24:I[7638,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js","/_next/static/chunks/2wvg5zqmbil4p.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/3l_wb6il5gi_h.js","/_next/static/chunks/136wug8odqdqr.js"],"SampleDetailWrapper"] 38:I[27201,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js"],"IconMark"] 23:T48f,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Mint.Zard.Generic Sample df482da0d9a3… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample df482da0d9a3…. Malware family: Mint.Zard.Generic. Threat score 100/100. 16/28 AV engines flagged this file. 4 malicious and 17 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/df482da0d9a366592795d1f87f174eae6a423b01d4d4a9c7b022e17c38395d73","keywords":["Malicious","Mint.Zard.Generic","malware analysis","sandbox report","threat intelligence","df482da0d9a366592795d1f87f174eae6a423b01d4d4a9c7b022e17c38395d73"],"about":{"@type":"SoftwareApplication","name":"file.exe","applicationCategory":["peexe","executable"],"identifier":"df482da0d9a366592795d1f87f174eae6a423b01d4d4a9c7b022e17c38395d73","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"Mint.Zard.Generic","antivirusDetections":{"malicious":16,"total":28},"behavioralIndicators":{"malicious":4,"suspicious":17},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}25:T8f5," HTTP/1.1 200 OK Date: Fri 19 Jun 2026 16:42:12 GMT Content-Type: text/plain Content-Length: 14 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET set-cookie: __cf_bm=TO_df2m8DdMmEmiq.w.yU7NfGDt1xCZTim1T5Kyqn0o-1781887332.0065873-1.0.1.1-PD2kmz8KS9qj9rJsCDRqxAm5LJBKt6l3WnRxhtGF_4zmSBnEVqq_5vQi.EYskaP0HsXlGHC2V6mHS8SgwU4J7__nu4P0iOWbbCBcu.WGbdoWbOVUCHmXi0E0gQUG96tN; HttpOnly; Path=/; Domain=icanhazip.com; Expires=Fri 19 Jun 2026 17:12:12 GMT Server: cloudflare CF-RAY: a0e3fc510d872af7-SJC alt-svc: h3=":443"; ma=86400 with response body ==>36342E3132342E31322E3136320A....... "GET /n.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/202.0.4664.110 Safari/537.36 Host: 178.16.55.240" Response ==> HTTP/1.1 200 OK Server: nginx/1.31.1 Date: Sat 20 Jun 2026 01:42:40 GMT Content-Type: text/plain Content-Length: 6 Last-Modified: Thu 04 Jun 2026 04:14:14 GMT Connection: keep-alive ETag: "6a20fb96-6" Accept-Ranges: bytes with response body ==>323330363738....... "GET /service/msn/livetile/singletile?market=en-US&source=appxmanifest&tenant=amp&vertical=finance HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WNS/10.0 Host: assets.msn.com" Response ==> HTTP/1.1 200 OK Content-Type: text/xml; charset=utf-8 DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-StrategyExecutionLatency: 00:00:00.1515141 DDD-ActivityId: 26e58e29-6058-46a3-91d0-61516194709a DDD-TMPL-Removed: False DDD-DebugId: 26e58e29-6058-46a3-91d0-61516194709a|2026-06-19T16:37:58.1959099Z|fabric_msn|EUS2-A|News_218 DDD-Auth-Features: AT:NA;DID:m-2D3FF78C94FF69FE1A99E0F1954868ED;IT:Unknown;MuidStateOrigin:MuidFromClientIDHeader OneWebServiceLatency: 152 X-MSEdge-ResponseInfo: 152 X-Ceto-ref: 6a3570666246488eb4c8833043687d2e|AFD:6a3570666246488eb4c8833043687d2e|2026-06-19T16:37:58.041Z Accept-CH: Sec-CH-UA-Arch Sec-CH-UA-Bitness Sec-CH-UA-Full-Version Sec-CH-UA-Full-Version-List Sec-CH-UA-Mobile Sec-CH-UA-Model Sec-CH-UA-Platform Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: CDBD020E3FFC4165935DB27160F530FB Ref B: CHI261140511025 Ref C: 2026-06-19T16:37:58Z Date: Fri 19 Jun 2026 16:42:13 GMT Content-Length: 1090 Connection: keep-alive Akamai-Request-BC: [a=184.25.112.166 b=710075235 c=g n=US_IL_CHICAGO o=20940] X-CDN-Ref: 2a52e363 | 6a3570666246488eb4c8833043687d2e|AFD:6a3570666246488eb4c8833043687d2e|2026-06-19T16:37:58.041Z | 2026-06-19T16:42:13 Server-Timing: clientrtt; dur=50 clienttt; dur=0 origin; dur=0 cdntime; dur=0 wpo;dur=0 1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.25.112.166 Akamai-Request-ID: 2a52e363 X-AS-SuppressSetCookie: 1 Cache-Control: public max-age=300 report-to: {"group":"network-errors" "max_age":604800 "endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors" "max_age":604800 "success_fraction":0.001 "failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.a67019b8.1781887333.2a52e363 Vary: Origin with response body ==>3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D227574662D38223F3E3C74696C653E3C76697375616C20616464496D61676551756572....... "GET /service/msn/livetile/singletile?market=en-US&source=appxmanifest&tenant=amp&vertical=finance HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WNS/10.0 Host: assets.msn.com" Response ==> HTTP/1.1 200 OK Content-Type: text/xml; charset=utf-8 DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-StrategyExecutionLatency: 00:00:00.1515141 DDD-ActivityId: 26e58e29-6058-46a3-91d0-61516194709a DDD-TMPL-Removed: False DDD-DebugId: 26e58e29-6058-46a3-91d0-61516194709a|2026-06-19T16:37:58.1959099Z|fabric_msn|EUS2-A|News_218 DDD-Auth-Features: AT:NA;DID:m-2D3FF78C94FF69FE1A99E0F1954868ED;IT:Unknown;MuidStateOrigin:MuidFromClientIDHeader OneWebServiceLatency: 152 X-MSEdge-ResponseInfo: 152 X-Ceto-ref: 6a3570666246488eb4c8833043687d2e|AFD:6a3570666246488eb4c8833043687d2e|2026-06-19T16:37:58.041Z Accept-CH: Sec-CH-UA-Arch Sec-CH-UA-Bitness Sec-CH-UA-Full-Version Sec-CH-UA-Full-Version-List Sec-CH-UA-Mobile Sec-CH-UA-Model Sec-CH-UA-Platform Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: CDBD020E3FFC4165935DB27160F530FB Ref B: CHI261140511025 Ref C: 2026-06-19T16:37:58Z Date: Fri 19 Jun 2026 16:42:13 GMT Content-Length: 1090 Connection: keep-alive Akamai-Request-BC: [a=184.25.112.146 b=298275047 c=g n=US_IL_CHICAGO o=20940] X-CDN-Ref: 11c750e7 | 6a3570666246488eb4c8833043687d2e|AFD:6a3570666246488eb4c8833043687d2e|2026-06-19T16:37:58.041Z | 2026-06-19T16:42:13 Server-Timing: clientrtt; dur=49 clienttt; dur=0 origin; dur=0 cdntime; dur=0 wpo;dur=0 1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.25.112.146 Akamai-Request-ID: 11c750e7 X-AS-SuppressSetCookie: 1 Cache-Control: public max-age=300 report-to: {"group":"network-errors" "max_age":604800 "endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors" "max_age":604800 "success_fraction":0.001 "failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.927019b8.1781887333.11c750e7 Vary: Origin with response body ==>3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D227574662D38223F3E3C74696C653E3C76697375616C20616464496D61676551756572....... "GET /service/msn/livetile/singletile?market=en-US&source=appxmanifest&tenant=amp&vertical=finance HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WNS/10.0 Host: assets.msn.com" Response ==> HTTP/1.1 200 OK Content-Type: text/xml; charset=utf-8 DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-StrategyExecutionLatency: 00:00:00.1515141 DDD-ActivityId: 26e58e29-6058-46a3-91d0-61516194709a DDD-TMPL-Removed: False DDD-DebugId: 26e58e29-6058-46a3-91d0-61516194709a|2026-06-19T16:37:58.1959099Z|fabric_msn|EUS2-A|News_218 DDD-Auth-Features: AT:NA;DID:m-2D3FF78C94FF69FE1A99E0F1954868ED;IT:Unknown;MuidStateOrigin:MuidFromClientIDHeader OneWebServiceLatency: 152 X-MSEdge-ResponseInfo: 152 X-Ceto-ref: 6a3570666246488eb4c8833043687d2e|AFD:6a3570666246488eb4c8833043687d2e|2026-06-19T16:37:58.041Z Accept-CH: Sec-CH-UA-Arch Sec-CH-UA-Bitness Sec-CH-UA-Full-Version Sec-CH-UA-Full-Version-List Sec-CH-UA-Mobile Sec-CH-UA-Model Sec-CH-UA-Platform Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: CDBD020E3FFC4165935DB27160F530FB Ref B: CHI261140511025 Ref C: 2026-06-19T16:37:58Z Date: Fri 19 Jun 2026 16:42:13 GMT Content-Length: 1090 Connection: keep-alive Akamai-Request-BC: [a=184.25.112.146 b=298275048 c=g n=US_IL_CHICAGO o=20940] X-CDN-Ref: 11c750e8 | 6a3570666246488eb4c8833043687d2e|AFD:6a3570666246488eb4c8833043687d2e|2026-06-19T16:37:58.041Z | 2026-06-19T16:42:13 Server-Timing: clientrtt; dur=50 clienttt; dur=1 origin; dur=0 cdntime; dur=1 wpo;dur=0 1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.25.112.146 Akamai-Request-ID: 11c750e8 X-AS-SuppressSetCookie: 1 Cache-Control: public max-age=300 report-to: {"group":"network-errors" "max_age":604800 "endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors" "max_age":604800 "success_fraction":0.001 "failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.927019b8.1781887333.11c750e8 Vary: Origin with response body ==>3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D227574662D38223F3E3C74696C653E3C76697375616C20616464496D61676551756572....... "GET /service/msn/livetile/singletile?market=en-US&source=appxmanifest&tenant=amp&vertical=finance HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WNS/10.0 Host: assets.msn.com" Response ==> HTTP/1.1 200 OK Content-Type: text/xml; charset=utf-8 DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-StrategyExecutionLatency: 00:00:00.1515141 DDD-ActivityId: 26e58e29-6058-46a3-91d0-61516194709a DDD-TMPL-Removed: False DDD-DebugId: 26e58e29-6058-46a3-91d0-61516194709a|2026-06-19T16:37:58.1959099Z|fabric_msn|EUS2-A|News_218 DDD-Auth-Features: AT:NA;DID:m-2D3FF78C94FF69FE1A99E0F1954868ED;IT:Unknown;MuidStateOrigin:MuidFromClientIDHeader OneWebServiceLatency: 152 X-MSEdge-ResponseInfo: 152 X-Ceto-ref: 6a3570666246488eb4c8833043687d2e|AFD:6a3570666246488eb4c8833043687d2e|2026-06-19T16:37:58.041Z Accept-CH: Sec-CH-UA-Arch Sec-CH-UA-Bitness Sec-CH-UA-Full-Version Sec-CH-UA-Full-Version-List Sec-CH-UA-Mobile Sec-CH-UA-Model Sec-CH-UA-Platform Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: CDBD020E3FFC4165935DB27160F530FB Ref B: CHI261140511025 Ref C: 2026-06-19T16:37:58Z Date: Fri 19 Jun 2026 16:42:13 GMT Content-Length: 1090 Connection: keep-alive Akamai-Request-BC: [a=184.25.112.190 b=703086023 c=g n=US_IL_CHICAGO o=20940] X-CDN-Ref: 29e83dc7 | 6a3570666246488eb4c8833043687d2e|AFD:6a3570666246488eb4c8833043687d2e|2026-06-19T16:37:58.041Z | 2026-06-19T16:42:13 Server-Timing: clientrtt; dur=46 clienttt; dur=0 origin; dur=0 cdntime; dur=0 wpo;dur=0 1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.25.112.190 Akamai-Request-ID: 29e83dc7 X-AS-SuppressSetCookie: 1 Cache-Control: public max-age=300 report-to: {"group":"network-errors" "max_age":604800 "endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors" "max_age":604800 "success_fraction":0.001 "failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.be7019b8.1781887333.29e83dc7 Vary: Origin with response body ==>3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D227574662D38223F3E3C74696C653E3C76697375616C20616464496D61676551756572....... "GET /110078.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/202.0.4664.110 Safari/537.36 Host: 178.16.55.240" Response ==> HTTP/1.1 200 OK Server: nginx/1.31.1 Date: Sat 20 Jun 2026 01:42:41 GMT Content-Type: text/plain Content-Length: 276480 Last-Modified: Wed 03 Jun 2026 16:48:31 GMT Connection: keep-alive ETag: "6a205adf-43800" Accept-Ranges: bytes with response body ==>7A6F6E2E6E65743A6A77363639380A6A6F686E7731323132406C6976652E636F756B3A6A6F686E6F6772616479310A6A6F686E7731323236384079616E646578....... "GET /service/msn/livetile/singletile?market=en-US&source=appxmanifest&tenant=amp&vertical=finance HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WNS/10.0 Host: assets.msn.com" Response ==> HTTP/1.1 200 OK Content-Type: text/xml; charset=utf-8 DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-StrategyExecutionLatency: 00:00:00.1515141 DDD-ActivityId: 26e58e29-6058-46a3-91d0-61516194709a DDD-TMPL-Removed: False DDD-DebugId: 26e58e29-6058-46a3-91d0-61516194709a|2026-06-19T16:37:58.1959099Z|fabric_msn|EUS2-A|News_218 DDD-Auth-Features: AT:NA;DID:m-2D3FF78C94FF69FE1A99E0F1954868ED;IT:Unknown;MuidStateOrigin:MuidFromClientIDHeader OneWebServiceLatency: 152 X-MSEdge-ResponseInfo: 152 X-Ceto-ref: 6a3570666246488eb4c8833043687d2e|AFD:6a3570666246488eb4c8833043687d2e|2026-06-19T16:37:58.041Z Accept-CH: Sec-CH-UA-Arch Sec-CH-UA-Bitness Sec-CH-UA-Full-Version Sec-CH-UA-Full-Version-List Sec-CH-UA-Mobile Sec-CH-UA-Model Sec-CH-UA-Platform Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: CDBD020E3FFC4165935DB27160F530FB Ref B: CHI261140511025 Ref C: 2026-06-19T16:37:58Z Date: Fri 19 Jun 2026 16:42:13 GMT Content-Length: 1090 Connection: keep-alive Akamai-Request-BC: [a=184.25.112.166 b=710075286 c=g n=US_IL_CHICAGO o=20940] X-CDN-Ref: 2a52e396 | 6a3570666246488eb4c8833043687d2e|AFD:6a3570666246488eb4c8833043687d2e|2026-06-19T16:37:58.041Z | 2026-06-19T16:42:13 Server-Timing: clientrtt; dur=50 clienttt; dur=1 origin; dur=0 cdntime; dur=1 wpo;dur=0 1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.25.112.166 Akamai-Request-ID: 2a52e396 X-AS-SuppressSetCookie: 1 Cache-Control: public max-age=300 report-to: {"group":"network-errors" "max_age":604800 "endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors" "max_age":604800 "success_fraction":0.001 "failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.a67019b8.1781887333.2a52e396 Vary: Origin with response body ==>3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D227574662D38223F3E3C74696C653E3C76697375616C20616464496D61676551756572....... "GET /service/msn/livetile/singletile?market=en-US&source=appxmanifest&tenant=amp&vertical=finance HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WNS/10.0 Host: assets.msn.com" Response ==> HTTP/1.1 200 OK Content-Type: text/xml; charset=utf-8 DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-StrategyExecutionLatency: 00:00:00.1515141 DDD-ActivityId: 26e58e29-6058-46a3-91d0-61516194709a DDD-TMPL-Removed: False DDD-DebugId: 26e58e29-6058-46a3-91d0-61516194709a|2026-06-19T16:37:58.1959099Z|fabric_msn|EUS2-A|News_218 DDD-Auth-Features: AT:NA;DID:m-2D3FF78C94FF69FE1A99E0F1954868ED;IT:Unknown;MuidStateOrigin:MuidFromClientIDHeader OneWebServiceLatency: 152 X-MSEdge-ResponseInfo: 152 X-Ceto-ref: 6a3570666246488eb4c8833043687d2e|AFD:6a3570666246488eb4c8833043687d2e|2026-06-19T16:37:58.041Z Accept-CH: Sec-CH-UA-Arch Sec-CH-UA-Bitness Sec-CH-UA-Full-Version Sec-CH-UA-Full-Version-List Sec-CH-UA-Mobile Sec-CH-UA-Model Sec-CH-UA-Platform Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: CDBD020E3FFC4165935DB27160F530FB Ref B: CHI261140511025 Ref C: 2026-06-19T16:37:58Z Date: Fri 19 Jun 2026 16:42:13 GMT Content-Length: 1090 Connection: keep-alive Akamai-Request-BC: [a=184.25.112.190 b=703086048 c=g n=US_IL_CHICAGO o=20940] X-CDN-Ref: 29e83de0 | 6a3570666246488eb4c8833043687d2e|AFD:6a3570666246488eb4c8833043687d2e|2026-06-19T16:37:58.041Z | 2026-06-19T16:42:13 Server-Timing: clientrtt; dur=47 clienttt; dur=1 origin; dur=0 cdntime; dur=1 wpo;dur=0 1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.25.112.190 Akamai-Request-ID: 29e83de0 X-AS-SuppressSetCookie: 1 Cache-Control: public max-age=300 report-to: {"group":"network-errors" "max_age":604800 "endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors" "max_age":604800 "success_fraction":0.001 "failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.be7019b8.1781887333.29e83de0 Vary: Origin with response body ==>3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D227574662D38223F3E3C74696C653E3C76697375616C20616464496D61676551756572....... "GET /service/msn/livetile/singletile?market=en-US&source=appxmanifest&tenant=amp&vertical=finance HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WNS/10.0 Host: assets.msn.com" Response ==> HTTP/1.1 200 OK Content-Type: text/xml; charset=utf-8 DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-StrategyExecutionLatency: 00:00:00.1515141 DDD-ActivityId: 26e58e29-6058-46a3-91d0-61516194709a DDD-TMPL-Removed: False DDD-DebugId: 26e58e29-6058-46a3-91d0-61516194709a|2026-06-19T16:37:58.1959099Z|fabric_msn|EUS2-A|News_218 DDD-Auth-Features: AT:NA;DID:m-2D3FF78C94FF69FE1A99E0F1954868ED;IT:Unknown;MuidStateOrigin:MuidFromClientIDHeader OneWebServiceLatency: 152 X-MSEdge-ResponseInfo: 152 X-Ceto-ref: 6a3570666246488eb4c8833043687d2e|AFD:6a3570666246488eb4c8833043687d2e|2026-06-19T16:37:58.041Z Accept-CH: Sec-CH-UA-Arch Sec-CH-UA-Bitness Sec-CH-UA-Full-Version Sec-CH-UA-Full-Version-List Sec-CH-UA-Mobile Sec-CH-UA-Model Sec-CH-UA-Platform Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: CDBD020E3FFC4165935DB27160F530FB Ref B: CHI261140511025 Ref C: 2026-06-19T16:37:58Z Date: Fri 19 Jun 2026 16:42:13 GMT Content-Length: 1090 Connection: keep-alive Akamai-Request-BC: [a=184.25.112.146 b=298275209 c=g n=US_IL_CHICAGO o=20940] X-CDN-Ref: 11c75189 | 6a3570666246488eb4c8833043687d2e|AFD:6a3570666246488eb4c8833043687d2e|2026-06-19T16:37:58.041Z | 2026-06-19T16:42:13 Server-Timing: clientrtt; dur=46 clienttt; dur=0 origin; dur=0 cdntime; dur=0 wpo;dur=0 1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.25.112.146 Akamai-Request-ID: 11c75189 X-AS-SuppressSetCookie: 1 Cache-Control: public max-age=300 report-to: {"group":"network-errors" "max_age":604800 "endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors" "max_age":604800 "success_fraction":0.001 "failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.927019b8.1781887333.11c75189 Vary: Origin with response body ==>3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D227574662D38223F3E3C74696C653E3C76697375616C20616464496D61676551756572....... "GET /service/msn/livetile/singletile?market=en-US&source=appxmanifest&tenant=amp&vertical=finance HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WNS/10.0 Host: assets.msn.com" Response ==> HTTP/1.1 200 OK Content-Type: text/xml; charset=utf-8 DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-StrategyExecutionLatency: 00:00:00.1515141 DDD-ActivityId: 26e58e29-6058-46a3-91d0-61516194709a DDD-TMPL-Removed: False DDD-DebugId: 26e58e29-6058-46a3-91d0-61516194709a|2026-06-19T16:37:58.1959099Z|fabric_msn|EUS2-A|News_218 DDD-Auth-Features: AT:NA;DID:m-2D3FF78C94FF69FE1A99E0F1954868ED;IT:Unknown;MuidStateOrigin:MuidFromClientIDHeader OneWebServiceLatency: 152 X-MSEdge-ResponseInfo: 152 X-Ceto-ref: 6a3570666246488eb4c8833043687d2e|AFD:6a3570666246488eb4c8833043687d2e|2026-06-19T16:37:58.041Z Accept-CH: Sec-CH-UA-Arch Sec-CH-UA-Bitness Sec-CH-UA-Full-Version Sec-CH-UA-Full-Version-List Sec-CH-UA-Mobile Sec-CH-UA-Model Sec-CH-UA-Platform Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: CDBD020E3FFC4165935DB27160F530FB Ref B: CHI261140511025 Ref C: 2026-06-19T16:37:58Z Date: Fri 19 Jun 2026 16:42:13 GMT Content-Length: 1090 Connection: keep-alive Akamai-Request-BC: [a=184.25.112.146 b=298275080 c=g n=US_IL_CHICAGO o=20940] X-CDN-Ref: 11c75108 | 6a3570666246488eb4c8833043687d2e|AFD:6a3570666246488eb4c8833043687d2e|2026-06-19T16:37:58.041Z | 2026-06-19T16:42:13 Server-Timing: clientrtt; dur=48 clienttt; dur=0 origin; dur=0 cdntime; dur=0 wpo;dur=0 1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.25.112.146 Akamai-Request-ID: 11c75108 X-AS-SuppressSetCookie: 1 Cache-Control: public max-age=300 report-to: {"group":"network-errors" "max_age":604800 "endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors" "max_age":604800 "success_fraction":0.001 "failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.927019b8.1781887333.11c75108 Vary: Origin with response body ==>3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D227574662D38223F3E3C74696C653E3C76697375616C20616464496D61676551756572....... "GET /service/msn/livetile/singletile?market=en-US&source=appxmanifest&tenant=amp&vertical=finance HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WNS/10.0 Host: assets.msn.com" Response ==> HTTP/1.1 200 OK Content-Type: text/xml; charset=utf-8 DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-StrategyExecutionLatency: 00:00:00.1515141 DDD-ActivityId: 26e58e29-6058-46a3-91d0-61516194709a DDD-TMPL-Removed: False DDD-DebugId: 26e58e29-6058-46a3-91d0-61516194709a|2026-06-19T16:37:58.1959099Z|fabric_msn|EUS2-A|News_218 DDD-Auth-Features: AT:NA;DID:m-2D3FF78C94FF69FE1A99E0F1954868ED;IT:Unknown;MuidStateOrigin:MuidFromClientIDHeader OneWebServiceLatency: 152 X-MSEdge-ResponseInfo: 152 X-Ceto-ref: 6a3570666246488eb4c8833043687d2e|AFD:6a3570666246488eb4c8833043687d2e|2026-06-19T16:37:58.041Z Accept-CH: Sec-CH-UA-Arch Sec-CH-UA-Bitness Sec-CH-UA-Full-Version Sec-CH-UA-Full-Version-List Sec-CH-UA-Mobile Sec-CH-UA-Model Sec-CH-UA-Platform Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: CDBD020E3FFC4165935DB27160F530FB Ref B: CHI261140511025 Ref C: 2026-06-19T16:37:58Z Date: Fri 19 Jun 2026 16:42:13 GMT Content-Length: 1090 Connection: keep-alive Akamai-Request-BC: [a=184.25.112.146 b=298275087 c=g n=US_IL_CHICAGO o=20940] X-CDN-Ref: 11c7510f | 6a3570666246488eb4c8833043687d2e|AFD:6a3570666246488eb4c8833043687d2e|2026-06-19T16:37:58.041Z | 2026-06-19T16:42:13 Server-Timing: clientrtt; dur=50 clienttt; dur=0 origin; dur=0 cdntime; dur=0 wpo;dur=0 1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.25.112.146 Akamai-Request-ID: 11c7510f X-AS-SuppressSetCookie: 1 Cache-Control: public max-age=300 report-to: {"group":"network-errors" "max_age":604800 "endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors" "max_age":604800 "success_fraction":0.001 "failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.927019b8.1781887333.11c7510f Vary: Origin with response body ==>3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D227574662D38223F3E3C74696C653E3C76697375616C20616464496D61676551756572....... "GET /service/msn/livetile/singletile?market=en-US&source=appxmanifest&tenant=amp&vertical=finance HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WNS/10.0 Host: assets.msn.com" Response ==> HTTP/1.1 200 OK Content-Type: text/xml; charset=utf-8 DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-StrategyExecutionLatency: 00:00:00.1515141 DDD-ActivityId: 26e58e29-6058-46a3-91d0-61516194709a DDD-TMPL-Removed: False DDD-DebugId: 26e58e29-6058-46a3-91d0-61516194709a|2026-06-19T16:37:58.1959099Z|fabric_msn|EUS2-A|News_218 DDD-Auth-Features: AT:NA;DID:m-2D3FF78C94FF69FE1A99E0F1954868ED;IT:Unknown;MuidStateOrigin:MuidFromClientIDHeader OneWebServiceLatency: 152 X-MSEdge-ResponseInfo: 152 X-Ceto-ref: 6a3570666246488eb4c8833043687d2e|AFD:6a3570666246488eb4c8833043687d2e|2026-06-19T16:37:58.041Z Accept-CH: Sec-CH-UA-Arch Sec-CH-UA-Bitness Sec-CH-UA-Full-Version Sec-CH-UA-Full-Version-List Sec-CH-UA-Mobile Sec-CH-UA-Model Sec-CH-UA-Platform Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: CDBD020E3FFC4165935DB27160F530FB Ref B: CHI261140511025 Ref C: 2026-06-19T16:37:58Z Date: Fri 19 Jun 2026 16:42:13 GMT Content-Length: 1090 Connection: keep-alive Akamai-Request-BC: [a=184.25.112.190 b=703086032 c=g n=US_IL_CHICAGO o=20940] X-CDN-Ref: 29e83dd0 | 6a3570666246488eb4c8833043687d2e|AFD:6a3570666246488eb4c8833043687d2e|2026-06-19T16:37:58.041Z | 2026-06-19T16:42:13 Server-Timing: clientrtt; dur=46 clienttt; dur=0 origin; dur=0 cdntime; dur=0 wpo;dur=0 1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.25.112.190 Akamai-Request-ID: 29e83dd0 X-AS-SuppressSetCookie: 1 Cache-Control: public max-age=300 report-to: {"group":"network-errors" "max_age":604800 "endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors" "max_age":604800 "success_fraction":0.001 "failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.be7019b8.1781887333.29e83dd0 Vary: Origin with response body ==>3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D227574662D38223F3E3C74696C653E3C76697375616C20616464496D61676551756572....... "GET /service/msn/livetile/singletile?market=en-US&source=appxmanifest&tenant=amp&vertical=finance HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WNS/10.0 Host: assets.msn.com" Response ==> HTTP/1.1 200 OK Content-Type: text/xml; charset=utf-8 DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-StrategyExecutionLatency: 00:00:00.1515141 DDD-ActivityId: 26e58e29-6058-46a3-91d0-61516194709a DDD-TMPL-Removed: False DDD-DebugId: 26e58e29-6058-46a3-91d0-61516194709a|2026-06-19T16:37:58.1959099Z|fabric_msn|EUS2-A|News_218 DDD-Auth-Features: AT:NA;DID:m-2D3FF78C94FF69FE1A99E0F1954868ED;IT:Unknown;MuidStateOrigin:MuidFromClientIDHeader OneWebServiceLatency: 152 X-MSEdge-ResponseInfo: 152 X-Ceto-ref: 6a3570666246488eb4c8833043687d2e|AFD:6a3570666246488eb4c8833043687d2e|2026-06-19T16:37:58.041Z Accept-CH: Sec-CH-UA-Arch Sec-CH-UA-Bitness Sec-CH-UA-Full-Version Sec-CH-UA-Full-Version-List Sec-CH-UA-Mobile Sec-CH-UA-Model Sec-CH-UA-Platform Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: CDBD020E3FFC4165935DB27160F530FB Ref B: CHI261140511025 Ref C: 2026-06-19T16:37:58Z Date: Fri 19 Jun 2026 16:42:14 GMT Content-Length: 1090 Connection: keep-alive Akamai-Request-BC: [a=184.25.112.166 b=710075395 c=g n=US_IL_CHICAGO o=20940] X-CDN-Ref: 2a52e403 | 6a3570666246488eb4c8833043687d2e|AFD:6a3570666246488eb4c8833043687d2e|2026-06-19T16:37:58.041Z | 2026-06-19T16:42:14 Server-Timing: clientrtt; dur=50 clienttt; dur=0 origin; dur=0 cdntime; dur=0 wpo;dur=0 1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.25.112.166 Akamai-Request-ID: 2a52e403 X-AS-SuppressSetCookie: 1 Cache-Control: public max-age=300 report-to: {"group":"network-errors" "max_age":604800 "endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors" "max_age":604800 "success_fraction":0.001 "failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.a67019b8.1781887334.2a52e403 Vary: Origin with response body ==>3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D227574662D38223F3E3C74696C653E3C76697375616C20616464496D61676551756572....... "GET /service/msn/livetile/singletile?market=en-US&source=appxmanifest&tenant=amp&vertical=finance HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WNS/10.0 Host: assets.msn.com" Response ==> HTTP/1.1 200 OK Content-Type: text/xml; charset=utf-8 DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-StrategyExecutionLatency: 00:00:00.1515141 DDD-ActivityId: 26e58e29-6058-46a3-91d0-61516194709a DDD-TMPL-Removed: False DDD-DebugId: 26e58e29-6058-46a3-91d0-61516194709a|2026-06-19T16:37:58.1959099Z|fabric_msn|EUS2-A|News_218 DDD-Auth-Features: AT:NA;DID:m-2D3FF78C94FF69FE1A99E0F1954868ED;IT:Unknown;MuidStateOrigin:MuidFromClientIDHeader OneWebServiceLatency: 152 X-MSEdge-ResponseInfo: 152 X-Ceto-ref: 6a3570666246488eb4c8833043687d2e|AFD:6a3570666246488eb4c8833043687d2e|2026-06-19T16:37:58.041Z Accept-CH: Sec-CH-UA-Arch Sec-CH-UA-Bitness Sec-CH-UA-Full-Version Sec-CH-UA-Full-Version-List Sec-CH-UA-Mobile Sec-CH-UA-Model Sec-CH-UA-Platform Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: CDBD020E3FFC4165935DB27160F530FB Ref B: CHI261140511025 Ref C: 2026-06-19T16:37:58Z Date: Fri 19 Jun 2026 16:42:14 GMT Content-Length: 1090 Connection: keep-alive Akamai-Request-BC: [a=184.25.112.190 b=703086068 c=g n=US_IL_CHICAGO o=20940] X-CDN-Ref: 29e83df4 | 6a3570666246488eb4c8833043687d2e|AFD:6a3570666246488eb4c8833043687d2e|2026-06-19T16:37:58.041Z | 2026-06-19T16:42:14 Server-Timing: clientrtt; dur=47 clienttt; dur=0 origin; dur=0 cdntime; dur=0 wpo;dur=0 1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.25.112.190 Akamai-Request-ID: 29e83df4 X-AS-SuppressSetCookie: 1 Cache-Control: public max-age=300 report-to: {"group":"network-errors" "max_age":604800 "endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors" "max_age":604800 "success_fraction":0.001 "failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.be7019b8.1781887334.29e83df4 Vary: Origin with response body ==>3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D227574662D38223F3E3C74696C653E3C76697375616C20616464496D61676551756572....... "GET /service/msn/livetile/singletile?market=en-US&source=appxmanifest&tenant=amp&vertical=finance HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WNS/10.0 Host: assets.msn.com" Response ==> HTTP/1.1 200 OK Content-Type: text/xml; charset=utf-8 DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-StrategyExecutionLatency: 00:00:00.1515141 DDD-ActivityId: 26e58e29-6058-46a3-91d0-61516194709a DDD-TMPL-Removed: False DDD-DebugId: 26e58e29-6058-46a3-91d0-61516194709a|2026-06-19T16:37:58.1959099Z|fabric_msn|EUS2-A|News_218 DDD-Auth-Features: AT:NA;DID:m-2D3FF78C94FF69FE1A99E0F1954868ED;IT:Unknown;MuidStateOrigin:MuidFromClientIDHeader OneWebServiceLatency: 152 X-MSEdge-ResponseInfo: 152 X-Ceto-ref: 6a3570666246488eb4c8833043687d2e|AFD:6a3570666246488eb4c8833043687d2e|2026-06-19T16:37:58.041Z Accept-CH: Sec-CH-UA-Arch Sec-CH-UA-Bitness Sec-CH-UA-Full-Version Sec-CH-UA-Full-Version-List Sec-CH-UA-Mobile Sec-CH-UA-Model Sec-CH-UA-Platform Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: CDBD020E3FFC4165935DB27160F530FB Ref B: CHI261140511025 Ref C: 2026-06-19T16:37:58Z Date: Fri 19 Jun 2026 16:42:14 GMT Content-Length: 1090 Connection: keep-alive Akamai-Request-BC: [a=184.25.112.146 b=298275225 c=g n=US_IL_CHICAGO o=20940] X-CDN-Ref: 11c75199 | 6a3570666246488eb4c8833043687d2e|AFD:6a3570666246488eb4c8833043687d2e|2026-06-19T16:37:58.041Z | 2026-06-19T16:42:14 Server-Timing: clientrtt; dur=46 clienttt; dur=0 origin; dur=0 cdntime; dur=0 wpo;dur=0 1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.25.112.146 Akamai-Request-ID: 11c75199 X-AS-SuppressSetCookie: 1 Cache-Control: public max-age=300 report-to: {"group":"network-errors" "max_age":604800 "endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors" "max_age":604800 "success_fraction":0.001 "failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.927019b8.1781887334.11c75199 Vary: Origin with response body ==>3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D227574662D38223F3E3C74696C653E3C76697375616C20616464496D61676551756572....... "GET /service/msn/livetile/singletile?market=en-US&source=appxmanifest&tenant=amp&vertical=finance HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WNS/10.0 Host: assets.msn.com" Response ==> HTTP/1.1 200 OK Content-Type: text/xml; charset=utf-8 DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-StrategyExecutionLatency: 00:00:00.1515141 DDD-ActivityId: 26e58e29-6058-46a3-91d0-61516194709a DDD-TMPL-Removed: False DDD-DebugId: 26e58e29-6058-46a3-91d0-61516194709a|2026-06-19T16:37:58.1959099Z|fabric_msn|EUS2-A|News_218 DDD-Auth-Features: AT:NA;DID:m-2D3FF78C94FF69FE1A99E0F1954868ED;IT:Unknown;MuidStateOrigin:MuidFromClientIDHeader OneWebServiceLatency: 152 X-MSEdge-ResponseInfo: 152 X-Ceto-ref: 6a3570666246488eb4c8833043687d2e|AFD:6a3570666246488eb4c8833043687d2e|2026-06-19T16:37:58.041Z Accept-CH: Sec-CH-UA-Arch Sec-CH-UA-Bitness Sec-CH-UA-Full-Version Sec-CH-UA-Full-Version-List Sec-CH-UA-Mobile Sec-CH-UA-Model Sec-CH-UA-Platform Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: CDBD020E3FFC4165935DB27160F530FB Ref B: CHI261140511025 Ref C: 2026-06-19T16:37:58Z Date: Fri 19 Jun 2026 16:42:15 GMT Content-Length: 1090 Connection: keep-alive Akamai-Request-BC: [a=184.25.112.146 b=298275260 c=g n=US_IL_CHICAGO o=20940] X-CDN-Ref: 11c751bc | 6a3570666246488eb4c8833043687d2e|AFD:6a3570666246488eb4c8833043687d2e|2026-06-19T16:37:58.041Z | 2026-06-19T16:42:15 Server-Timing: clientrtt; dur=48 clienttt; dur=1 origin; dur=0 cdntime; dur=1 wpo;dur=0 1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.25.112.146 Akamai-Request-ID: 11c751bc X-AS-SuppressSetCookie: 1 Cache-Control: public max-age=300 report-to: {"group":"network-errors" "max_age":604800 "endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors" "max_age":604800 "success_fraction":0.001 "failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.927019b8.1781887335.11c751bc Vary: Origin with response body ==>3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D227574662D38223F3E3C74696C653E3C76697375616C20616464496D61676551756572....... "GET /service/msn/livetile/singletile?market=en-US&source=appxmanifest&tenant=amp&vertical=finance HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WNS/10.0 Host: assets.msn.com" Response ==> HTTP/1.1 200 OK Content-Type: text/xml; charset=utf-8 DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-StrategyExecutionLatency: 00:00:00.1515141 DDD-ActivityId: 26e58e29-6058-46a3-91d0-61516194709a DDD-TMPL-Removed: False DDD-DebugId: 26e58e29-6058-46a3-91d0-61516194709a|2026-06-19T16:37:58.1959099Z|fabric_msn|EUS2-A|News_218 DDD-Auth-Features: AT:NA;DID:m-2D3FF78C94FF69FE1A99E0F1954868ED;IT:Unknown;MuidStateOrigin:MuidFromClientIDHeader OneWebServiceLatency: 152 X-MSEdge-ResponseInfo: 152 X-Ceto-ref: 6a3570666246488eb4c8833043687d2e|AFD:6a3570666246488eb4c8833043687d2e|2026-06-19T16:37:58.041Z Accept-CH: Sec-CH-UA-Arch Sec-CH-UA-Bitness Sec-CH-UA-Full-Version Sec-CH-UA-Full-Version-List Sec-CH-UA-Mobile Sec-CH-UA-Model Sec-CH-UA-Platform Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: CDBD020E3FFC4165935DB27160F530FB Ref B: CHI261140511025 Ref C: 2026-06-19T16:37:58Z Date: Fri 19 Jun 2026 16:42:15 GMT Content-Length: 1090 Connection: keep-alive Akamai-Request-BC: [a=184.25.112.146 b=298275422 c=g n=US_IL_CHICAGO o=20940] X-CDN-Ref: 11c7525e | 6a3570666246488eb4c8833043687d2e|AFD:6a3570666246488eb4c8833043687d2e|2026-06-19T16:37:58.041Z | 2026-06-19T16:42:15 Server-Timing: clientrtt; dur=50 clienttt; dur=0 origin; dur=0 cdntime; dur=0 wpo;dur=0 1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.25.112.146 Akamai-Request-ID: 11c7525e X-AS-SuppressSetCookie: 1 Cache-Control: public max-age=300 report-to: {"group":"network-errors" "max_age":604800 "endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors" "max_age":604800 "success_fraction":0.001 "failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.927019b8.1781887335.11c7525e Vary: Origin with response body ==>3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D227574662D38223F3E3C74696C653E3C76697375616C20616464496D61676551756572....... "GET /service/msn/livetile/singletile?market=en-US&source=appxmanifest&tenant=amp&vertical=finance HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WNS/10.0 Host: assets.msn.com" Response ==> HTTP/1.1 200 OK Content-Type: text/xml; charset=utf-8 DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-StrategyExecutionLatency: 00:00:00.1515141 DDD-ActivityId: 26e58e29-6058-46a3-91d0-61516194709a DDD-TMPL-Removed: False DDD-DebugId: 26e58e29-6058-46a3-91d0-61516194709a|2026-06-19T16:37:58.1959099Z|fabric_msn|EUS2-A|News_218 DDD-Auth-Features: AT:NA;DID:m-2D3FF78C94FF69FE1A99E0F1954868ED;IT:Unknown;MuidStateOrigin:MuidFromClientIDHeader OneWebServiceLatency: 152 X-MSEdge-ResponseInfo: 152 X-Ceto-ref: 6a3570666246488eb4c8833043687d2e|AFD:6a3570666246488eb4c8833043687d2e|2026-06-19T16:37:58.041Z Accept-CH: Sec-CH-UA-Arch Sec-CH-UA-Bitness Sec-CH-UA-Full-Version Sec-CH-UA-Full-Version-List Sec-CH-UA-Mobile Sec-CH-UA-Model Sec-CH-UA-Platform Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: CDBD020E3FFC4165935DB27160F530FB Ref B: CHI261140511025 Ref C: 2026-06-19T16:37:58Z Date: Fri 19 Jun 2026 16:42:15 GMT Content-Length: 1090 Connection: keep-alive Akamai-Request-BC: [a=184.25.112.190 b=703086469 c=g n=US_IL_CHICAGO o=20940] X-CDN-Ref: 29e83f85 | 6a3570666246488eb4c8833043687d2e|AFD:6a3570666246488eb4c8833043687d2e|2026-06-19T16:37:58.041Z | 2026-06-19T16:42:15 Server-Timing: clientrtt; dur=46 clienttt; dur=0 origin; dur=0 cdntime; dur=0 wpo;dur=0 1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.25.112.190 Akamai-Request-ID: 29e83f85 X-AS-SuppressSetCookie: 1 Cache-Control: public max-age=300 report-to: {"group":"network-errors" "max_age":604800 "endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors" "max_age":604800 "success_fraction":0.001 "failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.be7019b8.1781887335.29e83f85 Vary: Origin with response body ==>3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D227574662D38223F3E3C74696C653E3C76697375616C20616464496D61676551756572....... "GET /service/msn/livetile/singletile?market=en-US&source=appxmanifest&tenant=amp&vertical=finance HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WNS/10.0 Host: assets.msn.com" Response ==> HTTP/1.1 200 OK Content-Type: text/xml; charset=utf-8 DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-StrategyExecutionLatency: 00:00:00.1515141 DDD-ActivityId: 26e58e29-6058-46a3-91d0-61516194709a DDD-TMPL-Removed: False DDD-DebugId: 26e58e29-6058-46a3-91d0-61516194709a|2026-06-19T16:37:58.1959099Z|fabric_msn|EUS2-A|News_218 DDD-Auth-Features: AT:NA;DID:m-2D3FF78C94FF69FE1A99E0F1954868ED;IT:Unknown;MuidStateOrigin:MuidFromClientIDHeader OneWebServiceLatency: 152 X-MSEdge-ResponseInfo: 152 X-Ceto-ref: 6a3570666246488eb4c8833043687d2e|AFD:6a3570666246488eb4c8833043687d2e|2026-06-19T16:37:58.041Z Accept-CH: Sec-CH-UA-Arch Sec-CH-UA-Bitness Sec-CH-UA-Full-Version Sec-CH-UA-Full-Version-List Sec-CH-UA-Mobile Sec-CH-UA-Model Sec-CH-UA-Platform Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: CDBD020E3FFC4165935DB27160F530FB Ref B: CHI261140511025 Ref C: 2026-06-19T16:37:58Z Date: Fri 19 Jun 2026 16:42:15 GMT Content-Length: 1090 Connection: keep-alive Akamai-Request-BC: [a=184.25.112.166 b=710075823 c=g n=US_IL_CHICAGO o=20940] X-CDN-Ref: 2a52e5af | 6a3570666246488eb4c8833043687d2e|AFD:6a3570666246488eb4c8833043687d2e|2026-06-19T16:37:58.041Z | 2026-06-19T16:42:15 Server-Timing: clientrtt; dur=49 clienttt; dur=0 origin; dur=0 cdntime; dur=0 wpo;dur=0 1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.25.112.166 Akamai-Request-ID: 2a52e5af X-AS-SuppressSetCookie: 1 Cache-Control: public max-age=300 report-to: {"group":"network-errors" "max_age":604800 "endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors" "max_age":604800 "success_fraction":0.001 "failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.a67019b8.1781887335.2a52e5af Vary: Origin with response body ==>3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D227574662D38223F3E3C74696C653E3C76697375616C20616464496D61676551756572....... "GET /service/msn/livetile/singletile?market=en-US&source=appxmanifest&tenant=amp&vertical=finance HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WNS/10.0 Host: assets.msn.com" Response ==> HTTP/1.1 200 OK Content-Type: text/xml; charset=utf-8 DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-StrategyExecutionLatency: 00:00:00.1515141 DDD-ActivityId: 26e58e29-6058-46a3-91d0-61516194709a DDD-TMPL-Removed: False DDD-DebugId: 26e58e29-6058-46a3-91d0-61516194709a|2026-06-19T16:37:58.1959099Z|fabric_msn|EUS2-A|News_218 DDD-Auth-Features: AT:NA;DID:m-2D3FF78C94FF69FE1A99E0F1954868ED;IT:Unknown;MuidStateOrigin:MuidFromClientIDHeader OneWebServiceLatency: 152 X-MSEdge-ResponseInfo: 152 X-Ceto-ref: 6a3570666246488eb4c8833043687d2e|AFD:6a3570666246488eb4c8833043687d2e|2026-06-19T16:37:58.041Z Accept-CH: Sec-CH-UA-Arch Sec-CH-UA-Bitness Sec-CH-UA-Full-Version Sec-CH-UA-Full-Version-List Sec-CH-UA-Mobile Sec-CH-UA-Model Sec-CH-UA-Platform Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: CDBD020E3FFC4165935DB27160F530FB Ref B: CHI261140511025 Ref C: 2026-06-19T16:37:58Z Date: Fri 19 Jun 2026 16:42:15 GMT Content-Length: 1090 Connection: keep-alive Akamai-Request-BC: [a=184.25.112.190 b=703086932 c=g n=US_IL_CHICAGO o=20940] X-CDN-Ref: 29e84154 | 6a3570666246488eb4c8833043687d2e|AFD:6a3570666246488eb4c8833043687d2e|2026-06-19T16:37:58.041Z | 2026-06-19T16:42:15 Server-Timing: clientrtt; dur=49 clienttt; dur=1 origin; dur=0 cdntime; dur=1 wpo;dur=0 1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.25.112.190 Akamai-Request-ID: 29e84154 X-AS-SuppressSetCookie: 1 Cache-Control: public max-age=300 report-to: {"group":"network-errors" "max_age":604800 "endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors" "max_age":604800 "success_fraction":0.001 "failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.be7019b8.1781887335.29e84154 Vary: Origin with response body ==>3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D227574662D38223F3E3C74696C653E3C76697375616C20616464496D61676551756572....... "GET /service/msn/livetile/singletile?market=en-US&source=appxmanifest&tenant=amp&vertical=finance HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WNS/10.0 Host: assets.msn.com" Response ==> HTTP/1.1 200 OK Content-Type: text/xml; charset=utf-8 DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-StrategyExecutionLatency: 00:00:00.1515141 DDD-ActivityId: 26e58e29-6058-46a3-91d0-61516194709a DDD-TMPL-Removed: False DDD-DebugId: 26e58e29-6058-46a3-91d0-61516194709a|2026-06-19T16:37:58.1959099Z|fabric_msn|EUS2-A|News_218 DDD-Auth-Features: AT:NA;DID:m-2D3FF78C94FF69FE1A99E0F1954868ED;IT:Unknown;MuidStateOrigin:MuidFromClientIDHeader OneWebServiceLatency: 152 X-MSEdge-ResponseInfo: 152 X-Ceto-ref: 6a3570666246488eb4c8833043687d2e|AFD:6a3570666246488eb4c8833043687d2e|2026-06-19T16:37:58.041Z Accept-CH: Sec-CH-UA-Arch Sec-CH-UA-Bitness Sec-CH-UA-Full-Version Sec-CH-UA-Full-Version-List Sec-CH-UA-Mobile Sec-CH-UA-Model Sec-CH-UA-Platform Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: CDBD020E3FFC4165935DB27160F530FB Ref B: CHI261140511025 Ref C: 2026-06-19T16:37:58Z Date: Fri 19 Jun 2026 16:42:15 GMT Content-Length: 1090 Connection: keep-alive Akamai-Request-BC: [a=184.25.112.146 b=298276162 c=g n=US_IL_CHICAGO o=20940] X-CDN-Ref: 11c75542 | 6a3570666246488eb4c8833043687d2e|AFD:6a3570666246488eb4c8833043687d2e|2026-06-19T16:37:58.041Z | 2026-06-19T16:42:15 Server-Timing: clientrtt; dur=46 clienttt; dur=0 origin; dur=0 cdntime; dur=0 wpo;dur=0 1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.25.112.146 Akamai-Request-ID: 11c75542 X-AS-SuppressSetCookie: 1 Cache-Control: public max-age=300 report-to: {"group":"network-errors" "max_age":604800 "endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors" "max_age":604800 "success_fraction":0.001 "failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.927019b8.1781887335.11c75542 Vary: Origin with response body ==>3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D227574662D38223F3E3C74696C653E3C76697375616C20616464496D61676551756572....... "GET /service/msn/livetile/singletile?market=en-US&source=appxmanifest&tenant=amp&vertical=finance HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WNS/10.0 Host: assets.msn.com" Response ==> HTTP/1.1 200 OK Content-Type: text/xml; charset=utf-8 DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-StrategyExecutionLatency: 00:00:00.1515141 DDD-ActivityId: 26e58e29-6058-46a3-91d0-61516194709a DDD-TMPL-Removed: False DDD-DebugId: 26e58e29-6058-46a3-91d0-61516194709a|2026-06-19T16:37:58.1959099Z|fabric_msn|EUS2-A|News_218 DDD-Auth-Features: AT:NA;DID:m-2D3FF78C94FF69FE1A99E0F1954868ED;IT:Unknown;MuidStateOrigin:MuidFromClientIDHeader OneWebServiceLatency: 152 X-MSEdge-ResponseInfo: 152 X-Ceto-ref: 6a3570666246488eb4c8833043687d2e|AFD:6a3570666246488eb4c8833043687d2e|2026-06-19T16:37:58.041Z Accept-CH: Sec-CH-UA-Arch Sec-CH-UA-Bitness Sec-CH-UA-Full-Version Sec-CH-UA-Full-Version-List Sec-CH-UA-Mobile Sec-CH-UA-Model Sec-CH-UA-Platform Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: CDBD020E3FFC4165935DB27160F530FB Ref B: CHI261140511025 Ref C: 2026-06-19T16:37:58Z Date: Fri 19 Jun 2026 16:42:15 GMT Content-Length: 1090 Connection: keep-alive Akamai-Request-BC: [a=184.25.112.146 b=298276582 c=g n=US_IL_CHICAGO o=20940] X-CDN-Ref: 11c756e6 | 6a3570666246488eb4c8833043687d2e|AFD:6a3570666246488eb4c8833043687d2e|2026-06-19T16:37:58.041Z | 2026-06-19T16:42:15 Server-Timing: clientrtt; dur=50 clienttt; dur=1 origin; dur=0 cdntime; dur=1 wpo;dur=0 1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.25.112.146 Akamai-Request-ID: 11c756e6 X-AS-SuppressSetCookie: 1 Cache-Control: public max-age=300 report-to: {"group":"network-errors" "max_age":604800 "endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors" "max_age":604800 "success_fraction":0.001 "failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.927019b8.1781887335.11c756e6 Vary: Origin with response body ==>3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D227574662D38223F3E3C74696C653E3C76697375616C20616464496D61676551756572....... "GET /service/msn/livetile/singletile?market=en-US&source=appxmanifest&tenant=amp&vertical=finance HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WNS/10.0 Host: assets.msn.com" Response ==> HTTP/1.1 200 OK Content-Type: text/xml; charset=utf-8 DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-StrategyExecutionLatency: 00:00:00.1515141 DDD-ActivityId: 26e58e29-6058-46a3-91d0-61516194709a DDD-TMPL-Removed: False DDD-DebugId: 26e58e29-6058-46a3-91d0-61516194709a|2026-06-19T16:37:58.1959099Z|fabric_msn|EUS2-A|News_218 DDD-Auth-Features: AT:NA;DID:m-2D3FF78C94FF69FE1A99E0F1954868ED;IT:Unknown;MuidStateOrigin:MuidFromClientIDHeader OneWebServiceLatency: 152 X-MSEdge-ResponseInfo: 152 X-Ceto-ref: 6a3570666246488eb4c8833043687d2e|AFD:6a3570666246488eb4c8833043687d2e|2026-06-19T16:37:58.041Z Accept-CH: Sec-CH-UA-Arch Sec-CH-UA-Bitness Sec-CH-UA-Full-Version Sec-CH-UA-Full-Version-List Sec-CH-UA-Mobile Sec-CH-UA-Model Sec-CH-UA-Platform Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: CDBD020E3FFC4165935DB27160F530FB Ref B: CHI261140511025 Ref C: 2026-06-19T16:37:58Z Date: Fri 19 Jun 2026 16:42:16 GMT Content-Length: 1090 Connection: keep-alive Akamai-Request-BC: [a=184.25.112.146 b=298276569 c=g n=US_IL_CHICAGO o=20940] X-CDN-Ref: 11c756d9 | 6a3570666246488eb4c8833043687d2e|AFD:6a3570666246488eb4c8833043687d2e|2026-06-19T16:37:58.041Z | 2026-06-19T16:42:16 Server-Timing: clientrtt; dur=48 clienttt; dur=0 origin; dur=0 cdntime; dur=0 wpo;dur=0 1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.25.112.146 Akamai-Request-ID: 11c756d9 X-AS-SuppressSetCookie: 1 Cache-Control: public max-age=300 report-to: {"group":"network-errors" "max_age":604800 "endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors" "max_age":604800 "success_fraction":0.001 "failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.927019b8.1781887336.11c756d9 Vary: Origin with response body ==>3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D227574662D38223F3E3C74696C653E3C76697375616C20616464496D61676551756572....... "GET /service/msn/livetile/singletile?market=en-US&source=appxmanifest&tenant=amp&vertical=finance HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WNS/10.0 Host: assets.msn.com" Response ==> HTTP/1.1 200 OK Content-Type: text/xml; charset=utf-8 DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-StrategyExecutionLatency: 00:00:00.1515141 DDD-ActivityId: 26e58e29-6058-46a3-91d0-61516194709a DDD-TMPL-Removed: False DDD-DebugId: 26e58e29-6058-46a3-91d0-61516194709a|2026-06-19T16:37:58.1959099Z|fabric_msn|EUS2-A|News_218 DDD-Auth-Features: AT:NA;DID:m-2D3FF78C94FF69FE1A99E0F1954868ED;IT:Unknown;MuidStateOrigin:MuidFromClientIDHeader OneWebServiceLatency: 152 X-MSEdge-ResponseInfo: 152 X-Ceto-ref: 6a3570666246488eb4c8833043687d2e|AFD:6a3570666246488eb4c8833043687d2e|2026-06-19T16:37:58.041Z Accept-CH: Sec-CH-UA-Arch Sec-CH-UA-Bitness Sec-CH-UA-Full-Version Sec-CH-UA-Full-Version-List Sec-CH-UA-Mobile Sec-CH-UA-Model Sec-CH-UA-Platform Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: CDBD020E3FFC4165935DB27160F530FB Ref B: CHI261140511025 Ref C: 2026-06-19T16:37:58Z Date: Fri 19 Jun 2026 16:42:16 GMT Content-Length: 1090 Connection: keep-alive Akamai-Request-BC: [a=184.25.112.190 b=703087528 c=g n=US_IL_CHICAGO o=20940] X-CDN-Ref: 29e843a8 | 6a3570666246488eb4c8833043687d2e|AFD:6a3570666246488eb4c8833043687d2e|2026-06-19T16:37:58.041Z | 2026-06-19T16:42:16 Server-Timing: clientrtt; dur=48 clienttt; dur=0 origin; dur=0 cdntime; dur=0 wpo;dur=0 1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.25.112.190 Akamai-Request-ID: 29e843a8 X-AS-SuppressSetCookie: 1 Cache-Control: public max-age=300 report-to: {"group":"network-errors" "max_age":604800 "endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors" "max_age":604800 "success_fraction":0.001 "failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.be7019b8.1781887336.29e843a8 Vary: Origin with response body ==>3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D227574662D38223F3E3C74696C653E3C76697375616C20616464496D61676551756572.......2b:T725," Microsoft\"","origin":"Static Parser","mitre_attack_id":"T1027.002","relevance":10,"id":"static-18","sources":[{"report_type":"sandbox","report_id":"6a35714c9fc9e78df9095212"}]},{"level":"informative","category":"Unusual Characteristics","name":"Reads the windows installation language","description":"\"