Network Analysis

GET /security/encyclopedia/adlpackages.aspx?arch=x86&eng=0.0.0.0&asdelta=0.0.0.0&prod=925A3ACA-C353-458A-AC8D-A7E5EB378092 HTTP/1.1 Connection: Keep-Alive Accept-Charset: utf-8 User-Agent: MpCommunication Host: www.microsoft.com

HTTP/1.1 302 Moved Temporarily Content-Length: 234 Content-Type: text/html; charset=utf-8 Location: https://definitionupdates.microsoft.com/download/DefinitionUpdates/VersionedSignatures/AM/1.339.927.0/x86/mpas-fe.exe Request-Context: appId=cid-v1:6243adf7-17c9-447a-a882-1b86b3e43445 Access-Control-Expose-Headers: Request-Context X-EdgeConnect-MidMile-RTT: 170 X-EdgeConnect-Origin-MEX-Latency: 38 Expires: Tue, 18 May 2021 00:52:22 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 18 May 2021 00:52:22 GMT Connection: keep-alive Set-Cookie: ARRAffinity=78e432219cd08c3e26b2d2af4ae48536421622b33edbe866a1b320ca40dfaa17;Path=/;HttpOnly;Secure;Domain=adl.sr.wd.microsoft.com Set-Cookie: ARRAffinitySameSite=78e432219cd08c3e26b2d2af4ae48536421622b33edbe866a1b320ca40dfaa17;Path=/;HttpOnly;SameSite=None;Secure;Domain=adl.sr.wd.microsoft.com R-Tag: SecADL TLS_version: tls1 Strict-Transport-Security: max-age=31536000 X-RTag: RT

GET /download/DefinitionUpdates/VersionedSignatures/AM/1.339.927.0/x86/mpas-fe.exe HTTP/1.1 Connection: Keep-Alive Accept-Charset: utf-8 User-Agent: MpCommunication Host: definitionupdates.microsoft.com

HTTP/1.1 200 OK Content-Type: application/octet-stream Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 64dba4d2-901e-0051-7f76-4b9f4a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Last-Modified: Mon, 17 May 2021 21:21:48 GMT ETag: 0x8D91979C7AFBA3A Content-Length: 59906496 Date: Tue, 18 May 2021 00:52:22 GMT Connection: keep-alive

GET /fwlink/?LinkID=121721&clcid=0x409&arch=x86&eng=0.0.0.0&asdelta=0.0.0.0&prod=925A3ACA-C353-458A-AC8D-A7E5EB378092 HTTP/1.1 Connection: Keep-Alive Accept-Charset: utf-8 User-Agent: MpCommunication Host: go.microsoft.com

HTTP/1.1 302 Moved Temporarily Location: https://www.microsoft.com/security/encyclopedia/adlpackages.aspx?arch=x86&eng=0.0.0.0&asdelta=0.0.0.0&prod=925A3ACA-C353-458A-AC8D-A7E5EB378092 Server: Kestrel Request-Context: appId=cid-v1:b47e5e27-bf85-45ba-a97c-0377ce0e5779 X-Response-Cache-Status: True X-Powered-By: ASP.NET Content-Length: 0 Expires: Tue, 18 May 2021 00:52:21 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 18 May 2021 00:52:21 GMT Connection: keep-alive