 72 6b 65 74 70 6c 61 63 65 2f 76 2f 32 30 32 33 5f 6c 61 6e 64 Data Ascii: ke":"Land Rover Range Rover","model":"Velar","mileage":0,"imageUrl":"https://bing.com/th?id=OAID.2bb79feed84214c559f20a482cec2f88&w=50&h=50&c=2&rs=1&qlt=80&cdv=1&pid=16.1&w=400&h=316","detailPageUrl":"https://www.msn.com/en-gb/cars/marketplace/v/2023_land
2024-01-17 17:07:15 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 61 43 68 61 6e 67 65 73 3d 28 29 3d 3e 7b 63 6f 6e 73 74 20 74 3d 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 28 22 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 20 64 61 72 6b 29 22 29 3b 74 68 69 73 2e 74 6f 67 67 6c 65 4c 69 67 68 74 4d 6f 64 65 28 74 29 2c 74 68 69 73 2e 6d 65 64 69 61 4c 69 73 74 65 6e 43 61 6c 6c 42 61 63 6b 3d 74 68 69 73 2e 6d 65 64 69 61 4c 69 73 74 65 6e 43 61 6c 6c 42 61 63 6b 7c 7c 28 74 3d 3e 7b 74 68 69 73 2e 74 6f 67 67 6c 65 4c 69 67 68 74 4d 6f 64 65 28 74 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 29 7d 29 2c 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 68 61 6e 67 65 22 2c 74 68 69 73 2e 6d 65 64 69 61 4c 69 73 74 65 6e 43 61 6c 6c 42 61 63 6b 29 Data Ascii: 00006000aChanges=()=>{const t=window.matchMedia("(prefers-color-scheme: dark)");this.toggleLightMode(t),this.mediaListenCallBack=this.mediaListenCallBack\|\|(t=>{this.toggleLightMode(t.currentTarget)}),t.addEventListener("change",this.mediaListenCallBack)
2024-01-17 17:07:15 UTC	8204	IN	Data Raw: 65 6d 65 74 72 79 54 61 67 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 72 2e 67 6e 29 28 5b 4f 2e 4c 4f 5d 2c 61 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 68 69 64 65 43 61 72 64 54 65 6c 65 6d 65 74 72 79 54 61 67 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 72 2e 67 6e 29 28 5b 4f 2e 4c 4f 5d 2c 61 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 70 72 65 76 69 6f 75 73 49 6d 61 67 65 46 6c 69 70 70 65 72 54 65 6c 65 6d 65 74 72 79 54 61 67 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 72 2e 67 6e 29 28 5b 4f 2e 4c 4f 5d 2c 61 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 6e 65 78 74 49 6d 61 67 65 46 6c 69 70 70 65 72 54 65 6c 65 6d 65 74 72 79 54 61 67 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 72 2e 67 6e 29 28 5b 4f 2e 4c 4f 5d 2c 61 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 64 61 72 6b 43 61 Data Ascii: emetryTag",void 0),(0,r.gn)([O.LO],at.prototype,"hideCardTelemetryTag",void 0),(0,r.gn)([O.LO],at.prototype,"previousImageFlipperTelemetryTag",void 0),(0,r.gn)([O.LO],at.prototype,"nextImageFlipperTelemetryTag",void 0),(0,r.gn)([O.LO],at.prototype,"darkCa
2024-01-17 17:07:15 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 63 75 73 48 61 6e 64 6c 65 72 2c 21 30 29 2c 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 62 6c 75 72 22 2c 74 68 69 73 2e 77 69 6e 64 6f 77 42 6c 75 72 48 61 6e 64 6c 65 72 2c 21 30 29 29 7d 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7b 74 68 69 73 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 6f 75 73 65 65 6e 74 65 72 22 2c 74 68 69 73 2e 6d 6f 75 73 65 49 6e 48 61 6e 64 6c 65 72 29 2c 74 68 69 73 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 66 6f 63 75 73 69 6e 22 2c 74 68 69 73 2e 66 6f 63 75 73 49 6e 48 61 6e 64 6c 65 72 29 2c 74 68 69 73 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 66 6f 63 75 73 6f 75 Data Ascii: 00004000cusHandler,!0),window.addEventListener("blur",this.windowBlurHandler,!0))}removeEventListeners(){this.removeEventListener("mouseenter",this.mouseInHandler),this.removeEventListener("focusin",this.focusInHandler),this.removeEventListener("focusou
2024-01-17 17:07:15 UTC	12	IN	Data Raw: 62 65 6c 3d 22 70 72 65 76 69 0d 0a Data Ascii: bel="previ
2024-01-17 17:07:15 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 6f 75 73 2d 66 6c 69 70 70 65 72 2d 24 7b 74 3d 3e 74 2e 63 61 6e 76 61 73 7d 22 20 63 6c 61 73 73 3d 22 70 72 65 76 69 6f 75 73 2d 66 6c 69 70 70 65 72 2d 24 7b 74 3d 3e 74 2e 63 61 6e 76 61 73 7d 20 24 7b 74 3d 3e 74 2e 61 6c 77 61 79 73 53 68 6f 77 46 6c 69 70 70 65 72 73 3f 22 70 72 65 76 69 6f 75 73 2d 66 6c 69 70 70 65 72 2d 73 68 6f 77 22 3a 22 22 7d 20 24 7b 74 3d 3e 74 2e 75 73 65 57 69 6e 64 6f 77 73 53 74 79 6c 65 73 3f 22 77 69 6e 64 6f 77 73 22 3a 22 22 7d 22 20 40 6b 65 79 70 72 65 73 73 3d 22 24 7b 28 74 2c 65 29 3d 3e 74 2e 73 6c 69 64 65 4b 65 79 50 72 65 73 73 48 61 6e 64 6c 65 72 28 65 2e 65 76 65 6e 74 2c 2d 31 29 7d 22 20 40 63 6c 69 63 6b 3d 22 24 7b 28 74 2c 65 29 3d 3e 74 2e 73 6c 69 64 65 4b 65 79 50 Data Ascii: 00004000ous-flipper-${t=>t.canvas}" class="previous-flipper-${t=>t.canvas} ${t=>t.alwaysShowFlippers?"previous-flipper-show":""} ${t=>t.useWindowsStyles?"windows":""}" @keypress="${(t,e)=>t.slideKeyPressHandler(e.event,-1)}" @click="${(t,e)=>t.slideKeyP
2024-01-17 17:07:15 UTC	12	IN	Data Raw: 74 3d 3e 74 2e 64 65 74 61 69 0d 0a Data Ascii: t=>t.detai
2024-01-17 17:07:15 UTC	8251	IN	Data Raw: 30 30 30 30 32 30 32 46 0d 0a 6c 50 61 67 65 55 72 6c 7d 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 64 61 74 61 2d 74 3d 22 24 7b 74 3d 3e 74 2e 74 65 6c 65 6d 65 74 72 79 54 61 67 7d 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6d 61 67 65 2d 77 72 61 70 70 65 72 22 3e 3c 69 6d 67 20 63 6c 61 73 73 3d 22 69 6d 61 67 65 22 20 73 72 63 3d 24 7b 74 3d 3e 74 2e 69 6d 61 67 65 55 72 6c 7d 3e 3c 2f 69 6d 67 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 74 69 74 6c 65 22 3e 24 7b 74 3d 3e 74 2e 63 61 72 54 69 74 6c 65 54 65 78 74 7d 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 64 65 74 61 69 6c 22 3e 24 7b 74 3d 3e 60 24 7b 74 2e 70 72 69 63 65 52 61 6e 67 65 54 65 78 74 7d 20 60 7d 3c Data Ascii: 0000202FlPageUrl} target="_blank" data-t="${t=>t.telemetryTag}"><div class="image-wrapper"><img class="image" src=${t=>t.imageUrl}></img></div><div class="content-title">${t=>t.carTitleText}</div><div class="content-detail">${t=>`${t.priceRangeText} `}<
2024-01-17 17:07:15 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 77 2d 79 6f 75 72 2d 6d 61 6b 72 65 74 2d 76 61 6c 75 65 2d 75 70 70 65 72 22 3e 24 7b 74 3d 3e 74 2e 6b 6e 6f 77 59 6f 75 72 4d 61 72 6b 65 74 56 61 6c 75 65 53 74 72 69 6e 67 7d 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6b 6e 6f 77 2d 79 6f 75 72 2d 6d 61 6b 72 65 74 2d 76 61 6c 75 65 2d 64 6f 77 6e 22 3e 24 7b 74 3d 3e 74 2e 74 69 74 6c 65 7d 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 3c 2f 61 3e 60 2c 52 65 3d 50 74 2e 69 60 20 61 2c 62 75 74 74 6f 6e 7b 24 7b 65 65 2e 55 7d 7d 2e 69 6d 61 67 65 7b 77 69 64 74 68 3a 32 36 38 70 78 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 46 46 46 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 38 70 78 3b 6f 62 6a 65 63 74 2d 66 69 Data Ascii: 00006000w-your-makret-value-upper">${t=>t.knowYourMarketValueString}</span><span class="know-your-makret-value-down">${t=>t.title}</span></div></a>`,Re=Pt.i` a,button{${ee.U}}.image{width:268px;height:140px;background:#FFFFFF;border-radius:8px;object-fi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.16	49899	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:14 UTC	638	OUT	GET /bundles/v1/edgeChromium/latest/background-gallery.51b38e9d7a8ceb385408.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:14 UTC	1186	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: G4iXGd6tO+CWWGzB4gwe1w== Last-Modified: Mon, 08 Jan 2024 16:46:14 GMT ETag: 0x8DC10695417708C Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 75c32fbc-201e-0109-2e52-424671000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:14 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Akamai-Request-BC: [a=23.218.242.10,b=89862414,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=0, origin; dur=0 , cdntime; dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b310e Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511234.55b310e Vary: Origin
2024-01-17 17:07:14 UTC	15198	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 62 61 63 6b 67 72 6f 75 6e 64 2d 67 61 6c 6c 65 72 79 22 5d 2c 7b 38 39 39 39 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 69 2e 72 28 65 29 2c 69 2e 64 28 65 2c 7b 42 61 63 6b 67 72 6f 75 6e 64 47 61 6c 6c 65 72 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4f 7d 2c 42 61 63 6b 67 72 6f 75 6e 64 47 61 6c 6c 65 72 79 53 74 79 6c 65 73 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 00006000"use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["background-gallery"],{89991:function(t,e,i){i.r(e),i.d(e,{BackgroundGallery:function(){return O},BackgroundGalleryStyles:function(
2024-01-17 17:07:14 UTC	9390	IN	Data Raw: 6f 75 6e 64 49 6e 64 65 78 42 79 42 61 63 6b 67 72 6f 75 6e 64 54 79 70 65 28 22 43 4d 53 49 6d 61 67 65 22 29 3b 66 6f 72 28 6c 65 74 20 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 73 3b 69 66 28 6f 2e 68 61 73 28 74 2e 74 6f 53 74 72 69 6e 67 28 29 29 7c 7c 61 3d 3d 74 7c 7c 65 5b 74 5d 2e 72 65 6d 6f 76 65 43 6f 6e 74 65 6e 74 29 63 6f 6e 74 69 6e 75 65 3b 63 6f 6e 73 74 20 6e 3d 28 74 68 69 73 2e 62 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 57 43 43 6f 6e 66 69 67 2e 73 69 6d 70 6c 65 49 6d 61 67 65 73 3f 66 2e 70 2e 67 65 74 43 4d 53 49 6d 61 67 65 53 69 7a 65 28 29 3a 6e 75 6c 6c 3d 3d 3d 28 73 3d 74 68 69 73 2e 62 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 57 43 43 6f 6e 66 69 67 2e 63 6d 73 49 6d 61 67 65 29 7c 7c 76 6f Data Ascii: oundIndexByBackgroundType("CMSImage");for(let t=0;t<e.length;t++){var s;if(o.has(t.toString())\|\|a==t\|\|e[t].removeContent)continue;const n=(this.backgroundImageWCConfig.simpleImages?f.p.getCMSImageSize():null===(s=this.backgroundImageWCConfig.cmsImage)\|\|vo
2024-01-17 17:07:14 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 29 5d 2c 61 3d 6f 2e 6f 66 66 73 65 74 54 6f 70 2d 31 36 3b 74 68 69 73 2e 72 65 66 5f 69 6d 61 67 65 53 65 6c 65 63 74 69 6f 6e 53 65 63 74 69 6f 6e 2e 73 63 72 6f 6c 6c 54 6f 28 7b 74 6f 70 3a 61 2c 62 65 68 61 76 69 6f 72 3a 22 73 6d 6f 6f 74 68 22 7d 29 2c 6f 2e 63 6c 69 63 6b 28 29 7d 67 65 74 42 75 74 74 6f 6e 43 6c 61 73 73 4e 61 6d 65 73 28 29 7b 6c 65 74 20 74 3d 22 2e 63 6d 73 69 6d 61 67 65 22 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 6e 63 6c 75 64 65 56 69 64 65 6f 42 61 63 6b 67 72 6f 75 6e 64 73 49 6e 52 6f 74 61 74 69 6f 6e 26 26 28 74 2b 3d 22 2c 20 2e 76 69 64 65 6f 22 29 2c 74 7d 61 73 79 6e 63 20 6f 6e 43 75 73 74 6f 6d 54 6f 67 67 6c 65 43 68 61 6e 67 65 28 74 2c 65 29 7b 6c 65 74 20 69 3b 73 77 69 74 63 Data Ascii: 00006000)],a=o.offsetTop-16;this.ref_imageSelectionSection.scrollTo({top:a,behavior:"smooth"}),o.click()}getButtonClassNames(){let t=".cmsimage";return this.includeVideoBackgroundsInRotation&&(t+=", .video"),t}async onCustomToggleChange(t,e){let i;switc
2024-01-17 17:07:14 UTC	8204	IN	Data Raw: 73 3d 22 62 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 42 75 74 74 6f 6e 20 63 6d 73 20 24 7b 74 3d 3e 74 2e 70 72 6f 76 69 64 65 72 2e 74 6f 4c 6f 63 61 6c 65 4c 6f 77 65 72 43 61 73 65 28 29 7d 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 24 7b 74 3d 3e 74 2e 74 68 75 6d 62 6e 61 69 6c 48 72 65 66 7d 29 22 20 40 63 6c 69 63 6b 3d 24 7b 28 74 2c 65 29 3d 3e 65 2e 70 61 72 65 6e 74 2e 73 65 6c 65 63 74 42 61 63 6b 67 72 6f 75 6e 64 28 74 2c 65 2e 65 76 65 6e 74 29 7d 20 74 69 74 6c 65 3d 22 24 7b 74 3d 3e 74 2e 74 69 74 6c 65 7c 7c 22 22 7d 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 24 7b 74 3d 3e 74 2e 74 69 74 6c 65 7c 7c 22 22 7d 22 20 3f 64 69 73 61 62 6c 65 64 3d 24 7b 28 74 2c 65 29 3d 3e 21 65 2e 70 61 Data Ascii: s="backgroundImageButton cms ${t=>t.provider.toLocaleLowerCase()}" style="background-image: url(${t=>t.thumbnailHref})" @click=${(t,e)=>e.parent.selectBackground(t,e.event)} title="${t=>t.title\|\|""}" aria-label="${t=>t.title\|\|""}" ?disabled=${(t,e)=>!e.pa
2024-01-17 17:07:15 UTC	6412	IN	Data Raw: 30 30 30 30 31 39 30 30 0d 0a 6e 67 73 42 75 74 74 6f 6e 2e 73 65 6c 65 63 74 65 64 3a 3a 70 61 72 74 28 63 6f 6e 74 72 6f 6c 29 7b 6f 75 74 6c 69 6e 65 3a 32 70 78 20 73 6f 6c 69 64 20 23 36 33 41 44 45 35 39 39 7d 66 6c 75 65 6e 74 2d 62 75 74 74 6f 6e 2e 62 61 63 6b 67 72 6f 75 6e 64 44 69 73 70 6f 73 69 74 69 6f 6e 42 75 74 74 6f 6e 2e 6c 69 6b 65 3a 68 6f 76 65 72 2c 66 6c 75 65 6e 74 2d 62 75 74 74 6f 6e 2e 62 61 63 6b 67 72 6f 75 6e 64 44 69 73 70 6f 73 69 74 69 6f 6e 42 75 74 74 6f 6e 2e 64 69 73 6c 69 6b 65 3a 68 6f 76 65 72 2c 66 6c 75 65 6e 74 2d 62 75 74 74 6f 6e 2e 62 61 63 6b 67 72 6f 75 6e 64 44 69 73 70 6f 73 69 74 69 6f 6e 42 75 74 74 6f 6e 2e 72 65 6d 6f 76 65 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 33 30 33 30 33 30 7d Data Ascii: 00001900ngsButton.selected::part(control){outline:2px solid #63ADE599}fluent-button.backgroundDispositionButton.like:hover,fluent-button.backgroundDispositionButton.dislike:hover,fluent-button.backgroundDispositionButton.remove:hover{background:#303030}
2024-01-17 17:07:15 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.16	49902	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:14 UTC	639	OUT	GET /bundles/v1/edgeChromium/latest/conditionalBannerWC.c5b3394c61c248b33797.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:14 UTC	1149	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: 0iXfBC0qkOcCs/g1aMzKtA== Last-Modified: Mon, 08 Jan 2024 16:46:14 GMT ETag: 0x8DC10695423BEBD Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 47103ef0-e01e-0055-0852-428e87000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:14 GMT Content-Length: 19031 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89862436,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=1, origin; dur=0 , cdntime; dur=1 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b3124 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511234.55b3124 Vary: Origin
2024-01-17 17:07:14 UTC	15235	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 6f 6e 64 69 74 69 6f 6e 61 6c 42 61 6e 6e 65 72 57 43 22 5d 2c 7b 36 33 33 39 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 43 6f 6e 64 69 74 69 6f 6e 61 6c 42 61 6e 6e 65 72 43 6f 6e 74 65 6e 74 54 65 6d 70 6c 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6b 7d 2c 43 6f 6e 64 69 74 69 6f 6e 61 6c 42 61 6e 6e 65 72 57 43 3a 66 75 6e 63 74 69 6f Data Ascii: "use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["conditionalBannerWC"],{63399:function(e,t,n){n.r(t),n.d(t,{ConditionalBannerContentTemplate:function(){return k},ConditionalBannerWC:functio
2024-01-17 17:07:14 UTC	3796	IN	Data Raw: 73 2e 5f 72 75 6c 65 73 3d 6e 2c 74 68 69 73 2e 5f 65 78 74 65 6e 73 69 6f 6e 43 6f 6e 74 65 78 74 3d 69 2c 74 68 69 73 2e 5f 70 6c 61 63 65 6d 65 6e 74 52 65 67 69 73 74 72 79 3d 6e 65 77 20 75 2c 74 68 69 73 2e 5f 70 6c 61 63 65 6d 65 6e 74 50 72 6f 63 65 73 73 69 6e 67 51 75 65 75 65 3d 6e 65 77 20 63 28 6e 75 6c 6c 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 70 72 69 6f 72 69 74 79 43 6f 6d 70 61 72 61 74 6f 72 29 2c 74 68 69 73 2e 5f 73 75 72 66 61 63 65 52 65 67 69 73 74 72 79 3d 6e 65 77 20 70 28 74 68 69 73 2e 6f 6e 53 75 72 66 61 63 65 73 52 65 67 69 73 74 65 72 65 64 2e 62 69 6e 64 28 74 68 69 73 29 2c 6e 75 6c 6c 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 65 78 70 65 63 74 65 64 53 75 72 66 61 63 65 73 29 2c 74 68 69 73 2e 69 6e 69 74 69 61 6c 69 7a 65 Data Ascii: s._rules=n,this._extensionContext=i,this._placementRegistry=new u,this._placementProcessingQueue=new c(null==i?void 0:i.priorityComparator),this._surfaceRegistry=new p(this.onSurfacesRegistered.bind(this),null==i?void 0:i.expectedSurfaces),this.initialize

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.16	49901	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:14 UTC	644	OUT	GET /bundles/v1/edgeChromium/latest/common-settings-edgenext.fc618f2b72574c13fece.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:14 UTC	1186	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: a2vHUtV8dpw2n1GZV+7cHA== Last-Modified: Wed, 17 Jan 2024 03:10:22 GMT ETag: 0x8DC1709D7F8E406 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: cfb5ab43-901e-00a6-07f2-4856d4000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:14 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Akamai-Request-BC: [a=23.218.242.10,b=89862387,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=0, origin; dur=0 , cdntime; dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b30f3 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511234.55b30f3 Vary: Origin
2024-01-17 17:07:14 UTC	15198	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 6f 6d 6d 6f 6e 2d 73 65 74 74 69 6e 67 73 2d 65 64 67 65 6e 65 78 74 22 5d 2c 7b 34 38 31 39 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 72 28 74 29 2c 69 2e 64 28 74 2c 7b 43 6f 6d 6d 6f 6e 53 65 74 74 69 6e 67 73 45 64 67 65 4e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4d 61 7d 2c 43 6f 6d 6d 6f 6e 53 65 74 74 69 6e 67 73 45 64 67 65 4e 65 78 Data Ascii: 00006000(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["common-settings-edgenext"],{48194:function(e,t,i){"use strict";i.r(t),i.d(t,{CommonSettingsEdgeNext:function(){return Ma},CommonSettingsEdgeNex
2024-01-17 17:07:14 UTC	9390	IN	Data Raw: 74 65 64 43 6f 6e 74 65 6e 74 7d 20 64 61 74 61 2d 74 3d 22 24 7b 28 65 2c 74 29 3d 3e 74 2e 70 61 72 65 6e 74 2e 63 6f 6e 74 65 6e 74 53 65 6c 65 63 74 6f 72 4d 65 74 61 54 61 67 7d 22 20 40 73 65 6c 65 63 74 6f 72 43 6c 69 63 6b 3d 24 7b 28 65 2c 74 29 3d 3e 65 2e 6f 6e 43 6f 6e 74 65 6e 74 53 65 6c 65 63 74 43 6c 69 63 6b 28 74 2e 65 76 65 6e 74 29 7d 20 40 63 68 61 6e 67 65 3d 24 7b 28 65 2c 74 29 3d 3e 65 2e 6f 6e 43 6f 6e 74 65 6e 74 53 65 6c 65 63 74 43 68 61 6e 67 65 28 74 2e 65 76 65 6e 74 29 7d 3e 3c 2f 63 73 2d 73 65 6c 65 63 74 2d 73 65 74 74 69 6e 67 3e 60 2c 78 65 3d 75 2e 64 79 60 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 65 74 74 69 6e 67 73 2d 65 6e 74 65 72 70 72 69 73 65 2d 68 65 61 64 65 72 22 3e 3c 68 31 20 63 6c 61 73 73 3d 22 73 65 74 Data Ascii: tedContent} data-t="${(e,t)=>t.parent.contentSelectorMetaTag}" @selectorClick=${(e,t)=>e.onContentSelectClick(t.event)} @change=${(e,t)=>e.onContentSelectChange(t.event)}></cs-select-setting>`,xe=u.dy`<div class="settings-enterprise-header"><h1 class="set
2024-01-17 17:07:14 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 69 6e 67 73 2e 61 63 63 65 73 73 69 62 69 6c 69 74 79 4d 61 6e 61 67 65 54 68 65 6d 65 42 75 74 74 6f 6e 7c 7c 6e 75 6c 6c 7d 22 20 72 6f 6c 65 3d 22 62 75 74 74 6f 6e 22 20 40 63 6c 69 63 6b 3d 24 7b 28 65 2c 74 29 3d 3e 65 2e 6f 6e 4d 61 6e 61 67 65 54 68 65 6d 65 42 75 74 74 6f 6e 43 6c 69 63 6b 28 74 2e 65 76 65 6e 74 29 7d 20 64 61 74 61 2d 74 3d 22 24 7b 28 65 2c 74 29 3d 3e 74 2e 70 61 72 65 6e 74 2e 6d 61 6e 61 67 65 54 68 65 6d 65 42 75 74 74 6f 6e 4d 65 74 61 54 61 67 7d 22 3e 24 7b 65 3d 3e 65 2e 73 74 72 69 6e 67 73 2e 6d 61 6e 61 67 65 54 68 65 6d 65 42 75 74 74 6f 6e 7d 3c 2f 66 6c 75 65 6e 74 2d 62 75 74 74 6f 6e 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 60 2c 55 65 3d 75 2e 64 79 60 3c 64 69 76 20 63 6c 61 73 73 Data Ascii: 00006000ings.accessibilityManageThemeButton\|\|null}" role="button" @click=${(e,t)=>e.onManageThemeButtonClick(t.event)} data-t="${(e,t)=>t.parent.manageThemeButtonMetaTag}">${e=>e.strings.manageThemeButton}</fluent-button></div></div>`,Ue=u.dy`<div class
2024-01-17 17:07:15 UTC	8204	IN	Data Raw: 66 3d 22 23 22 3e 3c 73 70 61 6e 3e 24 7b 65 3d 3e 65 2e 66 65 65 64 62 61 63 6b 7d 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 60 2c 46 74 3d 75 2e 64 79 60 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 61 50 72 69 76 61 63 79 4c 69 6e 6b 43 6f 6e 74 61 69 6e 65 72 22 3e 3c 61 20 68 72 65 66 3d 24 7b 65 3d 3e 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 28 74 3d 65 2e 63 61 50 72 69 76 61 63 79 53 65 74 74 69 6e 67 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 75 72 6c 7d 7d 20 61 72 69 61 2d 6c 61 62 65 6c 3d 24 7b 65 3d 3e 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 28 74 3d 65 2e 63 61 50 72 69 76 61 63 79 53 65 74 74 69 6e 67 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 74 69 74 Data Ascii: f="#"><span>${e=>e.feedback}</span></a>`,Ft=u.dy`<div class="caPrivacyLinkContainer"><a href=${e=>{var t;return null===(t=e.caPrivacySettings)\|\|void 0===t?void 0:t.url}} aria-label=${e=>{var t;return null===(t=e.caPrivacySettings)\|\|void 0===t?void 0:t.tit
2024-01-17 17:07:15 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 67 73 2c 65 6e 74 65 72 70 72 69 73 65 46 65 65 64 53 77 69 74 63 68 65 72 4d 6f 64 65 3a 69 2e 65 6e 74 65 72 70 72 69 73 65 46 65 65 64 53 77 69 74 63 68 65 72 4d 6f 64 65 2c 65 6e 74 65 72 70 72 69 73 65 46 65 65 64 53 77 69 74 63 68 65 72 3a 64 2c 6f 6e 43 6f 6e 74 65 6e 74 53 6f 75 72 63 65 43 68 61 6e 67 65 3a 65 3d 3e 49 69 28 65 2c 61 2c 69 2e 65 6e 74 65 72 70 72 69 73 65 46 65 65 64 53 77 69 74 63 68 65 72 4d 6f 64 65 29 7d 7d 7d 2c 4d 69 3d 28 65 2c 74 2c 69 2c 61 29 3d 3e 7b 69 66 28 21 28 65 26 26 65 2e 64 65 74 61 69 6c 26 26 65 2e 64 65 74 61 69 6c 2e 73 65 6c 65 63 74 65 64 49 64 26 26 69 29 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 6e 3d 65 2e 64 65 74 61 69 6c 2e 73 65 6c 65 63 74 65 64 49 64 3b 6c 65 74 20 Data Ascii: 00004000gs,enterpriseFeedSwitcherMode:i.enterpriseFeedSwitcherMode,enterpriseFeedSwitcher:d,onContentSourceChange:e=>Ii(e,a,i.enterpriseFeedSwitcherMode)}}},Mi=(e,t,i,a)=>{if(!(e&&e.detail&&e.detail.selectedId&&i))return;const n=e.detail.selectedId;let
2024-01-17 17:07:15 UTC	12	IN	Data Raw: 70 6c 69 74 57 69 6e 64 6f 77 0d 0a Data Ascii: plitWindow
2024-01-17 17:07:15 UTC	3729	IN	Data Raw: 30 30 30 30 30 45 38 35 0d 0a 50 72 69 76 61 74 65 54 61 72 67 65 74 22 29 29 26 26 28 6e 75 6c 6c 3d 3d 73 7c 7c 6e 75 6c 6c 3d 3d 3d 28 6e 3d 73 2e 65 6e 61 62 6c 65 64 46 65 61 74 75 72 65 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 7c 7c 6e 75 6c 6c 3d 3d 3d 28 6f 3d 6e 2e 69 6e 63 6c 75 64 65 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 63 61 6c 6c 28 6e 2c 22 6d 73 45 64 67 65 53 70 6c 69 74 57 69 6e 64 6f 77 4c 69 6e 6b 4d 6f 64 65 22 29 29 2c 6c 3d 61 77 61 69 74 28 30 2c 4b 74 2e 57 48 29 28 65 69 2e 56 33 2c 6c 69 2e 6e 63 2e 65 6e 61 62 6c 65 5f 73 70 6c 69 74 5f 73 63 72 65 65 6e 2c 21 31 29 3b 69 66 28 72 26 26 21 6c 29 7b 76 61 72 20 63 3b 63 6f 6e 73 74 7b 73 70 6c 69 74 53 63 72 65 65 6e 43 6f 61 63 68 4d 61 72 6b Data Ascii: 00000E85PrivateTarget"))&&(null==s\|\|null===(n=s.enabledFeatures)\|\|void 0===n\|\|null===(o=n.includes)\|\|void 0===o?void 0:o.call(n,"msEdgeSplitWindowLinkMode")),l=await(0,Kt.WH)(ei.V3,li.nc.enable_split_screen,!1);if(r&&!l){var c;const{splitScreenCoachMark
2024-01-17 17:07:15 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 3d 72 2e 6d 61 72 6b 65 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6c 7c 7c 6e 75 6c 6c 3d 3d 3d 28 63 3d 6c 2e 72 65 71 75 65 73 74 49 6e 70 75 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 63 3f 76 6f 69 64 20 30 3a 63 2e 72 65 67 69 6f 6e 29 26 26 28 74 68 69 73 2e 6d 61 72 6b 65 74 4d 69 73 6d 61 74 63 68 43 6f 61 63 68 4d 61 72 6b 45 6c 69 67 69 62 6c 65 3d 21 31 29 7d 76 61 72 20 64 2c 67 2c 75 2c 68 2c 70 2c 6d 2c 6b 3b 28 74 68 69 73 2e 63 68 69 6e 61 4c 61 6e 67 75 61 67 65 4d 69 73 6d 61 74 63 68 45 6c 69 67 69 62 6c 65 3d 22 31 22 3d 3d 3d 61 69 2e 63 2e 67 65 74 51 75 65 72 79 50 61 72 61 6d 65 74 65 72 42 79 4e 61 6d 65 28 22 63 68 69 6e 61 43 6f 6d 70 6c 69 61 6e 63 65 56 50 54 65 73 54 22 2c 77 69 6e 64 6f 77 2e 6c 6f 63 Data Ascii: 00004000=r.market)\|\|void 0===l\|\|null===(c=l.requestInput)\|\|void 0===c?void 0:c.region)&&(this.marketMismatchCoachMarkEligible=!1)}var d,g,u,h,p,m,k;(this.chinaLanguageMismatchEligible="1"===ai.c.getQueryParameterByName("chinaComplianceVPTesT",window.loc
2024-01-17 17:07:15 UTC	12	IN	Data Raw: 6e 63 65 53 65 74 74 69 6e 67 0d 0a Data Ascii: nceSetting
2024-01-17 17:07:15 UTC	15516	IN	Data Raw: 30 30 30 30 33 43 39 30 0d 0a 28 74 68 69 73 2e 63 6f 61 63 68 6d 61 72 6b 73 4b 65 79 2c 21 31 29 3b 69 66 28 65 26 26 65 2e 76 61 6c 75 65 29 7b 63 6f 6e 73 74 20 74 3d 65 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 6e 65 77 20 4d 61 70 28 74 2e 6d 61 70 28 28 65 3d 3e 5b 65 2e 63 6f 61 63 68 4d 61 72 6b 4b 65 79 2c 65 5d 29 29 29 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 6c 6f 63 61 6c 53 74 6f 72 61 67 65 56 61 6c 69 64 61 74 69 6f 6e 28 65 2c 74 29 7b 63 6f 6e 73 74 20 69 3d 74 68 69 73 2e 72 65 61 64 4c 6f 63 61 6c 53 74 6f 72 61 67 65 28 29 2c 61 3d 69 2e 66 69 6e 64 28 28 74 3d 3e 74 2e 63 6f 61 63 68 4d 61 72 6b 4b 65 79 3d 3d 65 29 29 2c 6e 3d 74 2e 66 69 6e 64 28 28 74 3d 3e 74 2e 63 6f 61 63 68 4d 61 72 6b 4b 65 79 3d 3d 65 29 29 3b 69 66 28 21 61 Data Ascii: 00003C90(this.coachmarksKey,!1);if(e&&e.value){const t=e.value;return new Map(t.map((e=>[e.coachMarkKey,e])))}return null}localStorageValidation(e,t){const i=this.readLocalStorage(),a=i.find((t=>t.coachMarkKey==e)),n=t.find((t=>t.coachMarkKey==e));if(!a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.16	49903	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:14 UTC	639	OUT	GET /bundles/v1/edgeChromium/latest/super-coach-mark-wc.80f3254d7775d84bbb65.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:14 UTC	1186	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: aheewn2blr4f4osPJLq+OQ== Last-Modified: Sat, 13 Jan 2024 01:22:14 GMT ETag: 0x8DC13D612DBA3BB Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 7eab8454-d01e-00a2-62bf-45fadc000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:14 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Akamai-Request-BC: [a=23.218.242.10,b=89862516,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=1, origin; dur=0 , cdntime; dur=1 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b3174 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511234.55b3174 Vary: Origin
2024-01-17 17:07:14 UTC	15198	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 75 70 65 72 2d 63 6f 61 63 68 2d 6d 61 72 6b 2d 77 63 22 5d 2c 7b 36 33 35 31 39 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 69 2e 72 28 65 29 2c 69 2e 64 28 65 2c 7b 53 75 70 65 72 43 6f 61 63 68 4d 61 72 6b 57 43 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 46 7d 2c 53 75 70 65 72 43 6f 61 63 68 4d 61 72 6b 57 43 53 74 79 6c 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: 00006000"use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["super-coach-mark-wc"],{63519:function(t,e,i){i.r(e),i.d(e,{SuperCoachMarkWC:function(){return F},SuperCoachMarkWCStyles:function()
2024-01-17 17:07:15 UTC	9390	IN	Data Raw: 43 61 6c 6c 62 61 63 6b 28 6e 75 6c 6c 3d 3d 43 3f 76 6f 69 64 20 30 3a 43 2e 61 63 74 69 6f 6e 44 65 6c 65 67 61 74 65 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 72 65 67 69 73 74 65 72 44 69 73 6d 69 73 73 43 61 6c 6c 62 61 63 6b 28 6e 75 6c 6c 3d 3d 75 3f 76 6f 69 64 20 30 3a 75 2e 61 63 74 69 6f 6e 44 65 6c 65 67 61 74 65 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 79 29 72 65 74 75 72 6e 20 4d 2e 63 6f 61 63 68 6d 61 72 6b 46 6c 6f 61 74 69 6e 67 50 6f 73 69 74 69 6f 6e 3d 79 2c 76 6f 69 64 20 77 2e 57 2e 67 65 74 49 6e 73 74 61 6e 63 65 28 29 2e 74 72 69 67 67 65 72 43 6f 61 63 68 4d 61 72 6b 28 6e 2c 7b 64 61 74 61 3a 4d 7d 29 3b 63 6f 6e 73 74 7b 61 6e 63 68 6f 72 69 6e 67 50 6f 73 69 74 69 6f 6e Data Ascii: Callback(null==C?void 0:C.actionDelegate))\|\|void 0===r?void 0:r.registerDismissCallback(null==u?void 0:u.actionDelegate);if("string"==typeof y)return M.coachmarkFloatingPosition=y,void w.W.getInstance().triggerCoachMark(n,{data:M});const{anchoringPosition
2024-01-17 17:07:15 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 2e 67 6e 29 28 5b 54 2e 6c 6b 5d 2c 46 2e 70 72 6f 74 6f 74 79 70 65 2c 22 44 69 61 6c 6f 67 22 2c 6e 75 6c 6c 29 2c 28 30 2c 6f 2e 67 6e 29 28 5b 54 2e 6c 6b 5d 2c 46 2e 70 72 6f 74 6f 74 79 70 65 2c 22 45 6e 67 61 67 65 42 75 74 74 6f 6e 22 2c 6e 75 6c 6c 29 2c 28 30 2c 6f 2e 67 6e 29 28 5b 54 2e 6c 6b 5d 2c 46 2e 70 72 6f 74 6f 74 79 70 65 2c 22 44 69 73 6d 69 73 73 42 75 74 74 6f 6e 22 2c 6e 75 6c 6c 29 2c 28 30 2c 6f 2e 67 6e 29 28 5b 54 2e 6c 6b 5d 2c 46 2e 70 72 6f 74 6f 74 79 70 65 2c 22 43 6c 6f 73 65 42 75 74 74 6f 6e 22 2c 6e 75 6c 6c 29 2c 28 30 2c 6f 2e 67 6e 29 28 5b 54 2e 6c 6b 5d 2c 46 2e 70 72 6f 74 6f 74 79 70 65 2c 22 4e 61 76 4c 69 6e 6b 22 2c 6e 75 6c 6c 29 2c 28 30 2c 6f 2e 67 6e 29 28 5b 54 2e 6c 6b 5d Data Ascii: 00006000.gn)([T.lk],F.prototype,"Dialog",null),(0,o.gn)([T.lk],F.prototype,"EngageButton",null),(0,o.gn)([T.lk],F.prototype,"DismissButton",null),(0,o.gn)([T.lk],F.prototype,"CloseButton",null),(0,o.gn)([T.lk],F.prototype,"NavLink",null),(0,o.gn)([T.lk]
2024-01-17 17:07:15 UTC	8204	IN	Data Raw: 20 69 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 28 69 3d 74 68 69 73 2e 5f 72 65 67 69 73 74 72 61 74 69 6f 6e 73 2e 72 65 67 69 73 74 65 72 28 74 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 7c 7c 69 2e 72 65 67 69 73 74 65 72 49 74 65 6d 54 72 69 67 67 65 72 4d 65 73 73 61 67 65 28 21 30 29 2c 74 68 69 73 2e 61 64 64 54 72 69 67 67 65 72 65 64 43 6f 61 63 68 4d 61 72 6b 73 28 5b 7b 63 6f 61 63 68 4d 61 72 6b 4b 65 79 3a 74 7d 5d 29 2c 6e 75 6c 6c 21 3d 65 26 26 65 2e 64 61 74 61 29 7b 63 6f 6e 73 74 20 74 3d 65 2e 64 61 74 61 3b 74 68 69 73 2e 49 73 45 6c 69 67 69 62 6c 65 43 6f 61 63 68 4d 61 72 6b 28 74 29 26 26 74 68 69 73 2e 61 64 64 45 6c 69 67 69 62 6c 65 43 6f 61 63 68 4d 61 72 6b 73 28 5b 74 5d 29 7d 74 68 69 73 2e 73 74 61 72 74 53 68 6f 77 50 72 6f 63 65 Data Ascii: i;if(null===(i=this._registrations.register(t))\|\|void 0===i\|\|i.registerItemTriggerMessage(!0),this.addTriggeredCoachMarks([{coachMarkKey:t}]),null!=e&&e.data){const t=e.data;this.IsEligibleCoachMark(t)&&this.addEligibleCoachMarks([t])}this.startShowProce
2024-01-17 17:07:15 UTC	9023	IN	Data Raw: 30 30 30 30 32 33 33 33 0d 0a 3a 69 7d 3d 74 68 69 73 3b 6c 65 74 20 72 3d 69 2e 74 6f 70 2b 69 2e 68 65 69 67 68 74 2f 32 2d 65 2e 68 65 69 67 68 74 2f 32 2c 73 3d 69 2e 74 6f 70 2b 69 2e 68 65 69 67 68 74 2f 32 2d 61 2e 4d 78 2f 32 3b 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 20 6f 2e 4a 74 2e 43 65 6e 74 65 72 3a 62 72 65 61 6b 3b 63 61 73 65 20 6f 2e 4a 74 2e 41 64 6a 61 63 65 6e 74 3a 72 2b 3d 65 2e 68 65 69 67 68 74 2f 32 2d 33 2a 61 2e 4d 78 2f 32 3b 62 72 65 61 6b 3b 63 61 73 65 20 6f 2e 4a 74 2e 4f 70 70 6f 73 69 74 65 3a 72 2b 3d 65 2e 68 65 69 67 68 74 2f 32 2a 2d 31 2b 33 2a 61 2e 4d 78 2f 32 7d 72 65 74 75 72 6e 20 72 3d 4d 61 74 68 2e 6d 61 78 28 72 2c 74 68 69 73 2e 6d 69 6e 54 6f 70 4f 66 66 73 65 74 29 2c 72 3d 4d 61 74 68 2e 6d 69 6e 28 Data Ascii: 00002333:i}=this;let r=i.top+i.height/2-e.height/2,s=i.top+i.height/2-a.Mx/2;switch(t){case o.Jt.Center:break;case o.Jt.Adjacent:r+=e.height/2-3a.Mx/2;break;case o.Jt.Opposite:r+=e.height/2-1+3*a.Mx/2}return r=Math.max(r,this.minTopOffset),r=Math.min(
2024-01-17 17:07:15 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.16	49905	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:15 UTC	629	OUT	GET /bundles/v1/edgeChromium/latest/waffle-wc.c1a2f7ab3d1226ddd602.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:15 UTC	1149	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: tHkgWNIeyGTXsi0GvJhHFA== Last-Modified: Mon, 08 Jan 2024 16:46:12 GMT ETag: 0x8DC106952D8DD27 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 03a60b2d-301e-00f8-3252-4297fa000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:15 GMT Content-Length: 29092 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89862973,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=0, origin; dur=0 , cdntime; dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b333d Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511235.55b333d Vary: Origin
2024-01-17 17:07:15 UTC	15235	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 77 61 66 66 6c 65 2d 77 63 22 5d 2c 7b 37 33 36 34 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 72 28 74 29 2c 69 2e 64 28 74 2c 7b 41 70 70 49 63 6f 6e 4d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4b 7d 2c 54 6f 6f 6c 69 6e 67 49 6e 66 6f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6b 65 7d 2c 57 61 66 66 6c 65 57 43 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 Data Ascii: (self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["waffle-wc"],{73645:function(e,t,i){"use strict";i.r(t),i.d(t,{AppIconMap:function(){return K},ToolingInfo:function(){return ke},WaffleWC:function(){retur
2024-01-17 17:07:15 UTC	9341	IN	Data Raw: 68 74 3d 22 36 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 34 20 36 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 20 20 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 29 22 3e 0a 20 20 20 20 20 20 20 20 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 31 29 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 36 2e 34 34 20 36 34 2e 30 30 30 31 43 33 39 2e 39 33 37 38 20 36 34 2e 30 30 30 31 20 35 30 2e 38 38 20 35 33 2e 30 35 38 20 35 30 2e 38 38 20 33 39 2e 35 36 30 31 43 35 30 2e 38 38 20 32 36 2e 30 36 32 33 20 33 39 2e 39 33 37 38 20 31 35 2e 31 32 30 31 20 32 36 2e 34 34 20 31 35 2e 31 32 30 31 43 31 32 2e 39 34 32 32 20 31 35 2e 31 32 30 31 20 32 20 32 36 2e 30 36 Data Ascii: ht="64" viewBox="0 0 64 64" fill="none"> <g clip-path="url(#clip0)"> <g clip-path="url(#clip1)"> <path d="M26.44 64.0001C39.9378 64.0001 50.88 53.058 50.88 39.5601C50.88 26.0623 39.9378 15.1201 26.44 15.1201C12.9422 15.1201 2 26.06
2024-01-17 17:07:15 UTC	4516	IN	Data Raw: 65 73 22 3e 24 7b 28 30 2c 61 65 2e 72 78 29 28 28 65 3d 3e 65 2e 61 70 70 73 4c 69 73 74 29 2c 72 65 2c 7b 70 6f 73 69 74 69 6f 6e 69 6e 67 3a 21 30 7d 29 7d 3c 2f 64 69 76 3e 3c 66 6c 75 65 6e 74 2d 61 6e 63 68 6f 72 20 61 70 70 65 61 72 61 6e 63 65 3d 22 6c 69 67 68 74 77 65 69 67 68 74 22 20 63 6c 61 73 73 3d 22 61 6c 6c 2d 61 70 70 73 2d 6c 69 6e 6b 22 20 68 72 65 66 3d 24 7b 65 3d 3e 65 2e 61 6c 6c 41 70 70 73 4c 69 6e 6b 7d 20 64 61 74 61 2d 74 3d 22 24 7b 65 3d 3e 28 28 29 3d 3e 7b 76 61 72 20 65 3b 63 6f 6e 73 74 20 74 3d 7b 6e 61 6d 65 3a 22 41 6c 6c 41 70 70 73 4c 69 6e 6b 22 2c 61 63 74 69 6f 6e 3a 55 2e 41 77 2e 43 6c 69 63 6b 2c 62 65 68 61 76 69 6f 72 3a 55 2e 77 75 2e 4e 61 76 69 67 61 74 65 2c 63 6f 6e 74 65 6e 74 3a 7b 68 65 61 64 6c 69 Data Ascii: es">${(0,ae.rx)((e=>e.appsList),re,{positioning:!0})}</div><fluent-anchor appearance="lightweight" class="all-apps-link" href=${e=>e.allAppsLink} data-t="${e=>(()=>{var e;const t={name:"AllAppsLink",action:U.Aw.Click,behavior:U.wu.Navigate,content:{headli

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.16	49906	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:15 UTC	635	OUT	GET /bundles/v1/edgeChromium/latest/common-segments.f57339d038f6992ea243.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:15 UTC	1188	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: a9Wxcp1q6mMNuo24xI+l3w== Last-Modified: Wed, 10 Jan 2024 03:17:37 GMT ETag: 0x8DC118AB23914B1 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 526719f4-601e-0035-0373-43cca5000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:15 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Akamai-Request-BC: [a=23.218.242.10,b=89862977,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=13, origin; dur=0 , cdntime; dur=13 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b3341 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511235.55b3341 Vary: Origin
2024-01-17 17:07:15 UTC	15196	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 6f 6d 6d 6f 6e 2d 73 65 67 6d 65 6e 74 73 22 5d 2c 7b 39 36 33 35 35 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 69 2e 64 28 65 2c 7b 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 7d 7d 29 3b 76 61 72 20 6e 3d 69 28 33 33 39 34 30 29 2c 61 3d 69 28 32 39 37 31 35 29 2c 6f 3d 69 28 39 39 34 35 32 29 2c 72 3d 69 28 37 30 30 34 31 29 2c 73 3d 69 28 38 31 35 38 36 Data Ascii: 00006000"use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["common-segments"],{96355:function(t,e,i){i.d(e,{a:function(){return p}});var n=i(33940),a=i(29715),o=i(99452),r=i(70041),s=i(81586
2024-01-17 17:07:15 UTC	9392	IN	Data Raw: 68 74 3a 36 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 63 6f 6c 6f 72 3a 23 32 34 32 34 32 34 3b 6d 61 78 2d 77 69 64 74 68 3a 32 33 32 70 78 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 73 64 2d 6d 61 73 6b 2d 63 6f 6e 74 65 78 74 2d 62 75 74 74 6f 6e 2d 68 61 6c 66 2d 74 65 78 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 36 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 73 64 2d 6d 61 73 6b 2d 63 6f 6e 74 65 78 74 2d 63 61 6e 63 65 6c 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 63 6f 6c 6f 72 3a 23 32 Data Ascii: ht:600;font-size:14px;line-height:20px;color:#242424;max-width:232px;text-overflow:ellipsis;overflow:hidden}.sd-mask-context-button-half-text{font-size:12px;line-height:16px;font-weight:400}.sd-mask-context-cancel{font-weight:600;line-height:20px;color:#2
2024-01-17 17:07:15 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 61 73 73 3d 22 6e 61 76 69 67 61 74 69 6f 6e 22 20 70 61 72 74 3d 22 6e 61 76 69 67 61 74 69 6f 6e 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 61 62 6c 69 73 74 22 20 70 61 72 74 3d 22 74 61 62 6c 69 73 74 22 20 72 6f 6c 65 3d 22 74 61 62 6c 69 73 74 22 20 24 7b 28 30 2c 67 2e 69 29 28 22 74 61 62 73 43 6f 6e 74 61 69 6e 65 72 22 29 7d 20 40 6b 65 79 64 6f 77 6e 3d 22 24 7b 28 74 2c 65 29 3d 3e 74 2e 68 61 6e 64 6c 65 54 61 62 4b 65 79 44 6f 77 6e 28 65 2e 65 76 65 6e 74 29 7d 22 3e 24 7b 28 30 2c 76 2e 72 78 29 28 28 74 3d 3e 74 2e 74 61 62 4c 69 73 74 49 74 65 6d 73 29 2c 70 2e 64 79 60 3c 64 69 76 20 61 72 69 61 2d 73 65 6c 65 63 74 65 64 3d 22 24 7b 74 3d 3e 74 2e 69 73 41 63 74 69 76 65 7d 22 20 70 61 72 74 3d 22 74 61 Data Ascii: 00006000ass="navigation" part="navigation"><div class="tablist" part="tablist" role="tablist" ${(0,g.i)("tabsContainer")} @keydown="${(t,e)=>t.handleTabKeyDown(e.event)}">${(0,v.rx)((t=>t.tabListItems),p.dy`<div aria-selected="${t=>t.isActive}" part="ta
2024-01-17 17:07:15 UTC	8204	IN	Data Raw: 55 70 64 61 74 65 43 68 69 6c 64 28 7b 2e 2e 2e 6e 75 6c 6c 3d 3d 3d 28 77 3d 74 68 69 73 2e 70 61 72 65 6e 74 54 65 6c 65 6d 65 74 72 79 4f 62 6a 65 63 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 77 3f 76 6f 69 64 20 30 3a 77 2e 63 6f 6e 74 72 61 63 74 2c 6e 61 6d 65 3a 22 68 69 64 65 63 61 72 64 22 2c 61 63 74 69 6f 6e 3a 73 2e 41 77 2e 43 6c 69 63 6b 2c 62 65 68 61 76 69 6f 72 3a 73 2e 77 75 2e 48 69 64 65 2c 74 79 70 65 3a 73 2e 63 39 2e 41 63 74 69 6f 6e 42 75 74 74 6f 6e 7d 29 2e 67 65 74 4d 65 74 61 64 61 74 61 54 61 67 28 29 29 2c 61 3d 28 6e 75 6c 6c 3d 3d 65 7c 7c 6e 75 6c 6c 3d 3d 3d 28 24 3d 65 2e 6d 6f 72 65 53 65 74 74 69 6e 67 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 24 3f 76 6f 69 64 20 30 3a 24 2e 67 65 74 4d 65 74 61 64 61 74 61 54 61 67 28 29 Data Ascii: UpdateChild({...null===(w=this.parentTelemetryObject)\|\|void 0===w?void 0:w.contract,name:"hidecard",action:s.Aw.Click,behavior:s.wu.Hide,type:s.c9.ActionButton}).getMetadataTag()),a=(null==e\|\|null===($=e.moreSettings)\|\|void 0===$?void 0:$.getMetadataTag()
2024-01-17 17:07:15 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 65 74 75 72 6e 20 74 2e 69 73 41 63 74 69 6f 6e 4d 65 6e 75 4f 70 65 6e 26 26 28 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 2e 61 63 74 69 6f 6e 4d 65 6e 75 49 74 65 6d 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 6c 65 6e 67 74 68 29 3e 30 7d 29 2c 6b 29 7d 20 24 7b 28 30 2c 73 2e 67 29 28 28 74 3d 3e 74 2e 73 68 6f 77 4e 61 76 4c 69 73 74 26 26 21 31 21 3d 3d 74 2e 68 65 61 64 65 72 44 61 74 61 2e 69 73 53 68 6f 77 69 6e 67 45 6e 74 69 74 79 4c 69 73 74 29 2c 77 29 7d 20 60 29 7d 0a 60 2c 4f 3d 6e 2e 67 2e 63 6f 6d 70 6f 73 65 28 7b 6e 61 6d 65 3a 22 63 73 2d 73 64 2d 68 65 61 64 65 72 22 2c 73 74 79 6c 65 73 3a 61 2e 78 2c 74 65 6d 70 6c 61 74 65 3a 4d 7d 29 7d 2c 32 39 33 36 36 3a 66 75 6e 63 74 69 6f 6e Data Ascii: 00004000eturn t.isActionMenuOpen&&(null===(e=t.actionMenuItems)\|\|void 0===e?void 0:e.length)>0}),k)} ${(0,s.g)((t=>t.showNavList&&!1!==t.headerData.isShowingEntityList),w)} `)}`,O=n.g.compose({name:"cs-sd-header",styles:a.x,template:M})},29366:function
2024-01-17 17:07:15 UTC	12	IN	Data Raw: 6f 70 3a 76 61 72 28 2d 2d 66 0d 0a Data Ascii: op:var(--f
2024-01-17 17:07:15 UTC	7598	IN	Data Raw: 30 30 30 30 31 44 41 32 0d 0a 6f 6f 74 65 72 2d 6c 69 6e 6b 2d 70 61 64 64 69 6e 67 2c 33 70 78 29 3b 63 6f 6c 6f 72 3a 24 7b 75 2e 43 7d 7d 2e 66 6f 6f 74 65 72 2e 62 6c 75 65 2d 63 74 61 7b 2d 2d 63 74 61 2d 6c 69 6e 6b 2d 63 6f 6c 6f 72 2d 72 65 73 74 3a 23 32 33 35 43 43 46 3b 2d 2d 63 74 61 2d 6c 69 6e 6b 2d 63 6f 6c 6f 72 2d 68 6f 76 65 72 3a 23 32 35 35 31 41 38 3b 2d 2d 63 74 61 2d 6c 69 6e 6b 2d 63 6f 6c 6f 72 2d 61 63 74 69 76 65 3a 23 32 34 33 39 36 36 3b 2d 2d 63 74 61 2d 6c 69 6e 6b 2d 63 6f 6c 6f 72 2d 66 6f 63 75 73 3a 23 32 33 35 43 43 46 3b 2d 2d 63 74 61 2d 6c 69 6e 6b 2d 63 6f 6c 6f 72 2d 66 6f 63 75 73 2d 75 6e 64 65 72 6c 69 6e 65 3a 23 30 30 30 30 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 Data Ascii: 00001DA2ooter-link-padding,3px);color:${u.C}}.footer.blue-cta{--cta-link-color-rest:#235CCF;--cta-link-color-hover:#2551A8;--cta-link-color-active:#243966;--cta-link-color-focus:#235CCF;--cta-link-color-focus-underline:#000000;font-size:14px;line-height
2024-01-17 17:07:15 UTC	13525	IN	Data Raw: 30 30 30 30 33 34 43 39 0d 0a 5f 31 78 5f 33 79 22 5d 7b 68 65 69 67 68 74 3a 63 61 6c 63 28 28 76 61 72 28 2d 2d 63 61 72 64 2d 62 61 73 65 2d 68 65 69 67 68 74 29 20 2a 20 33 70 78 29 20 2b 20 28 76 61 72 28 2d 2d 63 61 72 64 2d 62 61 73 65 2d 67 61 70 29 20 2a 20 32 70 78 29 29 7d 63 73 2d 73 64 2d 63 61 72 64 5b 73 69 7a 65 3d 22 5f 31 78 5f 34 79 22 5d 7b 68 65 69 67 68 74 3a 63 61 6c 63 28 28 76 61 72 28 2d 2d 63 61 72 64 2d 62 61 73 65 2d 68 65 69 67 68 74 29 20 2a 20 34 70 78 29 20 2b 20 28 76 61 72 28 2d 2d 63 61 72 64 2d 62 61 73 65 2d 67 61 70 29 20 2a 20 33 70 78 29 29 7d 3a 3a 73 6c 6f 74 74 65 64 28 5b 73 6c 6f 74 3d 22 63 6f 6e 74 65 6e 74 22 5d 29 7b 68 65 69 67 68 74 3a 31 30 30 25 7d 63 73 2d 73 64 2d 63 61 72 64 20 2e 69 6d 6d 65 72 73 Data Ascii: 000034C9_1x_3y"]{height:calc((var(--card-base-height) * 3px) + (var(--card-base-gap) * 2px))}cs-sd-card[size="_1x_4y"]{height:calc((var(--card-base-height) * 4px) + (var(--card-base-gap) * 3px))}::slotted([slot="content"]){height:100%}cs-sd-card .immers
2024-01-17 17:07:15 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.16	49907	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:15 UTC	720	OUT	GET /bundles/v1/edgeChromium/latest/libs_core_dist_interaction-tracker_MouseTracker_js-libs_weather-shared-wc_dist_weather-card_i-242a89.2cbbef1acf0f863b23f9.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:15 UTC	1186	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: nSjLICLc4IAu8F6NUf8KmA== Last-Modified: Sat, 13 Jan 2024 01:22:12 GMT ETag: 0x8DC13D612371C16 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: d4b43c3c-a01e-00d5-36bf-45d9d2000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:15 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Akamai-Request-BC: [a=23.218.242.10,b=89863074,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=2, origin; dur=0 , cdntime; dur=2 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b33a2 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511235.55b33a2 Vary: Origin
2024-01-17 17:07:15 UTC	15198	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6c 69 62 73 5f 63 6f 72 65 5f 64 69 73 74 5f 69 6e 74 65 72 61 63 74 69 6f 6e 2d 74 72 61 63 6b 65 72 5f 4d 6f 75 73 65 54 72 61 63 6b 65 72 5f 6a 73 2d 6c 69 62 73 5f 77 65 61 74 68 65 72 2d 73 68 61 72 65 64 2d 77 63 5f 64 69 73 74 5f 77 65 61 74 68 65 72 2d 63 61 72 64 5f 69 2d 32 34 32 61 38 39 22 5d 2c 7b 34 30 34 37 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 61 2e 64 28 Data Ascii: 00006000"use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["libs_core_dist_interaction-tracker_MouseTracker_js-libs_weather-shared-wc_dist_weather-card_i-242a89"],{40478:function(e,t,a){a.d(
2024-01-17 17:07:15 UTC	9390	IN	Data Raw: 6e 67 3a 30 7d 2e 77 65 61 5f 63 6f 6e 74 65 6e 74 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 32 36 38 70 78 3b 68 65 69 67 68 74 3a 31 33 36 70 78 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7a 2d 69 6e 64 65 78 3a 31 7d 2e 77 65 61 5f 63 6f 6e 74 65 6e 74 5f 61 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 60 2c 24 3d 69 2e 69 60 20 2e 77 65 61 74 68 65 72 2d 66 6f 72 65 63 61 73 74 2d 69 74 65 6d 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 Data Ascii: ng:0}.wea_content{position:relative;width:268px;height:136px;display:none;z-index:1}.wea_content_a{display:block}`,$=i.i` .weather-forecast-item{display:flex;flex-direction:column;justify-content:space-between;align-items:center;text-align:center;backgrou
2024-01-17 17:07:15 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 6f 6e 2d 66 65 65 64 2d 6c 69 62 73 22 29 2c 61 2e 65 28 22 77 65 61 74 68 65 72 2d 6d 69 6e 69 6d 61 70 2d 77 63 22 29 5d 29 2e 74 68 65 6e 28 61 2e 62 69 6e 64 28 61 2c 37 33 31 39 31 29 29 2c 74 68 69 73 2e 6d 69 6e 69 6d 61 70 4c 6f 61 64 65 64 3d 21 30 29 2c 22 61 71 44 61 73 68 62 6f 61 72 64 22 3d 3d 3d 74 68 69 73 2e 70 72 69 6d 61 72 79 43 61 72 6f 75 73 65 6c 26 26 61 77 61 69 74 20 61 2e 65 28 22 77 65 61 74 68 65 72 2d 73 68 61 72 65 64 2d 77 63 2d 64 65 66 65 72 72 65 64 2d 63 6f 6e 74 65 6e 74 22 29 2e 74 68 65 6e 28 61 2e 62 69 6e 64 28 61 2c 35 37 34 39 31 29 29 2c 74 68 69 73 2e 65 6e 61 62 6c 65 45 70 6c 61 6e 74 49 63 6f 6e 28 29 26 26 61 77 61 69 74 20 61 2e 65 28 22 77 65 61 74 68 65 72 2d 73 68 61 72 65 Data Ascii: 00006000on-feed-libs"),a.e("weather-minimap-wc")]).then(a.bind(a,73191)),this.minimapLoaded=!0),"aqDashboard"===this.primaryCarousel&&await a.e("weather-shared-wc-deferred-content").then(a.bind(a,57491)),this.enableEplantIcon()&&await a.e("weather-share
2024-01-17 17:07:15 UTC	8204	IN	Data Raw: 22 20 68 72 65 66 3d 22 24 7b 65 3d 3e 65 2e 77 65 61 74 68 65 72 44 61 74 61 2e 6c 69 6e 6b 7d 22 20 74 61 72 67 65 74 3d 24 7b 65 3d 3e 65 2e 74 61 72 67 65 74 7d 20 74 69 74 6c 65 3d 22 24 7b 65 3d 3e 28 65 2e 77 65 61 74 68 65 72 44 61 74 61 2e 61 71 69 4c 61 62 65 6c 3f 65 2e 77 65 61 74 68 65 72 44 61 74 61 2e 61 71 69 4c 61 62 65 6c 2b 22 20 22 3a 22 22 29 2b 65 2e 77 65 61 74 68 65 72 44 61 74 61 2e 61 71 69 7d 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 24 7b 65 3d 3e 28 65 2e 77 65 61 74 68 65 72 44 61 74 61 2e 61 71 69 4c 61 62 65 6c 3f 65 2e 77 65 61 74 68 65 72 44 61 74 61 2e 61 71 69 4c 61 62 65 6c 2b 22 20 22 3a 22 22 29 2b 65 2e 77 65 61 74 68 65 72 44 61 74 61 2e 61 71 69 7d 22 20 64 61 74 61 2d 74 3d 22 24 7b 65 3d 3e 65 2e 74 28 22 77 65 Data Ascii: " href="${e=>e.weatherData.link}" target=${e=>e.target} title="${e=>(e.weatherData.aqiLabel?e.weatherData.aqiLabel+" ":"")+e.weatherData.aqi}" aria-label="${e=>(e.weatherData.aqiLabel?e.weatherData.aqiLabel+" ":"")+e.weatherData.aqi}" data-t="${e=>e.t("we
2024-01-17 17:07:15 UTC	10498	IN	Data Raw: 30 30 30 30 32 38 46 36 0d 0a 72 6e 20 4c 7d 2c 57 39 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 2c 58 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 78 7d 2c 59 5f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 2c 5f 57 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 44 7d 2c 61 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6b 7d 2c 61 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 43 7d 2c 62 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 7d 2c 63 42 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 7d 2c 6b 5f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 7d 2c 6d 33 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d Data Ascii: 000028F6rn L},W9:function(){return o},Xt:function(){return x},Y_:function(){return i},_W:function(){return D},ah:function(){return k},ap:function(){return C},bp:function(){return I},cB:function(){return u},k_:function(){return g},m3:function(){return s}
2024-01-17 17:07:15 UTC	5597	IN	Data Raw: 30 30 30 30 31 35 44 31 0d 0a 29 2c 69 3d 6e 2e 73 65 61 72 63 68 50 61 72 61 6d 73 3b 72 65 74 75 72 6e 20 67 28 69 2c 22 6c 69 66 65 49 6e 64 65 78 22 2c 72 2e 6c 69 66 65 49 6e 64 65 78 29 2c 67 28 69 2c 22 64 61 79 22 2c 72 2e 64 61 79 29 2c 67 28 69 2c 22 66 63 74 22 2c 72 2e 66 63 74 29 2c 6e 2e 74 6f 53 74 72 69 6e 67 28 29 7d 66 75 6e 63 74 69 6f 6e 20 67 28 65 2c 74 2c 61 29 7b 61 26 26 65 2e 73 65 74 28 74 2c 22 22 2b 61 29 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 74 2c 61 2c 72 29 7b 69 66 28 21 72 29 7b 76 61 72 20 6e 2c 69 3b 63 6f 6e 73 74 20 74 3d 6e 65 77 20 44 61 74 65 28 6e 75 6c 6c 3d 3d 3d 28 6e 3d 65 2e 61 6c 65 72 74 73 49 6e 66 6f 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 63 72 65 61 74 65 64 29 3b 72 3d Data Ascii: 000015D1),i=n.searchParams;return g(i,"lifeIndex",r.lifeIndex),g(i,"day",r.day),g(i,"fct",r.fct),n.toString()}function g(e,t,a){a&&e.set(t,""+a)}function v(e,t,a,r){if(!r){var n,i;const t=new Date(null===(n=e.alertsInfo)\|\|void 0===n?void 0:n.created);r=
2024-01-17 17:07:15 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.16	49912	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:15 UTC	640	OUT	GET /bundles/v1/edgeChromium/latest/welcomeGreetingLight.cb14641cfd139c8fb23d.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:15 UTC	1186	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: /n8kkT7BCf4ubNwTqlkIsA== Last-Modified: Tue, 16 Jan 2024 23:21:34 GMT ETag: 0x8DC16E9E137B014 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: eda2f4b9-f01e-0034-15d2-48e7a7000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:15 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Akamai-Request-BC: [a=23.218.242.10,b=89863418,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=0, origin; dur=0 , cdntime; dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b34fa Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511235.55b34fa Vary: Origin
2024-01-17 17:07:15 UTC	15198	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 77 65 6c 63 6f 6d 65 47 72 65 65 74 69 6e 67 4c 69 67 68 74 22 5d 2c 7b 39 31 34 39 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 69 2e 72 28 74 29 2c 69 2e 64 28 74 2c 7b 54 6f 6f 6c 69 6e 67 49 6e 66 6f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 24 65 7d 2c 57 65 6c 63 6f 6d 65 47 72 65 65 74 69 6e 67 4c 69 67 68 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 Data Ascii: 00006000"use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["welcomeGreetingLight"],{91493:function(e,t,i){i.r(t),i.d(t,{ToolingInfo:function(){return $e},WelcomeGreetingLight:function(){retu
2024-01-17 17:07:15 UTC	9390	IN	Data Raw: 79 70 65 2c 22 77 65 61 74 68 65 72 49 6e 66 6f 48 69 6e 74 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 6d 2e 67 6e 29 28 5b 7a 2e 4c 6a 5d 2c 69 65 2e 70 72 6f 74 6f 74 79 70 65 2c 22 64 69 73 70 61 6c 79 50 72 65 76 69 65 77 44 61 74 61 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 6d 2e 67 6e 29 28 5b 7a 2e 4c 6a 5d 2c 69 65 2e 70 72 6f 74 6f 74 79 70 65 2c 22 73 68 6f 72 74 4c 6f 63 61 74 69 6f 6e 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 6d 2e 67 6e 29 28 5b 28 30 2c 7a 2e 4c 6a 29 28 7b 6d 6f 64 65 3a 22 62 6f 6f 6c 65 61 6e 22 7d 29 5d 2c 69 65 2e 70 72 6f 74 6f 74 79 70 65 2c 22 69 73 44 61 72 6b 4d 6f 64 65 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 6d 2e 67 6e 29 28 5b 7a 2e 4c 6a 5d 2c 69 65 2e 70 72 6f 74 6f 74 79 70 65 2c 22 6c 6f 63 61 74 69 6f 6e 53 65 61 72 Data Ascii: ype,"weatherInfoHint",void 0),(0,m.gn)([z.Lj],ie.prototype,"dispalyPreviewData",void 0),(0,m.gn)([z.Lj],ie.prototype,"shortLocation",void 0),(0,m.gn)([(0,z.Lj)({mode:"boolean"})],ie.prototype,"isDarkMode",void 0),(0,m.gn)([z.Lj],ie.prototype,"locationSear
2024-01-17 17:07:15 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 34 70 78 3b 77 69 64 74 68 3a 31 34 70 78 7d 2e 61 72 72 6f 77 44 6f 77 6e 49 63 6f 6e 2c 2e 61 72 72 6f 77 44 6f 77 6e 49 63 6f 6e 2e 6c 69 67 68 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 24 7b 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2e 6d 73 6e 2e 63 6f 6d 2f 73 74 61 74 69 63 73 62 2f 73 74 61 74 69 63 73 2f 70 72 2d 34 31 35 31 34 39 36 2f 69 63 6f 6e 73 2d 77 63 2f 69 63 6f 6e 73 2f 77 65 61 74 68 65 72 2f 41 72 72 6f 77 44 6f 77 6e 53 69 6d 70 6c 65 4c 69 67 68 74 2e 73 76 67 22 7d 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 7d 2e 61 72 72 6f 77 44 6f 77 6e 49 63 6f 6e 2e 64 61 72 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 24 7b 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2e 6d 73 6e 2e Data Ascii: 000060004px;width:14px}.arrowDownIcon,.arrowDownIcon.light{background:url(${"https://assets.msn.com/staticsb/statics/pr-4151496/icons-wc/icons/weather/ArrowDownSimpleLight.svg"}) no-repeat center}.arrowDownIcon.dark{background:url(${"https://assets.msn.
2024-01-17 17:07:15 UTC	8204	IN	Data Raw: 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 30 2e 31 32 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 36 70 78 7d 2e 77 65 61 74 68 65 72 2d 66 6f 72 65 63 61 73 74 2d 70 72 65 63 69 70 69 74 61 74 69 6f 6e 20 2e 77 65 61 74 68 65 72 2d 63 75 72 72 65 6e 74 2d 70 72 65 63 69 70 69 74 61 74 69 6f 6e 2d 67 6c 79 70 68 7b 77 69 64 74 68 3a 36 70 78 3b 68 65 69 67 68 74 3a 38 70 78 3b 6d 61 72 67 69 6e 3a 30 7d 2e 77 65 61 74 68 65 72 2d 66 6f 72 65 63 61 73 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 7a 2d 69 6e 64 65 78 3a 32 3b 6f 76 65 72 66 6c 6f 77 3a Data Ascii: eight:400;font-size:12px;line-height:20px;letter-spacing:0.12px;margin-top:6px}.weather-forecast-precipitation .weather-current-precipitation-glyph{width:6px;height:8px;margin:0}.weather-forecast-container{position:relative;height:100%;z-index:2;overflow:
2024-01-17 17:07:15 UTC	10088	IN	Data Raw: 30 30 30 30 32 37 35 43 0d 0a 6e 65 7b 70 61 64 64 69 6e 67 3a 35 70 78 20 33 70 78 20 30 70 78 7d 2e 77 65 61 74 68 65 72 2d 66 75 6c 6c 63 61 72 64 63 6f 76 65 72 7b 7a 2d 69 6e 64 65 78 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 72 69 67 68 74 3a 30 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 73 64 2d 61 63 74 69 6f 6e 2d 77 69 6c 64 66 69 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 33 35 29 7d 3a 3a 73 6c 6f 74 74 65 64 28 5b 73 6c 6f 74 3d 22 6d 6f 72 65 2d 61 63 74 69 6f 6e 73 22 5d 3a 68 6f 76 65 72 29 2c 3a 3a 73 6c 6f 74 74 65 64 28 5b 73 6c 6f 74 3d 22 6d 6f 72 65 2d 61 63 74 69 6f 6e 73 22 5d 3a 61 63 74 69 Data Ascii: 0000275Cne{padding:5px 3px 0px}.weather-fullcardcover{z-index:0;position:absolute;top:0;bottom:0;left:0;right:0;height:100%}.sd-action-wildfire{background:rgba(255,255,255,0.35)}::slotted([slot="more-actions"]:hover),::slotted([slot="more-actions"]:acti
2024-01-17 17:07:15 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.16	49911	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:15 UTC	674	OUT	GET /bundles/v1/edgeChromium/latest/libs_social-data-service_dist_service_SocialService_js.699363c393f9330cadc6.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:15 UTC	1186	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: 2RaDZvXKlesuhFy1MPLRbg== Last-Modified: Tue, 16 Jan 2024 23:21:33 GMT ETag: 0x8DC16E9E103E21B Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: a5bc0ee5-d01e-005e-12d2-48ab90000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:15 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Akamai-Request-BC: [a=23.218.242.10,b=89863431,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=0, origin; dur=0 , cdntime; dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b3507 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511235.55b3507 Vary: Origin
2024-01-17 17:07:15 UTC	15198	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6c 69 62 73 5f 73 6f 63 69 61 6c 2d 64 61 74 61 2d 73 65 72 76 69 63 65 5f 64 69 73 74 5f 73 65 72 76 69 63 65 5f 53 6f 63 69 61 6c 53 65 72 76 69 63 65 5f 6a 73 22 5d 2c 7b 38 39 36 39 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 64 28 74 2c 7b 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 7d 7d 29 3b 76 61 72 20 6f 3d 6e 28 34 34 30 36 30 29 2c 72 3d 6e Data Ascii: 00006000"use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["libs_social-data-service_dist_service_SocialService_js"],{89698:function(e,t,n){n.d(t,{k:function(){return f}});var o=n(44060),r=n
2024-01-17 17:07:15 UTC	9390	IN	Data Raw: 61 73 73 65 74 73 2e 6d 73 6e 2e 63 6f 6d 2f 6c 61 62 73 2f 76 69 65 77 73 2f 43 6f 6d 6d 65 6e 74 57 69 64 67 65 74 2f 6a 73 2f 61 7a 75 72 65 2d 73 74 6f 72 61 67 65 2e 62 6c 6f 62 2e 6d 69 6e 2e 6a 73 22 2c 22 61 7a 75 72 65 2d 73 74 6f 72 61 67 65 2d 62 6c 6f 62 2d 6a 73 73 64 6b 22 2c 28 28 29 3d 3e 77 69 6e 64 6f 77 2e 41 7a 75 72 65 53 74 6f 72 61 67 65 3f 65 28 77 69 6e 64 6f 77 2e 41 7a 75 72 65 53 74 6f 72 61 67 65 29 3a 74 28 29 29 29 7d 29 29 7d 76 61 72 20 75 2c 64 2c 6d 3d 6e 28 37 32 37 37 39 29 2c 70 3d 6e 28 34 34 30 36 30 29 2c 67 3d 6e 28 31 33 32 31 38 29 2c 79 3d 6e 28 35 32 33 32 29 2c 68 3d 6e 28 32 38 39 35 31 29 2c 66 3d 6e 28 37 39 34 39 33 29 2c 76 3d 6e 28 36 33 32 32 38 29 2c 50 3d 6e 28 31 35 35 39 38 29 2c 6b 3d 6e 28 37 37 Data Ascii: assets.msn.com/labs/views/CommentWidget/js/azure-storage.blob.min.js","azure-storage-blob-jssdk",(()=>window.AzureStorage?e(window.AzureStorage):t()))}))}var u,d,m=n(72779),p=n(44060),g=n(13218),y=n(5232),h=n(28951),f=n(79493),v=n(63228),P=n(15598),k=n(77
2024-01-17 17:07:15 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 6d 65 73 73 61 67 65 3a 22 71 75 65 72 79 5f 61 63 63 6f 75 6e 74 22 2c 70 62 3a 7b 2e 2e 2e 63 2e 6d 73 70 68 41 63 63 6f 75 6e 74 2e 70 62 2c 75 72 6c 3a 4f 2e 65 6e 64 70 6f 69 6e 74 73 2e 6d 73 70 68 41 63 63 6f 75 6e 74 2c 6d 65 74 68 6f 64 3a 22 47 45 54 22 2c 63 75 73 74 6f 6d 4d 65 73 73 61 67 65 3a 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 7d 7d 29 7d 3b 69 66 28 34 30 30 3d 3d 3d 65 2e 73 74 61 74 75 73 29 74 72 79 7b 63 6f 6e 73 74 20 6e 3d 61 77 61 69 74 20 65 2e 6a 73 6f 6e 28 29 2c 6f 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 6e 2e 4d 65 73 73 61 67 65 29 3b 72 65 74 75 72 6e 20 38 34 34 3d 3d 3d 6f 2e 65 72 72 6f 72 43 6f 64 65 3f 22 6e 6f 74 5f 70 6f 73 74 65 72 5f 75 73 65 72 22 3a 38 34 38 3d 3d 3d 6f 2e Data Ascii: 00006000message:"query_account",pb:{...c.msphAccount.pb,url:O.endpoints.msphAccount,method:"GET",customMessage:JSON.stringify(e)}})};if(400===e.status)try{const n=await e.json(),o=JSON.parse(n.Message);return 844===o.errorCode?"not_poster_user":848===o.
2024-01-17 17:07:15 UTC	8204	IN	Data Raw: 72 65 74 75 72 6e 20 6e 26 26 7b 63 6f 6e 74 65 6e 74 49 64 3a 6e 2e 69 64 2c 61 76 65 72 61 67 65 53 74 61 72 52 61 74 69 6e 67 3a 72 2f 6f 7d 7d 73 74 61 74 69 63 20 61 73 79 6e 63 20 67 65 74 53 74 61 72 52 61 74 69 6e 67 43 6f 6e 74 65 6e 74 42 79 49 64 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 4f 2e 67 65 74 43 6f 6e 74 65 6e 74 42 79 49 64 28 7b 63 6d 73 49 64 3a 60 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2e 6d 73 6e 2e 63 6f 6d 2f 6c 61 62 73 2f 73 74 61 72 2d 72 61 74 69 6e 67 2f 24 7b 74 7d 2f 24 7b 65 7d 2f 72 61 74 69 6e 67 60 2c 6d 61 72 6b 65 74 3a 74 7d 29 7d 73 74 61 74 69 63 20 61 73 79 6e 63 20 67 65 74 50 6f 73 74 73 42 79 54 6f 70 69 63 49 64 28 65 2c 74 2c 6e 2c 6f 2c 72 2c 73 29 7b 63 6f 6e 73 74 20 69 3d 7b 74 6f 70 69 63 49 64 3a 65 Data Ascii: return n&&{contentId:n.id,averageStarRating:r/o}}static async getStarRatingContentById(e,t){return O.getContentById({cmsId:`https://assets.msn.com/labs/star-rating/${t}/${e}/rating`,market:t})}static async getPostsByTopicId(e,t,n,o,r,s){const i={topicId:e
2024-01-17 17:07:15 UTC	10473	IN	Data Raw: 30 30 30 30 32 38 44 44 0d 0a 6e 2b 2b 29 7b 63 6f 6e 73 74 20 6f 3d 74 5b 6e 5d 2e 73 70 6c 69 74 28 22 3d 22 29 3b 69 66 28 6f 5b 30 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 72 65 74 75 72 6e 20 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6f 5b 31 5d 29 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 28 65 29 7c 7c 74 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 6c 65 6e 67 74 68 3e 30 3f 22 3f 22 2b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 60 24 7b 74 7d 3d 24 7b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 5b 74 5d 29 7d 60 7d 29 Data Ascii: 000028DDn++){const o=t[n].split("=");if(o[0].toLowerCase()==e.toLowerCase())return decodeURIComponent(o[1])}return null}(e)\|\|t}function s(e){return e&&Object.keys(e).length>0?"?"+Object.keys(e).map((function(t){return`${t}=${encodeURIComponent(e[t])}`})
2024-01-17 17:07:15 UTC	4745	IN	Data Raw: 30 30 30 30 31 32 37 44 0d 0a 44 65 6e 69 65 64 4d 73 67 22 2c 34 30 33 3a 22 4e 65 77 50 6f 73 74 53 65 73 73 69 6f 6e 45 78 70 69 72 65 64 4d 73 67 22 2c 35 30 30 3a 22 4e 65 77 50 6f 73 74 57 65 6e 74 57 72 6f 6e 67 4d 73 67 22 2c 62 6f 64 79 54 6f 6f 4c 6f 6e 67 3a 22 4e 65 77 50 6f 73 74 54 6f 6f 4c 6f 6e 67 4d 73 67 22 2c 6f 74 68 65 72 3a 22 4e 65 77 50 6f 73 74 57 65 6e 74 57 72 6f 6e 67 4d 73 67 22 2c 30 3a 22 4e 65 77 50 6f 73 74 57 65 6e 74 57 72 6f 6e 67 4d 73 67 22 2c 31 3a 22 4e 65 77 50 6f 73 74 53 65 73 73 69 6f 6e 45 78 70 69 72 65 64 4d 73 67 22 2c 34 3a 22 4e 65 77 50 6f 73 74 44 65 6e 69 65 64 4d 73 67 22 2c 36 3a 22 4e 65 77 50 6f 73 74 57 65 6e 74 57 72 6f 6e 67 4d 73 67 22 2c 37 3a 22 4e 65 77 50 6f 73 74 57 65 6e 74 57 72 6f 6e 67 Data Ascii: 0000127DDeniedMsg",403:"NewPostSessionExpiredMsg",500:"NewPostWentWrongMsg",bodyTooLong:"NewPostTooLongMsg",other:"NewPostWentWrongMsg",0:"NewPostWentWrongMsg",1:"NewPostSessionExpiredMsg",4:"NewPostDeniedMsg",6:"NewPostWentWrongMsg",7:"NewPostWentWrong
2024-01-17 17:07:15 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.16	49913	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:15 UTC	640	OUT	GET /bundles/v1/edgeChromium/latest/notification-bell-wc.5c9b17182f3d3e78c11b.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:15 UTC	1188	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: r4JLGWCskUsP5DltE3uoQw== Last-Modified: Mon, 08 Jan 2024 16:46:14 GMT ETag: 0x8DC1069540D9092 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 456dfcdf-001e-00df-1152-42d7c7000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:15 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Akamai-Request-BC: [a=23.218.242.10,b=89863430,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=38, origin; dur=0 , cdntime; dur=38 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b3506 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511235.55b3506 Vary: Origin
2024-01-17 17:07:15 UTC	15196	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 62 65 6c 6c 2d 77 63 22 5d 2c 7b 35 37 37 39 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 72 28 69 29 2c 65 2e 64 28 69 2c 7b 42 69 6e 67 54 65 6c 65 6d 65 74 72 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 43 7d 2c 42 69 6e 67 54 65 6c 65 6d 65 74 72 79 41 63 74 69 6f 6e 54 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: 00006000(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["notification-bell-wc"],{57793:function(t,i,e){"use strict";e.r(i),e.d(i,{BingTelemetry:function(){return C},BingTelemetryActionType:function(){
2024-01-17 17:07:15 UTC	9392	IN	Data Raw: 6f 67 67 6c 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 46 6c 79 6f 75 74 28 29 7b 74 68 69 73 2e 69 73 4e 6f 74 69 66 69 63 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 46 6c 79 6f 75 74 4f 70 65 6e 3d 21 74 68 69 73 2e 69 73 4e 6f 74 69 66 69 63 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 46 6c 79 6f 75 74 4f 70 65 6e 7d 72 65 6e 64 65 72 43 6f 75 6e 74 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6e 66 69 67 2e 6e 6f 43 6f 75 6e 74 4e 75 6d 62 65 72 7c 7c 74 68 69 73 2e 63 6f 6e 66 69 67 2e 61 6c 77 61 79 73 53 68 6f 77 4e 6f 74 69 66 69 63 61 74 69 6f 6e 42 65 6c 6c 26 26 21 74 68 69 73 2e 69 73 41 6c 6c 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 54 75 72 6e 65 64 4f 6e 3f 22 22 3a 74 68 69 73 2e 63 6f 6e 66 69 67 2e 63 6f 75 6e 74 4e 75 6d 62 65 Data Ascii: oggleNotificationControlFlyout(){this.isNotificationControlFlyoutOpen=!this.isNotificationControlFlyoutOpen}renderCount(t){return this.config.noCountNumber\|\|this.config.alwaysShowNotificationBell&&!this.isAllNotificationsTurnedOn?"":this.config.countNumbe
2024-01-17 17:07:15 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 34 39 20 30 20 30 20 31 20 2e 31 34 2d 2e 33 36 41 2e 35 31 34 2e 35 31 34 20 30 20 30 20 31 20 2e 35 20 32 68 32 2e 34 36 76 2d 2e 30 34 63 30 2d 2e 32 36 2e 30 35 33 2d 2e 35 30 37 2e 31 35 37 2d 2e 37 34 31 61 32 2e 30 36 20 32 2e 30 36 20 30 20 30 20 31 20 2e 34 33 2d 2e 36 32 35 20 32 2e 30 36 20 32 2e 30 36 20 30 20 30 20 31 20 2e 36 32 35 2d 2e 34 33 41 31 2e 39 32 20 31 2e 39 32 20 30 20 30 20 31 20 34 2e 39 32 32 20 30 48 39 63 2e 32 35 35 20 30 20 2e 35 2e 30 35 32 2e 37 33 34 2e 31 35 36 2e 32 33 35 2e 31 30 34 2e 34 34 33 2e 32 34 35 2e 36 32 35 2e 34 32 32 2e 31 38 33 2e 31 37 37 2e 33 32 39 2e 33 38 36 2e 34 33 38 2e 36 32 35 2e 31 31 2e 32 34 2e 31 36 34 2e 34 38 34 2e 31 36 34 2e 37 33 34 56 32 68 32 2e 34 36 Data Ascii: 0000600049 0 0 1 .14-.36A.514.514 0 0 1 .5 2h2.46v-.04c0-.26.053-.507.157-.741a2.06 2.06 0 0 1 .43-.625 2.06 2.06 0 0 1 .625-.43A1.92 1.92 0 0 1 4.922 0H9c.255 0 .5.052.734.156.235.104.443.245.625.422.183.177.329.386.438.625.11.24.164.484.164.734V2h2.46
2024-01-17 17:07:16 UTC	8204	IN	Data Raw: 31 2e 37 2d 2e 33 32 20 32 2e 35 36 61 38 2e 33 20 38 2e 33 20 30 20 30 20 31 2d 2e 39 20 32 2e 32 34 20 33 2e 38 34 20 33 2e 38 34 20 30 20 30 20 31 2d 33 2e 35 20 32 2e 30 34 63 2d 31 20 30 2d 31 2e 37 37 2d 2e 33 2d 32 2e 33 33 2d 2e 39 61 33 2e 35 37 20 33 2e 35 37 20 30 20 30 20 31 2d 2e 38 34 2d 32 2e 35 32 20 39 2e 38 34 20 39 2e 38 34 20 30 20 30 20 31 20 31 2e 32 35 2d 34 2e 37 33 63 2e 34 2d 2e 36 33 2e 38 37 2d 31 2e 31 32 20 31 2e 34 33 2d 31 2e 34 37 61 33 2e 39 33 20 33 2e 39 33 20 30 20 30 20 31 20 32 2e 30 38 2d 2e 35 32 63 2e 36 34 20 30 20 31 2e 32 2e 31 33 20 31 2e 36 37 2e 34 2e 34 37 2e 32 35 2e 38 34 2e 36 34 20 31 2e 30 39 20 31 2e 31 35 2e 32 35 2e 35 32 2e 33 38 20 31 2e 31 2e 33 38 20 31 2e 37 35 5a 6d 2d 32 2e 37 38 2d 2e 32 38 Data Ascii: 1.7-.32 2.56a8.3 8.3 0 0 1-.9 2.24 3.84 3.84 0 0 1-3.5 2.04c-1 0-1.77-.3-2.33-.9a3.57 3.57 0 0 1-.84-2.52 9.84 9.84 0 0 1 1.25-4.73c.4-.63.87-1.12 1.43-1.47a3.93 3.93 0 0 1 2.08-.52c.64 0 1.2.13 1.67.4.47.25.84.64 1.09 1.15.25.52.38 1.1.38 1.75Zm-2.78-.28
2024-01-17 17:07:16 UTC	11124	IN	Data Raw: 30 30 30 30 32 42 36 38 0d 0a 61 2d 65 78 70 61 6e 64 65 64 3d 22 24 7b 74 3d 3e 74 2e 69 73 4f 70 65 6e 26 26 21 74 2e 69 73 4c 6f 61 64 69 6e 67 7d 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 24 7b 74 3d 3e 74 2e 73 74 72 69 6e 67 73 2e 74 69 74 6c 65 7d 22 20 70 61 72 74 3d 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 62 65 6c 6c 2d 62 75 74 74 6f 6e 22 20 74 69 74 6c 65 3d 22 24 7b 74 3d 3e 74 2e 73 74 72 69 6e 67 73 2e 74 69 74 6c 65 7d 22 3e 24 7b 28 30 2c 70 74 2e 67 29 28 28 74 3d 3e 22 61 6e 61 68 65 69 6d 22 3d 3d 3d 74 2e 69 63 6f 6e 74 79 70 65 29 2c 52 2e 64 79 60 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 24 7b 74 3d 3e 74 2e 69 73 4f 6e 49 6d 61 67 65 26 26 21 74 2e 73 68 6f 77 46 75 6c 6c 50 61 67 65 42 6c 75 72 3f 22 77 68 69 74 65 2d 73 76 67 2d Data Ascii: 00002B68a-expanded="${t=>t.isOpen&&!t.isLoading}" aria-label="${t=>t.strings.title}" part="notification-bell-button" title="${t=>t.strings.title}">${(0,pt.g)((t=>"anaheim"===t.icontype),R.dy`<span class="${t=>t.isOnImage&&!t.showFullPageBlur?"white-svg-
2024-01-17 17:07:16 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 7d 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 69 74 65 6d 20 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 69 74 65 6d 5f 65 6e 64 20 3e 20 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 69 74 65 6d 5f 65 6e 64 5f 68 65 61 64 20 3e 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 69 74 65 6d 5f 65 6e 64 5f 69 63 6f 6e 3a 3a 70 61 72 74 28 63 6f 6e 74 72 6f 6c 29 7b 70 61 64 64 69 6e 67 3a 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 69 74 65 6d 20 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 69 74 65 6d 5f 65 6e 64 20 3e 20 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 69 74 65 6d 5f 65 6e 64 5f 68 65 61 64 20 3e 20 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 69 74 65 6d 5f 65 6e 64 5f 69 63 6f 6e 3a Data Ascii: 00004000}.notification-item .notification-item_end > .notification-item_end_head >.notification-item_end_icon::part(control){padding:0px;line-height:0}.notification-item .notification-item_end > .notification-item_end_head > .notification-item_end_icon:
2024-01-17 17:07:16 UTC	12	IN	Data Raw: 65 77 73 22 2c 74 2e 42 72 6f 0d 0a Data Ascii: ews",t.Bro
2024-01-17 17:07:16 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 61 64 63 61 73 74 4e 65 77 73 5f 44 61 69 6c 79 42 72 69 65 66 3d 22 42 72 6f 61 64 63 61 73 74 4e 65 77 73 5f 44 61 69 6c 79 42 72 69 65 66 22 2c 74 2e 42 72 6f 61 64 63 61 73 74 4e 65 77 73 5f 54 6f 70 53 74 6f 72 69 65 73 3d 22 42 72 6f 61 64 63 61 73 74 4e 65 77 73 5f 54 6f 70 53 74 6f 72 69 65 73 22 2c 74 2e 43 6f 6d 6d 75 6e 69 74 79 5f 53 6f 63 69 61 6c 41 63 68 69 65 76 65 6d 65 6e 74 73 3d 22 43 6f 6d 6d 75 6e 69 74 79 5f 53 6f 63 69 61 6c 41 63 68 69 65 76 65 6d 65 6e 74 73 22 2c 74 2e 43 6f 6d 6d 75 6e 69 74 79 5f 53 6f 63 69 61 6c 41 6c 65 72 74 73 3d 22 43 6f 6d 6d 75 6e 69 74 79 5f 53 6f 63 69 61 6c 41 6c 65 72 74 73 22 2c 74 2e 43 6f 6d 6d 75 6e 69 74 79 5f 53 6f 63 69 61 6c 46 6f 6c 6c 6f 77 65 72 73 3d 22 43 Data Ascii: 00004000adcastNews_DailyBrief="BroadcastNews_DailyBrief",t.BroadcastNews_TopStories="BroadcastNews_TopStories",t.Community_SocialAchievements="Community_SocialAchievements",t.Community_SocialAlerts="Community_SocialAlerts",t.Community_SocialFollowers="C
2024-01-17 17:07:16 UTC	12	IN	Data Raw: 63 75 72 72 65 6e 74 52 6f 75 0d 0a Data Ascii: currentRou
2024-01-17 17:07:16 UTC	7286	IN	Data Raw: 30 30 30 30 31 43 36 41 0d 0a 74 65 2e 69 64 21 3d 3d 65 7c 7c 74 68 69 73 2e 64 65 74 65 63 74 43 75 72 72 65 6e 74 52 6f 75 74 65 28 6d 2c 64 2e 70 61 74 68 2c 64 2e 73 65 61 72 63 68 50 61 72 61 6d 73 29 2c 6d 7d 64 65 74 65 63 74 43 75 72 72 65 6e 74 52 6f 75 74 65 28 74 2c 69 3d 22 22 2c 65 29 7b 69 3d 69 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 63 6f 6e 73 74 20 6e 3d 74 68 69 73 2e 63 75 72 72 65 6e 74 55 72 6c 2e 70 61 74 68 6e 61 6d 65 3b 69 66 28 74 2e 73 65 6c 65 63 74 46 6f 72 53 75 62 50 61 74 68 73 26 26 6e 2e 73 74 61 72 74 73 57 69 74 68 28 69 29 29 74 68 69 73 2e 63 75 72 72 65 6e 74 52 6f 75 74 65 3d 74 3b 65 6c 73 65 20 69 66 28 6e 3d 3d 3d 69 7c 7c 6e 3d 3d 3d 60 24 7b 69 7d 2f 60 29 7b 6c 65 74 20 69 3d 21 31 3b 69 66 28 65 26 26 Data Ascii: 00001C6Ate.id!==e\|\|this.detectCurrentRoute(m,d.path,d.searchParams),m}detectCurrentRoute(t,i="",e){i=i.toLowerCase();const n=this.currentUrl.pathname;if(t.selectForSubPaths&&n.startsWith(i))this.currentRoute=t;else if(n===i\|\|n===`${i}/`){let i=!1;if(e&&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.16	49915	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:15 UTC	501	OUT	GET /bundles/v1/edgeChromium/latest/boost-ad-card.2abb4a2f79dee41491a2.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:15 UTC	1149	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: tGaris0+kWmWBOWS6iqV5w== Last-Modified: Wed, 10 Jan 2024 20:07:01 GMT ETag: 0x8DC1217B5745F13 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: fe86bea7-101e-007e-2300-443aa3000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:15 GMT Content-Length: 27188 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89863662,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=4, origin; dur=0 , cdntime; dur=4 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b35ee Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511235.55b35ee Vary: Origin
2024-01-17 17:07:15 UTC	15235	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 62 6f 6f 73 74 2d 61 64 2d 63 61 72 64 22 5d 2c 7b 39 30 37 31 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 69 2e 72 28 65 29 2c 69 2e 64 28 65 2c 7b 42 6f 6f 73 74 41 64 43 61 72 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 7d 2c 42 6f 6f 73 74 41 64 43 61 72 64 53 74 79 6c 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 56 7d 2c 42 6f 6f 73 74 41 64 43 61 72 64 54 65 6d 70 Data Ascii: "use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["boost-ad-card"],{90711:function(t,e,i){i.r(e),i.d(e,{BoostAdCard:function(){return _},BoostAdCardStyles:function(){return V},BoostAdCardTemp
2024-01-17 17:07:15 UTC	9341	IN	Data Raw: 32 70 78 7d 2e 6c 6f 61 64 69 6e 67 2d 63 61 72 64 2d 73 6d 61 6c 6c 7b 68 65 69 67 68 74 3a 31 34 34 70 78 7d 2e 73 6b 65 6c 65 74 6f 6e 2d 6d 65 64 69 75 6d 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 24 7b 73 74 7d 3b 77 69 64 74 68 3a 32 36 37 70 78 3b 68 65 69 67 68 74 3a 31 34 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 38 70 78 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 73 74 61 72 74 3a 24 7b 6e 74 7d 7d 2e 73 6b 65 6c 65 74 6f 6e 2d 6d 65 64 69 75 6d 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 3a 31 35 70 78 20 30 20 35 30 70 78 20 30 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 73 74 61 72 74 3a 24 7b 6e 74 7d 3b 77 69 64 74 68 3a 37 37 70 78 7d 2e 73 6b 65 6c 65 74 6f 6e 2d 6d 65 64 69 75 6d 3a 6e 74 68 2d 63 68 69 6c 64 Data Ascii: 2px}.loading-card-small{height:144px}.skeleton-medium{border-radius:${st};width:267px;height:14px;margin-bottom:8px;margin-inline-start:${nt}}.skeleton-medium:first-child{margin:15px 0 50px 0;margin-inline-start:${nt};width:77px}.skeleton-medium:nth-child
2024-01-17 17:07:15 UTC	2612	IN	Data Raw: 76 36 2e 38 63 30 20 2e 36 33 2d 2e 35 20 31 2e 31 33 2d 31 2e 31 33 20 31 2e 31 33 68 2d 2e 34 34 63 2d 2e 30 35 2d 2e 31 35 2d 2e 31 34 2d 2e 33 2d 2e 32 36 2d 2e 34 32 6c 2d 2e 33 33 2d 2e 33 33 68 31 2e 30 34 63 2e 32 20 30 20 2e 33 37 2d 2e 31 37 2e 33 37 2d 2e 33 38 56 36 48 38 2e 36 32 43 38 20 36 20 37 2e 35 20 35 2e 35 20 37 2e 35 20 34 2e 38 37 56 32 2e 32 35 48 34 2e 31 32 5a 6d 34 2e 31 32 2e 31 36 76 32 2e 34 36 63 30 20 2e 32 31 2e 31 37 2e 33 38 2e 33 38 2e 33 38 68 32 2e 34 36 4c 38 2e 32 35 20 32 2e 34 31 5a 22 2f 3e 3c 2f 73 76 67 3e 27 7d 2c 35 33 38 31 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 65 2e 5a 3d 27 3c 73 76 67 20 77 69 64 74 68 3d 22 31 34 22 20 68 65 69 67 68 74 3d 22 31 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 Data Ascii: v6.8c0 .63-.5 1.13-1.13 1.13h-.44c-.05-.15-.14-.3-.26-.42l-.33-.33h1.04c.2 0 .37-.17.37-.38V6H8.62C8 6 7.5 5.5 7.5 4.87V2.25H4.12Zm4.12.16v2.46c0 .21.17.38.38.38h2.46L8.25 2.41Z"/></svg>'},53813:function(t,e){e.Z='<svg width="14" height="14" viewBox="0 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.16	49916	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:15 UTC	628	OUT	GET /bundles/v1/edgeChromium/latest/feedback.62b90df367cfe4903710.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:15 UTC	1148	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: wLnCZ4Oawa0UT1u6dtovvw== Last-Modified: Wed, 17 Jan 2024 03:10:20 GMT ETag: 0x8DC1709D6B54D4E Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 54320864-101e-0042-20f2-48efab000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:15 GMT Content-Length: 6263 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89863848,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=0, origin; dur=0 , cdntime; dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b36a8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511235.55b36a8 Vary: Origin
2024-01-17 17:07:15 UTC	6263	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 66 65 65 64 62 61 63 6b 22 5d 2c 7b 33 36 34 34 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 69 2e 72 28 74 29 2c 69 2e 64 28 74 2c 7b 46 65 65 64 62 61 63 6b 4c 69 6e 6b 57 43 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 78 7d 2c 46 65 65 64 62 61 63 6b 4c 69 6e 6b 57 43 53 74 79 6c 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 41 7d 2c 46 65 65 64 62 61 63 6b 4c 69 6e 6b 57 43 Data Ascii: "use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["feedback"],{36446:function(e,t,i){i.r(t),i.d(t,{FeedbackLinkWC:function(){return x},FeedbackLinkWCStyles:function(){return A},FeedbackLinkWC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.16	49917	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:15 UTC	644	OUT	GET /bundles/v1/edgeChromium/latest/feeds-notification-toast.df21c05a4ff3486bc6f3.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:15 UTC	1149	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: Pd37NyA5aKCajaHx/52LbA== Last-Modified: Wed, 17 Jan 2024 03:10:20 GMT ETag: 0x8DC1709D6C25DF9 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: cab432a0-801e-00eb-0cf2-485ade000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:15 GMT Content-Length: 12023 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89864001,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=0, origin; dur=0 , cdntime; dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b3741 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511235.55b3741 Vary: Origin
2024-01-17 17:07:15 UTC	12023	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 66 65 65 64 73 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 74 6f 61 73 74 22 5d 2c 7b 34 35 34 32 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 6f 2e 72 28 74 29 2c 6f 2e 64 28 74 2c 7b 4d 61 72 6b 65 74 4c 61 6e 67 75 61 67 65 54 6f 67 67 6c 65 57 43 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 7d 2c 4d 61 72 6b 65 74 4c 61 6e 67 75 61 67 65 54 6f 67 67 6c 65 57 43 53 74 79 6c 65 73 3a 66 75 6e Data Ascii: "use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["feeds-notification-toast"],{45421:function(e,t,o){o.r(t),o.d(t,{MarketLanguageToggleWC:function(){return m},MarketLanguageToggleWCStyles:fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.16	49918	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:15 UTC	637	OUT	GET /bundles/v1/edgeChromium/latest/superBreakingNews.d1730a88be81c7d36ff0.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:16 UTC	1149	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: QZ3rDl8+YfIIxTNxOzRHUg== Last-Modified: Wed, 10 Jan 2024 20:07:01 GMT ETag: 0x8DC1217B579D729 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 506abbb0-c01e-0107-3300-44e46c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:16 GMT Content-Length: 10748 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89864231,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=4, origin; dur=0 , cdntime; dur=4 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b3827 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511236.55b3827 Vary: Origin
2024-01-17 17:07:16 UTC	10748	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 75 70 65 72 42 72 65 61 6b 69 6e 67 4e 65 77 73 22 5d 2c 7b 34 37 30 36 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 53 75 70 65 72 42 72 65 61 6b 69 6e 67 4e 65 77 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 52 7d 2c 53 75 70 65 72 42 72 65 61 6b 69 6e 67 4e 65 77 73 53 74 79 6c 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 41 7d Data Ascii: "use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["superBreakingNews"],{47060:function(e,t,n){n.r(t),n.d(t,{SuperBreakingNews:function(){return R},SuperBreakingNewsStyles:function(){return A}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.16	49920	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:15 UTC	633	OUT	GET /bundles/v1/edgeChromium/latest/ms-rewards-wc.7f8185e0914181ef2e50.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:16 UTC	1149	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: UJIWiq0FN5lFlz9tzk/26w== Last-Modified: Tue, 16 Jan 2024 23:21:33 GMT ETag: 0x8DC16E9E09BD177 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 9350c0a2-f01e-009c-54d2-4879d0000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:16 GMT Content-Length: 18915 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89864289,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=0, origin; dur=0 , cdntime; dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b3861 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511236.55b3861 Vary: Origin
2024-01-17 17:07:16 UTC	15235	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6d 73 2d 72 65 77 61 72 64 73 2d 77 63 22 5d 2c 7b 37 36 35 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 73 2e 72 28 74 29 2c 73 2e 64 28 74 2c 7b 4d 73 52 65 77 61 72 64 73 57 43 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 55 7d 2c 4d 73 52 65 77 61 72 64 73 57 43 53 53 52 53 74 79 6c 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 65 7d 2c 4d 73 52 65 77 61 72 64 73 57 43 53 Data Ascii: (self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["ms-rewards-wc"],{7655:function(e,t,s){"use strict";s.r(t),s.d(t,{MsRewardsWC:function(){return U},MsRewardsWCSSRStyles:function(){return fe},MsRewardsWCS
2024-01-17 17:07:16 UTC	3680	IN	Data Raw: 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 74 69 74 6c 65 7b 68 65 69 67 68 74 3a 34 38 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 24 7b 75 65 2e 64 74 7d 7d 2e 74 6f 61 73 74 2d 72 6f 6f 74 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 31 30 30 70 78 3b 6c 65 66 74 3a 35 30 25 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 30 29 3b 77 69 64 74 68 3a 66 69 74 2d 63 6f 6e 74 65 6e 74 3b 6d 61 78 2d 77 69 64 74 68 3a 39 35 25 3b 7a 2d 69 6e 64 65 78 3a 37 30 30 3b 2d 2d 66 69 6c 6c 2d 63 6f 6c 6f 72 3a 24 7b 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 28 30 2c 57 2e 24 42 29 28 28 28 29 3d 3e 71 2e 6d 30 29 29 28 6a 2e 5a 50 29 3b 72 65 74 75 72 6e 28 30 2c 51 2e 59 29 Data Ascii: 100%;width:100%}.title{height:48px;border-bottom:1px solid ${ue.dt}}.toast-root{position:fixed;top:100px;left:50%;transform:translate(-50%,0);width:fit-content;max-width:95%;z-index:700;--fill-color:${(()=>{const e=(0,W.$B)((()=>q.m0))(j.ZP);return(0,Q.Y)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.16	49921	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:16 UTC	638	OUT	GET /bundles/v1/edgeChromium/latest/sign-in-control-wc.817df57519f0cbb1eb3f.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:16 UTC	1149	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: T8araKJo4TiX4Tuk4Djj9w== Last-Modified: Mon, 08 Jan 2024 16:46:14 GMT ETag: 0x8DC106953D8D93F Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 75c333bd-201e-0109-4e52-424671000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:16 GMT Content-Length: 10692 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89864386,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=89, clienttt; dur=0, origin; dur=0 , cdntime; dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b38c2 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511236.55b38c2 Vary: Origin
2024-01-17 17:07:16 UTC	10692	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 69 67 6e 2d 69 6e 2d 63 6f 6e 74 72 6f 6c 2d 77 63 22 5d 2c 7b 37 38 35 31 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 65 2e 72 28 6e 29 2c 65 2e 64 28 6e 2c 7b 53 69 67 6e 49 6e 43 6f 6e 74 72 6f 6c 57 43 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 41 7d 2c 53 69 67 6e 49 6e 43 6f 6e 74 72 6f 6c 57 43 53 74 79 6c 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5a 7d 2c 53 69 Data Ascii: "use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["sign-in-control-wc"],{78510:function(t,n,e){e.r(n),e.d(n,{SignInControlWC:function(){return A},SignInControlWCStyles:function(){return Z},Si

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.16	49919	142.251.40.97	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:16 UTC	580	OUT	GET /crx/blobs/AeKPYwzuPHdG7KXik3HHcL6a-Kv5-SV7bEMYguq8BAeQOhsYur09l08rkkrr-edY1Bt1nCKffdNkY-OZrUTKLWF5ESV93vCk6AcDyeyIE9UUl8AQVch1AMZSmuV-bagaPLO2mX-Kra1bZfrs-ijM4A/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_73_0_0.crx HTTP/1.1 Host: clients2.googleusercontent.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:16 UTC	572	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPpN_Ctg9h6JhWCoa7q5UJ9xcZ6F51QfQxvx2A_oT2WprIwe9ZgOa4-_M5nNzK-EijMGRUb2gMWa5Q Accept-Ranges: bytes Content-Length: 91671 X-Goog-Hash: crc32c=UiUPLw== Server: UploadServer Date: Wed, 17 Jan 2024 09:02:48 GMT Expires: Thu, 16 Jan 2025 09:02:48 GMT Cache-Control: public, max-age=31536000 Age: 29068 Last-Modified: Mon, 08 Jan 2024 16:01:35 GMT ETag: 80376878_305ed09b_55aef180_0cf8422a_0e8d83ee Content-Type: application/x-chrome-extension Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-17 17:07:16 UTC	680	IN	Data Raw: 43 72 32 34 03 00 00 00 65 22 00 00 12 ac 04 0a a6 02 30 82 01 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 01 0f 00 30 82 01 0a 02 82 01 01 00 9c 5e d1 18 b0 31 22 89 f4 fd 77 8d 67 83 0b 74 fd c3 32 4a 0e 47 31 00 29 58 34 b1 bf 3d 26 90 3f 5b 6a 2c 4c 7a fd d5 6a b0 75 cf 65 5b 49 85 71 2a 42 61 2f 58 dd ee dc 50 c1 68 fc cd 84 4c 04 88 b9 99 dc 32 25 33 5f 6f f4 ae b5 ad 19 0d d4 b8 48 f7 29 27 b9 3d d6 95 65 f8 ac c8 9c 3f 15 e6 ef 1f 08 ab 11 6a e1 a9 c8 33 55 48 fd 7c bf 58 8c 4d 06 e3 97 75 cc c2 9c 73 5b a6 2a f2 ea 3f 24 f3 9c db 8a 05 9f 46 25 11 1d 18 b4 49 08 19 94 80 29 08 f2 2c 2d c0 2f 90 65 35 29 a6 66 83 e7 4f e4 b2 71 14 5e ff 90 92 01 8d d3 bf ca a0 d0 39 a0 08 28 e3 d2 5f d5 70 68 32 fe 10 5e d5 59 42 50 58 66 5f 38 cc 0b 08 Data Ascii: Cr24e"0"0H0^1"wgt2JG1)X4=&?[j,Lzjue[IqBa/XPhL2%3_oH)'=e?j3UH\|XMus[*?$F%I),-/e5)fOq^9(_ph2^YBPXf_8
2024-01-17 17:07:16 UTC	1252	IN	Data Raw: 9e 79 ec 47 f2 e9 21 73 28 f1 0f ed e0 a2 ef fd 85 93 46 61 75 6c 9c aa 7f 02 20 15 47 a7 1d 47 5a dd f9 20 3c 74 53 fc e2 a8 32 38 2f 32 32 64 6c 4f 02 56 98 a5 91 26 b2 1f cf 22 f5 3e 1f 8b 08 00 00 00 00 00 00 ff bd 7c 5d 73 ab 3c 7b f5 5f e9 dc c7 ed 0c 02 e3 1d f7 6c 13 10 98 58 22 08 7d 80 3a 9d 7b 00 91 8d 41 60 12 93 18 d3 79 fe 7b 95 fb 79 a6 9d 76 ba 3d f6 c1 fb 9e 64 c7 d9 7c 2d 5d 1f 6b 2d 09 f9 df fe e3 0f d5 9c eb 8f e3 34 1f 4f e3 1f ff fa c7 fc d1 34 6d 79 6e ff 69 6a 3e fe e9 ed a8 9b 3f fe f9 8f f3 f1 d7 d8 a8 3f eb d3 38 37 e3 fc c7 bf fe c7 1f 53 79 d5 a7 52 99 e3 9b 6b dc 55 b6 6b 49 e1 5a b9 dd b6 b5 dd ea fa ba df 0a e7 7c 2c 86 e5 ab b0 e7 b7 da d6 5b 99 ed b7 d8 ff e9 e2 e3 e5 28 43 3d ca 1c 5b fb ee 74 34 c7 b7 a8 63 f6 fe fb ef Data Ascii: yG!s(Faul GGZ <tS28/22dlOV&">\|]s<{_lX"}:{A`y{yv=d\|-]k-4O4mynij>??87SyRkUkIZ\|,[(C=[t4c
2024-01-17 17:07:16 UTC	1252	IN	Data Raw: fa 0d 20 96 db 99 67 8a ab 1e bf b1 40 77 15 df 51 19 f0 5e 46 6a 65 00 7a 62 fc b9 29 1f c0 87 06 37 ac 03 62 71 8e 4d 17 f1 5e a9 05 56 0a 77 a5 b4 16 68 38 e7 3d b5 dc e7 82 6a 28 d8 2e a1 be 84 8c a1 2b 0d f0 5b f2 fc 5b 7c fd bd f9 59 05 d6 6a 72 5d 2a 07 e7 b5 86 c8 70 7d 4f 99 5b d6 61 0d 14 2d ec 5a f4 0b 73 60 ce 6c 1c 2b 4d 16 1e c4 40 f4 ae fd 08 ff 29 6b be 66 4c 27 7c 0c ac 84 4f 9f 0d 55 73 c5 c9 c4 f3 78 2f c2 d8 31 6c 1e 93 30 70 33 21 01 67 93 8f 98 e1 3f 1b 3c cb df f7 97 fe 5e 7e c8 72 7e 48 6d fd 86 3a f5 49 20 7c 95 0c b6 99 c6 20 ed f9 21 11 71 5c ae 3f 67 62 74 46 15 ce 07 de a9 16 51 fe c6 6c 42 1f e9 2f b2 33 31 fb 2b 47 60 97 41 1d 1a 9d 17 99 eb 6f b0 0d 5f f1 70 da 70 cd cf 34 f2 fa d2 f9 69 0b 9f 9c 6a 3b 5d d4 aa d9 8d f8 e9 Data Ascii: g@wQ^Fjezb)7bqM^Vwh8=j(.+[[\|Yjr]*p}O[a-Zs`l+M@)kfL'\|OUsx/1l0p3!g?<^~r~Hm:I \| !q\?gbtFQlB/31+G`Ao_pp4ij;]
2024-01-17 17:07:16 UTC	1252	IN	Data Raw: f9 7a 18 be fb db e6 fb f8 6b 65 ef fe 31 f7 fa 57 6f 22 c5 ca 17 99 b7 23 d2 c4 c6 96 e5 30 0e 4b 15 e0 b0 f2 61 5a 46 98 20 1d 38 6a 68 9f 49 00 39 62 31 a9 cd f8 13 4b 7d ed 47 eb fc 3d 9f 5b 08 f7 ab 1a f4 77 7f 7b fb 6b 1c f5 ee 7f df e3 22 7c 25 ff ea 91 9d 24 f5 e8 9d 2a 6b a7 59 17 87 d2 f1 b8 c9 7d 2b d5 d2 96 56 fc da 64 e0 15 f3 f6 b3 5c bd 0f 62 cd f1 5f 7d 3f 84 d6 5f e3 a4 77 e7 ca 36 e3 18 1a 3c b6 bc de 89 af 6c 82 a7 6b 45 63 57 0a 85 d2 0c f8 b5 0f 0f 52 c7 79 3a 5c 1c 12 fc 72 b2 1c 86 2c 50 2c cd 63 c7 e4 c3 b3 19 0f 8e a8 e7 3c 80 2f 30 be e4 ca 99 7a 95 c0 eb 54 1f 07 45 a7 42 ae db b7 2a f2 8e 09 fd e9 1a de df 36 5c 3f a3 c0 f4 51 86 66 e5 4c 41 0d bc f1 16 be dc c2 de 9d 18 af 38 d4 5d 16 72 4b 0d f3 47 c9 d5 de d4 08 32 1e ee 19 Data Ascii: zke1Wo"#0KaZF 8jhI9b1K}G=[w{k"\|%$kY}+Vd\b_}?_w6<lkEcWRy:\r,P,c</0zTEB6\?QfLA8]rKG2
2024-01-17 17:07:16 UTC	1252	IN	Data Raw: a5 5a 2d d5 c0 4d 2d 9c 6c 62 cf 84 01 de a6 da 70 0a 24 0f c4 6f bf c9 84 12 25 e3 a7 2c 57 5b c4 c0 20 2d 45 58 0f a3 ca e8 6d 31 92 8c 53 e2 24 21 08 70 de 5e 1a bd df 30 3b e6 bc 87 eb ef f1 cd f7 e2 c3 99 00 48 75 30 4a 28 94 68 9c ce b9 e1 5b 12 29 29 99 75 a1 02 be 1a 8d d6 19 3d 3b 19 7f 56 c8 11 b9 68 44 a0 1a b5 7c 20 7e 16 77 8c f7 08 71 8e c3 e9 9d 0c 1c 16 b6 de 53 d0 9e d4 88 9c 32 df cf 3c e4 a0 ee 02 53 ff 72 e6 86 0b f1 8a 1c 25 da af 1b f8 3e ee c4 27 32 8a a3 86 d7 56 13 ee f2 66 98 84 a9 7b 61 ea 64 6c 46 1c 63 e7 34 e3 41 bf d1 bc a5 8c 81 23 b3 c1 49 68 a5 a9 23 1f e1 87 4d a3 09 16 14 53 b2 b6 2b 8a da 77 2c 60 57 db 1b 97 32 ee a1 60 72 08 d3 59 1d 71 8b 83 bd 23 fd c0 f8 cf 5d 81 47 7e c3 23 cd f3 9d f8 2e 65 a0 d2 d4 ae 57 d3 c3 Data Ascii: Z-M-lbp$o%,W[ -EXm1S$!p^0;Hu0J(h[))u=;VhD\| ~wqS2<Sr%>'2Vf{adlFc4A#Ih#MS+w,`W2`rYq#]G~#.eW
2024-01-17 17:07:16 UTC	1252	IN	Data Raw: 64 55 c2 4d d8 30 f7 92 1b f6 e8 82 b9 0a e7 56 02 39 32 a0 65 d5 e9 13 1a ac 07 f8 2f de 66 03 e8 1a 18 58 35 8f 5b 1e e2 be a0 10 a2 11 9e 33 86 8d f7 34 ae de a9 2f f5 f0 34 37 63 0c 54 08 b7 c4 e7 04 db bb 1b f3 bb ee 9d fd 73 6f 8b bc ed 72 5b 1b 47 66 99 fb 93 f7 aa 3f 19 85 64 b2 26 b8 2c a6 cf 1c 2a e8 19 cf 16 17 b9 c5 5f 4b a1 df 10 c7 07 05 a6 07 fa cb 7e 39 b0 e2 92 e6 7b f7 fb 1d d7 d2 c7 5a fa 6d 56 31 b7 45 fd 04 2a 18 1f 2a 06 f7 34 92 03 77 08 34 5e 5f 64 dc db a6 03 bc 85 ef 5e fd b2 1e f2 69 92 7c 22 d8 9a 71 a9 b5 90 b9 8e 4c 2e 6e ab e0 c9 3d d0 f8 a2 8c 17 21 50 71 c4 f0 de 78 43 d3 87 c8 20 61 fc 08 be b9 70 d4 92 51 c3 af 96 a6 3c c7 67 39 b8 4b d6 4f 4e dd 19 7e a2 8a 25 02 7f d4 0e 19 30 d3 4b 99 43 ab 0a 6b 9b 68 f8 fb f9 5d c7 Data Ascii: dUM0V92e/fX5[34/47cTsor[Gf?d&,_K~9{ZmV1E*4w4^_d^i\|"qL.n=!PqxC apQ<g9KON~%0KCkh]
2024-01-17 17:07:16 UTC	1252	IN	Data Raw: b4 b5 9a 80 77 37 f0 dd bb ce 82 88 43 4c 4e e0 03 e7 5e 47 82 f9 a3 66 c0 91 81 1b 55 2c de 72 41 5e 93 b0 00 32 7c b2 04 8c 4f d2 60 4b 7b f5 8e 9c 9f 8f f8 88 d1 e8 57 b7 a0 6d d8 84 3b 81 22 fe 96 8e d0 f4 6d d7 2e f8 ee 53 06 f5 05 85 c4 ca c0 34 51 1b 97 8a b7 2f 64 95 d8 3c d3 ef e7 b1 1d 72 af 0e 4d cd f3 2f 45 b7 5f 14 e4 bc 36 63 9a 41 fe 52 af cc 2d 07 95 36 3e 39 9a be 83 eb 60 99 c9 e0 ba 69 cf 8d 23 df 01 c9 e5 43 fc 40 8c 47 39 b0 5d c9 23 38 cb 50 cd 19 94 cf 07 be 5b 79 44 3a 3e 92 2d 0d e7 53 b1 e2 43 b1 b6 39 b1 2e 4e a1 db a5 5c d3 1b fd 85 dc eb 03 3f 4c 4d 1d 4a 31 5f e8 58 5c 8c 87 09 52 8d 4f 42 c8 6b cd 61 84 57 7e 21 fd d3 2a 7c cf 45 8e c7 94 6d f4 40 08 bf 4a 38 3d 30 8f 1d 8f 09 45 0e 71 bc 4c 31 a5 1b 36 bf 94 03 04 55 34 15 Data Ascii: w7CLN^GfU,rA^2\|O`K{Wm;"m.S4Q/d<rM/E_6cAR-6>9`i#C@G9]#8P[yD:>-SC9.N\?LMJ1_X\ROBkaW~!*\|Em@J8=0EqL16U4
2024-01-17 17:07:16 UTC	1252	IN	Data Raw: 1b ce e3 f0 c0 e5 c4 b9 8a 8d 86 d2 86 d7 a5 84 18 e3 67 0b 94 5d 7f ad 7d 0c 19 73 63 e3 2f 8c 1e 7d b2 b8 21 32 14 04 7f c7 f3 df 7b 88 2e df fb a1 72 db c4 6d e0 7d ee e0 ae 1e f4 45 fd 6e 1c fb 18 a4 d6 8e 94 7e b1 9a 7c 01 98 ab be 60 bb 97 84 1b fd 08 b8 19 9b 98 50 36 05 42 b7 69 dd d7 1b a5 77 45 66 bb 27 34 9c 8f 6f dc 3a ef 07 f9 65 fc 4d ab fe be ff e2 2a 05 ff 7b 6e 98 5c f9 eb 1e 70 77 fc de d3 54 82 dd 5a e6 93 36 e3 61 21 bf b7 ff 7e ae b6 a4 00 6f a5 48 ff d2 93 65 18 cf d5 e0 be 9b fc d6 a5 e3 cd 95 cd 3b f3 d9 8c dd f2 59 0d 71 6f ae 73 2e 8d 66 2e bf f7 bd fd e3 5c 35 f0 6b 6d eb ef 31 35 63 18 7c e2 15 7d a2 bf ef a9 ba 1a 9c 5f 85 bd 3b e7 8e 19 fb 11 4f df f5 93 74 70 f7 8f af 9e 29 e7 cf 8f e6 fc c7 bf fe db 7f fc d1 36 a5 6a 3e be Data Ascii: g]}sc/}!2{.rm}En~\|`P6BiwEf'4o:eM*{n\pwTZ6a!~oHe;Yqos.f.\5km15c\|}_;Otp)6j>
2024-01-17 17:07:16 UTC	1252	IN	Data Raw: 7d 47 f5 fe e4 ca 96 ea 05 54 46 b2 6c 6d 18 db b0 1f 5b 46 fc 50 f0 03 6f 99 06 0e 95 bc 5f f1 ff 2d ec 0b 50 32 81 da 2a fa de f7 cf 2d 45 53 c8 7a d6 f1 7b c3 ff 05 29 e7 b5 06 6b 0d 23 85 d7 5b 41 2a e6 67 e5 b5 4d a6 7d dd d1 98 56 51 90 85 9d e2 d0 8c 78 df 6e 21 77 c4 4e 35 23 31 8b a6 b2 78 9e 8a 08 7e 34 9e 64 62 4a 77 c4 a2 08 3d 45 40 39 26 89 e9 11 24 59 40 11 84 f8 0d 80 0a ef 26 8b 26 3b 6b a7 84 35 b0 9d e0 7d 9b c7 67 00 6a ac 91 07 58 83 db 14 ea 86 61 ee 80 65 39 99 7b c6 d1 dc 5a 4f 81 8a 3c 75 29 6a 60 e6 51 0d dc 28 1f f9 7a b9 39 a8 bb d1 1b a9 27 a2 47 d5 93 07 61 34 a8 9b 47 f5 6b cd 5a ec bc be a8 20 9c 4d 20 44 4f 4a 04 32 b1 40 d4 52 c7 42 08 40 bc 2d 11 15 31 76 c0 41 b9 a0 fe 3c f0 ea b0 5f 02 c5 dc 8a 69 cc 6b 85 4c 6a 05 68 Data Ascii: }GTFlm[FPo_-P2-ESz{)k#[AgM}VQxn!wN5#1x~4dbJw=E@9&$Y@&&;k5}gjXae9{ZO<u)j`Q(z9'Ga4GkZ M DOJ2@RB@-1vA<_ikLjh
2024-01-17 17:07:16 UTC	1252	IN	Data Raw: 46 89 86 44 72 34 37 eb 3e 9d 8c 65 86 db 02 f4 68 f4 6a a8 51 9f 36 94 dd 81 9a be ea 94 4d 3d b0 e6 a4 de 02 74 94 df 9e 9b 29 e8 1a da c0 d0 58 5c e8 5d f1 33 3e 26 da da ff 34 36 38 01 0d 6a ff 07 3b 30 94 fd 24 45 15 ec 68 5f e5 87 d9 de ee a2 eb 09 9e 30 49 17 d2 01 e5 b2 9d 16 a3 43 86 ae 58 0e 3d 3a 86 58 e2 3d f9 a8 d6 68 9f f1 c7 25 36 4f f4 3e 91 d9 93 0b 1e d7 d6 64 fe 08 c9 d6 d7 bc 63 3f 11 0b ae 0c e9 7f 65 cd cd e6 cb d1 2b 50 4b 07 08 61 1d 6a 6f 9e 01 00 00 a2 03 00 00 50 4b 03 04 14 00 08 08 08 00 57 39 22 58 00 00 00 00 00 00 00 00 00 00 00 00 19 00 00 00 5f 6c 6f 63 61 6c 65 73 2f 63 61 2f 6d 65 73 73 61 67 65 73 2e 6a 73 6f 6e 8d 92 41 6f db 30 0c 85 ef fb 15 84 2f b9 b8 45 80 1e 86 f6 36 ac 41 b1 c3 b2 a1 58 6f bb 30 32 ed 12 90 45 Data Ascii: FDr47>ehjQ6M=t)X\]3>&468j;0$Eh_0ICX=:X=h%6O>dc?e+PKajoPKW9"X_locales/ca/messages.jsonAo0/E6AXo02E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.16	49922	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:16 UTC	637	OUT	GET /bundles/v1/edgeChromium/latest/mobile-app-upsell.b8d6ed42cd17473a04ef.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:16 UTC	1148	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: ViJeDZqzA/3IF+avgRzIRQ== Last-Modified: Sat, 13 Jan 2024 01:22:16 GMT ETag: 0x8DC13D614733E17 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 3d1e06a3-601e-0019-39bf-45a98f000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:16 GMT Content-Length: 8775 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89864416,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=1, origin; dur=0 , cdntime; dur=1 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b38e0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511236.55b38e0 Vary: Origin
2024-01-17 17:07:16 UTC	8775	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6d 6f 62 69 6c 65 2d 61 70 70 2d 75 70 73 65 6c 6c 22 5d 2c 7b 36 35 30 35 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 6f 2e 72 28 74 29 2c 6f 2e 64 28 74 2c 7b 4d 6f 62 69 6c 65 41 70 70 55 70 73 65 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 7d 2c 4d 6f 62 69 6c 65 41 70 70 55 70 73 65 6c 6c 53 74 79 6c 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 48 7d 2c 4d 6f 62 Data Ascii: "use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["mobile-app-upsell"],{65058:function(e,t,o){o.r(t),o.d(t,{MobileAppUpsell:function(){return v},MobileAppUpsellStyles:function(){return H},Mob

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.16	49923	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:16 UTC	635	OUT	GET /bundles/v1/edgeChromium/latest/codex-bing-chat.f8ae41c0c9bda0e934e1.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:16 UTC	1148	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: LuFsQaSyNUnQWTOMXWKYQQ== Last-Modified: Sat, 13 Jan 2024 01:22:12 GMT ETag: 0x8DC13D6122DB0CC Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 3d1e014a-601e-0019-71bf-45a98f000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:16 GMT Content-Length: 5852 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89864522,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=89, clienttt; dur=0, origin; dur=0 , cdntime; dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b394a Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511236.55b394a Vary: Origin
2024-01-17 17:07:16 UTC	5852	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 6f 64 65 78 2d 62 69 6e 67 2d 63 68 61 74 22 5d 2c 7b 39 30 38 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 43 6f 64 65 78 42 69 6e 67 43 68 61 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 54 7d 2c 43 6f 64 65 78 42 69 6e 67 43 68 61 74 53 74 79 6c 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 52 7d 2c 43 6f 64 65 78 42 69 6e 67 Data Ascii: "use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["codex-bing-chat"],{90843:function(e,t,n){n.r(t),n.d(t,{CodexBingChat:function(){return T},CodexBingChatStyles:function(){return R},CodexBing

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.16	49925	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:16 UTC	503	OUT	GET /bundles/v1/edgeChromium/latest/card-actions-wc.094e958a7da9dfa633df.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:16 UTC	1186	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: HNG2uZZu5jgH/AUxGtzMCA== Last-Modified: Wed, 17 Jan 2024 03:10:22 GMT ETag: 0x8DC1709D8046FCB Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: bf53dc82-301e-00ac-4af2-4858c1000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:16 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Akamai-Request-BC: [a=23.218.242.10,b=89864736,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=89, clienttt; dur=1, origin; dur=0 , cdntime; dur=1 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b3a20 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511236.55b3a20 Vary: Origin
2024-01-17 17:07:16 UTC	15198	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 61 72 64 2d 61 63 74 69 6f 6e 73 2d 77 63 22 5d 2c 7b 32 37 39 30 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 2c 72 2c 6e 2c 61 3b 6f 2e 64 28 74 2c 7b 48 49 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 2c 49 7a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 2c 4f 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 Data Ascii: 00006000(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["card-actions-wc"],{27906:function(e,t,o){"use strict";var i,r,n,a;o.d(t,{HI:function(){return c},Iz:function(){return a},OZ:function(){return d
2024-01-17 17:07:16 UTC	9390	IN	Data Raw: 6e 61 62 6c 65 64 3a 65 7d 3d 74 68 69 73 2e 63 61 72 64 41 63 74 69 6f 6e 50 72 6f 70 73 7c 7c 7b 7d 3b 65 26 26 74 68 69 73 2e 72 65 73 65 74 43 61 72 64 41 63 74 69 6f 6e 28 21 30 29 7d 2c 74 68 69 73 2e 68 61 6e 64 6c 65 42 72 65 61 6b 70 6f 69 6e 74 43 68 61 6e 67 65 3d 28 29 3d 3e 74 68 69 73 2e 72 65 73 65 74 43 61 72 64 41 63 74 69 6f 6e 28 29 2c 74 68 69 73 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 43 68 61 6e 67 65 48 61 6e 64 6c 65 72 3d 28 29 3d 3e 7b 74 68 69 73 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3d 28 30 2c 77 65 2e 59 29 28 29 3f 41 65 2e 56 65 3a 41 65 2e 50 35 2c 74 68 69 73 2e 62 61 73 65 4c 61 79 65 72 4c 75 6d 69 6e 61 6e 63 65 3d 28 30 2c 77 65 2e 59 29 28 29 3f 62 65 2e 68 2e 44 61 72 6b 4d 6f 64 65 3a 62 65 2e 68 Data Ascii: nabled:e}=this.cardActionProps\|\|{};e&&this.resetCardAction(!0)},this.handleBreakpointChange=()=>this.resetCardAction(),this.backgroundColorChangeHandler=()=>{this.backgroundColor=(0,we.Y)()?Ae.Ve:Ae.P5,this.baseLayerLuminance=(0,we.Y)()?be.h.DarkMode:be.h
2024-01-17 17:07:16 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 65 63 74 65 64 41 49 4f 72 42 6f 74 43 72 65 61 74 65 64 43 68 6f 6f 73 69 6e 67 3d 28 65 2c 74 29 3d 3e 7b 69 66 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 4d 6f 75 73 65 45 76 65 6e 74 26 26 22 63 6c 69 63 6b 22 3d 3d 3d 74 2e 74 79 70 65 7c 7c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 4b 65 79 62 6f 61 72 64 45 76 65 6e 74 26 26 28 74 2e 63 6f 64 65 3d 3d 3d 45 65 2e 6b 4c 7c 7c 22 53 70 61 63 65 22 3d 3d 3d 74 2e 63 6f 64 65 29 29 7b 63 6f 6e 73 74 20 74 3d 74 68 69 73 2e 72 65 70 6f 72 74 53 75 73 70 65 63 74 65 64 41 49 4f 72 42 6f 74 43 72 65 61 74 65 64 4f 70 74 69 6f 6e 73 3b 74 68 69 73 2e 72 65 70 6f 72 74 53 75 73 70 65 63 74 65 64 41 49 4f 72 42 6f 74 43 72 65 61 74 65 64 4f 70 74 69 6f 6e 73 3d 4f 62 6a 65 63 74 2e Data Ascii: 00006000ectedAIOrBotCreatedChoosing=(e,t)=>{if(t instanceof MouseEvent&&"click"===t.type\|\|t instanceof KeyboardEvent&&(t.code===Ee.kL\|\|"Space"===t.code)){const t=this.reportSuspectedAIOrBotCreatedOptions;this.reportSuspectedAIOrBotCreatedOptions=Object.
2024-01-17 17:07:16 UTC	8204	IN	Data Raw: 6c 65 53 68 61 72 65 43 6f 70 79 4c 69 6e 6b 3a 73 2c 6c 6f 63 61 6c 69 7a 65 64 53 74 72 69 6e 67 73 3a 6c 2c 73 68 61 72 65 53 6f 63 69 61 6c 4d 65 64 69 61 3a 63 7d 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2c 7b 63 61 72 64 41 63 74 69 6f 6e 4d 65 6e 75 49 74 65 6d 53 68 61 72 65 3a 64 2c 73 68 61 72 65 44 69 61 6c 6f 67 43 6f 70 79 42 75 74 74 6f 6e 54 65 78 74 3a 70 2c 73 68 61 72 65 44 69 61 6c 6f 67 4c 69 6e 6b 43 6f 70 69 65 64 42 75 74 74 6f 6e 54 65 78 74 3a 75 2c 64 69 61 6c 6f 67 43 6c 6f 73 65 42 75 74 74 6f 6e 54 65 78 74 3a 68 2c 64 69 61 6c 6f 67 41 72 69 61 54 65 78 74 3a 67 7d 3d 6c 2c 76 3d 4d 65 2e 62 75 69 6c 64 53 68 6f 72 74 55 72 6c 28 7b 64 6f 63 75 6d 65 6e 74 49 64 3a 6f 2c 73 68 61 72 69 6e 67 55 72 6c 3a 69 2c 64 6f 63 75 6d 65 6e Data Ascii: leShareCopyLink:s,louserzedStrings:l,shareSocialMedia:c}=this.config,{cardActionMenuItemShare:d,shareDialogCopyButtonText:p,shareDialogLinkCopiedButtonText:u,dialogCloseButtonText:h,dialogAriaText:g}=l,v=Me.buildShortUrl({documentId:o,sharingUrl:i,documen
2024-01-17 17:07:16 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 74 61 74 75 73 28 29 3b 74 68 69 73 2e 6d 65 6e 75 49 74 65 6d 4f 6e 43 6c 69 63 6b 28 65 2c 68 2e 55 73 2e 46 6f 6c 6c 6f 77 54 6f 70 69 63 2c 21 31 2c 21 30 2c 21 31 29 2c 74 68 69 73 2e 6d 61 70 44 69 61 6c 6f 67 50 72 6f 70 73 28 75 2e 69 52 2e 57 68 79 41 6d 49 53 65 65 29 7d 2c 61 63 74 69 6f 6e 42 75 74 74 6f 6e 43 61 6c 6c 62 61 63 6b 3a 28 29 3d 3e 74 68 69 73 2e 72 65 73 65 74 43 61 72 64 41 63 74 69 6f 6e 28 21 30 29 2c 63 61 6e 63 65 6c 42 75 74 74 6f 6e 43 61 6c 6c 62 61 63 6b 3a 28 29 3d 3e 74 68 69 73 2e 72 65 73 65 74 43 61 72 64 41 63 74 69 6f 6e 28 21 30 29 2c 6c 6f 63 61 6c 69 7a 65 64 53 74 72 69 6e 67 73 3a 7b 61 63 74 69 6f 6e 42 75 74 74 6f 6e 41 72 69 61 4c 61 62 65 6c 3a 74 2c 61 63 74 69 6f 6e 42 75 Data Ascii: 00004000tatus();this.menuItemOnClick(e,h.Us.FollowTopic,!1,!0,!1),this.mapDialogProps(u.iR.WhyAmISee)},actionButtonCallback:()=>this.resetCardAction(!0),cancelButtonCallback:()=>this.resetCardAction(!0),louserzedStrings:{actionButtonAriaLabel:t,actionBu
2024-01-17 17:07:16 UTC	12	IN	Data Raw: 70 73 29 7c 7c 76 6f 69 64 20 0d 0a Data Ascii: ps)\|\|void
2024-01-17 17:07:16 UTC	8168	IN	Data Raw: 30 30 30 30 31 46 44 43 0d 0a 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 61 63 74 69 6f 6e 44 69 61 6c 6f 67 50 72 6f 70 73 2e 6c 6f 63 61 6c 69 7a 65 64 53 74 72 69 6e 67 73 2e 61 63 74 69 6f 6e 42 75 74 74 6f 6e 54 65 78 74 7d 7d 3c 2f 73 70 61 6e 3e 3c 2f 66 6c 75 65 6e 74 2d 62 75 74 74 6f 6e 3e 3c 66 6c 75 65 6e 74 2d 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 61 63 74 69 6f 6e 2d 64 69 61 6c 6f 67 2d 63 6f 6e 74 72 6f 6c 2d 62 75 74 74 6f 6e 73 22 20 73 6c 6f 74 3d 22 63 61 6e 63 65 6c 2d 62 75 74 74 6f 6e 22 20 69 64 3d 22 61 63 74 69 6f 6e 44 69 61 6c 6f 67 43 61 6e 63 65 6c 42 75 74 74 6f 6e 22 20 74 61 62 69 6e 64 65 78 3d 22 30 22 20 40 63 6c 69 63 6b 3d 24 7b 65 3d 3e 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 28 74 3d 65 Data Ascii: 00001FDC0===t?void 0:t.actionDialogProps.louserzedStrings.actionButtonText}}</span></fluent-button><fluent-button class="action-dialog-control-buttons" slot="cancel-button" id="actionDialogCancelButton" tabindex="0" @click=${e=>{var t;return null===(t=e
2024-01-17 17:07:16 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 66 6c 75 65 6e 74 2d 62 75 74 74 6f 6e 3e 3c 2f 6d 73 6e 2d 61 63 74 69 6f 6e 2d 64 69 61 6c 6f 67 3e 60 3b 76 74 2e 53 3b 63 6f 6e 73 74 20 48 74 3d 6d 65 2e 64 79 60 3c 6d 73 6e 2d 61 63 74 69 6f 6e 73 2d 6d 65 6e 75 20 24 7b 28 30 2c 68 74 2e 69 29 28 22 61 63 74 69 6f 6e 73 4d 65 6e 75 52 65 66 22 29 7d 20 63 6c 61 73 73 3d 24 7b 65 3d 3e 65 2e 63 61 72 64 41 63 74 69 6f 6e 50 72 6f 70 73 2e 75 73 65 44 65 74 61 69 6c 50 61 67 65 53 74 79 6c 65 73 3f 22 64 65 74 61 69 6c 2d 70 61 67 65 22 3a 22 22 7d 20 3a 75 73 65 46 61 73 74 41 6e 63 68 6f 72 65 64 52 65 67 69 6f 6e 3d 24 7b 65 3d 3e 65 2e 75 73 65 46 61 73 74 41 6e 63 68 6f 72 65 64 52 65 67 69 6f 6e 7d 20 3a 72 65 66 65 72 72 65 72 42 75 74 74 6f 6e 3d 24 7b 65 3d 3e Data Ascii: 00004000fluent-button></msn-action-dialog>`;vt.S;const Ht=me.dy`<msn-actions-menu ${(0,ht.i)("actionsMenuRef")} class=${e=>e.cardActionProps.useDetailPageStyles?"detail-page":""} :useFastAnchoredRegion=${e=>e.useFastAnchoredRegion} :referrerButton=${e=>
2024-01-17 17:07:16 UTC	12	IN	Data Raw: 65 63 74 43 75 72 72 65 6e 74 0d 0a Data Ascii: ectCurrent
2024-01-17 17:07:16 UTC	16384	IN	Data Raw: 30 30 30 30 34 41 46 44 0d 0a 52 6f 75 74 65 28 65 2c 74 3d 22 22 2c 6f 29 7b 74 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 63 6f 6e 73 74 20 69 3d 74 68 69 73 2e 63 75 72 72 65 6e 74 55 72 6c 2e 70 61 74 68 6e 61 6d 65 3b 69 66 28 65 2e 73 65 6c 65 63 74 46 6f 72 53 75 62 50 61 74 68 73 26 26 69 2e 73 74 61 72 74 73 57 69 74 68 28 74 29 29 74 68 69 73 2e 63 75 72 72 65 6e 74 52 6f 75 74 65 3d 65 3b 65 6c 73 65 20 69 66 28 69 3d 3d 3d 74 7c 7c 69 3d 3d 3d 60 24 7b 74 7d 2f 60 29 7b 6c 65 74 20 74 3d 21 31 3b 69 66 28 6f 26 26 6f 2e 74 6f 53 74 72 69 6e 67 28 29 26 26 6f 2e 66 6f 72 45 61 63 68 28 28 28 65 2c 6f 29 3d 3e 7b 6f 3d 6f 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 2d 31 3d 3d 3d 74 68 69 73 2e 63 75 72 72 65 6e 74 53 65 61 72 63 68 50 Data Ascii: 00004AFDRoute(e,t="",o){t=t.toLowerCase();const i=this.currentUrl.pathname;if(e.selectForSubPaths&&i.startsWith(t))this.currentRoute=e;else if(i===t\|\|i===`${t}/`){let t=!1;if(o&&o.toString()&&o.forEach(((e,o)=>{o=o.toLowerCase(),-1===this.currentSearchP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.16	49927	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:16 UTC	720	OUT	GET /bundles/v1/edgeChromium/latest/libs_location-service_dist_AutoSuggestService_index_js-libs_location-service_dist_profiles_We-d085cf.9f10c53864a61091eef2.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:16 UTC	1149	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: j3FkawAKL9mDPu32f5ktGw== Last-Modified: Mon, 08 Jan 2024 16:46:13 GMT ETag: 0x8DC1069530C5D60 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 4710ec72-e01e-0055-5452-428e87000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:16 GMT Content-Length: 49104 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89864774,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=2, origin; dur=0 , cdntime; dur=2 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b3a46 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511236.55b3a46 Vary: Origin
2024-01-17 17:07:16 UTC	15235	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6c 69 62 73 5f 6c 6f 63 61 74 69 6f 6e 2d 73 65 72 76 69 63 65 5f 64 69 73 74 5f 41 75 74 6f 53 75 67 67 65 73 74 53 65 72 76 69 63 65 5f 69 6e 64 65 78 5f 6a 73 2d 6c 69 62 73 5f 6c 6f 63 61 74 69 6f 6e 2d 73 65 72 76 69 63 65 5f 64 69 73 74 5f 70 72 6f 66 69 6c 65 73 5f 57 65 2d 64 30 38 35 63 66 22 5d 2c 7b 37 34 31 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 64 28 74 2c 7b 62 3a 66 75 6e 63 74 69 Data Ascii: (self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["libs_location-service_dist_AutoSuggestService_index_js-libs_location-service_dist_profiles_We-d085cf"],{7415:function(e,t,i){"use strict";i.d(t,{b:functi
2024-01-17 17:07:16 UTC	9341	IN	Data Raw: 53 75 62 72 65 67 69 6f 6e 2c 63 6f 75 6e 74 72 79 3a 61 26 26 28 61 2e 61 64 64 72 65 73 73 43 6f 75 6e 74 72 79 7c 7c 22 22 29 2c 6c 61 74 69 74 75 64 65 3a 6f 26 26 4e 75 6d 62 65 72 28 6f 29 2e 74 6f 53 74 72 69 6e 67 28 29 2c 6c 6f 6e 67 69 74 75 64 65 3a 72 26 26 4e 75 6d 62 65 72 28 72 29 2e 74 6f 53 74 72 69 6e 67 28 29 2c 74 79 70 65 56 36 3a 65 2e 73 75 67 67 65 73 74 69 6f 6e 2e 74 79 70 65 2c 73 75 62 54 79 70 65 3a 65 2e 73 75 67 67 65 73 74 69 6f 6e 2e 73 75 62 54 79 70 65 2c 73 65 61 72 63 68 54 65 78 74 3a 65 2e 73 75 67 67 65 73 74 69 6f 6e 2e 73 65 61 72 63 68 54 65 78 74 2c 66 6f 72 6d 61 74 74 65 64 41 64 64 72 65 73 73 3a 65 2e 73 75 67 67 65 73 74 69 6f 6e 2e 66 6f 72 6d 61 74 65 64 41 64 64 72 65 73 73 2c 72 65 61 64 4c 69 6e 6b 3a Data Ascii: Subregion,country:a&&(a.addressCountry\|\|""),latitude:o&&Number(o).toString(),longitude:r&&Number(r).toString(),typeV6:e.suggestion.type,subType:e.suggestion.subType,searchText:e.suggestion.searchText,formattedAddress:e.suggestion.formatedAddress,readLink:
2024-01-17 17:07:16 UTC	16384	IN	Data Raw: 63 65 2e 75 70 64 61 74 65 57 65 61 74 68 65 72 53 65 74 74 69 6e 67 73 28 65 2e 74 6f 53 74 72 69 6e 67 28 29 2c 6e 75 6c 6c 2c 74 2c 76 6f 69 64 20 30 2c 21 30 29 7d 63 61 74 63 68 28 65 29 7b 28 30 2c 68 2e 4f 4f 29 28 65 2c 70 2e 6e 54 4c 2c 22 65 72 72 6f 72 20 69 6e 20 6c 69 62 72 61 72 79 20 5b 6c 6f 63 61 74 69 6f 6e 2d 73 65 72 76 69 63 65 5d 2c 44 69 73 70 6c 61 79 20 75 6e 69 74 20 55 70 64 61 74 65 20 66 61 69 6c 65 64 2e 22 29 2c 69 3d 21 31 7d 72 65 74 75 72 6e 20 69 7d 61 73 79 6e 63 20 73 65 74 45 70 6c 61 6e 74 53 74 61 74 75 73 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 6e 73 74 61 6e 63 65 2e 75 70 64 61 74 65 55 73 65 72 53 65 74 74 69 6e 67 73 28 7b 65 70 6c 61 6e 74 47 61 6d 65 4a 6f 69 6e 65 64 3a 65 2e 74 6f 53 74 72 69 6e Data Ascii: ce.updateWeatherSettings(e.toString(),null,t,void 0,!0)}catch(e){(0,h.OO)(e,p.nTL,"error in library [location-service],Display unit Update failed."),i=!1}return i}async setEplantStatus(e){return this.instance.updateUserSettings({eplantGameJoined:e.toStrin
2024-01-17 17:07:16 UTC	8144	IN	Data Raw: 2c 32 38 37 33 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 64 28 74 2c 7b 6d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 53 7d 7d 29 3b 76 61 72 20 61 3d 69 28 34 34 30 36 30 29 2c 6e 3d 69 28 37 37 36 36 29 2c 73 3d 69 28 33 32 33 30 38 29 2c 6f 3d 69 28 33 33 37 37 39 29 2c 72 3d 69 28 35 33 30 32 29 2c 6c 3d 69 28 35 39 33 39 38 29 2c 75 3d 69 28 35 31 31 36 31 29 2c 63 3d 69 28 31 35 35 39 38 29 3b 63 6f 6e 73 74 20 64 3d 22 6d 69 6e 69 61 70 70 5f 64 65 74 65 63 74 65 64 5f 6c 6f 63 22 3b 66 75 6e 63 74 69 6f 6e 20 67 28 29 7b 63 6f 6e 73 74 20 65 3d 28 30 2c 63 2e 24 6f 29 28 29 2e 67 65 74 49 74 65 6d 28 64 29 3b 69 66 28 65 29 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 70 61 72 73 65 28 Data Ascii: ,28738:function(e,t,i){"use strict";i.d(t,{m:function(){return S}});var a=i(44060),n=i(7766),s=i(32308),o=i(33779),r=i(5302),l=i(59398),u=i(51161),c=i(15598);const d="miniapp_detected_loc";function g(){const e=(0,c.$o)().getItem(d);if(e)return JSON.parse(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.16	49929	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:16 UTC	647	OUT	GET /bundles/v1/edgeChromium/latest/weather-card-data-connector.36a9bcbc4691ff2deb78.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:16 UTC	1186	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: zlyyoF4RvzQ2uuEs+podkQ== Last-Modified: Mon, 08 Jan 2024 16:46:14 GMT ETag: 0x8DC106953B6F86F Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: d7d345f7-a01e-0101-6c52-421e60000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:16 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Akamai-Request-BC: [a=23.218.242.10,b=89864878,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=3, origin; dur=0 , cdntime; dur=3 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b3aae Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511236.55b3aae Vary: Origin
2024-01-17 17:07:16 UTC	15198	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 77 65 61 74 68 65 72 2d 63 61 72 64 2d 64 61 74 61 2d 63 6f 6e 6e 65 63 74 6f 72 22 5d 2c 7b 33 35 36 37 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 6e 2e 72 28 65 29 2c 6e 2e 64 28 65 2c 7b 54 6f 6f 6c 69 6e 67 49 6e 66 6f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 78 7d 2c 57 65 61 74 68 65 72 43 61 72 64 44 61 74 61 41 63 74 69 6f 6e 73 3a 66 75 6e 63 74 69 6f Data Ascii: 00006000"use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["weather-card-data-connector"],{35670:function(t,e,n){n.r(e),n.d(e,{ToolingInfo:function(){return x},WeatherCardDataActions:functio
2024-01-17 17:07:16 UTC	9390	IN	Data Raw: 73 65 20 77 65 61 74 68 65 72 20 72 65 73 70 6f 6e 73 65 22 29 2c 21 31 7d 7d 61 73 79 6e 63 20 67 65 74 57 65 61 74 68 65 72 46 6f 72 65 63 61 73 74 44 61 74 61 28 74 2c 65 2c 6e 29 7b 76 61 72 20 69 2c 6f 3b 69 66 28 21 28 30 2c 6c 2e 4a 59 29 28 74 29 29 72 65 74 75 72 6e 20 52 2e 4d 30 2e 73 65 6e 64 41 70 70 45 72 72 6f 72 45 76 65 6e 74 28 7b 2e 2e 2e 43 2e 4f 50 69 2c 6d 65 73 73 61 67 65 3a 22 4e 6f 20 76 61 6c 69 64 20 55 73 65 72 20 6c 6f 63 61 74 69 6f 6e 20 73 65 74 22 7d 29 2c 21 31 3b 63 6f 6e 73 74 20 61 3d 61 77 61 69 74 20 74 68 69 73 2e 67 65 74 57 65 61 74 68 65 72 28 74 2c 65 2c 6e 29 3b 69 66 28 21 61 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 75 3d 61 2e 66 6f 72 65 63 61 73 74 2c 64 3d 28 30 2c 73 2e 56 6e 29 28 74 68 69 73 2e Data Ascii: se weather response"),!1}}async getWeatherForecastData(t,e,n){var i,o;if(!(0,l.JY)(t))return R.M0.sendAppErrorEvent({...C.OPi,message:"No valid User location set"}),!1;const a=await this.getWeather(t,e,n);if(!a)return!1;const u=a.forecast,d=(0,s.Vn)(this.
2024-01-17 17:07:16 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 74 79 48 69 22 2c 74 72 61 6e 73 3a 74 3d 3e 60 24 7b 74 7d 60 7d 5d 3b 66 75 6e 63 74 69 6f 6e 20 68 28 74 29 7b 72 65 74 75 72 6e 28 30 2c 72 2e 4e 29 28 6c 2c 75 2c 64 29 28 74 29 7d 63 6f 6e 73 74 20 66 3d 5b 22 63 61 70 22 2c 22 72 68 22 2c 22 73 79 6d 62 6f 6c 22 2c 22 69 63 6f 6e 22 2c 22 66 65 65 6c 73 22 2c 22 70 76 64 72 49 63 6f 6e 22 2c 22 77 69 6e 64 44 69 72 22 2c 22 70 76 64 72 57 69 6e 64 53 70 64 22 2c 22 73 75 6d 6d 61 72 79 22 2c 22 72 61 69 6e 41 6d 6f 75 6e 74 22 2c 22 73 6e 6f 77 41 6d 6f 75 6e 74 22 2c 22 75 66 54 65 6d 70 22 2c 22 72 61 41 63 63 75 22 2c 22 73 61 41 63 63 75 22 5d 2c 70 3d 5b 7b 66 72 6f 6d 3a 22 74 65 6d 70 22 2c 74 6f 3a 22 74 65 6d 70 65 72 61 74 75 72 65 22 7d 2c 7b 66 72 6f 6d 3a Data Ascii: 00006000tyHi",trans:t=>`${t}`}];function h(t){return(0,r.N)(l,u,d)(t)}const f=["cap","rh","symbol","icon","feels","pvdrIcon","windDir","pvdrWindSpd","summary","rainAmount","snowAmount","ufTemp","raAccu","saAccu"],p=[{from:"temp",to:"temperature"},{from:
2024-01-17 17:07:16 UTC	8204	IN	Data Raw: 66 6f 4c 69 73 74 2e 6c 65 6e 67 74 68 3e 6e 2e 41 6c 65 72 74 49 64 78 29 72 65 74 75 72 6e 20 74 2e 61 6c 65 72 74 73 49 6e 66 6f 4c 69 73 74 5b 6e 2e 41 6c 65 72 74 49 64 78 5d 7d 72 65 74 75 72 6e 20 74 2e 61 6c 65 72 74 73 49 6e 66 6f 7d 63 6f 6e 73 74 20 63 3d 7b 77 69 6e 74 65 72 73 74 6f 72 6d 3a 7b 74 79 70 65 3a 22 65 78 63 6c 75 64 65 22 2c 6d 61 72 6b 65 74 73 3a 5b 22 7a 68 2d 63 6e 22 5d 7d 2c 77 69 6c 64 66 69 72 65 3a 7b 74 79 70 65 3a 22 69 6e 63 6c 75 64 65 22 2c 6d 61 72 6b 65 74 73 3a 5b 22 75 73 22 5d 7d 2c 61 69 72 71 75 61 6c 69 74 79 73 74 61 74 69 6f 6e 3a 7b 74 79 70 65 3a 22 69 6e 63 6c 75 64 65 22 2c 6d 61 72 6b 65 74 73 3a 5b 22 75 73 22 5d 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 74 29 7b 69 66 28 21 74 29 72 65 74 75 72 6e Data Ascii: foList.length>n.AlertIdx)return t.alertsInfoList[n.AlertIdx]}return t.alertsInfo}const c={winterstorm:{type:"exclude",markets:["zh-cn"]},wildfire:{type:"include",markets:["us"]},airqualitystation:{type:"include",markets:["us"]}};function l(t){if(!t)return
2024-01-17 17:07:16 UTC	1903	IN	Data Raw: 30 30 30 30 30 37 36 33 0d 0a 3a 22 76 6f 6f 72 73 70 65 6c 6c 69 6e 67 70 65 72 75 75 72 22 2c 70 6c 3a 22 70 72 6f 67 6e 6f 7a 61 67 6f 64 7a 69 6e 6f 77 61 22 2c 70 74 3a 22 70 72 65 76 69 73 61 6f 68 6f 72 61 72 69 61 22 2c 73 76 3a 22 74 69 6d 70 72 6f 67 6e 6f 73 22 2c 74 72 3a 22 73 61 61 74 6c 69 6b 74 61 68 6d 69 6e 22 7d 7d 2c 72 3d 22 6f 72 6b 61 6e 65 72 22 2c 6f 3d 22 74 65 6d 70 65 72 61 74 75 72 22 2c 61 3d 22 73 79 6e 6c 69 67 68 65 74 22 2c 73 3d 22 76 69 6e 64 22 2c 63 3d 22 76 65 6e 74 6f 22 2c 6c 3d 22 73 6e 6f 66 61 6c 6c 22 2c 75 3d 7b 72 61 64 61 72 3a 7b 66 69 3a 22 74 75 74 6b 61 22 7d 2c 68 75 72 72 69 63 61 6e 65 3a 7b 63 73 3a 22 68 75 72 69 6b 61 6e 79 22 2c 64 61 3a 72 2c 6e 62 3a 72 2c 73 76 3a 72 2c 64 65 3a 22 68 75 72 72 Data Ascii: 00000763:"voorspellingperuur",pl:"prognozagodzinowa",pt:"previsaohoraria",sv:"timprognos",tr:"saatliktahmin"}},r="orkaner",o="temperatur",a="synlighet",s="vind",c="vento",l="snofall",u={radar:{fi:"tutka"},hurricane:{cs:"hurikany",da:r,nb:r,sv:r,de:"hurr
2024-01-17 17:07:16 UTC	1432	IN	Data Raw: 30 30 30 30 30 35 38 43 0d 0a 65 74 72 65 65 3a 7b 7d 2c 65 61 72 74 68 71 75 61 6b 65 3a 7b 7d 2c 6c 69 67 68 74 6e 69 6e 67 3a 7b 7d 2c 6c 69 67 68 74 6e 69 6e 67 74 68 75 6e 64 65 72 73 74 6f 72 6d 72 61 64 61 72 3a 7b 7d 2c 6c 69 67 68 74 6e 69 6e 67 74 68 75 6e 64 65 72 73 74 6f 72 6d 70 72 65 63 69 70 3a 7b 7d 2c 6c 69 67 68 74 6e 69 6e 67 72 61 64 61 72 3a 7b 7d 2c 6c 69 67 68 74 6e 69 6e 67 70 72 65 63 69 70 3a 7b 7d 2c 74 68 75 6e 64 65 72 73 74 6f 72 6d 72 61 64 61 72 3a 7b 7d 2c 74 68 75 6e 64 65 72 73 74 6f 72 6d 70 72 65 63 69 70 3a 7b 7d 2c 6c 69 67 68 74 6e 69 6e 67 6f 6e 6c 79 72 61 64 61 72 3a 7b 7d 2c 6c 69 67 68 74 6e 69 6e 67 6f 6e 6c 79 70 72 65 63 69 70 3a 7b 7d 2c 72 61 64 61 72 6c 74 6e 74 73 74 6d 3a 7b 7d 2c 72 61 64 61 72 6c 74 Data Ascii: 0000058Cetree:{},earthquake:{},lightning:{},lightningthunderstormradar:{},lightningthunderstormprecip:{},lightningradar:{},lightningprecip:{},thunderstormradar:{},thunderstormprecip:{},lightningonlyradar:{},lightningonlyprecip:{},radarltntstm:{},radarlt
2024-01-17 17:07:16 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.16	49930	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:16 UTC	630	OUT	GET /bundles/v1/edgeChromium/latest/SignInData.f80799da3bfdfbad7245.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:16 UTC	1150	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: zeAiWKjqJbswPF0+3Rmc7w== Last-Modified: Mon, 08 Jan 2024 16:46:15 GMT ETag: 0x8DC1069545EFE6E Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 13727fe7-701e-0054-4552-42a585000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:16 GMT Content-Length: 6568 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89865001,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=87, clienttt; dur=14, origin; dur=0 , cdntime; dur=14 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b3b29 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511236.55b3b29 Vary: Origin
2024-01-17 17:07:16 UTC	6568	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 53 69 67 6e 49 6e 44 61 74 61 22 5d 2c 7b 31 32 37 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 74 2e 72 28 6e 29 2c 74 2e 64 28 6e 2c 7b 6c 6f 61 64 52 6f 61 6d 69 6e 67 43 6f 61 63 68 6d 61 72 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 7d 7d 29 3b 76 61 72 20 69 3d 74 28 34 34 38 38 37 29 2c 72 3d 74 28 32 37 30 32 36 29 2c 6f 3d 74 28 37 35 30 35 39 29 2c 61 3d 74 28 32 35 39 34 31 29 Data Ascii: "use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["SignInData"],{1275:function(e,n,t){t.r(n),t.d(n,{loadRoamingCoachmark:function(){return g}});var i=t(44887),r=t(27026),o=t(75059),a=t(25941)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.16	49931	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:16 UTC	607	OUT	GET /breakingnews/v1/cms/api/amp/article/AA157JY HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:16 UTC	1419	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Last-Modified: Tue, 16 Jan 2024 20:44:30 GMT ETag: W/"40700" Server: Microsoft-HTTPAPI/2.0 X-CMS-DocumentStorageTier: Cache X-CMS-DocumentId: AA157JY X-CMS-Version: 12505 X-CMS-State: Published X-CMS-Tenant: amp X-CMS-Type: article X-CMS-ExecutionTimeInMilliseconds: 6 Access-Control-Allow-Origin: https://ntp.msn.com Access-Control-Expose-Headers: X-Trace-Context,X-CMS-DocumentId,X-CMS-Type,X-CMS-Tenant,X-CMS-State,X-CMS-Version,ETag,X-CMS-SearchElapsedTimeInMilliseconds,X-CMS-SearchBackendTimeInMilliseconds,X-CMS-SearchMatchedTotal,X-CMS-SearchMaxScore,X-CMS-SearchShardsTotal,X-CMS-SearchShardsSuccessful,X-CMS-SearchShardsFailed,X-CMS-SearchReturnedCount,X-CMS-ExecutionTimeInMilliseconds,MS-CV AppEx-Activity-Id: f76d8ae1-93db-4fdb-8ee2-866366a8742c X-Trace-Context: {"ActivityId":"f76d8ae1-93db-4fdb-8ee2-866366a8742c"} MS-CV: lO6N5OfgikOwM2ZwFk42YQ.0 X-CMS-ServiceLocation: eastus:0 Date: Wed, 17 Jan 2024 17:07:16 GMT Content-Length: 5658 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89865011,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=0, origin; dur=0 , cdntime; dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b3b33 Cache-Control: max-age=30 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511236.55b3b33 Vary: Origin
2024-01-17 17:07:16 UTC	5658	IN	Data Raw: 7b 22 24 74 79 70 65 22 3a 22 61 72 74 69 63 6c 65 22 2c 22 74 69 74 6c 65 22 3a 22 21 21 21 20 55 53 45 20 50 52 4f 4d 4f 20 43 41 52 44 53 20 54 41 42 20 21 21 21 22 2c 22 5f 69 73 50 75 62 6c 69 73 68 69 6e 67 4c 6f 63 6b 65 64 22 3a 74 72 75 65 2c 22 5f 69 64 22 3a 22 41 41 31 35 37 4a 59 22 2c 22 5f 6e 61 6d 65 22 3a 22 62 72 65 61 6b 69 6e 67 2d 6e 65 77 73 22 2c 22 5f 6c 61 73 74 45 64 69 74 65 64 44 61 74 65 54 69 6d 65 22 3a 22 32 30 32 34 2d 30 31 2d 31 36 54 32 30 3a 34 34 3a 33 30 5a 22 2c 22 5f 6c 69 6e 6b 73 22 3a 7b 22 73 65 6c 66 22 3a 5b 7b 22 68 72 65 66 22 3a 22 63 6d 73 2f 61 70 69 2f 61 6d 70 2f 61 72 74 69 63 6c 65 2f 41 41 31 35 37 4a 59 22 7d 5d 2c 22 70 61 72 65 6e 74 22 3a 5b 7b 22 68 72 65 66 22 3a 22 63 6d 73 2f 61 70 69 2f 61 Data Ascii: {"$type":"article","title":"!!! USE PROMO CARDS TAB !!!","_isPublishingLocked":true,"_id":"AA157JY","_name":"breaking-news","_lastEditedDateTime":"2024-01-16T20:44:30Z","_links":{"self":[{"href":"cms/api/amp/article/AA157JY"}],"parent":[{"href":"cms/api/a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.16	49932	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:16 UTC	631	OUT	GET /bundles/v1/edgeChromium/latest/RewardsData.2abf4e86ad20ef1b6bc6.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:16 UTC	1149	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: 0r4UMh6t+mVXqZxJoErcvg== Last-Modified: Tue, 16 Jan 2024 23:21:31 GMT ETag: 0x8DC16E9DFAA6B10 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 720bfd79-e01e-00b9-80d2-486fe9000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:16 GMT Content-Length: 32090 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89865122,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=0, origin; dur=0 , cdntime; dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b3ba2 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511236.55b3ba2 Vary: Origin
2024-01-17 17:07:16 UTC	15235	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 52 65 77 61 72 64 73 44 61 74 61 22 5d 2c 7b 38 37 30 31 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 73 2c 69 2c 61 3b 72 2e 64 28 74 2c 7b 43 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 2c 49 38 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 2c 4d 57 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 7d 2c 4f 46 3a 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: (self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["RewardsData"],{87015:function(e,t,r){"use strict";var s,i,a;r.d(t,{Ck:function(){return d},I8:function(){return c},MW:function(){return n},OF:function(){
2024-01-17 17:07:16 UTC	9341	IN	Data Raw: 61 77 61 69 74 20 74 68 69 73 2e 72 65 77 61 72 64 73 53 65 72 76 69 63 65 43 6c 69 65 6e 74 2e 72 65 70 6f 72 74 4d 73 52 65 77 61 72 64 73 41 63 74 69 76 69 74 79 56 32 28 65 2c 74 68 69 73 2e 62 69 6e 67 52 65 77 61 72 64 73 4f 66 66 65 72 53 74 61 74 75 73 4d 61 70 2e 67 65 74 28 65 29 2e 61 63 74 69 76 69 74 79 54 79 70 65 29 3b 73 2e 69 73 4f 66 66 65 72 52 65 70 6f 72 74 65 64 3d 74 2e 73 75 63 63 65 73 73 2c 61 3d 74 2e 64 65 62 75 67 49 64 7d 65 6c 73 65 7b 76 61 72 20 69 3b 73 2e 69 73 4f 66 66 65 72 52 65 70 6f 72 74 65 64 3d 61 77 61 69 74 20 74 68 69 73 2e 72 65 77 61 72 64 73 53 65 72 76 69 63 65 43 6c 69 65 6e 74 2e 72 65 70 6f 72 74 4d 73 52 65 77 61 72 64 73 41 63 74 69 76 69 74 79 28 74 68 69 73 2e 73 69 67 6e 49 6e 53 74 61 74 75 73 2c Data Ascii: await this.rewardsServiceClient.reportMsRewardsActivityV2(e,this.bingRewardsOfferStatusMap.get(e).activityType);s.isOfferReported=t.success,a=t.debugId}else{var i;s.isOfferReported=await this.rewardsServiceClient.reportMsRewardsActivity(this.signInStatus,
2024-01-17 17:07:16 UTC	7514	IN	Data Raw: 65 2e 6b 65 79 2c 65 2e 76 61 6c 75 65 29 7d 29 29 2c 74 68 69 73 2e 65 6e 64 70 6f 69 6e 74 56 32 26 26 70 2e 73 65 61 72 63 68 50 61 72 61 6d 73 2e 73 65 74 28 22 76 65 72 73 69 6f 6e 22 2c 22 32 22 29 3b 74 72 79 7b 76 61 72 20 6c 3b 63 6f 6e 73 74 20 65 3d 61 77 61 69 74 28 30 2c 6e 2e 77 29 28 28 61 73 79 6e 63 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 61 77 61 69 74 20 66 65 74 63 68 28 70 2e 68 72 65 66 2c 72 29 3b 72 65 74 75 72 6e 20 34 30 34 3d 3d 3d 65 2e 73 74 61 74 75 73 3f 7b 7d 3a 65 2e 6f 6b 3f 65 2e 6a 73 6f 6e 28 29 3a 28 34 30 30 3d 3d 3d 65 2e 73 74 61 74 75 73 3f 64 2e 4d 30 2e 73 65 6e 64 41 70 70 45 72 72 6f 72 45 76 65 6e 74 28 7b 2e 2e 2e 6f 2e 6c 5a 58 2c 6d 65 73 73 61 67 65 3a 22 42 61 64 20 72 65 71 75 65 73 74 20 6f 6e 20 61 63 Data Ascii: e.key,e.value)})),this.endpointV2&&p.searchParams.set("version","2");try{var l;const e=await(0,n.w)((async()=>{const e=await fetch(p.href,r);return 404===e.status?{}:e.ok?e.json():(400===e.status?d.M0.sendAppErrorEvent({...o.lZX,message:"Bad request on ac

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.16	49933	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:16 UTC	821	OUT	GET /staticsb/statics/latest/common/icons/copilot_color.svg HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; MUIDB=2136D0069C246D353F30C40F9D676C20; _SS=SID=00; _C_ETH=1
2024-01-17 17:07:16 UTC	1035	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-MD5: A1NJHyIzCE3zCKolhv+68g== Last-Modified: Tue, 16 Jan 2024 10:45:03 GMT ETag: 0x8DC16803247DEDA Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 289da0e3-001e-005f-188f-482d52000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:16 GMT Content-Length: 3004 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89865144,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=0, origin; dur=0 , cdntime; dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b3bb8 Cache-Control: public, max-age=31536000 report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511236.55b3bb8 Vary: Origin
2024-01-17 17:07:16 UTC	3004	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 61 29 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 75 72 6c 28 23 62 29 22 20 64 3d 22 4d 33 35 2e 31 32 20 36 2e 34 36 41 35 20 35 20 30 20 30 20 30 20 33 30 2e 33 36 33 20 33 68 2d 31 2e 36 35 34 61 35 20 35 20 30 20 30 20 30 2d 34 2e 39 32 20 34 2e 31 30 36 6c 2d 32 2e 33 34 31 20 31 32 2e 38 39 32 2e 37 31 2d 32 2e 34 31 31 41 35 20 35 20 30 20 30 20 31 20 32 36 2e 39 35 36 20 31 34 68 38 2e 33 34 6c 33 2e 35 39 33 20 31 2e 37 38 36 4c 34 32 2e 33 35 33 20 31 34 68 2d 31 2e 31 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" fill="none"><g clip-path="url(#a)"><path fill="url(#b)" d="M35.12 6.46A5 5 0 0 0 30.363 3h-1.654a5 5 0 0 0-4.92 4.106l-2.341 12.892.71-2.411A5 5 0 0 1 26.956 14h8.34l3.593 1.786L42.353 14h-1.1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.16	49935	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:16 UTC	640	OUT	GET /bundles/v1/edgeChromium/latest/RewardsCoachmarkData.83abf4e96155e10a98d3.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:17 UTC	1149	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: IoS+yLMI5j+Bak/be/zPQw== Last-Modified: Sat, 13 Jan 2024 01:22:16 GMT ETag: 0x8DC13D614662D60 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 81519456-201e-00e1-38bf-4554cb000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:16 GMT Content-Length: 23707 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89865586,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=1, origin; dur=0 , cdntime; dur=1 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b3d72 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511236.55b3d72 Vary: Origin
2024-01-17 17:07:17 UTC	15235	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 52 65 77 61 72 64 73 43 6f 61 63 68 6d 61 72 6b 44 61 74 61 22 5d 2c 7b 34 39 39 33 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 64 28 74 2c 7b 57 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 43 7d 7d 29 3b 76 61 72 20 61 3d 69 28 34 34 38 38 37 29 2c 6f 3d 69 28 34 34 31 33 32 29 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e Data Ascii: (self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["RewardsCoachmarkData"],{49936:function(e,t,i){"use strict";i.d(t,{W:function(){return C}});var a=i(44887),o=i(44132);function r(e){return window&&window.
2024-01-17 17:07:17 UTC	8472	IN	Data Raw: 63 65 73 73 54 6f 61 73 74 29 7c 7c 22 59 6f 75 20 6a 75 73 74 20 67 6f 74 20 32 30 30 20 70 6f 69 6e 74 73 21 22 29 7d 6f 70 65 6e 52 65 77 61 72 64 73 54 6f 61 73 74 28 65 29 7b 77 69 6e 64 6f 77 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 6f 70 65 6e 52 65 77 61 72 64 73 54 6f 61 73 74 22 2c 7b 64 65 74 61 69 6c 3a 7b 74 6f 61 73 74 54 65 78 74 3a 65 7d 7d 29 29 7d 61 73 79 6e 63 20 61 64 64 52 65 77 61 72 64 73 43 6f 61 63 68 6d 61 72 6b 73 28 65 29 7b 65 26 26 65 2e 6c 65 6e 67 74 68 3f 28 61 77 61 69 74 20 74 68 69 73 2e 67 65 74 43 68 72 6f 6d 69 75 6d 50 61 67 65 53 65 74 74 69 6e 67 73 43 6f 6e 6e 65 63 74 6f 72 28 29 2c 74 68 69 73 2e 70 6f 70 75 6c 61 74 65 4c 6f 63 61 6c 52 65 77 61 72 64 73 Data Ascii: cessToast)\|\|"You just got 200 points!")}openRewardsToast(e){window.dispatchEvent(new CustomEvent("openRewardsToast",{detail:{toastText:e}}))}async addRewardsCoachmarks(e){e&&e.length?(await this.getChromiumPageSettingsConnector(),this.populateLocalRewards

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.16	49936	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:16 UTC	643	OUT	GET /bundles/v1/edgeChromium/latest/MarketMismatchCoachMark.0d128b2ec30808e7f4d0.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:17 UTC	1148	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: 3xWAUQ/9xy8U/D1kuEDx+A== Last-Modified: Sat, 13 Jan 2024 01:22:12 GMT ETag: 0x8DC13D6123D7D84 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 9c672b21-d01e-00da-0ebf-4550cd000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:16 GMT Content-Length: 7173 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89865601,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=87, clienttt; dur=1, origin; dur=0 , cdntime; dur=1 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b3d81 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511236.55b3d81 Vary: Origin
2024-01-17 17:07:17 UTC	7173	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 4d 61 72 6b 65 74 4d 69 73 6d 61 74 63 68 43 6f 61 63 68 4d 61 72 6b 22 5d 2c 7b 39 32 36 35 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 6c 6f 61 64 43 68 69 6e 61 4c 61 6e 67 75 61 67 65 43 6f 61 63 68 6d 61 72 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 7d 7d 29 3b 76 61 72 20 69 3d 6e 28 34 34 38 38 37 29 2c 61 3d 6e 28 32 37 30 32 36 29 2c 6f Data Ascii: "use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["MarketMismatchCoachMark"],{92650:function(e,t,n){n.r(t),n.d(t,{loadChinaLanguageCoachmark:function(){return v}});var i=n(44887),a=n(27026),o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.16	49937	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:17 UTC	998	OUT	GET /service/News/Users/me/Rewards?apikey=1hYoJsIRvPEnSkk0hlnJF2092mHqiz7xFenIFKa9uc&activityId=EDA7CB09-C52C-41B1-9707-B0A727D882E0&ocid=rewards-peregrine&cm=en-us&it=app&user=m-2136D0069C246D353F30C40F9D676C20&scn=APP_ANON&version=2 HTTP/1.1 Host: assets.msn.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; MUIDB=2136D0069C246D353F30C40F9D676C20; _SS=SID=00; _C_ETH=1
2024-01-17 17:07:17 UTC	3055	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Headers: TicketType,RequestContinuationKey,AuthToken,Content-Type,x-client-activityid,ms-cv,OneSvc-Uni-Feat-Tun,signedInCookieName,muid,appid,User-Location,user-location,userauthtoken,usertickettype,sitename,s2sauthtoken,thumbprint,Authorization,Ent-Authorization,UserIdToken,DDD-TMPL,DDD-ActivityId,DDD-FeatureSet,DDD-Session-ID,Date,date,ads-referer,ads-referer,taboola-sessionId,taboola-sessionid,Akamai-Request-ID,Akamai-Server-IP,X-MSEdge-Ref,DDD-DebugId,s-xbox-token,OneWebServiceLatency,X-FD-Features,DDD-UserType,traceparent,Widgets,Muted Access-Control-Expose-Headers: TicketType,RequestContinuationKey,AuthToken,Content-Type,x-client-activityid,ms-cv,OneSvc-Uni-Feat-Tun,signedInCookieName,muid,appid,User-Location,user-location,userauthtoken,usertickettype,sitename,s2sauthtoken,thumbprint,Authorization,Ent-Authorization,UserIdToken,DDD-TMPL,DDD-ActivityId,DDD-FeatureSet,DDD-Session-ID,Date,date,ads-referer,ads-referer,taboola-sessionId,taboola-sessionid,Akamai-Request-ID,Akamai-Server-IP,X-MSEdge-Ref,DDD-DebugId,s-xbox-token,OneWebServiceLatency,X-FD-Features,DDD-UserType,traceparent,Widgets,Muted DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-ActivityId: 65a80945-0693-47ba-b3d9-dcb16839a58b DDD-StrategyExecutionLatency: 00:00:00.0123988 DDD-DebugId: 65a80945-0693-47ba-b3d9-dcb16839a58b\|2024-01-17T17:07:17.2170107Z\|fabric_msn\|ESU\|News_30 OneWebServiceLatency: 13 X-MSEdge-ResponseInfo: 13 Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA X-Ceto-ref: 65a809451dc04c24a471dfe87b7aeafb\|2024-01-17T17:07:17.202Z X-MSEdge-Ref: Ref A: 80ADBF1C1E92490590F471EFC52E91C9 Ref B: EWR30EDGE0311 Ref C: 2024-01-17T17:07:17Z Expires: Wed, 17 Jan 2024 17:07:17 GMT Date: Wed, 17 Jan 2024 17:07:17 GMT Content-Length: 580 Connection: close Set-Cookie: _C_ETH=1; expires=Tue, 16 Jan 2024 17:07:17 GMT; domain=.msn.com; path=/; secure; httponly Set-Cookie: _C_Auth= Akamai-Request-BC: [a=23.218.242.10,b=89865916,c=g,n=US_NJ_EDISON,o=20940],[a=204.79.197.203,c=o] Server-Timing: clientrtt; dur=88, clienttt; dur=47, origin; dur=46 , cdntime; dur=1 Akamai-Cache-Status: NotCacheable from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b3ebc Access-Control-Allow-Methods: PUT,PATCH,POST,GET,OPTIONS,DELETE Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com X-AS-SuppressSetCookie: 1 Cache-Control: private, max-age=0 report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511237.55b3ebc Vary: Origin
2024-01-17 17:07:17 UTC	580	IN	Data Raw: 7b 22 70 72 6f 66 69 6c 65 22 3a 6e 75 6c 6c 2c 22 6f 66 66 65 72 73 22 3a 6e 75 6c 6c 2c 22 6c 61 73 74 75 70 64 61 74 65 74 69 6d 65 22 3a 22 32 30 32 34 2d 30 31 2d 31 37 54 31 37 3a 30 37 3a 31 37 2e 32 31 36 38 38 33 33 5a 22 2c 22 74 6f 6b 65 6e 73 22 3a 6e 75 6c 6c 2c 22 65 6c 69 67 69 62 6c 65 46 72 65 65 54 69 70 70 69 6e 67 22 3a 74 72 75 65 2c 22 65 6c 69 67 69 62 6c 65 46 72 65 65 53 75 62 73 63 72 69 70 74 69 6f 6e 22 3a 22 63 69 64 2d 62 37 31 37 31 38 37 38 33 33 66 36 39 37 39 65 2c 63 69 64 2d 38 35 61 33 31 63 66 63 64 38 38 64 62 62 37 35 2c 63 69 64 2d 35 35 61 35 66 30 35 32 36 34 36 64 62 62 37 65 2c 63 69 64 2d 38 34 30 65 37 66 66 32 37 63 35 39 37 63 65 38 2c 63 69 64 2d 64 66 34 34 34 32 36 35 63 32 38 65 31 39 62 34 2c 63 69 64 Data Ascii: {"profile":null,"offers":null,"lastupdatetime":"2024-01-17T17:07:17.2168833Z","tokens":null,"eligibleFreeTipping":true,"eligibleFreeSubscription":"cid-b717187833f6979e,cid-85a31cfcd88dbb75,cid-55a5f052646dbb7e,cid-840e7ff27c597ce8,cid-df444265c28e19b4,cid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.16	49938	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:17 UTC	507	OUT	GET /bundles/v1/edgeChromium/latest/channel-filter-card.feaa9939796e7d03c4cd.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:17 UTC	1186	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: tuYcc268g1qirVv+5XiUJw== Last-Modified: Sat, 13 Jan 2024 01:22:16 GMT ETag: 0x8DC13D614689BAC Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 8b279c66-801e-00af-2fbf-4525c7000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:17 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Akamai-Request-BC: [a=23.218.242.10,b=89865926,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=0, origin; dur=0 , cdntime; dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b3ec6 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511237.55b3ec6 Vary: Origin
2024-01-17 17:07:17 UTC	15198	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 68 61 6e 6e 65 6c 2d 66 69 6c 74 65 72 2d 63 61 72 64 22 5d 2c 7b 39 32 38 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 43 68 61 6e 6e 65 6c 46 69 6c 74 65 72 43 61 72 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 57 7d 2c 43 68 61 6e 6e 65 6c 46 69 6c 74 65 72 43 61 72 64 53 74 79 6c 65 73 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 00006000"use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["channel-filter-card"],{9280:function(e,t,n){n.r(t),n.d(t,{ChannelFilterCard:function(){return W},ChannelFilterCardStyles:function(
2024-01-17 17:07:17 UTC	9390	IN	Data Raw: 69 6f 6e 45 76 65 6e 74 28 74 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 2c 50 2e 41 77 2e 43 6c 69 63 6b 29 3b 63 6f 6e 73 74 20 6e 3d 74 68 69 73 2e 66 6f 6c 6c 6f 77 43 61 6c 6c 62 61 63 6b 28 65 2e 69 73 46 6f 6c 6c 6f 77 69 6e 67 2c 65 2e 69 64 2c 65 2e 69 73 54 6f 70 69 63 2c 65 2e 70 72 6f 76 69 64 65 72 50 72 6f 66 69 6c 65 49 64 29 2c 69 3d 74 68 69 73 2e 72 65 63 6f 6d 6d 65 6e 64 61 74 69 6f 6e 73 2e 66 69 6e 64 49 6e 64 65 78 28 28 74 3d 3e 74 2e 69 64 3d 3d 3d 65 2e 69 64 29 29 3b 69 66 28 61 77 61 69 74 20 6e 26 26 69 3e 2d 31 29 7b 74 68 69 73 2e 66 6f 6c 6c 6f 77 73 55 70 64 61 74 65 64 3d 21 30 3b 63 6f 6e 73 74 20 74 3d 28 30 2c 46 2e 5a 29 28 74 68 69 73 2e 72 65 63 6f 6d 6d 65 6e 64 61 74 69 6f 6e 73 29 3b 74 5b 69 5d 2e 69 73 46 6f 6c Data Ascii: ionEvent(t.currentTarget,P.Aw.Click);const n=this.followCallback(e.isFollowing,e.id,e.isTopic,e.providerProfileId),i=this.recommendations.findIndex((t=>t.id===e.id));if(await n&&i>-1){this.followsUpdated=!0;const t=(0,F.Z)(this.recommendations);t[i].isFol
2024-01-17 17:07:17 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 6e 43 68 61 6e 6e 65 6c 43 6c 69 63 6b 28 65 2c 74 2e 65 76 65 6e 74 29 7d 20 40 6b 65 79 70 72 65 73 73 3d 24 7b 28 65 2c 74 29 3d 3e 74 2e 70 61 72 65 6e 74 2e 6b 65 79 62 6f 61 72 64 48 61 6e 64 6c 65 72 28 74 2e 65 76 65 6e 74 2c 28 28 29 3d 3e 74 2e 70 61 72 65 6e 74 2e 6f 6e 43 68 61 6e 6e 65 6c 43 6c 69 63 6b 28 65 2c 74 2e 65 76 65 6e 74 29 29 29 7d 20 64 61 74 61 2d 74 3d 22 24 7b 28 65 2c 74 29 3d 3e 7b 76 61 72 20 6e 2c 69 3b 72 65 74 75 72 6e 20 74 2e 70 61 72 65 6e 74 2e 73 65 6c 65 63 74 65 64 43 68 61 6e 6e 65 6c 26 26 74 2e 70 61 72 65 6e 74 2e 73 65 6c 65 63 74 65 64 43 68 61 6e 6e 65 6c 2e 69 64 3d 3d 3d 65 2e 69 64 3f 6e 75 6c 6c 3d 3d 3d 28 6e 3d 74 2e 70 61 72 65 6e 74 2e 63 68 61 6e 6e 65 6c 46 69 6c 74 Data Ascii: 00006000nChannelClick(e,t.event)} @keypress=${(e,t)=>t.parent.keyboardHandler(t.event,(()=>t.parent.onChannelClick(e,t.event)))} data-t="${(e,t)=>{var n,i;return t.parent.selectedChannel&&t.parent.selectedChannel.id===e.id?null===(n=t.parent.channelFilt
2024-01-17 17:07:17 UTC	8204	IN	Data Raw: 72 65 66 72 65 73 68 43 6e 74 3a 57 2c 76 69 65 77 70 6f 72 74 53 69 7a 65 3a 71 2c 69 73 45 64 67 65 55 6e 69 6e 73 74 61 6c 6c 65 64 3a 4e 2c 61 6c 6c 46 65 65 64 73 44 69 73 61 62 6c 65 64 3a 5f 2c 66 69 72 73 74 50 61 72 74 79 46 65 65 64 44 69 73 61 62 6c 65 64 3a 47 2c 63 6f 6c 75 6d 6e 3a 4a 2c 72 6f 74 61 74 69 6f 6e 44 69 73 61 62 6c 65 64 3a 56 2c 62 61 64 67 69 6e 67 44 69 73 61 62 6c 65 64 3a 58 2c 64 69 73 61 62 6c 65 33 50 3a 4b 2c 64 65 66 61 75 6c 74 57 69 64 67 65 74 73 3a 5a 7d 3d 65 7c 7c 7b 7d 3b 6c 65 74 20 51 3d 65 26 26 65 2e 66 6c 69 67 68 74 44 61 74 61 3b 21 74 26 26 28 6e 3d 61 77 61 69 74 20 74 68 69 73 2e 67 65 74 52 65 71 75 65 73 74 49 6e 69 74 28 7b 6d 65 74 68 6f 64 3a 22 47 45 54 22 2c 63 72 65 64 65 6e 74 69 61 6c 73 3a Data Ascii: refreshCnt:W,viewportSize:q,isEdgeUninstalled:N,allFeedsDisabled:_,firstPartyFeedDisabled:G,column:J,rotationDisabled:V,badgingDisabled:X,disable3P:K,defaultWidgets:Z}=e\|\|{};let Q=e&&e.flightData;!t&&(n=await this.getRequestInit({method:"GET",credentials:
2024-01-17 17:07:17 UTC	9795	IN	Data Raw: 30 30 30 30 32 36 33 37 0d 0a 7d 61 73 79 6e 63 20 67 65 74 43 6f 6d 6d 6f 6e 50 61 72 61 6d 73 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 61 77 61 69 74 28 30 2c 49 2e 58 4a 29 28 29 3d 3d 3d 6f 2e 48 79 2e 53 69 67 6e 65 64 49 6e 3f 43 2e 24 44 2e 67 65 74 4f 6e 65 53 65 72 76 69 63 65 50 61 72 61 6d 73 57 69 74 68 41 75 74 68 28 75 2e 6a 47 2e 55 73 65 72 49 64 2c 65 2c 21 31 2c 74 29 3a 43 2e 24 44 2e 67 65 74 4f 6e 65 53 65 72 76 69 63 65 50 61 72 61 6d 73 57 69 74 68 6f 75 74 41 75 74 68 28 75 2e 6a 47 2e 55 73 65 72 49 64 7c 7c 6e 26 26 60 6d 2d 24 7b 75 2e 6a 47 2e 41 63 74 69 76 69 74 79 49 64 7d 60 2c 65 2c 21 31 2c 74 29 7d 6c 6f 67 41 6e 64 52 65 74 75 72 6e 4e 6f 43 6f 6e 74 65 6e 74 45 72 72 6f 72 28 65 2c 74 2c 6e 2c 69 2c 61 2c 6c 2c 73 Data Ascii: 00002637}async getCommonParams(e,t,n){return await(0,I.XJ)()===o.Hy.SignedIn?C.$D.getOneServiceParamsWithAuth(u.jG.UserId,e,!1,t):C.$D.getOneServiceParamsWithoutAuth(u.jG.UserId\|\|n&&`m-${u.jG.ActivityId}`,e,!1,t)}logAndReturnNoContentError(e,t,n,i,a,l,s
2024-01-17 17:07:17 UTC	4547	IN	Data Raw: 30 30 30 30 31 31 42 37 0d 0a 29 3b 66 6f 72 28 63 6f 6e 73 74 20 6e 20 69 6e 20 6c 29 7b 63 6f 6e 73 74 20 63 3d 6e 2c 68 3d 73 28 22 78 22 3d 3d 3d 63 3f 22 79 22 3a 22 78 22 29 2c 75 3d 6f 28 63 29 3b 69 66 28 68 3e 30 29 7b 76 61 72 20 64 3b 63 6f 6e 73 74 20 6e 3d 74 5b 63 5d 3e 3d 61 5b 60 24 7b 63 7d 32 60 5d 3f 31 3a 30 2c 73 3d 6c 5b 63 5d 5b 6e 5d 3b 72 21 3d 3d 69 26 26 28 76 6f 69 64 20 30 3d 3d 3d 65 5b 73 5d 7c 7c 28 28 6e 75 6c 6c 3d 3d 3d 28 64 3d 65 5b 73 5d 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 64 3f 76 6f 69 64 20 30 3a 64 2e 64 69 73 74 61 6e 63 65 29 7c 7c 30 29 3e 75 29 26 26 28 65 5b 73 5d 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 74 2c 7b 6f 76 65 72 6c 61 70 3a 68 2c 64 69 73 74 61 6e 63 65 3a 75 7d 29 29 2c 22 79 22 3d Data Ascii: 000011B7);for(const n in l){const c=n,h=s("x"===c?"y":"x"),u=o(c);if(h>0){var d;const n=t[c]>=a[`${c}2`]?1:0,s=l[c][n];r!==i&&(void 0===e[s]\|\|((null===(d=e[s])\|\|void 0===d?void 0:d.distance)\|\|0)>u)&&(e[s]=Object.assign({},t,{overlap:h,distance:u})),"y"=
2024-01-17 17:07:17 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.16	49939	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:17 UTC	633	OUT	GET /staticsb/statics/latest/marketmismatch/bannerDisplayString/en-gb.json HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:17 UTC	1127	IN	HTTP/1.1 200 OK Content-Length: 236 Content-Type: application/json Content-MD5: XLdZWQZUEe4kuEsBkI0rrg== Last-Modified: Tue, 16 Jan 2024 10:44:44 GMT ETag: 0x8DC168026D557C5 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 7afdfa2a-301e-0047-1e81-48b555000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:17 GMT Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89866284,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=0, origin; dur=0 , cdntime; dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b402c Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com Cache-Control: public, max-age=31536000 report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511237.55b402c Vary: Origin
2024-01-17 17:07:17 UTC	236	IN	Data Raw: 7b 22 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 6c 6f 63 61 6c 69 7a 65 64 53 74 72 69 6e 67 73 22 3a 7b 22 68 65 61 64 22 3a 22 4e 6f 74 20 74 68 65 20 72 69 67 68 74 20 6c 61 6e 67 75 61 67 65 3f 22 2c 22 62 6f 64 79 22 3a 22 43 68 6f 6f 73 65 20 79 6f 75 72 20 70 72 65 66 65 72 72 65 64 20 72 65 67 69 6f 6e 20 61 6e 64 20 6c 61 6e 67 75 61 67 65 2e 22 2c 22 63 6f 6e 66 69 72 6d 42 75 74 74 6f 6e 4c 61 62 65 6c 22 3a 22 53 61 76 65 22 2c 22 63 61 6e 63 65 6c 42 75 74 74 6f 6e 4c 61 62 65 6c 22 3a 22 4e 6f 74 20 6e 6f 77 22 2c 22 61 63 63 65 70 74 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 4c 61 62 65 6c 22 3a 22 57 65 20 73 77 69 74 63 68 65 64 20 79 6f 75 72 20 6d 61 72 6b 65 74 20 74 6f 20 22 7d 7d 7d Data Ascii: {"properties":{"louserzedStrings":{"head":"Not the right language?","body":"Choose your preferred region and language.","confirmButtonLabel":"Save","cancelButtonLabel":"Not now","acceptConfirmationLabel":"We switched your market to "}}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.16	49941	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:17 UTC	950	OUT	GET /service/v1/news/users/me/locations?apikey=1hYoJsIRvPEnSkk0hlnJF2092mHqiz7xFenIFKa9uc&activityId=EDA7CB09-C52C-41B1-9707-B0A727D882E0&ocid=pdp-peregrine&cm=en-us&it=app&user=m-2136D0069C246D353F30C40F9D676C20 HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; MUIDB=2136D0069C246D353F30C40F9D676C20; _SS=SID=00; _C_ETH=1
2024-01-17 17:07:17 UTC	3056	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Headers: TicketType,RequestContinuationKey,AuthToken,Content-Type,x-client-activityid,ms-cv,OneSvc-Uni-Feat-Tun,signedInCookieName,muid,appid,User-Location,user-location,userauthtoken,usertickettype,sitename,s2sauthtoken,thumbprint,Authorization,Ent-Authorization,UserIdToken,DDD-TMPL,DDD-ActivityId,DDD-FeatureSet,DDD-Session-ID,Date,date,ads-referer,ads-referer,taboola-sessionId,taboola-sessionid,Akamai-Request-ID,Akamai-Server-IP,X-MSEdge-Ref,DDD-DebugId,s-xbox-token,OneWebServiceLatency,X-FD-Features,DDD-UserType,traceparent,Widgets,Muted Access-Control-Expose-Headers: TicketType,RequestContinuationKey,AuthToken,Content-Type,x-client-activityid,ms-cv,OneSvc-Uni-Feat-Tun,signedInCookieName,muid,appid,User-Location,user-location,userauthtoken,usertickettype,sitename,s2sauthtoken,thumbprint,Authorization,Ent-Authorization,UserIdToken,DDD-TMPL,DDD-ActivityId,DDD-FeatureSet,DDD-Session-ID,Date,date,ads-referer,ads-referer,taboola-sessionId,taboola-sessionid,Akamai-Request-ID,Akamai-Server-IP,X-MSEdge-Ref,DDD-DebugId,s-xbox-token,OneWebServiceLatency,X-FD-Features,DDD-UserType,traceparent,Widgets,Muted DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-ActivityId: 65a80945-2e4a-45d5-9f88-2fc435caf804 DDD-StrategyExecutionLatency: 00:00:00.0090771 DDD-DebugId: 65a80945-2e4a-45d5-9f88-2fc435caf804\|2024-01-17T17:07:17.5715896Z\|fabric_msn\|EUS1\|News_27 OneWebServiceLatency: 10 X-MSEdge-ResponseInfo: 10 Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA X-Ceto-ref: 65a8094518514d41a3f7a29805ba8555\|2024-01-17T17:07:17.569Z X-MSEdge-Ref: Ref A: 3EBFD7BF93C945188188AAD54BC06797 Ref B: EWR30EDGE0921 Ref C: 2024-01-17T17:07:17Z Expires: Wed, 17 Jan 2024 17:07:17 GMT Date: Wed, 17 Jan 2024 17:07:17 GMT Content-Length: 329 Connection: close Set-Cookie: _C_ETH=1; expires=Tue, 16 Jan 2024 17:07:17 GMT; domain=.msn.com; path=/; secure; httponly Set-Cookie: _C_Auth= Akamai-Request-BC: [a=23.218.242.10,b=89866653,c=g,n=US_NJ_EDISON,o=20940],[a=204.79.197.203,c=o] Server-Timing: clientrtt; dur=88, clienttt; dur=33, origin; dur=33 , cdntime; dur=0 Akamai-Cache-Status: NotCacheable from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b419d Access-Control-Allow-Methods: PUT,PATCH,POST,GET,OPTIONS,DELETE Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com X-AS-SuppressSetCookie: 1 Cache-Control: private, max-age=0 report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511237.55b419d Vary: Origin
2024-01-17 17:07:17 UTC	329	IN	Data Raw: 5b 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 63 69 74 79 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 70 6f 73 74 61 6c 43 6f 64 65 22 3a 22 31 30 31 31 38 22 2c 22 69 73 4c 6f 63 61 6c 69 7a 65 64 22 3a 74 72 75 65 2c 22 61 63 63 75 72 61 63 79 22 3a 33 31 32 32 2e 31 32 37 34 34 31 34 30 36 32 35 2c 22 69 73 41 75 74 6f 44 65 74 65 63 74 65 64 22 3a 74 72 75 65 2c 22 6c 6f 63 61 74 69 6f 6e 53 6f 75 72 63 65 22 3a 22 52 65 76 65 72 73 65 49 70 22 2c 22 64 65 74 65 63 74 69 6f 6e 4d 65 74 61 64 61 74 61 22 3a 7b 22 69 70 43 61 74 65 67 6f 72 79 22 3a 22 22 2c 22 69 70 43 61 74 65 67 6f 72 79 43 6f 6e 66 Data Ascii: [{"country":"United States","countryCode":"US","state":"New York","city":"New York","postalCode":"10118","isLouserzed":true,"accuracy":3122.12744140625,"isAutoDetected":true,"locationSource":"ReverseIp","detectionMetadata":{"ipCategory":"","ipCategoryConf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.16	49940	52.182.143.211	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:17 UTC	1048	OUT	POST /OneCollector/1.0?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1705511236366&w=0&anoncknm=app_anon&NoResponseBody=true HTTP/1.1 Host: browser.events.data.msn.com Connection: keep-alive Content-Length: 12192 sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; _SS=SID=00; _C_ETH=1
2024-01-17 17:07:17 UTC	12192	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 4c 6f 61 64 54 69 6d 65 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 30 31 2d 31 37 54 31 37 3a 30 37 3a 31 36 2e 33 36 34 5a 22 2c 22 76 65 72 22 3a 22 34 2e 30 22 2c 22 69 4b 65 79 22 3a 22 6f 3a 30 64 65 64 36 30 63 37 35 65 34 34 34 34 33 61 61 33 34 38 34 63 34 32 63 31 63 34 33 66 65 38 22 2c 22 65 78 74 22 3a 7b 22 73 64 6b 22 3a 7b 22 76 65 72 22 3a 22 31 44 53 2d 57 65 62 2d 4a 53 2d 33 2e 32 2e 38 22 2c 22 73 65 71 22 3a 32 2c 22 69 6e 73 74 61 6c 6c 49 64 22 3a 22 39 31 64 35 37 31 39 38 2d 66 37 38 37 2d 34 66 35 39 2d 38 61 30 37 2d 64 34 35 39 64 38 32 31 34 35 34 63 22 2c 22 65 70 6f 63 68 22 3a 22 32 35 34 36 32 30 33 31 31 30 22 7d 2c 22 61 70 70 22 3a 7b 22 6c 6f 63 61 6c 65 Data Ascii: {"name":"MS.News.Web.LoadTime","time":"2024-01-17T17:07:16.364Z","ver":"4.0","iKey":"o:0ded60c75e44443aa3484c42c1c43fe8","ext":{"sdk":{"ver":"1DS-Web-JS-3.2.8","seq":2,"installId":"91d57198-f787-4f59-8a07-d459d821454c","epoch":"2546203110"},"app":{"locale
2024-01-17 17:07:17 UTC	890	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: MC1=GUID=4267ad56393a4b35a70b2ffcb5a18747&HASH=4267&LV=202401&V=4&LU=1705511237703; Domain=.microsoft.com; Expires=Thu, 16 Jan 2025 17:07:17 GMT; Path=/;Secure; SameSite=None Set-Cookie: MS0=853d79b53115446c964f6026d600bd3e; Domain=.microsoft.com; Expires=Wed, 17 Jan 2024 17:37:17 GMT; Path=/;Secure; SameSite=None time-delta-millis: 1337 Access-Control-Allow-Headers: P3P,Set-Cookie,time-delta-millis Access-Control-Allow-Methods: POST Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com Access-Control-Expose-Headers: time-delta-millis Date: Wed, 17 Jan 2024 17:07:17 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.16	49942	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:17 UTC	1013	OUT	GET /service/graph/actions?%24top=20&%24filter=actionType+eq+%27Follow%27+and+%28targetType+eq+%27Location%27%29&apikey=1hYoJsIRvPEnSkk0hlnJF2092mHqiz7xFenIFKa9uc&activityId=EDA7CB09-C52C-41B1-9707-B0A727D882E0&ocid=pdp-peregrine&cm=en-us&it=app&user=m-2136D0069C246D353F30C40F9D676C20 HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; MUIDB=2136D0069C246D353F30C40F9D676C20; _SS=SID=00
2024-01-17 17:07:18 UTC	3035	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Headers: TicketType,RequestContinuationKey,AuthToken,Content-Type,x-client-activityid,ms-cv,OneSvc-Uni-Feat-Tun,signedInCookieName,muid,appid,User-Location,user-location,userauthtoken,usertickettype,sitename,s2sauthtoken,thumbprint,Authorization,Ent-Authorization,UserIdToken,DDD-TMPL,DDD-ActivityId,DDD-FeatureSet,DDD-Session-ID,Date,date,ads-referer,ads-referer,taboola-sessionId,taboola-sessionid,Akamai-Request-ID,Akamai-Server-IP,X-MSEdge-Ref,DDD-DebugId,s-xbox-token,OneWebServiceLatency,X-FD-Features,DDD-UserType,traceparent,Widgets,Muted Access-Control-Expose-Headers: TicketType,RequestContinuationKey,AuthToken,Content-Type,x-client-activityid,ms-cv,OneSvc-Uni-Feat-Tun,signedInCookieName,muid,appid,User-Location,user-location,userauthtoken,usertickettype,sitename,s2sauthtoken,thumbprint,Authorization,Ent-Authorization,UserIdToken,DDD-TMPL,DDD-ActivityId,DDD-FeatureSet,DDD-Session-ID,Date,date,ads-referer,ads-referer,taboola-sessionId,taboola-sessionid,Akamai-Request-ID,Akamai-Server-IP,X-MSEdge-Ref,DDD-DebugId,s-xbox-token,OneWebServiceLatency,X-FD-Features,DDD-UserType,traceparent,Widgets,Muted DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-ActivityId: 65a80946-5c5e-4141-91b0-080867f42110 DDD-StrategyExecutionLatency: 00:00:00.0059676,00:00:00.0123369 DDD-DebugId: 65a80946-5c5e-4141-91b0-080867f42110\|2024-01-17T17:07:18.0393562Z\|fabric_graph\|EUS1\|Graph_4 OneWebServiceLatency: 13 X-MSEdge-ResponseInfo: 13 Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA X-Ceto-ref: 65a8094655be4c04b1c93e451e9dd45d\|2024-01-17T17:07:18.022Z X-MSEdge-Ref: Ref A: F3B694A6D4844DBF8CB14B7BE6DE3DA4 Ref B: EWR30EDGE0121 Ref C: 2024-01-17T17:07:18Z Expires: Wed, 17 Jan 2024 17:07:18 GMT Date: Wed, 17 Jan 2024 17:07:18 GMT Content-Length: 79 Connection: close Set-Cookie: _C_ETH=1; domain=.msn.com; path=/; secure; httponly Set-Cookie: _C_Auth= Akamai-Request-BC: [a=23.218.242.10,b=89867312,c=g,n=US_NJ_EDISON,o=20940],[a=204.79.197.203,c=o] Server-Timing: clientrtt; dur=88, clienttt; dur=46, origin; dur=43 , cdntime; dur=3 Akamai-Cache-Status: NotCacheable from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b4430 Access-Control-Allow-Methods: PUT,PATCH,POST,GET,OPTIONS,DELETE Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com X-AS-SuppressSetCookie: 1 Cache-Control: private, max-age=0 report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511238.55b4430 Vary: Origin
2024-01-17 17:07:18 UTC	79	IN	Data Raw: 7b 20 22 40 6f 64 61 74 61 2e 63 6f 6e 74 65 78 74 22 3a 20 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 6d 73 6e 2e 63 6f 6d 2f 67 72 61 70 68 2f 24 6d 65 74 61 64 61 74 61 23 61 63 74 69 6f 6e 73 22 2c 20 22 76 61 6c 75 65 22 3a 20 5b 5d 7d Data Ascii: { "@odata.context": "https://api.msn.com/graph/$metadata#actions", "value": []}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.16	49943	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:18 UTC	526	OUT	GET /bundles/v1/edgeChromium/latest/components_weather-popup_dist_index_js.3e8679ded20ad762dbad.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:18 UTC	1186	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: xK/gTGhtrIB6rfMIBomiuA== Last-Modified: Tue, 16 Jan 2024 23:21:33 GMT ETag: 0x8DC16E9E100FF28 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 820d7159-401e-0073-2ed2-48e5b8000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:18 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Akamai-Request-BC: [a=23.218.242.10,b=89867979,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=90, clienttt; dur=1, origin; dur=0 , cdntime; dur=1 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b46cb Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511238.55b46cb Vary: Origin
2024-01-17 17:07:18 UTC	15198	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 6f 6d 70 6f 6e 65 6e 74 73 5f 77 65 61 74 68 65 72 2d 70 6f 70 75 70 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 22 5d 2c 7b 37 33 32 31 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6f 29 7b 6f 2e 72 28 65 29 2c 6f 2e 64 28 65 2c 7b 57 65 61 74 68 65 72 50 6f 70 75 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 65 7d 7d 29 3b 76 61 72 20 6e 3d 6f 28 33 33 39 34 30 29 2c Data Ascii: 00006000"use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["components_weather-popup_dist_index_js"],{73211:function(t,e,o){o.r(e),o.d(e,{WeatherPopup:function(){return te}});var n=o(33940),
2024-01-17 17:07:18 UTC	9390	IN	Data Raw: 20 65 7c 7c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 44 61 74 61 3f 65 3a 7b 2e 2e 2e 61 2e 63 6f 6e 74 65 6e 74 2c 2e 2e 2e 65 7d 2c 65 3f 7b 74 79 70 65 3a 72 2e 74 79 70 65 7c 7c 6e 75 6c 6c 2c 63 6f 6e 74 65 6e 74 3a 65 7d 3a 61 7d 72 65 74 75 72 6e 20 61 7d 76 61 72 20 6c 74 3d 6f 28 35 32 33 29 2c 64 74 3d 6f 28 37 30 30 34 31 29 3b 66 75 6e 63 74 69 6f 6e 20 75 74 28 74 2c 65 2c 6f 2c 6e 2c 61 2c 69 2c 72 2c 73 29 7b 72 65 74 75 72 6e 20 74 2e 61 64 64 4f 72 55 70 64 61 74 65 43 68 69 6c 64 28 7b 6e 61 6d 65 3a 65 2c 62 65 68 61 76 69 6f 72 3a 6f 2c 63 6f 6e 74 65 6e 74 3a 7b 68 65 61 64 6c 69 6e 65 3a 73 7c 7c 65 2c 74 79 70 65 3a 6e 2c 76 65 72 74 69 63 61 6c 3a 61 2c 63 61 74 65 67 6f 72 79 3a 69 7d 2c 6f 76 65 72 72 69 64 65 44 65 73 74 69 6e 61 74 Data Ascii: e\|\|e.backgroundData?e:{...a.content,...e},e?{type:r.type\|\|null,content:e}:a}return a}var lt=o(523),dt=o(70041);function ut(t,e,o,n,a,i,r,s){return t.addOrUpdateChild({name:e,behavior:o,content:{headline:s\|\|e,type:n,vertical:a,category:i},overrideDestinat
2024-01-17 17:07:18 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 61 73 74 54 69 6d 65 72 3d 6e 75 6c 6c 7d 6f 6e 54 6f 61 73 74 41 63 74 69 6f 6e 43 6c 69 63 6b 28 74 29 7b 74 26 26 74 28 29 2c 74 68 69 73 2e 63 6c 65 61 72 54 6f 61 73 74 28 29 7d 75 70 64 61 74 65 48 6f 76 65 72 57 65 61 74 68 65 72 44 61 74 61 28 29 7b 76 61 72 20 74 2c 65 2c 6f 2c 6e 2c 69 2c 73 2c 63 2c 6c 2c 64 2c 75 2c 67 2c 68 2c 79 2c 6b 2c 53 2c 54 2c 4d 2c 46 2c 41 3b 63 6f 6e 73 74 20 42 3d 74 68 69 73 2e 77 65 61 74 68 65 72 44 61 74 61 53 74 61 74 65 3b 69 66 28 21 42 29 72 65 74 75 72 6e 3b 74 68 69 73 2e 6c 6f 63 61 74 69 6f 6e 4d 6f 64 65 3d 42 2e 6c 6f 63 61 74 69 6f 6e 44 65 74 65 63 74 69 6f 6e 53 65 74 74 69 6e 67 2c 74 68 69 73 2e 68 6f 6d 65 4c 6f 63 61 74 69 6f 6e 3d 42 2e 63 75 72 72 65 6e 74 4c 6f Data Ascii: 00006000astTimer=null}onToastActionClick(t){t&&t(),this.clearToast()}updateHoverWeatherData(){var t,e,o,n,i,s,c,l,d,u,g,h,y,k,S,T,M,F,A;const B=this.weatherDataState;if(!B)return;this.locationMode=B.locationDetectionSetting,this.homeLocation=B.currentLo
2024-01-17 17:07:18 UTC	8204	IN	Data Raw: 6e 74 61 69 6e 65 72 7b 63 6f 6c 6f 72 3a 23 32 36 32 36 32 36 7d 2e 64 61 72 6b 2d 6d 61 69 6e 2d 63 6f 6e 74 61 69 6e 65 72 7b 63 6f 6c 6f 72 3a 23 46 35 46 35 46 35 7d 2e 6d 61 69 6e 2d 63 6f 6e 74 61 69 6e 65 72 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 6d 61 72 67 69 6e 3a 32 30 70 78 20 32 34 70 78 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 6c 6f 63 61 74 69 6f 6e 2d 73 65 74 74 69 6e 67 2d 6c 61 62 65 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 38 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 70 61 64 64 Data Ascii: ntainer{color:#262626}.dark-main-container{color:#F5F5F5}.main-container{font-size:14px;line-height:20px;margin:20px 24px;display:block;flex-direction:column;position:relative}.location-setting-label{font-size:20px;line-height:28px;margin-bottom:10px;padd
2024-01-17 17:07:18 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 74 6c 65 3d 22 24 7b 74 3d 3e 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 2e 73 74 72 69 6e 67 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 73 65 74 74 69 6e 67 73 2e 63 6c 6f 73 65 54 69 70 7d 7d 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 24 7b 74 3d 3e 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 2e 73 74 72 69 6e 67 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 73 65 74 74 69 6e 67 73 2e 63 6c 6f 73 65 54 69 70 7d 7d 22 20 72 6f 6c 65 3d 22 62 75 74 74 6f 6e 22 20 40 63 6c 69 63 6b 3d 24 7b 28 74 2c 65 29 3d 3e 74 2e 63 6c 6f 73 65 57 65 6c 63 6f 6d 65 47 72 65 65 74 69 6e 67 44 69 61 6c 6f 67 26 26 74 2e 63 6c Data Ascii: 00006000tle="${t=>{var e;return null===(e=t.strings)\|\|void 0===e?void 0:e.settings.closeTip}}" aria-label="${t=>{var e;return null===(e=t.strings)\|\|void 0===e?void 0:e.settings.closeTip}}" role="button" @click=${(t,e)=>t.closeWelcomeGreetingDialog&&t.cl
2024-01-17 17:07:18 UTC	8204	IN	Data Raw: 2e 72 61 6e 6b 69 6e 67 3a 30 2c 63 6f 6e 74 65 6e 74 74 79 70 65 3a 74 2e 63 6f 6e 74 65 6e 74 74 79 70 65 2c 63 66 3a 74 2e 63 66 2c 63 6f 6e 74 65 6e 74 3a 5b 5d 7d 3b 74 2e 63 6f 6e 74 65 6e 74 26 26 74 2e 63 6f 6e 74 65 6e 74 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 74 26 26 65 2e 63 6f 6e 74 65 6e 74 2e 70 75 73 68 28 7b 2e 2e 2e 74 7d 29 7d 29 29 2c 6f 2e 70 75 73 68 28 65 29 7d 29 29 2c 6f 2e 6c 65 6e 67 74 68 3e 30 3f 6f 3a 6e 75 6c 6c 29 3a 6e 75 6c 6c 7d 63 61 74 63 68 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 28 74 29 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 6d 61 70 73 6d 65 74 61 64 61 74 61 7d 28 74 29 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 69 66 28 21 74 7c 7c 21 74 2e 70 72 65 76 69 65 77 Data Ascii: .ranking:0,contenttype:t.contenttype,cf:t.cf,content:[]};t.content&&t.content.forEach((t=>{t&&e.content.push({...t})})),o.push(e)})),o.length>0?o:null):null}catch{return null}}(t),n=function(t){return t.mapsmetadata}(t),a=function(t){try{if(!t\|\|!t.preview
2024-01-17 17:07:18 UTC	2089	IN	Data Raw: 30 30 30 30 30 38 31 44 0d 0a 42 47 5f 48 41 5a 59 3a 22 23 34 44 34 38 33 44 22 2c 42 47 5f 46 4f 47 3a 22 23 33 30 32 64 35 35 22 2c 42 47 5f 46 4f 47 5f 4e 49 47 48 54 3a 22 23 31 63 32 39 33 33 22 7d 2c 76 3d 22 23 34 63 33 38 36 31 33 33 22 2c 6d 3d 22 23 33 30 32 64 35 66 22 2c 66 3d 22 23 31 31 35 36 39 39 22 2c 79 3d 22 23 35 38 34 65 34 37 22 2c 77 3d 5b 7b 76 69 64 65 6f 4e 61 6d 65 3a 22 54 65 73 74 22 2c 63 6f 6e 64 69 74 69 6f 6e 73 3a 5b 5d 2c 76 65 72 73 69 6f 6e 3a 22 22 7d 2c 7b 76 69 64 65 6f 4e 61 6d 65 3a 22 53 75 6e 6e 79 22 2c 63 6f 6e 64 69 74 69 6f 6e 73 3a 5b 22 30 30 30 22 2c 22 31 30 30 22 2c 22 32 30 30 22 5d 7d 2c 7b 76 69 64 65 6f 4e 61 6d 65 3a 22 43 6c 6f 75 64 79 22 2c 63 6f 6e 64 69 74 69 6f 6e 73 3a 5b 22 33 30 30 22 2c Data Ascii: 0000081DBG_HAZY:"#4D483D",BG_FOG:"#302d55",BG_FOG_NIGHT:"#1c2933"},v="#4c386133",m="#302d5f",f="#115699",y="#584e47",w=[{videoName:"Test",conditions:[],version:""},{videoName:"Sunny",conditions:["000","100","200"]},{videoName:"Cloudy",conditions:["300",
2024-01-17 17:07:18 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 22 32 30 22 3a 63 61 73 65 22 32 35 22 3a 63 61 73 65 22 32 36 22 3a 63 61 73 65 22 35 39 22 3a 63 61 73 65 22 38 31 22 3a 69 3d 7b 63 6f 6e 74 65 6e 74 42 61 63 6b 67 72 6f 75 6e 64 3a 6f 3f 7b 22 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 22 3a 60 75 72 6c 28 27 24 7b 6e 2b 65 2e 73 6e 6f 77 49 6d 61 67 65 55 72 6c 7d 27 29 60 7d 3a 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 2e 42 47 5f 53 4e 4f 57 7d 2c 63 61 72 6f 75 73 65 6c 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 7b 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 22 23 32 36 34 46 38 35 22 7d 2c 74 69 6d 65 6c 69 6e 65 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 72 2e 42 47 5f 53 4e 4f 57 7d 3b 62 72 65 61 6b 3b 63 61 73 65 22 33 34 22 3a 63 61 73 65 22 34 Data Ascii: 00004000"20":case"25":case"26":case"59":case"81":i={contentBackground:o?{"background-image":`url('${n+e.snowImageUrl}')`}:{background:r.BG_SNOW},carouselBackgroundColor:{backgroundColor:"#264F85"},timelineBackgroundColor:r.BG_SNOW};break;case"34":case"4
2024-01-17 17:07:18 UTC	12	IN	Data Raw: 61 74 69 6f 6e 29 26 26 28 6e 0d 0a Data Ascii: ation)&&(n
2024-01-17 17:07:18 UTC	16384	IN	Data Raw: 30 30 30 30 34 32 35 32 0d 0a 75 6c 6c 3d 3d 3d 28 74 3d 74 68 69 73 2e 66 6f 6c 6c 6f 77 65 64 4c 6f 63 61 74 69 6f 6e 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 66 69 6c 74 65 72 28 28 74 3d 3e 28 30 2c 73 2e 65 75 29 28 74 2c 74 68 69 73 2e 64 65 74 65 63 74 65 64 4c 6f 63 61 74 69 6f 6e 7c 7c 7b 7d 29 29 29 2e 6c 65 6e 67 74 68 29 3e 30 7d 69 73 43 75 72 72 65 6e 74 4c 6f 63 61 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 30 2c 73 2e 65 75 29 28 74 2c 74 68 69 73 2e 63 75 72 72 65 6e 74 4c 6f 63 61 74 69 6f 6e 7c 7c 7b 7d 29 26 26 63 2e 64 50 28 74 2c 74 68 69 73 2e 63 75 72 72 65 6e 74 4c 6f 63 61 74 69 6f 6e 7c 7c 7b 7d 29 7d 66 6f 63 75 73 6f 75 74 48 61 6e 64 6c 65 72 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 24 Data Ascii: 00004252ull===(t=this.followedLocations)\|\|void 0===t?void 0:t.filter((t=>(0,s.eu)(t,this.detectedLocation\|\|{}))).length)>0}isCurrentLocation(t){return(0,s.eu)(t,this.currentLocation\|\|{})&&c.dP(t,this.currentLocation\|\|{})}focusoutHandler(t){return this.$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.16	49945	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:18 UTC	942	OUT	GET /service/msn/user?apikey=1hYoJsIRvPEnSkk0hlnJF2092mHqiz7xFenIFKa9uc&activityId=EDA7CB09-C52C-41B1-9707-B0A727D882E0&ocid=pdp-peregrine&cm=en-us&it=app&user=m-2136D0069C246D353F30C40F9D676C20 HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: _C_Auth=; USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; MUIDB=2136D0069C246D353F30C40F9D676C20; _SS=SID=00; _C_ETH=1
2024-01-17 17:07:18 UTC	3080	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Access-Control-Allow-Headers: TicketType,RequestContinuationKey,AuthToken,Content-Type,x-client-activityid,ms-cv,OneSvc-Uni-Feat-Tun,signedInCookieName,muid,appid,User-Location,user-location,userauthtoken,usertickettype,sitename,s2sauthtoken,thumbprint,Authorization,Ent-Authorization,UserIdToken,DDD-TMPL,DDD-ActivityId,DDD-FeatureSet,DDD-Session-ID,Date,date,ads-referer,ads-referer,taboola-sessionId,taboola-sessionid,Akamai-Request-ID,Akamai-Server-IP,X-MSEdge-Ref,DDD-DebugId,s-xbox-token,OneWebServiceLatency,X-FD-Features,DDD-UserType,traceparent,Widgets,Muted Access-Control-Expose-Headers: TicketType,RequestContinuationKey,AuthToken,Content-Type,x-client-activityid,ms-cv,OneSvc-Uni-Feat-Tun,signedInCookieName,muid,appid,User-Location,user-location,userauthtoken,usertickettype,sitename,s2sauthtoken,thumbprint,Authorization,Ent-Authorization,UserIdToken,DDD-TMPL,DDD-ActivityId,DDD-FeatureSet,DDD-Session-ID,Date,date,ads-referer,ads-referer,taboola-sessionId,taboola-sessionid,Akamai-Request-ID,Akamai-Server-IP,X-MSEdge-Ref,DDD-DebugId,s-xbox-token,OneWebServiceLatency,X-FD-Features,DDD-UserType,traceparent,Widgets,Muted DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-ActivityId: 65a80946-3e14-4089-91da-301ee0c72609 DDD-StrategyExecutionLatency: 00:00:00.0059299,00:00:00.0061162 DDD-DebugId: 65a80946-3e14-4089-91da-301ee0c72609\|2024-01-17T17:07:18.5238574Z\|fabric_msn\|EUS1\|News_400 OneWebServiceLatency: 7 X-MSEdge-ResponseInfo: 7 Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA X-Ceto-ref: 65a80946463a4695a8b2a7c8458b8dca\|2024-01-17T17:07:18.506Z X-MSEdge-Ref: Ref A: 4737DF9802F946E0A7F711B1D8DA1B31 Ref B: EWR311000101047 Ref C: 2024-01-17T17:07:18Z Expires: Wed, 17 Jan 2024 17:07:18 GMT Date: Wed, 17 Jan 2024 17:07:18 GMT Content-Length: 74 Connection: close Set-Cookie: _C_ETH=1; expires=Tue, 16 Jan 2024 17:07:18 GMT; domain=.msn.com; path=/; secure; httponly Set-Cookie: _C_Auth= Akamai-Request-BC: [a=23.218.242.10,b=89868094,c=g,n=US_NJ_EDISON,o=20940],[a=204.79.197.203,c=o] Server-Timing: clientrtt; dur=90, clienttt; dur=50, origin; dur=46 , cdntime; dur=4 Akamai-Cache-Status: NotCacheable from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b473e Access-Control-Allow-Methods: PUT,PATCH,POST,GET,OPTIONS,DELETE Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com X-AS-SuppressSetCookie: 1 Cache-Control: private, max-age=0 report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511238.55b473e Vary: Origin
2024-01-17 17:07:18 UTC	74	IN	Data Raw: 7b 20 22 40 6f 64 61 74 61 2e 63 6f 6e 74 65 78 74 22 3a 20 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 6d 73 6e 2e 63 6f 6d 2f 6d 73 6e 2f 24 6d 65 74 61 64 61 74 61 23 75 73 65 72 22 2c 20 22 76 61 6c 75 65 22 3a 20 5b 5d 7d Data Ascii: { "@odata.context": "https://api.msn.com/msn/$metadata#user", "value": []}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.16	49944	52.182.143.211	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:18 UTC	1048	OUT	POST /OneCollector/1.0?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1705511237388&w=0&anoncknm=app_anon&NoResponseBody=true HTTP/1.1 Host: browser.events.data.msn.com Connection: keep-alive Content-Length: 10980 sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; _SS=SID=00; _C_ETH=1
2024-01-17 17:07:18 UTC	10980	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 43 6f 6e 74 65 6e 74 56 69 65 77 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 30 31 2d 31 37 54 31 37 3a 30 37 3a 31 37 2e 33 38 37 5a 22 2c 22 76 65 72 22 3a 22 34 2e 30 22 2c 22 69 4b 65 79 22 3a 22 6f 3a 30 64 65 64 36 30 63 37 35 65 34 34 34 34 33 61 61 33 34 38 34 63 34 32 63 31 63 34 33 66 65 38 22 2c 22 65 78 74 22 3a 7b 22 73 64 6b 22 3a 7b 22 76 65 72 22 3a 22 31 44 53 2d 57 65 62 2d 4a 53 2d 33 2e 32 2e 38 22 2c 22 73 65 71 22 3a 33 2c 22 69 6e 73 74 61 6c 6c 49 64 22 3a 22 39 31 64 35 37 31 39 38 2d 66 37 38 37 2d 34 66 35 39 2d 38 61 30 37 2d 64 34 35 39 64 38 32 31 34 35 34 63 22 2c 22 65 70 6f 63 68 22 3a 22 32 35 34 36 32 30 33 31 31 30 22 7d 2c 22 61 70 70 22 3a 7b 22 6c 6f 63 Data Ascii: {"name":"MS.News.Web.ContentView","time":"2024-01-17T17:07:17.387Z","ver":"4.0","iKey":"o:0ded60c75e44443aa3484c42c1c43fe8","ext":{"sdk":{"ver":"1DS-Web-JS-3.2.8","seq":3,"installId":"91d57198-f787-4f59-8a07-d459d821454c","epoch":"2546203110"},"app":{"loc
2024-01-17 17:07:18 UTC	890	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: MC1=GUID=353741b5aa954ff1a699d5080759c982&HASH=3537&LV=202401&V=4&LU=1705511238630; Domain=.microsoft.com; Expires=Thu, 16 Jan 2025 17:07:18 GMT; Path=/;Secure; SameSite=None Set-Cookie: MS0=a3fc284dcd654025900ee3e17bbf069f; Domain=.microsoft.com; Expires=Wed, 17 Jan 2024 17:37:18 GMT; Path=/;Secure; SameSite=None time-delta-millis: 1242 Access-Control-Allow-Headers: P3P,Set-Cookie,time-delta-millis Access-Control-Allow-Methods: POST Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com Access-Control-Expose-Headers: time-delta-millis Date: Wed, 17 Jan 2024 17:07:17 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.16	49946	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:18 UTC	950	OUT	GET /service/v1/news/users/me/locations?apikey=1hYoJsIRvPEnSkk0hlnJF2092mHqiz7xFenIFKa9uc&activityId=EDA7CB09-C52C-41B1-9707-B0A727D882E0&ocid=pdp-peregrine&cm=en-us&it=app&user=m-2136D0069C246D353F30C40F9D676C20 HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: _C_Auth=; USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; MUIDB=2136D0069C246D353F30C40F9D676C20; _SS=SID=00
2024-01-17 17:07:19 UTC	3018	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Headers: TicketType,RequestContinuationKey,AuthToken,Content-Type,x-client-activityid,ms-cv,OneSvc-Uni-Feat-Tun,signedInCookieName,muid,appid,User-Location,user-location,userauthtoken,usertickettype,sitename,s2sauthtoken,thumbprint,Authorization,Ent-Authorization,UserIdToken,DDD-TMPL,DDD-ActivityId,DDD-FeatureSet,DDD-Session-ID,Date,date,ads-referer,ads-referer,taboola-sessionId,taboola-sessionid,Akamai-Request-ID,Akamai-Server-IP,X-MSEdge-Ref,DDD-DebugId,s-xbox-token,OneWebServiceLatency,X-FD-Features,DDD-UserType,traceparent,Widgets,Muted Access-Control-Expose-Headers: TicketType,RequestContinuationKey,AuthToken,Content-Type,x-client-activityid,ms-cv,OneSvc-Uni-Feat-Tun,signedInCookieName,muid,appid,User-Location,user-location,userauthtoken,usertickettype,sitename,s2sauthtoken,thumbprint,Authorization,Ent-Authorization,UserIdToken,DDD-TMPL,DDD-ActivityId,DDD-FeatureSet,DDD-Session-ID,Date,date,ads-referer,ads-referer,taboola-sessionId,taboola-sessionid,Akamai-Request-ID,Akamai-Server-IP,X-MSEdge-Ref,DDD-DebugId,s-xbox-token,OneWebServiceLatency,X-FD-Features,DDD-UserType,traceparent,Widgets,Muted DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-ActivityId: 65a80946-3a15-4c77-ae88-69a5109ec588 DDD-StrategyExecutionLatency: 00:00:00.0096490 DDD-DebugId: 65a80946-3a15-4c77-ae88-69a5109ec588\|2024-01-17T17:07:18.9673729Z\|fabric_msn\|EUS1\|News_117 OneWebServiceLatency: 11 X-MSEdge-ResponseInfo: 11 Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA X-Ceto-ref: 65a80946e8154b40896859962e5ecd48\|2024-01-17T17:07:18.952Z X-MSEdge-Ref: Ref A: B6CB5D8CB7204450AE83B00119C0FB6E Ref B: EWR30EDGE1118 Ref C: 2024-01-17T17:07:18Z Expires: Wed, 17 Jan 2024 17:07:18 GMT Date: Wed, 17 Jan 2024 17:07:18 GMT Content-Length: 329 Connection: close Set-Cookie: _C_ETH=1; domain=.msn.com; path=/; secure; httponly Set-Cookie: _C_Auth= Akamai-Request-BC: [a=23.218.242.10,b=89868994,c=g,n=US_NJ_EDISON,o=20940],[a=204.79.197.203,c=o] Server-Timing: clientrtt; dur=88, clienttt; dur=36, origin; dur=36 , cdntime; dur=0 Akamai-Cache-Status: NotCacheable from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b4ac2 Access-Control-Allow-Methods: PUT,PATCH,POST,GET,OPTIONS,DELETE Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com X-AS-SuppressSetCookie: 1 Cache-Control: private, max-age=0 report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511238.55b4ac2 Vary: Origin
2024-01-17 17:07:19 UTC	329	IN	Data Raw: 5b 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 63 69 74 79 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 70 6f 73 74 61 6c 43 6f 64 65 22 3a 22 31 30 31 31 38 22 2c 22 69 73 4c 6f 63 61 6c 69 7a 65 64 22 3a 74 72 75 65 2c 22 61 63 63 75 72 61 63 79 22 3a 33 31 32 32 2e 31 32 37 34 34 31 34 30 36 32 35 2c 22 69 73 41 75 74 6f 44 65 74 65 63 74 65 64 22 3a 74 72 75 65 2c 22 6c 6f 63 61 74 69 6f 6e 53 6f 75 72 63 65 22 3a 22 52 65 76 65 72 73 65 49 70 22 2c 22 64 65 74 65 63 74 69 6f 6e 4d 65 74 61 64 61 74 61 22 3a 7b 22 69 70 43 61 74 65 67 6f 72 79 22 3a 22 22 2c 22 69 70 43 61 74 65 67 6f 72 79 43 6f 6e 66 Data Ascii: [{"country":"United States","countryCode":"US","state":"New York","city":"New York","postalCode":"10118","isLouserzed":true,"accuracy":3122.12744140625,"isAutoDetected":true,"locationSource":"ReverseIp","detectionMetadata":{"ipCategory":"","ipCategoryConf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.16	49948	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:18 UTC	499	OUT	GET /bundles/v1/edgeChromium/latest/digest-card.fba514af47dbcda937ef.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:19 UTC	1149	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: RBQTP3V625YAlCqYAneGDA== Last-Modified: Tue, 16 Jan 2024 23:21:31 GMT ETag: 0x8DC16E9DF6DCD50 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 05cd2c4f-d01e-009e-65d2-482fd4000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:19 GMT Content-Length: 24312 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89869083,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=0, origin; dur=0 , cdntime; dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b4b1b Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511239.55b4b1b Vary: Origin
2024-01-17 17:07:19 UTC	15235	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 64 69 67 65 73 74 2d 63 61 72 64 22 5d 2c 7b 38 33 34 37 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 72 28 74 29 2c 69 2e 64 28 74 2c 7b 44 69 67 65 73 74 43 61 72 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 59 7d 2c 44 69 67 65 73 74 43 61 72 64 53 74 79 6c 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 65 7d 2c 44 69 67 65 73 74 43 61 72 64 54 65 6d 70 6c 61 74 65 Data Ascii: (self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["digest-card"],{83478:function(e,t,i){"use strict";i.r(t),i.d(t,{DigestCard:function(){return Y},DigestCardStyles:function(){return oe},DigestCardTemplate
2024-01-17 17:07:19 UTC	9077	IN	Data Raw: 74 6f 74 79 70 65 2c 22 63 61 72 64 4d 65 74 61 64 61 74 61 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 64 2e 67 6e 29 28 5b 68 2e 4c 4f 5d 2c 59 2e 70 72 6f 74 6f 74 79 70 65 2c 22 73 75 70 65 72 43 61 72 64 44 61 74 61 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 64 2e 67 6e 29 28 5b 68 2e 4c 4f 5d 2c 59 2e 70 72 6f 74 6f 74 79 70 65 2c 22 74 65 6c 65 6d 65 74 72 79 43 6f 6e 74 65 78 74 22 2c 76 6f 69 64 20 30 29 3b 76 61 72 20 65 65 3d 69 28 34 39 32 31 38 29 2c 74 65 3d 69 28 34 31 34 37 32 29 3b 63 6f 6e 73 74 20 69 65 3d 65 65 2e 64 79 60 3c 63 73 2d 73 64 2d 73 75 70 65 72 2d 6c 69 73 74 20 73 6c 6f 74 3d 22 63 6f 6e 74 65 6e 74 22 20 3a 63 6f 6e 74 65 6e 74 4c 69 73 74 3d 24 7b 65 3d 3e 65 2e 67 65 74 4c 69 73 74 41 72 74 69 63 6c 65 43 6f 6e 74 65 6e 74 28 Data Ascii: totype,"cardMetadata",void 0),(0,d.gn)([h.LO],Y.prototype,"superCardData",void 0),(0,d.gn)([h.LO],Y.prototype,"telemetryContext",void 0);var ee=i(49218),te=i(41472);const ie=ee.dy`<cs-sd-super-list slot="content" :contentList=${e=>e.getListArticleContent(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.16	49947	52.182.143.211	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:19 UTC	1037	OUT	POST /OneCollector/1.0?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1705511237895&w=0&anoncknm=app_anon&NoResponseBody=true HTTP/1.1 Host: browser.events.data.msn.com Connection: keep-alive Content-Length: 6533 sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; _SS=SID=00
2024-01-17 17:07:19 UTC	6533	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 43 6f 6e 74 65 6e 74 56 69 65 77 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 30 31 2d 31 37 54 31 37 3a 30 37 3a 31 37 2e 38 39 34 5a 22 2c 22 76 65 72 22 3a 22 34 2e 30 22 2c 22 69 4b 65 79 22 3a 22 6f 3a 30 64 65 64 36 30 63 37 35 65 34 34 34 34 33 61 61 33 34 38 34 63 34 32 63 31 63 34 33 66 65 38 22 2c 22 65 78 74 22 3a 7b 22 73 64 6b 22 3a 7b 22 76 65 72 22 3a 22 31 44 53 2d 57 65 62 2d 4a 53 2d 33 2e 32 2e 38 22 2c 22 73 65 71 22 3a 34 2c 22 69 6e 73 74 61 6c 6c 49 64 22 3a 22 39 31 64 35 37 31 39 38 2d 66 37 38 37 2d 34 66 35 39 2d 38 61 30 37 2d 64 34 35 39 64 38 32 31 34 35 34 63 22 2c 22 65 70 6f 63 68 22 3a 22 32 35 34 36 32 30 33 31 31 30 22 7d 2c 22 61 70 70 22 3a 7b 22 6c 6f 63 Data Ascii: {"name":"MS.News.Web.ContentView","time":"2024-01-17T17:07:17.894Z","ver":"4.0","iKey":"o:0ded60c75e44443aa3484c42c1c43fe8","ext":{"sdk":{"ver":"1DS-Web-JS-3.2.8","seq":4,"installId":"91d57198-f787-4f59-8a07-d459d821454c","epoch":"2546203110"},"app":{"loc
2024-01-17 17:07:19 UTC	890	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: MC1=GUID=3ad08610e4884d0f9c1528928e8cc1df&HASH=3ad0&LV=202401&V=4&LU=1705511239150; Domain=.microsoft.com; Expires=Thu, 16 Jan 2025 17:07:19 GMT; Path=/;Secure; SameSite=None Set-Cookie: MS0=46f2e6492f144f1984472af8452d9c5e; Domain=.microsoft.com; Expires=Wed, 17 Jan 2024 17:37:19 GMT; Path=/;Secure; SameSite=None time-delta-millis: 1255 Access-Control-Allow-Headers: P3P,Set-Cookie,time-delta-millis Access-Control-Allow-Methods: POST Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com Access-Control-Expose-Headers: time-delta-millis Date: Wed, 17 Jan 2024 17:07:19 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.16	49949	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:19 UTC	1308	OUT	GET /service/segments/recoitems/weather?apikey=UhJ4G66OjyLbn9mXARgajXLiLw6V75sHnfpU60aJBB&activityId=EDA7CB09-C52C-41B1-9707-B0A727D882E0&ocid=weather-peregrine&cm=en-us&it=app&user=m-2136D0069C246D353F30C40F9D676C20&units=F&appId=4de6fc9f-3262-47bf-9c99-e189a8234fa2&wrapodata=false&includemapsmetadata=true&cuthour=true&filterRule=card&distanceinkm=0&regionDataCount=20&orderby=distance&days=5&pageOcid=anaheim-dhp-peregrine&source=undefined_csr&hours=13&fdhead=prg-1sw-wxmptreplace%2Cprg-1sw-wxovsig%2Cprg-1sw-wxcfinst%2Cprg-1sw-wxtr75%2Cprg-1sw-wxhurac-c&contentcount=3&region=us&market=en-us&locale=en-us&lat=40.748390197753906&lon=-73.98461151123047 HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/edge/ntp?locale=en-GB&title=New%20tab&dsp=1&sp=Bing&isFREModalBackground=1&startpage=1&PC=U531 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:19 UTC	3466	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Headers: TicketType,RequestContinuationKey,AuthToken,Content-Type,x-client-activityid,ms-cv,OneSvc-Uni-Feat-Tun,signedInCookieName,muid,appid,User-Location,user-location,userauthtoken,usertickettype,sitename,s2sauthtoken,thumbprint,Authorization,Ent-Authorization,UserIdToken,DDD-TMPL,DDD-ActivityId,DDD-FeatureSet,DDD-Session-ID,Date,date,ads-referer,ads-referer,taboola-sessionId,taboola-sessionid,Akamai-Request-ID,Akamai-Server-IP,X-MSEdge-Ref,DDD-DebugId,s-xbox-token,OneWebServiceLatency,X-FD-Features,DDD-UserType,traceparent,Widgets,Muted Access-Control-Expose-Headers: TicketType,RequestContinuationKey,AuthToken,Content-Type,x-client-activityid,ms-cv,OneSvc-Uni-Feat-Tun,signedInCookieName,muid,appid,User-Location,user-location,userauthtoken,usertickettype,sitename,s2sauthtoken,thumbprint,Authorization,Ent-Authorization,UserIdToken,DDD-TMPL,DDD-ActivityId,DDD-FeatureSet,DDD-Session-ID,Date,date,ads-referer,ads-referer,taboola-sessionId,taboola-sessionid,Akamai-Request-ID,Akamai-Server-IP,X-MSEdge-Ref,DDD-DebugId,s-xbox-token,OneWebServiceLatency,X-FD-Features,DDD-UserType,traceparent,Widgets,Muted DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-ActivityId: 65a80947-8cce-4c65-b7ee-e5fba35f195f DDD-StrategyExecutionLatency: 00:00:00.0187318 DDD-DebugId: 65a80947-8cce-4c65-b7ee-e5fba35f195f\|2024-01-17T17:07:19.4067597Z\|fabric_segments\|ESU\|Segment_96 OneWebServiceLatency: 19 X-MSEdge-ResponseInfo: 19 Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA X-Ceto-ref: 65a80947045248e8a97532ae6dd392b8\|2024-01-17T17:07:19.384Z X-MSEdge-Ref: Ref A: 928A235A0FE542C5A34B6134A881EB15 Ref B: EWR30EDGE0311 Ref C: 2024-01-17T17:07:19Z Expires: Wed, 17 Jan 2024 17:07:19 GMT Date: Wed, 17 Jan 2024 17:07:19 GMT Content-Length: 9846 Connection: close Set-Cookie: _C_ETH=1; domain=.msn.com; path=/; secure; httponly Set-Cookie: _C_Auth= Set-Cookie: MUID=243F9F60403D646C2FFE8B6941536564; expires=Mon, 10 Feb 2025 17:07:19 GMT; domain=.msn.com; path=/; secure; samesite=none Set-Cookie: MUIDB=243F9F60403D646C2FFE8B6941536564; expires=Mon, 10 Feb 2025 17:07:19 GMT; path=/; httponly Set-Cookie: _EDGE_S=F=1&SID=2EE35D9E2D76678D164949972C18669F; domain=.msn.com; path=/; httponly Set-Cookie: _EDGE_V=1; expires=Mon, 10 Feb 2025 17:07:19 GMT; domain=.msn.com; path=/; httponly Akamai-Request-BC: [a=23.218.242.10,b=89869598,c=g,n=US_NJ_EDISON,o=20940],[a=204.79.197.203,c=o] Server-Timing: clientrtt; dur=88, clienttt; dur=48, origin; dur=47 , cdntime; dur=1 Akamai-Cache-Status: NotCacheable from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b4d1e Access-Control-Allow-Methods: PUT,PATCH,POST,GET,OPTIONS,DELETE Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com X-AS-SuppressSetCookie: 1 Cache-Control: private, max-age=0 report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511239.55b4d1e Vary: Origin
2024-01-17 17:07:19 UTC	9846	IN	Data Raw: 5b 7b 22 74 79 70 65 22 3a 22 57 65 61 74 68 65 72 53 75 6d 6d 61 72 79 22 2c 22 64 61 74 61 22 3a 22 7b 5c 22 72 65 73 70 6f 6e 73 65 73 5c 22 3a 5b 7b 5c 22 77 65 61 74 68 65 72 5c 22 3a 5b 7b 5c 22 61 6c 65 72 74 73 5c 22 3a 5b 5d 2c 5c 22 63 75 72 72 65 6e 74 5c 22 3a 7b 5c 22 62 61 72 6f 5c 22 3a 33 30 2e 30 2c 5c 22 63 61 70 5c 22 3a 5c 22 53 75 6e 6e 79 5c 22 2c 5c 22 63 61 70 41 62 62 72 5c 22 3a 5c 22 53 75 6e 6e 79 5c 22 2c 5c 22 64 61 79 74 69 6d 65 5c 22 3a 5c 22 64 5c 22 2c 5c 22 64 65 77 50 74 5c 22 3a 31 2e 30 2c 5c 22 66 65 65 6c 73 5c 22 3a 31 39 2e 30 2c 5c 22 72 68 5c 22 3a 33 35 2e 30 2c 5c 22 69 63 6f 6e 5c 22 3a 31 2c 5c 22 73 79 6d 62 6f 6c 5c 22 3a 5c 22 64 30 30 30 5c 22 2c 5c 22 70 76 64 72 49 63 6f 6e 5c 22 3a 5c 22 31 5c 22 2c Data Ascii: [{"type":"WeatherSummary","data":"{\"responses\":[{\"weather\":[{\"alerts\":[],\"current\":{\"baro\":30.0,\"cap\":\"Sunny\",\"capAbbr\":\"Sunny\",\"daytime\":\"d\",\"dewPt\":1.0,\"feels\":19.0,\"rh\":35.0,\"icon\":1,\"symbol\":\"d000\",\"pvdrIcon\":\"1\",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.16	49950	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:19 UTC	566	OUT	GET /bundles/v1/edgeChromium/latest/experiences_shopping-entry-base-experience_dist_ShoppingEntryBaseExperience_js.9e97ec872b7d429883e8.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:19 UTC	1186	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: w6Ch51ox57M6oFzNjGDzuA== Last-Modified: Tue, 16 Jan 2024 23:21:31 GMT ETag: 0x8DC16E9DF7A902F Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 638d6499-501e-0046-41d2-4843a3000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:19 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Akamai-Request-BC: [a=23.218.242.10,b=89869971,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=0, origin; dur=0 , cdntime; dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b4e93 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511239.55b4e93 Vary: Origin
2024-01-17 17:07:19 UTC	15198	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 65 78 70 65 72 69 65 6e 63 65 73 5f 73 68 6f 70 70 69 6e 67 2d 65 6e 74 72 79 2d 62 61 73 65 2d 65 78 70 65 72 69 65 6e 63 65 5f 64 69 73 74 5f 53 68 6f 70 70 69 6e 67 45 6e 74 72 79 42 61 73 65 45 78 70 65 72 69 65 6e 63 65 5f 6a 73 22 5d 2c 7b 39 36 34 36 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 69 2e 64 28 74 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e Data Ascii: 00006000"use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["experiences_shopping-entry-base-experience_dist_ShoppingEntryBaseExperience_js"],{96463:function(e,t,i){i.d(t,{g:function(){return
2024-01-17 17:07:19 UTC	9390	IN	Data Raw: 3a 45 2c 65 6e 61 62 6c 65 42 61 63 6b 65 6e 64 54 6f 70 69 63 73 3a 42 2c 67 72 6f 75 70 65 64 43 61 72 6f 75 65 6c 54 6f 70 69 63 73 3a 4c 7d 3d 6f 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 72 61 6e 73 66 6f 72 6d 54 72 65 6e 64 69 6e 67 51 75 65 72 69 65 73 28 74 2c 72 2c 73 2c 61 2c 4d 2c 4f 29 2c 45 7c 7c 42 7c 7c 4c 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 69 3b 6c 65 74 20 6e 3d 28 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 74 6f 70 69 63 73 29 7c 7c 5b 5d 3b 69 66 28 6e 3d 6e 75 6c 6c 3d 3d 3d 28 74 3d 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 66 69 6c 74 65 72 28 28 65 3d 3e 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 7c 7c 6e 75 6c 6c 3d 3d 3d 28 74 3d 65 2e 73 68 6f 70 Data Ascii: :E,enableBackendTopics:B,groupedCarouelTopics:L}=o;return this.transformTrendingQueries(t,r,s,a,M,O),E\|\|B\|\|L\|\|function(e){var t,i;let n=(null==e?void 0:e.topics)\|\|[];if(n=null===(t=n)\|\|void 0===t?void 0:t.filter((e=>{var t;return null==e\|\|null===(t=e.shop
2024-01-17 17:07:19 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 2b 31 29 25 6c 3d 3d 30 26 26 72 3c 6e 2e 6c 65 6e 67 74 68 3f 28 6f 2e 70 75 73 68 28 6e 5b 72 5d 29 2c 72 2b 3d 31 29 3a 73 3c 69 2e 6c 65 6e 67 74 68 3f 28 6f 2e 70 75 73 68 28 69 5b 73 5d 29 2c 73 2b 3d 31 29 3a 28 6f 2e 70 75 73 68 28 6e 5b 72 5d 29 2c 72 2b 3d 31 29 7d 29 29 2c 6f 7d 28 47 2c 6b 29 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 74 26 26 28 30 2c 61 2e 79 65 29 28 65 29 26 26 28 65 2e 63 6c 69 63 6b 55 72 6c 3d 60 24 7b 65 2e 63 6c 69 63 6b 55 72 6c 7d 26 24 7b 74 7d 60 29 7d 29 29 7d 28 47 2c 54 29 3b 63 6f 6e 73 74 20 5a 3d 74 68 69 73 2e 73 68 6f 75 6c 64 52 65 64 69 72 65 63 74 54 6f 42 69 6e 67 4c 32 28 47 2c 49 29 2c 56 3d 74 68 69 73 2e 73 68 6f 75 6c Data Ascii: 00006000+1)%l==0&&r<n.length?(o.push(n[r]),r+=1):s<i.length?(o.push(i[s]),s+=1):(o.push(n[r]),r+=1)})),o}(G,k)),function(e,t){e.forEach((e=>{t&&(0,a.ye)(e)&&(e.clickUrl=`${e.clickUrl}&${t}`)}))}(G,T);const Z=this.shouldRedirectToBingL2(G,I),V=this.shoul
2024-01-17 17:07:19 UTC	8204	IN	Data Raw: 65 55 72 6c 7d 3f 24 7b 79 7d 26 61 63 74 69 76 69 74 79 69 64 3d 24 7b 6f 2e 6a 47 2e 41 63 74 69 76 69 74 79 49 64 7d 26 24 66 69 6c 74 65 72 3d 54 61 62 62 65 64 43 61 72 6f 75 73 65 6c 53 65 6c 65 63 74 69 6f 6e 3a 3a 48 6f 74 44 65 61 6c 73 2c 43 61 74 65 67 6f 72 79 50 72 6f 64 75 63 74 73 60 3b 74 72 79 7b 63 6f 6e 73 74 20 74 3d 61 77 61 69 74 28 30 2c 6e 2e 53 6d 29 28 65 2c 6c 2e 78 61 70 4d 69 63 72 6f 73 65 72 76 69 63 65 54 69 6d 65 6f 75 74 29 3b 69 66 28 21 74 2e 6f 6b 29 74 68 72 6f 77 22 44 69 64 20 6e 6f 74 20 67 65 74 20 61 20 32 30 30 20 66 72 6f 6d 20 74 61 62 62 65 64 20 63 61 72 6f 75 73 65 6c 20 61 70 69 20 72 65 71 75 65 73 74 22 3b 72 65 74 75 72 6e 20 61 77 61 69 74 20 74 2e 6a 73 6f 6e 28 29 7d 63 61 74 63 68 28 74 29 7b 72 65 Data Ascii: eUrl}?${y}&activityid=${o.jG.ActivityId}&$filter=TabbedCarouselSelection::HotDeals,CategoryProducts`;try{const t=await(0,n.Sm)(e,l.xapMicroserviceTimeout);if(!t.ok)throw"Did not get a 200 from tabbed carousel api request";return await t.json()}catch(t){re
2024-01-17 17:07:19 UTC	2998	IN	Data Raw: 30 30 30 30 30 42 41 41 0d 0a 6e 75 43 6f 6e 66 69 67 2e 68 69 64 65 53 65 74 74 69 6e 67 3b 69 2e 70 75 73 68 28 7b 67 6c 79 70 68 3a 72 2e 5a 2c 74 69 74 6c 65 3a 65 2e 74 69 74 6c 65 2c 69 64 3a 22 68 69 64 65 22 2c 6f 6e 43 6c 69 63 6b 3a 65 2e 6f 6e 43 6c 69 63 6b 3f 65 2e 6f 6e 43 6c 69 63 6b 3a 28 29 3d 3e 74 68 69 73 2e 68 69 64 65 53 65 74 74 69 6e 67 41 63 74 69 6f 6e 28 29 2c 74 65 6c 65 6d 65 74 72 79 54 61 67 3a 65 2e 74 65 6c 65 6d 65 74 72 79 54 61 67 7d 29 7d 69 66 28 74 68 69 73 2e 73 65 74 74 69 6e 67 4d 65 6e 75 43 6f 6e 66 69 67 2e 6d 6f 72 65 53 65 74 74 69 6e 67 29 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 73 65 74 74 69 6e 67 4d 65 6e 75 43 6f 6e 66 69 67 2e 6d 6f 72 65 53 65 74 74 69 6e 67 3b 69 2e 70 75 73 68 28 7b 67 6c 79 70 68 Data Ascii: 00000BAAnuConfig.hideSetting;i.push({glyph:r.Z,title:e.title,id:"hide",onClick:e.onClick?e.onClick:()=>this.hideSettingAction(),telemetryTag:e.telemetryTag})}if(this.settingMenuConfig.moreSetting){const e=this.settingMenuConfig.moreSetting;i.push({glyph
2024-01-17 17:07:19 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.16	49952	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:19 UTC	846	OUT	GET /weathermapdata/1/static/weather/Icons/taskbar_v10/Condition_Card/SunnyDayV3.svg HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; MUIDB=2136D0069C246D353F30C40F9D676C20; _SS=SID=00; _C_ETH=1
2024-01-17 17:07:19 UTC	1059	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-MD5: fM0VdSIcQtIm+qTeJZ1QJQ== Last-Modified: Fri, 12 May 2023 08:45:53 GMT ETag: 0x8DB52C54B7D0980 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 354bf2d0-e01e-0119-5669-8a5843000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Expires: Tue, 13 Feb 2024 12:29:06 GMT Date: Wed, 17 Jan 2024 17:07:19 GMT Content-Length: 460 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89870428,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=89, clienttt; dur=0, origin; dur=0 , cdntime; dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b505c Cache-Control: public, max-age=2592000 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511239.55b505c Vary: Origin
2024-01-17 17:07:19 UTC	460	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 37 32 22 20 68 65 69 67 68 74 3d 22 37 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 37 32 20 37 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 63 69 72 63 6c 65 20 63 78 3d 22 33 36 22 20 63 79 3d 22 33 36 22 20 72 3d 22 33 30 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 70 61 69 6e 74 30 5f 6c 69 6e 65 61 72 5f 32 5f 32 31 35 32 33 29 22 2f 3e 0a 3c 64 65 66 73 3e 0a 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 69 64 3d 22 70 61 69 6e 74 30 5f 6c 69 6e 65 61 72 5f 32 5f 32 31 35 32 33 22 20 78 31 3d 22 34 39 2e 35 22 20 79 31 3d 22 34 39 22 20 78 32 3d 22 30 2e 35 37 39 37 32 37 22 20 79 32 3d 22 2d 31 30 2e 37 Data Ascii: <svg width="72" height="72" viewBox="0 0 72 72" fill="none" xmlns="http://www.w3.org/2000/svg"><circle cx="36" cy="36" r="30" fill="url(#paint0_linear_2_21523)"/><defs><linearGradient id="paint0_linear_2_21523" x1="49.5" y1="49" x2="0.579727" y2="-10.7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.16	49951	52.182.143.211	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:19 UTC	1047	OUT	POST /OneCollector/1.0?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1705511238721&w=0&anoncknm=app_anon&NoResponseBody=true HTTP/1.1 Host: browser.events.data.msn.com Connection: keep-alive Content-Length: 6545 sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; _SS=SID=00; _C_ETH=1
2024-01-17 17:07:19 UTC	6545	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 4c 6f 61 64 54 69 6d 65 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 30 31 2d 31 37 54 31 37 3a 30 37 3a 31 38 2e 37 32 30 5a 22 2c 22 76 65 72 22 3a 22 34 2e 30 22 2c 22 69 4b 65 79 22 3a 22 6f 3a 30 64 65 64 36 30 63 37 35 65 34 34 34 34 33 61 61 33 34 38 34 63 34 32 63 31 63 34 33 66 65 38 22 2c 22 65 78 74 22 3a 7b 22 73 64 6b 22 3a 7b 22 76 65 72 22 3a 22 31 44 53 2d 57 65 62 2d 4a 53 2d 33 2e 32 2e 38 22 2c 22 73 65 71 22 3a 35 2c 22 69 6e 73 74 61 6c 6c 49 64 22 3a 22 39 31 64 35 37 31 39 38 2d 66 37 38 37 2d 34 66 35 39 2d 38 61 30 37 2d 64 34 35 39 64 38 32 31 34 35 34 63 22 2c 22 65 70 6f 63 68 22 3a 22 32 35 34 36 32 30 33 31 31 30 22 7d 2c 22 61 70 70 22 3a 7b 22 6c 6f 63 61 6c 65 Data Ascii: {"name":"MS.News.Web.LoadTime","time":"2024-01-17T17:07:18.720Z","ver":"4.0","iKey":"o:0ded60c75e44443aa3484c42c1c43fe8","ext":{"sdk":{"ver":"1DS-Web-JS-3.2.8","seq":5,"installId":"91d57198-f787-4f59-8a07-d459d821454c","epoch":"2546203110"},"app":{"locale
2024-01-17 17:07:20 UTC	890	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: MC1=GUID=a68cf645d7e74e1184fe8067c73e275c&HASH=a68c&LV=202401&V=4&LU=1705511239962; Domain=.microsoft.com; Expires=Thu, 16 Jan 2025 17:07:19 GMT; Path=/;Secure; SameSite=None Set-Cookie: MS0=5730dace94cc46b6a43d2cdd06631bf9; Domain=.microsoft.com; Expires=Wed, 17 Jan 2024 17:37:19 GMT; Path=/;Secure; SameSite=None time-delta-millis: 1241 Access-Control-Allow-Headers: P3P,Set-Cookie,time-delta-millis Access-Control-Allow-Methods: POST Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com Access-Control-Expose-Headers: time-delta-millis Date: Wed, 17 Jan 2024 17:07:19 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.16	49953	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:20 UTC	504	OUT	GET /bundles/v1/edgeChromium/latest/feedDependencies.6c5d7347d7d905277a84.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:20 UTC	1186	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: JY61EGS0Y0zj40dPOHVBwg== Last-Modified: Sat, 13 Jan 2024 01:22:15 GMT ETag: 0x8DC13D6138BDE14 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 3c33e7e6-701e-0078-39bf-45c0af000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:20 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Akamai-Request-BC: [a=23.218.242.10,b=89870972,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=3, origin; dur=0 , cdntime; dur=3 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b527c Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511240.55b527c Vary: Origin
2024-01-17 17:07:20 UTC	15198	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 66 65 65 64 44 65 70 65 6e 64 65 6e 63 69 65 73 22 5d 2c 7b 31 31 30 34 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 2c 6c 29 7b 6c 2e 72 28 6f 29 2c 6c 2e 64 28 6f 2c 7b 41 6e 61 68 65 69 6d 4c 61 79 6f 75 74 54 65 6d 70 6c 61 74 65 4d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4e 6c 7d 2c 41 6e 61 68 65 69 6d 57 61 74 65 72 66 61 6c 6c 4c 61 79 6f 75 74 54 65 6d 70 6c Data Ascii: 00006000"use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["feedDependencies"],{11040:function(t,o,l){l.r(o),l.d(o,{AnaheimLayoutTemplateMap:function(){return Nl},AnaheimWaterfallLayoutTempl
2024-01-17 17:07:20 UTC	9390	IN	Data Raw: 20 20 20 20 20 20 22 73 6c 6f 74 33 22 0a 20 20 20 20 20 20 20 20 22 73 6c 6f 74 34 22 0a 20 20 20 20 20 20 20 20 22 73 6c 6f 74 34 22 0a 20 20 20 20 20 20 20 20 22 73 6c 6f 74 35 22 0a 20 20 20 20 20 20 20 20 22 73 6c 6f 74 35 22 0a 20 20 20 20 20 20 20 20 22 73 6c 6f 74 36 22 0a 20 20 20 20 20 20 20 20 22 73 6c 6f 74 36 22 0a 20 20 20 20 20 20 20 20 22 73 6c 6f 74 37 22 0a 20 20 20 20 20 20 20 20 22 73 6c 6f 74 37 22 0a 20 20 20 20 20 20 20 20 22 73 6c 6f 74 38 22 0a 20 20 20 20 20 20 20 20 22 73 6c 6f 74 38 22 3b 0a 7d 0a 60 2e 77 69 74 68 42 65 68 61 76 69 6f 72 73 28 29 2c 63 3d 7b 63 61 72 64 43 6f 75 6e 74 3a 38 2c 72 6f 77 48 65 69 67 68 74 50 78 3a 7b 43 35 3a 28 30 2c 73 2e 58 39 29 28 34 29 2c 43 34 3a 28 30 2c 73 2e 58 39 29 28 34 29 2c 43 33 Data Ascii: "slot3" "slot4" "slot4" "slot5" "slot5" "slot6" "slot6" "slot7" "slot7" "slot8" "slot8";}`.withBehaviors(),c={cardCount:8,rowHeightPx:{C5:(0,s.X9)(4),C4:(0,s.X9)(4),C3
2024-01-17 17:07:20 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 64 5f 61 72 65 61 3a 22 73 6c 6f 74 31 22 2c 6c 61 79 6f 75 74 73 3a 7b 43 35 3a 73 2e 4e 76 2e 5f 32 78 5f 32 79 2c 43 34 3a 73 2e 4e 76 2e 5f 32 78 5f 32 79 2c 43 33 3a 73 2e 4e 76 2e 5f 32 78 5f 32 79 2c 43 32 3a 73 2e 4e 76 2e 5f 32 78 5f 32 79 2c 43 31 3a 73 2e 4e 76 2e 5f 31 78 5f 32 79 7d 2c 63 61 72 64 44 6f 6d 4f 72 64 65 72 3a 7b 43 34 3a 31 2c 43 33 3a 31 2c 43 32 3a 31 7d 2c 74 65 6c 65 6d 65 74 72 79 52 6f 77 43 6f 6c 3a 7b 43 35 3a 5b 31 2c 31 5d 2c 43 34 3a 5b 31 2c 31 5d 2c 43 33 3a 5b 31 2c 31 5d 2c 43 32 3a 5b 31 2c 31 5d 2c 43 31 3a 5b 31 2c 31 5d 7d 7d 2c 7b 67 72 69 64 5f 61 72 65 61 3a 22 73 6c 6f 74 32 22 2c 6c 61 79 6f 75 74 73 3a 7b 43 35 3a 73 2e 4e 76 2e 5f 31 78 5f 32 79 2c 43 34 3a 73 2e 4e 76 2e Data Ascii: 00006000d_area:"slot1",layouts:{C5:s.Nv._2x_2y,C4:s.Nv._2x_2y,C3:s.Nv._2x_2y,C2:s.Nv._2x_2y,C1:s.Nv._1x_2y},cardDomOrder:{C4:1,C3:1,C2:1},telemetryRowCol:{C5:[1,1],C4:[1,1],C3:[1,1],C2:[1,1],C1:[1,1]}},{grid_area:"slot2",layouts:{C5:s.Nv._1x_2y,C4:s.Nv.
2024-01-17 17:07:20 UTC	8204	IN	Data Raw: 2c 43 34 3a 5b 33 2c 32 5d 2c 43 33 3a 5b 35 2c 32 5d 2c 43 32 3a 5b 39 2c 31 5d 2c 43 31 3a 5b 31 33 2c 31 5d 7d 7d 2c 7b 67 72 69 64 5f 61 72 65 61 3a 22 73 6c 6f 74 38 22 2c 6c 61 79 6f 75 74 73 3a 7b 43 35 3a 73 2e 4e 76 2e 5f 32 78 5f 32 79 2c 43 34 3a 73 2e 4e 76 2e 5f 31 78 5f 32 79 2c 43 33 3a 73 2e 4e 76 2e 5f 31 78 5f 32 79 2c 43 32 3a 73 2e 4e 76 2e 5f 31 78 5f 32 79 2c 43 31 3a 73 2e 4e 76 2e 5f 31 78 5f 32 79 7d 2c 63 61 72 64 44 6f 6d 4f 72 64 65 72 3a 7b 43 33 3a 38 2c 43 32 3a 38 7d 2c 74 65 6c 65 6d 65 74 72 79 52 6f 77 43 6f 6c 3a 7b 43 35 3a 5b 33 2c 34 5d 2c 43 34 3a 5b 33 2c 34 5d 2c 43 33 3a 5b 35 2c 33 5d 2c 43 32 3a 5b 39 2c 32 5d 2c 43 31 3a 5b 31 35 2c 31 5d 7d 7d 5d 7d 2c 46 3d 43 2e 69 60 0a 0a 3a 68 6f 73 74 28 5b 6c 61 79 6f Data Ascii: ,C4:[3,2],C3:[5,2],C2:[9,1],C1:[13,1]}},{grid_area:"slot8",layouts:{C5:s.Nv._2x_2y,C4:s.Nv._1x_2y,C3:s.Nv._1x_2y,C2:s.Nv._1x_2y,C1:s.Nv._1x_2y},cardDomOrder:{C3:8,C2:8},telemetryRowCol:{C5:[3,4],C4:[3,4],C3:[5,3],C2:[9,2],C1:[15,1]}}]},F=C.i`:host([layo
2024-01-17 17:07:20 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 32 3a 5b 35 2c 32 5d 2c 43 31 3a 5b 35 2c 31 5d 7d 7d 2c 7b 67 72 69 64 5f 61 72 65 61 3a 22 73 6c 6f 74 34 22 2c 6c 61 79 6f 75 74 73 3a 7b 43 35 3a 73 2e 4e 76 2e 5f 31 78 5f 32 79 2c 43 34 3a 73 2e 4e 76 2e 5f 31 78 5f 32 79 2c 43 33 3a 73 2e 4e 76 2e 5f 31 78 5f 32 79 2c 43 32 3a 73 2e 4e 76 2e 5f 31 78 5f 32 79 2c 43 31 3a 73 2e 4e 76 2e 5f 31 78 5f 32 79 7d 2c 63 61 72 64 44 6f 6d 4f 72 64 65 72 3a 7b 43 35 3a 34 2c 43 34 3a 34 2c 43 33 3a 33 2c 43 32 3a 32 2c 43 31 3a 34 7d 2c 74 65 6c 65 6d 65 74 72 79 52 6f 77 43 6f 6c 3a 7b 43 35 3a 5b 31 2c 35 5d 2c 43 34 3a 5b 31 2c 34 5d 2c 43 33 3a 5b 31 2c 33 5d 2c 43 32 3a 5b 31 2c 32 5d 2c 43 31 3a 5b 37 2c 31 5d 7d 7d 2c 7b 67 72 69 64 5f 61 72 65 61 3a 22 73 6c 6f 74 35 22 Data Ascii: 000040002:[5,2],C1:[5,1]}},{grid_area:"slot4",layouts:{C5:s.Nv._1x_2y,C4:s.Nv._1x_2y,C3:s.Nv._1x_2y,C2:s.Nv._1x_2y,C1:s.Nv._1x_2y},cardDomOrder:{C5:4,C4:4,C3:3,C2:2,C1:4},telemetryRowCol:{C5:[1,5],C4:[1,4],C3:[1,3],C2:[1,2],C1:[7,1]}},{grid_area:"slot5"
2024-01-17 17:07:20 UTC	12	IN	Data Raw: 20 22 73 6c 6f 74 31 20 73 6c 0d 0a Data Ascii: "slot1 sl
2024-01-17 17:07:20 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 6f 74 31 22 0a 20 20 20 20 20 20 20 20 22 73 6c 6f 74 31 20 73 6c 6f 74 31 22 0a 20 20 20 20 20 20 20 20 22 73 6c 6f 74 32 20 73 6c 6f 74 34 22 0a 20 20 20 20 20 20 20 20 22 73 6c 6f 74 32 20 73 6c 6f 74 34 22 0a 20 20 20 20 20 20 20 20 22 73 6c 6f 74 33 20 73 6c 6f 74 39 22 0a 20 20 20 20 20 20 20 20 22 73 6c 6f 74 33 20 73 6c 6f 74 39 22 0a 20 20 20 20 20 20 20 20 22 73 6c 6f 74 35 20 73 6c 6f 74 37 22 0a 20 20 20 20 20 20 20 20 22 73 6c 6f 74 35 20 73 6c 6f 74 37 22 0a 20 20 20 20 20 20 20 20 22 73 6c 6f 74 36 20 73 6c 6f 74 38 22 0a 20 20 20 20 20 20 20 20 22 73 6c 6f 74 31 35 20 73 6c 6f 74 31 36 22 0a 20 20 20 20 20 20 20 20 22 73 6c 6f 74 31 37 20 73 6c 6f 74 31 31 22 0a 20 20 20 20 20 20 20 20 22 73 6c 6f 74 31 38 20 Data Ascii: 00004000ot1" "slot1 slot1" "slot2 slot4" "slot2 slot4" "slot3 slot9" "slot3 slot9" "slot5 slot7" "slot5 slot7" "slot6 slot8" "slot15 slot16" "slot17 slot11" "slot18
2024-01-17 17:07:20 UTC	12	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 22 0d 0a Data Ascii: "
2024-01-17 17:07:20 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 73 6c 6f 74 31 30 22 0a 20 20 20 20 20 20 20 20 22 73 6c 6f 74 31 31 22 0a 20 20 20 20 20 20 20 20 22 73 6c 6f 74 31 31 22 0a 20 20 20 20 20 20 20 20 22 73 6c 6f 74 31 32 22 0a 20 20 20 20 20 20 20 20 22 73 6c 6f 74 31 32 22 0a 20 20 20 20 20 20 20 20 22 73 6c 6f 74 31 33 22 0a 20 20 20 20 20 20 20 20 22 73 6c 6f 74 31 33 22 0a 20 20 20 20 20 20 20 20 22 73 6c 6f 74 31 34 22 0a 20 20 20 20 20 20 20 20 22 73 6c 6f 74 31 34 22 3b 0a 7d 0a 60 2e 77 69 74 68 42 65 68 61 76 69 6f 72 73 28 29 2c 79 74 3d 7b 63 61 72 64 43 6f 75 6e 74 3a 31 34 2c 72 6f 77 48 65 69 67 68 74 50 78 3a 7b 43 35 3a 28 30 2c 73 2e 58 39 29 28 36 29 2c 43 34 3a 28 30 2c 73 2e 58 39 29 28 38 29 2c 43 33 3a 28 30 2c 73 2e 58 39 29 28 31 30 29 2c 43 32 3a 28 Data Ascii: 00004000slot10" "slot11" "slot11" "slot12" "slot12" "slot13" "slot13" "slot14" "slot14";}`.withBehaviors(),yt={cardCount:14,rowHeightPx:{C5:(0,s.X9)(6),C4:(0,s.X9)(8),C3:(0,s.X9)(10),C2:(
2024-01-17 17:07:20 UTC	12	IN	Data Raw: 35 20 73 6c 6f 74 37 22 0a 20 0d 0a Data Ascii: 5 slot7"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.16	49954	52.182.143.211	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:20 UTC	1047	OUT	POST /OneCollector/1.0?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1705511239261&w=0&anoncknm=app_anon&NoResponseBody=true HTTP/1.1 Host: browser.events.data.msn.com Connection: keep-alive Content-Length: 6654 sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; _SS=SID=00; _C_ETH=1
2024-01-17 17:07:20 UTC	6654	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 43 6f 6e 74 65 6e 74 56 69 65 77 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 30 31 2d 31 37 54 31 37 3a 30 37 3a 31 39 2e 32 36 30 5a 22 2c 22 76 65 72 22 3a 22 34 2e 30 22 2c 22 69 4b 65 79 22 3a 22 6f 3a 30 64 65 64 36 30 63 37 35 65 34 34 34 34 33 61 61 33 34 38 34 63 34 32 63 31 63 34 33 66 65 38 22 2c 22 65 78 74 22 3a 7b 22 73 64 6b 22 3a 7b 22 76 65 72 22 3a 22 31 44 53 2d 57 65 62 2d 4a 53 2d 33 2e 32 2e 38 22 2c 22 73 65 71 22 3a 36 2c 22 69 6e 73 74 61 6c 6c 49 64 22 3a 22 39 31 64 35 37 31 39 38 2d 66 37 38 37 2d 34 66 35 39 2d 38 61 30 37 2d 64 34 35 39 64 38 32 31 34 35 34 63 22 2c 22 65 70 6f 63 68 22 3a 22 32 35 34 36 32 30 33 31 31 30 22 7d 2c 22 61 70 70 22 3a 7b 22 6c 6f 63 Data Ascii: {"name":"MS.News.Web.ContentView","time":"2024-01-17T17:07:19.260Z","ver":"4.0","iKey":"o:0ded60c75e44443aa3484c42c1c43fe8","ext":{"sdk":{"ver":"1DS-Web-JS-3.2.8","seq":6,"installId":"91d57198-f787-4f59-8a07-d459d821454c","epoch":"2546203110"},"app":{"loc
2024-01-17 17:07:20 UTC	890	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: MC1=GUID=90889181c5d14f6b888d236767b19b0d&HASH=9088&LV=202401&V=4&LU=1705511240515; Domain=.microsoft.com; Expires=Thu, 16 Jan 2025 17:07:20 GMT; Path=/;Secure; SameSite=None Set-Cookie: MS0=492c0f0ddeb745ca8d7a04c2fcd44a43; Domain=.microsoft.com; Expires=Wed, 17 Jan 2024 17:37:20 GMT; Path=/;Secure; SameSite=None time-delta-millis: 1254 Access-Control-Allow-Headers: P3P,Set-Cookie,time-delta-millis Access-Control-Allow-Methods: POST Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com Access-Control-Expose-Headers: time-delta-millis Date: Wed, 17 Jan 2024 17:07:20 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.16	49955	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:20 UTC	512	OUT	GET /bundles/v1/edgeChromium/latest/following-fre-full-width.31ea4a66f592f4aa0931.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:21 UTC	1149	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: CAEH7drmRMNGStcn/9275A== Last-Modified: Mon, 08 Jan 2024 16:46:12 GMT ETag: 0x8DC106952D9ED66 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 13727bfc-701e-0054-0c52-42a585000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:21 GMT Content-Length: 46408 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89872247,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=90, clienttt; dur=1, origin; dur=0 , cdntime; dur=1 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b5777 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511241.55b5777 Vary: Origin
2024-01-17 17:07:21 UTC	15235	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 66 6f 6c 6c 6f 77 69 6e 67 2d 66 72 65 2d 66 75 6c 6c 2d 77 69 64 74 68 22 5d 2c 7b 36 31 33 39 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 72 28 74 29 2c 69 2e 64 28 74 2c 7b 46 6f 6c 6c 6f 77 69 6e 67 46 72 65 46 75 6c 6c 57 69 64 74 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 43 7d 2c 46 6f 6c 6c 6f 77 69 6e 67 46 72 65 46 75 6c 6c 57 69 64 74 68 53 74 79 6c 65 73 3a 66 75 6e 63 74 Data Ascii: (self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["following-fre-full-width"],{61391:function(e,t,i){"use strict";i.r(t),i.d(t,{FollowingFreFullWidth:function(){return C},FollowingFreFullWidthStyles:funct
2024-01-17 17:07:21 UTC	9341	IN	Data Raw: 65 6e 74 28 31 34 31 64 65 67 2c 23 46 30 45 31 46 37 20 33 2e 31 39 25 2c 23 43 44 44 46 46 46 20 35 38 2e 31 34 25 29 7d 2e 65 6c 6c 69 70 73 65 31 7b 77 69 64 74 68 3a 35 33 30 70 78 3b 68 65 69 67 68 74 3a 34 33 38 70 78 3b 6c 65 66 74 3a 2d 32 32 35 70 78 3b 74 6f 70 3a 2d 31 37 33 70 78 7d 2e 65 6c 6c 69 70 73 65 32 7b 77 69 64 74 68 3a 31 35 32 2e 37 37 34 70 78 3b 68 65 69 67 68 74 3a 32 34 36 2e 30 36 33 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 37 31 2e 36 31 35 64 65 67 29 3b 6c 65 66 74 3a 33 32 30 70 78 3b 74 6f 70 3a 31 37 35 70 78 7d 2e 65 6c 6c 69 70 73 65 33 7b 77 69 64 74 68 3a 32 37 37 70 78 3b 68 65 69 67 68 74 3a 32 32 39 70 78 3b 6c 65 66 74 3a 38 37 36 70 78 3b 74 6f 70 3a 2d 31 30 70 78 7d 2e 65 6c 6c 69 70 73 65 Data Ascii: ent(141deg,#F0E1F7 3.19%,#CDDFFF 58.14%)}.ellipse1{width:530px;height:438px;left:-225px;top:-173px}.ellipse2{width:152.774px;height:246.063px;transform:rotate(71.615deg);left:320px;top:175px}.ellipse3{width:277px;height:229px;left:876px;top:-10px}.ellipse
2024-01-17 17:07:21 UTC	16384	IN	Data Raw: 46 46 46 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 70 78 20 31 70 78 20 32 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 30 38 29 7d 69 6d 67 7b 68 65 69 67 68 74 3a 38 34 70 78 3b 6d 61 72 67 69 6e 3a 31 31 70 78 20 31 31 70 78 20 30 3b 77 69 64 74 68 3a 38 34 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 36 70 78 7d 2e 69 63 6f 6e 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 77 68 69 74 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 32 70 78 Data Ascii: FFF;box-sizing:border-box;cursor:pointer;display:flex;align-items:center;position:relative;box-shadow:0px 1px 2px rgba(0,0,0,0.08)}img{height:84px;margin:11px 11px 0;width:84px;border-radius:6px}.icon{align-items:center;background:white;border-radius:12px
2024-01-17 17:07:21 UTC	5448	IN	Data Raw: 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 61 6c 74 29 7c 7c 22 22 29 7d 7d 28 30 2c 6f 2e 67 6e 29 28 5b 73 2e 4c 4f 5d 2c 67 2e 70 72 6f 74 6f 74 79 70 65 2c 22 69 6d 61 67 65 49 6e 66 6f 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 6f 2e 67 6e 29 28 5b 73 2e 4c 4f 5d 2c 67 2e 70 72 6f 74 6f 74 79 70 65 2c 22 72 6f 75 6e 64 65 64 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 6f 2e 67 6e 29 28 5b 73 2e 4c 4f 5d 2c 67 2e 70 72 6f 74 6f 74 79 70 65 2c 22 6f 6e 49 6d 61 67 65 45 72 72 6f 72 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 6f 2e 67 6e 29 28 5b 73 2e 4c 4f 5d 2c 67 2e 70 72 6f 74 6f 74 79 70 65 2c 22 66 61 6c 6c 62 61 63 6b 49 6d 61 67 65 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 6f 2e 67 6e 29 28 5b 73 2e 4c 4f 5d 2c 67 2e 70 72 6f 74 6f 74 79 70 65 2c 22 73 68 6f 77 46 Data Ascii: ==i?void 0:i.alt)\|\|"")}}(0,o.gn)([s.LO],g.prototype,"imageInfo",void 0),(0,o.gn)([s.LO],g.prototype,"rounded",void 0),(0,o.gn)([s.LO],g.prototype,"onImageError",void 0),(0,o.gn)([s.LO],g.prototype,"fallbackImage",void 0),(0,o.gn)([s.LO],g.prototype,"showF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.16	49956	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:21 UTC	502	OUT	GET /bundles/v1/edgeChromium/latest/grid-view-feed.dbad88b95d905bbfb268.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:21 UTC	1186	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: USiUOuRrla60MWwNMPu+aQ== Last-Modified: Wed, 10 Jan 2024 20:07:04 GMT ETag: 0x8DC1217B6E05EA3 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: f9c274b5-601e-00b1-4700-4437f8000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:21 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Akamai-Request-BC: [a=23.218.242.10,b=89873039,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=1, origin; dur=0 , cdntime; dur=1 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b5a8f Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511241.55b5a8f Vary: Origin
2024-01-17 17:07:21 UTC	15198	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 67 72 69 64 2d 76 69 65 77 2d 66 65 65 64 22 5d 2c 7b 38 34 38 36 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 69 2e 72 28 74 29 2c 69 2e 64 28 74 2c 7b 47 72 69 64 56 69 65 77 46 65 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 65 7d 2c 47 72 69 64 56 69 65 77 46 65 65 64 53 74 79 6c 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 65 7d 2c Data Ascii: 00006000"use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["grid-view-feed"],{84869:function(e,t,i){i.r(t),i.d(t,{GridViewFeed:function(){return se},GridViewFeedStyles:function(){return ge},
2024-01-17 17:07:21 UTC	9390	IN	Data Raw: 73 73 20 65 78 74 65 6e 64 73 20 77 65 7b 7d 3b 53 65 3d 28 30 2c 24 2e 67 6e 29 28 5b 28 30 2c 78 65 2e 4d 29 28 7b 6e 61 6d 65 3a 22 6d 73 6e 2d 64 6f 74 2d 6c 6f 61 64 69 6e 67 22 2c 74 65 6d 70 6c 61 74 65 3a 24 65 2c 73 74 79 6c 65 73 3a 4d 65 2c 73 68 61 64 6f 77 4f 70 74 69 6f 6e 73 3a 7b 64 65 6c 65 67 61 74 65 73 46 6f 63 75 73 3a 21 30 7d 7d 29 5d 2c 53 65 29 3b 76 61 72 20 46 65 3d 69 28 34 39 39 30 33 29 3b 62 65 2e 53 3b 63 6f 6e 73 74 20 6b 65 3d 66 65 2e 64 79 60 20 24 7b 65 3d 3e 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 28 6e 75 6c 6c 3d 3d 3d 28 74 3d 65 2e 63 6f 6e 66 69 67 2e 63 68 69 6c 64 45 78 70 65 72 69 65 6e 63 65 52 65 66 65 72 65 6e 63 65 73 57 43 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 63 61 72 64 41 Data Ascii: ss extends we{};Se=(0,$.gn)([(0,xe.M)({name:"msn-dot-loading",template:$e,styles:Me,shadowOptions:{delegatesFocus:!0}})],Se);var Fe=i(49903);be.S;const ke=fe.dy` ${e=>{var t;return(null===(t=e.config.childExperienceReferencesWC)\|\|void 0===t?void 0:t.cardA
2024-01-17 17:07:21 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 6d 6f 74 69 6f 6e 49 6e 66 6f 4d 61 70 2e 67 65 74 28 65 29 3b 6e 75 6c 6c 3d 3d 74 7c 7c 74 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 28 74 3d 65 2e 73 74 6f 70 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 63 61 6c 6c 28 65 29 7d 29 29 7d 29 29 3b 63 6f 6e 73 74 20 65 3d 41 72 72 61 79 2e 66 72 6f 6d 28 74 68 69 73 2e 69 6e 56 69 65 77 45 6c 65 6d 65 6e 74 73 29 2e 6d 61 70 28 28 65 3d 3e 74 68 69 73 2e 6d 6f 74 69 6f 6e 49 6e 66 6f 4d 61 70 2e 67 65 74 28 65 29 29 29 2e 66 6c 61 74 28 29 2e 66 69 6c 74 65 72 28 28 65 3d 3e 21 21 65 29 29 3b 69 66 28 21 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 76 6f 69 64 28 74 68 69 73 2e 61 63 74 69 Data Ascii: 00006000motionInfoMap.get(e);null==t\|\|t.forEach((e=>{var t;return null===(t=e.stop)\|\|void 0===t?void 0:t.call(e)}))}));const e=Array.from(this.inViewElements).map((e=>this.motionInfoMap.get(e))).flat().filter((e=>!!e));if(!e.length)return void(this.acti
2024-01-17 17:07:21 UTC	8204	IN	Data Raw: 6e 28 29 7b 72 65 74 75 72 6e 20 43 7d 2c 74 4f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 24 7d 7d 29 3b 76 61 72 20 6e 3d 69 28 32 38 36 35 37 29 2c 6f 3d 69 28 34 39 32 31 38 29 2c 61 3d 69 28 34 37 35 34 38 29 3b 63 6f 6e 73 74 20 72 3d 6f 2e 64 79 60 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 69 63 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 22 20 70 61 72 74 3d 22 69 63 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 3c 73 6c 6f 74 20 6e 61 6d 65 3d 22 69 63 6f 6e 22 3e 3c 2f 73 6c 6f 74 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6c 61 62 65 6c 2d 63 6f 6e 74 61 69 6e 65 72 22 20 70 61 72 74 3d 22 6c 61 62 65 6c 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 73 70 61 6e 20 63 6c 61 73 Data Ascii: n(){return C},tO:function(){return $}});var n=i(28657),o=i(49218),a=i(47548);const r=o.dy`<span class="icon-container" part="icon-container" aria-hidden="true"><slot name="icon"></slot></span><span class="label-container" part="label-container"><span clas
2024-01-17 17:07:21 UTC	6491	IN	Data Raw: 30 30 30 30 31 39 34 46 0d 0a 65 72 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 61 74 74 72 69 62 75 74 69 6f 6e 2d 74 69 74 6c 65 22 3e 24 7b 65 3d 3e 65 2e 61 74 74 72 69 62 75 74 69 6f 6e 5f 74 69 74 6c 65 7d 3c 2f 73 70 61 6e 3e 24 7b 28 30 2c 6c 2e 67 29 28 28 65 3d 3e 65 2e 61 74 74 72 69 62 75 74 69 6f 6e 5f 70 75 62 6c 69 73 68 65 64 44 61 74 65 29 2c 73 2e 64 79 60 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 61 74 74 72 69 62 75 74 69 6f 6e 2d 73 65 70 61 72 61 74 6f 72 22 3e 26 6d 69 64 64 6f 74 3b 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 61 74 74 72 69 62 75 74 69 6f 6e 2d 64 61 74 65 22 3e 24 7b 65 3d 3e 65 2e 61 74 74 72 69 62 75 74 69 6f 6e 5f 70 75 62 6c 69 73 68 65 64 44 61 74 65 7d 3c 2f 73 70 61 6e 3e 60 29 7d 3c 2f 73 70 Data Ascii: 0000194Fer"><span class="attribution-title">${e=>e.attribution_title}</span>${(0,l.g)((e=>e.attribution_publishedDate),s.dy`<span class="attribution-separator">·</span><span class="attribution-date">${e=>e.attribution_publishedDate}</span>`)}</sp
2024-01-17 17:07:21 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 35 34 20 33 2e 39 35 34 20 30 20 30 20 30 2d 2e 34 34 2d 2e 31 35 37 20 35 2e 37 31 33 20 35 2e 37 31 33 20 30 20 30 20 30 2d 31 2e 36 38 39 2d 2e 32 32 63 2d 2e 37 32 38 2e 30 31 2d 31 2e 32 36 32 2e 31 33 2d 31 2e 36 30 38 2e 32 34 33 61 33 2e 30 31 38 20 33 2e 30 31 38 20 30 20 30 20 30 2d 2e 34 36 39 2e 31 39 36 2e 36 39 32 2e 36 39 32 20 30 20 30 20 30 2d 2e 30 31 38 2e 30 31 31 6c 2d 2e 30 30 32 2e 30 30 32 76 2d 2e 30 30 31 61 2e 33 31 2e 33 31 20 30 20 30 20 31 2d 2e 33 33 35 2d 2e 35 32 6c 2e 31 36 38 2e 32 36 2d 2e 31 36 38 2d 2e 32 36 2e 30 30 32 2d 2e 30 30 31 2e 30 30 34 2d 2e 30 30 32 2e 30 31 2d 2e 30 30 37 2e 30 33 34 2d 2e 30 32 61 33 2e 36 34 32 20 33 2e 36 34 32 20 30 20 30 20 31 20 2e 35 38 32 2d 2e 32 34 Data Ascii: 0000400054 3.954 0 0 0-.44-.157 5.713 5.713 0 0 0-1.689-.22c-.728.01-1.262.13-1.608.243a3.018 3.018 0 0 0-.469.196.692.692 0 0 0-.018.011l-.002.002v-.001a.31.31 0 0 1-.335-.52l.168.26-.168-.26.002-.001.004-.002.01-.007.034-.02a3.642 3.642 0 0 1 .582-.24
2024-01-17 17:07:21 UTC	12	IN	Data Raw: 4c 6a 29 28 7b 61 74 74 72 69 0d 0a Data Ascii: Lj)({attri
2024-01-17 17:07:21 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 62 75 74 65 3a 22 74 6f 75 63 68 2d 68 6f 76 65 72 2d 75 6e 64 65 72 6c 69 6e 65 2d 64 69 73 61 62 6c 65 64 22 2c 6d 6f 64 65 3a 22 62 6f 6f 6c 65 61 6e 22 7d 29 5d 2c 4d 2e 70 72 6f 74 6f 74 79 70 65 2c 22 74 6f 75 63 68 48 6f 76 65 72 55 6e 64 65 72 6c 69 6e 65 44 69 73 61 62 6c 65 64 22 2c 76 6f 69 64 20 30 29 7d 2c 39 39 35 38 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 69 2e 64 28 74 2c 7b 53 44 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 53 44 7d 2c 4e 56 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 4e 56 7d 2c 4c 62 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 4c 62 7d 2c 57 54 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 57 54 7d 2c 61 Data Ascii: 00004000bute:"touch-hover-underline-disabled",mode:"boolean"})],M.prototype,"touchHoverUnderlineDisabled",void 0)},99586:function(e,t,i){i.d(t,{SD:function(){return n.SD},NV:function(){return n.NV},Lb:function(){return n.Lb},WT:function(){return n.WT},a
2024-01-17 17:07:21 UTC	12	IN	Data Raw: 2e 41 64 64 57 61 74 63 68 6c 0d 0a Data Ascii: .AddWatchl
2024-01-17 17:07:21 UTC	14000	IN	Data Raw: 30 30 30 30 33 36 41 34 0d 0a 69 73 74 3d 22 61 64 64 57 61 74 63 68 6c 69 73 74 22 7d 28 61 7c 7c 28 61 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 57 61 74 63 68 6c 69 73 74 3d 22 77 61 74 63 68 6c 69 73 74 22 2c 65 2e 4d 61 72 6b 65 74 3d 22 6d 61 72 6b 65 74 22 7d 28 72 7c 7c 28 72 3d 7b 7d 29 29 3b 63 6c 61 73 73 20 75 20 65 78 74 65 6e 64 73 20 68 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 73 75 70 65 72 28 2e 2e 2e 61 72 67 75 6d 65 6e 74 73 29 2c 74 68 69 73 2e 6c 61 79 6f 75 74 3d 6e 2e 68 61 6c 66 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 53 77 69 74 63 68 3d 21 31 2c 74 68 69 73 2e 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 2c 74 68 69 73 2e 73 68 6f 77 43 68 61 6e 67 65 56 61 6c 75 65 3d 21 31 2c 74 68 69 73 2e 73 77 61 70 47 61 Data Ascii: 000036A4ist="addWatchlist"}(a\|\|(a={})),function(e){e.Watchlist="watchlist",e.Market="market"}(r\|\|(r={}));class u extends h{constructor(){super(...arguments),this.layout=n.half,this.optionSwitch=!1,this.target="_blank",this.showChangeValue=!1,this.swapGa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.16	49957	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:22 UTC	505	OUT	GET /bundles/v1/edgeChromium/latest/interest-fre-card.30b26f782d4747b20e34.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:22 UTC	1149	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: VcP0SY9Q9JpbvgFJ7QGJ+A== Last-Modified: Sat, 13 Jan 2024 01:22:15 GMT ETag: 0x8DC13D61396F53C Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 584c1a2a-401e-008f-27bf-45b4f4000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:22 GMT Content-Length: 41467 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89874076,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=1, origin; dur=0 , cdntime; dur=1 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b5e9c Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511242.55b5e9c Vary: Origin
2024-01-17 17:07:22 UTC	15235	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 69 6e 74 65 72 65 73 74 2d 66 72 65 2d 63 61 72 64 22 5d 2c 7b 31 34 36 31 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 72 28 74 29 2c 69 2e 64 28 74 2c 7b 47 6c 6f 62 61 6c 53 74 79 6c 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 53 7d 2c 49 6e 74 65 72 65 73 74 46 72 65 43 61 72 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 7a 7d 2c 49 6e 74 65 72 65 73 74 46 72 65 43 Data Ascii: (self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["interest-fre-card"],{14612:function(e,t,i){"use strict";i.r(t),i.d(t,{GlobalStyles:function(){return S},InterestFreCard:function(){return z},InterestFreC
2024-01-17 17:07:22 UTC	9341	IN	Data Raw: 75 74 74 6f 6e 3e 3c 2f 64 69 76 3e 60 2c 4a 3d 50 2e 64 79 60 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 72 65 2d 66 69 6e 61 6c 22 3e 24 7b 57 7d 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 65 61 64 65 72 2d 73 74 61 72 2d 69 6d 67 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2e 6d 73 6e 2e 63 6f 6d 2f 73 74 61 74 69 63 73 62 2f 73 74 61 74 69 63 73 2f 6c 61 74 65 73 74 2f 69 6e 74 65 72 65 73 74 73 2d 6d 61 6e 61 67 65 72 2f 69 6e 74 65 72 65 73 74 2d 66 72 65 2d 68 65 61 64 65 72 2e 70 6e 67 22 20 2f 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 69 6e 61 6c 2d 74 65 78 74 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 66 69 6e 61 6c 2d 74 69 74 6c 65 22 3e 24 7b 65 3d 3e 65 2e 73 74 72 Data Ascii: utton></div>`,J=P.dy`<div class="fre-final">${W}<div class="header-star-img-container"><img src="https://assets.msn.com/staticsb/statics/latest/interests-manager/interest-fre-header.png" /></div><div class="final-text"><span class="final-title">${e=>e.str
2024-01-17 17:07:22 UTC	16384	IN	Data Raw: 2c 22 73 65 6c 65 63 74 42 75 74 74 6f 6e 54 6f 6f 6c 74 69 70 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 6f 2e 67 6e 29 28 5b 28 30 2c 66 2e 4c 6a 29 28 7b 61 74 74 72 69 62 75 74 65 3a 22 73 65 6c 65 63 74 65 64 2d 62 75 74 74 6f 6e 2d 74 6f 6f 6c 74 69 70 22 7d 29 5d 2c 76 2e 70 72 6f 74 6f 74 79 70 65 2c 22 73 65 6c 65 63 74 65 64 42 75 74 74 6f 6e 54 6f 6f 6c 74 69 70 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 6f 2e 67 6e 29 28 5b 28 30 2c 66 2e 4c 6a 29 28 7b 61 74 74 72 69 62 75 74 65 3a 22 73 65 6c 65 63 74 2d 74 65 6c 65 6d 65 74 72 79 2d 74 61 67 22 7d 29 5d 2c 76 2e 70 72 6f 74 6f 74 79 70 65 2c 22 73 65 6c 65 63 74 54 65 6c 65 6d 65 74 72 79 54 61 67 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 6f 2e 67 6e 29 28 5b 28 30 2c 66 2e 4c 6a 29 28 7b 61 74 74 72 Data Ascii: ,"selectButtonTooltip",void 0),(0,o.gn)([(0,f.Lj)({attribute:"selected-button-tooltip"})],v.prototype,"selectedButtonTooltip",void 0),(0,o.gn)([(0,f.Lj)({attribute:"select-telemetry-tag"})],v.prototype,"selectTelemetryTag",void 0),(0,o.gn)([(0,f.Lj)({attr
2024-01-17 17:07:22 UTC	507	IN	Data Raw: 27 3c 73 76 67 20 77 69 64 74 68 3d 22 32 30 22 20 68 65 69 67 68 74 3d 22 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 30 20 32 30 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 32 2e 33 35 20 31 35 2e 38 35 61 2e 35 2e 35 20 30 20 30 31 2d 2e 37 20 30 4c 36 2e 31 36 20 31 30 2e 34 61 2e 35 35 2e 35 35 20 30 20 30 31 30 2d 2e 37 38 6c 35 2e 34 39 2d 35 2e 34 36 61 2e 35 2e 35 20 30 20 31 31 2e 37 2e 37 4c 37 2e 32 20 31 30 6c 35 2e 31 36 20 35 2e 31 35 63 2e 32 2e 32 2e 32 2e 35 20 30 20 2e 37 7a 22 3e 3c 2f 70 61 74 68 3e 3c 2f 73 76 67 3e 27 7d 2c 39 33 35 33 30 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 65 78 70 6f 72 74 73 3d 27 3c 73 76 67 20 Data Ascii: '<svg width="20" height="20" viewBox="0 0 20 20" xmlns="http://www.w3.org/2000/svg"><path d="M12.35 15.85a.5.5 0 01-.7 0L6.16 10.4a.55.55 0 010-.78l5.49-5.46a.5.5 0 11.7.7L7.2 10l5.16 5.15c.2.2.2.5 0 .7z"></path></svg>'},93530:function(e){e.exports='<svg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.16	49958	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:22 UTC	512	OUT	GET /bundles/v1/edgeChromium/latest/interest-management-card.5ebfebb76fcb498ca938.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:22 UTC	1149	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: gaKOebRJr1Ir5KYHsB1CTA== Last-Modified: Mon, 08 Jan 2024 16:46:12 GMT ETag: 0x8DC106953019409 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 13727c64-701e-0054-6452-42a585000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:22 GMT Content-Length: 12072 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89874793,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=2, origin; dur=0 , cdntime; dur=2 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b6169 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511242.55b6169 Vary: Origin
2024-01-17 17:07:22 UTC	12072	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 69 6e 74 65 72 65 73 74 2d 6d 61 6e 61 67 65 6d 65 6e 74 2d 63 61 72 64 22 5d 2c 7b 39 30 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 49 6e 74 65 72 65 73 74 4d 61 6e 61 67 65 6d 65 6e 74 43 61 72 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 7d 2c 49 6e 74 65 72 65 73 74 4d 61 6e 61 67 65 6d 65 6e 74 43 61 72 64 44 61 72 6b 54 68 65 6d 65 3a 66 75 Data Ascii: "use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["interest-management-card"],{908:function(e,t,n){n.r(t),n.d(t,{InterestManagementCard:function(){return I},InterestManagementCardDarkTheme:fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.16	49959	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:22 UTC	500	OUT	GET /bundles/v1/edgeChromium/latest/interests-wc.7283e39bc3c5cdc59ca2.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:23 UTC	1186	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: to1DuqnG9chig6wS3YDzew== Last-Modified: Mon, 08 Jan 2024 16:46:13 GMT ETag: 0x8DC1069536AB4EF Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 2124b5fe-801e-00fb-0952-42eafc000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:23 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Akamai-Request-BC: [a=23.218.242.10,b=89875443,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=6, origin; dur=0 , cdntime; dur=6 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b63f3 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511243.55b63f3 Vary: Origin
2024-01-17 17:07:23 UTC	15198	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 69 6e 74 65 72 65 73 74 73 2d 77 63 22 5d 2c 7b 37 34 34 34 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 64 28 74 2c 7b 53 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 7d 7d 29 3b 76 61 72 20 6e 2c 61 3d 69 28 34 34 30 36 30 29 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 65 74 20 74 2c 69 2c 6e 2c 6f 2c 73 2c 72 2c 6c 2c 63 3b 65 2e 49 6d 61 67 65 53 69 7a Data Ascii: 00006000(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["interests-wc"],{74445:function(e,t,i){"use strict";i.d(t,{S:function(){return n}});var n,a=i(44060);!function(e){let t,i,n,o,s,r,l,c;e.ImageSiz
2024-01-17 17:07:23 UTC	9390	IN	Data Raw: 4e 61 6d 65 3a 22 77 65 62 6e 6c 6e 65 77 73 22 2c 74 61 72 67 65 74 54 79 70 65 3a 22 54 6f 70 69 63 46 65 65 64 22 7d 2c 43 72 79 70 74 6f 3a 7b 64 65 66 69 6e 69 74 69 6f 6e 4e 61 6d 65 3a 22 53 65 67 6d 65 6e 74 5f 46 69 6e 61 6e 63 65 5f 43 72 79 70 74 6f 43 61 72 64 22 2c 74 61 72 67 65 74 54 79 70 65 3a 22 53 74 72 75 63 74 75 72 65 64 43 61 72 64 22 7d 2c 4d 61 72 6b 65 74 42 72 69 65 66 3a 7b 64 65 66 69 6e 69 74 69 6f 6e 4e 61 6d 65 3a 22 53 65 67 6d 65 6e 74 5f 46 69 6e 61 6e 63 65 5f 4d 61 72 6b 65 74 42 72 69 65 66 22 2c 74 61 72 67 65 74 54 79 70 65 3a 22 53 74 72 75 63 74 75 72 65 64 43 61 72 64 22 7d 2c 54 6f 70 53 74 6f 72 69 65 73 3a 7b 64 65 66 69 6e 69 74 69 6f 6e 4e 61 6d 65 3a 22 74 6f 70 73 74 6f 72 69 65 73 22 2c 74 61 72 67 65 74 Data Ascii: Name:"webnlnews",targetType:"TopicFeed"},Crypto:{definitionName:"Segment_Finance_CryptoCard",targetType:"StructuredCard"},MarketBrief:{definitionName:"Segment_Finance_MarketBrief",targetType:"StructuredCard"},TopStories:{definitionName:"topstories",target
2024-01-17 17:07:23 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 32 70 78 20 33 2e 36 70 78 29 20 64 72 6f 70 2d 73 68 61 64 6f 77 28 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 33 29 20 30 70 78 20 36 2e 34 70 78 20 31 34 2e 34 70 78 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 7d 2e 74 6f 6f 6c 74 69 70 3a 3a 70 61 72 74 28 74 6f 6f 6c 74 69 70 29 3a 3a 61 66 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 24 7b 6e 65 2e 4f 66 7d 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 73 74 61 72 74 3a 2d 31 34 70 78 3b 77 69 64 74 68 3a 31 32 70 78 3b 68 65 69 67 68 74 3a 31 32 70 78 7d 2e 74 6f 6f 6c 74 69 70 2e 73 68 6f 77 2d 63 6f 6d 6d 75 74 65 3a 3a 70 61 72 74 28 74 6f 6f 6c 74 69 70 29 7b 6d 61 78 2d 77 69 64 74 68 3a 31 33 36 70 78 7d 2e 74 6f 6f 6c 74 69 70 2e 61 72 72 69 76 65 2d 61 74 Data Ascii: 000060002px 3.6px) drop-shadow(rgba(0,0,0,0.13) 0px 6.4px 14.4px);box-shadow:none}.tooltip::part(tooltip)::after{background:${ne.Of};margin-inline-start:-14px;width:12px;height:12px}.tooltip.show-commute::part(tooltip){max-width:136px}.tooltip.arrive-at
2024-01-17 17:07:23 UTC	8204	IN	Data Raw: 69 73 2e 66 6f 6c 6c 6f 77 42 75 74 74 6f 6e 54 65 6c 65 6d 65 74 72 79 54 61 67 3d 65 2e 61 64 64 4f 72 55 70 64 61 74 65 43 68 69 6c 64 28 7b 6e 61 6d 65 3a 63 3f 54 74 2e 66 6f 6c 6c 6f 77 42 75 74 74 6f 6e 3a 64 2c 62 65 68 61 76 69 6f 72 3a 45 2e 77 75 2e 55 6e 66 6f 6c 6c 6f 77 2c 74 79 70 65 3a 45 2e 63 39 2e 41 63 74 69 6f 6e 42 75 74 74 6f 6e 2c 63 6f 6e 74 65 6e 74 3a 7b 68 65 61 64 6c 69 6e 65 3a 6e 3f 28 30 2c 62 74 2e 57 55 29 28 6e 2c 69 29 3a 22 22 2c 74 79 70 65 3a 73 2c 69 64 3a 74 7d 2c 64 65 73 74 69 6e 61 74 69 6f 6e 55 72 6c 3a 22 22 2c 66 65 65 64 3a 7b 69 64 3a 74 7d 7d 29 2e 67 65 74 4d 65 74 61 64 61 74 61 54 61 67 28 29 2c 74 68 69 73 2e 75 6e 66 6f 6c 6c 6f 77 42 75 74 74 6f 6e 54 65 6c 65 6d 65 74 72 79 54 61 67 3d 65 2e 61 64 Data Ascii: is.followButtonTelemetryTag=e.addOrUpdateChild({name:c?Tt.followButton:d,behavior:E.wu.Unfollow,type:E.c9.ActionButton,content:{headline:n?(0,bt.WU)(n,i):"",type:s,id:t},destinationUrl:"",feed:{id:t}}).getMetadataTag(),this.unfollowButtonTelemetryTag=e.ad
2024-01-17 17:07:23 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 3a 63 61 6c 63 28 76 61 72 28 2d 2d 69 6d 61 67 65 2d 73 69 64 65 2d 73 69 7a 65 29 20 2d 20 39 70 78 29 20 61 75 74 6f 3b 77 69 64 74 68 3a 61 75 74 6f 7d 24 7b 7a 74 7d 20 2e 63 6f 6e 74 65 6e 74 7b 67 72 69 64 2d 61 75 74 6f 2d 63 6f 6c 75 6d 6e 73 3a 6d 61 78 2d 63 6f 6e 74 65 6e 74 7d 24 7b 7a 74 7d 20 2e 66 6f 6c 6c 6f 77 2d 62 74 6e 7b 67 72 69 64 2d 63 6f 6c 75 6d 6e 2d 73 74 61 72 74 3a 34 3b 70 6c 61 63 65 2d 73 65 6c 66 3a 65 6e 64 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 7d 24 7b 7a 74 7d 20 2e 66 6f 6c 6c 6f 77 2d 62 74 6e 20 73 76 67 7b 68 65 69 67 68 74 3a 31 38 70 78 3b 77 69 64 74 68 3a 31 38 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 70 78 7d 24 7b 7a 74 7d 20 2e 66 6f 6c 6c 6f 77 65 64 2c 24 7b 7a 74 7d 20 2e Data Ascii: 00004000:calc(var(--image-side-size) - 9px) auto;width:auto}${zt} .content{grid-auto-columns:max-content}${zt} .follow-btn{grid-column-start:4;place-self:end;border:none}${zt} .follow-btn svg{height:18px;width:18px;margin-top:2px}${zt} .followed,${zt} .
2024-01-17 17:07:23 UTC	12	IN	Data Raw: 4f 4e 20 66 72 6f 6d 20 75 73 0d 0a Data Ascii: ON from us
2024-01-17 17:07:23 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 65 72 20 73 74 6f 72 69 65 73 20 72 65 73 70 6f 6e 73 65 2e 22 7d 29 3b 63 6f 6e 73 74 7b 76 61 6c 75 65 3a 6c 7d 3d 72 3b 69 66 28 6c 26 26 53 69 2e 62 2e 61 72 72 61 79 48 61 73 44 61 74 61 28 6c 29 29 72 65 74 75 72 6e 20 74 3f 74 68 69 73 2e 6d 61 70 55 73 65 72 53 74 6f 72 69 65 73 54 6f 43 6f 6e 74 65 6e 74 52 65 73 70 6f 6e 73 65 43 61 72 64 56 69 65 77 28 6c 5b 30 5d 2c 65 29 3a 74 68 69 73 2e 6d 61 70 55 73 65 72 53 74 6f 72 69 65 73 54 6f 43 6f 6e 74 65 6e 74 52 65 73 70 6f 6e 73 65 28 6c 5b 30 5d 2e 66 65 65 64 49 74 65 6d 73 2c 65 29 3b 49 2e 4d 30 2e 73 65 6e 64 41 70 70 45 72 72 6f 72 45 76 65 6e 74 28 7b 2e 2e 2e 62 65 2e 42 6e 42 2c 6d 65 73 73 61 67 65 3a 22 44 69 64 6e 27 74 20 67 65 74 20 76 61 6c 69 64 20 Data Ascii: 00004000er stories response."});const{value:l}=r;if(l&&Si.b.arrayHasData(l))return t?this.mapUserStoriesToContentResponseCardView(l[0],e):this.mapUserStoriesToContentResponse(l[0].feedItems,e);I.M0.sendAppErrorEvent({...be.BnB,message:"Didn't get valid
2024-01-17 17:07:23 UTC	12	IN	Data Raw: 46 6c 75 65 6e 74 53 56 47 7b 0d 0a Data Ascii: FluentSVG{
2024-01-17 17:07:23 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 24 7b 6d 61 7d 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 7d 2e 68 6f 72 6f 73 63 6f 70 65 53 56 47 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 24 7b 53 61 7d 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 7d 2e 6a 6f 79 73 74 69 63 6b 53 56 47 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 24 7b 79 61 7d 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 7d 2e 69 6e 66 6f 72 6d 61 74 69 6f 6e 43 61 72 64 73 53 56 47 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 24 7b 54 61 7d 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 7d 2e 69 6e 73 70 69 72 61 74 69 6f 6e 53 56 47 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 24 7b 6b 61 7d 29 20 6e 6f 2d Data Ascii: 00004000background:url(${ma}) no-repeat center}.horoscopeSVG{background:url(${Sa}) no-repeat center}.joystickSVG{background:url(${ya}) no-repeat center}.informationCardsSVG{background:url(${Ta}) no-repeat center}.inspirationSVG{background:url(${ka}) no-
2024-01-17 17:07:23 UTC	12	IN	Data Raw: 6a 65 63 74 2e 61 73 73 69 67 0d 0a Data Ascii: ject.assig

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.16	49960	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:23 UTC	588	OUT	GET /bundles/v1/edgeChromium/latest/libs_location-service_dist_AutoSuggestService_index_js-libs_traffic_dist_index_js-web-compone-c76c45.af455fc99785123935e1.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:24 UTC	1186	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: oc/4nxwag2NUXZtMUZEUfQ== Last-Modified: Tue, 16 Jan 2024 23:21:33 GMT ETag: 0x8DC16E9E0E4BD60 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 4c99f58b-601e-00d9-0dd2-482dcb000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:23 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Akamai-Request-BC: [a=23.218.242.10,b=89876774,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=1, origin; dur=0 , cdntime; dur=1 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b6926 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511243.55b6926 Vary: Origin
2024-01-17 17:07:24 UTC	15198	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6c 69 62 73 5f 6c 6f 63 61 74 69 6f 6e 2d 73 65 72 76 69 63 65 5f 64 69 73 74 5f 41 75 74 6f 53 75 67 67 65 73 74 53 65 72 76 69 63 65 5f 69 6e 64 65 78 5f 6a 73 2d 6c 69 62 73 5f 74 72 61 66 66 69 63 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 2d 77 65 62 2d 63 6f 6d 70 6f 6e 65 2d 63 37 36 63 34 35 22 5d 2c 7b 37 34 31 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 Data Ascii: 00006000(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["libs_location-service_dist_AutoSuggestService_index_js-libs_traffic_dist_index_js-web-compone-c76c45"],{7415:function(e,t,n){"use strict";n.d(t
2024-01-17 17:07:24 UTC	9390	IN	Data Raw: 2e 63 6f 75 6e 74 72 79 49 73 6f 29 2c 73 75 62 52 65 67 69 6f 6e 3a 6e 75 6c 6c 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 61 64 64 72 65 73 73 53 75 62 72 65 67 69 6f 6e 2c 63 6f 75 6e 74 72 79 3a 69 26 26 28 69 2e 61 64 64 72 65 73 73 43 6f 75 6e 74 72 79 7c 7c 22 22 29 2c 6c 61 74 69 74 75 64 65 3a 6f 26 26 4e 75 6d 62 65 72 28 6f 29 2e 74 6f 53 74 72 69 6e 67 28 29 2c 6c 6f 6e 67 69 74 75 64 65 3a 73 26 26 4e 75 6d 62 65 72 28 73 29 2e 74 6f 53 74 72 69 6e 67 28 29 2c 74 79 70 65 56 36 3a 65 2e 73 75 67 67 65 73 74 69 6f 6e 2e 74 79 70 65 2c 73 75 62 54 79 70 65 3a 65 2e 73 75 67 67 65 73 74 69 6f 6e 2e 73 75 62 54 79 70 65 2c 73 65 61 72 63 68 54 65 78 74 3a 65 2e 73 75 67 67 65 73 74 69 6f 6e 2e 73 65 61 72 63 68 54 65 78 74 2c 66 6f 72 6d 61 74 74 65 Data Ascii: .countryIso),subRegion:null==i?void 0:i.addressSubregion,country:i&&(i.addressCountry\|\|""),latitude:o&&Number(o).toString(),longitude:s&&Number(s).toString(),typeV6:e.suggestion.type,subType:e.suggestion.subType,searchText:e.suggestion.searchText,formatte
2024-01-17 17:07:24 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 61 67 65 22 2c 4c 69 6e 65 49 6e 70 75 74 42 6f 78 43 6c 69 63 6b 3a 22 34 2d 4c 69 6e 65 49 6e 70 75 74 42 6f 78 22 2c 48 6f 6d 65 4c 6f 63 61 74 69 6f 6e 49 6e 70 75 74 42 6f 78 43 6c 69 63 6b 3a 22 34 2d 48 6f 6d 65 4c 6f 63 61 74 69 6f 6e 49 6e 70 75 74 42 6f 78 22 2c 57 6f 72 6b 4c 6f 63 61 74 69 6f 6e 49 6e 70 75 74 42 6f 78 43 6c 69 63 6b 3a 22 34 2d 57 6f 72 6b 4c 6f 63 61 74 69 6f 6e 49 6e 70 75 74 42 6f 78 22 2c 4d 69 64 64 6c 65 50 61 67 65 43 61 6e 63 65 6c 42 75 74 74 6f 6e 43 6c 69 63 6b 3a 22 34 2d 43 61 6e 63 65 6c 42 75 74 74 6f 6e 22 2c 48 6f 6d 65 4c 6f 63 61 74 69 6f 6e 49 6e 70 75 74 3a 22 33 2d 48 6f 6d 65 4c 6f 63 61 74 69 6f 6e 49 6e 70 75 74 42 6f 78 22 2c 57 6f 72 6b 4c 6f 63 61 74 69 6f 6e 49 6e 70 Data Ascii: 00006000age",LineInputBoxClick:"4-LineInputBox",HomeLocationInputBoxClick:"4-HomeLocationInputBox",WorkLocationInputBoxClick:"4-WorkLocationInputBox",MiddlePageCancelButtonClick:"4-CancelButton",HomeLocationInput:"3-HomeLocationInputBox",WorkLocationInp
2024-01-17 17:07:24 UTC	8204	IN	Data Raw: 2c 65 65 2e 49 45 36 2c 22 54 72 61 66 66 69 63 43 61 72 64 3a 20 65 6e 72 69 63 68 47 65 6f 63 6f 64 65 64 45 6e 74 69 74 79 20 66 61 69 6c 65 64 22 2c 60 55 52 4c 3a 20 24 7b 72 2e 68 72 65 66 7d 2c 20 45 72 72 6f 72 3a 20 24 7b 28 30 2c 74 65 2e 6e 29 28 65 29 7d 60 29 7d 7d 76 61 72 20 6f 65 3d 6e 28 32 38 38 32 38 29 2c 73 65 3d 6e 28 32 31 32 31 35 29 2c 63 65 3d 6e 28 35 32 31 38 35 29 2c 75 65 3d 6e 28 38 31 34 38 39 29 3b 63 6c 61 73 73 20 6c 65 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 5f 6c 6f 67 50 72 65 66 69 78 3d 76 6f 69 64 20 30 7d 73 74 61 74 69 63 20 67 65 74 49 6e 73 74 61 6e 63 65 28 29 7b 72 65 74 75 72 6e 20 63 65 2e 47 71 2e 67 65 74 28 22 5f 5f 54 72 61 66 66 69 63 43 61 72 64 53 74 61 74 65 5f 5f 22 2c 28 28 29 Data Ascii: ,ee.IE6,"TrafficCard: enrichGeocodedEntity failed",`URL: ${r.href}, Error: ${(0,te.n)(e)}`)}}var oe=n(28828),se=n(21215),ce=n(52185),ue=n(81489);class le{constructor(){this._logPrefix=void 0}static getInstance(){return ce.Gq.get("__TrafficCardState__",(()
2024-01-17 17:07:24 UTC	3432	IN	Data Raw: 30 30 30 30 30 44 35 43 0d 0a 6f 75 72 73 26 26 74 2e 6c 61 73 74 58 48 6f 75 72 73 2e 72 65 70 6c 61 63 65 28 22 7b 30 7d 22 2c 22 34 38 22 29 3b 63 61 73 65 22 49 6e 32 34 68 72 73 22 3a 72 65 74 75 72 6e 20 74 2e 69 6e 58 48 6f 75 72 73 26 26 74 2e 69 6e 58 48 6f 75 72 73 2e 72 65 70 6c 61 63 65 28 22 7b 30 7d 22 2c 22 32 34 22 29 3b 63 61 73 65 22 49 6e 34 38 68 72 73 22 3a 72 65 74 75 72 6e 20 74 2e 69 6e 58 48 6f 75 72 73 26 26 74 2e 69 6e 58 48 6f 75 72 73 2e 72 65 70 6c 61 63 65 28 22 7b 30 7d 22 2c 22 34 38 22 29 7d 7d 28 74 2e 70 65 72 69 6f 64 2c 65 29 3b 6c 65 74 20 63 3b 63 6f 6e 73 74 20 75 3d 72 2e 67 65 74 28 74 2e 6b 65 79 29 2c 6c 3d 6f 2e 67 65 74 28 74 2e 6b 65 79 29 3b 63 3d 74 2e 73 74 61 74 56 61 6c 75 65 3e 31 3f 75 7c 7c 6c 3a 6c Data Ascii: 00000D5Cours&&t.lastXHours.replace("{0}","48");case"In24hrs":return t.inXHours&&t.inXHours.replace("{0}","24");case"In48hrs":return t.inXHours&&t.inXHours.replace("{0}","48")}}(t.period,e);let c;const u=r.get(t.key),l=o.get(t.key);c=t.statValue>1?u\|\|l:l
2024-01-17 17:07:24 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 6e 65 77 20 55 52 4c 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2e 73 65 61 72 63 68 50 61 72 61 6d 73 2e 66 6f 72 45 61 63 68 28 28 28 74 2c 6e 29 3d 3e 7b 22 69 74 65 6d 22 3d 3d 3d 6e 26 26 65 2e 73 65 61 72 63 68 50 61 72 61 6d 73 2e 61 70 70 65 6e 64 28 6e 2c 74 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 57 65 28 65 2c 74 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 63 6f 6e 73 74 20 6e 3d 28 30 2c 47 2e 59 71 29 28 29 2e 43 75 72 72 65 6e 74 4d 61 72 6b 65 74 2c 69 3d 6e 65 77 20 57 2e 24 3b 72 65 74 75 72 6e 20 65 2e 6d 61 70 28 28 65 3d 3e 7b 63 6f 6e 73 74 20 61 3d 74 26 26 50 65 28 65 2e 54 72 61 66 66 69 63 43 6f 6e 67 65 73 74 69 6f 6e 2c 74 29 2c 72 3d 42 65 28 65 2e 53 74 61 Data Ascii: 00004000new URL(window.location.href).searchParams.forEach(((t,n)=>{"item"===n&&e.searchParams.append(n,t)}))}function We(e,t){if(!e)return null;const n=(0,G.Yq)().CurrentMarket,i=new W.$;return e.map((e=>{const a=t&&Pe(e.TrafficCongestion,t),r=Be(e.Sta
2024-01-17 17:07:24 UTC	12	IN	Data Raw: 61 74 69 6f 6e 73 26 26 6e 2e 0d 0a Data Ascii: ations&&n.
2024-01-17 17:07:24 UTC	15710	IN	Data Raw: 30 30 30 30 33 44 35 32 0d 0a 67 61 73 50 72 69 63 65 54 65 78 74 73 2e 67 61 73 53 74 61 74 69 6f 6e 73 2e 72 65 70 6c 61 63 65 28 22 20 22 2c 22 2b 22 29 29 2e 72 65 70 6c 61 63 65 28 22 7b 7a 6f 6f 6d 7d 22 2c 22 31 33 22 29 2e 72 65 70 6c 61 63 65 28 22 7b 63 6f 6f 72 64 69 6e 61 74 65 73 7d 22 2c 60 24 7b 69 2e 6c 61 74 69 74 75 64 65 7d 7e 24 7b 69 2e 6c 6f 6e 67 69 74 75 64 65 7d 60 29 2e 72 65 70 6c 61 63 65 28 22 7b 79 70 69 64 7d 22 2c 61 29 3b 63 6f 6e 73 74 20 65 3d 6e 65 77 20 55 52 4c 28 72 29 2c 6f 3d 68 2e 4d 30 2e 67 65 74 52 65 71 75 65 73 74 49 64 28 29 3b 6f 26 26 65 2e 73 65 61 72 63 68 50 61 72 61 6d 73 2e 73 65 74 28 22 63 76 69 64 22 2c 6f 29 3b 63 6f 6e 73 74 20 73 3d 28 30 2c 59 74 2e 6b 75 29 28 29 3b 72 65 74 75 72 6e 20 73 26 Data Ascii: 00003D52gasPriceTexts.gasStations.replace(" ","+")).replace("{zoom}","13").replace("{coordinates}",`${i.latitude}~${i.longitude}`).replace("{ypid}",a);const e=new URL(r),o=h.M0.getRequestId();o&&e.searchParams.set("cvid",o);const s=(0,Yt.ku)();return s&
2024-01-17 17:07:24 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.16	49961	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:24 UTC	588	OUT	GET /bundles/v1/edgeChromium/latest/libs_super-feed_dist_feed-manager_FeedManagerWithClientAd_js-node_modules_fluentui_svg-icons_-8f340f.6ccd673195b9f91ac607.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:24 UTC	1188	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: RTZykVJlx9Yi8HBFKPS0QA== Last-Modified: Tue, 16 Jan 2024 23:21:31 GMT ETag: 0x8DC16E9DF7F1EF3 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: a66ad017-f01e-00d8-1fd2-4806c9000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:24 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Akamai-Request-BC: [a=23.218.242.10,b=89877774,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=10, origin; dur=0 , cdntime; dur=10 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b6d0e Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511244.55b6d0e Vary: Origin
2024-01-17 17:07:24 UTC	15196	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6c 69 62 73 5f 73 75 70 65 72 2d 66 65 65 64 5f 64 69 73 74 5f 66 65 65 64 2d 6d 61 6e 61 67 65 72 5f 46 65 65 64 4d 61 6e 61 67 65 72 57 69 74 68 43 6c 69 65 6e 74 41 64 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 66 6c 75 65 6e 74 75 69 5f 73 76 67 2d 69 63 6f 6e 73 5f 2d 38 66 33 34 30 66 22 5d 2c 7b 32 37 39 30 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 Data Ascii: 00006000(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["libs_super-feed_dist_feed-manager_FeedManagerWithClientAd_js-node_modules_fluentui_svg-icons_-8f340f"],{27906:function(e,t,a){"use strict";var
2024-01-17 17:07:24 UTC	9392	IN	Data Raw: 6d 70 6c 22 3a 22 70 69 6c 6c 2d 74 6d 70 6c 22 7d 28 65 29 7d 22 3e 0a 20 20 20 20 20 20 20 20 24 7b 71 7d 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 74 61 67 65 2d 63 6f 6e 74 65 6e 74 22 20 61 72 69 61 2d 6c 69 76 65 3d 22 70 6f 6c 69 74 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 7b 47 7d 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 6f 74 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 7b 56 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 7b 64 7d 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 24 7b 28 30 2c 6e 2e 67 29 28 28 65 3d 3e 65 2e 73 68 6f 77 49 6e 6c 69 6e 65 49 6e 74 65 72 65 73 74 54 6f 61 73 Data Ascii: mpl":"pill-tmpl"}(e)}"> ${q} <div class="stage-content" aria-live="polite"> ${G} </div> <div class="footer"> ${V} ${d} </div> </div> ${(0,n.g)((e=>e.showInlineInterestToas
2024-01-17 17:07:24 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 4d 32 52 77 61 58 5a 76 64 43 55 79 4e 54 4e 68 62 33 5a 6c 63 6e 5a 70 5a 58 64 30 59 57 49 6c 4d 6a 5a 74 63 32 4e 73 61 32 6c 6b 4a 54 4e 6b 5a 6a 64 6b 4e 6a 4a 6b 4f 54 68 6a 59 6d 59 7a 4d 54 55 32 4e 6a 63 30 4f 47 45 30 5a 54 4a 6d 59 57 52 6d 5a 44 67 77 59 57 49 6c 4d 6a 5a 31 64 47 31 66 63 32 39 31 63 6d 4e 6c 4a 54 4e 6b 59 6d 6c 75 5a 79 55 79 4e 6e 56 30 62 56 39 74 5a 57 52 70 64 57 30 6c 4d 32 52 6a 63 47 4d 6c 4d 6a 5a 31 64 47 31 66 59 32 46 74 63 47 46 70 5a 32 34 6c 4d 32 52 54 64 58 4a 6d 59 57 4e 6c 4a 54 49 31 4d 6a 42 51 63 6d 38 6c 4d 6a 55 79 4d 44 6b 6c 4d 6a 55 79 4d 45 78 68 64 57 35 6a 61 43 55 79 4e 6e 56 30 62 56 39 6a 62 32 35 30 5a 57 35 30 4a 54 4e 6b 55 33 56 79 5a 6d 46 6a 5a 53 55 79 4e Data Ascii: 00006000M2RwaXZvdCUyNTNhb3ZlcnZpZXd0YWIlMjZtc2Nsa2lkJTNkZjdkNjJkOThjYmYzMTU2Njc0OGE0ZTJmYWRmZDgwYWIlMjZ1dG1fc291cmNlJTNkYmluZyUyNnV0bV9tZWRpdW0lM2RjcGMlMjZ1dG1fY2FtcGFpZ24lM2RTdXJmYWNlJTI1MjBQcm8lMjUyMDklMjUyMExhdW5jaCUyNnV0bV9jb250ZW50JTNkU3VyZmFjZSUyN
2024-01-17 17:07:24 UTC	8204	IN	Data Raw: 72 6f 73 63 6f 70 65 41 6e 73 77 65 72 43 61 72 64 5d 3a 22 68 6f 72 6f 73 63 6f 70 65 43 61 72 64 22 2c 5b 67 2e 55 2e 68 6f 74 4c 69 73 74 43 61 72 64 5d 3a 22 68 6f 74 4c 69 73 74 43 61 72 64 22 2c 5b 67 2e 55 2e 6d 61 6e 67 61 43 61 72 64 5d 3a 22 6d 61 6e 67 61 43 61 72 64 22 2c 5b 67 2e 55 2e 6d 6f 62 69 6c 65 52 65 77 61 72 64 73 43 61 72 64 5d 3a 22 6d 6f 62 69 6c 65 52 65 77 61 72 64 73 43 61 72 64 22 2c 5b 67 2e 55 2e 6d 6f 62 69 6c 65 53 68 6f 70 70 69 6e 67 43 61 72 64 5d 3a 22 6d 6f 62 69 6c 65 53 68 6f 70 70 69 6e 67 43 61 72 64 22 2c 5b 67 2e 55 2e 6f 6e 54 68 69 73 44 61 79 43 61 72 64 5d 3a 22 6f 6e 54 68 69 73 44 61 79 43 61 72 64 22 2c 5b 67 2e 55 2e 70 72 61 79 65 72 54 69 6d 65 73 43 61 72 64 5d 3a 22 70 72 61 79 65 72 54 69 6d 65 73 Data Ascii: roscopeAnswerCard]:"horoscopeCard",[g.U.hotListCard]:"hotListCard",[g.U.mangaCard]:"mangaCard",[g.U.mobileRewardsCard]:"mobileRewardsCard",[g.U.mobileShoppingCard]:"mobileShoppingCard",[g.U.onThisDayCard]:"onThisDayCard",[g.U.prayerTimesCard]:"prayerTimes
2024-01-17 17:07:24 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 53 65 74 74 69 6e 67 73 3a 79 2c 69 73 44 61 72 6b 4d 6f 64 65 46 6f 72 4d 6f 62 69 6c 65 3a 67 2c 72 65 73 70 6f 6e 73 65 54 69 6d 65 3a 66 2c 72 65 67 69 73 74 65 72 56 69 65 77 70 6f 72 74 4f 62 73 65 72 76 65 54 61 72 67 65 74 3a 43 2c 6d 6f 62 69 6c 65 46 65 65 64 45 76 65 6e 74 41 67 67 72 65 67 61 74 6f 72 3a 76 7d 3b 72 65 74 75 72 6e 20 6e 26 26 28 54 2e 63 6f 6d 6d 75 74 65 43 61 72 64 43 6f 6e 66 69 67 49 6e 66 6f 3d 6e 29 2c 28 30 2c 68 2e 43 75 29 28 7b 69 64 3a 58 2c 65 78 70 65 72 69 65 6e 63 65 54 79 70 65 3a 6e 75 6c 6c 3d 3d 3d 28 74 3d 54 2e 63 6f 6d 6d 75 74 65 43 61 72 64 43 6f 6e 66 69 67 49 6e 66 6f 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 3d 28 61 3d 74 2e 63 6f 6e 66 69 67 52 65 Data Ascii: 00004000Settings:y,isDarkModeForMobile:g,responseTime:f,registerViewportObserveTarget:C,mobileFeedEventAggregator:v};return n&&(T.commuteCardConfigInfo=n),(0,h.Cu)({id:X,experienceType:null===(t=T.commuteCardConfigInfo)\|\|void 0===t\|\|null===(a=t.configRe
2024-01-17 17:07:24 UTC	12	IN	Data Raw: 79 53 65 74 74 69 6e 67 73 3a 0d 0a Data Ascii: ySettings:
2024-01-17 17:07:24 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 65 2e 64 69 73 70 6c 61 79 53 65 74 74 69 6e 67 73 2c 63 61 72 64 53 69 7a 65 3a 65 2e 63 61 72 64 53 69 7a 65 2c 73 65 74 53 68 6f 75 6c 64 53 63 72 6f 6c 6c 54 6f 43 6f 6d 6d 65 6e 74 73 3a 65 2e 73 65 74 53 68 6f 75 6c 64 53 63 72 6f 6c 6c 54 6f 43 6f 6d 6d 65 6e 74 73 2c 6f 6e 43 61 72 64 43 6c 69 63 6b 43 61 6c 6c 62 61 63 6b 3a 65 2e 6f 6e 43 61 72 64 43 6c 69 63 6b 43 61 6c 6c 62 61 63 6b 2c 6f 6e 48 65 61 64 65 72 54 65 78 74 43 6c 69 63 6b 62 61 63 6b 3a 65 2e 6f 6e 48 65 61 64 65 72 54 65 78 74 43 6c 69 63 6b 62 61 63 6b 2c 63 61 72 64 41 63 74 69 6f 6e 4d 65 6e 75 43 6c 69 63 6b 43 61 6c 6c 62 61 63 6b 3a 65 2e 63 61 72 64 41 63 74 69 6f 6e 4d 65 6e 75 43 6c 69 63 6b 43 61 6c 6c 62 61 63 6b 2c 61 63 74 69 6f 6e 4d Data Ascii: 00006000e.displaySettings,cardSize:e.cardSize,setShouldScrollToComments:e.setShouldScrollToComments,onCardClickCallback:e.onCardClickCallback,onHeaderTextClickback:e.onHeaderTextClickback,cardActionMenuClickCallback:e.cardActionMenuClickCallback,actionM
2024-01-17 17:07:24 UTC	8204	IN	Data Raw: 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 65 78 70 65 72 69 65 6e 63 65 54 79 70 65 2c 6d 61 70 70 65 72 41 72 67 73 3a 65 7d 2c 6c 29 7d 28 65 29 2c 76 69 65 77 54 65 6d 70 6c 61 74 65 3a 58 65 7d 3b 63 6f 6e 73 74 20 4b 65 3d 64 2e 64 79 60 0a 20 20 20 20 3c 66 6c 75 65 6e 74 2d 63 61 72 64 20 0a 20 20 20 20 20 20 20 20 73 74 79 6c 65 3d 22 67 72 69 64 2d 61 72 65 61 3a 24 7b 65 3d 3e 65 2e 67 72 69 64 41 72 65 61 7d 22 0a 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 24 7b 65 3d 3e 65 2e 63 61 72 64 53 69 7a 65 7d 22 0a 20 20 20 20 3e 20 20 20 20 0a 20 20 20 20 20 20 20 20 24 7b 65 3d 3e 65 2e 67 61 6d 69 6e 67 4d 61 74 63 68 43 61 72 64 43 6f 6e 66 69 67 49 6e 66 6f 26 26 28 30 2c 62 2e 4f 74 29 28 65 2e 67 61 6d 69 6e 67 4d 61 74 63 68 43 Data Ascii: id 0===t?void 0:t.experienceType,mapperArgs:e},l)}(e),viewTemplate:Xe};const Ke=d.dy` <fluent-card style="grid-area:${e=>e.gridArea}" class="${e=>e.cardSize}" > ${e=>e.gamingMatchCardConfigInfo&&(0,b.Ot)(e.gamingMatchC
2024-01-17 17:07:24 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 74 69 6f 6e 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3a 72 2c 68 69 64 65 43 61 72 64 43 61 6c 6c 62 61 63 6b 3a 69 2c 67 6f 54 6f 50 65 72 73 6f 6e 61 6c 69 7a 65 53 65 74 74 69 6e 67 73 43 61 6c 6c 62 61 63 6b 3a 64 2c 72 65 66 72 65 73 68 53 44 43 61 72 64 53 65 63 74 69 6f 6e 3a 73 7d 3b 72 65 74 75 72 6e 28 30 2c 68 2e 43 75 29 28 7b 69 64 3a 28 6e 75 6c 6c 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 74 79 70 65 29 3f 3f 22 67 61 6d 69 6e 67 53 74 72 65 61 6d 43 61 72 64 22 2c 65 78 70 65 72 69 65 6e 63 65 54 79 70 65 3a 6e 75 6c 6c 3d 3d 6c 7c 7c 6e 75 6c 6c 3d 3d 3d 28 74 3d 6c 2e 63 6f 6e 66 69 67 52 65 66 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 65 78 70 65 72 69 65 6e 63 65 54 79 70 65 2c 6d 61 70 Data Ascii: 00006000tionClickHandler:r,hideCardCallback:i,goToPersonalizeSettingsCallback:d,refreshSDCardSection:s};return(0,h.Cu)({id:(null==a?void 0:a.type)??"gamingStreamCard",experienceType:null==l\|\|null===(t=l.configRef)\|\|void 0===t?void 0:t.experienceType,map
2024-01-17 17:07:24 UTC	8204	IN	Data Raw: 6e 74 4c 69 73 74 65 6e 65 72 28 22 6b 65 79 64 6f 77 6e 22 2c 74 68 69 73 2e 6f 6e 4b 65 79 64 6f 77 6e 29 29 7d 7d 28 30 2c 6b 74 2e 67 6e 29 28 5b 5f 74 2e 4c 4f 5d 2c 6a 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 73 68 6f 77 41 6c 74 65 72 6e 61 74 65 4c 69 6e 6b 54 65 78 74 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 6b 74 2e 67 6e 29 28 5b 5f 74 2e 4c 4f 5d 2c 6a 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 63 6c 69 63 6b 55 72 6c 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 6b 74 2e 67 6e 29 28 5b 5f 74 2e 4c 4f 5d 2c 6a 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 63 75 72 72 65 6e 74 43 61 72 64 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 6b 74 2e 67 6e 29 28 5b 5f 74 2e 4c 4f 5d 2c 6a 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 74 6f 74 61 6c 43 61 72 64 73 22 2c 76 6f 69 64 20 30 Data Ascii: ntListener("keydown",this.onKeydown))}}(0,kt.gn)([_t.LO],jt.prototype,"showAlternateLinkText",void 0),(0,kt.gn)([_t.LO],jt.prototype,"clickUrl",void 0),(0,kt.gn)([_t.LO],jt.prototype,"currentCard",void 0),(0,kt.gn)([_t.LO],jt.prototype,"totalCards",void 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.16	49962	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:25 UTC	524	OUT	GET /bundles/v1/edgeChromium/latest/libs_weather-shared-wc_dist_index_js.b0b1c6ea76f00067ae41.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:25 UTC	1149	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: iNk9ebXdeph19Zu6VRPjGA== Last-Modified: Sat, 13 Jan 2024 01:22:16 GMT ETag: 0x8DC13D614125131 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 38f380a9-901e-010a-21bf-453b77000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:25 GMT Content-Length: 37491 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89879300,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=2, origin; dur=0 , cdntime; dur=2 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b7304 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511245.55b7304 Vary: Origin
2024-01-17 17:07:25 UTC	15235	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6c 69 62 73 5f 77 65 61 74 68 65 72 2d 73 68 61 72 65 64 2d 77 63 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 22 5d 2c 7b 36 37 31 38 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 69 2e 72 28 65 29 2c 69 2e 64 28 65 2c 7b 48 6f 6d 65 46 69 6c 6c 65 64 49 63 6f 6e 50 61 74 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 2e 4b 49 7d 2c 49 6d 61 67 65 4c 6f 61 64 45 72 72 6f 72 54 79 70 65 3a 66 75 Data Ascii: "use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["libs_weather-shared-wc_dist_index_js"],{67181:function(t,e,i){i.r(e),i.d(e,{HomeFilledIconPath:function(){return d.KI},ImageLoadErrorType:fu
2024-01-17 17:07:25 UTC	9341	IN	Data Raw: 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 7d 60 29 29 3b 76 61 72 20 48 3d 69 28 34 39 32 31 38 29 2c 4d 3d 69 28 39 33 37 30 33 29 2c 44 3d 69 28 34 31 34 37 32 29 2c 49 3d 69 28 38 39 31 35 30 29 2c 42 3d 69 28 34 32 38 30 38 29 2c 57 3d 69 28 38 32 34 32 38 29 3b 63 6f 6e 73 74 20 6a 3d 48 2e 64 79 60 3c 73 76 67 20 77 69 64 74 68 3d 22 31 34 22 20 68 65 69 67 68 74 3d 22 31 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 34 20 31 34 22 20 63 6c 61 73 73 3d 22 73 65 74 74 69 6e 67 2d 6c 6f 63 61 74 69 6f 6e 2d 69 63 6f 6e 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 33 2e 36 37 31 39 20 31 33 Data Ascii: rder-radius:4px}`));var H=i(49218),M=i(93703),D=i(41472),I=i(89150),B=i(42808),W=i(82428);const j=H.dy`<svg width="14" height="14" viewBox="0 0 14 14" class="setting-location-icon" xmlns="http://www.w3.org/2000/svg" aria-hidden="true"><path d="M13.6719 13
2024-01-17 17:07:25 UTC	12915	IN	Data Raw: 6e 43 6f 6e 74 7d 3c 2f 66 6c 75 65 6e 74 2d 62 75 74 74 6f 6e 3e 3c 2f 64 69 76 3e 60 2c 52 3d 48 2e 64 79 60 20 24 7b 28 30 2c 4d 2e 67 29 28 28 74 3d 3e 74 2e 73 68 6f 75 6c 64 53 68 6f 77 53 75 67 67 65 73 74 73 28 29 29 2c 48 2e 64 79 60 3c 64 69 76 20 69 64 3d 22 77 65 61 74 68 65 72 5f 6c 6f 63 61 74 69 6f 6e 5f 73 65 61 72 63 68 5f 6c 69 73 74 22 20 61 72 69 61 2d 65 78 70 61 6e 64 65 64 3d 22 24 7b 74 3d 3e 21 21 74 2e 73 68 6f 77 53 75 67 67 65 73 74 73 7d 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 24 7b 74 3d 3e 74 2e 73 65 61 72 63 68 50 6c 61 63 65 48 6f 6c 64 65 72 7d 22 20 61 72 69 61 2d 6c 69 76 65 3d 22 70 6f 6c 69 74 65 22 3e 3c 75 6c 20 63 6c 61 73 73 3d 22 73 65 74 74 69 6e 67 2d 73 75 67 67 65 73 74 2d 6c 69 73 74 20 22 73 65 74 74 69 Data Ascii: nCont}</fluent-button></div>`,R=H.dy` ${(0,M.g)((t=>t.shouldShowSuggests()),H.dy`<div id="weather_location_search_list" aria-expanded="${t=>!!t.showSuggests}" aria-label="${t=>t.searchPlaceHolder}" aria-live="polite"><ul class="setting-suggest-list "setti

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.16	49963	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:26 UTC	506	OUT	GET /bundles/v1/edgeChromium/latest/money-info-service.1113b8acce7ac8e42dec.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:26 UTC	1149	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: 3RA+KDWqD51he0vnJLdi+g== Last-Modified: Mon, 08 Jan 2024 16:46:12 GMT ETag: 0x8DC106952C6EFFC Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: d7d34482-a01e-0101-4352-421e60000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:26 GMT Content-Length: 28553 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89880100,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=1, origin; dur=0 , cdntime; dur=1 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b7624 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511246.55b7624 Vary: Origin
2024-01-17 17:07:26 UTC	15235	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6d 6f 6e 65 79 2d 69 6e 66 6f 2d 73 65 72 76 69 63 65 22 5d 2c 7b 39 38 30 39 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 43 68 61 72 74 46 6c 61 67 4c 69 67 68 74 77 65 69 67 68 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 65 7d 2c 43 68 61 72 74 50 72 6f 70 73 48 65 6c 70 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 52 65 7d 2c Data Ascii: "use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["money-info-service"],{98093:function(e,t,n){n.r(t),n.d(t,{ChartFlagLightweight:function(){return pe},ChartPropsHelper:function(){return Re},
2024-01-17 17:07:26 UTC	9341	IN	Data Raw: 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 20 61 2e 6e 63 2e 53 74 6f 63 6b 73 3a 72 65 74 75 72 6e 20 30 3b 63 61 73 65 20 61 2e 6e 63 2e 45 54 46 3a 72 65 74 75 72 6e 20 31 3b 63 61 73 65 20 61 2e 6e 63 2e 49 6e 64 69 63 65 73 3a 72 65 74 75 72 6e 20 33 3b 63 61 73 65 20 61 2e 6e 63 2e 46 75 6e 64 73 3a 72 65 74 75 72 6e 20 34 3b 63 61 73 65 20 61 2e 6e 63 2e 43 75 72 72 65 6e 63 79 3a 72 65 74 75 72 6e 20 35 3b 63 61 73 65 20 61 2e 6e 63 2e 43 6f 6d 6d 6f 64 69 74 79 3a 72 65 74 75 72 6e 20 36 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 30 7d 7d 28 74 5b 30 5d 2e 73 65 63 75 72 69 74 79 54 79 70 65 29 3a 30 7d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 2c 74 2c 6e 3d 7b 7d 2c 69 3d 21 30 29 7b 69 66 28 21 28 61 77 61 69 74 28 30 2c 4d Data Ascii: switch(e){case a.nc.Stocks:return 0;case a.nc.ETF:return 1;case a.nc.Indices:return 3;case a.nc.Funds:return 4;case a.nc.Currency:return 5;case a.nc.Commodity:return 6;default:return 0}}(t[0].securityType):0}async function Pe(e,t,n={},i=!0){if(!(await(0,M
2024-01-17 17:07:26 UTC	3977	IN	Data Raw: 65 29 7d 29 29 3b 65 6c 73 65 20 69 66 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 29 66 6f 72 28 76 61 72 20 6e 3d 30 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 69 3b 6e 2b 2b 29 74 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 29 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 29 7b 65 2e 74 61 69 6c 3d 6e 65 77 20 73 28 74 2c 65 2e 74 61 69 6c 2c 6e 75 6c 6c 2c 65 29 2c 65 2e 68 65 61 64 7c 7c 28 65 2e 68 65 61 64 3d 65 2e 74 61 69 6c 29 2c 65 2e 6c 65 6e 67 74 68 2b 2b 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 65 2e 68 65 61 64 3d 6e 65 77 20 73 28 74 2c 6e 75 6c 6c 2c 65 2e 68 65 61 64 2c 65 29 2c 65 2e 74 61 69 6c 7c 7c 28 65 2e 74 61 69 6c 3d 65 2e 68 65 61 64 29 2c 65 2e Data Ascii: e)}));else if(arguments.length>0)for(var n=0,i=arguments.length;n<i;n++)t.push(arguments[n]);return t}function i(e,t){e.tail=new s(t,e.tail,null,e),e.head\|\|(e.head=e.tail),e.length++}function a(e,t){e.head=new s(t,null,e.head,e),e.tail\|\|(e.tail=e.head),e.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.16	49964	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:26 UTC	498	OUT	GET /bundles/v1/edgeChromium/latest/money-info.8fe15acccf9401ca66ec.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:26 UTC	1186	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: TdbqJobjEJyxsiuL2M05iw== Last-Modified: Tue, 16 Jan 2024 23:21:30 GMT ETag: 0x8DC16E9DF33293A Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 4c99f8e1-601e-00d9-34d2-482dcb000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:26 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Akamai-Request-BC: [a=23.218.242.10,b=89880868,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=0, origin; dur=0 , cdntime; dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b7924 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511246.55b7924 Vary: Origin
2024-01-17 17:07:26 UTC	15198	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6d 6f 6e 65 79 2d 69 6e 66 6f 22 5d 2c 7b 39 32 31 39 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 4d 6f 6e 65 79 49 6e 66 6f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5a 7d 2c 4d 6f 6e 65 79 49 6e 66 6f 53 74 79 6c 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 65 7d 2c 4d 6f 6e 65 79 49 6e 66 6f 54 65 Data Ascii: 00006000(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["money-info"],{92198:function(e,t,n){"use strict";n.r(t),n.d(t,{MoneyInfo:function(){return Z},MoneyInfoStyles:function(){return ce},MoneyInfoTe
2024-01-17 17:07:26 UTC	9390	IN	Data Raw: 75 70 64 61 74 65 53 74 61 74 65 46 6f 72 4d 61 72 6b 65 74 42 72 69 65 66 54 61 62 28 65 29 3b 63 61 73 65 20 6c 2e 48 51 2e 45 76 65 6e 74 42 72 69 65 66 3a 72 65 74 75 72 6e 20 61 77 61 69 74 20 74 68 69 73 2e 75 70 64 61 74 65 53 74 61 74 65 46 6f 72 45 76 65 6e 74 42 72 69 65 66 54 61 62 28 29 3b 63 61 73 65 20 6c 2e 48 51 2e 4d 61 72 6b 65 74 4d 6f 76 65 72 73 3a 72 65 74 75 72 6e 20 61 77 61 69 74 20 74 68 69 73 2e 75 70 64 61 74 65 53 74 61 74 65 46 6f 72 50 72 65 76 69 65 77 57 69 74 68 52 65 6c 61 74 65 64 51 75 6f 74 65 73 28 65 2c 74 29 3b 63 61 73 65 20 6c 2e 48 51 2e 43 75 72 72 65 6e 63 79 53 70 6f 74 6c 69 67 68 74 3a 63 61 73 65 20 6c 2e 48 51 2e 50 72 69 63 65 53 70 6f 74 6c 69 67 68 74 3a 72 65 74 75 72 6e 20 74 68 69 73 2e 75 70 64 61 Data Ascii: updateStateForMarketBriefTab(e);case l.HQ.EventBrief:return await this.updateStateForEventBriefTab();case l.HQ.MarketMovers:return await this.updateStateForPreviewWithRelatedQuotes(e,t);case l.HQ.CurrencySpotlight:case l.HQ.PriceSpotlight:return this.upda
2024-01-17 17:07:26 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 61 6c 6c 42 61 63 6b 3d 65 3d 3e 7b 74 68 69 73 2e 76 69 65 77 26 26 74 68 69 73 2e 76 69 65 77 2e 73 64 43 61 72 64 44 61 74 61 26 26 74 68 69 73 2e 76 69 65 77 2e 73 64 43 61 72 64 44 61 74 61 2e 66 6f 6f 74 65 72 44 61 74 61 26 26 74 68 69 73 2e 76 69 65 77 2e 73 64 43 61 72 64 44 61 74 61 2e 66 6f 6f 74 65 72 44 61 74 61 2e 70 61 67 69 6e 61 74 69 6f 6e 44 61 74 61 26 26 28 74 68 69 73 2e 76 69 65 77 2e 73 64 43 61 72 64 44 61 74 61 2e 66 6f 6f 74 65 72 44 61 74 61 2e 70 61 67 69 6e 61 74 69 6f 6e 44 61 74 61 2e 63 75 72 72 65 6e 74 50 61 67 65 49 6e 64 65 78 3d 65 29 7d 2c 74 68 69 73 2e 6f 6e 4d 6f 76 65 72 73 54 61 62 41 64 64 65 64 3d 28 29 3d 3e 7b 74 68 69 73 2e 76 69 65 77 26 26 74 68 69 73 2e 75 70 64 61 74 65 56 Data Ascii: 00006000allBack=e=>{this.view&&this.view.sdCardData&&this.view.sdCardData.footerData&&this.view.sdCardData.footerData.paginationData&&(this.view.sdCardData.footerData.paginationData.currentPageIndex=e)},this.onMoversTabAdded=()=>{this.view&&this.updateV
2024-01-17 17:07:26 UTC	8204	IN	Data Raw: 72 65 65 74 69 6e 67 22 5d 3a 72 2c 5b 22 4d 6f 6e 65 79 41 75 67 6d 65 6e 74 22 5d 3a 75 7d 2c 67 3d 22 53 70 6f 72 74 73 49 6e 66 6f 22 2c 6d 3d 22 53 70 6f 72 74 73 49 6e 66 6f 53 70 61 6e 22 2c 70 3d 22 53 70 6f 72 74 73 4d 61 74 63 68 4c 69 73 74 22 2c 66 3d 22 53 70 6f 72 74 73 54 65 61 6d 45 78 70 6c 6f 72 61 74 69 6f 6e 22 2c 79 3d 22 53 70 6f 72 74 73 43 72 69 63 6b 65 74 45 78 70 6c 6f 72 61 74 69 6f 6e 22 2c 76 3d 22 53 70 6f 72 74 73 4d 61 72 63 68 6d 61 64 6e 65 73 73 22 2c 77 3d 22 53 70 6f 72 74 73 53 70 6f 74 6c 69 67 68 74 22 2c 43 3d 7b 5b 22 53 70 6f 72 74 73 4d 61 74 63 68 22 5d 3a 67 2c 5b 22 45 76 65 6e 74 53 44 43 61 72 64 53 70 6f 72 74 73 4d 49 54 31 22 5d 3a 67 2c 5b 22 45 76 65 6e 74 53 44 43 61 72 64 53 70 6f 72 74 73 4d 49 54 Data Ascii: reeting"]:r,["MoneyAugment"]:u},g="SportsInfo",m="SportsInfoSpan",p="SportsMatchList",f="SportsTeamExploration",y="SportsCricketExploration",v="SportsMarchmadness",w="SportsSpotlight",C={["SportsMatch"]:g,["EventSDCardSportsMIT1"]:g,["EventSDCardSportsMIT
2024-01-17 17:07:26 UTC	11607	IN	Data Raw: 30 30 30 30 32 44 34 42 0d 0a 6f 74 6c 69 67 68 74 43 75 72 72 65 6e 63 79 29 2c 28 28 29 3d 3e 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 5b 6e 2e 65 28 22 63 6f 6d 6d 6f 6e 2d 73 65 67 6d 65 6e 74 73 22 29 2c 6e 2e 65 28 22 63 6f 6d 6d 6f 6e 2d 66 65 65 64 2d 6c 69 62 73 22 29 2c 6e 2e 65 28 22 63 6f 6d 6d 6f 6e 2d 63 73 63 6f 72 65 22 29 2c 6e 2e 65 28 22 64 33 2d 6c 69 62 72 61 72 79 22 29 2c 6e 2e 65 28 22 6d 6f 6e 65 79 2d 69 6e 66 6f 2d 73 70 6f 74 6c 69 67 68 74 2d 63 75 72 72 65 6e 63 79 22 29 5d 29 2e 74 68 65 6e 28 6e 2e 62 69 6e 64 28 6e 2c 32 36 33 38 30 29 29 29 29 2c 6f 28 73 28 72 2e 68 75 2e 45 76 65 6e 74 42 72 69 65 66 29 2c 28 28 29 3d 3e 6e 2e 65 28 22 6d 6f 6e 65 79 2d 69 6e 66 6f 2d 65 76 65 6e 74 2d 62 72 69 65 66 22 29 2e 74 68 65 6e 28 Data Ascii: 00002D4BotlightCurrency),(()=>Promise.all([n.e("common-segments"),n.e("common-feed-libs"),n.e("common-cscore"),n.e("d3-library"),n.e("money-info-spotlight-currency")]).then(n.bind(n,26380)))),o(s(r.hu.EventBrief),(()=>n.e("money-info-event-brief").then(
2024-01-17 17:07:27 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 50 72 65 76 69 65 77 54 79 70 65 22 2c 6d 6f 6e 65 79 43 61 72 64 53 70 6f 74 6c 69 67 68 74 44 61 74 61 46 72 6f 6d 3a 22 6d 6f 6e 65 79 43 61 72 64 53 70 6f 74 6c 69 67 68 74 44 61 74 61 46 72 6f 6d 22 2c 6d 6f 6e 65 79 4d 61 72 6b 65 74 42 72 69 65 66 43 61 72 64 50 72 65 73 65 6e 74 3a 22 6d 6f 6e 65 79 4d 61 72 6b 65 74 42 72 69 65 66 43 61 72 64 50 72 65 73 65 6e 74 22 2c 6d 6f 6e 65 79 43 61 72 64 53 75 67 67 65 73 74 65 64 4f 6e 6c 79 54 61 62 50 72 65 73 65 6e 74 3a 22 6d 6f 6e 65 79 43 61 72 64 53 75 67 67 65 73 74 65 64 4f 6e 6c 79 54 61 62 50 72 65 73 65 6e 74 22 2c 6d 6f 6e 65 79 43 61 72 64 52 65 67 75 6c 61 72 43 61 72 64 41 64 64 65 64 3a 22 6d 6f 6e 65 79 43 61 72 64 52 65 67 75 6c 61 72 43 61 72 64 41 64 64 Data Ascii: 00004000PreviewType",moneyCardSpotlightDataFrom:"moneyCardSpotlightDataFrom",moneyMarketBriefCardPresent:"moneyMarketBriefCardPresent",moneyCardSuggestedOnlyTabPresent:"moneyCardSuggestedOnlyTabPresent",moneyCardRegularCardAdded:"moneyCardRegularCardAdd
2024-01-17 17:07:27 UTC	12	IN	Data Raw: 6d 62 65 72 48 6f 75 72 73 41 0d 0a Data Ascii: mberHoursA
2024-01-17 17:07:27 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 67 6f 4c 61 62 65 6c 2c 4e 75 6d 62 65 72 44 61 79 41 67 6f 3a 6e 2b 74 2e 6e 75 6d 62 65 72 44 61 79 73 41 67 6f 4c 61 62 65 6c 2c 4e 75 6d 62 65 72 44 61 79 73 41 67 6f 3a 6e 2b 74 2e 6e 75 6d 62 65 72 44 61 79 73 41 67 6f 4c 61 62 65 6c 2c 4e 75 6d 62 65 72 57 65 65 6b 41 67 6f 3a 6e 2b 74 2e 6e 75 6d 62 65 72 57 65 65 6b 73 41 67 6f 4c 61 62 65 6c 2c 4e 75 6d 62 65 72 57 65 65 6b 73 41 67 6f 3a 6e 2b 74 2e 6e 75 6d 62 65 72 57 65 65 6b 73 41 67 6f 4c 61 62 65 6c 2c 4e 75 6d 62 65 72 4d 6f 6e 74 68 41 67 6f 3a 6e 2b 74 2e 6e 75 6d 62 65 72 4d 6f 6e 74 68 73 41 67 6f 4c 61 62 65 6c 2c 4e 75 6d 62 65 72 4d 6f 6e 74 68 73 41 67 6f 3a 6e 2b 74 2e 6e 75 6d 62 65 72 4d 6f 6e 74 68 73 41 67 6f 4c 61 62 65 6c 2c 4e 75 6d 62 65 72 Data Ascii: 00004000goLabel,NumberDayAgo:n+t.numberDaysAgoLabel,NumberDaysAgo:n+t.numberDaysAgoLabel,NumberWeekAgo:n+t.numberWeeksAgoLabel,NumberWeeksAgo:n+t.numberWeeksAgoLabel,NumberMonthAgo:n+t.numberMonthsAgoLabel,NumberMonthsAgo:n+t.numberMonthsAgoLabel,Number
2024-01-17 17:07:27 UTC	12	IN	Data Raw: 28 69 2e 78 6e 2e 41 6e 61 6c 0d 0a Data Ascii: (i.xn.Anal
2024-01-17 17:07:27 UTC	16384	IN	Data Raw: 30 30 30 30 34 43 36 44 0d 0a 79 73 74 52 65 63 6f 6d 6d 65 6e 64 61 74 69 6f 6e 29 7c 7c 7b 7d 3b 69 66 28 74 26 26 6e 26 26 72 29 72 65 74 75 72 6e 28 30 2c 61 2e 67 42 29 28 69 2e 4b 72 2e 6d 6f 6e 65 79 43 61 72 64 45 61 72 6e 69 6e 67 73 54 79 70 65 2c 22 70 72 65 22 29 2c 69 2e 51 6b 2e 53 70 6f 74 6c 69 67 68 74 50 72 65 45 61 72 6e 69 6e 67 73 7d 7d 72 65 74 75 72 6e 20 69 2e 51 6b 2e 50 72 69 63 65 53 70 6f 74 6c 69 67 68 74 7d 67 65 6e 65 72 61 74 65 4d 65 74 61 64 61 74 61 46 6f 72 53 70 6f 74 6c 69 67 68 74 28 65 2c 74 2c 6e 2c 72 2c 61 3d 22 22 29 7b 63 6f 6e 73 74 20 6f 3d 72 2e 67 65 74 28 69 2e 78 6e 2e 43 61 72 64 53 69 7a 65 29 2c 73 3d 72 2e 67 65 74 28 69 2e 78 6e 2e 43 61 72 64 54 79 70 65 29 2c 63 3d 72 2e 67 65 74 28 69 2e 78 6e 2e Data Ascii: 00004C6DystRecommendation)\|\|{};if(t&&n&&r)return(0,a.gB)(i.Kr.moneyCardEarningsType,"pre"),i.Qk.SpotlightPreEarnings}}return i.Qk.PriceSpotlight}generateMetadataForSpotlight(e,t,n,r,a=""){const o=r.get(i.xn.CardSize),s=r.get(i.xn.CardType),c=r.get(i.xn.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.16	49965	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:27 UTC	519	OUT	GET /bundles/v1/edgeChromium/latest/money-quote-vertical-quote-list.e462ace6cbe4d83aa137.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:27 UTC	1149	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: 8QAEsux5XkDmvjqWP/V+vQ== Last-Modified: Mon, 08 Jan 2024 16:46:14 GMT ETag: 0x8DC1069542653E3 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: c50eb964-401e-0037-2b52-429aa1000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:27 GMT Content-Length: 24182 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89881843,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=1, origin; dur=0 , cdntime; dur=1 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b7cf3 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511247.55b7cf3 Vary: Origin
2024-01-17 17:07:27 UTC	15235	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6d 6f 6e 65 79 2d 71 75 6f 74 65 2d 76 65 72 74 69 63 61 6c 2d 71 75 6f 74 65 2d 6c 69 73 74 22 5d 2c 7b 33 30 33 31 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 69 2e 72 28 74 29 2c 69 2e 64 28 74 2c 7b 46 6f 6c 6c 6f 77 42 75 74 74 6f 6e 54 72 61 6e 73 66 6f 72 6d 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 2e 46 7d 2c 4d 6f 6e 65 79 49 6e 66 6f 53 74 6f 63 6b 43 68 61 72 74 54 72 61 Data Ascii: "use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["money-quote-vertical-quote-list"],{30319:function(e,t,i){i.r(t),i.d(t,{FollowButtonTransformer:function(){return o.F},MoneyInfoStockChartTra
2024-01-17 17:07:27 UTC	8947	IN	Data Raw: 62 69 6e 64 28 74 68 69 73 29 7d 61 64 64 53 75 62 73 63 72 69 70 74 69 6f 6e 73 28 29 7b 73 75 70 65 72 2e 61 64 64 53 75 62 73 63 72 69 70 74 69 6f 6e 73 28 29 3b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 67 65 74 53 74 61 74 65 28 29 3b 65 26 26 65 2e 73 75 62 73 63 72 69 62 65 28 72 2e 78 6e 2e 43 75 72 72 65 6e 74 50 61 67 65 49 6e 64 65 78 2c 74 68 69 73 2e 6f 6e 43 75 72 72 65 6e 74 50 61 67 65 49 6e 64 65 78 43 68 61 6e 67 65 53 63 6f 70 65 64 2c 7b 73 69 67 6e 61 6c 3a 74 68 69 73 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 43 6f 6e 74 72 6f 6c 6c 65 72 2e 73 69 67 6e 61 6c 7d 29 7d 67 65 74 20 6c 69 73 74 53 74 79 6c 65 73 28 29 7b 6c 65 74 20 65 3d 60 68 65 69 67 68 74 3a 20 24 7b 74 68 69 73 2e 76 69 65 77 4d 6f 64 65 6c 2e 6c 69 73 74 48 65 69 67 68 Data Ascii: bind(this)}addSubscriptions(){super.addSubscriptions();const e=this.getState();e&&e.subscribe(r.xn.CurrentPageIndex,this.onCurrentPageIndexChangeScoped,{signal:this.subscriptionController.signal})}get listStyles(){let e=`height: ${this.viewModel.listHeigh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.16	49966	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:27 UTC	518	OUT	GET /bundles/v1/edgeChromium/latest/money-quote-vertical-watchlist.28b33b8557da261310cb.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:27 UTC	1151	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: u2wCmPZK+WdpvyKxU4MR1w== Last-Modified: Mon, 08 Jan 2024 16:46:12 GMT ETag: 0x8DC106952AB977F Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 13727e2b-701e-0054-5f52-42a585000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:27 GMT Content-Length: 24552 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89882572,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=12, origin; dur=0 , cdntime; dur=12 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b7fcc Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511247.55b7fcc Vary: Origin
2024-01-17 17:07:27 UTC	15233	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6d 6f 6e 65 79 2d 71 75 6f 74 65 2d 76 65 72 74 69 63 61 6c 2d 77 61 74 63 68 6c 69 73 74 22 5d 2c 7b 38 35 33 36 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 69 2e 72 28 74 29 2c 69 2e 64 28 74 2c 7b 46 6f 6c 6c 6f 77 42 75 74 74 6f 6e 54 72 61 6e 73 66 6f 72 6d 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 2e 46 7d 2c 4d 6f 6e 65 79 49 6e 66 6f 53 74 6f 63 6b 43 68 61 72 74 54 72 61 6e Data Ascii: "use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["money-quote-vertical-watchlist"],{85366:function(e,t,i){i.r(t),i.d(t,{FollowButtonTransformer:function(){return o.F},MoneyInfoStockChartTran
2024-01-17 17:07:28 UTC	9319	IN	Data Raw: 6f 6e 43 75 72 72 65 6e 74 50 61 67 65 49 6e 64 65 78 43 68 61 6e 67 65 2e 62 69 6e 64 28 74 68 69 73 29 7d 64 69 73 63 6f 6e 6e 65 63 74 65 64 28 29 7b 73 75 70 65 72 2e 64 69 73 63 6f 6e 6e 65 63 74 65 64 28 29 2c 74 68 69 73 2e 63 75 72 72 65 6e 74 4d 61 72 67 69 6e 3d 30 7d 61 64 64 53 75 62 73 63 72 69 70 74 69 6f 6e 73 28 29 7b 69 66 28 73 75 70 65 72 2e 61 64 64 53 75 62 73 63 72 69 70 74 69 6f 6e 73 28 29 2c 22 5f 31 78 5f 31 79 22 3d 3d 3d 74 68 69 73 2e 76 69 65 77 4d 6f 64 65 6c 2e 63 61 72 64 53 69 7a 65 29 7b 63 6f 6e 73 74 20 65 3d 72 2e 6a 41 2e 67 65 74 28 74 68 69 73 2e 76 69 65 77 4d 6f 64 65 6c 2e 65 78 70 65 72 69 65 6e 63 65 4e 61 6d 65 29 3b 69 66 28 21 65 29 72 65 74 75 72 6e 3b 65 2e 73 75 62 73 63 72 69 62 65 28 72 2e 78 6e 2e 43 Data Ascii: onCurrentPageIndexChange.bind(this)}disconnected(){super.disconnected(),this.currentMargin=0}addSubscriptions(){if(super.addSubscriptions(),"_1x_1y"===this.viewModel.cardSize){const e=r.jA.get(this.viewModel.experienceName);if(!e)return;e.subscribe(r.xn.C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.16	49967	52.182.143.211	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:28 UTC	1047	OUT	POST /OneCollector/1.0?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1705511247277&w=0&anoncknm=app_anon&NoResponseBody=true HTTP/1.1 Host: browser.events.data.msn.com Connection: keep-alive Content-Length: 6363 sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; _SS=SID=00; _C_ETH=1
2024-01-17 17:07:28 UTC	6363	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 55 6e 6c 6f 61 64 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 30 31 2d 31 37 54 31 37 3a 30 37 3a 32 37 2e 32 37 36 5a 22 2c 22 76 65 72 22 3a 22 34 2e 30 22 2c 22 69 4b 65 79 22 3a 22 6f 3a 30 64 65 64 36 30 63 37 35 65 34 34 34 34 33 61 61 33 34 38 34 63 34 32 63 31 63 34 33 66 65 38 22 2c 22 65 78 74 22 3a 7b 22 73 64 6b 22 3a 7b 22 76 65 72 22 3a 22 31 44 53 2d 57 65 62 2d 4a 53 2d 33 2e 32 2e 38 22 2c 22 73 65 71 22 3a 37 2c 22 69 6e 73 74 61 6c 6c 49 64 22 3a 22 39 31 64 35 37 31 39 38 2d 66 37 38 37 2d 34 66 35 39 2d 38 61 30 37 2d 64 34 35 39 64 38 32 31 34 35 34 63 22 2c 22 65 70 6f 63 68 22 3a 22 32 35 34 36 32 30 33 31 31 30 22 7d 2c 22 61 70 70 22 3a 7b 22 6c 6f 63 61 6c 65 22 3a Data Ascii: {"name":"MS.News.Web.Unload","time":"2024-01-17T17:07:27.276Z","ver":"4.0","iKey":"o:0ded60c75e44443aa3484c42c1c43fe8","ext":{"sdk":{"ver":"1DS-Web-JS-3.2.8","seq":7,"installId":"91d57198-f787-4f59-8a07-d459d821454c","epoch":"2546203110"},"app":{"locale":
2024-01-17 17:07:28 UTC	890	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: MC1=GUID=0cc2cc397306430d801d08b481275a31&HASH=0cc2&LV=202401&V=4&LU=1705511248546; Domain=.microsoft.com; Expires=Thu, 16 Jan 2025 17:07:28 GMT; Path=/;Secure; SameSite=None Set-Cookie: MS0=8a04a1fa3fef4872948048866953123c; Domain=.microsoft.com; Expires=Wed, 17 Jan 2024 17:37:28 GMT; Path=/;Secure; SameSite=None time-delta-millis: 1269 Access-Control-Allow-Headers: P3P,Set-Cookie,time-delta-millis Access-Control-Allow-Methods: POST Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com Access-Control-Expose-Headers: time-delta-millis Date: Wed, 17 Jan 2024 17:07:27 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.16	49968	52.182.143.211	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:28 UTC	1047	OUT	POST /OneCollector/1.0?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1705511247325&w=0&anoncknm=app_anon&NoResponseBody=true HTTP/1.1 Host: browser.events.data.msn.com Connection: keep-alive Content-Length: 6650 sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; _SS=SID=00; _C_ETH=1
2024-01-17 17:07:28 UTC	6650	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 4c 6f 61 64 54 69 6d 65 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 30 31 2d 31 37 54 31 37 3a 30 37 3a 32 37 2e 33 31 39 5a 22 2c 22 76 65 72 22 3a 22 34 2e 30 22 2c 22 69 4b 65 79 22 3a 22 6f 3a 30 64 65 64 36 30 63 37 35 65 34 34 34 34 33 61 61 33 34 38 34 63 34 32 63 31 63 34 33 66 65 38 22 2c 22 65 78 74 22 3a 7b 22 73 64 6b 22 3a 7b 22 76 65 72 22 3a 22 31 44 53 2d 57 65 62 2d 4a 53 2d 33 2e 32 2e 38 22 2c 22 73 65 71 22 3a 38 2c 22 69 6e 73 74 61 6c 6c 49 64 22 3a 22 39 31 64 35 37 31 39 38 2d 66 37 38 37 2d 34 66 35 39 2d 38 61 30 37 2d 64 34 35 39 64 38 32 31 34 35 34 63 22 2c 22 65 70 6f 63 68 22 3a 22 32 35 34 36 32 30 33 31 31 30 22 7d 2c 22 61 70 70 22 3a 7b 22 6c 6f 63 61 6c 65 Data Ascii: {"name":"MS.News.Web.LoadTime","time":"2024-01-17T17:07:27.319Z","ver":"4.0","iKey":"o:0ded60c75e44443aa3484c42c1c43fe8","ext":{"sdk":{"ver":"1DS-Web-JS-3.2.8","seq":8,"installId":"91d57198-f787-4f59-8a07-d459d821454c","epoch":"2546203110"},"app":{"locale
2024-01-17 17:07:28 UTC	890	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: MC1=GUID=99a8d0a6fac34eecbfc19b41fb9c64ad&HASH=99a8&LV=202401&V=4&LU=1705511248592; Domain=.microsoft.com; Expires=Thu, 16 Jan 2025 17:07:28 GMT; Path=/;Secure; SameSite=None Set-Cookie: MS0=93fd30212f0b4069933d00c154b79e0d; Domain=.microsoft.com; Expires=Wed, 17 Jan 2024 17:37:28 GMT; Path=/;Secure; SameSite=None time-delta-millis: 1267 Access-Control-Allow-Headers: P3P,Set-Cookie,time-delta-millis Access-Control-Allow-Methods: POST Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com Access-Control-Expose-Headers: time-delta-millis Date: Wed, 17 Jan 2024 17:07:27 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.16	49969	23.51.57.215	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:28 UTC	763	OUT	GET /fwlink/?linkid=2132659&form=MT004A&OCID=MT004A HTTP/1.1 Host: go.microsoft.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:28 UTC	456	IN	HTTP/1.1 302 Moved Temporarily Content-Length: 0 Server: Kestrel Location: https://www.microsoft.com/edge/welcome?form=MT00LJ Request-Context: appId=cid-v1:b47e5e27-bf85-45ba-a97c-0377ce0e5779 X-Response-Cache-Status: True Expires: Wed, 17 Jan 2024 17:07:28 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 17 Jan 2024 17:07:28 GMT Connection: close Strict-Transport-Security: max-age=31536000 ; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.16	49971	20.25.228.187	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:28 UTC	607	OUT	POST /api/browser/edge/navigate/3 HTTP/1.1 Host: nav-edge.smartscreen.microsoft.com Connection: keep-alive Content-Length: 1600 Authorization: SmartScreenHash eyJhdXRoSWQiOiI0MWE0MzhiYy0xMjQ5LTQzZDMtYTI2ZC02OWNkNjJjMDgzMTciLCAia2V5Ijoic21LMm1xRG04eDRFUE96Z0ZrOU94dz09IiwgImhhc2giOiJ4RDcwMmFTdk9sUT0ifQ== Content-Type: application/json; charset=utf-8 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept-Encoding: gzip, deflate, br
2024-01-17 17:07:28 UTC	1600	OUT	Data Raw: 7b 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 20 45 64 67 2f 31 31 37 2e 30 2e 32 30 34 35 2e 34 37 22 2c 22 69 64 65 6e 74 69 74 79 22 3a 7b 22 75 73 65 72 22 3a 7b 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 47 42 22 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 69 64 22 3a 6e 75 6c 6c 2c 22 63 75 73 74 6f 6d 49 64 22 3a 6e 75 6c 6c 2c 22 6f 6e 6c 69 6e 65 49 64 54 69 63 6b 65 74 22 3a 22 74 3d 47 77 41 57 41 64 39 74 42 41 41 55 34 4d 69 6a Data Ascii: {"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47","identity":{"user":{"locale":"en-GB"},"device":{"id":null,"customId":null,"onlineIdTicket":"t=GwAWAd9tBAAU4Mij
2024-01-17 17:07:28 UTC	263	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:28 GMT Content-Type: application/json; charset=utf-8 Content-Length: 852 Connection: close Server: Kestrel Cache-Control: max-age=0, private Request-Context: appId=cid-v1:46ea1a4d-29cb-4e7e-a1ff-735721467fe3
2024-01-17 17:07:28 UTC	852	IN	Data Raw: 7b 22 61 63 74 69 6f 6e 73 22 3a 5b 7b 22 24 74 79 70 65 22 3a 22 63 61 63 68 65 22 2c 22 6b 65 79 22 3a 7b 22 75 72 69 22 3a 22 67 6f 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 22 2c 22 69 6e 68 65 72 69 74 61 6e 63 65 22 3a 22 6e 6f 6e 65 22 7d 2c 22 6d 61 78 41 67 65 22 3a 31 30 30 38 30 30 30 30 30 30 30 30 2c 22 73 65 72 76 65 72 43 6f 6e 74 65 78 74 22 3a 22 31 3b 63 35 66 61 61 64 35 39 2d 61 32 65 33 2d 33 31 66 32 2d 62 38 36 65 2d 61 61 66 39 35 38 65 31 32 38 32 34 3b 50 48 53 48 3a 30 30 35 3b 37 45 2d 30 35 22 2c 22 72 65 73 70 6f 6e 73 65 43 61 74 65 67 6f 72 79 22 3a 22 41 6c 6c 6f 77 65 64 22 2c 22 72 65 73 75 6c 74 22 3a 7b 22 24 74 79 70 65 22 3a 22 61 6c 6c 6f 77 22 7d 7d 5d 2c 22 73 65 72 76 65 72 43 6f 6e 74 65 78 74 22 3a 22 31 3b 63 Data Ascii: {"actions":[{"$type":"cache","key":{"uri":"go.microsoft.com","inheritance":"none"},"maxAge":100800000000,"serverContext":"1;c5faad59-a2e3-31f2-b86e-aaf958e12824;PHSH:005;7E-05","responseCategory":"Allowed","result":{"$type":"allow"}}],"serverContext":"1;c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.16	49972	52.182.143.211	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:29 UTC	1047	OUT	POST /OneCollector/1.0?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1705511247786&w=0&anoncknm=app_anon&NoResponseBody=true HTTP/1.1 Host: browser.events.data.msn.com Connection: keep-alive Content-Length: 6597 sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; _SS=SID=00; _C_ETH=1
2024-01-17 17:07:29 UTC	6597	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 4c 6f 61 64 54 69 6d 65 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 30 31 2d 31 37 54 31 37 3a 30 37 3a 32 37 2e 37 34 39 5a 22 2c 22 76 65 72 22 3a 22 34 2e 30 22 2c 22 69 4b 65 79 22 3a 22 6f 3a 30 64 65 64 36 30 63 37 35 65 34 34 34 34 33 61 61 33 34 38 34 63 34 32 63 31 63 34 33 66 65 38 22 2c 22 65 78 74 22 3a 7b 22 73 64 6b 22 3a 7b 22 76 65 72 22 3a 22 31 44 53 2d 57 65 62 2d 4a 53 2d 33 2e 32 2e 38 22 2c 22 73 65 71 22 3a 39 2c 22 69 6e 73 74 61 6c 6c 49 64 22 3a 22 39 31 64 35 37 31 39 38 2d 66 37 38 37 2d 34 66 35 39 2d 38 61 30 37 2d 64 34 35 39 64 38 32 31 34 35 34 63 22 2c 22 65 70 6f 63 68 22 3a 22 32 35 34 36 32 30 33 31 31 30 22 7d 2c 22 61 70 70 22 3a 7b 22 6c 6f 63 61 6c 65 Data Ascii: {"name":"MS.News.Web.LoadTime","time":"2024-01-17T17:07:27.749Z","ver":"4.0","iKey":"o:0ded60c75e44443aa3484c42c1c43fe8","ext":{"sdk":{"ver":"1DS-Web-JS-3.2.8","seq":9,"installId":"91d57198-f787-4f59-8a07-d459d821454c","epoch":"2546203110"},"app":{"locale
2024-01-17 17:07:29 UTC	890	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: MC1=GUID=6b7f1f82cd7e40d89f075d91b93a2420&HASH=6b7f&LV=202401&V=4&LU=1705511249072; Domain=.microsoft.com; Expires=Thu, 16 Jan 2025 17:07:29 GMT; Path=/;Secure; SameSite=None Set-Cookie: MS0=0b15f18eeb4e41a4a7ef4d726e1c6b37; Domain=.microsoft.com; Expires=Wed, 17 Jan 2024 17:37:29 GMT; Path=/;Secure; SameSite=None time-delta-millis: 1286 Access-Control-Allow-Headers: P3P,Set-Cookie,time-delta-millis Access-Control-Allow-Methods: POST Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com Access-Control-Expose-Headers: time-delta-millis Date: Wed, 17 Jan 2024 17:07:28 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.16	49973	20.25.228.187	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:29 UTC	607	OUT	POST /api/browser/edge/navigate/3 HTTP/1.1 Host: nav-edge.smartscreen.microsoft.com Connection: keep-alive Content-Length: 1580 Authorization: SmartScreenHash eyJhdXRoSWQiOiI0MWE0MzhiYy0xMjQ5LTQzZDMtYTI2ZC02OWNkNjJjMDgzMTciLCAia2V5IjoiSTJMOVdJaStQVmZqQWVXTUdoeExndz09IiwgImhhc2giOiJsUDVxUG9HZS9taz0ifQ== Content-Type: application/json; charset=utf-8 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept-Encoding: gzip, deflate, br
2024-01-17 17:07:29 UTC	1580	OUT	Data Raw: 7b 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 20 45 64 67 2f 31 31 37 2e 30 2e 32 30 34 35 2e 34 37 22 2c 22 69 64 65 6e 74 69 74 79 22 3a 7b 22 75 73 65 72 22 3a 7b 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 47 42 22 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 69 64 22 3a 6e 75 6c 6c 2c 22 63 75 73 74 6f 6d 49 64 22 3a 6e 75 6c 6c 2c 22 6f 6e 6c 69 6e 65 49 64 54 69 63 6b 65 74 22 3a 22 74 3d 47 77 41 57 41 64 39 74 42 41 41 55 34 4d 69 6a Data Ascii: {"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47","identity":{"user":{"locale":"en-GB"},"device":{"id":null,"customId":null,"onlineIdTicket":"t=GwAWAd9tBAAU4Mij
2024-01-17 17:07:29 UTC	263	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:29 GMT Content-Type: application/json; charset=utf-8 Content-Length: 831 Connection: close Server: Kestrel Cache-Control: max-age=0, private Request-Context: appId=cid-v1:46ea1a4d-29cb-4e7e-a1ff-735721467fe3
2024-01-17 17:07:29 UTC	831	IN	Data Raw: 7b 22 61 63 74 69 6f 6e 73 22 3a 5b 7b 22 24 74 79 70 65 22 3a 22 63 61 63 68 65 22 2c 22 6b 65 79 22 3a 7b 22 75 72 69 22 3a 22 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 65 64 67 65 22 2c 22 69 6e 68 65 72 69 74 61 6e 63 65 22 3a 22 70 61 74 68 22 7d 2c 22 6d 61 78 41 67 65 22 3a 31 30 30 38 30 30 30 30 30 30 30 30 2c 22 73 65 72 76 65 72 43 6f 6e 74 65 78 74 22 3a 22 31 3b 63 35 66 61 61 64 35 39 2d 61 32 65 33 2d 33 31 66 32 2d 62 38 36 65 2d 61 61 66 39 35 38 65 31 32 38 32 34 3b 50 48 53 48 3a 30 30 35 3b 37 45 2d 30 35 22 2c 22 72 65 73 70 6f 6e 73 65 43 61 74 65 67 6f 72 79 22 3a 22 41 6c 6c 6f 77 65 64 22 2c 22 72 65 73 75 6c 74 22 3a 7b 22 24 74 79 70 65 22 3a 22 61 6c 6c 6f 77 22 7d 7d 5d 2c 22 73 65 72 76 65 72 43 6f 6e 74 65 78 74 Data Ascii: {"actions":[{"$type":"cache","key":{"uri":"www.microsoft.com/edge","inheritance":"path"},"maxAge":100800000000,"serverContext":"1;c5faad59-a2e3-31f2-b86e-aaf958e12824;PHSH:005;7E-05","responseCategory":"Allowed","result":{"$type":"allow"}}],"serverContext

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.16	49976	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:29 UTC	499	OUT	GET /bundles/v1/edgeChromium/latest/na-trending.1db8b7da756dc53852b0.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:29 UTC	1149	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: RfkJtFy/aGnAmmijt5OTfQ== Last-Modified: Mon, 08 Jan 2024 16:46:12 GMT ETag: 0x8DC106952CEAF6B Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: e729a209-301e-0028-6c52-42a39c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:29 GMT Content-Length: 13736 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89884768,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=1, origin; dur=0 , cdntime; dur=1 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b8860 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511249.55b8860 Vary: Origin
2024-01-17 17:07:29 UTC	13736	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6e 61 2d 74 72 65 6e 64 69 6e 67 22 5d 2c 7b 39 31 30 31 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 6e 2e 72 28 65 29 2c 6e 2e 64 28 65 2c 7b 6c 6f 61 64 4e 74 70 43 6f 61 63 68 6d 61 72 6b 42 61 64 67 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 7d 7d 29 3b 76 61 72 20 6f 3d 6e 28 34 34 38 38 37 29 2c 69 3d 6e 28 32 37 30 32 36 29 2c 61 3d 6e 28 37 35 30 35 39 29 2c 72 3d 6e 28 32 35 39 Data Ascii: "use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["na-trending"],{91011:function(t,e,n){n.r(e),n.d(e,{loadNtpCoachmarkBadge:function(){return u}});var o=n(44887),i=n(27026),a=n(75059),r=n(259

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.16	49975	23.47.169.232	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:29 UTC	742	OUT	GET /edge/welcome?form=MT00LJ HTTP/1.1 Host: www.microsoft.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:29 UTC	929	IN	HTTP/1.1 302 Moved Temporarily Content-Length: 112 Content-Type: text/html; charset=utf-8 Location: /edge/welcome?form=MT00LJ&ch=1 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Origin-Agent-Cluster: ?1 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Arch, Sec-CH-UA-Bitness Critical-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Arch, Sec-CH-UA-Bitness x-azure-ref: 20240117T170729Z-u9gp6acn0918xcz00dqy7cbgtc00000001bg000000000404 Expires: Wed, 17 Jan 2024 17:07:29 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 17 Jan 2024 17:07:29 GMT Connection: close TLS_version: tls1.3 ms-cv: CASMicrosoftCV528e560b.0 ms-cv-esi: CASMicrosoftCV528e560b.0 X-RTag: RT
2024-01-17 17:07:29 UTC	112	IN	Data Raw: 3c 70 3e 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 65 64 67 65 2f 77 65 6c 63 6f 6d 65 3f 66 6f 72 6d 3d 4d 54 30 30 4c 4a 26 61 6d 70 3b 63 68 3d 31 22 3e 2f 65 64 67 65 2f 77 65 6c 63 6f 6d 65 3f 66 6f 72 6d 3d 4d 54 30 30 4c 4a 26 61 6d 70 3b 63 68 3d 31 3c 2f 61 3e 3c 2f 70 3e Data Ascii: <p>Found. Redirecting to <a href="/edge/welcome?form=MT00LJ&ch=1">/edge/welcome?form=MT00LJ&ch=1</a></p>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.16	49970	23.51.57.215	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:29 UTC	763	OUT	GET /fwlink/?linkid=2132659&form=MT004A&OCID=MT004A HTTP/1.1 Host: go.microsoft.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:29 UTC	456	IN	HTTP/1.1 302 Moved Temporarily Content-Length: 0 Server: Kestrel Location: https://www.microsoft.com/edge/welcome?form=MT00LJ Request-Context: appId=cid-v1:b47e5e27-bf85-45ba-a97c-0377ce0e5779 X-Response-Cache-Status: True Expires: Wed, 17 Jan 2024 17:07:29 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 17 Jan 2024 17:07:29 GMT Connection: close Strict-Transport-Security: max-age=31536000 ; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.16	49983	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:29 UTC	504	OUT	GET /bundles/v1/edgeChromium/latest/nas-highlight-v1.16d693a412d24530c315.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:29 UTC	1186	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: YVfKCgX2O1inm+B7tOxGEQ== Last-Modified: Sat, 13 Jan 2024 01:22:14 GMT ETag: 0x8DC13D6136803B0 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 2a0be007-f01e-00e4-46bf-45d3c1000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:29 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Akamai-Request-BC: [a=23.218.242.10,b=89885405,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=5, origin; dur=0 , cdntime; dur=5 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b8add Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511249.55b8add Vary: Origin
2024-01-17 17:07:29 UTC	15198	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6e 61 73 2d 68 69 67 68 6c 69 67 68 74 2d 76 31 22 5d 2c 7b 37 34 34 34 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 69 2e 64 28 74 2c 7b 53 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 7d 29 3b 76 61 72 20 61 2c 6e 3d 69 28 34 34 30 36 30 29 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 65 74 20 74 2c 69 2c 61 2c 6f 2c 72 2c 64 2c 73 2c 6c 3b 65 2e 49 6d 61 67 Data Ascii: 00006000"use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["nas-highlight-v1"],{74445:function(e,t,i){i.d(t,{S:function(){return a}});var a,n=i(44060);!function(e){let t,i,a,o,r,d,s,l;e.Imag
2024-01-17 17:07:29 UTC	9390	IN	Data Raw: 74 69 6f 6e 4e 61 6d 65 3a 22 77 65 62 6e 6c 6e 65 77 73 22 2c 74 61 72 67 65 74 54 79 70 65 3a 22 54 6f 70 69 63 46 65 65 64 22 7d 2c 43 72 79 70 74 6f 3a 7b 64 65 66 69 6e 69 74 69 6f 6e 4e 61 6d 65 3a 22 53 65 67 6d 65 6e 74 5f 46 69 6e 61 6e 63 65 5f 43 72 79 70 74 6f 43 61 72 64 22 2c 74 61 72 67 65 74 54 79 70 65 3a 22 53 74 72 75 63 74 75 72 65 64 43 61 72 64 22 7d 2c 4d 61 72 6b 65 74 42 72 69 65 66 3a 7b 64 65 66 69 6e 69 74 69 6f 6e 4e 61 6d 65 3a 22 53 65 67 6d 65 6e 74 5f 46 69 6e 61 6e 63 65 5f 4d 61 72 6b 65 74 42 72 69 65 66 22 2c 74 61 72 67 65 74 54 79 70 65 3a 22 53 74 72 75 63 74 75 72 65 64 43 61 72 64 22 7d 2c 54 6f 70 53 74 6f 72 69 65 73 3a 7b 64 65 66 69 6e 69 74 69 6f 6e 4e 61 6d 65 3a 22 74 6f 70 73 74 6f 72 69 65 73 22 2c 74 61 Data Ascii: tionName:"webnlnews",targetType:"TopicFeed"},Crypto:{definitionName:"Segment_Finance_CryptoCard",targetType:"StructuredCard"},MarketBrief:{definitionName:"Segment_Finance_MarketBrief",targetType:"StructuredCard"},TopStories:{definitionName:"topstories",ta
2024-01-17 17:07:29 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 62 6c 69 73 68 65 72 42 75 74 74 6f 6e 54 65 78 74 7d 3c 2f 64 69 76 3e 3c 2f 66 6c 75 65 6e 74 2d 6d 65 6e 75 2d 69 74 65 6d 3e 3c 66 6c 75 65 6e 74 2d 6d 65 6e 75 2d 69 74 65 6d 20 74 61 62 69 6e 64 65 78 3d 22 30 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 24 7b 65 3d 3e 65 2e 72 65 70 6f 72 74 42 75 74 74 6f 6e 54 65 78 74 7d 20 74 69 74 6c 65 3d 24 7b 65 3d 3e 65 2e 72 65 70 6f 72 74 42 75 74 74 6f 6e 54 65 78 74 7d 20 69 64 3d 22 52 65 70 6f 72 74 22 20 40 63 68 61 6e 67 65 3d 24 7b 65 3d 3e 65 2e 6f 70 65 6e 52 65 70 6f 72 74 44 69 61 6c 6f 67 26 26 65 2e 6f 70 65 6e 52 65 70 6f 72 74 44 69 61 6c 6f 67 28 65 2e 63 75 72 72 65 6e 74 43 61 72 64 44 61 74 61 29 7d 20 73 6c 6f 74 3d 22 61 63 74 69 6f 6e 73 22 20 64 61 74 61 2d Data Ascii: 00006000blisherButtonText}</div></fluent-menu-item><fluent-menu-item tabindex="0" aria-label=${e=>e.reportButtonText} title=${e=>e.reportButtonText} id="Report" @change=${e=>e.openReportDialog&&e.openReportDialog(e.currentCardData)} slot="actions" data-
2024-01-17 17:07:29 UTC	8204	IN	Data Raw: 6f 6e 29 20 7b 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 73 74 61 74 69 63 3b 20 6d 61 72 67 69 6e 3a 20 32 36 70 78 20 30 70 78 20 30 70 78 20 30 70 78 3b 20 70 61 64 64 69 6e 67 3a 20 30 70 78 20 31 36 70 78 20 31 36 70 78 20 32 34 70 78 3b 20 7d 20 6d 73 6e 2d 68 69 64 65 2d 73 74 6f 72 79 2d 63 61 72 64 2e 72 65 70 6f 72 74 2d 61 64 20 66 6c 75 65 6e 74 2d 72 61 64 69 6f 2d 67 72 6f 75 70 20 7b 20 70 61 64 64 69 6e 67 3a 20 30 20 34 70 78 3b 20 68 65 69 67 68 74 3a 20 31 34 34 70 78 3b 20 6f 76 65 72 66 6c 6f 77 2d 79 3a 20 61 75 74 6f 3b 20 7d 20 6d 73 6e 2d 68 69 64 65 2d 73 74 6f 72 79 2d 63 61 72 64 2e 72 65 70 6f 72 74 2d 61 64 20 66 6c 75 65 6e 74 2d 62 75 74 74 6f 6e 20 7b 20 77 69 64 74 68 3a 20 34 35 25 Data Ascii: on) { display: block; position: static; margin: 26px 0px 0px 0px; padding: 0px 16px 16px 24px; } msn-hide-story-card.report-ad fluent-radio-group { padding: 0 4px; height: 144px; overflow-y: auto; } msn-hide-story-card.report-ad fluent-button { width: 45%
2024-01-17 17:07:29 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 6d 70 6c 61 74 65 3f 6c 2e 74 65 6d 70 6c 61 74 65 3a 6c 2e 70 6c 61 63 65 6d 65 6e 74 2e 74 65 6d 70 6c 61 74 65 2c 69 73 47 72 65 79 41 64 73 4c 61 62 65 6c 45 6e 61 62 6c 65 64 3a 63 26 26 63 2e 69 73 47 72 65 79 41 64 73 4c 61 62 65 6c 45 6e 61 62 6c 65 64 2c 75 73 65 53 68 6f 72 74 65 72 47 72 61 64 69 65 6e 74 3a 63 26 26 63 2e 75 73 65 53 68 6f 72 74 65 72 47 72 61 64 69 65 6e 74 2c 69 73 4e 6f 74 4e 74 70 52 69 76 65 72 3a 63 26 26 63 2e 69 73 4e 6f 74 4e 74 70 52 69 76 65 72 2c 69 73 4d 73 6e 48 50 41 64 53 6c 75 67 3a 63 26 26 63 2e 69 73 4d 73 6e 48 50 41 64 53 6c 75 67 2c 61 64 4c 61 62 65 6c 46 6f 6e 74 53 69 7a 65 3a 63 26 26 63 2e 61 64 4c 61 62 65 6c 46 6f 6e 74 53 69 7a 65 2c 64 69 73 61 62 6c 65 41 64 73 55 Data Ascii: 00004000mplate?l.template:l.placement.template,isGreyAdsLabelEnabled:c&&c.isGreyAdsLabelEnabled,useShorterGradient:c&&c.useShorterGradient,isNotNtpRiver:c&&c.isNotNtpRiver,isMsnHPAdSlug:c&&c.isMsnHPAdSlug,adLabelFontSize:c&&c.adLabelFontSize,disableAdsU
2024-01-17 17:07:29 UTC	12	IN	Data Raw: 20 20 20 20 20 20 20 20 20 62 0d 0a Data Ascii: b
2024-01-17 17:07:29 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 20 20 3c 66 6c 75 65 6e 74 2d 63 61 72 64 0a 20 20 20 20 20 20 20 20 69 64 3d 22 6e 61 74 69 76 65 5f 61 64 5f 24 7b 65 3d 3e 65 2e 69 64 7d 22 0a 20 20 20 20 20 20 20 20 73 74 79 6c 65 3d 22 67 72 69 64 2d 61 72 65 61 3a 24 7b 65 3d 3e 65 2e 67 72 69 64 41 72 65 61 7d 3b 68 65 69 67 68 74 3a 20 24 7b 65 3d 3e 65 2e 43 6f 6e 74 65 6e 74 43 61 72 64 49 6d 61 67 65 53 69 7a 65 73 2e 5f 33 30 30 78 33 30 34 2e 68 65 69 67 68 74 7d 70 78 3b 22 0a 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 24 7b 65 3d 3e 65 2e 63 61 72 64 53 69 7a 65 7d 22 0a 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 3c 6d 73 6e Data Ascii: 00004000order-radius: 100%; } </style> <fluent-card id="native_ad_${e=>e.id}" style="grid-area:${e=>e.gridArea};height: ${e=>e.ContentCardImageSizes._300x304.height}px;" class="${e=>e.cardSize}" > <msn
2024-01-17 17:07:29 UTC	12	IN	Data Raw: 29 7b 70 61 64 64 69 6e 67 3a 0d 0a Data Ascii: ){padding:
2024-01-17 17:07:30 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 30 7d 6d 73 66 74 2d 63 6f 6e 74 65 6e 74 2d 63 61 72 64 2e 6e 61 74 69 76 65 41 64 56 69 64 65 6f 2d 72 69 76 65 72 3a 3a 70 61 72 74 28 6d 65 64 69 61 29 7b 7a 2d 69 6e 64 65 78 3a 32 7d 6d 73 66 74 2d 63 6f 6e 74 65 6e 74 2d 63 61 72 64 3a 3a 70 61 72 74 28 66 6f 6f 74 65 72 29 7b 70 61 64 64 69 6e 67 3a 30 20 31 36 70 78 20 34 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 68 65 69 67 68 74 3a 34 30 70 78 7d 6d 73 66 74 2d 63 6f 6e 74 65 6e 74 2d 63 61 72 64 2e 77 69 64 65 49 63 6f 6e 4d 61 72 67 69 6e 20 6d 73 66 74 2d 61 64 2d 6c 61 62 65 6c 7b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 65 6e 64 3a 38 70 78 7d 6d 73 66 74 2d 61 74 74 72 69 62 75 74 69 6f 6e 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 Data Ascii: 000040000}msft-content-card.nativeAdVideo-river::part(media){z-index:2}msft-content-card::part(footer){padding:0 16px 4px;margin-bottom:0;height:40px}msft-content-card.wideIconMargin msft-ad-label{margin-inline-end:8px}msft-attribution{position:relative
2024-01-17 17:07:30 UTC	12	IN	Data Raw: 70 6c 61 74 65 26 26 4e 75 6d 0d 0a Data Ascii: plate&&Num

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.16	49984	20.25.228.187	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:29 UTC	607	OUT	POST /api/browser/edge/navigate/3 HTTP/1.1 Host: nav-edge.smartscreen.microsoft.com Connection: keep-alive Content-Length: 1600 Authorization: SmartScreenHash eyJhdXRoSWQiOiI0MWE0MzhiYy0xMjQ5LTQzZDMtYTI2ZC02OWNkNjJjMDgzMTciLCAia2V5IjoiaEE0ZDU0dGpNbDVrK0UwcVhjZm5Fdz09IiwgImhhc2giOiJYdmZoUzB4ek9WZz0ifQ== Content-Type: application/json; charset=utf-8 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept-Encoding: gzip, deflate, br
2024-01-17 17:07:29 UTC	1600	OUT	Data Raw: 7b 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 20 45 64 67 2f 31 31 37 2e 30 2e 32 30 34 35 2e 34 37 22 2c 22 69 64 65 6e 74 69 74 79 22 3a 7b 22 75 73 65 72 22 3a 7b 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 47 42 22 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 69 64 22 3a 6e 75 6c 6c 2c 22 63 75 73 74 6f 6d 49 64 22 3a 6e 75 6c 6c 2c 22 6f 6e 6c 69 6e 65 49 64 54 69 63 6b 65 74 22 3a 22 74 3d 47 77 41 57 41 64 39 74 42 41 41 55 34 4d 69 6a Data Ascii: {"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47","identity":{"user":{"locale":"en-GB"},"device":{"id":null,"customId":null,"onlineIdTicket":"t=GwAWAd9tBAAU4Mij
2024-01-17 17:07:30 UTC	263	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:30 GMT Content-Type: application/json; charset=utf-8 Content-Length: 852 Connection: close Server: Kestrel Cache-Control: max-age=0, private Request-Context: appId=cid-v1:46ea1a4d-29cb-4e7e-a1ff-735721467fe3
2024-01-17 17:07:30 UTC	852	IN	Data Raw: 7b 22 61 63 74 69 6f 6e 73 22 3a 5b 7b 22 24 74 79 70 65 22 3a 22 63 61 63 68 65 22 2c 22 6b 65 79 22 3a 7b 22 75 72 69 22 3a 22 67 6f 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 22 2c 22 69 6e 68 65 72 69 74 61 6e 63 65 22 3a 22 6e 6f 6e 65 22 7d 2c 22 6d 61 78 41 67 65 22 3a 31 30 30 38 30 30 30 30 30 30 30 30 2c 22 73 65 72 76 65 72 43 6f 6e 74 65 78 74 22 3a 22 31 3b 63 35 66 61 61 64 35 39 2d 61 32 65 33 2d 33 31 66 32 2d 62 38 36 65 2d 61 61 66 39 35 38 65 31 32 38 32 34 3b 50 48 53 48 3a 30 30 35 3b 37 45 2d 30 35 22 2c 22 72 65 73 70 6f 6e 73 65 43 61 74 65 67 6f 72 79 22 3a 22 41 6c 6c 6f 77 65 64 22 2c 22 72 65 73 75 6c 74 22 3a 7b 22 24 74 79 70 65 22 3a 22 61 6c 6c 6f 77 22 7d 7d 5d 2c 22 73 65 72 76 65 72 43 6f 6e 74 65 78 74 22 3a 22 31 3b 63 Data Ascii: {"actions":[{"$type":"cache","key":{"uri":"go.microsoft.com","inheritance":"none"},"maxAge":100800000000,"serverContext":"1;c5faad59-a2e3-31f2-b86e-aaf958e12824;PHSH:005;7E-05","responseCategory":"Allowed","result":{"$type":"allow"}}],"serverContext":"1;c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.16	49985	23.47.169.232	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:29 UTC	831	OUT	GET /edge/welcome?form=MT00LJ HTTP/1.1 Host: www.microsoft.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version: "117.0.2045.47" sec-ch-ua-arch: "x86" sec-ch-ua-bitness: "64" Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:30 UTC	745	IN	HTTP/1.1 302 Moved Temporarily Content-Length: 148 Content-Type: text/html; charset=utf-8 Location: /en-gb/edge/welcome?ep=254&form=MT00L7&es=59 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Origin-Agent-Cluster: ?1 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 x-azure-ref: 20240117T170730Z-dd588tk04p2x1ekd6dcqn3xm9000000000b00000000073xb Expires: Wed, 17 Jan 2024 17:07:30 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 17 Jan 2024 17:07:30 GMT Connection: close TLS_version: tls1.3 ms-cv: CASMicrosoftCV3822a60b.0 ms-cv-esi: CASMicrosoftCV3822a60b.0 X-RTag: RT
2024-01-17 17:07:30 UTC	148	IN	Data Raw: 3c 70 3e 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 65 6e 2d 67 62 2f 65 64 67 65 2f 77 65 6c 63 6f 6d 65 3f 65 70 3d 32 35 34 26 61 6d 70 3b 66 6f 72 6d 3d 4d 54 30 30 4c 37 26 61 6d 70 3b 65 73 3d 35 39 22 3e 2f 65 6e 2d 67 62 2f 65 64 67 65 2f 77 65 6c 63 6f 6d 65 3f 65 70 3d 32 35 34 26 61 6d 70 3b 66 6f 72 6d 3d 4d 54 30 30 4c 37 26 61 6d 70 3b 65 73 3d 35 39 3c 2f 61 3e 3c 2f 70 3e Data Ascii: <p>Found. Redirecting to <a href="/en-gb/edge/welcome?ep=254&form=MT00L7&es=59">/en-gb/edge/welcome?ep=254&form=MT00L7&es=59</a></p>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.16	49988	20.25.228.187	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:30 UTC	607	OUT	POST /api/browser/edge/navigate/3 HTTP/1.1 Host: nav-edge.smartscreen.microsoft.com Connection: keep-alive Content-Length: 1599 Authorization: SmartScreenHash eyJhdXRoSWQiOiI0MWE0MzhiYy0xMjQ5LTQzZDMtYTI2ZC02OWNkNjJjMDgzMTciLCAia2V5IjoiUG9FeklsUGFwSHMwOUVxTjd0VmRiZz09IiwgImhhc2giOiJzeUFQYlJXMkZYRT0ifQ== Content-Type: application/json; charset=utf-8 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept-Encoding: gzip, deflate, br
2024-01-17 17:07:30 UTC	1599	OUT	Data Raw: 7b 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 20 45 64 67 2f 31 31 37 2e 30 2e 32 30 34 35 2e 34 37 22 2c 22 69 64 65 6e 74 69 74 79 22 3a 7b 22 75 73 65 72 22 3a 7b 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 47 42 22 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 69 64 22 3a 6e 75 6c 6c 2c 22 63 75 73 74 6f 6d 49 64 22 3a 6e 75 6c 6c 2c 22 6f 6e 6c 69 6e 65 49 64 54 69 63 6b 65 74 22 3a 22 74 3d 47 77 41 57 41 64 39 74 42 41 41 55 34 4d 69 6a Data Ascii: {"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47","identity":{"user":{"locale":"en-GB"},"device":{"id":null,"customId":null,"onlineIdTicket":"t=GwAWAd9tBAAU4Mij
2024-01-17 17:07:30 UTC	263	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:30 GMT Content-Type: application/json; charset=utf-8 Content-Length: 895 Connection: close Server: Kestrel Cache-Control: max-age=0, private Request-Context: appId=cid-v1:46ea1a4d-29cb-4e7e-a1ff-735721467fe3
2024-01-17 17:07:30 UTC	895	IN	Data Raw: 7b 22 61 63 74 69 6f 6e 73 22 3a 5b 7b 22 24 74 79 70 65 22 3a 22 63 61 63 68 65 22 2c 22 6b 65 79 22 3a 7b 22 75 72 69 22 3a 22 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 65 6e 2d 67 62 2f 65 64 67 65 2f 77 65 6c 63 6f 6d 65 3f 65 70 3d 32 35 34 26 66 6f 72 6d 3d 6d 74 30 30 6c 37 26 65 73 3d 35 39 22 2c 22 69 6e 68 65 72 69 74 61 6e 63 65 22 3a 22 6e 6f 6e 65 22 7d 2c 22 6d 61 78 41 67 65 22 3a 31 30 30 38 30 30 30 30 30 30 30 30 2c 22 73 65 72 76 65 72 43 6f 6e 74 65 78 74 22 3a 22 31 3b 66 39 34 63 30 32 35 66 2d 37 35 32 33 2d 36 39 37 32 2d 62 36 31 33 2d 63 65 32 63 32 34 36 63 35 35 63 65 3b 55 4e 4b 4e 3a 31 30 30 3b 30 2e 30 31 22 2c 22 72 65 73 70 6f 6e 73 65 43 61 74 65 67 6f 72 79 22 3a 22 41 6c 6c 6f 77 65 64 22 2c 22 72 65 73 75 Data Ascii: {"actions":[{"$type":"cache","key":{"uri":"www.microsoft.com/en-gb/edge/welcome?ep=254&form=mt00l7&es=59","inheritance":"none"},"maxAge":100800000000,"serverContext":"1;f94c025f-7523-6972-b613-ce2c246c55ce;UNKN:100;0.01","responseCategory":"Allowed","resu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.16	49990	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:30 UTC	506	OUT	GET /bundles/v1/edgeChromium/latest/nas-highlight-v3v4.e4e248522529ebc8634f.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:30 UTC	1149	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: Hy/X06UuLa9ghLhuiptdOA== Last-Modified: Mon, 08 Jan 2024 16:46:12 GMT ETag: 0x8DC106952AFB193 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 7fbd6dd4-b01e-0058-4f52-42519c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:30 GMT Content-Length: 45131 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89886813,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=1, origin; dur=0 , cdntime; dur=1 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b905d Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511250.55b905d Vary: Origin
2024-01-17 17:07:30 UTC	15235	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6e 61 73 2d 68 69 67 68 6c 69 67 68 74 2d 76 33 76 34 22 5d 2c 7b 33 32 33 35 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6f 29 7b 6f 2e 64 28 65 2c 7b 51 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 3b 63 6f 6e 73 74 20 69 3d 7b 54 65 6e 6f 72 69 74 65 3a 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2e 6d 73 6e 2e 63 6f 6d 2f 73 74 61 74 69 63 73 62 2f 73 74 61 74 69 63 73 2f 6c 61 74 65 73 Data Ascii: "use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["nas-highlight-v3v4"],{32356:function(t,e,o){o.d(e,{Q:function(){return r}});const i={Tenorite:"https://assets.msn.com/staticsb/statics/lates
2024-01-17 17:07:30 UTC	9341	IN	Data Raw: 29 28 7b 6e 61 6d 65 3a 22 64 65 63 6f 72 61 74 69 6f 6e 2d 70 72 69 63 65 2d 73 74 72 69 6b 65 2d 74 68 72 6f 75 67 68 22 2c 74 65 6d 70 6c 61 74 65 3a 6c 7d 29 5d 2c 66 29 2c 6e 2e 4c 3b 63 6f 6e 73 74 20 6d 3d 72 2e 64 79 60 3c 70 75 72 65 2d 74 65 78 74 20 63 6f 6e 74 65 6e 74 3d 22 24 7b 74 3d 3e 74 2e 64 61 74 61 7d 22 20 6c 69 67 68 74 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 3d 24 7b 74 3d 3e 28 30 2c 61 2e 64 65 29 28 74 2e 69 73 49 6e 66 6f 50 61 6e 65 29 7d 20 64 61 72 6b 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 3d 24 7b 74 3d 3e 28 30 2c 61 2e 6f 41 29 28 74 2e 69 73 49 6e 66 6f 50 61 6e 65 29 7d 20 2f 3e 60 3b 6c 65 74 20 79 3d 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 70 2e 67 7b 7d 3b 79 3d 28 30 2c 69 2e 67 6e 29 28 5b 28 30 2c 67 2e 4d 29 28 7b 6e Data Ascii: )({name:"decoration-price-strike-through",template:l})],f),n.L;const m=r.dy`<pure-text content="${t=>t.data}" light-theme-color=${t=>(0,a.de)(t.isInfoPane)} dark-theme-color=${t=>(0,a.oA)(t.isInfoPane)} />`;let y=class extends p.g{};y=(0,i.gn)([(0,g.M)({n
2024-01-17 17:07:30 UTC	16384	IN	Data Raw: 35 2e 39 39 39 39 39 20 31 2e 30 35 38 33 31 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 75 72 6c 28 23 70 61 69 6e 74 30 5f 6c 69 6e 65 61 72 29 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 22 20 6d 61 73 6b 2d 74 79 70 65 3d 22 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 36 22 20 68 65 69 67 68 74 3d 22 31 32 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 65 63 74 20 77 69 64 74 68 3d 22 36 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 66 69 6c 6c 3d 22 23 43 34 43 34 43 34 22 3e 3c 2f 72 65 63 74 3e 0a 20 20 20 20 20 20 20 20 3c 2f 6d 61 73 6b 3e 0a 20 20 20 20 20 20 Data Ascii: 5.99999 1.05831Z" fill="url(#paint0_linear)"></path> <mask id="mask0" mask-type="alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="6" height="12"> <rect width="6" height="12" fill="#C4C4C4"></rect> </mask>
2024-01-17 17:07:30 UTC	4171	IN	Data Raw: 20 30 29 2c 28 30 2c 69 2e 67 6e 29 28 5b 28 30 2c 72 2e 4c 6a 29 28 7b 61 74 74 72 69 62 75 74 65 3a 22 66 6f 6e 74 2d 73 69 7a 65 22 7d 29 5d 2c 70 2e 70 72 6f 74 6f 74 79 70 65 2c 22 66 6f 6e 74 53 69 7a 65 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 69 2e 67 6e 29 28 5b 28 30 2c 72 2e 4c 6a 29 28 7b 61 74 74 72 69 62 75 74 65 3a 22 66 6f 6e 74 2d 77 65 69 67 68 74 22 7d 29 5d 2c 70 2e 70 72 6f 74 6f 74 79 70 65 2c 22 66 6f 6e 74 57 65 69 67 68 74 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 69 2e 67 6e 29 28 5b 28 30 2c 72 2e 4c 6a 29 28 7b 61 74 74 72 69 62 75 74 65 3a 22 74 65 78 74 2d 63 6f 6c 6f 72 22 7d 29 5d 2c 70 2e 70 72 6f 74 6f 74 79 70 65 2c 22 74 65 78 74 43 6f 6c 6f 72 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 69 2e 67 6e 29 28 5b 28 30 2c 72 2e 4c 6a Data Ascii: 0),(0,i.gn)([(0,r.Lj)({attribute:"font-size"})],p.prototype,"fontSize",void 0),(0,i.gn)([(0,r.Lj)({attribute:"font-weight"})],p.prototype,"fontWeight",void 0),(0,i.gn)([(0,r.Lj)({attribute:"text-color"})],p.prototype,"textColor",void 0),(0,i.gn)([(0,r.Lj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.16	49989	23.47.169.232	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:30 UTC	850	OUT	GET /en-gb/edge/welcome?ep=254&form=MT00L7&es=59 HTTP/1.1 Host: www.microsoft.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.2045.47" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-bitness: "64" Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:31 UTC	2182	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 ETag: "15bc9-u21bO4+YNg33PhOudjqUPf/fjsQ" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Origin-Agent-Cluster: ?1 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 Content-Security-Policy: default-src 'self' https://edgestatic.azureedge.net https://.microsoft.com; script-src 'self' 'self' 'unsafe-eval' 'unsafe-inline' https://ajax.aspnetcdn.com https://az725175.vo.msecnd.net https://.microsoft.com https://mem.gfx.ms https://edgestatic.azureedge.net https://js.monitor.azure.com https://mwf-service.akamaized.net https://.clarity.ms https://.bing.com http://.bing.com https://acdn.adnxs.com https://connect.facebook.net https://snap.licdn.com; style-src 'self' 'unsafe-inline' https://.microsoft.com https://statics-marketingsites-wcus-ms-com.akamaized.net https://statics-marketingsites-eus-ms-com.akamaized.net https://statics-marketingsites-neu-ms-com.akamaized.net https://statics-marketingsites-eas-ms-com.akamaized.net https://edgestatic.azureedge.net; font-src 'self' data: https://.microsoft.com http://c.s-microsoft.com https://c.s-microsoft.com https://edgestatic.azureedge.net; connect-src 'self' http://.microsoft.com https://.microsoft.com https://.bing.com https://.clarity.ms https://js.monitor.azure.com https://edgestatic.azureedge.net https://consentreceiverfd-prod.azurefd.net https://cdn.linkedin.oribi.io https://.linkedin.com https://boost.mediation.trafficmanager.net; frame-src 'self' http://.microsoft.com https://.microsoft.com https://.msn.com https://.msn.cn https://.bing.com https://www.youtube-nocookie.com; frame-ancestors 'self' https://.microsoft.com https://.bing.com; img-src data:; media-src 'self' https://edgestatic.azureedge.net x-azure-ref: 20240117T170730Z-mm5w5u30yd1k91e2qs8153sgr400000000dg000000002c6m Date: Wed, 17 Jan 2024 17:07:31 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding TLS_version: tls1.3 ms-cv: CASMicrosoftCV473d243b.0 ms-cv-esi: CASMicrosoftCV473d243b.0 X-RTag: RT
2024-01-17 17:07:31 UTC	14202	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 6e 2d 68 65 61 64 2d 73 73 72 20 6c 61 6e 67 3d 22 65 6e 2d 67 62 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 6e 2d 68 65 61 64 3d 22 25 37 42 25 32 32 6c 61 6e 67 25 32 32 3a 25 37 42 25 32 32 73 73 72 25 32 32 3a 25 32 32 65 6e 2d 67 62 25 32 32 25 37 44 2c 25 32 32 64 69 72 25 32 32 3a 25 37 42 25 32 32 73 73 72 25 32 32 3a 25 32 32 6c 74 72 25 32 32 25 37 44 25 37 44 22 3e 0a 20 20 3c 68 65 61 64 20 3e 0a 20 20 20 20 3c 6d 65 74 61 20 64 61 74 61 2d 6e 2d 68 65 61 64 3d 22 73 73 72 22 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 64 61 74 61 2d 6e 2d 68 65 61 64 3d 22 73 73 72 22 20 6e 61 6d 65 3d 22 76 69 65 77 Data Ascii: 00006000<!doctype html><html data-n-head-ssr lang="en-gb" dir="ltr" data-n-head="%7B%22lang%22:%7B%22ssr%22:%22en-gb%22%7D,%22dir%22:%7B%22ssr%22:%22ltr%22%7D%7D"> <head > <meta data-n-head="ssr" charset="utf-8"><meta data-n-head="ssr" name="view
2024-01-17 17:07:31 UTC	10386	IN	Data Raw: 73 2f 65 64 67 65 2f 77 65 6c 63 6f 6d 65 3f 65 70 3d 32 35 34 26 61 6d 70 3b 66 6f 72 6d 3d 4d 54 30 30 4c 37 26 61 6d 70 3b 65 73 3d 35 39 22 20 68 72 65 66 6c 61 6e 67 3d 22 65 73 22 3e 3c 6c 69 6e 6b 20 64 61 74 61 2d 6e 2d 68 65 61 64 3d 22 73 73 72 22 20 64 61 74 61 2d 68 69 64 3d 22 69 31 38 6e 2d 61 6c 74 2d 65 73 2d 65 73 22 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 65 73 2d 65 73 2f 65 64 67 65 2f 77 65 6c 63 6f 6d 65 3f 65 70 3d 32 35 34 26 61 6d 70 3b 66 6f 72 6d 3d 4d 54 30 30 4c 37 26 61 6d 70 3b 65 73 3d 35 39 22 20 68 72 65 66 6c 61 6e 67 3d 22 65 73 2d 65 73 22 3e 3c 6c 69 6e 6b 20 64 61 74 61 2d 6e 2d 68 65 61 64 3d 22 73 73 72 22 20 Data Ascii: s/edge/welcome?ep=254&form=MT00L7&es=59" hreflang="es"><link data-n-head="ssr" data-hid="i18n-alt-es-es" rel="alternate" href="https://www.microsoft.com/es-es/edge/welcome?ep=254&form=MT00L7&es=59" hreflang="es-es"><link data-n-head="ssr"
2024-01-17 17:07:31 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 6d 6c 2d 69 6e 2f 65 64 67 65 2f 77 65 6c 63 6f 6d 65 3f 65 70 3d 32 35 34 26 61 6d 70 3b 66 6f 72 6d 3d 4d 54 30 30 4c 37 26 61 6d 70 3b 65 73 3d 35 39 22 20 68 72 65 66 6c 61 6e 67 3d 22 6d 6c 2d 69 6e 22 3e 3c 6c 69 6e 6b 20 64 61 74 61 2d 6e 2d 68 65 61 64 3d 22 73 73 72 22 20 64 61 74 61 2d 68 69 64 3d 22 69 31 38 6e 2d 61 6c 74 2d 6d 72 22 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 6d 72 2d 69 6e 2f 65 64 67 65 2f 77 65 6c 63 6f 6d 65 3f 65 70 3d 32 35 34 26 61 6d 70 3b 66 6f 72 6d 3d 4d 54 30 30 4c 37 26 61 6d 70 3b 65 73 3d 35 39 22 20 68 72 65 66 6c 61 6e 67 Data Ascii: 00006000/www.microsoft.com/ml-in/edge/welcome?ep=254&form=MT00L7&es=59" hreflang="ml-in"><link data-n-head="ssr" data-hid="i18n-alt-mr" rel="alternate" href="https://www.microsoft.com/mr-in/edge/welcome?ep=254&form=MT00L7&es=59" hreflang
2024-01-17 17:07:31 UTC	8204	IN	Data Raw: 37 63 30 2d 33 2e 32 20 32 2e 36 2d 35 2e 38 20 35 2e 38 2d 35 2e 38 68 39 2e 39 6c 2d 33 2e 31 20 31 31 2e 36 48 37 2e 34 63 2d 33 2e 32 20 30 2d 35 2e 38 2d 32 2e 36 2d 35 2e 38 2d 35 2e 38 7a 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 2d 72 75 6c 65 3a 65 76 65 6e 6f 64 64 3b 63 6c 69 70 2d 72 75 6c 65 3a 65 76 65 6e 6f 64 64 3b 66 69 6c 6c 3a 23 30 36 66 3b 22 3e 3c 2f 70 61 74 68 3e 20 3c 70 61 74 68 20 64 3d 22 4d 32 34 2e 36 20 34 63 2e 32 2e 32 2e 32 2e 36 20 30 20 2e 38 4c 32 32 2e 35 20 37 6c 32 2e 32 20 32 2e 32 63 2e 32 2e 32 2e 32 2e 36 20 30 20 2e 38 2d 2e 32 2e 32 2d 2e 36 2e 32 2d 2e 38 20 30 6c 2d 32 2e 32 2d 32 2e 32 2d 32 2e 32 20 32 2e 32 63 2d 2e 32 2e 32 2d 2e 36 2e 32 2d 2e 38 20 30 2d 2e 32 2d 2e 32 2d 2e 32 2d 2e 36 20 30 2d 2e 38 4c Data Ascii: 7c0-3.2 2.6-5.8 5.8-5.8h9.9l-3.1 11.6H7.4c-3.2 0-5.8-2.6-5.8-5.8z" style="fill-rule:evenodd;clip-rule:evenodd;fill:#06f;"></path> <path d="M24.6 4c.2.2.2.6 0 .8L22.5 7l2.2 2.2c.2.2.2.6 0 .8-.2.2-.6.2-.8 0l-2.2-2.2-2.2 2.2c-.2.2-.6.2-.8 0-.2-.2-.2-.6 0-.8L
2024-01-17 17:07:31 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 77 69 64 74 68 3a 31 34 34 31 2c 68 65 69 67 68 74 3a 37 38 38 7d 2c 66 72 61 6d 65 3a 63 2c 61 6c 74 3a 61 2c 66 69 74 3a 70 2c 70 6f 73 69 74 69 6f 6e 3a 71 2c 6d 61 78 57 69 64 74 68 3a 61 2c 61 6c 69 67 6e 58 3a 61 2c 61 6c 69 67 6e 59 3a 61 2c 73 74 72 65 74 63 68 54 6f 46 69 6c 6c 3a 61 2c 6c 61 79 65 72 73 3a 5b 5d 2c 6d 65 64 69 61 41 63 74 69 6f 6e 3a 7b 6d 65 64 69 61 41 63 74 69 6f 6e 55 72 6c 3a 63 2c 6d 65 64 69 61 41 63 74 69 6f 6e 4d 65 73 73 61 67 65 53 74 79 6c 65 3a 61 2c 6d 65 64 69 61 41 63 74 69 6f 6e 4d 65 73 73 61 67 65 3a 61 2c 6d 65 64 69 61 41 63 74 69 6f 6e 55 72 6c 4e 65 77 54 61 62 3a 61 7d 2c 6d 65 64 69 61 41 63 74 69 6f 6e 73 3a 5b 5d 7d 2c 61 63 74 69 6f 6e 4d 65 64 69 61 3a 62 2c 68 65 61 64 Data Ascii: 00004000width:1441,height:788},frame:c,alt:a,fit:p,position:q,maxWidth:a,alignX:a,alignY:a,stretchToFill:a,layers:[],mediaAction:{mediaActionUrl:c,mediaActionMessageStyle:a,mediaActionMessage:a,mediaActionUrlNewTab:a},mediaActions:[]},actionMedia:b,head
2024-01-17 17:07:31 UTC	12	IN	Data Raw: 73 22 7d 2c 7b 74 79 70 65 3a 0d 0a Data Ascii: s"},{type:
2024-01-17 17:07:31 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 6b 2c 6c 61 62 65 6c 3a 22 43 6f 6c 6c 65 63 74 69 6f 6e 73 22 2c 62 75 74 74 6f 6e 56 61 72 69 61 6e 74 3a 63 2c 65 63 69 64 41 63 74 69 6f 6e 3a 65 2c 69 63 6f 6e 3a 62 2c 69 63 6f 6e 53 69 7a 65 3a 61 2c 63 75 73 74 6f 6d 41 63 74 69 6f 6e 49 64 3a 61 2c 70 6f 70 75 70 3a 7b 63 6f 6c 6f 72 53 63 68 65 6d 65 3a 61 2c 62 61 63 6b 67 72 6f 75 6e 64 3a 62 2c 68 65 61 64 69 6e 67 3a 22 4f 72 67 61 6e 69 73 65 20 61 6e 64 20 73 61 76 65 20 79 6f 75 72 20 69 64 65 61 73 20 77 69 74 68 20 43 6f 6c 6c 65 63 74 69 6f 6e 73 22 2c 64 65 73 63 72 69 70 74 69 6f 6e 3a 22 43 6f 6c 6c 65 63 74 69 6f 6e 73 20 68 65 6c 70 20 79 6f 75 20 6b 65 65 70 20 74 72 61 63 6b 20 6f 66 20 79 6f 75 72 20 69 64 65 61 73 20 6f 6e 20 74 68 65 20 77 65 62 Data Ascii: 00004000k,label:"Collections",buttonVariant:c,ecidAction:e,icon:b,iconSize:a,customActionId:a,popup:{colorScheme:a,background:b,heading:"Organise and save your ideas with Collections",description:"Collections help you keep track of your ideas on the web
2024-01-17 17:07:31 UTC	12	IN	Data Raw: 69 6f 6e 3a 7b 74 79 70 65 3a 0d 0a Data Ascii: ion:{type:
2024-01-17 17:07:31 UTC	7125	IN	Data Raw: 30 30 30 30 31 42 43 39 0d 0a 22 6d 6f 62 69 6c 65 22 2c 6c 61 62 65 6c 3a 61 64 2c 62 75 74 74 6f 6e 56 61 72 69 61 6e 74 3a 4c 2c 65 63 69 64 41 63 74 69 6f 6e 3a 65 2c 69 63 6f 6e 3a 62 2c 69 63 6f 6e 53 69 7a 65 3a 61 2c 63 75 73 74 6f 6d 41 63 74 69 6f 6e 49 64 3a 61 7d 7d 2c 7b 68 65 61 64 69 6e 67 3a 22 44 69 73 63 6f 76 65 72 20 6d 6f 72 65 20 66 65 61 74 75 72 65 73 22 2c 64 65 73 63 72 69 70 74 69 6f 6e 3a 22 4c 65 61 72 6e 20 61 62 6f 75 74 20 74 68 65 20 65 61 73 79 2d 74 6f 2d 75 73 65 20 62 75 69 6c 74 2d 69 6e 20 74 6f 6f 6c 73 20 74 68 61 74 20 68 65 6c 70 20 70 72 6f 74 65 63 74 20 79 6f 75 20 6f 6e 6c 69 6e 65 2c 20 69 6d 70 72 6f 76 65 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 61 6e 64 20 73 61 76 65 20 6d 6f 6e 65 79 20 77 68 65 6e 20 79 Data Ascii: 00001BC9"mobile",label:ad,buttonVariant:L,ecidAction:e,icon:b,iconSize:a,customActionId:a}},{heading:"Discover more features",description:"Learn about the easy-to-use built-in tools that help protect you online, improve performance and save money when y
2024-01-17 17:07:31 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.16	49993	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:30 UTC	506	OUT	GET /bundles/v1/edgeChromium/latest/nativeadstemplates.28fc2d89edd62e8e6701.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:31 UTC	1188	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: AO+iknTZTrtF/2PNZhGjEg== Last-Modified: Mon, 08 Jan 2024 16:46:14 GMT ETag: 0x8DC106953F872AF Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 4ee3c298-701e-00fc-5252-423bf2000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:31 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Akamai-Request-BC: [a=23.218.242.10,b=89887796,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=10, origin; dur=0 , cdntime; dur=10 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b9434 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511251.55b9434 Vary: Origin
2024-01-17 17:07:31 UTC	15196	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6e 61 74 69 76 65 61 64 73 74 65 6d 70 6c 61 74 65 73 22 5d 2c 7b 39 38 37 39 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6f 29 7b 6f 2e 64 28 65 2c 7b 4e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 7d 29 3b 63 6f 6e 73 74 20 69 3d 5b 22 70 72 67 2d 77 70 6f 2d 73 73 22 2c 22 70 72 67 2d 64 72 2d 69 6e 66 6f 70 61 6e 65 63 22 2c 22 70 72 67 2d 74 69 74 6c 65 2d 32 22 Data Ascii: 00006000"use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["nativeadstemplates"],{98790:function(t,e,o){o.d(e,{N:function(){return i}});const i=["prg-wpo-ss","prg-dr-infopanec","prg-title-2"
2024-01-17 17:07:31 UTC	9392	IN	Data Raw: 20 31 30 32 34 20 31 34 34 33 20 33 6c 39 30 20 39 30 2d 39 33 30 20 39 33 31 20 39 33 30 20 39 33 31 2d 39 30 20 39 30 7a 22 20 2f 3e 5c 6e 3c 2f 73 76 67 3e 5c 6e 27 29 7d 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 60 29 7d 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 61 72 6f 75 73 65 6c 2d 63 6f 6e 74 65 6e 74 22 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 20 24 7b 74 3d 3e 74 2e 63 61 72 6f 75 73 65 6c 57 69 64 74 68 7d 70 78 3b 20 68 65 69 67 68 74 3a 20 24 7b 74 3d 3e 74 2e 63 61 72 6f 75 73 65 6c 48 65 69 67 68 74 7d 70 78 3b 22 3e 3c 73 6c 6f 74 20 24 7b 28 30 2c 78 2e 69 29 28 22 63 61 72 6f 75 73 65 6c 43 6f 6e 74 65 6e 74 22 29 7d 3e 3c 2f 73 6c 6f 74 3e 3c 2f 64 69 76 3e 24 7b 28 30 2c 6d 2e 67 29 28 28 74 3d 3e 74 2e 69 73 53 68 6f 77 53 6c 69 64 65 43 6f Data Ascii: 1024 1443 3l90 90-930 931 930 931-90 90z" />\n</svg>\n')}</div></div>`)}<div class="carousel-content" style="width: ${t=>t.carouselWidth}px; height: ${t=>t.carouselHeight}px;"><slot ${(0,x.i)("carouselContent")}></slot></div>${(0,m.g)((t=>t.isShowSlideCo
2024-01-17 17:07:31 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 3b 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 2e 69 6e 66 6f 2d 70 61 6e 65 20 2e 62 61 64 67 65 2d 69 63 6f 6e 20 70 61 74 68 2c 2e 72 69 76 65 72 20 2e 62 61 64 67 65 2d 69 63 6f 6e 20 70 61 74 68 7b 66 69 6c 6c 3a 23 46 46 46 46 46 46 7d 60 2c 76 3d 75 2e 69 60 2e 72 69 76 65 72 20 2e 69 6d 61 67 65 2d 62 61 64 67 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 35 34 29 7d 2e 72 69 76 65 72 20 2e 69 6d 61 67 65 2d 62 61 64 67 65 20 2e 62 61 64 67 65 2d 74 65 78 74 7b 70 6f 73 69 74 69 6f 6e 3a 73 74 61 74 69 63 3b 77 69 64 74 68 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 31 36 70 78 3b 6c 65 66 74 3a 32 32 70 78 3b 74 6f 70 3a 32 70 78 3b 66 6f 6e 74 2d 73 74 Data Ascii: 00006000orm:uppercase;color:#FFFFFF}.info-pane .badge-icon path,.river .badge-icon path{fill:#FFFFFF}`,v=u.i`.river .image-badge{background:rgba(0,0,0,0.54)}.river .image-badge .badge-text{position:static;width:auto;height:16px;left:22px;top:2px;font-st
2024-01-17 17:07:31 UTC	8204	IN	Data Raw: 37 31 31 43 32 39 2e 33 33 37 36 20 32 38 2e 32 31 30 39 20 33 30 2e 31 32 31 31 20 32 37 2e 34 32 37 34 20 33 30 2e 31 32 31 31 20 32 36 2e 34 36 30 39 56 31 31 2e 39 36 30 39 43 33 30 2e 31 32 31 31 20 31 30 2e 39 39 34 34 20 32 39 2e 33 33 37 36 20 31 30 2e 32 31 30 39 20 32 38 2e 33 37 31 31 20 31 30 2e 32 31 30 39 48 32 34 2e 38 37 31 31 5a 4d 32 34 2e 36 32 31 31 20 31 31 2e 39 36 30 39 43 32 34 2e 36 32 31 31 20 31 31 2e 38 32 32 39 20 32 34 2e 37 33 33 20 31 31 2e 37 31 30 39 20 32 34 2e 38 37 31 31 20 31 31 2e 37 31 30 39 48 32 38 2e 33 37 31 31 43 32 38 2e 35 30 39 32 20 31 31 2e 37 31 30 39 20 32 38 2e 36 32 31 31 20 31 31 2e 38 32 32 39 20 32 38 2e 36 32 31 31 20 31 31 2e 39 36 30 39 56 32 36 2e 34 36 30 39 43 32 38 2e 36 32 31 31 20 32 36 2e Data Ascii: 711C29.3376 28.2109 30.1211 27.4274 30.1211 26.4609V11.9609C30.1211 10.9944 29.3376 10.2109 28.3711 10.2109H24.8711ZM24.6211 11.9609C24.6211 11.8229 24.733 11.7109 24.8711 11.7109H28.3711C28.5092 11.7109 28.6211 11.8229 28.6211 11.9609V26.4609C28.6211 26.
2024-01-17 17:07:31 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 3d 22 68 65 61 64 69 6e 67 2d 77 72 61 70 70 65 72 22 20 72 6f 6c 65 3d 22 68 65 61 64 69 6e 67 22 20 61 72 69 61 2d 6c 65 76 65 6c 3d 33 3e 3c 61 20 63 6c 61 73 73 3d 22 68 65 61 64 69 6e 67 22 20 70 61 72 74 3d 22 68 65 61 64 69 6e 67 22 20 68 72 65 66 3d 24 7b 74 3d 3e 74 2e 64 65 73 74 69 6e 61 74 69 6f 6e 55 72 6c 3f 74 2e 64 65 73 74 69 6e 61 74 69 6f 6e 55 72 6c 3a 76 6f 69 64 20 30 7d 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 40 63 6c 69 63 6b 3d 24 7b 28 74 2c 65 29 3d 3e 74 2e 68 61 6e 64 6c 65 43 61 72 64 4c 69 6e 6b 43 6c 69 63 6b 28 65 2e 65 76 65 6e 74 29 7d 20 64 61 74 61 2d 74 3d 22 24 7b 74 3d 3e 74 2e 61 6e 63 68 6f 72 54 65 6c 65 6d 65 74 72 79 54 61 67 7d 22 3e 3c 73 6c 6f 74 3e 3c 2f 73 6c 6f 74 Data Ascii: 00004000="heading-wrapper" role="heading" aria-level=3><a class="heading" part="heading" href=${t=>t.destinationUrl?t.destinationUrl:void 0} target="_blank" @click=${(t,e)=>t.handleCardLinkClick(e.event)} data-t="${t=>t.anchorTelemetryTag}"><slot></slot
2024-01-17 17:07:31 UTC	12	IN	Data Raw: 72 74 41 63 74 69 6f 6e 73 22 0d 0a Data Ascii: rtActions"
2024-01-17 17:07:31 UTC	2936	IN	Data Raw: 30 30 30 30 30 42 36 43 0d 0a 29 7d 20 40 73 6c 6f 74 63 68 61 6e 67 65 3d 24 7b 74 3d 3e 74 2e 68 61 6e 64 6c 65 53 74 61 72 74 41 63 74 69 6f 6e 73 43 6f 6e 74 65 6e 74 43 68 61 6e 67 65 28 29 7d 3e 3c 2f 73 6c 6f 74 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 70 61 72 74 3d 22 65 6e 64 2d 61 63 74 69 6f 6e 73 22 20 24 7b 28 30 2c 7a 2e 69 29 28 22 65 6e 64 41 63 74 69 6f 6e 73 43 6f 6e 74 61 69 6e 65 72 22 29 7d 3e 3c 73 6c 6f 74 20 6e 61 6d 65 3d 22 65 6e 64 2d 61 63 74 69 6f 6e 73 22 20 24 7b 28 30 2c 7a 2e 69 29 28 22 65 6e 64 41 63 74 69 6f 6e 73 22 29 7d 20 40 73 6c 6f 74 63 68 61 6e 67 65 3d 24 7b 74 3d 3e 74 2e 68 61 6e 64 6c 65 45 6e 64 41 63 74 69 6f 6e 73 43 6f 6e 74 65 6e 74 43 68 61 6e 67 65 28 29 7d 3e 3c 2f 73 6c 6f 74 3e 3c 2f 73 70 61 6e Data Ascii: 00000B6C)} @slotchange=${t=>t.handleStartActionsContentChange()}></slot></span><span part="end-actions" ${(0,z.i)("endActionsContainer")}><slot name="end-actions" ${(0,z.i)("endActions")} @slotchange=${t=>t.handleEndActionsContentChange()}></slot></span
2024-01-17 17:07:31 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.16	50003	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:31 UTC	504	OUT	GET /bundles/v1/edgeChromium/latest/news-groups-card.98d340916dc4d07f1bca.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:31 UTC	1149	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: 4gta2Xm79m9UN8FIbhl/TQ== Last-Modified: Wed, 10 Jan 2024 03:17:35 GMT ETag: 0x8DC118AB157EFA7 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: ced9af3f-801e-0043-3673-43c4a9000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:31 GMT Content-Length: 42535 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89888747,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=3, origin; dur=0 , cdntime; dur=3 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b97eb Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511251.55b97eb Vary: Origin
2024-01-17 17:07:31 UTC	15235	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6e 65 77 73 2d 67 72 6f 75 70 73 2d 63 61 72 64 22 5d 2c 7b 34 31 34 33 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6f 2e 72 28 74 29 2c 6f 2e 64 28 74 2c 7b 45 72 72 6f 72 4c 6f 63 61 74 69 6f 6e 54 65 6d 70 6c 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 54 65 7d 2c 45 72 72 6f 72 54 65 6d 70 6c 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 78 65 7d 2c 4e 65 77 73 Data Ascii: (self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["news-groups-card"],{41438:function(e,t,o){"use strict";o.r(t),o.d(t,{ErrorLocationTemplate:function(){return Te},ErrorTemplate:function(){return xe},News
2024-01-17 17:07:31 UTC	9341	IN	Data Raw: 61 72 6b 28 22 4e 65 77 73 47 72 6f 75 70 73 43 61 72 64 2e 52 65 61 64 79 22 29 2c 74 68 69 73 2e 6d 61 72 6b 56 69 73 75 61 6c 6c 79 52 65 61 64 79 52 61 66 28 29 7d 67 65 74 48 65 61 64 69 6e 67 4c 69 6e 6b 28 65 2c 74 2c 6f 29 7b 6c 65 74 20 6e 3d 22 68 74 74 70 73 3a 2f 2f 7b 68 6f 73 74 4e 61 6d 65 7d 2f 7b 6c 6f 63 61 6c 65 43 6f 64 65 7d 2f 66 65 65 64 22 3b 69 66 28 74 68 69 73 2e 63 6f 6e 66 69 67 2e 67 72 6f 75 70 73 48 65 61 64 69 6e 67 54 65 6d 70 6c 61 74 65 29 7b 6c 65 74 20 61 3d 22 22 3b 21 74 7c 7c 6f 7c 7c 65 3f 6f 26 26 28 61 3d 6f 29 3a 61 3d 74 3b 63 6f 6e 73 74 7b 66 61 6c 6c 62 61 63 6b 55 72 6c 3a 69 2c 67 65 6e 65 72 69 63 55 72 6c 3a 73 7d 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 67 72 6f 75 70 73 48 65 61 64 69 6e 67 54 65 6d 70 Data Ascii: ark("NewsGroupsCard.Ready"),this.markVisuallyReadyRaf()}getHeadingLink(e,t,o){let n="https://{hostName}/{localeCode}/feed";if(this.config.groupsHeadingTemplate){let a="";!t\|\|o\|\|e?o&&(a=o):a=t;const{fallbackUrl:i,genericUrl:s}=this.config.groupsHeadingTemp
2024-01-17 17:07:31 UTC	16384	IN	Data Raw: 20 65 2e 74 6f 67 67 6c 65 4e 65 77 73 47 72 6f 75 70 4d 65 6e 75 3f 65 2e 74 6f 67 67 6c 65 4e 65 77 73 47 72 6f 75 70 4d 65 6e 75 28 6e 75 6c 6c 21 3d 65 2e 6e 65 77 73 47 72 6f 75 70 53 6f 75 72 63 65 4d 65 6e 75 42 75 74 74 6f 6e 26 26 21 65 2e 69 73 4e 65 77 73 47 72 6f 75 70 53 6f 75 72 63 65 4d 65 6e 75 44 6f 77 6e 29 3a 6e 75 6c 6c 7d 20 74 69 74 6c 65 3d 24 7b 65 3d 3e 65 2e 73 74 72 69 6e 67 73 26 26 65 2e 73 74 72 69 6e 67 73 2e 6e 65 77 73 47 72 6f 75 70 73 4d 65 6e 75 42 75 74 74 6f 6e 54 69 74 6c 65 7d 20 61 72 69 61 2d 6c 61 62 65 6c 3d 24 7b 65 3d 3e 65 2e 73 74 72 69 6e 67 73 26 26 65 2e 73 74 72 69 6e 67 73 2e 6e 65 77 73 47 72 6f 75 70 73 4d 65 6e 75 42 75 74 74 6f 6e 54 69 74 6c 65 7d 20 64 61 74 61 2d 74 3d 22 24 7b 65 3d 3e 7b 76 61 Data Ascii: e.toggleNewsGroupMenu?e.toggleNewsGroupMenu(null!=e.newsGroupSourceMenuButton&&!e.isNewsGroupSourceMenuDown):null} title=${e=>e.strings&&e.strings.newsGroupsMenuButtonTitle} aria-label=${e=>e.strings&&e.strings.newsGroupsMenuButtonTitle} data-t="${e=>{va
2024-01-17 17:07:31 UTC	1575	IN	Data Raw: 65 74 65 63 74 22 20 64 61 74 61 2d 74 3d 22 24 7b 65 3d 3e 65 2e 64 65 74 65 63 74 4c 6f 63 61 74 69 6f 6e 54 65 6c 65 6d 65 74 72 79 54 61 67 7d 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 75 73 65 72 2d 6f 70 74 69 6f 6e 22 3e 24 7b 65 3d 3e 65 2e 64 65 74 65 63 74 4c 6f 63 61 74 69 6f 6e 54 65 78 74 7d 3c 2f 64 69 76 3e 3c 2f 66 6c 75 65 6e 74 2d 72 61 64 69 6f 3e 3c 66 6c 75 65 6e 74 2d 72 61 64 69 6f 20 76 61 6c 75 65 3d 22 53 70 65 63 69 66 79 22 20 69 64 3d 22 73 70 65 63 69 66 79 2d 6c 6f 63 61 74 69 6f 6e 2d 6d 6f 64 65 22 20 64 61 74 61 2d 74 3d 22 24 7b 65 3d 3e 65 2e 73 70 65 63 69 66 79 4c 6f 63 61 74 69 6f 6e 54 65 6c 65 6d 65 74 72 79 54 61 67 7d 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 75 73 65 72 2d 6f 70 74 69 6f 6e 22 3e 24 7b 65 3d 3e Data Ascii: etect" data-t="${e=>e.detectLocationTelemetryTag}"><div class="user-option">${e=>e.detectLocationText}</div></fluent-radio><fluent-radio value="Specify" id="specify-location-mode" data-t="${e=>e.specifyLocationTelemetryTag}"><div class="user-option">${e=>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.16	49995	13.107.13.80	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:31 UTC	452	OUT	POST /undersideproactive/api/v1/trigger HTTP/1.1 Host: services.bingapis.com Connection: keep-alive Content-Length: 198 Content-Type: application/json Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:31 UTC	198	OUT	Data Raw: 7b 22 64 6f 6d 61 69 6e 73 22 3a 5b 7b 22 63 6f 6e 66 69 64 65 6e 63 65 22 3a 31 2e 30 2c 22 6e 61 6d 65 22 3a 22 55 6e 64 65 72 73 69 64 65 43 68 61 74 41 72 74 69 63 6c 65 50 61 67 65 51 75 65 73 74 69 6f 6e 22 7d 5d 2c 22 69 64 54 79 70 65 22 3a 22 55 6e 6b 6e 6f 77 6e 22 2c 22 73 6f 75 72 63 65 55 72 6c 22 3a 22 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 65 6e 2d 67 62 2f 65 64 67 65 2f 77 65 6c 63 6f 6d 65 3f 65 70 3d 32 35 34 26 66 6f 72 6d 3d 4d 54 30 30 4c 37 26 65 73 3d 35 39 22 2c 22 75 73 65 72 49 64 22 3a 22 22 7d Data Ascii: {"domains":[{"confidence":1.0,"name":"UndersideChatArticlePageQuestion"}],"idType":"Unknown","sourceUrl":"","url":"https://www.microsoft.com/en-gb/edge/welcome?ep=254&form=MT00L7&es=59","userId":""}
2024-01-17 17:07:31 UTC	414	IN	HTTP/1.1 404 Not Found X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: E26EB66C749343E7AE13020B0CB83A0F Ref B: BL2AA2010201011 Ref C: 2024-01-17T17:07:31Z Date: Wed, 17 Jan 2024 17:07:31 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.16	50001	52.182.143.211	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:31 UTC	1058	OUT	POST /OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=peregrine-lite-telemetry-20240117.5&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1705511250550&w=0&anoncknm=app_anon&NoResponseBody=true HTTP/1.1 Host: browser.events.data.msn.com Connection: keep-alive Content-Length: 4180 sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; _SS=SID=00
2024-01-17 17:07:31 UTC	4180	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 50 61 67 65 56 69 65 77 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 30 31 2d 31 37 54 31 37 3a 30 37 3a 33 30 2e 35 34 35 5a 22 2c 22 76 65 72 22 3a 22 34 2e 30 22 2c 22 69 4b 65 79 22 3a 22 6f 3a 30 64 65 64 36 30 63 37 35 65 34 34 34 34 33 61 61 33 34 38 34 63 34 32 63 31 63 34 33 66 65 38 22 2c 22 64 61 74 61 22 3a 7b 22 70 61 67 65 22 3a 7b 22 6e 61 6d 65 22 3a 22 64 65 66 61 75 6c 74 22 2c 22 63 6f 6e 66 69 67 22 3a 32 30 38 33 2c 22 70 72 6f 64 75 63 74 22 3a 22 61 6e 61 68 65 69 6d 22 2c 22 74 79 70 65 22 3a 22 6e 74 70 22 2c 22 69 73 4a 53 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 41 75 74 6f 52 65 66 72 65 73 68 22 3a 66 61 6c 73 65 2c 22 69 73 53 74 61 74 69 63 22 3a 66 61 Data Ascii: {"name":"MS.News.Web.PageView","time":"2024-01-17T17:07:30.545Z","ver":"4.0","iKey":"o:0ded60c75e44443aa3484c42c1c43fe8","data":{"page":{"name":"default","config":2083,"product":"anaheim","type":"ntp","isJSEnabled":true,"isAutoRefresh":false,"isStatic":fa
2024-01-17 17:07:32 UTC	890	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: MC1=GUID=296673f63bda4084b95eb355d6182eec&HASH=2966&LV=202401&V=4&LU=1705511251884; Domain=.microsoft.com; Expires=Thu, 16 Jan 2025 17:07:31 GMT; Path=/;Secure; SameSite=None Set-Cookie: MS0=9375866ad8f04e97806f0280f96ec061; Domain=.microsoft.com; Expires=Wed, 17 Jan 2024 17:37:31 GMT; Path=/;Secure; SameSite=None time-delta-millis: 1334 Access-Control-Allow-Headers: P3P,Set-Cookie,time-delta-millis Access-Control-Allow-Methods: POST Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com Access-Control-Expose-Headers: time-delta-millis Date: Wed, 17 Jan 2024 17:07:31 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.16	50009	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:31 UTC	633	OUT	HEAD /statics/icons/favicon.ico HTTP/1.1 Host: assets.msn.com Connection: keep-alive Pragma: no-cache Cache-Control: no-cache sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:32 UTC	933	IN	HTTP/1.1 200 OK Content-Type: image/x-icon ETag: "b1a1d42024fa6e32ed87f61fd9507274:1574197118.459201" Last-Modified: Tue, 19 Nov 2019 20:58:17 GMT Server: AkamaiNetStorage Date: Wed, 17 Jan 2024 17:07:31 GMT Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89889197,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=87, clienttt; dur=0, origin; dur=0 , cdntime; dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b99ad Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com Cache-Control: public, max-age=31536000 report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511251.55b99ad Vary: Origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.16	50012	13.107.246.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:31 UTC	600	OUT	GET /shared/edgeweb/css/0098d6e.css HTTP/1.1 Host: edgestatic.azureedge.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:32 UTC	793	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:31 GMT Content-Type: text/css; charset=UTF-8 Content-Length: 100667 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable ETag: W/"1893b-18cfea0a899" Last-Modified: Fri, 12 Jan 2024 17:03:11 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Origin-Agent-Cluster: ?1 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 x-azure-ref: 20240117T170731Z-dc9cd36cf55df90y2yy3s5vekg00000000rg000000002sn4 X-Cache: TCP_REMOTE_HIT x-fd-int-roxy-purgeid: 0 Accept-Ranges: bytes
2024-01-17 17:07:32 UTC	15591	IN	Data Raw: 2e 63 6f 6d 6d 6f 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 38 36 30 70 78 29 7b 2e 63 6f 6d 6d 6f 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 2d 2d 6d 6f 62 69 6c 65 2d 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 38 36 30 70 78 29 7b 2e 63 6f 6d 6d 6f Data Ascii: .common-background-image{background-repeat:no-repeat;background-size:contain;bottom:0;left:0;position:absolute;right:0;top:0}@media screen and (max-width:860px){.common-background-image--mobile-hide{display:none}}@media screen and (min-width:860px){.commo
2024-01-17 17:07:32 UTC	16384	IN	Data Raw: 6d 6d 6f 6e 2d 62 75 74 74 6f 6e 2d 2d 74 65 6d 70 2d 6e 65 78 74 2d 38 2c 2e 63 6f 6d 6d 6f 6e 2d 62 75 74 74 6f 6e 2d 2d 77 68 69 74 65 2c 2e 63 6f 6d 6d 6f 6e 2d 62 75 74 74 6f 6e 2d 2d 79 65 6c 6c 6f 77 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 68 65 6d 65 2d 62 75 74 74 6f 6e 2d 62 67 29 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 33 33 65 6d 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 2e 37 35 36 35 39 33 32 38 37 32 70 78 20 32 70 78 20 72 67 Data Ascii: mmon-button--temp-next-8,.common-button--white,.common-button--yellow{align-items:center;-webkit-appearance:none;-moz-appearance:none;appearance:none;background-color:var(--theme-button-bg);border:none;border-radius:.33em;box-shadow:0 .7565932872px 2px rg
2024-01-17 17:07:32 UTC	16384	IN	Data Raw: 2d 2d 6f 75 74 6c 69 6e 65 2d 73 6f 6c 69 64 68 6f 76 65 72 3a 61 63 74 69 76 65 2c 2e 63 6f 6d 6d 6f 6e 2d 62 75 74 74 6f 6e 2d 2d 6f 75 74 6c 69 6e 65 2d 73 6f 6c 69 64 68 6f 76 65 72 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 68 65 6d 65 2d 62 75 74 74 6f 6e 2d 62 67 29 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 68 65 6d 65 2d 62 75 74 74 6f 6e 2d 62 67 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 68 65 6d 65 2d 62 75 74 74 6f 6e 2d 66 67 29 7d 2e 63 6f 6d 6d 6f 6e 2d 62 75 74 74 6f 6e 2d 2d 6f 75 74 6c 69 6e 65 2d 6c 69 6e 6b 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 68 65 6d 65 2d 6c 69 6e 6b 29 7d 2e 63 Data Ascii: --outline-solidhover:active,.common-button--outline-solidhover:hover{background-color:var(--theme-button-bg);border-color:var(--theme-button-bg);color:var(--theme-button-fg)}.common-button--outline-link{border-color:currentColor;color:var(--theme-link)}.c
2024-01-17 17:07:32 UTC	16384	IN	Data Raw: 61 6e 67 6c 65 29 2c 72 67 62 61 28 31 30 36 2c 31 33 2c 32 31 32 2c 30 29 20 36 34 2e 38 64 65 67 2c 23 36 61 30 64 64 34 20 2e 34 32 74 75 72 6e 2c 23 62 61 39 39 66 66 20 32 30 38 2e 38 64 65 67 2c 72 67 62 61 28 31 38 36 2c 31 35 33 2c 32 35 35 2c 30 29 20 2e 38 32 74 75 72 6e 29 20 31 3b 62 6f 72 64 65 72 2d 69 6d 61 67 65 3a 63 6f 6e 69 63 2d 67 72 61 64 69 65 6e 74 28 66 72 6f 6d 20 76 61 72 28 2d 2d 63 6f 6d 6d 6f 6e 2d 62 6f 72 64 65 72 2d 67 72 61 64 69 65 6e 74 2d 61 6e 67 6c 65 29 2c 72 67 62 61 28 31 30 36 2c 31 33 2c 32 31 32 2c 30 29 20 36 34 2e 38 64 65 67 2c 23 36 61 30 64 64 34 20 2e 34 32 74 75 72 6e 2c 23 62 61 39 39 66 66 20 32 30 38 2e 38 64 65 67 2c 72 67 62 61 28 31 38 36 2c 31 35 33 2c 32 35 35 2c 30 29 20 2e 38 32 74 75 72 6e 29 Data Ascii: angle),rgba(106,13,212,0) 64.8deg,#6a0dd4 .42turn,#ba99ff 208.8deg,rgba(186,153,255,0) .82turn) 1;border-image:conic-gradient(from var(--common-border-gradient-angle),rgba(106,13,212,0) 64.8deg,#6a0dd4 .42turn,#ba99ff 208.8deg,rgba(186,153,255,0) .82turn)
2024-01-17 17:07:32 UTC	16384	IN	Data Raw: 65 6d 3b 6c 65 66 74 3a 35 30 25 3b 6f 70 61 63 69 74 79 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 30 25 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 2d 35 30 25 29 3b 77 69 64 74 68 3a 2e 37 65 6d 7d 2e 63 6f 6d 6d 6f 6e 2d 62 75 74 74 6f 6e 2d 2d 74 65 6d 70 2d 6e 65 78 74 2d 32 20 73 70 61 6e 2c 2e 63 6f 6d 6d 6f 6e 2d 62 75 74 74 6f 6e 2d 2d 74 65 6d 70 2d 6e 65 78 74 2d 32 3a 61 66 74 65 72 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 34 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 31 36 35 2c 2e 38 34 2c 2e 34 34 2c 31 29 20 30 6d 73 7d 2e 63 6f 6d 6d 6f 6e 2d 62 75 74 74 6f 6e 2d 2d 74 65 6d 70 2d 6e 65 78 74 2d 32 3a 68 6f 76 65 72 20 73 70 61 6e 7b 6f 70 61 Data Ascii: em;left:50%;opacity:0;position:absolute;top:50%;transform:translate(-50%,-50%);width:.7em}.common-button--temp-next-2 span,.common-button--temp-next-2:after{transition:opacity .4s cubic-bezier(.165,.84,.44,1) 0ms}.common-button--temp-next-2:hover span{opa
2024-01-17 17:07:32 UTC	16384	IN	Data Raw: 74 62 6c 75 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 68 65 6d 65 2d 73 65 63 74 69 6f 6e 2d 62 67 2d 6c 69 67 68 74 62 6c 75 65 29 7d 2e 70 78 2d 6d 6f 64 61 6c 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 70 78 2d 6d 6f 64 61 6c 5f 5f 6f 76 65 72 6c 61 79 7b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 3b 7a 2d 69 6e 64 65 78 3a 31 7d 2e 70 78 2d 6d 6f 64 61 6c 5f 5f 64 69 61 6c 6f 67 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7a 2d 69 6e 64 65 78 3a 32 7d 2e 70 78 2d 70 6f 70 75 70 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 70 78 2d 70 6f 70 75 70 20 2e 70 78 2d 70 6f 70 75 70 Data Ascii: tblue{background-color:var(--theme-section-bg-lightblue)}.px-modal{position:relative}.px-modal__overlay{bottom:0;left:0;position:fixed;right:0;top:0;z-index:1}.px-modal__dialog{position:relative;z-index:2}.px-popup{display:inline-block}.px-popup .px-popup
2024-01-17 17:07:32 UTC	3156	IN	Data Raw: 70 78 29 29 3b 6d 61 78 2d 77 69 64 74 68 3a 33 36 30 70 78 3b 77 69 64 74 68 3a 39 30 76 77 7d 2e 63 6f 6d 6d 6f 6e 2d 69 6e 66 6f 2d 69 63 6f 6e 5f 5f 70 6f 70 75 70 2e 70 78 2d 66 6c 6f 61 74 5f 5f 70 6f 70 75 70 20 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d 2e 63 6f 6d 6d 6f 6e 2d 69 6e 66 6f 2d 69 63 6f 6e 5f 5f 70 6f 70 75 70 2e 70 78 2d 66 6c 6f 61 74 5f 5f 70 6f 70 75 70 20 6c 69 2c 2e 63 6f 6d 6d 6f 6e 2d 69 6e 66 6f 2d 69 63 6f 6e 5f 5f 70 6f 70 75 70 2e 70 78 2d 66 6c 6f 61 74 5f 5f 70 6f 70 75 70 20 6f 6c 2c 2e 63 6f 6d 6d 6f 6e 2d 69 6e 66 6f 2d 69 63 6f 6e 5f 5f 70 6f 70 75 70 2e 70 78 2d 66 6c 6f 61 74 5f 5f 70 6f 70 75 70 20 70 2c 2e 63 6f 6d 6d 6f 6e 2d 69 6e 66 6f 2d 69 63 6f 6e 5f 5f 70 6f 70 75 70 2e 70 78 2d Data Ascii: px));max-width:360px;width:90vw}.common-info-icon__popup.px-float__popup strong{font-weight:600}.common-info-icon__popup.px-float__popup li,.common-info-icon__popup.px-float__popup ol,.common-info-icon__popup.px-float__popup p,.common-info-icon__popup.px-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.16	50010	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:31 UTC	3520	OUT	GET /resolver/api/resolve/v3/config/?expType=AppConfig&expInstance=default&apptype=edgeChromium&v=20240117.5&targetScope={%22audienceMode%22:%22adult%22,%22browser%22:{%22browserType%22:%22edgeChromium%22,%22version%22:%22117%22,%22ismobile%22:%22false%22},%22deviceFormFactor%22:%22desktop%22,%22domain%22:%22ntp.msn.com%22,%22locale%22:{%22content%22:{%22language%22:%22en%22,%22market%22:%22us%22},%22display%22:{%22language%22:%22en%22,%22market%22:%22us%22}},%22ocid%22:%22MT004B%22,%22os%22:%22windows%22,%22platform%22:%22web%22,%22pageType%22:%22ntp%22,%22pageExperiments%22:[%22prg-1s-finunit5%22,%22prg-1s-wpocfp1%22,%22prg-1sw-cprefix%22,%22prg-1sw-ctal1%22,%22prg-1sw-enableact%22,%22prg-1sw-exp1-p2%22,%22prg-1sw-fagaipc%22,%22prg-1sw-finored%22,%22prg-1sw-finvldcc%22,%22prg-1sw-fnccombo%22,%22prg-1sw-heavysnow%22,%22prg-1sw-p1wtrclm%22,%22prg-1sw-p2-sdfuu-ho%22,%22prg-1sw-pde0%22,%22prg-1sw-rr2fn%22,%22prg-1sw-rr2fp%22,%22prg-1sw-rxrpbt%22,%22prg-1sw-sa-caqualityscore04%22,%22prg-1sw-sa-vblv_no3d_prod%22,%22prg-1sw-sageu2upc%22,%22prg-1sw-saproditen0%22,%22prg-1sw-shipfin%22,%22prg-1sw-snaccp12%22,%22prg-1sw-snaccp13%22,%22prg-1sw-snaccp1t%22,%22prg-1sw-spaipv2%22,%22prg-1sw-spnot2%22,%22prg-1sw-srdus%22,%22prg-1sw-tbrcounter%22,%22prg-1sw-tfgas-rev%22,%22prg-1sw-twv2en%22,%22prg-1sw-uclam%22,%22prg-1sw-v1tweb2en%22,%22prg-1sw-wxcfinst%22,%22prg-1sw-wxhurac-c%22,%22prg-1sw-wxmptreplace%22,%22prg-1sw-wxovsig%22,%22prg-1sw-wxtr75%22,%22prg-1sw-xaptraffic-cf2%22,%22prg-ad-pdedupe-rf%22,%22prg-adspeek%22,%22prg-autos-cvaos%22,%22prg-bd-top-f2%22,%22prg-boost-p2-ww%22,%22prg-cg-cap-ob-fill2-c%22,%22prg-cg-in-gm-gl-pl%22,%22prg-cg-in-gm-rwd-ads-c%22,%22prg-cg-in-gm-xn-ads%22,%22prg-cg-in-gm-xn-pl-c%22,%22prg-cg-ingames-xn-ads%22,%22prg-cg-notf2-c%22,%22prg-ctr-nocf%22,%22prg-hp-cgin%22,%22prg-hp-stripev2%22,%22prg-msncgstripe%22,%22prg-p2-wxnsmien%22,%22prg-peslt%22,%22prg-pr2-boostww%22,%22prg-pr2-c-railatf%22,%22prg-pr2-fidoptc%22,%22prg-search%22,%22prg-sh-bd-bng%22,%22prg-sh-bd-cb%22,%22prg-sh-bd-cb-03-rate%22,%22prg-sh-bd-df2%22,%22prg-sh-bd-disgb%22,%22prg-sh-bd-msnudarat%22,%22prg-sh-bd-newbanner%22,%22prg-sh-bd-newchckot%22,%22prg-sh-bd-newpdp3%22,%22prg-sh-bd-no-price%22,%22prg-sh-bd-nwchk%22,%22prg-sh-bd-perf%22,%22prg-sh-bd-sson%22,%22prg-sh-bd-strads%22,%22prg-sh-bd-sttop%22,%22prg-sh-bd-udarat%22,%22prg-sh-bd-xtracash%22,%22prg-sh-bdrating%22,%22prg-sh-dealsdaypdp%22,%22prg-sh-frnrc%22,%22prg-sh-pricewc%22,%22prg-sh-pricewct1%22,%22prg-sh-recopdp%22,%22prg-sh-rmitmlnk-c%22,%22prg-sh-sson%22,%22prg-sh-uapiratings%22,%22prg-sh-usecshk%22,%22prg-sh-usecshkpdp%22,%22prg-sld-pre%22,%22prg-sp-liveapi%22,%22prg-spr-bd-optidxv2c%22,%22prg-spr-enstfhp%22,%22prg-strrtng-g1%22,%22prg-uaskafka-t%22,%22prg-ugc-likechange%22,%22prg-upsaip-r-t%22,%22prg-upsaip-w1-t%22,%22prg-upscache-t%22,%22prg-vidad-cmb60%22,%22prg-viewautostsp-c%22,%22prg-wpo-pnpc%22,%22prg-wx-fredlg%22,%22prg-wx-fredlgm%22,%22prg-wxmnns%22]} HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:33 UTC	2118	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Server: Kestrel ETag: "mCKzanRlgczFfMBjPLpwRWuuoUA" X-CRS-BuildVersion: 20231220.2_master X-CRS-Env: Production X-AS-SuppressSetCookie: 1 nel-report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA X-Ceto-ref: 65a8095493bd447786f1713747cfafa3\|2024-01-17T17:07:32.152Z Cache-Control: public, max-age=1728000 Date: Wed, 17 Jan 2024 17:07:33 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Set-Cookie: _C_ETH=1; domain=.msn.com; path=/; secure; httponly Set-Cookie: _C_Auth= Set-Cookie: MUID=01E1770DF3D4629727396304F22A63D6; expires=Mon, 10 Feb 2025 17:07:32 GMT; domain=.msn.com; path=/; secure; samesite=none Set-Cookie: MUIDB=01E1770DF3D4629727396304F22A63D6; expires=Mon, 10 Feb 2025 17:07:32 GMT; path=/; httponly Set-Cookie: _EDGE_S=F=1&SID=13759006D2306A3A0F8B840FD3CE6BC1; domain=.msn.com; path=/; httponly Set-Cookie: _EDGE_V=1; expires=Mon, 10 Feb 2025 17:07:32 GMT; domain=.msn.com; path=/; httponly Akamai-Request-BC: [a=23.218.242.10,b=89889361,c=g,n=US_NJ_EDISON,o=20940],[c=c,n=US_NY_NEWYORK,o=20940],[a=52.142.29.118,c=o] Server-Timing: clientrtt; dur=89, clienttt; dur=894, origin; dur=852 , cdntime; dur=42 Akamai-Cache-Status: Miss from child, Miss from parent Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b9a51 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511252.55b9a51 Vary: Origin
2024-01-17 17:07:33 UTC	14266	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 7b 22 63 6f 6e 66 69 67 73 22 3a 7b 22 41 70 70 43 6f 6e 66 69 67 2f 64 65 66 61 75 6c 74 22 3a 7b 22 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 72 6f 6f 74 45 78 70 65 72 69 65 6e 63 65 22 3a 7b 22 63 6f 6e 66 69 67 52 65 66 22 3a 7b 22 65 78 70 65 72 69 65 6e 63 65 54 79 70 65 22 3a 22 45 64 67 65 43 68 72 6f 6d 69 75 6d 50 61 67 65 57 43 22 2c 22 69 6e 73 74 61 6e 63 65 53 72 63 22 3a 22 64 65 66 61 75 6c 74 22 7d 7d 7d 7d 2c 22 45 64 67 65 43 68 72 6f 6d 69 75 6d 50 61 67 65 57 43 2f 64 65 66 61 75 6c 74 22 3a 7b 22 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 64 61 74 61 43 6f 6e 6e 65 63 74 6f 72 73 22 3a 5b 7b 22 73 63 72 65 65 6e 57 69 64 74 68 22 3a 22 41 6e 79 22 2c 22 63 68 69 6c 64 72 65 6e 22 3a 5b 7b 22 69 6e 73 74 Data Ascii: 00006000{"configs":{"AppConfig/default":{"properties":{"rootExperience":{"configRef":{"experienceType":"EdgeChromiumPageWC","instanceSrc":"default"}}}},"EdgeChromiumPageWC/default":{"properties":{"dataConnectors":[{"screenWidth":"Any","children":[{"inst
2024-01-17 17:07:33 UTC	10322	IN	Data Raw: 66 61 6c 73 65 2c 22 69 72 69 73 49 6d 61 67 65 45 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 53 65 63 6f 6e 64 73 22 3a 36 30 7d 2c 22 63 6d 73 49 6d 61 67 65 22 3a 7b 22 64 61 74 61 22 3a 5b 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 22 3a 22 4d 69 6b 65 20 48 69 6c 6c 2f 47 65 74 74 79 20 49 6d 61 67 65 73 22 2c 22 69 6d 61 67 65 22 3a 7b 22 69 31 30 30 22 3a 22 41 41 31 31 4d 5a 34 4c 22 2c 22 69 32 34 30 22 3a 22 41 41 31 31 4e 37 42 49 22 2c 22 69 37 32 30 22 3a 22 41 41 31 31 4d 5a 34 4d 22 2c 22 69 31 30 38 30 22 3a 22 41 41 31 31 4e 32 4c 5a 22 2c 22 69 31 34 34 30 22 3a 22 41 41 31 31 4d 53 6b 49 22 2c 22 69 32 31 36 30 22 3a 22 41 41 31 31 4e 39 6b 72 22 7d 7d 2c 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 22 3a 22 41 6d 61 7a 69 6e 67 20 41 65 72 69 61 6c Data Ascii: false,"irisImageExpirationTimeSeconds":60},"cmsImage":{"data":[{"attribution":"Mike Hill/Getty Images","image":{"i100":"AA11MZ4L","i240":"AA11N7BI","i720":"AA11MZ4M","i1080":"AA11N2LZ","i1440":"AA11MSkI","i2160":"AA11N9kr"}},{"attribution":"Amazing Aerial
2024-01-17 17:07:33 UTC	14724	IN	Data Raw: 30 30 30 30 33 39 37 38 0d 0a 22 2c 22 69 37 32 30 22 3a 22 41 41 31 32 51 37 76 47 22 2c 22 69 31 30 38 30 22 3a 22 41 41 4f 45 6c 61 57 22 2c 22 69 31 34 34 30 22 3a 22 41 41 4f 45 32 63 36 22 2c 22 69 32 31 36 30 22 3a 22 41 41 4f 45 6c 65 64 22 7d 2c 22 76 69 64 65 6f 22 3a 7b 22 76 32 34 30 22 3a 22 31 35 64 37 31 38 33 33 2d 37 30 32 38 2d 34 31 32 38 2d 38 66 31 32 2d 32 31 62 36 38 65 38 64 61 64 62 33 2f 36 30 39 63 39 66 62 38 2d 65 63 30 37 2d 34 66 37 35 2d 61 33 62 35 2d 36 33 31 36 36 36 63 62 62 30 36 30 22 2c 22 76 37 32 30 22 3a 22 66 31 30 38 36 61 32 30 2d 30 65 34 64 2d 34 39 33 62 2d 62 30 32 66 2d 36 39 30 33 61 33 65 31 30 39 35 36 2f 30 35 38 38 36 66 62 31 2d 39 36 63 36 2d 34 35 37 66 2d 62 65 36 34 2d 37 37 39 31 32 34 34 32 36 Data Ascii: 00003978","i720":"AA12Q7vG","i1080":"AAOElaW","i1440":"AAOE2c6","i2160":"AAOEled"},"video":{"v240":"15d71833-7028-4128-8f12-21b68e8dadb3/609c9fb8-ec07-4f75-a3b5-631666cbb060","v720":"f1086a20-0e4d-493b-b02f-6903a3e10956/05886fb1-96c6-457f-be64-779124426
2024-01-17 17:07:33 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 38 64 65 63 2d 33 36 61 30 31 38 62 61 33 32 32 37 2f 36 62 33 38 31 64 35 36 2d 38 35 33 39 2d 34 61 39 38 2d 38 65 63 35 2d 33 30 32 34 36 33 61 64 65 39 30 38 22 2c 22 76 31 30 38 30 22 3a 22 63 38 37 66 37 30 33 35 2d 62 64 64 34 2d 34 37 66 62 2d 62 32 64 38 2d 32 63 62 34 38 34 32 66 61 33 39 64 2f 61 64 38 34 63 64 36 63 2d 65 63 39 64 2d 34 34 36 34 2d 61 31 66 66 2d 64 62 36 32 39 64 37 34 65 63 37 32 22 2c 22 76 31 34 34 30 22 3a 22 65 61 36 32 64 34 32 32 2d 64 62 62 35 2d 34 65 30 37 2d 61 30 36 39 2d 36 61 36 38 66 66 61 66 62 66 39 38 2f 65 61 35 38 62 34 30 34 2d 66 63 30 37 2d 34 39 35 37 2d 61 30 39 35 2d 65 34 39 62 63 31 64 31 38 36 33 66 22 2c 22 76 32 31 36 30 22 3a 22 35 63 38 63 32 35 33 66 2d 61 32 38 Data Ascii: 000040008dec-36a018ba3227/6b381d56-8539-4a98-8ec5-302463ade908","v1080":"c87f7035-bdd4-47fb-b2d8-2cb4842fa39d/ad84cd6c-ec9d-4464-a1ff-db629d74ec72","v1440":"ea62d422-dbb5-4e07-a069-6a68ffafbf98/ea58b404-fc07-4957-a095-e49bc1d1863f","v2160":"5c8c253f-a28
2024-01-17 17:07:33 UTC	12	IN	Data Raw: 75 73 20 22 2c 22 69 6d 61 67 0d 0a Data Ascii: us ","imag
2024-01-17 17:07:33 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 65 33 30 22 3a 22 43 72 61 64 6c 65 20 4d 6f 75 6e 74 61 69 6e 2d 4c 61 6b 65 20 53 74 2e 20 43 6c 61 69 72 20 4e 61 74 69 6f 6e 61 6c 20 50 61 72 6b 2c 20 54 61 73 6d 61 6e 69 61 2c 20 41 75 73 74 72 61 6c 69 61 20 22 2c 22 69 6d 61 67 65 33 31 22 3a 22 4e 65 77 20 52 69 76 65 72 20 47 6f 72 67 65 20 42 72 69 64 67 65 20 69 6e 20 74 68 65 20 4e 65 77 20 52 69 76 65 72 20 47 6f 72 67 65 20 4e 61 74 69 6f 6e 61 6c 20 50 61 72 6b 20 61 6e 64 20 50 72 65 73 65 72 76 65 2c 20 57 65 73 74 20 56 69 72 67 69 6e 69 61 22 2c 22 69 6d 61 67 65 33 32 22 3a 22 42 6f 61 74 73 20 66 6c 6f 61 74 20 62 79 20 72 69 63 65 20 66 69 65 6c 64 73 20 6f 6e 20 74 68 65 20 4e 67 6f 20 44 6f 6e 67 20 52 69 76 65 72 20 69 6e 20 4e 69 6e 68 20 42 69 6e Data Ascii: 00004000e30":"Cradle Mountain-Lake St. Clair National Park, Tasmania, Australia ","image31":"New River Gorge Bridge in the New River Gorge National Park and Preserve, West Virginia","image32":"Boats float by rice fields on the Ngo Dong River in Ninh Bin
2024-01-17 17:07:33 UTC	12	IN	Data Raw: 6e 74 65 72 65 73 74 73 22 2c 0d 0a Data Ascii: nterests",
2024-01-17 17:07:33 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 22 62 6f 64 79 22 3a 22 59 6f 75 20 77 65 72 65 6e 5c 75 30 30 32 37 74 20 73 69 67 6e 65 64 20 69 6e 20 77 68 65 6e 20 79 6f 75 20 6d 61 64 65 20 63 68 61 6e 67 65 73 20 74 6f 20 79 6f 75 72 20 66 65 65 64 e2 80 94 73 75 63 68 20 61 73 20 61 64 64 69 6e 67 20 61 20 77 65 61 74 68 65 72 20 6c 6f 63 61 74 69 6f 6e 2c 20 75 70 64 61 74 69 6e 67 20 61 20 73 74 6f 63 6b 20 77 61 74 63 68 6c 69 73 74 2c 20 6f 72 20 66 6f 6c 6c 6f 77 69 6e 67 20 61 20 73 70 6f 72 74 73 20 74 65 61 6d 2e 20 53 61 76 65 20 74 68 65 73 65 20 70 72 65 66 65 72 65 6e 63 65 73 20 74 6f 20 79 6f 75 72 20 4d 69 63 72 6f 73 6f 66 74 20 61 63 63 6f 75 6e 74 20 74 6f 20 67 65 74 20 6d 6f 72 65 20 6f 75 74 20 6f 66 20 79 6f 75 72 20 66 65 65 64 2e 22 2c 22 63 Data Ascii: 00004000"body":"You weren\u0027t signed in when you made changes to your feedsuch as adding a weather location, updating a stock watchlist, or following a sports team. Save these preferences to your Microsoft account to get more out of your feed.","c
2024-01-17 17:07:33 UTC	12	IN	Data Raw: 20 74 6f 20 76 69 65 77 20 74 0d 0a Data Ascii: to view t
2024-01-17 17:07:33 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 68 65 6d 22 2c 22 65 6e 67 61 67 65 42 74 6e 22 3a 22 4f 70 65 6e 20 69 74 20 6e 6f 77 22 2c 22 64 69 73 6d 69 73 73 42 74 6e 22 3a 22 4e 6f 20 74 68 61 6e 6b 73 22 7d 7d 7d 7d 2c 22 46 65 65 64 62 61 63 6b 4c 69 6e 6b 57 43 2f 64 65 66 61 75 6c 74 22 3a 7b 22 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 6c 6f 63 61 6c 69 7a 65 64 53 74 72 69 6e 67 73 22 3a 7b 22 66 65 65 64 62 61 63 6b 22 3a 22 46 65 65 64 62 61 63 6b 22 7d 7d 7d 2c 22 53 75 70 65 72 4e 61 76 2f 64 65 66 61 75 6c 74 22 3a 7b 22 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 64 65 66 61 75 6c 74 4e 61 76 49 74 65 6d 49 64 22 3a 22 6d 79 46 65 65 64 22 2c 22 64 65 66 61 75 6c 74 54 65 6c 65 6d 65 74 72 79 56 65 72 74 69 63 61 6c 22 3a 22 68 6f 6d 65 70 61 67 65 22 2c Data Ascii: 00006000hem","engageBtn":"Open it now","dismissBtn":"No thanks"}}}},"FeedbackLinkWC/default":{"properties":{"louserzedStrings":{"feedback":"Feedback"}}},"SuperNav/default":{"properties":{"defaultNavItemId":"myFeed","defaultTelemetryVertical":"homepage",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.16	50011	13.107.246.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:32 UTC	581	OUT	GET /shared/edgeweb/b7dd4a4.js HTTP/1.1 Host: edgestatic.azureedge.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:32 UTC	778	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:32 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 7127 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable ETag: W/"1bd7-18d0053a731" Last-Modified: Sat, 13 Jan 2024 00:58:18 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Origin-Agent-Cluster: ?1 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 x-azure-ref: 20240117T170732Z-gv5qtuvpn51vvca74u6mb8vsfs00000002r0000000003t6c X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-01-17 17:07:32 UTC	7127	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 64 61 74 61 29 7b 66 6f 72 28 76 61 72 20 63 2c 66 2c 74 3d 64 61 74 61 5b 30 5d 2c 6f 3d 64 61 74 61 5b 31 5d 2c 6c 3d 64 61 74 61 5b 32 5d 2c 69 3d 30 2c 68 3d 5b 5d 3b 69 3c 74 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 66 3d 74 5b 69 5d 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 72 2c 66 29 26 26 72 5b 66 5d 26 26 68 2e 70 75 73 68 28 72 5b 66 5d 5b 30 5d 29 2c 72 5b 66 5d 3d 30 3b 66 6f 72 28 63 20 69 6e 20 6f 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6f 2c 63 29 26 26 28 65 5b 63 5d 3d 6f 5b 63 5d 29 3b 66 6f 72 28 6d 26 26 6d 28 64 61 74 61 29 Data Ascii: !function(e){function c(data){for(var c,f,t=data[0],o=data[1],l=data[2],i=0,h=[];i<t.length;i++)f=t[i],Object.prototype.hasOwnProperty.call(r,f)&&r[f]&&h.push(r[f][0]),r[f]=0;for(c in o)Object.prototype.hasOwnProperty.call(o,c)&&(e[c]=o[c]);for(m&&m(data)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.16	50013	13.107.246.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:32 UTC	581	OUT	GET /shared/edgeweb/0c6fc55.js HTTP/1.1 Host: edgestatic.azureedge.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:32 UTC	807	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:32 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 294407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable ETag: W/"47e07-18cfea0a8d8" Last-Modified: Fri, 12 Jan 2024 17:03:11 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Origin-Agent-Cluster: ?1 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 x-azure-ref: 20240117T170732Z-dc9cd36cf55df90y2yy3s5vekg00000000m0000000002qza X-Cache: TCP_REMOTE_HIT x-fd-int-roxy-purgeid: 0 Accept-Ranges: bytes
2024-01-17 17:07:32 UTC	15577	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 4c 49 43 45 4e 53 45 53 20 2a 2f 0a 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 5d 2c 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 65 2c 6e 2c 72 2c 6f 2c 63 2c 66 2c 6c 29 7b 76 61 72 20 68 2c 64 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 3f 74 2e 6f 70 74 69 6f 6e 73 3a 74 3b 69 66 28 65 26 26 28 64 2e 72 65 6e 64 65 72 3d 65 2c 64 2e 73 74 61 74 69 63 52 65 6e 64 65 72 46 6e 73 3d 6e 2c 64 2e 5f 63 6f 6d 70 69 6c 65 64 Data Ascii: /! For license information please see LICENSES /(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[3],[function(t,e,n){"use strict";function r(t,e,n,r,o,c,f,l){var h,d="function"==typeof t?t.options:t;if(e&&(d.render=e,d.staticRenderFns=n,d._compiled
2024-01-17 17:07:32 UTC	16384	IN	Data Raw: 5d 3d 5b 5d 29 3b 22 74 65 6d 70 6c 61 74 65 22 3d 3d 3d 6f 2e 74 61 67 3f 73 6c 6f 74 2e 70 75 73 68 2e 61 70 70 6c 79 28 73 6c 6f 74 2c 6f 2e 63 68 69 6c 64 72 65 6e 7c 7c 5b 5d 29 3a 73 6c 6f 74 2e 70 75 73 68 28 6f 29 7d 7d 66 6f 72 28 76 61 72 20 66 20 69 6e 20 6e 29 6e 5b 66 5d 2e 65 76 65 72 79 28 6b 65 29 26 26 64 65 6c 65 74 65 20 6e 5b 66 5d 3b 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6b 65 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 69 73 43 6f 6d 6d 65 6e 74 26 26 21 74 2e 61 73 79 6e 63 46 61 63 74 6f 72 79 7c 7c 22 20 22 3d 3d 3d 74 2e 74 65 78 74 7d 66 75 6e 63 74 69 6f 6e 20 6a 65 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 69 73 43 6f 6d 6d 65 6e 74 26 26 74 2e 61 73 79 6e 63 46 61 63 74 6f 72 79 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 Data Ascii: ]=[]);"template"===o.tag?slot.push.apply(slot,o.children\|\|[]):slot.push(o)}}for(var f in n)n[f].every(ke)&&delete n[f];return n}function ke(t){return t.isComment&&!t.asyncFactory\|\|" "===t.text}function je(t){return t.isComment&&t.asyncFactory}function Ae(
2024-01-17 17:07:32 UTC	16384	IN	Data Raw: 6f 66 28 72 3d 6e 5b 69 5d 29 26 26 28 6f 5b 24 28 72 29 5d 3d 7b 74 79 70 65 3a 6e 75 6c 6c 7d 29 3b 65 6c 73 65 20 69 66 28 77 28 6e 29 29 66 6f 72 28 76 61 72 20 66 20 69 6e 20 6e 29 72 3d 6e 5b 66 5d 2c 6f 5b 24 28 66 29 5d 3d 77 28 72 29 3f 72 3a 7b 74 79 70 65 3a 72 7d 3b 74 2e 70 72 6f 70 73 3d 6f 7d 7d 28 65 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 74 2e 69 6e 6a 65 63 74 3b 69 66 28 6e 29 7b 76 61 72 20 72 3d 74 2e 69 6e 6a 65 63 74 3d 7b 7d 3b 69 66 28 63 28 6e 29 29 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 6e 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 72 5b 6e 5b 69 5d 5d 3d 7b 66 72 6f 6d 3a 6e 5b 69 5d 7d 3b 65 6c 73 65 20 69 66 28 77 28 6e 29 29 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 6e 29 7b 76 61 72 20 66 3d 6e 5b 6f 5d Data Ascii: of(r=n[i])&&(o[$(r)]={type:null});else if(w(n))for(var f in n)r=n[f],o[$(f)]=w(r)?r:{type:r};t.props=o}}(e),function(t,e){var n=t.inject;if(n){var r=t.inject={};if(c(n))for(var i=0;i<n.length;i++)r[n[i]]={from:n[i]};else if(w(n))for(var o in n){var f=n[o]
2024-01-17 17:07:32 UTC	16384	IN	Data Raw: 3b 2b 2b 69 29 6c 28 72 3d 74 5b 69 5d 2e 6b 65 79 29 26 26 28 6d 61 70 5b 72 5d 3d 69 29 3b 72 65 74 75 72 6e 20 6d 61 70 7d 76 61 72 20 58 72 3d 7b 63 72 65 61 74 65 3a 59 72 2c 75 70 64 61 74 65 3a 59 72 2c 64 65 73 74 72 6f 79 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 59 72 28 74 2c 4b 72 29 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 59 72 28 74 2c 65 29 7b 28 74 2e 64 61 74 61 2e 64 69 72 65 63 74 69 76 65 73 7c 7c 65 2e 64 61 74 61 2e 64 69 72 65 63 74 69 76 65 73 29 26 26 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 72 2c 6f 2c 63 3d 74 3d 3d 3d 4b 72 2c 66 3d 65 3d 3d 3d 4b 72 2c 6c 3d 74 6f 28 74 2e 64 61 74 61 2e 64 69 72 65 63 74 69 76 65 73 2c 74 2e 63 6f 6e 74 65 78 74 29 2c 68 3d 74 6f 28 65 2e 64 61 74 61 2e 64 69 72 65 63 74 69 76 65 Data Ascii: ;++i)l(r=t[i].key)&&(map[r]=i);return map}var Xr={create:Yr,update:Yr,destroy:function(t){Yr(t,Kr)}};function Yr(t,e){(t.data.directives\|\|e.data.directives)&&function(t,e){var n,r,o,c=t===Kr,f=e===Kr,l=to(t.data.directives,t.context),h=to(e.data.directive
2024-01-17 17:07:32 UTC	16384	IN	Data Raw: 6a 28 74 29 7d 7d 28 7b 6e 6f 64 65 4f 70 73 3a 48 72 2c 6d 6f 64 75 6c 65 73 3a 5b 73 6f 2c 66 6f 2c 77 6f 2c 4f 6f 2c 73 74 79 6c 65 2c 69 74 3f 7b 63 72 65 61 74 65 3a 69 69 2c 61 63 74 69 76 61 74 65 3a 69 69 2c 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 21 30 21 3d 3d 74 2e 64 61 74 61 2e 73 68 6f 77 3f 6e 69 28 74 2c 65 29 3a 65 28 29 7d 7d 3a 7b 7d 5d 2e 63 6f 6e 63 61 74 28 72 6f 29 7d 29 3b 75 74 26 26 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 73 65 6c 65 63 74 69 6f 6e 63 68 61 6e 67 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3b 74 26 26 74 2e 76 6d 6f 64 65 6c 26 26 76 69 28 74 2c 22 69 6e 70 75 74 22 Data Ascii: j(t)}}({nodeOps:Hr,modules:[so,fo,wo,Oo,style,it?{create:ii,activate:ii,remove:function(t,e){!0!==t.data.show?ni(t,e):e()}}:{}].concat(ro)});ut&&document.addEventListener("selectionchange",(function(){var t=document.activeElement;t&&t.vmodel&&vi(t,"input"
2024-01-17 17:07:32 UTC	16384	IN	Data Raw: 73 6f 6c 76 65 28 63 29 29 2c 74 2e 5f 64 65 76 74 6f 6f 6c 48 6f 6f 6b 3f 63 2e 63 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 74 2e 5f 64 65 76 74 6f 6f 6c 48 6f 6f 6b 2e 65 6d 69 74 28 22 76 75 65 78 3a 65 72 72 6f 72 22 2c 65 29 2c 65 7d 29 29 3a 63 7d 29 29 7d 28 74 2c 72 2c 6f 2c 68 29 7d 29 29 2c 6e 2e 66 6f 72 45 61 63 68 47 65 74 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 72 29 7b 69 66 28 74 2e 5f 77 72 61 70 70 65 64 47 65 74 74 65 72 73 5b 65 5d 29 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3b 74 2e 5f 77 72 61 70 70 65 64 47 65 74 74 65 72 73 5b 65 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 28 72 2e 73 74 61 74 65 2c 72 2e 67 65 74 74 Data Ascii: solve(c)),t._devtoolHook?c.catch((function(e){throw t._devtoolHook.emit("vuex:error",e),e})):c}))}(t,r,o,h)})),n.forEachGetter((function(e,n){!function(t,e,n,r){if(t._wrappedGetters[e])return void 0;t._wrappedGetters[e]=function(t){return n(r.state,r.gett
2024-01-17 17:07:32 UTC	16384	IN	Data Raw: 63 3f 63 2e 74 68 65 6e 28 6f 2c 6f 29 3a 6f 28 29 7d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 24 28 74 2c 6e 2c 72 29 7b 76 61 72 20 6f 3d 6d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 2c 66 29 7b 69 66 28 6f 3d 3d 3d 78 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 72 75 6e 6e 69 6e 67 22 29 3b 69 66 28 6f 3d 3d 3d 5f 29 7b 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 63 29 74 68 72 6f 77 20 66 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 65 2c 64 6f 6e 65 3a 21 30 7d 7d 66 6f 72 28 72 2e 6d 65 74 68 6f 64 3d 63 2c 72 2e 61 72 67 3d 66 3b 3b 29 7b 76 61 72 20 6c 3d 72 2e 64 65 6c 65 67 61 74 65 3b 69 66 28 6c 29 7b 76 61 72 20 68 3d 49 28 6c 2c 72 29 3b 69 66 28 68 29 7b 69 66 28 68 3d Data Ascii: c?c.then(o,o):o()}})}function $(t,n,r){var o=m;return function(c,f){if(o===x)throw new Error("Generator is already running");if(o===_){if("throw"===c)throw f;return{value:e,done:!0}}for(r.method=c,r.arg=f;;){var l=r.delegate;if(l){var h=I(l,r);if(h){if(h=
2024-01-17 17:07:32 UTC	16384	IN	Data Raw: 65 6e 67 74 68 3b 6e 3c 72 3b 29 7b 76 61 72 20 6f 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6e 2b 2b 29 3b 69 66 28 6f 3e 3d 35 35 32 39 36 26 26 6f 3c 3d 35 36 33 31 39 26 26 6e 3c 72 29 7b 76 61 72 20 63 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6e 2b 2b 29 3b 35 36 33 32 30 3d 3d 28 36 34 35 31 32 26 63 29 3f 65 2e 70 75 73 68 28 28 28 31 30 32 33 26 6f 29 3c 3c 31 30 29 2b 28 31 30 32 33 26 63 29 2b 36 35 35 33 36 29 3a 28 65 2e 70 75 73 68 28 6f 29 2c 6e 2d 2d 29 7d 65 6c 73 65 20 65 2e 70 75 73 68 28 6f 29 7d 72 65 74 75 72 6e 20 65 7d 28 74 29 29 2e 6c 65 6e 67 74 68 2c 6f 3d 31 32 38 2c 69 3d 30 2c 63 3d 37 32 2c 66 3d 5f 28 74 29 3b 74 72 79 7b 66 6f 72 28 66 2e 73 28 29 3b 21 28 65 3d 66 2e 6e 28 29 29 2e 64 6f 6e 65 3b 29 7b 76 61 72 20 6c 3d Data Ascii: ength;n<r;){var o=t.charCodeAt(n++);if(o>=55296&&o<=56319&&n<r){var c=t.charCodeAt(n++);56320==(64512&c)?e.push(((1023&o)<<10)+(1023&c)+65536):(e.push(o),n--)}else e.push(o)}return e}(t)).length,o=128,i=0,c=72,f=_(t);try{for(f.s();!(e=f.n()).done;){var l=
2024-01-17 17:07:32 UTC	16384	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 76 74 28 74 29 7b 72 65 74 75 72 6e 21 74 7c 7c 22 2f 22 3d 3d 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 79 74 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 2f 22 21 3d 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 62 61 73 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 62 61 73 65 7c 7c 22 22 2c 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 69 6e 70 75 74 3d 6e 65 77 20 41 72 72 61 79 28 65 3e 31 3f 65 2d 31 3a 30 29 2c 6e 3d 31 3b 6e 3c 65 3b 6e 2b 2b 29 69 6e 70 75 74 5b 6e 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 3b 76 61 72 20 72 2c 6f 3d 79 28 69 6e 70 75 74 2e 66 69 6c 74 65 72 28 79 74 29 29 3b 74 72 79 7b 66 6f 72 28 6f 2e 73 28 29 3b 21 28 72 3d 6f 2e 6e 28 29 29 2e 64 6f 6e 65 3b 29 7b 76 61 72 20 69 3d 72 2e 76 61 6c Data Ascii: unction vt(t){return!t\|\|"/"===t}function yt(t){return t&&"/"!==t}function mt(base){for(var t=base\|\|"",e=arguments.length,input=new Array(e>1?e-1:0),n=1;n<e;n++)input[n-1]=arguments[n];var r,o=y(input.filter(yt));try{for(o.s();!(r=o.n()).done;){var i=r.val
2024-01-17 17:07:32 UTC	16384	IN	Data Raw: 74 79 70 65 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 4f 2c 53 2c 45 2c 6b 2c 6a 2c 41 2c 43 2c 54 3d 6e 26 26 6e 2e 74 68 61 74 2c 50 3d 21 28 21 6e 7c 7c 21 6e 2e 41 53 5f 45 4e 54 52 49 45 53 29 2c 52 3d 21 28 21 6e 7c 7c 21 6e 2e 49 53 5f 52 45 43 4f 52 44 29 2c 24 3d 21 28 21 6e 7c 7c 21 6e 2e 49 53 5f 49 54 45 52 41 54 4f 52 29 2c 49 3d 21 28 21 6e 7c 7c 21 6e 2e 49 4e 54 45 52 52 55 50 54 45 44 29 2c 4c 3d 72 28 65 2c 54 29 2c 4e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 26 26 6d 28 4f 2c 22 6e 6f 72 6d 61 6c 22 2c 74 29 2c 6e 65 77 20 78 28 21 30 2c 74 29 7d 2c 4d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 50 3f 28 63 28 74 29 2c 49 3f 4c 28 74 5b 30 5d 2c 74 Data Ascii: type;t.exports=function(t,e,n){var O,S,E,k,j,A,C,T=n&&n.that,P=!(!n\|\|!n.AS_ENTRIES),R=!(!n\|\|!n.IS_RECORD),$=!(!n\|\|!n.IS_ITERATOR),I=!(!n\|\|!n.INTERRUPTED),L=r(e,T),N=function(t){return O&&m(O,"normal",t),new x(!0,t)},M=function(t){return P?(c(t),I?L(t[0],t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.16	50002	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:32 UTC	810	OUT	GET /weathermapdata/1/static/background/v2.0/jpg/sunny.jpg HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; MUIDB=2136D0069C246D353F30C40F9D676C20; _SS=SID=00
2024-01-17 17:07:32 UTC	1076	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-MD5: cqxTyRjzWnOAkxfsRuKFlA== Last-Modified: Tue, 17 Aug 2021 10:15:39 GMT ETag: 0x8D96167F6CB9DB1 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 429c176a-d01e-00ec-316d-0e7dc7000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Unused62: 8096267 Expires: Fri, 16 Feb 2024 11:10:19 GMT Date: Wed, 17 Jan 2024 17:07:32 GMT Content-Length: 1786 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89888729,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=0, origin; dur=0 , cdntime; dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b97d9 Cache-Control: public, max-age=2592000 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511252.55b97d9 Vary: Origin
2024-01-17 17:07:32 UTC	1786	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0a 0a 0a 0a 0a 0a 0b 0c 0c 0b 0f 10 0e 10 0f 16 14 13 13 14 16 22 18 1a 18 1a 18 22 33 20 25 20 20 25 20 33 2d 37 2c 29 2c 37 2d 51 40 38 38 40 51 5e 4f 4a 4f 5e 71 65 65 71 8f 88 8f bb bb fb 01 0a 0a 0a 0a 0a 0a 0b 0c 0c 0b 0f 10 0e 10 0f 16 14 13 13 14 16 22 18 1a 18 1a 18 22 33 20 25 20 20 25 20 33 2d 37 2c 29 2c 37 2d 51 40 38 38 40 51 5e 4f 4a 4f 5e 71 65 65 71 8f 88 8f bb bb fb ff c0 00 11 08 01 30 01 2c 03 01 22 00 02 11 01 03 11 01 ff c4 00 68 00 00 03 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 10 01 01 01 01 01 01 00 02 03 01 00 00 00 00 00 00 00 01 11 02 03 12 04 21 05 13 31 41 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 04 03 05 06 Data Ascii: JFIF""3 % % 3-7,),7-Q@88@Q^OJO^qeeq""3 % % 3-7,),7-Q@88@Q^OJO^qeeq0,"h!1A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.16	50005	23.44.201.25	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:32 UTC	837	OUT	GET /th?id=ORMS.1ba6db1e5892f363bafd56fbc865effb&pid=Wdp&w=612&h=304&qlt=90&c=1&rs=1&dpr=1&p=0 HTTP/1.1 Host: th.bing.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-MS-GEC: 31A9747F126316250F67243D1061023017EAB84104F11C1801266F585CB7B15A Sec-MS-GEC-Version: 1-117.0.2045.47 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: MUID=2136D0069C246D353F30C40F9D676C20
2024-01-17 17:07:32 UTC	737	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Content-Length: 38880 Cache-Control: public, max-age=2373482 Date: Wed, 17 Jan 2024 17:07:32 GMT X-Cache: TCP_HIT from a23-44-202-153.deploy.akamaitechnologies.com (AkamaiGHost/11.4.0.1-53785976) (-) Connection: close Alt-Svc: h3=":443"; ma=93600 Akamai-GRN: 0.99ca2c17.1705511252.2c02df8a X-Check-Cacheable: YES
2024-01-17 17:07:32 UTC	15647	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 04 04 04 04 05 09 06 05 05 05 05 0b 08 08 06 09 0d 0b 0d 0d 0d 0b 0c 0c 0e 10 14 11 0e 0f 13 0f 0c 0c 12 18 12 13 15 16 17 17 17 0e 11 19 1b 19 16 1a 14 16 17 16 ff db 00 43 01 04 04 04 05 05 05 0a 06 06 0a 16 0f 0c 0f 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 ff c0 00 11 08 01 30 02 64 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC0d"}!1AQa"q2
2024-01-17 17:07:32 UTC	16384	IN	Data Raw: 75 d9 55 7d 4d 7a 0c 32 79 32 28 dc 42 93 ce 0d 70 1e 3e 50 75 e9 08 e8 79 af 37 0b bb ec 7b f9 9f f0 91 85 1f 1e b5 3a b7 15 0a 8e 70 2a 48 c1 19 cd 75 5e e7 cf 8f cf b5 19 f6 a4 c8 a5 04 7b 52 63 0c fb 53 f2 32 00 ef 4c c8 f5 14 e0 a3 70 34 27 61 ee 74 3e 07 d4 da c3 54 50 c7 08 dd 72 7a 57 bb 78 55 d6 6b 05 78 ce e5 93 e6 04 57 cd f1 c8 03 64 7d ec 71 5e e5 fb 37 6b 11 ea c6 1d 26 e4 7e f6 22 3b ff 00 0d 55 18 45 54 f6 9b 1a aa f2 50 e4 7b 1f 60 7e c8 73 93 e1 7d 56 d8 a8 05 2e d1 87 d0 a8 af 5f ba c4 71 1d c7 1c 57 9c 7c 0b b4 8b 4f 9a ee de 04 55 49 55 0f 4e b8 15 de eb d2 1f 2c 80 79 da 7f 95 79 98 99 29 54 6d 1c ef 73 1f c7 cb e7 78 58 ed e4 67 20 d5 5f 08 d9 08 34 2b 56 51 5a 1a d0 49 fc 0e 48 e5 84 7f a8 14 df 09 ee 93 c3 b6 c5 8a 9c 1c 70 7b d7 Data Ascii: uU}Mz2y2(Bp>Puy7{:p*Hu^{RcS2Lp4'at>TPrzWxUkxWd}q^7k&~";UETP{`~s}V._qW\|OUIUN,yy)TmsxXg _4+VQZIHp{
2024-01-17 17:07:32 UTC	2777	IN	Data Raw: 3f c2 6b de fe 15 ce 75 af 84 f6 b1 e7 f7 96 81 90 8f e2 05 4e 57 f3 15 f3 b9 d5 1b a5 26 61 35 ca c9 3e 33 6b 5a 9f 87 75 2b 79 ed 70 12 fa 12 09 61 90 58 02 3f 2c 1a e3 fe 03 6a 51 5a fc 4a b5 69 41 2d 39 c1 24 f0 0d 76 7f 1d ed ce a3 e0 db 6b c4 d8 7e cf 22 12 49 f5 52 0d 78 fe 87 74 f6 3a e5 bd dc 65 83 42 e1 c6 de a7 15 c3 87 a7 1a b8 59 25 b9 11 57 3e c6 d4 ad 56 ea d6 48 9d 55 92 45 2a c1 87 63 51 f8 0f 4a 8f 48 d2 24 d3 61 66 31 09 59 c0 63 d3 3d be 95 27 87 ee fe dd e1 cb 2b c2 ea e6 e2 24 24 a9 c8 19 02 ae e9 e0 45 7d 34 60 e4 6d cd 7c cc 93 57 8f 61 4d bb 92 e3 fd 1d 63 3f c1 4f b4 6f 98 2d 1f f2 cd 8d 26 9e 0b dc 8f 4f 5a cc 45 a9 f9 40 29 66 1b 97 1e d4 f9 23 c1 eb 4d 98 ec c1 a4 06 47 89 18 2c 96 71 9e 72 db 48 fa 0a f0 8f da 81 0c 8d 11 66 Data Ascii: ?kuNW&a5>3kZu+ypaX?,jQZJiA-9$vk~"IRxt:eBY%W>VHUE*cQJH$af1Yc='+$$E}4`m\|WaMc?Oo-&OZE@)f#MG,qrHf
2024-01-17 17:07:32 UTC	4072	IN	Data Raw: e9 5b 0b 16 9d ad 69 eb 74 ac 05 c4 43 f7 33 21 f9 97 db dc 57 89 e6 7d 3f 42 b4 1a 26 9f a5 dc 7f c4 b2 dd 6d 60 93 2d e4 c6 a1 53 39 ea 00 e0 56 cc 30 8d aa 54 73 de a9 69 3e 6c a1 56 76 dc ca 31 9a db 8d 15 63 5e 28 51 bb b9 94 a5 6d 07 db a0 31 10 69 f1 82 bf 26 3e 4a 6c 6c 17 83 4f 72 4a e4 53 30 bb 21 bc 86 36 5e 95 9d 78 07 d9 e4 52 38 20 8a bb 70 ec 3b d6 5e ab 36 c8 c8 3d c5 63 2b 37 6b 9a c1 33 c4 fe 37 b8 ff 00 84 82 d1 3f 86 30 c0 1f af f9 15 ca ce ab 35 99 1e d9 1f 5a eb 7e 30 c6 25 d5 16 5c 76 c2 9f 43 5c 74 25 95 76 93 5e 95 05 fb b4 7e a1 91 6b 97 c0 a7 1c 42 4c 86 1c ad 58 d1 ef ae f4 7d 46 1b fb 70 cc d0 38 6d b9 e3 14 4a 02 b7 c9 c1 3d 69 b2 21 68 59 58 e3 70 ea 2b 69 6a 9d f6 3d 0a d8 78 d4 a6 e2 cf 6c b7 f1 4e 9b 7b 66 92 3a 32 79 ab Data Ascii: [itC3!W}?B&m`-S9V0Tsi>lVv1c^(Qm1i&>JllOrJS0!6^xR8 p;^6=c+7k37?05Z~0%\vC\t%v^~kBLX}Fp8mJ=i!hYXp+ij=xlN{f:2y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.16	50007	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:32 UTC	659	OUT	GET /tenant/amp/entityid/AAywGC0?w=16&h=16&q=100&m=6&f=png&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:32 UTC	546	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AAywGC0?w=16&h=16&q=100&m=6&f=png&u=t Last-Modified: Wed, 17 Jan 2024 05:26:51 GMT X-Source-Length: 18737 X-Datacenter: westus X-ActivityId: b02e726a-8ecb-4a0b-9a30-c56479bb8628 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 1286 Cache-Control: public, max-age=389958 Expires: Mon, 22 Jan 2024 05:26:50 GMT Date: Wed, 17 Jan 2024 17:07:32 GMT Connection: close
2024-01-17 17:07:32 UTC	1286	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 02 45 49 44 41 54 78 01 a5 93 cb 4b 94 51 18 c6 7f df 6d 74 be 66 bc e4 38 ea 78 81 36 49 60 2b a9 a4 84 a2 0b 14 08 2d c2 40 22 a2 42 41 a2 56 65 9b e8 82 8b 56 2d 8a 5a b4 89 90 fe 88 22 a2 20 92 84 82 68 d1 45 c4 4c d3 2c 2b 4d 67 72 c6 b9 f5 9c 99 09 6a 3b 7d 70 38 e7 bc e7 7d 9e ef bc cf fb 1c f7 45 0b b3 40 58 a3 9c 6f c5 15 2a 56 0e b2 84 09 1b 82 15 8d ff ba 41 91 cc d2 94 85 7c 46 b3 a1 cd 95 c2 5e 29 a6 bd 15 f8 6b 6d 72 84 31 13 96 92 d6 e6 84 49 41 45 ab 4d 76 59 d9 86 c0 90 ea ac 40 9c d6 56 d9 76 85 b6 71 70 aa 8b 38 d7 04 53 33 e0 6f 8a d1 78 7a 08 b7 aa 8e 95 b1 a7 54 6e 6c Data Ascii: PNGIHDRapHYs+EIDATxKQmtf8x6I`+-@"BAVeV-Z" hEL,+Mgrj;}p8}E@Xo*VA\|F^)kmr1IAEMvY@Vvqp8S3oxzTnl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.16	50014	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:32 UTC	670	OUT	GET /staticsb/statics/latest/icons-wc/icons/TrendingLight.svg HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:32 UTC	1124	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-MD5: MRhShoLIVb1pCs+qK+ASaw== Last-Modified: Tue, 16 Jan 2024 10:45:03 GMT ETag: 0x8DC16803288D81B Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: a075948b-101e-0037-20cd-48888e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:32 GMT Content-Length: 452 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89889800,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=0, origin; dur=0 , cdntime; dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b9c08 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com Cache-Control: public, max-age=31536000 report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511252.55b9c08 Vary: Origin
2024-01-17 17:07:32 UTC	452	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 32 22 20 68 65 69 67 68 74 3d 22 38 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 74 72 61 6e 73 70 61 72 65 6e 74 22 20 73 74 72 6f 6b 65 3d 22 23 32 62 32 62 32 62 22 20 64 3d 22 6d 36 2e 34 39 36 20 30 20 35 2e 30 34 38 2e 30 30 32 2e 30 38 36 2e 30 31 35 2e 30 36 33 2e 30 32 2e 30 35 38 2e 30 33 2e 30 36 32 2e 30 34 32 2e 30 35 38 2e 30 35 34 2e 30 34 2e 30 35 2e 30 33 35 2e 30 35 38 2e 30 33 32 2e 30 37 38 2e 30 31 32 2e 30 34 33 2e 30 31 31 2e 30 38 36 56 35 2e 35 61 2e 35 2e 35 20 30 20 30 20 31 2d 2e 39 39 31 2e 30 39 6c 2d 2e 30 30 38 2d 2e 30 39 4c 31 31 20 31 2e 37 30 37 20 35 2e 38 35 38 20 36 2e 38 35 33 Data Ascii: <svg width="12" height="8" xmlns="http://www.w3.org/2000/svg"><path fill="transparent" stroke="#2b2b2b" d="m6.496 0 5.048.002.086.015.063.02.058.03.062.042.058.054.04.05.035.058.032.078.012.043.011.086V5.5a.5.5 0 0 1-.991.09l-.008-.09L11 1.707 5.858 6.853

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.16	50015	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:32 UTC	815	OUT	GET /weathermapdata/1/static/weather/Icons/taskbar_v10/cold.svg HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; MUIDB=2136D0069C246D353F30C40F9D676C20; _SS=SID=00
2024-01-17 17:07:32 UTC	1061	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-MD5: Jf5SG8q4iLnrShEpNuCHww== Last-Modified: Fri, 12 May 2023 08:45:59 GMT ETag: 0x8DB52C54F116B7B Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: d2d48e0f-801e-00a9-7e81-8ae787000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Expires: Thu, 25 Jan 2024 00:10:48 GMT Date: Wed, 17 Jan 2024 17:07:32 GMT Content-Length: 19533 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89889804,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=0, origin; dur=0 , cdntime; dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b9c0c Cache-Control: public, max-age=2592000 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511252.55b9c0c Vary: Origin
2024-01-17 17:07:32 UTC	15323	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 37 32 22 20 68 65 69 67 68 74 3d 22 37 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 37 32 20 37 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 67 20 66 69 6c 74 65 72 3d 22 75 72 6c 28 23 66 69 6c 74 65 72 30 5f 69 5f 32 32 31 5f 35 30 35 39 29 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 35 2e 37 33 32 39 20 31 38 2e 32 35 37 32 43 32 35 2e 39 30 31 33 20 31 37 2e 31 36 36 35 20 32 35 2e 30 35 37 35 20 31 36 2e 31 38 33 37 20 32 33 2e 39 35 33 39 20 31 36 2e 31 38 33 37 48 35 2e 30 39 37 35 34 43 33 2e 39 39 33 37 20 31 36 2e 31 38 33 37 20 33 2e 31 34 39 37 34 20 31 37 2e 31 36 37 20 33 2e 33 31 38 37 20 31 38 Data Ascii: <svg width="72" height="72" viewBox="0 0 72 72" fill="none" xmlns="http://www.w3.org/2000/svg"><g filter="url(#filter0_i_221_5059)"><path d="M25.7329 18.2572C25.9013 17.1665 25.0575 16.1837 23.9539 16.1837H5.09754C3.9937 16.1837 3.14974 17.167 3.3187 18
2024-01-17 17:07:32 UTC	4210	IN	Data Raw: 39 34 35 22 20 79 32 3d 22 32 32 2e 35 35 31 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 3e 0a 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 2f 3e 0a 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 30 2e 35 32 36 38 37 39 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 46 46 46 39 45 39 22 20 73 74 6f 70 2d 6f 70 61 63 69 74 79 3d 22 30 22 2f 3e 0a 3c 2f 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 3e 0a 3c 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 20 69 64 3d 22 70 61 69 6e 74 32 5f 72 61 64 69 61 6c 5f 32 32 31 5f 35 30 35 39 22 20 63 78 3d 22 30 22 20 63 79 3d 22 30 22 20 72 3d 22 31 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 67 72 Data Ascii: 945" y2="22.551" gradientUnits="userSpaceOnUse"><stop stop-color="white"/><stop offset="0.526879" stop-color="#FFF9E9" stop-opacity="0"/></linearGradient><radialGradient id="paint2_radial_221_5059" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.16	50016	23.44.201.25	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:32 UTC	837	OUT	GET /th?id=ORMS.1408cdc6ba91fcfe70afafc1ce7dff0a&pid=Wdp&w=300&h=156&qlt=90&c=1&rs=1&dpr=1&p=0 HTTP/1.1 Host: th.bing.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-MS-GEC: 31A9747F126316250F67243D1061023017EAB84104F11C1801266F585CB7B15A Sec-MS-GEC-Version: 1-117.0.2045.47 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: MUID=2136D0069C246D353F30C40F9D676C20
2024-01-17 17:07:32 UTC	738	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Content-Length: 24841 X-Check-Cacheable: YES Cache-Control: public, max-age=2589990 Date: Wed, 17 Jan 2024 17:07:32 GMT X-Cache: TCP_MISS from a23-44-202-153.deploy.akamaitechnologies.com (AkamaiGHost/11.4.0.1-53785976) (-) Connection: close Alt-Svc: h3=":443"; ma=93600 Akamai-GRN: 0.99ca2c17.1705511252.2c02e343
2024-01-17 17:07:32 UTC	831	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 04 04 04 04 05 09 06 05 05 05 05 0b 08 08 06 09 0d 0b 0d 0d 0d 0b 0c 0c 0e 10 14 11 0e 0f 13 0f 0c 0c 12 18 12 13 15 16 17 17 17 0e 11 19 1b 19 16 1a 14 16 17 16 ff db 00 43 01 04 04 04 05 05 05 0a 06 06 0a 16 0f 0c 0f 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 ff c0 00 11 08 00 9c 01 2c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC,"}!1AQa"q2
2024-01-17 17:07:32 UTC	16384	IN	Data Raw: 7a fe 86 75 a2 e4 df a7 ea 63 cd 1f fc 5a 8d 37 8e 3f b4 01 fc c1 ff 00 01 51 6b 50 85 f1 ab 16 1b 7f d0 b9 0a 78 fb 87 ff 00 ad 5a 7a 9c 4b 0f c1 fd 1e 55 8d 77 49 a8 31 63 eb 8d c3 15 0f 88 6d 19 7c 65 24 51 b6 4a 58 af cc 47 d4 ff 00 43 51 28 fe ee 3e 8b f5 2e 32 f7 9f ab 31 6d 6d 61 6f 02 df c9 2c 6c cc 97 0b e5 15 90 02 0e e6 07 23 a9 1f 4a ad 71 68 7f b6 a3 55 3b 99 ac 77 00 0e 48 38 e9 fa 55 c0 26 5f 0a 4c 11 06 d9 27 60 c4 e3 8f 9f a0 35 67 4d 84 4d e3 68 d3 68 07 ec a3 27 d4 e2 b9 9a 72 69 1a 26 d5 d9 cc c7 08 fe c6 b6 6e 9f e9 4c 3f 95 17 56 f9 97 50 1f dd 63 8a d0 8a 05 6f 0e 5b bf 71 a8 11 f9 ff 00 fa a8 92 21 e6 6a c5 94 95 56 3d 0f 39 ff 00 38 ac f9 36 2f 9b 72 28 6e ee ec ae 24 11 bb 18 e3 88 37 96 dc a9 e3 3d 3f 1a b7 1d c6 93 76 ab 1e a3 Data Ascii: zucZ7?QkPxZzKUwI1cm\|e$QJXGCQ(>.21mmao,l#JqhU;wH8U&_L'`5gMMhh'ri&nL?VPco[q!jV=986/r(n$7=?v
2024-01-17 17:07:32 UTC	7626	IN	Data Raw: 21 86 e7 03 6b 36 4a fa d7 8c e9 b6 33 5d da 87 d4 23 7b 79 10 ec 58 d5 81 f9 47 42 7d eb 9b f0 36 99 6b 7b af 48 f1 79 92 c4 b7 f0 da d9 ec 93 cb dd 24 ae c2 2c 92 09 55 c2 1c 9c 64 7a 73 c7 4f a4 f8 9d d6 c9 5a 3b 58 d5 64 66 70 a2 16 70 39 3f c5 df a5 4b 53 87 bb 0f c4 e8 a3 2a 73 d6 ab fb 8e 83 e1 5f 8c 1b c4 3e 17 83 c2 b0 69 11 3d d5 9d db cd 08 8d 19 a4 61 33 65 ca e0 9e 46 48 c0 1d 00 eb 5e d7 fb 22 6a 12 be 9b 65 7a 63 67 8d ad 05 bc 11 f9 a4 aa 12 cf 2b 48 40 1f 79 fe 51 9f 45 5a f0 8f d9 bf 44 f1 06 81 e2 68 3c 41 7d 63 75 a5 5b f9 6d 25 9d dc f1 94 1b 93 e6 2d b7 ef 60 0e 41 c6 38 e2 bd 8b f6 7c d2 64 b4 f8 19 e1 6f 19 5a c5 24 f7 7a 84 5a bd 9a 5b c1 3b a2 87 b7 b5 0f 0e 4f f7 8b 31 3e c3 8e d5 cb 5a a4 28 e2 3d a5 ae 95 bf 14 ff 00 53 bf 0b Data Ascii: !k6J3]#{yXGB}6k{Hy$,UdzsOZ;Xdfpp9?KS*s_>i=a3eFH^"jezcg+H@yQEZDh<A}cu[m%-`A8\|doZ$zZ[;O1>Z(=S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.16	50023	23.44.201.25	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:32 UTC	837	OUT	GET /th?id=ORMS.47d5965c126fecffb10d5127191d7763&pid=Wdp&w=612&h=304&qlt=90&c=1&rs=1&dpr=1&p=0 HTTP/1.1 Host: th.bing.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-MS-GEC: 31A9747F126316250F67243D1061023017EAB84104F11C1801266F585CB7B15A Sec-MS-GEC-Version: 1-117.0.2045.47 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: MUID=2136D0069C246D353F30C40F9D676C20
2024-01-17 17:07:32 UTC	738	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Content-Length: 95213 X-Check-Cacheable: YES Cache-Control: public, max-age=2588881 Date: Wed, 17 Jan 2024 17:07:32 GMT X-Cache: TCP_MISS from a23-44-202-153.deploy.akamaitechnologies.com (AkamaiGHost/11.4.0.1-53785976) (-) Connection: close Alt-Svc: h3=":443"; ma=93600 Akamai-GRN: 0.99ca2c17.1705511252.2c02e35a
2024-01-17 17:07:32 UTC	865	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 04 04 04 04 05 09 06 05 05 05 05 0b 08 08 06 09 0d 0b 0d 0d 0d 0b 0c 0c 0e 10 14 11 0e 0f 13 0f 0c 0c 12 18 12 13 15 16 17 17 17 0e 11 19 1b 19 16 1a 14 16 17 16 ff db 00 43 01 04 04 04 05 05 05 0a 06 06 0a 16 0f 0c 0f 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 ff c0 00 11 08 01 30 02 64 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC0d"}!1AQa"q2
2024-01-17 17:07:32 UTC	16384	IN	Data Raw: 83 14 bc 50 29 68 01 0e 28 e2 83 4b 40 09 c5 1c 52 d1 40 09 c5 1c 7e 94 b4 9f e1 40 07 1f ad 27 14 ef f1 a4 a0 00 63 75 1c 52 8f bd 49 40 07 1f ad 1c 51 fe 34 b4 00 de 28 a5 a2 80 0f f3 d2 8f f3 d2 8f ca 8f ca 80 13 fc f4 a5 ed ff 00 d6 a3 f2 a3 b7 6a 00 4f f3 d2 97 fc f4 a3 f2 a3 f2 a0 03 fc f4 a4 ff 00 3d 29 7f 2a 3f 2a 00 3f cf 4a 3f cf 4a 3f 2a 3f 2a 00 3f cf 4a 3f cf 4a 3f 2a 3f 2a 00 3b 7f f5 a8 ff 00 1f 4a 3b 76 a3 f2 eb 40 09 fe 7a 52 f6 ff 00 eb 51 f9 51 db b5 00 27 f9 e9 4b fe 7a 51 f9 51 f9 50 01 fe 7a 51 fe 7a 51 f9 51 f9 50 01 fe 7a 51 fe 3e 94 7e 54 7e 5d 68 00 5f f3 c5 27 f9 e9 4a bf 85 1f 95 00 1f e1 e9 47 7f fe b5 1f 97 4a 3b f6 a0 04 ff 00 3d 29 7f cf 4a 3f 2a 3f 2a 00 3f cf 4a 3f cf 4a 5f ca 93 f2 a0 03 bf ff 00 5a 8e df fd 6a 3b f6 a3 Data Ascii: P)h(K@R@~@'cuRI@Q4(jO=)??J?J???J?J??;J;v@zRQQ'KzQQPzQzQQPzQ>~T~]h_'JGJ;=)J???J?J_Zj;
2024-01-17 17:07:32 UTC	8192	IN	Data Raw: 7c 8e 0e 72 73 4f f8 9a be 22 b7 d2 6c ef 42 5c 7c 42 b5 58 18 cb aa ea 7e 17 b5 bc d3 26 40 3f d7 47 25 91 fb 44 67 9c ee f9 81 0a 6b 0f fb 5b c3 9a 8c 2a 7c 25 e2 bf 88 51 59 dc 2b c1 f6 b8 bc 4f 1d 8e 8b 24 8b b5 9d 21 92 ed b7 c6 b1 96 1b 54 2e e2 a4 02 31 cd 43 a9 28 bb 49 eb f7 37 f9 fe 0c da 38 6a 35 d7 b4 a3 14 a1 7b ad e5 18 be d7 6a 36 4f 7b 38 df cf 47 69 7c 2b e3 39 f4 ab 89 06 ab 63 67 f0 da fa 3b 52 89 79 a9 c7 35 ac 3a a3 47 90 91 9b 69 54 c0 0f 4c e1 81 19 e0 e0 56 a6 b0 26 f1 c6 86 ef 7d ac 68 f6 42 ee 28 a5 b0 d5 f5 1f 0a 98 0a 9e 98 17 90 48 d1 15 3c 8c 9e c7 a5 73 de 20 f8 85 ae f8 42 0b 3b ad 7f e2 a6 ab e2 8b 7b e8 da 59 6d 6d 74 ed 32 fa ce d8 c7 90 aa 67 4d ca 0e ec 06 f9 41 c1 cf 51 8a ec 6c ae b5 0f 14 78 46 0f 11 78 4f e2 ff 00 Data Ascii: \|rsO"lB\\|BX~&@?G%Dgk[*\|%QY+O$!T.1C(I78j5{j6O{8Gi\|+9cg;Ry5:GiTLV&}hB(H<s B;{Ymmt2gMAQlxFxO
2024-01-17 17:07:32 UTC	16384	IN	Data Raw: 6b 7a eb c3 be 3d b1 b3 8d ac a4 f0 d6 83 67 71 29 5b 60 cc c4 cc cd ca 46 02 a9 79 0b 73 c0 e0 11 93 c5 35 b4 bd 63 c4 3a 4b 1f 08 78 13 48 b5 b4 8d 8f da 7c 4b ab ea 89 f6 18 14 0f f5 c0 8c 39 00 72 07 bf 35 4f 52 f8 71 7b e1 eb a6 be d4 6e bc 41 af da d9 24 67 ed f6 72 4c 2f af 41 53 9b 7b 11 01 63 1c 0f 9c f9 f2 15 0c 57 68 c6 73 5c 6a 9b 51 d9 b5 df 6f d3 fa ee 7d 6d 4c 5d 1e 7e 57 38 a9 74 8b 4a 4f d1 5a 5c b1 7e 4f 5b 74 30 35 6d 43 e3 76 95 af 5e 68 56 d7 83 56 bc 6b 3f b4 4f 0e 9d 24 57 57 09 6a a4 03 e5 85 39 8c 12 70 40 1b 81 e7 15 bb e2 ef 19 36 89 6a ba 3f c5 bb fd 66 c6 f2 d0 43 a9 69 1e 1e f0 dd d3 43 77 7b 1c 9b 87 91 7f 24 21 50 b0 c2 93 80 18 8c e0 e7 22 ba cf 14 6a 7e 2a f8 78 ba 06 83 f0 47 e0 58 b1 7d 5e 18 ef a6 96 e6 dc 34 88 b8 db Data Ascii: kz=gq)[`Fys5c:KxH\|K9r5ORq{nA$grL/AS{cWhs\jQo}mL]~W8tJOZ\~O[t05mCv^hVVk?O$WWj9p@6j?fCiCw{$!P"j~*xGX}^4
2024-01-17 17:07:32 UTC	8192	IN	Data Raw: 23 2a b0 94 a1 51 35 27 6b c5 4e 17 93 71 4e 9a b3 6d 69 04 92 d5 af 4e 9e ce 1d 76 cf f6 90 f0 43 78 82 2b 1b 4b bf 10 78 43 51 d2 ef 2f 74 29 48 b6 94 c3 28 68 da 2e 72 a1 63 20 8f ee 96 ef 81 5c b6 97 f0 f7 e1 9c 5e 32 d2 bc 41 e5 eb 37 2d 7d aa bf 87 a4 b5 ba d6 a3 ba 9b 4e bf 00 b5 b5 c1 9d 58 bc 6e 64 87 e5 2a 78 2c 38 c6 45 62 2d bf 8d ee 3c 1b e0 9b ef 0b 78 36 de f3 4f f0 9e bd 75 3e 85 ad 5b ea f0 43 6f a9 58 bd db 11 0a db ca 43 e7 68 ee 46 d0 9b b9 14 78 ea 4f 85 ba 66 a5 ab 0f 87 be 39 87 5f f1 75 ff 00 8c 34 ed 6f 4e b2 59 77 45 1c d1 4d b9 a2 92 e0 fe e5 90 19 1c ef 63 c6 40 c9 a7 29 c5 ab b8 ab 2d 75 f4 5b 5d 6a ee ba 77 b9 95 1c 3d 64 f9 29 55 92 94 a2 e0 d4 35 4a d3 92 f7 ec df b3 8a 8c a2 fd ef 85 c5 ae e8 7f 84 fe 23 dc 78 c2 fb 54 f8 Data Ascii: #Q5'kNqNmiNvCx+KxCQ/t)H(h.rc \^2A7-}NXndx,8Eb-<x6Ou>[CoXChFxOf9_u4oNYwEMc@)-u[]jw=d)U5J#xT
2024-01-17 17:07:32 UTC	500	IN	Data Raw: 75 bb be fe 48 a7 15 87 ab 5a b7 b4 fb 31 9f 34 25 c9 27 19 24 9c 14 62 a3 aa 77 56 9c d5 97 bc e2 f5 bd 7f 89 16 da 26 81 1d 86 b3 a2 f8 4f 5f f1 7f 86 64 b8 17 0d ae de 5a 43 af 2c f1 6d 01 9e 3b bf 30 5c 5b 95 ec 8c 40 dc ad de b6 7c 7d 63 05 ff 00 89 74 bf 88 f6 5e 0b b7 d4 b4 7b c9 61 b9 d3 fc 5d e0 b7 31 6b da 63 b0 5e 2e 23 dc cb 73 95 3b 1d 08 3b 81 60 57 38 ae 7b 4d 6b b9 7c 23 0e af 05 ee 99 f0 6f c4 1a a3 b5 ce 9d 0a 6b 97 16 f6 57 89 1b 91 33 bd 80 05 61 6f 94 2f ce 08 7c 60 2e 6b 9b f1 0d df 86 74 d6 bc 7f 88 37 7e 12 d4 3e d4 e9 16 a5 27 81 35 79 74 db db a0 ae 08 33 5b 88 d6 de e5 81 21 fa 2b af 3c f6 a7 ed 52 d7 6e be 9e b7 d5 7d df 30 78 09 54 94 69 7c 52 4d c1 ab b6 e4 af ad ac f9 1b 4d 6e a7 66 d3 8b 87 42 df c5 6b 5f 86 56 9f 10 bf e1 Data Ascii: uHZ14%'$bwV&O_dZC,m;0\[@\|}ct^{a]1kc^.#s;;`W8{Mk\|#okW3ao/\|`.kt7~>'5yt3[!+<Rn}0xTi\|RMMnfBk_V
2024-01-17 17:07:32 UTC	1557	IN	Data Raw: fe 20 b9 5f 30 06 29 26 0e 06 09 fe 21 5c ef 87 67 86 4f 15 5e 69 9a 36 9e f0 7c 42 f0 a5 d1 d3 c4 33 bb 25 bf 8a b4 c5 42 16 c6 57 61 81 77 e5 28 f2 dc 8f 9c c2 a4 13 db 4f c7 5a 5f 86 ee 7e 2c 6a 12 78 e6 da 5f 03 78 cb 53 b9 82 d7 ed 56 ec db 4d f0 07 ec fa ad bc aa 02 18 24 00 a4 e9 d4 1d a7 83 b8 d5 9f 8d 5a 5c 5e 03 f8 91 6b f1 0f c4 56 b6 9e 24 f0 5f 89 91 74 7f 1d 69 b6 73 79 e9 a6 5f 44 a0 89 22 20 e5 36 30 2c 83 86 50 cc 38 c8 a6 94 9b 6e eb 47 ab f2 b7 55 df 4f eb 51 fb 5a 31 a3 0a 71 53 4e 50 f7 63 77 25 75 24 da 83 bd a5 06 9b d2 ea ed 74 6e 2d 72 7a 85 b6 81 3c 30 dd e8 36 f7 0b a1 f8 e5 2e 74 fb 9d 3e f6 00 25 d2 f5 48 c6 e5 52 a7 1b 49 70 bb d3 b1 c3 0e 08 c7 39 f0 bf c6 76 5e 01 f8 91 63 e2 eb 51 05 ae 89 e2 4b 03 6f ad 59 49 6e 66 5b 1b Data Ascii: _0)&!\gO^i6\|B3%BWaw(OZ_~,jx_xSVM$Z\^kV$_tisy_D" 60,P8nGUOQZ1qSNPcw%u$tn-rz<06.t>%HRIp9v^cQKoYInf[
2024-01-17 17:07:32 UTC	16384	IN	Data Raw: 58 e3 e1 8a fc 29 d7 67 f1 f4 5e 29 d1 f4 5d 26 de e7 ec da 24 9e 27 b1 4d 4a 6b 9b 80 32 5d 52 d8 b2 a6 30 db 64 1f 30 00 e4 0c d7 53 a3 f8 88 78 d7 58 7f 13 d9 5d c7 a8 cf 0b 14 93 59 f0 e7 c3 c5 c6 e2 80 3c 91 dc dd cb c4 d8 5d bb 82 9d a1 71 82 0d 11 6d fb b5 15 9e f6 bd fb eb ab bd bf ab f6 55 29 c2 83 75 b0 95 b9 e0 d3 5e d1 41 42 d7 b3 71 7c b4 dc 5b 5b 37 77 67 b2 b2 6a 59 7e 2a d4 15 3e 1a 78 7f 53 d2 b4 4f 12 eb da 4f 86 fc 45 67 7b 27 8e fc 4b 17 96 d3 a2 dd 79 a5 22 8d b3 3b 5b ee c6 18 72 1b 0b ce 6a 9f 8a 34 ed 13 47 f1 27 8b 6f fc 17 af bd b5 d7 8e a1 d5 34 eb 4b 73 0a de 5a 6a 66 6f 2d d2 08 a4 89 84 96 d7 04 b9 01 25 1f 78 e0 e2 bd 32 2f 82 50 ea fa d5 bf 88 27 f1 be b5 e3 09 e4 78 45 b4 5e 22 65 ba 83 4e 0c 84 c9 23 a4 6e a0 39 4e 23 c6 Data Ascii: X)g^)]&$'MJk2]R0d0SxX]Y<]qmU)u^ABq\|[[7wgjY~*>xSOOEg{'Ky";[rj4G'o4KsZjfo-%x2/P'xE^"eN#n9N#
2024-01-17 17:07:32 UTC	8192	IN	Data Raw: 9f c6 2f 05 4f 32 cd e0 4f 0e db 68 97 85 96 23 ae cd a6 a3 7e ec 7c a4 ed e4 cc e4 01 b4 20 50 3a 1e f5 9d 77 71 e1 9b a9 27 d6 ee f5 eb ad 53 54 0a 23 93 55 d4 76 dc 49 68 79 2b e5 46 7e 58 f3 bb 1b 40 62 a4 0e 86 a8 dd f8 8a fa fb 50 8f 4d d4 9b 4e 8e fe 11 85 9f 4c 44 55 45 1c 98 49 23 0a 0f 03 29 c8 c7 ad 62 c7 0d a4 3a d1 61 68 04 81 bf 74 ae d9 8c 37 ab 37 de 95 bb ef 38 fa 57 35 4c 54 dc 9b d2 de 96 fc 3b fe 27 b1 82 c9 e9 52 82 52 4d 3d ef 7e 6b f6 57 7a db c9 b6 bc ba 1a f3 78 9a 1b 38 7c ad 27 4e b9 9b 07 f7 d7 9a 8b 13 2b b9 fe 37 27 93 9f af 4f 6a 6d 9c 96 52 df 9d 42 79 1a ea e9 79 54 8a 2d ca 84 f5 d9 ce 33 db 35 02 5b cb 24 de 6d d4 fe 61 3f 78 dc 15 58 c7 fb 4a bd 73 db 9a e9 b4 7b 55 68 d1 98 84 85 41 de 14 00 1b d0 82 2b 24 dc f5 66 d5 Data Ascii: /O2Oh#~\| P:wq'ST#UvIhy+F~X@bPMNLDUEI#)b:aht778W5LT;'RRM=~kWzx8\|'N+7'OjmRByyT-35[$ma?xXJs{UhA+$f
2024-01-17 17:07:32 UTC	16384	IN	Data Raw: 78 cf ac 41 e1 6d 4e f3 4d d6 ec 2e ec a4 f3 a7 d2 75 09 52 ed 5e 4b 5c 29 25 44 cc 18 a8 24 b2 03 f3 0c 8a da 56 d5 c9 5f 99 7a bd 1f de ed 77 7f 2b 2e a7 9d 6a 92 97 25 39 f2 fb 29 3d 76 8c 94 a2 ae fb 45 4d c6 1c 9f de 93 6d 5c f5 2f 11 68 1f 0b be 37 78 7f 4b f1 ce ac 9a c4 3a 7c b7 92 59 42 60 63 17 db 47 98 63 06 53 10 62 23 3b 4e 18 95 01 5b 2c 47 6b 9e 1f d7 fc 3d e2 bf 19 6a 1a 6f c3 18 ac 16 f3 4c 89 74 6d 67 54 91 67 88 35 aa 46 e2 31 6b 34 67 6c 8f 1c 9b 79 24 1d a4 95 38 c1 ae 33 e2 77 87 fc 79 17 8d db 5b f1 4f 89 74 8f 09 f8 62 0b 88 34 b7 d4 74 b1 3a 7f 68 5a 49 22 79 76 b3 5a 9f 93 ef 39 43 2e 46 d0 5f 20 a9 c0 76 8f e0 af 06 7f c3 42 78 fb e1 9a 25 f6 97 a1 df 68 30 ea 11 e9 96 33 91 6c 92 b6 0c 97 11 c7 83 e5 4a a7 cb d9 b7 03 00 8c 10 Data Ascii: xAmNM.uR^K\)%D$V_zw+.j%9)=vEMm\/h7xK:\|YB`cGcSb#;N[,Gk=joLtmgTg5F1k4gly$83wy[Otb4t:hZI"yvZ9C.F_ vBx%h03lJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.16	50021	23.44.201.25	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:32 UTC	837	OUT	GET /th?id=ORMS.13ea43a651ff6493c22a7207123d9055&pid=Wdp&w=612&h=304&qlt=90&c=1&rs=1&dpr=1&p=0 HTTP/1.1 Host: th.bing.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-MS-GEC: 31A9747F126316250F67243D1061023017EAB84104F11C1801266F585CB7B15A Sec-MS-GEC-Version: 1-117.0.2045.47 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: MUID=2136D0069C246D353F30C40F9D676C20
2024-01-17 17:07:32 UTC	737	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Content-Length: 59747 Cache-Control: public, max-age=2426320 Date: Wed, 17 Jan 2024 17:07:32 GMT X-Cache: TCP_HIT from a23-44-202-153.deploy.akamaitechnologies.com (AkamaiGHost/11.4.0.1-53785976) (-) Connection: close Alt-Svc: h3=":443"; ma=93600 Akamai-GRN: 0.99ca2c17.1705511252.2c02e382 X-Check-Cacheable: YES
2024-01-17 17:07:32 UTC	15647	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 04 04 04 04 05 09 06 05 05 05 05 0b 08 08 06 09 0d 0b 0d 0d 0d 0b 0c 0c 0e 10 14 11 0e 0f 13 0f 0c 0c 12 18 12 13 15 16 17 17 17 0e 11 19 1b 19 16 1a 14 16 17 16 ff db 00 43 01 04 04 04 05 05 05 0a 06 06 0a 16 0f 0c 0f 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 ff c0 00 11 08 01 30 02 64 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC0d"}!1AQa"q2
2024-01-17 17:07:32 UTC	16384	IN	Data Raw: 10 32 4d 4b a6 ad 9b de 47 1d ee ed 8c 7a af 18 3d b9 15 a7 e2 af 0d 6a be 1d 8e 11 aa 47 14 2f 37 dd 55 70 fd 06 7a 8e 2b 17 68 66 5e 70 77 0c 9f 4e 6b a5 4a 15 e9 3e 49 68 fa af d0 f2 e5 0a 98 1c 4c 63 5a 9e b1 69 b8 c9 6f d6 cf d4 e9 7f b1 ad 67 8f 72 6e 8b 6f 6c e7 f9 d4 90 e9 16 02 3f 2e 48 3c df 52 7a 9a d1 d4 b4 ab 4f 0a e9 96 57 5e 26 f1 d7 85 f4 5b 7d 50 48 d6 4b ac 5f fd 9d e5 08 40 6d bc 1c ed c8 cf a6 45 4b e2 dd 06 c2 c5 b4 db 6d 4b e2 37 83 34 bf ed b8 c4 9a 62 cd ab 28 6b e5 24 05 78 cf 46 42 48 00 8e 09 60 33 93 5f 22 f1 15 a5 25 49 e2 3d de fa ff 00 c3 fc 8f d7 7e a1 82 8d 1f ac 47 00 bd a3 5f 0f b9 f9 df 95 2f 3d fc 8a 16 f6 96 76 f8 fb 34 2b 1e 3d 3b fd 7d 6b c7 bf 6d 89 0a 78 17 40 ff 00 b0 8c bf 5f f5 55 f4 0a f8 29 b4 9d 3f 53 7b ff Data Ascii: 2MKGz=jG/7Upz+hf^pwNkJ>IhLcZiogrnol?.H<RzOW^&[}PHK_@mEKmK74b(k$xFBH`3_"%I=~G_/=v4+=;}kmx@_U)?S{
2024-01-17 17:07:32 UTC	1260	IN	Data Raw: 7d 96 36 b9 6a ab bf eb b1 df fc 5e 6d 66 c7 f6 55 0d ab eb d6 fe 26 d4 d6 de da ea f3 54 59 23 b7 8a f1 d9 83 34 91 95 5d 82 2f 9b e4 e9 f2 85 c9 27 9a f9 b2 d3 c4 fa 63 46 b2 5d 0b ab 11 22 83 19 bc b7 31 c6 d9 f4 93 95 fc f1 5e 9b af f8 d7 c1 d3 7c 19 3e 03 f0 ef 87 75 4d 3e c6 14 85 6c ed 2f 27 59 63 b6 54 94 3e dd c4 b1 6c 72 00 ce 07 00 70 05 70 99 2e db 9c ee c8 c7 cc 33 91 5f 49 93 e1 b1 34 a8 b5 2f 76 ef 66 af d1 6b d3 f3 f9 1f 13 c4 b8 cc 1e 2b 16 a5 0f 7d 5b 74 ed d5 e9 d5 7e 03 a1 2b 34 6d 3c 6d 1c b1 ec 27 72 30 65 fc c7 15 f4 07 8a b5 5d 0f c1 3e 1b f0 6e b9 ac 68 3a 2c ba 1d e5 fc 96 da f5 e4 f6 a3 cf b5 53 67 34 b0 48 8d d0 03 2c 4a 87 76 7e f8 c5 7c db 75 e1 ed 32 45 91 ed 22 92 c6 67 ce 66 b1 90 db e0 91 d4 85 f9 4f e2 0d 7b 5f 8d 3c 45 Data Ascii: }6j^mfU&TY#4]/'cF]"1^\|>uM>l/'YcT>lrpp.3_I4/vfk+}[t~+4m<m'r0e]>nh:,Sg4H,Jv~\|u2E"gfO{_<E
2024-01-17 17:07:32 UTC	16384	IN	Data Raw: 51 c4 35 ad ac 9e bd fa 7e a7 83 c4 99 66 65 89 af 4a 78 3a 72 b4 54 ae d2 6a db 75 d3 ee df c8 f4 5d 5b e2 d7 8b 74 ed 3f 50 76 f1 75 fa c9 65 6b e6 b4 6d 70 07 2c 0e c0 73 ea 46 3f 1a a3 a6 fc 69 f1 ad e4 28 6c f5 9f 10 df 30 54 65 92 de 6d b0 3b e0 16 0a ed 83 b5 5b 20 b6 3b 71 5e 7b 79 63 16 a1 ae ae a5 aa 6b 9e 1d 9a e9 4a 81 29 91 64 8e 04 5f b8 b1 c6 c7 05 8f 24 b3 13 d7 81 c5 76 1a 2f d9 c6 9b 18 b6 b8 5b 84 39 26 64 6c 89 1b 3c 90 47 1d 7b 0e 07 41 5e ad 25 4f 11 55 a8 c6 2a 2b ca 2d bf 3f 2f b9 af c8 f9 fc 64 71 38 1c 3c 65 51 d4 6d db 56 e6 92 d3 6e 97 d5 3b 6a 9d ba 6c cb cb f1 03 e2 ed f6 db 5b df 18 ea da 7c 8b 23 49 2d dd 9d fe 77 a9 ce d8 d1 19 4e 00 c8 c9 3c f1 c7 5a d4 3e 39 f1 d2 c0 b1 ff 00 c2 5f ab c8 54 60 3b 5c fe f3 eb ba b2 07 0c Data Ascii: Q5~feJx:rTju][t?Pvuekmp,sF?i(l0Tem;[ ;q^{yckJ)d_$v/[9&dl<G{A^%OU*+-?/dq8<eQmVn;jl[\|#I-wN<Z>9_T`;\
2024-01-17 17:07:32 UTC	10072	IN	Data Raw: 59 e7 98 01 2c d2 b9 79 5f ea c7 f9 74 ab 07 24 b0 19 eb 83 9a fd 53 91 cb e3 db b7 4f 9f 77 f8 2f 5d 4f e6 6e 78 c1 5a 9e ef af f9 76 fc df a6 82 8c 9e 7d a8 e6 9a bd 31 4e 41 b9 b0 39 39 c0 1d cf d2 b6 31 7a 10 df 5b 2d dd b8 80 c9 24 6c 24 57 8e 48 db 0f 1b 03 c3 29 ec 47 3f 9e 3a 56 55 a4 ba f0 9a 49 a0 36 b7 b0 99 76 42 b7 49 e5 c9 20 1c 6f 2c 9f 2a 8c f3 8c 12 7d aa ec d7 32 de ca d6 9a 7c 8c 91 ab 14 b9 bd 52 30 98 ea b1 67 86 6e c5 ba 0f 73 56 74 e4 8a d9 61 86 0c 08 e3 21 57 73 12 7a f7 27 a9 ae 7f 66 aa d4 52 8b 6a dd 57 5f f3 b6 be 5f 89 d3 2a 8e 8d 17 19 24 ef d1 ab e9 f9 ab ff 00 5d 0e 07 e0 ff 00 c4 83 f0 bb e3 65 df 8b 9b 41 b4 d6 af 6d fe d3 0c 0b 24 a6 04 b7 95 f2 a6 65 f9 5b 90 0b 0c 1e c4 f3 de bd 43 c7 fa df 88 6e 3f e0 9f b1 df 7c 4b Data Ascii: Y,y_t$SOw/]OnxZv}1NA991z[-$l$WH)G?:VUI6vBI o,}2\|R0gnsVta!Wsz'fRjW__$]eAm$e[Cn?\|K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.16	50017	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:32 UTC	659	OUT	GET /tenant/amp/entityid/AA42cl9?w=16&h=16&q=100&m=6&f=png&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:32 UTC	543	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Last-Modified: Thu, 28 Dec 2023 19:40:10 GMT X-Datacenter: westus X-ActivityId: ee55cac7-1841-415a-84a1-9e43a4c042b4 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Type: image/png Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA42cl9?w=16&h=16&q=100&m=6&f=png&u=t X-Source-Length: 371 Content-Length: 512 Cache-Control: public, max-age=268348 Expires: Sat, 20 Jan 2024 19:40:00 GMT Date: Wed, 17 Jan 2024 17:07:32 GMT Connection: close
2024-01-17 17:07:32 UTC	512	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 e3 49 44 41 54 78 01 ad 92 61 0d 83 30 10 85 1f c9 fe 23 01 24 20 01 29 a0 00 70 40 1d 80 02 90 00 0a 40 02 12 90 80 83 6e ef b2 92 96 34 e9 36 76 49 e9 5d 39 be 7b bd e3 01 40 bf d6 cf 46 c0 2d fb 3f 20 cf f3 53 d1 71 1c d8 b6 ed 8c 7d 8e a3 20 cb 32 2c cb e2 e4 45 51 e4 c4 d7 c0 01 b0 1a 3f 58 d7 55 f2 a8 a6 28 0a 74 5d 87 38 8e d1 f7 3d ea ba 76 18 0e c0 79 f3 0e da b6 15 55 84 d3 ff 1a a0 b5 16 55 f3 3c fb f8 08 2a 50 4a 61 18 06 a4 69 2a d7 b9 52 82 80 71 1c 65 12 84 b0 37 04 71 3a c6 82 00 5e 81 2a 9a a6 91 5e 70 52 a6 c9 84 78 01 6c 94 a9 c2 9d d3 60 65 da be ef b2 9b 87 17 60 ff Data Ascii: PNGIHDRapHYs+IDATxa0#$ )p@@n46vI]9{@F-? Sq} 2,EQ?XU(t]8=vyUU<PJaiRqe7q:^*^pRxl`e`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.16	50019	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:32 UTC	663	OUT	GET /tenant/amp/entityid/AA15spNo.img?w=16&h=16&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:32 UTC	547	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Last-Modified: Tue, 16 Jan 2024 16:17:44 GMT X-Datacenter: northeu X-ActivityId: 376c73b3-63bf-42e3-a272-ce989dcc064a Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Type: image/jpeg Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA15spNo?w=16&h=16&q=60&m=6&f=jpg&u=t X-Source-Length: 6051 Content-Length: 1024 Cache-Control: public, max-age=342640 Expires: Sun, 21 Jan 2024 16:18:12 GMT Date: Wed, 17 Jan 2024 17:07:32 GMT Connection: close
2024-01-17 17:07:32 UTC	1024	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 10 00 10 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.16	50020	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:32 UTC	662	OUT	GET /tenant/amp/entityid/BBNvr53.img?w=16&h=16&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:32 UTC	544	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Last-Modified: Tue, 16 Jan 2024 04:00:56 GMT X-Datacenter: eastus X-ActivityId: 31729336-fa37-42fe-b88f-5f852c3e92a8 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Type: image/jpeg Content-Location: https://img.s-msn.com/tenant/amp/entityid/BBNvr53?w=16&h=16&q=60&m=6&f=jpg&u=t X-Source-Length: 592 Content-Length: 1024 Cache-Control: public, max-age=298487 Expires: Sun, 21 Jan 2024 04:02:19 GMT Date: Wed, 17 Jan 2024 17:07:32 GMT Connection: close
2024-01-17 17:07:32 UTC	1024	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 10 00 10 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.16	50018	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:32 UTC	662	OUT	GET /tenant/amp/entityid/AAywGC0.img?w=16&h=16&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:32 UTC	547	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AAywGC0?w=16&h=16&q=60&m=6&f=jpg&u=t Last-Modified: Thu, 11 Jan 2024 19:54:53 GMT X-Source-Length: 18737 X-Datacenter: northeu X-ActivityId: 1268bd11-5c39-49fd-bffb-2e26e45bfb46 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 1024 Cache-Control: public, max-age=312419 Expires: Sun, 21 Jan 2024 07:54:31 GMT Date: Wed, 17 Jan 2024 17:07:32 GMT Connection: close
2024-01-17 17:07:32 UTC	1024	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 10 00 10 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.16	50025	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:32 UTC	660	OUT	GET /tenant/amp/entityid/AA1l83GT?w=16&h=16&q=100&m=6&f=png&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:32 UTC	546	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA1l83GT?w=16&h=16&q=100&m=6&f=png&u=t Last-Modified: Wed, 10 Jan 2024 15:31:15 GMT X-Source-Length: 9138 X-Datacenter: eastus X-ActivityId: 25a82697-608d-4d25-accf-f3d290bac36b Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 1338 Cache-Control: public, max-age=210258 Expires: Sat, 20 Jan 2024 03:31:50 GMT Date: Wed, 17 Jan 2024 17:07:32 GMT Connection: close
2024-01-17 17:07:32 UTC	1338	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 02 5f 49 44 41 54 78 01 85 92 4b 68 53 41 14 86 cf cc bd 49 cc e3 a6 49 9a 47 8d 0f a2 c5 14 2d 14 5b ad 0b 1f b8 12 5c 88 14 45 f0 b1 12 0a 2a 68 d3 82 60 05 c5 47 c5 58 e9 46 5a 57 0a 05 b1 8a d4 85 0b 5d f8 80 8a 15 11 1a 4a 6d 09 55 ab 68 4c 93 9a 18 9b 26 de bc 6e 32 33 de 08 b1 37 6d 4a 67 33 87 ff 9c ff 9b 1f e6 f0 a0 38 ed de 2d 02 21 4c e8 bd 30 1a 56 c8 ff cb b6 ab 8d 2e bd 91 8b 79 db 7d 62 49 2c 03 08 96 c2 0a 4a e9 76 b9 f9 b8 34 a0 bc e7 e2 6c b7 4a 4b 9e ca 5a 65 80 c5 41 c5 02 95 5a 7a 9e d4 4d a8 54 38 27 0f 62 cc 01 44 83 40 c7 86 d4 06 9d 00 07 ac 6b a4 41 25 b4 2c 41 47 Data Ascii: PNGIHDRapHYs+_IDATxKhSAIIG-[\E*h`GXFZW]JmUhL&n237mJg38-!L0V.y}bI,Jv4lJKZeAZzMT8'bD@kA%,AG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.16	50022	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:32 UTC	660	OUT	GET /tenant/amp/entityid/BB16AQdF?w=16&h=16&q=100&m=6&f=png&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:32 UTC	548	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Last-Modified: Tue, 16 Jan 2024 03:31:44 GMT X-Datacenter: northeu X-ActivityId: 725339a3-a987-4f07-b889-e031474d2f9e Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Type: image/png Content-Location: https://img.s-msn.com/tenant/amp/entityid/BB16AQdF?w=16&h=16&q=100&m=6&f=png&u=t X-Source-Length: 22938 Content-Length: 1128 Cache-Control: public, max-age=296872 Expires: Sun, 21 Jan 2024 03:35:24 GMT Date: Wed, 17 Jan 2024 17:07:32 GMT Connection: close
2024-01-17 17:07:32 UTC	1128	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 01 f6 49 44 41 54 78 01 ad 93 cf 4b 54 51 14 c7 3f ef ce 9d 5f cd 8c 0e 28 39 63 2a d3 0f b4 68 21 86 a6 8b 0c 0b a4 28 b0 5d db 20 d0 6d 8b fa 0b fa 0b da d4 ae b6 16 b5 11 0a 5c 14 83 b6 90 4a 30 c8 c2 32 ca b1 70 1c 33 75 c6 71 9c 5f f7 bd ee 7b 33 23 b8 49 62 3a 70 ee 83 73 ef f9 dc 73 be e7 3e d9 7c e5 b1 45 1d 26 eb c8 75 52 ff 3f a0 50 52 28 65 21 a5 c0 a3 fd 20 db 57 41 b1 6c 72 b9 ff 08 9d ed 0d cc 7f db 62 ea 7d 0a e9 32 fe ca d8 03 ec 16 14 c3 7d 51 9e dc 3d 8f 61 18 3c 8d 27 78 39 9b d4 00 d7 c1 80 92 be f9 58 6b 90 07 77 06 9c 64 3b c3 8e d5 ac 6c 19 94 0d 81 cb 2c 21 34 dc a5 Data Ascii: PNGIHDRapHYs+IDATxKTQ?_(9c*h!(] m\J02p3uq_{3#Ib:pss>\|E&uR?PR(e! WAlrb}2}Q=a<'x9Xkwd;l,!4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.16	50027	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:32 UTC	501	OUT	GET /bundles/v1/edgeChromium/latest/nextdoor-card.437034546d0a289e581a.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:32 UTC	1186	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: CGIG1b4FAiXZ0png30NE+A== Last-Modified: Wed, 10 Jan 2024 03:17:37 GMT ETag: 0x8DC118AB2268BED Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 015f6f27-201e-00b5-7f73-439bf0000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:32 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Akamai-Request-BC: [a=23.218.242.10,b=89890067,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=87, clienttt; dur=2, origin; dur=0 , cdntime; dur=2 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b9d13 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511252.55b9d13 Vary: Origin
2024-01-17 17:07:32 UTC	15198	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6e 65 78 74 64 6f 6f 72 2d 63 61 72 64 22 5d 2c 7b 37 33 33 34 37 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6f 2e 72 28 65 29 2c 6f 2e 64 28 65 2c 7b 44 6f 75 62 6c 65 43 6f 6e 74 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 57 74 7d 2c 4e 65 78 74 64 6f 6f 72 43 61 72 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 74 7d 2c 4e 65 78 74 64 6f Data Ascii: 00006000(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["nextdoor-card"],{73347:function(t,e,o){"use strict";o.r(e),o.d(e,{DoubleContent:function(){return Wt},NextdoorCard:function(){return ft},Nextdo
2024-01-17 17:07:32 UTC	9390	IN	Data Raw: 74 65 6e 74 3a 7b 68 65 61 64 6c 69 6e 65 3a 22 6c 6f 63 61 74 69 6f 6e 53 65 74 74 69 6e 67 73 22 2c 74 79 70 65 3a 62 2e 75 48 2e 53 65 74 74 69 6e 67 73 7d 2c 74 79 70 65 3a 62 2e 63 39 2e 43 6f 6e 74 65 6e 74 47 72 6f 75 70 2c 65 78 74 3a 61 7d 29 2e 67 65 74 4d 65 74 61 64 61 74 61 54 61 67 28 29 2c 70 3d 65 2e 61 64 64 4f 72 55 70 64 61 74 65 43 68 69 6c 64 28 7b 6e 61 6d 65 3a 22 43 61 6e 63 65 6c 4c 6f 63 61 74 69 6f 6e 22 2c 61 63 74 69 6f 6e 3a 62 2e 41 77 2e 43 6c 69 63 6b 2c 62 65 68 61 76 69 6f 72 3a 62 2e 77 75 2e 43 61 6e 63 65 6c 2c 63 6f 6e 74 65 6e 74 3a 7b 68 65 61 64 6c 69 6e 65 3a 22 6c 6f 63 61 74 69 6f 6e 53 65 74 74 69 6e 67 73 22 2c 74 79 70 65 3a 62 2e 75 48 2e 53 65 74 74 69 6e 67 73 7d 2c 74 79 70 65 3a 62 2e 63 39 2e 43 6f 6e Data Ascii: tent:{headline:"locationSettings",type:b.uH.Settings},type:b.c9.ContentGroup,ext:a}).getMetadataTag(),p=e.addOrUpdateChild({name:"CancelLocation",action:b.Aw.Click,behavior:b.wu.Cancel,content:{headline:"locationSettings",type:b.uH.Settings},type:b.c9.Con
2024-01-17 17:07:32 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 3d 3d 28 74 3d 74 68 69 73 2e 67 65 74 4e 65 78 74 64 6f 6f 72 4d 65 74 61 64 61 74 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 63 61 6c 6c 28 74 68 69 73 2c 74 68 69 73 2e 6d 6f 64 65 6c 2e 69 64 29 29 2c 74 68 69 73 2e 63 6f 6d 6d 65 6e 74 43 6f 75 6e 74 3d 74 68 69 73 2e 6d 6f 64 65 6c 2e 63 6f 6d 6d 65 6e 74 43 6f 75 6e 74 3f 74 68 69 73 2e 6d 6f 64 65 6c 2e 63 6f 6d 6d 65 6e 74 43 6f 75 6e 74 3a 30 2c 74 68 69 73 2e 6e 65 69 67 68 62 6f 72 68 6f 6f 64 4e 61 6d 65 3d 74 68 69 73 2e 6d 6f 64 65 6c 2e 6e 65 69 67 68 62 6f 72 68 6f 6f 64 4e 61 6d 65 3f 74 68 69 73 2e 6d 6f 64 65 6c 2e 6e 65 69 67 68 62 6f 72 68 6f 6f 64 4e 61 6d 65 3a 22 22 7d 7d 28 30 2c 70 2e 67 6e 29 28 5b 4a 2e 4c 4f 5d 2c 77 Data Ascii: 00006000==(t=this.getNextdoorMetadata)\|\|void 0===t?void 0:t.call(this,this.model.id)),this.commentCount=this.model.commentCount?this.model.commentCount:0,this.neighborhoodName=this.model.neighborhoodName?this.model.neighborhoodName:""}}(0,p.gn)([J.LO],w
2024-01-17 17:07:32 UTC	8204	IN	Data Raw: 3d 3d 65 7c 7c 6e 75 6c 6c 3d 3d 3d 28 6f 3d 65 2e 66 6f 6f 74 65 72 54 65 6c 65 6d 65 74 72 79 4f 62 6a 65 63 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 67 65 74 4d 65 74 61 64 61 74 61 54 61 67 28 29 7d 7d 22 3e 24 7b 74 3d 3e 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 2e 63 61 72 64 46 6f 6f 74 65 72 41 74 74 72 69 62 75 74 69 6f 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 66 6f 6f 74 65 72 54 65 78 74 7d 7d 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 66 6f 6f 74 65 72 2d 69 63 6f 6e 22 3e 24 7b 28 30 2c 79 74 2e 67 29 28 28 74 3d 3e 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 2e 63 61 72 64 46 6f 6f 74 65 72 41 74 74 72 69 62 75 74 69 6f Data Ascii: ==e\|\|null===(o=e.footerTelemetryObject)\|\|void 0===o?void 0:o.getMetadataTag()}}">${t=>{var e;return null===(e=t.cardFooterAttribution)\|\|void 0===e?void 0:e.footerText}}<span class="footer-icon">${(0,yt.g)((t=>{var e;return null===(e=t.cardFooterAttributio
2024-01-17 17:07:32 UTC	8225	IN	Data Raw: 30 30 30 30 32 30 31 35 0d 0a 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 35 36 70 78 3b 70 61 64 64 69 6e 67 3a 36 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 32 36 30 70 78 3b 7a 2d 69 6e 64 65 78 3a 32 32 7d 2e 74 6f 70 69 63 2d 72 65 6d 69 6e 64 65 72 2d 63 6f 6e 74 65 6e 74 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 74 6f 70 69 63 2d 72 65 6d 69 6e 64 65 72 2d 74 65 78 74 7b 77 69 64 74 68 3a 32 30 34 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 65 67 6f 65 20 55 49 22 3b Data Ascii: 00002015;margin-top:-56px;padding:6px;position:absolute;text-decoration:none;width:260px;z-index:22}.topic-reminder-content{align-items:center;display:flex;justify-content:space-between;width:100%}.topic-reminder-text{width:204px;font-family:"Segoe UI";
2024-01-17 17:07:32 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 77 65 61 74 68 65 72 2f 6c 6f 63 61 74 69 6f 6e 73 2f 73 65 61 72 63 68 22 2c 75 2e 6d 73 6e 41 70 69 53 65 72 76 69 63 65 48 6f 73 74 3d 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 6d 73 6e 2e 63 6f 6d 22 3b 76 61 72 20 67 3d 6f 28 37 34 32 38 38 29 2c 68 3d 6f 28 34 34 30 36 30 29 2c 70 3d 6f 28 38 38 30 34 38 29 2c 6d 3d 6f 28 37 37 36 36 29 3b 63 6c 61 73 73 20 66 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 74 2c 65 2c 6f 2c 6e 2c 69 2c 61 2c 72 2c 73 29 7b 74 68 69 73 2e 66 65 74 63 68 49 6d 70 6c 3d 74 2c 74 68 69 73 2e 68 6f 73 74 3d 65 2c 74 68 69 73 2e 61 70 69 3d 6f 2c 74 68 69 73 2e 61 70 70 49 64 3d 6e 2c 74 68 69 73 2e 65 78 63 6c 75 64 65 53 75 62 54 79 70 65 73 3d 69 2c 74 68 69 73 2e 66 6c 69 67 68 74 49 64 3d 61 2c 74 Data Ascii: 00004000weather/locations/search",u.msnApiServiceHost="https://api.msn.com";var g=o(74288),h=o(44060),p=o(88048),m=o(7766);class f{constructor(t,e,o,n,i,a,r,s){this.fetchImpl=t,this.host=e,this.api=o,this.appId=n,this.excludeSubTypes=i,this.flightId=a,t
2024-01-17 17:07:32 UTC	12	IN	Data Raw: 20 6c 6f 63 61 74 69 6f 6e 20 0d 0a Data Ascii: location
2024-01-17 17:07:32 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 66 72 6f 6d 20 50 43 53 20 68 65 61 64 20 64 61 74 61 22 29 2c 6e 75 6c 6c 29 7d 61 73 79 6e 63 20 75 70 64 61 74 65 55 73 65 72 53 65 74 74 69 6e 67 73 28 74 2c 65 2c 6f 3d 7b 7d 2c 6e 29 7b 6c 65 74 20 69 3d 21 31 3b 74 72 79 7b 69 3d 61 77 61 69 74 20 74 68 69 73 2e 69 6e 73 74 61 6e 63 65 2e 75 70 64 61 74 65 57 65 61 74 68 65 72 53 65 74 74 69 6e 67 73 28 74 2c 65 2c 6f 2c 6e 29 7d 63 61 74 63 68 28 74 29 7b 28 30 2c 72 2e 4f 4f 29 28 74 2c 73 2e 44 79 52 2c 22 65 72 72 6f 72 20 69 6e 20 6c 69 62 72 61 72 79 20 5b 6c 6f 63 61 74 69 6f 6e 2d 73 65 72 76 69 63 65 5d 2c 57 65 61 74 68 65 72 20 6f 72 20 6c 6f 63 61 74 69 6f 6e 20 75 73 65 72 20 73 65 74 74 69 6e 67 73 20 75 70 64 61 74 65 20 66 61 69 6c 65 64 22 29 2c 69 3d Data Ascii: 00004000from PCS head data"),null)}async updateUserSettings(t,e,o={},n){let i=!1;try{i=await this.instance.updateWeatherSettings(t,e,o,n)}catch(t){(0,r.OO)(t,s.DyR,"error in library [location-service],Weather or location user settings update failed"),i=
2024-01-17 17:07:32 UTC	12	IN	Data Raw: 72 67 75 6d 65 6e 74 73 5b 31 0d 0a Data Ascii: rguments[1
2024-01-17 17:07:32 UTC	12865	IN	Data Raw: 30 30 30 30 33 32 33 35 0d 0a 5d 2c 72 3d 74 2c 73 3d 65 2e 74 69 6d 65 6f 75 74 7c 7c 6f 2e 74 69 6d 65 6f 75 74 2c 6c 3d 65 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 7c 7c 6f 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 2c 63 3d 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 64 29 7b 76 61 72 20 75 3d 65 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 46 75 6e 63 74 69 6f 6e 7c 7c 6e 28 29 2c 67 3d 6c 2b 22 5f 22 2b 75 3b 77 69 6e 64 6f 77 5b 75 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6f 28 7b 6f 6b 3a 21 30 2c 6a 73 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 74 29 7d 7d 29 2c 63 26 26 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 63 Data Ascii: 00003235],r=t,s=e.timeout\|\|o.timeout,l=e.jsonpCallback\|\|o.jsonpCallback,c=void 0;return new Promise((function(o,d){var u=e.jsonpCallbackFunction\|\|n(),g=l+"_"+u;window[u]=function(t){o({ok:!0,json:function(){return Promise.resolve(t)}}),c&&clearTimeout(c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.16	50031	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:32 UTC	834	OUT	GET /weathermapdata/1/static/weather/Icons/taskbar_v10/NoColor_Card/rightArrow.svg HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; MUIDB=2136D0069C246D353F30C40F9D676C20; _SS=SID=00
2024-01-17 17:07:32 UTC	1059	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-MD5: RyGFpOdbUg3FY++UTqQU0Q== Last-Modified: Fri, 12 May 2023 08:45:58 GMT ETag: 0x8DB52C54EA04378 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: e8e8ae70-101e-00c9-5345-8a9b18000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Expires: Fri, 09 Feb 2024 17:48:44 GMT Date: Wed, 17 Jan 2024 17:07:32 GMT Content-Length: 469 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89890146,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=1, origin; dur=0 , cdntime; dur=1 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b9d62 Cache-Control: public, max-age=2592000 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511252.55b9d62 Vary: Origin
2024-01-17 17:07:32 UTC	469	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 37 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 37 20 31 32 22 20 63 6c 61 73 73 3d 22 77 65 61 74 68 65 72 2d 61 72 72 6f 77 2d 67 6c 79 70 68 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0d 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 30 2e 35 32 38 35 31 32 20 30 2e 38 36 31 38 38 36 43 30 2e 32 36 38 31 36 35 20 31 2e 31 32 32 32 34 20 30 2e 32 36 38 31 36 35 20 31 2e 35 34 34 33 35 20 30 2e 35 32 38 35 31 32 20 31 2e 38 30 34 37 4c 34 2e 37 32 33 37 39 20 35 2e 39 39 39 39 36 4c 30 2e 35 32 38 35 31 32 20 31 30 2e 31 39 35 32 43 30 2e 32 36 38 31 36 35 20 31 30 2e 34 35 35 36 20 30 2e 32 36 38 31 36 35 20 31 30 2e 38 37 Data Ascii: <svg width="7" height="12" viewBox="0 0 7 12" class="weather-arrow-glyph" xmlns="http://www.w3.org/2000/svg"> <path d="M0.528512 0.861886C0.268165 1.12224 0.268165 1.54435 0.528512 1.8047L4.72379 5.99996L0.528512 10.1952C0.268165 10.4556 0.268165 10.87

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.16	50030	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:32 UTC	838	OUT	GET /weathermapdata/1/static/weather/Icons/taskbar_v10/Condition_Card/ClearNightV3.svg HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; MUIDB=2136D0069C246D353F30C40F9D676C20; _SS=SID=00
2024-01-17 17:07:32 UTC	1059	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-MD5: a+Rq5wSEK/CaPSDY9b609g== Last-Modified: Fri, 12 May 2023 08:45:43 GMT ETag: 0x8DB52C54589B270 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: dee91a3f-e01e-004b-0d5a-8adaa6000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Expires: Fri, 09 Feb 2024 20:15:25 GMT Date: Wed, 17 Jan 2024 17:07:32 GMT Content-Length: 871 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89890172,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=0, origin; dur=0 , cdntime; dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b9d7c Cache-Control: public, max-age=2592000 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511252.55b9d7c Vary: Origin
2024-01-17 17:07:32 UTC	871	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 37 32 22 20 68 65 69 67 68 74 3d 22 37 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 37 32 20 37 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 31 36 2e 34 34 33 33 20 34 36 2e 38 30 32 35 43 33 33 2e 34 36 31 35 20 34 36 2e 38 30 32 35 20 34 37 2e 32 35 37 34 20 33 32 2e 39 35 37 20 34 37 2e 32 35 37 34 20 31 35 2e 38 37 37 38 43 34 37 2e 32 35 37 34 20 31 32 2e 34 34 32 38 20 34 36 2e 36 39 39 34 20 39 2e 31 33 38 36 39 20 34 35 2e 36 36 39 33 20 36 2e 30 35 31 36 Data Ascii: <svg width="72" height="72" viewBox="0 0 72 72" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M16.4433 46.8025C33.4615 46.8025 47.2574 32.957 47.2574 15.8778C47.2574 12.4428 46.6994 9.13869 45.6693 6.0516

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.16	50029	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:32 UTC	833	OUT	GET /weathermapdata/1/static/weather/Icons/taskbar_v10/NoColor_Card/waterDrop.svg HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; MUIDB=2136D0069C246D353F30C40F9D676C20; _SS=SID=00
2024-01-17 17:07:32 UTC	1059	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-MD5: 6FmmpLFDYRATIjtKmHnSeQ== Last-Modified: Fri, 12 May 2023 08:45:57 GMT ETag: 0x8DB52C54DDB142F Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: db33f000-301e-00ce-6437-8af77b000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Expires: Wed, 24 Jan 2024 16:56:01 GMT Date: Wed, 17 Jan 2024 17:07:32 GMT Content-Length: 325 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89890158,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=87, clienttt; dur=0, origin; dur=0 , cdntime; dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b9d6e Cache-Control: public, max-age=2592000 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511252.55b9d6e Vary: Origin
2024-01-17 17:07:32 UTC	325	IN	Data Raw: 3c 73 76 67 0d 0a 20 20 20 20 77 69 64 74 68 3d 22 37 22 0d 0a 20 20 20 20 68 65 69 67 68 74 3d 22 31 30 22 0d 0a 20 20 20 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 37 20 31 30 22 0d 0a 20 20 20 20 63 6c 61 73 73 3d 22 77 65 61 74 68 65 72 2d 63 75 72 72 65 6e 74 2d 70 72 65 63 69 70 69 74 61 74 69 6f 6e 2d 67 6c 79 70 68 22 0d 0a 20 20 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 0d 0a 3e 0d 0a 20 20 20 20 3c 70 61 74 68 0d 0a 20 20 20 20 20 20 20 20 64 3d 22 4d 35 2e 39 37 20 35 2e 37 63 2e 31 39 2e 33 36 2e 32 38 2e 37 36 2e 32 38 20 31 2e 31 37 61 33 2e 30 36 20 33 2e 30 36 20 30 20 30 31 2d 2e 39 32 20 32 2e 32 31 20 33 2e 31 31 20 33 2e 31 31 20 30 20 30 31 2d 34 2e 39 2d 2e 36 33 41 33 Data Ascii: <svg width="7" height="10" viewBox="0 0 7 10" class="weather-current-precipitation-glyph" xmlns="http://www.w3.org/2000/svg"> <path d="M5.97 5.7c.19.36.28.76.28 1.17a3.06 3.06 0 01-.92 2.21 3.11 3.11 0 01-4.9-.63A3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.16	50028	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:32 UTC	804	OUT	GET /staticsb/statics/latest/icons/NtpTopStories.svg HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; MUIDB=2136D0069C246D353F30C40F9D676C20; _SS=SID=00
2024-01-17 17:07:32 UTC	1034	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-MD5: SU4ditmpQg79T2xAl6pmkg== Last-Modified: Tue, 16 Jan 2024 10:44:51 GMT ETag: 0x8DC16802AF47AB1 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 5006c1cb-901e-0056-1ba3-48f470000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:32 GMT Content-Length: 805 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89890178,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=0, origin; dur=0 , cdntime; dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b9d82 Cache-Control: public, max-age=31536000 report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511252.55b9d82 Vary: Origin
2024-01-17 17:07:32 UTC	805	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 32 22 20 68 65 69 67 68 74 3d 22 31 35 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 20 31 35 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0d 0a 20 20 3c 70 61 74 68 20 66 69 6c 6c 3d 22 75 72 6c 28 23 61 29 22 20 64 3d 22 4d 36 2e 30 32 20 30 61 2e 36 36 2e 36 36 20 30 20 30 20 30 2d 2e 33 37 2e 31 32 68 2d 2e 30 31 63 2d 2e 37 2e 33 36 2d 31 2e 32 33 2e 39 36 2d 31 2e 35 20 31 2e 36 39 61 33 2e 34 34 20 33 2e 34 34 20 30 20 30 20 30 2d 2e 30 35 20 32 2e 34 63 2e 31 34 2e 34 2e 33 33 2e 38 2e 35 37 20 31 2e 31 35 2e 31 2e 31 34 2e 32 2e 32 38 2e 32 35 2e 34 34 61 31 2e 34 20 31 2e 34 20 30 20 30 20 31 2d 2e 30 Data Ascii: <svg width="12" height="15" fill="none" viewBox="0 0 12 15" xmlns="http://www.w3.org/2000/svg"> <path fill="url(#a)" d="M6.02 0a.66.66 0 0 0-.37.12h-.01c-.7.36-1.23.96-1.5 1.69a3.44 3.44 0 0 0-.05 2.4c.14.4.33.8.57 1.15.1.14.2.28.25.44a1.4 1.4 0 0 1-.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.16	50024	13.107.246.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:32 UTC	600	OUT	GET /shared/edgeweb/css/5ac15a1.css HTTP/1.1 Host: edgestatic.azureedge.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:32 UTC	765	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:32 GMT Content-Type: text/css; charset=UTF-8 Content-Length: 60155 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable ETag: W/"eafb-18cfea0a83b" Last-Modified: Fri, 12 Jan 2024 17:03:10 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Origin-Agent-Cluster: ?1 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 x-azure-ref: 20240117T170732Z-zynqkchemt047bg0gws1g6v6x80000000450000000007kr3 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-01-17 17:07:32 UTC	15619	IN	Data Raw: 2e 65 72 72 6f 72 2d 70 61 67 65 7b 6d 61 72 67 69 6e 3a 36 30 70 78 20 32 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 33 30 30 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 6e 75 78 74 2d 70 72 6f 67 72 65 73 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 3b 68 65 69 67 68 74 3a 32 70 78 3b 6c 65 66 74 3a 30 3b 6f 70 61 63 69 74 79 3a 31 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 77 69 64 74 68 20 2e 31 73 2c 6f 70 61 63 69 74 79 20 2e 34 73 3b 77 69 64 74 68 3a 30 3b 7a 2d 69 6e 64 65 78 3a 39 39 39 39 39 39 7d 2e 6e 75 78 74 2d 70 72 6f 67 72 65 73 73 2e 6e 75 78 74 2d 70 72 6f 67 72 65 73 73 2d 6e 6f 74 72 61 6e 73 69 74 69 6f 6e Data Ascii: .error-page{margin:60px 20px;min-height:300px;text-align:center}.nuxt-progress{background-color:#000;height:2px;left:0;opacity:1;position:fixed;right:0;top:0;transition:width .1s,opacity .4s;width:0;z-index:999999}.nuxt-progress.nuxt-progress-notransition
2024-01-17 17:07:32 UTC	16384	IN	Data Raw: 6f 77 6e 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 33 70 78 20 72 67 62 61 28 32 36 2c 38 39 2c 32 30 30 2c 2e 33 33 29 7d 2e 65 75 6c 61 2d 64 6f 77 6e 6c 6f 61 64 2d 73 65 63 74 69 6f 6e 5f 5f 64 72 6f 70 64 6f 77 6e 3a 64 69 73 61 62 6c 65 64 2c 2e 65 75 6c 61 2d 64 6f 77 6e 6c 6f 61 64 2d 73 65 63 74 69 6f 6e 5f 5f 64 72 6f 70 64 6f 77 6e 3a 64 69 73 61 62 6c 65 64 3a 61 63 74 69 76 65 2c 2e 65 75 6c 61 2d 64 6f 77 6e 6c 6f 61 64 2d 73 65 63 74 69 6f 6e 5f 5f 64 72 6f 70 64 6f 77 6e 3a 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 2c 2e 65 75 6c 61 2d 64 6f 77 6e 6c 6f 61 64 2d 73 65 63 74 69 6f 6e 5f 5f 64 72 6f 70 64 6f 77 6e 3a 64 69 73 61 62 6c 65 64 5b 61 72 69 61 2d 63 68 65 63 6b 65 64 5d 7b 62 Data Ascii: own:focus-visible{box-shadow:0 0 0 3px rgba(26,89,200,.33)}.eula-download-section__dropdown:disabled,.eula-download-section__dropdown:disabled:active,.eula-download-section__dropdown:disabled:hover,.eula-download-section__dropdown:disabled[aria-checked]{b
2024-01-17 17:07:32 UTC	16384	IN	Data Raw: 6d 61 74 65 64 2d 68 65 61 64 6c 69 6e 65 2d 2d 61 6c 6c 6f 77 2d 63 6c 69 63 6b 3a 68 6f 76 65 72 20 2e 61 6e 69 6d 61 74 65 64 2d 68 65 61 64 6c 69 6e 65 5f 5f 70 68 72 61 73 65 20 73 70 61 6e 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 68 65 6d 65 2d 70 75 72 70 6c 65 29 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6e 69 6d 61 74 65 64 2d 68 65 61 64 6c 69 6e 65 5f 5f 70 68 72 61 73 65 2d 2d 73 68 6f 77 2d 69 63 6f 6e 3a 61 66 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 22 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 2c 25 33 43 73 76 67 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 27 20 77 69 64 74 68 3d 27 32 34 27 20 68 65 69 67 68 74 3d Data Ascii: mated-headline--allow-click:hover .animated-headline__phrase span{color:var(--theme-purple)!important}.animated-headline__phrase--show-icon:after{background:url("data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' width='24' height=
2024-01-17 17:07:32 UTC	11768	IN	Data Raw: 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 38 36 30 70 78 29 7b 2e 64 65 61 6c 2d 69 6d 61 67 65 2d 63 61 72 64 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 7d 2e 64 65 61 6c 2d 76 69 64 65 6f 2d 6c 6f 6f 70 2d 63 61 72 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 32 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 37 70 78 20 39 70 78 20 2d 32 2e 35 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 33 34 29 2c 30 20 31 35 70 78 20 32 33 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 31 31 29 2c 30 20 35 2e 35 70 78 20 33 30 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 31 29 3b 66 Data Ascii: and (max-width:860px){.deal-image-card{font-size:14px;padding:15px;transform:none}}.deal-video-loop-card{background-color:#fff;border-radius:12px;box-shadow:0 7px 9px -2.5px rgba(0,0,0,.034),0 15px 23px 0 rgba(0,0,0,.011),0 5.5px 30px 0 rgba(0,0,0,.01);f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.16	50032	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:32 UTC	820	OUT	GET /staticsb/statics/latest/icons-wc/icons/traffic/TrafficTitle.svg HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; MUIDB=2136D0069C246D353F30C40F9D676C20; _SS=SID=00
2024-01-17 17:07:32 UTC	1035	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-MD5: QRsmo008fKsXk2AMdGHWKA== Last-Modified: Tue, 16 Jan 2024 10:45:06 GMT ETag: 0x8DC168033CC2FFC Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: ea81a797-801e-005c-359a-48de32000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:32 GMT Content-Length: 1477 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89890208,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=89, clienttt; dur=0, origin; dur=0 , cdntime; dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55b9da0 Cache-Control: public, max-age=31536000 report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511252.55b9da0 Vary: Origin
2024-01-17 17:07:32 UTC	1477	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 20 77 69 64 74 68 3d 22 31 34 22 20 68 65 69 67 68 74 3d 22 31 36 22 3e 0d 0a 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 37 33 37 41 38 30 22 20 64 3d 22 4d 31 20 31 68 31 34 61 34 20 34 20 30 20 30 31 2d 34 20 34 48 35 61 34 20 34 20 30 20 30 31 2d 34 2d 34 7a 4d 31 20 36 68 31 34 61 34 20 34 20 30 20 30 31 2d 34 20 34 48 35 61 34 20 34 20 30 20 30 31 2d 34 2d 34 7a 4d 31 20 31 31 68 31 34 61 34 20 34 20 30 20 30 31 2d 34 20 34 48 35 61 34 20 34 20 30 20 30 31 2d 34 2d 34 7a 22 2f 3e 0d 0a 3c 72 65 63 74 20 77 69 64 74 68 3d 22 38 22 20 68 65 69 67 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 16 16" width="14" height="16"><path fill="#737A80" d="M1 1h14a4 4 0 01-4 4H5a4 4 0 01-4-4zM1 6h14a4 4 0 01-4 4H5a4 4 0 01-4-4zM1 11h14a4 4 0 01-4 4H5a4 4 0 01-4-4z"/><rect width="8" heig

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.16	50026	23.199.50.102	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:32 UTC	851	OUT	GET /REST/v1/Imagery/Map/RoadVibrant/40.7360,-73.9273/13?ms=266,192&ml=Basemap,OsmBuildings,TrafficFlow&key=AoyTpSR4rZ82ACunlVljE1ihA5yanCDx6D-acnj31k3Qp4hmUjE-uBGXnMPa1L94&c=en-us&fmt=png&od=1&logo=n&da=ro&maxAge=1200&pushpin=40.736003,-73.927275;cnst.f HTTP/1.1 Host: ecn-us.dev.virtualearth.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:32 UTC	578	IN	HTTP/1.1 200 OK Content-Type: image/png Server: Microsoft-IIS/10.0 X-BM-TraceID: 8c8f637b6319437489cf50041ce3ed2d X-BM-VendorIDs: 5 X-BM-FE-Elapsed: 50 X-BM-Srv: BN00006C5A X-MS-BM-WS-INFO: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: Content-Type,X-FD-Features,X-FD-FLIGHT,PreferAnonymous X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 129110 Cache-Control: public, max-age=925 Expires: Wed, 17 Jan 2024 17:22:57 GMT Date: Wed, 17 Jan 2024 17:07:32 GMT Connection: close
2024-01-17 17:07:32 UTC	15806	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 0a 00 00 00 c0 08 02 00 00 00 73 ad ba f8 00 00 20 00 49 44 41 54 78 01 24 bb 07 70 5b 75 b6 3f 9e 7d ff d7 77 df 7b db 58 d8 65 69 4b 0d 04 02 84 50 02 01 12 4a a8 4b 87 5d ca 12 58 5a 7a 9c d8 71 9c de 2b 84 12 42 49 42 12 52 48 75 2f b2 7a 97 2c 59 96 6d 59 96 64 f5 5e af 74 7b 2f e7 3f 97 9f 46 23 df f1 78 46 96 ee f7 9c f3 69 67 da c5 ed b7 9d 58 fd 07 d3 ce db 4c 2b af b6 36 df 30 7a 64 41 6a 6c 7d 50 38 db c1 5c d8 93 f9 f1 9f 43 3b 9e ee 7f 77 fe 85 d7 9e 3d f3 c9 9a c3 6f eb 77 dc da bf e9 ba fd 03 1f 3d 78 f2 ef f3 ec 1b cf 42 7c 12 32 a8 9c c7 a9 1c 4d 16 01 48 96 2c 91 68 4e bd 68 14 8a 89 a0 5d db 55 8e 4d 54 63 21 40 6b 20 30 4c 26 29 e6 32 50 2e 00 83 42 23 0d 54 42 e2 62 65 d4 1f 88 Data Ascii: PNGIHDRs IDATx$p[u?}w{XeiKPJK]XZzq+BIBRHu/z,YmYd^t{/?F#xFigXL+60zdAjl}P8\C;w=ow=xB\|2MH,hNh]UMTc!@k 0L&)2P.B#TBbe
2024-01-17 17:07:32 UTC	16384	IN	Data Raw: 24 82 e0 f1 fe 3e 6b a3 d5 d6 03 6a 23 68 59 e0 fe b1 f7 dc dc b6 dd 93 cd ab 1e 2b fe 6a a4 79 e1 fd 85 9f 4f b3 6f 5b 05 e5 df eb 19 33 ba 53 27 17 7e fe d6 d5 f7 bf f9 f5 83 35 a7 3f fa e9 d4 47 ef 5e ff e6 91 dc 2f 52 3a 16 a7 f4 ad 7c 2c 71 fc 4d e6 da 01 68 5f 2f 16 be e6 3f fa 40 db aa db 2a 17 fc a7 6a e9 94 f6 bd 5f 0f 5d ba 60 f4 57 81 df 86 8e 29 3d ab eb f0 ff 1a 37 4e b5 1e 5a 0e b5 ff ce 5b f0 7a cb 9e 5a b0 61 c0 24 75 1c 07 61 50 89 0f ca 49 17 1e 66 35 51 06 5d 54 35 9a 11 6c 43 2e 9e 91 45 5e 41 d3 50 41 e6 79 d6 ed b3 33 0a 4e c8 71 01 48 4c 4f 38 48 1f 8e ac 11 92 20 b1 20 4a 32 4e 4a 71 0c 14 55 e6 39 5e e1 30 8d 76 0b c1 20 60 6e 88 fa 20 e9 02 ba 1d 84 73 5a 5f 3e 84 f6 42 cb fd b5 a9 ff 57 b7 f8 61 db ce bf d5 2e 7a b4 65 c3 73 e6 Data Ascii: $>kj#hY+jyOo[3S'~5?G^/R:\|,qMh_/?@*j_]`W)=7NZ[zZa$uaPIf5Q]T5lC.E^APAy3NqHLO8H J2NJqU9^0v `n sZ_>BWa.zes
2024-01-17 17:07:32 UTC	1240	IN	Data Raw: f7 8f 86 a6 7a 74 7e 2b 72 7f 7b eb 84 47 1e 45 42 28 9c a0 2d fe 15 01 65 45 46 64 51 f6 50 79 54 5f 09 94 4c 65 80 cb 06 dc 43 20 d2 72 3a 0e 2c 21 cb 59 9b c3 20 02 e5 05 ec 9b 54 db 94 f3 05 0b ae 7c a5 4b 0d a2 3b 5e a0 41 e5 14 90 24 50 90 93 96 3a 1a 27 1c 0a 0f 92 41 46 33 3c 48 84 9c e1 d4 0c 0f 78 7b b8 67 d1 b9 75 2f 5d ce 7f fb f2 92 1d 3f 7e 6c 69 5c 95 eb 5a ec dc 36 26 bc e1 6f c6 95 7f ac 28 19 73 61 db 63 97 be 7e b6 74 ef d4 1b eb 1f e9 da 3e ae aa e8 ae b6 4d 0f 9a 76 4d f0 7e 3b 8d 38 f5 16 5c ff 02 da d7 83 7e 17 d0 37 81 ad 03 ae 09 a8 56 48 36 83 b7 1e 6c 55 60 ba 4e b5 1c 11 7b 8e 82 fe 07 b0 9d 41 8b 4e bc 19 c8 76 48 36 01 63 00 57 a5 d0 7a 34 74 79 83 7e ff c7 6d 9b 5f 6d 5b 3f ad 77 dd 44 eb da 7b 1c eb c6 e8 56 dd 6e 2c 79 b0 Data Ascii: zt~+r{GEB(-eEFdQPyT_LeC r:,!Y T\|K;^A$P:'AF3<Hx{gu/]?~li\Z6&o(sac~t>MvM~;8\~7VH6lU`N{ANvH6cWz4ty~m_m[?wD{Vn,y
2024-01-17 17:07:32 UTC	16384	IN	Data Raw: a1 21 8a 62 2c 16 61 59 9a 65 11 6a 5f 2b a8 bc 5e b7 aa 22 0a 98 36 ce d2 1a 0f ad 73 90 10 2d 42 d5 ee f5 9f 5f 09 04 7c d9 2c a1 bd 5f 55 65 ad 41 ff b9 93 d1 06 62 e1 70 50 51 24 9e 67 19 86 a2 28 d2 e7 f3 68 65 15 c3 50 da 1b 3c 1e 17 6a fa 79 86 11 78 41 91 47 3c 0e 82 21 49 8a 08 47 43 91 58 38 1c 0d d9 ed 36 8a 22 b1 64 1c cf a4 24 91 8f 46 42 00 6a 4a a1 3c c8 32 33 32 08 6c af 12 9a 34 ff 8d 1b a6 56 64 82 9a 63 62 89 30 81 63 12 c7 a2 42 99 a1 53 58 82 20 08 14 ab 22 c5 72 38 f0 ac 80 a7 13 d1 80 88 54 1c b2 c0 53 94 90 f6 26 5c bc 98 f6 01 f9 74 ef 9e bf b7 95 1c 06 f3 0b fb 57 ce ff fe 60 77 34 ad f3 8d 74 18 9a 06 07 9b 9c 83 2d 43 c6 f6 48 d0 e5 f4 7b af b4 35 74 13 9e 06 71 64 87 eb f2 5b 8d 25 4f 5d 9b 37 f9 cc 07 0b 8e 7e de 33 74 29 ee Data Ascii: !b,aYej_+^"6s-B_\|,_UeAbpPQ$g(heP<jyxAG<!IGCX86"d$FBjJ<232l4Vdcb0cBSX "r8TS&\tW`w4t-CH{5tqd[%O]7~3t)
2024-01-17 17:07:32 UTC	12120	IN	Data Raw: 9c a2 0a 1c 87 51 74 39 15 f6 42 39 8b 43 79 86 f9 f3 31 a6 f5 db 41 3d bd 79 ed bf 3a 77 39 80 0c 33 89 6c 2e 46 13 79 9c ca da 13 0e 6b c6 31 ec 1b 52 05 46 cc 49 93 3d 6f 37 a5 4c 96 0c 5a 83 58 32 16 53 da aa 4f 98 cc 19 9b 2d ef ec f5 0d 8d 44 75 c6 ac cd 94 b3 6a 92 5a 7d c6 60 cc 99 aa 63 2e d4 a2 a4 0d c6 34 52 9d 0c f9 07 9c 05 9b 3d 67 d1 c7 34 f6 9c c5 9c 32 18 93 7a 75 c6 a8 8d 19 2c 5e 8d c5 31 a2 73 8f a8 83 1a 75 d2 38 9c b7 8c 90 ae 7d e9 9e 31 cd 2b 1e a7 ce cd 2c 9d b9 ab 71 cd d1 cc 60 09 68 5e a2 15 8a 8e 07 83 1c 4b d3 2c b2 6e 53 3c 19 08 79 05 11 81 5b ab c7 43 11 d8 68 24 80 8e 87 40 23 a1 8d cc 86 a2 be 9a 98 08 69 11 1c a9 4c 30 17 a7 81 2e f1 19 b3 53 5d a9 54 48 8c f5 7b c2 5a b5 a1 bf 77 a0 bb b3 4b 3d a2 0a 04 7c 08 e1 11 8b Data Ascii: Qt9B9Cy1A=y:w93l.Fyk1RFI=o7LZX2SO-DujZ}`c.4R=g42zu,^1su8}1+,q`h^K,nS<y[Ch$@#iL0.S]TH{ZwK=\|
2024-01-17 17:07:32 UTC	16384	IN	Data Raw: 7e 07 56 a7 81 88 17 e1 be 49 27 e4 3d 90 f3 88 69 67 31 22 00 d0 45 8e 8e 94 01 e3 2b 58 1e 2f 78 69 25 4c 41 1a a7 29 9e 47 60 5c 46 41 d8 84 32 80 97 2d 3b 88 5c ae 22 8c 58 8d ad dd 9d a2 2c 81 52 a1 08 92 2e e3 32 cb 83 ac b0 34 83 61 58 3e 9f 95 65 59 e0 f8 54 2c 2e f3 42 32 19 47 be 79 81 f6 27 83 8c 48 57 40 4c 85 02 20 70 1e 93 e1 86 ab af f8 dd af 2f 59 bf 7a 05 54 50 61 f7 e9 aa 55 37 5f 73 c5 90 a9 3f 45 c5 e3 39 5f 20 64 d1 da fa 06 1c bd 66 d2 dd 91 1a b1 a7 2c 8e b4 d5 91 b6 da 32 56 4b c6 82 5e 39 ab 39 6f 33 e7 6d 83 a1 51 1f 6c d6 62 ca 98 ab 8e 73 6b d6 ea ce 39 2c 31 83 c6 3d 3c 68 ee 1a b6 f6 e9 3d c3 b6 a8 c1 9e b2 d8 32 56 64 1f cf 22 b3 a1 3d 65 31 47 f5 ce b8 c1 9f b3 1b e3 06 75 d2 e8 41 a9 63 29 13 b0 26 60 07 01 85 ec 7d b1 7b Data Ascii: ~VI'=ig1"E+X/xi%LA)G`\FA2-;\"X,R.24aX>eYT,.B2Gy'HW@L p/YzTPaU7_s?E9_ df,2VK^99o3mQlbsk9,1=<h=2Vd"=e1GuAc)&`}{
2024-01-17 17:07:32 UTC	16384	IN	Data Raw: 81 62 00 85 07 ee f6 62 f6 00 ee f0 95 9c 2d e5 52 a1 42 e4 e2 21 0f 96 89 4b 32 c7 8a 82 5c 47 47 34 a4 34 f8 ef 07 ba ec d3 94 7a 5d d5 a1 ce 0c 43 c7 e3 51 3d 17 d7 bb 18 f5 7e 78 3d 72 f4 03 18 cf b3 7a 9f bc 7e a0 42 7d f2 75 55 92 04 74 8f ae 21 22 9b a4 35 2b 44 35 1e 8c 72 74 ad c6 73 54 43 28 35 85 62 9d ab d4 25 51 45 5d 94 9c a2 14 25 31 a1 89 1e 10 dd 00 5f 88 9e db 87 3e 1a d7 b3 ea e4 9e f9 4f 42 c7 8b ca c1 6b 07 96 8e 6b 9d 35 b9 6d c9 8f 9a c3 0e a5 ed f6 ce 44 a5 08 4d 98 ff c2 9c 15 33 17 e2 c1 74 31 86 1d dc bd 5f 96 e5 d7 d7 bc b1 f0 f5 a5 1c 48 74 9d 8d 95 93 c3 fe 11 6b cc 12 ab 44 6d 49 73 b0 e4 89 31 c1 ff 0c 0f 7d 99 d7 2b 4b fa f1 40 3f 15 1c 53 74 9b 52 86 63 6f 65 fd 66 e3 3f 43 45 7f af bb 70 87 29 65 e8 0b f6 0c 45 07 74 5c Data Ascii: bb-RB!K2\GG44z]CQ=~x=rz~B}uUt!"5+D5rtsTC(5b%QE]%1_>OBkk5mDM3t1_HtkDmIs1}+K@?StRcoef?CEp)eEt\
2024-01-17 17:07:32 UTC	7952	IN	Data Raw: e3 7b ae be e2 93 73 96 02 66 65 b4 d8 07 ec e0 82 81 15 e7 d8 9e 5b 55 3c 80 83 9a d7 eb d9 7c aa 94 cb 56 0a 79 be 55 af 90 45 a6 52 28 a7 13 c9 44 4c 10 9a a5 52 01 6d 72 67 a7 11 a6 a2 cc dc fc 54 ab e5 78 3c da 6c 36 78 9e 33 8f 47 57 ea 19 88 b0 cf 76 ba b4 a4 77 54 ad 8f ac 33 68 9a d2 05 55 6c 2b 45 10 ed b1 67 ce 1d 7a fa 8c 49 98 b8 78 df fa 27 06 de cb 40 a7 0e 06 6b 34 45 bd a9 19 7c a1 12 8b 16 82 c1 92 7f 32 39 ed a0 bd 58 13 25 e0 20 1e 71 d2 e6 8e cf 24 2a 81 64 35 18 2f 04 8b d5 78 bf df 81 be 1a f3 d8 de d9 ba e1 b7 cb 16 5e 71 ec f7 7f 79 fc bf fe e1 ac ff fc d3 19 ff f8 c9 3d 4b ea bb d7 c9 03 1b 1c cf 5e e5 db 7e e5 d4 ba 85 47 d6 9f 35 bc ed bc bd ef df b4 cf fe cc 47 fc ce 63 ed ab e7 05 36 fc 30 f3 ca f7 2d eb 1e 62 f6 d8 50 5c 68 Data Ascii: {sfe[U<\|VyUER(DLRmrgTx<l6x3GWvwT3hUl+EgzIx'@k4E\|29X% q$*d5/x^qy=K^~G5Gc60-bP\h
2024-01-17 17:07:32 UTC	16384	IN	Data Raw: c8 d3 a7 98 26 6a 20 a1 ed ff b9 37 fe 79 81 fc f3 17 e3 28 96 cc f2 54 36 9f 64 39 02 2c 55 93 39 89 25 4d 45 30 55 c9 42 c3 8b 2e 28 2a a3 e8 bc 85 ea 24 6f 40 80 83 be 3c 1c f5 48 87 ed 6c 75 14 6a 23 70 78 84 38 34 58 a8 f2 49 27 ec d4 81 ee c4 9e e6 b1 33 2e b2 76 94 3d eb 20 6a 47 99 c3 ad be aa ce 40 eb 40 b8 ba 37 e8 c4 8d ae ac d0 c7 6a bd b2 d2 ab f0 21 80 08 18 21 10 c6 0c c2 45 26 5a 3c c3 a7 3b db 4f 77 b7 35 b8 da 6a 87 ea fd 11 97 05 4a 86 cd 40 3e 03 7e ac 7a c2 e4 1f 6f b8 bd b0 77 3b 58 89 2c 84 bf eb 3b e4 00 6c f2 0b cf 9c ac 38 85 9a 01 30 37 6d da 28 89 7c 4b 75 cd 85 bf fd dd b3 4f 3c f1 97 cb 2e 5d b1 76 95 01 26 aa 2e 0d f5 45 12 c3 c5 19 d2 9e 42 7d af a6 29 e1 f0 58 f1 ba 28 ae cf c7 c6 02 e9 74 32 97 cb e4 72 19 8a 22 8a 41 aa Data Ascii: &j 7y(T6d9,U9%ME0UB.(*$o@<Hluj#px84XI'3.v= jG@@7j!!E&Z<;Ow5jJ@>~zow;X,;l807m(\|KuO<.]v&.EB})X(t2r"A
2024-01-17 17:07:32 UTC	8048	IN	Data Raw: ec 1e f2 8d f5 51 71 6f cc 37 4c 13 01 59 49 6b 40 f7 4d 76 0c 85 07 fa 62 03 cd fe f6 a6 48 4f 43 a4 b3 26 d2 55 9f 3c db 92 3b 5f 13 ea 6e f2 f7 78 b2 6e 64 12 0b 8c 2d 50 39 93 1c 04 fe 81 d2 0d f7 97 ae 1d c2 bf 32 a1 18 54 32 ee c6 81 98 2c 1b 02 e7 38 52 2a 1b 61 18 4a 97 a5 fc f8 8b 54 0d 36 9a 0a 63 93 a7 e6 c0 5f d2 b2 e5 de ca af 9e 00 a3 17 f4 8c 40 71 b9 00 61 b3 90 f4 c7 0d 13 e2 32 d2 30 19 80 10 93 0d 25 5c 8a 9a 32 1c 5a d2 08 5d d7 83 6e 6f d6 ef c9 43 b3 12 20 06 41 f3 02 37 0c ae 9a 64 f9 ce d2 17 1f df 73 f7 1d 5f fc ee f7 87 ff fc 72 a0 b6 6e 34 36 fa da c0 67 bf ac 7b eb e2 ee a5 17 0d ac fa e5 f8 fa 5f 4d 6c fc 49 fd db 37 74 ac 7d 27 59 3e 02 2c 01 58 d2 22 1f c4 04 59 56 63 a9 a4 69 6b a8 43 a3 09 86 2e 59 3a da 68 18 8a 68 5a 88 Data Ascii: Qqo7LYIk@MvbHOC&U<;_nxnd-P92T2,8R*aJT6c_@qa20%\2Z]noC A7ds_rn46g{_MlI7t}'Y>,X"YVcikC.Y:hhZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.16	50033	13.107.246.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:32 UTC	600	OUT	GET /shared/edgeweb/css/97dbb03.css HTTP/1.1 Host: edgestatic.azureedge.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:33 UTC	765	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:32 GMT Content-Type: text/css; charset=UTF-8 Content-Length: 17147 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable ETag: W/"42fb-18cf4c5d612" Last-Modified: Wed, 10 Jan 2024 19:07:35 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Origin-Agent-Cluster: ?1 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 x-azure-ref: 20240117T170732Z-sdy4sy3pe527ffgvagcvn1g96000000005cg000000005k5y X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-01-17 17:07:33 UTC	15619	IN	Data Raw: 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 39 32 30 70 78 29 7b 3a 72 6f 6f 74 7b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 3a 78 6c 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 73 74 72 3a 22 78 6c 22 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 77 69 64 74 68 3a 31 39 32 30 70 78 3b 2d 2d 69 73 2d 6d 6f 62 69 6c 65 3a 66 61 6c 73 65 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 36 30 30 70 78 29 7b 3a 72 6f 6f 74 7b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 3a 6c 67 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 73 74 72 3a 22 6c 67 22 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 77 69 64 74 68 3a 31 36 30 30 70 78 3b 2d 2d 69 73 2d 6d 6f 62 69 6c 65 3a 66 61 6c 73 65 7d 7d 40 6d 65 Data Ascii: @media screen and (max-width:1920px){:root{--breakpoint:xl;--breakpoint-str:"xl";--breakpoint-width:1920px;--is-mobile:false}}@media screen and (max-width:1600px){:root{--breakpoint:lg;--breakpoint-str:"lg";--breakpoint-width:1600px;--is-mobile:false}}@me
2024-01-17 17:07:33 UTC	1528	IN	Data Raw: 3b 72 69 67 68 74 3a 2e 35 65 6d 3b 74 6f 70 3a 35 30 25 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 7d 2e 63 6f 6d 6d 6f 6e 2d 73 65 61 72 63 68 2d 62 6f 78 5f 5f 62 75 74 74 6f 6e 3a 68 6f 76 65 72 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 63 61 6c 63 28 2d 35 30 25 20 2d 20 31 70 78 29 29 7d 2e 63 6f 6d 6d 6f 6e 2d 73 65 61 72 63 68 2d 62 6f 78 5f 5f 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 63 61 6c 63 28 2d 35 30 25 20 2b 20 31 70 78 29 29 7d 2e 63 6f 6d 6d 6f 6e 2d 73 65 61 72 63 68 2d 62 6f 78 5f 5f 72 65 73 75 6c 74 73 7b 6d 61 78 2d 68 65 69 67 68 74 3a 6d 69 6e 28 36 30 30 70 78 2c 38 30 76 68 29 3b 6f 76 65 72 66 6c 6f 77 Data Ascii: ;right:.5em;top:50%;transform:translateY(-50%)}.common-search-box__button:hover{transform:translateY(calc(-50% - 1px))}.common-search-box__button:active{transform:translateY(calc(-50% + 1px))}.common-search-box__results{max-height:min(600px,80vh);overflow

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.16	50034	13.107.246.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:32 UTC	600	OUT	GET /shared/edgeweb/css/676e4a6.css HTTP/1.1 Host: edgestatic.azureedge.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:33 UTC	785	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:33 GMT Content-Type: text/css; charset=UTF-8 Content-Length: 18362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable ETag: W/"47ba-18c6fee7fb2" Last-Modified: Sat, 16 Dec 2023 00:02:30 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Origin-Agent-Cluster: ?1 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 x-azure-ref: 20240117T170732Z-82e2sg67dx4pzdkbva9evmares00000001000000000046ts X-Cache: TCP_MISS x-fd-int-roxy-purgeid: 0 Accept-Ranges: bytes
2024-01-17 17:07:33 UTC	15599	IN	Data Raw: 2e 63 6d 73 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 63 63 32 39 32 62 3b 62 6f 74 74 6f 6d 3a 30 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 70 61 64 64 69 6e 67 3a 35 70 78 20 33 36 70 78 20 35 70 78 20 38 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 72 69 67 68 74 3a 30 3b 7a 2d 69 6e 64 65 78 3a 39 39 39 39 7d 2e 63 6d 73 2d 62 75 74 74 6f 6e 20 2e 63 6d 73 2d 62 75 74 74 6f 6e 2d 73 61 76 65 64 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 2d 32 70 78 7d 2e 63 6d 73 2d 62 75 74 74 6f 6e 20 2e 63 6d 73 2d 62 75 74 74 6f 6e 2d 63 6c 6f 73 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c Data Ascii: .cms-button{background:#cc292b;bottom:0;color:#fff;cursor:pointer;height:30px;padding:5px 36px 5px 8px;position:fixed;right:0;z-index:9999}.cms-button .cms-button-saved{font-size:.7em;position:relative;top:-2px}.cms-button .cms-button-close{background-col
2024-01-17 17:07:33 UTC	2763	IN	Data Raw: 6c 6c 69 70 73 65 2c 2e 73 76 67 2d 69 63 6f 6e 20 73 76 67 20 70 61 74 68 2c 2e 73 76 67 2d 69 63 6f 6e 20 73 76 67 20 70 6f 6c 79 67 6f 6e 2c 2e 73 76 67 2d 69 63 6f 6e 20 73 76 67 20 72 65 63 74 7b 66 69 6c 6c 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 7d 2e 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 31 35 32 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 20 6d 69 6e 28 35 76 77 2c 34 30 70 78 29 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 38 36 30 70 78 29 7b 2e 63 6f 6e 74 61 69 6e 65 72 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 34 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 Data Ascii: llipse,.svg-icon svg path,.svg-icon svg polygon,.svg-icon svg rect{fill:currentColor}.container{margin:0 auto;max-width:1520px;padding:0 min(5vw,40px);position:relative;width:100%}@media screen and (max-width:860px){.container{padding-left:24px;padding-ri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.16	50035	13.107.246.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:33 UTC	600	OUT	GET /shared/edgeweb/css/2c1a379.css HTTP/1.1 Host: edgestatic.azureedge.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:33 UTC	764	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:33 GMT Content-Type: text/css; charset=UTF-8 Content-Length: 6209 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable ETag: W/"1841-18c889f8f17" Last-Modified: Wed, 20 Dec 2023 19:06:47 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Origin-Agent-Cluster: ?1 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 x-azure-ref: 20240117T170733Z-8kdq71vdft5eh462t780hzmt1800000000fg00000000115t X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-01-17 17:07:33 UTC	6209	IN	Data Raw: 2e 73 6c 69 64 65 2d 70 6f 70 75 70 5f 5f 66 61 64 65 2d 65 6e 74 65 72 2d 61 63 74 69 76 65 2c 2e 73 6c 69 64 65 2d 70 6f 70 75 70 5f 5f 66 61 64 65 2d 6c 65 61 76 65 2d 61 63 74 69 76 65 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 31 36 35 2c 2e 38 34 2c 2e 34 34 2c 31 29 20 30 6d 73 7d 2e 73 6c 69 64 65 2d 70 6f 70 75 70 5f 5f 66 61 64 65 2d 65 6e 74 65 72 2d 61 63 74 69 76 65 20 2e 73 6c 69 64 65 2d 70 6f 70 75 70 5f 5f 73 6c 69 64 65 2c 2e 73 6c 69 64 65 2d 70 6f 70 75 70 5f 5f 66 61 64 65 2d 6c 65 61 76 65 2d 61 63 74 69 76 65 20 2e 73 6c 69 64 65 2d 70 6f 70 75 70 5f 5f 73 6c 69 64 65 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 2e 36 73 20 63 75 62 69 63 2d Data Ascii: .slide-popup__fade-enter-active,.slide-popup__fade-leave-active{transition:opacity .6s cubic-bezier(.165,.84,.44,1) 0ms}.slide-popup__fade-enter-active .slide-popup__slide,.slide-popup__fade-leave-active .slide-popup__slide{transition:transform .6s cubic-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.16	50037	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:33 UTC	495	OUT	GET /bundles/v1/edgeChromium/latest/pill-wc.d069865e9104f4bc5917.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:33 UTC	1149	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: Sjz2ngC6kK5K7WWw6ybOSw== Last-Modified: Mon, 08 Jan 2024 16:46:13 GMT ETag: 0x8DC10695324374E Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 7e96281d-c01e-002f-7752-427292000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:33 GMT Content-Length: 21197 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89891453,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=8, origin; dur=0 , cdntime; dur=8 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55ba27d Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511253.55ba27d Vary: Origin
2024-01-17 17:07:33 UTC	15235	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 70 69 6c 6c 2d 77 63 22 5d 2c 7b 39 36 36 37 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 6f 2e 72 28 74 29 2c 6f 2e 64 28 74 2c 7b 50 69 6c 6c 44 65 73 69 67 6e 50 72 6f 70 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 7d 2c 50 69 6c 6c 57 43 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 53 7d 2c 50 69 6c 6c 57 43 53 74 79 6c 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 Data Ascii: "use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["pill-wc"],{96672:function(e,t,o){o.r(t),o.d(t,{PillDesignProps:function(){return p},PillWC:function(){return S},PillWCStyles:function(){retu
2024-01-17 17:07:33 UTC	5962	IN	Data Raw: 6c 6c 2d 72 6f 6f 74 20 24 7b 65 3d 3e 60 24 7b 65 2e 63 6f 6e 66 69 67 2e 70 6c 61 63 65 6d 65 6e 74 7c 7c 22 22 7d 20 24 7b 65 2e 63 6f 6e 66 69 67 2e 63 6f 6c 6f 72 7c 7c 22 22 7d 20 24 7b 65 2e 63 6f 6e 66 69 67 2e 70 6c 61 63 65 6d 65 6e 74 3d 3d 3d 6e 2e 74 6f 70 26 26 65 2e 69 73 53 74 69 63 6b 79 3f 22 70 69 6c 6c 5f 73 74 69 63 6b 79 22 3a 22 22 7d 20 24 7b 65 2e 63 6f 6e 66 69 67 2e 70 6c 61 63 65 6d 65 6e 74 3d 3d 3d 6e 2e 74 6f 70 4f 66 46 65 65 64 26 26 22 20 70 69 6c 6c 5f 74 6f 70 5f 6f 66 5f 66 65 65 64 20 70 69 6c 6c 5f 73 74 69 63 6b 79 20 74 6f 70 22 7d 20 24 7b 65 2e 63 6f 6e 66 69 67 2e 70 6c 61 63 65 6d 65 6e 74 21 3d 3d 6e 2e 62 6f 74 74 6f 6d 7c 7c 65 2e 69 73 53 68 6f 77 3f 22 22 3a 22 68 69 64 65 22 7d 20 24 7b 65 2e 63 6f 6e 66 Data Ascii: ll-root ${e=>`${e.config.placement\|\|""} ${e.config.color\|\|""} ${e.config.placement===n.top&&e.isSticky?"pill_sticky":""} ${e.config.placement===n.topOfFeed&&" pill_top_of_feed pill_sticky top"} ${e.config.placement!==n.bottom\|\|e.isShow?"":"hide"} ${e.conf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.16	50038	13.107.246.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:33 UTC	600	OUT	GET /shared/edgeweb/css/63e3356.css HTTP/1.1 Host: edgestatic.azureedge.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:33 UTC	696	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:33 GMT Content-Type: text/css; charset=UTF-8 Content-Length: 553 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable ETag: W/"229-18c5b54eda3" Last-Modified: Tue, 12 Dec 2023 00:02:21 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Origin-Agent-Cluster: ?1 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 x-azure-ref: 20240117T170733Z-r3kczxvd514692a191r36gtazc00000000z0000000001qdd X-Cache: TCP_REMOTE_HIT x-fd-int-roxy-purgeid: 0 Accept-Ranges: bytes
2024-01-17 17:07:33 UTC	553	IN	Data Raw: 2e 65 75 6c 61 2d 70 6f 70 75 70 5f 5f 64 69 61 6c 6f 67 20 2e 61 70 70 2d 70 6f 70 75 70 2d 6c 61 79 6f 75 74 20 2e 61 70 70 2d 70 6f 70 75 70 2d 67 72 61 70 68 69 63 2d 69 6d 61 67 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 35 30 25 7d 62 6f 64 79 2e 73 6c 69 64 65 73 7b 6f 76 65 72 66 6c 6f 77 2d 78 3a 68 69 64 64 65 6e 21 69 6d 70 6f 72 74 61 6e 74 3b 77 69 64 74 68 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 6e 74 7d 62 6f 64 79 2e 73 6c 69 64 65 73 20 2e 73 6c 69 64 65 73 2d 70 61 67 65 7b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 6c 65 66 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 31 30 30 76 77 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a Data Ascii: .eula-popup__dialog .app-popup-layout .app-popup-graphic-image{background-position:50%}body.slides{overflow-x:hidden!important;width:100%!important}body.slides .slides-page{height:100vh;left:0;position:fixed;top:0;width:100vw}@media screen and (max-width:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.16	50039	13.107.246.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:33 UTC	600	OUT	GET /shared/edgeweb/css/029223e.css HTTP/1.1 Host: edgestatic.azureedge.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:33 UTC	792	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:33 GMT Content-Type: text/css; charset=UTF-8 Content-Length: 72280 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable ETag: W/"11a58-18cf4c5d631" Last-Modified: Wed, 10 Jan 2024 19:07:35 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Origin-Agent-Cluster: ?1 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 x-azure-ref: 20240117T170733Z-bgf1cc49rx13devrdw9ma9bmxs00000000pg000000005yb8 X-Cache: TCP_REMOTE_HIT x-fd-int-roxy-purgeid: 0 Accept-Ranges: bytes
2024-01-17 17:07:33 UTC	15592	IN	Data Raw: 2e 61 63 74 69 6f 6e 2d 6c 69 73 74 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 67 61 70 3a 2e 35 65 6d 7d 2e 61 63 74 69 6f 6e 2d 6c 69 73 74 2d 2d 63 65 6e 74 65 72 65 64 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 2e 61 63 74 69 6f 6e 2d 6c 69 73 74 2d 2d 6e 6f 77 72 61 70 7b 66 6c 65 78 2d 77 72 61 70 3a 6e 6f 77 72 61 70 7d 2e 61 63 74 69 6f 6e 2d 6c 69 73 74 2d 2d 73 74 61 63 6b 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 66 6c 65 78 2d 77 72 61 70 3a 6e 6f 77 72 61 70 7d 2e 63 6f 6d 6d 6f 6e 2d 74 65 78 74 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 69 6e 68 65 72 69 74 7d 2e 63 6f 6d 6d 6f 6e 2d 74 61 67 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 Data Ascii: .action-list{display:flex;flex-wrap:wrap;gap:.5em}.action-list--centered{justify-content:center}.action-list--nowrap{flex-wrap:nowrap}.action-list--stack{flex-direction:column;flex-wrap:nowrap}.common-text{text-align:inherit}.common-tag{align-items:center
2024-01-17 17:07:33 UTC	16384	IN	Data Raw: 64 65 72 5f 5f 73 65 6c 65 63 74 6f 72 2d 61 72 72 6f 77 2d 69 63 6f 6e 7b 77 69 64 74 68 3a 35 76 77 7d 2e 6d 65 64 69 61 2d 69 74 65 6d 2d 73 6c 69 64 65 72 5f 5f 73 65 6c 65 63 74 6f 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 67 61 70 3a 31 2e 37 35 65 6d 3b 6a 75 73 74 69 66 79 2d 73 65 6c 66 3a 63 65 6e 74 65 72 7d 2e 6d 65 64 69 61 2d 69 74 65 6d 2d 73 6c 69 64 65 72 5f 5f 73 65 6c 65 63 74 6f 72 2d 62 75 74 74 6f 6e 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 Data Ascii: der__selector-arrow-icon{width:5vw}.media-item-slider__selector{display:flex;gap:1.75em;justify-self:center}.media-item-slider__selector-button{-webkit-appearance:none;-moz-appearance:none;appearance:none;background:none transparent;background-color:trans
2024-01-17 17:07:33 UTC	16384	IN	Data Raw: 2e 63 68 61 74 2d 69 6d 61 67 65 2d 2d 66 72 61 6d 65 6c 65 73 73 20 2e 63 68 61 74 2d 69 6d 61 67 65 2c 2e 63 68 61 74 2d 69 6d 61 67 65 2d 2d 66 72 61 6d 65 6c 65 73 73 20 2e 63 68 61 74 2d 69 6d 61 67 65 5f 5f 62 75 62 62 6c 65 7b 70 61 64 64 69 6e 67 3a 30 7d 2e 63 68 61 74 2d 69 6d 61 67 65 2d 2d 66 72 61 6d 65 6c 65 73 73 20 2e 63 68 61 74 2d 69 6d 61 67 65 5f 5f 69 6d 61 67 65 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 69 6e 69 74 69 61 6c 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 7d 2e 63 68 61 74 2d 61 63 74 69 6f 6e 73 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 2e 35 65 6d 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 63 68 61 74 2d 61 Data Ascii: .chat-image--frameless .chat-image,.chat-image--frameless .chat-image__bubble{padding:0}.chat-image--frameless .chat-image__image{border-radius:0;border-radius:initial;box-shadow:none}.chat-actions{padding-bottom:1.5em;position:relative;width:100%}.chat-a
2024-01-17 17:07:33 UTC	16384	IN	Data Raw: 2d 62 75 69 6c 64 65 72 2d 64 72 6f 70 64 6f 77 6e 2d 73 76 67 3a 75 72 6c 28 22 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 2c 25 33 43 73 76 67 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 27 20 77 69 64 74 68 3d 27 32 38 27 20 68 65 69 67 68 74 3d 27 32 38 27 25 33 45 25 33 43 70 61 74 68 20 66 69 6c 6c 3d 27 25 32 33 46 46 46 27 20 66 69 6c 6c 2d 72 75 6c 65 3d 27 65 76 65 6e 6f 64 64 27 20 64 3d 27 4d 31 34 20 30 63 37 2e 37 33 32 20 30 20 31 34 20 36 2e 32 36 38 20 31 34 20 31 34 73 2d 36 2e 32 36 38 20 31 34 2d 31 34 20 31 34 53 30 20 32 31 2e 37 33 32 20 30 20 31 34 20 36 2e 32 36 38 20 30 20 31 34 20 30 6d 37 20 31 31 48 37 6c 37 20 39 7a Data Ascii: -builder-dropdown-svg:url("data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' width='28' height='28'%3E%3Cpath fill='%23FFF' fill-rule='evenodd' d='M14 0c7.732 0 14 6.268 14 14s-6.268 14-14 14S0 21.732 0 14 6.268 0 14 0m7 11H7l7 9z
2024-01-17 17:07:33 UTC	7536	IN	Data Raw: 63 6b 2d 74 65 78 74 2d 2d 6d 6f 64 65 2d 73 6c 69 64 65 20 2e 68 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 6d 61 78 28 32 32 70 78 2c 6d 69 6e 28 31 2e 37 37 30 38 33 33 33 33 33 33 76 77 2c 33 34 70 78 29 29 7d 2e 6d 69 6e 69 2d 62 6c 6f 63 6b 2d 74 65 78 74 2d 2d 6d 6f 64 65 2d 73 6c 69 64 65 20 2e 68 35 7b 66 6f 6e 74 2d 73 69 7a 65 3a 6d 61 78 28 31 38 70 78 2c 6d 69 6e 28 31 2e 34 35 38 33 33 33 33 33 33 33 76 77 2c 32 38 70 78 29 29 7d 2e 6d 69 6e 69 2d 62 6c 6f 63 6b 2d 74 65 78 74 2d 2d 6d 6f 64 65 2d 73 6c 69 64 65 20 2e 73 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 6d 61 78 28 31 38 70 78 2c 6d 69 6e 28 31 2e 35 36 32 35 76 77 2c 33 30 70 78 29 29 7d 2e 6d 69 6e 69 2d 62 6c 6f 63 6b 2d 74 65 78 74 2d 2d 6d 6f 64 65 2d 73 6c 69 64 65 20 2e 73 68 32 7b 66 Data Ascii: ck-text--mode-slide .h4{font-size:max(22px,min(1.7708333333vw,34px))}.mini-block-text--mode-slide .h5{font-size:max(18px,min(1.4583333333vw,28px))}.mini-block-text--mode-slide .sh1{font-size:max(18px,min(1.5625vw,30px))}.mini-block-text--mode-slide .sh2{f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.16	50040	13.107.246.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:33 UTC	600	OUT	GET /shared/edgeweb/css/069d68d.css HTTP/1.1 Host: edgestatic.azureedge.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:34 UTC	793	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:34 GMT Content-Type: text/css; charset=UTF-8 Content-Length: 116442 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable ETag: W/"1c6da-18c6fee7ff0" Last-Modified: Sat, 16 Dec 2023 00:02:30 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Origin-Agent-Cluster: ?1 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 x-azure-ref: 20240117T170733Z-dc9cd36cf55df90y2yy3s5vekg00000000s000000000258c X-Cache: TCP_REMOTE_HIT x-fd-int-roxy-purgeid: 0 Accept-Ranges: bytes
2024-01-17 17:07:34 UTC	15591	IN	Data Raw: 2e 70 78 2d 73 6c 69 64 65 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 66 61 64 65 2d 65 6e 74 65 72 2d 61 63 74 69 76 65 2c 2e 70 78 2d 73 6c 69 64 65 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 66 61 64 65 2d 6c 65 61 76 65 2d 61 63 74 69 76 65 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 31 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 31 36 35 2c 2e 38 34 2c 2e 34 34 2c 31 29 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 30 7d 2e 70 78 2d 73 6c 69 64 65 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 66 61 64 65 2d 65 6e 74 65 72 2c 2e 70 78 2d 73 6c 69 64 65 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 66 61 64 65 2d 65 6e 74 65 72 2d 66 72 6f 6d 2c 2e 70 78 2d 73 6c 69 64 65 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 66 61 64 65 2d 6c 65 61 76 65 2d 74 6f 7b 6f 70 61 Data Ascii: .px-slide-transition-fade-enter-active,.px-slide-transition-fade-leave-active{transition:opacity 1s cubic-bezier(.165,.84,.44,1);transition-delay:0}.px-slide-transition-fade-enter,.px-slide-transition-fade-enter-from,.px-slide-transition-fade-leave-to{opa
2024-01-17 17:07:34 UTC	16384	IN	Data Raw: 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 2e 35 65 6d 3b 6c 65 66 74 3a 35 30 25 3b 6f 70 61 63 69 74 79 3a 2e 32 35 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 30 25 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 2d 35 30 25 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 31 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 31 36 35 2c 2e 38 34 2c 2e 34 34 2c 31 29 20 30 6d 73 3b 77 69 64 74 68 3a 2e 35 65 6d 7d 2e 73 6c 69 64 65 2d 6e 61 76 5f 5f 64 6f 74 3e 73 70 61 6e 2c 2e 73 6c 69 64 65 2d 6e 61 76 5f 5f 64 6f 74 3e 73 74 72 6f 6e 67 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 33 65 6d 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 77 Data Ascii: display:block;height:.5em;left:50%;opacity:.25;position:absolute;top:50%;transform:translate(-50%,-50%);transition:opacity .15s cubic-bezier(.165,.84,.44,1) 0ms;width:.5em}.slide-nav__dot>span,.slide-nav__dot>strong{border-radius:.3em;display:block;font-w
2024-01-17 17:07:34 UTC	16384	IN	Data Raw: 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 65 6d 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 35 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 68 65 69 67 68 74 3a 31 2e 39 65 6d 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 6d 61 72 67 69 6e 3a 2d 2e 35 65 6d 20 2e 32 65 6d 20 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 20 2e 36 65 6d 20 2e 31 65 6d 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2e 31 65 6d 29 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 66 6c 75 65 6e 74 2d 6c 61 75 6e 63 68 2d 6c 61 79 6f 75 74 2d Data Ascii: ;border-radius:.2em;display:inline-flex;font-size:.75em;font-weight:600;height:1.9em;justify-content:center;line-height:1;margin:-.5em .2em auto;padding:0 .6em .1em;transform:translateY(.1em);vertical-align:middle;white-space:nowrap}.fluent-launch-layout-
2024-01-17 17:07:34 UTC	16384	IN	Data Raw: 6b 65 72 3a 23 30 65 33 31 36 65 3b 2d 2d 74 68 65 6d 65 2d 62 75 74 74 6f 6e 2d 62 67 3a 23 31 61 31 61 31 61 3b 2d 2d 74 68 65 6d 65 2d 62 75 74 74 6f 6e 2d 62 67 2d 72 67 62 3a 32 36 2c 32 36 2c 32 36 3b 2d 2d 74 68 65 6d 65 2d 62 75 74 74 6f 6e 2d 62 67 2d 6c 69 67 68 74 65 72 3a 23 33 34 33 34 33 34 3b 2d 2d 74 68 65 6d 65 2d 62 75 74 74 6f 6e 2d 62 67 2d 64 61 72 6b 65 72 3a 23 30 31 30 31 30 31 3b 2d 2d 74 68 65 6d 65 2d 62 75 74 74 6f 6e 2d 62 67 2d 68 6f 76 65 72 3a 23 31 34 34 35 39 62 3b 2d 2d 74 68 65 6d 65 2d 62 75 74 74 6f 6e 2d 62 67 2d 68 6f 76 65 72 2d 72 67 62 3a 32 30 2c 36 39 2c 31 35 35 3b 2d 2d 74 68 65 6d 65 2d 62 75 74 74 6f 6e 2d 62 67 2d 68 6f 76 65 72 2d 6c 69 67 68 74 65 72 3a 23 31 61 35 39 63 38 3b 2d 2d 74 68 65 6d 65 2d 62 Data Ascii: ker:#0e316e;--theme-button-bg:#1a1a1a;--theme-button-bg-rgb:26,26,26;--theme-button-bg-lighter:#343434;--theme-button-bg-darker:#010101;--theme-button-bg-hover:#14459b;--theme-button-bg-hover-rgb:20,69,155;--theme-button-bg-hover-lighter:#1a59c8;--theme-b
2024-01-17 17:07:34 UTC	16384	IN	Data Raw: 64 64 65 6e 7d 2e 63 6f 6d 6d 6f 6e 2d 66 61 71 2d 69 74 65 6d 5f 5f 61 6e 73 77 65 72 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 2e 32 65 6d 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 65 6d 7d 2e 63 6f 6d 6d 6f 6e 2d 66 61 71 2d 69 74 65 6d 5f 5f 61 6e 73 77 65 72 20 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d 2e 63 6f 6d 6d 6f 6e 2d 66 61 71 2d 69 74 65 6d 5f 5f 61 6e 73 77 65 72 20 6c 69 2c 2e 63 6f 6d 6d 6f 6e 2d 66 61 71 2d 69 74 65 6d 5f 5f 61 6e 73 77 65 72 20 6f 6c 2c 2e 63 6f 6d 6d 6f 6e 2d 66 61 71 2d 69 74 65 6d 5f 5f 61 6e 73 77 65 72 20 70 2c 2e 63 6f 6d 6d 6f 6e 2d 66 61 71 2d 69 74 65 6d 5f 5f 61 6e 73 77 65 72 20 75 6c 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 7d 2e 63 6f 6d 6d 6f 6e 2d 66 61 71 2d 69 74 65 Data Ascii: dden}.common-faq-item__answer{padding-left:1.2em;padding-top:1em}.common-faq-item__answer strong{font-weight:600}.common-faq-item__answer li,.common-faq-item__answer ol,.common-faq-item__answer p,.common-faq-item__answer ul{line-height:1.4}.common-faq-ite
2024-01-17 17:07:34 UTC	16384	IN	Data Raw: 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 38 36 30 70 78 29 7b 2e 62 6c 6f 63 6b 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2d 73 63 72 6f 6c 6c 65 72 5f 5f 73 65 6c 65 63 74 6f 72 7b 68 65 69 67 68 74 3a 32 65 6d 7d 7d 2e 62 6c 6f 63 6b 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2d 73 63 72 6f 6c 6c 65 72 5f 5f 73 65 6c 65 63 74 6f 72 3a 68 6f 76 65 72 3a 61 66 74 65 72 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 68 65 6d 65 2d 62 75 74 74 6f 6e 2d 62 67 2d 68 6f 76 65 72 29 3b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 32 35 29 7d 2e 66 65 61 74 75 72 65 2d 6f 76 65 72 76 69 65 77 7b 67 72 69 64 2d 67 61 70 3a 6d 69 6e 28 35 76 77 2c 34 30 70 78 29 20 33 65 6d 3b 64 69 73 70 6c 61 79 3a 67 72 69 64 3b 67 Data Ascii: a screen and (max-width:860px){.block-horizontal-scroller__selector{height:2em}}.block-horizontal-scroller__selector:hover:after{color:var(--theme-button-bg-hover);opacity:1;transform:scale(1.25)}.feature-overview{grid-gap:min(5vw,40px) 3em;display:grid;g
2024-01-17 17:07:34 UTC	16384	IN	Data Raw: 61 72 6b 65 72 3a 23 65 36 65 36 65 36 3b 2d 2d 74 68 65 6d 65 2d 6f 76 65 72 6c 61 79 3a 72 67 62 61 28 38 38 2c 38 38 2c 38 38 2c 2e 34 29 3b 2d 2d 74 68 65 6d 65 2d 6f 76 65 72 6c 61 79 2d 72 67 62 3a 38 38 2c 38 38 2c 38 38 3b 2d 2d 74 68 65 6d 65 2d 6f 76 65 72 6c 61 79 2d 6c 69 67 68 74 65 72 3a 68 73 6c 61 28 30 2c 30 25 2c 34 35 25 2c 2e 34 29 3b 2d 2d 74 68 65 6d 65 2d 6f 76 65 72 6c 61 79 2d 64 61 72 6b 65 72 3a 72 67 62 61 28 36 33 2c 36 33 2c 36 33 2c 2e 34 29 7d 2e 74 69 70 2d 63 61 72 64 2d 64 69 61 6c 6f 67 5f 5f 6d 6f 64 61 6c 20 2e 66 6c 75 65 6e 74 2d 2d 64 61 72 6b 7b 2d 2d 74 68 65 6d 65 2d 70 61 67 65 2d 62 67 3a 23 32 61 32 38 32 38 3b 2d 2d 74 68 65 6d 65 2d 70 61 67 65 2d 62 67 2d 72 67 62 3a 34 32 2c 34 30 2c 34 30 3b 2d 2d 74 68 Data Ascii: arker:#e6e6e6;--theme-overlay:rgba(88,88,88,.4);--theme-overlay-rgb:88,88,88;--theme-overlay-lighter:hsla(0,0%,45%,.4);--theme-overlay-darker:rgba(63,63,63,.4)}.tip-card-dialog__modal .fluent--dark{--theme-page-bg:#2a2828;--theme-page-bg-rgb:42,40,40;--th
2024-01-17 17:07:34 UTC	2547	IN	Data Raw: 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 61 75 74 6f 20 6d 69 6e 6d 61 78 28 30 2c 31 66 72 29 20 61 75 74 6f 3b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 72 6f 77 73 3a 31 30 30 25 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 32 2e 35 65 6d 7d 2e 66 65 61 74 75 72 65 2d 6f 76 65 72 76 69 65 77 2d 62 61 6e 6e 65 72 5f 5f 74 69 74 6c 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 6d 61 78 28 31 37 70 78 2c 6d 69 6e 28 31 2e 33 31 35 37 38 39 34 37 33 37 76 77 2c 32 30 70 78 29 29 3b 67 72 69 64 2d 61 72 65 61 3a 74 69 74 6c 65 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 31 35 65 6d 3b 6d 69 6e 2d 77 69 64 74 68 3a 35 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 2e 31 35 65 6d 7d 2e 66 65 61 74 75 72 65 2d 6f 76 65 72 76 69 65 77 2d 62 61 6e 6e 65 72 Data Ascii: -template-columns:auto minmax(0,1fr) auto;grid-template-rows:100%;min-height:2.5em}.feature-overview-banner__title{font-size:max(17px,min(1.3157894737vw,20px));grid-area:title;margin-bottom:.15em;min-width:5em;padding-bottom:.15em}.feature-overview-banner

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.16	50041	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:33 UTC	651	OUT	GET /bundles/v1/edgeChromium/latest/common-fast-msft-web-components.28ad475ec08175ee00d3.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:33 UTC	1151	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: aPRmeQ0W31mjOqmec/9xEg== Last-Modified: Mon, 08 Jan 2024 16:46:13 GMT ETag: 0x8DC106953223DB6 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 03a67cb8-301e-00f8-7e52-4297fa000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:33 GMT Content-Length: 31561 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89892134,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=26, origin; dur=0 , cdntime; dur=26 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55ba526 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511253.55ba526 Vary: Origin
2024-01-17 17:07:33 UTC	15233	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 6f 6d 6d 6f 6e 2d 66 61 73 74 2d 6d 73 66 74 2d 77 65 62 2d 63 6f 6d 70 6f 6e 65 6e 74 73 22 5d 2c 7b 38 35 31 32 39 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 2c 61 29 7b 61 2e 64 28 6f 2c 7b 24 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 7d 2c 75 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 7d 29 3b 76 61 72 20 6e 2c 69 3d 61 28 33 33 39 34 30 29 2c 65 3d 61 28 32 38 39 30 34 29 2c Data Ascii: "use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["common-fast-msft-web-components"],{85129:function(t,o,a){a.d(o,{$:function(){return n},u:function(){return l}});var n,i=a(33940),e=a(28904),
2024-01-17 17:07:34 UTC	9343	IN	Data Raw: 6f 50 61 6e 65 31 78 33 79 22 5d 29 20 2e 68 61 73 2d 61 62 73 74 72 61 63 74 7b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 31 66 72 20 31 66 72 3b 67 61 70 3a 30 20 31 30 70 78 7d 3a 68 6f 73 74 28 5b 6c 61 79 6f 75 74 3d 22 69 6e 66 6f 50 61 6e 65 22 5d 29 20 2e 68 61 73 2d 61 62 73 74 72 61 63 74 20 2e 66 6f 6f 74 65 72 2c 3a 68 6f 73 74 28 5b 6c 61 79 6f 75 74 3d 22 69 6e 66 6f 50 61 6e 65 31 78 33 79 22 5d 29 20 2e 68 61 73 2d 61 62 73 74 72 61 63 74 20 2e 66 6f 6f 74 65 72 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 63 61 6c 63 28 34 30 70 78 20 2d 20 34 70 78 29 7d 3a 68 6f 73 74 28 5b 6c 61 79 6f 75 74 3d 22 69 6e 66 6f 50 61 6e 65 22 5d 29 20 2e 68 61 73 2d 61 62 73 74 72 61 63 74 20 2e 61 62 73 74 72 61 63 74 2c 3a 68 6f 73 74 28 Data Ascii: oPane1x3y"]) .has-abstract{grid-template-columns:1fr 1fr;gap:0 10px}:host([layout="infoPane"]) .has-abstract .footer,:host([layout="infoPane1x3y"]) .has-abstract .footer{min-height:calc(40px - 4px)}:host([layout="infoPane"]) .has-abstract .abstract,:host(
2024-01-17 17:07:34 UTC	6985	IN	Data Raw: 20 37 2e 39 31 34 30 33 43 37 32 2e 31 37 36 31 20 37 2e 39 31 34 30 33 20 37 33 2e 33 33 31 37 20 38 2e 33 34 31 38 31 20 37 34 2e 31 35 32 38 20 39 2e 32 32 37 39 32 43 37 34 2e 39 37 33 39 20 31 30 2e 31 31 34 20 37 35 2e 33 39 39 37 20 31 31 2e 33 30 35 37 20 37 35 2e 33 39 39 37 20 31 32 2e 38 30 32 39 43 37 35 2e 33 39 39 37 20 31 34 2e 33 33 30 37 20 37 34 2e 39 37 33 39 20 31 35 2e 35 35 32 39 20 37 34 2e 30 39 32 20 31 36 2e 34 36 39 36 43 37 33 2e 32 31 30 31 20 31 37 2e 33 38 36 33 20 37 32 2e 30 32 34 31 20 31 37 2e 38 34 34 36 20 37 30 2e 35 30 33 36 20 31 37 2e 38 34 34 36 43 36 39 2e 30 34 33 38 20 31 37 2e 38 34 34 36 20 36 37 2e 38 38 38 32 20 31 37 2e 34 31 36 38 20 36 37 2e 30 33 36 37 20 31 36 2e 35 36 31 33 43 36 36 2e 31 35 34 38 20 Data Ascii: 7.91403C72.1761 7.91403 73.3317 8.34181 74.1528 9.22792C74.9739 10.114 75.3997 11.3057 75.3997 12.8029C75.3997 14.3307 74.9739 15.5529 74.092 16.4696C73.2101 17.3863 72.0241 17.8446 70.5036 17.8446C69.0438 17.8446 67.8882 17.4168 67.0367 16.5613C66.1548

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.16	50047	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:33 UTC	501	OUT	GET /bundles/v1/edgeChromium/latest/poweredByData.92964448d29db84543e7.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:34 UTC	1148	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: eBMrUf3nzYOVopBopUTm8g== Last-Modified: Mon, 08 Jan 2024 16:46:13 GMT ETag: 0x8DC106953107766 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 7e962845-c01e-002f-1d52-427292000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:34 GMT Content-Length: 3646 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89892552,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=6, origin; dur=0 , cdntime; dur=6 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55ba6c8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511254.55ba6c8 Vary: Origin
2024-01-17 17:07:34 UTC	3646	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 70 6f 77 65 72 65 64 42 79 44 61 74 61 22 5d 2c 7b 33 31 31 30 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 4f 66 66 69 63 65 53 68 61 72 65 64 44 61 74 61 41 63 74 69 6f 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 2c 4f 66 66 69 63 65 53 68 61 72 65 64 44 61 74 61 43 6f 6e 6e 65 63 74 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 Data Ascii: (self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["poweredByData"],{31101:function(e,t,n){"use strict";n.r(t),n.d(t,{OfficeSharedDataActions:function(){return r},OfficeSharedDataConnector:function(){retur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.16	50046	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:34 UTC	720	OUT	GET /bundles/v1/edgeChromium/latest/libs_experiences-telemetry-data-mapper_dist_helpers_TelemetryObjectForBehaviorType_js-libs_fe-fc6773.facf011cfc8d53d217a7.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:34 UTC	1186	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: MlGI42F2BwPwwdiL+2JOoA== Last-Modified: Sat, 13 Jan 2024 01:22:15 GMT ETag: 0x8DC13D613A75D79 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: a05c3e06-901e-010a-3dbf-453b77000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:34 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Akamai-Request-BC: [a=23.218.242.10,b=89892560,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=1, origin; dur=0 , cdntime; dur=1 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55ba6d0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511254.55ba6d0 Vary: Origin
2024-01-17 17:07:34 UTC	15198	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6c 69 62 73 5f 65 78 70 65 72 69 65 6e 63 65 73 2d 74 65 6c 65 6d 65 74 72 79 2d 64 61 74 61 2d 6d 61 70 70 65 72 5f 64 69 73 74 5f 68 65 6c 70 65 72 73 5f 54 65 6c 65 6d 65 74 72 79 4f 62 6a 65 63 74 46 6f 72 42 65 68 61 76 69 6f 72 54 79 70 65 5f 6a 73 2d 6c 69 62 73 5f 66 65 2d 66 63 36 37 37 33 2e 66 61 63 66 30 31 31 63 66 63 38 64 35 33 64 32 31 37 61 37 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 Data Ascii: 00006000/! For license information please see libs_experiences-telemetry-data-mapper_dist_helpers_TelemetryObjectForBehaviorType_js-libs_fe-fc6773.facf011cfc8d53d217a7.js.LICENSE.txt /"use strict";(self.webpackChunk_msnews_msnews_experiences=self.web
2024-01-17 17:07:34 UTC	9390	IN	Data Raw: 67 67 6c 65 43 61 72 64 41 63 74 69 6f 6e 4d 65 6e 75 3a 28 65 2c 74 2c 6e 29 3d 3e 57 28 65 2c 74 2c 6f 2c 69 2c 21 30 2c 21 30 2c 75 2c 46 2c 6e 75 6c 6c 2c 6e 29 2c 74 65 6c 65 6d 65 74 72 79 43 6f 6e 74 65 78 74 3a 41 2c 6f 70 65 6e 4c 69 6e 6b 73 49 6e 4e 65 77 54 61 62 3a 63 2c 6f 70 65 6e 41 72 74 69 63 6c 65 49 6e 4e 65 77 54 61 62 3a 5f 2c 61 72 69 61 4c 61 62 65 6c 3a 56 28 43 2c 67 2c 74 29 2c 61 63 74 69 6f 6e 73 41 72 72 61 79 4f 76 65 72 72 69 64 65 3a 70 2c 73 6f 63 69 61 6c 42 61 72 57 43 43 6f 6e 66 69 67 49 6e 66 6f 3a 68 2c 6d 65 74 61 64 61 74 61 3a 65 2c 65 6e 61 62 6c 65 46 69 6c 6c 65 64 49 63 6f 6e 4f 6e 48 6f 76 65 72 3a 44 2c 72 65 6c 61 74 65 64 43 6f 6e 74 65 6e 74 53 6f 75 72 63 65 3a 78 2c 64 69 73 61 62 6c 65 43 61 72 64 54 Data Ascii: ggleCardActionMenu:(e,t,n)=>W(e,t,o,i,!0,!0,u,F,null,n),telemetryContext:A,openLinksInNewTab:c,openArticleInNewTab:_,ariaLabel:V(C,g,t),actionsArrayOverride:p,socialBarWCConfigInfo:h,metadata:e,enableFilledIconOnHover:D,relatedContentSource:x,disableCardT
2024-01-17 17:07:34 UTC	16384	IN	Data Raw: 30 30 30 30 35 41 36 44 0d 0a 33 30 30 78 33 30 34 3b 65 6c 73 65 20 69 66 28 4f 74 26 26 21 4f 65 29 65 3d 63 2e 42 2e 5f 33 30 30 78 31 35 36 3b 65 6c 73 65 20 69 66 28 4f 74 26 26 4f 65 29 7b 63 6f 6e 73 74 20 74 3d 4f 65 2e 63 61 72 64 57 69 64 74 68 3b 6c 65 74 20 6e 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 4f 65 2e 63 61 72 64 57 69 64 74 68 2f 31 2e 33 33 29 3b 55 6e 26 26 28 6e 3d 68 65 3f 4f 65 2e 63 61 72 64 48 65 69 67 68 74 3a 4f 65 2e 69 6d 61 67 65 48 65 69 67 68 74 29 2c 65 3d 7b 77 69 64 74 68 3a 74 2c 68 65 69 67 68 74 3a 6e 7d 7d 70 74 2e 77 69 64 74 68 3e 3d 65 2e 77 69 64 74 68 26 26 70 74 2e 68 65 69 67 68 74 3e 3d 65 2e 68 65 69 67 68 74 3f 28 72 2e 61 62 73 74 72 61 63 74 3d 76 6f 69 64 20 30 2c 72 2e 69 6d 61 67 65 44 61 74 61 3d 55 28 Data Ascii: 00005A6D300x304;else if(Ot&&!Oe)e=c.B._300x156;else if(Ot&&Oe){const t=Oe.cardWidth;let n=Math.round(Oe.cardWidth/1.33);Un&&(n=he?Oe.cardHeight:Oe.imageHeight),e={width:t,height:n}}pt.width>=e.width&&pt.height>=e.height?(r.abstract=void 0,r.imageData=U(
2024-01-17 17:07:34 UTC	6777	IN	Data Raw: 3a 65 2e 69 64 2c 68 65 61 64 6c 69 6e 65 3a 65 2e 71 7d 7d 29 2e 67 65 74 4d 65 74 61 64 61 74 61 54 61 67 28 29 29 2c 7b 2e 2e 2e 65 2c 74 65 6c 65 6d 65 74 72 79 54 61 67 3a 6f 7d 7d 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6d 65 28 65 2c 74 2c 6e 2c 6f 29 7b 69 66 28 28 30 2c 66 2e 77 5a 29 28 65 2c 6e 29 29 7b 76 61 72 20 69 3b 63 6f 6e 73 74 20 6e 3d 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 63 61 72 64 43 6f 6e 74 65 6e 74 2c 72 3d 6e 75 6c 6c 3d 3d 65 7c 7c 6e 75 6c 6c 3d 3d 3d 28 69 3d 65 2e 63 61 72 64 43 6f 6e 74 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 70 61 6e 6f 43 61 70 74 69 6f 6e 2c 7b 65 76 65 6e 74 49 64 3a 6c 2c 74 69 74 6c 65 3a 64 7d 3d 6e 75 6c 6c 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 70 Data Ascii: :e.id,headline:e.q}}).getMetadataTag()),{...e,telemetryTag:o}}))}}function me(e,t,n,o){if((0,f.wZ)(e,n)){var i;const n=null==e?void 0:e.cardContent,r=null==e\|\|null===(i=e.cardContent)\|\|void 0===i?void 0:i.panoCaption,{eventId:l,title:d}=null==n?void 0:n.p
2024-01-17 17:07:34 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 21 3d 3d 66 7c 7c 65 26 61 2e 4f 37 2e 73 68 6f 77 4d 6f 72 65 29 29 72 65 74 75 72 6e 20 72 3f 7b 74 65 78 74 3a 28 30 2c 73 2e 57 55 29 28 42 2c 6c 29 2c 64 61 74 61 54 61 67 3a 6f 2e 66 6f 6c 6c 6f 77 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 54 65 78 74 7d 3a 7b 74 65 78 74 3a 77 2c 64 61 74 61 54 61 67 3a 6f 2e 6d 61 6e 61 67 65 54 6f 70 69 63 73 54 65 78 74 7d 3b 69 66 28 65 26 61 2e 4f 37 2e 64 69 73 6d 69 73 73 29 72 65 74 75 72 6e 20 72 3f 70 3f 7b 74 65 78 74 3a 74 2e 68 69 64 65 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 4e 65 77 53 74 6f 72 79 54 65 78 74 7c 7c 62 2c 64 61 74 61 54 61 67 3a 6f 2e 6e 65 77 53 74 6f 72 79 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 54 65 78 74 7d 3a 7b 74 65 78 74 3a 74 2e 68 69 64 65 43 6f 6e 66 69 72 Data Ascii: 00004000!==f\|\|e&a.O7.showMore))return r?{text:(0,s.WU)(B,l),dataTag:o.followConfirmationText}:{text:w,dataTag:o.manageTopicsText};if(e&a.O7.dismiss)return r?p?{text:t.hideConfirmationNewStoryText\|\|b,dataTag:o.newStoryConfirmationText}:{text:t.hideConfir
2024-01-17 17:07:34 UTC	12	IN	Data Raw: 6e 29 29 2c 6f 2e 70 75 73 68 0d 0a Data Ascii: n)),o.push
2024-01-17 17:07:34 UTC	242	IN	Data Raw: 30 30 30 30 30 30 45 36 0d 0a 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 65 2c 74 2c 6e 2c 6f 2c 69 29 7b 76 61 72 20 61 3d 22 22 3b 6e 75 6c 6c 21 3d 6e 26 26 28 61 3d 28 22 22 2b 6e 29 2e 72 65 70 6c 61 63 65 28 49 2c 22 24 26 2f 22 29 2b 22 2f 22 29 2c 48 28 65 2c 55 2c 74 3d 4f 28 74 2c 61 2c 6f 2c 69 29 29 2c 4d 28 74 29 7d 76 61 72 20 52 3d 7b 63 75 72 72 65 6e 74 3a 6e 75 6c 6c 7d 3b 66 75 6e 63 74 69 6f 6e 20 45 28 29 7b 76 61 72 20 65 3d 52 2e 63 75 72 72 65 6e 74 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 65 29 74 68 72 6f 77 20 45 72 72 6f 72 28 62 28 33 32 31 29 29 3b 72 65 74 75 72 6e 20 65 7d 7d 2c 38 39 35 32 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 28 35 31 34 32 39 29 7d 7d 5d 29 3b 0d 0a Data Ascii: 000000E6(e))}function D(e,t,n,o,i){var a="";null!=n&&(a=(""+n).replace(I,"$&/")+"/"),H(e,U,t=O(t,a,o,i)),M(t)}var R={current:null};function E(){var e=R.current;if(null===e)throw Error(b(321));return e}},89526:function(e,t,n){n(51429)}}]);
2024-01-17 17:07:34 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.16	50043	13.107.246.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:34 UTC	581	OUT	GET /shared/edgeweb/4af7371.js HTTP/1.1 Host: edgestatic.azureedge.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:34 UTC	807	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:34 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 433596 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable ETag: W/"69dbc-18cfea0a8d8" Last-Modified: Fri, 12 Jan 2024 17:03:11 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Origin-Agent-Cluster: ?1 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 x-azure-ref: 20240117T170734Z-sn0wsw5q9t1n3eud0zfxs8tt3n00000000ng000000006rzp X-Cache: TCP_REMOTE_HIT x-fd-int-roxy-purgeid: 0 Accept-Ranges: bytes
2024-01-17 17:07:34 UTC	15577	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 4c 49 43 45 4e 53 45 53 20 2a 2f 0a 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 30 5d 2c 5b 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 28 32 39 29 2c 6e 28 34 34 29 3b 76 61 72 20 72 3d 6e 28 32 33 31 29 2c 6f 3d 7b 70 72 6f 70 73 3a 7b 76 61 72 69 61 6e 74 3a 7b 74 79 70 65 3a 53 74 72 69 6e 67 2c 64 65 66 61 75 6c 74 3a 22 64 65 66 61 75 6c 74 22 7d 7d 2c 63 6f 6d 70 75 74 65 64 3a 7b 76 61 72 69 61 6e 74 56 61 6c 75 65 3a 66 75 Data Ascii: /! For license information please see LICENSES /(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[90],[,,,,,,,,,,,,,,,,function(t,e,n){"use strict";n(29),n(44);var r=n(231),o={props:{variant:{type:String,default:"default"}},computed:{variantValue:fu
2024-01-17 17:07:34 UTC	16384	IN	Data Raw: 28 65 2c 6f 3f 46 28 74 29 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 72 3d 74 28 65 29 2c 4d 61 74 68 2e 61 62 73 28 72 2d 65 29 3c 3d 6e 3f 72 3a 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 6f 2c 63 2c 6c 3d 70 61 72 73 65 46 6c 6f 61 74 28 72 3f 65 2e 78 3a 65 29 2c 66 3d 70 61 72 73 65 46 6c 6f 61 74 28 72 3f 65 2e 79 3a 30 29 2c 68 3d 43 2c 64 3d 30 2c 69 3d 74 2e 6c 65 6e 67 74 68 3b 69 2d 2d 3b 29 28 6f 3d 72 3f 28 6f 3d 74 5b 69 5d 2e 78 2d 6c 29 2a 6f 2b 28 63 3d 74 5b 69 5d 2e 79 2d 66 29 2a 63 3a 4d 61 74 68 2e 61 62 73 28 74 5b 69 5d 2d 6c 29 29 3c 68 26 26 28 68 3d 6f 2c 64 3d 69 29 3b 72 65 74 75 72 6e 20 64 3d 21 6e 7c 7c 68 3c 3d 6e 3f 74 5b 64 5d 3a 65 2c 72 7c 7c 64 3d 3d 3d 65 7c 7c 4e 28 65 29 Data Ascii: (e,o?F(t)?function(e){return r=t(e),Math.abs(r-e)<=n?r:e}:function(e){for(var o,c,l=parseFloat(r?e.x:e),f=parseFloat(r?e.y:0),h=C,d=0,i=t.length;i--;)(o=r?(o=t[i].x-l)o+(c=t[i].y-f)c:Math.abs(t[i]-l))<h&&(h=o,d=i);return d=!n\|\|h<=n?t[d]:e,r\|\|d===e\|\|N(e)
2024-01-17 17:07:34 UTC	16384	IN	Data Raw: 75 73 65 22 3d 3d 3d 6e 2e 64 61 74 61 26 26 6e 2e 5f 73 74 61 72 74 3c 65 29 72 65 74 75 72 6e 20 6e 3b 6e 3d 6e 2e 5f 70 72 65 76 7d 7d 28 74 68 69 73 2c 54 74 28 45 29 2c 54 74 28 74 69 6d 65 29 29 2c 76 26 26 28 54 2d 3d 74 69 6d 65 2d 28 74 69 6d 65 3d 76 2e 5f 73 74 61 72 74 29 29 29 2c 74 68 69 73 2e 5f 74 54 69 6d 65 3d 54 2c 74 68 69 73 2e 5f 74 69 6d 65 3d 74 69 6d 65 2c 74 68 69 73 2e 5f 61 63 74 3d 21 6d 2c 74 68 69 73 2e 5f 69 6e 69 74 74 65 64 7c 7c 28 74 68 69 73 2e 5f 6f 6e 55 70 64 61 74 65 3d 74 68 69 73 2e 76 61 72 73 2e 6f 6e 55 70 64 61 74 65 2c 74 68 69 73 2e 5f 69 6e 69 74 74 65 64 3d 31 2c 74 68 69 73 2e 5f 7a 54 69 6d 65 3d 74 2c 45 3d 30 29 2c 21 45 26 26 74 69 6d 65 26 26 21 65 26 26 21 63 26 26 28 45 65 28 74 68 69 73 2c 22 6f Data Ascii: use"===n.data&&n._start<e)return n;n=n._prev}}(this,Tt(E),Tt(time)),v&&(T-=time-(time=v._start))),this._tTime=T,this._time=time,this._act=!m,this._initted\|\|(this._onUpdate=this.vars.onUpdate,this._initted=1,this._zTime=t,E=0),!E&&time&&!e&&!c&&(Ee(this,"o
2024-01-17 17:07:34 UTC	16384	IN	Data Raw: 7b 5f 74 61 72 67 65 74 73 3a 5b 5d 2c 5f 6c 61 7a 79 3a 30 2c 5f 73 74 61 72 74 41 74 3a 30 2c 5f 6f 70 3a 30 2c 5f 6f 6e 49 6e 69 74 3a 30 7d 29 2c 4f 74 28 22 73 74 61 67 67 65 72 54 6f 2c 73 74 61 67 67 65 72 46 72 6f 6d 2c 73 74 61 67 67 65 72 46 72 6f 6d 54 6f 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 63 6e 5b 74 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 6e 65 77 20 51 65 2c 6e 3d 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 30 29 3b 72 65 74 75 72 6e 20 6e 2e 73 70 6c 69 63 65 28 22 73 74 61 67 67 65 72 46 72 6f 6d 54 6f 22 3d 3d 3d 74 3f 35 3a 34 2c 30 2c 30 29 2c 65 5b 74 5d 2e 61 70 70 6c 79 28 65 2c 6e 29 7d 7d 29 29 3b 76 61 72 20 6c 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 5b 65 Data Ascii: {_targets:[],_lazy:0,_startAt:0,_op:0,_onInit:0}),Ot("staggerTo,staggerFrom,staggerFromTo",(function(t){cn[t]=function(){var e=new Qe,n=ce.call(arguments,0);return n.splice("staggerFromTo"===t?5:4,0,0),e[t].apply(e,n)}}));var ln=function(t,e,n){return t[e
2024-01-17 17:07:34 UTC	16384	IN	Data Raw: 67 62 61 28 22 21 3d 3d 6d 2e 73 75 62 73 74 72 28 2d 35 29 26 26 22 68 73 6c 61 28 22 21 3d 3d 6d 2e 73 75 62 73 74 72 28 2d 35 29 7c 7c 28 66 3d 31 29 2c 64 21 3d 3d 28 68 3d 63 5b 45 2b 2b 5d 7c 7c 22 22 29 26 26 28 6c 3d 70 61 72 73 65 46 6c 6f 61 74 28 68 29 7c 7c 30 2c 5f 3d 68 2e 73 75 62 73 74 72 28 28 6c 2b 22 22 29 2e 6c 65 6e 67 74 68 29 2c 22 3d 22 3d 3d 3d 64 2e 63 68 61 72 41 74 28 31 29 26 26 28 64 3d 41 74 28 6c 2c 64 29 2b 5f 29 2c 76 3d 70 61 72 73 65 46 6c 6f 61 74 28 64 29 2c 79 3d 64 2e 73 75 62 73 74 72 28 28 76 2b 22 22 29 2e 6c 65 6e 67 74 68 29 2c 78 3d 58 2e 6c 61 73 74 49 6e 64 65 78 2d 79 2e 6c 65 6e 67 74 68 2c 79 7c 7c 28 79 3d 79 7c 7c 41 2e 75 6e 69 74 73 5b 65 5d 7c 7c 5f 2c 78 3d 3d 3d 72 2e 6c 65 6e 67 74 68 26 26 28 72 Data Ascii: gba("!==m.substr(-5)&&"hsla("!==m.substr(-5)\|\|(f=1),d!==(h=c[E++]\|\|"")&&(l=parseFloat(h)\|\|0,_=h.substr((l+"").length),"="===d.charAt(1)&&(d=At(l,d)+_),v=parseFloat(d),y=d.substr((v+"").length),x=X.lastIndex-y.length,y\|\|(y=y\|\|A.units[e]\|\|_,x===r.length&&(r
2024-01-17 17:07:34 UTC	16384	IN	Data Raw: 7b 74 68 69 73 2e 62 61 6c 61 6e 63 65 28 29 7d 2c 62 61 6c 61 6e 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 4f 62 6a 65 63 74 28 66 2e 61 29 28 29 29 69 66 28 74 68 69 73 2e 69 73 53 61 66 61 72 69 7c 7c 74 68 69 73 2e 69 73 48 65 61 64 6c 65 73 73 29 74 68 69 73 2e 62 61 6c 61 6e 63 65 64 3d 21 30 3b 65 6c 73 65 20 69 66 28 74 68 69 73 2e 65 6e 61 62 6c 65 64 29 74 72 79 7b 74 68 69 73 2e 24 65 6d 69 74 28 22 73 74 61 72 74 22 29 2c 74 68 69 73 2e 62 61 6c 61 6e 63 65 46 61 69 6c 65 64 3d 21 31 2c 74 68 69 73 2e 24 72 65 66 73 2e 74 65 78 74 26 26 74 68 69 73 2e 24 72 65 66 73 2e 74 65 78 74 2e 6f 66 66 73 65 74 57 69 64 74 68 3e 30 26 26 6c 28 74 68 69 73 2e 24 72 65 66 73 2e 74 65 78 74 29 2c 74 68 69 73 2e 62 61 6c 61 6e 63 65 64 3d 21 30 Data Ascii: {this.balance()},balance:function(){if(!Object(f.a)())if(this.isSafari\|\|this.isHeadless)this.balanced=!0;else if(this.enabled)try{this.$emit("start"),this.balanceFailed=!1,this.$refs.text&&this.$refs.text.offsetWidth>0&&l(this.$refs.text),this.balanced=!0
2024-01-17 17:07:34 UTC	16384	IN	Data Raw: 6f 3d 22 66 69 78 65 64 22 3d 3d 3d 47 28 65 6c 65 6d 65 6e 74 29 2e 70 6f 73 69 74 69 6f 6e 3b 6c 65 74 20 63 3d 6f 3f 51 28 65 6c 65 6d 65 6e 74 29 3a 65 6c 65 6d 65 6e 74 3b 66 6f 72 28 3b 7a 28 63 29 26 26 21 4b 28 63 29 3b 29 7b 63 6f 6e 73 74 20 74 3d 47 28 63 29 2c 65 3d 48 28 63 29 3b 65 7c 7c 22 66 69 78 65 64 22 21 3d 3d 74 2e 70 6f 73 69 74 69 6f 6e 7c 7c 28 72 3d 6e 75 6c 6c 29 2c 28 6f 3f 21 65 26 26 21 72 3a 21 65 26 26 22 73 74 61 74 69 63 22 3d 3d 3d 74 2e 70 6f 73 69 74 69 6f 6e 26 26 72 26 26 5b 22 61 62 73 6f 6c 75 74 65 22 2c 22 66 69 78 65 64 22 5d 2e 69 6e 63 6c 75 64 65 73 28 72 2e 70 6f 73 69 74 69 6f 6e 29 7c 7c 55 28 63 29 26 26 21 65 26 26 63 74 28 65 6c 65 6d 65 6e 74 2c 63 29 29 3f 6e 3d 6e 2e 66 69 6c 74 65 72 28 28 74 3d 3e Data Ascii: o="fixed"===G(element).position;let c=o?Q(element):element;for(;z(c)&&!K(c);){const t=G(c),e=H(c);e\|\|"fixed"!==t.position\|\|(r=null),(o?!e&&!r:!e&&"static"===t.position&&r&&["absolute","fixed"].includes(r.position)\|\|U(c)&&!e&&ct(element,c))?n=n.filter((t=>
2024-01-17 17:07:34 UTC	16384	IN	Data Raw: 20 30 3a 74 2e 69 64 7d 2c 73 70 61 63 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 69 73 4d 6f 62 69 6c 65 3f 2e 35 3a 31 2c 65 3d 74 68 69 73 2e 6c 61 73 74 4f 6e 50 61 67 65 26 26 74 68 69 73 2e 68 61 73 4f 75 74 65 72 42 61 63 6b 67 72 6f 75 6e 64 3f 30 3a 74 68 69 73 2e 73 70 61 63 69 6e 67 44 65 66 61 75 6c 74 3b 72 65 74 75 72 6e 7b 6d 61 72 67 69 6e 42 6f 74 74 6f 6d 3a 74 68 69 73 2e 63 73 73 45 6d 46 61 6c 6c 62 61 63 6b 28 66 28 6e 75 6c 6c 21 3d 3d 74 68 69 73 2e 73 70 61 63 69 6e 67 42 6f 74 74 6f 6d 26 26 76 6f 69 64 20 30 21 3d 3d 74 68 69 73 2e 73 70 61 63 69 6e 67 42 6f 74 74 6f 6d 3f 74 68 69 73 2e 73 70 61 63 69 6e 67 42 6f 74 74 6f 6d 3a 65 2c 74 29 29 7d 7d 2c 70 61 64 64 69 6e 67 3a 66 75 6e 63 74 69 Data Ascii: 0:t.id},spacing:function(){var t=this.isMobile?.5:1,e=this.lastOnPage&&this.hasOuterBackground?0:this.spacingDefault;return{marginBottom:this.cssEmFallback(f(null!==this.spacingBottom&&void 0!==this.spacingBottom?this.spacingBottom:e,t))}},padding:functi
2024-01-17 17:07:34 UTC	16384	IN	Data Raw: 74 29 2c 63 3d 2d 65 2e 73 63 72 6f 6c 6c 54 6f 70 3b 72 65 74 75 72 6e 22 72 74 6c 22 3d 3d 3d 41 28 62 6f 64 79 7c 7c 68 74 6d 6c 29 2e 64 69 72 65 63 74 69 6f 6e 26 26 28 6f 2b 3d 76 28 68 74 6d 6c 2e 63 6c 69 65 6e 74 57 69 64 74 68 2c 62 6f 64 79 3f 62 6f 64 79 2e 63 6c 69 65 6e 74 57 69 64 74 68 3a 30 29 2d 6e 29 2c 7b 77 69 64 74 68 3a 6e 2c 68 65 69 67 68 74 3a 72 2c 78 3a 6f 2c 79 3a 63 7d 7d 28 53 28 65 6c 65 6d 65 6e 74 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 62 74 28 65 6c 65 6d 65 6e 74 2c 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 22 63 6c 69 70 70 69 6e 67 50 61 72 65 6e 74 73 22 3d 3d 3d 74 3f 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 65 6e 74 29 7b 76 61 72 20 74 3d 52 28 49 28 65 6c 65 6d 65 6e 74 29 29 2c 65 3d 5b 22 61 62 73 6f 6c 75 74 65 22 Data Ascii: t),c=-e.scrollTop;return"rtl"===A(body\|\|html).direction&&(o+=v(html.clientWidth,body?body.clientWidth:0)-n),{width:n,height:r,x:o,y:c}}(S(element)))}function bt(element,t,e,n){var r="clippingParents"===t?function(element){var t=R(I(element)),e=["absolute"
2024-01-17 17:07:34 UTC	16384	IN	Data Raw: 6b 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 73 4d 6f 62 69 6c 65 26 26 74 68 69 73 2e 73 74 61 63 6b 4f 6e 4d 6f 62 69 6c 65 7d 7d 2c 6d 65 74 68 6f 64 73 3a 7b 72 65 73 69 7a 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 61 76 61 69 6c 61 62 6c 65 57 69 64 74 68 3d 74 68 69 73 2e 24 65 6c 2e 6f 66 66 73 65 74 57 69 64 74 68 7d 7d 7d 2c 76 3d 28 6e 28 36 37 31 29 2c 6e 28 30 29 29 2c 63 6f 6d 70 6f 6e 65 6e 74 3d 4f 62 6a 65 63 74 28 76 2e 61 29 28 64 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 65 3d 74 2e 24 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 2c 6e 3d 74 2e 5f 73 65 6c 66 2e 5f 63 7c 7c 65 3b 72 65 74 75 72 6e 20 6e 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 3a 74 2e 62 65 6d 28 Data Ascii: ked:function(){return this.isMobile&&this.stackOnMobile}},methods:{resize:function(){this.availableWidth=this.$el.offsetWidth}}},v=(n(671),n(0)),component=Object(v.a)(d,(function(){var t=this,e=t.$createElement,n=t._self._c\|\|e;return n("div",{class:t.bem(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.16	50045	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:34 UTC	669	OUT	GET /bundles/v1/edgeChromium/latest/libs_sports-data-service_dist_SportsDataMapper_js.6f14df7ca3d855f79932.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:34 UTC	1149	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: cwkbCWTgOdxBXclwP1rupA== Last-Modified: Mon, 08 Jan 2024 16:46:15 GMT ETag: 0x8DC1069546AD7EC Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: fb47b097-101e-0052-1a52-425f89000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:34 GMT Content-Length: 47530 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89892557,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=1, origin; dur=0 , cdntime; dur=1 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55ba6cd Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511254.55ba6cd Vary: Origin
2024-01-17 17:07:34 UTC	15235	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6c 69 62 73 5f 73 70 6f 72 74 73 2d 64 61 74 61 2d 73 65 72 76 69 63 65 5f 64 69 73 74 5f 53 70 6f 72 74 73 44 61 74 61 4d 61 70 70 65 72 5f 6a 73 22 5d 2c 7b 39 30 38 30 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 61 2e 64 28 74 2c 7b 24 33 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 7d 2c 41 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 7d 2c 42 6d 3a 66 75 6e 63 74 69 6f Data Ascii: "use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["libs_sports-data-service_dist_SportsDataMapper_js"],{90806:function(e,t,a){a.d(t,{$3:function(){return b},Ag:function(){return w},Bm:functio
2024-01-17 17:07:34 UTC	9341	IN	Data Raw: 6c 29 3b 63 6f 6e 73 74 20 6f 3d 66 28 65 2c 44 2c 74 2c 61 2c 6e 75 6c 6c 3d 3d 3d 28 76 3d 6d 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 76 3f 76 6f 69 64 20 30 3a 76 2e 73 70 6f 72 74 73 4d 61 74 63 68 75 70 43 61 72 64 44 61 74 61 2c 6d 2e 73 70 6f 72 74 73 4c 65 61 67 75 65 49 6e 66 6f 2c 6d 2e 63 61 72 64 43 6c 69 63 6b 42 61 73 65 55 72 6c 2c 6d 2e 69 73 43 61 72 64 43 6c 69 63 6b 42 6c 6f 63 6b 65 64 2c 72 2c 6c 29 3b 64 3d 7b 2e 2e 2e 64 2c 2e 2e 2e 6f 7d 3b 63 6f 6e 73 74 20 69 3d 6f 2e 73 70 6f 72 74 73 4d 61 74 63 68 4f 76 65 72 61 6c 6c 44 61 74 61 7c 7c 5b 5d 3b 69 2e 6c 65 6e 67 74 68 3f 67 2e 73 65 74 28 6e 2e 5a 74 2e 53 70 6f 72 74 73 4d 61 74 63 68 65 73 2c 69 29 3a 67 2e 64 65 6c 65 74 65 28 6e 2e 5a 74 2e 53 70 6f 72 74 73 4d 61 74 63 68 65 Data Ascii: l);const o=f(e,D,t,a,null===(v=m)\|\|void 0===v?void 0:v.sportsMatchupCardData,m.sportsLeagueInfo,m.cardClickBaseUrl,m.isCardClickBlocked,r,l);d={...d,...o};const i=o.sportsMatchOverallData\|\|[];i.length?g.set(n.Zt.SportsMatches,i):g.delete(n.Zt.SportsMatche
2024-01-17 17:07:34 UTC	16384	IN	Data Raw: 63 65 73 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 76 6f 69 64 28 30 2c 6f 2e 48 29 28 69 2e 24 6d 77 2c 22 53 70 6f 72 74 73 20 73 74 61 6e 64 69 6e 67 73 20 63 6f 6e 66 65 72 65 6e 63 65 73 20 68 61 73 20 6e 6f 20 76 61 6c 75 65 2e 22 2c 60 20 4c 65 61 67 75 65 49 64 3d 24 7b 6c 2e 69 64 7d 20 4d 61 72 6b 65 74 3d 24 7b 72 7d 20 6d 6f 64 65 6c 44 61 74 61 3d 24 7b 61 7d 60 29 3b 63 6f 6e 73 74 20 63 3d 5b 5d 2c 64 3d 6e 65 77 20 4d 61 70 3b 72 65 74 75 72 6e 20 61 2e 48 65 61 64 65 72 26 26 61 2e 48 65 61 64 65 72 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 65 26 26 64 2e 73 65 74 28 65 2e 54 69 74 6c 65 2c 65 2e 54 69 74 6c 65 4c 6f 63 4b 65 79 29 7d 29 29 2c 61 2e 43 6f 6e 66 65 72 65 6e 63 65 73 2e 66 6f 72 45 61 63 68 28 28 61 3d 3e 7b 69 66 28 61 Data Ascii: ces.length)return void(0,o.H)(i.$mw,"Sports standings conferences has no value.",` LeagueId=${l.id} Market=${r} modelData=${a}`);const c=[],d=new Map;return a.Header&&a.Header.forEach((e=>{e&&d.set(e.Title,e.TitleLocKey)})),a.Conferences.forEach((a=>{if(a
2024-01-17 17:07:34 UTC	6570	IN	Data Raw: 6e 20 45 28 65 2c 74 2c 61 2c 72 3d 6e 2e 4c 75 2e 53 63 68 65 64 75 6c 65 29 7b 69 66 28 28 30 2c 6d 2e 54 46 29 28 65 29 7c 7c 28 30 2c 6d 2e 54 46 29 28 74 29 7c 7c 21 61 29 72 65 74 75 72 6e 22 22 3b 73 77 69 74 63 68 28 72 29 7b 63 61 73 65 20 6e 2e 4c 75 2e 53 63 68 65 64 75 6c 65 3a 72 65 74 75 72 6e 28 30 2c 73 2e 55 50 29 28 60 24 7b 65 7d 2f 24 7b 61 2e 75 72 6c 53 65 67 6d 65 6e 74 53 63 68 65 64 75 6c 65 7d 2f 73 70 2d 74 69 64 2d 24 7b 74 2e 74 72 69 6d 28 29 7d 60 29 3b 63 61 73 65 20 6e 2e 4c 75 2e 54 65 61 6d 3a 72 65 74 75 72 6e 28 30 2c 73 2e 55 50 29 28 60 24 7b 65 7d 2f 24 7b 61 2e 75 72 6c 53 65 67 6d 65 6e 74 54 65 61 6d 7d 2f 73 70 2d 69 64 2d 24 7b 74 7d 60 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 22 22 7d 7d 66 75 6e 63 74 Data Ascii: n E(e,t,a,r=n.Lu.Schedule){if((0,m.TF)(e)\|\|(0,m.TF)(t)\|\|!a)return"";switch(r){case n.Lu.Schedule:return(0,s.UP)(`${e}/${a.urlSegmentSchedule}/sp-tid-${t.trim()}`);case n.Lu.Team:return(0,s.UP)(`${e}/${a.urlSegmentTeam}/sp-id-${t}`);default:return""}}funct

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.16	50048	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:34 UTC	720	OUT	GET /bundles/v1/edgeChromium/latest/libs_feed-layout_dist_card-templates_top-stories-card_TopStoriesCardDataMapper_js-libs_feed-l-1afd74.2e82a29e33833a0c1055.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:34 UTC	1186	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: bZKaAUg++1rUNx/sx+6k1g== Last-Modified: Sat, 13 Jan 2024 01:22:17 GMT ETag: 0x8DC13D614AA3CE0 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 2a0c3bd5-f01e-00e4-5dbf-45d3c1000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:34 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Akamai-Request-BC: [a=23.218.242.10,b=89892606,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=4, origin; dur=0 , cdntime; dur=4 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55ba6fe Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511254.55ba6fe Vary: Origin
2024-01-17 17:07:34 UTC	15198	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6c 69 62 73 5f 66 65 65 64 2d 6c 61 79 6f 75 74 5f 64 69 73 74 5f 63 61 72 64 2d 74 65 6d 70 6c 61 74 65 73 5f 74 6f 70 2d 73 74 6f 72 69 65 73 2d 63 61 72 64 5f 54 6f 70 53 74 6f 72 69 65 73 43 61 72 64 44 61 74 61 4d 61 70 70 65 72 5f 6a 73 2d 6c 69 62 73 5f 66 65 65 64 2d 6c 2d 31 61 66 64 37 34 22 5d 2c 7b 32 39 34 34 37 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 2e 64 28 Data Ascii: 00006000(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["libs_feed-layout_dist_card-templates_top-stories-card_TopStoriesCardDataMapper_js-libs_feed-l-1afd74"],{29447:function(t,e,a){"use strict";a.d(
2024-01-17 17:07:34 UTC	9390	IN	Data Raw: 79 54 61 67 7d 22 3e 24 7b 28 30 2c 64 2e 67 29 28 28 74 3d 3e 22 72 74 6c 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 64 69 72 26 26 21 74 2e 65 6e 61 62 6c 65 46 65 65 64 73 32 43 61 72 6f 75 73 65 6c 29 2c 6c 2e 64 79 60 3c 73 76 67 20 73 6c 6f 74 3d 22 70 72 65 76 69 6f 75 73 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 66 69 6c 6c 3d 22 72 65 64 22 3e 3c 70 61 74 68 20 64 3d 22 4d 34 2e 30 32 33 20 31 35 2e 32 37 33 4c 31 31 2e 32 39 20 38 20 34 2e 30 32 33 2e 37 32 37 6c 2e 37 30 34 2d 2e 37 30 34 4c 31 32 2e 37 31 20 38 6c 2d 37 2e 39 38 34 20 37 2e 39 37 37 2d 2e 37 30 34 2d 2e 37 30 34 7a 22 3e 3c 2f 70 61 74 68 3e 3c 2f 73 76 Data Ascii: yTag}">${(0,d.g)((t=>"rtl"===document.dir&&!t.enableFeeds2Carousel),l.dy`<svg slot="previous" viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg" fill="red"><path d="M4.023 15.273L11.29 8 4.023.727l.704-.704L12.71 8l-7.984 7.977-.704-.704z"></path></sv
2024-01-17 17:07:34 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 75 65 73 74 51 75 65 72 79 50 61 72 61 6d 73 2e 67 65 74 28 22 61 63 74 69 76 69 74 79 49 64 22 29 7c 7c 74 68 69 73 2e 72 65 71 75 65 73 74 51 75 65 72 79 50 61 72 61 6d 73 2e 73 65 74 28 22 61 63 74 69 76 69 74 79 49 64 22 2c 6c 2e 6a 47 2e 41 63 74 69 76 69 74 79 49 64 29 29 3b 65 6c 73 65 7b 63 6f 6e 73 74 7b 6f 63 69 64 3a 74 2c 66 6c 69 67 68 74 44 61 74 61 3a 65 2c 6f 76 65 72 77 72 69 74 65 46 6c 69 67 68 74 44 61 74 61 3a 6e 2c 6d 75 69 64 46 61 6c 6c 62 61 63 6b 3a 69 7d 3d 61 2c 6f 3d 61 77 61 69 74 28 30 2c 6b 2e 58 4a 29 28 29 3d 3d 3d 72 2e 48 79 2e 53 69 67 6e 65 64 49 6e 3f 68 2e 24 44 2e 67 65 74 4f 6e 65 53 65 72 76 69 63 65 50 61 72 61 6d 73 57 69 74 68 41 75 74 68 28 6c 2e 6a 47 2e 55 73 65 72 49 64 2c 74 Data Ascii: 00006000uestQueryParams.get("activityId")\|\|this.requestQueryParams.set("activityId",l.jG.ActivityId));else{const{ocid:t,flightData:e,overwriteFlightData:n,muidFallback:i}=a,o=await(0,k.XJ)()===r.Hy.SignedIn?h.$D.getOneServiceParamsWithAuth(l.jG.UserId,t
2024-01-17 17:07:34 UTC	8204	IN	Data Raw: 69 6d 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 3a 68 6f 73 74 20 2e 63 61 72 64 2d 63 6f 6e 74 65 6e 74 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6f 76 65 72 66 6c 6f 77 2d 78 3a 68 69 64 64 65 6e 7d 3a 68 6f 73 74 20 2e 63 61 72 64 2d 63 6f 6e 74 65 6e 74 20 6d 73 66 74 2d 61 72 74 69 63 6c 65 2e 63 61 72 6f 75 73 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 3a 68 6f 73 74 28 5b 6c 61 79 6f 75 74 3d 22 72 69 62 62 6f 6e 43 61 72 6f 75 73 65 6c 22 5d 5b 62 61 63 6b 67 72 6f 75 6e 64 3d 22 69 6e 68 65 72 69 74 53 65 63 74 69 6f 6e 22 5d 29 20 3a 3a 70 61 72 74 28 76 69 65 77 70 6f 72 74 29 7b 6f 76 65 72 66 6c 6f 77 2d 79 3a 68 69 64 64 65 6e 7d 3a 68 6f 73 74 28 5b 6c 61 79 6f 75 74 3d 22 72 69 62 62 6f 6e 43 61 72 6f 75 73 65 6c 22 5d 29 20 2e 6e 65 78 74 Data Ascii: imation:none}:host .card-content{display:flex;overflow-x:hidden}:host .card-content msft-article.carousel{display:block}:host([layout="ribbonCarousel"][background="inheritSection"]) ::part(viewport){overflow-y:hidden}:host([layout="ribbonCarousel"]) .next
2024-01-17 17:07:34 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 3a 68 6f 73 74 28 5b 62 61 63 6b 67 72 6f 75 6e 64 3d 22 67 72 61 64 69 65 6e 74 22 5d 29 20 6d 73 66 74 2d 61 72 74 69 63 6c 65 20 2e 69 6e 6c 69 6e 65 2d 61 63 74 69 6f 6e 73 20 2e 64 69 76 69 64 65 72 7b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 30 39 29 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 70 78 7d 3a 68 6f 73 74 28 5b 62 61 63 6b 67 72 6f 75 6e 64 3d 22 67 72 61 64 69 65 6e 74 22 5d 29 20 6d 73 66 74 2d 61 72 74 69 63 6c 65 3a 68 6f 76 65 72 2c 3a 68 6f 73 74 28 5b 62 61 63 6b 67 72 6f 75 6e 64 3d 22 67 72 61 64 69 65 6e 74 22 5d 29 20 6d 73 66 74 2d 61 72 74 69 63 6c 65 3a 66 6f 63 75 73 2d 77 69 74 68 69 6e Data Ascii: 00004000und:transparent}:host([background="gradient"]) msft-article .inline-actions .divider{border-left:1px solid rgba(0,0,0,0.09);margin-top:2px}:host([background="gradient"]) msft-article:hover,:host([background="gradient"]) msft-article:focus-within
2024-01-17 17:07:34 UTC	12	IN	Data Raw: 61 28 32 31 35 2c 32 32 31 2c 0d 0a Data Ascii: a(215,221,
2024-01-17 17:07:34 UTC	7902	IN	Data Raw: 30 30 30 30 31 45 44 32 0d 0a 32 33 33 2c 30 2e 38 29 20 38 38 2e 36 39 25 2c 72 67 62 61 28 32 31 33 2c 32 31 39 2c 32 33 33 2c 30 29 20 31 30 30 25 3b 2d 2d 69 6e 6c 69 6e 65 2d 61 63 74 69 6f 6e 73 2d 73 74 61 63 6b 65 64 2d 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 36 3a 76 61 72 28 2d 2d 69 6e 6c 69 6e 65 2d 61 63 74 69 6f 6e 73 2d 67 72 61 64 69 65 6e 74 2d 61 6e 67 6c 65 29 2c 23 64 62 65 30 65 62 20 30 2e 30 31 25 2c 23 64 37 64 64 65 39 20 37 36 2e 38 32 25 2c 72 67 62 61 28 32 31 33 2c 32 31 39 2c 32 33 33 2c 30 2e 38 29 20 38 38 2e 36 39 25 2c 72 67 62 61 28 32 30 39 2c 32 31 36 2c 32 33 31 2c 30 29 20 31 30 30 25 3b 2d 2d 69 6e 6c 69 6e 65 2d 61 63 74 69 6f 6e 73 2d 72 69 62 62 6f 6e 2d 63 61 72 6f 75 73 65 6c 2d 67 72 61 64 Data Ascii: 00001ED2233,0.8) 88.69%,rgba(213,219,233,0) 100%;--inline-actions-stacked-gradient-background-6:var(--inline-actions-gradient-angle),#dbe0eb 0.01%,#d7dde9 76.82%,rgba(213,219,233,0.8) 88.69%,rgba(209,216,231,0) 100%;--inline-actions-ribbon-carousel-grad
2024-01-17 17:07:34 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 2e 64 79 6e 61 6d 69 63 2d 67 72 61 64 69 65 6e 74 2d 64 61 79 2c 3a 68 6f 73 74 28 5b 62 61 63 6b 67 72 6f 75 6e 64 3d 22 67 72 61 64 69 65 6e 74 22 5d 29 20 2e 69 6e 6e 65 72 2d 63 6f 6e 74 65 6e 74 2e 64 79 6e 61 6d 69 63 2d 67 72 61 64 69 65 6e 74 2d 64 61 79 20 73 6f 63 69 61 6c 2d 62 61 72 2d 77 63 3a 3a 70 61 72 74 28 72 65 61 63 74 69 6f 6e 2d 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 29 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 2d 64 79 6e 61 6d 69 63 2d 67 72 61 64 69 65 6e 74 2d 64 61 79 29 7d 3a 68 6f 73 74 28 5b 6c 61 79 6f 75 74 3d 22 63 6f 6d 70 61 63 74 74 68 75 6d 62 22 5d 5b 62 61 63 6b 67 72 6f 75 6e 64 3d 22 67 72 61 64 69 65 6e 74 22 5d 29 20 2e Data Ascii: 00004000.dynamic-gradient-day,:host([background="gradient"]) .inner-content.dynamic-gradient-day social-bar-wc::part(reaction-menu-container){background:var(--background-color-dynamic-gradient-day)}:host([layout="compactthumb"][background="gradient"]) .
2024-01-17 17:07:34 UTC	12	IN	Data Raw: 69 6e 65 2d 61 63 74 69 6f 6e 0d 0a Data Ascii: ine-action
2024-01-17 17:07:34 UTC	8584	IN	Data Raw: 30 30 30 30 32 31 37 43 0d 0a 73 2d 63 6f 6d 70 61 63 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 65 6e 74 2d 64 61 79 2d 32 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 76 61 72 28 2d 2d 69 6e 6c 69 6e 65 2d 61 63 74 69 6f 6e 73 2d 64 79 6e 61 6d 69 63 2d 67 72 61 64 69 65 6e 74 2d 61 6e 67 6c 65 29 2c 72 67 62 61 28 32 31 31 2c 32 32 37 2c 32 32 32 2c 30 29 20 30 25 2c 72 67 62 61 28 36 33 2c 37 38 2c 35 39 2c 30 29 20 30 2e 30 31 25 2c 23 33 46 34 45 33 42 20 37 2e 38 31 25 2c 23 33 43 34 43 34 32 20 36 36 2e 36 37 25 2c 23 33 36 34 42 34 43 20 31 30 30 25 29 3b 2d 2d 69 6e 6c 69 6e 65 2d 61 63 74 69 6f 6e 73 2d 63 6f 6d 70 61 63 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 65 6e 74 2d 64 61 79 2d 33 3a 6c 69 6e 65 61 72 2d 67 Data Ascii: 0000217Cs-compact-background-gradient-day-2:linear-gradient(var(--inline-actions-dynamic-gradient-angle),rgba(211,227,222,0) 0%,rgba(63,78,59,0) 0.01%,#3F4E3B 7.81%,#3C4C42 66.67%,#364B4C 100%);--inline-actions-compact-background-gradient-day-3:linear-g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.16	50044	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:34 UTC	635	OUT	GET /bundles/v1/edgeChromium/latest/weather-card-wc.7979f047935ee43a48d8.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:34 UTC	1186	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: B807ACaOa+zbhtdynA42Wg== Last-Modified: Tue, 16 Jan 2024 23:21:32 GMT ETag: 0x8DC16E9E05D8800 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 820d73a0-401e-0073-2bd2-48e5b8000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:34 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Akamai-Request-BC: [a=23.218.242.10,b=89892649,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=0, origin; dur=0 , cdntime; dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55ba729 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511254.55ba729 Vary: Origin
2024-01-17 17:07:34 UTC	15198	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 77 65 61 74 68 65 72 2d 63 61 72 64 2d 77 63 22 5d 2c 7b 39 37 39 33 38 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 6e 2e 64 28 65 2c 7b 78 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 74 7d 2c 41 62 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 74 7d 2c 7a 6f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 43 74 7d 2c 70 44 3a 66 75 6e 63 Data Ascii: 00006000"use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["weather-card-wc"],{97938:function(t,e,n){n.d(e,{xg:function(){return bt},Ab:function(){return ft},zo:function(){return Ct},pD:func
2024-01-17 17:07:34 UTC	9390	IN	Data Raw: 20 30 3a 6e 2e 61 69 72 51 75 61 6c 69 74 79 29 2c 77 3d 28 30 2c 72 2e 6c 64 29 28 22 41 71 69 4e 6f 43 6f 6c 6f 72 2e 73 76 67 22 2c 48 2e 4d 78 29 2c 43 3d 7b 73 75 6d 6d 61 72 79 49 63 6f 6e 3a 28 30 2c 4c 2e 6f 77 29 28 5b 77 5d 2c 22 31 32 22 2c 22 61 71 69 2d 69 63 6f 6e 22 2c 22 6e 6f 63 6f 6c 6f 72 2d 69 6d 67 2d 61 71 69 22 29 2c 73 75 6d 6d 61 72 79 4c 69 6e 65 31 3a 63 2e 65 6e 61 62 6c 65 41 71 4e 65 77 54 65 78 74 3f 76 3a 70 2c 73 75 6d 6d 61 72 79 4c 69 6e 65 32 3a 63 2e 65 6e 61 62 6c 65 41 71 4e 65 77 54 65 78 74 3f 6e 75 6c 6c 3d 3d 3d 28 6f 3d 63 2e 6c 6f 63 61 6c 69 7a 65 64 53 74 72 69 6e 67 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 7c 7c 6e 75 6c 6c 3d 3d 3d 28 69 3d 6f 2e 61 69 72 51 75 61 6c 69 74 79 29 7c 7c 76 6f 69 64 20 30 3d Data Ascii: 0:n.airQuality),w=(0,r.ld)("AqiNoColor.svg",H.Mx),C={summaryIcon:(0,L.ow)([w],"12","aqi-icon","nocolor-img-aqi"),summaryLine1:c.enableAqNewText?v:p,summaryLine2:c.enableAqNewText?null===(o=c.louserzedStrings)\|\|void 0===o\|\|null===(i=o.airQuality)\|\|void 0=
2024-01-17 17:07:34 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 75 65 2c 64 2e 77 65 64 2c 64 2e 74 68 75 2c 64 2e 66 72 69 2c 64 2e 73 61 74 5d 2c 75 3d 5b 5d 3b 66 6f 72 28 6c 65 74 20 74 3d 30 3b 74 3c 35 26 26 74 3c 28 6e 75 6c 6c 3d 3d 3d 28 70 3d 65 2e 66 6f 72 65 63 61 73 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 70 3f 76 6f 69 64 20 30 3a 70 2e 6c 65 6e 67 74 68 29 3b 74 2b 2b 29 7b 76 61 72 20 70 3b 63 6f 6e 73 74 20 73 3d 65 2e 66 6f 72 65 63 61 73 74 5b 74 5d 2c 64 3d 60 24 7b 61 7d 26 64 61 79 3d 24 7b 74 2b 31 7d 60 2c 68 3d 6f 2e 64 61 79 4f 66 57 65 65 6b 57 69 74 68 44 61 74 65 3f 28 30 2c 72 2e 73 65 29 28 73 2e 64 61 79 2c 6e 29 3a 6c 5b 73 2e 64 61 79 2e 67 65 74 44 61 79 28 29 5d 2c 6d 3d 7b 69 74 65 6d 41 72 69 61 4c 61 62 65 6c 3a 69 2e 66 6f 72 65 63 61 73 74 4c 69 73 Data Ascii: 00006000ue,d.wed,d.thu,d.fri,d.sat],u=[];for(let t=0;t<5&&t<(null===(p=e.forecast)\|\|void 0===p?void 0:p.length);t++){var p;const s=e.forecast[t],d=`${a}&day=${t+1}`,h=o.dayOfWeekWithDate?(0,r.se)(s.day,n):l[s.day.getDay()],m={itemAriaLabel:i.forecastLis
2024-01-17 17:07:34 UTC	8204	IN	Data Raw: 61 28 29 7d 7d 6d 69 6e 69 6d 61 70 43 68 61 6e 67 65 64 28 74 29 7b 21 74 26 26 74 68 69 73 2e 6d 69 6e 69 6d 61 70 26 26 28 30 2c 45 2e 45 29 28 74 68 69 73 29 7d 63 61 72 64 4d 65 74 61 64 61 74 61 43 68 61 6e 67 65 64 28 74 2c 65 29 7b 76 61 72 20 6e 3b 69 66 28 74 68 69 73 2e 73 65 74 74 69 6e 67 55 70 64 61 74 65 64 52 65 66 72 65 73 68 53 74 61 74 65 26 26 28 74 68 69 73 2e 73 65 74 74 69 6e 67 55 70 64 61 74 65 64 52 65 66 72 65 73 68 53 74 61 74 65 3d 21 31 2c 74 68 69 73 2e 63 61 72 64 56 69 65 77 4d 6f 64 65 3d 72 2e 6a 79 2e 46 6f 72 65 63 61 73 74 29 2c 28 30 2c 49 2e 5a 29 28 74 2c 65 29 7c 7c 21 74 68 69 73 2e 63 61 72 64 4d 65 74 61 64 61 74 61 7c 7c 21 74 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 61 3d 6e 75 6c 6c 3d 3d 3d 28 6e 3d 74 68 Data Ascii: a()}}minimapChanged(t){!t&&this.minimap&&(0,E.E)(this)}cardMetadataChanged(t,e){var n;if(this.settingUpdatedRefreshState&&(this.settingUpdatedRefreshState=!1,this.cardViewMode=r.jy.Forecast),(0,I.Z)(t,e)\|\|!this.cardMetadata\|\|!t)return;const a=null===(n=th
2024-01-17 17:07:34 UTC	3129	IN	Data Raw: 30 30 30 30 30 43 32 44 0d 0a 29 28 5b 43 2e 4c 6a 5d 2c 71 2e 70 72 6f 74 6f 74 79 70 65 2c 22 63 61 72 64 53 69 7a 65 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 61 2e 67 6e 29 28 5b 28 30 2c 43 2e 4c 6a 29 28 7b 6d 6f 64 65 3a 22 62 6f 6f 6c 65 61 6e 22 7d 29 5d 2c 71 2e 70 72 6f 74 6f 74 79 70 65 2c 22 69 73 57 69 64 67 65 74 44 61 72 6b 4d 6f 64 65 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 61 2e 67 6e 29 28 5b 28 30 2c 43 2e 4c 6a 29 28 7b 6d 6f 64 65 3a 22 62 6f 6f 6c 65 61 6e 22 7d 29 5d 2c 71 2e 70 72 6f 74 6f 74 79 70 65 2c 22 69 73 41 6e 69 6d 61 74 69 6f 6e 73 45 6e 61 62 6c 65 64 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 61 2e 67 6e 29 28 5b 77 2e 4c 4f 5d 2c 71 2e 70 72 6f 74 6f 74 79 70 65 2c 22 63 61 72 64 56 69 65 77 4d 6f 64 65 22 2c 76 6f 69 64 20 Data Ascii: 00000C2D)([C.Lj],q.prototype,"cardSize",void 0),(0,a.gn)([(0,C.Lj)({mode:"boolean"})],q.prototype,"isWidgetDarkMode",void 0),(0,a.gn)([(0,C.Lj)({mode:"boolean"})],q.prototype,"isAnimationsEnabled",void 0),(0,a.gn)([w.LO],q.prototype,"cardViewMode",void
2024-01-17 17:07:34 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 29 3a 64 28 61 2e 6d 33 29 2c 74 2e 63 6f 6e 74 65 6e 74 43 61 70 49 63 6f 6e 3f 64 28 22 4e 6f 43 6f 6e 74 65 6e 74 49 63 6f 6e 22 29 3a 63 28 22 4e 6f 43 6f 6e 74 65 6e 74 49 63 6f 6e 22 2c 22 74 72 75 65 22 29 2c 65 2e 66 6f 6c 6c 6f 77 65 64 4c 6f 63 61 74 69 6f 6e 73 26 26 63 28 61 2e 63 42 2c 60 24 7b 65 2e 66 6f 6c 6c 6f 77 65 64 4c 6f 63 61 74 69 6f 6e 73 2e 6c 65 6e 67 74 68 7d 60 29 2c 63 28 61 2e 61 68 2c 65 2e 6d 69 6e 69 6d 61 70 3f 22 74 72 75 65 22 3a 22 66 61 6c 73 65 22 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 2c 65 29 7b 72 65 74 75 72 6e 28 74 3d 74 7c 7c 7b 7d 29 2e 73 69 67 6e 61 74 75 72 65 3d 65 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 2c 65 29 7b 6f 2e 4d 30 2e 61 64 64 4f 72 55 70 64 61 74 65 54 Data Ascii: 00004000):d(a.m3),t.contentCapIcon?d("NoContentIcon"):c("NoContentIcon","true"),e.followedLocations&&c(a.cB,`${e.followedLocations.length}`),c(a.ah,e.minimap?"true":"false")}function s(t,e){return(t=t\|\|{}).signature=e,t}function c(t,e){o.M0.addOrUpdateT
2024-01-17 17:07:34 UTC	12	IN	Data Raw: 45 61 63 68 28 28 74 3d 3e 7b 0d 0a Data Ascii: Each((t=>{
2024-01-17 17:07:34 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 74 26 26 65 2e 63 6f 6e 74 65 6e 74 2e 70 75 73 68 28 7b 2e 2e 2e 74 7d 29 7d 29 29 2c 6e 2e 70 75 73 68 28 65 29 7d 29 29 2c 6e 2e 6c 65 6e 67 74 68 3e 30 3f 6e 3a 6e 75 6c 6c 29 3a 6e 75 6c 6c 7d 63 61 74 63 68 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 28 74 29 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 6d 61 70 73 6d 65 74 61 64 61 74 61 7d 28 74 29 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 69 66 28 21 74 7c 7c 21 74 2e 70 72 65 76 69 65 77 73 7c 7c 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 2e 70 72 65 76 69 65 77 73 29 7c 7c 74 2e 70 72 65 76 69 65 77 73 2e 6c 65 6e 67 74 68 3c 31 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 63 6f 6e 73 74 20 65 3d 74 2e 70 72 65 76 69 65 77 73 Data Ascii: 00004000t&&e.content.push({...t})})),n.push(e)})),n.length>0?n:null):null}catch{return null}}(t),a=function(t){return t.mapsmetadata}(t),o=function(t){try{if(!t\|\|!t.previews\|\|!Array.isArray(t.previews)\|\|t.previews.length<1)return null;const e=t.previews
2024-01-17 17:07:34 UTC	12	IN	Data Raw: 72 76 69 65 77 52 65 71 75 65 0d 0a Data Ascii: rviewReque
2024-01-17 17:07:34 UTC	3819	IN	Data Raw: 30 30 30 30 30 45 44 46 0d 0a 73 74 2e 64 75 72 61 74 69 6f 6e 22 2c 74 2e 6f 76 65 72 76 69 65 77 52 65 71 75 65 73 74 49 6e 74 65 72 6e 61 6c 3d 22 4f 76 65 72 76 69 65 77 52 65 71 75 65 73 74 2e 69 6e 74 65 72 6e 61 6c 22 2c 74 2e 6f 76 65 72 76 69 65 77 52 65 71 75 65 73 74 4e 65 74 77 6f 72 6b 3d 22 4f 76 65 72 76 69 65 77 52 65 71 75 65 73 74 2e 6e 65 74 77 6f 72 6b 22 2c 74 2e 6f 76 65 72 76 69 65 77 52 65 71 75 65 73 74 50 61 74 68 48 61 73 68 3d 22 4f 76 65 72 76 69 65 77 52 65 71 75 65 73 74 2e 70 61 74 68 48 61 73 68 22 2c 74 2e 70 64 70 52 65 71 75 65 73 74 53 74 61 72 74 3d 22 70 64 70 52 65 71 75 65 73 74 2e 73 74 61 72 74 22 2c 74 2e 70 64 70 52 65 71 75 65 73 74 44 75 72 61 74 69 6f 6e 3d 22 70 64 70 52 65 71 75 65 73 74 2e 64 75 72 61 74 Data Ascii: 00000EDFst.duration",t.overviewRequestInternal="OverviewRequest.internal",t.overviewRequestNetwork="OverviewRequest.network",t.overviewRequestPathHash="OverviewRequest.pathHash",t.pdpRequestStart="pdpRequest.start",t.pdpRequestDuration="pdpRequest.durat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.16	50042	52.182.143.211	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:34 UTC	1084	OUT	POST /OneCollector/1.0?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1705511252847&time-delta-to-apply-millis=use-collector-delta&w=0&anoncknm=app_anon&NoResponseBody=true HTTP/1.1 Host: browser.events.data.msn.com Connection: keep-alive Content-Length: 5853 sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; _SS=SID=00
2024-01-17 17:07:34 UTC	5853	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 41 70 70 45 72 72 6f 72 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 30 31 2d 31 37 54 31 37 3a 30 37 3a 33 32 2e 38 34 31 5a 22 2c 22 76 65 72 22 3a 22 34 2e 30 22 2c 22 69 4b 65 79 22 3a 22 6f 3a 30 64 65 64 36 30 63 37 35 65 34 34 34 34 33 61 61 33 34 38 34 63 34 32 63 31 63 34 33 66 65 38 22 2c 22 65 78 74 22 3a 7b 22 73 64 6b 22 3a 7b 22 76 65 72 22 3a 22 31 44 53 2d 57 65 62 2d 4a 53 2d 33 2e 32 2e 38 22 2c 22 73 65 71 22 3a 31 2c 22 69 6e 73 74 61 6c 6c 49 64 22 3a 22 39 31 64 35 37 31 39 38 2d 66 37 38 37 2d 34 66 35 39 2d 38 61 30 37 2d 64 34 35 39 64 38 32 31 34 35 34 63 22 2c 22 65 70 6f 63 68 22 3a 22 31 31 31 36 32 33 39 39 30 38 22 7d 2c 22 61 70 70 22 3a 7b 22 6c 6f 63 61 6c 65 Data Ascii: {"name":"MS.News.Web.AppError","time":"2024-01-17T17:07:32.841Z","ver":"4.0","iKey":"o:0ded60c75e44443aa3484c42c1c43fe8","ext":{"sdk":{"ver":"1DS-Web-JS-3.2.8","seq":1,"installId":"91d57198-f787-4f59-8a07-d459d821454c","epoch":"1116239908"},"app":{"locale
2024-01-17 17:07:34 UTC	890	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: MC1=GUID=ae7f147141af491b860f957cf825762a&HASH=ae7f&LV=202401&V=4&LU=1705511254103; Domain=.microsoft.com; Expires=Thu, 16 Jan 2025 17:07:34 GMT; Path=/;Secure; SameSite=None Set-Cookie: MS0=2bec8e4cf7314e5b951e61eda33c6e58; Domain=.microsoft.com; Expires=Wed, 17 Jan 2024 17:37:34 GMT; Path=/;Secure; SameSite=None time-delta-millis: 1256 Access-Control-Allow-Headers: P3P,Set-Cookie,time-delta-millis Access-Control-Allow-Methods: POST Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com Access-Control-Expose-Headers: time-delta-millis Date: Wed, 17 Jan 2024 17:07:34 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.16	50049	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:34 UTC	932	OUT	GET /service/msn/user?apikey=1hYoJsIRvPEnSkk0hlnJF2092mHqiz7xFenIFKa9uc&activityId=07358B43-4719-4149-9E61-F4325F4E0424&ocid=pdp-peregrine&cm=en-us&it=app&user=m-2136D0069C246D353F30C40F9D676C20 HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: _C_Auth=; USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; MUIDB=2136D0069C246D353F30C40F9D676C20; _SS=SID=00
2024-01-17 17:07:34 UTC	3041	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Access-Control-Allow-Headers: TicketType,RequestContinuationKey,AuthToken,Content-Type,x-client-activityid,ms-cv,OneSvc-Uni-Feat-Tun,signedInCookieName,muid,appid,User-Location,user-location,userauthtoken,usertickettype,sitename,s2sauthtoken,thumbprint,Authorization,Ent-Authorization,UserIdToken,DDD-TMPL,DDD-ActivityId,DDD-FeatureSet,DDD-Session-ID,Date,date,ads-referer,ads-referer,taboola-sessionId,taboola-sessionid,Akamai-Request-ID,Akamai-Server-IP,X-MSEdge-Ref,DDD-DebugId,s-xbox-token,OneWebServiceLatency,X-FD-Features,DDD-UserType,traceparent,Widgets,Muted Access-Control-Expose-Headers: TicketType,RequestContinuationKey,AuthToken,Content-Type,x-client-activityid,ms-cv,OneSvc-Uni-Feat-Tun,signedInCookieName,muid,appid,User-Location,user-location,userauthtoken,usertickettype,sitename,s2sauthtoken,thumbprint,Authorization,Ent-Authorization,UserIdToken,DDD-TMPL,DDD-ActivityId,DDD-FeatureSet,DDD-Session-ID,Date,date,ads-referer,ads-referer,taboola-sessionId,taboola-sessionid,Akamai-Request-ID,Akamai-Server-IP,X-MSEdge-Ref,DDD-DebugId,s-xbox-token,OneWebServiceLatency,X-FD-Features,DDD-UserType,traceparent,Widgets,Muted DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-ActivityId: 65a80956-ac8d-4777-9abd-f410aaf55990 DDD-StrategyExecutionLatency: 00:00:00.0093750,00:00:00.0097478 DDD-DebugId: 65a80956-ac8d-4777-9abd-f410aaf55990\|2024-01-17T17:07:34.2806504Z\|fabric_msn\|EUS1\|News_461 OneWebServiceLatency: 13 X-MSEdge-ResponseInfo: 13 Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA X-Ceto-ref: 65a80956d7be4a99b063871bc6df4e74\|2024-01-17T17:07:34.234Z X-MSEdge-Ref: Ref A: 25606A4D4C624D63BB8C0736F774CF39 Ref B: EWR30EDGE0909 Ref C: 2024-01-17T17:07:34Z Expires: Wed, 17 Jan 2024 17:07:34 GMT Date: Wed, 17 Jan 2024 17:07:34 GMT Content-Length: 74 Connection: close Set-Cookie: _C_ETH=1; domain=.msn.com; path=/; secure; httponly Set-Cookie: _C_Auth= Akamai-Request-BC: [a=23.218.242.10,b=89892712,c=g,n=US_NJ_EDISON,o=20940],[a=204.79.197.203,c=o] Server-Timing: clientrtt; dur=88, clienttt; dur=81, origin; dur=80 , cdntime; dur=1 Akamai-Cache-Status: NotCacheable from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55ba768 Access-Control-Allow-Methods: PUT,PATCH,POST,GET,OPTIONS,DELETE Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com X-AS-SuppressSetCookie: 1 Cache-Control: private, max-age=0 report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511254.55ba768 Vary: Origin
2024-01-17 17:07:34 UTC	74	IN	Data Raw: 7b 20 22 40 6f 64 61 74 61 2e 63 6f 6e 74 65 78 74 22 3a 20 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 6d 73 6e 2e 63 6f 6d 2f 6d 73 6e 2f 24 6d 65 74 61 64 61 74 61 23 75 73 65 72 22 2c 20 22 76 61 6c 75 65 22 3a 20 5b 5d 7d Data Ascii: { "@odata.context": "https://api.msn.com/msn/$metadata#user", "value": []}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.16	50050	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:34 UTC	635	OUT	GET /bundles/v1/edgeChromium/latest/traffic-card-wc.f9bc3ae43f2351c4fe72.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:34 UTC	1188	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: rsn4qeQnnbhGFtaZED90hg== Last-Modified: Sat, 13 Jan 2024 01:22:14 GMT ETag: 0x8DC13D61326B038 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 2a0be47b-f01e-00e4-52bf-45d3c1000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:34 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Akamai-Request-BC: [a=23.218.242.10,b=89892953,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=10, origin; dur=0 , cdntime; dur=10 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55ba859 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511254.55ba859 Vary: Origin
2024-01-17 17:07:34 UTC	15196	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 74 72 61 66 66 69 63 2d 63 61 72 64 2d 77 63 22 5d 2c 7b 39 38 33 30 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 72 28 65 29 2c 69 2e 64 28 65 2c 7b 54 6f 6f 6c 69 6e 67 49 6e 66 6f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 47 74 7d 2c 54 72 61 66 66 69 63 43 61 72 64 43 6f 6e 74 65 6e 74 54 65 6d 70 6c 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 Data Ascii: 00006000(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["traffic-card-wc"],{98301:function(t,e,i){"use strict";i.r(e),i.d(e,{ToolingInfo:function(){return Gt},TrafficCardContentTemplate:function(){ret
2024-01-17 17:07:34 UTC	9392	IN	Data Raw: 72 79 43 6f 6e 74 65 78 74 2e 64 65 74 65 63 74 4c 6f 63 61 74 69 6f 6e 2e 67 65 74 4d 65 74 61 64 61 74 61 54 61 67 28 29 7d 22 20 3a 73 70 65 63 69 66 79 4c 6f 63 61 74 69 6f 6e 54 65 6c 65 6d 65 74 72 79 54 61 67 3d 22 24 7b 74 3d 3e 74 2e 74 65 6c 65 6d 65 74 72 79 43 6f 6e 74 65 78 74 26 26 74 2e 74 65 6c 65 6d 65 74 72 79 43 6f 6e 74 65 78 74 2e 73 70 65 63 69 66 79 4c 6f 63 61 74 69 6f 6e 26 26 74 2e 74 65 6c 65 6d 65 74 72 79 43 6f 6e 74 65 78 74 2e 73 70 65 63 69 66 79 4c 6f 63 61 74 69 6f 6e 2e 67 65 74 4d 65 74 61 64 61 74 61 54 61 67 28 29 7d 22 20 3a 73 61 76 65 54 65 6c 65 6d 65 74 72 79 54 61 67 3d 22 24 7b 74 3d 3e 74 2e 74 65 6c 65 6d 65 74 72 79 43 6f 6e 74 65 78 74 26 26 74 2e 74 65 6c 65 6d 65 74 72 79 43 6f 6e 74 65 78 74 2e 73 61 76 Data Ascii: ryContext.detectLocation.getMetadataTag()}" :specifyLocationTelemetryTag="${t=>t.telemetryContext&&t.telemetryContext.specifyLocation&&t.telemetryContext.specifyLocation.getMetadataTag()}" :saveTelemetryTag="${t=>t.telemetryContext&&t.telemetryContext.sav
2024-01-17 17:07:34 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 79 70 65 3a 6f 2c 76 65 72 74 69 63 61 6c 3a 72 7d 2c 65 78 74 3a 64 2c 7a 6f 6e 65 3a 6e 7d 29 2c 6d 3d 63 2e 61 64 64 4f 72 55 70 64 61 74 65 43 68 69 6c 64 28 7b 6e 61 6d 65 3a 73 2e 69 38 2e 53 70 65 63 69 66 79 4c 6f 63 61 74 69 6f 6e 2c 61 63 74 69 6f 6e 3a 6c 2c 62 65 68 61 76 69 6f 72 3a 4d 2e 77 75 2e 43 75 73 74 6f 6d 69 7a 65 2c 63 6f 6e 74 65 6e 74 3a 7b 68 65 61 64 6c 69 6e 65 3a 69 2e 6c 6f 63 61 74 69 6f 6e 53 70 65 63 69 66 79 2c 74 79 70 65 3a 6f 2c 76 65 72 74 69 63 61 6c 3a 72 7d 2c 65 78 74 3a 64 2c 7a 6f 6e 65 3a 6e 7d 29 2c 75 3d 63 2e 61 64 64 4f 72 55 70 64 61 74 65 43 68 69 6c 64 28 7b 6e 61 6d 65 3a 73 2e 69 38 2e 53 61 76 65 2c 61 63 74 69 6f 6e 3a 6c 2c 62 65 68 61 76 69 6f 72 3a 4d 2e 77 75 2e 53 Data Ascii: 00006000ype:o,vertical:r},ext:d,zone:n}),m=c.addOrUpdateChild({name:s.i8.SpecifyLocation,action:l,behavior:M.wu.Customize,content:{headline:i.locationSpecify,type:o,vertical:r},ext:d,zone:n}),u=c.addOrUpdateChild({name:s.i8.Save,action:l,behavior:M.wu.S
2024-01-17 17:07:34 UTC	8204	IN	Data Raw: 61 72 63 68 50 61 72 61 6d 73 2e 73 65 74 28 22 68 6f 6d 65 77 6f 72 6b 72 65 77 61 72 64 73 22 2c 22 31 22 29 29 3a 68 3d 6e 65 77 20 55 52 4c 28 28 30 2c 43 2e 68 5f 29 28 73 2e 4b 53 2e 6d 61 70 73 56 65 72 74 69 63 61 6c 55 72 6c 29 29 2c 74 68 69 73 2e 63 6f 6e 66 69 67 2e 62 69 6e 67 46 6f 72 6d 43 6f 64 65 26 26 68 2e 73 65 61 72 63 68 50 61 72 61 6d 73 2e 73 65 74 28 22 46 4f 52 4d 22 2c 74 68 69 73 2e 63 6f 6e 66 69 67 2e 62 69 6e 67 46 6f 72 6d 43 6f 64 65 29 29 3a 68 3d 6e 65 77 20 55 52 4c 28 28 30 2c 43 2e 68 5f 29 28 73 2e 4b 53 2e 6c 61 6e 64 69 6e 67 50 61 67 65 55 72 6c 29 29 2c 22 74 72 61 6e 73 69 74 41 6c 65 72 74 22 3d 3d 3d 61 26 26 28 68 3d 6e 65 77 20 55 52 4c 28 28 30 2c 43 2e 68 5f 29 28 6c 3f 73 2e 4b 53 2e 74 72 61 6e 73 69 74 Data Ascii: archParams.set("homeworkrewards","1")):h=new URL((0,C.h_)(s.KS.mapsVerticalUrl)),this.config.bingFormCode&&h.searchParams.set("FORM",this.config.bingFormCode)):h=new URL((0,C.h_)(s.KS.landingPageUrl)),"transitAlert"===a&&(h=new URL((0,C.h_)(l?s.KS.transit
2024-01-17 17:07:34 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 74 49 74 65 6d 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 7c 7c 6f 2e 70 75 73 68 28 72 29 7d 29 29 2c 74 68 69 73 2e 74 72 61 6e 73 69 74 44 61 74 61 2e 74 72 61 6e 73 69 74 41 64 64 4c 6f 63 61 74 69 6f 6e 3d 74 68 69 73 2e 6d 61 6b 65 43 6c 69 63 6b 74 68 72 6f 75 67 68 55 72 6c 28 65 2c 21 31 2c 21 21 74 68 69 73 2e 63 6f 6e 66 69 67 2e 65 6e 61 62 6c 65 4d 61 70 73 56 65 72 74 69 63 61 6c 2c 22 74 72 61 6e 73 69 74 41 6c 65 72 74 22 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 21 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 2c 74 2e 68 6f 6d 65 26 26 74 2e 77 6f 72 6b 26 26 28 74 68 69 73 2e 74 72 61 6e 73 69 74 44 61 74 61 2e 74 72 61 6e 73 69 74 48 61 76 65 4c 6f 63 61 74 69 6f 6e 3d 21 30 29 2c 74 68 69 Data Ascii: 00006000tItems)\|\|void 0===o\|\|o.push(r)})),this.transitData.transitAddLocation=this.makeClickthroughUrl(e,!1,!!this.config.enableMapsVertical,"transitAlert",void 0,void 0,void 0,!1).toString(),t.home&&t.work&&(this.transitData.transitHaveLocation=!0),thi
2024-01-17 17:07:34 UTC	8204	IN	Data Raw: 74 65 54 69 6d 65 54 65 78 74 49 6e 74 65 72 76 61 6c 3d 77 69 6e 64 6f 77 2e 73 65 74 49 6e 74 65 72 76 61 6c 28 28 28 29 3d 3e 74 68 69 73 2e 72 65 66 72 65 73 68 54 69 6d 65 53 74 61 6d 70 46 6f 72 54 72 61 66 66 69 63 4e 65 77 73 28 29 29 2c 33 65 35 29 29 7d 72 65 66 72 65 73 68 54 69 6d 65 53 74 61 6d 70 46 6f 72 54 72 61 66 66 69 63 4e 65 77 73 28 29 7b 69 66 28 74 68 69 73 2e 63 61 72 64 44 61 74 61 26 26 22 74 72 61 66 66 69 63 4e 65 77 73 22 3d 3d 3d 74 68 69 73 2e 63 61 72 64 44 61 74 61 2e 73 63 65 6e 61 72 69 6f 26 26 74 68 69 73 2e 63 61 72 64 44 61 74 61 2e 74 72 61 66 66 69 63 4e 65 77 73 29 7b 63 6f 6e 73 74 20 74 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 74 68 69 73 2e 63 61 72 64 44 61 74 61 3d 7b 2e 2e 2e 74 68 69 73 2e 63 61 72 64 44 61 74 Data Ascii: teTimeTextInterval=window.setInterval((()=>this.refreshTimeStampForTrafficNews()),3e5))}refreshTimeStampForTrafficNews(){if(this.cardData&&"trafficNews"===this.cardData.scenario&&this.cardData.trafficNews){const t=Date.now();this.cardData={...this.cardDat
2024-01-17 17:07:34 UTC	13939	IN	Data Raw: 30 30 30 30 33 36 36 37 0d 0a 3d 3d 3d 28 61 3d 69 2e 73 65 74 74 69 6e 67 73 44 61 74 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 6c 61 73 74 46 65 74 63 68 65 64 4c 6f 63 61 74 69 6f 6e 73 3b 76 61 72 20 6f 2c 72 2c 6c 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 73 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 7c 7c 73 3e 3d 6e 2e 6c 65 6e 67 74 68 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 5b 73 5d 3f 22 41 75 74 6f 44 65 74 65 63 74 22 3d 3d 3d 28 6e 75 6c 6c 3d 3d 3d 28 6f 3d 74 68 69 73 2e 63 61 72 64 44 61 74 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 7c 7c 6e 75 6c 6c 3d 3d 3d 28 72 3d 6f 2e 73 65 74 74 69 6e 67 73 44 61 74 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 6c 6f 63 61 74 69 6f 6e 4d 6f 64 65 Data Ascii: 00003667===(a=i.settingsData)\|\|void 0===a?void 0:a.lastFetchedLocations;var o,r,l;return void 0===s\|\|void 0===n\|\|s>=n.length\|\|void 0===n[s]?"AutoDetect"===(null===(o=this.cardData)\|\|void 0===o\|\|null===(r=o.settingsData)\|\|void 0===r?void 0:r.locationMode
2024-01-17 17:07:34 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 73 43 6f 6d 6d 75 74 65 28 29 7b 72 65 74 75 72 6e 28 74 68 69 73 2e 63 61 72 64 44 61 74 61 26 26 74 68 69 73 2e 63 61 72 64 44 61 74 61 2e 63 6f 6d 6d 75 74 65 44 61 74 61 26 26 74 68 69 73 2e 63 61 72 64 44 61 74 61 2e 63 6f 6d 6d 75 74 65 44 61 74 61 2e 73 74 61 72 74 41 64 64 72 65 73 73 54 79 70 65 29 3d 3d 3d 73 2e 44 4c 2e 44 65 74 65 63 74 65 64 4c 6f 63 61 74 69 6f 6e 26 26 21 74 68 69 73 2e 69 73 41 6d 63 43 6f 6d 6d 75 74 65 26 26 21 74 68 69 73 2e 69 73 49 6e 66 65 72 72 65 64 43 6f 6d 6d 75 74 65 7d 67 65 74 20 69 73 41 6d 63 43 6f 6d 6d 75 74 65 28 29 7b 63 6f 6e 73 74 20 74 3d 74 68 69 73 2e 63 61 72 64 44 61 74 61 26 26 74 68 69 73 2e 63 61 72 64 44 61 74 61 2e 63 6f 6d 6d 75 74 65 44 61 74 61 3b 72 65 74 75 Data Ascii: 00006000sCommute(){return(this.cardData&&this.cardData.commuteData&&this.cardData.commuteData.startAddressType)===s.DL.DetectedLocation&&!this.isAmcCommute&&!this.isInferredCommute}get isAmcCommute(){const t=this.cardData&&this.cardData.commuteData;retu
2024-01-17 17:07:34 UTC	8204	IN	Data Raw: 29 3b 63 6c 61 73 73 20 67 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 69 6e 73 74 61 6e 63 65 3d 6e 2e 4e 7d 61 73 79 6e 63 20 67 65 74 55 73 65 72 44 65 66 61 75 6c 74 4c 6f 63 61 74 69 6f 6e 28 74 29 7b 6c 65 74 20 65 2c 69 3b 74 72 79 7b 63 6f 6e 73 74 20 69 3d 61 77 61 69 74 20 74 68 69 73 2e 69 6e 73 74 61 6e 63 65 2e 67 65 74 55 73 65 72 44 65 66 61 75 6c 74 4c 6f 63 61 74 69 6f 6e 28 74 29 3b 69 66 28 6e 75 6c 6c 3d 3d 69 29 74 68 72 6f 77 22 4c 6f 63 61 74 69 6f 6e 20 72 65 73 70 6f 6e 73 65 20 72 65 74 75 72 6e 65 64 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 3b 65 3d 61 77 61 69 74 20 69 2e 6a 73 6f 6e 28 29 7d 63 61 74 63 68 28 69 29 7b 28 30 2c 6f 2e 4f 4f 29 28 69 2c 72 2e 57 69 48 2c 60 55 73 65 72 27 73 20 64 Data Ascii: );class g{constructor(){this.instance=n.N}async getUserDefaultLocation(t){let e,i;try{const i=await this.instance.getUserDefaultLocation(t);if(null==i)throw"Location response returned null or undefined";e=await i.json()}catch(i){(0,o.OO)(i,r.WiH,`User's d
2024-01-17 17:07:34 UTC	16384	IN	Data Raw: 30 30 30 30 35 31 43 34 0d 0a 6e 67 22 29 3a 28 30 2c 73 2e 4b 39 29 28 22 69 6e 6c 69 6e 65 43 6f 6d 6d 75 74 65 55 70 73 65 6c 6c 57 69 74 68 52 65 77 61 72 64 73 2f 56 31 48 44 61 72 6b 2e 70 6e 67 22 29 3a 22 6c 69 67 68 74 22 3d 3d 3d 74 68 69 73 2e 63 75 72 72 65 6e 74 54 68 65 6d 65 3f 28 30 2c 73 2e 4b 39 29 28 22 69 6e 6c 69 6e 65 43 6f 6d 6d 75 74 65 55 70 73 65 6c 6c 57 69 74 68 52 65 77 61 72 64 73 2f 56 31 48 57 4c 69 67 68 74 2e 70 6e 67 22 29 3a 28 30 2c 73 2e 4b 39 29 28 22 69 6e 6c 69 6e 65 43 6f 6d 6d 75 74 65 55 70 73 65 6c 6c 57 69 74 68 52 65 77 61 72 64 73 2f 56 31 48 57 44 61 72 6b 2e 70 6e 67 22 29 7d 67 65 74 20 63 6f 6d 6d 75 74 65 55 70 73 65 6c 6c 52 65 77 61 72 64 73 49 63 6f 6e 56 31 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 Data Ascii: 000051C4ng"):(0,s.K9)("inlineCommuteUpsellWithRewards/V1HDark.png"):"light"===this.currentTheme?(0,s.K9)("inlineCommuteUpsellWithRewards/V1HWLight.png"):(0,s.K9)("inlineCommuteUpsellWithRewards/V1HWDark.png")}get commuteUpsellRewardsIconV1(){return this

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.16	50052	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:34 UTC	998	OUT	GET /service/News/Users/me/Rewards?apikey=1hYoJsIRvPEnSkk0hlnJF2092mHqiz7xFenIFKa9uc&activityId=07358B43-4719-4149-9E61-F4325F4E0424&ocid=rewards-peregrine&cm=en-us&it=app&user=m-2136D0069C246D353F30C40F9D676C20&scn=APP_ANON&version=2 HTTP/1.1 Host: assets.msn.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: _C_Auth=; USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; MUIDB=2136D0069C246D353F30C40F9D676C20; _SS=SID=00
2024-01-17 17:07:34 UTC	3014	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Headers: TicketType,RequestContinuationKey,AuthToken,Content-Type,x-client-activityid,ms-cv,OneSvc-Uni-Feat-Tun,signedInCookieName,muid,appid,User-Location,user-location,userauthtoken,usertickettype,sitename,s2sauthtoken,thumbprint,Authorization,Ent-Authorization,UserIdToken,DDD-TMPL,DDD-ActivityId,DDD-FeatureSet,DDD-Session-ID,Date,date,ads-referer,ads-referer,taboola-sessionId,taboola-sessionid,Akamai-Request-ID,Akamai-Server-IP,X-MSEdge-Ref,DDD-DebugId,s-xbox-token,OneWebServiceLatency,X-FD-Features,DDD-UserType,traceparent,Widgets,Muted Access-Control-Expose-Headers: TicketType,RequestContinuationKey,AuthToken,Content-Type,x-client-activityid,ms-cv,OneSvc-Uni-Feat-Tun,signedInCookieName,muid,appid,User-Location,user-location,userauthtoken,usertickettype,sitename,s2sauthtoken,thumbprint,Authorization,Ent-Authorization,UserIdToken,DDD-TMPL,DDD-ActivityId,DDD-FeatureSet,DDD-Session-ID,Date,date,ads-referer,ads-referer,taboola-sessionId,taboola-sessionid,Akamai-Request-ID,Akamai-Server-IP,X-MSEdge-Ref,DDD-DebugId,s-xbox-token,OneWebServiceLatency,X-FD-Features,DDD-UserType,traceparent,Widgets,Muted DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-ActivityId: 65a80956-a50f-404a-ad5d-a9440aba3b71 DDD-StrategyExecutionLatency: 00:00:00.0057261 DDD-DebugId: 65a80956-a50f-404a-ad5d-a9440aba3b71\|2024-01-17T17:07:34.4523119Z\|fabric_msn\|ESU\|News_38 OneWebServiceLatency: 6 X-MSEdge-ResponseInfo: 6 Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA X-Ceto-ref: 65a8095609ad47dab48b428d94a9a0a0\|2024-01-17T17:07:34.446Z X-MSEdge-Ref: Ref A: 3198440078F2451C93D300CD1FB75D78 Ref B: EWR30EDGE0311 Ref C: 2024-01-17T17:07:34Z Expires: Wed, 17 Jan 2024 17:07:34 GMT Date: Wed, 17 Jan 2024 17:07:34 GMT Content-Length: 580 Connection: close Set-Cookie: _C_ETH=1; domain=.msn.com; path=/; secure; httponly Set-Cookie: _C_Auth= Akamai-Request-BC: [a=23.218.242.10,b=89892978,c=g,n=US_NJ_EDISON,o=20940],[a=204.79.197.203,c=o] Server-Timing: clientrtt; dur=88, clienttt; dur=33, origin; dur=32 , cdntime; dur=1 Akamai-Cache-Status: NotCacheable from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55ba872 Access-Control-Allow-Methods: PUT,PATCH,POST,GET,OPTIONS,DELETE Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com X-AS-SuppressSetCookie: 1 Cache-Control: private, max-age=0 report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511254.55ba872 Vary: Origin
2024-01-17 17:07:34 UTC	580	IN	Data Raw: 7b 22 70 72 6f 66 69 6c 65 22 3a 6e 75 6c 6c 2c 22 6f 66 66 65 72 73 22 3a 6e 75 6c 6c 2c 22 6c 61 73 74 75 70 64 61 74 65 74 69 6d 65 22 3a 22 32 30 32 34 2d 30 31 2d 31 37 54 31 37 3a 30 37 3a 33 34 2e 34 35 32 30 36 39 32 5a 22 2c 22 74 6f 6b 65 6e 73 22 3a 6e 75 6c 6c 2c 22 65 6c 69 67 69 62 6c 65 46 72 65 65 54 69 70 70 69 6e 67 22 3a 74 72 75 65 2c 22 65 6c 69 67 69 62 6c 65 46 72 65 65 53 75 62 73 63 72 69 70 74 69 6f 6e 22 3a 22 63 69 64 2d 62 37 31 37 31 38 37 38 33 33 66 36 39 37 39 65 2c 63 69 64 2d 38 35 61 33 31 63 66 63 64 38 38 64 62 62 37 35 2c 63 69 64 2d 35 35 61 35 66 30 35 32 36 34 36 64 62 62 37 65 2c 63 69 64 2d 38 34 30 65 37 66 66 32 37 63 35 39 37 63 65 38 2c 63 69 64 2d 64 66 34 34 34 32 36 35 63 32 38 65 31 39 62 34 2c 63 69 64 Data Ascii: {"profile":null,"offers":null,"lastupdatetime":"2024-01-17T17:07:34.4520692Z","tokens":null,"eligibleFreeTipping":true,"eligibleFreeSubscription":"cid-b717187833f6979e,cid-85a31cfcd88dbb75,cid-55a5f052646dbb7e,cid-840e7ff27c597ce8,cid-df444265c28e19b4,cid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.16	50051	13.107.246.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:34 UTC	581	OUT	GET /shared/edgeweb/2089cbe.js HTTP/1.1 Host: edgestatic.azureedge.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:34 UTC	809	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:34 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 1411465 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable ETag: W/"158989-18d0053a963" Last-Modified: Sat, 13 Jan 2024 00:58:19 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Origin-Agent-Cluster: ?1 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 x-azure-ref: 20240117T170734Z-qacxeaaq7152bbqxb8bw1aeutc00000000z000000000009t X-Cache: TCP_REMOTE_HIT x-fd-int-roxy-purgeid: 0 Accept-Ranges: bytes
2024-01-17 17:07:34 UTC	15575	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 5d 2c 5b 2c 2c 2c 2c 2c 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6f 2e 64 28 6e 2c 22 6b 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 79 7d 29 29 2c 6f 2e 64 28 6e 2c 22 6d 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6b 7d 29 29 2c 6f 2e 64 28 6e 2c 22 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 45 7d 29 29 2c 6f 2e 64 28 6e 2c 22 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6a 7d 29 29 2c 6f 2e 64 28 6e 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[2],[,,,,,,function(e,n,o){"use strict";o.d(n,"k",(function(){return y})),o.d(n,"m",(function(){return k})),o.d(n,"l",(function(){return E})),o.d(n,"e",(function(){return j})),o.d(n,"b",(function(){retur
2024-01-17 17:07:34 UTC	16384	IN	Data Raw: 75 6d 65 6e 74 73 5b 6e 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 3a 7b 7d 3b 6e 25 32 3f 45 28 4f 62 6a 65 63 74 28 6f 29 2c 21 30 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 4f 62 6a 65 63 74 28 72 2e 61 29 28 65 2c 6e 2c 6f 5b 6e 5d 29 7d 29 29 3a 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 65 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 6f 29 29 3a 45 28 4f 62 6a 65 63 74 28 6f 29 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6e 2c 4f 62 6a 65 63 74 2e Data Ascii: uments[n]?arguments[n]:{};n%2?E(Object(o),!0).forEach((function(n){Object(r.a)(e,n,o[n])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(o)):E(Object(o)).forEach((function(n){Object.defineProperty(e,n,Object.
2024-01-17 17:07:34 UTC	16384	IN	Data Raw: 3a 72 65 74 75 72 6e 20 6e 2e 73 74 6f 70 28 29 7d 7d 29 2c 6e 29 7d 29 29 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 28 29 29 2c 6e 2e 70 72 65 76 3d 35 2c 6e 2e 6e 65 78 74 3d 38 2c 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 72 29 3b 63 61 73 65 20 38 3a 6e 2e 6e 65 78 74 3d 31 35 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 30 3a 6e 2e 70 72 65 76 3d 31 30 2c 6e 2e 74 30 3d 6e 2e 63 61 74 63 68 28 35 29 2c 65 2e 24 6c 6f 61 64 69 6e 67 2e 66 61 69 6c 28 6e 2e 74 30 29 2c 4f 62 6a 65 63 74 28 6b 2e 6b 29 28 6e 2e 74 30 29 2c 65 2e 65 72 72 6f 72 28 6e 2e 74 30 29 3b 63 61 73 65 20 31 35 3a 65 2e 24 6c 6f 61 64 69 6e 67 2e 66 69 6e 69 73 68 28 29 3b 63 Data Ascii: :return n.stop()}}),n)})));return function(e){return n.apply(this,arguments)}}()),n.prev=5,n.next=8,Promise.all(r);case 8:n.next=15;break;case 10:n.prev=10,n.t0=n.catch(5),e.$loading.fail(n.t0),Object(k.k)(n.t0),e.error(n.t0);case 15:e.$loading.finish();c
2024-01-17 17:07:34 UTC	16384	IN	Data Raw: 75 22 2c 6c 61 6e 67 3a 22 6c 62 22 2c 66 69 6c 65 3a 22 6c 62 2d 6c 75 2e 6a 73 6f 6e 22 2c 74 72 61 6e 73 6c 61 74 69 6f 6e 4c 6f 63 61 6c 65 3a 22 6c 62 2d 6c 75 22 2c 74 72 61 6e 73 6c 61 74 69 6f 6e 3a 22 6c 62 22 7d 2c 7b 63 6f 64 65 3a 22 6c 6f 2d 6c 61 22 2c 69 73 6f 3a 22 6c 6f 2d 6c 61 22 2c 6c 61 6e 67 3a 22 6c 6f 22 2c 66 69 6c 65 3a 22 6c 6f 2d 6c 61 2e 6a 73 6f 6e 22 2c 74 72 61 6e 73 6c 61 74 69 6f 6e 4c 6f 63 61 6c 65 3a 22 6c 6f 2d 6c 61 22 2c 74 72 61 6e 73 6c 61 74 69 6f 6e 3a 22 6c 6f 22 7d 2c 7b 63 6f 64 65 3a 22 6c 74 2d 6c 74 22 2c 69 73 6f 3a 22 6c 74 2d 6c 74 22 2c 6c 61 6e 67 3a 22 6c 74 22 2c 66 69 6c 65 3a 22 6c 74 2d 6c 74 2e 6a 73 6f 6e 22 2c 74 72 61 6e 73 6c 61 74 69 6f 6e 4c 6f 63 61 6c 65 3a 22 6c 74 2d 6c 74 22 2c 74 72 Data Ascii: u",lang:"lb",file:"lb-lu.json",translationLocale:"lb-lu",translation:"lb"},{code:"lo-la",iso:"lo-la",lang:"lo",file:"lo-la.json",translationLocale:"lo-la",translation:"lo"},{code:"lt-lt",iso:"lt-lt",lang:"lt",file:"lt-lt.json",translationLocale:"lt-lt",tr
2024-01-17 17:07:34 UTC	16384	IN	Data Raw: 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 53 65 28 65 2c 6e 2c 6f 2c 74 29 7b 76 61 72 20 72 3d 74 2e 64 69 66 66 65 72 65 6e 74 44 6f 6d 61 69 6e 73 2c 6c 3d 74 2e 6e 6f 72 6d 61 6c 69 7a 65 64 4c 6f 63 61 6c 65 73 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 20 65 28 6e 29 3b 69 66 28 72 26 26 6f 29 7b 76 61 72 20 64 3d 5f 65 28 6f 2c 6e 2e 72 65 71 2c 7b 6e 6f 72 6d 61 6c 69 7a 65 64 4c 6f 63 61 6c 65 73 3a 6c 7d 29 3b 69 66 28 64 29 72 65 74 75 72 6e 20 64 7d 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 5f 65 28 65 2c 6e 2c 6f 29 7b 76 61 72 20 74 2c 72 3d 6f 2e 6e 6f 72 6d 61 6c 69 7a 65 64 4c 6f 63 61 6c 65 73 2e 66 69 6e 64 28 28 66 75 Data Ascii: ).apply(this,arguments)}function Se(e,n,o,t){var r=t.differentDomains,l=t.normalizedLocales;if("function"==typeof e)return e(n);if(r&&o){var d=_e(o,n.req,{normalizedLocales:l});if(d)return d}return e}function _e(e,n,o){var t,r=o.normalizedLocales.find((fu
2024-01-17 17:07:34 UTC	16384	IN	Data Raw: 6c 2e 61 2e 6f 62 73 65 72 76 61 62 6c 65 28 4f 62 6a 65 63 74 28 4a 65 2e 61 29 28 73 65 2e 6e 6f 72 6d 61 6c 69 7a 65 64 4c 6f 63 61 6c 65 73 2e 66 69 6e 64 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 63 6f 64 65 3d 3d 3d 65 2e 6c 6f 63 61 6c 65 7d 29 29 7c 7c 7b 63 6f 64 65 3a 65 2e 6c 6f 63 61 6c 65 7d 29 29 2c 65 2e 64 65 66 61 75 6c 74 4c 6f 63 61 6c 65 3d 73 65 2e 64 65 66 61 75 6c 74 4c 6f 63 61 6c 65 2c 65 2e 64 69 66 66 65 72 65 6e 74 44 6f 6d 61 69 6e 73 3d 73 65 2e 64 69 66 66 65 72 65 6e 74 44 6f 6d 61 69 6e 73 2c 65 2e 6f 6e 42 65 66 6f 72 65 4c 61 6e 67 75 61 67 65 53 77 69 74 63 68 3d 73 65 2e 6f 6e 42 65 66 6f 72 65 4c 61 6e 67 75 61 67 65 53 77 69 74 63 68 2c 65 2e 6f 6e 4c 61 6e 67 75 61 67 65 53 77 69 74 63 68 Data Ascii: l.a.observable(Object(Je.a)(se.normalizedLocales.find((function(n){return n.code===e.locale}))\|\|{code:e.locale})),e.defaultLocale=se.defaultLocale,e.differentDomains=se.differentDomains,e.onBeforeLanguageSwitch=se.onBeforeLanguageSwitch,e.onLanguageSwitch
2024-01-17 17:07:34 UTC	16384	IN	Data Raw: 65 72 79 53 65 6c 65 63 74 6f 72 28 22 61 2e 6c 69 6e 75 78 64 65 62 22 29 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 6f 70 65 6e 45 75 6c 61 28 7b 70 6c 61 74 66 6f 72 6d 3a 43 61 2e 61 2e 67 65 74 42 79 49 64 28 22 6c 69 6e 75 78 2d 64 65 62 22 29 7d 29 7d 29 29 2c 74 68 69 73 2e 24 65 6c 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 61 2e 6c 69 6e 75 78 72 70 6d 22 29 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 6f 70 65 6e 45 75 6c 61 28 7b 70 6c 61 74 66 6f 72 6d 3a 43 61 2e 61 2e 67 65 74 42 79 49 64 28 22 6c 69 6e 75 78 2d 72 70 6d 22 29 7d 29 7d 29 29 7d 2c 6d 65 74 68 6f 64 73 3a 48 61 28 48 61 Data Ascii: erySelector("a.linuxdeb").addEventListener("click",(function(){e.openEula({platform:Ca.a.getById("linux-deb")})})),this.$el.querySelector("a.linuxrpm").addEventListener("click",(function(){e.openEula({platform:Ca.a.getById("linux-rpm")})}))},methods:Ha(Ha
2024-01-17 17:07:34 UTC	16384	IN	Data Raw: 74 65 64 56 65 72 73 69 6f 6e 49 64 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 65 2e 73 65 6c 65 63 74 65 64 50 6c 61 74 66 6f 72 6d 49 64 29 7d 2c 65 78 70 72 65 73 73 69 6f 6e 3a 22 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 69 73 75 61 6c 49 64 3a 20 27 62 75 74 74 6f 6e 27 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 63 74 69 6f 6e 49 64 3a 20 27 68 76 61 27 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 61 62 65 6c 3a 20 60 64 6f 77 6e 6c 6f 61 64 2d 24 7b 73 65 6c 65 63 74 65 64 56 65 72 73 69 6f 6e 49 64 7d 2d 24 7b 73 65 6c 65 63 74 65 64 50 6c 61 74 66 6f 72 6d 49 64 7d 60 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: tedVersionId,"-").concat(e.selectedPlatformId)},expression:"{\n visualId: 'button',\n actionId: 'hva',\n label: `download-${selectedVersionId}-${selectedPlatformId}`,\n
2024-01-17 17:07:34 UTC	16384	IN	Data Raw: 6e 61 6c 79 74 69 63 73 22 2c 63 6f 6d 70 6f 6e 65 6e 74 73 3a 7b 7d 2c 70 72 6f 70 73 3a 7b 7d 2c 64 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 70 61 72 74 6e 65 72 41 6e 61 6c 79 74 69 63 73 50 61 67 65 4c 6f 61 64 3a 21 31 7d 7d 2c 63 6f 6d 70 75 74 65 64 3a 4c 6e 28 4c 6e 28 7b 7d 2c 4f 62 6a 65 63 74 28 64 2e 64 29 28 7b 6c 6f 63 61 6c 65 3a 22 6c 6f 63 61 6c 65 22 2c 68 69 6e 74 73 3a 22 68 69 6e 74 73 22 2c 63 75 72 72 65 6e 74 50 6c 61 74 66 6f 72 6d 3a 22 63 75 72 72 65 6e 74 50 6c 61 74 66 6f 72 6d 22 2c 77 63 70 43 6f 6e 73 65 6e 74 3a 22 77 63 70 43 6f 6e 73 65 6e 74 22 7d 29 29 2c 7b 7d 2c 7b 61 6c 6c 6f 77 58 61 6e 64 72 41 6e 61 6c 79 74 69 63 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 6e 3b 72 65 74 75 Data Ascii: nalytics",components:{},props:{},data:function(){return{partnerAnalyticsPageLoad:!1}},computed:Ln(Ln({},Object(d.d)({locale:"locale",hints:"hints",currentPlatform:"currentPlatform",wcpConsent:"wcpConsent"})),{},{allowXandrAnalytics:function(){var e,n;retu
2024-01-17 17:07:34 UTC	16384	IN	Data Raw: 69 6f 6e 49 64 3a 20 27 68 76 61 27 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 61 62 65 6c 3a 20 27 42 6f 6f 74 73 74 72 61 70 70 65 72 20 2d 20 44 6f 77 6e 6c 6f 61 64 27 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 22 7d 5d 2c 61 74 74 72 73 3a 7b 69 63 6f 6e 3a 22 64 6f 77 6e 6c 6f 61 64 22 2c 69 63 6f 6e 53 69 7a 65 3a 2e 38 2c 6c 61 62 65 6c 3a 65 2e 24 74 28 22 65 64 67 65 77 65 62 2d 64 6f 77 6e 6c 6f 61 64 22 29 2c 76 61 72 69 61 6e 74 3a 22 62 75 74 74 6f 6e 20 73 68 6f 72 74 22 7d 2c 6f 6e 3a 7b 63 6c 69 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 6f 70 65 6e 45 75 6c 61 28 7b 75 72 6c 3a 22 68 74 74 70 73 3a 2f 2f 67 6f 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 66 77 6c Data Ascii: ionId: 'hva',\n label: 'Bootstrapper - Download',\n }"}],attrs:{icon:"download",iconSize:.8,label:e.$t("edgeweb-download"),variant:"button short"},on:{click:function(n){return e.openEula({url:"https://go.microsoft.com/fwl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.16	50054	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:34 UTC	973	OUT	GET /service/segments/recoitems/shopping?$filter=ebay.com,msn.com&$select=BatchStoresCashbackWorkflow&activityId=749e3d6c9c1d4ea9c893e2c6c48babd1&apiKey=ogTIEkUJTNRKfuviV6imfOBW6i874Wsn2XeWZBW83k&cm=en-us&ocid=anaheim-shopping-topsites HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; MUIDB=2136D0069C246D353F30C40F9D676C20; _SS=SID=00; _C_ETH=1
2024-01-17 17:07:34 UTC	3068	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Headers: TicketType,RequestContinuationKey,AuthToken,Content-Type,x-client-activityid,ms-cv,OneSvc-Uni-Feat-Tun,signedInCookieName,muid,appid,User-Location,user-location,userauthtoken,usertickettype,sitename,s2sauthtoken,thumbprint,Authorization,Ent-Authorization,UserIdToken,DDD-TMPL,DDD-ActivityId,DDD-FeatureSet,DDD-Session-ID,Date,date,ads-referer,ads-referer,taboola-sessionId,taboola-sessionid,Akamai-Request-ID,Akamai-Server-IP,X-MSEdge-Ref,DDD-DebugId,s-xbox-token,OneWebServiceLatency,X-FD-Features,DDD-UserType,traceparent,Widgets,Muted Access-Control-Expose-Headers: TicketType,RequestContinuationKey,AuthToken,Content-Type,x-client-activityid,ms-cv,OneSvc-Uni-Feat-Tun,signedInCookieName,muid,appid,User-Location,user-location,userauthtoken,usertickettype,sitename,s2sauthtoken,thumbprint,Authorization,Ent-Authorization,UserIdToken,DDD-TMPL,DDD-ActivityId,DDD-FeatureSet,DDD-Session-ID,Date,date,ads-referer,ads-referer,taboola-sessionId,taboola-sessionid,Akamai-Request-ID,Akamai-Server-IP,X-MSEdge-Ref,DDD-DebugId,s-xbox-token,OneWebServiceLatency,X-FD-Features,DDD-UserType,traceparent,Widgets,Muted DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-ActivityId: 65a80956-32be-42eb-aa35-5c99547b220d DDD-StrategyExecutionLatency: 00:00:00.1002806 DDD-DebugId: 65a80956-32be-42eb-aa35-5c99547b220d\|2024-01-17T17:07:34.9224412Z\|fabric_segments\|EUS1\|Segment_43 OneWebServiceLatency: 101 X-MSEdge-ResponseInfo: 101 Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA X-Ceto-ref: 65a8095603da44109289887ec9287682\|2024-01-17T17:07:34.810Z X-MSEdge-Ref: Ref A: 289F0C75B387443F82CC7F7EABF4E691 Ref B: EWR30EDGE0119 Ref C: 2024-01-17T17:07:34Z Expires: Wed, 17 Jan 2024 17:07:34 GMT Date: Wed, 17 Jan 2024 17:07:34 GMT Content-Length: 289 Connection: close Set-Cookie: _C_ETH=1; expires=Tue, 16 Jan 2024 17:07:34 GMT; domain=.msn.com; path=/; secure; httponly Set-Cookie: _C_Auth= Akamai-Request-BC: [a=23.218.242.10,b=89893677,c=g,n=US_NJ_EDISON,o=20940],[a=204.79.197.203,c=o] Server-Timing: clientrtt; dur=87, clienttt; dur=124, origin; dur=122 , cdntime; dur=2 Akamai-Cache-Status: NotCacheable from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55bab2d Access-Control-Allow-Methods: PUT,PATCH,POST,GET,OPTIONS,DELETE Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com X-AS-SuppressSetCookie: 1 Cache-Control: private, max-age=0 report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511254.55bab2d Vary: Origin
2024-01-17 17:07:34 UTC	289	IN	Data Raw: 5b 7b 22 74 79 70 65 22 3a 22 42 61 74 63 68 53 74 6f 72 65 73 43 61 73 68 62 61 63 6b 22 2c 22 64 61 74 61 22 3a 22 5b 7b 5c 22 73 74 6f 72 65 4e 61 6d 65 5c 22 3a 5c 22 65 42 61 79 5c 22 2c 5c 22 64 6f 6d 61 69 6e 5c 22 3a 5c 22 65 62 61 79 2e 63 6f 6d 5c 22 2c 5c 22 63 61 73 68 62 61 63 6b 49 6e 66 6f 5c 22 3a 7b 5c 22 76 61 6c 75 65 5c 22 3a 5c 22 31 2e 32 38 5c 22 2c 5c 22 69 73 50 65 72 63 65 6e 74 61 67 65 5c 22 3a 74 72 75 65 2c 5c 22 73 63 68 65 6d 61 4e 61 6d 65 5c 22 3a 5c 22 52 65 74 61 69 6c 2e 43 61 73 68 62 61 63 6b 56 61 6c 75 65 5c 22 2c 5c 22 6b 69 66 4d 61 6a 6f 72 56 65 72 73 69 6f 6e 5c 22 3a 31 2c 5c 22 6b 69 66 4d 69 6e 6f 72 56 65 72 73 69 6f 6e 5c 22 3a 30 2c 5c 22 6b 69 66 4d 69 6e 6f 72 56 65 72 73 69 6f 6e 32 5c 22 3a 30 7d 7d Data Ascii: [{"type":"BatchStoresCashback","data":"[{\"storeName\":\"eBay\",\"domain\":\"ebay.com\",\"cashbackInfo\":{\"value\":\"1.28\",\"isPercentage\":true,\"schemaName\":\"Retail.CashbackValue\",\"kifMajorVersion\":1,\"kifMinorVersion\":0,\"kifMinorVersion2\":0}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.16	50053	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:34 UTC	504	OUT	GET /bundles/v1/edgeChromium/latest/real-estate-card.1ebb35808932c691cf18.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:34 UTC	1151	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: rP+0rnP1A+AnrlNeBGpSVw== Last-Modified: Wed, 10 Jan 2024 03:17:37 GMT ETag: 0x8DC118AB2583961 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: c544e511-a01e-007d-1573-4347a5000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:34 GMT Content-Length: 13559 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89893638,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=21, origin; dur=0 , cdntime; dur=21 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55bab06 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511254.55bab06 Vary: Origin
2024-01-17 17:07:34 UTC	13559	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 72 65 61 6c 2d 65 73 74 61 74 65 2d 63 61 72 64 22 5d 2c 7b 38 34 39 38 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 61 2e 72 28 74 29 2c 61 2e 64 28 74 2c 7b 52 65 61 6c 45 73 74 61 74 65 43 61 72 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 7d 2c 52 65 61 6c 45 73 74 61 74 65 43 61 72 64 53 74 79 6c 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 41 7d 2c 52 65 61 6c 45 73 Data Ascii: "use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["real-estate-card"],{84989:function(e,t,a){a.r(t),a.d(t,{RealEstateCard:function(){return b},RealEstateCardStyles:function(){return A},RealEs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.16	50058	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:34 UTC	603	OUT	GET /content/v1/cms/api/amp/Document/BBI4MeJ HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:35 UTC	1416	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Last-Modified: Wed, 17 Jan 2024 07:02:17 GMT ETag: W/"29762" Server: Microsoft-HTTPAPI/2.0 X-CMS-DocumentStorageTier: Cache X-CMS-DocumentId: BBI4MeJ X-CMS-Version: 6228 X-CMS-State: Published X-CMS-Tenant: amp X-CMS-Type: list X-CMS-ExecutionTimeInMilliseconds: 9 Access-Control-Allow-Origin: https://ntp.msn.com Access-Control-Expose-Headers: X-Trace-Context,X-CMS-DocumentId,X-CMS-Type,X-CMS-Tenant,X-CMS-State,X-CMS-Version,ETag,X-CMS-SearchElapsedTimeInMilliseconds,X-CMS-SearchBackendTimeInMilliseconds,X-CMS-SearchMatchedTotal,X-CMS-SearchMaxScore,X-CMS-SearchShardsTotal,X-CMS-SearchShardsSuccessful,X-CMS-SearchShardsFailed,X-CMS-SearchReturnedCount,X-CMS-ExecutionTimeInMilliseconds,MS-CV AppEx-Activity-Id: b0ab42ff-3393-4319-a2c9-c7f09d57c384 X-Trace-Context: {"ActivityId":"b0ab42ff-3393-4319-a2c9-c7f09d57c384"} MS-CV: yzAJxjjZyEKvFdtPSpjH5A.0 X-CMS-ServiceLocation: eastus:0 Cache-Control: max-age=900 Date: Wed, 17 Jan 2024 17:07:35 GMT Content-Length: 5055 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89893984,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=0, origin; dur=0 , cdntime; dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55bac60 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511255.55bac60 Vary: Origin
2024-01-17 17:07:35 UTC	5055	IN	Data Raw: 7b 22 24 74 79 70 65 22 3a 22 6c 69 73 74 22 2c 22 74 69 74 6c 65 22 3a 22 22 2c 22 5f 69 73 50 75 62 6c 69 73 68 69 6e 67 4c 6f 63 6b 65 64 22 3a 66 61 6c 73 65 2c 22 5f 69 64 22 3a 22 42 42 49 34 4d 65 4a 22 2c 22 5f 6e 61 6d 65 22 3a 22 4d 47 58 53 74 6f 72 65 57 65 62 50 72 6f 6d 6f 20 28 6f 6c 64 20 42 61 63 6b 66 69 6c 6c 20 6c 69 73 74 20 2d 20 44 4f 20 4e 4f 54 20 44 45 4c 45 54 45 29 22 2c 22 5f 73 6f 75 72 63 65 4d 65 74 65 72 69 6e 67 22 3a 7b 22 69 73 4d 65 74 65 72 65 64 22 3a 66 61 6c 73 65 7d 2c 22 5f 6c 61 73 74 45 64 69 74 65 64 44 61 74 65 54 69 6d 65 22 3a 22 32 30 32 34 2d 30 31 2d 31 36 54 32 31 3a 30 33 3a 30 33 5a 22 2c 22 5f 6c 69 6e 6b 73 22 3a 7b 22 73 65 6c 66 22 3a 5b 7b 22 68 72 65 66 22 3a 22 63 6d 73 2f 61 70 69 2f 61 6d 70 Data Ascii: {"$type":"list","title":"","_isPublishingLocked":false,"_id":"BBI4MeJ","_name":"MGXStoreWebPromo (old Backfill list - DO NOT DELETE)","_sourceMetering":{"isMetered":false},"_lastEditedDateTime":"2024-01-16T21:03:03Z","_links":{"self":[{"href":"cms/api/amp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.16	50055	13.107.246.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:35 UTC	581	OUT	GET /shared/edgeweb/e575734.js HTTP/1.1 Host: edgestatic.azureedge.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:35 UTC	807	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:35 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 116729 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable ETag: W/"1c7f9-18cfec33fc9" Last-Modified: Fri, 12 Jan 2024 17:40:57 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Origin-Agent-Cluster: ?1 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 x-azure-ref: 20240117T170735Z-a00gyy4we14xzcheybvhy5f8tn00000000y0000000005rvu X-Cache: TCP_REMOTE_HIT x-fd-int-roxy-purgeid: 0 Accept-Ranges: bytes
2024-01-17 17:07:35 UTC	15577	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 31 5d 2c 41 72 72 61 79 28 39 33 38 29 2e 63 6f 6e 63 61 74 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 7d 7d Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[91],Array(938).concat([function(e,t,n){e.exports={}},function(e,t,n){e.exports={}},function(e,t,n){e.exports={}},function(e,t,n){e.exports={}},function(e,t,n){e.exports={}},function(e,t,n){e.exports={}}
2024-01-17 17:07:35 UTC	16384	IN	Data Raw: 65 2d 75 73 65 64 2d 61 75 74 6f 6d 61 74 69 63 2d 74 72 61 6e 73 6c 61 74 69 6f 6e 22 3a 22 4f 6c 65 6d 6d 65 20 6b c3 a4 79 74 74 c3 a4 6e 65 65 74 20 61 75 74 6f 6d 61 61 74 74 69 73 74 61 20 6b c3 a4 c3 a4 6e 6e c3 b6 73 74 c3 a4 20 6a 6f 69 68 69 6e 6b 69 6e 20 74 c3 a4 6d c3 a4 6e 20 73 69 76 75 6e 20 74 69 65 74 6f 69 68 69 6e 2e 20 4a 6f 73 20 68 61 6c 75 61 74 20 6e c3 a4 68 64 c3 a4 20 74 c3 a4 6d c3 a4 6e 20 73 69 73 c3 a4 6c 6c c3 b6 6e 20 65 6e 67 6c 61 6e 6e 69 6b 73 69 2c 20 76 6f 69 74 20 70 69 69 6c 6f 74 74 61 61 20 6b c3 a4 c3 a4 6e 6e c3 b6 6b 73 65 74 20 74 c3 a4 6c 6c c3 a4 20 6b 79 74 6b 69 6d 65 6c 6c c3 a4 2e 22 7d 2c 22 66 69 6c 2d 70 68 22 3a 7b 22 68 69 64 65 2d 74 72 61 6e 73 6c 61 74 69 6f 6e 73 22 3a 22 49 74 61 67 6f 20 61 Data Ascii: e-used-automatic-translation":"Olemme kyttneet automaattista knnst joihinkin tmn sivun tietoihin. Jos haluat nhd tmn sislln englanniksi, voit piilottaa knnkset tll kytkimell."},"fil-ph":{"hide-translations":"Itago a
2024-01-17 17:07:35 UTC	16384	IN	Data Raw: b0 20 e0 a4 85 e0 a4 a8 e0 a5 81 e0 a4 b5 e0 a4 be e0 a4 a6 e0 a4 b9 e0 a4 b0 e0 a5 82 20 e0 a4 b2 e0 a5 81 e0 a4 95 e0 a4 be e0 a4 89 e0 a4 a8 20 e0 a4 b8 e0 a4 95 e0 a5 8d e0 a4 a8 e0 a5 81 e0 a4 b9 e0 a5 81 e0 a4 a8 e0 a5 8d e0 a4 9b e0 a5 a4 22 7d 2c 22 6e 6c 2d 6e 6c 22 3a 7b 22 68 69 64 65 2d 74 72 61 6e 73 6c 61 74 69 6f 6e 73 22 3a 22 56 65 72 62 65 72 67 20 76 65 72 74 61 6c 69 6e 67 65 6e 22 2c 22 73 65 65 2d 74 68 69 73 2d 70 61 67 65 2d 69 6e 2d 65 6e 67 6c 69 73 68 22 3a 22 5a 69 65 20 64 65 7a 65 20 70 61 67 69 6e 61 20 69 6e 20 68 65 74 20 45 6e 67 65 6c 73 22 2c 22 73 68 6f 77 2d 74 72 61 6e 73 6c 61 74 69 6f 6e 22 3a 22 54 6f 6f 6e 20 76 65 72 74 61 6c 69 6e 67 22 2c 22 77 65 2d 68 61 76 65 2d 75 73 65 64 2d 61 75 74 6f 6d 61 74 69 63 2d Data Ascii: "},"nl-nl":{"hide-translations":"Verberg vertalingen","see-this-page-in-english":"Zie deze pagina in het Engels","show-translation":"Toon vertaling","we-have-used-automatic-
2024-01-17 17:07:35 UTC	16384	IN	Data Raw: 74 73 3d 6e 2e 70 2b 22 69 6d 67 2f 62 6c 75 65 74 6f 6f 74 68 2e 30 64 36 66 39 64 39 2e 73 76 67 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 69 6d 67 2f 62 6f 6c 64 2e 61 30 62 30 35 39 39 2e 73 76 67 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 69 6d 67 2f 62 6f 6f 6b 2d 6f 70 65 6e 2e 31 63 62 64 35 65 39 2e 73 76 67 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 69 6d 67 2f 62 6f 6f 6b 2e 63 38 65 34 62 33 62 2e 73 76 67 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 69 6d 67 2f 62 6f 6f 6b 6d 61 72 6b 2e 63 32 34 38 32 39 39 2e Data Ascii: ts=n.p+"img/bluetooth.0d6f9d9.svg"},function(e,t,n){e.exports=n.p+"img/bold.a0b0599.svg"},function(e,t,n){e.exports=n.p+"img/book-open.1cbd5e9.svg"},function(e,t,n){e.exports=n.p+"img/book.c8e4b3b.svg"},function(e,t,n){e.exports=n.p+"img/bookmark.c248299.
2024-01-17 17:07:35 UTC	16384	IN	Data Raw: 75 65 2d 63 6c 69 2d 73 65 72 76 69 63 65 20 73 65 72 76 65 20 64 65 76 2f 73 65 72 76 65 2e 6a 73 22 7d 2c 22 64 65 70 65 6e 64 65 6e 63 69 65 73 22 3a 7b 22 40 66 6c 6f 61 74 69 6e 67 2d 75 69 2f 64 6f 6d 22 3a 22 5e 31 2e 30 2e 31 22 2c 22 40 70 6f 70 70 65 72 6a 73 2f 63 6f 72 65 22 3a 22 5e 32 2e 31 31 2e 35 22 2c 22 40 74 68 69 6e 6b 70 69 78 65 6c 6c 61 62 2d 70 75 62 6c 69 63 2f 70 78 2d 73 74 79 6c 65 73 22 3a 22 5e 33 2e 37 2e 39 22 2c 22 40 74 68 69 6e 6b 70 69 78 65 6c 6c 61 62 2d 70 75 62 6c 69 63 2f 70 78 2d 76 75 65 2d 74 65 73 74 65 72 22 3a 22 5e 32 2e 30 2e 30 22 2c 22 40 74 68 69 6e 6b 70 69 78 65 6c 6c 61 62 2d 70 75 62 6c 69 63 2f 76 75 65 2d 72 65 73 69 7a 65 2d 64 69 72 65 63 74 69 76 65 22 3a 22 5e 31 2e 32 2e 32 22 2c 22 62 6f 64 Data Ascii: ue-cli-service serve dev/serve.js"},"dependencies":{"@floating-ui/dom":"^1.0.1","@popperjs/core":"^2.11.5","@thinkpixellab-public/px-styles":"^3.7.9","@thinkpixellab-public/px-vue-tester":"^2.0.0","@thinkpixellab-public/vue-resize-directive":"^1.2.2","bod
2024-01-17 17:07:35 UTC	16384	IN	Data Raw: 72 22 2c 7b 63 6c 61 73 73 3a 65 2e 62 65 6d 28 22 6d 6f 62 69 6c 65 2d 64 72 61 77 65 72 22 29 2c 61 74 74 72 73 3a 7b 22 74 6f 67 67 6c 65 2d 62 75 74 74 6f 6e 2d 63 6c 61 73 73 22 3a 65 2e 62 65 6d 28 22 6d 6f 62 69 6c 65 2d 74 6f 67 67 6c 65 22 29 7d 2c 73 63 6f 70 65 64 53 6c 6f 74 73 3a 65 2e 5f 75 28 5b 7b 6b 65 79 3a 22 74 6f 67 67 6c 65 22 2c 66 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 5b 6f 28 22 70 78 2d 69 63 6f 6e 22 2c 7b 61 74 74 72 73 3a 7b 73 72 63 3a 6e 28 31 31 36 31 29 7d 7d 29 5d 7d 2c 70 72 6f 78 79 3a 21 30 7d 2c 7b 6b 65 79 3a 22 64 65 66 61 75 6c 74 22 2c 66 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 5b 6f 28 22 75 6c 22 2c 7b 63 6c 61 73 73 3a 65 2e 62 65 6d 28 22 6d 6f 62 69 6c 65 2d 69 74 65 6d 73 Data Ascii: r",{class:e.bem("mobile-drawer"),attrs:{"toggle-button-class":e.bem("mobile-toggle")},scopedSlots:e._u([{key:"toggle",fn:function(){return[o("px-icon",{attrs:{src:n(1161)}})]},proxy:!0},{key:"default",fn:function(){return[o("ul",{class:e.bem("mobile-items
2024-01-17 17:07:35 UTC	16384	IN	Data Raw: 65 2e 5f 73 65 6c 66 2e 5f 63 7c 7c 74 3b 72 65 74 75 72 6e 20 6f 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 3a 65 2e 62 65 6d 28 29 7d 2c 5b 6f 28 22 63 6f 6d 6d 6f 6e 2d 73 65 61 72 63 68 2d 62 6f 78 22 2c 7b 61 74 74 72 73 3a 7b 70 6c 61 63 65 68 6f 6c 64 65 72 3a 22 53 65 61 72 63 68 22 2c 72 65 73 75 6c 74 73 3a 65 2e 72 65 73 75 6c 74 73 7d 2c 6f 6e 3a 7b 71 75 65 72 79 63 68 61 6e 67 65 64 3a 65 2e 6f 6e 51 75 65 72 79 43 68 61 6e 67 65 64 7d 2c 73 63 6f 70 65 64 53 6c 6f 74 73 3a 65 2e 5f 75 28 5b 7b 6b 65 79 3a 22 72 65 73 75 6c 74 22 2c 66 6e 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 74 2e 72 65 73 75 6c 74 3b 72 65 74 75 72 6e 5b 6e 2e 73 69 74 65 3d 3d 3d 65 2e 53 49 54 45 5f 4e 41 4d 45 53 2e 46 65 61 74 75 72 65 73 3f 5b 6f 28 22 Data Ascii: e._self._c\|\|t;return o("div",{class:e.bem()},[o("common-search-box",{attrs:{placeholder:"Search",results:e.results},on:{querychanged:e.onQueryChanged},scopedSlots:e._u([{key:"result",fn:function(t){var n=t.result;return[n.site===e.SITE_NAMES.Features?[o("
2024-01-17 17:07:35 UTC	2848	IN	Data Raw: 70 75 73 68 28 22 70 61 67 65 4c 6f 61 64 22 29 7d 2c 28 64 3d 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 29 29 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 62 61 74 2e 62 69 6e 67 2e 63 6f 6d 2f 62 61 74 2e 6a 73 22 2c 64 2e 61 73 79 6e 63 3d 31 2c 64 2e 6f 6e 6c 6f 61 64 3d 64 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 3d 74 68 69 73 2e 72 65 61 64 79 53 74 61 74 65 3b 73 26 26 22 6c 6f 61 64 65 64 22 21 3d 3d 73 26 26 22 63 6f 6d 70 6c 65 74 65 22 21 3d 3d 73 7c 7c 28 6c 28 29 2c 64 2e 6f 6e 6c 6f 61 64 3d 64 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 6e 75 6c 6c 29 7d 2c 28 69 3d 72 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 63 29 5b 30 5d 29 Data Ascii: push("pageLoad")},(d=r.createElement(c)).src="https://bat.bing.com/bat.js",d.async=1,d.onload=d.onreadystatechange=function(){var s=this.readyState;s&&"loaded"!==s&&"complete"!==s\|\|(l(),d.onload=d.onreadystatechange=null)},(i=r.getElementsByTagName(c)[0])

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.16	50059	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:35 UTC	628	OUT	GET /bundles/v1/edgeChromium/latest/toast-wc.88317531b642eeef7348.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:35 UTC	1149	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: T9se/Z0Sjd6clwQ7I156bg== Last-Modified: Mon, 08 Jan 2024 16:46:14 GMT ETag: 0x8DC1069542A470E Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 03a60a75-301e-00f8-0b52-4297fa000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:35 GMT Content-Length: 23200 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89893987,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=89, clienttt; dur=8, origin; dur=0 , cdntime; dur=8 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55bac63 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511255.55bac63 Vary: Origin
2024-01-17 17:07:35 UTC	15235	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 74 6f 61 73 74 2d 77 63 22 5d 2c 7b 31 31 35 32 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6f 29 7b 6f 2e 64 28 65 2c 7b 49 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 7d 2c 4d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 7d 29 3b 76 61 72 20 61 3d 6f 28 38 31 35 38 36 29 3b 63 6f 6e 73 74 20 6e 3d 7b 74 65 6c 65 6d 65 74 72 79 43 6f 6e 74 72 61 63 74 73 3a 7b 74 6f 61 73 74 43 6c Data Ascii: "use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["toast-wc"],{11521:function(t,e,o){o.d(e,{I:function(){return n},M:function(){return s}});var a=o(81586);const n={telemetryContracts:{toastCl
2024-01-17 17:07:35 UTC	7965	IN	Data Raw: 37 2e 35 31 33 36 37 20 31 30 2e 38 34 37 37 43 37 2e 36 36 36 30 32 20 31 30 2e 37 38 31 32 20 37 2e 38 32 38 31 32 20 31 30 2e 37 34 38 20 38 20 31 30 2e 37 34 38 43 38 2e 31 37 31 38 38 20 31 30 2e 37 34 38 20 38 2e 33 33 32 30 33 20 31 30 2e 37 38 31 32 20 38 2e 34 38 30 34 37 20 31 30 2e 38 34 37 37 43 38 2e 36 33 32 38 31 20 31 30 2e 39 31 34 31 20 38 2e 37 36 35 36 32 20 31 31 2e 30 30 33 39 20 38 2e 38 37 38 39 31 20 31 31 2e 31 31 37 32 43 38 2e 39 39 32 31 39 20 31 31 2e 32 33 30 35 20 39 2e 30 38 32 30 33 20 31 31 2e 33 36 33 33 20 39 2e 31 34 38 34 34 20 31 31 2e 35 31 35 36 43 39 2e 32 31 34 38 34 20 31 31 2e 36 36 38 20 39 2e 32 34 38 30 35 20 31 31 2e 38 33 30 31 20 39 2e 32 34 38 30 35 20 31 32 2e 30 30 32 43 39 2e 32 34 38 30 35 20 31 32 Data Ascii: 7.51367 10.8477C7.66602 10.7812 7.82812 10.748 8 10.748C8.17188 10.748 8.33203 10.7812 8.48047 10.8477C8.63281 10.9141 8.76562 11.0039 8.87891 11.1172C8.99219 11.2305 9.08203 11.3633 9.14844 11.5156C9.21484 11.668 9.24805 11.8301 9.24805 12.002C9.24805 12

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.16	50057	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:35 UTC	637	OUT	GET /bundles/v1/edgeChromium/latest/dompurify-library.439652e2348091e52459.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:35 UTC	1149	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: RhPx7vsAMqkb5qKOlMUWSA== Last-Modified: Mon, 08 Jan 2024 16:46:14 GMT ETag: 0x8DC106954311D31 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 43eb3323-e01e-00ed-6a2f-43a0d2000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:35 GMT Content-Length: 21757 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89894006,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=5, origin; dur=0 , cdntime; dur=5 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55bac76 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511255.55bac76 Vary: Origin
2024-01-17 17:07:35 UTC	15235	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 64 6f 6d 70 75 72 69 66 79 2d 6c 69 62 72 61 72 79 2e 34 33 39 36 35 32 65 32 33 34 38 30 39 31 65 35 32 34 35 39 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 64 6f 6d 70 75 72 69 66 79 2d 6c 69 62 72 61 72 79 22 5d 2c 7b 38 33 32 34 35 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e Data Ascii: /! For license information please see dompurify-library.439652e2348091e52459.js.LICENSE.txt /(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["dompurify-library"],{83245:function(e){e.exports=function
2024-01-17 17:07:35 UTC	6522	IN	Data Raw: 65 7c 7c 21 69 74 5b 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 5d 29 29 7d 2c 54 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 45 28 6e 2e 72 65 6d 6f 76 65 64 2c 7b 65 6c 65 6d 65 6e 74 3a 65 7d 29 3b 74 72 79 7b 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 65 29 7d 63 61 74 63 68 28 74 29 7b 74 72 79 7b 65 2e 6f 75 74 65 72 48 54 4d 4c 3d 6c 65 7d 63 61 74 63 68 28 74 29 7b 65 2e 72 65 6d 6f 76 65 28 29 7d 7d 7d 2c 4e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 72 79 7b 45 28 6e 2e 72 65 6d 6f 76 65 64 2c 7b 61 74 74 72 69 62 75 74 65 3a 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 65 29 2c 66 72 6f 6d 3a 74 7d 29 7d 63 61 74 63 68 28 65 29 7b 45 28 6e 2e 72 65 6d 6f 76 65 64 2c 7b 61 74 74 72 69 62 75 74 65 Data Ascii: e\|\|!it[e.namespaceURI]))},Tt=function(e){E(n.removed,{element:e});try{e.parentNode.removeChild(e)}catch(t){try{e.outerHTML=le}catch(t){e.remove()}}},Nt=function(e,t){try{E(n.removed,{attribute:t.getAttributeNode(e),from:t})}catch(e){E(n.removed,{attribute

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.16	50061	13.107.42.14	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:35 UTC	664	OUT	GET /setuid?partner=microsoftSsp&dbredirect=true&dnt=0&gdpr=0&gdpr_consent= HTTP/1.1 Host: px.ads.linkedin.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:35 UTC	754	IN	HTTP/1.1 200 OK Content-Length: 95 Content-Type: image/png Set-Cookie: bcookie="v=2&0bb89504-2045-42d2-863c-0ba6fe300843"; domain=.linkedin.com; Path=/; Secure; Expires=Thu, 16-Jan-2025 17:07:35 GMT; SameSite=None Set-Cookie: lidc="b=TGST01:s=T:r=T:a=T:p=T:g=3226:u=1:x=1:i=1705511255:t=1705597655:v=2:sig=AQFmEVsAsdZuY17AJwufpwREz_c8rSVH"; Expires=Thu, 18 Jan 2024 17:07:35 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure LinkedIn-Action: 1 X-Li-Fabric: prod-ltx1 X-Li-Pop: afd-prod-ltx1-x X-Li-Proto: http/1.1 X-LI-UUID: AAYPJ0iNKUYZ7oGHyLyv1g== X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 5A7BB98FD0C1490E931A4B1C97DEBFD7 Ref B: TEB31EDGE0117 Ref C: 2024-01-17T17:07:35Z Date: Wed, 17 Jan 2024 17:07:35 GMT Connection: close
2024-01-17 17:07:35 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.16	50056	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:35 UTC	633	OUT	GET /bundles/v1/edgeChromium/latest/social-bar-wc.eab7adce9d3aec38f5e1.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:35 UTC	1186	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: sa8Gj+mUuz8+PwdQMLE56A== Last-Modified: Sat, 13 Jan 2024 01:22:15 GMT ETag: 0x8DC13D613EE28FF Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: bbed925f-001e-0077-4cbf-4549b0000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:35 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Akamai-Request-BC: [a=23.218.242.10,b=89893957,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=94, clienttt; dur=9, origin; dur=0 , cdntime; dur=9 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55bac45 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511255.55bac45 Vary: Origin
2024-01-17 17:07:35 UTC	15198	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 6f 63 69 61 6c 2d 62 61 72 2d 77 63 22 5d 2c 7b 31 30 38 38 39 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6f 2e 72 28 65 29 2c 6f 2e 64 28 65 2c 7b 53 6f 63 69 61 6c 42 61 72 57 43 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 55 7d 2c 53 6f 63 69 61 6c 42 61 72 57 43 53 74 79 6c 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 52 74 7d 2c 53 6f 63 69 Data Ascii: 00006000(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["social-bar-wc"],{10889:function(t,e,o){"use strict";o.r(e),o.d(e,{SocialBarWC:function(){return U},SocialBarWCStyles:function(){return Rt},Soci
2024-01-17 17:07:35 UTC	9390	IN	Data Raw: 3e 7b 74 2e 6f 6e 52 65 61 63 74 69 6f 6e 28 6c 2e 46 45 2e 75 70 76 6f 74 65 2c 65 2e 65 76 65 6e 74 29 7d 7d 20 40 6d 6f 75 73 65 65 6e 74 65 72 3d 24 7b 74 3d 3e 7b 74 2e 68 61 6e 64 6c 65 48 6f 76 65 72 6f 6e 55 70 76 6f 74 65 42 75 74 74 6f 6e 28 29 7d 7d 20 40 6d 6f 75 73 65 6c 65 61 76 65 3d 24 7b 74 3d 3e 7b 74 2e 68 6f 76 65 72 4f 6e 42 69 6e 61 72 79 55 70 76 6f 74 65 42 75 74 74 6f 6e 3d 21 31 7d 7d 20 40 66 6f 63 75 73 69 6e 3d 24 7b 74 3d 3e 7b 74 2e 68 61 6e 64 6c 65 48 6f 76 65 72 6f 6e 55 70 76 6f 74 65 42 75 74 74 6f 6e 28 29 7d 7d 20 40 66 6f 63 75 73 6f 75 74 3d 24 7b 74 3d 3e 7b 74 2e 68 6f 76 65 72 4f 6e 42 69 6e 61 72 79 55 70 76 6f 74 65 42 75 74 74 6f 6e 3d 21 31 7d 7d 20 64 61 74 61 2d 63 6f 6e 74 65 6e 74 3d 22 24 7b 74 3d 3e 74 Data Ascii: >{t.onReaction(l.FE.upvote,e.event)}} @mouseenter=${t=>{t.handleHoveronUpvoteButton()}} @mouseleave=${t=>{t.hoverOnBinaryUpvoteButton=!1}} @focusin=${t=>{t.handleHoveronUpvoteButton()}} @focusout=${t=>{t.hoverOnBinaryUpvoteButton=!1}} data-content="${t=>t
2024-01-17 17:07:35 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 53 75 70 65 72 41 70 70 7c 7c 74 2e 69 73 43 68 61 6e 6e 65 6c 41 70 70 3f 22 73 75 70 65 72 2d 61 70 70 22 3a 22 22 7d 20 24 7b 74 3d 3e 74 2e 69 73 4d 73 6e 48 70 4d 6f 62 69 6c 65 3f 22 6d 73 6e 68 70 2d 6d 6f 62 69 6c 65 22 3a 22 22 7d 20 24 7b 74 3d 3e 74 2e 69 73 49 6e 66 6f 50 61 6e 65 3f 22 69 73 2d 69 6e 66 6f 70 61 6e 65 22 3a 22 22 7d 20 24 7b 74 3d 3e 74 2e 74 65 6c 6c 55 73 4d 6f 72 65 53 74 61 74 65 3f 22 74 65 6c 6c 2d 75 73 2d 6d 6f 72 65 2d 62 75 74 74 6f 6e 2d 76 69 73 69 62 6c 65 22 3a 22 22 7d 20 24 7b 74 3d 3e 74 2e 73 65 70 61 72 61 74 65 42 75 74 74 6f 6e 73 26 26 21 74 2e 65 6e 61 62 6c 65 41 63 74 69 6f 6e 54 72 61 79 4d 6f 62 69 6c 65 3f 22 73 65 70 61 72 61 74 65 2d 62 75 74 74 6f 6e 73 22 3a 22 22 Data Ascii: 00006000SuperApp\|\|t.isChannelApp?"super-app":""} ${t=>t.isMsnHpMobile?"msnhp-mobile":""} ${t=>t.isInfoPane?"is-infopane":""} ${t=>t.tellUsMoreState?"tell-us-more-button-visible":""} ${t=>t.separateButtons&&!t.enableActionTrayMobile?"separate-buttons":""
2024-01-17 17:07:35 UTC	8204	IN	Data Raw: 49 6e 50 61 67 65 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 69 2e 67 6e 29 28 5b 53 2e 4c 4f 5d 2c 75 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 61 6c 77 61 79 73 52 65 6e 64 65 72 52 65 61 63 74 69 6f 6e 73 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 69 2e 67 6e 29 28 5b 53 2e 4c 4f 5d 2c 75 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 61 6c 77 61 79 73 52 65 6e 64 65 72 43 6f 6d 6d 65 6e 74 73 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 69 2e 67 6e 29 28 5b 28 30 2c 54 2e 4c 6a 29 28 7b 6d 6f 64 65 3a 22 62 6f 6f 6c 65 61 6e 22 7d 29 5d 2c 75 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 73 68 6f 77 41 63 63 65 73 73 69 62 69 6c 69 74 79 42 75 74 74 6f 6e 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 69 2e 67 6e 29 28 5b 28 30 2c 54 2e 4c 6a 29 28 7b 6d 6f 64 65 3a 22 62 6f 6f 6c 65 61 6e Data Ascii: InPage",void 0),(0,i.gn)([S.LO],ut.prototype,"alwaysRenderReactions",void 0),(0,i.gn)([S.LO],ut.prototype,"alwaysRenderComments",void 0),(0,i.gn)([(0,T.Lj)({mode:"boolean"})],ut.prototype,"showAccessibilityButton",void 0),(0,i.gn)([(0,T.Lj)({mode:"boolean
2024-01-17 17:07:35 UTC	16251	IN	Data Raw: 30 30 30 30 33 46 36 46 0d 0a 70 78 29 7d 24 7b 4d 74 7d 20 2e 62 75 74 74 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 32 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 24 7b 60 24 7b 4d 74 7d 2e 73 75 70 65 72 2d 61 70 70 60 7d 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 76 61 72 28 2d 2d 62 69 6e 61 72 79 2d 72 65 61 63 74 69 6f 6e 2d 6c 65 66 74 2d 6d 61 72 67 69 6e 2c 30 70 78 29 7d 24 7b 4d 74 7d 2e 73 75 70 65 72 2d 61 70 70 2e 74 65 6c 6c 2d 75 73 2d 6d 6f 72 65 2d 62 75 74 74 6f 6e 2d 76 69 73 69 62 6c 65 3a 6e 6f 74 28 2e 69 73 2d 69 6e 66 6f 70 61 6e Data Ascii: 00003F6Fpx)}${Mt} .button-container{margin-left:-2px;margin-right:0;padding:0;height:100%;display:flex;align-items:center}${`${Mt}.super-app`}{margin-left:var(--binary-reaction-left-margin,0px)}${Mt}.super-app.tell-us-more-button-visible:not(.is-infopan
2024-01-17 17:07:35 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 50 72 65 76 69 6f 75 73 41 72 74 69 63 6c 65 22 7d 28 75 7c 7c 28 75 3d 7b 7d 29 29 3b 76 61 72 20 68 3b 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 67 65 6e 65 72 61 6c 3d 22 67 65 6e 65 72 61 6c 22 2c 74 2e 72 69 76 65 72 3d 22 72 69 76 65 72 22 2c 74 2e 69 6e 66 6f 70 61 6e 65 3d 22 69 6e 66 6f 70 61 6e 65 22 7d 28 68 7c 7c 28 68 3d 7b 7d 29 29 3b 6e 65 77 20 4d 61 70 28 5b 5b 6e 2e 41 72 74 69 63 6c 65 2c 22 61 72 22 5d 2c 5b 6e 2e 47 61 6c 6c 65 72 79 2c 22 73 73 22 5d 2c 5b 6e 2e 56 69 64 65 6f 2c 22 76 69 22 5d 2c 5b 61 2e 50 4c 2e 41 72 74 69 63 6c 65 2c 22 61 72 22 5d 2c 5b 61 2e 50 4c 2e 53 6c 69 64 65 73 68 6f 77 2c 22 73 73 22 5d 2c 5b 61 2e 50 4c 2e 56 69 64 65 6f 2c 22 76 69 22 5d 2c 5b 61 2e 50 4c 2e 57 65 62 Data Ascii: 00004000PreviousArticle"}(u\|\|(u={}));var h;!function(t){t.general="general",t.river="river",t.infopane="infopane"}(h\|\|(h={}));new Map([[n.Article,"ar"],[n.Gallery,"ss"],[n.Video,"vi"],[a.PL.Article,"ar"],[a.PL.Slideshow,"ss"],[a.PL.Video,"vi"],[a.PL.Web
2024-01-17 17:07:35 UTC	12	IN	Data Raw: 30 31 2e 31 2d 2e 30 39 63 2e 0d 0a Data Ascii: 01.1-.09c.
2024-01-17 17:07:35 UTC	2927	IN	Data Raw: 30 30 30 30 30 42 36 33 0d 0a 31 2d 2e 30 37 2e 32 33 2d 2e 32 2e 34 2d 2e 34 2e 33 35 2d 2e 33 39 2e 38 32 2d 31 2e 30 33 20 31 2e 33 2d 32 2e 30 34 2e 32 2d 2e 34 34 2e 33 37 2d 2e 37 38 2e 35 33 2d 31 2e 31 2e 32 35 2d 2e 35 2e 34 36 2d 2e 39 32 2e 37 2d 31 2e 35 32 7a 6d 2d 32 2e 35 31 20 36 6c 2d 2e 30 32 2e 30 31 2d 31 2e 38 38 20 31 2e 31 31 61 31 20 31 20 30 20 30 30 2d 2e 34 33 20 31 2e 32 32 6c 2e 35 32 20 31 2e 33 38 61 31 20 31 20 30 20 30 30 2e 36 34 2e 36 6c 35 2e 33 35 20 31 2e 36 38 63 2e 38 2e 32 36 20 31 2e 36 35 2d 2e 32 20 31 2e 38 39 2d 31 6c 31 2e 33 36 2d 34 2e 36 35 41 31 20 31 20 30 20 30 30 31 32 20 36 2e 39 39 48 39 2e 39 33 61 2e 35 2e 35 20 30 20 30 31 2d 2e 34 38 2d 2e 36 37 63 2e 31 2d 2e 32 38 2e 32 36 2d 2e 37 37 2e 33 38 Data Ascii: 00000B631-.07.23-.2.4-.4.35-.39.82-1.03 1.3-2.04.2-.44.37-.78.53-1.1.25-.5.46-.92.7-1.52zm-2.51 6l-.02.01-1.88 1.11a1 1 0 00-.43 1.22l.52 1.38a1 1 0 00.64.6l5.35 1.68c.8.26 1.65-.2 1.89-1l1.36-4.65A1 1 0 0012 6.99H9.93a.5.5 0 01-.48-.67c.1-.28.26-.77.38
2024-01-17 17:07:35 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.16	50074	35.71.139.29	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:35 UTC	660	OUT	GET /mapuid?suid=2136D0069C246D353F30C40F9D676C20&sid=16&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:35 UTC	477	IN	HTTP/1.1 302 Found Date: Wed, 17 Jan 2024 17:07:35 GMT Content-Length: 0 Connection: close Location: /getuid?ld=1&gdpr=0&cmp_cs=&us_privacy= Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluid=4206014203607276403365; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Tue, 16 Apr 2024 17:07:35 GMT; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.16	50072	23.199.48.23	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:35 UTC	672	OUT	GET /cksync.php?type=nms&cs=3&ovsid=2136D0069C246D353F30C40F9D676C20&gdpr=0&gdpr_consent= HTTP/1.1 Host: hbx.media.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:35 UTC	894	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: visitor-id=3485128558918534000V10; Expires=Thu, 16 Jan 2025 17:07:35 GMT; domain=.media.net; Path=/; sameSite=none; secure=true Set-Cookie: data-nms=2136D0069C246D353F30C40F9D676C20~~3;Expires=Thu, 16 Jan 2025 17:07:35 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Wed, 17 Jan 2024 17:07:35 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 17 Jan 2024 17:07:35 GMT Connection: close
2024-01-17 17:07:35 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-17 17:07:35 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.16	50073	104.19.130.76	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:35 UTC	681	OUT	GET /m?cdsp=516415&c=2136D0069C246D353F30C40F9D676C20&mode=inverse&msn_src=ntp&&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.mgid.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:35 UTC	587	IN	HTTP/1.1 400 Bad Request Date: Wed, 17 Jan 2024 17:07:35 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 11 Connection: close CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=2JG2X4WBcll4.TdqHvj1LyxyQZFpzMDTsh.Kyhqpt2k-1705511255-1-Af+cuTwreisaCiKeJguefV0toL0ngl9R5n3kydVu/+qndLa4G3S8qxFkcr09QnDlDJFoLEJKOYZ6hJSpi+Ev8uI=; path=/; expires=Wed, 17-Jan-24 17:37:35 GMT; domain=.mgid.com; HttpOnly; Secure; SameSite=None Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Server: cloudflare CF-RAY: 847032037f5c1845-EWR alt-svc: h3=":443"; ma=86400
2024-01-17 17:07:35 UTC	11	IN	Data Raw: 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.16	50070	70.42.32.191	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:35 UTC	675	OUT	GET /uidmappixel?ext_uid=2136D0069C246D353F30C40F9D676C20&pname=MSN&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.outbrain.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:35 UTC	302	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:35 GMT Content-Length: 0 Connection: close X-TraceId: 0c9d1a721e62e3820d472e5404dcab6e Set-Cookie: obuid=7080145e-6168-4def-83ef-197487737adb; Max-Age=7776000; Expires=Tue, 16 Apr 2024 17:07:35 GMT; Path=/; Domain=.outbrain.com;SameSite=None;Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.16	50069	151.101.1.44	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:35 UTC	666	OUT	GET /sg/msn/1/cm?taboola_hm=2136D0069C246D353F30C40F9D676C20&gdpr=0&gdpr_consent= HTTP/1.1 Host: trc.taboola.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:35 UTC	588	IN	HTTP/1.1 200 OK Connection: close Server: nginx Cache-Control: no-cache, no-store Pragma: no-cache P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true X-Fastly-to-NLB-rtt: 16878 Accept-Ranges: bytes Date: Wed, 17 Jan 2024 17:07:35 GMT Via: 1.1 varnish X-SERVICE-VERSION: v1 X-Served-By: cache-lga21947-LGA X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1705511256.594423,VS0,VE19 X-vcl-time-ms: 19 transfer-encoding: chunked
2024-01-17 17:07:35 UTC	4	IN	Data Raw: 32 62 0d 0a Data Ascii: 2b
2024-01-17 17:07:35 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;
2024-01-17 17:07:35 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.16	50076	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:35 UTC	653	OUT	GET /bundles/v1/edgeChromium/latest/weather-card-wc-init-account-type.ec5511d59ad31a725a33.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:35 UTC	1148	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: fkYWc0kjv+V4tFhVw7qPuw== Last-Modified: Mon, 08 Jan 2024 16:46:14 GMT ETag: 0x8DC106953FB559D Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 34173d0a-601e-0035-3f52-42cca5000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:35 GMT Content-Length: 4847 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89894699,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=1, origin; dur=0 , cdntime; dur=1 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55baf2b Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511255.55baf2b Vary: Origin
2024-01-17 17:07:35 UTC	4847	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 77 65 61 74 68 65 72 2d 63 61 72 64 2d 77 63 2d 69 6e 69 74 2d 61 63 63 6f 75 6e 74 2d 74 79 70 65 22 5d 2c 7b 33 33 34 30 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 69 6e 69 74 41 63 63 6f 75 6e 74 54 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 24 7d 7d 29 3b 76 61 72 20 69 3d 6e 28 38 38 30 32 32 29 2c 73 3d 6e 28 37 34 39 36 39 29 2c 6f 3d Data Ascii: "use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["weather-card-wc-init-account-type"],{33408:function(e,t,n){n.r(t),n.d(t,{initAccountType:function(){return $}});var i=n(88022),s=n(74969),o=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.16	50077	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:35 UTC	822	OUT	GET /staticsb/statics/latest/interests-manager/interest-fre-header.png HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; MUIDB=2136D0069C246D353F30C40F9D676C20; _SS=SID=00
2024-01-17 17:07:35 UTC	1032	IN	HTTP/1.1 200 OK Content-Type: image/png Content-MD5: 0Bi3GLmsLycF3LnQYyVgKQ== Last-Modified: Tue, 16 Jan 2024 10:44:49 GMT ETag: 0x8DC16802A181652 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: fccea725-801e-0095-1689-4803f7000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:35 GMT Content-Length: 25790 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89894678,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=89, clienttt; dur=0, origin; dur=0 , cdntime; dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55baf16 Cache-Control: public, max-age=31536000 report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511255.55baf16 Vary: Origin
2024-01-17 17:07:35 UTC	15352	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 ec 00 00 00 ee 08 06 00 00 00 fb 95 34 df 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 9c ec bd 79 bc 25 57 59 ef fd 7b 56 55 ed bd cf 7c 7a 1e 32 f4 e9 90 90 84 48 d2 84 08 12 95 9c 4e d2 10 11 15 19 a2 e0 05 a2 a8 c8 05 15 14 bc 32 e4 76 83 a2 f8 ca 6b 44 d1 c8 d8 1a c3 bd f7 4d 04 a7 d7 7c 80 24 24 04 8c 20 31 e9 0e 84 04 92 74 77 c6 9e bb cf b8 a7 aa 5a cf fd a3 6a ad 5a 55 bb 76 8f e9 de 67 78 be 9f 9c ec bd ab 56 ad f5 54 9d d3 fb b7 9e 67 3d 6b 2d 40 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 84 79 04 33 d3 97 ee b8 63 d9 6d b7 7d 6b b8 d7 b6 Data Ascii: PNGIHDR4sRGB IDATxy%WY{VU\|z2HN2vkDM\|$$ 1twZjZUvgxVTg=k-@AAAAAAAAAAAAAAAAAAAy3cm}k
2024-01-17 17:07:35 UTC	9224	IN	Data Raw: 9b 30 43 31 dc 7d 24 01 ee 92 39 9e cb 2e 2f b3 e3 48 1d 83 12 9b d3 e7 08 68 6c bf e3 03 f4 22 08 c2 02 41 04 7b 81 f3 cf 7f f2 cd f3 75 9b bf c0 a1 7e b1 02 40 31 a0 90 ec 9c 10 90 42 9f 17 a0 ea f9 e8 eb 0b 1e aa 0e 55 5f 79 fe 3b ce 7f a6 d7 36 9f 6e c6 6f e0 31 c5 b8 4b 11 d6 d9 45 4a 5c 2f 1b 70 43 b0 46 54 3b 97 08 45 61 cf 6d 73 81 11 77 b3 d2 5a e6 0d 66 db 7a 1a 71 66 a7 0d a7 5d 98 63 26 03 3c 46 47 56 b8 59 7a 94 35 40 cb 00 5e 97 4f 22 eb d8 0e f4 24 3c dd d2 d7 6e d7 9e 8c b7 5e 56 ee 68 53 c6 9c b2 4a e1 cf bf fa fb f4 1e 08 c2 02 40 04 7b 01 73 f3 5f dc 36 3c 30 31 f8 25 68 5c e5 03 a8 7a 3e 06 fc 0a 6a 5e 00 8f 08 1e 08 81 a7 a0 48 c1 23 02 7c fc c3 39 ef 3c ff 5a 22 e2 a3 56 be c0 18 ff 63 1e f3 2a f8 1a 11 d6 97 86 a6 9d e5 47 4d 98 dc Data Ascii: 0C1}$9./Hhl"A{u~@1BU_y;6no1KEJ\/pCFT;EamswZfzqf]c&<FGVYz5@^O"$<n^VhSJ@{s_6<01%h\z>j^H#\|9<Z"Vc*GM
2024-01-17 17:07:35 UTC	1214	IN	Data Raw: 89 c4 e5 59 3b 02 ee a4 7d 6d ba 76 2d 51 e0 1e ea da 85 59 f2 f9 ec c9 5a 74 ba de bd d8 83 40 b4 3f 2e c2 e8 81 fb c5 7a 5b 1b 3f 54 6c 38 c1 9e fa ee 77 df 2d 47 5e 7c 84 99 73 40 0d ca 0e 29 85 50 51 b4 b7 0f b7 e5 9a 1f 1f bc f6 17 25 bd bc 00 00 04 54 49 44 41 54 c7 fe b1 db f3 34 d6 27 b7 fe 8e 5e e1 66 98 58 af 02 5d c4 c8 a8 6e 0e 02 f6 a9 72 67 e2 6a 46 3b 5d e0 05 02 9e bc 22 b1 95 8c cb 3b 6e 8a 43 ae b7 78 f6 da 9c c0 47 d5 d6 22 41 ef a8 77 9e ad b4 16 7b 35 a2 1c 76 2b 88 62 fc 10 b2 e1 04 fb dc 91 23 9b 83 e3 67 bf ef 1d 3f be 95 d6 0c 94 43 28 2b f4 f8 e8 a6 ad 47 3f f6 f9 af 5e 3d 3a 3a da ea f6 3c 0d 63 ad 31 72 9f 0e fb 21 fb 08 79 5f 6c 1d 67 cb 7c 26 25 4c db 06 74 26 92 3e 67 01 2b 64 1a 9b e4 5c dc 69 3d f5 f8 b3 ec 5a b5 82 7a ed Data Ascii: Y;}mv-QYZt@?.z[?Tl8w-G^\|s@)PQ%TIDAT4'^fX]nrgjF;]";nCxG"Aw{5v+b#g?C(+G?^=::<c1r!y_lg\|&%Lt&>g+d\i=Zz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.16	50067	13.107.246.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:35 UTC	581	OUT	GET /shared/edgeweb/d9135b6.js HTTP/1.1 Host: edgestatic.azureedge.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:35 UTC	779	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:35 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 51298 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable ETag: W/"c862-18d0053a915" Last-Modified: Sat, 13 Jan 2024 00:58:19 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Origin-Agent-Cluster: ?1 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 x-azure-ref: 20240117T170735Z-0z1qf7uget4cbdqfm3ud6x68p000000000dg00000000194r X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-01-17 17:07:35 UTC	15605	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 33 5d 2c 7b 31 31 37 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 6d 61 70 3d 7b 22 2e 2f 61 63 74 69 76 69 74 79 2e 73 76 67 22 3a 31 31 37 33 2c 22 2e 2f 61 69 72 70 6c 61 79 2e 73 76 67 22 3a 31 31 37 34 2c 22 2e 2f 61 6c 65 72 74 2d 63 69 72 63 6c 65 2e 73 76 67 22 3a 31 31 37 35 2c 22 2e 2f 61 6c 65 72 74 2d 6f 63 74 61 67 6f 6e 2e 73 76 67 22 3a 31 31 37 36 2c 22 2e 2f 61 6c 65 72 74 2d 74 72 69 61 6e 67 6c 65 2e 73 76 67 22 3a 31 31 37 37 2c 22 2e 2f 61 6c 69 67 6e 2d 63 65 6e 74 65 72 2e 73 76 67 22 3a 31 31 37 38 2c 22 2e 2f 61 6c 69 67 6e 2d 6a 75 73 74 69 66 79 2e Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[83],{1172:function(e,n,t){var map={"./activity.svg":1173,"./airplay.svg":1174,"./alert-circle.svg":1175,"./alert-octagon.svg":1176,"./alert-triangle.svg":1177,"./align-center.svg":1178,"./align-justify.
2024-01-17 17:07:35 UTC	16384	IN	Data Raw: 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 72 65 73 75 6c 74 73 22 3a 22 c5 bd 69 61 64 6e 65 20 7a 6f 64 70 6f 76 65 64 61 6a c3 ba 63 65 20 76 c3 bd 73 6c 65 64 6b 79 2e 22 2c 22 73 65 61 72 63 68 2d 66 6f 72 2d 30 2d 6f 6e 2d 62 69 6e 67 22 3a 22 56 79 68 c4 be 61 64 61 6a 74 65 20 76 c3 bd 72 61 7a 20 5c 5c 22 7b 30 7d 5c 5c 22 20 76 20 42 69 6e 67 75 2e 22 7d 2c 22 73 6c 2d 73 69 22 3a 7b 22 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 72 65 73 75 6c 74 73 22 3a 22 4e 6f 62 65 6e 69 68 20 75 6a 65 6d 61 6a 6f 63 69 68 20 73 65 20 72 65 7a 75 6c 74 61 74 6f 76 2e 22 2c 22 73 65 61 72 63 68 2d 66 6f 72 2d 30 2d 6f 6e 2d 62 69 6e 67 22 3a 22 50 6f 69 c5 a1 c4 8d 69 20 5c 5c 22 7b 30 7d 5c 5c 22 20 6e 61 20 42 69 6e 67 75 2e 22 7d 2c 22 73 71 2d 61 6c 22 3a 7b 22 6e 6f Data Ascii: no-matching-results":"iadne zodpovedajce vsledky.","search-for-0-on-bing":"Vyhadajte vraz \\"{0}\\" v Bingu."},"sl-si":{"no-matching-results":"Nobenih ujemajocih se rezultatov.","search-for-0-on-bing":"Poii \\"{0}\\" na Bingu."},"sq-al":{"no
2024-01-17 17:07:35 UTC	16384	IN	Data Raw: 61 76 41 63 74 69 6f 6e 73 3b 69 66 28 64 26 26 64 2e 6c 65 6e 67 74 68 3e 30 29 72 65 74 75 72 6e 20 64 3b 76 61 72 20 6c 3d 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 68 69 73 2e 6e 61 76 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 6e 61 76 41 63 74 69 6f 6e 73 3b 69 66 28 6c 26 26 6c 2e 6c 65 6e 67 74 68 3e 30 29 72 65 74 75 72 6e 20 6c 3b 69 66 28 6e 75 6c 6c 21 3d 3d 28 6f 3d 74 68 69 73 2e 24 72 6f 75 74 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 6f 26 26 6f 2e 70 61 74 68 26 26 74 68 69 73 2e 24 72 6f 75 74 65 2e 70 61 74 68 2e 73 70 6c 69 74 28 22 3f 22 29 5b 30 5d 2e 65 6e 64 73 57 69 74 68 28 22 65 64 67 65 2f 6d 6f 62 69 6c 65 22 29 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 63 2c 68 3d 54 2e 61 2e 67 65 74 53 45 4d 41 63 74 69 6f 6e Data Ascii: avActions;if(d&&d.length>0)return d;var l=null===(t=this.nav)\|\|void 0===t?void 0:t.navActions;if(l&&l.length>0)return l;if(null!==(o=this.$route)&&void 0!==o&&o.path&&this.$route.path.split("?")[0].endsWith("edge/mobile"))return[];var c,h=T.a.getSEMAction
2024-01-17 17:07:35 UTC	2925	IN	Data Raw: 61 76 69 6e 67 3c 2f 65 6d 3e 3c 2f 70 3e 22 7d 2c 65 33 34 36 3a 7b 73 65 63 74 69 6f 6e 49 64 3a 22 6c 65 61 72 6e 69 6e 67 2d 74 6f 6f 6c 73 22 2c 68 65 61 64 69 6e 67 3a 22 3c 70 3e 4c 65 61 72 6e 69 6e 67 20 3c 65 6d 3e 6d 61 64 65 20 65 61 73 79 3c 2f 65 6d 3e 20 77 69 74 68 20 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 20 3c 2f 70 3e 22 7d 2c 65 33 34 38 3a 7b 73 65 63 74 69 6f 6e 49 64 3a 22 6c 65 61 72 6e 69 6e 67 2d 74 6f 6f 6c 73 22 2c 68 65 61 64 69 6e 67 3a 22 3c 70 3e 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 20 3c 65 6d 3e 65 6d 70 6f 77 65 72 73 3c 2f 65 6d 3e 20 65 64 75 63 61 74 69 6f 6e 20 3c 2f 70 3e 22 7d 2c 65 33 34 39 3a 7b 73 65 63 74 69 6f 6e 49 64 3a 22 6c 65 61 72 6e 69 6e 67 2d 74 6f 6f 6c 73 22 2c 68 65 61 64 69 6e 67 3a 22 3c Data Ascii: aving</em></p>"},e346:{sectionId:"learning-tools",heading:"<p>Learning <em>made easy</em> with Microsoft Edge </p>"},e348:{sectionId:"learning-tools",heading:"<p>Microsoft Edge <em>empowers</em> education </p>"},e349:{sectionId:"learning-tools",heading:"<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.16	50071	52.0.126.85	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:35 UTC	623	OUT	GET /sync/msn?gdpr=0&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:35 UTC	778	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:35 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBFcJqGUCELRFsAgOO17vorKZrveJfpAFEgEBAQFaqWWxZQAAAAAA_eMAAA&S=AQAAAlLdbFFbQmfEEUJPTKE7k04; Expires=Thu, 16 Jan 2025 23:07:35 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-01-17 17:07:35 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.16	50078	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:35 UTC	661	OUT	GET /bundles/v1/edgeChromium/latest/web-components_traffic-card_dist_index_js.7dd615b29fbed0e07b71.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:35 UTC	1186	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: cyK4oWj5JPnUXd1L8JRACg== Last-Modified: Tue, 16 Jan 2024 23:21:30 GMT ETag: 0x8DC16E9DF2D8A3E Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: d4896d1d-001e-00b7-53d2-48cdf4000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:35 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Akamai-Request-BC: [a=23.218.242.10,b=89895071,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=1, origin; dur=0 , cdntime; dur=1 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55bb09f Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511255.55bb09f Vary: Origin
2024-01-17 17:07:35 UTC	15198	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 77 65 62 2d 63 6f 6d 70 6f 6e 65 6e 74 73 5f 74 72 61 66 66 69 63 2d 63 61 72 64 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 22 5d 2c 7b 37 39 33 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 72 28 74 29 2c 69 2e 64 28 74 2c 7b 54 72 61 66 66 69 63 43 61 72 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 2e 4a 58 7d 2c 6d 61 78 53 75 6d 6d 61 72 79 49 74 65 Data Ascii: 00006000(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["web-components_traffic-card_dist_index_js"],{79343:function(e,t,i){"use strict";i.r(t),i.d(t,{TrafficCard:function(){return s.JX},maxSummaryIte
2024-01-17 17:07:35 UTC	9390	IN	Data Raw: 62 79 4c 69 6e 65 73 7d 29 7d 65 6c 73 65 20 74 68 69 73 2e 24 65 6d 69 74 28 22 63 68 61 6e 67 65 2d 74 65 6d 70 6c 61 74 65 22 2c 7b 74 65 6d 70 6c 61 74 65 3a 6f 2e 49 73 2e 4e 65 61 72 62 79 4c 69 6e 65 73 7d 29 7d 2c 74 68 69 73 2e 67 65 74 41 75 74 6f 53 75 67 67 65 73 74 69 6f 6e 73 3d 61 73 79 6e 63 20 65 3d 3e 7b 76 61 72 20 74 2c 69 3b 63 6f 6e 73 74 20 73 3d 5b 5d 2c 61 3d 74 68 69 73 2e 66 75 6c 6c 57 69 64 74 68 54 6f 48 61 6c 66 57 69 64 74 68 28 65 2e 74 6f 4c 6f 63 61 6c 65 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 68 69 73 2e 74 72 61 6e 73 69 74 4c 69 6e 65 56 69 65 77 44 61 74 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 3d 28 69 3d 74 2e 61 6c 6c 54 72 61 6e 73 69 74 4c 69 6e Data Ascii: byLines})}else this.$emit("change-template",{template:o.Is.NearbyLines})},this.getAutoSuggestions=async e=>{var t,i;const s=[],a=this.fullWidthToHalfWidth(e.toLocaleLowerCase());if(null===(t=this.transitLineViewData)\|\|void 0===t\|\|null===(i=t.allTransitLin
2024-01-17 17:07:36 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 6f 74 79 70 65 2c 22 73 65 65 4d 6f 72 65 54 65 78 74 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 61 2e 67 6e 29 28 5b 28 30 2c 6e 2e 4c 6a 29 28 7b 61 74 74 72 69 62 75 74 65 3a 22 73 65 65 2d 6d 6f 72 65 2d 6c 69 6e 6b 22 7d 29 5d 2c 5a 2e 70 72 6f 74 6f 74 79 70 65 2c 22 73 65 65 4d 6f 72 65 4c 69 6e 6b 22 2c 76 6f 69 64 20 30 29 3b 63 6f 6e 73 74 20 65 65 3d 5a 2e 63 6f 6d 70 6f 73 65 28 7b 6e 61 6d 65 3a 22 6d 73 66 74 2d 74 72 61 6e 73 69 74 2d 74 6f 61 73 74 2d 70 61 67 65 2d 73 75 70 65 72 73 64 22 2c 74 65 6d 70 6c 61 74 65 3a 58 2c 73 74 79 6c 65 73 3a 4a 7d 29 2c 74 65 3d 67 2e 69 60 20 2e 74 72 61 6e 73 69 74 2d 6c 69 6e 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 73 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6c 69 6e 65 61 Data Ascii: 00006000otype,"seeMoreText",void 0),(0,a.gn)([(0,n.Lj)({attribute:"see-more-link"})],Z.prototype,"seeMoreLink",void 0);const ee=Z.compose({name:"msft-transit-toast-page-supersd",template:X,styles:J}),te=g.i` .transit-line-background-ssd{background:linea
2024-01-17 17:07:36 UTC	8204	IN	Data Raw: 2e 4b 39 29 28 22 63 6f 6d 6d 75 74 65 55 70 73 65 6c 6c 2f 52 6f 75 74 65 54 61 6c 6c 2e 70 6e 67 22 29 3a 28 30 2c 6f 2e 4b 39 29 28 22 63 6f 6d 6d 75 74 65 55 70 73 65 6c 6c 2f 32 78 42 69 67 52 6f 75 74 65 2e 70 6e 67 22 29 3a 22 6c 69 67 68 74 22 3d 3d 3d 65 2e 63 75 72 72 65 6e 74 54 68 65 6d 65 3f 28 30 2c 6f 2e 4b 39 29 28 22 63 6f 6d 6d 75 74 65 55 70 73 65 6c 6c 2f 32 78 42 69 67 57 32 2e 70 6e 67 22 29 3a 28 30 2c 6f 2e 4b 39 29 28 22 63 6f 6d 6d 75 74 65 55 70 73 65 6c 6c 2f 32 78 42 69 67 57 32 44 61 72 6b 2e 70 6e 67 22 29 7d 3e 3c 2f 69 6d 67 3e 60 29 7d 20 24 7b 28 30 2c 24 2e 67 29 28 28 65 3d 3e 21 65 2e 68 61 73 49 6e 69 74 69 61 6c 48 6f 6d 65 26 26 65 2e 68 61 73 49 6e 69 74 69 61 6c 57 6f 72 6b 29 2c 79 2e 64 79 60 3c 69 6d 67 20 63 Data Ascii: .K9)("commuteUpsell/RouteTall.png"):(0,o.K9)("commuteUpsell/2xBigRoute.png"):"light"===e.currentTheme?(0,o.K9)("commuteUpsell/2xBigW2.png"):(0,o.K9)("commuteUpsell/2xBigW2Dark.png")}></img>`)} ${(0,$.g)((e=>!e.hasInitialHome&&e.hasInitialWork),y.dy`<img c
2024-01-17 17:07:36 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 2d 75 70 73 65 6c 6c 2d 72 65 77 61 72 64 73 5d 29 3a 68 6f 73 74 28 5b 73 63 65 6e 61 72 69 6f 3d 22 69 6e 63 69 64 65 6e 74 73 22 5d 29 20 2e 73 75 70 65 72 73 64 2d 65 6d 62 65 64 64 65 64 2d 6d 61 70 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 7d 3a 68 6f 73 74 28 3a 6e 6f 74 28 5b 73 69 7a 65 3d 22 5f 31 78 5f 31 79 22 5d 29 29 20 2e 73 75 70 65 72 73 64 2d 65 6d 62 65 64 64 65 64 2d 6d 61 70 7b 77 69 64 74 68 3a 32 36 36 70 78 7d 3a 68 6f 73 74 28 5b 73 69 7a 65 3d 22 5f 31 78 5f 31 79 22 5d 29 20 2e 73 75 70 65 72 73 64 2d 65 6d 62 65 64 64 65 64 2d 6d 61 70 2c 3a 68 6f 73 74 28 5b 73 69 7a 65 3d 22 5f 31 78 5f 31 79 22 5d 29 20 2e 63 61 6d 65 72 61 2d 69 6d 67 2d 76 32 7b 77 69 64 74 68 3a 31 33 34 70 78 Data Ascii: 00004000-upsell-rewards]):host([scenario="incidents"]) .supersd-embedded-map{margin-bottom:20px}:host(:not([size="_1x_1y"])) .supersd-embedded-map{width:266px}:host([size="_1x_1y"]) .supersd-embedded-map,:host([size="_1x_1y"]) .camera-img-v2{width:134px
2024-01-17 17:07:36 UTC	12	IN	Data Raw: 63 65 3a 6e 6f 77 72 61 70 7d 0d 0a Data Ascii: ce:nowrap}
2024-01-17 17:07:36 UTC	10138	IN	Data Raw: 30 30 30 30 32 37 38 45 0d 0a 3a 68 6f 73 74 28 5b 73 69 7a 65 3d 22 5f 31 78 5f 31 79 22 5d 29 20 2e 63 6f 6d 6d 75 74 65 2d 6d 61 70 2d 72 65 76 65 72 73 65 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 70 61 64 64 69 6e 67 3a 37 70 78 3b 77 69 64 74 68 3a 32 34 70 78 3b 68 65 69 67 68 74 3a 32 34 70 78 7d 3a 68 6f 73 74 28 5b 73 69 7a 65 3d 22 5f 31 78 5f 31 79 22 5d 29 3a 68 6f 73 74 28 5b 6d 6f 62 69 6c 65 2d 63 6f 6d 6d 75 74 65 2d 75 70 73 65 6c 6c 2d 72 65 77 61 72 64 73 5d 29 20 2e 63 6f 6d 6d 75 74 65 2d 6d 61 70 2d 72 65 76 65 72 73 65 2c 3a 68 6f 73 74 28 5b 73 69 7a 65 3d 22 5f 31 78 5f 31 79 22 5d 29 3a 68 6f 73 74 28 5b 6d 6f 62 69 6c 65 2d 63 6f 6d 6d 75 74 65 2d 75 70 73 65 6c 6c 5d 29 20 2e 63 6f 6d 6d 75 74 65 Data Ascii: 0000278E:host([size="_1x_1y"]) .commute-map-reverse{justify-content:center;padding:7px;width:24px;height:24px}:host([size="_1x_1y"]):host([mobile-commute-upsell-rewards]) .commute-map-reverse,:host([size="_1x_1y"]):host([mobile-commute-upsell]) .commute
2024-01-17 17:07:36 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 29 3b 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 2e 74 72 61 6e 73 69 74 2d 61 6c 65 72 74 2d 69 74 65 6d 2d 73 73 64 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 31 34 29 7d 2e 74 72 61 6e 73 69 74 2d 61 6c 65 72 74 2d 74 79 70 65 2d 73 73 64 7b 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 37 29 7d 2e 74 72 61 6e 73 69 74 2d 61 6c 65 72 74 2d 64 65 73 63 72 69 70 74 69 6f 6e 2d 73 73 64 7b 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 35 34 29 7d 2e 74 72 61 6e 73 69 74 2d 73 65 65 2d 6d 6f 72 65 2d 73 73 64 7b 63 6f 6c 6f 72 3a 23 39 39 45 42 46 46 7d 2e 74 72 61 6e 73 69 74 2d 61 6c 65 72 74 2d 6c 61 Data Ascii: 00004000);color:#FFFFFF}.transit-alert-item-ssd:hover{background:rgba(255,255,255,0.14)}.transit-alert-type-ssd{color:rgba(255,255,255,0.7)}.transit-alert-description-ssd{color:rgba(255,255,255,0.54)}.transit-see-more-ssd{color:#99EBFF}.transit-alert-la
2024-01-17 17:07:36 UTC	12	IN	Data Raw: 29 3b 69 3d 65 2e 73 74 72 69 0d 0a Data Ascii: );i=e.stri
2024-01-17 17:07:36 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 6e 67 73 2e 69 6e 63 69 64 65 6e 74 43 6c 65 61 72 53 6f 6f 6e 54 65 78 74 2e 72 65 70 6c 61 63 65 28 22 7b 30 7d 22 2c 60 24 7b 73 2e 66 6f 72 6d 61 74 4d 6f 6e 74 68 44 61 79 28 61 29 7d 20 24 7b 73 2e 66 6f 72 6d 61 74 48 6f 75 72 4d 69 6e 75 74 65 28 61 29 7d 60 29 7d 72 65 74 75 72 6e 20 69 7d 66 75 6e 63 74 69 6f 6e 20 4d 69 28 65 29 7b 63 6f 6e 73 74 20 74 3d 45 69 28 65 29 3b 72 65 74 75 72 6e 20 74 3f 74 2b 22 20 2d 20 22 2b 50 69 28 65 29 3a 50 69 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 69 28 65 29 7b 63 6f 6e 73 74 20 74 3d 42 69 28 65 29 3b 72 65 74 75 72 6e 20 79 2e 64 79 60 20 24 7b 28 30 2c 24 2e 67 29 28 28 65 3d 3e 65 2e 68 61 73 43 61 72 64 53 68 6f 77 6e 29 2c 79 2e 64 79 60 3c 69 6d 67 20 63 6c 61 73 73 Data Ascii: 00006000ngs.incidentClearSoonText.replace("{0}",`${s.formatMonthDay(a)} ${s.formatHourMinute(a)}`)}return i}function Mi(e){const t=Ei(e);return t?t+" - "+Pi(e):Pi(e)}function Oi(e){const t=Bi(e);return y.dy` ${(0,$.g)((e=>e.hasCardShown),y.dy`<img class

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.16	50079	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:35 UTC	663	OUT	GET /tenant/amp/entityid/AA13DuSa.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:35 UTC	546	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA13DuSa?w=80&h=80&q=60&m=6&f=jpg&u=t Last-Modified: Mon, 08 Jan 2024 23:32:20 GMT X-Source-Length: 18874 X-Datacenter: westus X-ActivityId: a5c9b668-b2b3-4378-854d-6a386f85b84f Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 4096 Cache-Control: public, max-age=66205 Expires: Thu, 18 Jan 2024 11:31:00 GMT Date: Wed, 17 Jan 2024 17:07:35 GMT Connection: close
2024-01-17 17:07:35 UTC	4096	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 50 00 50 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOPP}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.16	50084	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:35 UTC	662	OUT	GET /tenant/amp/entityid/AAtK5aP.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:35 UTC	546	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AAtK5aP?w=80&h=80&q=60&m=6&f=jpg&u=t Last-Modified: Mon, 15 Jan 2024 08:26:45 GMT X-Source-Length: 95457 X-Datacenter: westus X-ActivityId: 86715324-1053-410f-8b00-f744d511823b Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 2048 Cache-Control: public, max-age=228008 Expires: Sat, 20 Jan 2024 08:27:43 GMT Date: Wed, 17 Jan 2024 17:07:35 GMT Connection: close
2024-01-17 17:07:35 UTC	2048	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 50 00 50 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOPP}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.16	50080	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:35 UTC	662	OUT	GET /tenant/amp/entityid/AAtJYsP.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:35 UTC	546	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AAtJYsP?w=80&h=80&q=60&m=6&f=jpg&u=t Last-Modified: Wed, 10 Jan 2024 11:50:54 GMT X-Source-Length: 82324 X-Datacenter: eastus X-ActivityId: 07a88633-a43d-49fe-89cc-04a8b8e21f40 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 2048 Cache-Control: public, max-age=197087 Expires: Fri, 19 Jan 2024 23:52:22 GMT Date: Wed, 17 Jan 2024 17:07:35 GMT Connection: close
2024-01-17 17:07:35 UTC	2048	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 50 00 50 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOPP}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.16	50085	195.244.31.11	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:35 UTC	730	OUT	GET /visitor/sync?uid=9871605be8d4b2a982914bf5c9348e7b&name=MSN&visitor=2136D0069C246D353F30C40F9D676C20&external=true&gdpr=0&gdpr_consent= HTTP/1.1 Host: visitor.omnitagjs.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:35 UTC	465	IN	HTTP/1.1 200 OK cache-control: no-cache, no-store, must-revalidate content-type: image/gif expires: 0 p3p: CP="CAO PSA OUR" pragma: no-cache set-cookie: ayl_visitor=370ef44c0d7117445c1220a3dd1d4af3; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None vary: Accept-Encoding x-content-type-options: nosniff date: Wed, 17 Jan 2024 17:07:35 GMT content-length: 49 x-envoy-upstream-service-time: 4 server: ayl-lb-usa02 connection: close
2024-01-17 17:07:35 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 00 00 ff ff ff ff ff ff fe 01 02 00 00 00 21 f9 04 04 14 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
256	192.168.2.16	50083	184.87.173.91	443

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:35 UTC	663	OUT	GET /tenant/amp/entityid/AA1911iL.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:35 UTC	547	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA1911iL?w=80&h=80&q=60&m=6&f=jpg&u=t Last-Modified: Wed, 17 Jan 2024 11:02:42 GMT X-Source-Length: 21463 X-Datacenter: eastus X-ActivityId: 815788fd-e2b5-4f40-a0c4-eea43c877f94 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 4096 Cache-Control: public, max-age=410206 Expires: Mon, 22 Jan 2024 11:04:21 GMT Date: Wed, 17 Jan 2024 17:07:35 GMT Connection: close
2024-01-17 17:07:35 UTC	4096	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 50 00 50 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOPP}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.16	50081	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:35 UTC	663	OUT	GET /tenant/amp/entityid/AA163JKI.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:36 UTC	547	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA163JKI?w=80&h=80&q=60&m=6&f=jpg&u=t Last-Modified: Thu, 11 Jan 2024 14:18:14 GMT X-Source-Length: 11248 X-Datacenter: westus X-ActivityId: 77a55e62-8116-4861-a189-2945aab086c3 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 2048 Cache-Control: public, max-age=292224 Expires: Sun, 21 Jan 2024 02:17:59 GMT Date: Wed, 17 Jan 2024 17:07:35 GMT Connection: close
2024-01-17 17:07:36 UTC	2048	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 50 00 50 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOPP}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.16	50075	172.241.51.69	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:36 UTC	658	OUT	GET /sync?ssp=msn&id=2136D0069C246D353F30C40F9D676C20&gdpr=0&gdpr_consent= HTTP/1.1 Host: code.yengo.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:36 UTC	149	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 17 Jan 2024 17:07:36 GMT Content-Type: application/octet-stream Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.16	50082	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:36 UTC	663	OUT	GET /tenant/amp/entityid/AA19O7qe.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:36 UTC	548	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Last-Modified: Wed, 20 Dec 2023 06:41:55 GMT X-Datacenter: eastus X-ActivityId: 9601550e-c213-4a92-ac87-546357f05845 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Type: image/jpeg Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA19O7qe?w=80&h=80&q=60&m=6&f=jpg&u=t X-Source-Length: 227365 Content-Length: 2048 Cache-Control: public, max-age=308173 Expires: Sun, 21 Jan 2024 06:43:49 GMT Date: Wed, 17 Jan 2024 17:07:36 GMT Connection: close
2024-01-17 17:07:36 UTC	2048	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 50 00 50 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOPP}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.16	50090	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:36 UTC	983	OUT	GET /service/segments/recoitems/shopping?$filter=ebay.com,msn.com&$select=BatchStoresCashbackWorkflow&activityId=d749b6f214fb4679f43b4425f389c544&apiKey=ogTIEkUJTNRKfuviV6imfOBW6i874Wsn2XeWZBW83k&cm=en-us&ocid=anaheim-shopping-topsites HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: _C_Auth=; USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; MUIDB=2136D0069C246D353F30C40F9D676C20; _SS=SID=00; _C_ETH=1
2024-01-17 17:07:36 UTC	3064	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Headers: TicketType,RequestContinuationKey,AuthToken,Content-Type,x-client-activityid,ms-cv,OneSvc-Uni-Feat-Tun,signedInCookieName,muid,appid,User-Location,user-location,userauthtoken,usertickettype,sitename,s2sauthtoken,thumbprint,Authorization,Ent-Authorization,UserIdToken,DDD-TMPL,DDD-ActivityId,DDD-FeatureSet,DDD-Session-ID,Date,date,ads-referer,ads-referer,taboola-sessionId,taboola-sessionid,Akamai-Request-ID,Akamai-Server-IP,X-MSEdge-Ref,DDD-DebugId,s-xbox-token,OneWebServiceLatency,X-FD-Features,DDD-UserType,traceparent,Widgets,Muted Access-Control-Expose-Headers: TicketType,RequestContinuationKey,AuthToken,Content-Type,x-client-activityid,ms-cv,OneSvc-Uni-Feat-Tun,signedInCookieName,muid,appid,User-Location,user-location,userauthtoken,usertickettype,sitename,s2sauthtoken,thumbprint,Authorization,Ent-Authorization,UserIdToken,DDD-TMPL,DDD-ActivityId,DDD-FeatureSet,DDD-Session-ID,Date,date,ads-referer,ads-referer,taboola-sessionId,taboola-sessionid,Akamai-Request-ID,Akamai-Server-IP,X-MSEdge-Ref,DDD-DebugId,s-xbox-token,OneWebServiceLatency,X-FD-Features,DDD-UserType,traceparent,Widgets,Muted DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-ActivityId: 65a80958-ee29-4cb5-aa33-2fc5c8dba05b DDD-StrategyExecutionLatency: 00:00:00.0292852 DDD-DebugId: 65a80958-ee29-4cb5-aa33-2fc5c8dba05b\|2024-01-17T17:07:36.2317690Z\|fabric_segments\|EUS1\|Segment_81 OneWebServiceLatency: 30 X-MSEdge-ResponseInfo: 30 Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA X-Ceto-ref: 65a8095836f245afab48114128039ed2\|2024-01-17T17:07:36.200Z X-MSEdge-Ref: Ref A: FAB2C8A5980E4044A21B7085431A7CA9 Ref B: EWR30EDGE0413 Ref C: 2024-01-17T17:07:36Z Expires: Wed, 17 Jan 2024 17:07:36 GMT Date: Wed, 17 Jan 2024 17:07:36 GMT Content-Length: 289 Connection: close Set-Cookie: _C_ETH=1; expires=Tue, 16 Jan 2024 17:07:36 GMT; domain=.msn.com; path=/; secure; httponly Set-Cookie: _C_Auth= Akamai-Request-BC: [a=23.218.242.10,b=89895467,c=g,n=US_NJ_EDISON,o=20940],[a=204.79.197.203,c=o] Server-Timing: clientrtt; dur=88, clienttt; dur=52, origin; dur=52 , cdntime; dur=0 Akamai-Cache-Status: NotCacheable from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55bb22b Access-Control-Allow-Methods: PUT,PATCH,POST,GET,OPTIONS,DELETE Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com X-AS-SuppressSetCookie: 1 Cache-Control: private, max-age=0 report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511256.55bb22b Vary: Origin
2024-01-17 17:07:36 UTC	289	IN	Data Raw: 5b 7b 22 74 79 70 65 22 3a 22 42 61 74 63 68 53 74 6f 72 65 73 43 61 73 68 62 61 63 6b 22 2c 22 64 61 74 61 22 3a 22 5b 7b 5c 22 73 74 6f 72 65 4e 61 6d 65 5c 22 3a 5c 22 65 42 61 79 5c 22 2c 5c 22 64 6f 6d 61 69 6e 5c 22 3a 5c 22 65 62 61 79 2e 63 6f 6d 5c 22 2c 5c 22 63 61 73 68 62 61 63 6b 49 6e 66 6f 5c 22 3a 7b 5c 22 76 61 6c 75 65 5c 22 3a 5c 22 31 2e 32 38 5c 22 2c 5c 22 69 73 50 65 72 63 65 6e 74 61 67 65 5c 22 3a 74 72 75 65 2c 5c 22 73 63 68 65 6d 61 4e 61 6d 65 5c 22 3a 5c 22 52 65 74 61 69 6c 2e 43 61 73 68 62 61 63 6b 56 61 6c 75 65 5c 22 2c 5c 22 6b 69 66 4d 61 6a 6f 72 56 65 72 73 69 6f 6e 5c 22 3a 31 2c 5c 22 6b 69 66 4d 69 6e 6f 72 56 65 72 73 69 6f 6e 5c 22 3a 30 2c 5c 22 6b 69 66 4d 69 6e 6f 72 56 65 72 73 69 6f 6e 32 5c 22 3a 30 7d 7d Data Ascii: [{"type":"BatchStoresCashback","data":"[{\"storeName\":\"eBay\",\"domain\":\"ebay.com\",\"cashbackInfo\":{\"value\":\"1.28\",\"isPercentage\":true,\"schemaName\":\"Retail.CashbackValue\",\"kifMajorVersion\":1,\"kifMinorVersion\":0,\"kifMinorVersion2\":0}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.16	50091	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:36 UTC	503	OUT	GET /bundles/v1/edgeChromium/latest/select-carousel.e0371dfc8168bf7083f6.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:36 UTC	1186	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: IgYj90x381Ot+dBksOSUkA== Last-Modified: Wed, 10 Jan 2024 03:17:36 GMT ETag: 0x8DC118AB195EB55 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: d8292ba1-401e-0027-3a73-432a83000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:36 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Akamai-Request-BC: [a=23.218.242.10,b=89895517,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=1, origin; dur=0 , cdntime; dur=1 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55bb25d Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511256.55bb25d Vary: Origin
2024-01-17 17:07:36 UTC	15198	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 73 65 6c 65 63 74 2d 63 61 72 6f 75 73 65 6c 2e 65 30 33 37 31 64 66 63 38 31 36 38 62 66 37 30 38 33 66 36 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 65 6c 65 63 74 2d 63 61 72 6f 75 73 65 6c 22 5d 2c 7b 33 35 39 35 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 22 75 73 65 20 73 74 72 Data Ascii: 00006000/! For license information please see select-carousel.e0371dfc8168bf7083f6.js.LICENSE.txt /(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["select-carousel"],{35955:function(e,t,i){"use str
2024-01-17 17:07:36 UTC	9390	IN	Data Raw: 28 74 29 29 29 7d 3b 72 65 74 75 72 6e 20 65 28 6e 75 6c 6c 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 3d 28 6c 3d 74 2e 65 78 70 65 72 69 65 6e 63 65 73 5b 30 5d 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6c 7c 7c 6e 75 6c 6c 3d 3d 3d 28 63 3d 6c 2e 64 61 74 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 63 3f 76 6f 69 64 20 30 3a 63 2e 70 72 6f 64 75 63 74 43 61 72 64 73 29 2e 6d 61 70 28 28 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 65 2e 74 69 74 6c 65 2c 61 3d 65 2e 64 65 61 6c 50 65 72 63 65 6e 74 61 67 65 2c 6f 3d 65 2e 69 6d 61 67 65 73 26 26 65 2e 69 6d 61 67 65 73 2e 6c 65 6e 67 74 68 26 26 65 2e 69 6d 61 67 65 73 5b 30 5d 3b 72 65 74 75 72 6e 7b 63 6c 69 63 6b 55 72 6c 3a 7a 65 28 65 2c 65 2e 72 65 64 69 72 65 63 74 55 72 6c 29 2c 69 64 3a 65 2e 69 64 2c 69 6d 61 67 65 49 6e Data Ascii: (t)))};return e(null==t\|\|null===(l=t.experiences[0])\|\|void 0===l\|\|null===(c=l.data)\|\|void 0===c?void 0:c.productCards).map((e=>{const t=e.title,a=e.dealPercentage,o=e.images&&e.images.length&&e.images[0];return{clickUrl:ze(e,e.redirectUrl),id:e.id,imageIn
2024-01-17 17:07:36 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 5d 2c 74 68 69 73 2e 63 75 72 72 65 6e 74 43 61 72 6f 75 73 65 6c 43 6f 6e 66 69 67 3d 6e 75 6c 6c 2c 74 68 69 73 2e 6c 6f 61 64 65 64 3d 21 31 2c 74 68 69 73 2e 69 73 46 75 6c 6c 52 6f 77 43 61 72 64 3d 21 31 2c 74 68 69 73 2e 69 73 53 75 70 65 72 43 61 72 6f 75 73 65 6c 3d 21 31 2c 74 68 69 73 2e 68 69 64 65 41 63 74 69 6f 6e 54 72 61 79 53 75 70 65 72 3d 21 30 2c 74 68 69 73 2e 63 75 72 50 6c 61 79 49 6e 64 65 78 3d 30 2c 74 68 69 73 2e 6c 61 73 74 50 6c 61 79 49 6e 64 65 78 3d 30 2c 74 68 69 73 2e 6c 61 79 6f 75 74 3d 22 43 34 22 2c 74 68 69 73 2e 64 65 66 61 75 6c 74 46 65 74 63 68 50 61 72 61 6d 73 3d 7b 73 74 61 72 74 3a 30 2c 63 6f 75 6e 74 3a 33 30 2c 74 69 6d 65 6f 75 74 4d 73 3a 33 65 33 7d 2c 74 68 69 73 2e 68 69 Data Ascii: 00006000],this.currentCarouselConfig=null,this.loaded=!1,this.isFullRowCard=!1,this.isSuperCarousel=!1,this.hideActionTraySuper=!0,this.curPlayIndex=0,this.lastPlayIndex=0,this.layout="C4",this.defaultFetchParams={start:0,count:30,timeoutMs:3e3},this.hi
2024-01-17 17:07:36 UTC	8204	IN	Data Raw: 6d 6d 65 72 73 69 76 65 3d 74 68 69 73 2e 67 65 74 54 69 74 6c 65 43 6f 6c 6f 72 46 6f 72 49 6d 6d 65 72 73 69 76 65 53 75 70 65 72 43 61 72 6f 75 73 65 6c 28 21 28 6e 75 6c 6c 3d 3d 3d 28 72 3d 74 68 69 73 2e 73 75 70 65 72 44 61 74 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 7c 7c 21 72 2e 69 6d 6d 65 72 73 69 76 65 43 61 72 64 29 2c 21 30 29 2c 74 68 69 73 2e 73 75 70 65 72 44 61 74 61 2e 68 65 61 64 65 72 44 61 74 61 2e 74 69 74 6c 65 43 6f 6c 6f 72 4c 69 67 68 74 49 6d 6d 65 72 73 69 76 65 3d 74 68 69 73 2e 67 65 74 54 69 74 6c 65 43 6f 6c 6f 72 46 6f 72 49 6d 6d 65 72 73 69 76 65 53 75 70 65 72 43 61 72 6f 75 73 65 6c 28 21 28 6e 75 6c 6c 3d 3d 3d 28 61 3d 74 68 69 73 2e 73 75 70 65 72 44 61 74 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 7c 7c 21 61 2e Data Ascii: mmersive=this.getTitleColorForImmersiveSuperCarousel(!(null===(r=this.superData)\|\|void 0===r\|\|!r.immersiveCard),!0),this.superData.headerData.titleColorLightImmersive=this.getTitleColorForImmersiveSuperCarousel(!(null===(a=this.superData)\|\|void 0===a\|\|!a.
2024-01-17 17:07:36 UTC	16127	IN	Data Raw: 30 30 30 30 33 45 46 33 0d 0a 49 6d 6d 65 72 73 69 76 65 43 61 72 64 29 7c 7c 74 68 69 73 2e 69 73 4d 6f 62 69 6c 65 26 26 6e 26 26 21 74 68 69 73 2e 63 6f 6e 66 69 67 4f 70 74 69 6f 6e 73 2e 65 6e 61 62 6c 65 44 65 6e 73 65 43 61 72 6f 75 73 65 6c 43 61 72 64 2c 64 69 73 70 6c 61 79 53 65 74 74 69 6e 67 73 3a 74 68 69 73 2e 64 69 73 70 6c 61 79 53 65 74 74 69 6e 67 73 2c 69 73 43 61 72 6f 75 73 65 6c 3a 21 30 2c 63 61 72 64 46 69 6c 6c 43 6f 6c 6f 72 3a 74 68 69 73 2e 63 61 6c 63 75 6c 61 74 65 64 46 6f 6e 74 43 6f 6c 6f 72 46 6f 72 53 75 70 65 72 43 61 72 6f 75 73 65 6c 41 72 74 69 63 6c 65 43 61 72 64 28 29 2e 63 61 72 64 46 69 6c 6c 43 6f 6c 6f 72 2c 63 61 72 64 53 65 63 6f 6e 64 61 72 79 43 6f 6c 6f 72 3a 74 68 69 73 2e 63 61 6c 63 75 6c 61 74 65 64 Data Ascii: 00003EF3ImmersiveCard)\|\|this.isMobile&&n&&!this.configOptions.enableDenseCarouselCard,displaySettings:this.displaySettings,isCarousel:!0,cardFillColor:this.calculatedFontColorForSuperCarouselArticleCard().cardFillColor,cardSecondaryColor:this.calculated
2024-01-17 17:07:36 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 54 65 6c 65 6d 65 74 72 79 54 61 67 3d 24 7b 65 3d 3e 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 28 74 3d 65 2e 74 65 6c 65 6d 65 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 64 65 73 74 69 6e 61 74 69 6f 6e 7d 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3a 68 61 6e 64 6c 65 43 6f 6e 74 65 6e 74 43 61 72 64 4c 69 6e 6b 43 6c 69 63 6b 3d 24 7b 65 3d 3e 65 2e 68 61 6e 64 6c 65 43 6f 6e 74 65 6e 74 43 61 72 64 43 6c 69 63 6b 4f 76 65 72 72 69 64 65 7d 0a 20 20 20 20 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 6c 61 79 2d 69 63 6f 6e 22 20 73 6c 6f 74 3d 22 6d 65 64 69 61 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 Data Ascii: 00004000TelemetryTag=${e=>{var t;return null===(t=e.telemetry)\|\|void 0===t?void 0:t.destination}} :handleContentCardLinkClick=${e=>e.handleContentCardClickOverride} > <div class="play-icon" slot="media"> $
2024-01-17 17:07:36 UTC	12	IN	Data Raw: 74 29 3d 3e 7b 76 61 72 20 69 0d 0a Data Ascii: t)=>{var i
2024-01-17 17:07:36 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 3b 72 65 74 75 72 6e 21 28 6e 75 6c 6c 21 3d 3d 28 69 3d 65 2e 69 6d 61 67 65 49 6e 66 6f 29 26 26 76 6f 69 64 20 30 21 3d 3d 69 26 26 69 2e 73 6f 75 72 63 65 49 6d 61 67 65 55 72 6c 29 26 26 65 2e 61 62 73 74 72 61 63 74 26 26 21 74 2e 70 61 72 65 6e 74 2e 69 73 53 6c 69 6d 53 69 7a 65 7d 29 2c 76 74 2e 64 79 60 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 73 6c 6f 74 3d 22 61 62 73 74 72 61 63 74 22 20 63 6c 61 73 73 3d 22 73 65 6c 65 63 74 2d 63 61 72 6f 75 73 65 6c 2d 63 61 72 64 2d 61 62 73 74 72 61 63 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 7b 65 3d 3e 65 2e 61 62 73 74 72 61 63 74 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 Data Ascii: 00004000;return!(null!==(i=e.imageInfo)&&void 0!==i&&i.sourceImageUrl)&&e.abstract&&!t.parent.isSlimSize}),vt.dy` <p slot="abstract" class="select-carousel-card-abstract"> ${e=>e.abstract} </p>
2024-01-17 17:07:36 UTC	12	IN	Data Raw: 2e 61 72 74 69 63 6c 65 2d 63 0d 0a Data Ascii: .article-c
2024-01-17 17:07:36 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 61 72 6f 75 73 65 6c 2d 63 61 72 64 20 3e 20 6d 73 66 74 2d 61 72 74 69 63 6c 65 2d 63 61 72 64 20 2e 61 74 74 72 69 62 75 74 69 6f 6e 5f 61 72 74 69 63 6c 65 5f 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 74 79 70 65 2d 72 61 6d 70 2d 6d 69 6e 75 73 2d 31 2d 6c 69 6e 65 2d 68 65 69 67 68 74 29 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 6d 73 66 74 2d 73 74 72 69 70 65 20 3e 20 66 6c 75 65 6e 74 2d 63 61 72 64 2e 61 72 74 69 63 6c 65 2d 63 61 72 6f 75 73 65 6c 2d 63 61 72 64 20 2e 61 74 74 72 69 62 75 74 69 6f 6e 5f 61 72 74 69 63 6c 65 5f Data Ascii: 00006000arousel-card > msft-article-card .attribution_article_container{width:100%;min-height:var(--type-ramp-minus-1-line-height);position:relative;overflow:hidden;white-space:nowrap}msft-stripe > fluent-card.article-carousel-card .attribution_article_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.16	50092	35.71.139.29	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:36 UTC	626	OUT	GET /getuid?ld=1&gdpr=0&cmp_cs=&us_privacy= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:36 UTC	172	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:36 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate
2024-01-17 17:07:36 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.16	50096	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:36 UTC	663	OUT	GET /tenant/amp/entityid/AA19I1ex.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:36 UTC	547	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Last-Modified: Sun, 14 Jan 2024 16:19:11 GMT X-Datacenter: eastus X-ActivityId: dc3fc17a-f3f9-4da8-995b-e0707b6f498a Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Type: image/jpeg Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA19I1ex?w=80&h=80&q=60&m=6&f=jpg&u=t X-Source-Length: 72824 Content-Length: 2048 Cache-Control: public, max-age=169923 Expires: Fri, 19 Jan 2024 16:19:39 GMT Date: Wed, 17 Jan 2024 17:07:36 GMT Connection: close
2024-01-17 17:07:36 UTC	2048	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 50 00 50 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOPP}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.16	50094	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:36 UTC	695	OUT	GET /bundles/v1/edgeChromium/latest/web-components_super-cards_dist_cards_super-infopane_CardActionTemplates_js.2c3fb7de7612b1fcd279.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:36 UTC	1186	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: d+C9WW/bPSXeAz9RucxRBQ== Last-Modified: Mon, 08 Jan 2024 16:46:14 GMT ETag: 0x8DC106953A5CDBA Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: bc465d5d-701e-0000-6552-426abe000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:36 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Akamai-Request-BC: [a=23.218.242.10,b=89895574,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=1, origin; dur=0 , cdntime; dur=1 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55bb296 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511256.55bb296 Vary: Origin
2024-01-17 17:07:36 UTC	15198	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 77 65 62 2d 63 6f 6d 70 6f 6e 65 6e 74 73 5f 73 75 70 65 72 2d 63 61 72 64 73 5f 64 69 73 74 5f 63 61 72 64 73 5f 73 75 70 65 72 2d 69 6e 66 6f 70 61 6e 65 5f 43 61 72 64 41 63 74 69 6f 6e 54 65 6d 70 6c 61 74 65 73 5f 6a 73 22 5d 2c 7b 37 34 34 34 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 64 28 74 2c 7b 53 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d Data Ascii: 00006000"use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["web-components_super-cards_dist_cards_super-infopane_CardActionTemplates_js"],{74445:function(e,t,n){n.d(t,{S:function(){return o}
2024-01-17 17:07:36 UTC	9390	IN	Data Raw: 61 74 63 68 2d 76 69 64 65 6f 22 2c 74 61 72 67 65 74 54 79 70 65 3a 22 54 6f 70 69 63 46 65 65 64 22 7d 2c 57 65 62 4e 65 77 73 43 61 72 6f 75 73 65 6c 3a 7b 64 65 66 69 6e 69 74 69 6f 6e 4e 61 6d 65 3a 22 77 65 62 6e 6c 6e 65 77 73 22 2c 74 61 72 67 65 74 54 79 70 65 3a 22 54 6f 70 69 63 46 65 65 64 22 7d 2c 43 72 79 70 74 6f 3a 7b 64 65 66 69 6e 69 74 69 6f 6e 4e 61 6d 65 3a 22 53 65 67 6d 65 6e 74 5f 46 69 6e 61 6e 63 65 5f 43 72 79 70 74 6f 43 61 72 64 22 2c 74 61 72 67 65 74 54 79 70 65 3a 22 53 74 72 75 63 74 75 72 65 64 43 61 72 64 22 7d 2c 4d 61 72 6b 65 74 42 72 69 65 66 3a 7b 64 65 66 69 6e 69 74 69 6f 6e 4e 61 6d 65 3a 22 53 65 67 6d 65 6e 74 5f 46 69 6e 61 6e 63 65 5f 4d 61 72 6b 65 74 42 72 69 65 66 22 2c 74 61 72 67 65 74 54 79 70 65 3a 22 Data Ascii: atch-video",targetType:"TopicFeed"},WebNewsCarousel:{definitionName:"webnlnews",targetType:"TopicFeed"},Crypto:{definitionName:"Segment_Finance_CryptoCard",targetType:"StructuredCard"},MarketBrief:{definitionName:"Segment_Finance_MarketBrief",targetType:"
2024-01-17 17:07:36 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 73 74 61 74 69 63 3b 20 6d 61 72 67 69 6e 3a 20 61 75 74 6f 3b 20 7d 20 2e 6d 65 6e 75 2d 69 74 65 6d 2d 74 65 78 74 20 7b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 70 78 3b 20 70 61 64 64 69 6e 67 3a 20 30 20 38 70 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 20 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 20 65 6c 6c 69 70 73 69 73 3b 20 7d 3c 2f 73 74 79 6c 65 3e 3c 6d 73 6e 2d 68 69 64 65 2d 73 74 6f 72 79 2d 63 61 72 64 20 63 6c 61 73 73 3d 22 68 69 64 65 2d 66 65 65 64 62 61 63 6b 20 24 7b 65 3d 3e 65 2e 65 6e 61 62 6c 65 49 6e 73 74 61 6e 74 48 69 64 65 3f 22 69 6e Data Ascii: 00006000 display: block; position: static; margin: auto; } .menu-item-text { margin-top: 5px; padding: 0 8px; overflow: hidden; white-space: nowrap; text-overflow: ellipsis; }</style><msn-hide-story-card class="hide-feedback ${e=>e.enableInstantHide?"in
2024-01-17 17:07:36 UTC	8204	IN	Data Raw: 65 78 74 7d 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 60 3b 6c 65 74 20 79 3d 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 6c 7b 7d 3b 79 3d 28 30 2c 6f 2e 67 6e 29 28 5b 28 30 2c 64 2e 4d 29 28 7b 6e 61 6d 65 3a 22 6d 73 6e 2d 61 6e 69 6d 61 74 65 64 2d 64 6f 6e 65 2d 73 70 69 6e 6e 65 72 22 2c 74 65 6d 70 6c 61 74 65 3a 66 2c 73 74 79 6c 65 73 3a 70 7d 29 5d 2c 79 29 2c 69 2e 44 2e 64 65 66 69 6e 65 28 61 2e 48 2e 72 65 67 69 73 74 72 79 29 2c 72 2e 44 2e 64 65 66 69 6e 65 28 61 2e 48 2e 72 65 67 69 73 74 72 79 29 7d 2c 37 35 32 31 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 64 28 74 2c 7b 4e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 47 7d 7d 29 3b 76 61 72 20 6f 3d 6e 28 33 33 39 34 30 29 2c 69 3d 6e 28 34 35 39 30 30 29 2c 61 Data Ascii: ext}</span></div>`;let y=class extends l{};y=(0,o.gn)([(0,d.M)({name:"msn-animated-done-spinner",template:f,styles:p})],y),i.D.define(a.H.registry),r.D.define(a.H.registry)},75216:function(e,t,n){n.d(t,{N:function(){return G}});var o=n(33940),i=n(45900),a
2024-01-17 17:07:36 UTC	2558	IN	Data Raw: 30 30 30 30 30 39 46 32 0d 0a 20 63 6c 61 73 73 3d 22 68 65 61 64 69 6e 67 22 20 70 61 72 74 3d 22 68 65 61 64 69 6e 67 22 20 61 72 69 61 2d 6c 65 76 65 6c 3d 22 32 22 20 72 6f 6c 65 3d 22 68 65 61 64 69 6e 67 22 3e 24 7b 65 3d 3e 65 2e 68 69 64 65 53 74 6f 72 79 54 69 74 6c 65 7d 3c 2f 73 70 61 6e 3e 3c 2f 73 6c 6f 74 3e 24 7b 28 30 2c 44 2e 67 29 28 28 65 3d 3e 65 2e 68 69 64 65 53 74 6f 72 79 53 75 62 74 69 74 6c 65 29 2c 52 2e 64 79 60 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 75 62 68 65 61 64 69 6e 67 22 20 70 61 72 74 3d 22 73 75 62 68 65 61 64 69 6e 67 22 3e 24 7b 65 3d 3e 65 2e 68 69 64 65 53 74 6f 72 79 53 75 62 74 69 74 6c 65 7d 3c 2f 73 70 61 6e 3e 60 29 7d 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 63 74 69 6f 6e 2d 72 65 67 69 Data Ascii: 000009F2 class="heading" part="heading" aria-level="2" role="heading">${e=>e.hideStoryTitle}</span></slot>${(0,D.g)((e=>e.hideStorySubtitle),R.dy`<span class="subheading" part="subheading">${e=>e.hideStorySubtitle}</span>`)}</div><div class="action-regi
2024-01-17 17:07:36 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.16	50089	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:36 UTC	653	OUT	GET /bundles/v1/edgeChromium/latest/publisher-subscribe-follow-button.c0e0939dcdddedb7068b.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:36 UTC	1149	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: UNFM5Vp0fFFYkhg6PGLhUQ== Last-Modified: Sat, 13 Jan 2024 01:22:16 GMT ETag: 0x8DC13D61484B6A8 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 9d479bbe-a01e-00f9-42bf-45bcf8000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:36 GMT Content-Length: 44812 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89895512,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=93, clienttt; dur=0, origin; dur=0 , cdntime; dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55bb258 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511256.55bb258 Vary: Origin
2024-01-17 17:07:36 UTC	15235	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 70 75 62 6c 69 73 68 65 72 2d 73 75 62 73 63 72 69 62 65 2d 66 6f 6c 6c 6f 77 2d 62 75 74 74 6f 6e 22 5d 2c 7b 32 35 33 38 35 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 6e 2e 72 28 65 29 2c 6e 2e 64 28 65 2c 7b 50 75 62 6c 69 73 68 65 72 53 75 62 73 63 72 69 62 65 46 6f 6c 6c 6f 77 42 75 74 74 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4a 7d 2c 50 75 62 6c 69 73 68 65 72 53 75 62 73 63 72 Data Ascii: "use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["publisher-subscribe-follow-button"],{25385:function(t,e,n){n.r(e),n.d(e,{PublisherSubscribeFollowButton:function(){return J},PublisherSubscr
2024-01-17 17:07:36 UTC	9341	IN	Data Raw: 74 6e 2d 66 67 2d 62 72 61 6e 64 2d 68 6f 76 65 72 3a 23 36 39 41 31 46 41 3b 2d 2d 61 74 74 72 69 62 2d 62 74 6e 2d 66 67 2d 6f 6e 62 72 61 6e 64 2d 72 65 73 74 3a 23 46 46 46 46 46 46 3b 2d 2d 61 74 74 72 69 62 2d 62 74 6e 2d 66 67 2d 6e 65 75 74 72 61 6c 2d 72 65 73 74 3a 23 46 46 46 46 46 46 3b 2d 2d 61 74 74 72 69 62 2d 62 74 6e 2d 66 67 2d 6e 65 75 74 72 61 6c 2d 68 6f 76 65 72 3a 23 46 46 46 46 46 46 3b 2d 2d 61 74 74 72 69 62 2d 62 74 6e 2d 62 67 2d 6e 65 75 74 72 61 6c 2d 72 65 73 74 3a 23 33 33 33 33 33 33 3b 2d 2d 61 74 74 72 69 62 2d 62 74 6e 2d 62 67 2d 6e 65 75 74 72 61 6c 2d 68 6f 76 65 72 3a 23 34 45 34 45 34 45 3b 2d 2d 61 74 74 72 69 62 2d 62 74 6e 2d 62 67 2d 6e 65 75 74 72 61 6c 2d 61 63 74 69 76 65 3a 23 33 30 33 30 33 30 3b 2d 2d 61 Data Ascii: tn-fg-brand-hover:#69A1FA;--attrib-btn-fg-onbrand-rest:#FFFFFF;--attrib-btn-fg-neutral-rest:#FFFFFF;--attrib-btn-fg-neutral-hover:#FFFFFF;--attrib-btn-bg-neutral-rest:#333333;--attrib-btn-bg-neutral-hover:#4E4E4E;--attrib-btn-bg-neutral-active:#303030;--a
2024-01-17 17:07:36 UTC	16384	IN	Data Raw: 3d 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 66 6f 6c 6c 6f 77 42 75 74 74 6f 6e 53 74 79 6c 65 3f 59 3a 74 68 69 73 2e 63 6f 6e 66 69 67 2e 65 6e 61 62 6c 65 46 69 6c 6c 44 65 73 69 67 6e 3f 27 3c 73 76 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 20 64 3d 22 6d 31 35 2e 30 33 31 20 32 20 2e 39 36 39 2e 39 36 31 4c 35 2e 32 37 20 31 33 2e 37 20 30 20 38 2e 34 33 6c 2e 39 36 39 2d 2e 39 36 39 20 34 2e 33 20 34 2e 33 4c 31 35 2e 30 33 31 20 32 7a 22 2f 3e 3c 2f 73 76 67 3e 27 3a 27 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 30 Data Ascii: ==this.config.followButtonStyle?Y:this.config.enableFillDesign?'<svg fill="none" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 16"><path fill="currentColor" d="m15.031 2 .969.961L5.27 13.7 0 8.43l.969-.969 4.3 4.3L15.031 2z"/></svg>':'<svg viewBox="0
2024-01-17 17:07:36 UTC	3852	IN	Data Raw: 22 61 72 74 69 63 6c 65 22 2c 74 2e 47 61 6c 6c 65 72 79 3d 22 73 6c 69 64 65 73 68 6f 77 22 2c 74 2e 56 69 64 65 6f 3d 22 76 69 64 65 6f 22 2c 74 2e 57 65 62 63 6f 6e 74 65 6e 74 3d 22 77 65 62 63 6f 6e 74 65 6e 74 22 7d 28 72 7c 7c 28 72 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 4d 61 6e 67 61 3d 22 6d 61 6e 67 61 22 7d 28 6f 7c 7c 28 6f 3d 7b 7d 29 29 3b 76 61 72 20 61 3d 6e 28 34 34 30 36 30 29 2c 6c 3d 6e 28 38 30 39 38 36 29 3b 61 2e 6a 47 2e 4e 61 76 54 61 72 67 65 74 55 72 6c 57 69 74 68 4c 6f 63 61 6c 65 2c 6c 2e 4b 2e 44 69 61 6c 6f 67 3b 63 6f 6e 73 74 20 73 3d 22 63 6f 6e 73 75 6d 70 74 69 6f 6e 2d 66 65 65 64 2d 63 6f 6d 6d 6f 6e 2d 68 65 61 64 65 72 22 2c 62 3d 22 6f 6d 22 2c 63 3d 22 74 65 73 74 4f 76 65 72 6c 61 79 4d 6f Data Ascii: "article",t.Gallery="slideshow",t.Video="video",t.Webcontent="webcontent"}(r\|\|(r={})),function(t){t.Manga="manga"}(o\|\|(o={}));var a=n(44060),l=n(80986);a.jG.NavTargetUrlWithLocale,l.K.Dialog;const s="consumption-feed-common-header",b="om",c="testOverlayMo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.16	50103	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:36 UTC	663	OUT	GET /tenant/amp/entityid/AA1e73r2.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:36 UTC	547	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Last-Modified: Wed, 17 Jan 2024 09:53:02 GMT X-Datacenter: eastus X-ActivityId: 7725310a-9a6d-45c4-8555-7050611cff81 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Type: image/jpeg Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA1e73r2?w=80&h=80&q=60&m=6&f=jpg&u=t X-Source-Length: 28273 Content-Length: 2048 Cache-Control: public, max-age=405777 Expires: Mon, 22 Jan 2024 09:50:33 GMT Date: Wed, 17 Jan 2024 17:07:36 GMT Connection: close
2024-01-17 17:07:36 UTC	2048	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 50 00 50 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOPP}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.16	50095	52.182.143.211	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:36 UTC	1048	OUT	POST /OneCollector/1.0?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1705511254164&w=0&anoncknm=app_anon&NoResponseBody=true HTTP/1.1 Host: browser.events.data.msn.com Connection: keep-alive Content-Length: 19199 sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; _SS=SID=00; _C_ETH=1
2024-01-17 17:07:36 UTC	16384	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 4c 6f 61 64 54 69 6d 65 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 30 31 2d 31 37 54 31 37 3a 30 37 3a 33 34 2e 31 36 31 5a 22 2c 22 76 65 72 22 3a 22 34 2e 30 22 2c 22 69 4b 65 79 22 3a 22 6f 3a 30 64 65 64 36 30 63 37 35 65 34 34 34 34 33 61 61 33 34 38 34 63 34 32 63 31 63 34 33 66 65 38 22 2c 22 65 78 74 22 3a 7b 22 73 64 6b 22 3a 7b 22 76 65 72 22 3a 22 31 44 53 2d 57 65 62 2d 4a 53 2d 33 2e 32 2e 38 22 2c 22 73 65 71 22 3a 32 2c 22 69 6e 73 74 61 6c 6c 49 64 22 3a 22 39 31 64 35 37 31 39 38 2d 66 37 38 37 2d 34 66 35 39 2d 38 61 30 37 2d 64 34 35 39 64 38 32 31 34 35 34 63 22 2c 22 65 70 6f 63 68 22 3a 22 31 31 31 36 32 33 39 39 30 38 22 7d 2c 22 61 70 70 22 3a 7b 22 6c 6f 63 61 6c 65 Data Ascii: {"name":"MS.News.Web.LoadTime","time":"2024-01-17T17:07:34.161Z","ver":"4.0","iKey":"o:0ded60c75e44443aa3484c42c1c43fe8","ext":{"sdk":{"ver":"1DS-Web-JS-3.2.8","seq":2,"installId":"91d57198-f787-4f59-8a07-d459d821454c","epoch":"1116239908"},"app":{"locale
2024-01-17 17:07:36 UTC	2815	OUT	Data Raw: 64 44 65 70 65 6e 64 65 6e 63 79 2e 65 6e 64 3a 64 75 72 61 74 69 6f 6e 22 3a 33 32 38 2e 32 30 30 30 30 30 30 30 30 30 31 31 36 34 2c 22 57 70 6f 2e 54 72 65 61 74 6d 65 6e 74 73 2e 53 74 6f 72 65 49 6e 69 74 22 3a 34 30 37 35 2c 22 57 70 6f 2e 54 72 65 61 74 6d 65 6e 74 73 2e 50 61 72 73 65 64 22 3a 34 30 37 35 2c 22 57 70 6f 2e 54 72 65 61 74 6d 65 6e 74 73 2e 53 74 6f 72 65 64 22 3a 34 30 37 35 2c 22 46 69 72 73 74 53 65 63 74 69 6f 6e 52 65 6e 64 65 72 53 74 61 72 74 22 3a 34 30 37 38 2c 22 77 61 69 74 46 6f 72 41 64 52 65 73 70 6f 6e 73 65 53 74 61 72 74 22 3a 34 30 39 35 2c 22 67 72 69 64 2d 76 69 65 77 2d 66 65 65 64 3a 68 79 64 72 61 74 69 6f 6e 2e 73 65 6c 66 48 79 64 72 61 74 69 6f 6e 43 6f 6d 70 6c 65 74 65 3a 64 75 72 61 74 69 6f 6e 22 3a 37 Data Ascii: dDependency.end:duration":328.20000000001164,"Wpo.Treatments.StoreInit":4075,"Wpo.Treatments.Parsed":4075,"Wpo.Treatments.Stored":4075,"FirstSectionRenderStart":4078,"waitForAdResponseStart":4095,"grid-view-feed:hydration.selfHydrationComplete:duration":7
2024-01-17 17:07:36 UTC	890	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: MC1=GUID=f0c4cd1b4a9149f08f4865240c468d1e&HASH=f0c4&LV=202401&V=4&LU=1705511256441; Domain=.microsoft.com; Expires=Thu, 16 Jan 2025 17:07:36 GMT; Path=/;Secure; SameSite=None Set-Cookie: MS0=9970f466420f4ae18fd4b908fc6528cb; Domain=.microsoft.com; Expires=Wed, 17 Jan 2024 17:37:36 GMT; Path=/;Secure; SameSite=None time-delta-millis: 2277 Access-Control-Allow-Headers: P3P,Set-Cookie,time-delta-millis Access-Control-Allow-Methods: POST Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com Access-Control-Expose-Headers: time-delta-millis Date: Wed, 17 Jan 2024 17:07:35 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.16	50106	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:36 UTC	663	OUT	GET /tenant/amp/entityid/AA163low.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:36 UTC	547	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA163low?w=80&h=80&q=60&m=6&f=jpg&u=t Last-Modified: Thu, 11 Jan 2024 12:02:16 GMT X-Source-Length: 13484 X-Datacenter: eastus X-ActivityId: 501e9961-cb8a-4c81-926d-e39bd2482594 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 2048 Cache-Control: public, max-age=283920 Expires: Sat, 20 Jan 2024 23:59:36 GMT Date: Wed, 17 Jan 2024 17:07:36 GMT Connection: close
2024-01-17 17:07:36 UTC	2048	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 50 00 50 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOPP}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.16	50105	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:36 UTC	663	OUT	GET /tenant/amp/entityid/AA1a2iS9.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:36 UTC	547	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA1a2iS9?w=80&h=80&q=60&m=6&f=jpg&u=t Last-Modified: Mon, 15 Jan 2024 12:23:26 GMT X-Source-Length: 61621 X-Datacenter: westus X-ActivityId: aea26b3f-5b31-4e06-9001-73f3847ff2b5 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 2048 Cache-Control: public, max-age=242115 Expires: Sat, 20 Jan 2024 12:22:51 GMT Date: Wed, 17 Jan 2024 17:07:36 GMT Connection: close
2024-01-17 17:07:36 UTC	2048	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 50 00 50 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOPP}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.16	50093	52.182.143.211	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:36 UTC	1047	OUT	POST /OneCollector/1.0?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1705511254237&w=0&anoncknm=app_anon&NoResponseBody=true HTTP/1.1 Host: browser.events.data.msn.com Connection: keep-alive Content-Length: 8572 sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; _SS=SID=00; _C_ETH=1
2024-01-17 17:07:36 UTC	8572	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 41 70 70 45 72 72 6f 72 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 30 31 2d 31 37 54 31 37 3a 30 37 3a 33 34 2e 32 33 32 5a 22 2c 22 76 65 72 22 3a 22 34 2e 30 22 2c 22 69 4b 65 79 22 3a 22 6f 3a 30 64 65 64 36 30 63 37 35 65 34 34 34 34 33 61 61 33 34 38 34 63 34 32 63 31 63 34 33 66 65 38 22 2c 22 65 78 74 22 3a 7b 22 73 64 6b 22 3a 7b 22 76 65 72 22 3a 22 31 44 53 2d 57 65 62 2d 4a 53 2d 33 2e 32 2e 38 22 2c 22 73 65 71 22 3a 33 2c 22 69 6e 73 74 61 6c 6c 49 64 22 3a 22 39 31 64 35 37 31 39 38 2d 66 37 38 37 2d 34 66 35 39 2d 38 61 30 37 2d 64 34 35 39 64 38 32 31 34 35 34 63 22 2c 22 65 70 6f 63 68 22 3a 22 31 31 31 36 32 33 39 39 30 38 22 7d 2c 22 61 70 70 22 3a 7b 22 6c 6f 63 61 6c 65 Data Ascii: {"name":"MS.News.Web.AppError","time":"2024-01-17T17:07:34.232Z","ver":"4.0","iKey":"o:0ded60c75e44443aa3484c42c1c43fe8","ext":{"sdk":{"ver":"1DS-Web-JS-3.2.8","seq":3,"installId":"91d57198-f787-4f59-8a07-d459d821454c","epoch":"1116239908"},"app":{"locale
2024-01-17 17:07:36 UTC	890	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: MC1=GUID=9acca90b052c444aa8a874d63750dbce&HASH=9acc&LV=202401&V=4&LU=1705511256443; Domain=.microsoft.com; Expires=Thu, 16 Jan 2025 17:07:36 GMT; Path=/;Secure; SameSite=None Set-Cookie: MS0=efa45c8d52414011b62e4cb44597f041; Domain=.microsoft.com; Expires=Wed, 17 Jan 2024 17:37:36 GMT; Path=/;Secure; SameSite=None time-delta-millis: 2206 Access-Control-Allow-Headers: P3P,Set-Cookie,time-delta-millis Access-Control-Allow-Methods: POST Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com Access-Control-Expose-Headers: time-delta-millis Date: Wed, 17 Jan 2024 17:07:35 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.16	50099	68.67.179.87	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:36 UTC	665	OUT	GET /getuid?https://c.bing.com/c.gif?anx_uid=$UID&Red3=MSAN_pd&gdpr=0&gdpr_consent= HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:36 UTC	1302	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Wed, 17 Jan 2024 17:07:36 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Set-Cookie: XANDR_PANID=AMF5BzG0c98h7ITTneAaVFNcIOAH2caroG7o2-nOVrrsu-W9ZiwfkE4-hluZSzDfJK-rx-EhSsoxcQY7Vt275KSNSpotjIGiRcAbCm5Vphs.; SameSite=None; Path=/; Max-Age=314496000; Domain=.adnxs.com; Secure; Partitioned Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fc.bing.com%2Fc.gif%3Fanx_uid%3D%24UID%26Red3%3DMSAN_pd%26gdpr%3D0%26gdpr_consent%3D AN-X-Request-Uuid: 91721910-699f-4348-a246-a5777191dc0b Set-Cookie: uuid2=5253291415427901022; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 16-Apr-2024 17:07:36 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 154.16.192.193; 154.16.192.193; 585.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.16	50102	20.127.253.7	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:36 UTC	641	OUT	GET /oRTB?redirect={PubRedirectUrl}&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.inmobi.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:36 UTC	808	IN	HTTP/1.1 302 Found Date: Wed, 17 Jan 2024 17:07:36 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 85 Connection: close Content-Security-Policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests X-DNS-Prefetch-Control: off Expect-CT: max-age=0 X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: no-referrer X-XSS-Protection: 0 Location: https://id5-sync.com/i/495/0.gif?gdpr_consent=&gdpr=0&callback= Vary: Accept
2024-01-17 17:07:36 UTC	85	IN	Data Raw: 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 69 2f 34 39 35 2f 30 2e 67 69 66 3f 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 67 64 70 72 3d 30 26 63 61 6c 6c 62 61 63 6b 3d Data Ascii: Found. Redirecting to https://id5-sync.com/i/495/0.gif?gdpr_consent=&gdpr=0&callback=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.16	50097	35.208.249.213	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:36 UTC	654	OUT	GET /cs/msn?id=2136D0069C246D353F30C40F9D676C20&gdpr=0&gdpr_consent= HTTP/1.1 Host: trace.mediago.io Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:36 UTC	291	IN	HTTP/1.1 200 OK Set-Cookie: __mguid_=9ce22a85b772ad80127nus00lri1d7td; Path=/; Domain=mediago.io; Max-Age=31536000; Secure; SameSite=None Date: Wed, 17 Jan 2024 17:07:36 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.16	50104	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:36 UTC	662	OUT	GET /tenant/amp/entityid/AAtJV1E.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:36 UTC	547	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Last-Modified: Sat, 13 Jan 2024 23:03:12 GMT X-Datacenter: westus X-ActivityId: 84235d42-f5f2-43c1-86d7-4e93822bb881 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Type: image/jpeg Content-Location: https://img.s-msn.com/tenant/amp/entityid/AAtJV1E?w=80&h=80&q=60&m=6&f=jpg&u=t X-Source-Length: 103183 Content-Length: 2048 Cache-Control: public, max-age=107767 Expires: Thu, 18 Jan 2024 23:03:43 GMT Date: Wed, 17 Jan 2024 17:07:36 GMT Connection: close
2024-01-17 17:07:36 UTC	2048	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 50 00 50 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOPP}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.16	50100	68.67.179.153	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:36 UTC	873	OUT	GET /mapuid?member=280&user=2136D0069C246D353F30C40F9D676C20;&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fm.adnxs.com%2Fseg%3Fadd%3D5159620%26redir%3Dhttps%253A%252F%252Fib.adnxs.com%252Fsetuid%253Fentity%253D483%2526code%253D2136D0069C246D353F30C40F9D676C20%2526gdpr%253D0%2526gdpr_consent%253D HTTP/1.1 Host: m.adnxs.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:36 UTC	1472	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Wed, 17 Jan 2024 17:07:36 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Set-Cookie: XANDR_PANID=oySA8MClCQH7vbMGE-366hkJmbFF6sBQH8b7tCh0g9T614FCL8E5Som0MfPdgTlsxXNw_Sx_8x7bw3Qqglqc7uoVjzYt5aQCvo8EqByReEU.; SameSite=None; Path=/; Max-Age=314496000; Domain=.adnxs.com; Secure; Partitioned Location: https://m.adnxs.com/bounce?%2Fmapuid%3Fmember%3D280%26user%3D2136D0069C246D353F30C40F9D676C20%3B%26gdpr%3D0%26gdpr_consent%3D%26redir%3Dhttps%253A%252F%252Fm.adnxs.com%252Fseg%253Fadd%253D5159620%2526redir%253Dhttps%25253A%25252F%25252Fib.adnxs.com%25252Fsetuid%25253Fentity%25253D483%252526code%25253D2136D0069C246D353F30C40F9D676C20%252526gdpr%25253D0%252526gdpr_consent%25253D AN-X-Request-Uuid: 9e7cf340-c5cb-4ea0-a2a0-aa8fb009603b Set-Cookie: uuid2=6324846154276582513; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 16-Apr-2024 17:07:36 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 154.16.192.193; 154.16.192.193; 570.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.16	50108	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:36 UTC	663	OUT	GET /tenant/amp/entityid/AA1e8B7k.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:36 UTC	547	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Last-Modified: Sun, 14 Jan 2024 20:51:18 GMT X-Datacenter: eastap X-ActivityId: 4a86e778-2c4b-44a4-ae21-55a0adae5151 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Type: image/jpeg Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA1e8B7k?w=80&h=80&q=60&m=6&f=jpg&u=t X-Source-Length: 19954 Content-Length: 2048 Cache-Control: public, max-age=186153 Expires: Fri, 19 Jan 2024 20:50:09 GMT Date: Wed, 17 Jan 2024 17:07:36 GMT Connection: close
2024-01-17 17:07:36 UTC	2048	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 50 00 50 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOPP}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.16	50110	13.107.246.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:36 UTC	581	OUT	GET /shared/edgeweb/d9be31d.js HTTP/1.1 Host: edgestatic.azureedge.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:37 UTC	801	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:37 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 184330 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable ETag: W/"2d00a-18cfea0b136" Last-Modified: Fri, 12 Jan 2024 17:03:13 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Origin-Agent-Cluster: ?1 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 x-azure-ref: 20240117T170736Z-sn0wsw5q9t1n3eud0zfxs8tt3n00000000sg0000000062yg X-Cache: TCP_MISS x-fd-int-roxy-purgeid: 0 Accept-Ranges: bytes
2024-01-17 17:07:37 UTC	15583	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 30 5d 2c 7b 31 30 37 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 28 38 36 35 29 7d 2c 31 30 38 36 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 65 78 70 6f 72 74 73 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 27 7b 22 65 6e 2d 75 73 22 3a 7b 22 6d 61 6e 61 67 65 2d 63 6f 6f 6b 69 65 73 22 3a 22 4d 61 6e 61 67 65 20 63 6f 6f 6b 69 65 73 22 7d 2c 22 61 66 2d 7a 61 22 3a 7b 22 6d 61 6e 61 67 65 2d 63 6f 6f 6b 69 65 73 22 3a 22 42 65 73 74 75 75 72 20 6b 6f 65 6b 69 65 73 22 7d 2c 22 61 6d 2d 65 74 22 3a 7b 22 6d 61 6e 61 67 65 2d 63 6f 6f 6b 69 65 73 22 3a 22 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[0],{1077:function(e,o,t){"use strict";t(865)},1086:function(e){e.exports=JSON.parse('{"en-us":{"manage-cookies":"Manage cookies"},"af-za":{"manage-cookies":"Bestuur koekies"},"am-et":{"manage-cookies":"
2024-01-17 17:07:37 UTC	16384	IN	Data Raw: 7b 6d 69 78 69 6e 73 3a 5b 42 5d 2c 69 31 38 6e 3a 7b 6d 65 73 73 61 67 65 73 3a 4c 2e 61 7d 2c 70 72 6f 70 73 3a 7b 76 61 72 69 61 6e 74 3a 7b 74 79 70 65 3a 53 74 72 69 6e 67 7d 7d 2c 63 6f 6d 70 75 74 65 64 3a 7b 70 69 6e 55 72 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 70 69 6e 55 72 6c 7d 2c 70 69 6e 54 69 74 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 70 69 6e 54 69 74 6c 65 7d 2c 70 69 6e 46 6f 72 52 65 77 61 72 Data Ascii: {mixins:[B],i18n:{messages:L.a},props:{variant:{type:String}},computed:{pinUrl:function(){var e;return null===(e=this.options)\|\|void 0===e?void 0:e.pinUrl},pinTitle:function(){var e;return null===(e=this.options)\|\|void 0===e?void 0:e.pinTitle},pinForRewar
2024-01-17 17:07:37 UTC	16384	IN	Data Raw: 29 7b 63 61 73 65 20 30 3a 69 66 28 21 28 72 3d 6e 75 6c 6c 3d 3d 3d 28 74 3d 77 69 6e 64 6f 77 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 63 68 72 6f 6d 65 29 29 7b 6f 2e 6e 65 78 74 3d 31 35 3b 62 72 65 61 6b 7d 69 66 28 6e 75 6c 6c 3d 3d 3d 28 6e 3d 72 2e 65 64 67 65 4d 61 72 6b 65 74 69 6e 67 50 61 67 65 50 72 69 76 61 74 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 7c 7c 21 6e 2e 70 65 72 66 6f 72 6d 41 63 74 69 6f 6e 29 7b 6f 2e 6e 65 78 74 3d 31 34 3b 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 6f 2e 6e 65 78 74 3d 35 2c 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 72 79 7b 72 2e 65 64 67 65 4d 61 72 6b 65 74 69 6e 67 50 61 67 65 50 72 69 76 61 74 65 2e 70 65 72 66 6f 72 6d 41 63 74 69 6f 6e 28 22 Data Ascii: ){case 0:if(!(r=null===(t=window)\|\|void 0===t?void 0:t.chrome)){o.next=15;break}if(null===(n=r.edgeMarketingPagePrivate)\|\|void 0===n\|\|!n.performAction){o.next=14;break}return o.next=5,new Promise((function(e){try{r.edgeMarketingPagePrivate.performAction("
2024-01-17 17:07:37 UTC	16384	IN	Data Raw: 67 65 20 d9 85 d8 b2 d8 a7 d9 85 d9 86 d8 a9 20 d8 a7 d9 84 d8 a5 d8 b4 d8 a7 d8 b1 d8 a7 d8 aa 20 d8 a7 d9 84 d9 85 d8 b1 d8 ac d8 b9 d9 8a d8 a9 20 d9 88 d9 83 d9 84 d9 85 d8 a7 d8 aa 20 d8 a7 d9 84 d9 85 d8 b1 d9 88 d8 b1 20 d9 88 d8 a7 d9 84 d8 a5 d8 b9 d8 af d8 a7 d8 af d8 a7 d8 aa 20 d8 aa d9 84 d9 82 d8 a7 d8 a6 d9 8a d8 a7 20 d9 85 d9 86 20 d8 a7 d9 84 d9 85 d8 b3 d8 aa d8 b9 d8 b1 d8 b6 d8 a7 d8 aa 20 d8 a7 d9 84 d8 a3 d8 ae d8 b1 d9 89 20 d9 84 d9 84 d8 ad d8 b5 d9 88 d9 84 20 d8 b9 d9 84 d9 89 20 d8 aa d8 ac d8 b1 d8 a8 d8 a9 20 d8 a7 d8 b3 d8 aa d8 b9 d8 b1 d8 a7 d8 b6 20 d9 85 d8 a3 d9 84 d9 88 d9 81 d8 a9 20 d9 85 d8 af d8 b9 d9 88 d9 85 d8 a9 20 d8 a8 d8 a7 d9 84 d8 a3 d8 af d8 a7 d8 a1 20 d8 a7 d9 84 d9 82 d9 88 d9 8a 20 d9 88 d9 85 d9 8a Data Ascii: ge
2024-01-17 17:07:37 UTC	16384	IN	Data Raw: 6f 6e 20 74 75 6f 74 75 20 73 61 75 6d 61 74 74 6f 6d 61 6e 20 73 65 6c 61 75 73 6b 6f 6b 65 6d 75 6b 73 65 6e 20 74 61 6b 61 61 6d 69 73 65 6b 73 69 2e 20 56 6f 69 74 20 68 61 6c 6c 69 74 61 20 74 75 6f 6e 74 69 61 73 65 74 75 6b 73 69 61 20 41 73 65 74 75 6b 73 69 73 73 61 2e 22 7d 2c 22 66 69 6c 2d 70 68 22 3a 7b 22 63 6c 69 63 6b 2d 69 6d 70 6f 72 74 2d 79 6f 75 72 2d 64 61 74 61 2d 74 6f 2d 63 68 6f 6f 73 65 2d 77 68 61 74 2d 74 6f 2d 69 6d 70 6f 72 74 22 3a 22 49 2d 63 6c 69 63 6b 20 61 6e 67 20 5c 5c 22 49 2d 69 6d 70 6f 72 74 20 61 6e 67 20 69 79 6f 6e 67 20 64 61 74 61 5c 5c 22 20 70 61 72 61 20 70 69 6c 69 69 6e 20 6b 75 6e 67 20 61 6e 6f 20 61 6e 67 20 69 69 2d 69 6d 70 6f 72 74 20 2d 20 70 61 6c 61 67 69 20 6b 61 6e 67 20 6d 61 79 20 6b 6f 6e Data Ascii: on tuotu saumattoman selauskokemuksen takaamiseksi. Voit hallita tuontiasetuksia Asetuksissa."},"fil-ph":{"click-import-your-data-to-choose-what-to-import":"I-click ang \\"I-import ang iyong data\\" para piliin kung ano ang ii-import - palagi kang may kon
2024-01-17 17:07:37 UTC	16384	IN	Data Raw: 9e 80 e1 9e b6 e1 9e 9b e1 9e 80 e1 9e 98 e1 9f 92 e1 9e 98 20 e1 9e 85 e1 9f 86 e1 9e 8e e1 9e b6 e1 9f 86 20 e1 9e 96 e1 9e b6 e1 9e 80 e1 9f 92 e1 9e 99 e1 9e 9f e1 9e 98 e1 9f 92 e1 9e 84 e1 9e b6 e1 9e 8f e1 9f 8b 20 e1 9e 93 e1 9e b7 e1 9e 84 e1 9e 80 e1 9e b6 e1 9e 9a e1 9e 80 e1 9f 86 e1 9e 8e e1 9e 8f e1 9f 8b e1 9e 9a e1 9e 94 e1 9e 9f e1 9f 8b e1 9e a2 e1 9f 92 e1 9e 93 e1 9e 80 e1 9e 8a e1 9f 84 e1 9e 99 e1 9e 9f e1 9f 92 e1 9e 9c e1 9f 90 e1 9e 99 e1 9e 94 e1 9f 92 e1 9e 9a e1 9e 9c e1 9e 8f e1 9f 92 e1 9e 8f e1 9e b7 e1 9e 96 e1 9e b8 e1 9e 80 e1 9e 98 e1 9f 92 e1 9e 98 e1 9e 9c e1 9e b7 e1 9e 92 e1 9e b8 e1 9e 9a e1 9e bb e1 9e 80 e1 9e 9a e1 9e 80 e1 9e 95 e1 9f 92 e1 9e 9f e1 9f 81 e1 9e 84 e1 9e 91 e1 9f 80 e1 9e 8f e2 80 8b e1 9e 9f e1 Data Ascii:
2024-01-17 17:07:37 UTC	16384	IN	Data Raw: 73 20 65 6e 20 74 69 6a 64 62 65 73 70 61 72 65 6e 64 65 20 66 75 6e 63 74 69 65 73 20 76 61 6e 20 4d 69 63 72 6f 73 6f 66 74 2e 22 2c 22 73 68 61 72 65 64 2d 6c 65 61 72 6e 4d 6f 72 65 22 3a 22 4c 65 65 73 20 6d 65 65 72 22 2c 22 79 6f 75 72 2d 62 72 6f 77 73 69 6e 67 2d 64 61 74 61 2d 68 61 73 2d 62 65 65 6e 2d 69 6d 70 6f 72 74 65 64 2d 66 6f 72 2d 61 22 3a 22 55 77 20 62 72 6f 77 73 65 67 65 67 65 76 65 6e 73 20 7a 69 6a 6e 20 67 65 c3 af 6d 70 6f 72 74 65 65 72 64 20 76 6f 6f 72 20 65 65 6e 20 6e 61 61 64 6c 6f 7a 65 20 62 72 6f 77 73 65 2d 65 72 76 61 72 69 6e 67 2e 20 55 20 6b 75 6e 74 20 75 77 20 69 6d 70 6f 72 74 6f 70 74 69 65 73 20 62 65 68 65 72 65 6e 20 69 6e 20 49 6e 73 74 65 6c 6c 69 6e 67 65 6e 2e 22 7d 2c 22 6e 6e 2d 6e 6f 22 3a 7b 22 63 Data Ascii: s en tijdbesparende functies van Microsoft.","shared-learnMore":"Lees meer","your-browsing-data-has-been-imported-for-a":"Uw browsegegevens zijn gemporteerd voor een naadloze browse-ervaring. U kunt uw importopties beheren in Instellingen."},"nn-no":{"c
2024-01-17 17:07:37 UTC	16384	IN	Data Raw: ae b0 e0 af 81 e0 ae a8 e0 af 8d e0 ae a4 e0 af 81 20 e0 ae 89 e0 ae 99 e0 af 8d e0 ae 95 e0 ae b3 e0 af 8d 20 e0 ae 85 e0 ae 9f e0 af 88 e0 ae af e0 ae be e0 ae b3 e0 ae 95 e0 af 8d e0 ae 95 e0 af 81 e0 ae b1 e0 ae bf e0 ae 95 e0 ae b3 e0 af 8d 2c 20 e0 ae 95 e0 ae 9f e0 ae b5 e0 af 81 e0 ae 9a e0 af 8d e0 ae 9a e0 af 8a e0 ae b1 e0 af 8d e0 ae 95 e0 ae b3 e0 af 8d 20 e0 ae ae e0 ae b1 e0 af 8d e0 ae b1 e0 af 81 e0 ae ae e0 af 8d 20 e0 ae 85 e0 ae ae e0 af 88 e0 ae aa e0 af 8d e0 ae aa e0 af 81 e0 ae 95 e0 ae b3 e0 af 88 e0 ae a4 e0 af 8d 20 e0 ae a4 e0 ae be e0 ae a9 e0 ae be e0 ae 95 e0 ae b5 e0 af 87 20 e0 ae 92 e0 ae a4 e0 af 8d e0 ae a4 e0 ae bf e0 ae 9a e0 af 88 e0 ae 95 e0 af 8d e0 ae 95 e0 ae b2 e0 ae be e0 ae ae e0 af 8d 2e 22 2c 22 73 68 61 72 Data Ascii: , .","shar
2024-01-17 17:07:37 UTC	16384	IN	Data Raw: 69 74 69 76 6f 20 6d c3 b3 76 69 6c 20 70 61 72 61 20 65 73 63 61 6e 65 61 72 20 65 6c 20 73 69 67 75 69 65 6e 74 65 20 63 c3 b3 64 69 67 6f 20 51 52 20 70 61 72 61 20 6f 62 74 65 6e 65 72 20 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 20 70 61 72 61 20 64 69 73 70 6f 73 69 74 69 76 6f 73 20 6d c3 b3 76 69 6c 65 73 2e 22 2c 22 68 6f 6d 65 2d 73 6c 69 64 65 73 2d 67 65 74 73 74 61 72 74 65 64 2d 66 65 61 74 75 72 65 41 76 61 69 6c 61 62 69 6c 69 74 79 22 3a 22 4c 61 20 64 69 73 70 6f 6e 69 62 69 6c 69 64 61 64 20 64 65 20 6c 61 73 20 63 61 72 61 63 74 65 72 c3 ad 73 74 69 63 61 73 20 70 75 65 64 65 20 64 69 66 65 72 69 72 20 65 6e 20 64 69 73 70 6f 73 69 74 69 76 6f 73 20 6d c3 b3 76 69 6c 65 73 22 7d 2c 22 65 73 2d 6d 78 22 3a 7b 22 68 6f 6d 65 2d 73 6c 69 Data Ascii: itivo mvil para escanear el siguiente cdigo QR para obtener Microsoft Edge para dispositivos mviles.","home-slides-getstarted-featureAvailability":"La disponibilidad de las caractersticas puede diferir en dispositivos mviles"},"es-mx":{"home-sli
2024-01-17 17:07:37 UTC	16384	IN	Data Raw: 83 e0 b7 8a e0 b6 9a e0 b7 91 e0 b6 b1 e0 b7 8a 20 e0 b6 9a e0 b7 92 e0 b6 bb e0 b7 93 e0 b6 b8 e0 b6 a7 20 e0 b6 94 e0 b6 b6 e0 b7 9a 20 e0 b6 a2 e0 b6 82 e0 b6 9c e0 b6 b8 20 e0 b6 8b e0 b6 b4 e0 b7 8f e0 b6 82 e0 b6 9c e0 b6 ba 20 e0 b6 b7 e0 b7 8f e0 b7 80 e0 b7 92 e0 b6 ad 20 e0 b6 9a e0 b6 bb e0 b6 b1 e0 b7 8a e0 b6 b1 2e 22 2c 22 68 6f 6d 65 2d 73 6c 69 64 65 73 2d 67 65 74 73 74 61 72 74 65 64 2d 66 65 61 74 75 72 65 41 76 61 69 6c 61 62 69 6c 69 74 79 22 3a 22 e0 b6 a2 e0 b6 82 e0 b6 9c e0 b6 b8 20 e0 b6 8b e0 b6 b4 e0 b7 8f e0 b6 82 e0 b6 9c e0 b6 ba 20 e0 b6 b8 e0 b6 ad 20 e0 b7 80 e0 b7 92 e0 b7 81 e0 b7 9a e0 b7 82 e0 b7 8f e0 b6 82 e0 b6 9c 20 e0 b6 bd e0 b7 90 e0 b6 b6 e0 b7 93 e0 b6 b8 20 e0 b7 80 e0 b7 99 e0 b6 b1 e0 b7 83 e0 b7 8a 20 e0 Data Ascii: .","home-slides-getstarted-featureAvailability":"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.16	50111	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:36 UTC	640	OUT	GET /bundles/v1/edgeChromium/latest/super-nav-coach-mark.5cb7eb9eada750e1f168.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ntp.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:36 UTC	1148	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: TYt0uvdcRnC8CP7OGyMX0g== Last-Modified: Mon, 08 Jan 2024 16:46:15 GMT ETag: 0x8DC1069544992C3 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 30718372-301e-0080-5652-423deb000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:36 GMT Content-Length: 7502 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89895967,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=1, origin; dur=0 , cdntime; dur=1 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55bb41f Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511256.55bb41f Vary: Origin
2024-01-17 17:07:36 UTC	7502	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 75 70 65 72 2d 6e 61 76 2d 63 6f 61 63 68 2d 6d 61 72 6b 22 5d 2c 7b 39 31 32 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 53 6f 63 69 61 6c 42 61 72 43 6f 61 63 68 6d 61 72 6b 4d 61 6e 61 67 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 7d 7d 29 3b 76 61 72 20 6f 3d 6e 28 34 34 38 38 37 29 2c 69 3d 6e 28 34 34 36 33 33 29 2c 61 3d 6e 28 33 Data Ascii: "use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["super-nav-coach-mark"],{91243:function(e,t,n){n.r(t),n.d(t,{SocialBarCoachmarkManager:function(){return w}});var o=n(44887),i=n(44633),a=n(3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.16	50101	52.182.143.211	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:36 UTC	1048	OUT	POST /OneCollector/1.0?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1705511255251&w=0&anoncknm=app_anon&NoResponseBody=true HTTP/1.1 Host: browser.events.data.msn.com Connection: keep-alive Content-Length: 14802 sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; _SS=SID=00; _C_ETH=1
2024-01-17 17:07:36 UTC	14802	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 43 6f 6e 74 65 6e 74 56 69 65 77 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 30 31 2d 31 37 54 31 37 3a 30 37 3a 33 35 2e 32 34 33 5a 22 2c 22 76 65 72 22 3a 22 34 2e 30 22 2c 22 69 4b 65 79 22 3a 22 6f 3a 30 64 65 64 36 30 63 37 35 65 34 34 34 34 33 61 61 33 34 38 34 63 34 32 63 31 63 34 33 66 65 38 22 2c 22 65 78 74 22 3a 7b 22 73 64 6b 22 3a 7b 22 76 65 72 22 3a 22 31 44 53 2d 57 65 62 2d 4a 53 2d 33 2e 32 2e 38 22 2c 22 73 65 71 22 3a 34 2c 22 69 6e 73 74 61 6c 6c 49 64 22 3a 22 39 31 64 35 37 31 39 38 2d 66 37 38 37 2d 34 66 35 39 2d 38 61 30 37 2d 64 34 35 39 64 38 32 31 34 35 34 63 22 2c 22 65 70 6f 63 68 22 3a 22 31 31 31 36 32 33 39 39 30 38 22 7d 2c 22 61 70 70 22 3a 7b 22 6c 6f 63 Data Ascii: {"name":"MS.News.Web.ContentView","time":"2024-01-17T17:07:35.243Z","ver":"4.0","iKey":"o:0ded60c75e44443aa3484c42c1c43fe8","ext":{"sdk":{"ver":"1DS-Web-JS-3.2.8","seq":4,"installId":"91d57198-f787-4f59-8a07-d459d821454c","epoch":"1116239908"},"app":{"loc
2024-01-17 17:07:36 UTC	890	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: MC1=GUID=bbc2ad86b4584e53aec134a78ebd3858&HASH=bbc2&LV=202401&V=4&LU=1705511256575; Domain=.microsoft.com; Expires=Thu, 16 Jan 2025 17:07:36 GMT; Path=/;Secure; SameSite=None Set-Cookie: MS0=6f393224310340c7bb11c0a5f7cd1604; Domain=.microsoft.com; Expires=Wed, 17 Jan 2024 17:37:36 GMT; Path=/;Secure; SameSite=None time-delta-millis: 1324 Access-Control-Allow-Headers: P3P,Set-Cookie,time-delta-millis Access-Control-Allow-Methods: POST Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com Access-Control-Expose-Headers: time-delta-millis Date: Wed, 17 Jan 2024 17:07:36 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.16	50109	13.107.246.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:36 UTC	581	OUT	GET /shared/edgeweb/5543c8e.js HTTP/1.1 Host: edgestatic.azureedge.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:36 UTC	779	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:36 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 19796 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable ETag: W/"4d54-18cfea0b6c5" Last-Modified: Fri, 12 Jan 2024 17:03:14 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Origin-Agent-Cluster: ?1 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 x-azure-ref: 20240117T170736Z-14vrm4t1bh19d0n53awa60u4dw00000000a000000000177z X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-01-17 17:07:36 UTC	15605	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 35 5d 2c 7b 31 31 35 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6f 28 39 33 30 29 7d 2c 31 31 35 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6f 28 39 33 37 29 7d 2c 31 35 37 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6f 2e 72 28 74 29 3b 6f 28 31 33 29 2c 6f 28 37 29 2c 6f 28 32 29 2c 6f 28 32 30 29 2c 6f 28 31 32 29 2c 6f 28 32 31 29 3b 76 61 72 20 6e 3d 6f 28 35 29 2c 72 3d 6f 28 33 29 2c 63 3d 28 6f 28 34 33 29 2c 6f 28 31 30 29 2c 6f 28 34 30 29 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[85],{1155:function(e,t,o){"use strict";o(930)},1156:function(e,t,o){"use strict";o(937)},1571:function(e,t,o){"use strict";o.r(t);o(13),o(7),o(2),o(20),o(12),o(21);var n=o(5),r=o(3),c=(o(43),o(10),o(40)
2024-01-17 17:07:36 UTC	4191	IN	Data Raw: 61 72 69 61 6e 74 3d 49 7d 29 29 7d 29 29 7d 72 2e 61 2e 69 73 41 63 74 69 76 65 28 74 2c 22 65 34 31 34 22 29 26 26 72 2e 61 2e 6d 6f 64 69 66 79 53 65 63 74 69 6f 6e 73 28 6c 2c 22 69 6e 74 72 6f 22 2c 28 66 75 6e 63 74 69 6f 6e 28 73 65 63 74 69 6f 6e 29 7b 73 65 63 74 69 6f 6e 2e 68 65 61 64 69 6e 67 4d 65 64 69 61 2e 76 61 72 69 61 6e 74 3d 22 6c 69 6e 6b 73 22 7d 29 29 2c 72 2e 61 2e 69 73 41 63 74 69 76 65 28 74 2c 22 65 34 31 35 22 29 26 26 72 2e 61 2e 6d 6f 64 69 66 79 53 65 63 74 69 6f 6e 73 28 6c 2c 22 69 6e 74 72 6f 22 2c 28 66 75 6e 63 74 69 6f 6e 28 73 65 63 74 69 6f 6e 29 7b 73 65 63 74 69 6f 6e 2e 6d 65 64 69 61 26 26 28 73 65 63 74 69 6f 6e 2e 6d 65 64 69 61 2e 6d 65 64 69 61 41 63 74 69 6f 6e 3d 7b 6d 65 64 69 61 41 63 74 69 6f 6e 55 72 Data Ascii: ariant=I}))}))}r.a.isActive(t,"e414")&&r.a.modifySections(l,"intro",(function(section){section.headingMedia.variant="links"})),r.a.isActive(t,"e415")&&r.a.modifySections(l,"intro",(function(section){section.media&&(section.media.mediaAction={mediaActionUr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.16	50107	13.107.246.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:36 UTC	581	OUT	GET /shared/edgeweb/8675ee9.js HTTP/1.1 Host: edgestatic.azureedge.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:36 UTC	781	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:36 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 181694 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable ETag: W/"2c5be-18cfea0b2eb" Last-Modified: Fri, 12 Jan 2024 17:03:13 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Origin-Agent-Cluster: ?1 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 x-azure-ref: 20240117T170736Z-xruyp6d1g90y59pp506zgpbfhg000000009g000000000vm6 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-01-17 17:07:36 UTC	15603	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 2c 39 34 5d 2c 7b 31 65 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 69 6d 67 2f 74 68 75 6d 62 73 2d 75 70 2e 34 66 31 37 38 36 32 2e 73 76 67 22 7d 2c 31 30 30 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 69 6d 67 2f 74 68 75 6d 62 73 2d 64 6f 77 6e 2e 61 33 61 63 64 65 35 2e 73 76 67 22 7d 2c 31 30 30 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 28 38 30 37 29 7d 2c 31 30 30 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[1,94],{1e3:function(e,t,n){e.exports=n.p+"img/thumbs-up.4f17862.svg"},1001:function(e,t,n){e.exports=n.p+"img/thumbs-down.a3acde5.svg"},1002:function(e,t,n){"use strict";n(807)},1003:function(e,t,n){"us
2024-01-17 17:07:36 UTC	16384	IN	Data Raw: 22 61 64 76 61 6e 63 65 64 22 3a 22 5a 61 61 77 61 6e 73 6f 77 61 6e 79 22 2c 22 62 61 73 69 63 22 3a 22 50 6f 64 73 74 61 77 6f 77 79 22 2c 22 6f 74 68 65 72 22 3a 22 49 6e 6e 79 20 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 22 7d 2c 22 70 74 2d 62 72 22 3a 7b 22 61 64 76 61 6e 63 65 64 22 3a 22 41 76 61 6e c3 a7 61 64 6f 22 2c 22 62 61 73 69 63 22 3a 22 42 c3 a1 73 69 63 6f 22 2c 22 6f 74 68 65 72 22 3a 22 6f 75 74 72 6f 22 7d 2c 22 70 74 2d 70 74 22 3a 7b 22 61 64 76 61 6e 63 65 64 22 3a 22 41 76 61 6e c3 a7 61 64 6f 22 2c 22 62 61 73 69 63 22 3a 22 42 c3 a1 73 69 63 6f 22 2c 22 6f 74 68 65 72 22 3a 22 4f 75 74 72 6f 73 22 7d 2c 22 72 6f 2d 72 6f 22 3a 7b 22 61 64 76 61 6e 63 65 64 22 3a 22 41 76 61 6e 73 61 74 22 2c 22 62 61 73 69 63 22 3a 22 42 61 7a c4 83 22 2c Data Ascii: "advanced":"Zaawansowany","basic":"Podstawowy","other":"Inny __________"},"pt-br":{"advanced":"Avanado","basic":"Bsico","other":"outro"},"pt-pt":{"advanced":"Avanado","basic":"Bsico","other":"Outros"},"ro-ro":{"advanced":"Avansat","basic":"Baz",
2024-01-17 17:07:36 UTC	16384	IN	Data Raw: 31 29 5d 29 7d 29 2c 5b 5d 2c 21 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 29 2e 65 78 70 6f 72 74 73 29 2c 42 3d 6e 28 36 38 29 2c 48 3d 7b 6e 61 6d 65 3a 22 43 68 61 74 4d 65 73 73 61 67 65 73 22 2c 6d 69 78 69 6e 73 3a 5b 68 2e 61 5d 2c 63 6f 6d 70 6f 6e 65 6e 74 73 3a 7b 43 68 61 74 51 75 65 72 79 3a 6b 2c 43 68 61 74 52 65 73 70 6f 6e 73 65 3a 53 2c 43 68 61 74 47 72 6f 75 70 3a 4d 2c 43 68 61 74 4d 65 74 61 3a 49 2c 43 68 61 74 49 6d 61 67 65 3a 4f 2c 43 68 61 74 41 63 74 69 6f 6e 73 3a 24 7d 2c 69 6e 6a 65 63 74 3a 7b 63 68 61 74 49 64 3a 7b 64 65 66 61 75 6c 74 3a 6e 75 6c 6c 7d 7d 2c 70 72 6f 70 73 3a 7b 6d 65 73 73 61 67 65 73 3a 7b 74 79 70 65 3a 41 72 72 61 79 2c 64 65 66 61 75 6c 74 3a 6e 75 6c 6c 7d 2c 6d 65 73 73 61 67 65 43 6c 61 73 Data Ascii: 1)])}),[],!1,null,null,null).exports),B=n(68),H={name:"ChatMessages",mixins:[h.a],components:{ChatQuery:k,ChatResponse:S,ChatGroup:M,ChatMeta:I,ChatImage:O,ChatActions:$},inject:{chatId:{default:null}},props:{messages:{type:Array,default:null},messageClas
2024-01-17 17:07:36 UTC	16384	IN	Data Raw: 65 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 74 68 75 6d 62 54 69 74 6c 65 73 56 69 73 69 62 6c 65 7d 2c 74 68 75 6d 62 56 61 72 69 61 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 28 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 74 68 75 6d 62 56 61 72 69 61 6e 74 29 7c 7c 22 72 6f 75 6e 64 65 64 20 73 68 61 64 6f 77 22 7d 2c 73 65 6c 65 63 74 65 64 49 74 65 6d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 41 2e 61 2e 61 72 72 61 79 53 61 66 65 47 65 74 28 74 68 69 73 2e 69 74 65 6d 73 2c 74 68 69 73 2e 73 65 Data Ascii: e;return null===(e=this.options)\|\|void 0===e?void 0:e.thumbTitlesVisible},thumbVariant:function(){var e;return(null===(e=this.options)\|\|void 0===e?void 0:e.thumbVariant)\|\|"rounded shadow"},selectedItem:function(){return A.a.arraySafeGet(this.items,this.se
2024-01-17 17:07:36 UTC	16384	IN	Data Raw: 64 69 66 69 65 72 73 3a 7b 62 75 74 74 6f 6e 3a 21 30 2c 70 6c 61 79 3a 21 30 7d 7d 5d 2c 63 6c 61 73 73 3a 65 2e 62 65 6d 28 22 62 75 74 74 6f 6e 22 29 2c 73 74 79 6c 65 3a 7b 62 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 3a 65 2e 63 73 73 55 72 6c 28 65 2e 70 6f 73 74 65 72 55 72 6c 29 7d 2c 61 74 74 72 73 3a 7b 22 61 72 69 61 2d 6c 61 62 65 6c 22 3a 22 50 6c 61 79 22 7d 2c 6f 6e 3a 7b 63 6c 69 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 70 6c 61 79 28 29 7d 7d 7d 2c 5b 6f 28 22 73 70 61 6e 22 2c 7b 63 6c 61 73 73 3a 65 2e 62 65 6d 28 22 70 6c 61 79 22 29 7d 2c 5b 6f 28 22 70 78 2d 69 63 6f 6e 22 2c 7b 61 74 74 72 73 3a 7b 73 69 7a 65 3a 22 31 30 30 25 22 2c 73 72 63 3a 6e 28 31 30 31 38 29 7d 7d 29 5d 2c 31 29 5d 29 5d 29 5d Data Ascii: difiers:{button:!0,play:!0}}],class:e.bem("button"),style:{backgroundImage:e.cssUrl(e.posterUrl)},attrs:{"aria-label":"Play"},on:{click:function(t){return e.play()}}},[o("span",{class:e.bem("play")},[o("px-icon",{attrs:{size:"100%",src:n(1018)}})],1)])])]
2024-01-17 17:07:37 UTC	16384	IN	Data Raw: 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 61 6e 69 6d 61 74 65 54 69 6d 65 6f 75 74 29 2c 74 68 69 73 2e 61 6e 69 6d 61 74 65 64 3d 74 68 69 73 2e 61 6e 69 6d 61 74 65 53 65 6c 65 63 74 6f 72 2c 74 68 69 73 2e 24 6e 65 78 74 54 69 63 6b 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 73 65 6c 65 63 74 49 74 65 6d 4f 6e 6c 79 28 65 29 7d 29 29 2c 74 68 69 73 2e 61 6e 69 6d 61 74 65 54 69 6d 65 6f 75 74 3d 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 61 6e 69 6d 61 74 65 64 3d 21 31 7d 29 2c 31 65 33 29 7d 2c 67 65 74 54 61 62 41 74 74 72 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 61 62 41 74 74 72 73 46 6e 3f 74 68 69 73 2e 74 61 62 41 Data Ascii: (e){var t=this;clearTimeout(this.animateTimeout),this.animated=this.animateSelector,this.$nextTick((function(){t.selectItemOnly(e)})),this.animateTimeout=setTimeout((function(){t.animated=!1}),1e3)},getTabAttrs:function(e){return this.tabAttrsFn?this.tabA
2024-01-17 17:07:37 UTC	16384	IN	Data Raw: 2c 74 29 7d 7d 7d 2c 77 3d 28 6e 28 31 30 36 30 29 2c 4f 62 6a 65 63 74 28 68 2e 61 29 28 4d 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 65 2e 24 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 2c 6e 3d 65 2e 5f 73 65 6c 66 2e 5f 63 7c 7c 74 3b 72 65 74 75 72 6e 20 6e 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 3a 65 2e 62 65 6d 28 65 2e 76 61 72 69 61 6e 74 73 4d 61 70 29 7d 2c 5b 65 2e 73 75 70 70 6f 72 74 73 41 6e 69 6d 61 74 65 64 3f 6e 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 3a 65 2e 62 65 6d 28 22 68 65 61 64 6c 69 6e 65 22 29 2c 73 74 79 6c 65 3a 7b 6d 61 78 57 69 64 74 68 3a 65 2e 63 73 73 45 6d 46 61 6c 6c 62 61 63 6b 28 65 2e 68 65 61 64 69 6e 67 4d 61 78 57 69 64 74 68 29 7d 7d 2c 5b 65 2e 68 65 61 64 6c 69 6e 65 42 65 66 6f Data Ascii: ,t)}}},w=(n(1060),Object(h.a)(M,(function(){var e=this,t=e.$createElement,n=e._self._c\|\|t;return n("div",{class:e.bem(e.variantsMap)},[e.supportsAnimated?n("div",{class:e.bem("headline"),style:{maxWidth:e.cssEmFallback(e.headingMaxWidth)}},[e.headlineBefo
2024-01-17 17:07:37 UTC	16384	IN	Data Raw: 53 63 72 65 65 6e 58 28 74 2e 73 63 72 65 65 6e 58 29 2b 28 74 2e 6e 75 64 67 65 58 2a 65 2e 73 63 61 6c 65 7c 7c 30 29 29 2c 74 6f 70 3a 65 2e 63 73 73 50 78 28 65 2e 74 6f 53 63 72 65 65 6e 59 28 74 2e 73 63 72 65 65 6e 59 29 2b 28 74 2e 6e 75 64 67 65 59 2a 65 2e 73 63 61 6c 65 7c 7c 30 29 29 2c 74 72 61 6e 73 66 6f 72 6d 3a 65 2e 6f 76 65 72 6c 61 79 54 72 61 6e 73 66 6f 72 6d 7d 2c 61 74 74 72 73 3a 7b 6f 70 74 69 6f 6e 73 3a 74 7d 7d 29 7d 29 29 2c 31 29 3a 65 2e 5f 65 28 29 2c 65 2e 5f 76 28 22 20 22 29 2c 65 2e 68 61 73 4d 65 64 69 61 41 63 74 69 6f 6e 3f 6e 28 22 6d 65 64 69 61 2d 69 74 65 6d 2d 61 63 74 69 6f 6e 2d 6f 76 65 72 6c 61 79 22 2c 7b 63 6c 61 73 73 3a 65 2e 62 65 6d 28 22 61 63 74 69 6f 6e 2d 6f 76 65 72 6c 61 79 22 29 2c 61 74 74 72 Data Ascii: ScreenX(t.screenX)+(t.nudgeXe.scale\|\|0)),top:e.cssPx(e.toScreenY(t.screenY)+(t.nudgeYe.scale\|\|0)),transform:e.overlayTransform},attrs:{options:t}})})),1):e._e(),e._v(" "),e.hasMediaAction?n("media-item-action-overlay",{class:e.bem("action-overlay"),attr
2024-01-17 17:07:37 UTC	16384	IN	Data Raw: 69 6f 6e 28 62 29 7b 62 2e 62 75 74 74 6f 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 6e 2e 62 65 6d 28 22 73 65 6c 65 63 74 2d 2d 74 61 6c 6c 22 29 29 7d 29 29 2c 6e 2e 62 61 6c 61 6e 63 65 45 6e 61 62 6c 65 64 3d 21 30 7d 29 29 29 7d 2c 73 68 75 66 66 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3d 74 68 69 73 3b 69 66 28 6e 75 6c 6c 21 3d 3d 28 65 3d 74 68 69 73 2e 70 72 6f 6d 70 74 49 74 65 6d 73 29 26 26 76 6f 69 64 20 30 21 3d 3d 65 26 26 65 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e 70 72 6f 6d 70 74 49 74 65 6d 73 5b 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 74 68 69 73 2e 70 72 6f 6d 70 74 49 74 65 6d 73 2e 6c 65 6e 67 74 68 29 5d 3b 6e 2e 6e 6f 64 65 73 2e 66 69 6c 74 65 72 Data Ascii: ion(b){b.button.classList.add(n.bem("select--tall"))})),n.balanceEnabled=!0})))},shuffle:function(){var e,t=this;if(null!==(e=this.promptItems)&&void 0!==e&&e.length){var n=this.promptItems[Math.floor(Math.random()*this.promptItems.length)];n.nodes.filter
2024-01-17 17:07:37 UTC	16384	IN	Data Raw: 62 6f 74 74 6f 6d 3a 6e 75 6c 6c 2c 6c 65 66 74 3a 6e 75 6c 6c 2c 73 63 61 6c 65 3a 31 7d 7d 2c 70 72 65 70 56 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 72 6f 75 6e 64 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 28 65 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 65 2a 77 69 6e 64 6f 77 2e 64 65 76 69 63 65 50 69 78 65 6c 52 61 74 69 6f 29 2f 77 69 6e 64 6f 77 2e 64 65 76 69 63 65 50 69 78 65 6c 52 61 74 69 6f 29 2c 74 68 69 73 2e 74 6f 50 78 26 26 28 65 3d 74 68 69 73 2e 63 73 73 50 78 28 65 29 29 2c 65 7d 2c 74 6f 42 6f 78 4d 6f 64 65 6c 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 74 6f 42 6f 78 4d 6f 64 65 6c 41 72 72 61 79 28 Data Ascii: bottom:null,left:null,scale:1}},prepValue:function(e){return this.round&&"undefined"!=typeof window&&(e=Math.round(e*window.devicePixelRatio)/window.devicePixelRatio),this.toPx&&(e=this.cssPx(e)),e},toBoxModelObject:function(e){var t=this.toBoxModelArray(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.16	50112	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:36 UTC	663	OUT	GET /tenant/amp/entityid/AA19WLjq.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:36 UTC	548	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA19WLjq?w=80&h=80&q=60&m=6&f=jpg&u=t Last-Modified: Tue, 16 Jan 2024 06:37:00 GMT X-Source-Length: 155849 X-Datacenter: westus X-ActivityId: 5385e466-c3df-4c77-bb0b-50e90c642232 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 4096 Cache-Control: public, max-age=307755 Expires: Sun, 21 Jan 2024 06:36:51 GMT Date: Wed, 17 Jan 2024 17:07:36 GMT Connection: close
2024-01-17 17:07:36 UTC	4096	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 50 00 50 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOPP}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.16	50098	35.213.89.133	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:36 UTC	652	OUT	GET /cs/msn?id=2136D0069C246D353F30C40F9D676C20&gdpr=0&gdpr_consent= HTTP/1.1 Host: trace.popin.cc Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:37 UTC	289	IN	HTTP/1.1 200 OK Set-Cookie: __mguid_=9ce22a85b772ad8018nv9b00lri1d877; Path=/; Domain=popin.cc; Max-Age=31536000; Secure; SameSite=None Date: Wed, 17 Jan 2024 17:07:37 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.16	50113	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:36 UTC	663	OUT	GET /tenant/amp/entityid/AA19JHhj.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:36 UTC	548	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Last-Modified: Sun, 07 Jan 2024 16:13:24 GMT X-Datacenter: eastus X-ActivityId: b2f04327-e86b-4425-ada6-80adfa143762 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Type: image/jpeg Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA19JHhj?w=80&h=80&q=60&m=6&f=jpg&u=t X-Source-Length: 169322 Content-Length: 4096 Cache-Control: public, max-age=342156 Expires: Sun, 21 Jan 2024 16:10:12 GMT Date: Wed, 17 Jan 2024 17:07:36 GMT Connection: close
2024-01-17 17:07:36 UTC	4096	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 50 00 50 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOPP}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.16	50114	68.67.179.87	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:36 UTC	860	OUT	GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fc.bing.com%2Fc.gif%3Fanx_uid%3D%24UID%26Red3%3DMSAN_pd%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: XANDR_PANID=AMF5BzG0c98h7ITTneAaVFNcIOAH2caroG7o2-nOVrrsu-W9ZiwfkE4-hluZSzDfJK-rx-EhSsoxcQY7Vt275KSNSpotjIGiRcAbCm5Vphs.; uuid2=5253291415427901022
2024-01-17 17:07:36 UTC	1245	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Wed, 17 Jan 2024 17:07:36 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Set-Cookie: XANDR_PANID=qXMmRur0er2GJqC-QNEAf_QebV-CTey5jUGa0SYQxXUziQ111X7F4DABelfU4fCiWRvQjW8WOXCkKx70O02bdY55vYyxsL5eJMu5TzXwPPA.; SameSite=None; Path=/; Max-Age=314496000; Domain=.adnxs.com; Secure; Partitioned Location: https://c.bing.com/c.gif?anx_uid=5253291415427901022&Red3=MSAN_pd&gdpr=0&gdpr_consent= AN-X-Request-Uuid: 4421fe29-a428-4e36-9e7b-d1dc2f8accfb Set-Cookie: uuid2=5253291415427901022; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 16-Apr-2024 17:07:36 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 154.16.192.193; 154.16.192.193; 585.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.16	50115	68.67.179.153	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:36 UTC	1102	OUT	GET /bounce?%2Fmapuid%3Fmember%3D280%26user%3D2136D0069C246D353F30C40F9D676C20%3B%26gdpr%3D0%26gdpr_consent%3D%26redir%3Dhttps%253A%252F%252Fm.adnxs.com%252Fseg%253Fadd%253D5159620%2526redir%253Dhttps%25253A%25252F%25252Fib.adnxs.com%25252Fsetuid%25253Fentity%25253D483%252526code%25253D2136D0069C246D353F30C40F9D676C20%252526gdpr%25253D0%252526gdpr_consent%25253D HTTP/1.1 Host: m.adnxs.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: XANDR_PANID=oySA8MClCQH7vbMGE-366hkJmbFF6sBQH8b7tCh0g9T614FCL8E5Som0MfPdgTlsxXNw_Sx_8x7bw3Qqglqc7uoVjzYt5aQCvo8EqByReEU.; uuid2=6324846154276582513
2024-01-17 17:07:36 UTC	1511	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Wed, 17 Jan 2024 17:07:36 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Set-Cookie: XANDR_PANID=_mTLHUjwEGsYdt5wx57SYNZmmEk8m3oPxp4vPtekqr4U9eF7TielXmn7cqxjLl4FnC9Pyk2a6uF3y1J-YtkHIeW4pOT_IjqkaUEKbGipwaA.; SameSite=None; Path=/; Max-Age=314496000; Domain=.adnxs.com; Secure; Partitioned Location: https://m.adnxs.com/seg?add=5159620&redir=https%3A%2F%2Fib.adnxs.com%2Fsetuid%3Fentity%3D483%26code%3D2136D0069C246D353F30C40F9D676C20%26gdpr%3D0%26gdpr_consent%3D AN-X-Request-Uuid: ce46d71f-c79d-418d-8b02-d20d3f5fc7fb Set-Cookie: anj=dTM7k!M4/8CxrEQF']wIg2GTsq'-(%!]tbP6j2F-XstGt!@DWZ$h:W'; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 16-Apr-2024 17:07:36 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: uuid2=6324846154276582513; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 16-Apr-2024 17:07:36 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 154.16.192.193; 154.16.192.193; 570.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.16	50116	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:36 UTC	662	OUT	GET /tenant/amp/entityid/AAtKhln.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:36 UTC	547	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Last-Modified: Fri, 12 Jan 2024 02:23:59 GMT X-Datacenter: eastus X-ActivityId: 7896d164-a277-488e-86be-1408626a6a80 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Type: image/jpeg Content-Location: https://img.s-msn.com/tenant/amp/entityid/AAtKhln?w=80&h=80&q=60&m=6&f=jpg&u=t X-Source-Length: 171561 Content-Length: 4096 Cache-Control: public, max-age=335771 Expires: Sun, 21 Jan 2024 14:23:47 GMT Date: Wed, 17 Jan 2024 17:07:36 GMT Connection: close
2024-01-17 17:07:36 UTC	4096	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 50 00 50 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOPP}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.16	50117	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:36 UTC	662	OUT	GET /tenant/amp/entityid/AAtK5fd.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:36 UTC	548	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AAtK5fd?w=80&h=80&q=60&m=6&f=jpg&u=t Last-Modified: Thu, 11 Jan 2024 22:56:59 GMT X-Source-Length: 105980 X-Datacenter: northeu X-ActivityId: 4343c07a-3afb-4bee-8159-56ac34bdeba3 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 4096 Cache-Control: public, max-age=323311 Expires: Sun, 21 Jan 2024 10:56:07 GMT Date: Wed, 17 Jan 2024 17:07:36 GMT Connection: close
2024-01-17 17:07:36 UTC	4096	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 50 00 50 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOPP}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.16	50118	52.159.100.48	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:36 UTC	621	OUT	POST /api/browser/edge/navigationcomplete/3 HTTP/1.1 Host: postnav-edge.smartscreen.microsoft.com Connection: keep-alive Content-Length: 2133 Authorization: SmartScreenHash eyJhdXRoSWQiOiI0MWE0MzhiYy0xMjQ5LTQzZDMtYTI2ZC02OWNkNjJjMDgzMTciLCAia2V5IjoiV1llcmVQOGxUYUJ0VEVacnVoQ2k1Zz09IiwgImhhc2giOiIzUHd1enVzVFQzbz0ifQ== Content-Type: application/json; charset=utf-8 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept-Encoding: gzip, deflate, br
2024-01-17 17:07:36 UTC	2133	OUT	Data Raw: 7b 22 75 73 65 72 41 67 65 6e 74 22 3a 22 22 2c 22 63 6f 72 72 65 6c 61 74 69 6f 6e 49 64 22 3a 22 30 30 30 30 30 30 30 30 2d 30 30 30 30 2d 30 30 30 30 2d 30 30 30 30 2d 30 30 30 30 30 30 30 30 30 30 30 30 22 2c 22 69 64 65 6e 74 69 74 79 22 3a 7b 22 75 73 65 72 22 3a 7b 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 47 42 22 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 69 64 22 3a 6e 75 6c 6c 2c 22 63 75 73 74 6f 6d 49 64 22 3a 6e 75 6c 6c 2c 22 6f 6e 6c 69 6e 65 49 64 54 69 63 6b 65 74 22 3a 22 74 3d 47 77 41 57 41 64 39 74 42 41 41 55 34 4d 69 6a 4b 57 34 47 69 43 43 4c 67 67 55 2f 39 75 72 76 78 4b 77 39 44 4a 67 4f 5a 67 41 41 45 4c 6a 5a 5a 34 4f 75 50 6f 6b 4c 38 6b 49 35 4a 70 54 2f 31 79 62 67 41 41 48 54 4b 31 6a 74 6b 64 55 38 45 77 68 62 66 45 67 4a 33 4b Data Ascii: {"userAgent":"","correlationId":"00000000-0000-0000-0000-000000000000","identity":{"user":{"locale":"en-GB"},"device":{"id":null,"customId":null,"onlineIdTicket":"t=GwAWAd9tBAAU4MijKW4GiCCLggU/9urvxKw9DJgOZgAAELjZZ4OuPokL8kI5JpT/1ybgAAHTK1jtkdU8EwhbfEgJ3K
2024-01-17 17:07:37 UTC	264	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:36 GMT Content-Type: application/json; charset=utf-8 Content-Length: 1209 Connection: close Server: Kestrel Cache-Control: max-age=0, private Request-Context: appId=cid-v1:46ea1a4d-29cb-4e7e-a1ff-735721467fe3
2024-01-17 17:07:37 UTC	1209	IN	Data Raw: 7b 22 61 63 74 69 6f 6e 73 22 3a 5b 7b 22 24 74 79 70 65 22 3a 22 63 61 63 68 65 22 2c 22 6b 65 79 22 3a 7b 22 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 65 6e 2d 67 62 2f 65 64 67 65 2f 77 65 6c 63 6f 6d 65 3f 65 70 3d 32 35 34 26 66 6f 72 6d 3d 4d 54 30 30 4c 37 26 65 73 3d 35 39 22 2c 22 69 6e 68 65 72 69 74 61 6e 63 65 22 3a 22 6e 6f 6e 65 22 7d 2c 22 6d 61 78 41 67 65 22 3a 31 30 30 38 30 30 30 30 30 30 30 30 2c 22 73 65 72 76 65 72 43 6f 6e 74 65 78 74 22 3a 22 31 3b 66 39 34 63 30 32 35 66 2d 37 35 32 33 2d 36 39 37 32 2d 62 36 31 33 2d 63 65 32 63 32 34 36 63 35 35 63 65 3b 55 4e 4b 4e 3a 31 30 30 3b 30 2e 30 31 22 2c 22 72 65 73 70 6f 6e 73 65 43 61 74 65 67 6f 72 79 22 3a 22 41 6c 6c 6f 77 65 Data Ascii: {"actions":[{"$type":"cache","key":{"uri":"https://www.microsoft.com/en-gb/edge/welcome?ep=254&form=MT00L7&es=59","inheritance":"none"},"maxAge":100800000000,"serverContext":"1;f94c025f-7523-6972-b613-ce2c246c55ce;UNKN:100;0.01","responseCategory":"Allowe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.16	50121	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:36 UTC	505	OUT	GET /bundles/v1/edgeChromium/latest/shopping-card-wce.fc63d4b59e942b8d82be.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:37 UTC	1186	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: eGMKGIE5naVAhnm/7dn4HQ== Last-Modified: Wed, 10 Jan 2024 03:17:36 GMT ETag: 0x8DC118AB17B2E81 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: c60e6a2d-701e-0010-0f73-43da9c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:37 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Akamai-Request-BC: [a=23.218.242.10,b=89896587,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=0, origin; dur=0 , cdntime; dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55bb68b Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511257.55bb68b Vary: Origin
2024-01-17 17:07:37 UTC	15198	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 6f 70 70 69 6e 67 2d 63 61 72 64 2d 77 63 65 22 5d 2c 7b 31 37 35 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 69 2e 72 28 74 29 2c 69 2e 64 28 74 2c 7b 53 68 6f 70 70 69 6e 67 43 61 72 64 57 43 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 65 7d 2c 53 68 6f 70 70 69 6e 67 43 61 72 64 57 43 53 74 79 6c 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 Data Ascii: 00006000"use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["shopping-card-wce"],{17529:function(e,t,i){i.r(t),i.d(t,{ShoppingCardWC:function(){return ae},ShoppingCardWCStyles:function(){retu
2024-01-17 17:07:37 UTC	9390	IN	Data Raw: 73 29 2c 74 68 69 73 2e 72 65 66 72 65 73 68 43 61 72 6f 75 73 65 6c 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 73 68 6f 77 4d 61 6e 61 67 65 49 6e 74 65 72 65 73 74 73 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 73 68 6f 77 52 65 70 6f 72 74 49 73 73 75 65 44 69 61 6c 6f 67 2e 62 69 6e 64 28 74 68 69 73 29 2c 6c 2c 74 68 69 73 2e 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 4f 70 74 69 6f 6e 43 6c 69 63 6b 65 64 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 66 69 6c 74 65 72 53 68 6f 70 70 69 6e 67 45 6e 74 69 74 69 65 73 2e 62 69 6e 64 28 74 68 69 73 29 29 7d 61 73 79 6e 63 20 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 4f 70 74 69 6f 6e 43 6c 69 63 6b 65 64 28 65 2c 74 2c 69 3d 54 2e 77 75 2e 44 69 73 6c 69 6b 65 29 7b 72 65 74 75 Data Ascii: s),this.refreshCarousel.bind(this),this.showManageInterests.bind(this),this.showReportIssueDialog.bind(this),l,this.personalizationOptionClicked.bind(this),this.filterShoppingEntities.bind(this))}async personalizationOptionClicked(e,t,i=T.wu.Dislike){retu
2024-01-17 17:07:37 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 2d 63 6f 6c 75 6d 6e 73 3a 76 61 72 28 2d 2d 62 75 74 74 6f 6e 2d 6d 69 6e 2d 77 69 64 74 68 29 20 76 61 72 28 2d 2d 62 75 74 74 6f 6e 2d 6d 69 6e 2d 77 69 64 74 68 29 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 67 72 69 64 2d 67 61 70 3a 76 61 72 28 2d 2d 73 70 61 63 65 2d 62 65 74 77 65 65 6e 2d 62 75 74 74 6f 6e 73 29 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 70 78 7d 2e 72 65 70 6f 72 74 2d 64 69 61 6c 6f 67 2d 63 6f 6e 74 65 6e 74 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 6d 61 72 67 69 6e 3a 31 38 70 78 20 30 70 78 20 34 70 78 3b 77 69 64 74 68 3a 33 32 30 70 78 7d 2e 61 63 74 69 6f 6e 2d 64 69 61 6c 6f 67 2d 63 6f 6e 74 72 6f 6c Data Ascii: 00006000-columns:var(--button-min-width) var(--button-min-width);justify-content:center;grid-gap:var(--space-between-buttons);margin-top:4px}.report-dialog-content{display:flex;flex-direction:column;margin:18px 0px 4px;width:320px}.action-dialog-control
2024-01-17 17:07:37 UTC	8204	IN	Data Raw: 67 6c 65 2d 64 65 61 6c 2d 63 61 72 64 2d 64 65 63 6f 72 61 74 69 6f 6e 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 31 32 70 78 3b 74 6f 70 3a 31 31 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 36 70 78 3b 70 61 64 64 69 6e 67 3a 32 70 78 20 37 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 36 38 2c 36 38 2c 36 38 2c 30 2e 38 29 3b 62 61 63 6b 64 72 6f 70 2d 66 69 6c 74 65 72 3a 62 6c 75 72 28 32 70 78 29 7d 2e 73 68 6f 70 70 69 6e 67 2d 73 69 6e 67 6c 65 2d 64 65 61 6c 2d 63 61 72 64 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 69 63 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 32 Data Ascii: gle-deal-card-decoration{display:flex;align-items:center;position:absolute;left:12px;top:11px;border-radius:6px;padding:2px 7px;color:#fff;background:rgba(68,68,68,0.8);backdrop-filter:blur(2px)}.shopping-single-deal-card-decoration-icon-container{width:2
2024-01-17 17:07:37 UTC	865	IN	Data Raw: 30 30 30 30 30 33 35 35 0d 0a 3e 6d 28 65 28 72 2e 79 29 2c 65 28 6c 2e 71 29 2c 65 28 64 2e 59 29 29 7d 29 2c 79 3d 75 28 22 6e 65 75 74 72 61 6c 2d 6c 61 79 65 72 2d 63 61 72 64 22 29 2e 77 69 74 68 44 65 66 61 75 6c 74 28 28 65 3d 3e 65 28 78 29 2e 65 76 61 6c 75 61 74 65 28 65 29 29 29 2c 43 3d 75 28 22 6e 65 75 74 72 61 6c 2d 66 69 6c 6c 2d 62 75 62 62 6c 65 2d 72 65 73 74 2d 64 65 6c 74 61 22 2c 36 29 2c 6b 3d 75 28 22 6e 65 75 74 72 61 6c 2d 66 69 6c 6c 2d 62 75 62 62 6c 65 2d 68 6f 76 65 72 2d 64 65 6c 74 61 22 2c 39 29 2c 54 3d 75 28 22 6e 65 75 74 72 61 6c 2d 66 69 6c 6c 2d 62 75 62 62 6c 65 2d 72 65 73 74 22 2c 28 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 65 28 72 2e 79 29 2c 69 3d 74 2e 63 6c 6f 73 65 73 74 49 6e 64 65 78 4f 66 28 65 28 70 2e 49 29 Data Ascii: 00000355>m(e(r.y),e(l.q),e(d.Y))}),y=u("neutral-layer-card").withDefault((e=>e(x).evaluate(e))),C=u("neutral-fill-bubble-rest-delta",6),k=u("neutral-fill-bubble-hover-delta",9),T=u("neutral-fill-bubble-rest",(e=>{const t=e(r.y),i=t.closestIndexOf(e(p.I)
2024-01-17 17:07:37 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.16	50120	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:36 UTC	663	OUT	GET /tenant/amp/entityid/BB15WdTm.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:37 UTC	546	IN	HTTP/1.1 200 OK Last-Modified: Tue, 26 Dec 2023 15:11:42 GMT Access-Control-Allow-Origin: * X-Datacenter: eastus X-ActivityId: 79395354-9756-4271-a51d-e23c4cd500a7 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Type: image/jpeg Content-Location: https://img.s-msn.com/tenant/amp/entityid/BB15WdTm?w=80&h=80&q=60&m=6&f=jpg&u=t X-Source-Length: 27710 Content-Length: 4096 Cache-Control: public, max-age=79434 Expires: Thu, 18 Jan 2024 15:11:31 GMT Date: Wed, 17 Jan 2024 17:07:37 GMT Connection: close
2024-01-17 17:07:37 UTC	4096	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 50 00 50 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOPP}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.16	50122	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:36 UTC	663	OUT	GET /tenant/amp/entityid/AA19JlZb.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:37 UTC	547	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA19JlZb?w=80&h=80&q=60&m=6&f=jpg&u=t Last-Modified: Wed, 17 Jan 2024 04:09:07 GMT X-Source-Length: 49868 X-Datacenter: eastus X-ActivityId: dd4249e7-fafd-4183-99dc-80d6632dbba4 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 2048 Cache-Control: public, max-age=385346 Expires: Mon, 22 Jan 2024 04:10:03 GMT Date: Wed, 17 Jan 2024 17:07:37 GMT Connection: close
2024-01-17 17:07:37 UTC	2048	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 50 00 50 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOPP}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.16	50123	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:37 UTC	662	OUT	GET /tenant/amp/entityid/BBEK0AD.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:37 UTC	547	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2024 17:30:09 GMT X-Datacenter: eastap X-ActivityId: a91aa9e2-43ce-49c4-b69d-7888783a460f Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Type: image/jpeg Content-Location: https://img.s-msn.com/tenant/amp/entityid/BBEK0AD?w=80&h=80&q=60&m=6&f=jpg&u=t X-Source-Length: 101627 Content-Length: 2048 Cache-Control: public, max-age=217259 Expires: Sat, 20 Jan 2024 05:28:36 GMT Date: Wed, 17 Jan 2024 17:07:37 GMT Connection: close
2024-01-17 17:07:37 UTC	2048	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 50 00 50 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOPP}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.16	50119	162.19.138.116	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:37 UTC	598	OUT	GET /i/495/0.gif?gdpr_consent=&gdpr=0&callback= HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:37 UTC	1387	IN	HTTP/1.1 302 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: cf=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: id5=662bb368-fc80-71af-9082-c47f5108621c#1705511257277#1; Max-Age=300; Expires=Wed, 17-Jan-2024 17:12:37 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure location: https://id5-sync.com/c/495/0/0/1.gif?gdpr=0&gdpr_consent=&us_privacy= transfer-encoding: chunked date: Wed, 17 Jan 2024 17:07:37 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-01-17 17:07:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.16	50124	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:37 UTC	663	OUT	GET /tenant/amp/entityid/AA163k2h.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:37 UTC	548	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA163k2h?w=80&h=80&q=60&m=6&f=jpg&u=t Last-Modified: Mon, 15 Jan 2024 01:36:12 GMT X-Source-Length: 121335 X-Datacenter: westus X-ActivityId: 175d238e-9227-4e85-8a79-4c588aeb2124 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 4096 Cache-Control: public, max-age=203367 Expires: Sat, 20 Jan 2024 01:37:04 GMT Date: Wed, 17 Jan 2024 17:07:37 GMT Connection: close
2024-01-17 17:07:37 UTC	4096	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 50 00 50 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOPP}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.16	50126	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:37 UTC	662	OUT	GET /tenant/amp/entityid/AAufg2e.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:37 UTC	547	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AAufg2e?w=80&h=80&q=60&m=6&f=jpg&u=t Last-Modified: Mon, 08 Jan 2024 14:50:54 GMT X-Source-Length: 107302 X-Datacenter: westus X-ActivityId: e5b2f353-e538-42ef-8e29-090cbdeca4d1 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 2048 Cache-Control: public, max-age=423973 Expires: Mon, 22 Jan 2024 14:53:50 GMT Date: Wed, 17 Jan 2024 17:07:37 GMT Connection: close
2024-01-17 17:07:37 UTC	2048	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 50 00 50 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOPP}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.16	50128	68.67.179.153	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:37 UTC	947	OUT	GET /seg?add=5159620&redir=https%3A%2F%2Fib.adnxs.com%2Fsetuid%3Fentity%3D483%26code%3D2136D0069C246D353F30C40F9D676C20%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1 Host: m.adnxs.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: XANDR_PANID=_mTLHUjwEGsYdt5wx57SYNZmmEk8m3oPxp4vPtekqr4U9eF7TielXmn7cqxjLl4FnC9Pyk2a6uF3y1J-YtkHIeW4pOT_IjqkaUEKbGipwaA.; anj=dTM7k!M4/8CxrEQF']wIg2GTsq'-(%!]tbP6j2F-XstGt!@DWZ$h:W'; uuid2=6324846154276582513
2024-01-17 17:07:37 UTC	1445	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Wed, 17 Jan 2024 17:07:37 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Set-Cookie: XANDR_PANID=myllpZ44gzPT_pZ4qxLBSL052oaBS9lZ_UzJtRO_s9gAtWhg8ZrbLjZ-ldrqD379JYp4lgN_i7s0gbxFZimEJE_D-wCZhkiLRtsdx0WJris.; SameSite=None; Path=/; Max-Age=314496000; Domain=.adnxs.com; Secure; Partitioned Location: https://ib.adnxs.com/setuid?entity=483&code=2136D0069C246D353F30C40F9D676C20&gdpr=0&gdpr_consent= AN-X-Request-Uuid: 5ea51a9f-2366-4110-a1e9-cd9e453fa813 Set-Cookie: anj=dTM7k!M4/8D>6NRF']wIg2GTsq'-(%!fst<)<V)+PlZ[C[-kX-dbbHh; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 16-Apr-2024 17:07:37 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: uuid2=6324846154276582513; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 16-Apr-2024 17:07:37 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 154.16.192.193; 154.16.192.193; 570.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.16	50127	13.107.246.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:37 UTC	581	OUT	GET /shared/edgeweb/954ecf0.js HTTP/1.1 Host: edgestatic.azureedge.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:37 UTC	807	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:37 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 396495 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable ETag: W/"60ccf-18cfea0b3e6" Last-Modified: Fri, 12 Jan 2024 17:03:13 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Origin-Agent-Cluster: ?1 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 x-azure-ref: 20240117T170737Z-a00gyy4we14xzcheybvhy5f8tn00000000zg00000000631k X-Cache: TCP_REMOTE_HIT x-fd-int-roxy-purgeid: 0 Accept-Ranges: bytes
2024-01-17 17:07:37 UTC	15577	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 4c 49 43 45 4e 53 45 53 20 2a 2f 0a 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 32 2c 39 33 5d 2c 7b 31 30 37 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 28 38 36 31 29 7d 2c 31 30 37 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 28 38 36 32 29 7d 2c 31 30 37 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 28 38 36 33 29 7d 2c 31 30 37 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 Data Ascii: /! For license information please see LICENSES /(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[92,93],{1073:function(e,t,n){"use strict";n(861)},1074:function(e,t,n){"use strict";n(862)},1075:function(e,t,n){"use strict";n(863)},1076:function(e,t
2024-01-17 17:07:37 UTC	16384	IN	Data Raw: e0 a4 9f 2d e0 a4 86 e0 a4 89 e0 a4 9f 20 e0 a4 86 e0 a4 87 e0 a4 95 e0 a4 a8 22 2c 22 79 6f 75 72 2d 70 72 69 76 61 63 79 2d 63 68 6f 69 63 65 73 22 3a 22 e0 a4 86 e0 a4 aa e0 a4 b2 e0 a5 8d e0 a4 af e0 a4 be 20 e0 a4 97 e0 a5 8b e0 a4 aa e0 a4 a8 e0 a5 80 e0 a4 af e0 a4 a4 e0 a4 be 20 e0 a4 a8 e0 a4 bf e0 a4 b5 e0 a4 a1 e0 a5 80 22 7d 2c 22 6d 73 2d 6d 79 22 3a 7b 22 70 72 69 76 61 63 79 2d 63 68 6f 69 63 65 73 2d 69 63 6f 6e 2d 61 6c 74 22 3a 22 49 6b 6f 6e 20 50 69 6c 69 68 20 4b 65 6c 75 61 72 20 41 6b 74 61 20 50 72 69 76 61 73 69 20 50 65 6e 67 67 75 6e 61 20 43 61 6c 69 66 6f 72 6e 69 61 20 28 43 43 50 41 29 22 2c 22 79 6f 75 72 2d 70 72 69 76 61 63 79 2d 63 68 6f 69 63 65 73 22 3a 22 50 69 6c 69 68 61 6e 20 50 72 69 76 61 73 69 20 41 6e 64 61 22 Data Ascii: - ","your-privacy-choices":" "},"ms-my":{"privacy-choices-icon-alt":"Ikon Pilih Keluar Akta Privasi Pengguna userfornia (CCPA)","your-privacy-choices":"Pilihan Privasi Anda"
2024-01-17 17:07:37 UTC	16384	IN	Data Raw: 20 73 65 6c 6c 65 73 20 62 72 61 75 73 65 72 69 73 2e 22 2c 22 74 72 79 2d 61 67 61 69 6e 22 3a 22 50 72 6f 6f 76 69 67 65 20 75 75 65 73 74 69 22 7d 2c 22 65 75 2d 65 73 22 3a 7b 22 63 6f 6e 74 69 6e 75 65 22 3a 22 4a 61 72 72 61 69 74 75 22 2c 22 64 69 64 6e 74 2d 77 6f 72 6b 2d 74 72 79 2d 6c 61 75 6e 63 68 69 6e 67 2d 61 67 61 69 6e 22 3a 22 45 7a 20 64 75 20 66 75 6e 74 7a 69 6f 6e 61 74 75 3f 20 53 61 69 61 74 75 20 62 65 72 72 69 72 6f 20 61 62 69 61 72 61 7a 74 65 6e 2e 22 2c 22 6f 72 2d 63 6f 6e 74 69 6e 75 65 2d 69 6e 2d 74 68 69 73 2d 62 72 6f 77 73 65 72 22 3a 22 45 64 6f 20 7b 30 7d 20 6e 61 62 69 67 61 74 7a 61 69 6c 65 20 68 6f 6e 65 74 61 6e 2e 22 2c 22 74 72 79 2d 61 67 61 69 6e 22 3a 22 53 61 69 61 74 75 20 62 65 72 72 69 72 6f 22 7d 2c Data Ascii: selles brauseris.","try-again":"Proovige uuesti"},"eu-es":{"continue":"Jarraitu","didnt-work-try-launching-again":"Ez du funtzionatu? Saiatu berriro abiarazten.","or-continue-in-this-browser":"Edo {0} nabigatzaile honetan.","try-again":"Saiatu berriro"},
2024-01-17 17:07:37 UTC	16384	IN	Data Raw: 69 6e 2d 74 68 65 2d 70 6f 70 2d 75 70 2d 77 69 6e 64 6f 77 2d 61 62 6f 76 65 2d 74 6f 2d 67 65 74 22 3a 22 e1 88 88 e1 88 98 e1 8c 80 e1 88 98 e1 88 ad 20 e1 8a a8 e1 88 8b e1 8b ad 20 e1 89 a3 e1 88 88 e1 8b 8d 20 e1 89 a5 e1 89 85 20 e1 89 a3 e1 8b a9 20 e1 88 98 e1 88 b5 e1 8a ae e1 89 b5 20 e1 8b 8d e1 88 b5 e1 8c a5 20 7b 30 7d 20 e1 8a 95 20 e1 8c a0 e1 89 85 20 e1 8b ab e1 8b b5 e1 88 ad e1 8c 89 e1 8d a2 22 2c 22 6f 70 65 6e 2d 6d 69 63 72 6f 73 6f 66 74 2d 65 64 67 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 20 e1 8a ad e1 8d 88 e1 89 b5 22 7d 2c 22 61 72 2d 73 61 22 3a 7b 22 63 6c 69 63 6b 2d 30 2d 69 6e 2d 74 68 65 2d 70 6f 70 2d 75 70 2d 77 69 6e 64 6f 77 2d 61 62 6f 76 65 2d 74 6f 2d 67 65 74 22 3a 22 d8 a7 d9 86 d9 82 d8 b1 20 d9 Data Ascii: in-the-pop-up-window-above-to-get":" {0} ","open-microsoft-edge":"Microsoft Edge "},"ar-sa":{"click-0-in-the-pop-up-window-above-to-get":"
2024-01-17 17:07:37 UTC	16384	IN	Data Raw: d9 84 d8 a7 d8 b5 d8 b7 d9 86 d8 a7 d8 b9 d9 8a 2e 22 7d 2c 22 61 73 2d 69 6e 22 3a 7b 22 39 32 32 2d 61 75 74 6f 6c 6f 63 61 6c 69 7a 65 64 22 3a 22 e0 a6 8f e0 a6 87 20 e0 a6 aa e0 a7 83 e0 a6 b7 e0 a7 8d e0 a6 a0 e0 a6 be e0 a7 b0 20 e0 a6 b8 e0 a6 ae e0 a6 b2 20 e0 a6 b9 e0 a6 af e0 a6 bc e0 a6 a4 e0 a7 8b 20 41 49 20 e0 a6 ac e0 a7 8d e0 a6 af e0 a7 b1 e0 a6 b9 e0 a6 be e0 a7 b0 20 e0 a6 95 e0 a7 b0 e0 a6 bf 20 e0 a6 85 e0 a6 a8 e0 a7 81 e0 a6 ac e0 a6 be e0 a6 a6 20 e0 a6 95 e0 a7 b0 e0 a6 be 20 e0 a6 b9 e0 a7 88 e0 a6 9b e0 a7 87 e0 a5 a4 22 7d 2c 22 61 7a 2d 6c 61 74 6e 2d 61 7a 22 3a 7b 22 39 32 32 2d 61 75 74 6f 6c 6f 63 61 6c 69 7a 65 64 22 3a 22 42 75 20 73 c9 99 68 69 66 c9 99 64 c9 99 6b 69 20 6d c9 99 6c 75 6d 61 74 6c 61 72 20 41 49 20 74 Data Ascii: ."},"as-in":{"922-autolouserzed":" AI "},"az-latn-az":{"922-autolouserzed":"Bu shifdki mlumatlar AI t
2024-01-17 17:07:37 UTC	16384	IN	Data Raw: 20 e0 b6 af e0 b6 b8 e0 b6 b1 e0 b7 8a e0 b6 b1 22 2c 22 65 78 70 61 6e 64 2d 61 6c 6c 22 3a 22 e0 b7 83 e0 b7 92 e0 b6 ba e0 b6 bd e0 b7 94 20 e0 b6 b4 e0 b7 94 e0 b7 85 e0 b7 94 e0 b6 bd e0 b7 8a 20 e0 b6 9a e0 b6 bb e0 b6 b1 e0 b7 8a e0 b6 b1 22 7d 2c 22 73 6b 2d 73 6b 22 3a 7b 22 63 6f 6c 6c 61 70 73 65 2d 61 6c 6c 22 3a 22 5a 62 61 6c 69 c5 a5 20 76 c5 a1 65 74 6b 6f 22 2c 22 65 78 70 61 6e 64 2d 61 6c 6c 22 3a 22 52 6f 7a 62 61 6c 69 c5 a5 20 76 c5 a1 65 74 6b 6f 22 7d 2c 22 73 6c 2d 73 69 22 3a 7b 22 63 6f 6c 6c 61 70 73 65 2d 61 6c 6c 22 3a 22 53 74 72 6e 69 20 76 73 65 22 2c 22 65 78 70 61 6e 64 2d 61 6c 6c 22 3a 22 52 61 7a c5 a1 69 72 69 20 76 73 65 22 7d 2c 22 73 71 2d 61 6c 22 3a 7b 22 63 6f 6c 6c 61 70 73 65 2d 61 6c 6c 22 3a 22 54 c3 ab 20 Data Ascii: ","expand-all":" "},"sk-sk":{"collapse-all":"Zbali vetko","expand-all":"Rozbali vetko"},"sl-si":{"collapse-all":"Strni vse","expand-all":"Raziri vse"},"sq-al":{"collapse-all":"T
2024-01-17 17:07:37 UTC	16384	IN	Data Raw: 72 6e 20 65 26 26 65 2e 70 72 6f 67 72 65 73 73 28 74 3f 30 3a 31 29 26 26 6e 26 26 65 2e 70 61 75 73 65 28 29 7d 2c 73 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 65 2e 65 6e 61 62 6c 65 64 29 7b 76 61 72 20 6e 3d 65 2e 5f 63 74 78 3f 65 2e 5f 63 74 78 2e 61 64 64 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 28 65 29 7d 29 29 3a 74 28 65 29 3b 6e 26 26 6e 2e 74 6f 74 61 6c 54 69 6d 65 26 26 28 65 2e 63 61 6c 6c 62 61 63 6b 41 6e 69 6d 61 74 69 6f 6e 3d 6e 29 7d 7d 2c 6c 74 3d 4d 61 74 68 2e 61 62 73 2c 63 74 3d 22 6c 65 66 74 22 2c 75 74 3d 22 74 6f 70 22 2c 70 74 3d 22 72 69 67 68 74 22 2c 66 74 3d 22 62 6f 74 74 6f 6d 22 2c 68 74 3d 22 77 69 64 74 68 22 2c 76 74 3d 22 68 65 69 67 68 74 22 2c 6d 74 3d 22 52 69 67 68 74 22 Data Ascii: rn e&&e.progress(t?0:1)&&n&&e.pause()},st=function(e,t){if(e.enabled){var n=e._ctx?e._ctx.add((function(){return t(e)})):t(e);n&&n.totalTime&&(e.callbackAnimation=n)}},lt=Math.abs,ct="left",ut="top",pt="right",ft="bottom",ht="width",vt="height",mt="Right"
2024-01-17 17:07:37 UTC	16384	IN	Data Raw: 2e 5f 73 74 61 72 74 43 6c 61 6d 70 3f 4d 61 74 68 2e 6d 61 78 28 30 2c 24 2e 73 74 61 72 74 29 3a 24 2e 73 74 61 72 74 29 2c 28 52 3d 3d 3d 4f 65 26 26 24 2e 73 74 61 72 74 2d 24 2e 5f 70 69 6e 50 75 73 68 3c 66 7c 7c 52 3d 3d 3d 67 65 29 26 26 69 73 4e 61 4e 28 76 65 29 26 26 28 64 65 2b 3d 5f 2a 28 31 2d 24 2e 70 72 6f 67 72 65 73 73 29 29 2c 52 3d 3d 3d 53 65 26 26 28 70 65 2b 3d 5f 29 29 3b 69 66 28 66 2b 3d 64 65 2c 68 2b 3d 64 65 2c 4e 74 2e 5f 73 74 61 72 74 43 6c 61 6d 70 26 26 28 4e 74 2e 5f 73 74 61 72 74 43 6c 61 6d 70 2b 3d 64 65 29 2c 4e 74 2e 5f 65 6e 64 43 6c 61 6d 70 26 26 21 6a 65 26 26 28 4e 74 2e 5f 65 6e 64 43 6c 61 6d 70 3d 68 7c 7c 2d 2e 30 30 31 2c 68 3d 4d 61 74 68 2e 6d 69 6e 28 68 2c 5a 65 28 63 74 2c 47 65 29 29 29 2c 4f 3d 68 Data Ascii: ._startClamp?Math.max(0,$.start):$.start),(R===Oe&&$.start-$._pinPush<f\|\|R===ge)&&isNaN(ve)&&(de+=_*(1-$.progress)),R===Se&&(pe+=_));if(f+=de,h+=de,Nt._startClamp&&(Nt._startClamp+=de),Nt._endClamp&&!je&&(Nt._endClamp=h\|\|-.001,h=Math.min(h,Ze(ct,Ge))),O=h
2024-01-17 17:07:37 UTC	16384	IN	Data Raw: 28 65 6c 65 6d 65 6e 74 2c 65 29 7b 76 61 72 20 74 3d 22 78 22 3d 3d 3d 65 3f 22 57 69 64 74 68 22 3a 22 48 65 69 67 68 74 22 2c 6e 3d 22 73 63 72 6f 6c 6c 22 2b 74 2c 63 3d 22 63 6c 69 65 6e 74 22 2b 74 3b 72 65 74 75 72 6e 20 65 6c 65 6d 65 6e 74 3d 3d 3d 6f 7c 7c 65 6c 65 6d 65 6e 74 3d 3d 3d 72 7c 7c 65 6c 65 6d 65 6e 74 3d 3d 3d 6c 3f 4d 61 74 68 2e 6d 61 78 28 72 5b 6e 5d 2c 6c 5b 6e 5d 29 2d 28 6f 5b 22 69 6e 6e 65 72 22 2b 74 5d 7c 7c 72 5b 63 5d 7c 7c 6c 5b 63 5d 29 3a 65 6c 65 6d 65 6e 74 5b 6e 5d 2d 65 6c 65 6d 65 6e 74 5b 22 6f 66 66 73 65 74 22 2b 74 5d 7d 2c 77 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 70 3d 22 73 63 72 6f 6c 6c 22 2b 28 22 78 22 3d 3d 3d 74 3f 22 4c 65 66 74 22 3a 22 54 6f 70 22 29 3b 72 65 74 75 72 6e 20 65 Data Ascii: (element,e){var t="x"===e?"Width":"Height",n="scroll"+t,c="client"+t;return element===o\|\|element===r\|\|element===l?Math.max(r[n],l[n])-(o["inner"+t]\|\|r[c]\|\|l[c]):element[n]-element["offset"+t]},w=function(e,t){var p="scroll"+("x"===t?"Left":"Top");return e
2024-01-17 17:07:37 UTC	16384	IN	Data Raw: 69 6f 6e 73 3a 65 2e 6d 65 64 69 61 2c 22 6c 61 79 6f 75 74 2d 6d 6f 64 65 22 3a 65 2e 6d 65 64 69 61 4c 61 79 6f 75 74 4d 6f 64 65 2c 61 63 74 69 76 65 3a 21 30 7d 7d 29 3a 65 2e 5f 65 28 29 2c 65 2e 5f 76 28 22 20 22 29 2c 65 2e 61 63 74 69 6f 6e 73 26 26 65 2e 61 63 74 69 6f 6e 73 2e 6c 65 6e 67 74 68 3f 6e 28 22 41 63 74 69 6f 6e 4c 69 73 74 22 2c 7b 63 6c 61 73 73 3a 65 2e 62 65 6d 28 22 61 63 74 69 6f 6e 73 22 29 2c 61 74 74 72 73 3a 7b 61 63 74 69 6f 6e 73 3a 65 2e 61 63 74 69 6f 6e 73 2c 65 63 69 64 42 61 73 65 3a 65 2e 65 63 69 64 57 68 65 72 65 2c 22 76 61 72 69 61 6e 74 2d 64 65 66 61 75 6c 74 22 3a 65 2e 64 65 66 61 75 6c 74 41 63 74 69 6f 6e 42 75 74 74 6f 6e 56 61 72 69 61 6e 74 2c 68 69 64 65 44 65 66 61 75 6c 74 49 63 6f 6e 3a 21 30 7d 7d Data Ascii: ions:e.media,"layout-mode":e.mediaLayoutMode,active:!0}}):e._e(),e._v(" "),e.actions&&e.actions.length?n("ActionList",{class:e.bem("actions"),attrs:{actions:e.actions,ecidBase:e.ecidWhere,"variant-default":e.defaultActionButtonVariant,hideDefaultIcon:!0}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.16	50130	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:37 UTC	663	OUT	GET /tenant/amp/entityid/AA19WyNz.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:37 UTC	547	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA19WyNz?w=80&h=80&q=60&m=6&f=jpg&u=t Last-Modified: Sat, 13 Jan 2024 13:05:48 GMT X-Source-Length: 135740 X-Datacenter: eastus X-ActivityId: 9486cbe0-1744-404f-9168-0c4def6d98c0 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 2048 Cache-Control: public, max-age=71894 Expires: Thu, 18 Jan 2024 13:05:51 GMT Date: Wed, 17 Jan 2024 17:07:37 GMT Connection: close
2024-01-17 17:07:37 UTC	2048	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 50 00 50 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOPP}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.16	50132	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:37 UTC	662	OUT	GET /tenant/amp/entityid/AAtJSmw.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:37 UTC	548	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AAtJSmw?w=80&h=80&q=60&m=6&f=jpg&u=t Last-Modified: Fri, 12 Jan 2024 01:35:59 GMT X-Source-Length: 116171 X-Datacenter: northeu X-ActivityId: 1b61b704-0549-4b27-9ec4-6250f645ee8c Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 4096 Cache-Control: public, max-age=332819 Expires: Sun, 21 Jan 2024 13:34:36 GMT Date: Wed, 17 Jan 2024 17:07:37 GMT Connection: close
2024-01-17 17:07:37 UTC	4096	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 50 00 50 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOPP}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.16	50133	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:37 UTC	663	OUT	GET /tenant/amp/entityid/AA1a84bh.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:37 UTC	548	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA1a84bh?w=80&h=80&q=60&m=6&f=jpg&u=t Last-Modified: Wed, 17 Jan 2024 11:36:27 GMT X-Source-Length: 230741 X-Datacenter: westus X-ActivityId: f9edf36a-c353-4e67-a298-526233e1901d Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 4096 Cache-Control: public, max-age=412095 Expires: Mon, 22 Jan 2024 11:35:52 GMT Date: Wed, 17 Jan 2024 17:07:37 GMT Connection: close
2024-01-17 17:07:37 UTC	4096	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 50 00 50 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOPP}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.16	50131	13.107.246.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:37 UTC	669	OUT	GET /shared/cms/lrs1c69a1j/logos/5a74283229e24d0ca59fb94ed941c3a0.png HTTP/1.1 Host: edgestatic.azureedge.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:37 UTC	686	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:37 GMT Content-Type: image/png Content-Length: 71803 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable ETag: W/"1187b-18c5b630cdd" Last-Modified: Tue, 12 Dec 2023 00:17:47 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Origin-Agent-Cluster: ?1 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 x-azure-ref: 20240117T170737Z-pwv2bnmm1h1dz663p8awn1r53000000000zg000000004zae X-Cache: TCP_REMOTE_HIT x-fd-int-roxy-purgeid: 0 Accept-Ranges: bytes
2024-01-17 17:07:37 UTC	15698	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2d 00 00 01 36 08 06 00 00 00 34 f2 c4 b6 00 00 00 09 70 48 59 73 00 00 21 38 00 00 21 38 01 45 96 31 60 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 01 18 10 49 44 41 54 78 01 ec fd 6b d0 66 d9 75 1e 86 ad 75 be ee c1 95 e4 0c 2d c9 a6 c4 08 0d 55 e4 88 64 64 0c 24 52 b6 64 27 1c e8 47 ec 24 95 00 72 9c 44 fe 11 03 60 e5 52 89 92 f0 52 65 97 e4 2a 6b 66 5c 95 8a 93 b8 44 f0 47 7e a5 ca 18 a8 92 92 92 aa 48 64 e2 1f 94 64 b1 07 24 2d c9 14 45 0c 44 82 00 01 12 d3 83 fb 65 80 e9 01 e6 d2 d3 fd 7d 67 f9 9c bd 9e e7 59 6b 9f f7 1b 60 70 9f 01 fa cc 7c fd be ef b9 ec fb 7a d6 b3 d6 5e 7b 1f b7 bb c7 dd e3 70 5c bb fe be 7b 5f 77 d5 ae ad 77 ec da 95 33 bb 37 Data Ascii: PNGIHDR-64pHYs!8!8E1`sRGBgAMAaIDATxkfuu-Udd$Rd'G$rD`RRe*kf\DG~Hdd$-EDe}gYk`p\|z^{p\{_ww37
2024-01-17 17:07:37 UTC	16384	IN	Data Raw: 68 57 eb 11 23 36 81 f0 3a 01 33 51 2e 4d cf 40 1d e6 3e 29 76 96 4d 57 ec cd 26 93 93 b7 b8 bf 58 ff 8e e3 a9 e5 f6 37 c6 b6 be e9 4c eb ca 15 7b 7b 5c ac d7 ec 04 92 cc 1a 7d 3f ba 55 27 38 d0 33 39 f2 a1 d0 6c 9a d5 1a c7 57 00 2c 3b 9c ef a6 1e af ac 60 52 cf 7c f2 d3 f6 e5 4f 7c 66 07 a9 52 cb bb 07 e1 ec 2a f2 1b e1 bd 55 ba b1 d3 9b 61 a1 ea f0 52 10 c0 40 05 86 f5 0f 60 c6 e9 c8 e7 b0 17 14 aa 71 35 85 47 29 13 d0 57 ba 75 03 03 0e 63 64 1d 39 66 08 80 99 dc c9 63 ac a5 a0 dc fa c2 97 ec d6 93 4f 87 7d e4 13 fb 39 bf e7 de d7 db d5 1f f8 3e 7b ed 1f fb c3 1b a0 fd 0b e6 f7 5c 51 6b f8 a1 a5 66 1f 1d 95 8d 09 84 6c 6e fa 0e 35 a7 df ba 03 f7 92 67 2e 33 6d 23 65 d8 71 03 04 b4 ee 1d 2d 9b 28 5a 7e ab a9 6c 1c 51 d1 14 46 01 16 12 94 fc a1 51 83 fb Data Ascii: hW#6:3Q.M@>)vMW&X7L{{\}?U'839lW,;`R\|O\|fR*UaR@`q5G)Wucd9fcO}9>{\Qkfln5g.3m#eq-(Z~lQFQ
2024-01-17 17:07:37 UTC	16384	IN	Data Raw: f2 a7 69 08 d0 35 d4 1a 4c a0 19 42 2c d1 2e 0e 33 de d3 60 ba 00 45 7e b7 3e be 91 07 ed d2 69 e8 57 4e 61 72 56 d6 f2 07 d3 00 9c 52 63 63 1c 00 eb fc c3 8f d9 0b ff e0 6f c7 fa 85 4f ef b9 bd f3 d9 5f 7b d7 23 f6 5d 70 7c fe e1 b7 6c 95 bd fa ee ad b6 3f 45 45 34 5a 34 6d 35 7f e1 73 79 5f 1f bd f5 d7 d6 26 ea a6 10 98 8c 1e 58 57 f8 a3 02 23 44 20 18 14 5a 1a a0 41 b7 56 c8 b5 55 df 47 c1 68 90 45 5a 7a 4e 23 2f 8c d3 34 41 b2 e4 a5 93 ac 93 b4 5c 59 3f 46 dc 8a f5 13 2a 71 b0 12 75 60 7a d2 ba 4f 09 65 48 9f d3 89 c2 33 b5 a1 be 77 a5 6a 97 83 9a 4b 35 cc 62 57 4c 2a 04 6c bc 2e 23 a7 db ad 1d 70 a3 ca 42 c0 45 59 66 d0 da aa 32 36 d9 7a fe f3 7b 90 de 59 70 01 b2 51 93 f5 b0 06 ab d0 bd 14 e7 02 32 6b 66 a4 68 fb 92 3e 2a af 59 c4 48 13 33 ef e1 a7 Data Ascii: i5LB,.3`E~>iWNarVRccoO_{#]p\|l?EE4Z4m5sy_&XW#D ZAVUGhEZzN#/4A\Y?Fqu`zOeH3wjK5bWLl.#pBEYf26z{YpQ2kfh>*YH3
2024-01-17 17:07:37 UTC	16384	IN	Data Raw: bb 71 5d fc d9 ac fd 11 e1 16 61 03 73 66 95 bd 9d e9 f9 18 10 08 6b 08 07 42 02 5f 03 ce 56 7e 09 25 d0 c2 17 b0 c3 05 44 19 7b d0 b3 b1 34 e2 ac 1e 86 6a 98 9e 22 63 98 8f dd 53 69 4c cd ae 6b 95 3c b9 cb e7 df fe db df ff 8f 4f d0 25 4a 55 3d 9c 96 f3 30 3d ac 3f 2c 76 ca 9c 08 92 a6 7d 30 05 04 3a 0a b9 bb 0c 64 33 31 ae 7e 57 5f 9e 9e 98 55 cc d2 c4 0b 12 ab a1 a4 73 53 4c 5a 45 42 96 82 1c 66 4f 23 a7 d0 8e 9b 2b 54 c3 64 2a 32 ed dd af 44 a9 0a db 93 0a 60 94 71 d6 c0 ef d9 27 d1 30 c9 9a 97 8d e6 59 3f f6 66 74 95 91 11 42 92 b0 4c cc cb 6a 08 28 b8 54 a8 42 54 6a ac 54 b0 d9 f7 ab 90 6d dd f8 86 37 4c 06 c8 a3 84 a0 d2 32 99 67 bb 8c f6 84 41 16 93 7d 79 2d 60 80 93 6f 0c e8 56 90 ae 36 1a b2 89 c7 4d f5 9c 19 61 07 c4 94 3d 86 f9 05 19 b0 6c 93 Data Ascii: q]asfkB_V~%D{4j"cSiLk<O%JU=0=?,v}0:d31~W_UsSLZEBfO#+Td*2D`q'0Y?ftBLj(TBTjTm7L2gA}y-`oV6Ma=l
2024-01-17 17:07:37 UTC	6953	IN	Data Raw: 1f 7f f8 10 6f 6e 7d b2 49 8d d7 4d 6e fe 98 77 f8 9f 98 d2 1b 3b 99 6d 1b a7 e0 35 d0 17 6d 62 26 89 19 7a 00 cd c7 09 e9 ed b8 14 6e 4a 22 d8 7b 6d 17 96 72 39 cf 6e 8c f9 db 6f de fc ea 17 69 f3 cb 9f eb b7 f3 80 6b 06 82 df 9f 22 6a 91 82 9d 0c 36 97 19 d7 11 26 54 bd 9e fc 9c cc aa 90 18 8f 01 b1 79 e5 b2 81 3a 29 53 99 89 39 46 99 27 57 db 02 98 1b 7b 72 cd 92 4b 19 91 4c 6a 29 30 cf 5b 48 c8 db d2 45 81 85 d0 99 1a 9b 5b 93 cb 37 1f 04 a9 5f 29 5d 9d 9e 23 b4 d4 f7 e8 f3 65 1a 94 8a e7 c6 f7 22 28 a3 1d 4b db 82 11 fa aa f0 60 6a a5 5d 21 16 24 57 66 f5 e3 09 63 54 66 55 c2 fb d5 46 b7 5d 80 5e b5 62 34 a3 fb 4f 5e 51 36 ac 79 ba 32 99 16 d2 64 9c df 9b b6 b4 e1 53 31 80 bc ff 30 08 59 a5 99 8a 98 90 be 2a 49 f5 72 9b 60 21 31 d3 48 49 80 65 f0 96 Data Ascii: on}IMnw;m5mb&znJ"{mr9noik"j6&Ty:)S9F'W{rKLj)0[HE[7_)]#e"(K`j]!$WfcTfUF]^b4O^Q6y2dS10Y*Ir`!1HIe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.16	50134	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:37 UTC	663	OUT	GET /tenant/amp/entityid/AA1a8lf8.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:37 UTC	548	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA1a8lf8?w=80&h=80&q=60&m=6&f=jpg&u=t Last-Modified: Mon, 15 Jan 2024 17:54:26 GMT X-Source-Length: 109722 X-Datacenter: westus X-ActivityId: 1fd7c07d-d289-4693-bda9-cfca73e9e259 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 2048 Cache-Control: public, max-age=261956 Expires: Sat, 20 Jan 2024 17:53:33 GMT Date: Wed, 17 Jan 2024 17:07:37 GMT Connection: close
2024-01-17 17:07:37 UTC	2048	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 50 00 50 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOPP}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.16	50136	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:37 UTC	513	OUT	GET /bundles/v1/edgeChromium/latest/shopping-events-deal-card.fa55d71e81238c262037.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:37 UTC	1186	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: 0xUD3K0GAnyYpcMB4gsCLg== Last-Modified: Tue, 16 Jan 2024 23:21:33 GMT ETag: 0x8DC16E9E104CB72 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 4c99f9ef-601e-00d9-16d2-482dcb000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:37 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Akamai-Request-BC: [a=23.218.242.10,b=89897398,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=87, clienttt; dur=0, origin; dur=0 , cdntime; dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55bb9b6 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511257.55bb9b6 Vary: Origin
2024-01-17 17:07:37 UTC	15198	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 6f 70 70 69 6e 67 2d 65 76 65 6e 74 73 2d 64 65 61 6c 2d 63 61 72 64 22 5d 2c 7b 37 38 30 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 61 2e 72 28 74 29 2c 61 2e 64 28 74 2c 7b 53 68 6f 70 70 69 6e 67 45 76 65 6e 74 73 44 65 61 6c 43 61 72 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 65 7d 2c 53 68 6f 70 70 69 6e 67 45 76 65 6e 74 73 44 65 61 6c 43 61 Data Ascii: 00006000"use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["shopping-events-deal-card"],{78029:function(e,t,a){a.r(t),a.d(t,{ShoppingEventsDealCard:function(){return ie},ShoppingEventsDealCa
2024-01-17 17:07:37 UTC	9390	IN	Data Raw: 7b 6c 65 74 5b 61 2c 72 5d 3d 65 2e 73 70 6c 69 74 28 22 3f 22 29 3b 69 66 28 72 29 7b 63 6f 6e 73 74 20 65 3d 72 2e 73 70 6c 69 74 28 22 26 22 29 3b 66 6f 72 28 6c 65 74 20 61 3d 65 2e 6c 65 6e 67 74 68 2d 31 3b 61 3e 3d 30 3b 61 2d 3d 31 29 2d 31 21 3d 3d 74 2e 69 6e 64 65 78 4f 66 28 65 5b 61 5d 2e 73 70 6c 69 74 28 22 3d 22 29 5b 30 5d 29 26 26 65 2e 73 70 6c 69 63 65 28 61 2c 31 29 3b 61 3d 61 2b 22 3f 22 2b 65 2e 6a 6f 69 6e 28 22 26 22 29 7d 72 65 74 75 72 6e 20 61 7d 73 74 61 74 69 63 20 62 79 70 61 73 73 28 65 29 7b 72 65 74 75 72 6e 21 5b 43 2e 70 72 65 44 65 61 6c 73 44 61 79 2c 43 2e 64 65 61 6c 73 44 61 79 2c 43 2e 70 6f 73 74 44 65 61 6c 73 44 61 79 5d 2e 69 6e 63 6c 75 64 65 73 28 65 29 7d 7d 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 6e Data Ascii: {let[a,r]=e.split("?");if(r){const e=r.split("&");for(let a=e.length-1;a>=0;a-=1)-1!==t.indexOf(e[a].split("=")[0])&&e.splice(a,1);a=a+"?"+e.join("&")}return a}static bypass(e){return![C.preDealsDay,C.dealsDay,C.postDealsDay].includes(e)}}!function(e){e.n
2024-01-17 17:07:37 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 65 76 65 6e 74 2e 63 61 74 65 67 6f 72 79 43 6f 6e 66 69 67 73 5b 74 68 69 73 2e 63 75 72 72 65 6e 74 50 61 67 65 4e 75 6d 62 65 72 5d 3a 6e 75 6c 6c 21 3d 3d 28 73 3d 74 68 69 73 2e 65 76 65 6e 74 43 61 72 64 44 61 74 61 29 26 26 76 6f 69 64 20 30 21 3d 3d 73 26 26 6e 75 6c 6c 21 3d 3d 28 6c 3d 73 2e 65 76 65 6e 74 29 26 26 76 6f 69 64 20 30 21 3d 3d 6c 26 26 6e 75 6c 6c 21 3d 3d 28 63 3d 6c 2e 63 61 74 65 67 6f 72 79 43 6f 6e 66 69 67 73 29 26 26 76 6f 69 64 20 30 21 3d 3d 63 26 26 63 2e 6c 65 6e 67 74 68 26 26 28 74 68 69 73 2e 64 69 73 70 6c 61 79 65 64 43 61 74 65 67 6f 72 79 50 61 67 65 3d 28 30 2c 45 2e 5a 29 28 74 68 69 73 2e 65 76 65 6e 74 43 61 72 64 44 61 74 61 2e 65 76 65 6e 74 2e 63 61 74 65 67 6f 72 79 43 6f 6e Data Ascii: 00006000event.categoryConfigs[this.currentPageNumber]:null!==(s=this.eventCardData)&&void 0!==s&&null!==(l=s.event)&&void 0!==l&&null!==(c=l.categoryConfigs)&&void 0!==c&&c.length&&(this.displayedCategoryPage=(0,E.Z)(this.eventCardData.event.categoryCon
2024-01-17 17:07:37 UTC	8204	IN	Data Raw: 3c 2f 63 73 2d 63 6f 72 65 2d 73 64 2d 63 61 72 64 3e 60 3b 76 61 72 20 6d 65 3d 61 28 33 30 31 30 29 2c 62 65 3d 61 28 34 32 36 38 39 29 2c 79 65 3d 61 28 32 37 37 38 32 29 2c 43 65 3d 61 28 32 32 36 37 34 29 2c 78 65 3d 61 28 37 38 39 32 33 29 2c 77 65 3d 61 28 32 39 37 31 37 29 3b 63 6f 6e 73 74 20 44 65 3d 78 65 2e 69 60 20 2e 65 76 65 6e 74 2d 63 61 72 64 20 61 2e 65 76 65 6e 74 2d 63 61 72 64 2d 6c 69 6e 6b 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 65 76 65 6e 74 2d 74 65 78 74 2d 63 6f 6c 6f 72 2d 64 61 72 6b 2c 2d 2d 6e 65 75 74 72 61 6c 2d 66 6f 72 65 67 72 6f 75 6e 64 2d 72 65 73 74 29 7d 63 73 2d 63 6f 72 65 2d 73 64 2d 63 61 72 64 3a 3a 70 61 72 74 28 63 73 2d 73 64 2d 63 61 72 64 29 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 63 61 72 Data Ascii: </cs-core-sd-card>`;var me=a(3010),be=a(42689),ye=a(27782),Ce=a(22674),xe=a(78923),we=a(29717);const De=xe.i` .event-card a.event-card-link{color:var(--event-text-color-dark,--neutral-foreground-rest)}cs-core-sd-card::part(cs-sd-card){background:var(--car
2024-01-17 17:07:37 UTC	850	IN	Data Raw: 30 30 30 30 30 33 34 36 0d 0a 74 69 6f 6e 73 3a 7b 64 65 6c 65 67 61 74 65 73 46 6f 63 75 73 3a 21 30 7d 7d 29 5d 2c 75 29 3b 6c 65 74 20 68 3d 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 69 2e 6e 7b 7d 3b 68 3d 28 30 2c 72 2e 67 6e 29 28 5b 28 30 2c 6f 2e 4d 29 28 7b 6e 61 6d 65 3a 22 6d 73 6e 2d 73 68 6f 70 70 69 6e 67 2d 70 72 6f 6e 67 2d 70 69 76 6f 74 2d 63 61 74 65 67 6f 72 79 2d 63 61 72 64 22 2c 74 65 6d 70 6c 61 74 65 3a 6c 2e 67 32 2c 73 74 79 6c 65 73 3a 6e 2e 62 68 2c 73 68 61 64 6f 77 4f 70 74 69 6f 6e 73 3a 7b 64 65 6c 65 67 61 74 65 73 46 6f 63 75 73 3a 21 30 7d 7d 29 5d 2c 68 29 3b 6c 65 74 20 76 3d 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 69 2e 6e 7b 7d 3b 76 3d 28 30 2c 72 2e 67 6e 29 28 5b 28 30 2c 6f 2e 4d 29 28 7b 6e 61 6d 65 3a 22 6d Data Ascii: 00000346tions:{delegatesFocus:!0}})],u);let h=class extends i.n{};h=(0,r.gn)([(0,o.M)({name:"msn-shopping-prong-pivot-category-card",template:l.g2,styles:n.bh,shadowOptions:{delegatesFocus:!0}})],h);let v=class extends i.n{};v=(0,r.gn)([(0,o.M)({name:"m
2024-01-17 17:07:37 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.16	50129	52.182.143.211	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:37 UTC	1038	OUT	POST /OneCollector/1.0?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1705511256254&w=0&anoncknm=app_anon&NoResponseBody=true HTTP/1.1 Host: browser.events.data.msn.com Connection: keep-alive Content-Length: 16498 sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; _SS=SID=00
2024-01-17 17:07:37 UTC	16384	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 43 6f 6e 74 65 6e 74 56 69 65 77 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 30 31 2d 31 37 54 31 37 3a 30 37 3a 33 36 2e 32 35 31 5a 22 2c 22 76 65 72 22 3a 22 34 2e 30 22 2c 22 69 4b 65 79 22 3a 22 6f 3a 30 64 65 64 36 30 63 37 35 65 34 34 34 34 33 61 61 33 34 38 34 63 34 32 63 31 63 34 33 66 65 38 22 2c 22 65 78 74 22 3a 7b 22 73 64 6b 22 3a 7b 22 76 65 72 22 3a 22 31 44 53 2d 57 65 62 2d 4a 53 2d 33 2e 32 2e 38 22 2c 22 73 65 71 22 3a 35 2c 22 69 6e 73 74 61 6c 6c 49 64 22 3a 22 39 31 64 35 37 31 39 38 2d 66 37 38 37 2d 34 66 35 39 2d 38 61 30 37 2d 64 34 35 39 64 38 32 31 34 35 34 63 22 2c 22 65 70 6f 63 68 22 3a 22 31 31 31 36 32 33 39 39 30 38 22 7d 2c 22 61 70 70 22 3a 7b 22 6c 6f 63 Data Ascii: {"name":"MS.News.Web.ContentView","time":"2024-01-17T17:07:36.251Z","ver":"4.0","iKey":"o:0ded60c75e44443aa3484c42c1c43fe8","ext":{"sdk":{"ver":"1DS-Web-JS-3.2.8","seq":5,"installId":"91d57198-f787-4f59-8a07-d459d821454c","epoch":"1116239908"},"app":{"loc
2024-01-17 17:07:37 UTC	114	OUT	Data Raw: 32 2c 22 68 65 69 67 68 74 22 3a 33 30 34 2c 22 74 65 6d 70 6c 61 74 65 22 3a 22 6d 73 66 74 2d 6e 69 6e 65 2d 63 61 72 64 2d 66 69 76 65 2d 63 6f 6c 2d 61 74 66 22 2c 22 73 6c 6f 74 22 3a 31 2c 22 74 72 61 63 65 49 64 49 6e 64 65 78 22 3a 30 7d 7d 5d 2c 22 63 6f 6e 74 65 6e 74 56 69 65 77 54 79 70 65 22 3a 22 70 61 72 74 69 61 6c 22 7d 7d Data Ascii: 2,"height":304,"template":"msft-nine-card-five-col-atf","slot":1,"traceIdIndex":0}}],"contentViewType":"partial"}}
2024-01-17 17:07:37 UTC	890	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: MC1=GUID=b16fcb0dd27f40e096ff326010525334&HASH=b16f&LV=202401&V=4&LU=1705511257598; Domain=.microsoft.com; Expires=Thu, 16 Jan 2025 17:07:37 GMT; Path=/;Secure; SameSite=None Set-Cookie: MS0=a932ccdbb8624974a45b62b29f50016e; Domain=.microsoft.com; Expires=Wed, 17 Jan 2024 17:37:37 GMT; Path=/;Secure; SameSite=None time-delta-millis: 1344 Access-Control-Allow-Headers: P3P,Set-Cookie,time-delta-millis Access-Control-Allow-Methods: POST Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com Access-Control-Expose-Headers: time-delta-millis Date: Wed, 17 Jan 2024 17:07:37 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.16	50137	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:37 UTC	663	OUT	GET /tenant/amp/entityid/AA1a8uES.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:37 UTC	547	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Last-Modified: Fri, 05 Jan 2024 01:41:38 GMT X-Datacenter: eastus X-ActivityId: 64a692fd-7979-4492-add4-5569999ad352 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Type: image/jpeg Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA1a8uES?w=80&h=80&q=60&m=6&f=jpg&u=t X-Source-Length: 81540 Content-Length: 2048 Cache-Control: public, max-age=117391 Expires: Fri, 19 Jan 2024 01:44:08 GMT Date: Wed, 17 Jan 2024 17:07:37 GMT Connection: close
2024-01-17 17:07:37 UTC	2048	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 50 00 50 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOPP}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.16	50138	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:37 UTC	663	OUT	GET /tenant/amp/entityid/AA16sXzp.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:37 UTC	548	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA16sXzp?w=80&h=80&q=60&m=6&f=jpg&u=t Last-Modified: Mon, 15 Jan 2024 13:18:22 GMT X-Source-Length: 85683 X-Datacenter: northeu X-ActivityId: 23945c05-ae62-49b0-8d70-696dae74977e Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 2048 Cache-Control: public, max-age=245424 Expires: Sat, 20 Jan 2024 13:18:01 GMT Date: Wed, 17 Jan 2024 17:07:37 GMT Connection: close
2024-01-17 17:07:37 UTC	2048	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 50 00 50 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOPP}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.16	50139	68.67.179.153	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:37 UTC	1090	OUT	GET /mapuid?member=280&user=2136D0069C246D353F30C40F9D676C20&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fm.adnxs.com%2Fseg%3Fadd%3D5159620%26redir%3Dhttps%253A%252F%252Fib.adnxs.com%252Fsetuid%253Fentity%253D483%2526code%253D2136D0069C246D353F30C40F9D676C20%2526gdpr%253D0%2526gdpr_consent%253D HTTP/1.1 Host: m.adnxs.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: XANDR_PANID=_mTLHUjwEGsYdt5wx57SYNZmmEk8m3oPxp4vPtekqr4U9eF7TielXmn7cqxjLl4FnC9Pyk2a6uF3y1J-YtkHIeW4pOT_IjqkaUEKbGipwaA.; anj=dTM7k!M4/8CxrEQF']wIg2GTsq'-(%!]tbP6j2F-XstGt!@DWZ$h:W'; uuid2=6324846154276582513
2024-01-17 17:07:37 UTC	1439	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Wed, 17 Jan 2024 17:07:37 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Set-Cookie: XANDR_PANID=agNsu9ReRXCcgy1HISfIvnHyM1xlkrP0YWY9Dq9FyOkZDgJCzu0pEdMHHZ1_oFieW48Np9O1oYGc5hJ3TfOAcCjhZ265N-DArSbqZL9Uybg.; SameSite=None; Path=/; Max-Age=314496000; Domain=.adnxs.com; Secure; Partitioned Location: https://m.adnxs.com/seg?add=5159620&redir=https%3A%2F%2Fib.adnxs.com%2Fsetuid%3Fentity%3D483%26code%3D2136D0069C246D353F30C40F9D676C20%26gdpr%3D0%26gdpr_consent%3D AN-X-Request-Uuid: 486e2ae2-1385-461a-973a-05fede04521a Set-Cookie: anj=dTM7k!M4/8CxrEQF']wIg2GTsq'-(%!]tc58bhzs#DIgl#XsfVhRuLP; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 16-Apr-2024 17:07:37 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: uuid2=6324846154276582513; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 16-Apr-2024 17:07:37 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 154.16.192.193; 154.16.192.193; 570.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.16	50141	68.67.179.87	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:37 UTC	881	OUT	GET /setuid?entity=483&code=2136D0069C246D353F30C40F9D676C20&gdpr=0&gdpr_consent= HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: uuid2=6324846154276582513; XANDR_PANID=myllpZ44gzPT_pZ4qxLBSL052oaBS9lZ_UzJtRO_s9gAtWhg8ZrbLjZ-ldrqD379JYp4lgN_i7s0gbxFZimEJE_D-wCZhkiLRtsdx0WJris.; anj=dTM7k!M4/8D>6NRF']wIg2GTsq'-(%!fst<)<V)+PlZ[C[-kX-dbbHh
2024-01-17 17:07:37 UTC	1312	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Wed, 17 Jan 2024 17:07:37 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Set-Cookie: XANDR_PANID=xTyIt20mTpdOjSzNRyB23rvp0E6-bzwq2m4ou-DDmr-qZia9bkMbB2n-1uajK0JUcMqdKpEq5diR4jgW1WdDkJE0o5-jVvHd2PT6gfOeQfM.; SameSite=None; Path=/; Max-Age=314496000; Domain=.adnxs.com; Secure; Partitioned AN-X-Request-Uuid: b9d15fa8-b764-459e-a916-3664c7601e9d Set-Cookie: anj=dTM7k!M4.FEVNsVF']wIg2GTsq'-(%!fst<)<]%Hp?cM9Z<b=AE<$kEDYRWYq#orBp%n1Eqy4*qGlzA:q!j:Fp'sURI0)L_`?9Lf!AXTO:4=sB!%kO#DO9F1; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 16-Apr-2024 17:07:37 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: uuid2=6324846154276582513; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 16-Apr-2024 17:07:37 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 154.16.192.193; 154.16.192.193; 585.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-01-17 17:07:37 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.16	50145	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:37 UTC	659	OUT	GET /tenant/amp/entityid/BB3YhSJ?w=16&h=16&q=100&m=6&f=png&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:37 UTC	543	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/BB3YhSJ?w=16&h=16&q=100&m=6&f=png&u=t Last-Modified: Fri, 12 Jan 2024 02:31:51 GMT X-Source-Length: 314 X-Datacenter: eastus X-ActivityId: 6971dc63-fa31-4981-bc0c-12dcda101888 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 512 Cache-Control: public, max-age=336283 Expires: Sun, 21 Jan 2024 14:32:20 GMT Date: Wed, 17 Jan 2024 17:07:37 GMT Connection: close
2024-01-17 17:07:37 UTC	512	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 01 52 49 44 41 54 78 01 a5 52 31 4b c3 50 10 fe 62 a3 26 a1 16 02 56 71 78 93 10 70 76 8a 6b 30 53 e2 98 1f e0 90 7f 93 7f e0 e2 56 33 39 8b 7b 70 70 11 07 13 50 07 23 d2 36 d0 41 49 2b 2a d5 3b 7d a5 21 45 30 7e 90 97 bb 7b 77 df fb ee dd 53 c3 30 9c 7e 01 4d a1 52 b1 a2 28 4d eb a1 36 ae fc 29 64 02 df f7 d9 2d 8a 02 49 92 fc 89 93 09 3c cf e3 a2 2c cb 9a 11 c8 23 75 5d 87 e3 38 30 0c 03 69 9a e2 fa ee 06 a3 b5 37 de 5e 79 5f 82 f9 bc 8c be f9 2a d3 b1 39 5a ad de 81 10 02 f4 11 48 55 ef fc 14 87 a3 23 f6 db 93 16 f6 2f bb 38 db 2d d8 27 32 ef 62 a3 4a 50 96 25 b7 60 db 36 ab 38 d8 73 61 Data Ascii: PNGIHDRapHYs+RIDATxR1KPb&Vqxpvk0SV39{ppP#6AI+;}!E0~{wS0~MR(M6)d-I<,#u]80i7^y_9ZHU#/8-'2bJP%`68sa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.16	50135	52.182.143.211	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:37 UTC	1037	OUT	POST /OneCollector/1.0?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1705511256471&w=0&anoncknm=app_anon&NoResponseBody=true HTTP/1.1 Host: browser.events.data.msn.com Connection: keep-alive Content-Length: 8947 sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; _SS=SID=00
2024-01-17 17:07:37 UTC	8947	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 41 70 70 45 72 72 6f 72 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 30 31 2d 31 37 54 31 37 3a 30 37 3a 33 36 2e 34 36 39 5a 22 2c 22 76 65 72 22 3a 22 34 2e 30 22 2c 22 69 4b 65 79 22 3a 22 6f 3a 30 64 65 64 36 30 63 37 35 65 34 34 34 34 33 61 61 33 34 38 34 63 34 32 63 31 63 34 33 66 65 38 22 2c 22 65 78 74 22 3a 7b 22 73 64 6b 22 3a 7b 22 76 65 72 22 3a 22 31 44 53 2d 57 65 62 2d 4a 53 2d 33 2e 32 2e 38 22 2c 22 73 65 71 22 3a 36 2c 22 69 6e 73 74 61 6c 6c 49 64 22 3a 22 39 31 64 35 37 31 39 38 2d 66 37 38 37 2d 34 66 35 39 2d 38 61 30 37 2d 64 34 35 39 64 38 32 31 34 35 34 63 22 2c 22 65 70 6f 63 68 22 3a 22 31 31 31 36 32 33 39 39 30 38 22 7d 2c 22 61 70 70 22 3a 7b 22 6c 6f 63 61 6c 65 Data Ascii: {"name":"MS.News.Web.AppError","time":"2024-01-17T17:07:36.469Z","ver":"4.0","iKey":"o:0ded60c75e44443aa3484c42c1c43fe8","ext":{"sdk":{"ver":"1DS-Web-JS-3.2.8","seq":6,"installId":"91d57198-f787-4f59-8a07-d459d821454c","epoch":"1116239908"},"app":{"locale
2024-01-17 17:07:42 UTC	890	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: MC1=GUID=48fa83529aa9401788d1c778d2e3be25&HASH=48fa&LV=202401&V=4&LU=1705511262742; Domain=.microsoft.com; Expires=Thu, 16 Jan 2025 17:07:42 GMT; Path=/;Secure; SameSite=None Set-Cookie: MS0=1570c325e73c4bfd868d1492da25f5f5; Domain=.microsoft.com; Expires=Wed, 17 Jan 2024 17:37:42 GMT; Path=/;Secure; SameSite=None time-delta-millis: 6271 Access-Control-Allow-Headers: P3P,Set-Cookie,time-delta-millis Access-Control-Allow-Methods: POST Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com Access-Control-Expose-Headers: time-delta-millis Date: Wed, 17 Jan 2024 17:07:42 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.16	50143	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:37 UTC	659	OUT	GET /tenant/amp/entityid/BBph6Sm?w=16&h=16&q=100&m=6&f=png&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:37 UTC	546	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Last-Modified: Wed, 17 Jan 2024 09:59:16 GMT X-Datacenter: westus X-ActivityId: 9bab4b73-5939-4d3d-bc9f-5994170f7957 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Type: image/png Content-Location: https://img.s-msn.com/tenant/amp/entityid/BBph6Sm?w=16&h=16&q=100&m=6&f=png&u=t X-Source-Length: 19025 Content-Length: 1302 Cache-Control: public, max-age=406302 Expires: Mon, 22 Jan 2024 09:59:19 GMT Date: Wed, 17 Jan 2024 17:07:37 GMT Connection: close
2024-01-17 17:07:37 UTC	1302	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 02 4d 49 44 41 54 78 01 63 61 a0 10 50 cf 80 ff ff ff 33 02 1d c3 0c c5 4c 40 fa 2f 10 ff 63 64 64 fc 03 a4 71 02 b0 0b a0 9a 59 81 aa b8 a1 18 c4 fe 06 d4 fc 12 a7 4e a8 04 cc 0b 20 9b b9 80 58 02 88 65 80 18 e4 1a ae df e7 56 ea fd da 33 d3 eb df cb 87 5a 8c 2c 1c 8c 8c 9c 1c d7 98 44 05 a7 72 66 ef 59 04 94 07 03 98 01 20 27 73 02 31 c8 00 23 20 b6 fb b9 22 c2 ee d7 f6 95 3c 4c da 8e 6f 98 55 cd 2e 31 fc fb ff eb ff b7 6f 32 bf cf 1d 5c f8 a5 4c 26 89 a7 eb 89 03 50 1d 03 b2 01 20 57 80 0c 52 fe 73 a0 cc eb ef f5 4d 0c 1c 99 33 76 fc bb 7f 8e f1 ef 83 cb 92 ff ff fc 63 63 96 d5 3d c5 9a Data Ascii: PNGIHDRapHYs+MIDATxcaP3L@/cddqYN XeV3Z,DrfY 's1# "<LoU.1o2\L&P WRsM3vcc=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.16	50142	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:37 UTC	659	OUT	GET /tenant/amp/entityid/AA36Tom?w=16&h=16&q=100&m=6&f=png&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:38 UTC	543	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Last-Modified: Sat, 06 Jan 2024 21:42:39 GMT X-Datacenter: eastap X-ActivityId: e82f91e5-a3f6-4700-a321-f185524a4591 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Type: image/png Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA36Tom?w=16&h=16&q=100&m=6&f=png&u=t X-Source-Length: 331 Content-Length: 512 Cache-Control: public, max-age=275864 Expires: Sat, 20 Jan 2024 21:45:21 GMT Date: Wed, 17 Jan 2024 17:07:37 GMT Connection: close
2024-01-17 17:07:38 UTC	512	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 01 13 49 44 41 54 78 01 dd 91 21 6f 83 50 14 85 8f a8 e3 07 50 0d 1e 3f 3c ed 24 4d 27 d7 4e 42 8a 24 45 42 8a af 5c f5 9a 30 dd 79 7c d1 05 0d 1e 3f f4 c6 b9 c9 7b 49 b3 9a a5 ae 47 70 df 7d ef 9d 8f c3 65 f2 3c 9f ff e0 0e 4d ee f0 8a f5 51 00 41 18 c2 f3 3c 44 9b 0d de 0f 07 24 49 82 38 8e 51 d7 35 6c db 86 61 18 18 86 01 c9 76 8b 27 d7 45 9a a6 c8 f3 1c d5 f9 0c 99 c1 d7 e9 04 77 3c a0 78 d9 b6 2c 74 6d 8b b2 2c e1 fb 3e a2 28 82 e3 38 72 4e 13 a5 aa 00 fa be 17 a3 69 9a e8 ba 0e d6 f8 56 73 3a 15 c8 67 51 48 1a a6 ba 25 fd 17 68 7c 5d ad c0 34 de 6c a6 ef 16 23 80 b1 c3 20 c0 7e bf d7 Data Ascii: PNGIHDRapHYs+IDATx!oPP?<$M'NB$EB\0y\|?{IGp}e<MQA<D$I8Q5lav'Ew<x,tm,>(8rNiVs:gQH%h\|]4l# ~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.16	50144	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:37 UTC	659	OUT	GET /tenant/amp/entityid/AAywOab?w=16&h=16&q=100&m=6&f=png&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:38 UTC	546	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Last-Modified: Wed, 17 Jan 2024 08:48:14 GMT X-Datacenter: westus X-ActivityId: 53be6ef2-04e5-4527-9a48-05df9e4ebc3d Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Type: image/png Content-Location: https://img.s-msn.com/tenant/amp/entityid/AAywOab?w=16&h=16&q=100&m=6&f=png&u=t X-Source-Length: 18737 Content-Length: 1248 Cache-Control: public, max-age=402108 Expires: Mon, 22 Jan 2024 08:49:25 GMT Date: Wed, 17 Jan 2024 17:07:37 GMT Connection: close
2024-01-17 17:07:38 UTC	1248	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 02 32 49 44 41 54 78 01 8d 92 5d 48 93 51 1c c6 7f 6d af e6 36 df 6d 22 59 b9 c8 2d 99 2e 33 c2 ad 0f 85 25 54 44 62 1f 04 42 94 e1 45 e6 4d 61 48 41 16 16 0a c6 8a 28 a6 44 b0 22 2a c3 e8 8b 8a 1c 15 5d 88 10 84 74 91 84 75 11 b3 82 d1 c7 ac c4 3e dc dc 32 74 eb ec 5d c2 30 5b fe 6f ce 39 ef 7b 9e e7 f9 9d f3 3f 12 85 5b 3e 12 8b c9 f8 03 dc bc eb 66 db c6 72 4e 5d ba 47 e3 ee 1a ea 9a 8e 73 ac a1 9a f1 f1 09 ec 9b ea 19 1a 1c 06 43 26 49 15 94 c4 22 97 d1 9f a8 cd b9 ac 77 96 28 ff ce 5c f4 42 46 1e ed 4d 75 e8 74 1a 0e ba 3b 19 7a fe 0a 6c f9 88 b0 24 3d 72 dc 20 c8 48 48 36 17 2d 22 cb Data Ascii: PNGIHDRapHYs+2IDATx]HQm6m"Y-.3%TDbBEMaHA(D"*]tu>2t]0[o9{?[>frN]GsC&I"w(\BFMut;zl$=r HH6-"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.16	50146	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:37 UTC	659	OUT	GET /tenant/amp/entityid/BBNvr53?w=16&h=16&q=100&m=6&f=png&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:38 UTC	544	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Last-Modified: Mon, 15 Jan 2024 19:52:49 GMT X-Datacenter: westus X-ActivityId: 249f5d6a-448c-46f6-965e-70abd5829b58 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Type: image/png Content-Location: https://img.s-msn.com/tenant/amp/entityid/BBNvr53?w=16&h=16&q=100&m=6&f=png&u=t X-Source-Length: 592 Content-Length: 1234 Cache-Control: public, max-age=269134 Expires: Sat, 20 Jan 2024 19:53:11 GMT Date: Wed, 17 Jan 2024 17:07:37 GMT Connection: close
2024-01-17 17:07:38 UTC	1234	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 02 2b 49 44 41 54 78 01 8d 93 bd 6b 14 51 14 c5 7f b3 19 13 b3 9b 84 45 54 44 d0 f5 03 a2 85 20 88 45 44 c3 8a fe 0f 82 58 58 a8 95 c1 22 e5 16 0a 29 2c 03 86 58 4d 2c f4 0f 50 02 8a 62 a1 2e ba 10 50 2c d2 6a 34 43 16 c5 af 60 d4 b8 6a dc 79 39 77 de 84 6c 16 03 3e 78 f3 3e ee 3d e7 de 73 e7 dd 90 f6 31 e6 ba 28 50 c6 31 28 53 29 33 c7 04 3c 65 91 2a 97 82 df ad 90 b5 04 91 3b 21 c7 11 81 8f b2 41 6e 2e 73 0d b4 2e 69 e6 a9 11 b9 cb 5c 08 1e 65 16 56 09 26 dc 59 81 c7 c9 d1 c3 5f 99 ff ac b8 b4 ac a1 88 13 26 99 70 43 9c 0f 6e 9a c5 13 44 ee b8 c0 d7 75 2e a4 e0 16 cc 9a ad 11 5b 00 f3 8d Data Ascii: PNGIHDRapHYs++IDATxkQETD EDXX"),XM,Pb.P,j4C`jy9wl>x>=s1(P1(S)3<e*;!An.s.i\eV&Y_&pCnDu.[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.16	50147	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:37 UTC	660	OUT	GET /tenant/amp/entityid/AA1igmhi?w=16&h=16&q=100&m=6&f=png&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:38 UTC	547	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA1igmhi?w=16&h=16&q=100&m=6&f=png&u=t Last-Modified: Mon, 15 Jan 2024 20:46:52 GMT X-Source-Length: 25586 X-Datacenter: westus X-ActivityId: 7cd8d047-8c74-4397-9253-2ab92203051f Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 1200 Cache-Control: public, max-age=272442 Expires: Sat, 20 Jan 2024 20:48:20 GMT Date: Wed, 17 Jan 2024 17:07:38 GMT Connection: close
2024-01-17 17:07:38 UTC	1200	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 02 1a 49 44 41 54 78 01 9d 53 4d 4f 13 51 14 3d 7d f3 66 0a dd 37 18 ac d8 b8 32 84 fe 05 59 41 0c 09 6e 24 d1 b8 00 5d a8 3b 91 bd 46 65 41 fc 03 ea 8a 18 dc e2 52 6b a8 1b 49 d4 60 13 ea 4a 12 9a d6 ae 68 da 6e 9b 96 d8 ce 07 f7 bc 99 d6 76 a2 1b 6e 32 ef bd b9 73 cf 79 f7 9c de ea ab d9 2b 81 8f 00 e7 09 85 04 34 c1 3d cf 43 af f7 07 da d2 b0 1d 07 08 62 84 09 a1 8f a5 cc 85 92 d7 fd 7e 1f b3 b9 39 3c de d8 c0 fe 97 7d bc db d9 81 63 db 10 f2 10 34 d8 89 e0 99 31 42 a6 3d b9 7d 6a ea 02 16 16 17 d1 e9 74 f1 76 7b 1b c2 30 56 34 04 86 f0 b1 55 f3 cd f7 3d 93 74 dd 3e 3c 39 9f 76 4f a1 94 Data Ascii: PNGIHDRapHYs+IDATxSMOQ=}f72YAn$];FeARkI`Jhnvn2sy+4=Cb~9<}c41B=}jtv{0V4U=t><9vO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.16	50148	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:37 UTC	504	OUT	GET /bundles/v1/edgeChromium/latest/shopping-sd-card.8c52f62f656c03f3cd4c.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:38 UTC	1186	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: vJT+HbhTeiwghTGZ71x7jQ== Last-Modified: Tue, 16 Jan 2024 23:21:31 GMT ETag: 0x8DC16E9DF7E35AB Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 719109de-601e-0019-3ad2-48a98f000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:38 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Akamai-Request-BC: [a=23.218.242.10,b=89898211,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=0, origin; dur=0 , cdntime; dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55bbce3 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511258.55bbce3 Vary: Origin
2024-01-17 17:07:38 UTC	15198	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 68 6f 70 70 69 6e 67 2d 73 64 2d 63 61 72 64 22 5d 2c 7b 37 30 38 31 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 69 2e 72 28 74 29 2c 69 2e 64 28 74 2c 7b 53 68 6f 70 70 69 6e 67 53 64 43 61 72 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 65 7d 2c 53 68 6f 70 70 69 6e 67 53 64 43 61 72 64 53 74 79 6c 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 Data Ascii: 00006000"use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["shopping-sd-card"],{70812:function(e,t,i){i.r(t),i.d(t,{ShoppingSdCard:function(){return ee},ShoppingSdCardStyles:function(){retur
2024-01-17 17:07:38 UTC	9390	IN	Data Raw: 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 74 65 78 74 29 7c 7c 79 3b 63 6f 6e 73 74 20 55 3d 54 3d 3d 3d 28 4d 2e 5f 62 2e 41 6c 6c 7c 7c 4d 2e 5f 62 2e 54 65 78 74 29 26 26 6e 75 6c 6c 21 3d 49 26 26 49 2e 69 64 3f 64 5b 49 2e 69 64 5d 3a 6e 75 6c 6c 3d 3d 78 7c 7c 6e 75 6c 6c 3d 3d 3d 28 6f 3d 78 2e 73 65 65 41 6c 6c 4c 69 6e 6b 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 74 65 78 74 3b 6c 65 74 20 42 3b 69 66 28 21 24 26 26 6e 75 6c 6c 21 3d 78 26 26 6e 75 6c 6c 21 3d 3d 28 72 3d 78 2e 73 65 61 72 63 68 51 75 65 72 69 65 73 29 26 26 76 6f 69 64 20 30 21 3d 3d 72 26 26 72 2e 6c 65 6e 67 74 68 29 7b 63 6f 6e 73 74 20 74 3d 78 2e 73 65 61 72 63 68 51 75 65 72 69 65 73 5b 65 2e 63 75 72 72 65 6e 74 50 Data Ascii: e)\|\|void 0===a?void 0:a.text)\|\|y;const U=T===(M._b.All\|\|M._b.Text)&&null!=I&&I.id?d[I.id]:null==x\|\|null===(o=x.seeAllLink)\|\|void 0===o?void 0:o.text;let B;if(!$&&null!=x&&null!==(r=x.searchQueries)&&void 0!==r&&r.length){const t=x.searchQueries[e.currentP
2024-01-17 17:07:38 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 65 73 44 61 74 61 2c 74 68 69 73 2e 73 68 6f 70 70 69 6e 67 45 6e 74 69 74 69 65 73 44 61 74 61 42 79 43 61 74 65 67 6f 72 79 5b 65 5d 29 2c 74 68 69 73 2e 6e 61 76 48 65 61 64 65 72 4f 70 74 69 6f 6e 73 5b 74 68 69 73 2e 6e 61 76 48 65 61 64 65 72 53 65 6c 65 63 74 65 64 49 6e 64 65 78 5d 2e 73 65 6c 65 63 74 65 64 3d 21 31 2c 74 68 69 73 2e 6e 61 76 48 65 61 64 65 72 4f 70 74 69 6f 6e 73 5b 70 5d 2e 73 65 6c 65 63 74 65 64 3d 21 30 2c 74 68 69 73 2e 6e 61 76 48 65 61 64 65 72 53 65 6c 65 63 74 65 64 49 6e 64 65 78 3d 70 2c 74 68 69 73 2e 63 75 72 72 65 6e 74 50 61 67 65 4e 75 6d 62 65 72 3d 30 2c 74 68 69 73 2e 72 65 66 72 65 73 68 46 6f 6f 74 65 72 44 61 74 61 28 29 29 2c 6e 75 6c 6c 21 3d 3d 28 6f 3d 74 68 69 73 2e 73 75 Data Ascii: 00006000esData,this.shoppingEntitiesDataByCategory[e]),this.navHeaderOptions[this.navHeaderSelectedIndex].selected=!1,this.navHeaderOptions[p].selected=!0,this.navHeaderSelectedIndex=p,this.currentPageNumber=0,this.refreshFooterData()),null!==(o=this.su
2024-01-17 17:07:38 UTC	8204	IN	Data Raw: 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 78 2d 68 65 69 67 68 74 3a 36 38 70 78 3b 70 61 64 64 69 6e 67 3a 30 70 78 20 39 70 78 20 30 70 78 20 31 31 70 78 3b 67 61 70 3a 35 70 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 78 2d 73 74 61 72 74 3b 6d 61 72 67 69 6e 3a 34 34 70 78 20 30 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 33 38 70 78 7d 2e 69 6d 61 67 65 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 69 6e 2d 77 69 64 74 68 3a 31 34 30 70 78 3b 68 65 69 67 68 74 3a 31 33 38 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 62 6f 72 64 65 72 Data Ascii: sizing:border-box;width:100%;height:100%;max-height:68px;padding:0px 9px 0px 11px;gap:5px;justify-content:flex-start;align-self:flex-start;margin:44px 0 0;max-width:138px}.image-container{min-width:140px;height:138px;overflow:hidden;background:#fff;border
2024-01-17 17:07:38 UTC	10963	IN	Data Raw: 30 30 30 30 32 41 43 37 0d 0a 20 30 21 3d 3d 74 26 26 6e 75 6c 6c 21 3d 3d 28 69 3d 74 2e 63 61 73 68 62 61 63 6b 49 6e 66 6f 29 26 26 76 6f 69 64 20 30 21 3d 3d 69 26 26 69 2e 63 61 73 68 62 61 63 6b 50 65 72 63 65 6e 74 61 67 65 26 26 28 6e 75 6c 6c 3d 3d 3d 28 6e 3d 65 2e 64 69 73 70 6c 61 79 65 64 53 68 6f 70 70 69 6e 67 45 6e 74 69 74 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 7c 7c 6e 75 6c 6c 3d 3d 3d 28 61 3d 6e 2e 63 61 73 68 62 61 63 6b 49 6e 66 6f 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 63 61 73 68 62 61 63 6b 50 65 72 63 65 6e 74 61 67 65 29 3e 30 3f 6e 75 6c 6c 3d 3d 3d 28 6f 3d 65 2e 64 69 73 70 6c 61 79 65 64 53 68 6f 70 70 69 6e 67 45 6e 74 69 74 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 7c 7c 6e 75 6c 6c 3d 3d Data Ascii: 00002AC7 0!==t&&null!==(i=t.cashbackInfo)&&void 0!==i&&i.cashbackPercentage&&(null===(n=e.displayedShoppingEntity)\|\|void 0===n\|\|null===(a=n.cashbackInfo)\|\|void 0===a?void 0:a.cashbackPercentage)>0?null===(o=e.displayedShoppingEntity)\|\|void 0===o\|\|null==
2024-01-17 17:07:38 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 7d 2e 61 62 6f 75 74 2d 73 6c 75 67 2d 64 69 61 6c 6f 67 2d 6c 69 6e 6b 2d 63 6f 6e 74 61 69 6e 65 72 20 73 70 61 6e 7b 6d 61 72 67 69 6e 3a 30 20 35 70 78 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6e 65 75 74 72 61 6c 2d 66 6f 72 65 67 72 6f 75 6e 64 2d 68 69 6e 74 29 7d 2e 61 62 6f 75 74 2d 73 6c 75 67 2d 6c 69 6e 6b 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 63 6f 6c 6f 72 3a 24 7b 78 74 2e 67 6f 7d 7d 2e 61 62 6f 75 74 2d 73 6c 75 67 2d 6c 69 6e 6b 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 7d 2e 61 62 6f 75 74 2d 73 6c 75 Data Ascii: 00004000margin-top:10px}.about-slug-dialog-link-container span{margin:0 5px;color:var(--neutral-foreground-hint)}.about-slug-link{cursor:pointer;text-decoration:none;color:${xt.go}}.about-slug-link:hover{text-decoration:underline;outline:none}.about-slu
2024-01-17 17:07:38 UTC	12	IN	Data Raw: 65 6c 66 3a 20 66 6c 65 78 2d 0d 0a Data Ascii: elf: flex-
2024-01-17 17:07:38 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 73 74 61 72 74 3b 22 2c 72 2e 74 65 78 74 3d 65 2e 73 74 61 74 75 73 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 29 2c 65 2e 73 74 61 74 75 73 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 6f 2e 43 74 2e 75 70 63 6f 6d 69 6e 67 29 7b 63 6f 6e 73 74 20 6f 3d 6e 65 77 20 44 61 74 65 28 65 2e 73 74 61 72 74 5f 74 69 6d 65 29 2c 73 3d 61 2e 6a 47 2e 43 75 72 72 65 6e 74 4d 61 72 6b 65 74 3b 72 2e 74 65 78 74 3d 28 30 2c 64 2e 43 55 29 28 6f 2c 74 2c 69 2c 73 29 2c 73 3d 3d 3d 6e 2e 49 59 2e 49 4e 26 26 72 2e 74 65 78 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 74 6f 64 61 79 22 29 3e 3d 30 26 26 28 72 2e 74 65 78 74 3d 72 2e 74 65 78 74 2e 72 65 70 6c 61 63 65 28 22 54 6f 64 61 79 22 2c 22 4c 69 Data Ascii: 00004000start;",r.text=e.status.toUpperCase()),e.status.toLowerCase()===o.Ct.upcoming){const o=new Date(e.start_time),s=a.jG.CurrentMarket;r.text=(0,d.CU)(o,t,i,s),s===n.IY.IN&&r.text.toLowerCase().indexOf("today")>=0&&(r.text=r.text.replace("Today","Li
2024-01-17 17:07:38 UTC	12	IN	Data Raw: 31 2e 32 35 20 30 20 31 20 30 0d 0a Data Ascii: 1.25 0 1 0
2024-01-17 17:07:38 UTC	4124	IN	Data Raw: 30 30 30 30 31 30 31 30 0d 0a 20 30 2d 32 2e 35 20 31 2e 32 35 20 31 2e 32 35 20 30 20 30 20 30 20 30 20 32 2e 35 7a 22 2f 3e 3c 2f 73 76 67 3e 27 7d 2c 37 37 35 36 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 69 2e 64 28 74 2c 7b 49 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 7d 29 3b 76 61 72 20 6e 3d 69 28 33 33 39 34 30 29 2c 61 3d 69 28 32 38 39 30 34 29 2c 6f 3d 69 28 34 32 35 39 30 29 2c 72 3d 69 28 39 39 34 35 32 29 3b 63 6c 61 73 73 20 73 20 65 78 74 65 6e 64 73 20 61 2e 48 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 73 75 70 65 72 28 2e 2e 2e 61 72 67 75 6d 65 6e 74 73 29 2c 74 68 69 73 2e 68 69 64 64 65 6e 3d 21 31 2c 74 68 69 73 2e 64 69 73 61 62 6c 65 41 63 74 69 6f 6e 42 75 74 74 6f 6e 3d 21 31 2c 74 68 69 73 2e Data Ascii: 00001010 0-2.5 1.25 1.25 0 0 0 0 2.5z"/></svg>'},77568:function(e,t,i){i.d(t,{I:function(){return s}});var n=i(33940),a=i(28904),o=i(42590),r=i(99452);class s extends a.H{constructor(){super(...arguments),this.hidden=!1,this.disableActionButton=!1,this.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.16	50140	162.19.138.116	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:37 UTC	604	OUT	GET /c/495/0/0/1.gif?gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:38 UTC	1171	IN	HTTP/1.1 200 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: cf=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure content-type: image/gif;charset=UTF-8 transfer-encoding: chunked date: Wed, 17 Jan 2024 17:07:37 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-01-17 17:07:38 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.16	50149	68.67.179.153	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:38 UTC	947	OUT	GET /seg?add=5159620&redir=https%3A%2F%2Fib.adnxs.com%2Fsetuid%3Fentity%3D483%26code%3D2136D0069C246D353F30C40F9D676C20%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1 Host: m.adnxs.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: uuid2=6324846154276582513; XANDR_PANID=agNsu9ReRXCcgy1HISfIvnHyM1xlkrP0YWY9Dq9FyOkZDgJCzu0pEdMHHZ1_oFieW48Np9O1oYGc5hJ3TfOAcCjhZ265N-DArSbqZL9Uybg.; anj=dTM7k!M4/8CxrEQF']wIg2GTsq'-(%!]tc58bhzs#DIgl#XsfVhRuLP
2024-01-17 17:07:38 UTC	1450	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Wed, 17 Jan 2024 17:07:38 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Set-Cookie: XANDR_PANID=4IetkXWoZZtNLGNJ0cb-AqhQhIczE6TRaApvkXU5KMvRVBthT958pVCnd0_WojkVf5Iyp3RPabh0W6kOzFJGPGNqBxa8PZrJ3PvxhU9Xebw.; SameSite=None; Path=/; Max-Age=314496000; Domain=.adnxs.com; Secure; Partitioned Location: https://ib.adnxs.com/setuid?entity=483&code=2136D0069C246D353F30C40F9D676C20&gdpr=0&gdpr_consent= AN-X-Request-Uuid: 513f71f8-6046-44c5-8b7a-6f52be74e52e Set-Cookie: anj=dTM7k!M4/8D>6NRF']wIg2GTsq'-(%!m5LRe#ns'cd#A^e+.<Q!8n7U[wR/#; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 16-Apr-2024 17:07:38 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: uuid2=6324846154276582513; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 16-Apr-2024 17:07:38 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 154.16.192.193; 154.16.192.193; 570.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.16	50150	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:38 UTC	659	OUT	GET /tenant/amp/entityid/AAzMHd0?w=16&h=16&q=100&m=6&f=png&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:38 UTC	546	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AAzMHd0?w=16&h=16&q=100&m=6&f=png&u=t Last-Modified: Thu, 11 Jan 2024 02:22:05 GMT X-Source-Length: 15289 X-Datacenter: westus X-ActivityId: bf16c8fc-2686-41f7-b679-0edf2f31d977 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 1490 Cache-Control: public, max-age=249304 Expires: Sat, 20 Jan 2024 14:22:42 GMT Date: Wed, 17 Jan 2024 17:07:38 GMT Connection: close
2024-01-17 17:07:38 UTC	1490	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 02 ab 49 44 41 54 78 01 8d 52 4b 48 54 51 18 fe ce bd 67 1e ce f8 c8 47 2e 34 f3 55 56 14 21 14 59 d4 22 23 5c 54 9a 09 26 2e 84 c2 20 82 1e 8b 68 d3 b6 68 d1 22 da 64 e5 14 b6 31 d0 84 56 ed 82 8a 84 a8 48 88 b2 48 49 8a 1a c9 52 d3 c6 3b 39 de c7 e9 3b 77 d4 b2 36 1d e6 3f f7 9c ff ff be ef 7f cc 91 f8 8f a5 3e 1d 5f de db df 54 d2 d2 ba 6b e0 6f f8 bf 02 31 95 45 50 03 ad 96 b6 02 2e 66 4e 0d 3c cf da 20 52 5f 79 6f a3 2d 59 4b 05 62 6a 0f a3 97 69 ab 7d 94 e2 6e 00 66 30 07 03 5f a6 5d 79 69 32 e0 54 e5 9e c0 3e f1 cd 8f 73 fb 2d 10 53 ad bc 77 d3 84 1f f4 80 95 51 60 67 01 b0 25 0f 78 Data Ascii: PNGIHDRapHYs+IDATxRKHTQgG.4UV!Y"#\T&. hh"d1VHHIR;9;w6?>_Tko1EP.fN< R_yo-YKbji}nf0_]yi2T>s-SwQ`g%x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.16	50152	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:38 UTC	660	OUT	GET /tenant/amp/entityid/AA17TFZv?w=16&h=16&q=100&m=6&f=png&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:38 UTC	546	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA17TFZv?w=16&h=16&q=100&m=6&f=png&u=t Last-Modified: Wed, 10 Jan 2024 19:55:45 GMT X-Source-Length: 2880 X-Datacenter: westus X-ActivityId: 14a5e9c9-662d-4d37-bd48-7739f4761316 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 1426 Cache-Control: public, max-age=226056 Expires: Sat, 20 Jan 2024 07:55:14 GMT Date: Wed, 17 Jan 2024 17:07:38 GMT Connection: close
2024-01-17 17:07:38 UTC	1426	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 02 8b 49 44 41 54 78 01 a5 93 4b 4c 13 51 14 86 ff 99 69 3b 7d 58 68 a9 58 da 54 6a c1 a0 c8 43 4b 8c da 05 f1 91 08 89 2b 35 ca c6 b8 72 43 d8 b8 30 ae dc 18 13 17 ae 5c b8 30 24 3e 96 6e 4c 34 d1 18 13 25 2e 88 42 94 18 1a 85 40 2d 58 1e 16 84 56 da d2 ce 74 fa 98 f1 dc 69 11 36 b0 f1 26 33 f7 ce dc fb 7f e7 9c ff cc 18 70 33 a4 e1 3f 86 61 67 2d 63 73 d5 23 1b f3 86 a2 12 77 5b 00 c7 71 30 f2 06 94 35 0d 66 4e 83 5b 93 ab 2c 8e 90 1a e2 aa 11 b2 c6 63 5b 80 46 42 ab d1 8c 12 1d f7 95 92 e8 e3 e3 d0 38 5e cf 47 a5 fb 23 b5 01 32 c4 2d 80 72 11 28 97 ab f9 69 68 db 7b 08 a7 9a bb e0 b0 d4 Data Ascii: PNGIHDRapHYs+IDATxKLQi;}XhXTjCK+5rC0\0$>nL4%.B@-XVti6&3p3?ag-cs#w[q05fN[,c[FB8^G#2-r(ih{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.16	50151	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:38 UTC	659	OUT	GET /tenant/amp/entityid/BBtOBsY?w=16&h=16&q=100&m=6&f=png&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:38 UTC	547	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/BBtOBsY?w=16&h=16&q=100&m=6&f=png&u=t Last-Modified: Thu, 11 Jan 2024 22:55:41 GMT X-Source-Length: 19022 X-Datacenter: northeu X-ActivityId: 620dc93a-2656-4a88-816e-1b5282fbc97c Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 1794 Cache-Control: public, max-age=323390 Expires: Sun, 21 Jan 2024 10:57:28 GMT Date: Wed, 17 Jan 2024 17:07:38 GMT Connection: close
2024-01-17 17:07:38 UTC	1794	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 03 43 49 44 41 54 78 01 3d 93 4b 6c 1b 55 14 86 bf 19 df f1 db 6e 62 37 4e ed a6 56 4a 82 d2 36 12 12 48 d0 4a a5 6d 16 48 08 a9 52 81 0d 42 2a 20 50 c5 06 b2 60 c5 8e 7d 25 36 2c 58 01 12 62 83 c8 82 22 11 54 1e 0b 84 aa 2a 44 a2 41 7d 28 4d 43 6c a7 69 12 9a c4 f6 d8 1e 7b fc 98 17 c7 20 71 35 47 73 ef 9d 7b cf f9 cf ff ff a3 fc 91 e2 8e 16 84 53 10 02 43 42 69 e0 e9 d0 01 82 00 22 32 37 e4 1d f2 ff 5b 0f f7 02 0f 7c 8f 86 d3 b5 94 36 70 0b 28 03 b2 61 30 e5 50 b5 4d 9b 26 dd a3 3a 71 05 8e 29 87 0f 34 46 c8 42 2a 06 31 e7 ff 44 51 b4 94 0a 72 86 b5 f2 da b1 d4 86 35 e0 ac de c0 68 e7 79 Data Ascii: PNGIHDRapHYs+CIDATx=KlUnb7NVJ6HJmHRB* P`}%6,Xb"TDA}(MCli{ q5Gs{SCBi"27[\|6p(a0PM&:q)4FB1DQr5hy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.16	50153	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:38 UTC	660	OUT	GET /tenant/amp/entityid/AA179OEj?w=16&h=16&q=100&m=6&f=png&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:38 UTC	546	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Last-Modified: Wed, 17 Jan 2024 04:46:47 GMT X-Datacenter: eastus X-ActivityId: 34f1189e-4aba-418a-8a90-a8a69b00bad7 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Type: image/png Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA179OEj?w=16&h=16&q=100&m=6&f=png&u=t X-Source-Length: 4539 Content-Length: 1280 Cache-Control: public, max-age=387551 Expires: Mon, 22 Jan 2024 04:46:49 GMT Date: Wed, 17 Jan 2024 17:07:38 GMT Connection: close
2024-01-17 17:07:38 UTC	1280	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 02 42 49 44 41 54 78 01 a5 53 5d 48 53 61 18 7e 72 e7 78 da d6 a6 2d 37 fc 99 84 f9 33 12 0c 84 25 cc 8a 7e 2e 0c 13 44 82 04 e9 a6 a8 9b 16 44 37 fd 28 44 17 31 ea ae ba 29 a2 84 82 7e a4 e8 a2 ba 88 92 79 61 4b 0c 5c 62 96 0b c5 c4 59 ac 5c d9 36 e7 9c 9b ce be f7 5b e7 70 0e ae ab 3e f8 ce f9 de f7 fd de e7 3c ef f3 be 47 58 65 0b ff b1 04 75 ee f2 4a 06 77 5f 8f a0 c1 51 86 6d 5b 6c ea 90 72 4e a5 57 80 75 40 be a0 e3 3e 05 60 36 b2 80 ce ee 3e 04 67 63 18 0c 7c c3 75 f7 7e 18 d7 8b 4a 22 1d 9e 0d 8c a3 fb e5 30 f4 92 88 6b ee 26 94 58 36 80 03 cc 84 63 38 7b db 0b 93 3e 1f ad ae 1a 24 Data Ascii: PNGIHDRapHYs+BIDATxS]HSa~rx-73%~.DD7(D1)~yaK\bY\6[p><GXeuJw_Qm[lrNWu@>`6>gc\|u~J"0k&X6c8{>$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.16	50154	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:38 UTC	663	OUT	GET /tenant/amp/entityid/AA1a7YMQ.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:38 UTC	548	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA1a7YMQ?w=80&h=80&q=60&m=6&f=jpg&u=t Last-Modified: Fri, 05 Jan 2024 18:21:29 GMT X-Source-Length: 166591 X-Datacenter: eastap X-ActivityId: c32e0c69-0212-4a9d-8bf9-1db1c327688b Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 4096 Cache-Control: public, max-age=177289 Expires: Fri, 19 Jan 2024 18:22:27 GMT Date: Wed, 17 Jan 2024 17:07:38 GMT Connection: close
2024-01-17 17:07:38 UTC	4096	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 50 00 50 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOPP}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.16	50155	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:38 UTC	663	OUT	GET /tenant/amp/entityid/AA19Ibq9.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:38 UTC	547	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA19Ibq9?w=80&h=80&q=60&m=6&f=jpg&u=t Last-Modified: Sun, 07 Jan 2024 01:08:38 GMT X-Source-Length: 85484 X-Datacenter: westus X-ActivityId: ce00a364-95d1-489a-a922-b89e81e040d8 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 2048 Cache-Control: public, max-age=287918 Expires: Sun, 21 Jan 2024 01:06:16 GMT Date: Wed, 17 Jan 2024 17:07:38 GMT Connection: close
2024-01-17 17:07:38 UTC	2048	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 50 00 50 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOPP}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.16	50157	68.67.179.87	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:38 UTC	886	OUT	GET /setuid?entity=483&code=2136D0069C246D353F30C40F9D676C20&gdpr=0&gdpr_consent= HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: uuid2=6324846154276582513; XANDR_PANID=4IetkXWoZZtNLGNJ0cb-AqhQhIczE6TRaApvkXU5KMvRVBthT958pVCnd0_WojkVf5Iyp3RPabh0W6kOzFJGPGNqBxa8PZrJ3PvxhU9Xebw.; anj=dTM7k!M4/8D>6NRF']wIg2GTsq'-(%!m5LRe#ns'cd#A^e+.<Q!8n7U[wR/#
2024-01-17 17:07:38 UTC	1312	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Wed, 17 Jan 2024 17:07:38 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Set-Cookie: XANDR_PANID=FkiyKOySnQGK4SS49TW-H_OtR9ffJvPUL3uT04McZf4xyyHdolQ9mU6VtdebhUv5Epcy438W1PE0CR_jJXJdph8NQo24xZ5BDJ1Dq9rgork.; SameSite=None; Path=/; Max-Age=314496000; Domain=.adnxs.com; Secure; Partitioned AN-X-Request-Uuid: 985903b6-e274-43f2-8bee-a533cd45b430 Set-Cookie: anj=dTM7k!M4.FEVNsVF']wIg2GTsq'-(%!m5LRe#nszZ=f1CByY$Nd<y!Ygk1F8glT4he9C6UjGe%zcyL_Eh0oWXlx#Lr8nG7m#e+i>bpRzqF1`b^n:Q@cN; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 16-Apr-2024 17:07:38 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: uuid2=6324846154276582513; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 16-Apr-2024 17:07:38 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 154.16.192.193; 154.16.192.193; 585.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-01-17 17:07:38 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.16	50158	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:38 UTC	663	OUT	GET /tenant/amp/entityid/AA1a2sH6.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:38 UTC	547	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA1a2sH6?w=80&h=80&q=60&m=6&f=jpg&u=t Last-Modified: Fri, 12 Jan 2024 02:23:55 GMT X-Source-Length: 54584 X-Datacenter: westus X-ActivityId: 29bb6b96-659e-4701-b067-3bf6bad216e4 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 2048 Cache-Control: public, max-age=335765 Expires: Sun, 21 Jan 2024 14:23:43 GMT Date: Wed, 17 Jan 2024 17:07:38 GMT Connection: close
2024-01-17 17:07:38 UTC	2048	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 50 00 50 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOPP}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.16	50159	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:38 UTC	663	OUT	GET /tenant/amp/entityid/AA163kJY.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:38 UTC	547	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA163kJY?w=80&h=80&q=60&m=6&f=jpg&u=t Last-Modified: Thu, 11 Jan 2024 01:38:33 GMT X-Source-Length: 21680 X-Datacenter: westus X-ActivityId: 65da0d4f-d771-479d-b812-551518696f11 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 4096 Cache-Control: public, max-age=246765 Expires: Sat, 20 Jan 2024 13:40:23 GMT Date: Wed, 17 Jan 2024 17:07:38 GMT Connection: close
2024-01-17 17:07:38 UTC	4096	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 50 00 50 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOPP}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.16	50160	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:38 UTC	662	OUT	GET /tenant/amp/entityid/AAAs0Yp.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:38 UTC	547	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AAAs0Yp?w=80&h=80&q=60&m=6&f=jpg&u=t Last-Modified: Thu, 11 Jan 2024 05:49:01 GMT X-Source-Length: 131065 X-Datacenter: eastap X-ActivityId: ba8219eb-df32-406a-834d-9e7886c137f5 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 2048 Cache-Control: public, max-age=261691 Expires: Sat, 20 Jan 2024 17:49:09 GMT Date: Wed, 17 Jan 2024 17:07:38 GMT Connection: close
2024-01-17 17:07:38 UTC	2048	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 50 00 50 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOPP}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.16	50162	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:38 UTC	662	OUT	GET /tenant/amp/entityid/AAtJPVD.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:38 UTC	546	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AAtJPVD?w=80&h=80&q=60&m=6&f=jpg&u=t Last-Modified: Wed, 20 Dec 2023 23:10:06 GMT X-Source-Length: 95294 X-Datacenter: westus X-ActivityId: ea734100-028f-4827-be77-2cf6ce298262 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 4096 Cache-Control: public, max-age=367326 Expires: Sun, 21 Jan 2024 23:09:44 GMT Date: Wed, 17 Jan 2024 17:07:38 GMT Connection: close
2024-01-17 17:07:38 UTC	4096	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 50 00 50 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOPP}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.16	50161	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:38 UTC	663	OUT	GET /tenant/amp/entityid/AA1e6ZHH.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:38 UTC	547	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA1e6ZHH?w=80&h=80&q=60&m=6&f=jpg&u=t Last-Modified: Fri, 12 Jan 2024 22:00:51 GMT X-Source-Length: 71111 X-Datacenter: westus X-ActivityId: e72d52c7-91fd-4001-acca-49ec35d9a5ba Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 4096 Cache-Control: public, max-age=406405 Expires: Mon, 22 Jan 2024 10:01:03 GMT Date: Wed, 17 Jan 2024 17:07:38 GMT Connection: close
2024-01-17 17:07:38 UTC	4096	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 50 00 50 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOPP}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.16	50163	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:38 UTC	499	OUT	GET /bundles/v1/edgeChromium/latest/sports-info.b57b5de78e8c3e24947b.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:38 UTC	1186	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: plbvf3rfdv83bgvRe0KDkA== Last-Modified: Tue, 16 Jan 2024 23:21:30 GMT ETag: 0x8DC16E9DEEEA52D Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 820d74c8-401e-0073-27d2-48e5b8000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:38 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Akamai-Request-BC: [a=23.218.242.10,b=89899109,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=89, clienttt; dur=0, origin; dur=0 , cdntime; dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55bc065 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511258.55bc065 Vary: Origin
2024-01-17 17:07:38 UTC	15198	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 70 6f 72 74 73 2d 69 6e 66 6f 22 5d 2c 7b 36 34 30 35 37 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 72 28 65 29 2c 69 2e 64 28 65 2c 7b 53 70 6f 72 74 73 49 6e 66 6f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 74 7d 2c 53 70 6f 72 74 73 49 6e 66 6f 53 74 79 6c 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 74 7d 2c 53 70 6f 72 74 73 49 Data Ascii: 00006000(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["sports-info"],{64057:function(t,e,i){"use strict";i.r(e),i.d(e,{SportsInfo:function(){return at},SportsInfoStyles:function(){return ct},SportsI
2024-01-17 17:07:38 UTC	9390	IN	Data Raw: 4d 61 72 6b 65 74 7d 2c 20 65 6e 74 69 74 79 49 64 3a 24 7b 61 7d 2c 20 72 65 73 70 6f 6e 73 65 3a 24 7b 74 2e 76 61 6c 75 65 5b 30 5d 2e 62 6c 65 6e 64 65 64 52 65 73 70 6f 6e 73 65 7d 60 29 7d 65 6c 73 65 20 6c 3d 74 2e 76 61 6c 75 65 5b 30 5d 3b 64 3d 21 30 7d 69 66 28 21 6c 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 60 6d 61 72 6b 65 74 3a 24 7b 28 30 2c 75 2e 59 71 29 28 29 2e 43 75 72 72 65 6e 74 4d 61 72 6b 65 74 7d 2c 20 65 6e 74 69 74 79 49 64 3a 24 7b 61 7d 60 29 3b 63 6f 6e 73 74 20 70 3d 6e 65 77 20 4d 61 70 3b 76 61 72 20 68 3b 6c 65 74 20 67 3b 69 66 28 70 2e 73 65 74 28 22 74 65 61 6d 49 6d 61 67 65 53 69 7a 65 22 2c 28 68 3d 65 2e 73 70 6f 72 74 73 4d 61 74 63 68 75 70 43 61 72 64 44 61 74 61 29 26 26 68 2e 64 61 74 61 54 79 70 65 Data Ascii: Market}, entityId:${a}, response:${t.value[0].blendedResponse}`)}else l=t.value[0];d=!0}if(!l)throw new Error(`market:${(0,u.Yq)().CurrentMarket}, entityId:${a}`);const p=new Map;var h;let g;if(p.set("teamImageSize",(h=e.sportsMatchupCardData)&&h.dataType
2024-01-17 17:07:38 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 49 64 2c 74 2e 65 6e 74 69 74 79 49 64 29 2c 28 30 2c 72 2e 67 42 29 28 63 2e 57 33 2e 53 70 6f 72 74 73 4e 65 77 53 70 6f 74 6c 69 67 68 74 43 61 72 64 2c 22 30 22 29 2c 28 30 2c 72 2e 67 42 29 28 63 2e 57 33 2e 53 70 6f 72 74 73 43 61 72 64 54 79 70 65 2c 74 68 69 73 2e 65 78 70 65 72 69 65 6e 63 65 54 79 70 65 29 3b 63 6f 6e 73 74 7b 73 70 6f 72 74 73 4d 61 74 63 68 75 70 44 61 74 61 3a 75 7d 3d 74 2c 67 3d 74 68 69 73 2e 67 65 74 43 75 72 72 65 6e 74 56 32 54 61 62 28 29 3b 28 6e 75 6c 6c 21 3d 75 26 26 6e 75 6c 6c 21 3d 3d 28 65 3d 75 2e 73 70 6f 72 74 73 54 61 62 44 61 74 61 29 26 26 76 6f 69 64 20 30 21 3d 3d 65 26 26 65 2e 67 65 74 28 22 53 70 6f 74 6c 69 67 68 74 22 29 7c 7c 6e 75 6c 6c 21 3d 67 26 26 6e 75 6c 6c 21 Data Ascii: 00006000Id,t.entityId),(0,r.gB)(c.W3.SportsNewSpotlightCard,"0"),(0,r.gB)(c.W3.SportsCardType,this.experienceType);const{sportsMatchupData:u}=t,g=this.getCurrentV2Tab();(null!=u&&null!==(e=u.sportsTabData)&&void 0!==e&&e.get("Spotlight")\|\|null!=g&&null!
2024-01-17 17:07:39 UTC	8204	IN	Data Raw: 65 77 3d 7b 2e 2e 2e 74 68 69 73 2e 76 69 65 77 2c 66 65 65 64 73 4e 6f 74 69 66 69 63 61 74 69 6f 6e 54 6f 61 73 74 56 69 65 77 4d 6f 64 65 6c 3a 74 7d 2c 74 68 69 73 2e 61 75 74 6f 48 69 64 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 54 6f 61 73 74 28 74 68 69 73 2e 63 6f 6e 66 69 67 2e 66 65 65 64 62 61 63 6b 54 6f 61 73 74 54 69 6d 65 6f 75 74 29 29 7d 65 6c 73 65 20 74 68 69 73 2e 68 69 64 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 54 6f 61 73 74 28 29 3b 61 26 26 74 68 69 73 2e 6f 70 65 6e 53 65 61 72 63 68 56 69 65 77 48 61 6e 64 6c 65 72 28 21 30 29 2e 63 61 74 63 68 28 28 28 29 3d 3e 7b 7d 29 29 2c 61 77 61 69 74 20 74 68 69 73 2e 61 70 70 53 74 61 74 65 43 6f 6e 6e 65 63 74 6f 72 2e 75 70 64 61 74 65 41 63 74 69 6f 6e 48 69 73 74 6f 72 79 28 74 2c 65 2c Data Ascii: ew={...this.view,feedsNotificationToastViewModel:t},this.autoHideNotificationToast(this.config.feedbackToastTimeout))}else this.hideNotificationToast();a&&this.openSearchViewHandler(!0).catch((()=>{})),await this.appStateConnector.updateActionHistory(t,e,
2024-01-17 17:07:39 UTC	13513	IN	Data Raw: 30 30 30 30 33 34 42 44 0d 0a 69 73 2c 69 5b 61 5d 29 7d 65 6c 73 65 20 74 68 69 73 2e 61 70 70 53 74 61 74 65 43 6f 6e 6e 65 63 74 6f 72 2e 75 70 64 61 74 65 54 61 62 43 75 72 72 65 6e 74 50 61 67 65 49 6e 64 65 78 28 74 29 2c 74 68 69 73 2e 75 70 64 61 74 65 56 69 65 77 28 29 2e 63 61 74 63 68 28 28 28 29 3d 3e 7b 7d 29 29 2c 28 30 2c 72 2e 6e 69 29 28 74 68 69 73 2e 74 61 62 45 6c 65 6d 65 6e 74 29 7d 67 6f 54 6f 4e 65 78 74 54 61 62 49 66 45 78 69 73 74 73 28 29 7b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 69 74 29 3b 63 6f 6e 73 74 20 74 3d 74 68 69 73 2e 61 70 70 53 74 61 74 65 43 6f 6e 6e 65 63 74 6f 72 2e 67 65 74 43 75 72 72 65 6e 74 53 74 61 74 65 28 29 3b 69 66 28 21 74 2e 67 65 74 28 63 2e 70 58 2e 69 73 56 32 44 61 74 61 29 29 72 65 74 75 72 6e Data Ascii: 000034BDis,i[a])}else this.appStateConnector.updateTabCurrentPageIndex(t),this.updateView().catch((()=>{})),(0,r.ni)(this.tabElement)}goToNextTabIfExists(){clearTimeout(it);const t=this.appStateConnector.getCurrentState();if(!t.get(c.pX.isV2Data))return
2024-01-17 17:07:39 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 2c 61 5b 69 5d 7d 61 73 79 6e 63 20 74 72 61 6e 73 66 6f 72 6d 28 74 29 7b 74 68 69 73 2e 63 75 72 72 65 6e 74 54 61 62 54 79 70 65 3d 28 30 2c 63 2e 43 75 29 28 74 2c 74 68 69 73 2e 69 73 50 61 67 69 6e 61 74 69 6f 6e 53 77 69 74 63 68 69 6e 67 54 61 62 73 28 74 29 29 2c 74 68 69 73 2e 63 61 72 64 53 69 7a 65 3d 74 2e 67 65 74 28 61 2e 70 58 2e 63 61 72 64 53 69 7a 65 29 2c 74 68 69 73 2e 72 6f 6f 74 54 65 6c 65 6d 65 74 72 79 4f 62 6a 65 63 74 3d 74 2e 67 65 74 28 61 2e 70 58 2e 72 6f 6f 74 54 65 6c 65 6d 65 74 72 79 4f 62 6a 65 63 74 29 2c 74 68 69 73 2e 77 69 64 67 65 74 44 69 6d 65 6e 73 69 6f 6e 3d 74 2e 67 65 74 28 61 2e 70 58 2e 77 69 64 67 65 74 44 69 6d 65 6e 73 69 6f 6e 29 2c 74 68 69 73 2e 69 73 50 69 6e 6e 65 64 Data Ascii: 00004000,a[i]}async transform(t){this.currentTabType=(0,c.Cu)(t,this.isPaginationSwitchingTabs(t)),this.cardSize=t.get(a.pX.cardSize),this.rootTelemetryObject=t.get(a.pX.rootTelemetryObject),this.widgetDimension=t.get(a.pX.widgetDimension),this.isPinned
2024-01-17 17:07:39 UTC	12	IN	Data Raw: 6d 61 72 79 45 6e 74 69 74 79 0d 0a Data Ascii: maryEntity
2024-01-17 17:07:39 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 4e 61 6d 65 3f 73 2e 70 72 69 6d 61 72 79 45 6e 74 69 74 79 4e 61 6d 65 7c 7c 22 22 3a 73 2e 63 61 72 64 54 69 74 6c 65 7c 7c 22 22 3a 22 22 7d 67 65 74 45 6e 74 69 74 79 4e 61 6d 65 28 74 29 7b 63 6f 6e 73 74 20 65 3d 28 30 2c 63 2e 69 66 29 28 74 29 3b 69 66 28 65 29 72 65 74 75 72 6e 20 65 2e 70 72 69 6d 61 72 79 45 6e 74 69 74 79 4e 61 6d 65 7c 7c 22 22 3b 63 6f 6e 73 74 20 69 3d 28 30 2c 63 2e 45 62 29 28 74 29 3b 69 66 28 21 69 29 72 65 74 75 72 6e 22 22 3b 6c 65 74 20 73 3d 22 22 3b 72 65 74 75 72 6e 20 73 3d 69 2e 70 72 69 6d 61 72 79 45 6e 74 69 74 79 54 79 70 65 26 26 69 2e 70 72 69 6d 61 72 79 45 6e 74 69 74 79 54 79 70 65 3d 3d 3d 61 2e 66 73 2e 54 65 61 6d 26 26 69 2e 70 72 69 6d 61 72 79 45 6e 74 69 74 79 4e 61 Data Ascii: 00004000Name?s.primaryEntityName\|\|"":s.cardTitle\|\|"":""}getEntityName(t){const e=(0,c.if)(t);if(e)return e.primaryEntityName\|\|"";const i=(0,c.Eb)(t);if(!i)return"";let s="";return s=i.primaryEntityType&&i.primaryEntityType===a.fs.Team&&i.primaryEntityNa
2024-01-17 17:07:39 UTC	12	IN	Data Raw: 39 34 35 32 29 2c 58 3d 69 28 0d 0a Data Ascii: 9452),X=i(
2024-01-17 17:07:39 UTC	3049	IN	Data Raw: 30 30 30 30 30 42 44 44 0d 0a 34 33 35 34 34 29 2c 48 3d 69 28 35 35 34 34 37 29 2c 56 3d 69 28 36 33 39 34 38 29 2c 24 3d 69 28 35 33 30 32 29 3b 63 6c 61 73 73 20 52 20 65 78 74 65 6e 64 73 20 58 2e 44 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 73 75 70 65 72 28 2e 2e 2e 61 72 67 75 6d 65 6e 74 73 29 2c 74 68 69 73 2e 69 73 48 69 64 65 50 6f 70 75 70 4f 70 65 6e 3d 21 31 2c 74 68 69 73 2e 6c 6f 61 64 44 69 61 6c 6f 67 3d 21 31 2c 74 68 69 73 2e 63 68 61 6e 67 65 4c 65 61 67 75 65 54 65 61 6d 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3d 74 3d 3e 7b 74 26 26 28 74 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 2c 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 50 2e 4d 30 2e 73 65 6e 64 41 63 74 69 6f 6e 45 76 65 6e 74 28 74 2e 74 61 72 67 65 Data Ascii: 00000BDD43544),H=i(55447),V=i(63948),$=i(5302);class R extends X.D{constructor(){super(...arguments),this.isHidePopupOpen=!1,this.loadDialog=!1,this.changeLeagueTeamClickHandler=t=>{t&&(t.stopPropagation(),t.preventDefault(),P.M0.sendActionEvent(t.targe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.16	50156	52.182.143.211	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:38 UTC	1038	OUT	POST /OneCollector/1.0?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1705511257508&w=0&anoncknm=app_anon&NoResponseBody=true HTTP/1.1 Host: browser.events.data.msn.com Connection: keep-alive Content-Length: 10872 sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; _SS=SID=00
2024-01-17 17:07:38 UTC	10872	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 43 6f 6e 74 65 6e 74 56 69 65 77 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 30 31 2d 31 37 54 31 37 3a 30 37 3a 33 37 2e 35 30 37 5a 22 2c 22 76 65 72 22 3a 22 34 2e 30 22 2c 22 69 4b 65 79 22 3a 22 6f 3a 30 64 65 64 36 30 63 37 35 65 34 34 34 34 33 61 61 33 34 38 34 63 34 32 63 31 63 34 33 66 65 38 22 2c 22 65 78 74 22 3a 7b 22 73 64 6b 22 3a 7b 22 76 65 72 22 3a 22 31 44 53 2d 57 65 62 2d 4a 53 2d 33 2e 32 2e 38 22 2c 22 73 65 71 22 3a 37 2c 22 69 6e 73 74 61 6c 6c 49 64 22 3a 22 39 31 64 35 37 31 39 38 2d 66 37 38 37 2d 34 66 35 39 2d 38 61 30 37 2d 64 34 35 39 64 38 32 31 34 35 34 63 22 2c 22 65 70 6f 63 68 22 3a 22 31 31 31 36 32 33 39 39 30 38 22 7d 2c 22 61 70 70 22 3a 7b 22 6c 6f 63 Data Ascii: {"name":"MS.News.Web.ContentView","time":"2024-01-17T17:07:37.507Z","ver":"4.0","iKey":"o:0ded60c75e44443aa3484c42c1c43fe8","ext":{"sdk":{"ver":"1DS-Web-JS-3.2.8","seq":7,"installId":"91d57198-f787-4f59-8a07-d459d821454c","epoch":"1116239908"},"app":{"loc
2024-01-17 17:07:38 UTC	890	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: MC1=GUID=369d16620b1b4e6e81a1107ebd3bdedc&HASH=369d&LV=202401&V=4&LU=1705511258730; Domain=.microsoft.com; Expires=Thu, 16 Jan 2025 17:07:38 GMT; Path=/;Secure; SameSite=None Set-Cookie: MS0=45fb9ac9eaeb4d6fa74666aec95d659e; Domain=.microsoft.com; Expires=Wed, 17 Jan 2024 17:37:38 GMT; Path=/;Secure; SameSite=None time-delta-millis: 1222 Access-Control-Allow-Headers: P3P,Set-Cookie,time-delta-millis Access-Control-Allow-Methods: POST Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com Access-Control-Expose-Headers: time-delta-millis Date: Wed, 17 Jan 2024 17:07:38 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.16	50164	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:38 UTC	663	OUT	GET /tenant/amp/entityid/AA1a2I3O.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:38 UTC	547	IN	HTTP/1.1 200 OK Last-Modified: Wed, 13 Dec 2023 07:07:01 GMT Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA1a2I3O?w=80&h=80&q=60&m=6&f=jpg&u=t X-Source-Length: 66757 X-Datacenter: eastus X-ActivityId: 74ffc30b-d3a7-4a5f-8ddc-19a36218f559 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 2048 Cache-Control: public, max-age=100305 Expires: Thu, 18 Jan 2024 20:59:23 GMT Date: Wed, 17 Jan 2024 17:07:38 GMT Connection: close
2024-01-17 17:07:38 UTC	2048	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 50 00 50 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOPP}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.16	50165	13.107.246.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:38 UTC	628	OUT	GET /shared/edgeweb/img/arrow-left.a26976f.svg HTTP/1.1 Host: edgestatic.azureedge.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.microsoft.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:39 UTC	654	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:39 GMT Content-Type: image/svg+xml Content-Length: 314 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable ETag: W/"13a-18c5b53a4ea" Last-Modified: Tue, 12 Dec 2023 00:00:57 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Origin-Agent-Cluster: ?1 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 x-azure-ref: 20240117T170738Z-azq36rgm5d6kd070a8ss32zt5g00000002xg000000000bd7 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-01-17 17:07:39 UTC	314	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 3d 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 32 2e 35 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 22 72 6f 75 6e 64 22 20 63 6c 61 73 73 3d 22 66 65 61 74 68 65 72 20 66 65 61 74 68 65 72 2d 61 72 72 6f 77 2d 6c 65 66 74 22 3e 3c 6c 69 6e 65 20 78 31 3d 22 31 39 22 20 79 31 3d 22 31 32 22 20 78 32 3d 22 35 22 20 79 32 3d 22 31 32 22 3e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round" class="feather feather-arrow-left"><line x1="19" y1="12" x2="5" y2="12">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.16	50166	13.107.246.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:38 UTC	629	OUT	GET /shared/edgeweb/img/arrow-right.654b408.svg HTTP/1.1 Host: edgestatic.azureedge.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.microsoft.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:39 UTC	680	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:39 GMT Content-Type: image/svg+xml Content-Length: 316 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable ETag: W/"13c-18c5b53a4ea" Last-Modified: Tue, 12 Dec 2023 00:00:57 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Origin-Agent-Cluster: ?1 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 x-azure-ref: 20240117T170738Z-s4fxf24uwt3hf7wgx755uu0q7c00000000ug000000002gaw X-Cache: TCP_MISS x-fd-int-roxy-purgeid: 0 Accept-Ranges: bytes
2024-01-17 17:07:39 UTC	316	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 3d 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 32 2e 35 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 22 72 6f 75 6e 64 22 20 63 6c 61 73 73 3d 22 66 65 61 74 68 65 72 20 66 65 61 74 68 65 72 2d 61 72 72 6f 77 2d 72 69 67 68 74 22 3e 3c 6c 69 6e 65 20 78 31 3d 22 35 22 20 79 31 3d 22 31 32 22 20 78 32 3d 22 31 39 22 20 79 32 3d 22 31 32 22 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round" class="feather feather-arrow-right"><line x1="5" y1="12" x2="19" y2="12"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.16	50167	13.107.213.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:38 UTC	580	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:39 UTC	713	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:39 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 43143 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 13aa0fac-001e-002f-7503-492f5f000000 x-ms-version: 2009-09-19 x-azure-ref: 20240117T170738Z-5k1a3xvaxx4k30d731hnmfeba400000000rg000000006mub Accept-Ranges: bytes
2024-01-17 17:07:39 UTC	16384	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-01-17 17:07:39 UTC	16382	IN	Data Raw: 2d 6c 61 62 65 6c 3d 22 27 2b 69 2e 65 73 63 61 70 65 48 74 6d 6c 28 74 68 69 73 2e 74 65 78 74 52 65 73 6f 75 72 63 65 73 2e 70 72 65 66 65 72 65 6e 63 65 73 44 69 61 6c 6f 67 43 6c 6f 73 65 4c 61 62 65 6c 29 2b 27 22 20 63 6c 61 73 73 3d 22 27 2b 61 2e 63 6c 6f 73 65 4d 6f 64 61 6c 49 63 6f 6e 2b 27 22 20 74 61 62 69 6e 64 65 78 3d 22 30 22 3e 26 23 78 32 37 31 35 3b 3c 2f 62 75 74 74 6f 6e 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 72 6f 6c 65 3d 22 64 6f 63 75 6d 65 6e 74 22 20 63 6c 61 73 73 3d 22 27 2b 61 2e 6d 6f 64 61 6c 42 6f 64 79 2b 27 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 31 20 63 6c 61 73 73 3d 22 27 2b 61 2e 6d 6f 64 Data Ascii: -label="'+i.escapeHtml(this.textResources.preferencesDialogCloseLabel)+'" class="'+a.closeModalIcon+'" tabindex="0">✕</button>\n <div role="document" class="'+a.modalBody+'">\n <div>\n <h1 class="'+a.mod
2024-01-17 17:07:39 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 7d 2c 65 7d 28 29 2c 64 3d 5b 22 61 72 22 2c 22 68 65 22 2c 22 70 73 22 2c 22 75 72 22 2c 22 66 61 22 2c 22 70 61 22 2c 22 73 64 22 2c 22 74 6b 22 2c 22 75 67 22 2c 22 79 69 22 2c 22 73 79 72 22 2c 22 6b 73 2d 61 72 61 62 22 5d 2c 75 3d 7b 22 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 22 3a 22 23 36 36 36 36 36 36 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 6f 70 61 63 69 74 79 22 3a 22 31 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f Data Ascii: background-color: "+e["radio-button-disabled-color"]+" !important;\n }"},e}(),d=["ar","he","ps","ur","fa","pa","sd","tk","ug","yi","syr","ks-arab"],u={"close-button-color":"#666666","secondary-button-disabled-opacity":"1","secondary-butto
2024-01-17 17:07:39 UTC	3567	IN	Data Raw: 28 22 2d 22 29 5b 30 5d 3b 6f 3d 65 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 3d 3d 3d 6e 7d 72 65 74 75 72 6e 20 6f 7d 28 65 2c 63 29 7d 29 29 3b 73 26 26 30 3d 3d 3d 73 2e 6c 65 6e 67 74 68 26 26 28 65 3d 22 65 6e 2d 55 53 22 29 2c 6f 2e 70 6c 61 63 65 68 6f 6c 64 65 72 45 6c 65 6d 65 6e 74 3d 6c 2c 72 26 26 6f 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 65 64 43 61 6c 6c 62 61 63 6b 73 2e 72 65 67 69 73 74 65 72 43 61 6c 6c 62 61 63 6b 28 72 29 2c 6f 2e 73 61 76 65 43 6f 6f 6b 69 65 28 29 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 3d 6e 65 77 20 66 28 21 31 29 2c 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 28 76 6f 69 64 20 30 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 29 2c 6f 2e 69 73 49 6e 69 74 52 65 61 64 79 3d 21 30 2c 74 68 69 73 2e 63 6f 6e 73 65 6e 74 43 68 61 6e Data Ascii: ("-")[0];o=e.split("-")[0]===n}return o}(e,c)}));s&&0===s.length&&(e="en-US"),o.placeholderElement=l,r&&o.consentChangedCallbacks.registerCallback(r),o.saveCookie(),o.siteConsent=new f(!1),null==n\|\|n(void 0,o.siteConsent),o.isInitReady=!0,this.consentChan

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.16	50168	13.107.246.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:38 UTC	685	OUT	GET /shared/edgeweb/fonts/segoeui-vf-display-semibold.1977a17.woff2 HTTP/1.1 Host: edgestatic.azureedge.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.microsoft.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://edgestatic.azureedge.net/shared/edgeweb/css/676e4a6.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:39 UTC	688	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:38 GMT Content-Type: font/woff2 Content-Length: 129152 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable ETag: W/"1f880-18c5b53a6a2" Last-Modified: Tue, 12 Dec 2023 00:00:58 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Origin-Agent-Cluster: ?1 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 x-azure-ref: 20240117T170738Z-82e2sg67dx4pzdkbva9evmares00000000tg000000004sse X-Cache: TCP_REMOTE_HIT x-fd-int-roxy-purgeid: 0 Accept-Ranges: bytes
2024-01-17 17:07:39 UTC	15696	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 f8 80 00 12 00 00 00 05 29 dc 00 01 f8 14 00 02 05 1f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 86 4a 1b 84 82 2c 1c 8a 58 06 60 00 98 7a 08 81 6a 09 9f 03 11 10 0a 8d 8b 68 8b 8a 0a 0b cf 18 00 01 36 02 24 03 cf 10 04 20 05 98 75 07 81 ba 19 0c 84 48 5b 2a 80 b4 13 fe 7f b2 df 3d 6b b8 3d 7d 4e 28 cd 28 0a b1 40 ec 47 11 e9 1c 62 f2 ef da 22 38 04 d1 ab ce 01 91 31 b6 d9 91 73 23 91 ca 8e 21 7d 1c 50 5a d5 f6 b6 1b e8 b6 cd e0 a9 a5 e7 d6 1a b9 95 00 46 f6 ff ff ff ff ff ff ff ff ff ff ff ff df 5a f2 9f a7 b6 fd b9 77 98 bb bc 59 98 61 58 45 41 53 10 49 05 cd dc 50 d4 d4 d4 9f e5 2f eb d7 df 21 2a 30 71 d1 90 a8 a5 59 0e 33 d4 0b 38 ca d0 40 d5 0c 68 b5 3b 4e 1c 42 ba e8 ad f4 e9 2a d6 Data Ascii: wOF2)?FFTMJ,X`zjh6$ uH[=k=}N((@Gb"81s#!}PZFZwYaXEASIP/!0qY38@h;NB*
2024-01-17 17:07:39 UTC	16384	IN	Data Raw: 4e f8 85 b9 67 2e 26 b1 94 54 92 1e a1 98 59 3c 9c 5c 3e 7e 01 43 51 31 13 69 19 73 45 25 2b 75 0d db b7 5d d6 f7 7d f6 06 4e 1b bd 9f d0 7e cd 7e 75 23 a2 18 96 54 19 bc de 9d 58 b2 d4 bb 38 b2 dd c1 3b d1 ad c7 6e d2 3f 77 d9 ba 94 30 a5 e6 a6 25 bd 7c c5 72 d9 25 84 27 9f 0c 8a 14 97 49 99 72 b2 a0 5c 4d 36 e1 f5 e4 d0 a4 b9 fc b5 ad 0f 45 50 6a 2a 4a 34 15 61 f6 54 95 fb 10 57 75 12 26 56 86 3c 85 42 60 3a f5 8c 39 ab 72 70 05 2b bf 50 51 85 48 85 2a 4c b1 8a aa 6b d5 51 7d a3 a6 6a 61 b9 36 9a 38 f4 83 53 6f 69 0f a3 3d 5d ec 4d 9f 74 2b 41 87 fa c2 69 e7 fa a4 ee 5a 3f 62 ec 4e 7f e1 cc ad bd 02 85 75 4c a2 b4 ce ca 57 d2 55 8d da ba 6b d0 58 cf d4 d8 7f eb 5b 86 c0 29 28 ab aa a5 b4 75 b2 86 46 21 0f cd e2 d6 36 69 47 a7 ac 3b 24 8c 44 c5 f0 84 24 Data Ascii: Ng.&TY<\>~CQ1isE%+u]}N~~u#TX8;n?w0%\|r%'Ir\M6EPjJ4aTWu&V<B`:9rp+PQHLkQ}ja68Soi=]Mt+AiZ?bNuLWUkX[)(uF!6iG;$D$
2024-01-17 17:07:39 UTC	16384	IN	Data Raw: 0c 1b ba 64 bb 99 36 db 28 85 89 82 5b 55 24 bd d1 25 16 93 7e 7b 0f 0d a4 50 60 84 a6 95 9c ab 91 c0 75 66 cb 58 26 dc b2 36 52 53 c1 a3 c9 c5 f6 da ec 39 d5 3d f9 72 d8 14 dc fc c1 44 86 ee 89 ec de e0 9d f1 78 da 8b f2 f8 22 4b 6f 9c be b5 b1 1e 2d c3 d6 96 47 3c 04 44 eb 5c ac 9b da b3 3b 4c 57 cb c7 d3 ee 87 60 91 67 4e 33 ef f8 43 a8 c9 49 1d 38 ce e3 bc 2d 13 dc b1 70 ea 5b 50 c7 ca 02 da 24 6e d3 b5 a2 fb e8 30 31 7a 4a 7e 65 b1 9d 98 80 ed 2b 67 f2 13 2f ab e7 42 d6 99 63 04 e6 3d 3e 4a 4d 1c 1a 05 20 1e ea 6a 34 48 29 98 30 0b 34 c7 b3 aa 56 7d 2a 22 15 81 01 81 10 1c e1 e6 e1 42 85 f0 52 bc dd 36 55 a4 bb 12 20 21 41 48 ac 00 ce 0b dc 5a e3 ee 2e 3f 9a fa 47 cd ac ee 36 8e 2b 4d 8c 96 4a bb 49 10 a9 16 f0 6f da 5a 5f 69 bc 22 90 3e d7 60 d5 4c Data Ascii: d6([U$%~{P`ufX&6RS9=rDx"Ko-G<D\;LW`gN3CI8-p[P$n01zJ~e+g/Bc=>JM j4H)04V}*"BR6U !AHZ.?G6+MJIoZ_i">`L
2024-01-17 17:07:39 UTC	16384	IN	Data Raw: ba 4f e0 8f 1c b9 50 b6 80 57 94 d5 a7 c8 9d 00 d2 72 a0 65 ac 2f 4d 45 56 7d f4 50 0b 53 db a9 79 a9 e1 20 a4 88 4e cd 86 66 54 5b 8c 40 22 d3 bf b0 c3 e0 4a 86 a1 d9 fd 8d 97 61 aa 33 98 6d 65 48 51 91 b5 8e 98 0d 13 45 11 c3 51 a8 18 31 5f 89 32 6f 4a 6a 5f 05 ca 99 97 32 84 47 97 a6 e7 2a 1a 12 47 55 1a d7 62 7d 3e 6c 97 28 eb 37 b5 0c 0d be e4 7d 36 8e a9 d5 0f 3f d7 22 aa 6f b8 64 02 eb 74 53 42 b7 f0 52 00 9c 58 7a 8b cb fb f7 a5 ae 79 a1 5a ce 97 a1 04 b1 0c dd d7 f0 f2 42 c5 13 ca b5 97 ae 0f c2 3f 2b 7f 4f 2a cf 08 07 f5 49 ed 48 89 ca f7 37 db 3e 18 76 de 20 c5 4a d2 ad 82 dd 46 ab 9c 9e 30 69 cf 6b e6 ff 9b 11 51 1c 52 f3 77 d5 0f c5 6b da 55 81 47 ed 40 64 0c 5f 8f 40 6c 11 a0 7f 12 b0 c4 f7 16 8b 5f 8b 1b 38 0d e5 af cb eb cd 30 bf d8 b4 59 Data Ascii: OPWre/MEV}PSy NfT[@"Ja3meHQEQ1_2oJj_2GGUb}>l(7}6?"odtSBRXzyZB?+OIH7>v JF0ikQRwkUG@d_@l_80Y
2024-01-17 17:07:39 UTC	16384	IN	Data Raw: 89 3f c0 68 77 51 14 54 66 30 7b 8f 3b 54 61 26 4c e7 5d fb 2c 32 2d b1 63 33 43 d0 95 41 ae 7c 9b 82 77 4f 0d e1 ec b6 9d dd db c6 ce c4 75 3f 70 3c 83 c4 34 bd 04 fe d8 06 6c ff 06 c6 2d 63 1e 7f f3 f2 19 b1 73 23 0d 47 c2 47 e1 59 49 db fb 77 e3 7f 64 11 78 eb c6 06 a4 ae 9e 33 59 89 24 47 aa b3 da 01 5f be ee fe 99 ba 23 fa a5 ea bb d0 47 25 91 39 7f 2a 05 8e 52 29 ca 3d f4 86 14 1c 0b 97 f6 32 f2 51 ed 14 1c 18 4f 39 b5 1c 1d 4d 1c 75 ff 9f d2 f7 94 56 f7 70 c0 30 41 33 a2 6d 9f e5 60 35 1f ca 84 0a d7 85 67 17 f1 12 ef 4b 8b a8 ba 4d e7 8e d7 b8 09 18 1d 18 df 3a 69 79 f0 0d 73 4b 1d 08 ad 29 c5 4e c0 3f 87 1e 31 90 6a de 05 fe 40 7b 5c 25 af 90 57 43 f7 ab 86 e4 70 75 3f f3 d5 f8 88 7b 56 7e a2 ad 57 b0 6e fd 11 2e da f4 1d 43 6f bc 1a 98 7c 9f 30 Data Ascii: ?hwQTf0{;Ta&L],2-c3CA\|wOu?p<4l-cs#GGYIwdx3Y$G_#G%9*R)=2QO9MuVp0A3m`5gKM:iysK)N?1j@{\%WCpu?{V~Wn.Co\|0
2024-01-17 17:07:39 UTC	16384	IN	Data Raw: 39 42 28 df 47 93 63 86 39 37 48 0d c3 1e 5b 27 d9 9b 19 b6 e6 73 b2 62 53 3e 42 d9 75 a6 38 d5 ba d2 ba 6c a2 67 19 36 6a e7 db aa 8b 86 58 f0 f8 31 2e c8 22 3b 2b 6a 27 c4 19 a0 d8 5e 39 8c 8c f2 44 2a 89 29 a3 8a d9 c5 34 b2 53 a6 eb b8 dd bb 08 46 87 32 00 ca 8f 3b b8 6e b1 04 91 35 dd cc 0b ed ae d1 b5 66 11 4b 56 c5 2a a4 3d 16 6e 23 d3 7f 24 3b 18 4b 26 94 41 9e 97 48 57 b1 17 8f 97 be b3 70 28 62 07 f8 50 b0 13 1e d4 9e 6e 4d b3 d4 56 c5 d6 63 ad 42 dd 2d 46 7d af a6 cb 72 e3 fc a5 4e 57 1a 83 cb a4 e7 58 48 89 79 0d 28 da 01 8a 08 70 1e 7a db 54 95 d7 b2 6c 4a 9d 93 0c 5d 3f 50 76 57 e5 8b 88 d8 5b e3 e4 00 09 34 ea f1 dd db db e5 62 5a e8 65 79 43 96 c5 da 43 7c 7d 9f 27 8d 51 2f a4 e7 27 90 db f3 62 f0 b4 e3 54 d5 99 27 12 56 52 eb 05 49 a2 73 Data Ascii: 9B(Gc97H['sbS>Bu8lg6jX1.";+j'^9D)4SF2;n5fKV=n#$;K&AHWp(bPnMVcB-F}rNWXHy(pzTlJ]?PvW[4bZeyCC\|}'Q/'bT'VRIs
2024-01-17 17:07:39 UTC	16384	IN	Data Raw: 9c f1 5d 24 07 29 b8 eb 91 ed 96 dc da b6 34 b1 f7 d1 89 13 eb fd bd eb d7 b4 2e 39 60 34 75 a9 fa 69 1a 47 11 4f bb 27 94 b2 83 c7 f0 f4 3c 0f 6b ba c6 e1 e5 70 e7 ed cf c1 c3 c8 45 db a6 94 6e cc 23 79 00 b3 a4 23 d5 95 3c bb c2 7c aa ef 56 87 f9 11 db 01 db a5 66 d0 02 c1 9e 45 1c ab ef 31 7d 3f e4 47 5b 14 36 6e 8c 34 f8 63 3b ee a8 db c6 df fd 4b de de 1b 5a fa 53 ac 2a ab 7e 81 ca df 9b 8f 68 4a ab a0 cf e8 e9 cb b7 30 3b 87 60 f7 70 7e af 09 05 af 64 b6 54 4b c3 2c 24 97 5d 50 51 14 97 1b cb 7c 52 5b 77 c9 3c 0a c2 2c 47 05 b7 61 1a 15 df c9 8f 42 b6 d6 fc a6 80 f4 a4 73 0d 40 61 8d 47 03 09 b5 65 d0 e2 e0 50 0a 02 3f 53 19 cf 09 a9 0c b8 02 b5 25 b7 5e 2d c0 35 2c cf 1b 56 eb a4 37 97 d6 de 85 29 42 c8 65 4f 48 21 5c 99 4f 37 b8 eb bd 88 70 ce bd Data Ascii: ]$)4.9`4uiGO'<kpEn#y#<\|VfE1}?G[6n4c;KZS*~hJ0;`p~dTK,$]PQ\|R[w<,GaBs@aGeP?S%^-5,V7)BeOH!\O7p
2024-01-17 17:07:39 UTC	15152	IN	Data Raw: 6a 6d 68 92 f6 6b ff 6b 46 aa 9f ff b5 11 9e 43 fe fd c0 50 18 18 0f 72 22 9f 9d dc 1f 6c 79 99 96 f6 a1 d3 97 36 b1 ea fc 05 87 52 35 a1 9d 78 cb 54 bc 66 5f 7c 59 82 2e 6d 5a 41 69 e8 87 87 fc 48 00 b8 ef f2 fa 5d 4f 24 af ea c3 c6 e8 49 50 15 90 88 52 1c d1 8f 3b 0a fe b3 ce c3 2f d7 d8 10 ab 5a a9 e3 3e 16 54 ee b7 24 35 d9 3a 65 ab a2 22 a9 30 93 55 0b 55 a2 8d ab 46 d2 b0 5f 20 a8 c4 0b de c7 a3 f7 b7 eb a1 78 5c d9 07 fe e1 1b 89 9b a3 ee 4b d6 c6 22 38 a7 11 e5 f6 a8 b7 8b bf 1c b5 e8 5e 41 c4 5b fd 31 bd fb d2 8d 90 1f 9f 61 38 17 28 fe 52 37 4b a3 cb e4 77 25 bd 3a c2 fa 19 f4 fa 34 77 7e 05 4d a7 59 b3 0b f7 93 6e 25 ce 9c e2 a9 f1 c3 e8 02 76 c1 5b e7 78 23 73 0d ab d3 ed b3 be c9 aa eb d0 4e ae c6 85 3b e1 8b 81 00 2e e2 aa dc 31 2c 8e 42 2c Data Ascii: jmhkkFCPr"ly6R5xTf_\|Y.mZAiH]O$IPR;/Z>T$5:e"0UUF_ x\K"8^A[1a8(R7Kw%:4w~MYn%v[x#sN;.1,B,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.16	50170	13.107.246.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:38 UTC	676	OUT	GET /shared/edgeweb/fonts/segoeui-vf-display.e85854a.woff2 HTTP/1.1 Host: edgestatic.azureedge.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.microsoft.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://edgestatic.azureedge.net/shared/edgeweb/css/676e4a6.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:39 UTC	682	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:39 GMT Content-Type: font/woff2 Content-Length: 121824 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable ETag: W/"1dbe0-18c5b53a150" Last-Modified: Tue, 12 Dec 2023 00:00:56 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Origin-Agent-Cluster: ?1 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 x-azure-ref: 20240117T170739Z-rswg4dt3rd0796s0kekf21h5nc00000000y0000000000vs6 X-Cache: TCP_MISS x-fd-int-roxy-purgeid: 0 Accept-Ranges: bytes
2024-01-17 17:07:39 UTC	15702	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 db e0 00 12 00 00 00 05 1d 78 00 01 db 73 00 02 05 1f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 86 4a 1b 83 eb 42 1c 8a 58 06 60 00 98 7a 08 81 6a 09 9f 03 11 10 0a 8d 8b 38 8b 8a 09 0b cf 18 00 01 36 02 24 03 cf 10 04 20 05 97 29 07 81 ba 19 0c 84 48 5b f3 73 b4 07 a2 c9 d8 dd c3 36 65 4f 36 ab c0 20 a9 42 28 28 1d c3 24 4e b8 d2 17 4b 01 5c 2f 09 44 31 8e 66 ab f0 e4 f0 76 0c e9 e9 40 a9 ed 69 73 af a0 db 36 d1 87 44 e9 b9 cd 34 4a 95 bb d2 cd fe ff ff ff ff ff ff ff ff ff bb 4a 7e 3c ea f4 dd c9 7a f7 ef 7f c9 92 3c 16 d8 a6 98 61 0c 0e 33 61 84 60 c8 a4 4d 9a 34 69 3a 41 23 02 dc 03 3c 1a 52 11 c1 c2 19 84 95 21 ba 34 07 8d 44 6c 5b 20 48 57 58 85 50 d3 1a eb 74 7b 65 df c4 a0 2f 86 Data Ascii: wOF2xs?FFTMJBX`zj86$ )H[s6eO6 B(($NK\/D1fv@is6D4JJ~<z<a3a`M4i:A#<R!4Dl[ HWXPt{e/
2024-01-17 17:07:39 UTC	16384	IN	Data Raw: 58 c3 52 3d 20 2c 6c ae 93 c6 5b de 28 8c c8 c8 ac 20 f6 15 5f 5d 3c 7c ce 1a ef 5c 6e d3 c4 7a 78 a5 02 7e 67 bc 6b 03 36 75 12 bc 35 fc 65 c4 2a bd fb 92 98 8d 9c 10 a1 49 8a 20 40 30 92 40 fa 31 06 5d db ed a4 25 5e 92 ab 12 24 4f 71 57 a3 a3 2f f0 59 08 02 87 ef 66 e5 55 dc 62 b2 25 a8 c7 9a 6f 60 7f c3 80 77 da 15 a7 15 53 c3 56 88 f5 a6 7d 17 23 cc 11 87 33 d7 c2 b5 44 6f a9 bc a7 7c f9 9e 29 10 e0 3c 3c 0f c1 3c 55 6b 57 a3 c6 ab d4 f6 3a 81 2f e7 b3 18 b8 0e 5d ce e2 12 37 19 9f f0 c2 83 cf f8 f8 f2 e4 cb 77 db 5d 77 4d f9 ee bb 69 b3 df 39 cb 94 6f 28 96 a3 65 78 2e 71 19 ae 26 65 29 4b 5e 28 57 2e 51 a4 48 b1 82 a6 a0 ab 41 e6 97 f4 19 81 69 82 02 65 c1 42 9c b3 9d b6 3d ae 4b ac 1b d7 a3 d3 6f 73 fc 9e 6c 7a a1 4c ae 47 ef 97 71 b0 6c 5b ca e9 Data Ascii: XR= ,l[( _]<\|\nzx~gk6u5e*I @0@1]%^$OqW/YfUb%o`wSV}#3Do\|)<<<UkW:/]7w]wMi9o(ex.q&e)K^(W.QHAieB=KoslzLGql[
2024-01-17 17:07:39 UTC	16384	IN	Data Raw: 4c e2 fa 4a f8 fd aa 30 6d 8e a2 ac 0d 2d e9 79 7a 05 04 70 ea 65 ec 2b 46 71 ed 1b 64 93 51 a8 3a fa 93 90 5f b8 96 46 67 81 83 26 b1 ee 41 5d d9 01 6b 42 36 1e 6c 12 10 a6 c8 c2 56 d7 ac 53 1e c0 33 7a 19 b8 50 40 ef 80 dd bc 5d 2a 92 d3 8c 02 f3 db 99 61 60 8c 06 b2 e8 29 fc 93 ba 08 40 f9 f4 9c d1 f3 c9 c1 3b 8b 33 80 4a 5b e7 27 af 19 5d c4 61 e9 4c f6 a6 fe 68 a2 fe f7 28 16 7b f2 e1 dc 06 00 c7 98 16 53 d3 b3 11 61 14 ca 65 2c b5 3b 4b 0b bf a6 82 8b f3 ae 99 e0 60 bf 46 6e fb c3 a8 2f 9f ea c0 20 7d 89 c9 61 e1 5f 28 91 76 c7 4b 6a e4 dd 14 3c 6d 2b e5 29 ae e4 55 9e a8 9b 1d 95 fa 9a 4b 2e 9c 2f b0 61 06 89 1d 78 83 b2 ad f2 e1 d6 ad 07 31 6b 53 39 5e 1b ea 94 ad db 5a 42 e1 aa 55 cb dd d6 b2 64 ca a6 a5 03 8f 7a c7 bc 14 8c cf 9c c3 61 d5 b7 ff Data Ascii: LJ0m-yzpe+FqdQ:_Fg&A]kB6lVS3zP@]*a`)@;3J[']aLh({Sae,;K`Fn/ }a_(vKj<m+)UK./ax1kS9^ZBUdza
2024-01-17 17:07:39 UTC	16384	IN	Data Raw: 31 54 79 98 ab e4 d7 b0 f0 ca 03 b6 8e 71 ff c4 97 bf d0 92 ff 77 fe 04 af b9 ef ff d2 03 ee 70 d3 3c 53 27 0f c1 da bf 04 46 f2 8c 97 da 9d 3c 71 fd 89 45 a6 1c 77 a4 a3 90 b4 c9 b3 a8 83 d0 39 9c 93 2b d2 57 ca 10 54 af ab 3f 79 03 00 12 ce ca cc 9d 70 66 44 9a 02 1d 28 84 21 c8 21 b0 2b 4b c9 62 bd 14 c0 bf 2e de e3 c6 6b da 37 ae 3e 2a 03 ec d8 bd 24 7b 94 c8 2f 31 a8 e2 d2 57 38 35 0b 3f 34 d2 39 f7 55 23 07 31 8d ce 04 7d cc d0 ea 9b 50 f5 4e dc 5d d4 a7 8f d5 c3 a1 10 f8 af c8 54 aa 5d 13 b2 f4 6a b5 dc bc 83 43 c8 55 77 f3 8f b3 5f 76 7d 81 6c 1f fd c8 6f cb 44 47 32 bf 4e f1 0b bd e0 7e 69 1c fd ce 74 79 ae e5 ef de 6e 5e b7 93 03 25 f1 73 72 ba 9c 48 a3 eb 0b c1 1a ce 5d 7e bd d1 9b ba f3 05 5b a8 97 7e 01 9d 24 60 a8 7e 08 70 9b 75 8c 6e 08 c8 Data Ascii: 1Tyqwp<S'F<qEw9+WT?ypfD(!!+Kb.k7>*${/1W85?49U#1}PN]T]jCUw_v}loDG2N~ityn^%srH]~[~$`~pun
2024-01-17 17:07:39 UTC	16384	IN	Data Raw: d0 f7 df a6 43 16 41 f5 a0 16 dd 4e 22 b9 bc a1 b9 02 5e e5 6f d7 92 ec 2d bf e2 01 73 98 74 ce a8 ca 10 e3 80 f4 9c 23 16 ab a8 26 82 68 9a 91 c5 8b ef c6 0e 6c 61 5d e1 b2 d8 13 b6 95 72 83 bc 73 8b 58 00 45 5d d5 6d 9c 33 f4 98 78 4c bc 9a cd b7 0a 4f 64 36 5b 7a 12 fc 85 28 3c 98 bc e4 48 d3 52 02 2c d2 b5 35 af 6c 2e ae 89 c8 14 df b4 98 a3 f0 ea 4b 76 45 69 6e d2 3d b7 a5 98 3f 34 84 2f 87 18 24 5c cc 8b 73 2a c1 8a d1 b0 46 40 47 15 60 9b 72 6f ba df 7f 38 9a 5c 73 c1 3e 8e 9b ae 1d 9c 35 c6 66 3e 3e 4a 87 b6 1d 16 7e 92 67 13 d7 cb 76 52 bc b0 30 79 44 d5 38 64 5d 1f 26 3d e7 74 7c 1a 5a d1 e9 25 63 a3 93 50 a1 6d 87 ce a7 a7 0e b9 e8 08 88 71 83 ba bb 0a 34 3b cc f1 f5 37 9c 07 f8 21 49 31 19 d0 ba 6a de 73 4b c7 14 8b 73 0c 6f 26 37 be 65 cd 9e Data Ascii: CAN"^o-st#&hla]rsXE]m3xLOd6[z(<HR,5l.KvEin=?4/$\s*F@G`ro8\s>5f>>J~gvR0yD8d]&=t\|Z%cPmq4;7!I1jsKso&7e
2024-01-17 17:07:39 UTC	16384	IN	Data Raw: 97 b9 7a 79 57 0d a0 4b 36 7a 69 aa 90 08 ad 9e e3 32 51 1d a9 c6 40 fa 42 ec 7c b2 a7 06 c8 30 e3 40 e7 7a e0 c1 a1 ce 99 5b 59 76 42 f3 2a d5 79 6e 79 c1 dd 74 ed 6e e3 ee 3f f9 aa 1c 78 75 48 f0 84 52 48 55 70 c8 e4 dd 60 f8 24 0d c6 1a fb 2a 15 7e 10 69 73 f6 19 7c 5c 29 a4 c3 45 1d a0 87 8c 67 c8 fd d2 29 79 21 13 15 a8 bc 4d ce 4e d5 8b 20 2c a7 c5 fc 8f 08 e5 a3 2a e9 18 cb de c1 ef 50 c3 6c c7 2b 4f 89 86 ca 9e fd bb 7f ee 9b 2f 6c fd ef f1 e3 6d 77 6c cb 96 5f 07 1a 1b 8d a5 ad 59 2e fc b5 37 c3 0f 28 c1 3b 95 76 1b da 74 22 95 34 df 40 94 55 5d b3 d7 f1 da 5d b2 77 4c 6e 72 c6 da a3 7e 20 a7 1d 9b 28 d8 f2 56 12 48 32 c1 f2 e8 af fe 04 28 53 cd d2 bb 7b fe 2c 56 31 c1 d2 f7 a5 81 20 22 70 39 62 c2 5a 02 d8 c1 22 8f df f0 f5 ee ef d6 86 35 04 31 Data Ascii: zyWK6zi2Q@B\|0@z[YvBynytn?xuHRHUp`$~is\|\)Eg)y!MN ,*Pl+O/lmwl_Y.7(;vt"4@U]]wLnr~ (VH2(S{,V1 "p9bZ"51
2024-01-17 17:07:39 UTC	16384	IN	Data Raw: 3c 1b 59 47 3f 63 e6 ac b2 3c f6 84 c5 37 ec 04 8b db f4 dc 04 31 96 eb 74 85 f3 63 49 49 09 1e 27 86 01 8f 35 ea fc 6f 04 91 65 cc 09 13 82 82 f5 f7 1f 06 83 fd 97 9e 82 2c 49 19 4e 4c 0f d2 59 de 6a b5 6d cb 3a 00 10 12 82 06 dd eb 00 98 b5 28 9d 80 55 82 17 5e ec c9 30 d7 b3 9c 5d 99 4b 56 d3 a7 4a b0 6c 14 2b 67 40 41 df 82 4b f7 04 07 0d 90 00 4d 1b f1 85 5d a5 c9 d2 f5 29 58 30 a7 6e ce 8c e6 22 1d c2 a7 24 26 a8 55 1b 45 47 b9 b1 20 67 42 b7 45 73 45 cd 31 e6 de dc e9 51 a7 8e 3f 96 76 67 77 05 a6 f7 7c 04 10 c7 c0 03 aa 20 31 00 8a 38 f7 ac dc ba 46 32 2c a4 b7 53 37 19 92 92 42 2e 34 62 e7 c6 6a 36 e3 d5 fc d9 1a 5e 82 fb d3 bf 47 c7 3e 26 99 65 ff 5f 34 e3 cf 7b b6 c6 06 af 69 39 09 57 82 be f3 70 4f ad e0 84 5e 44 c6 f2 e9 db 53 07 64 a6 1d c3 Data Ascii: <YG?c<71tcII'5oe,INLYjm:(U^0]KVJl+g@AKM])X0n"$&UEG gBEsE1Q?vgw\| 18F2,S7B.4bj6^G>&e_4{i9WpO^DSd
2024-01-17 17:07:39 UTC	7818	IN	Data Raw: b9 4f 96 4f 54 ea b9 cb 7a 46 4e c0 b6 06 6c 39 37 cb 49 be 14 65 3e 12 27 85 dc ba 66 0c 1e 9e 46 02 42 0e ad da 5c 81 5b ad 23 a8 09 36 27 70 49 7f 4e 98 4b b0 ed e6 df cf 1d da 19 97 7b 37 52 90 60 ac 99 92 be 48 46 b1 48 94 13 ea 8a 34 0c 75 af 68 59 d3 47 8a f6 c3 0f 51 5c 04 92 4d 6c b1 9d 34 27 12 2e fd 3f 82 9b e1 0f 6a 55 33 4e ea 69 32 09 23 c7 7d 65 a1 74 08 d7 47 0f 69 3a 89 35 12 aa 92 a7 29 52 e5 20 77 3d ee b1 c3 53 72 87 6b 4e 48 97 fd 09 9d de de 3a 13 e6 5f bc 46 3c 92 21 6b 47 97 53 1d 0a 76 c7 cc 3d 1a 7d 06 46 02 d4 8c 02 69 5a c8 e2 61 b2 53 fd 4e 66 4a 13 d0 1e a8 07 6b 02 f4 49 dd ad 5e 61 0d 81 8a b0 2e fd 75 6f 36 22 cf ab 71 8b f6 4a 4d 4c a3 d4 4b f0 2d c5 f5 40 6b e9 2a 8e 62 77 c0 72 86 4d a1 f9 03 65 e4 47 bb 62 f8 a8 f2 61 Data Ascii: OOTzFNl97Ie>'fFB\[#6'pINK{7R`HFH4uhYGQ\Ml4'.?jU3Ni2#}etGi:5)R w=SrkNH:_F<!kGSv=}FiZaSNfJkI^a.uo6"qJMLK-@k*bwrMeGba

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.16	50171	13.107.246.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:38 UTC	629	OUT	GET /shared/edgeweb/img/fluent-info.f3f3f3d.svg HTTP/1.1 Host: edgestatic.azureedge.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.microsoft.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:39 UTC	773	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:39 GMT Content-Type: image/svg+xml Content-Length: 2203 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable ETag: W/"89b-18c5b53a49c" Last-Modified: Tue, 12 Dec 2023 00:00:57 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Origin-Agent-Cluster: ?1 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 x-azure-ref: 20240117T170739Z-6dhnpkt4bx4hdabt2fqtuw302n00000001100000000063tz X-Cache: TCP_MISS x-fd-int-roxy-purgeid: 0 Accept-Ranges: bytes
2024-01-17 17:07:39 UTC	2203	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 32 38 22 20 68 65 69 67 68 74 3d 22 31 32 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 38 20 31 32 38 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 67 20 66 69 6c 6c 3d 22 23 30 30 30 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 3c 70 61 74 68 20 64 3d 22 4d 36 34 20 30 63 35 2e 39 31 32 20 30 20 31 31 2e 35 39 2e 37 35 37 20 31 37 2e 30 33 36 20 32 2e 32 36 39 20 35 2e 34 34 33 20 31 2e 35 31 20 31 30 2e 35 34 31 20 33 2e 36 35 35 20 31 35 2e 32 39 36 20 36 2e 34 33 32 61 36 33 2e 36 39 33 20 36 33 2e 36 39 33 20 30 20 30 20 31 20 31 32 2e 39 36 37 20 31 30 20 36 33 2e 36 39 33 20 36 33 2e 36 39 33 20 30 20 30 20 31 20 Data Ascii: <svg width="128" height="128" viewBox="0 0 128 128" xmlns="http://www.w3.org/2000/svg"><g fill="#000" fill-rule="evenodd"><path d="M64 0c5.912 0 11.59.757 17.036 2.269 5.443 1.51 10.541 3.655 15.296 6.432a63.693 63.693 0 0 1 12.967 10 63.693 63.693 0 0 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.16	50169	13.107.246.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:38 UTC	627	OUT	GET /shared/edgeweb/img/fluent-qr.0da4543.svg HTTP/1.1 Host: edgestatic.azureedge.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.microsoft.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:39 UTC	654	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:39 GMT Content-Type: image/svg+xml Content-Length: 825 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable ETag: W/"339-18c5b53a4fa" Last-Modified: Tue, 12 Dec 2023 00:00:57 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Origin-Agent-Cluster: ?1 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 x-azure-ref: 20240117T170739Z-sdy4sy3pe527ffgvagcvn1g96000000005ag000000005wks X-Cache: TCP_MISS Accept-Ranges: bytes
2024-01-17 17:07:39 UTC	825	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 67 20 66 69 6c 6c 3d 22 23 30 30 30 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 36 20 30 61 33 20 33 20 30 20 30 20 31 20 32 2e 39 39 35 20 32 2e 38 32 34 4c 31 39 20 33 76 31 33 61 33 20 33 20 30 20 30 20 31 2d 32 2e 38 32 34 20 32 2e 39 39 35 4c 31 36 20 31 39 48 33 61 33 20 33 20 30 20 30 20 31 2d 32 2e 39 39 35 2d 32 2e 38 32 34 4c 30 20 31 36 56 33 41 33 20 33 20 30 20 30 20 31 20 32 2e 38 32 34 2e 30 30 35 4c 33 20 30 68 31 33 5a 6d 2d 33 20 36 48 Data Ascii: <svg width="48" height="48" viewBox="0 0 48 48" xmlns="http://www.w3.org/2000/svg"><g fill="#000" fill-rule="evenodd"><path d="M16 0a3 3 0 0 1 2.995 2.824L19 3v13a3 3 0 0 1-2.824 2.995L16 19H3a3 3 0 0 1-2.995-2.824L0 16V3A3 3 0 0 1 2.824.005L3 0h13Zm-3 6H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.16	50172	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:38 UTC	662	OUT	GET /tenant/amp/entityid/AANXkGJ.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:39 UTC	547	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AANXkGJ?w=80&h=80&q=60&m=6&f=jpg&u=t Last-Modified: Thu, 11 Jan 2024 03:48:06 GMT X-Source-Length: 111502 X-Datacenter: eastus X-ActivityId: 19ddce28-6474-4cc8-9b26-ad6ffa3b8c80 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 4096 Cache-Control: public, max-age=254384 Expires: Sat, 20 Jan 2024 15:47:23 GMT Date: Wed, 17 Jan 2024 17:07:39 GMT Connection: close
2024-01-17 17:07:39 UTC	4096	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 50 00 50 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOPP}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.16	50173	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:38 UTC	663	OUT	GET /tenant/amp/entityid/AA1e6Z00.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:39 UTC	549	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA1e6Z00?w=80&h=80&q=60&m=6&f=jpg&u=t Last-Modified: Wed, 27 Dec 2023 12:03:17 GMT X-Source-Length: 116703 X-Datacenter: northeu X-ActivityId: ffa51a45-5632-40c3-ad2b-22f54b6fb258 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 4096 Cache-Control: public, max-age=154528 Expires: Fri, 19 Jan 2024 12:03:07 GMT Date: Wed, 17 Jan 2024 17:07:39 GMT Connection: close
2024-01-17 17:07:39 UTC	4096	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 50 00 50 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOPP}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.16	50175	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:39 UTC	662	OUT	GET /tenant/amp/entityid/AAtJXs0.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:39 UTC	547	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AAtJXs0?w=80&h=80&q=60&m=6&f=jpg&u=t Last-Modified: Tue, 16 Jan 2024 03:51:09 GMT X-Source-Length: 101895 X-Datacenter: eastus X-ActivityId: 0b6d032a-076b-4184-9d6a-532fbb37ff67 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 4096 Cache-Control: public, max-age=297800 Expires: Sun, 21 Jan 2024 03:50:59 GMT Date: Wed, 17 Jan 2024 17:07:39 GMT Connection: close
2024-01-17 17:07:39 UTC	4096	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 50 00 50 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOPP}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.16	50176	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:39 UTC	663	OUT	GET /tenant/amp/entityid/AA13Dog2.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:39 UTC	547	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA13Dog2?w=80&h=80&q=60&m=6&f=jpg&u=t Last-Modified: Mon, 15 Jan 2024 11:38:07 GMT X-Source-Length: 16770 X-Datacenter: eastus X-ActivityId: a75508e7-7fb6-4c03-a820-ff11768e4aee Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 4096 Cache-Control: public, max-age=239380 Expires: Sat, 20 Jan 2024 11:37:19 GMT Date: Wed, 17 Jan 2024 17:07:39 GMT Connection: close
2024-01-17 17:07:39 UTC	4096	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 50 00 50 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOPP}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.16	50174	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:39 UTC	663	OUT	GET /tenant/amp/entityid/AA1e6YZU.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:39 UTC	547	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA1e6YZU?w=80&h=80&q=60&m=6&f=jpg&u=t Last-Modified: Thu, 11 Jan 2024 02:25:24 GMT X-Source-Length: 45986 X-Datacenter: eastus X-ActivityId: ef57e6d0-4bdf-4f27-a963-7c07600c744c Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 4096 Cache-Control: public, max-age=249464 Expires: Sat, 20 Jan 2024 14:25:23 GMT Date: Wed, 17 Jan 2024 17:07:39 GMT Connection: close
2024-01-17 17:07:39 UTC	4096	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 50 00 50 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOPP}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.16	50177	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:39 UTC	663	OUT	GET /tenant/amp/entityid/AA19HRHV.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:39 UTC	547	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA19HRHV?w=80&h=80&q=60&m=6&f=jpg&u=t Last-Modified: Thu, 11 Jan 2024 02:26:55 GMT X-Source-Length: 85196 X-Datacenter: westus X-ActivityId: 3e2415e7-5589-41c3-95d4-428080b901ec Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 2048 Cache-Control: public, max-age=249475 Expires: Sat, 20 Jan 2024 14:25:34 GMT Date: Wed, 17 Jan 2024 17:07:39 GMT Connection: close
2024-01-17 17:07:39 UTC	2048	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 50 00 50 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOPP}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.16	50178	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:39 UTC	505	OUT	GET /bundles/v1/edgeChromium/latest/sports-match-list.86f101f78317d598ef59.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:39 UTC	1149	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: PeaiD3rJ05M1kxJdf7A56Q== Last-Modified: Mon, 08 Jan 2024 16:46:13 GMT ETag: 0x8DC1069534DD792 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 2124b94f-801e-00fb-0152-42eafc000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:39 GMT Content-Length: 31287 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89899980,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=7, origin; dur=0 , cdntime; dur=7 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55bc3cc Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511259.55bc3cc Vary: Origin
2024-01-17 17:07:39 UTC	15235	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 70 6f 72 74 73 2d 6d 61 74 63 68 2d 6c 69 73 74 22 5d 2c 7b 32 37 30 31 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 61 2e 72 28 74 29 2c 61 2e 64 28 74 2c 7b 53 70 6f 72 74 73 4d 61 74 63 68 4c 69 73 74 54 72 61 6e 73 66 6f 72 6d 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 2e 6b 7d 2c 53 70 6f 72 74 73 4d 61 74 63 68 54 72 61 6e 73 66 6f 72 6d 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: "use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["sports-match-list"],{27017:function(e,t,a){a.r(t),a.d(t,{SportsMatchListTransformer:function(){return i.k},SportsMatchTransformer:function()
2024-01-17 17:07:39 UTC	9341	IN	Data Raw: 29 2e 70 61 72 74 69 63 69 70 61 6e 74 54 77 6f 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 6e 61 6d 65 7d 7d 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 7b 65 3d 3e 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 28 6e 75 6c 6c 3d 3d 3d 28 74 3d 65 2e 67 65 74 4d 61 74 63 68 44 61 74 61 28 29 2e 70 61 72 74 69 63 69 70 61 6e 74 54 77 6f 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 6e 61 6d 65 29 7c 7c 22 22 7d 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 2f 61 3e 0a 60 2c 45 3d 28 29 3d 3e 53 2e 64 79 60 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 Data Ascii: ).participantTwo)\|\|void 0===t?void 0:t.name}}"> ${e=>{var t;return(null===(t=e.getMatchData().participantTwo)\|\|void 0===t?void 0:t.name)\|\|""}} </div> </div> </div> </a>`,E=()=>S.dy` <div cla
2024-01-17 17:07:39 UTC	6711	IN	Data Raw: 75 6c 6c 21 3d 3d 65 26 26 65 2e 67 61 6d 65 53 74 61 74 65 43 61 74 65 74 6f 72 79 3d 3d 3d 69 2e 77 5f 2e 70 6f 73 74 47 61 6d 65 29 7b 69 66 28 65 2e 70 6f 73 74 47 61 6d 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 4d 65 73 73 61 67 65 29 72 65 74 75 72 6e 20 65 2e 70 6f 73 74 47 61 6d 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 4d 65 73 73 61 67 65 3b 6c 65 74 20 74 3d 30 3b 63 6f 6e 73 74 20 61 3d 65 2e 67 61 6d 65 49 6e 43 61 72 64 4e 6f 74 69 66 69 63 61 74 69 6f 6e 44 65 74 61 69 6c 73 26 26 65 2e 67 61 6d 65 49 6e 43 61 72 64 4e 6f 74 69 66 69 63 61 74 69 6f 6e 44 65 74 61 69 6c 73 2e 69 73 47 61 6d 65 53 74 61 74 4e 6f 74 69 66 69 63 61 74 69 6f 6e 45 6e 61 62 6c 65 64 2c 69 3d 65 2e 67 61 6d 65 49 6e 43 61 72 64 4e 6f 74 69 66 69 63 61 74 69 6f 6e 44 65 Data Ascii: ull!==e&&e.gameStateCatetory===i.w_.postGame){if(e.postGameNotificationMessage)return e.postGameNotificationMessage;let t=0;const a=e.gameInCardNotificationDetails&&e.gameInCardNotificationDetails.isGameStatNotificationEnabled,i=e.gameInCardNotificationDe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.16	50179	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:39 UTC	663	OUT	GET /tenant/amp/entityid/AA14twXt.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:39 UTC	547	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA14twXt?w=80&h=80&q=60&m=6&f=jpg&u=t Last-Modified: Thu, 11 Jan 2024 23:02:41 GMT X-Source-Length: 14962 X-Datacenter: eastus X-ActivityId: a6a27e4b-ac0c-4b69-8bf0-350f03bf5c6d Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 4096 Cache-Control: public, max-age=323833 Expires: Sun, 21 Jan 2024 11:04:52 GMT Date: Wed, 17 Jan 2024 17:07:39 GMT Connection: close
2024-01-17 17:07:39 UTC	4096	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 50 00 50 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOPP}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.16	50180	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:39 UTC	662	OUT	GET /tenant/amp/entityid/AAtJQ6K.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:39 UTC	546	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AAtJQ6K?w=80&h=80&q=60&m=6&f=jpg&u=t Last-Modified: Thu, 11 Jan 2024 11:56:36 GMT X-Source-Length: 79317 X-Datacenter: eastus X-ActivityId: 9be6630a-8877-4190-8cdf-201c51b16324 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 2048 Cache-Control: public, max-age=283870 Expires: Sat, 20 Jan 2024 23:58:49 GMT Date: Wed, 17 Jan 2024 17:07:39 GMT Connection: close
2024-01-17 17:07:39 UTC	2048	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 50 00 50 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOPP}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.16	50181	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:39 UTC	663	OUT	GET /tenant/amp/entityid/AA1a8pVP.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:39 UTC	547	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA1a8pVP?w=80&h=80&q=60&m=6&f=jpg&u=t Last-Modified: Sat, 13 Jan 2024 11:42:39 GMT X-Source-Length: 141259 X-Datacenter: eastus X-ActivityId: 3abe6d97-d24e-407c-ac46-a9b64814473c Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 4096 Cache-Control: public, max-age=66806 Expires: Thu, 18 Jan 2024 11:41:05 GMT Date: Wed, 17 Jan 2024 17:07:39 GMT Connection: close
2024-01-17 17:07:39 UTC	4096	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 50 00 50 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOPP}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.16	50182	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:39 UTC	662	OUT	GET /tenant/amp/entityid/AAtJQ83.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:39 UTC	546	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AAtJQ83?w=80&h=80&q=60&m=6&f=jpg&u=t Last-Modified: Thu, 11 Jan 2024 03:48:06 GMT X-Source-Length: 74757 X-Datacenter: eastus X-ActivityId: 41fec131-9cfe-4553-ab44-64c1b22f9e65 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 2048 Cache-Control: public, max-age=254368 Expires: Sat, 20 Jan 2024 15:47:07 GMT Date: Wed, 17 Jan 2024 17:07:39 GMT Connection: close
2024-01-17 17:07:39 UTC	2048	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 50 00 50 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOPP}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.16	50183	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:39 UTC	663	OUT	GET /tenant/amp/entityid/AA1a8bzM.img?w=80&h=80&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:39 UTC	548	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA1a8bzM?w=80&h=80&q=60&m=6&f=jpg&u=t Last-Modified: Fri, 12 Jan 2024 02:23:54 GMT X-Source-Length: 244903 X-Datacenter: westus X-ActivityId: d2d77018-931c-4342-9d55-8b8233a0b570 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 4096 Cache-Control: public, max-age=335719 Expires: Sun, 21 Jan 2024 14:22:58 GMT Date: Wed, 17 Jan 2024 17:07:39 GMT Connection: close
2024-01-17 17:07:39 UTC	4096	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 50 00 50 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOPP}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.16	50184	13.107.246.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:39 UTC	629	OUT	GET /shared/edgeweb/img/fluent-link.cb49784.svg HTTP/1.1 Host: edgestatic.azureedge.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.microsoft.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:39 UTC	654	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:39 GMT Content-Type: image/svg+xml Content-Length: 476 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable ETag: W/"1dc-18c5b53a509" Last-Modified: Tue, 12 Dec 2023 00:00:57 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Origin-Agent-Cluster: ?1 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 x-azure-ref: 20240117T170739Z-a23thcfxbh6mbadr0hxm8zqp8c00000004c00000000043qy X-Cache: TCP_MISS Accept-Ranges: bytes
2024-01-17 17:07:39 UTC	476	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 4d 35 2e 35 20 33 41 32 2e 35 20 32 2e 35 20 30 20 30 20 30 20 33 20 35 2e 35 76 31 33 41 32 2e 35 20 32 2e 35 20 30 20 30 20 30 20 35 2e 35 20 32 31 68 31 33 61 32 2e 35 20 32 2e 35 20 30 20 30 20 30 20 32 2e 35 2d 32 2e 35 76 2d 33 61 31 2e 35 20 31 2e 35 20 30 20 30 20 31 20 33 20 30 76 33 61 35 2e 35 20 35 2e 35 20 30 20 30 20 31 2d 35 2e 35 20 35 2e 35 68 2d 31 33 41 35 2e 35 20 35 2e 35 20 30 20 30 20 31 20 30 20 31 38 2e 35 76 2d 31 33 41 35 2e 35 20 35 2e 35 20 30 20 30 20 31 Data Ascii: <svg width="24" height="24" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"><path d="M5.5 3A2.5 2.5 0 0 0 3 5.5v13A2.5 2.5 0 0 0 5.5 21h13a2.5 2.5 0 0 0 2.5-2.5v-3a1.5 1.5 0 0 1 3 0v3a5.5 5.5 0 0 1-5.5 5.5h-13A5.5 5.5 0 0 1 0 18.5v-13A5.5 5.5 0 0 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.16	50186	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:39 UTC	659	OUT	GET /tenant/amp/entityid/AAY2WeD?w=16&h=16&q=100&m=6&f=png&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:39 UTC	544	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AAY2WeD?w=16&h=16&q=100&m=6&f=png&u=t Last-Modified: Mon, 15 Jan 2024 01:35:26 GMT X-Source-Length: 1214 X-Datacenter: eastus X-ActivityId: 8c2f89f8-33a6-459b-822a-a9249eac96b6 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 512 Cache-Control: public, max-age=203299 Expires: Sat, 20 Jan 2024 01:35:58 GMT Date: Wed, 17 Jan 2024 17:07:39 GMT Connection: close
2024-01-17 17:07:39 UTC	512	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 01 54 49 44 41 54 78 01 8d 52 b1 4a c3 50 14 bd 0f a3 b6 11 dd 9c ba 76 76 75 12 db ba 3b a8 93 08 0e 16 04 c1 a5 4e 82 42 54 3a e8 60 05 71 13 9c 0a 62 d1 4f 48 d4 c1 5f d0 41 17 3f c0 c1 21 06 4d f2 3c af e1 a5 2f af 2f d1 0b 37 b9 f7 9c 77 4e 6e 6e 62 d1 1f 11 dc 36 58 c1 11 ab d0 00 e2 25 88 1d e4 b7 66 c2 d1 8f 22 5f 72 0d 20 9e c4 81 63 64 15 99 17 ed 5c 03 28 5a c8 22 f1 4d 69 d9 ed 19 0d 82 bb 46 95 78 df 20 ef c9 3e 08 47 90 46 03 8a e9 00 dc 94 38 90 13 e7 a5 15 f7 59 70 43 06 c1 75 7d 81 42 be 4a 24 96 2f 76 25 43 f6 ec 1d d4 89 44 33 06 7e b7 3e c2 43 6a 27 a4 2a 16 88 ec f9 61 Data Ascii: PNGIHDRapHYs+TIDATxRJPvvu;NBT:`qbOH_A?!M<//7wNnnb6X%f"_r cd\(Z"MiFx >GF8YpCu}BJ$/v%CD3~>Cj'*a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.16	50185	13.107.246.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:39 UTC	630	OUT	GET /shared/edgeweb/img/fluent-close.a72d9a4.svg HTTP/1.1 Host: edgestatic.azureedge.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.microsoft.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:39 UTC	680	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:39 GMT Content-Type: image/svg+xml Content-Length: 665 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable ETag: W/"299-18c5b5c32ad" Last-Modified: Tue, 12 Dec 2023 00:10:18 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Origin-Agent-Cluster: ?1 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 x-azure-ref: 20240117T170739Z-sn0wsw5q9t1n3eud0zfxs8tt3n00000000n0000000006h9t X-Cache: TCP_MISS x-fd-int-roxy-purgeid: 0 Accept-Ranges: bytes
2024-01-17 17:07:39 UTC	665	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 30 30 22 20 68 65 69 67 68 74 3d 22 32 30 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 30 30 20 32 30 30 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 6d 31 31 32 2e 37 38 34 20 31 30 30 20 38 34 2e 35 31 37 20 38 34 2e 35 31 37 63 31 2e 38 20 31 2e 38 20 32 2e 36 39 39 20 33 2e 39 33 20 32 2e 36 39 39 20 36 2e 33 39 32 73 2d 2e 39 20 34 2e 35 39 33 2d 32 2e 36 39 39 20 36 2e 33 39 32 63 2d 31 2e 38 20 31 2e 38 2d 33 2e 39 33 20 32 2e 36 39 39 2d 36 2e 33 39 32 20 32 2e 36 39 39 73 2d 34 2e 35 39 33 2d 2e 39 2d 36 2e 33 39 32 2d 32 2e 36 39 39 4c 31 30 30 20 31 31 32 2e 37 38 34 6c 2d 38 34 2e 35 31 37 20 38 34 2e 35 31 Data Ascii: <svg width="200" height="200" viewBox="0 0 200 200" xmlns="http://www.w3.org/2000/svg"><path d="m112.784 100 84.517 84.517c1.8 1.8 2.699 3.93 2.699 6.392s-.9 4.593-2.699 6.392c-1.8 1.8-3.93 2.699-6.392 2.699s-4.593-.9-6.392-2.699L100 112.784l-84.517 84.51

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.16	50187	13.107.213.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:39 UTC	578	OUT	GET /scripts/c/ms.jsll-3.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:39 UTC	920	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:39 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 185041 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=1800, immutable, no-transform Last-Modified: Thu, 21 Sep 2023 19:29:40 GMT ETag: 0x8DBBAD919F17481 x-ms-request-id: 74aaf19f-801e-00ae-800f-49fcf0000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 3.2.14 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-3.2.14.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240117T170739Z-3uk5gv30hx1xvbdn777qtct6f400000000dg0000000018cr X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-01-17 17:07:39 UTC	15464	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 4c 4c 20 53 4b 55 2c 20 33 2e 32 2e 31 34 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 6e 29 74 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 Data Ascii: /! 1DS JSLL SKU, 3.2.14 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&def
2024-01-17 17:07:39 UTC	16384	IN	Data Raw: 64 20 30 21 3d 3d 74 26 26 74 29 3f 22 2e 22 2b 57 72 3a 70 29 2b 47 72 29 7d 66 75 6e 63 74 69 6f 6e 20 59 72 28 65 29 7b 76 61 72 20 61 3d 7b 69 64 3a 4a 72 28 22 5f 61 69 44 61 74 61 2d 22 2b 28 65 7c 7c 70 29 2b 22 2e 22 2b 57 72 29 2c 61 63 63 65 70 74 3a 51 72 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 76 61 72 20 69 3d 65 5b 61 2e 69 64 5d 3b 72 65 74 75 72 6e 20 69 3f 69 5b 4d 74 28 74 29 5d 3a 28 72 26 26 28 28 69 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 5b 65 2e 69 64 5d 3b 69 66 28 21 6e 29 7b 6e 3d 7b 7d 3b 74 72 79 7b 51 72 28 74 29 26 26 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 4b 72 29 74 72 79 7b 72 65 74 75 72 6e 20 4b 72 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6e 2c 65 6e Data Ascii: d 0!==t&&t)?"."+Wr:p)+Gr)}function Yr(e){var a={id:Jr("_aiData-"+(e\|\|p)+"."+Wr),accept:Qr,get:function(e,t,n,r){var i=e[a.id];return i?i[Mt(t)]:(r&&((i=function(e,t){var n=t[e.id];if(!n){n={};try{Qr(t)&&!function(e,t,n){if(Kr)try{return Kr(e,t,{value:n,en
2024-01-17 17:07:40 UTC	16384	IN	Data Raw: 22 29 2c 69 3d 72 2c 68 5b 4d 61 5d 3d 72 3b 65 3d 5a 74 28 43 2e 64 69 73 61 62 6c 65 44 62 67 45 78 74 29 2c 21 30 3d 3d 3d 65 26 26 50 26 26 28 69 5b 49 65 5d 28 50 29 2c 50 3d 6e 75 6c 6c 29 2c 69 26 26 21 50 26 26 21 30 21 3d 3d 65 26 26 28 50 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 6d 72 29 7b 6d 72 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 79 72 5b 55 5d 3b 74 2b 2b 29 6d 72 5b 79 72 5b 74 5d 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 62 72 28 6e 29 3b 65 26 26 28 65 3d 65 2e 6c 69 73 74 65 6e 65 72 29 26 26 65 5b 74 5d 26 26 65 5b 74 5d 5b 4d 65 5d 28 65 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 28 79 72 5b 74 5d 2c 65 29 7d 72 65 74 75 72 6e 20 6d 72 Data Ascii: "),i=r,h[Ma]=r;e=Zt(C.disableDbgExt),!0===e&&P&&(i[Ie](P),P=null),i&&!P&&!0!==e&&(P=function(e){if(!mr){mr={};for(var t=0;t<yr[U];t++)mr[yr[t]]=function(t,n){return function(){var e=br(n);e&&(e=e.listener)&&e[t]&&e[t][Me](e,arguments)}}(yr[t],e)}return mr
2024-01-17 17:07:40 UTC	16384	IN	Data Raw: 5d 3a 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6f 70 65 72 61 26 26 65 5b 56 73 5d 3f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 65 5b 44 6f 5d 28 22 5c 6e 22 29 2c 72 3d 30 3b 72 3c 6e 5b 68 5d 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 6e 5b 72 5d 3b 6e 5b 72 2b 31 5d 26 26 28 69 2b 3d 22 40 22 2b 6e 5b 72 2b 31 5d 2c 72 2b 2b 29 2c 74 2e 70 75 73 68 28 69 29 7d 72 65 74 75 72 6e 7b 73 72 63 3a 65 2c 6f 62 6a 3a 74 7d 7d 28 65 5b 4f 6f 5d 29 3a 65 2e 72 65 61 73 6f 6e 26 26 65 2e 72 65 61 73 6f 6e 5b 4d 73 5d 3f 6e 3d 6a 73 28 65 2e 72 65 61 73 6f 6e 5b 4d 73 5d 29 3a 24 28 65 29 3f 6e 3d 6a 73 28 65 29 3a 28 74 3d 65 5b 56 73 5d 7c 7c 65 5b 48 73 5d 7c 7c 22 22 2c 24 28 65 5b 55 73 5d 29 26 26 28 74 26 26 28 74 Data Ascii: ]:window&&window.opera&&e[Vs]?n=function(e){for(var t=[],n=e[Do]("\n"),r=0;r<n[h];r++){var i=n[r];n[r+1]&&(i+="@"+n[r+1],r++),t.push(i)}return{src:e,obj:t}}(e[Oo]):e.reason&&e.reason[Ms]?n=js(e.reason[Ms]):$(e)?n=js(e):(t=e[Vs]\|\|e[Hs]\|\|"",$(e[Us])&&(t&&(t
2024-01-17 17:07:40 UTC	16384	IN	Data Raw: 29 7b 64 28 31 2c 33 36 2c 22 74 72 61 63 6b 4d 65 74 72 69 63 20 66 61 69 6c 65 64 2c 20 6d 65 74 72 69 63 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 3a 20 22 2b 76 28 72 29 2c 7b 65 78 63 65 70 74 69 6f 6e 3a 73 65 28 72 29 7d 29 7d 7d 2c 53 5b 55 63 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 72 79 7b 76 61 72 20 6e 3d 65 7c 7c 7b 7d 3b 6b 5b 55 63 5d 28 6e 2c 58 28 58 28 58 28 7b 7d 2c 6e 2e 70 72 6f 70 65 72 74 69 65 73 29 2c 6e 2e 6d 65 61 73 75 72 65 6d 65 6e 74 73 29 2c 74 29 29 2c 53 2e 63 6f 6e 66 69 67 5b 5f 63 5d 26 26 4f 5b 56 63 5d 28 6e 2e 6e 61 6d 65 2c 6e 2e 75 72 69 29 7d 63 61 74 63 68 28 72 29 7b 64 28 31 2c 33 37 2c 22 74 72 61 63 6b 50 61 67 65 56 69 65 77 20 66 61 69 6c 65 64 2c 20 70 61 67 65 20 76 69 Data Ascii: ){d(1,36,"trackMetric failed, metric will not be collected: "+v(r),{exception:se(r)})}},S[Uc]=function(e,t){try{var n=e\|\|{};k[Uc](n,X(X(X({},n.properties),n.measurements),t)),S.config[_c]&&O[Vc](n.name,n.uri)}catch(r){d(1,37,"trackPageView failed, page vi
2024-01-17 17:07:40 UTC	16384	IN	Data Raw: 75 29 3b 69 66 28 65 26 26 31 3d 3d 3d 65 2e 6c 65 6e 67 74 68 29 7b 69 66 28 65 5b 30 5d 2e 68 72 65 66 29 72 65 74 75 72 6e 20 65 5b 30 5d 2e 68 72 65 66 3b 69 66 28 65 5b 30 5d 2e 73 72 63 29 72 65 74 75 72 6e 20 65 5b 30 5d 2e 73 72 63 7d 7d 72 65 74 75 72 6e 22 22 7d 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 49 4e 50 55 54 22 3a 76 61 72 20 6e 3d 74 2e 74 79 70 65 3b 6e 26 26 7a 75 5b 6e 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 5d 26 26 28 6e 3d 73 72 28 29 7c 7c 7b 7d 2c 65 3d 74 2e 66 6f 72 6d 3f 74 2e 66 6f 72 6d 2e 61 63 74 69 6f 6e 7c 7c 6e 2e 70 61 74 68 6e 61 6d 65 7c 7c 22 22 3a 6e 2e 70 61 74 68 6e 61 6d 65 7c 7c 22 22 29 7d 72 65 74 75 72 6e 20 65 7d 28 65 29 2c 6f 3d 6c 65 28 6f 3d 74 68 69 73 2e 5f 63 6f 6e 74 65 6e 74 48 61 6e 64 6c 65 Data Ascii: u);if(e&&1===e.length){if(e[0].href)return e[0].href;if(e[0].src)return e[0].src}}return""}();break;case"INPUT":var n=t.type;n&&zu[n.toUpperCase()]&&(n=sr()\|\|{},e=t.form?t.form.action\|\|n.pathname\|\|"":n.pathname\|\|"")}return e}(e),o=le(o=this._contentHandle
2024-01-17 17:07:40 UTC	16384	IN	Data Raw: 2c 66 2e 74 72 61 63 6b 50 61 67 65 56 69 65 77 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 49 2e 5f 72 65 63 6f 72 64 54 69 6d 65 53 70 61 6e 28 22 64 77 65 6c 6c 54 69 6d 65 22 2c 21 31 29 2c 54 2e 76 3d 30 2c 69 3d 21 31 2c 66 2e 69 64 2e 69 6e 69 74 69 61 6c 69 7a 65 49 64 73 28 29 2c 65 2e 69 64 3d 66 2e 69 64 2e 67 65 74 4c 61 73 74 50 61 67 65 56 69 65 77 49 64 28 29 2c 64 2e 73 65 6e 64 50 61 67 65 56 69 65 77 49 6e 74 65 72 6e 61 6c 28 65 2c 74 2c 72 28 65 29 29 7d 2c 66 2e 63 61 70 74 75 72 65 50 61 67 65 56 69 65 77 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 67 2e 63 61 70 74 75 72 65 50 61 67 65 56 69 65 77 28 65 2c 74 29 7d 2c 66 2e 74 72 61 63 6b 50 61 67 65 56 69 65 77 50 65 72 66 6f 72 6d 61 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c Data Ascii: ,f.trackPageView=function(e,t){I._recordTimeSpan("dwellTime",!1),T.v=0,i=!1,f.id.initializeIds(),e.id=f.id.getLastPageViewId(),d.sendPageViewInternal(e,t,r(e))},f.capturePageView=function(e,t){g.capturePageView(e,t)},f.trackPageViewPerformance=function(e,
2024-01-17 17:07:40 UTC	16384	IN	Data Raw: 74 26 26 28 48 74 28 74 29 3f 65 3d 5b 74 5d 2e 63 6f 6e 63 61 74 28 65 29 3a 46 28 74 29 26 26 28 65 3d 74 2e 63 6f 6e 63 61 74 28 65 29 29 29 2c 65 7d 52 66 28 73 66 2c 73 66 2c 21 31 29 2c 52 66 28 74 66 2c 74 66 29 2c 52 66 28 6e 66 2c 22 43 6c 69 65 6e 74 2d 49 64 22 29 2c 52 66 28 6f 66 2c 6f 66 29 2c 52 66 28 72 66 2c 72 66 29 2c 52 66 28 61 66 2c 61 66 29 2c 52 66 28 68 63 2c 68 63 29 2c 46 66 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 48 66 3d 46 66 3b 66 75 6e 63 74 69 6f 6e 20 46 66 28 45 2c 65 2c 5f 2c 64 2c 78 29 7b 74 68 69 73 2e 5f 72 65 73 70 6f 6e 73 65 48 61 6e 64 6c 65 72 73 3d 5b 5d 3b 76 61 72 20 53 2c 4e 2c 44 2c 77 2c 41 2c 6b 2c 50 2c 4f 2c 52 2c 4d 2c 4c 3d 22 3f 63 6f 72 73 3d 74 72 75 65 26 63 6f 6e 74 65 6e 74 2d 74 79 70 65 Data Ascii: t&&(Ht(t)?e=[t].concat(e):F(t)&&(e=t.concat(e))),e}Rf(sf,sf,!1),Rf(tf,tf),Rf(nf,"Client-Id"),Rf(of,of),Rf(rf,rf),Rf(af,af),Rf(hc,hc),Ff.__ieDyn=1;var Hf=Ff;function Ff(E,e,_,d,x){this._responseHandlers=[];var S,N,D,w,A,k,P,O,R,M,L="?cors=true&content-type
2024-01-17 17:07:40 UTC	16384	IN	Data Raw: 6f 6e 28 29 7b 4c 3d 6e 75 6c 6c 2c 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 61 28 31 2c 30 2c 74 29 2c 76 28 29 2c 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 44 2e 69 73 43 6f 6d 70 6c 65 74 65 6c 79 49 64 6c 65 28 29 3f 65 28 29 3a 4c 3d 73 28 66 75 6e 63 74 69 6f 6e 28 29 7b 4c 3d 6e 75 6c 6c 2c 6e 28 65 29 7d 2c 2e 32 35 29 7d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 26 26 65 28 29 2c 30 3c 4d 2e 6c 65 6e 67 74 68 3f 4c 3d 73 28 66 75 6e 63 74 69 6f 6e 28 29 7b 4c 3d 6e 75 6c 6c 2c 72 28 4d 2e 73 68 69 66 74 28 29 2c 74 29 7d 2c 30 29 3a 28 4c 3d 6e 75 6c 6c 2c 6f 28 29 29 7d 29 7d 28 74 2c 6e 29 7d 2c 30 29 29 3a 4d 2e 70 75 73 68 28 74 29 3a 28 65 3d 63 28 29 2c 61 28 31 2c 31 2c 6e 29 2c 6e 75 6c 6c 21 3d 3d 74 26 26 74 21 3d 3d 75 6e 64 65 66 Data Ascii: on(){L=null,function r(e,t){a(1,0,t),v(),function n(e){D.isCompletelyIdle()?e():L=s(function(){L=null,n(e)},.25)}(function(){e&&e(),0<M.length?L=s(function(){L=null,r(M.shift(),t)},0):(L=null,o())})}(t,n)},0)):M.push(t):(e=c(),a(1,1,n),null!==t&&t!==undef
2024-01-17 17:07:40 UTC	16384	IN	Data Raw: 74 78 28 29 2e 67 65 74 54 72 61 63 65 49 64 28 29 7c 7c 72 7d 2c 65 2e 67 65 74 4c 61 73 74 50 61 67 65 56 69 65 77 49 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 7d 7d 29 7d 63 70 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 75 70 3d 63 70 2c 6c 70 3d 22 64 75 72 61 74 69 6f 6e 22 2c 66 70 3d 22 70 72 6f 70 65 72 74 69 65 73 22 2c 64 70 3d 22 72 65 71 75 65 73 74 55 72 6c 22 2c 70 70 3d 22 69 6e 73 74 22 2c 67 70 3d 22 6c 65 6e 67 74 68 22 2c 68 70 3d 22 74 72 61 63 65 49 44 22 2c 76 70 3d 22 73 70 61 6e 49 44 22 2c 6d 70 3d 22 74 72 61 63 65 46 6c 61 67 73 22 2c 79 70 3d 22 63 6f 6e 74 65 78 74 22 2c 43 70 3d 22 61 62 6f 72 74 65 64 22 2c 62 70 3d 22 74 72 61 63 65 49 64 22 2c 54 70 3d 22 73 70 61 6e 49 64 22 2c 49 70 3d 22 63 6f 72 Data Ascii: tx().getTraceId()\|\|r},e.getLastPageViewId=function(){return n}})}cp.__ieDyn=1;var up=cp,lp="duration",fp="properties",dp="requestUrl",pp="inst",gp="length",hp="traceID",vp="spanID",mp="traceFlags",yp="context",Cp="aborted",bp="traceId",Tp="spanId",Ip="cor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.16	50188	151.101.65.108	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:39 UTC	722	OUT	GET /dmp/up/pixie.js HTTP/1.1 Host: acdn.adnxs.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: uuid2=6324846154276582513; anj=dTM7k!M4.FEVNsVF']wIg2GTsq'-(%!m5LRe#nszZ=f1CByY$Nd<y!Ygk1F8glT4he9C6UjGe%zcyL_Eh0oWXlx#Lr8nG7m#e+i>bpRzqF1`b^n:Q@cN
2024-01-17 17:07:39 UTC	556	IN	HTTP/1.1 200 OK Connection: close Content-Length: 9139 Server: nginx/1.18.0 (Ubuntu) Content-Type: application/javascript Last-Modified: Wed, 02 Jun 2021 15:04:00 GMT ETag: "60b79de0-23b3" Expires: Wed, 17 Jan 2024 05:10:07 GMT Cache-Control: max-age=86402 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Wed, 17 Jan 2024 17:07:39 GMT Age: 43049 X-Served-By: cache-lga21930-LGA, cache-ewr18132-EWR X-Cache: HIT, HIT X-Cache-Hits: 183, 1 X-Timer: S1705511260.772844,VS0,VE1 Vary: Accept-Encoding
2024-01-17 17:07:39 UTC	1371	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 69 29 7b 69 66 28 74 5b 69 5d 29 72 65 74 75 72 6e 20 74 5b 69 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 69 5d 3d 7b 69 3a 69 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 69 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 69 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(e){var t={};function n(i){if(t[i])return t[i].exports;var r=t[i]={i:i,l:!1,exports:{}};return e[i].call(r.exports,r,r.exports,n),r.l=!0,r.exports}n.m=e,n.c=t,n.d=function(e,t,i){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:i})},n.r=fun
2024-01-17 17:07:39 UTC	1371	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 31 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 74 5b 6e 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 3b 74 68 69 73 2e 65 6d 69 74 4c 6f 67 28 22 69 6e 66 6f 22 2c 65 2c 74 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 31 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 74 5b 6e 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 3b 74 68 69 73 2e 65 6d 69 74 4c 6f 67 28 22 65 72 72 6f 72 22 2c 65 2c 74 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6d 69 74 4c 6f 67 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 2e 63 Data Ascii: =function(e){for(var t=[],n=1;n<arguments.length;n++)t[n-1]=arguments[n];this.emitLog("info",e,t)},e.prototype.error=function(e){for(var t=[],n=1;n<arguments.length;n++)t[n-1]=arguments[n];this.emitLog("error",e,t)},e.prototype.emitLog=function(e,t,n){i.c
2024-01-17 17:07:39 UTC	1371	IN	Data Raw: 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 2c 72 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 77 61 69 74 65 72 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 69 29 7b 72 65 74 75 72 6e 20 6e 65 77 28 6e 7c 7c 28 6e 3d 50 72 6f 6d 69 73 65 29 29 28 66 75 6e 63 74 69 6f 6e 28 72 2c 6f 29 7b 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 74 72 79 7b 73 28 69 2e 6e 65 78 74 28 65 29 29 7d 63 61 74 63 68 28 65 29 7b 6f 28 65 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 74 72 79 7b 73 28 69 2e 74 68 72 6f 77 28 65 29 29 7d 63 61 74 63 68 28 65 29 7b 6f 28 65 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 65 2e 64 6f 6e 65 3f 72 28 65 2e 76 61 6c 75 65 29 3a 6e 65 77 20 6e 28 66 75 6e Data Ascii: erty.call(t,r)&&(e[r]=t[r]);return e},r=this&&this.__awaiter\|\|function(e,t,n,i){return new(n\|\|(n=Promise))(function(r,o){function u(e){try{s(i.next(e))}catch(e){o(e)}}function a(e){try{s(i.throw(e))}catch(e){o(e)}}function s(e){e.done?r(e.value):new n(fun
2024-01-17 17:07:39 UTC	1371	IN	Data Raw: 6f 5b 30 5d 3f 6f 5b 31 5d 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 28 5b 6f 2c 61 5d 29 7d 7d 7d 3b 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 3b 76 61 72 20 75 3d 6e 28 31 31 29 2c 61 3d 6e 28 35 29 2c 73 3d 6e 28 38 29 3b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 21 3d 3d 77 69 6e 64 6f 77 2e 74 6f 70 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 29 2c 7b 76 65 72 73 69 6f 6e 3a 22 30 2e 30 2e 32 30 22 2c 68 72 65 66 3a 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 72 65 66 65 72 72 65 72 3a 64 6f Data Ascii: o[0]?o[1]:void 0,done:!0}}([o,a])}}};t.__esModule=!0;var u=n(11),a=n(5),s=n(8);function c(){try{return window!==window.top}catch(e){return!1}}function l(e){return void 0===e&&(e=(new Date).getTime()),{version:"0.0.20",href:window.location.href,referrer:do
2024-01-17 17:07:39 UTC	1371	IN	Data Raw: 28 65 29 7b 69 66 28 74 2e 70 69 78 65 6c 49 64 73 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 70 69 78 65 6c 49 64 3d 3d 3d 65 7d 29 2e 6c 65 6e 67 74 68 29 61 2e 6c 6f 67 67 65 72 2e 65 72 72 6f 72 28 22 49 6e 69 74 20 63 61 6c 6c 65 64 20 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 20 77 69 74 68 20 22 2b 65 29 3b 65 6c 73 65 7b 61 2e 6c 6f 67 67 65 72 2e 64 65 62 75 67 28 22 49 6e 69 74 69 61 6c 69 7a 65 20 77 69 74 68 20 49 44 3a 20 22 2b 65 29 3b 76 61 72 20 6e 3d 7b 70 69 78 65 6c 49 64 3a 65 2c 69 6e 69 74 54 69 6d 65 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 7d 3b 74 2e 70 69 78 65 6c 49 64 73 2e 70 75 73 68 28 6e 29 2c 73 2e 62 72 6f 61 64 63 61 73 74 45 76 65 6e 74 28 73 2e 49 4e 49 Data Ascii: (e){if(t.pixelIds.filter(function(t){return t.pixelId===e}).length)a.logger.error("Init called multiple times with "+e);else{a.logger.debug("Initialize with ID: "+e);var n={pixelId:e,initTime:(new Date).getTime()};t.pixelIds.push(n),s.broadcastEvent(s.INI
2024-01-17 17:07:39 UTC	1371	IN	Data Raw: 2e 63 6f 6e 63 61 74 28 75 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 7b 6b 65 79 3a 72 2c 76 61 6c 75 65 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 3f 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 3a 65 7d 7d 29 29 7d 2c 5b 5d 29 7d 28 69 28 7b 65 76 65 6e 74 3a 65 7d 2c 6e 29 29 2c 6f 6e 43 6f 6d 70 6c 65 74 65 3a 72 7d 29 7d 74 2e 70 72 6f 70 65 72 74 79 4d 61 70 3d 7b 70 69 78 65 6c 5f 69 64 3a 22 70 69 22 2c 65 76 65 6e 74 3a 22 65 22 2c 76 65 72 73 69 6f 6e 3a 22 76 22 2c 76 61 6c 75 65 3a 22 76 61 22 2c 63 75 72 72 65 6e 63 79 3a 22 63 22 2c 69 74 65 6d 5f 6e 61 6d 65 3a 22 69 6e 22 2c 69 74 65 6d 5f 74 79 70 65 3a 22 69 74 70 22 2c 69 74 65 6d 5f 69 64 3a 22 69 69 22 2c 69 74 65 6d 73 3a 22 69 22 2c 69 Data Ascii: .concat(u.map(function(e){return{key:r,value:"object"==typeof e?JSON.stringify(e):e}}))},[])}(i({event:e},n)),onComplete:r})}t.propertyMap={pixel_id:"pi",event:"e",version:"v",value:"va",currency:"c",item_name:"in",item_type:"itp",item_id:"ii",items:"i",i
2024-01-17 17:07:39 UTC	913	IN	Data Raw: 4c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 69 73 53 65 6e 74 3d 21 30 2c 74 2e 65 6e 64 54 69 6d 65 3d 6f 2e 54 69 6d 65 72 2e 6e 6f 77 28 29 3b 76 61 72 20 6e 3d 6f 2e 54 69 6d 65 72 2e 64 69 66 66 28 74 2e 73 74 61 72 74 54 69 6d 65 2c 74 2e 65 6e 64 54 69 6d 65 29 3b 74 2e 6c 6f 67 67 65 72 2e 64 65 62 75 67 28 22 50 69 78 65 6c 20 4c 6f 61 64 20 22 2b 28 65 3f 22 53 75 63 63 65 65 64 65 64 22 3a 22 46 61 69 6c 65 64 22 29 2b 22 20 2d 20 53 74 61 72 74 3a 20 22 2b 6e 65 77 20 44 61 74 65 28 74 2e 73 74 61 72 74 54 69 6d 65 29 2b 22 2c 20 45 6e 64 3a 20 22 2b 6e 65 77 20 44 61 74 65 28 74 2e 65 6e 64 54 69 6d 65 29 2b 22 2c 20 44 75 72 61 74 69 6f 6e 20 22 2b 6e 2b 22 20 6d 73 22 29 2c Data Ascii: Load=function(e){return function(){t.isSent=!0,t.endTime=o.Timer.now();var n=o.Timer.diff(t.startTime,t.endTime);t.logger.debug("Pixel Load "+(e?"Succeeded":"Failed")+" - Start: "+new Date(t.startTime)+", End: "+new Date(t.endTime)+", Duration "+n+" ms"),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.16	50189	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:39 UTC	678	OUT	GET /tenant/amp/entityid/AA1n8mnK.img?w=300&h=156&q=90&m=6&f=jpg&x=1493&y=943&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:39 UTC	564	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA1n8mnK?w=300&h=156&q=90&m=6&f=jpg&x=1493&y=943&u=t Last-Modified: Wed, 17 Jan 2024 16:51:32 GMT X-Source-Length: 572106 X-Datacenter: eastus X-ActivityId: f1fb7dc0-790b-49f8-8646-6cc5b87da6ce Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 16384 Cache-Control: public, max-age=431026 Expires: Mon, 22 Jan 2024 16:51:25 GMT Date: Wed, 17 Jan 2024 17:07:39 GMT Connection: close
2024-01-17 17:07:39 UTC	15820	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 9c 01 2c 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF``,}!1AQa"q2#BR
2024-01-17 17:07:39 UTC	564	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.16	50190	184.87.173.91	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:39 UTC	660	OUT	GET /tenant/amp/entityid/AA12I8qo?w=16&h=16&q=100&m=6&f=png&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:39 UTC	546	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Last-Modified: Sun, 24 Dec 2023 15:40:48 GMT X-Datacenter: westus X-ActivityId: 41df1129-8204-4dca-b778-cce7993bf7bf Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Type: image/png Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA12I8qo?w=16&h=16&q=100&m=6&f=png&u=t X-Source-Length: 1287 Content-Length: 1212 Cache-Control: public, max-age=297313 Expires: Sun, 21 Jan 2024 03:42:52 GMT Date: Wed, 17 Jan 2024 17:07:39 GMT Connection: close
2024-01-17 17:07:39 UTC	1212	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 02 20 49 44 41 54 78 01 a5 53 4d 48 54 51 14 fe ee fb 9b 79 3e ad 09 6a a5 b6 aa 64 a2 ac 76 15 42 88 7b 21 37 81 2b 17 25 cc b2 85 51 0a 6a 24 95 04 09 05 45 6d 1a 44 94 56 41 82 08 ad 02 49 ad a0 92 a2 5a 4c 8b 6a b6 15 ea 8c ce fb 99 db 39 f7 ce 3c c7 61 5a 75 16 ef de f3 ce f7 7d f7 dc 73 ce b5 7e 9d 4a 4b fc 87 59 31 37 8a 20 83 00 10 fc 47 40 38 0e 2d ca 81 f4 7d a0 5c d6 31 3a 4e d8 36 60 9a 8a aa 05 88 6c b4 1f 84 d5 79 52 01 99 10 2c bd 04 98 68 59 70 ba 7b 20 9a 5b b4 08 11 c3 b5 f7 28 ff f8 ae 44 94 80 0c 7c d8 67 bb d0 34 3c 16 27 b4 fd f8 21 8a 53 93 10 c9 14 9a c6 26 60 ec 3f Data Ascii: PNGIHDRapHYs+ IDATxSMHTQy>jdvB{!7+%Qj$EmDVAIZLj9<aZu}s~JKY17 G@8-}\1:N6`lyR,hYp{ [(D\|g4<'!S&`?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.16	50191	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:39 UTC	506	OUT	GET /bundles/v1/edgeChromium/latest/travel-destination.968ea4b102d3cee567ea.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:40 UTC	1186	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: VQtaAMLjOqGbISFm25aeKg== Last-Modified: Wed, 10 Jan 2024 03:17:35 GMT ETag: 0x8DC118AB0EF9156 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: d8292e58-401e-0027-2f73-432a83000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:40 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Akamai-Request-BC: [a=23.218.242.10,b=89901016,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=7, origin; dur=0 , cdntime; dur=7 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55bc7d8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511260.55bc7d8 Vary: Origin
2024-01-17 17:07:40 UTC	15198	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 74 72 61 76 65 6c 2d 64 65 73 74 69 6e 61 74 69 6f 6e 22 5d 2c 7b 35 36 33 32 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 72 28 74 29 2c 69 2e 64 28 74 2c 7b 43 61 72 64 53 63 65 6e 61 72 69 6f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 7d 2c 54 6f 6f 6c 69 6e 67 49 6e 66 6f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 58 69 7d 2c 54 72 61 76 Data Ascii: 00006000(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["travel-destination"],{56328:function(e,t,i){"use strict";i.r(t),i.d(t,{CardScenario:function(){return w},ToolingInfo:function(){return Xi},Trav
2024-01-17 17:07:40 UTC	9390	IN	Data Raw: 6e 3a 20 72 6f 77 3b 5c 6e 20 20 20 20 22 2c 57 3d 22 5c 6e 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 5c 6e 20 20 20 20 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 5c 6e 20 20 20 20 22 2c 6a 3d 22 5c 6e 20 20 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 5c 6e 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 5c 6e 20 20 20 20 22 2c 56 3d 22 5c 6e 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 5c 6e 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 36 70 78 3b 5c 6e 20 20 20 20 22 2c 45 3d 22 5c 6e 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 5c 6e 20 Data Ascii: n: row;\n ",W="\n display: flex;\n flex-direction: column;\n ",j="\n justify-content: center;\n align-items: center;\n ",V="\n font-size: 12px;\n line-height: 16px;\n ",E="\n font-size: 16px;\n
2024-01-17 17:07:40 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 3d 3e 41 65 28 65 2c 74 2e 70 61 72 65 6e 74 29 7d 20 63 6c 61 73 73 3d 22 64 68 6c 66 62 63 2d 73 6c 69 64 65 22 20 73 74 79 6c 65 3d 22 24 7b 28 65 2c 74 29 3d 3e 77 65 28 65 2c 74 2e 70 61 72 65 6e 74 29 7d 22 3e 3c 64 69 76 20 73 6c 6f 74 3d 22 74 69 62 73 2d 73 6c 6f 74 2d 31 22 3e 24 7b 28 65 2c 74 29 3d 3e 72 65 28 74 2e 70 61 72 65 6e 74 2e 73 74 72 69 6e 67 73 2e 77 65 46 6f 75 6e 64 48 6f 74 65 6c 73 46 6f 72 59 6f 75 29 7d 3c 2f 64 69 76 3e 3c 64 69 76 20 73 6c 6f 74 3d 22 74 69 62 73 2d 73 6c 6f 74 2d 32 22 3e 24 7b 28 65 2c 74 29 3d 3e 7b 76 61 72 20 69 3b 72 65 74 75 72 6e 28 30 2c 7a 2e 5a 29 28 28 6e 75 6c 6c 3d 3d 3d 28 69 3d 65 2e 50 72 6f 70 65 72 74 79 4e 61 6d 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 3f Data Ascii: 00006000=>Ae(e,t.parent)} class="dhlfbc-slide" style="${(e,t)=>we(e,t.parent)}"><div slot="tibs-slot-1">${(e,t)=>re(t.parent.strings.weFoundHotelsForYou)}</div><div slot="tibs-slot-2">${(e,t)=>{var i;return(0,z.Z)((null===(i=e.PropertyName)\|\|void 0===i?
2024-01-17 17:07:40 UTC	8204	IN	Data Raw: 72 69 6f 3d 3d 3d 4c 65 2e 4d 69 6e 69 6d 61 6c 43 61 72 6f 75 73 65 6c 29 72 65 74 75 72 6e 20 53 2e 64 79 60 24 7b 6c 74 7d 60 7d 7d 3c 2f 6d 73 6e 2d 74 72 61 76 65 6c 2d 73 64 2d 63 61 72 64 3e 3c 2f 64 69 76 3e 60 3b 6c 65 74 20 61 74 3d 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 4d 65 7b 7d 3b 61 74 3d 28 30 2c 64 2e 67 6e 29 28 5b 28 30 2c 4c 2e 4d 29 28 7b 6e 61 6d 65 3a 22 66 6c 69 67 68 74 2d 64 65 73 74 69 6e 61 74 69 6f 6e 2d 6c 69 73 74 2d 63 61 72 64 22 2c 74 65 6d 70 6c 61 74 65 3a 72 74 2c 73 74 79 6c 65 73 3a 74 74 2c 73 68 61 64 6f 77 4f 70 74 69 6f 6e 73 3a 7b 64 65 6c 65 67 61 74 65 73 46 6f 63 75 73 3a 21 30 7d 7d 29 5d 2c 61 74 29 3b 63 6f 6e 73 74 20 6e 74 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 43 68 65 61 70 65 73 74 41 69 Data Ascii: rio===Le.MinimalCarousel)return S.dy`${lt}`}}</msn-travel-sd-card></div>`;let at=class extends Me{};at=(0,d.gn)([(0,L.M)({name:"flight-destination-list-card",template:rt,styles:tt,shadowOptions:{delegatesFocus:!0}})],at);const nt=Object.freeze({CheapestAi
2024-01-17 17:07:40 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 76 61 72 20 64 2c 75 2c 68 2c 76 3b 69 66 28 6e 75 6c 6c 21 3d 3d 28 64 3d 74 68 69 73 2e 63 6f 6e 66 69 67 29 26 26 76 6f 69 64 20 30 21 3d 3d 64 26 26 6e 75 6c 6c 21 3d 3d 28 75 3d 64 2e 75 73 65 53 65 72 70 52 65 64 69 72 65 63 74 69 6f 6e 29 26 26 76 6f 69 64 20 30 21 3d 3d 75 26 26 75 2e 66 6c 69 67 68 74 73 29 7b 76 61 72 20 70 2c 67 2c 6d 2c 66 3b 63 6f 6e 73 74 20 65 3d 28 72 2e 54 72 69 70 54 79 70 65 3f 3f 63 2e 74 44 2e 4f 6e 65 57 61 79 29 3d 3d 63 2e 74 44 2e 52 6f 75 6e 64 54 72 69 70 2c 5b 74 2c 69 5d 3d 5b 28 6e 75 6c 6c 3d 3d 3d 28 70 3d 72 2e 44 65 70 61 72 74 75 72 65 41 69 72 70 6f 72 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 70 3f 76 6f 69 64 20 30 3a 70 2e 43 69 74 79 29 3f 3f 22 22 2c 28 6e 75 6c 6c 3d 3d Data Ascii: 00004000var d,u,h,v;if(null!==(d=this.config)&&void 0!==d&&null!==(u=d.useSerpRedirection)&&void 0!==u&&u.flights){var p,g,m,f;const e=(r.TripType??c.tD.OneWay)==c.tD.RoundTrip,[t,i]=[(null===(p=r.DepartureAirport)\|\|void 0===p?void 0:p.City)??"",(null==
2024-01-17 17:07:40 UTC	12	IN	Data Raw: 78 74 65 6e 64 73 20 4c 2e 48 0d 0a Data Ascii: xtends L.H
2024-01-17 17:07:40 UTC	9341	IN	Data Raw: 30 30 30 30 32 34 37 31 0d 0a 7b 7d 28 30 2c 64 2e 67 6e 29 28 5b 78 2e 4c 4f 5d 2c 66 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 64 61 74 61 22 2c 76 6f 69 64 20 30 29 3b 63 6f 6e 73 74 20 79 74 3d 61 65 2e 69 60 0a 2e 73 62 73 2d 73 6c 69 64 65 20 2e 73 74 61 72 73 2e 66 6c 6f 61 74 20 2e 73 74 61 72 2d 70 69 6e 6b 7b 72 69 67 68 74 3a 30 3b 6c 65 66 74 3a 61 75 74 6f 7d 2e 73 62 73 2d 73 6c 69 64 65 20 2e 73 74 61 72 73 2e 66 6c 6f 61 74 20 2e 73 74 61 72 2d 62 6c 75 65 7b 72 69 67 68 74 3a 61 75 74 6f 3b 6c 65 66 74 3a 30 7d 2e 73 62 73 2d 73 6c 69 64 65 2e 63 72 73 6c 20 2e 73 62 73 2d 63 6f 6e 74 61 69 6e 65 72 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 69 6e 69 74 69 61 6c 7d 60 2c 78 74 3d 61 65 2e Data Ascii: 00002471{}(0,d.gn)([x.LO],ft.prototype,"data",void 0);const yt=ae.i`.sbs-slide .stars.float .star-pink{right:0;left:auto}.sbs-slide .stars.float .star-blue{right:auto;left:0}.sbs-slide.crsl .sbs-container-2{margin-left:6px;margin-right:initial}`,xt=ae.
2024-01-17 17:07:40 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 73 63 2d 68 63 22 3e 24 7b 65 3d 3e 65 2e 73 74 72 69 6e 67 73 2e 77 65 76 65 46 6f 75 6e 64 46 6c 69 67 68 74 73 46 6f 72 59 6f 75 7d 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 70 74 69 2d 69 61 74 61 2d 70 72 69 63 65 2d 68 63 22 3e 24 7b 65 3d 3e 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 65 2e 67 65 74 49 61 74 61 43 6f 64 65 73 28 6e 75 6c 6c 3d 3d 3d 28 74 3d 65 2e 64 61 74 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 46 6c 69 67 68 74 52 65 73 75 6c 74 73 29 7d 7d 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 70 74 69 2d 69 6e 74 65 72 70 75 6e 63 74 2d 68 63 22 3e c2 b7 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 70 74 69 2d 70 72 69 63 65 2d 68 63 22 3e 24 7b 65 Data Ascii: 00004000sc-hc">${e=>e.strings.weveFoundFlightsForYou}</div><div class="cpti-iata-price-hc">${e=>{var t;return e.getIataCodes(null===(t=e.data)\|\|void 0===t?void 0:t.FlightResults)}}<span class="cpti-interpunct-hc"></span><span class="cpti-price-hc">${e
2024-01-17 17:07:40 UTC	12	IN	Data Raw: 72 69 63 65 22 3e 3c 64 69 76 0d 0a Data Ascii: rice"><div
2024-01-17 17:07:40 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 20 63 6c 61 73 73 3d 22 6a 6c 70 2d 68 6f 74 65 6c 2d 70 72 69 63 65 22 3e 24 7b 28 65 2c 74 29 3d 3e 65 2e 5f 63 75 72 72 65 6e 63 79 53 79 6d 62 6f 6c 7d 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6a 6c 70 2d 68 6f 74 65 6c 2d 70 72 69 63 65 22 3e 24 7b 28 65 2c 74 29 3d 3e 65 2e 5f 70 72 69 63 65 56 61 6c 75 65 53 74 72 69 6e 67 7d 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6a 6c 70 2d 70 65 72 2d 6e 69 67 68 74 22 3e 24 7b 28 65 2c 74 29 3d 3e 65 2e 73 74 72 69 6e 67 73 2e 70 65 72 4e 69 67 68 74 7d 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 61 3e 60 2c 65 69 3d 53 2e 64 79 60 3c 6d 73 6e 2d 74 72 61 76 65 6c 2d 73 64 2d 63 61 72 64 20 3a 64 61 74 61 3d 24 7b 65 3d 3e 65 2e 5f 73 75 Data Ascii: 00006000 class="jlp-hotel-price">${(e,t)=>e._currencySymbol}</div><div class="jlp-hotel-price">${(e,t)=>e._priceValueString}</div><div class="jlp-per-night">${(e,t)=>e.strings.perNight}</div></div></div></a>`,ei=S.dy`<msn-travel-sd-card :data=${e=>e._su

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.16	50193	157.240.241.1	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:40 UTC	569	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:40 UTC	1825	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: *.cdninstagram.com 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top permissions-policy-report-only: autoplay=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(), picture-in-picture=(), xr-spatial-tracking=() permissions-policy: accelerometer=(), ambient-light-sensor=(), bluetooth=(), camera=(), fullscreen=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=() cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin-allow-popups Pragma: public Cache-Control: public, max-age=1200 Expires: Sat, 01 Jan 2000 00:00:00 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 0 X-Frame-Options: DENY Strict-Transport-Security: max-age=31536000; preload; includeSubDomains X-FB-Debug: WBiPcbaVywlFLZrucrHhrwkScxjAYY41brbxdPKlhHUh60ehGdEsmAkrz2Kj0YRogMdpeuKp7xpAOXwAoSyy4w== Date: Wed, 17 Jan 2024 17:07:40 GMT Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 217242
2024-01-17 17:07:40 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-01-17 17:07:40 UTC	15864	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-01-17 17:07:40 UTC	16384	IN	Data Raw: 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4c 6f 67 67 69 6e 67 22 29 2c 62 3d 61 2e 6c 6f 67 55 73 65 72 45 72 72 6f 72 3b 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 3b 76 61 72 20 63 3d 61 2e 54 79 70 65 64 2c 64 3d 61 2e 63 6f 65 72 63 65 3b 66 75 6e 63 74 69 6f 6e 20 65 28 61 29 7b 61 3d 64 28 61 2c 63 2e 66 62 69 64 28 29 29 Data Ascii: on(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsLogging"),b=a.logUserError;a=f.getFbeventsModules("SignalsFBEventsTyped");var c=a.Typed,d=a.coerce;function e(a){a=d(a,c.fbid())
2024-01-17 17:07:40 UTC	16384	IN	Data Raw: 74 73 5b 32 5d 21 3d 3d 76 6f 69 64 20 30 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 21 31 3b 69 66 28 74 79 70 65 6f 66 20 62 21 3d 3d 22 73 74 72 69 6e 67 22 7c 7c 21 4f 28 62 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 27 49 6e 76 61 6c 69 64 20 41 72 67 75 6d 65 6e 74 3a 20 22 27 2b 62 2b 27 22 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 6f 70 74 2d 69 6e 20 66 65 61 74 75 72 65 27 29 3b 4f 28 62 29 26 26 28 74 68 69 73 2e 6f 70 74 49 6e 73 2e 6f 70 74 49 6e 28 61 2c 62 2c 64 29 2c 45 28 5b 62 5d 2e 63 6f 6e 63 61 74 28 6d 28 4d 5b 62 5d 7c 7c 5b 5d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 4e 5b 61 5d 26 26 45 28 4e 5b 61 5d 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 63 2e 66 62 71 2e 6c 6f 61 64 50 6c 75 67 69 6e 28 Data Ascii: ts[2]!==void 0?arguments[2]:!1;if(typeof b!=="string"\|\|!O(b))throw new Error('Invalid Argument: "'+b+'" is not a valid opt-in feature');O(b)&&(this.optIns.optIn(a,b,d),E([b].concat(m(M[b]\|\|[])),function(a){N[a]&&E(N[a],function(a){return c.fbq.loadPlugin(
2024-01-17 17:07:40 UTC	16384	IN	Data Raw: 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4c 6f 67 67 69 6e 67 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 2c 62 3d 61 2e 69 73 41 72 72 61 79 2c 63 3d 61 2e 69 73 49 6e 73 74 61 6e 63 65 4f 66 2c 64 3d 61 2e 6d 61 70 2c 65 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 50 61 72 Data Ascii: eModuleRegistered("SignalsFBEventsLogging",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsUtils"),b=a.isArray,c=a.isInstanceOf,d=a.map,e=f.getFbeventsModules("SignalsPar
2024-01-17 17:07:40 UTC	1500	IN	Data Raw: 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 42 61 73 65 45 76 65 6e 74 22 29 3b 66 75 6e 63 74 69 6f 6e 20 62 28 61 29 7b 61 3d 61 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 61 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 61 21 3d 6e 75 6c 6c 3f 5b 61 5d 3a 6e 75 6c 6c 7d 6b 2e 65 78 70 6f 72 74 73 3d 6e 65 77 20 61 28 62 29 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 6c 75 67 69 6e 4d 61 6e 61 67 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 Data Ascii: t";var a=f.getFbeventsModules("SignalsFBEventsBaseEvent");function b(a){a=a!=null&&typeof a==="string"?a:null;return a!=null?[a]:null}k.exports=new a(b)})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsPluginManager",function(){re
2024-01-17 17:07:40 UTC	14884	IN	Data Raw: 74 68 69 73 2e 5f 6c 6f 61 64 65 64 50 6c 75 67 69 6e 73 5b 62 5d 29 72 65 74 75 72 6e 21 30 3b 69 66 28 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 28 62 29 29 7b 74 68 69 73 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 28 62 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 62 29 29 3b 72 65 74 75 72 6e 21 30 7d 61 3d 64 2e 43 4f 4e 46 49 47 2e 43 44 4e 5f 42 41 53 45 5f 55 52 4c 2b 22 73 69 67 6e 61 6c 73 2f 70 6c 75 67 69 6e 73 2f 22 2b 61 2b 22 2e 6a 73 3f 76 3d 22 2b 66 2e 76 65 72 73 69 6f 6e 3b 69 66 28 21 74 68 69 73 2e 5f 6c 6f 61 64 65 64 50 6c 75 67 69 6e 73 5b 62 5d 29 7b 74 68 69 73 2e 5f 6c 6f 63 6b 2e 6c 6f 63 6b 50 6c 75 67 69 6e 28 62 29 3b 64 2e 6c 6f 61 64 4a 53 46 69 6c 65 28 61 29 3b 72 65 74 75 72 6e 21 30 Data Ascii: this._loadedPlugins[b])return!0;if(f.fbIsModuleLoaded(b)){this.registerPlugin(b,f.getFbeventsModules(b));return!0}a=d.CONFIG.CDN_BASE_URL+"signals/plugins/"+a+".js?v="+f.version;if(!this._loadedPlugins[b]){this._lock.lockPlugin(b);d.loadJSFile(a);return!0
2024-01-17 17:07:40 UTC	16384	IN	Data Raw: 70 69 78 65 6c 49 44 2c 6a 3d 67 2e 72 75 6c 65 73 2c 6b 3d 64 28 68 29 3b 69 66 28 6b 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 6c 3d 63 28 6a 2c 65 29 3b 72 65 74 75 72 6e 5b 7b 72 75 6c 65 73 3a 6c 2c 70 69 78 65 6c 49 44 3a 6b 7d 5d 7d 62 3d 6e 65 77 20 61 28 67 29 3b 6c 2e 65 78 70 6f 72 74 73 3d 62 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 74 45 53 54 52 75 6c 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 6a 2c 6b 29 7b 76 61 72 20 6c 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6c Data Ascii: pixelID,j=g.rules,k=d(h);if(k==null)return null;var l=c(j,e);return[{rules:l,pixelID:k}]}b=new a(g);l.exports=b})();return l.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsSetESTRules",function(){return function(g,h,j,k){var l={exports:{}};l
2024-01-17 17:07:40 UTC	16384	IN	Data Raw: 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 62 2c 63 29 29 7b 76 61 72 20 64 3d 61 2b 22 5b 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 63 29 2b 22 5d 22 3b 74 68 69 73 2e 5f 72 65 6d 6f 76 65 4b 65 79 28 64 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 5f 61 70 70 65 6e 64 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 66 2c 67 29 7b 76 61 72 20 68 3d 62 2e 6e 61 6d 65 3b 62 3d 62 2e 76 61 6c 75 65 3b 69 66 28 62 21 3d 6e 75 6c 6c 29 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 63 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 6a 3d 63 5b 69 5d 3b 6a 3d 3d 3d 68 26 26 74 68 69 73 2e 5f 72 65 6d 6f 76 65 4b 65 79 28 68 29 7d 65 28 62 29 3f 74 68 69 73 2e 5f 61 70 70 65 6e 64 50 72 69 6d 69 74 69 76 65 28 68 2c 62 2c 67 29 3a 66 Data Ascii: sOwnProperty.call(b,c)){var d=a+"["+encodeURIComponent(c)+"]";this._removeKey(d)}}},{key:"_append",value:function(b,f,g){var h=b.name;b=b.value;if(b!=null)for(var i=0;i<c.length;i++){var j=c[i];j===h&&this._removeKey(h)}e(b)?this._appendPrimitive(h,b,g):f
2024-01-17 17:07:40 UTC	14884	IN	Data Raw: 29 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 61 2e 65 78 70 6f 72 74 73 3d 63 28 39 35 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 65 78 70 6f 72 74 73 3d 22 6f 62 6a 65 63 74 22 3d 3d 28 74 79 70 65 6f 66 20 66 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 68 28 66 29 29 26 26 66 26 26 66 2e 4d 61 74 68 3d 3d 4d 61 74 68 3f 66 3a 22 6f 62 6a 65 63 74 22 3d 3d 28 74 79 70 65 6f 66 20 73 65 6c 66 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 68 28 73 65 6c 66 29 29 26 26 73 65 6c 66 26 26 73 65 6c 66 2e 4d 61 74 68 3d 3d 4d 61 74 68 3f 73 65 6c 66 3a 46 75 6e 63 74 69 6f 6e 28 22 72 65 74 75 72 6e 20 74 68 69 73 22 29 28 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 Data Ascii: ))}},function(a,b,c){a.exports=c(95)},function(a,b){a.exports="object"==(typeof f==="undefined"?"undefined":h(f))&&f&&f.Math==Math?f:"object"==(typeof self==="undefined"?"undefined":h(self))&&self&&self.Math==Math?self:Function("return this")()},function(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.16	50192	13.107.213.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:40 UTC	560	OUT	GET /tag/edvmnysmkk HTTP/1.1 Host: www.clarity.ms Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:40 UTC	528	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:40 GMT Content-Type: application/x-javascript Content-Length: 649 Connection: close Cache-Control: no-cache, no-store Expires: -1 Set-Cookie: CLID=f9a90faf747840ce9d3f6d654fac4a43.20240117.20250116; expires=Thu, 16 Jan 2025 17:07:40 GMT; path=/; secure; samesite=none; httponly Request-Context: appId=cid-v1:b1d896b3-bec7-448b-b764-240152e813e8 x-azure-ref: 20240117T170740Z-a23thcfxbh6mbadr0hxm8zqp8c00000004gg000000004079 X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-01-17 17:07:40 UTC	649	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 61 2c 72 2c 69 2c 74 2c 79 29 7b 66 75 6e 63 74 69 6f 6e 20 73 79 6e 63 28 29 7b 28 6e 65 77 20 49 6d 61 67 65 29 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 2e 63 6c 61 72 69 74 79 2e 6d 73 2f 63 2e 67 69 66 22 7d 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 73 79 6e 63 28 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 73 79 6e 63 29 3b 69 66 28 61 5b 63 5d 2e 76 7c 7c 61 5b 63 5d 2e 74 29 72 65 74 75 72 6e 20 61 5b 63 5d 28 22 65 76 65 6e 74 22 2c 63 2c 22 64 75 70 2e 22 2b 69 2e 70 72 6f 6a 65 63 74 49 64 29 3b 61 5b 63 5d 2e 74 3d 21 30 2c 28 74 3d 6c 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 72 29 29 2e Data Ascii: !function(c,l,a,r,i,t,y){function sync(){(new Image).src="https://c.clarity.ms/c.gif"}"complete"==document.readyState?sync():window.addEventListener("load",sync);if(a[c].v\|\|a[c].t)return a[c]("event",c,"dup."+i.projectId);a[c].t=!0,(t=l.createElement(r)).

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.16	50195	13.107.246.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:40 UTC	678	OUT	GET /shared/cms/lrs1c69a1j/section-images/3f7d8e4af23a4f65a4fe44c490942f50.png HTTP/1.1 Host: edgestatic.azureedge.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:41 UTC	655	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:41 GMT Content-Type: image/png Content-Length: 489347 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable ETag: W/"77783-18c5b5396bc" Last-Modified: Tue, 12 Dec 2023 00:00:53 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Origin-Agent-Cluster: ?1 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 x-azure-ref: 20240117T170740Z-m5s9nnqn3p0e1ce37qu98xgdu00000000090000000000wqf X-Cache: TCP_MISS Accept-Ranges: bytes
2024-01-17 17:07:41 UTC	15729	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 a1 00 00 03 14 08 06 00 00 00 a5 e9 eb af 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 07 77 18 49 44 41 54 78 01 ec bd 09 a0 25 57 59 2d fc 55 9d 73 a7 9e bb d3 99 93 4e 67 26 61 cc 04 84 20 49 18 c4 20 e1 e1 40 10 64 56 a3 0f fd 05 14 45 7d 28 07 44 84 87 f2 9e 28 28 a0 be 27 8a 08 71 7c a0 c0 03 21 3e c5 88 8a 91 30 27 21 64 22 73 d2 e3 ed 3b 9d 53 f5 ef b5 6b af ba 5f 7d 77 9f db 9d 90 84 0c df ea 3e b7 aa 76 ed da 53 8d 7b d5 aa b5 45 1c 0e 87 c3 e1 70 38 1c 0e 87 c3 e1 70 38 1c 0e 87 c3 e1 70 38 1c 0e 87 c3 e1 70 38 1c 0e 87 c3 e1 70 38 1c 0e 87 c3 e1 70 38 1c 0e 87 c3 e1 70 38 1c 0e 87 Data Ascii: PNGIHDRpHYs%%IR$sRGBgAMAawIDATx%WY-UsNg&a I @dVE}(D(('q\|!>0'!d"s;Sk_}w>vS{Ep8p8p8p8p8p8p8
2024-01-17 17:07:41 UTC	16384	IN	Data Raw: ff 24 31 19 87 d7 1e 92 80 f6 3e c3 fc 74 59 6c fa 9a 14 de df 7d 63 35 f5 b7 6e 1b 4d 36 9a fb 65 e7 5a 6d ae fb 54 f1 ae 20 7b c7 a5 91 cb 83 cf 01 39 12 55 13 b8 7e ff 6f f0 20 b9 ff 93 7d 6e 77 54 9d 79 79 c2 65 7b 9c e7 ca c0 5d 9a da b3 16 f1 b1 af 1c 0e 87 e3 81 08 27 a1 1d 0e 87 c3 71 af 40 75 04 3a 9d 83 5a f9 38 ab 38 5d 63 e7 34 6f 3b 5a fa f3 51 db 51 d4 e9 e9 fc 73 9d 47 db a1 66 27 55 2b 8c 74 67 2b 91 9e b6 63 d4 e9 f0 be b1 eb 67 59 68 22 55 0c 4c bd 3a 44 46 da b6 fd fc d7 e6 c9 ce 9d 4e 4b 91 22 75 8e 70 65 38 09 06 5d 3e e6 53 2b f5 94 9e b7 d0 9f e5 a6 38 39 a2 62 05 74 7d f4 67 e0 86 f4 6d 8f 8b 54 2f d6 b3 6d 8f 94 7f 69 cb 39 50 de 9c ba 2c 96 7c d0 c7 9c 2d b3 26 95 d5 fe 5b e1 2d 4d a2 88 fb cc 12 4f 75 9e 58 27 69 dd 21 b0 6c 19 Data Ascii: $1>tYl}c5nM6eZmT {9U~o }nwTyye{]'q@u:Z88]c4o;ZQQsGf'U+tg+cgYh"UL:DFNK"upe8]>S+89bt}gmT/mi9P,\|-&[-MOuX'i!l
2024-01-17 17:07:41 UTC	16384	IN	Data Raw: 63 80 bf 1d 77 dc f0 fa 40 8a a3 ae 65 68 ff 56 09 8d 30 00 6a 68 90 b7 81 c4 04 79 8e 01 ec b0 2c 47 3f e2 dc c9 aa ea 3d 6a 69 71 24 d5 52 52 6c 63 cb aa b1 08 01 d1 0c 0b 8e a8 da 4e 83 12 16 ac 47 a4 6c 8b a8 80 8e 94 71 9d 06 57 ac b8 ba 08 bf 3a ea b8 ab b8 1c ea 11 76 45 55 36 03 29 56 20 e8 8b c6 cb 7a 62 a2 90 b5 33 3d 39 f8 c4 7e b4 dd 20 5a e2 be a1 87 bf 88 36 c6 a0 8f a9 dd e3 34 90 c0 91 48 66 9d 61 3f 02 75 34 6c 3a 08 ec 2f 58 78 1c 71 c4 11 15 ae ff 20 9d 11 9f be d1 bc a6 82 a8 86 77 34 09 68 7a 82 c7 dc 13 39 0d 42 1a 5e d0 c8 83 5e e1 dc b3 b0 e8 38 e8 a0 83 40 32 57 3c 3e f1 d2 83 84 34 d4 c6 38 97 c2 31 1b 07 c9 0c e4 b3 7c ec 63 1f 8b ea 67 ac e7 8b 13 90 eb 61 1f e1 38 1e 5d 7e f9 e5 f1 78 c6 39 83 97 08 58 87 fc 40 4c e3 d8 d5 03 Data Ascii: cw@ehV0jhy,G?=jiq$RRlcNGlqW:vEU6)V zb3=9~ Z64Hfa?u4l:/Xxq w4hz9B^^8@2W<>481\|cga8]~x9X@L
2024-01-17 17:07:41 UTC	16384	IN	Data Raw: f6 18 d8 72 16 47 0a e2 81 5c 23 f9 fc 20 1f 1d 56 af c7 c7 6b 2b 91 61 f9 bc 2a 79 c2 32 a5 6d 1d cf 13 e2 90 90 5b 4c ca 53 9e 5b 5e bb 08 c3 8f ed 0d 95 27 b6 b1 e4 3d 21 ae 0b 22 40 c0 31 0d e2 25 c2 73 a0 f7 05 e3 24 d2 ce 33 3e e3 a5 65 26 82 f4 be 4a 75 8c 71 43 e7 7f 40 f7 1c 77 3d b2 e9 6f fd ef bf 3e b5 65 e4 cf 42 09 e8 84 d2 84 aa 2d ee 78 74 2b 60 52 c0 cf 3d f0 84 7b 70 df e9 50 4e 22 a0 99 e7 30 45 ce 79 35 dd 79 c7 2c 3d b3 8d 2a 6b 4f 55 74 7c ae 8e 7c 42 27 92 39 c9 d4 98 6c 14 6f 98 b2 1e cc ad bb 04 c7 48 25 32 97 89 6c f5 c9 05 47 ab ad d8 b6 38 ff 38 0f d2 86 91 b0 49 6d 9c db 15 61 ea c7 55 db 5b cf 9b 9c 1f 7d 26 e6 ba e8 47 37 86 23 9d 8d 07 a8 5b 10 12 48 f8 c8 06 20 1f a4 d3 eb 89 c7 c5 eb 8d e1 bc 16 79 7d f2 c3 09 d6 49 36 21 Data Ascii: rG\# Vk+ay2m[LS[^'=!"@1%s$3>e&JuqC@w=o>eB-xt+`R={pPN"0Ey5y,=kOUt\|\|B'9loH%2lG88ImaU[}&G7#[H y}I6!
2024-01-17 17:07:41 UTC	16384	IN	Data Raw: 26 b6 25 df a7 a2 2f b8 9a 31 6e c4 e5 dd ff 2d a5 f4 82 f1 0f bd d0 9e 7d 3b 2a 2e 64 08 20 8d e1 a8 80 4e 4b 4f 55 47 5a 66 12 9a 89 12 11 ed 39 81 0b 00 1f 7a 30 de 81 40 c4 0d e0 3b 14 ca a4 b0 84 bb 0f 0f e5 51 58 9f c3 f5 00 97 1a 20 a1 31 24 32 a4 fb 95 10 b6 f8 d0 43 0f fd 11 54 d3 20 9f 31 c4 12 eb 70 cf 81 75 76 30 0e 1c 38 30 1f 16 b7 5c 7e f9 e5 6f 56 b2 02 3f a4 d3 1f 3a 9d 20 04 4f 9c 38 e1 be fe eb bf de 6d d8 b0 c1 cd 8a b7 7c e8 a0 fb d9 0f 1f 72 4f 25 fe f7 8f 5e eb ae dd 36 db 3c c0 5f fd ab 0f ba 7b 0e 9c 71 15 e7 0e f3 73 de fd fc b7 ee 70 6f 7a c9 56 b7 5c 40 25 0a 82 0e aa e7 d7 bc e6 35 91 a4 83 af 68 28 a0 a1 96 06 51 8d 0f 2e b3 3e b7 4b b0 cf 6e 0c 25 87 ef d3 70 5f 44 02 91 1f 6d 22 19 1c 96 54 7f 31 2d 86 b5 7f e1 b0 17 35 b0 Data Ascii: &%/1n-};*.d NKOUGZf9z0@;QX 1$2CT 1puv080\~oV?: O8m\|rO%^6<_{qspozV\@%5h(Q.>Kn%p_Dm"T1-5
2024-01-17 17:07:41 UTC	16384	IN	Data Raw: 5d fd 41 13 56 31 9d ae 55 86 e5 6b dc 12 d0 fc c8 a2 71 64 b2 cd a8 1c e0 fd 82 75 e7 5a 6e 35 9c ae 2f a4 89 3a 9c 18 65 aa 88 4e f7 61 cc 63 86 fb 3f 1e 63 e1 fe 6f f4 e3 96 1a 7c dc 91 9e 35 fa e1 eb ac 8c ba 94 de ab 21 99 94 dd 45 83 d3 26 c7 3f 8e bc e0 47 2e 43 40 17 ef ff 82 ff e7 98 57 3a 0f 3a f1 a1 33 93 13 b6 ae 0f 10 d2 50 3c d1 87 5e 30 e0 b3 9a 24 18 f8 f1 79 87 63 39 74 e8 d0 60 cb 96 2d fe af ff fa af 23 39 6c f3 49 1d 0a 10 d6 f1 fc a1 23 e1 47 6a 4f ba f4 e0 b3 c4 6d dd ba b5 a8 86 c2 12 aa 17 28 af 11 a7 a2 e2 62 81 ed e0 c3 37 34 ae 73 f8 bb 0c cf 6e 2a c1 32 a9 c2 e7 85 4e 56 a8 79 f5 11 0d 4a a0 94 08 03 05 e3 d8 b4 5d f5 5f 0a d1 d0 45 6c 96 88 dd 3e 12 03 fb 74 62 c3 69 75 d5 b2 4a e5 73 9d 79 4c 43 17 d9 a6 fb 9a 1e 62 be ab be Data Ascii: ]AV1UkqduZn5/:eNac?co\|5!E&?G.C@W::3P<^0$yc9t`-#9lI#GjOm(b74sn*2NVyJ]_El>tbiuJsyLCb
2024-01-17 17:07:41 UTC	16384	IN	Data Raw: 4c c3 e8 3d 9f 56 63 ed 7a e0 b5 ef eb 1b ed e9 cf b3 8d 63 18 73 a0 32 b2 1a b0 c7 4b 00 78 f4 1b d3 c8 b7 83 9c 87 01 0f c5 e7 fa 82 ac 46 0d 54 2e 81 e9 fe 7d 63 fc a5 3c 6b d6 ac 59 b3 66 e7 df e8 13 0a 80 96 c4 65 58 35 97 2b 71 56 33 69 e5 11 72 74 c9 20 5d 74 b6 1a af d7 1f fe e9 cf 2a 7c 56 fa d9 29 e0 73 06 a0 59 09 28 39 0e f6 4d d1 86 84 5a 21 0d 00 2d 09 0e cf 86 a6 df cd d8 c4 58 d0 e3 8a 6b 99 36 24 94 26 34 06 f8 ac 73 12 17 c7 0e d1 5c 9b d8 5b 1b 96 01 f7 36 61 da ac 59 b3 0b c5 ce f9 20 df 01 2e 2b cb d3 6b 2c 1c bf d4 c4 2f 4d 89 0c e8 12 13 da 84 fd 05 1c 89 15 39 86 27 d9 8d d0 20 64 b0 46 80 34 8d 07 e0 b3 e9 a6 e6 86 e7 9e 7b ee 91 ec 46 96 e2 48 03 ea 91 1d 4d 03 a8 8d d8 d0 53 75 12 1c d9 bf f9 61 20 d6 b4 a0 9b ed 48 eb 6d a3 4d Data Ascii: L=Vczcs2KxFT.}c<kYfeX5+qV3irt ]t*\|V)sY(9MZ!-Xk6$&4s\[6aY .+k,/M9' dF4{FHMSua HmM
2024-01-17 17:07:41 UTC	16384	IN	Data Raw: a1 9f 9c 25 fe 52 9f f2 84 56 59 b3 e7 53 02 9c 87 d7 5e 7b 6d 8c f3 fa eb af cf c0 b4 c2 a6 7f 9c fa f8 27 d8 d3 c5 6f 50 c8 11 fc 00 f9 0d 34 a0 e9 c7 fe d1 1f fd d1 70 df 7d f7 65 b9 0e c3 19 f2 be 54 1e 97 90 3e 34 26 f0 59 d7 5a f9 ad 15 df 76 3e 38 c0 74 4c 27 18 06 f7 4c 96 23 83 d2 8e 35 bd 29 8f 3d 28 5d 6a 97 7d 9e cb 04 e6 7a 70 d6 03 ae 7a 76 0a 98 2e 99 4b c3 0a b0 ec d3 58 4a 0b 47 c5 13 df 67 e2 5b 1a 3a c3 ac e2 b7 be e2 c9 85 39 f7 bc cf 53 0f 54 f7 13 60 be cf 9f 5a bd 14 fb 2c 53 fd a7 ee 24 d8 dc 77 06 2e db fd c1 87 69 e3 61 ff 1e 0a a7 1f 1a 00 dd 6c 1b d8 da 72 1c 43 41 d3 58 85 b0 b7 a5 13 5d 37 3d 4b 55 aa 34 7c a5 8a d9 8c 5f a7 59 3d ce 05 44 c3 82 96 36 34 06 18 2d 8b a0 34 00 34 0d 00 1a a8 7e 23 42 25 cd 00 e8 7c c1 86 03 18 Data Ascii: %RVYS^{m'oP4p}eT>4&YZv>8tL'L#5)=(]j}zpzv.KXJGg[:9ST`Z,S$w.ialrCAX]7=KU4\|_Y=D64-44~#B%\|
2024-01-17 17:07:41 UTC	16384	IN	Data Raw: 1d d1 a2 16 00 ec e3 b1 b0 3a cf 74 f6 f7 05 58 cb 2d 32 93 bd 7f d2 12 c1 6a 63 63 8f fb 81 79 bf ca 13 2c 61 41 2b d8 56 0c a7 10 37 87 3e de 17 53 9a f0 15 87 f2 4e e7 4a 93 de d1 bf af 07 a9 95 ce 92 34 89 db 28 52 96 37 4e 94 46 b6 98 d0 a6 1f 2d 16 b8 f2 64 d4 91 06 80 06 63 33 5c ae 37 26 f5 a6 ce 93 df cc d0 fc 67 77 bf f9 21 26 20 5b 7e 75 34 29 8f 61 0d fc af 17 63 da fb b1 70 36 85 61 a6 4d 0b 57 dc 87 c6 86 de 91 76 c9 56 3c db 97 b4 f2 21 08 60 4e c7 65 fa c0 c4 1a 1e 3f 44 bf ab a6 3d 3b 86 61 cb 04 7a 57 00 07 ed 5a 2a 91 79 4c 95 01 7f 54 7e 26 bf b1 52 41 89 09 cd 51 61 fb 5d 6a 35 83 ca b5 e9 48 e5 6b 63 41 03 14 a3 0b 4d 63 96 fd 93 a6 e4 27 87 75 f4 e8 d1 85 cb 82 8c 28 9b 9e 69 9e 81 65 39 8e dd 5f d9 2c 81 78 90 e6 f0 b3 b7 cd ce bd Data Ascii: :tX-2jccy,aA+V7>SNJ4(R7NF-dc3\7&gw!& [~u4)acp6aMWvV<!`Ne?D=;azWZ*yLT~&RAQa]j5HkcAMc'u(ie9_,x
2024-01-17 17:07:41 UTC	16384	IN	Data Raw: 7c c6 75 ce 5e 2b bf 3a 58 dc 60 98 4c 42 8b c6 ef b0 41 21 56 2b 38 49 b0 ea f1 4a 46 5b 5b 30 6a 98 1c 95 36 6f 48 38 63 e5 bd e9 a6 9b 66 9e ca 3f 01 5b 35 7a cd c6 82 f8 40 40 e7 4d 09 d3 3d d8 83 06 60 13 9a 04 34 4d 72 00 34 c5 61 ed 41 f7 04 74 3a 3f 72 e4 08 1a 1e 4c 82 30 5f dd 8e 1d 3b e6 6c dc 5b b7 6e 7d a0 6f b8 73 4c 98 74 23 42 34 76 90 d3 24 a5 9b 4d 80 c8 6e f3 83 45 44 6e df 78 e0 c6 a6 62 e3 a0 44 fc 5a 32 99 da 6e 04 b5 a2 f1 53 77 8f bc f6 d2 b3 ee 96 10 8f c2 7a 64 4a a4 ed 57 d2 90 8e f2 df 15 b4 8e 6d 99 e8 c6 8c 36 ce 31 42 df de b3 32 68 7c 25 62 7a ac dc c6 e2 67 58 2f 0c 17 1d 3c 02 db 93 ab da 7f ad a8 58 8b b1 f6 6f 17 b9 14 25 62 da 92 d9 5e fb 9f d2 37 7b 7d 2a 7e 53 fa 76 fb 5e f0 fa a6 8a 8a 8a 8a 8a 8a 8a 8a 8a 45 64 13 Data Ascii: \|u^+:X`LBA!V+8IJF[[0j6oH8cf?[5z@@M=`4Mr4aAt:?rL0_;l[n}osLt#B4v$MnEDnxbDZ2nSwzdJWm61B2h\|%bzgX/<Xo%b^7{}*~Sv^Ed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.16	50196	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:40 UTC	507	OUT	GET /bundles/v1/edgeChromium/latest/waterfall-view-feed.acd823fd4382a7f925d4.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:40 UTC	1149	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: jmcQwn8tX6A+4SE8FzlA6w== Last-Modified: Wed, 10 Jan 2024 20:07:04 GMT ETag: 0x8DC1217B73D0A59 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 0cab1a5a-c01e-003f-0500-44c2b0000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:40 GMT Content-Length: 27776 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89901896,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=2, origin; dur=0 , cdntime; dur=2 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55bcb48 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511260.55bcb48 Vary: Origin
2024-01-17 17:07:40 UTC	15235	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 77 61 74 65 72 66 61 6c 6c 2d 76 69 65 77 2d 66 65 65 64 22 5d 2c 7b 34 31 38 38 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 69 2e 72 28 74 29 2c 69 2e 64 28 74 2c 7b 54 6f 6f 6c 69 6e 67 49 6e 66 6f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 7d 2c 57 61 74 65 72 66 61 6c 6c 56 69 65 77 46 65 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 44 7d 2c 57 61 74 65 72 66 61 6c 6c Data Ascii: "use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["waterfall-view-feed"],{41881:function(e,t,i){i.r(t),i.d(t,{ToolingInfo:function(){return _},WaterfallViewFeed:function(){return D},Waterfall
2024-01-17 17:07:41 UTC	9341	IN	Data Raw: 73 73 20 49 20 65 78 74 65 6e 64 73 20 6d 2e 6c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 73 75 70 65 72 28 2e 2e 2e 61 72 67 75 6d 65 6e 74 73 29 2c 74 68 69 73 2e 65 6e 73 75 72 65 4f 62 73 65 72 76 61 62 6c 65 42 65 66 6f 72 65 43 6f 6e 6e 65 63 74 3d 21 30 2c 74 68 69 73 2e 69 73 41 62 6f 76 65 54 68 65 46 6f 6c 64 56 69 73 75 61 6c 6c 79 52 65 61 64 79 3d 21 31 2c 74 68 69 73 2e 6f 76 65 72 72 69 64 65 47 61 70 53 74 79 6c 65 73 3d 22 22 2c 74 68 69 73 2e 6f 76 65 72 72 69 64 65 4c 61 79 6f 75 74 53 74 79 6c 65 73 3d 22 22 2c 74 68 69 73 2e 72 69 76 65 72 53 65 6e 74 69 6e 65 6c 48 65 69 67 68 74 3d 31 2c 74 68 69 73 2e 69 73 53 65 6e 74 69 6e 65 6c 49 6e 56 69 65 77 3d 21 31 2c 74 68 69 73 2e 70 61 67 69 6e 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 Data Ascii: ss I extends m.l{constructor(){super(...arguments),this.ensureObservableBeforeConnect=!0,this.isAboveTheFoldVisuallyReady=!1,this.overrideGapStyles="",this.overrideLayoutStyles="",this.riverSentinelHeight=1,this.isSentinelInView=!1,this.paginationObserver
2024-01-17 17:07:41 UTC	3200	IN	Data Raw: 65 6e 74 2d 63 61 72 64 22 5d 3d 22 63 73 2d 61 72 74 69 63 6c 65 2d 63 61 72 64 2d 74 32 2d 66 6f 6e 74 22 2c 6e 5b 22 6e 61 74 69 76 65 2d 61 64 2d 63 61 72 64 22 5d 3d 22 63 73 2d 6e 61 74 69 76 65 2d 61 64 2d 63 61 72 64 2d 74 32 2d 66 6f 6e 74 22 29 3a 74 2e 65 6e 61 62 6c 65 45 6e 74 4e 65 77 73 42 75 6e 64 6c 65 73 26 26 28 6e 5b 22 61 72 74 69 63 6c 65 2d 63 61 72 64 22 5d 3d 22 63 73 2d 61 72 74 69 63 6c 65 2d 63 61 72 64 2d 65 6e 74 22 29 2c 74 2e 65 6e 61 62 6c 65 53 75 70 65 72 56 69 64 65 6f 43 61 72 64 26 26 28 6e 5b 22 76 69 64 65 6f 2d 63 61 72 64 22 5d 3d 22 63 73 2d 76 69 64 65 6f 2d 63 61 72 64 22 2c 74 2e 65 6e 61 62 6c 65 46 65 65 64 53 75 70 65 72 43 61 72 64 73 54 31 46 6f 6e 74 26 26 28 6e 5b 22 76 69 64 65 6f 2d 63 61 72 64 22 5d Data Ascii: ent-card"]="cs-article-card-t2-font",n["native-ad-card"]="cs-native-ad-card-t2-font"):t.enableEntNewsBundles&&(n["article-card"]="cs-article-card-ent"),t.enableSuperVideoCard&&(n["video-card"]="cs-video-card",t.enableFeedSuperCardsT1Font&&(n["video-card"]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
366	192.168.2.16	50197	23.200.3.26	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:40 UTC	577	OUT	GET /li.lms-analytics/insight.min.js HTTP/1.1 Host: snap.licdn.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:41 UTC	310	IN	HTTP/1.1 200 OK Last-Modified: Tue, 16 Jan 2024 16:29:26 GMT x-amz-server-side-encryption: AES256 Content-Type: application/javascript;charset=utf-8 Cache-Control: max-age=75502 Date: Wed, 17 Jan 2024 17:07:41 GMT Content-Length: 43910 Connection: close X-Content-Type-Options: nosniff X-CDN: AKAM
2024-01-17 17:07:41 UTC	16074	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 2c 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 6e 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 74 2c 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 6e 5b 74 5d 3d 65 2c 6e 7d 76 61 72 20 74 2c 65 2c 72 2c 6f 2c 69 3d 7b 41 44 56 45 52 54 49 53 49 4e 47 3a 22 41 44 56 45 52 54 49 53 49 4e 47 22 2c 41 4e 41 4c 59 54 49 43 53 5f 41 4e 44 5f 52 45 53 45 41 52 43 48 3a 22 41 4e 41 4c 59 54 49 43 53 5f 41 4e 44 5f 52 45 53 45 41 52 43 48 22 2c 46 55 4e 43 54 49 4f 4e 41 4c 3a 22 46 55 4e 43 54 49 4f 4e 41 Data Ascii: !function(){"use strict";function n(n,t,e){return t in n?Object.defineProperty(n,t,{value:e,enumerable:!0,configurable:!0,writable:!0}):n[t]=e,n}var t,e,r,o,i={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONA
2024-01-17 17:07:41 UTC	16384	IN	Data Raw: 75 63 74 6f 72 26 26 28 65 3d 6e 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 29 2c 22 4d 61 70 22 3d 3d 3d 65 7c 7c 22 53 65 74 22 3d 3d 3d 65 3f 41 72 72 61 79 2e 66 72 6f 6d 28 6e 29 3a 22 41 72 67 75 6d 65 6e 74 73 22 3d 3d 3d 65 7c 7c 2f 5e 28 3f 3a 55 69 7c 49 29 6e 74 28 3f 3a 38 7c 31 36 7c 33 32 29 28 3f 3a 43 6c 61 6d 70 65 64 29 3f 41 72 72 61 79 24 2f 2e 74 65 73 74 28 65 29 3f 74 6e 28 6e 2c 74 29 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 6e 28 6e 2c 74 29 7b 28 6e 75 6c 6c 3d 3d 74 7c 7c 74 3e 6e 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 6e 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 65 3d 30 2c 72 3d 6e 65 77 20 41 72 72 61 79 28 74 29 3b 65 3c 74 3b 65 2b 2b 29 72 5b 65 5d 3d 6e 5b 65 5d 3b 72 65 74 75 72 6e 20 72 Data Ascii: uctor&&(e=n.constructor.name),"Map"===e\|\|"Set"===e?Array.from(n):"Arguments"===e\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(e)?tn(n,t):void 0}}function tn(n,t){(null==t\|\|t>n.length)&&(t=n.length);for(var e=0,r=new Array(t);e<t;e++)r[e]=n[e];return r
2024-01-17 17:07:41 UTC	3446	IN	Data Raw: 69 6d 61 67 65 53 72 63 26 26 21 6e 2e 65 6c 65 6d 65 6e 74 54 69 74 6c 65 7d 2c 4a 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 69 66 28 21 6e 2e 74 61 67 4e 61 6d 65 29 72 65 74 75 72 6e 21 30 3b 73 77 69 74 63 68 28 6e 2e 74 61 67 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7b 63 61 73 65 22 69 6d 67 22 3a 72 65 74 75 72 6e 20 7a 74 28 6e 29 3b 63 61 73 65 22 69 6e 70 75 74 22 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3b 69 66 28 21 6e 2e 65 6c 65 6d 65 6e 74 54 79 70 65 29 72 65 74 75 72 6e 21 30 3b 73 77 69 74 63 68 28 6e 2e 65 6c 65 6d 65 6e 74 54 79 70 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7b 63 61 73 65 22 69 6d 61 67 65 22 3a 72 65 74 75 72 6e 20 7a 74 28 6e 29 3b 63 61 73 65 22 73 75 62 Data Ascii: imageSrc&&!n.elementTitle},Jt=function(n,t){if(!n.tagName)return!0;switch(n.tagName.toLowerCase()){case"img":return zt(n);case"input":return function(n){var t;if(!n.elementType)return!0;switch(n.elementType.toLowerCase()){case"image":return zt(n);case"sub
2024-01-17 17:07:41 UTC	8006	IN	Data Raw: 76 61 72 20 6e 3b 72 65 74 75 72 6e 20 6e 3d 7a 28 29 2e 6d 61 72 6b 28 28 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 76 61 72 20 6e 3b 72 65 74 75 72 6e 20 7a 28 29 2e 77 72 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 3b 3b 29 73 77 69 74 63 68 28 74 2e 70 72 65 76 3d 74 2e 6e 65 78 74 29 7b 63 61 73 65 20 30 3a 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 26 26 62 65 28 22 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 22 29 29 7b 74 2e 6e 65 78 74 3d 32 3b 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 74 2e 61 62 72 75 70 74 28 22 72 65 74 75 72 6e 22 2c 21 31 29 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 74 2e 70 72 65 76 3d 32 2c 74 2e Data Ascii: var n;return n=z().mark((function t(){var n;return z().wrap((function(t){for(;;)switch(t.prev=t.next){case 0:if("function"==typeof window.document.browsingTopics&&be("browsing-topics")){t.next=2;break}return t.abrupt("return",!1);case 2:return t.prev=2,t.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
367	192.168.2.16	50198	68.67.160.75	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:41 UTC	974	OUT	GET /pixie?e=LandingPage&pi=e8619ae9-c189-46ef-bfc8-f39e0ac838fd&it=1705511259070&v=0.0.20&u=https%3A%2F%2Fwww.microsoft.com%2Fen-gb%2Fedge%2Fwelcome%3Fep%3D254%26form%3DMT00L7%26es%3D59&st=1705511259069&et=1705511259070&if=0 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: uuid2=6324846154276582513; anj=dTM7k!M4.FEVNsVF']wIg2GTsq'-(%!m5LRe#nszZ=f1CByY$Nd<y!Ygk1F8glT4he9C6UjGe%zcyL_Eh0oWXlx#Lr8nG7m#e+i>bpRzqF1`b^n:*Q@cN
2024-01-17 17:07:41 UTC	302	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Wed, 17 Jan 2024 17:07:41 GMT Content-Type: image/gif Content-Length: 42 Connection: close Cache-Control: no-cache, no-store, must-revalidate X-Proxy-Origin: 154.16.192.193; 154.16.192.193; 673.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-01-17 17:07:41 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
368	192.168.2.16	50199	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:41 UTC	512	OUT	GET /bundles/v1/edgeChromium/latest/weather-card-wc-deferred.2655ffd88761419c04f5.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:41 UTC	1149	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: iIvGLOYkjuOfMlAQaNdPRA== Last-Modified: Wed, 10 Jan 2024 20:07:02 GMT ETag: 0x8DC1217B5C94B4D Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 283fd9d5-701e-0010-1c00-44da9c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:41 GMT Content-Length: 38604 Connection: close Akamai-Request-BC: [a=23.218.242.10,b=89902653,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=1, origin; dur=0 , cdntime; dur=1 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55bce3d Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511261.55bce3d Vary: Origin
2024-01-17 17:07:41 UTC	15235	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 77 65 61 74 68 65 72 2d 63 61 72 64 2d 77 63 2d 64 65 66 65 72 72 65 64 22 5d 2c 7b 39 33 31 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 61 2e 72 28 74 29 2c 61 2e 64 28 74 2c 7b 64 65 6c 61 79 4c 6f 61 64 43 6f 6d 70 6f 6e 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5a 65 7d 7d 29 3b 76 61 72 20 69 3d 61 28 33 33 39 34 30 29 2c 6f 3d 61 28 32 38 39 30 34 29 2c 6e 3d 61 28 39 39 34 Data Ascii: "use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["weather-card-wc-deferred"],{93129:function(e,t,a){a.r(t),a.d(t,{delayLoadComponent:function(){return Ze}});var i=a(33940),o=a(28904),n=a(994
2024-01-17 17:07:41 UTC	9341	IN	Data Raw: 74 44 69 61 6c 6f 67 43 6c 6f 73 65 7d 20 64 61 74 61 2d 74 3d 22 24 7b 65 3d 3e 65 2e 63 6c 6f 73 65 54 65 6c 65 6d 65 74 72 79 54 61 67 7d 22 3e 24 7b 55 2e 64 79 60 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 2d 73 76 67 22 3e 3c 2f 73 70 61 6e 3e 60 7d 3c 2f 66 6c 75 65 6e 74 2d 62 75 74 74 6f 6e 3e 60 29 7d 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 65 70 6f 72 74 2d 64 69 61 6c 6f 67 2d 63 6f 6e 74 65 6e 74 22 3e 24 7b 28 30 2c 6f 65 2e 72 78 29 28 28 65 3d 3e 7b 76 61 72 20 74 2c 61 3b 72 65 74 75 72 6e 28 6e 75 6c 6c 3d 3d 3d 28 74 3d 65 2e 73 74 72 69 6e 67 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 72 65 70 6f 72 74 44 69 61 6c 6f 67 43 68 65 63 6b 62 6f 78 29 26 26 4f 62 6a 65 63 74 2e 6b Data Ascii: tDialogClose} data-t="${e=>e.closeTelemetryTag}">${U.dy`<span class="close-button-svg"></span>`}</fluent-button>`)}<div class="report-dialog-content">${(0,oe.rx)((e=>{var t,a;return(null===(t=e.strings)\|\|void 0===t?void 0:t.reportDialogCheckbox)&&Object.k
2024-01-17 17:07:41 UTC	14028	IN	Data Raw: 65 73 70 6f 6e 73 65 20 3a 20 24 7b 61 7d 60 7d 7d 29 2c 21 31 29 7d 2c 74 68 69 73 2e 74 65 6d 70 6f 72 61 72 79 43 68 61 6e 67 65 4c 6f 63 61 74 69 6f 6e 57 69 74 68 54 6f 61 73 74 3d 61 73 79 6e 63 20 65 3d 3e 7b 63 6f 6e 73 74 7b 74 65 6d 70 6f 72 61 72 79 43 68 61 6e 67 65 4c 6f 63 61 74 69 6f 6e 3a 74 2c 73 65 74 50 72 69 6d 61 72 79 4c 6f 63 61 74 69 6f 6e 3a 61 2c 66 6f 72 63 65 52 65 66 72 65 73 68 46 65 65 64 3a 69 7d 3d 74 68 69 73 3b 69 66 28 21 61 77 61 69 74 20 74 28 65 29 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 7b 6c 6f 63 61 74 69 6f 6e 43 68 61 6e 67 65 64 54 6f 6f 6c 74 69 70 3a 6f 2c 73 65 74 50 72 69 6d 61 72 79 4c 6f 63 61 74 69 6f 6e 3a 6e 7d 3d 74 68 69 73 2e 63 61 72 64 2e 73 74 72 69 6e 67 73 2c 72 3d 6d 65 2e 47 66 28 65 2c 7b 73 Data Ascii: esponse : ${a}`}}),!1)},this.temporaryChangeLocationWithToast=async e=>{const{temporaryChangeLocation:t,setPrimaryLocation:a,forceRefreshFeed:i}=this;if(!await t(e))return;const{locationChangedTooltip:o,setPrimaryLocation:n}=this.card.strings,r=me.Gf(e,{s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
369	192.168.2.16	50200	13.107.246.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:41 UTC	638	OUT	GET /shared/edgeweb/img/fluent-centered-play.069bb71.svg HTTP/1.1 Host: edgestatic.azureedge.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.microsoft.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:41 UTC	654	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:41 GMT Content-Type: image/svg+xml Content-Length: 492 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable ETag: W/"1ec-18c5b5bcef9" Last-Modified: Tue, 12 Dec 2023 00:09:52 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Origin-Agent-Cluster: ?1 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 x-azure-ref: 20240117T170741Z-8kdq71vdft5eh462t780hzmt1800000000f0000000000xar X-Cache: TCP_MISS Accept-Ranges: bytes
2024-01-17 17:07:41 UTC	492	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 37 30 22 20 68 65 69 67 68 74 3d 22 37 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 37 30 20 37 30 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 4d 33 30 2e 38 36 34 20 34 33 2e 34 32 63 2d 2e 32 35 38 20 30 2d 2e 35 2d 2e 30 34 39 2d 2e 37 32 35 2d 2e 31 34 35 61 31 2e 39 31 39 20 31 2e 39 31 39 20 30 20 30 20 31 2d 2e 35 39 33 2d 2e 33 39 36 41 31 2e 38 32 31 20 31 2e 38 32 31 20 30 20 30 20 31 20 32 39 20 34 31 2e 35 36 35 56 32 37 2e 38 35 34 61 31 2e 38 36 20 31 2e 38 36 20 30 20 30 20 31 20 31 2e 31 33 2d 31 2e 37 31 20 31 2e 39 30 35 20 31 2e 39 30 35 20 30 20 30 20 31 20 31 2e 31 38 38 2d 2e 30 38 37 63 2e 31 35 34 2e Data Ascii: <svg width="70" height="70" viewBox="0 0 70 70" xmlns="http://www.w3.org/2000/svg"><path d="M30.864 43.42c-.258 0-.5-.049-.725-.145a1.919 1.919 0 0 1-.593-.396A1.821 1.821 0 0 1 29 41.565V27.854a1.86 1.86 0 0 1 1.13-1.71 1.905 1.905 0 0 1 1.188-.087c.154.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
370	192.168.2.16	50201	13.107.246.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:41 UTC	634	OUT	GET /shared/edgeweb/img/fluent-bold-play.9b1100e.svg HTTP/1.1 Host: edgestatic.azureedge.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.microsoft.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:41 UTC	654	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:41 GMT Content-Type: image/svg+xml Content-Length: 821 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable ETag: W/"335-18c5b52bde1" Last-Modified: Mon, 11 Dec 2023 23:59:58 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Origin-Agent-Cluster: ?1 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 x-azure-ref: 20240117T170741Z-azq36rgm5d6kd070a8ss32zt5g00000002u0000000000pnq X-Cache: TCP_MISS Accept-Ranges: bytes
2024-01-17 17:07:41 UTC	821	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 32 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 20 33 32 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 4d 35 2e 36 32 39 20 30 63 2e 33 30 32 20 30 20 2e 36 30 33 2e 30 33 38 2e 39 30 35 2e 31 31 35 2e 33 30 34 2e 30 37 37 2e 35 38 39 2e 31 39 33 2e 38 35 35 2e 33 34 37 6c 32 31 2e 37 35 39 20 31 32 2e 33 31 34 63 2e 35 38 2e 33 33 33 20 31 2e 30 33 33 2e 37 38 38 20 31 2e 33 36 31 20 31 2e 33 36 34 41 33 2e 37 20 33 2e 37 20 30 20 30 20 31 20 33 31 20 31 36 63 30 20 2e 36 37 37 2d 2e 31 36 31 20 31 2e 33 2d 2e 34 38 32 20 31 2e 38 36 38 61 33 2e 35 31 39 20 33 2e 35 31 39 20 30 20 30 Data Ascii: <svg width="32" height="32" viewBox="0 0 32 32" xmlns="http://www.w3.org/2000/svg"><path d="M5.629 0c.302 0 .603.038.905.115.304.077.589.193.855.347l21.759 12.314c.58.333 1.033.788 1.361 1.364A3.7 3.7 0 0 1 31 16c0 .677-.161 1.3-.482 1.868a3.519 3.519 0 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
371	192.168.2.16	50203	13.107.246.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:41 UTC	637	OUT	GET /shared/edgeweb/img/fluent-bold-refresh.2078820.svg HTTP/1.1 Host: edgestatic.azureedge.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.microsoft.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:41 UTC	747	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:41 GMT Content-Type: image/svg+xml Content-Length: 1831 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable ETag: W/"727-18c5b874a1a" Last-Modified: Tue, 12 Dec 2023 00:57:22 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Origin-Agent-Cluster: ?1 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 x-azure-ref: 20240117T170741Z-3uk5gv30hx1xvbdn777qtct6f400000000fg0000000018ge X-Cache: TCP_MISS Accept-Ranges: bytes
2024-01-17 17:07:41 UTC	1831	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 32 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 20 33 32 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 36 20 30 63 31 2e 34 38 20 30 20 32 2e 39 30 32 2e 31 39 20 34 2e 32 36 37 2e 35 37 31 61 31 36 2e 30 33 20 31 36 2e 30 33 20 30 20 30 20 31 20 33 2e 38 31 39 20 31 2e 36 31 41 31 35 2e 39 38 33 20 31 35 2e 39 38 33 20 30 20 30 20 31 20 32 37 2e 33 32 20 34 2e 36 38 61 31 35 2e 39 38 32 20 31 35 2e 39 38 32 20 30 20 30 20 31 20 32 2e 35 20 33 2e 32 33 34 20 31 36 2e 30 33 20 31 36 2e 30 33 20 30 20 30 20 31 20 31 2e 36 30 39 20 33 2e 38 32 43 33 31 2e 38 30 39 20 31 33 2e 30 39 Data Ascii: <svg width="32" height="32" viewBox="0 0 32 32" xmlns="http://www.w3.org/2000/svg"><path d="M16 0c1.48 0 2.902.19 4.267.571a16.03 16.03 0 0 1 3.819 1.61A15.983 15.983 0 0 1 27.32 4.68a15.982 15.982 0 0 1 2.5 3.234 16.03 16.03 0 0 1 1.609 3.82C31.809 13.09

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
372	192.168.2.16	50204	13.107.246.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:41 UTC	632	OUT	GET /shared/edgeweb/img/fluent-bold-up.5232098.svg HTTP/1.1 Host: edgestatic.azureedge.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.microsoft.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:41 UTC	680	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:41 GMT Content-Type: image/svg+xml Content-Length: 602 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable ETag: W/"25a-18c5b69efa2" Last-Modified: Tue, 12 Dec 2023 00:25:18 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Origin-Agent-Cluster: ?1 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 x-azure-ref: 20240117T170741Z-pwv2bnmm1h1dz663p8awn1r530000000010g000000004yx4 X-Cache: TCP_MISS x-fd-int-roxy-purgeid: 0 Accept-Ranges: bytes
2024-01-17 17:07:41 UTC	602	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 32 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 20 33 32 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 36 20 30 63 2e 32 37 34 20 30 20 2e 34 39 37 2e 30 35 38 2e 36 37 36 2e 31 35 31 2e 31 35 32 2e 30 38 2e 33 31 2e 31 39 37 2e 34 37 2e 33 35 37 6c 31 33 2e 33 38 39 20 31 33 2e 34 31 36 63 2e 33 31 33 2e 33 31 34 2e 34 36 35 2e 36 38 36 2e 34 36 35 20 31 2e 31 31 34 20 30 20 2e 34 32 38 2d 2e 31 35 32 2e 38 2d 2e 34 36 35 20 31 2e 31 31 35 2d 2e 33 31 2e 33 31 2d 2e 36 37 38 2e 34 36 32 2d 31 2e 31 2e 34 36 32 61 31 2e 35 20 31 2e 35 20 30 20 30 20 31 2d 31 2e 31 2d 2e 34 36 32 Data Ascii: <svg width="32" height="32" viewBox="0 0 32 32" xmlns="http://www.w3.org/2000/svg"><path d="M16 0c.274 0 .497.058.676.151.152.08.31.197.47.357l13.389 13.416c.313.314.465.686.465 1.114 0 .428-.152.8-.465 1.115-.31.31-.678.462-1.1.462a1.5 1.5 0 0 1-1.1-.462

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
373	192.168.2.16	50202	13.107.246.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:41 UTC	634	OUT	GET /shared/edgeweb/img/fluent-bold-down.52a4c29.svg HTTP/1.1 Host: edgestatic.azureedge.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.microsoft.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:41 UTC	680	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:41 GMT Content-Type: image/svg+xml Content-Length: 611 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable ETag: W/"263-18c5b5e7e9b" Last-Modified: Tue, 12 Dec 2023 00:12:48 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Origin-Agent-Cluster: ?1 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 x-azure-ref: 20240117T170741Z-wmw6n6hb051qdb6c1atkcmnt2800000000n00000000065vf X-Cache: TCP_MISS x-fd-int-roxy-purgeid: 0 Accept-Ranges: bytes
2024-01-17 17:07:41 UTC	611	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 32 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 20 33 32 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 36 20 33 32 63 2e 32 37 34 20 30 20 2e 34 39 37 2d 2e 30 35 38 2e 36 37 36 2d 2e 31 35 31 2e 31 35 32 2d 2e 30 38 2e 33 31 2d 2e 31 39 37 2e 34 37 2d 2e 33 35 37 6c 31 33 2e 33 38 39 2d 31 33 2e 34 31 36 63 2e 33 31 33 2d 2e 33 31 34 2e 34 36 35 2d 2e 36 38 36 2e 34 36 35 2d 31 2e 31 31 34 20 30 2d 2e 34 32 38 2d 2e 31 35 32 2d 2e 38 2d 2e 34 36 35 2d 31 2e 31 31 35 61 31 2e 35 30 31 20 31 2e 35 30 31 20 30 20 30 20 30 2d 31 2e 31 2d 2e 34 36 32 20 31 2e 35 20 31 2e 35 20 30 20 Data Ascii: <svg width="32" height="32" viewBox="0 0 32 32" xmlns="http://www.w3.org/2000/svg"><path d="M16 32c.274 0 .497-.058.676-.151.152-.08.31-.197.47-.357l13.389-13.416c.313-.314.465-.686.465-1.114 0-.428-.152-.8-.465-1.115a1.501 1.501 0 0 0-1.1-.462 1.5 1.5 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
374	192.168.2.16	50205	52.182.143.211	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:41 UTC	1038	OUT	POST /OneCollector/1.0?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1705511260510&w=0&anoncknm=app_anon&NoResponseBody=true HTTP/1.1 Host: browser.events.data.msn.com Connection: keep-alive Content-Length: 10867 sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: USRLOC=; MUID=2136D0069C246D353F30C40F9D676C20; _EDGE_S=F=1&SID=1DE3F086BB2964AD035BE48FBAF26596; _EDGE_V=1; _SS=SID=00
2024-01-17 17:07:41 UTC	10867	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 43 6f 6e 74 65 6e 74 56 69 65 77 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 30 31 2d 31 37 54 31 37 3a 30 37 3a 34 30 2e 35 30 39 5a 22 2c 22 76 65 72 22 3a 22 34 2e 30 22 2c 22 69 4b 65 79 22 3a 22 6f 3a 30 64 65 64 36 30 63 37 35 65 34 34 34 34 33 61 61 33 34 38 34 63 34 32 63 31 63 34 33 66 65 38 22 2c 22 65 78 74 22 3a 7b 22 73 64 6b 22 3a 7b 22 76 65 72 22 3a 22 31 44 53 2d 57 65 62 2d 4a 53 2d 33 2e 32 2e 38 22 2c 22 73 65 71 22 3a 38 2c 22 69 6e 73 74 61 6c 6c 49 64 22 3a 22 39 31 64 35 37 31 39 38 2d 66 37 38 37 2d 34 66 35 39 2d 38 61 30 37 2d 64 34 35 39 64 38 32 31 34 35 34 63 22 2c 22 65 70 6f 63 68 22 3a 22 31 31 31 36 32 33 39 39 30 38 22 7d 2c 22 61 70 70 22 3a 7b 22 6c 6f 63 Data Ascii: {"name":"MS.News.Web.ContentView","time":"2024-01-17T17:07:40.509Z","ver":"4.0","iKey":"o:0ded60c75e44443aa3484c42c1c43fe8","ext":{"sdk":{"ver":"1DS-Web-JS-3.2.8","seq":8,"installId":"91d57198-f787-4f59-8a07-d459d821454c","epoch":"1116239908"},"app":{"loc
2024-01-17 17:07:41 UTC	890	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: MC1=GUID=268675c9239c477199e590a9a88d2d41&HASH=2686&LV=202401&V=4&LU=1705511261745; Domain=.microsoft.com; Expires=Thu, 16 Jan 2025 17:07:41 GMT; Path=/;Secure; SameSite=None Set-Cookie: MS0=c528b866687741e28977e64890aa7b75; Domain=.microsoft.com; Expires=Wed, 17 Jan 2024 17:37:41 GMT; Path=/;Secure; SameSite=None time-delta-millis: 1235 Access-Control-Allow-Headers: P3P,Set-Cookie,time-delta-millis Access-Control-Allow-Methods: POST Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com Access-Control-Expose-Headers: time-delta-millis Date: Wed, 17 Jan 2024 17:07:41 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
375	192.168.2.16	50206	23.49.251.10	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:41 UTC	506	OUT	GET /bundles/v1/edgeChromium/latest/weather-minimap-wc.183a1248bcaaadf24897.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:41 UTC	1186	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: B+JsCIlfeMV5jXFjrexRWw== Last-Modified: Sat, 13 Jan 2024 01:22:15 GMT ETag: 0x8DC13D613B4950F Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: e0b30bbc-801e-002b-48bf-45de9a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:41 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Akamai-Request-BC: [a=23.218.242.10,b=89903155,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=5, origin; dur=0 , cdntime; dur=5 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55bd033 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511261.55bd033 Vary: Origin
2024-01-17 17:07:41 UTC	15198	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 77 65 61 74 68 65 72 2d 6d 69 6e 69 6d 61 70 2d 77 63 22 5d 2c 7b 37 39 33 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 69 2e 72 28 74 29 2c 69 2e 64 28 74 2c 7b 54 6f 6f 6c 69 6e 67 49 6e 66 6f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4a 65 7d 2c 57 65 61 74 68 65 72 4d 69 6e 69 6d 61 70 57 43 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 56 65 7d 2c Data Ascii: 00006000"use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["weather-minimap-wc"],{7932:function(e,t,i){i.r(t),i.d(t,{ToolingInfo:function(){return Je},WeatherMinimapWC:function(){return Ve},
2024-01-17 17:07:42 UTC	9390	IN	Data Raw: 61 67 65 54 65 6d 70 6c 61 74 65 28 5b 28 30 2c 6d 2e 6c 64 29 28 28 6e 75 6c 6c 3d 3d 67 3f 76 6f 69 64 20 30 3a 67 2e 63 61 70 49 63 6f 6e 29 3f 3f 75 2e 68 6c 2c 75 2e 71 46 29 5d 2c 22 31 36 22 2c 22 22 29 2c 74 65 78 74 3a 4c 7d 7d 7d 28 6f 2c 67 2c 77 2c 30 2c 6c 29 3a 61 3d 3d 3d 72 2e 70 30 2e 57 69 6c 64 66 69 72 65 50 6f 69 6e 74 3f 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 2c 6e 2c 61 29 7b 63 6f 6e 73 74 20 6f 3d 46 28 65 2c 7b 64 65 66 61 75 6c 74 50 6c 75 73 3a 33 30 2c 6d 65 74 61 4b 65 79 3a 22 57 69 6c 64 46 69 72 65 53 76 67 22 2c 77 69 64 74 68 4d 61 70 3a 66 2c 68 65 69 67 68 74 4d 61 70 3a 76 2c 6d 61 70 5a 6f 6f 6d 3a 35 2c 68 6f 72 69 7a 6f 6e 53 74 65 70 3a 31 2c 6d 61 78 48 6f 72 69 7a 6f 6e 3a 30 2c 75 73 65 4e 65 78 48 6f Data Ascii: ageTemplate([(0,m.ld)((null==g?void 0:g.capIcon)??u.hl,u.qF)],"16",""),text:L}}}(o,g,w,0,l):a===r.p0.WildfirePoint?L=function(e,t,i,n,a){const o=F(e,{defaultPlus:30,metaKey:"WildFireSvg",widthMap:f,heightMap:v,mapZoom:5,horizonStep:1,maxHorizon:0,useNexHo
2024-01-17 17:07:42 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 65 20 32 3a 72 65 74 75 72 6e 20 74 68 69 73 2e 73 65 76 65 72 65 57 65 61 74 68 65 72 56 61 6c 69 64 61 74 65 28 29 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 20 74 68 69 73 2e 68 75 72 72 69 63 61 6e 65 56 61 6c 69 64 61 74 65 28 29 3b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 20 74 68 69 73 2e 74 69 6c 65 73 56 61 6c 69 64 61 74 65 28 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 21 30 7d 7d 75 70 64 61 74 65 52 65 6e 64 65 72 4c 61 79 65 72 54 79 70 65 28 29 7b 6c 65 74 20 65 3d 21 30 3b 69 66 28 21 74 68 69 73 2e 6d 69 6e 69 6d 61 70 44 61 74 61 2e 77 65 61 74 68 65 72 4c 61 79 65 72 54 79 70 65 29 72 65 74 75 72 6e 20 74 68 69 73 2e 68 75 72 72 69 63 61 6e 65 56 61 6c 69 64 61 74 65 28 29 3f 74 68 69 73 2e 5f 72 65 6e 64 Data Ascii: 00006000e 2:return this.severeWeatherValidate();case 3:return this.hurricaneValidate();case 4:return this.tilesValidate();default:return!0}}updateRenderLayerType(){let e=!0;if(!this.minimapData.weatherLayerType)return this.hurricaneValidate()?this._rend
2024-01-17 17:07:42 UTC	8204	IN	Data Raw: 2e 64 79 60 24 7b 28 30 2c 4c 65 2e 67 29 28 28 65 3d 3e 33 21 3d 3d 65 2e 72 65 6e 64 65 72 4c 61 79 65 72 54 79 70 65 26 26 21 65 2e 63 6f 6e 66 69 67 2e 64 69 73 61 62 6c 65 50 69 6e 29 2c 4d 65 2e 64 79 60 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 65 61 74 68 65 72 2d 6d 69 6e 69 6d 61 70 2d 70 69 6e 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 65 61 74 68 65 72 2d 6d 69 6e 69 6d 61 70 2d 70 69 6e 2d 69 6e 6e 65 72 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 60 29 7d 60 2c 4f 65 3d 4d 65 2e 64 79 60 24 7b 28 30 2c 4c 65 2e 67 29 28 28 65 3d 3e 65 2e 73 68 6f 77 47 72 6f 75 70 42 75 74 74 6f 6e 73 28 29 29 2c 4d 65 2e 64 79 60 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 65 61 74 68 65 72 2d 6d 69 6e 69 6d 61 70 2d 62 75 74 74 6f 6e 73 2d 63 6f 6e 74 61 69 6e 65 Data Ascii: .dy`${(0,Le.g)((e=>3!==e.renderLayerType&&!e.config.disablePin),Me.dy`<div class="weather-minimap-pin"><div class="weather-minimap-pin-inner"></div></div>`)}`,Oe=Me.dy`${(0,Le.g)((e=>e.showGroupButtons()),Me.dy`<div class="weather-minimap-buttons-containe
2024-01-17 17:07:42 UTC	7482	IN	Data Raw: 30 30 30 30 31 44 32 45 0d 0a 79 54 61 67 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 61 2e 67 6e 29 28 5b 4b 2e 4c 4f 5d 2c 56 65 2e 70 72 6f 74 6f 74 79 70 65 2c 22 6d 69 6e 69 6d 61 70 54 65 6c 65 6d 65 74 72 79 4c 61 79 65 72 54 61 67 73 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 61 2e 67 6e 29 28 5b 4b 2e 4c 4f 5d 2c 56 65 2e 70 72 6f 74 6f 74 79 70 65 2c 22 6c 61 79 65 72 42 75 74 74 6f 6e 54 65 6c 65 6d 65 74 72 79 54 61 67 73 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 61 2e 67 6e 29 28 5b 4b 2e 4c 4f 5d 2c 56 65 2e 70 72 6f 74 6f 74 79 70 65 2c 22 74 65 6c 65 6d 65 74 72 79 43 6f 6e 74 65 78 74 22 2c 76 6f 69 64 20 30 29 3b 63 6f 6e 73 74 20 58 65 3d 4d 65 2e 64 79 60 24 7b 28 30 2c 4c 65 2e 67 29 28 28 65 3d 3e 65 26 26 65 2e 6d 69 6e 69 6d 61 70 44 61 74 61 Data Ascii: 00001D2EyTag",void 0),(0,a.gn)([K.LO],Ve.prototype,"minimapTelemetryLayerTags",void 0),(0,a.gn)([K.LO],Ve.prototype,"layerButtonTelemetryTags",void 0),(0,a.gn)([K.LO],Ve.prototype,"telemetryContext",void 0);const Xe=Me.dy`${(0,Le.g)((e=>e&&e.minimapData
2024-01-17 17:07:42 UTC	10096	IN	Data Raw: 30 30 30 30 32 37 36 34 0d 0a 74 6d 72 22 3d 3d 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 22 30 30 22 3b 69 66 28 65 2e 73 74 61 72 74 73 57 69 74 68 28 22 68 74 74 70 73 22 29 29 7b 63 6f 6e 73 74 20 74 3d 2f 70 6c 28 2e 2a 29 5c 2e 73 76 67 24 2f 2c 69 3d 65 2e 6d 61 74 63 68 28 74 29 3b 72 65 74 75 72 6e 20 69 26 26 69 5b 31 5d 3f 69 5b 31 5d 3a 22 30 30 22 7d 72 65 74 75 72 6e 20 65 7d 7d 2c 39 37 30 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 69 2e 64 28 74 2c 7b 4d 4e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 2c 4d 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 2c 4d 78 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 7d 2c 52 62 3a 66 75 6e 63 Data Ascii: 00002764tmr"===e}function o(e){if(!e)return"00";if(e.startsWith("https")){const t=/pl(.*)\.svg$/,i=e.match(t);return i&&i[1]?i[1]:"00"}return e}},9700:function(e,t,i){i.d(t,{MN:function(){return s},Mt:function(){return c},Mx:function(){return u},Rb:func
2024-01-17 17:07:42 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
376	192.168.2.16	50207	13.107.246.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:42 UTC	678	OUT	GET /shared/cms/lrs1c69a1j/section-images/f387152096bf40159e24d6e45c2d82cd.png HTTP/1.1 Host: edgestatic.azureedge.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:43 UTC	655	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:43 GMT Content-Type: image/png Content-Length: 519474 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable ETag: W/"7ed32-18c5b5c403b" Last-Modified: Tue, 12 Dec 2023 00:10:21 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Origin-Agent-Cluster: ?1 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 x-azure-ref: 20240117T170742Z-vd0s8n2g2t30b0c5fsff9661d400000000b0000000001bn3 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-01-17 17:07:43 UTC	15729	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 80 00 00 03 36 08 06 00 00 00 4f 12 27 7c 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 07 ec c7 49 44 41 54 78 01 ec fd 09 bc 1d 47 79 e7 8d 3f d5 7d 96 7b af 76 d9 f2 2a db b2 11 04 db ec 36 9b 01 23 d6 60 12 b6 04 3b 2b 81 4c 02 99 09 49 08 c9 bc 2f 99 90 c4 16 4c de 99 4f 66 02 21 79 c9 3b 40 88 49 02 19 62 67 23 cc 3f 40 86 45 90 09 10 c0 61 b5 d9 84 91 8d bc 60 d9 d2 95 ee 76 b6 ee fa d7 53 5d 4f d5 d3 7d cf bd 92 bc 9e 2b fd be f6 d1 e9 a5 ba f6 aa 7b fa d7 4f 3f 45 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDR6O'\|pHYs%%IR$sRGBgAMAaIDATxGy?}{v*6#`;+LI/LOf!y;@Ibg#?@Ea`vS]O}+{O?E
2024-01-17 17:07:43 UTC	16384	IN	Data Raw: f4 84 87 6d a4 c7 5d bc 9d 9e f0 a8 73 e8 82 f3 4e a3 0d eb 3a b4 d6 68 b5 5a 17 b9 87 6f 3b 16 16 16 f6 c9 31 9e 9b 45 04 e6 7d bd 30 9c cc db bd 5e 4f 2a cd 6e db b6 cd b2 05 30 fb 03 e6 bf 0b 2c fa 42 fc 05 00 00 00 00 00 00 ac 06 04 60 00 26 1c 16 73 f9 9b 6f ee c3 a2 6f fe 38 bf 0a cc d6 60 12 8e ad c1 0e 1f 3e bc cc ad 4b 73 85 79 7e b5 98 b7 db ed f6 79 04 00 58 f3 f0 80 ce 06 7d ba e3 f3 9f a7 db be 75 80 86 83 92 da 6e d8 77 8a 8c a6 db eb 69 fe 40 8f b2 92 b7 37 50 3e b5 91 4a 33 a2 51 56 d2 d0 0c 88 75 dc 0d 33 1d 7a d6 05 eb e8 89 db 1e 43 53 7c ac 18 f1 bc 41 99 13 6f d9 b5 83 60 c2 22 6f 26 0a b8 59 b5 af dd 3d 18 4a db 56 1f 4b 58 15 e3 f8 e3 75 d8 fa 78 5d d7 d0 c3 cf dd 42 5b 37 6f f4 56 cc 6b 99 e9 e9 e9 f3 b4 00 cc 8c 13 81 f9 9b 8f 0d Data Ascii: m]sN:hZo;1E}0^O*n0,B`&soo8`>Ksy~yX}unwi@7P>J3QVu3zCS\|Ao`"o&Y=JVKXux]B[7oVk
2024-01-17 17:07:43 UTC	16384	IN	Data Raw: 1f d0 4f 5e fb 0b ee f3 ef e9 8a 6b 7e d4 09 c3 37 39 41 78 1f 4d 22 7a 2e 5e ed a1 1c 3f d8 93 f9 9d 1f 7c dd 70 43 2a bf 58 fd 42 00 06 e0 c1 27 f8 fa 4d 72 96 b2 8e 73 c7 33 b6 1c 62 6b 7d 37 7e f3 db 4e 7f e3 f9 a3 e9 b3 de ef 7e ce 6d aa 2e 26 12 b1 25 0a 07 54 7b 59 9a 24 84 55 77 a6 29 0d ff af a9 89 03 d6 ca ff 54 89 87 65 34 9e 35 c9 0c 58 89 7b a6 a6 1b 6a 21 36 94 af ba 0f 96 18 63 ae e3 dd 7c ca 1e c5 57 6f 55 08 55 08 91 83 92 f8 12 6f e5 ad 7a dd d7 26 41 55 2e 4e 41 0d c5 08 92 58 15 e3 8f a2 b6 1d 97 07 c9 70 10 48 52 f4 bc 5d 1a 2d 46 c8 6b f7 46 ea c0 2b 3f b6 a6 b6 88 10 9d 2a 2f 64 ba 91 79 0a a2 79 ac 81 28 c2 44 9f 9f 56 04 1d ab b4 38 12 d1 a2 29 6c 59 25 30 c6 b0 b4 cc c2 ad 76 4d 49 49 7a b1 d1 6b 86 76 e3 20 82 5e d2 02 ab 1c 04 Data Ascii: O^k~79AxM"z.^?\|pCXB'Mrs3bk}7~N~m.&%T{Y$Uw)Te45X{j!6c\|WoUUoz&AU.NAXpHR]-FkF+?/dyy(DV8)lY%0vMIIzkv ^
2024-01-17 17:07:43 UTC	16384	IN	Data Raw: e7 b3 ee 4e ae f1 54 20 82 48 38 f0 97 27 d2 96 0f 6c 99 0e b0 c2 c4 dd 04 a3 16 6f 49 03 a6 0b c2 1c 5e 42 78 c1 21 56 54 bd 61 17 b7 c5 2b 63 68 6c b1 38 60 dd f9 a9 ed 47 1a d3 16 75 0b 38 b7 5a 88 96 3f 00 6d b6 f5 b9 47 73 0a 66 0d f7 a2 f9 08 a8 86 8b 66 5c fc 0e 95 3f 02 be a0 38 1c f3 db 01 7c 08 0d e8 83 3b 39 56 99 61 f1 01 57 32 61 05 ef 32 7d fc cf 21 8c 49 8c 84 c2 56 f8 2c 0f 86 b2 e3 94 74 8a 9b 03 8d f0 28 1c e4 60 15 d8 eb bf 01 6f ce e3 c8 4f a9 d2 0a 31 36 01 05 0d e4 50 bf 4d 8e 0c 6d 6e 80 41 15 6d 02 ca e9 4a f8 55 1a 1d 20 8c 38 05 22 28 98 56 df dd 0a 35 6d 58 aa 46 3c 98 88 4b 7b 13 98 96 98 b6 f3 c5 97 2f d0 5b 3e b4 87 de f9 89 bd 61 cc 52 f8 ea 17 05 0c 9c 67 af db b0 c7 dc 94 26 32 58 cf 4d 2b 36 4b 01 62 41 29 9c 5d 86 d9 df Data Ascii: NT H8'loI^Bx!VTa+chl8`Gu8Z?mGsff\?8\|;9VaW2a2}!IV,t(`oO16PMmnAmJU 8"(V5mXF<K{/[>aRg&2XM+6KbA)]
2024-01-17 17:07:43 UTC	16384	IN	Data Raw: 6d 25 3d fe e1 ab 32 3f 0a 48 ff c9 5f ce 77 e9 c8 50 6c f1 4a 93 0d ab f6 25 c1 06 3e 15 7d 86 ae bf 1f e8 17 5b 6d df 01 9a 52 45 b1 48 5c e2 e0 65 37 ee 9a 69 00 cf 68 46 87 09 d9 69 df 6e 23 50 27 87 aa 2d a4 13 90 bb df fd ee f9 04 f2 68 02 62 88 00 02 d3 8c 66 34 a3 19 dd 4e b4 14 60 3b f4 7e 9a 89 87 a5 4c 34 80 34 6c 6f 92 a1 f7 37 cd 7d 28 ce 9e 9f a1 f7 d3 78 8a ef 52 5f 9c f9 0a fd 71 7e a9 c0 af b2 6d 66 20 f2 8b 95 2b 57 d2 9e 3d 7b 78 ed da b5 6a fe 41 fd 8d d5 0c c1 86 0d 1b e2 4c 51 0c 58 cd 13 a8 70 58 5c 8e 3f b9 67 10 d7 de 2b 88 2b e6 26 06 1c e7 67 f0 a1 80 72 fa be a8 9b 7e 67 b2 a6 31 15 20 34 3e 43 03 39 c7 0f 77 bd 9a 1b 45 37 98 a9 b0 78 d9 d2 1c 19 af 02 6d 66 bd 6a 3a f1 aa 61 a8 00 bf 39 2e 8b d7 f9 d6 7c d8 7b d5 a2 8d 65 01 Data Ascii: m%=2?H_wPlJ%>}[mREH\e7ihFin#P'-hbf4N`;~L44lo7}(xR_q~mf +W={xjALQXpX\?g++&gr~g1 4>C9wE7xmfj:a9.\|{e
2024-01-17 17:07:43 UTC	16384	IN	Data Raw: 06 17 d3 d8 4a 17 db f6 ab d9 9a ef 7e e4 21 7f 72 cc a3 2f d8 b4 72 e3 f1 cf 32 48 24 47 23 a6 d9 9b 77 8b 1b e0 42 15 26 e1 08 3c 38 c4 32 66 6b 3d 99 05 eb f3 50 df d0 76 c7 5c fb b4 12 30 5f 6a ab e5 80 63 02 58 11 6b 1d e4 4a 8d 32 09 30 79 3c 5e ff 0b 1f 00 dc f2 84 37 68 7e 39 76 56 cd 90 1a 9e 89 a0 5d dc c1 a1 c3 96 2a 72 d6 07 ae 5d 18 b2 04 08 85 8b 5c 03 20 17 f0 51 04 76 fd 46 09 66 38 d0 03 48 05 e3 bd 97 1d 57 88 17 54 35 84 ad fd 3b 32 c6 59 5b 34 1f 2e c7 c0 f4 21 3e 8e 58 77 2d 97 98 a7 2c ba 08 ba 4a 5d b3 e3 8a 6b 94 32 16 0e c0 7d 05 70 03 48 5a c0 a3 d0 ef 46 70 25 74 ec 06 de a0 87 a3 0a 3a 55 de 3c b8 2f 7a 39 3b f5 39 7e 53 dd f4 82 20 67 0d 4e 2a f6 6d 2c 9e 46 86 a5 aa 1b b4 46 b9 c1 f8 8a 7d 90 0a da 20 64 f8 38 b5 0d d5 bf 7b Data Ascii: J~!r/r2H$G#wB&<82fk=Pv\0_jcXkJ20y<^7h~9vV]r]\ QvFf8HWT5;2Y[4.!>Xw-,J]k2}pHZFp%t:U</z9;9~S gNm,FF} d8{
2024-01-17 17:07:43 UTC	16384	IN	Data Raw: 21 3f e5 c6 39 80 e1 56 3e 9c a3 0c 56 07 96 45 7e ea a9 32 f5 94 d5 1e 1b f9 62 dd 46 8e 98 d6 a5 c5 7f f2 be d6 17 f5 d1 73 8b d6 ae 7a 5c ed b3 0d 8c ec 59 3e e6 01 2f a4 d9 73 b4 29 8f 9b 36 8d 75 62 0b 80 c3 d4 65 ed b3 a4 76 a9 e4 51 1b 65 bb b1 fd 8c 6e b9 bd b8 cf be 42 19 59 ce f6 0b ca 48 5d 75 f1 a4 5c 1f 7f c6 56 d4 6d d1 d8 3f 6e 4d 1b 2c 6a fd b9 3f b2 7c e8 ef 11 b8 52 d9 17 59 ce b4 7f ee 2f 90 9f 7a b2 2e 2b 8f e1 8b 3a aa be 41 3b 90 87 1e 2f 9a 36 5a 34 e9 f9 98 bc d9 cf 9b 63 cb 7b d1 8e 1b db df 4c 99 45 ab 3f 79 d0 46 ec 93 03 7d a5 67 5f 19 c7 ff 38 fe 5f ae e3 1f e9 9b 37 6f ce e3 32 ec 93 47 35 fe 57 ad 5a 15 ef b1 61 db 87 e7 a6 08 fc c2 91 05 f7 61 3a 20 85 b9 4f 7f cf 3d f7 f4 fa 3c 64 57 c4 cb f7 f4 95 bc 90 7f a1 d2 ac 8c 34 Data Ascii: !?9V>VE~2bFsz\Y>/s)6ubevQenBYH]u\Vm?nM,j?\|RY/z.+:A;/6Z4c{LE?yF}g_8_7o2G5WZaa: O=<dW4
2024-01-17 17:07:43 UTC	16384	IN	Data Raw: c1 d8 c3 fd 2e 79 1b 0f bf d4 49 84 9b 59 8a f3 9e ef 57 32 09 02 0f c5 cf 6f bf a8 69 c8 97 6c 23 18 fc 52 a5 11 00 1e 69 a4 91 46 1a 69 a4 97 19 11 80 b5 9f 45 1b 8f 81 0c fe a6 09 5f 9a 9c 0c 2d fe 86 7d 7a ff 06 b0 28 16 87 17 21 68 61 61 a1 a3 d7 2f b7 48 3f 7a f4 68 07 ef 44 03 04 57 db 08 00 ff ab 8f bd 47 56 ad 7e a3 0a 44 b7 3c 03 6a 16 2f 58 aa 24 0d 98 db c0 9c 15 0c e9 44 21 d3 be 77 0d 80 5b d7 23 0d 70 ec 27 16 56 4b b2 80 8f 08 c1 6a fb 00 ee 8c 8d b3 18 7e d2 25 94 f2 17 a5 da 30 0c 52 95 d4 4f ce 4d 76 86 6e 20 3b 84 46 f0 bd 6b 43 37 54 a4 1e c3 49 be ce 8b d8 f2 0d 68 4d 7c d4 a7 89 41 e4 e9 bd 3a e1 0e 4c 28 4c f9 d4 84 0a ac 2f 2e c8 dc 2f fe 62 f6 fc cd 21 1a ba 02 b2 16 50 37 55 6c 41 5e e7 9a 85 e2 9c cb 80 af 38 31 5e c1 9d f6 2a Data Ascii: .yIYW2oil#RiFiE_-}z(!haa/H?zhDWGV~D<j/X$D!w[#p'VKj~%0ROMvn ;FkC7TIhM\|A:L(L/./b!P7UlA^81^*
2024-01-17 17:07:43 UTC	16384	IN	Data Raw: fb f2 c9 f1 53 6a 07 02 17 9f 7e 33 a2 9a 3c 22 13 d8 eb 25 3b 52 c6 3c 29 3e 6f 06 0b 7d 81 eb f4 98 1f e7 73 f9 35 67 e1 03 a7 c7 ea 5a 99 17 55 13 67 16 4f 4b 3b 06 5b 9e 00 54 53 f5 1a 2c a0 53 79 14 9b f4 92 43 5a 78 6d 2f 51 80 35 af be e6 24 5b b2 80 2b 9e d0 af 13 22 e7 f0 6a cc 38 a9 ce 7e 6d f0 01 c9 de c3 de c4 fd 2d 56 4d e6 d3 10 12 ce 0d 4d d9 53 8c 89 4e 17 1a 4b a7 fb b8 e3 d4 13 39 03 97 a2 75 1c 7c 02 9e b1 c5 5d b4 b0 d5 98 24 c5 f3 d7 55 41 86 51 93 3f 28 e7 4e 7d d2 9f 3d f3 39 7f ee c4 63 fd 53 5f fc dc d2 d3 8f 1c 5f f8 83 cf 1c 5f bd 7a b5 0b 2f 24 3c b6 c6 cc a2 69 9d 34 98 54 48 47 0c eb 38 1e ce 9f 3f 2f ab 56 ad 32 56 8d c4 32 f9 3c b6 38 0e fb 13 65 cc 31 f6 63 da dc dc 5c 66 b6 fe 3b e6 5f b5 ea f6 37 7f fd cc 86 6d af 92 d9 Data Ascii: Sj~3<"%;R<)>o}s5gZUgOK;[TS,SyCZxm/Q5$[+"j8~m-VMMSNK9u\|]$UAQ?(N}=9cS___z/$<i4THG8?/V2V2<8e1c\f;_7m
2024-01-17 17:07:43 UTC	16384	IN	Data Raw: 60 bb dd ae c0 df 58 ac d2 07 79 7c e4 bf 97 5f 7e c9 87 77 fc f8 9d a5 c9 a3 8f ba 6e c6 c0 b6 9c ed 8a 6b 38 df 4a 63 b8 11 c2 54 d5 db 4d e1 43 b5 6d 1b bf b3 a7 78 fb 79 33 4d 68 07 a5 62 7c 4d 0a a8 d6 f4 dc f6 23 d9 91 ec 3a 1a 9b 17 ac 5d 33 79 0c 23 96 9c bf 42 79 db 13 c1 5a 35 b9 f4 fc 93 c7 e3 b8 fc 57 94 3f 67 ea 2d 0c 06 69 9c b1 e3 63 70 0c c6 21 6c 5b ea cd c3 6d e9 da 4d f9 3d 59 6c 53 d4 df d5 a0 24 2c 37 43 b4 bb 15 f3 ac 90 9f 3b 09 62 ba d4 32 ec 60 67 f1 b0 6c 09 7f 4d e0 0e c0 b4 9d f4 8e b8 95 6c 99 3e 5b 07 5a 55 a6 4e 36 47 e1 a3 b0 b5 c1 e6 aa 6b 2d d1 d3 b0 e3 ee 18 3a 3c 78 e1 39 38 c1 0b eb 4f f0 bc 22 98 7f e0 b9 05 cf 31 d8 0c 04 43 60 55 3c d1 af 11 5d fc 10 c6 35 6a 29 cf e5 95 95 b9 0d e0 b9 cc 65 9f 84 07 39 63 73 33 1e Data Ascii: `Xy\|_~wnk8JcTMCmxy3Mhb\|M#:]3y#ByZ5W?g-icp!l[mM=YlS$,7C;b2`glMl>[ZUN6Gk-:<x98O"1C`U<]5j)e9cs3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
377	192.168.2.16	50208	13.107.246.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:42 UTC	678	OUT	GET /shared/cms/lrs1c69a1j/section-images/166ba0e92d8b4ad0b18bdf3455bfce5c.jpg HTTP/1.1 Host: edgestatic.azureedge.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:42 UTC	682	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:42 GMT Content-Type: image/jpeg Content-Length: 230923 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable ETag: W/"3860b-18c5b6fa681" Last-Modified: Tue, 12 Dec 2023 00:31:32 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Origin-Agent-Cluster: ?1 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 x-azure-ref: 20240117T170742Z-bgf1cc49rx13devrdw9ma9bmxs00000000kg000000006xr1 X-Cache: TCP_MISS x-fd-int-roxy-purgeid: 0 Accept-Ranges: bytes
2024-01-17 17:07:42 UTC	15702	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 01 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 ff c2 00 11 08 04 b0 07 80 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 ff da 00 08 01 01 00 00 00 00 f9 88 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 af 64 bb e2 d4 83 a2 ca 00 Data Ascii: JFIF""$$6&&6>424>LDDL_Z_\|\|""$$6&&6>424>LDDL_Z_\|\|"d
2024-01-17 17:07:42 UTC	16384	IN	Data Raw: 3e af ee ff 00 3a 5d 60 05 14 c5 ba ea b1 6b 63 eb 5e 7d 81 85 ae 4c 5d e8 3d 8b dc 36 69 91 13 04 38 bf 20 d5 7a 2f b1 41 62 db 0e cd b9 a8 f0 9f 1f 74 9b ce 7a ae 83 d5 33 bc 97 89 de 67 d5 4f 37 b4 e9 bd 4b 65 72 d6 55 71 cc e9 2b d5 59 c7 bf c8 cc 75 77 2f ed b2 31 f0 2b ba af 3e bd 3d 37 33 f3 69 e7 fc 19 ee fd 8a e5 ea 21 15 dd 52 55 35 45 ba 2a ad 6d 4a aa 98 b3 5d 75 a8 b5 66 d5 c9 a6 9b b8 f8 f4 32 2e 61 fc d8 f4 2e b0 00 00 00 06 be d0 da 48 00 3c 6b 18 0f ab fb bf ce 97 58 01 b1 ed f8 dd 05 51 37 68 c9 58 f4 ee ab c2 35 a3 63 d4 fb b7 ac 57 66 ed 54 45 c2 0e 17 c9 78 dd 9f a3 fb 55 2c 4c 7b 56 eb 88 2e 78 97 88 3a 7c 84 75 36 fd 1b c7 f9 cd be cb 6f 6b 45 b2 df 76 3d 5e cb 16 f6 65 ef 2b d0 e9 f3 ad 5e c0 a7 17 94 ee bd 03 5d 46 c7 0a aa 32 97 Data Ascii: >:]`kc^}L]=6i8 z/Abtz3gO7KerUq+Yuw/1+>=73i!RU5E*mJ]uf2.a.H<kXQ7hX5cWfTExU,L{V.x:\|u6okEv=^e+^]F2
2024-01-17 17:07:42 UTC	16384	IN	Data Raw: 2b fa c7 53 a3 77 6d 59 38 41 8d 6e 0b a3 54 68 33 2a 6e d7 7a 8f 09 98 65 a3 fb 07 85 7e 3e 49 d8 78 d9 13 1c e9 ba cf 65 c1 b6 fc 3d 9c 19 b2 3c 5c a3 b4 c8 b4 fe f1 a2 82 53 14 81 ca 17 57 af 15 1e 38 15 33 c9 eb 4c 43 40 1a 7f f0 16 22 5c d9 2e dd b0 0e 66 16 87 0b 85 46 f1 b1 3d 90 49 84 7c ac 8b 2c b5 e0 6d a8 75 7c d6 10 61 67 7b 21 30 1d 76 c9 76 cf 15 0c 26 59 43 01 f3 3c 07 15 26 13 0f f4 84 50 b0 91 1b c3 7f 50 9f 1c 0f c3 4f 23 61 31 18 dc 06 da d6 bb bc d6 11 b5 c4 31 63 dd 59 a9 c0 2e 48 63 1e ca 65 44 f7 67 0b ae 00 9b 28 9d 8e 78 79 6f 45 c3 6d fd d0 5c af 1b 19 17 d8 c4 c3 9b d5 b4 00 4b 6d 5c 83 29 66 38 33 73 da 47 f9 ae 5a 8e ce 50 96 9f 9a 87 9e 0c ac e8 f3 7b 17 0b bc 94 b3 e3 fa 46 48 b2 af fb 32 00 ec 9e e9 e0 80 93 0a c7 49 0c d1 Data Ascii: +SwmY8AnTh3*nze~>Ixe=<\SW83LC@"\.fF=I\|,mu\|ag{!0vv&YC<&PPO#a11cY.HceDg(xyoEm\Km\)f83sGZP{FH2I
2024-01-17 17:07:42 UTC	16384	IN	Data Raw: 4d 23 46 c0 e2 3f 15 c9 18 51 3e 6d 4f 66 89 b8 78 1b b2 30 a8 38 7b 74 08 80 55 ad e0 83 1a 0e c5 41 c1 16 33 ba 17 28 6b 8c 9b cf 9c 7b 8e 4d fb 94 5f 1f 9f bd 97 77 e0 c0 d1 10 32 81 e7 a7 b7 44 4f ba 6d 2b cc 1c aa 38 7b 64 d0 73 47 d9 fd 99 71 00 8e 3b 56 02 48 9f 84 8a c3 b1 a0 11 e3 ec 4a f6 46 c2 e7 9a 37 7a bb 70 d9 5a 8e 62 6b fb 25 a6 95 44 34 93 b1 75 6e a0 5d 51 b9 32 8e 56 83 b5 db 16 5b 37 39 59 fc 61 69 53 aa 0d 07 f3 84 22 8b 7c cd 40 40 1d b4 91 44 fb 7c 50 2c 68 ec d4 a2 5a ed 68 07 b4 79 f0 92 49 1f 23 e2 5e ce d6 6e de 1b 10 92 49 b9 1e 73 33 8b ad 90 58 4a c4 47 2c b8 ae 4e 6c 4e b5 d9 0d eb 70 50 3e 37 c5 8e 60 9e 69 7e a5 d5 bf 67 c1 46 c3 8e e4 f8 d8 3b 70 c8 1b fd d7 29 71 4c 6f 2a c3 fb b8 3a 83 e0 a5 75 d2 c8 ee 2e 3f 8a e4 5c Data Ascii: M#F?Q>mOfx08{tUA3(k{M_w2DOm+8{dsGq;VHJF7zpZbk%D4un]Q2V[79YaiS"\|@@D\|P,hZhyI#^nIs3XJG,NlNpP>7`i~gF;p)qLo*:u.?\
2024-01-17 17:07:42 UTC	16384	IN	Data Raw: c2 6b e6 92 b6 33 e2 e4 f1 8b 00 12 d1 5e 1e 0b 25 8f 17 04 e8 f1 2c 76 8f ea a7 c5 19 8c 3e fa 14 d9 38 39 09 c7 e6 6a 38 f0 df e8 d0 c4 e3 27 d9 5f 92 6e 16 67 76 e4 a2 e8 cc 65 0e a7 cd 38 fd 4b b4 fc bc f8 59 a7 8e 46 e5 3b 57 11 a6 e2 81 c2 8c 44 99 20 e7 00 69 5e c5 77 d1 49 2c 92 ba e7 ba a5 61 a2 ce 9e 36 71 3a f9 2c 5b 1f 2c 12 38 db d4 7d 5b 47 03 d4 3a 6e 53 e5 c1 48 c4 4d 3d 40 4b 8f 12 15 d1 e6 60 98 e8 83 ae 8d 80 d7 c7 82 e8 ec cb a6 fe 95 65 7c 14 ec c3 01 33 7e a4 5b d8 a5 6e a8 e2 8c 30 87 3e 6b 7e ab 26 e0 3c 4e 94 f5 4d 87 0d 1e 48 79 8a 8e 60 2f ad 6e d7 82 fa a8 b0 f1 3f 29 af 26 47 8a 9e 01 3e 38 33 b1 50 08 85 1b 1b 9c 0e fa 81 54 d8 b0 ec 64 01 d9 5d 66 87 3e ea dd af 05 f5 31 61 83 c4 6d 79 ce 70 04 f0 09 b6 45 3e 24 36 36 d0 c1 Data Ascii: k3^%,v>89j8'_ngve8KYF;WD i^wI,a6q:,[,8}[G:nSHM=@K`e\|3~[n0>k~&<NMHy`/n?)&G>83PTd]f>1amypE>$66
2024-01-17 17:07:43 UTC	16384	IN	Data Raw: 41 fb a5 d3 e3 fd d0 5f 48 0e e3 57 d2 3f c2 d5 f4 8b b8 35 1e 52 93 c1 1e 52 9b f8 7d 17 d2 58 8e 23 d1 7d 25 88 e2 3d 11 e5 1c 40 e1 e8 be 92 9f f8 7d 17 d2 53 70 6f a2 fa 4a 4e e3 3d 17 d2 27 f7 4c 5f 48 37 f7 0c 5d 3a 1d f8 71 ea 86 33 09 fb 97 7a ae 91 81 3f bc 0b fd 89 ff 00 d3 91 e6 10 8a 2c ba 47 33 2b a6 f4 d2 4e 20 f0 b1 49 87 64 95 2d d1 c9 cd 2c 75 08 f6 4e df 64 0f 60 fb b9 3b 6f fe 63 ee 39 37 ee 51 7c 7e 7e f7 93 3e fd 0f c7 e5 ec d5 1e 71 cc 79 9e d6 b8 51 c0 11 c0 a9 f9 1f 0c fd 59 56 1f 0d 8a 7e 4e c4 c1 ba e1 c4 2a 2c 3f 26 cf 88 3d d1 c4 8f 92 97 92 e1 85 8d 71 71 71 b8 78 04 62 15 35 76 8a 91 8d d5 55 55 e6 a2 d1 55 57 9a a8 57 9e 88 10 b3 4a 15 a5 78 f3 0e 6a 55 c1 04 dd 8a 4f cb e6 8e d4 4d a2 a5 5c eb c9 4c 78 77 9f 36 07 1b b2 39 Data Ascii: A_HW?5RR}X#}%=@}SpoJN='L_H7]:q3z?,G3+N Id-,uNd`;oc97Q\|~~>qyQYV~N*,?&=qqqxb5vUUUWWJxjUOM\Lxw69
2024-01-17 17:07:43 UTC	16384	IN	Data Raw: e9 34 62 f8 b9 6b 70 62 83 41 c5 e2 59 58 ea 22 56 61 7b 10 da 2e da 50 e6 91 98 93 5a 02 cd 7e 11 1c f7 9d 5c 03 96 f4 94 2e b5 02 36 56 b7 e3 13 75 f0 a3 1a 94 eb 5f 1b 13 69 5e 2c 74 96 52 90 10 fe 30 0d ab 65 c0 6d 13 4c 31 9b d1 9a 16 9f 93 ae 83 e4 7b fe ff 00 9a 21 8f 56 32 4d ee 1c e2 7b cf 31 52 dc 4d e0 e2 18 64 b1 59 da 99 59 e5 68 de 74 7a 11 1d 85 1b e9 1e b2 cf 49 fd 44 7b ef 5e a5 b6 a0 ec cd 99 85 fd 74 86 e6 8e 6d d0 d4 30 dc 50 d4 ff 00 69 6d 70 0b a2 9c f7 95 6a 17 65 00 0f 2c bf d1 95 8e 97 7f a4 06 bd a0 6f 30 d8 85 8a 86 3a 87 11 c0 f2 43 72 dd ea 60 1f 68 0c a6 a3 65 87 51 4f ac a0 63 65 b1 65 a3 c8 9a 35 a9 5b d5 42 4a 96 b6 0e 90 ba 26 bf ab 39 5b fb f8 f3 9d 20 b8 37 c4 0e cd 74 62 15 19 fa 12 fe ac c3 8d b5 e5 d5 5d a7 ac d7 e0 Data Ascii: 4bkpbAYX"Va{.PZ~\.6Vu_i^,tR0emL1{!V2M{1RMdYYhtzID{^tm0Pimpje,o0:Cr`heQOcee5[BJ&9[ 7tb]
2024-01-17 17:07:43 UTC	16384	IN	Data Raw: 76 62 19 28 2f 7b 2d cc ac 37 bb 8e d3 9f 7b 9e 7f 23 df f7 fc dd 4f 53 4e 96 af 14 74 02 67 9b a5 44 02 d6 71 08 51 bb 6b 2c a6 98 a8 b8 60 ef 2d 2d 49 6c cb ec 62 36 1a 97 9e f2 a4 a2 dd 5f 66 6b 18 28 8f 33 77 2e d7 9d 7e a2 8e b8 01 62 58 a6 5d f2 95 7f 94 c3 47 86 23 61 6e 3f cf 8c 52 e9 ea 10 82 a7 53 9f 90 28 d8 cf ac e3 7f 30 75 a8 33 d0 52 88 7d c8 d2 2a 05 a8 ec 43 0d b3 35 70 a1 8c f9 66 19 78 8c 7a d7 47 d1 6c 97 35 3a e4 74 bf 81 db a5 a1 8c 58 66 1a 91 a3 05 3f 28 97 f0 1a ff 00 25 7c 70 f0 82 83 d1 72 fa a5 03 01 6c 74 f7 9f 5f e6 34 c1 87 00 01 36 d0 cb 6b ca a5 9b 76 98 07 95 bc 4c ea 95 c6 66 77 22 a9 61 1c b4 cd 26 1c 42 32 32 fa 4f 18 62 08 a3 00 00 97 3a 80 9e 93 b3 84 dc 6a 2e 63 5b c7 bf 42 06 84 2e 7a 74 d1 30 8b 5f 9c a3 56 22 a5 Data Ascii: vb(/{-7{#OSNtgDqQk,`--Ilb6_fk(3w.~bX]G#an?RS(0u3R}*C5pfxzGl5:tXf?(%\|prlt_46kvLfw"a&B22Ob:j.c[B.zt0_V"
2024-01-17 17:07:43 UTC	16384	IN	Data Raw: d6 7d 50 e9 29 79 77 22 fb 47 78 79 19 88 65 25 65 fa 23 46 20 58 10 6c 91 53 89 51 66 ac c1 f2 8a f2 88 0c be 83 78 10 cb 01 51 c3 68 03 03 4d a2 b3 75 0a b9 f6 88 d5 97 72 15 58 5e 51 71 84 c1 0d ea 62 fd 36 1b ca 1c 69 c4 57 ce 80 5f e0 22 b1 a3 31 df 43 e1 fc e5 04 58 68 42 d9 89 63 21 16 83 6e a0 f9 af a1 34 fc 20 af 80 34 dc 01 76 ba c3 3d 6f e0 5e ab e0 65 86 6d c1 ae f2 a2 63 22 b7 94 45 31 4f 7a 4b 13 6d 31 71 cd 46 91 76 ed 9e 50 86 09 b9 05 bb 66 ff 00 88 ea 7b 5e 31 bc d5 e8 4a 7e 13 e1 75 f8 0d 4f 8b da 39 f9 1e ff 00 bf e6 fb 3e f8 ac 4b 75 51 ac 82 56 03 70 22 dd d8 1a 66 8e 87 07 ee d6 33 0c ef f8 58 07 d3 bb 7d 25 d7 5a 52 b8 cb 31 2e df ac e1 d6 3a 46 84 38 cc 11 8a 28 cc 32 90 69 99 52 cc 14 8c ec 34 e2 b7 20 84 47 33 bc 04 ee 48 81 b9 Data Ascii: }P)yw"Gxye%e#F XlSQfxQhMurX^Qqb6iW_"1CXhBc!n4 4v=o^emc"E1OzKm1qFvPf{^1J~uO9>KuQVp"f3X}%ZR1.:F8(2iR4 G3H
2024-01-17 17:07:43 UTC	16384	IN	Data Raw: 45 f7 53 af d3 7e d6 db 7d 70 80 46 13 10 8d 99 6a 2c e7 3d 27 51 74 e7 a0 34 89 1b fd e2 36 ab 95 61 b9 d2 6d f4 65 f7 f0 82 89 1c 52 59 da 1f 6e 75 45 3e 83 32 9c 35 c4 06 e0 eb 30 bd e0 c1 61 fc c2 fd c4 fa 2a 69 03 78 ce 7e 92 8b c8 4a a2 82 3a ed 9a 76 c1 49 4c d3 88 88 27 46 af 4e 00 86 16 c9 6c 56 7c c5 10 68 61 ef 0b e0 07 37 ba 44 68 ab 9f b5 2c 1f 38 99 66 4b 48 d6 b8 cf 60 11 aa 5a 84 d5 2a fb 4d 45 63 97 45 b2 01 a6 2b f5 26 01 9e d6 23 f2 42 e7 d6 fa 33 2b 60 5a 35 44 0b 85 d2 32 a6 a0 2e 50 26 8a 8b 55 95 73 2f 0a 83 a3 10 8b 03 c9 0e 4d a3 30 a6 08 35 f3 f4 75 0d 1d 2a c6 90 bd 59 3f 2e ff 00 73 f2 2f f7 05 86 b4 0a 0f 8e eb c3 63 e7 bb 1d ae 0d 6e 00 b6 19 c8 28 c3 81 1d 48 78 c0 0e 0f f0 ce a1 d3 54 0a 85 4e 1f 25 74 c7 e3 d2 9e a9 01 c1 Data Ascii: ES~}pFj,='Qt46ameRYnuE>250aix~J:vIL'FNlV\|ha7Dh,8fKH`ZMEcE+&#B3+`Z5D2.P&Us/M05u*Y?.s/cn(HxTN%t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
378	192.168.2.16	50209	13.107.246.40	443	6640	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:42 UTC	678	OUT	GET /shared/cms/lrs1c69a1j/section-images/007727067ab54281b51ab6f7f6fa82b6.jpg HTTP/1.1 Host: edgestatic.azureedge.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:42 UTC	656	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:42 GMT Content-Type: image/jpeg Content-Length: 145926 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable ETag: W/"23a06-18c5b55efc9" Last-Modified: Tue, 12 Dec 2023 00:03:27 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Origin-Agent-Cluster: ?1 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 x-azure-ref: 20240117T170742Z-xruyp6d1g90y59pp506zgpbfhg000000009g000000000vnt X-Cache: TCP_MISS Accept-Ranges: bytes
2024-01-17 17:07:42 UTC	15728	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 01 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 ff c2 00 11 08 04 f0 07 80 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 03 01 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff da 00 08 01 01 00 00 00 00 fe 9a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 6a 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF""$$6&&6>424>LDDL_Z_\|\|""$$6&&6>424>LDDL_Z_\|\|"j
2024-01-17 17:07:42 UTC	16384	IN	Data Raw: e8 9c 5e 24 00 00 1c be cc 75 f9 39 1d df cd 73 ed d1 97 26 b9 40 00 00 00 2c 05 45 00 00 0e bf 4f be d6 e7 14 e6 38 fc 58 00 00 39 7d 88 09 40 00 00 00 00 00 2a 52 2a 28 00 00 8a 97 8f c6 00 00 03 97 d7 81 01 40 00 04 a0 00 00 50 00 00 58 00 4a 8e 3f 1e 00 00 0e 4f 5d 40 04 50 94 00 00 00 00 00 00 00 00 00 e3 f2 00 00 00 e4 f5 80 00 c6 40 02 c0 00 05 00 00 00 00 35 b0 00 e3 f2 5f 23 e5 fa b0 00 03 93 d5 00 03 cd f5 40 00 00 00 00 00 00 0d e0 58 ee 7a 20 00 c7 94 c7 0f 64 00 00 e4 f5 00 00 f3 9d 60 00 00 00 00 00 00 06 fd 4f 97 e3 72 77 fa bd 6e df a1 a8 00 c7 96 00 00 07 27 a6 94 28 1e 77 ac 00 00 00 00 00 00 00 d7 ad f3 5d 53 bb c5 d7 ed fa 00 00 c7 97 00 00 06 fd 28 01 2b e3 70 00 00 00 00 00 00 00 00 1d 9f ae 00 18 f3 40 00 00 df a3 00 00 85 04 50 00 Data Ascii: ^$u9s&@,EO8X9}@R(@PXJ?O]@P@5_#@Xz d`Orwn'(w]S(+p@P
2024-01-17 17:07:42 UTC	16384	IN	Data Raw: d4 ee 53 53 b9 6d 4e e5 35 3b 96 d4 ee 53 53 b9 4d 4e e5 b5 3b 94 d4 ee 53 53 b9 4d 4e e5 b5 3b 96 d4 ee 53 53 b9 4d 4e e5 35 3b 94 d4 ee 53 53 b9 4d 4e e5 35 3b 94 d4 ee 5b 53 b9 6d 4e e5 b5 3b 96 d4 ee 5b 53 b9 6d 4e e5 b5 3b 96 d4 ee 5b 53 b9 6d 4e e5 b5 3b 96 d4 ee 5b 53 b9 6d 4e e5 b5 3b 96 d4 ee 5b 53 b9 6d 4e e5 b5 3b 96 d4 ee 5b 53 b9 6d 4e e5 b5 3b 96 d4 ee 5b 53 b9 6d 4e e5 b5 3b 96 d4 ee 5b 53 b9 6d 4e e5 b5 39 cf 60 d5 8b dc 07 67 7d 9e 27 87 ee 17 4b 0b e3 6f f3 d9 df 67 7f 87 ee 17 4b 0b e3 6f f3 62 34 56 87 88 f0 18 0e e6 9d ea 3f fd 5e 8d f4 4e 8b ad 0e aa 4b 1d 29 b7 71 e3 d8 8d 11 db 04 0a ce e3 ee 8c ec 74 0f f0 fd c2 e9 61 fc 6d fe 69 b9 31 da 76 d3 41 d9 72 81 ca 67 d1 35 b1 f4 a0 d1 21 36 ff 00 1d 87 15 9a 3b dd 08 4d df fe de a1 36 Data Ascii: SSmN5;SSMN;SSMN;SSMN5;SSMN5;[SmN;[SmN;[SmN;[SmN;[SmN;[SmN;[SmN;[SmN9`g}'KogKob4V?^NK)qtami1vArg5!6;M6
2024-01-17 17:07:42 UTC	16384	IN	Data Raw: 8b 0a bb 41 9b 6f 91 08 42 d2 1b 11 90 c0 03 f0 cf 82 88 c7 69 0e 97 de 7f 82 a0 43 0d ad 00 b9 cd 33 06 b4 91 8b 11 ef 3b dc 67 6b 47 61 6b c6 89 b6 37 6d 1a b3 f0 4d f4 18 8e 88 ca f5 f4 ab f8 7e 19 a3 5e 0e a9 b5 1b 0b d5 1b f7 e2 a1 34 b9 f0 b4 7a b1 0c ef ad 39 4f 05 3d 1e 0c 2a bf 76 5c 67 e2 98 e8 30 58 e8 53 30 ee 06 7c 14 3d 4b e1 c2 83 50 3c 82 e9 ba 7b ad 6a 63 43 89 29 d5 33 51 20 b2 3b 5b fe a0 fa 23 a8 6c 20 25 56 2d 79 fc 94 2d 66 bb d1 86 b7 7c eb 5d 3c 64 8e a5 ec 23 d6 8b 5c 94 f6 7a 35 51 7c 1a df 3a cb 47 70 e8 f4 6a ae 3e f4 fe 89 f0 74 06 c1 78 db 7b be 8c ff 00 fb 6d e7 44 66 8f 2d ce df 96 09 c7 43 6e 8d 2b 83 b7 e5 be 4a 0b d9 0c 46 81 5c b0 49 a6 b4 ae cd 43 10 df 0d f0 66 c2 fa e0 03 29 14 75 fa 34 51 0c 0d 53 64 02 60 1a 40 64 Data Ascii: AoBiC3;gkGak7mM~^4z9O=*v\g0XS0\|=KP<{jcC)3Q ;[#l %V-y-f\|]<d#\z5Q\|:Gpj>tx{mDf-Cn+JF\ICf)u4QSd`@d
2024-01-17 17:07:42 UTC	16384	IN	Data Raw: 1b ad 90 c3 20 fc 22 b2 4e a2 2f 61 e5 27 21 1c b2 de 47 f0 13 64 16 51 d8 d3 38 18 88 bb eb 92 0a 10 69 74 65 72 57 24 17 4a 0b e7 43 b4 5d 0f 0d 8d 72 26 d0 a9 ee 97 b1 9e 8c aa 36 0f 98 e9 21 8e 83 3d 63 30 7c c5 5a 3c 0a 9e 93 b9 92 f7 d1 e4 76 06 ef 41 79 17 91 05 e4 76 33 3d 07 bd 69 34 bd c7 7b 19 5c 8a 9f 2d 17 89 10 cf 43 57 82 f8 2b f6 32 8b 5b a1 51 9e c5 7c 15 1e 43 9d 05 70 55 a3 1c 18 ee 5e e3 ec d1 1b af fd bf 6f 93 b9 34 28 be 44 27 06 4a 6f c8 8f 72 91 ba 91 72 4e e6 57 42 0f 72 be 4a ec 42 8c 94 ac c9 3b 0c f0 53 1c 0e 70 60 8e 34 65 b3 23 46 44 d9 b9 0f 4e 78 d5 0f 73 0f a9 18 e8 bc 8d a7 5d 34 61 f4 23 47 81 e4 64 64 c3 4d 0e c6 8f 23 3c 95 3a 94 97 63 6d c5 e4 6d 7b 98 7b 88 89 76 7a 63 e0 ad 72 49 1d 04 15 f7 2c 6c 65 0d 9b 36 6e dc Data Ascii: "N/a'!GdQ8iterW$JC]r&6!=c0\|Z<vAyv3=i4{\-CW+2[Q\|CpU^o4(D'JorrNWBrJB;Sp`4e#FDNxs]4a#GddM#<:cmm{{vzcrI,le6n
2024-01-17 17:07:42 UTC	16384	IN	Data Raw: 21 08 42 10 84 21 08 42 10 84 26 b3 58 42 10 84 21 08 42 13 58 42 10 84 21 08 7f 6d d3 f4 ef de 84 88 42 10 84 22 26 90 84 44 21 08 42 10 84 21 08 42 10 84 21 08 42 13 58 4d 21 08 42 13 48 4d 21 08 44 42 10 84 21 08 34 42 10 84 21 08 42 10 84 21 11 08 42 10 84 21 08 42 0d 10 84 21 09 a4 21 08 42 13 44 d2 10 84 21 08 35 a4 26 90 9a 42 13 59 a4 f5 42 10 84 21 34 8b ad 66 93 48 42 13 58 42 11 10 9a 44 42 10 8b d1 08 4f 4c d2 10 48 9a 4f 52 7f 47 8f e9 df bb 90 84 d2 13 48 42 69 08 42 10 84 21 35 84 21 08 42 10 84 21 08 42 6b 09 a4 21 08 42 10 84 21 08 42 10 9a 42 6b 08 42 10 84 21 08 42 6b 08 42 6b 20 d1 09 ac 21 08 42 10 84 21 08 4d 48 4d 10 84 21 08 34 4d 21 09 e8 84 21 08 42 10 84 21 08 41 a2 10 84 27 a2 10 84 21 08 42 10 84 21 08 4d 21 09 ac d6 7a 21 08 Data Ascii: !B!B&XB!BXB!mB"&D!B!B!BXM!BHM!DB!4B!B!B!B!!BD!5&BYB!4fHBXBDBOLHORGHBiB!5!B!Bk!B!BBkB!BkBk !B!MHM!4M!!B!A'!B!M!z!
2024-01-17 17:07:42 UTC	16384	IN	Data Raw: 54 7a ac 46 2c c9 b1 2b 61 ab c0 84 55 6e f9 1b 78 0d d1 20 99 c2 c6 e2 4d 70 83 4a a0 4d b7 91 32 a3 6b 10 c6 f9 c3 3e 97 f4 e9 ca aa e0 70 d9 0b ff 00 03 dd 55 9f 87 63 33 b0 11 f8 24 09 02 55 36 36 98 e2 ad d8 ac 6c e3 13 17 1e 24 4f 3a aa be 10 77 26 37 35 1e f3 92 02 db b3 24 bd 9d 34 c6 e9 65 5c 7c 09 75 4d c1 7b 36 d8 9b a2 36 ab 9e c7 db b9 b9 8d 79 6a e6 21 85 ad a8 90 4d 4d fe 61 0b b2 fe 01 5f 41 34 a9 7d 1a 61 68 8d e2 6c 94 5b 15 5a 6c c3 dd b0 8b 98 07 98 ca a7 5c 1c da 28 ad 4e 25 c4 e8 84 b0 1e d2 e8 66 0a 89 74 93 05 6c 32 25 f0 8c 5b 04 d0 9a e8 7f e0 0c 4c ba 95 94 a5 f5 d2 e9 4a 5d 17 5a 5d 6f ad 0f 68 38 bc 90 90 89 a6 f0 f2 42 60 74 71 3f 71 a8 cd aa 53 f9 e7 d1 ec 66 97 6c 72 d9 68 cb d6 32 cb 02 b0 40 dd e8 2a 52 94 af d0 29 4a 52 Data Ascii: TzF,+aUnx MpJM2k>pUc3$U66l$O:w&75$4e\\|uM{66yj!MMa_A4}ahl[Zl\(N%ftl2%[LJ]Z]oh8B`tq?qSflrh2@*R)JR
2024-01-17 17:07:42 UTC	16384	IN	Data Raw: 7c 05 05 af 66 9a 12 e2 d2 19 f1 16 3d cc 5d 4f b4 69 2f 55 9b 42 65 8b 2a 5e 6e c1 16 d1 b3 0f 3e 45 c0 ae a7 a3 f1 26 97 76 63 e6 10 93 a3 23 dd 46 84 c6 04 d1 cb 73 c7 d6 51 4d 44 3c 18 87 bb 1a 33 f0 7f 4b d6 8c 60 de 54 4b 37 b0 24 b8 69 57 43 8a 7e fc 6e 2b 04 cb 65 12 54 68 9d 33 74 db b6 1b 95 5b c3 28 8e 7e 50 9f ca 2e 38 9f 48 22 71 a4 f0 c5 b2 88 5d ec cb d7 12 9b 89 84 92 42 ea 35 91 34 d2 e8 e1 8d 12 cc a0 30 37 ef 3e 0d 98 ac ca 3d 78 66 d5 7f 69 46 51 56 0d e3 e7 1c bc 21 39 17 91 35 73 5e 0c e0 d9 31 ae 96 ad b5 9b 2d 68 e4 46 d7 63 2a 74 fb b9 14 ed 6c b6 a1 99 63 72 e9 f4 c4 2b 40 b7 99 a4 e5 02 57 93 a1 b8 51 c5 cf 63 7c 30 d9 ee 07 2c bc 62 9d 48 fb 4c 79 aa 09 4c 10 9a a4 c8 4e 1a f7 43 1b 7f 65 ab ca 11 45 cd 8b 16 a9 6b b7 fe 64 b7 Data Ascii: \|f=]Oi/UBe^n>E&vc#FsQMD<3K`TK7$iWC~n+eTh3t[(~P.8H"q]B5407>=xfiFQV!95s^1-hFctlcr+@WQc\|0,bHLyLNCeEkd
2024-01-17 17:07:42 UTC	15510	IN	Data Raw: d1 d0 65 cc 6a ff 00 0c 71 7f 5e 5f f2 f4 48 8a 62 72 3d 02 c3 d1 f0 e8 47 4a fe 42 ed 33 af 2f e8 3b da 67 23 91 4b a2 74 aa 1e d7 a3 91 c8 89 2a 0f 10 00 1c 00 e0 38 80 00 03 9c ce bc b8 1c 06 e3 88 1c c0 e8 69 dc c7 a2 97 42 a3 91 f0 f4 73 5c d4 6c b6 81 f1 00 6c 06 c3 a9 31 3a d2 ff 00 94 88 c5 94 a8 fa 95 5c af 87 43 d1 e8 a8 c9 69 c4 7d 87 56 67 5e 54 08 1d 21 f5 1c 9a b2 9c d5 2b 0a ab 0e 87 23 91 5a d6 a7 c8 73 02 00 00 6c 37 1b 0e 53 3a f2 b9 0f 88 ec 86 c2 2b 5e 8f 47 ac 2c 39 5c 8a d5 6a 35 37 00 6e 3a 03 70 20 00 04 00 26 27 5a 57 f2 d1 51 43 1e b3 6e 2b d5 cb 02 13 60 38 a6 e3 61 00 00 00 80 00 00 0e 60 09 89 d6 95 f3 5e e8 1b 24 01 51 1b 01 c4 6c 06 e0 00 04 01 c0 00 20 40 10 07 01 35 3a d2 be 03 61 f2 10 7e 83 89 e0 76 1c 00 80 38 81 03 80 Data Ascii: ejq^_Hbr=GJB3/;g#Kt*8iBs\ll1:\Ci}Vg^T!+#Zsl7S:+^G,9\j57n:p &'ZWQCn+`8a`^$Ql @5:a~v8

Session ID	Source IP	Source Port	Destination IP	Destination Port
379	192.168.2.16	50210	23.49.251.10	443

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:42 UTC	532	OUT	GET /bundles/v1/edgeChromium/latest/web-components_native-ad-video_dist_index_js.1fb7ba016bba38edad90.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:42 UTC	1186	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: ufc2sxmoBiOY3ZfeEZbfLA== Last-Modified: Sat, 13 Jan 2024 01:22:14 GMT ETag: 0x8DC13D6133F73A0 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: a05be4a7-901e-010a-53bf-453b77000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Wed, 17 Jan 2024 17:07:42 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Akamai-Request-BC: [a=23.218.242.10,b=89903744,c=g,n=US_NJ_EDISON,o=20940] Server-Timing: clientrtt; dur=88, clienttt; dur=1, origin; dur=0 , cdntime; dur=1 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 23.218.242.10 Akamai-Request-ID: 55bd280 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://ntp.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0af2da17.1705511262.55bd280 Vary: Origin
2024-01-17 17:07:42 UTC	15198	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 77 65 62 2d 63 6f 6d 70 6f 6e 65 6e 74 73 5f 6e 61 74 69 76 65 2d 61 64 2d 76 69 64 65 6f 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 2e 31 66 62 37 62 61 30 31 36 62 62 61 33 38 65 64 61 64 39 30 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 6e 65 77 73 5f 6d 73 6e 65 77 73 5f 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 77 65 62 2d 63 6f 6d Data Ascii: 00006000/! For license information please see web-components_native-ad-video_dist_index_js.1fb7ba016bba38edad90.js.LICENSE.txt /"use strict";(self.webpackChunk_msnews_msnews_experiences=self.webpackChunk_msnews_msnews_experiences\|\|[]).push([["web-com
2024-01-17 17:07:42 UTC	9390	IN	Data Raw: 6f 67 6f 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6c 3f 76 6f 69 64 20 30 3a 6c 2e 61 6c 74 29 7c 7c 22 22 29 2c 6f 26 26 28 6f 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 74 2e 6e 61 6d 65 29 7d 72 65 74 75 72 6e 20 73 2e 74 65 78 74 43 6f 6e 74 65 6e 74 7d 64 69 73 70 6f 73 65 28 29 7b 74 68 69 73 2e 63 6f 6e 74 65 6e 74 45 6c 5f 3d 76 6f 69 64 20 30 2c 73 75 70 65 72 2e 64 69 73 70 6f 73 65 28 29 7d 7d 29 2c 4d 2e 5a 2e 72 65 67 69 73 74 65 72 43 6f 6d 70 6f 6e 65 6e 74 28 22 56 6f 6c 75 6d 65 4c 61 62 65 6c 22 2c 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 48 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 74 29 7b 73 75 70 65 72 28 65 2c 74 29 2c 74 68 69 73 2e 6f 6e 28 65 2c 5b 22 6c 6f 61 64 73 74 61 72 74 22 2c 22 76 6f 6c 75 6d 65 63 68 61 6e 67 65 22 5d 2c 74 Data Ascii: ogo)\|\|void 0===l?void 0:l.alt)\|\|""),o&&(o.textContent=t.name)}return s.textContent}dispose(){this.contentEl_=void 0,super.dispose()}}),M.Z.registerComponent("VolumeLabel",class extends H{constructor(e,t){super(e,t),this.on(e,["loadstart","volumechange"],t
2024-01-17 17:07:42 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 73 74 20 6f 3d 74 5b 65 5d 3b 28 21 69 5b 6f 2e 68 65 69 67 68 74 5d 7c 7c 69 5b 6f 2e 68 65 69 67 68 74 5d 2e 62 69 74 72 61 74 65 3c 6f 2e 62 69 74 72 61 74 65 29 26 26 28 69 5b 6f 2e 68 65 69 67 68 74 5d 3d 6f 29 7d 66 6f 72 28 63 6f 6e 73 74 20 74 20 69 6e 20 69 29 7b 63 6f 6e 73 74 20 73 3d 69 5b 74 5d 2c 6e 3d 6e 65 77 20 4a 28 65 2c 7b 6c 61 62 65 6c 3a 73 2e 68 65 69 67 68 74 2b 22 70 22 2c 68 65 69 67 68 74 3a 73 2e 68 65 69 67 68 74 2c 62 69 74 72 61 74 65 3a 73 2e 62 69 74 72 61 74 65 7d 29 3b 6f 2e 70 75 73 68 28 6e 29 7d 6f 2e 73 6f 72 74 28 28 28 65 2c 74 29 3d 3e 74 2e 6d 65 6e 75 49 74 65 6d 4f 70 74 69 6f 6e 73 2e 68 65 69 67 68 74 2d 65 2e 6d 65 6e 75 49 74 65 6d 4f 70 74 69 6f 6e 73 2e 68 65 69 67 68 74 29 Data Ascii: 00006000st o=t[e];(!i[o.height]\|\|i[o.height].bitrate<o.bitrate)&&(i[o.height]=o)}for(const t in i){const s=i[t],n=new J(e,{label:s.height+"p",height:s.height,bitrate:s.bitrate});o.push(n)}o.sort(((e,t)=>t.menuItemOptions.height-e.menuItemOptions.height)
2024-01-17 17:07:42 UTC	8204	IN	Data Raw: 65 74 75 72 6e 20 6f 7d 28 74 2c 74 68 69 73 2e 6c 6f 67 29 29 3b 69 66 28 74 68 69 73 2e 6c 6f 67 28 22 72 65 71 75 65 73 74 20 6f 70 74 69 6f 6e 73 20 69 73 22 2c 6f 29 2c 77 69 6e 64 6f 77 2e 58 61 6e 64 72 41 64 52 65 71 75 65 73 74 53 65 74 74 69 6e 67 73 29 7b 63 6f 6e 73 74 20 65 3d 7b 2e 2e 2e 6f 2c 2e 2e 2e 77 69 6e 64 6f 77 2e 58 61 6e 64 72 41 64 52 65 71 75 65 73 74 53 65 74 74 69 6e 67 73 7d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 6f 67 28 22 6f 76 65 72 72 69 64 64 65 6e 20 72 65 71 75 65 73 74 20 6f 70 74 69 6f 6e 73 22 2c 65 29 2c 65 7d 72 65 74 75 72 6e 20 6f 7d 2c 74 68 69 73 2e 69 6e 69 74 3d 61 73 79 6e 63 28 29 3d 3e 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 68 69 73 2e 78 61 6e 64 72 41 64 50 6c 61 79 65 72 49 6e 73 74 61 6e 63 65 Data Ascii: eturn o}(t,this.log));if(this.log("request options is",o),window.XandrAdRequestSettings){const e={...o,...window.XandrAdRequestSettings};return this.log("overridden request options",e),e}return o},this.init=async()=>{if(void 0!==this.xandrAdPlayerInstance
2024-01-17 17:07:42 UTC	1108	IN	Data Raw: 30 30 30 30 30 34 34 38 0d 0a 76 6f 69 64 20 30 3d 3d 3d 6c 3f 76 6f 69 64 20 30 3a 6c 2e 67 65 74 43 68 69 6c 64 28 65 29 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 28 73 3d 72 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 73 7c 7c 6e 75 6c 6c 3d 3d 3d 28 6e 3d 73 2e 67 65 74 43 68 69 6c 64 28 74 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 65 6c 28 29 7d 63 6f 6e 73 74 20 66 74 3d 27 3c 73 76 67 20 77 69 64 74 68 3d 22 32 32 22 20 68 65 69 67 68 74 3d 22 32 32 22 20 76 69 65 77 42 6f 78 3d 22 2d 34 20 2d 32 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 30 2e 30 31 32 34 20 30 2e 32 35 Data Ascii: 00000448void 0===l?void 0:l.getChild(e)}return null===(s=r)\|\|void 0===s\|\|null===(n=s.getChild(t))\|\|void 0===n?void 0:n.el()}const ft='<svg width="22" height="22" viewBox="-4 -2 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M10.0124 0.25
2024-01-17 17:07:42 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 37 2e 34 39 30 31 35 20 31 39 2e 34 31 38 32 20 37 2e 32 36 31 32 39 20 31 39 2e 31 35 39 32 20 37 2e 32 32 36 34 33 20 31 38 2e 38 34 34 34 4c 37 2e 30 35 37 36 20 31 37 2e 33 32 43 37 2e 30 30 38 30 32 20 31 36 2e 38 38 34 33 20 36 2e 37 35 34 35 39 20 31 36 2e 34 39 38 20 36 2e 33 37 34 36 37 20 31 36 2e 32 37 39 43 35 2e 39 39 34 37 35 20 31 36 2e 30 36 20 35 2e 35 33 33 34 35 20 31 36 2e 30 33 34 33 20 35 2e 31 33 32 34 34 20 31 36 2e 32 30 39 34 4c 33 2e 37 32 35 38 32 20 31 36 2e 38 32 35 36 43 33 2e 34 33 34 34 36 20 31 36 2e 39 35 33 33 20 33 2e 30 39 34 32 38 20 31 36 2e 38 38 33 33 20 32 2e 38 37 37 30 33 20 31 36 2e 36 35 30 39 43 31 2e 38 36 34 38 37 20 31 35 2e 35 36 38 35 20 31 2e 31 31 31 34 34 20 31 34 2e 32 Data Ascii: 000040007.49015 19.4182 7.26129 19.1592 7.22643 18.8444L7.0576 17.32C7.00802 16.8843 6.75459 16.498 6.37467 16.279C5.99475 16.06 5.53345 16.0343 5.13244 16.2094L3.72582 16.8256C3.43446 16.9533 3.09428 16.8833 2.87703 16.6509C1.86487 15.5685 1.11144 14.2
2024-01-17 17:07:42 UTC	12	IN	Data Raw: 6f 26 26 74 68 69 73 2e 70 6c 0d 0a Data Ascii: o&&this.pl
2024-01-17 17:07:42 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 61 79 65 72 26 26 74 26 26 74 68 69 73 2e 74 65 6c 65 6d 65 74 72 79 43 6f 6e 74 65 78 74 2e 76 6f 6c 75 6d 65 42 61 72 54 65 6c 65 6d 65 74 72 79 26 26 74 68 69 73 2e 70 6c 61 79 65 72 26 26 28 74 68 69 73 2e 74 65 6c 65 6d 65 74 72 79 43 6f 6e 74 65 78 74 2e 76 6f 6c 75 6d 65 42 61 72 54 65 6c 65 6d 65 74 72 79 2e 63 6f 6e 74 72 61 63 74 2e 6e 61 6d 65 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 31 30 30 2a 74 68 69 73 2e 70 6c 61 79 65 72 2e 76 6f 6c 75 6d 65 28 29 29 2e 74 6f 53 74 72 69 6e 67 28 29 2c 6f 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 74 22 2c 74 68 69 73 2e 74 65 6c 65 6d 65 74 72 79 43 6f 6e 74 65 78 74 2e 76 6f 6c 75 6d 65 42 61 72 54 65 6c 65 6d 65 74 72 79 2e 67 65 74 4d 65 74 61 64 61 74 61 54 Data Ascii: 00004000ayer&&t&&this.telemetryContext.volumeBarTelemetry&&this.player&&(this.telemetryContext.volumeBarTelemetry.contract.name=Math.round(100*this.player.volume()).toString(),o.setAttribute("data-t",this.telemetryContext.volumeBarTelemetry.getMetadataT
2024-01-17 17:07:42 UTC	12	IN	Data Raw: 2e 70 72 6f 67 72 65 73 73 69 0d 0a Data Ascii: .progressi
2024-01-17 17:07:42 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 76 65 4d 6f 64 65 26 26 74 68 69 73 2e 70 6c 61 79 65 72 2e 63 6f 6e 74 72 6f 6c 42 61 72 2e 65 6c 28 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 7d 6d 6f 76 65 56 6f 6c 75 6d 65 43 6f 6e 74 72 6f 6c 4f 75 74 4f 66 43 6f 6e 74 72 6f 6c 42 61 72 28 29 7b 69 66 28 21 74 68 69 73 2e 70 6c 61 79 65 72 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 65 3d 79 74 28 74 68 69 73 2e 70 6c 61 79 65 72 2c 61 74 2e 56 6f 6c 75 6d 65 50 61 6e 65 6c 29 3b 69 66 28 21 65 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 74 3d 74 68 69 73 2e 63 6f 6e 74 65 6e 74 56 69 64 65 6f 50 6c 61 79 65 72 50 72 6f 70 73 2e 70 6c 61 79 65 72 43 6f 6e 66 69 67 50 72 6f 70 73 3b 74 26 26 21 74 2e 70 72 6f 67 72 65 73 73 69 76 65 4d 6f 64 65 26 26 74 68 69 73 2e 70 Data Ascii: 00006000veMode&&this.player.controlBar.el().appendChild(e)}moveVolumeControlOutOfControlBar(){if(!this.player)return;const e=yt(this.player,at.VolumePanel);if(!e)return;const t=this.contentVideoPlayerProps.playerConfigProps;t&&!t.progressiveMode&&this.p

Session ID	Source IP	Source Port	Destination IP	Destination Port
380	192.168.2.16	50211	184.87.173.91	443

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:43 UTC	506	OUT	GET /tenant/amp/entityid/AA1cLbwq?w=168&h=168&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:43 UTC	546	IN	HTTP/1.1 200 OK Last-Modified: Tue, 09 Jan 2024 02:45:13 GMT Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA1cLbwq?w=168&h=168&q=60&m=6&f=jpg&u=t X-Source-Length: 822 X-Datacenter: eastap X-ActivityId: 52319ed6-e69d-4e42-b706-29a3813b36ab Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 4096 Cache-Control: public, max-age=78198 Expires: Thu, 18 Jan 2024 14:51:01 GMT Date: Wed, 17 Jan 2024 17:07:43 GMT Connection: close
2024-01-17 17:07:43 UTC	4096	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 a8 00 a8 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port
381	192.168.2.16	50212	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:43 UTC	678	OUT	GET /shared/cms/lrs1c69a1j/section-images/bcc5763b4a00425dbbc61ff5f745e67a.jpg HTTP/1.1 Host: edgestatic.azureedge.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:44 UTC	656	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:43 GMT Content-Type: image/jpeg Content-Length: 475535 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable ETag: W/"7418f-18c5b545c32" Last-Modified: Tue, 12 Dec 2023 00:01:44 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Origin-Agent-Cluster: ?1 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 x-azure-ref: 20240117T170743Z-sk6hk7my3p22d9249b6a2grus800000000d0000000000v0m X-Cache: TCP_MISS Accept-Ranges: bytes
2024-01-17 17:07:44 UTC	15728	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 00 40 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 09 60 a0 03 00 04 00 00 00 01 00 00 06 2f 00 00 00 00 ff ed 00 38 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 d4 1d 8c d9 8f 00 b2 04 e9 80 09 98 ec f8 42 7e ff c0 00 11 08 06 2f 09 60 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 Data Ascii: JFIFHH@ExifMM*i`/8Photoshop 3.08BIM8BIM%B~/`"}!1AQa"q2#BR$3br
2024-01-17 17:07:44 UTC	16384	IN	Data Raw: 67 8e 2c bf 65 4f d9 92 d9 3c 43 f1 77 c4 90 96 b3 8a 44 ce 9f a6 c4 59 91 ae af a6 2c 8a 15 02 48 c1 13 cc 90 f9 64 79 67 2a 18 03 f4 9a 8a e4 bc 07 6d e2 fb 3f 06 e9 b6 fe 3e 9e 2b ad 69 6d d3 ed b2 c0 31 13 4d 8f 9f 67 ca bf 2e 7a 7c a0 e2 ba da 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 ac bd 6e 2d 56 6d 26 e2 2d 0e 45 8a f1 a3 22 17 7f ba 1f b1 3c 1e 3f 03 5f 98 9f b3 1f ed cb e3 7b 2f 8a e7 f6 42 fd b5 ec a1 f0 f7 c4 c0 49 d2 ee ad 13 76 9d ad 5a 20 75 37 10 4a 8c e1 1c bc 4e 59 25 58 4e 19 30 99 24 00 0f d4 fa 28 07 3c 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 bf 30 bf 6a 6f db 6b e2 25 8f c5 68 ff 00 64 8f d8 cb 49 b6 f1 2f c5 29 a0 fb 55 e3 ea 2a c9 a5 e9 36 8d 84 13 5d 4b e6 46 cc c5 dc 10 90 ac ad 85 7c ae 71 9e 7f 4a fd 8b 7f 6d ef 1a 68 b1 6a df 18 Data Ascii: g,eO<CwDY,Hdygm?>+im1Mg.z\|((((n-Vm&-E"<?_{/BIvZ u7JNY%XN0$(<(((0jok%hdI/)U6]KF\|qJmhj
2024-01-17 17:07:44 UTC	16384	IN	Data Raw: 2a 1f f9 89 b7 fd f1 17 ff 00 11 5d e7 fc 29 dd 37 fe 82 ba 97 fe 04 c9 fe 34 7f c2 9d d3 4f 5d 57 52 ff 00 c0 99 3f c6 80 38 31 a8 fc 54 07 0d aa 1f fb e2 2f fe 22 90 6a 5f 15 3f 8b 54 3f f7 c4 5f fc 45 77 bf f0 a7 74 df fa 0a ea 5f f8 13 27 f8 d1 ff 00 0a 77 4d ff 00 a0 ae a5 ff 00 81 32 7f 8d 00 70 3f da 5f 15 7f e8 28 df f7 c4 5f fc 45 38 ea 5f 15 0e 00 d5 08 ff 00 80 45 ff 00 c6 eb bc ff 00 85 3b a6 ff 00 d0 57 52 ff 00 c0 99 3f c6 97 fe 14 f6 9b ff 00 41 5d 4b ff 00 02 64 ff 00 1a 00 e0 86 a5 f1 4c 1c ff 00 6a 36 3f dc 8b ff 00 88 a3 fb 4f e2 a1 07 fe 26 84 7a 7c 91 7f f1 15 de 7f c2 9d d3 47 4d 57 52 ff 00 c0 99 3f c6 97 fe 14 f6 9b ff 00 41 5d 4b ff 00 02 64 ff 00 1a 00 e0 0e a5 f1 57 3f f2 14 3f f7 c4 5f fc 45 3b fb 4b e2 a7 03 fb 51 bf ef 88 bf Data Ascii: *])74O]WR?81T/"j_?T?_Ewt_'wM2p?_(_E8_E;WR?A]KdLj6?O&z\|GMWR?A]KdW??_E;KQ
2024-01-17 17:07:44 UTC	16384	IN	Data Raw: 3c 79 2a 01 25 9c 26 39 3d 1c f4 35 f7 97 c6 5f db b7 c0 1f 06 3f 66 dd 37 f6 94 d7 34 eb b9 f4 bd 4a de de e1 20 88 21 94 2d c0 05 41 05 c0 c8 cf 3f 35 7e 1e 7f c1 79 7e 00 fc 25 f0 6d e7 85 bc 7f e1 6b 2b 5d 33 53 b8 70 ae 90 46 91 ef 0b 3c 60 1f 94 0f ef 1a f5 ef f8 28 29 c7 fc 12 37 c2 a4 7f d0 27 4b ff 00 d0 12 80 3e 8a f1 bf fc 17 57 f6 6c f0 e6 87 a1 df 78 63 49 d5 7c 41 7d ac 5b 45 70 d6 56 70 8f 32 dc ca 01 d9 23 48 e9 1e e5 27 07 6b 11 c7 5f 5f b6 ff 00 68 7f f8 28 07 c1 1f d9 97 e1 cd b7 8d be 27 4d 2d ad dd e4 09 34 1a 6a a1 7b 87 f3 33 b4 00 99 5c 9c 1e ac 2b f3 d3 fe 09 43 fb 08 7e cf 3a d7 ec ad e1 5f 89 1e 2c d1 a1 d5 35 5d 57 4f b2 bc 79 67 89 18 a3 4d 6f 1b 95 05 83 1c 02 4f a5 7c 1f fb 6e e9 f6 bf 18 7f e0 ab da 37 c2 6f 1f 13 1f 87 ec Data Ascii: <y*%&9=5_?f74J !-A?5~y~%mk+]3SpF<`()7'K>WlxcI\|A}[EpVp2#H'k__h('M-4j{3\+C~:_,5]WOygMoO\|n7o
2024-01-17 17:07:44 UTC	16384	IN	Data Raw: 86 1d 37 ff 00 02 a2 ff 00 e2 a8 15 d1 dd d1 5c 27 fc 2d 1f 86 9f f4 30 e9 bf f8 15 17 ff 00 15 47 fc 2d 1f 86 9f f4 30 e9 bf f8 15 17 ff 00 15 40 ce ee 8a e1 3f e1 68 fc 34 ff 00 a1 87 4d ff 00 c0 a8 bf f8 aa 3f e1 68 fc 34 ff 00 a1 87 4d ff 00 c0 a8 bf f8 aa 02 e7 77 45 70 9f f0 b4 7e 1a ff 00 d0 c1 a6 ff 00 e0 54 5f fc 55 1f f0 b4 7e 1a f6 f1 06 9b ff 00 81 51 7f f1 54 01 dd d1 5c 2f fc 2d 0f 86 df f4 30 69 df f8 15 17 ff 00 15 47 fc 2d 0f 86 c7 fe 66 0d 3b ff 00 02 a2 ff 00 e2 a8 15 d1 dd 51 5c 2f fc 2d 0f 86 df f4 30 69 df f8 15 17 ff 00 15 47 fc 2d 0f 86 df f4 30 69 df f8 15 17 ff 00 15 40 ee 77 54 57 0d ff 00 0b 3b e1 bf fd 0c 1a 77 fe 05 45 ff 00 c5 51 ff 00 0b 3b e1 bf fd 07 f4 ef fc 0a 8b ff 00 8a a0 57 47 73 45 70 df f0 b3 be 1b ff 00 d0 7f 4e Data Ascii: 7\'-0G-0@?h4M?h4MwEp~T_U~QT\/-0iG-f;Q\/-0iG-0i@wTW;wEQ;WGsEpN
2024-01-17 17:07:44 UTC	16384	IN	Data Raw: d3 6f 5a 96 3d 40 74 cf 02 bc b3 fb 52 6a 3f b5 a6 53 e9 4a da 58 d3 d9 b4 ee 7a 89 d5 23 57 39 3d 29 8d aa c4 5b 70 39 af 32 17 c1 f2 ee 4f 3d 68 4b b2 a7 83 4b d9 92 a3 ad cf 51 4d 5a 2d a4 e4 0c 52 0d 71 62 8c 12 c0 0f ad 79 5b 5c 49 9c fa d4 66 f1 db 0a 47 4a 14 6c 69 ca 7a bb 6b b1 38 dd b8 1a 67 fc 24 5b 1f 01 b8 c7 ad 79 67 da 25 e9 8f f3 f9 d3 92 63 bb 71 e0 d2 e4 0e 46 8f 56 ff 00 84 8b 70 e1 bf cf e7 4c 6d 7b 70 eb d2 bc e5 67 cf 4a 78 99 83 55 90 7a 1a eb d2 63 af f9 fc ea 51 e2 27 c8 00 d7 9e 8b 89 73 b8 1a b1 0c ad 9c d2 48 6a 27 a3 26 bb 33 48 0f a5 6f e9 da c4 d2 4a 02 d7 98 5b c8 cd 20 3e f5 d9 69 5c dc 29 5a 77 ee 34 99 f4 1f 87 cb c8 37 30 e7 8a f4 5b 2b 6f 33 93 5c 5f 83 ed 5e 64 02 41 9c 73 5e bf 67 66 c1 b6 ed ed 5c e7 3b 4d 6e 67 47 Data Ascii: oZ=@tRj?SJXz#W9=)[p92O=hKKQMZ-Rqby[\IfGJlizk8g$[yg%cqFVpLm{pgJxUzcQ'sHj'&3HoJ[ >i\)Zw470[+o3\_^dAs^gf\;MngG
2024-01-17 17:07:44 UTC	16384	IN	Data Raw: 4e 85 fb 2d 7c 29 72 22 87 5c 57 23 8c 05 15 a7 a5 fc 24 9b 77 cd 33 b7 fc 0d bf c6 bd 37 c3 7f 0e 7f b2 ee 03 ee 27 fe 04 7f c6 b1 8f 13 62 9f 53 a5 70 76 0e 3d 0c fb 6f d8 eb e1 ed e2 05 8f 50 2d ff 00 01 15 ef df 08 3e 0b 78 47 e1 10 91 b4 29 4c b2 38 6c e4 63 ef 10 4f f2 ae a7 42 d3 1e de 2c 8e de a6 bb 0b 18 14 4b 92 33 d6 94 f3 aa f5 17 2b 7a 1b 52 c8 30 b4 e4 a5 15 aa 2e 40 84 39 6c 75 a2 e4 95 4c f4 ad 08 d1 03 7c d5 9b 7c 41 ca fa 57 9e e3 73 d5 b9 cd 5e 8e 84 f7 aa 61 07 5a b9 76 80 e0 93 54 1a 46 8f b5 17 b6 85 c6 ec 8a 55 e7 22 aa 33 17 18 15 23 3c 8c 0f ad 40 37 a1 f9 aa 1b ba b0 da 6b 63 0e f0 32 29 dd d6 bc f7 51 39 b8 6d dc 73 5e 85 ab 48 40 c2 fa 57 9d 5f 9c cc 59 c5 62 9e a3 86 ba b3 1e e8 81 19 3e d5 c1 5d 64 b4 8c bd cd 76 b7 65 99 0e Data Ascii: N-\|)r"\W#$w37'bSpv=oP->xG)L8lcOB,K3+zR0.@9luL\|\|AWs^aZvTFU"3#<@7kc2)Q9ms^H@W_Yb>]dve
2024-01-17 17:07:44 UTC	16384	IN	Data Raw: a8 8a 40 e8 f8 cf 3d ab eb 18 3e 24 69 cb a7 0f 39 90 0c 7a e3 b5 79 34 eb 46 dc b2 3d 5c 4e 16 51 97 35 33 3a 3f 0f d9 c2 e2 df 18 e7 b5 7a 66 89 e1 c5 42 00 e5 72 0f 35 c4 69 da ae 91 aa bf da 96 41 8e b9 04 57 a9 d8 ea 96 48 12 38 1f 70 fa d5 d2 a6 9f 53 8b 15 56 a2 56 38 2f 8d be 23 b2 f0 27 c3 2d 63 5d 9d fc b5 b7 b3 99 b7 0e c7 61 c7 eb 5f e6 5f fb 6c fc 54 d5 fe 24 7e d1 fe 25 d6 b5 2b 86 9d 45 e4 89 11 6f ee 67 e9 ed 5f e8 15 ff 00 05 45 f1 7b f8 77 f6 34 f1 ae b3 0c de 4c a3 4f 71 1e 1b 1c 92 07 1c 8f 5a ff 00 33 af 12 6a f7 ba b6 b7 73 aa df 39 79 66 91 8b 12 49 24 93 f8 d7 e9 7c 0f 80 d6 75 9f a1 f9 4f 88 58 d7 cb 0a 37 f3 35 ed 64 57 00 f5 66 3c 57 e9 47 ec 69 fb 37 6a 3f 13 35 fb 7d 4e f6 1f f4 58 c9 62 4f 43 8f ff 00 5d 7c e5 fb 2d fe cf b7 Data Ascii: @=>$i9zy4F=\NQ53:?zfBr5iAWH8pSVV8/#'-c]a__lT$~%+Eog_E{w4LOqZ3js9yfI$\|uOX75dWf<WGi7j?5}NXbOC]\|-
2024-01-17 17:07:44 UTC	16384	IN	Data Raw: e7 5f 3b 8b 8d 34 ec 79 b5 b8 ca 14 25 cb 35 a9 ad 14 12 f0 08 f9 7d 69 65 66 07 8a d3 f1 ff 00 8e ae fc 1e 55 43 28 8e 46 c6 76 83 c6 7e 95 ed 3f 0f 3c 37 e1 cf 88 1a 70 be b7 f9 ce d2 4e 0f a7 e5 5e 7a c2 a9 3b 45 95 43 8e 70 d3 97 2b 4c f9 b6 eb 2c 76 8e 4d 57 8b d0 d7 bc 78 9b e1 05 dd a4 72 ea 9a 71 32 2a 93 f2 82 38 c6 7f c2 bc 12 68 ae 6d 27 68 a6 04 1f 7a 2a 53 95 35 63 ea f0 59 8d 2a ea f4 9d c2 e6 65 8d 94 d0 f3 2b ae 6a 85 c9 dc 41 1d aa 9d cd d9 8c 6d 15 9c a4 d2 bd cf 4a 4b b1 66 e6 e1 63 18 15 c3 ea ba 82 ae e1 ba 8d 57 53 90 02 17 a5 79 6e b9 aa 15 f9 89 ac 7e b2 d2 2e 10 b9 d8 9d 54 08 b3 9a e7 65 be 69 ae f7 67 81 5e 77 75 e2 62 13 66 ea ce 83 c4 48 18 b4 cf 80 3b d6 2b 12 cb 96 18 e7 7f 69 9f 16 f8 cb c3 ff 00 0e 27 9f c2 b0 f9 ee 51 f7 Data Ascii: _;4y%5}iefUC(Fv~?<7pN^z;ECp+L,vMWxrq28hm'hzS5cY*e+jAmJKfcWSyn~.Teig^wubfH;+i'Q
2024-01-17 17:07:44 UTC	16384	IN	Data Raw: e9 b3 d4 f0 ef 8c 56 79 42 b6 36 1f 02 9b 8c 7d 15 b5 f9 9f 8b 3f f0 5a 7f f9 21 16 3f f5 f9 1f fe 84 b5 fc ba d7 f5 15 ff 00 05 a7 ff 00 92 11 63 ff 00 5f 91 ff 00 e8 4b 5f cb ad 79 58 ff 00 e2 1f c6 5f 48 ef f9 29 a7 fe 18 fe a6 ff 00 85 fc 37 ab 78 bf c4 16 7e 1b d0 e1 69 ee af 65 58 62 45 ee ce 70 06 7b 73 5f d7 1f ec 2d fb 0a 78 3f f6 7e f0 fc 1e 29 d7 2d 56 6d 7a 5c 37 98 ed bc c7 f2 e3 8e 00 1d 4d 7e 53 7f c1 1e fe 04 da 78 d7 e2 4d e7 c4 6d 55 16 48 74 98 e3 78 c3 2e 71 20 9b 82 09 e3 a2 1a fe a1 95 55 54 2a 8c 01 5d 38 1a 0a dc ec fd 6f e8 e7 e1 bd 05 86 fe dc c5 c6 f2 93 f7 2f d1 2e be a0 00 03 02 b9 7f 10 f8 db c2 9e 15 80 dc 78 82 fe 1b 65 03 27 7b 8c f1 ed d6 be 2f fd bc bf 6b ad 2f f6 64 f8 65 2d c5 89 f3 75 8b c7 58 6d e3 57 55 20 b0 2c 58 Data Ascii: VyB6}?Z!?c_K_yX_H)7x~ieXbEp{s_-x?~)-Vmz\7M~SxMmUHtx.q UT*]8o/.xe'{/k/de-uXmWU ,X

Session ID	Source IP	Source Port	Destination IP	Destination Port
382	192.168.2.16	50213	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:43 UTC	678	OUT	GET /shared/cms/lrs1c69a1j/section-images/4133408e7272452bae43ed64ad95c7c7.jpg HTTP/1.1 Host: edgestatic.azureedge.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:43 UTC	681	IN	HTTP/1.1 200 OK Date: Wed, 17 Jan 2024 17:07:43 GMT Content-Type: image/jpeg Content-Length: 68105 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable ETag: W/"10a09-18c5b56dae3" Last-Modified: Tue, 12 Dec 2023 00:04:28 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Origin-Agent-Cluster: ?1 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 x-azure-ref: 20240117T170743Z-5v4hk7xnrx4uxd4v2yg2tpq7qn00000000yg000000000mex X-Cache: TCP_MISS x-fd-int-roxy-purgeid: 0 Accept-Ranges: bytes
2024-01-17 17:07:43 UTC	15703	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 00 40 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 04 65 a0 03 00 04 00 00 00 01 00 00 02 89 00 00 00 00 ff ed 00 38 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 d4 1d 8c d9 8f 00 b2 04 e9 80 09 98 ec f8 42 7e ff c0 00 11 08 02 89 04 65 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 Data Ascii: JFIFHH@ExifMM*ie8Photoshop 3.08BIM8BIM%B~e"}!1AQa"q2#BR$3br
2024-01-17 17:07:43 UTC	16384	IN	Data Raw: 0f a4 2b 86 d1 3e 27 fc 36 f1 37 8a f5 2f 01 f8 77 c4 1a 75 fe b7 a3 6d fb 7e 9f 6f 75 14 b7 56 bb ba 79 d0 ab 17 8f 3f ed 01 5f 9e 7f b1 cf fc 16 47 fe 09 fd fb 77 fc 4d 9b e0 e7 ec e5 e3 17 d4 fc 4b 15 ac 97 c2 c6 e2 ce 7b 77 92 da 12 aa f2 a1 74 da 55 4b af 70 79 e9 5f 1a fe c7 7f 0e 3f e0 95 5f 06 bf e0 a3 bf b4 07 c7 2f 82 3e 39 d4 35 0f 8a 36 d6 d7 77 7e 33 d3 2e 64 b9 7b 6d 2a 08 e4 69 6e 9a 35 68 c2 b7 ce 84 f0 ce 40 18 5e 28 03 fa 0f a2 bf 8c 7f 05 7f c1 ca 7f 0d ee ff 00 e0 ac fe 24 f0 ff 00 8f be 28 e9 f6 9f b3 56 9d a3 4a 34 9b b8 f4 f9 07 9f 7e 44 18 f3 1c 42 6e 09 0d e6 81 90 17 8f a5 7f 51 bf 13 3f 6d df d9 5f e0 df ec f9 63 fb 52 fc 51 f1 9d 8e 89 e0 6d 4e da 2b bb 3d 4a e8 b2 0b 88 e7 4d f1 08 a2 db e6 bb 32 9c 85 55 2d ea 28 03 ea ba 2b Data Ascii: +>'67/wum~ouVy?_GwMK{wtUKpy_?_/>956w~3.d{m*in5h@^($(VJ4~DBnQ?m_cRQmN+=JM2U-(+
2024-01-17 17:07:44 UTC	16384	IN	Data Raw: 07 ed 8b f0 bf f6 6e f8 4d ad 78 56 f7 47 d6 b5 44 b5 f1 8e a1 73 70 25 9b 47 54 b8 f2 a5 8a 4d 92 aa 5b b8 50 49 32 8c 8f 4a f2 af f8 38 bf e3 2f c3 2f 8c ff 00 f0 49 99 fc 79 f0 5f c4 b6 1e 24 d2 24 f1 35 84 4b 7d a5 5c a5 c4 25 d0 4e 1d 44 91 31 5c a9 e0 8c f0 6b e0 8f f8 2d 37 ec 77 fb 35 e8 3f f0 55 df d9 ff 00 49 d2 7c 25 65 05 bf c5 0d 5c 5c 78 a1 14 36 35 29 6e 2f 8a c8 d3 7c dc 96 04 83 8c 57 d9 5f f0 70 07 ec df f0 43 f6 54 ff 00 82 40 4b f0 af e0 0f 87 ad bc 35 e1 e8 7c 55 65 70 b6 56 a1 bc b1 24 be 7b 3b 7c c4 9c b1 39 3c d0 07 ea 1f c0 0f db ab f6 3e fd 9e 3f 66 5f 84 fe 03 f8 e5 f1 27 41 f0 d6 b7 77 e1 9d 2d 92 ce fe f1 12 70 1e dd 36 b3 ae 49 8d 4f 66 7d a0 fa d7 d4 9f b5 cf 86 7e 1c fc 79 fd 8f fc 61 e1 cd 6b c6 eb e1 4f 0c f8 87 47 70 fe Data Ascii: nMxVGDsp%GTM[PI2J8//Iy_$$5K}\%ND1\k-7w5?UI\|%e\\x65)n/\|W_pCT@K5\|UepV${;\|9<>?f_'Aw-p6IOf}~yakOGp
2024-01-17 17:07:44 UTC	16384	IN	Data Raw: 60 7b 10 48 a0 0d 4a 8a 59 e0 b7 01 a7 75 40 4e 01 62 06 4f a7 35 9d ae 6b da 1f 86 34 a9 b5 ef 12 de c1 a7 d8 db 2e e9 ae 2e 64 58 62 8d 73 8c bb b9 0a a3 3c 64 9a fe 21 7e 1a f8 67 c2 5f f0 57 df f8 29 9f c6 85 fd ae fe 2d 5f 68 1e 0e f0 0e a1 f6 2f 0c 69 fa 76 b1 15 8d bc 80 4e f1 47 f6 72 ec 51 c6 23 0c c6 30 4b b3 64 9e 94 01 fd c8 51 5e 77 7b e2 3f 87 df 06 fc 0b 69 37 8c 75 db 4d 27 48 d3 e1 8e dd 6f 75 3b 98 a0 8c 84 50 14 b4 b2 b2 a9 62 06 7a f3 54 be 1c fc 70 f8 31 f1 81 26 7f 84 fe 2d d1 bc 4c 2d ff 00 d6 ff 00 65 df 5b dd 98 f3 d3 78 85 d8 ae 7d e8 03 d4 68 ae 47 c4 1f 10 3c 07 e1 2d 4a cb 46 f1 56 b7 61 a6 5e 6a 2c 12 d2 0b bb 98 a1 96 76 24 28 58 91 d9 59 c9 24 0c 28 3c d5 6d 03 e2 67 c3 7f 15 f8 87 50 f0 8f 85 fc 41 a6 ea 5a b6 92 40 be b2 Data Ascii: `{HJYu@NbO5k4..dXbs<d!~g_W)-_h/ivNGrQ#0KdQ^w{?i7uM'Hou;PbzTp1&-L-e[x}hG<-JFVa^j,v$(XY$(<mgPAZ@
2024-01-17 17:07:44 UTC	3250	IN	Data Raw: e7 8b 78 21 9d 8f 04 8e 45 7a 27 89 3e 1d fe dc 9f 18 bf 69 6f 86 df 18 3c 55 f0 e3 48 f0 9f fc 22 97 ae 2f 6f ac f5 58 ae 25 96 ca 75 da f1 b2 e1 4b 2a f2 40 e7 93 5f 4d fe d1 7f b2 3f c4 4f 1a fc 4e d1 ff 00 69 0f d9 fb c4 90 78 53 e2 06 99 6c 2d 2e 1a e2 26 9a c2 fa 0e f1 4e 83 e6 c0 3d 0e 0f 1d b3 cd 76 1f 08 bc 0b fb 6c cf e3 eb 4f 14 7e d0 1e 31 d0 86 91 65 1b 8f ec 8f 0f d9 c8 a9 71 23 8c 07 9a e2 e0 ef c2 75 0a a0 0c 9a 00 f9 5f c3 3e 09 f0 ef 8a 3f e0 af 5e 2f d6 b5 db 75 b9 97 46 f0 cd 84 d6 a1 c6 55 25 92 34 52 f8 3c 6e 0a 08 07 b6 4d 7b 47 ed b5 fb 3b 7c 5d f1 e7 8b 7c 0f f1 e3 e0 34 76 3a 87 88 7c 01 71 34 f1 e9 1a 91 d9 6f 79 1c eb 86 0a fd 16 41 ce d2 70 3d c6 39 f5 3f 0b fe cd da f6 83 fb 65 78 9f f6 9a 9b 52 82 4d 3f 5d d1 ed 34 d8 ec 82 Data Ascii: x!Ez'>io<UH"/oX%uK*@_M?ONixSl-.&N=vlO~1eq#u_>?^/uFU%4R<nM{G;\|]\|4v:\|q4oyAp=9?exRM?]4

Session ID	Source IP	Source Port	Destination IP	Destination Port
383	192.168.2.16	50215	184.87.173.91	443

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:43 UTC	506	OUT	GET /tenant/amp/entityid/AA1cEE23?w=168&h=168&q=60&m=6&f=jpg&u=t HTTP/1.1 Host: img-s-msn-com.akamaized.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: / Origin: https://ntp.msn.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ntp.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:43 UTC	549	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * Content-Location: https://img.s-msn.com/tenant/amp/entityid/AA1cEE23?w=168&h=168&q=60&m=6&f=jpg&u=t Last-Modified: Sat, 30 Dec 2023 09:41:42 GMT X-Source-Length: 15438 X-Datacenter: eastus X-ActivityId: 382ff73b-a343-4673-8e3a-72d5319cf4e3 Timing-Allow-Origin: * X-Frame-Options: DENY X-ResizerVersion: 1.0 Content-Length: 8192 Cache-Control: public, max-age=405334 Expires: Mon, 22 Jan 2024 09:43:17 GMT Date: Wed, 17 Jan 2024 17:07:43 GMT Connection: close
2024-01-17 17:07:43 UTC	8192	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 84 00 0d 09 0a 0b 0a 08 0d 0b 0a 0b 0e 0e 0d 0f 13 20 15 13 12 12 13 27 1c 1e 17 20 2e 29 31 30 2e 29 2d 2c 33 3a 4a 3e 33 36 46 37 2c 2d 40 57 41 46 4c 4e 52 53 52 32 3e 5a 61 5a 50 60 4a 51 52 4f 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c0 00 11 08 00 a8 00 a8 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF`` ' .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO}!1AQa"q2#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port
384	192.168.2.16	50214	20.189.173.11	443

Timestamp	Bytes transferred	Direction	Data
2024-01-17 17:07:43 UTC	706	OUT	OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1 Host: browser.events.data.microsoft.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time Origin: https://www.microsoft.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-01-17 17:07:44 UTC	606	IN	HTTP/1.1 200 OK Cache-Control: public, 3600 Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody Access-Control-Max-Age: 3600 Access-Control-Allow-Origin: https://www.microsoft.com Date: Wed, 17 Jan 2024 17:07:43 GMT Connection: close

Target ID:	0
Start time:	18:05:37
Start date:	17/01/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://livespoints.com/sso.dsv.com
Imagebase:	0x7ff71e7f0000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	18:05:38
Start date:	17/01/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1708 --field-trial-handle=1816,i,17546062226923162170,5333689487827866675,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff71e7f0000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	18:07:03
Start date:	17/01/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
Imagebase:	0x7ff672330000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	12
Start time:	18:07:04
Start date:	17/01/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2336 --field-trial-handle=2044,i,4245092213263531658,3503183306970251283,262144 /prefetch:3
Imagebase:	0x7ff672330000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	17
Start time:	18:07:10
Start date:	17/01/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=6748 --field-trial-handle=2044,i,4245092213263531658,3503183306970251283,262144 /prefetch:8
Imagebase:	0x7ff672330000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	18
Start time:	18:07:10
Start date:	17/01/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=5388 --field-trial-handle=2044,i,4245092213263531658,3503183306970251283,262144 /prefetch:8
Imagebase:	0x7ff672330000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://livespoints.com/sso.dsv.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Boot Survival

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\03a243f4-0009-449d-9a6d-d0639029278b.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\42afa554-6b73-4440-ade8-e4d190ec6335.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\562a1de6-1f7e-4e7d-aaee-408cd8de6bb9.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\7556acb3-b693-4f60-b940-0ccad2d004f2.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\1e52338f-a25c-4d01-9728-96ec7ba85a35.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist (copy)

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\4c7eaf18-2c11-488a-b952-912502a6297a.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\588175e6-fc82-4e18-a7f8-f09a1d5aaabe.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\625ef2e4-c437-4a3e-a23a-2845d406d057.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\000001.dbtmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\000003.log

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\CURRENT (copy)

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\LOG

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\MANIFEST-000001

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\000003.log

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old (copy)

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DIPS

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DashTrackerDatabase

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\000003.log

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\000004.log

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\000005.ldb

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG.old (copy)

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\MANIFEST-000001

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db

Windows Analysis Report
http://livespoints.com/sso.dsv.com