| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49744 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49865 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49743 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49817 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49864 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49863 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49741 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49862 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49740 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49861 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49860 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49898 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49743 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49875 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49720 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49852 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49739 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49738 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49859 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49737 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49858 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49881 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49736 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49857 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49735 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49856 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49772 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49734 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49855 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49733 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49841 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49854 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49732 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49853 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49731 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49852 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49732 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49730 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49851 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49850 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49812 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49858 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49893 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49784 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49749 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49823 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49729 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49728 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49777 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49849 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49727 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49848 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49726 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49847 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49886 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49725 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49846 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49724 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49845 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49869 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49723 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49844 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49722 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49843 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49721 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49842 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49720 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49841 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49731 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49840 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49834 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49748 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49892 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49828 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49719 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49718 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49839 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49717 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49838 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49904 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49715 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49837 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49847 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49715 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49836 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49835 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49834 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49833 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49887 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49832 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49831 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49830 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49839 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49864 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49726 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49870 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49853 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49829 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49811 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49828 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49827 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49826 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49825 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49824 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49737 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49823 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49771 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49784 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49813 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49783 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49782 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49781 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49780 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49836 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49776 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49845 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49736 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49868 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49779 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49885 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49778 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49899 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49777 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49898 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49776 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49897 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49775 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49896 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49774 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49895 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49773 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49862 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49894 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49772 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49893 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49771 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49892 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49770 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49891 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49890 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49724 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49897 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49780 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49879 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49851 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49830 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49718 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49889 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49888 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49887 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49886 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49764 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49885 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49763 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49863 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49884 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49883 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49761 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49882 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49881 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49840 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49880 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49725 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49741 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49857 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49764 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49896 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49770 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49719 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49824 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49879 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49757 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49877 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49876 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49875 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49891 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49874 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49873 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49730 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49751 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49872 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49818 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49750 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49871 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49870 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49835 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49874 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49747 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49829 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49880 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49775 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49749 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49846 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49748 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49869 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49747 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49868 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49746 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49867 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49866 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49890 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49746 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49781 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49826 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49717 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49849 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49889 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49900 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49866 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49837 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49872 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49728 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49763 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49855 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49861 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49735 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49901 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49712 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49844 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49873 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49729 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49850 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49831 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49751 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49774 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49782 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49757 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49734 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49740 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49856 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49895 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49723 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49825 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49884 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49867 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49733 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49821 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49865 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49842 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49779 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49727 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49859 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49871 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49894 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49833 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49818 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49810 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49817 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49816 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49813 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49902 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49812 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49811 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49810 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49816 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49721 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49827 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49876 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49848 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49882 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49773 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49739 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49783 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49838 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49821 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49877 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49722 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49854 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49860 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49883 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49778 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49738 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49843 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49761 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49899 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49744 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49832 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49750 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49904 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49903 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49902 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49903 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49901 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49900 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49888 -> 443 |
| Source: elevation_service.exe, 00000015.00000003.417345019.000001BC7601A000.00000004.00000020.00020000.00000000.sdmp, elevation_service.exe, 00000015.00000003.413163151.000001BC7601F000.00000004.00000020.00020000.00000000.sdmp, elevation_service.exe, 00000015.00000003.413178414.000001BC76017000.00000004.00000020.00020000.00000000.sdmp, elevation_service.exe, 00000015.00000003.414606907.000001BC7601A000.00000004.00000020.00020000.00000000.sdmp, elevation_service.exe, 00000015.00000003.415768749.000001BC7601A000.00000004.00000020.00020000.00000000.sdmp, ChromeRecovery.exe.21.dr | String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0 |
| Source: elevation_service.exe, 00000015.00000003.417345019.000001BC7601A000.00000004.00000020.00020000.00000000.sdmp, elevation_service.exe, 00000015.00000003.413163151.000001BC7601F000.00000004.00000020.00020000.00000000.sdmp, elevation_service.exe, 00000015.00000003.413178414.000001BC76017000.00000004.00000020.00020000.00000000.sdmp, elevation_service.exe, 00000015.00000003.414606907.000001BC7601A000.00000004.00000020.00020000.00000000.sdmp, elevation_service.exe, 00000015.00000003.415768749.000001BC7601A000.00000004.00000020.00020000.00000000.sdmp, ChromeRecovery.exe.21.dr | String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0 |
| Source: elevation_service.exe, 00000015.00000003.417345019.000001BC7601A000.00000004.00000020.00020000.00000000.sdmp, elevation_service.exe, 00000015.00000003.413163151.000001BC7601F000.00000004.00000020.00020000.00000000.sdmp, elevation_service.exe, 00000015.00000003.413178414.000001BC76017000.00000004.00000020.00020000.00000000.sdmp, elevation_service.exe, 00000015.00000003.414606907.000001BC7601A000.00000004.00000020.00020000.00000000.sdmp, elevation_service.exe, 00000015.00000003.415768749.000001BC7601A000.00000004.00000020.00020000.00000000.sdmp, ChromeRecovery.exe.21.dr | String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C |
| Source: elevation_service.exe, 00000015.00000003.417345019.000001BC7601A000.00000004.00000020.00020000.00000000.sdmp, elevation_service.exe, 00000015.00000003.413163151.000001BC7601F000.00000004.00000020.00020000.00000000.sdmp, elevation_service.exe, 00000015.00000003.413178414.000001BC76017000.00000004.00000020.00020000.00000000.sdmp, elevation_service.exe, 00000015.00000003.414606907.000001BC7601A000.00000004.00000020.00020000.00000000.sdmp, elevation_service.exe, 00000015.00000003.415768749.000001BC7601A000.00000004.00000020.00020000.00000000.sdmp, ChromeRecovery.exe.21.dr | String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S |
| Source: elevation_service.exe, 00000015.00000003.417345019.000001BC7601A000.00000004.00000020.00020000.00000000.sdmp, elevation_service.exe, 00000015.00000003.413163151.000001BC7601F000.00000004.00000020.00020000.00000000.sdmp, elevation_service.exe, 00000015.00000003.413178414.000001BC76017000.00000004.00000020.00020000.00000000.sdmp, elevation_service.exe, 00000015.00000003.414606907.000001BC7601A000.00000004.00000020.00020000.00000000.sdmp, elevation_service.exe, 00000015.00000003.415768749.000001BC7601A000.00000004.00000020.00020000.00000000.sdmp, ChromeRecovery.exe.21.dr | String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0 |
| Source: ChromeRecovery.exe.21.dr | String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0 |
| Source: elevation_service.exe, 00000015.00000003.417345019.000001BC7601A000.00000004.00000020.00020000.00000000.sdmp, elevation_service.exe, 00000015.00000003.413163151.000001BC7601F000.00000004.00000020.00020000.00000000.sdmp, elevation_service.exe, 00000015.00000003.413178414.000001BC76017000.00000004.00000020.00020000.00000000.sdmp, elevation_service.exe, 00000015.00000003.414606907.000001BC7601A000.00000004.00000020.00020000.00000000.sdmp, elevation_service.exe, 00000015.00000003.415768749.000001BC7601A000.00000004.00000020.00020000.00000000.sdmp, ChromeRecovery.exe.21.dr | String found in binary or memory: http://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0 |
| Source: pnacl_public_x86_64_pnacl_sz_nexe.0.dr, pnacl_public_x86_64_pnacl_llc_nexe.0.dr | String found in binary or memory: http://llvm.org/): |
| Source: elevation_service.exe, 00000015.00000003.417345019.000001BC7601A000.00000004.00000020.00020000.00000000.sdmp, elevation_service.exe, 00000015.00000003.413163151.000001BC7601F000.00000004.00000020.00020000.00000000.sdmp, elevation_service.exe, 00000015.00000003.413178414.000001BC76017000.00000004.00000020.00020000.00000000.sdmp, elevation_service.exe, 00000015.00000003.414606907.000001BC7601A000.00000004.00000020.00020000.00000000.sdmp, elevation_service.exe, 00000015.00000003.415768749.000001BC7601A000.00000004.00000020.00020000.00000000.sdmp, ChromeRecovery.exe.21.dr | String found in binary or memory: http://ocsp.digicert.com0 |
| Source: elevation_service.exe, 00000015.00000003.417345019.000001BC7601A000.00000004.00000020.00020000.00000000.sdmp, elevation_service.exe, 00000015.00000003.413163151.000001BC7601F000.00000004.00000020.00020000.00000000.sdmp, elevation_service.exe, 00000015.00000003.413178414.000001BC76017000.00000004.00000020.00020000.00000000.sdmp, elevation_service.exe, 00000015.00000003.414606907.000001BC7601A000.00000004.00000020.00020000.00000000.sdmp, elevation_service.exe, 00000015.00000003.415768749.000001BC7601A000.00000004.00000020.00020000.00000000.sdmp, ChromeRecovery.exe.21.dr | String found in binary or memory: http://ocsp.digicert.com0A |
| Source: elevation_service.exe, 00000015.00000003.417345019.000001BC7601A000.00000004.00000020.00020000.00000000.sdmp, elevation_service.exe, 00000015.00000003.413163151.000001BC7601F000.00000004.00000020.00020000.00000000.sdmp, elevation_service.exe, 00000015.00000003.413178414.000001BC76017000.00000004.00000020.00020000.00000000.sdmp, elevation_service.exe, 00000015.00000003.414606907.000001BC7601A000.00000004.00000020.00020000.00000000.sdmp, elevation_service.exe, 00000015.00000003.415768749.000001BC7601A000.00000004.00000020.00020000.00000000.sdmp, ChromeRecovery.exe.21.dr | String found in binary or memory: http://ocsp.digicert.com0X |
| Source: elevation_service.exe, 00000015.00000003.417345019.000001BC7601A000.00000004.00000020.00020000.00000000.sdmp, elevation_service.exe, 00000015.00000003.413163151.000001BC7601F000.00000004.00000020.00020000.00000000.sdmp, elevation_service.exe, 00000015.00000003.413178414.000001BC76017000.00000004.00000020.00020000.00000000.sdmp, elevation_service.exe, 00000015.00000003.414606907.000001BC7601A000.00000004.00000020.00020000.00000000.sdmp, elevation_service.exe, 00000015.00000003.415768749.000001BC7601A000.00000004.00000020.00020000.00000000.sdmp, ChromeRecovery.exe.21.dr | String found in binary or memory: http://www.digicert.com/CPS0 |
| Source: 357ffe30-2921-4f94-97a3-98c8c0064b1c.tmp.1.dr, d2d2882c-2463-49cb-8dd6-e32aaba9ce4c.tmp.1.dr | String found in binary or memory: https://accounts.google.com |
| Source: craw_window.js.0.dr | String found in binary or memory: https://accounts.google.com/MergeSession |
| Source: d2d2882c-2463-49cb-8dd6-e32aaba9ce4c.tmp.1.dr | String found in binary or memory: https://ajax.googleapis.com |
| Source: 357ffe30-2921-4f94-97a3-98c8c0064b1c.tmp.1.dr, d2d2882c-2463-49cb-8dd6-e32aaba9ce4c.tmp.1.dr | String found in binary or memory: https://apis.google.com |
| Source: pnacl_public_x86_64_libpnacl_irt_shim_dummy_a.0.dr | String found in binary or memory: https://chromium.googlesource.com/a/native_client/pnacl-clang.git |
| Source: pnacl_public_x86_64_libpnacl_irt_shim_dummy_a.0.dr | String found in binary or memory: https://chromium.googlesource.com/a/native_client/pnacl-llvm.git |
| Source: 357ffe30-2921-4f94-97a3-98c8c0064b1c.tmp.1.dr, d2d2882c-2463-49cb-8dd6-e32aaba9ce4c.tmp.1.dr | String found in binary or memory: https://clients2.google.com |
| Source: manifest.json.0.dr, manifest.json2.0.dr | String found in binary or memory: https://clients2.google.com/service/update2/crx |
| Source: 357ffe30-2921-4f94-97a3-98c8c0064b1c.tmp.1.dr, d2d2882c-2463-49cb-8dd6-e32aaba9ce4c.tmp.1.dr | String found in binary or memory: https://clients2.googleusercontent.com |
| Source: pnacl_public_x86_64_ld_nexe.0.dr | String found in binary or memory: https://code.google.com/p/nativeclient/issues/entry |
| Source: pnacl_public_x86_64_ld_nexe.0.dr | String found in binary or memory: https://code.google.com/p/nativeclient/issues/entry%s: |
| Source: 5ff0b0b0-f071-475e-a22f-2b9d6f4c7f6c.tmp.1.dr, 357ffe30-2921-4f94-97a3-98c8c0064b1c.tmp.1.dr, 4b148a3c-b6d3-4f11-9c05-b7cee60505f1.tmp.1.dr, d2d2882c-2463-49cb-8dd6-e32aaba9ce4c.tmp.1.dr | String found in binary or memory: https://dns.google |
| Source: 357ffe30-2921-4f94-97a3-98c8c0064b1c.tmp.1.dr, d2d2882c-2463-49cb-8dd6-e32aaba9ce4c.tmp.1.dr | String found in binary or memory: https://fonts.googleapis.com |
| Source: 357ffe30-2921-4f94-97a3-98c8c0064b1c.tmp.1.dr, d2d2882c-2463-49cb-8dd6-e32aaba9ce4c.tmp.1.dr | String found in binary or memory: https://fonts.gstatic.com |
| Source: craw_window.js.0.dr, craw_background.js.0.dr | String found in binary or memory: https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p |
| Source: 357ffe30-2921-4f94-97a3-98c8c0064b1c.tmp.1.dr, d2d2882c-2463-49cb-8dd6-e32aaba9ce4c.tmp.1.dr | String found in binary or memory: https://ogs.google.com |
| Source: craw_window.js.0.dr, manifest.json.0.dr | String found in binary or memory: https://payments.google.com/payments/v4/js/integrator.js |
| Source: 357ffe30-2921-4f94-97a3-98c8c0064b1c.tmp.1.dr, d2d2882c-2463-49cb-8dd6-e32aaba9ce4c.tmp.1.dr | String found in binary or memory: https://play.google.com |
| Source: 357ffe30-2921-4f94-97a3-98c8c0064b1c.tmp.1.dr | String found in binary or memory: https://r5---sn-h0jeln7l.gvt1.com |
| Source: 357ffe30-2921-4f94-97a3-98c8c0064b1c.tmp.1.dr, d2d2882c-2463-49cb-8dd6-e32aaba9ce4c.tmp.1.dr | String found in binary or memory: https://redirector.gvt1.com |
| Source: craw_window.js.0.dr, manifest.json.0.dr | String found in binary or memory: https://sandbox.google.com/payments/v4/js/integrator.js |
| Source: 357ffe30-2921-4f94-97a3-98c8c0064b1c.tmp.1.dr, d2d2882c-2463-49cb-8dd6-e32aaba9ce4c.tmp.1.dr | String found in binary or memory: https://ssl.gstatic.com |
| Source: craw_window.js.0.dr, craw_background.js.0.dr | String found in binary or memory: https://www-googleapis-staging.sandbox.google.com |
| Source: 357ffe30-2921-4f94-97a3-98c8c0064b1c.tmp.1.dr, d2d2882c-2463-49cb-8dd6-e32aaba9ce4c.tmp.1.dr | String found in binary or memory: https://www.google.com |
| Source: manifest.json.0.dr | String found in binary or memory: https://www.google.com/ |
| Source: craw_window.js.0.dr | String found in binary or memory: https://www.google.com/accounts/OAuthLogin?issueuberauth=1 |
| Source: craw_window.js.0.dr | String found in binary or memory: https://www.google.com/images/cleardot.gif |
| Source: craw_window.js.0.dr | String found in binary or memory: https://www.google.com/images/dot2.gif |
| Source: craw_window.js.0.dr | String found in binary or memory: https://www.google.com/images/x2.gif |
| Source: craw_background.js.0.dr | String found in binary or memory: https://www.google.com/intl/en-US/chrome/blank.html |
| Source: craw_window.js.0.dr, craw_background.js.0.dr, 357ffe30-2921-4f94-97a3-98c8c0064b1c.tmp.1.dr, d2d2882c-2463-49cb-8dd6-e32aaba9ce4c.tmp.1.dr | String found in binary or memory: https://www.googleapis.com |
| Source: manifest.json.0.dr | String found in binary or memory: https://www.googleapis.com/ |
| Source: manifest.json.0.dr | String found in binary or memory: https://www.googleapis.com/auth/chromewebstore |
| Source: manifest.json.0.dr | String found in binary or memory: https://www.googleapis.com/auth/chromewebstore.readonly |
| Source: manifest.json.0.dr | String found in binary or memory: https://www.googleapis.com/auth/sierra |
| Source: manifest.json.0.dr | String found in binary or memory: https://www.googleapis.com/auth/sierrasandbox |
| Source: 357ffe30-2921-4f94-97a3-98c8c0064b1c.tmp.1.dr, d2d2882c-2463-49cb-8dd6-e32aaba9ce4c.tmp.1.dr | String found in binary or memory: https://www.gstatic.com |
| Source: global traffic | HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=314559&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:D9BC7EDF-91E8-C8ED-3ED4-3B144B30C00C&ctry=US&time=20220308T094314Z&lc=en-US&pl=en-US&idtp=mid&uid=a9223225-82ba-4622-a95e-dcecd6738abd&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=f6e598a7210f4ba6a67368ba84fd9e2a&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1417890&metered=false&nettype=ethernet&npid=sc-314559&oemName=VMware%2C%20Inc.&oemid=VMware%2C%20Inc.&ossku=Professional&smBiosDm=VMware7%2C1&tl=2&tsu=1417890&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: chs=0&imp=0&chf=0&ds=50583&fs=32089&sc=6Cache-Control: no-cacheMS-CV: Gr8SksEb2E2KQqlU.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: tch0,m301,m751,mA01,mT01Host: arc.msn.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=310091&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:D9BC7EDF-91E8-C8ED-3ED4-3B144B30C00C&ctry=US&time=20220308T094314Z&lc=en-US&pl=en-US&idtp=mid&uid=a9223225-82ba-4622-a95e-dcecd6738abd&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=7c6923c195784c839a5d7a547d2c5801&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1417890&metered=false&nettype=ethernet&npid=sc-310091&oemName=VMware%2C%20Inc.&oemid=VMware%2C%20Inc.&ossku=Professional&rver=2&smBiosDm=VMware7%2C1&tl=2&tsu=1417890&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: chs=0&imp=0&chf=0&ds=50583&fs=32089&sc=6Cache-Control: no-cacheMS-CV: Gr8SksEb2E2KQqlU.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: tch0,m301,m751,mA01,mT01Host: arc.msn.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /image/apps.10288.13753891519397067.8011a592-e549-44a6-8073-41dcd83eddbe.12bb65f7-1014-4469-bb2e-59f575e79b05?format=source HTTP/1.1Accept: */*Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /image/apps.18694.9007199266247846.b5c49955-e050-4553-b8e4-0e223ed6c5a1.4e8e78d2-c2c2-4c02-8d8c-46ac3b2419e7?format=source HTTP/1.1Accept: */*Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /image/apps.16574.13571498826857201.00a9d390-581f-492c-b148-b2ce81649480.6a6f592e-efa9-4bb0-b008-7c3422ab3313?format=source HTTP/1.1Accept: */*Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /image/apps.15881.13753891519397067.8011a592-e549-44a6-8073-41dcd83eddbe.bcf361e4-21f7-429d-877a-6c55c1b655ff?format=source HTTP/1.1Accept: */*Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /image/apps.18858.9007199266246227.c596c546-6fcb-4260-935c-19bc24b971ef.1b03c26f-1753-4221-9ab1-4581f098723d?format=source HTTP/1.1Accept: */*Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /image/apps.2052.9007199266247846.b5c49955-e050-4553-b8e4-0e223ed6c5a1.a0c3decd-308f-4f06-bcfb-2aa4f3afe248?format=source HTTP/1.1Accept: */*Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /image/apps.20893.13571498826857201.00a9d390-581f-492c-b148-b2ce81649480.acc28f88-50de-4aaf-abfc-ad1da8b04cd0?format=source HTTP/1.1Accept: */*Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /image/apps.256.14495311847124170.e89a4dce-fd9a-4a10-b8e4-a6c3aa1c055e.ca4cbefc-0ab0-4144-90c1-07f5250c8c21?format=source HTTP/1.1Accept: */*Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /image/apps.40093.9007199266285780.3d16d9fa-052b-42c5-ba7d-a5688e3dda24.e6964d6a-18a4-4746-9238-9f0acc233a65?format=source HTTP/1.1Accept: */*Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /image/apps.39478.14495311847124170.e89a4dce-fd9a-4a10-b8e4-a6c3aa1c055e.8ad1b690-ff36-44fa-8afc-0dc5bed1273c?format=source HTTP/1.1Accept: */*Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /image/apps.49525.13510798887047136.8a1815b2-017c-48c8-80cc-ca4d1ae5c8cf.2f6b9bdf-a4fc-42d8-aea0-65c437755b78?format=source HTTP/1.1Accept: */*Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /image/apps.616.13510798887047136.8a1815b2-017c-48c8-80cc-ca4d1ae5c8cf.d81cfd95-c9fd-48e0-8fc3-36ff7b9e590a?format=source HTTP/1.1Accept: */*Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /image/apps.58298.9007199266285780.3d16d9fa-052b-42c5-ba7d-a5688e3dda24.55988ee1-bd9b-4322-980a-a610abdc7713?format=source HTTP/1.1Accept: */*Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /image/apps.64128.9007199266246227.c596c546-6fcb-4260-935c-19bc24b971ef.d58015ff-2fcf-4113-975b-e873039b6d86?format=source HTTP/1.1Accept: */*Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /image/apps.16957.14618985536919905.4b30e4f3-f7a1-4421-840c-2cc97b10e8e0.aef04b90-a221-4ea5-a05d-0d51ac792471?format=source HTTP/1.1Accept: */*Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /image/apps.15982.13510798883386282.38bb6176-27af-4000-85dd-12a4c12514f2.7bbbe321-5273-45d0-814e-74f2065197d3?format=source HTTP/1.1Accept: */*Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /image/apps.18124.9007199266244427.c75d2ced-a383-40dc-babd-1ad2ceb13c86.afc6c372-c7a8-4eda-94fb-541bbb081d14?format=source HTTP/1.1Accept: */*Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /image/apps.31225.13576748414566955.3d986480-8c1e-4271-9c7c-a90619002084.3ffd9abd-094d-4594-b6c3-8e079298b84b?format=source HTTP/1.1Accept: */*Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /image/apps.31660.13925855090824389.09f473d9-ce97-499c-9d53-c21e8f64ee62.9cf7ca2f-497e-4cb1-be08-431c9fcc4d54?format=source HTTP/1.1Accept: */*Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /image/apps.38957.9007199266246761.3059e916-5e99-4797-a868-366cc8761e37.dcc9368c-4c77-41a2-b867-8514435d8418?format=source HTTP/1.1Accept: */*Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /image/apps.32938.13925855090824389.09f473d9-ce97-499c-9d53-c21e8f64ee62.721cfb02-7935-45dc-9d66-2d6e6b2ff76c?format=source HTTP/1.1Accept: */*Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /image/apps.39016.9007199266243744.36dde9d0-f21a-47d2-976e-f1ea3f5b031f.bbea1229-a466-4a8c-b428-57cb58abf084?format=source HTTP/1.1Accept: */*Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /image/apps.41671.13634052595610511.c45457c9-b4af-46b0-8e61-8d7c0aec3f56.86b1d82d-8b47-4bda-99fc-8a1db0a7ac9d?format=source HTTP/1.1Accept: */*Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=85.0.4183.121&lang=en-GB&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1&x=id%3Dpkedcjkdefgpdelpbcmbmeomcjbeemfm%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda,pkedcjkdefgpdelpbcmbmeomcjbeemfmX-Goog-Update-Updater: chromecrx-85.0.4183.121Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8 |
| Source: global traffic | HTTP traffic detected: GET /image/apps.51843.9007199266243449.90709ce3-050c-4cef-8d4a-9ef213b89ef2.c13e8407-eaf8-447a-a5d6-9abd8bc2c1f3?format=source HTTP/1.1Accept: */*Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /image/apps.5075.9007199266244427.c75d2ced-a383-40dc-babd-1ad2ceb13c86.f329a73d-1ae8-4445-aa4c-bf40f3c5d62d?format=source HTTP/1.1Accept: */*Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8 |
| Source: global traffic | HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-aliveOrigin: nullUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8 |
| Source: global traffic | HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveOrigin: nullUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8 |
| Source: global traffic | HTTP traffic detected: GET /pw30spQ/90.jpg HTTP/1.1Host: i.ibb.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8 |
| Source: global traffic | HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8 |
| Source: global traffic | HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: aadcdn.msauth.net |
| Source: global traffic | HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: logincdn.msauth.net |
| Source: global traffic | HTTP traffic detected: GET /pw30spQ/90.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: i.ibb.co |
| Source: global traffic | HTTP traffic detected: GET /image/apps.52481.9007199266243744.36dde9d0-f21a-47d2-976e-f1ea3f5b031f.16c0a704-aef8-4bc4-af36-0c3b3ee0f6e2?format=source HTTP/1.1Accept: */*Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /image/apps.54145.14618985536919905.4b30e4f3-f7a1-4421-840c-2cc97b10e8e0.0df01b4e-7fca-47eb-b3d7-95ba7990754d?format=source HTTP/1.1Accept: */*Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /image/apps.54562.13634052595610511.c45457c9-b4af-46b0-8e61-8d7c0aec3f56.24af4abe-62f8-404b-b1a9-ee8fe4d32d94?format=source HTTP/1.1Accept: */*Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /image/apps.56668.13510798883386282.38bb6176-27af-4000-85dd-12a4c12514f2.a2d9522a-f7d1-4f21-9ea4-8ba298101695?format=source HTTP/1.1Accept: */*Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /image/apps.55990.13510798886747090.a0953092-5fc3-46f0-aefa-796cb3a9b90b.1c9f2174-7e18-48ba-af90-e569a2444a83?format=source HTTP/1.1Accept: */*Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /image/apps.58878.9007199266246761.3059e916-5e99-4797-a868-366cc8761e37.21987aba-4948-4f44-bf2e-eba90517f1c5?format=source HTTP/1.1Accept: */*Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /image/apps.65344.13576748414566955.3d986480-8c1e-4271-9c7c-a90619002084.2a7e9f85-6e2d-4bc7-ad81-13196f5baf00?format=source HTTP/1.1Accept: */*Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /image/apps.62687.13510798885854323.6a8c11ad-84e9-4247-9ba9-ab3742bdbb87.e61dfadd-3bdd-4f66-beb1-6bb763b60b02?format=source HTTP/1.1Accept: */*Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /image/apps.7873.9007199266243449.90709ce3-050c-4cef-8d4a-9ef213b89ef2.7885dc21-4015-4284-a596-d3d24cf6c1b8?format=source HTTP/1.1Accept: */*Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /image/apps.59367.13510798885854323.dbec43fa-fcea-4036-9b1c-96de66922c18.da850a8e-5b3f-49fd-b3dc-6a8c0db400e4?format=source HTTP/1.1Accept: */*Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /image/apps.8341.13510798886747090.a0953092-5fc3-46f0-aefa-796cb3a9b90b.fc0c6be7-c064-44dc-a7df-81e7097e3c93?format=source HTTP/1.1Accept: */*Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: store-images.s-microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=338389&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:D9BC7EDF-91E8-C8ED-3ED4-3B144B30C00C&ctry=US&time=20220526T114559Z&lc=en-US&pl=en-US&idtp=mid&uid=a9223225-82ba-4622-a95e-dcecd6738abd&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=4aefb9ce82414c309fd50462ad7d2ded&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1531773&metered=false&nettype=ethernet&npid=sc-338389&oemName=dchdpw%2C%20Inc.&oemid=dchdpw%2C%20Inc.&ossku=Professional&smBiosDm=dchdpw7%2C1&tl=2&tsu=1531773&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: chs=0&imp=0&chf=0&ds=50583&fs=32089&sc=6X-SDK-HW-TOKEN: t=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&p=Cache-Control: no-cacheMS-CV: Uk/T/jIkQkanI6jT.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: tch0,m301,m751,mA01,mT01Host: arc.msn.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=280815&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:D9BC7EDF-91E8-C8ED-3ED4-3B144B30C00C&ctry=US&time=20220526T114559Z&lc=en-US&pl=en-US&idtp=mid&uid=a9223225-82ba-4622-a95e-dcecd6738abd&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=4ff0e2fb91104e73a61123edaa6fd4ab&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1531773&metered=false&nettype=ethernet&npid=sc-280815&oemName=dchdpw%2C%20Inc.&oemid=dchdpw%2C%20Inc.&ossku=Professional&smBiosDm=dchdpw7%2C1&tl=2&tsu=1531773&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: chs=0&imp=0&chf=0&ds=50583&fs=32089&sc=6X-SDK-HW-TOKEN: t=EwDgAppeBAAUlAKXDAofTQM+n+MaRVFKzH/ehWgAAWURZjUVfKJUTJc9xWC40Ue7muwDrwI0g9XGSCBJ7s24wt/bdW+AtvyjB/0UmutfLwb6Ej3ovlHV67EvJv0UJfg/gD0LCBs8ShW4w7M8ooz1iB8igTQ/XH2dXkjuZWXLBD8ERfHeb+t7B1nlAtPC9qNdihjGi9uxmXDN0sybXmX4U5H5bMUxVCPsytti91iLnAdP8TEotHP//8gXYrqPtSw0vWxr4Vmf6IIxVCA5GJ+I87Ak+YIy+ZD2igumHUTpLiXIoiPxlREa4N1OOapz/HNzW5yDkq735KuOoc7fNtx1jhbU9NeF8q3hrC751wLjtPQz9YL5Z3eIswP5XNSoCZoDZgAACAcbf248CnIasAEHKTFDi/60v/azXSuyHVRqYyq/eKh8218+yMCd5SV8cCEGQf3GoqZSPA0SSor8aNxdjm1AyE/J2osNT6Hp3hn81wEiUyPjfwfGfIIu/lwEbajXuP/w4ZP364sFA6Lpi8kvCZchJTLZjCTRccICvL4WOLRbiK/ZAzu/+zq75LFTKjOjbsWomBSF9VHe33X9IiN4sd57QS4HIe+ahbMurbU8oFZ9kIPpGzgwFFCWPV5I3y7FXgAC1ZYF5D+IiibJKnEGqdc3qnWVXMXpU95jzBJeApEudwl0dPNaPfoyXl0e8lOyp3ib0WHF7rsGZCwVPiAMOmFusQEtnPnjRh/32a/2Iri/VZu7wcskwkaYybr6Ne3o+oHQF0PgtxbRiBwJsSnY6Wm48OOtQlWd8q5XvPydUwm/yyvdpD50A9BqC9356owNCJvu95sXpGybf9x+nARuDdD8OwsHVtbKuCNiMCLBj/A7oHpzYQeFRi/mgNFmW0kt/lOdpT6DHDAz/Ky3rKa1uK5E4JcTCK5WczmWYawhi/U1na+y7CNnLdLEgYizD0EBOEC5M21rUX4zlv1b2GrYAQ==&p=Cache-Control: no-cacheMS-CV: Uk/T/jIkQkanI6jT.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: tch0,m301,m751,mA01,mT01Host: arc.msn.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: */*Accept-Encoding: identityIf-Unmodified-Since: Thu, 20 Apr 2017 16:10:39 GMTUser-Agent: Microsoft BITS/7.8Host: fs.microsoft.com |
| Source: global traffic | HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=g4DRHRYs7RSz14z&MD=8Fa6EBfD HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com |
| Source: global traffic | HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=g4DRHRYs7RSz14z&MD=8Fa6EBfD HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com |
| Source: global traffic | HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=g4DRHRYs7RSz14z&MD=8Fa6EBfD HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com |
| Source: global traffic | HTTP traffic detected: GET /v1/a/installComplete?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=c69b812bb0ae4b12bda8ee4358d8f4cd®ion=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFHWD2&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=c7a8b22123bf4f0d817b2043a0b86bd8&time=20220526T114603Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=g4DRHRYs7RSz14z&MD=8Fa6EBfD HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com |
| Source: global traffic | HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=c69b812bb0ae4b12bda8ee4358d8f4cd®ion=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NBLGGGZM6WM&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=c7a8b22123bf4f0d817b2043a0b86bd8&time=20220526T114605Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=c69b812bb0ae4b12bda8ee4358d8f4cd®ion=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFHWD2&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=c7a8b22123bf4f0d817b2043a0b86bd8&time=20220526T114606Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /v7.0/products/lookup?alternateId=PackageFamilyName&value=SpotifyAB.SpotifyMusic_zpdnekdrzrea0&market=US&languages=en-US%2Cen%2Cneutral&fieldsTemplate=InstallAgent&moId=Public&oemId=Public&scmId=Public HTTP/1.1Connection: Keep-AliveContent-Type: application/jsonUser-Agent: Install ServiceMS-CV: GiqtprijtEm9TCQC.0.2.4Host: displaycatalog.mp.microsoft.com |
| Source: global traffic | HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=c69b812bb0ae4b12bda8ee4358d8f4cd®ion=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NH2GPH4JZS4&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=c7a8b22123bf4f0d817b2043a0b86bd8&time=20220526T114607Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=c69b812bb0ae4b12bda8ee4358d8f4cd®ion=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NBLGGH6J6VK&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=c7a8b22123bf4f0d817b2043a0b86bd8&time=20220526T114608Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=g4DRHRYs7RSz14z&MD=8Fa6EBfD HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com |
| Source: global traffic | HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=c69b812bb0ae4b12bda8ee4358d8f4cd®ion=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9P6RC76MSMMJ&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=c7a8b22123bf4f0d817b2043a0b86bd8&time=20220526T114610Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=c69b812bb0ae4b12bda8ee4358d8f4cd®ion=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFJ27N&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=c7a8b22123bf4f0d817b2043a0b86bd8&time=20220526T114611Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=c69b812bb0ae4b12bda8ee4358d8f4cd®ion=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9N0866FS04W8&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=c7a8b22123bf4f0d817b2043a0b86bd8&time=20220526T114611Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=g4DRHRYs7RSz14z&MD=8Fa6EBfD HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com |
| Source: global traffic | HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=c69b812bb0ae4b12bda8ee4358d8f4cd®ion=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFJ10M&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=c7a8b22123bf4f0d817b2043a0b86bd8&time=20220526T114612Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=c69b812bb0ae4b12bda8ee4358d8f4cd®ion=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFJ140&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=c7a8b22123bf4f0d817b2043a0b86bd8&time=20220526T114613Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=c69b812bb0ae4b12bda8ee4358d8f4cd®ion=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NC2FBTHCJV8&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=c7a8b22123bf4f0d817b2043a0b86bd8&time=20220526T114613Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /v7.0/products/lookup?alternateId=PackageFamilyName&value=Microsoft.YourPhone_8wekyb3d8bbwe&market=US&languages=en-US%2Cen%2Cneutral&fieldsTemplate=InstallAgent&moId=Public&oemId=Public&scmId=Public HTTP/1.1Connection: Keep-AliveContent-Type: application/jsonUser-Agent: Install ServiceMS-CV: pBohZfRMX02n5gr9.0.2.4Host: displaycatalog.mp.microsoft.com |
| Source: global traffic | HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=c69b812bb0ae4b12bda8ee4358d8f4cd®ion=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NBLGGH1CQ7L&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=c7a8b22123bf4f0d817b2043a0b86bd8&time=20220526T114614Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=c69b812bb0ae4b12bda8ee4358d8f4cd®ion=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&bSrc=i.t&time=20220526T114615Z&asid=c7a8b22123bf4f0d817b2043a0b86bd8&eid= HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=g4DRHRYs7RSz14z&MD=8Fa6EBfD HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com |
| Source: global traffic | HTTP traffic detected: GET /v1/a/installComplete?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=503d69dcabf0497192a0b80de8d4c17c®ion=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFJ3P2&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=8a797e6ed978405692c4acbf4650873f&time=20220526T114620Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=g4DRHRYs7RSz14z&MD=8Fa6EBfD HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com |
| Source: global traffic | HTTP traffic detected: GET /v1/a/installComplete?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=503d69dcabf0497192a0b80de8d4c17c®ion=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NBLGGH5FV99&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=8a797e6ed978405692c4acbf4650873f&time=20220526T114621Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=503d69dcabf0497192a0b80de8d4c17c®ion=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NXQXXLFST89&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=8a797e6ed978405692c4acbf4650873f&time=20220526T114622Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /v7.0/products/lookup?alternateId=PackageFamilyName&value=Microsoft.BingNews_8wekyb3d8bbwe&market=US&languages=en-US%2Cen%2Cneutral&fieldsTemplate=InstallAgent&moId=Public&oemId=Public&scmId=Public HTTP/1.1Connection: Keep-AliveContent-Type: application/jsonUser-Agent: Install ServiceMS-CV: URNjEpumaUCrKeFY.0.2.4Host: displaycatalog.mp.microsoft.com |
| Source: global traffic | HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=503d69dcabf0497192a0b80de8d4c17c®ion=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFHVFW&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=8a797e6ed978405692c4acbf4650873f&time=20220526T114622Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=503d69dcabf0497192a0b80de8d4c17c®ion=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NCBCSZSJRSB&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=8a797e6ed978405692c4acbf4650873f&time=20220526T114623Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=503d69dcabf0497192a0b80de8d4c17c®ion=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NMPJ99VJBWV&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=8a797e6ed978405692c4acbf4650873f&time=20220526T114623Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=338387&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:D9BC7EDF-91E8-C8ED-3ED4-3B144B30C00C&ctry=US&time=20220526T114638Z&lc=en-US&pl=en-US&idtp=mid&uid=a9223225-82ba-4622-a95e-dcecd6738abd&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=7956cda862394f129d871e1ee9b713f2&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1531773&metered=false&nettype=ethernet&npid=sc-338387&oemName=dchdpw%2C%20Inc.&oemid=dchdpw%2C%20Inc.&ossku=Professional&rver=2&sc-mode=0&smBiosDm=dchdpw7%2C1&tl=2&tsu=1531773&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: chs=0&imp=0&chf=0&ds=50583&fs=32089&sc=6X-SDK-HW-TOKEN: t=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&p=Cache-Control: no-cacheMS-CV: Uk/T/jIkQkanI6jT.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: tch0,m301,m751,mA01,mT01Host: arc.msn.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=g4DRHRYs7RSz14z&MD=8Fa6EBfD HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com |
| Source: global traffic | HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=503d69dcabf0497192a0b80de8d4c17c®ion=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NBLGGH5FV99&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=8a797e6ed978405692c4acbf4650873f&time=20220526T114624Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=338388&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:D9BC7EDF-91E8-C8ED-3ED4-3B144B30C00C&ctry=US&time=20220526T114639Z&lc=en-US&pl=en-US&idtp=mid&uid=a9223225-82ba-4622-a95e-dcecd6738abd&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=0d4a28fbeae64e4f954f41b00c93294f&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1531773&metered=false&nettype=ethernet&npid=sc-338388&oemName=dchdpw%2C%20Inc.&oemid=dchdpw%2C%20Inc.&ossku=Professional&rver=2&smBiosDm=dchdpw7%2C1&tl=2&tsu=1531773&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: chs=0&imp=0&chf=0&ds=50583&fs=32089&sc=6X-SDK-HW-TOKEN: t=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&p=Cache-Control: no-cacheMS-CV: Uk/T/jIkQkanI6jT.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: tch0,m301,m751,mA01,mT01Host: arc.msn.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /v1/a/opportunity?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=503d69dcabf0497192a0b80de8d4c17c®ion=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRDFNG7&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=8a797e6ed978405692c4acbf4650873f&time=20220526T114624Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=503d69dcabf0497192a0b80de8d4c17c®ion=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&bSrc=i.t&time=20220526T114625Z&asid=8a797e6ed978405692c4acbf4650873f&eid= HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=g4DRHRYs7RSz14z&MD=8Fa6EBfD HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com |
| Source: global traffic | HTTP traffic detected: GET /v7.0/products/lookup?alternateId=PackageFamilyName&value=6F71D7A7.HotspotShieldFreeVPN_nsbqstbb9qxb6&market=US&languages=en-US%2Cen%2Cneutral&fieldsTemplate=InstallAgent&moId=Public&oemId=Public&scmId=Public HTTP/1.1Connection: Keep-AliveContent-Type: application/jsonUser-Agent: Install ServiceMS-CV: 1B76BNybbUWNHzSO.0.2.4Host: displaycatalog.mp.microsoft.com |
| Source: global traffic | HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=g4DRHRYs7RSz14z&MD=8Fa6EBfD HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com |
| Source: global traffic | HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=g4DRHRYs7RSz14z&MD=8Fa6EBfD HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com |
| Source: global traffic | HTTP traffic detected: GET /v7.0/products/lookup?alternateId=PackageFamilyName&value=Disney.37853FC22B2CE_6rarf9sa4v8jt&market=US&languages=en-US%2Cen%2Cneutral&fieldsTemplate=InstallAgent&moId=Public&oemId=Public&scmId=Public HTTP/1.1Connection: Keep-AliveContent-Type: application/jsonUser-Agent: Install ServiceMS-CV: uDw2kGtleESJezzO.0.2.4Host: displaycatalog.mp.microsoft.com |
| Source: global traffic | HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=g4DRHRYs7RSz14z&MD=8Fa6EBfD HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com |
| Source: global traffic | HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=g4DRHRYs7RSz14z&MD=8Fa6EBfD HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com |
| Source: global traffic | HTTP traffic detected: GET /v7.0/products/lookup?alternateId=PackageFamilyName&value=BytedancePte.Ltd.TikTok_6yccndn6064se&market=US&languages=en-US%2Cen%2Cneutral&fieldsTemplate=InstallAgent&moId=Public&oemId=Public&scmId=Public HTTP/1.1Connection: Keep-AliveContent-Type: application/jsonUser-Agent: Install ServiceMS-CV: 4MWygkNr/0qcHyiJ.0.2.4Host: displaycatalog.mp.microsoft.com |
| Source: global traffic | HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=g4DRHRYs7RSz14z&MD=8Fa6EBfD HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com |
| Source: global traffic | HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=g4DRHRYs7RSz14z&MD=8Fa6EBfD HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com |
| Source: global traffic | HTTP traffic detected: GET /v7.0/products/lookup?alternateId=PackageFamilyName&value=AdobeSystemsIncorporated.AdobePhotoshopExpress_ynb6jyjzte8ga&market=US&languages=en-US%2Cen%2Cneutral&fieldsTemplate=InstallAgent&moId=Public&oemId=Public&scmId=Public HTTP/1.1Connection: Keep-AliveContent-Type: application/jsonUser-Agent: Install ServiceMS-CV: mJvN0d3F60OM+vw5.0.2.4Host: displaycatalog.mp.microsoft.com |
| Source: global traffic | HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=g4DRHRYs7RSz14z&MD=8Fa6EBfD HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com |
| Source: global traffic | HTTP traffic detected: GET /SLS/%7B9482F4B4-E343-43B6-B170-9A65BC822C77%7D/x64/10.0.17134.1/0?CH=17&L=en-US&P=&PT=0x30&WUA=10.0.17134.1&MK=g4DRHRYs7RSz14z&MD=8Fa6EBfD HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/1.81Host: sls.update.microsoft.com |
| Source: global traffic | HTTP traffic detected: GET /v7.0/products/lookup?alternateId=PackageFamilyName&value=AmazonVideo.PrimeVideo_pwbj9vvecjh7j&market=US&languages=en-US%2Cen%2Cneutral&fieldsTemplate=InstallAgent&moId=Public&oemId=Public&scmId=Public HTTP/1.1Connection: Keep-AliveContent-Type: application/jsonUser-Agent: Install ServiceMS-CV: rSSOXunOFkaDfWK5.0.2.4Host: displaycatalog.mp.microsoft.com |
| Source: global traffic | HTTP traffic detected: GET /cms/api/am/imageFileData/RE4CJ3S?ver=6f36 HTTP/1.1Accept: */*Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: img-prod-cms-rt-microsoft-com.akamaized.netConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /cms/api/am/imageFileData/RWR39G?ver=0455 HTTP/1.1Accept: */*Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: img-prod-cms-rt-microsoft-com.akamaized.netConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /cms/api/am/imageFileData/RWP8kk?ver=8c62 HTTP/1.1Accept: */*Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: img-prod-cms-rt-microsoft-com.akamaized.netConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /cms/api/am/imageFileData/RE4CSNW?ver=60f6 HTTP/1.1Accept: */*Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: img-prod-cms-rt-microsoft-com.akamaized.netConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /cms/api/am/imageFileData/RWP0UC?ver=2f44 HTTP/1.1Accept: */*Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: img-prod-cms-rt-microsoft-com.akamaized.netConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /cms/api/am/imageFileData/RWR64s?ver=0ee3 HTTP/1.1Accept: */*Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134Host: img-prod-cms-rt-microsoft-com.akamaized.netConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=503d69dcabf0497192a0b80de8d4c17c®ion=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NMPJ99VJBWV&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=8a797e6ed978405692c4acbf4650873f&time=20220526T114640Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=503d69dcabf0497192a0b80de8d4c17c®ion=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NMPJ99VJBWV&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=8a797e6ed978405692c4acbf4650873f&time=20220526T114641Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=503d69dcabf0497192a0b80de8d4c17c®ion=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NXQXXLFST89&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=8a797e6ed978405692c4acbf4650873f&time=20220526T114641Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=503d69dcabf0497192a0b80de8d4c17c®ion=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NXQXXLFST89&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=8a797e6ed978405692c4acbf4650873f&time=20220526T114642Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=503d69dcabf0497192a0b80de8d4c17c®ion=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFHVFW&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=8a797e6ed978405692c4acbf4650873f&time=20220526T114643Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=503d69dcabf0497192a0b80de8d4c17c®ion=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFHVFW&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=8a797e6ed978405692c4acbf4650873f&time=20220526T114644Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=503d69dcabf0497192a0b80de8d4c17c®ion=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NBLGGH5FV99&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=8a797e6ed978405692c4acbf4650873f&time=20220526T114646Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=503d69dcabf0497192a0b80de8d4c17c®ion=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NBLGGH5FV99&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=8a797e6ed978405692c4acbf4650873f&time=20220526T114647Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=503d69dcabf0497192a0b80de8d4c17c®ion=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRDFNG7&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=8a797e6ed978405692c4acbf4650873f&time=20220526T114648Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=503d69dcabf0497192a0b80de8d4c17c®ion=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRDFNG7&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=8a797e6ed978405692c4acbf4650873f&time=20220526T114648Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=503d69dcabf0497192a0b80de8d4c17c®ion=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NCBCSZSJRSB&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=8a797e6ed978405692c4acbf4650873f&time=20220526T114649Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106554&cid=128000000001392709&tid=700342084&reqasid=503d69dcabf0497192a0b80de8d4c17c®ion=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NCBCSZSJRSB&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=8a797e6ed978405692c4acbf4650873f&time=20220526T114650Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=c69b812bb0ae4b12bda8ee4358d8f4cd®ion=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NBLGGGZM6WM&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=c7a8b22123bf4f0d817b2043a0b86bd8&time=20220526T114651Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=c69b812bb0ae4b12bda8ee4358d8f4cd®ion=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFJ27N&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=c7a8b22123bf4f0d817b2043a0b86bd8&time=20220526T114655Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=c69b812bb0ae4b12bda8ee4358d8f4cd®ion=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFJ27N&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=c7a8b22123bf4f0d817b2043a0b86bd8&time=20220526T114655Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=c69b812bb0ae4b12bda8ee4358d8f4cd®ion=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9P6RC76MSMMJ&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=c7a8b22123bf4f0d817b2043a0b86bd8&time=20220526T114656Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=c69b812bb0ae4b12bda8ee4358d8f4cd®ion=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9P6RC76MSMMJ&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=c7a8b22123bf4f0d817b2043a0b86bd8&time=20220526T114657Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=c69b812bb0ae4b12bda8ee4358d8f4cd®ion=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NBLGGH6J6VK&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=c7a8b22123bf4f0d817b2043a0b86bd8&time=20220526T114658Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=c69b812bb0ae4b12bda8ee4358d8f4cd®ion=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NH2GPH4JZS4&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=c7a8b22123bf4f0d817b2043a0b86bd8&time=20220526T114659Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=c69b812bb0ae4b12bda8ee4358d8f4cd®ion=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9NH2GPH4JZS4&skuId=0010&installKind=Install&ctid=store-curated-postoobe&bSrc=i.t&asid=c7a8b22123bf4f0d817b2043a0b86bd8&time=20220526T114659Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /v1/a/pin?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=c69b812bb0ae4b12bda8ee4358d8f4cd®ion=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFHWD2&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=c7a8b22123bf4f0d817b2043a0b86bd8&time=20220526T114700Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /v1/a/impression?pg=PC000P0FR5.0000000IQ8&unid=&placementType=PostOOBE&app=&pid=425106558&cid=128000000001392729&tid=700342085&reqasid=c69b812bb0ae4b12bda8ee4358d8f4cd®ion=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&auid=&anid=&muid=&persid=&itemId=9WZDNCRFHWD2&skuId=0010&installKind=RedirectTile&ctid=store-curated-postoobe&bSrc=i.t&asid=c7a8b22123bf4f0d817b2043a0b86bd8&time=20220526T114700Z HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=310091&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:D9BC7EDF-91E8-C8ED-3ED4-3B144B30C00C&ctry=US&time=20220526T114715Z&lc=en-US&pl=en-US&idtp=mid&uid=a9223225-82ba-4622-a95e-dcecd6738abd&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=51be641ae3a54b9d9648ac13fd1c5b30&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1531774&metered=false&nettype=ethernet&npid=sc-310091&oemName=dchdpw%2C%20Inc.&oemid=dchdpw%2C%20Inc.&ossku=Professional&rver=2&smBiosDm=dchdpw7%2C1&tl=2&tsu=1531774&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: chs=0&imp=0&chf=0&ds=50583&fs=32089&sc=6X-SDK-HW-TOKEN: t=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&p=Cache-Control: no-cacheMS-CV: ZzmvxQo5vEaTaf5Z.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: tch0,m301,m751,mA01,mT01Host: arc.msn.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /v1/a/impression?CID=128000000000402926®ion=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&EID=&&PID=400091688&UIT=P-&TargetID=700129702&AN=900417064&PG=PC000P0FR5.0000000IRT&REQASID=0D4A28FBEAE64E4F954F41B00C93294F&UNID=338388&ASID=67de6f61a7594a7ea4f60a45eba3a471&PERSID=1A4A490328ED3BBECC8505EAE64E45F5&GLOBALDEVICEID=6966530473343700&LOCALID=w:D9BC7EDF-91E8-C8ED-3ED4-3B144B30C00C&DS_EVTID=c959f256e9ab433b8f22f14cb639eefa&DEVOSVER=10.0.17134.1&REQT=20220526T114639&TIME=20220526T114715Z&ARCRAS=&CLR=CDM HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive |
| Source: global traffic | HTTP traffic detected: GET /v1/a/impression?CID=128000000000402926®ion=US&lang=EN-US&oem=&devFam=WINDOWS.DESKTOP&ossku=PROFESSIONAL&cmdVer=10.0.17134.1&mo=&cap=&EID=&&PID=400091688&UIT=P-&TargetID=700129702&AN=900417064&PG=PC000P0FR5.0000000IRT&REQASID=0D4A28FBEAE64E4F954F41B00C93294F&UNID=338388&ASID=67de6f61a7594a7ea4f60a45eba3a471&PERSID=1A4A490328ED3BBECC8505EAE64E45F5&GLOBALDEVICEID=6966530473343700&LOCALID=w:D9BC7EDF-91E8-C8ED-3ED4-3B144B30C00C&DS_EVTID=c959f256e9ab433b8f22f14cb639eefa&DEVOSVER=10.0.17134.1&REQT=20220526T114639&TIME=20220526T114716Z&ARCRAS=&CLR=CDM HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: ris.api.iris.microsoft.comConnection: Keep-Alive |
| Source: unknown | Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --enable-automation "C:\Users\user\Desktop\Invoice_payment_confirmation_567.html |
| Source: C:\Program Files\Google\Chrome\Application\chrome.exe | Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1548,14108967426269858545,9759409369232530539,131072 --lang=en-GB --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1920 /prefetch:8 |
| Source: unknown | Process created: C:\Program Files\Google\Chrome\Application\85.0.4183.121\elevation_service.exe C:\Program Files\Google\Chrome\Application\85.0.4183.121\elevation_service.exe |
| Source: C:\Program Files\Google\Chrome\Application\85.0.4183.121\elevation_service.exe | Process created: C:\Program Files\Google\Chrome\ChromeRecovery\scoped_dir3536_8644126\ChromeRecovery.exe "C:\Program Files\Google\Chrome\ChromeRecovery\scoped_dir3536_8644126\ChromeRecovery.exe" --appguid={8A69D345-D564-463c-AFF1-A69D9E530F96} --browser-version=85.0.4183.121 --sessionid={2b7a79f6-5644-4c8c-aac6-e0494a82c1d2} --system |
| Source: C:\Program Files\Google\Chrome\Application\chrome.exe | Process created: unknown unknown |
| Source: C:\Program Files\Google\Chrome\Application\chrome.exe | Process created: unknown unknown |
| Source: C:\Program Files\Google\Chrome\Application\chrome.exe | Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1548,14108967426269858545,9759409369232530539,131072 --lang=en-GB --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1920 /prefetch:8 |
| Source: C:\Program Files\Google\Chrome\Application\chrome.exe | Process created: unknown unknown |
| Source: C:\Program Files\Google\Chrome\Application\chrome.exe | Process created: unknown unknown |
| Source: C:\Program Files\Google\Chrome\Application\chrome.exe | Process created: unknown unknown |
| Source: C:\Program Files\Google\Chrome\Application\chrome.exe | Process created: unknown unknown |
| Source: C:\Program Files\Google\Chrome\Application\chrome.exe | Process created: unknown unknown |
| Source: C:\Program Files\Google\Chrome\Application\chrome.exe | Process created: unknown unknown |
| Source: C:\Program Files\Google\Chrome\Application\chrome.exe | Process created: unknown unknown |
| Source: C:\Program Files\Google\Chrome\Application\chrome.exe | Process created: unknown unknown |
| Source: C:\Program Files\Google\Chrome\Application\chrome.exe | Process created: unknown unknown |
| Source: C:\Program Files\Google\Chrome\Application\chrome.exe | Process created: unknown unknown |
| Source: C:\Program Files\Google\Chrome\Application\chrome.exe | Process created: unknown unknown |
| Source: C:\Program Files\Google\Chrome\Application\chrome.exe | Process created: unknown unknown |
| Source: C:\Program Files\Google\Chrome\Application\chrome.exe | Process created: unknown unknown |
| Source: C:\Program Files\Google\Chrome\Application\chrome.exe | Process created: unknown unknown |
| Source: C:\Program Files\Google\Chrome\Application\chrome.exe | Process created: unknown unknown |
| Source: C:\Program Files\Google\Chrome\Application\chrome.exe | Process created: unknown unknown |
| Source: C:\Program Files\Google\Chrome\Application\chrome.exe | Process created: unknown unknown |
| Source: C:\Program Files\Google\Chrome\Application\chrome.exe | Process created: unknown unknown |
| Source: C:\Program Files\Google\Chrome\Application\chrome.exe | Process created: unknown unknown |
| Source: C:\Program Files\Google\Chrome\Application\chrome.exe | Process created: unknown unknown |
| Source: C:\Program Files\Google\Chrome\Application\chrome.exe | Process created: unknown unknown |
| Source: C:\Program Files\Google\Chrome\Application\chrome.exe | Process created: unknown unknown |
| Source: C:\Program Files\Google\Chrome\Application\chrome.exe | Process created: unknown unknown |
| Source: C:\Program Files\Google\Chrome\Application\chrome.exe | Process created: unknown unknown |
| Source: C:\Program Files\Google\Chrome\Application\chrome.exe | Process created: unknown unknown |
| Source: C:\Program Files\Google\Chrome\Application\chrome.exe | Process created: unknown unknown |
| Source: C:\Program Files\Google\Chrome\Application\85.0.4183.121\elevation_service.exe | Process created: C:\Program Files\Google\Chrome\ChromeRecovery\scoped_dir3536_8644126\ChromeRecovery.exe "C:\Program Files\Google\Chrome\ChromeRecovery\scoped_dir3536_8644126\ChromeRecovery.exe" --appguid={8A69D345-D564-463c-AFF1-A69D9E530F96} --browser-version=85.0.4183.121 --sessionid={2b7a79f6-5644-4c8c-aac6-e0494a82c1d2} --system |
Edit tour
chrome.exe (PID: 1640 cmdline: 
elevation_service.exe (PID: 3536 cmdline: 
ChromeRecovery.exe (PID: 1584 cmdline: 
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet
Key Decision
Richest Path
Thread / callback creation
Lower opacity -> Library Node