ClickOnce apps install on win11 different version builds

Question

Hi,

when we are installing(downloading) ClickOnce apps(unknown publisher) from our server, "downloading speed" depends of windows 11 version build. It's not actually downloading speed but rather some checks that some win11 version builds are trying to do over the internet and than when monitoring netwrok adapter it actually downloads with max speed every 30 seconds.

Normal download:

• any prior 24h2 build - not checking with MICROSOFT-CORP-MSN-AS-BLOCK
• 24H2 (build 26100.4349) - not checking with MICROSOFT-CORP-MSN-AS-BLOCK

Slow download(10-20x more time to download same file):

• 24H2 (builds win11 26100.4061, win11 26100.4351) - checking with MICROSOFT-CORP-MSN-AS-BLOCK

For build 26100.4061 i've tried to remove kb:5058411 but it wouldn't uninstall, don't know if build version depends on kb installed or what for 24H2 win11, because we have a lot of different version builds. Just wanted to check which update is responsible for this behavior

On firewall i'm seeing this host(im guessing its farm of hosts that i can't easily allow over ip ranges unless i allow like /8 or /16 ranges):

AS8075 MICROSOFT-CORP-MSN-AS-BLOCK, US (48.209.108.39)

Is this checking certificate validation? In our case a self signed certificate? Can i disable some service like smart screen(not working in this case) or what is responsible for this behavior?