Edit tour

Windows Analysis Report
https://purple-ground-080c0e60f.4.azurestaticapps.net/.auth/invitations/accept

Overview

General Information

Sample URL:	https://purple-ground-080c0e60f.4.azurestaticapps.net/.auth/invitations/accept
Analysis ID:	1370023
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Creates files inside the system directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5552 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2716 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2420 --field-trial-handle=2024,i,2979648642504872416,7571483159173476796,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6424 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" "https://purple-ground-080c0e60f.4.azurestaticapps.net/.auth/invitations/accept MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://purple-ground-080c0e60f.4.azurestaticapps.net/.auth/invitations/accept

Avira URL Cloud: detection malicious, Label: phishing

Source: https://learn.microsoft.com/en-us/azure/static-web-apps/authentication-authorization	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/azure/static-web-apps/authentication-authorization	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/azure/static-web-apps/authentication-authorization#main	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/azure/static-web-apps/password-protection	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/docs/	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/training/	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/credentials/	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 23.54.46.90:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.54.46.90:443 -> 192.168.2.4:49752 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-117.0.5938.132Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /.auth/invitations/accept HTTP/1.1Host: purple-ground-080c0e60f.4.azurestaticapps.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-3.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE
Source: global traffic	HTTP traffic detected: GET /rest/v1/delivery?client=microsoftmscompoc&sessionId=18f997c7936b48b29bafcaa77f00f1a7&version=2.9.0 HTTP/1.1Host: target.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MSCC=NR; at_check=true; mbox=session#18f997c7936b48b29bafcaa77f00f1a7#1704405290
Source: global traffic	HTTP traffic detected: GET /rest/v1/delivery?client=microsoftmscompoc&sessionId=18f997c7936b48b29bafcaa77f00f1a7&version=2.9.0 HTTP/1.1Host: target.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MSCC=NR; at_check=true; MS0=a915e1c3ed5d461a96f81630f2e33eba; mbox=session#18f997c7936b48b29bafcaa77f00f1a7#1704405301\|PC#18f997c7936b48b29bafcaa77f00f1a7.34_0#1738583441
Source: global traffic	HTTP traffic detected: GET /rest/v1/delivery?client=microsoftmscompoc&sessionId=18f997c7936b48b29bafcaa77f00f1a7&version=2.9.0 HTTP/1.1Host: target.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MSCC=NR; at_check=true; MS0=a915e1c3ed5d461a96f81630f2e33eba; mbox=session#18f997c7936b48b29bafcaa77f00f1a7#1704405302\|PC#18f997c7936b48b29bafcaa77f00f1a7.34_0#1738583442
Source: global traffic	HTTP traffic detected: GET /rest/v1/delivery?client=microsoftmscompoc&sessionId=18f997c7936b48b29bafcaa77f00f1a7&version=2.9.0 HTTP/1.1Host: target.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MSCC=NR; at_check=true; MS0=a915e1c3ed5d461a96f81630f2e33eba; mbox=session#18f997c7936b48b29bafcaa77f00f1a7#1704405307\|PC#18f997c7936b48b29bafcaa77f00f1a7.34_0#1738583447
Source: global traffic	HTTP traffic detected: GET /rest/v1/delivery?client=microsoftmscompoc&sessionId=18f997c7936b48b29bafcaa77f00f1a7&version=2.9.0 HTTP/1.1Host: target.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MSCC=NR; at_check=true; MS0=a915e1c3ed5d461a96f81630f2e33eba; mbox=session#18f997c7936b48b29bafcaa77f00f1a7#1704405310\|PC#18f997c7936b48b29bafcaa77f00f1a7.34_0#1738583450
Source: global traffic	HTTP traffic detected: GET /rest/v1/delivery?client=microsoftmscompoc&sessionId=18f997c7936b48b29bafcaa77f00f1a7&version=2.9.0 HTTP/1.1Host: target.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MSCC=NR; at_check=true; MS0=a915e1c3ed5d461a96f81630f2e33eba; mbox=session#18f997c7936b48b29bafcaa77f00f1a7#1704405315\|PC#18f997c7936b48b29bafcaa77f00f1a7.34_0#1738583455
Source: global traffic	HTTP traffic detected: GET /rest/v1/delivery?client=microsoftmscompoc&sessionId=18f997c7936b48b29bafcaa77f00f1a7&version=2.9.0 HTTP/1.1Host: target.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MSCC=NR; at_check=true; MS0=a915e1c3ed5d461a96f81630f2e33eba; mbox=session#18f997c7936b48b29bafcaa77f00f1a7#1704405329\|PC#18f997c7936b48b29bafcaa77f00f1a7.34_0#1738583469
Source: global traffic	HTTP traffic detected: GET /meversion?partner=mshomepage&market=en-us&uhf=1 HTTP/1.1Host: mem.gfx.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tools/pso/ping?as=chrome&brand=ONGR&pid=&hl=en&events=C1I,C2I,C7I,C1S,C7S&rep=2&rlz=C1:,C2:,C7:&id=000000000000000000000000000000000000000088DEE93F94 HTTP/1.1Host: clients1.google.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br

Source: chromecache_161.2.dr	String found in binary or memory: href="https://www.facebook.com/sharer/sharer.php?u=${l}" equals www.facebook.com (Facebook)
Source: chromecache_161.2.dr	String found in binary or memory: href="https://www.linkedin.com/cws/share?url=${l}" equals www.linkedin.com (Linkedin)
Source: chromecache_161.2.dr	String found in binary or memory: href="https://www.linkedin.com/cws/share?url=${encodeURIComponent(t)}&text=${encodeURIComponent(VC.replace("{credentialName}",e.title))}" equals www.linkedin.com (Linkedin)
Source: chromecache_161.2.dr	String found in binary or memory: </div>`,i};function n(s){if(s.parentElement?.classList.contains("is-active")){let i=s.getAttribute("id"),a=Number(s.dataset.totalItems),l=e.querySelector(".card-footer");t?.setAttribute("id",`${i}-card-content-container`);let c=Array.from(e.querySelectorAll(".is-expanded"));c.length!==0&&c.forEach(u=>u.classList.remove("is-expanded")),a>3?l\|\|t?.parentNode?.insertBefore(r(i\|\|""),t?.nextSibling):l&&l.remove()}}o.forEach(s=>{n(s),new MutationObserver(()=>{n(s)}).observe(s,{attributes:!0,attributeFilter:["aria-selected","tabindex"]})})}var e3e;function t3e(){let e=document.getElementById("share-to-linkedin-profile");e&&e.addEventListener("click",t=>{let o=t.currentTarget,r=JSON.parse(o.dataset.credential),n=document.createElement("div"),s=Zpt(r);x(s,n),e3e=new ge(n),e3e.show();let i=document.getElementById("share-to-feed-button"),a=document.getElementById("linkedin-feed-message"),l=new URL(decodeURI(i.getAttribute("href")));a.onchange=()=>{l.searchParams.set("text",a.value),i.setAttribute("href",l.toString())}})}function Zpt(e){let t=encodeURI(`https://${location.host}/api/credentials/share/${h.data.userLocale}/${S.userName}/${e?.credentialId}?sharingId=${S.sharingId}`),o=1035,r=i=>new Date(i).getFullYear(),n=i=>new Date(i).getMonth()+1,s=encodeURI(`https://www.linkedin.com/profile/add?startTask=CERTIFICATION_NAME&name=${e.title}&organizationId=${o}&issueYear=${r(e.awardedOn)}&issueMonth=${n(e.awardedOn)}&expirationYear=${e.expiresOn?r(e.expiresOn):""}&expirationMonth=${e.expiresOn?n(e.expiresOn):""}&certUrl=${t}&certId=${e.credentialId}&skills=${e.skills?`${e.skills.map(i=>encodeURIComponent(i)).join(",")}`:""}`);return d` equals www.linkedin.com (Linkedin)
Source: chromecache_161.2.dr	String found in binary or memory: `};function Uet(e){let t=Array.from(e.querySelectorAll('iframe[src^="https://channel9.msdn.com/"]'));t.length&&t.forEach(o=>{let r=o.src.split("/"),n=r[r.length-2],s=`${w$}: ${n}`;o.title=o.title\|\|s})}function zet(e){let t=Array.from(e.querySelectorAll('iframe[src^="https://www.youtube"]'));t.length&&t.forEach(o=>{let r=o.src.split("/").pop(),n=`${w$}: ${r}`;o.title=o.title\|\|n})}function Het(e){let t=[],o=[];window.addEventListener("beforeprint",()=>{Array.from(e.querySelectorAll(".embeddedvideo iframe")).forEach(n=>{if(n.offsetParent!==null){let s=n.src,i=document.createElement("a");i.href=s,i.target="_blank",i.text=s,n.parentElement.appendChild(i),n.hidden=!0,t.push(n),o.push(i)}})}),window.addEventListener("afterprint",()=>{t.forEach(r=>r.hidden=!1),o.forEach(r=>r.remove()),t=[],o=[]})}var Bet=e=>{let t=new URL(e);return t.protocol="https",t.host.localeCompare("channel9.msdn.com",void 0,{sensitivity:"base"})===0?t.searchParams.set("nocookie","true"):(t.host.localeCompare("youtube.com",void 0,{sensitivity:"base"})===0\|\|t.host.localeCompare("www.youtube.com",void 0,{sensitivity:"base"})===0)&&(t.host="www.youtube-nocookie.com"),t.href};function YR(e){zet(e),Uet(e),Het(e)}var J$e=(e,t)=>{let o=t\|\|Mu;return d`<div class="embeddedvideo"> equals www.youtube.com (Youtube)
Source: chromecache_180.2.dr	String found in binary or memory: "sameAs":["https://www.facebook.com/Microsoft","https://twitter.com/microsoft","https://www.linkedin.com/company/microsoft"] equals www.facebook.com (Facebook)
Source: chromecache_180.2.dr	String found in binary or memory: "sameAs":["https://www.facebook.com/Microsoft","https://twitter.com/microsoft","https://www.linkedin.com/company/microsoft"] equals www.linkedin.com (Linkedin)
Source: chromecache_180.2.dr	String found in binary or memory: "sameAs":["https://www.facebook.com/Microsoft","https://twitter.com/microsoft","https://www.linkedin.com/company/microsoft"] equals www.twitter.com (Twitter)
Source: chromecache_180.2.dr	String found in binary or memory: <a class="d-inline-block" href="https://www.facebook.com/Microsoft" target="_blank" aria-label="Follow Microsoft on Facebook, opens in a new tab" data-bi-ecn="Facebook" data-bi-bhvr="126" data-bi-cn="Facebook" data-bi-socchn="Facebook" data-bi-ct="Social Button" data-bi-pa="body" data-bi-compnm="Social Follow - horizontal"> equals www.facebook.com (Facebook)
Source: chromecache_180.2.dr	String found in binary or memory: <a class="d-inline-block" href="https://www.linkedin.com/company/microsoft" target="_blank" aria-label="Follow Microsoft on Linkedin, opens in a new tab" data-bi-ecn="LinkedIn" data-bi-bhvr="126" data-bi-cn="LinkedIn" data-bi-socchn="LinkedIn" data-bi-ct="Social Button" data-bi-pa="body" data-bi-compnm="Social Follow - horizontal"> equals www.linkedin.com (Linkedin)
Source: chromecache_161.2.dr	String found in binary or memory: `)}`,y=encodeURIComponent(`https://${W.host}/api/achievements/share/${h.data.userLocale}/${S.userName}/${m.id}?sharingId=${S.sharingId}`),v=f==="badge"?"MSLearnBadge":f==="trophy"?"MSLearnTrophy":"";return{linkedIn:{href:`https://www.linkedin.com/feed/?shareUrl=${y}&shareActive=true&text=${b}`},email:{href:`mailto:?subject=${_}&body=${b}${y}`},twitter:{href:`https://twitter.com/share?url=${y}&text=${b}&hashtags=${v}`},facebook:{href:`https://www.facebook.com/sharer/sharer.php?u=${y}&quote=${b}&hashtag=${v}`},copy:{href:y}}}let p=d` equals www.facebook.com (Facebook)
Source: chromecache_161.2.dr	String found in binary or memory: `)}`,y=encodeURIComponent(`https://${W.host}/api/achievements/share/${h.data.userLocale}/${S.userName}/${m.id}?sharingId=${S.sharingId}`),v=f==="badge"?"MSLearnBadge":f==="trophy"?"MSLearnTrophy":"";return{linkedIn:{href:`https://www.linkedin.com/feed/?shareUrl=${y}&shareActive=true&text=${b}`},email:{href:`mailto:?subject=${_}&body=${b}${y}`},twitter:{href:`https://twitter.com/share?url=${y}&text=${b}&hashtags=${v}`},facebook:{href:`https://www.facebook.com/sharer/sharer.php?u=${y}&quote=${b}&hashtag=${v}`},copy:{href:y}}}let p=d` equals www.linkedin.com (Linkedin)
Source: chromecache_161.2.dr	String found in binary or memory: `)}`,y=encodeURIComponent(`https://${W.host}/api/achievements/share/${h.data.userLocale}/${S.userName}/${m.id}?sharingId=${S.sharingId}`),v=f==="badge"?"MSLearnBadge":f==="trophy"?"MSLearnTrophy":"";return{linkedIn:{href:`https://www.linkedin.com/feed/?shareUrl=${y}&shareActive=true&text=${b}`},email:{href:`mailto:?subject=${_}&body=${b}${y}`},twitter:{href:`https://twitter.com/share?url=${y}&text=${b}&hashtags=${v}`},facebook:{href:`https://www.facebook.com/sharer/sharer.php?u=${y}&quote=${b}&hashtag=${v}`},copy:{href:y}}}let p=d` equals www.twitter.com (Twitter)

Source: unknown

DNS traffic detected: queries for: clients2.google.com

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2420 --field-trial-handle=2024,i,2979648642504872416,7571483159173476796,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "https://purple-ground-080c0e60f.4.azurestaticapps.net/.auth/invitations/accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2420 --field-trial-handle=2024,i,2979648642504872416,7571483159173476796,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact	Resource Development	Reconnaissance
Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Abuse Accessibility Features	Acquire Infrastructure	Gather Victim Identity Information
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	3 Non-Application Layer Protocol	SIM Card Swap	Obtain Device Cloud Backups	Network Denial of Service	Domains	Credentials
Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	4 Application Layer Protocol			Data Encrypted for Impact	DNS Server	Email Addresses
Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Traffic Duplication	1 Ingress Tool Transfer			Data Destruction	Virtual Private Server	Employee Names

Source	Detection	Scanner	Label
https://analytics.tiktok.com	0%	URL Reputation	safe
https://www.clarity.ms	0%	URL Reputation	safe
https://js.foundation/	0%	URL Reputation	safe
http://polymer.github.io/AUTHORS.txt	0%	Avira URL Cloud	safe
http://polymer.github.io/LICENSE.txt	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
http://polymer.github.io/PATENTS.txt	0%	Avira URL Cloud	safe
https://zealous-water.azurestaticapps.net/success">Login</a>	0%	Avira URL Cloud	safe
https://d.impactradius-event.com	0%	Avira URL Cloud	safe
https://learn-video.azurefd.net/	0%	Avira URL Cloud	safe
https://learn-video.azurefd.net/vod/player?id=235e7a95-82c6-4693-859f-2ab7597ab168&embedUrl=%2ftrain	0%	Avira URL Cloud	safe
https://octokit.github.io/rest.js/#throttling	0%	Avira URL Cloud	safe
https://learn-video.azurefd.net/vod/player	0%	Avira URL Cloud	safe
https://axios-http.com	0%	Avira URL Cloud	safe
https://assets.onestore.ms	0%	Avira URL Cloud	safe
https://mem.gfx.ms/meversion?partner=mshomepage&market=en-us&uhf=1	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
waws-prod-bn1-42e56722.sip.p.azurewebsites.windows.net	20.22.31.128	true	false	high
lpcdn.lpsnmedia.net	34.120.154.120	true	false	high
accounts.google.com	142.250.31.84	true	false	high
microsoftwindows.112.2o7.net	63.140.38.180	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com	34.198.54.178	true	false	high
adobetarget.data.adobedc.net	63.140.38.120	true	false	unknown
part-0013.t-0009.t-msedge.net	13.107.213.41	true	false	unknown
www.google.com	172.253.115.103	true	false	high
d.impactradius-event.com	35.186.249.72	true	false	unknown
part-0012.t-0009.t-msedge.net	13.107.246.40	true	false	unknown
liveperson.map.fastly.net	151.101.1.192	true	false	unknown
clients.l.google.com	142.251.163.138	true	false	high
d1xbuscas8tetl.cloudfront.net	18.160.18.34	true	false	high
js.monitor.azure.com	unknown	unknown	false	high
clients1.google.com	unknown	unknown	false	high
accdn.lpsnmedia.net	unknown	unknown	false	high
microsoftmscompoc.tt.omtrdc.net	unknown	unknown	false	unknown
www.clarity.ms	unknown	unknown	false	unknown
mdec.nelreports.net	unknown	unknown	false	unknown
assets.onestore.ms	unknown	unknown	false	unknown
mscom.demdex.net	unknown	unknown	false	high
ajax.aspnetcdn.com	unknown	unknown	false	high
mem.gfx.ms	unknown	unknown	false	unknown
c.s-microsoft.com	unknown	unknown	false	high
clients2.google.com	unknown	unknown	false	high
publisher.liveperson.net	unknown	unknown	false	high
purple-ground-080c0e60f.4.azurestaticapps.net	unknown	unknown	false	unknown
dc.services.visualstudio.com	unknown	unknown	false	high
analytics.tiktok.com	unknown	unknown	false	unknown
amp.azure.net	unknown	unknown	false	high
cdnssl.clicktale.net	unknown	unknown	false	high
lptag.liveperson.net	unknown	unknown	false	high

Name	Malicious	Antivirus Detection	Reputation
about:blank	false	Avira URL Cloud: safe	low
https://purple-ground-080c0e60f.4.azurestaticapps.net/.auth/invitations/accept	true		unknown
https://clients1.google.com/tools/pso/ping?as=chrome&brand=ONGR&pid=&hl=en&events=C1I,C2I,C7I,C1S,C7S&rep=2&rlz=C1:,C2:,C7:&id=000000000000000000000000000000000000000088DEE93F94	false		high
https://mem.gfx.ms/meversion?partner=mshomepage&market=en-us&uhf=1	false	Avira URL Cloud: safe	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://aka.ms/MicrosoftEdgeDownload"	chromecache_180.2.dr	false		high
https://login.microsoftonline.com/uxlogout?appid	chromecache_168.2.dr	false		high
https://outlook.live.com/owa/	chromecache_180.2.dr	false		high
https://github.com/cschedler	chromecache_178.2.dr	false		high
https://github.com/BalaDelli	chromecache_352.2.dr	false		high
https://github.com/carhartl/jquery-cookie	chromecache_176.2.dr	false		high
https://twitter.com/microsoft	chromecache_180.2.dr	false		high
https://learn-video.azurefd.net/vod/player?id=235e7a95-82c6-4693-859f-2ab7597ab168&embedUrl=%2ftrain	chromecache_161.2.dr	false	Avira URL Cloud: safe	unknown
https://www.xbox.com/en-us/games/store/pc-game-pass/cfq7ttc0kgq8?icid=CNavAllPCGamePass	chromecache_180.2.dr	false		high
https://github.com/MicrosoftDocs/learn-certs-pr/blob/live/learn-certs-pr/index.yml	chromecache_399.2.dr	false		high
https://login.microsoftonline.com/savedusers?appid	chromecache_168.2.dr	false		high
https://cart.ppe.store-web.dynamics.com/cart/v1.0/cart/loadCart	chromecache_339.2.dr	false		high
https://assets.onestore.ms	chromecache_408.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/superyyrrzz	chromecache_406.2.dr	false		high
https://www.linkedin.com/cws/share?url=$	chromecache_161.2.dr	false		high
https://authoring-docs-microsoft.poolparty.biz/devrel/b31948f4-2f38-404b-ac93-c3c8c5b3ae33	chromecache_178.2.dr	false		high
https://microsoft-devrel.poolparty.biz/DevRelOfferingOntology/1433a524-c01f-4b87-beab-670c040dea4f	chromecache_249.2.dr	false		high
https://github.com/Soumyasd27	chromecache_352.2.dr	false		high
http://polymer.github.io/AUTHORS.txt	chromecache_161.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/BenDMyers	chromecache_406.2.dr	false		high
https://lptag.liveperson.net	chromecache_180.2.dr	false		high
https://authoring-docs-microsoft.poolparty.biz/devrel/a3955c7b-f5ee-420d-aff5-d7119738f38b	chromecache_178.2.dr	false		high
http://www.opensource.org/licenses/mit-license.php	chromecache_276.2.dr	false		high
https://management.azure.com/subscriptions?api-version=2016-06-01	chromecache_161.2.dr	false		high
https://analytics.tiktok.com	chromecache_180.2.dr	false	URL Reputation: safe	unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_234.2.dr	false		high
https://github.com/MicrosoftDocs/azure-docs-pr/blob/a708a83970abb65737a71d162527a291c3228fca/article	chromecache_249.2.dr	false		high
https://labclient.labondemand.com	chromecache_161.2.dr	false		high
https://github.com/btardif	chromecache_249.2.dr	false		high
https://aka.ms/pshelpmechoose	chromecache_161.2.dr	false		high
https://github.com/MicrosoftDocs/LearnShared/blob/5b67ab1b7fc715719719a228331ec2c75f6aee2c/LearnShar	chromecache_178.2.dr	false		high
https://github.com/m-hartmann	chromecache_352.2.dr	false		high
https://www.clarity.ms	chromecache_180.2.dr	false	URL Reputation: safe	unknown
https://github.com/heskew	chromecache_178.2.dr	false		high
https://cdnssl.clicktale.net/www32/ptc/05d32363-d534-4d93-9b65-cde674775e71.js	chromecache_180.2.dr	false		high
https://learn-video.azurefd.net/vod/player	chromecache_161.2.dr	false	Avira URL Cloud: safe	unknown
https://twitter.com/intent/tweet?original_referer=$	chromecache_161.2.dr	false		high
https://aka.ms/mac-manageaddress	chromecache_339.2.dr	false		high
https://github.com/krsanty	chromecache_399.2.dr	false		high
https://github.com/MicrosoftDocs/azure-docs-pr/blob/live/articles/static-web-apps/password-protectio	chromecache_240.2.dr	false		high
https://axios-http.com	chromecache_339.2.dr	false	Avira URL Cloud: safe	unknown
https://learn-video.azurefd.net/	chromecache_161.2.dr	false	Avira URL Cloud: safe	unknown
https://d.impactradius-event.com	chromecache_180.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/MicrosoftDocs/azure-docs/issues	chromecache_249.2.dr, chromecache_240.2.dr	false		high
https://cart.production.store-web.dynamics.com/cart/v1.0/cart/loadCart	chromecache_339.2.dr	false		high
https://microsoftwindows.112.2o7.net	chromecache_408.2.dr	false		high
https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev	chromecache_161.2.dr	false		high
http://github.com/requirejs/requirejs/LICENSE	chromecache_395.2.dr, chromecache_408.2.dr	false		high
https://github.com/wuhanyumsft	chromecache_178.2.dr	false		high
https://github.com/blakedrumm	chromecache_352.2.dr	false		high
https://www.skype.com/en/	chromecache_180.2.dr	false		high
https://github.com/buck1ey	chromecache_406.2.dr	false		high
https://github.com/anthonychu	chromecache_249.2.dr, chromecache_240.2.dr	false		high
http://polymer.github.io/PATENTS.txt	chromecache_161.2.dr	false	Avira URL Cloud: safe	unknown
https://www.linkedin.com/company/microsoft	chromecache_180.2.dr	false		high
https://aka.ms/ChooseYourMicrosoftCredential	chromecache_399.2.dr	false		high
https://github.com/v-alje	chromecache_249.2.dr	false		high
https://github.com/jdanyow	chromecache_352.2.dr, chromecache_406.2.dr	false		high
https://github.com/Taojunshen	chromecache_399.2.dr	false		high
https://github.com/chcomley	chromecache_249.2.dr, chromecache_240.2.dr	false		high
https://github.com/codemillmatt	chromecache_352.2.dr	false		high
https://schema.org	chromecache_180.2.dr	false		high
http://polymer.github.io/LICENSE.txt	chromecache_161.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/Wix97	chromecache_406.2.dr	false		high
https://github.com/axios/axios/issues	chromecache_339.2.dr	false		high
https://github.com/TianqiZhang	chromecache_406.2.dr	false		high
https://github.com/MicrosoftDocs/azure-docs-pr/blob/live/articles/static-web-apps/authentication-aut	chromecache_249.2.dr	false		high
https://github.com/asajohnson	chromecache_178.2.dr	false		high
https://www.onenote.com/	chromecache_180.2.dr	false		high
http://github.com/requirejs/domReady	chromecache_395.2.dr, chromecache_408.2.dr	false		high
https://aka.ms/mac-manageusers	chromecache_339.2.dr	false		high
https://jquery.com/	chromecache_391.2.dr	false		high
https://zealous-water.azurestaticapps.net/success">Login</a>	chromecache_249.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/johnmichalak	chromecache_352.2.dr	false		high
https://authoring-docs-microsoft.poolparty.biz/devrel/07bb3e10-d135-43ff-bc8b-360497cb39fa	chromecache_399.2.dr	false		high
https://octokit.github.io/rest.js/#throttling	chromecache_161.2.dr	false	Avira URL Cloud: safe	unknown
https://accdn.lpsnmedia.net	chromecache_180.2.dr	false		high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_364.2.dr, chromecache_234.2.dr	false		high
https://authoring-docs-microsoft.poolparty.biz/devrel/d6f38669-3d05-40f2-afd8-e49f7dd20884	chromecache_399.2.dr	false		high
https://github.com/js-cookie/js-cookie	chromecache_161.2.dr, chromecache_208.2.dr	false		high
http://github.com/aFarkas/lazysizes	chromecache_395.2.dr, chromecache_408.2.dr	false		high
https://github.com/dastaffo	chromecache_399.2.dr, chromecache_178.2.dr	false		high
https://s7d2.scene7.com/is/image/microsoftcorp/mwf-placeholder?wid	chromecache_339.2.dr	false		high
https://github.com/$	chromecache_161.2.dr	false		high
http://schema.org/Organization	chromecache_406.2.dr	false		high
https://github.com/ghogen	chromecache_352.2.dr	false		high
https://sizzlejs.com/	chromecache_391.2.dr	false		high
https://js.foundation/	chromecache_391.2.dr	false	URL Reputation: safe	unknown
https://github.com/dotnet/try	chromecache_161.2.dr	false		high
https://github.com/huypub	chromecache_406.2.dr	false		high
https://github.com/SvenAelterman	chromecache_249.2.dr	false		high
https://github.com/Micsullivan	chromecache_399.2.dr	false		high
https://www.xbox.com/en-us/games/store/xbox-game-pass-ultimate/cfq7ttc0khs0?icid=CNavAllXboxGamePass	chromecache_180.2.dr	false		high
https://github.com/wadepickett	chromecache_352.2.dr	false		high
https://js.monitor.azure.com	chromecache_180.2.dr	false		high
https://github.com/alexbuckgit	chromecache_399.2.dr	false		high

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.40	part-0012.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
63.140.38.180	microsoftwindows.112.2o7.net	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
63.140.38.20	unknown	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
34.120.154.120	lpcdn.lpsnmedia.net	United States	15169	GOOGLEUS	false
172.253.115.103	www.google.com	United States	15169	GOOGLEUS	false
13.107.213.41	part-0013.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.213.40	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
20.22.31.128	waws-prod-bn1-42e56722.sip.p.azurewebsites.windows.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
172.253.122.101	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
18.160.18.34	d1xbuscas8tetl.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
63.140.38.160	unknown	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
151.101.1.192	liveperson.map.fastly.net	United States	54113	FASTLYUS	false
34.198.54.178	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
142.251.163.138	clients.l.google.com	United States	15169	GOOGLEUS	false
35.186.249.72	d.impactradius-event.com	United States	15169	GOOGLEUS	false
142.250.31.84	accounts.google.com	United States	15169	GOOGLEUS	false

Joe Sandbox version:	38.0.0 Ammolite
Analysis ID:	1370023
Start date and time:	2024-01-04 22:22:43 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 4s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://purple-ground-080c0e60f.4.azurestaticapps.net/.auth/invitations/accept
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@23/253@52/18
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://go.microsoft.com/fwlink/?linkid=2129797&clcid=0x409 Browse: https://learn.microsoft.com/en-us/azure/static-web-apps/authentication-authorization#main Browse: https://www.microsoft.com/ Browse: https://learn.microsoft.com/en-us/ Browse: https://learn.microsoft.com/en-us/docs/ Browse: https://learn.microsoft.com/en-us/training/ Browse: https://learn.microsoft.com/en-us/credentials/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	7503
Entropy (8bit):	4.487361335701633
Encrypted:	false
SSDEEP:	192:pWgggNig/ggg/4ggsIgg/gggo/ggg/gx3Oj97E7fH8GZgx+nsYlr:sgggNig/ggg/4ggsIgg/gggo/ggg/gxH
MD5:	6CA8890343D7AFAFFAA1CEA496740921
SHA1:	FDF62E4145407F21A40322AECD6B77B2F7D7E1B7
SHA-256:	B1EAD1F9AD83B5701BBC1D0CC637EB783D4FCE4E84608F5E596DB80A1F9C0784
SHA-512:	D29AB36C5B4CF31B31B4240E9577664D1965274F51F3112B08AC2F792EE570658DBFC5DE05D199EEFF66701CE789D55E2E58E29ACFACA390393DA988B7BB185F
Malicious:	false
Reputation:	low
Preview:	<svg version="1.1" xmlns="http://www.w3.org/2000/svg" width="2000" height="311" viewBox="0 0 2000 311" xml:space="preserve">.. <style>.. .st2{fill:#2f5a6e}.. </style>.. <path d="M457.2 311h1007.4l18.6-72.8 1.9.5-18.5 72.3h13.8l18.6-72.8 1.9.5-18.5 72.3h13.8l18.6-72.8 1.9.5-18.5 72.3h13.8l18.6-72.8 1.9.5L1514 311h13.8l18.6-72.7 1.9.5L1530 311h13.8l18.6-72.8 1.9.5-18.5 72.3h13.8l18.6-72.7 1.9.5-18.5 72.3h13.8l18.6-72.8 1.9.5-18.5 72.3h13.8l18.6-72.8 1.9.5-18.5 72.3h13.8l18.6-72.8 1.9.5-18.5 72.3h13.8l18.6-72.7 1.9.5-18.5 72.3h13.8l18.6-72.8 1.9.5L1641 311h13.8l18.6-72.8 1.9.5-18.5 72.3h13.8l18.6-72.8 1.9.5-18.5 72.3h13.8l18.6-72.8 1.9.5-18.5 72.3h13.4l18.6-72.8 1.9.5L1704 311h13.8l18.6-72.8 1.9.5-18.5 72.3h13.8l18.6-72.8 1.9.5-18.5 72.3h13.8l18.6-72.7 1.9.5-18.5 72.3h13.8l18.6-72.8 1.9.5-18.5 72.3h13.8l18.6-72.8 1.9.5-18.5 72.3h13.8l18.6-72.8 1.9.5-18.5 72.3h13.8l18.6-72.7 1.9.5L1815 311h13.8l18.6-72.7 1.9.5-18.5 72.3h13.8l18.6-72.8 1.9.5-18.5 72.3h13.8l18.6-72.8 1.9.5-18.5 72.3h13

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3425
Entropy (8bit):	4.822239952412332
Encrypted:	false
SSDEEP:	96:hLPqfjMDALwVmlNkHfdFNNIdV4DWhDyyytwyQy6TyM7y8yCy2PVK0zBys/yijMbT:kL6hjCphIe3tKIjk
MD5:	1A4F0CB5064BAF4FA82D9E23919DC423
SHA1:	57B586C6CFE4D15BFDE198C7A449DE29BC0F56D1
SHA-256:	EF2583FDA6926FFB5B8D1B6FBDD71210E551B63199704EC648564017E2BB6A8A
SHA-512:	3AB30EE6E477414F75DB4D6C839E009554BFA214A152A9B23FAE7AB5541B1A9C7C328C365191378BFF0D90561C556BA3DE8EAB7DA3A8074E32FE792CEC9B3EA8
Malicious:	false
Reputation:	low
URL:	https://learn.microsoft.com/api/hierarchy/items?locale=en-us&uids=learn.azure-well-architected-introduction%3Blearn.static-apps-gatsby%3Blearn.github.github-actions-automate-tasks
Preview:	[{"childCount":8,"childUIds":["learn.azure-well-architected-introduction.1-introduction","learn.azure-well-architected-introduction.2-pillars","learn.azure-well-architected-introduction.3-cost-optimization","learn.azure-well-architected-introduction.4-operational-excellence","learn.azure-well-architected-introduction.5-performance-efficiency","learn.azure-well-architected-introduction.6-reliability","learn.azure-well-architected-introduction.7-security","learn.azure-well-architected-introduction.8-summary"],"summary":"Learn how using key principles throughout your cloud architecture can help you design and build a solid architectural foundation that you can continuously improve.","levels":["beginner"],"products":["azure"],"roles":["solution-architect"],"display_levels":["Beginner"],"display_products":["Azure"],"display_roles":["Solution Architect"],"uid":"learn.azure-well-architected-introduction","type":"module","title":"Introduction to the Microsoft Azure Well-Architected Framework",

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4054
Entropy (8bit):	7.797012573497454
Encrypted:	false
SSDEEP:	48:zICvnyRHJ3BRZPcSPQ72N2xoiR4fTJX/rj4sFNMkk5/p1k2lPUmbm39o4aL7V9XH:10nvE724xoiRQJPrjpLKSFl9oX31Z1d
MD5:	9F14C20150A003D7CE4DE57C298F0FBA
SHA1:	DAA53CF17CC45878A1B153F3C3BF47DC9669D78F
SHA-256:	112FEC798B78AA02E102A724B5CB1990C0F909BC1D8B7B1FA256EAB41BBC0960
SHA-512:	D4F6E49C854E15FE48D6A1F1A03FDA93218AB8FCDB2C443668E7DF478830831ACC2B41DAEFC25ED38FCC8D96C4401377374FED35C36A5017A11E63C8DAE5C487
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............J.......tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13:40 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:A00BC639840A11E68CBEB97C2156C7FD" xmpMM:InstanceID="xmp.iid:A00BC638840A11E68CBEB97C2156C7FD" xmp:CreatorTool="Adobe Photoshop CC 2015.5 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A2C931A470A111E6AEDFA14578553B7B" stRef:documentID="xmp.did:A2C931A570A111E6AEDFA14578553B7B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......DIDATx..\..UU.>.7..3....h.L..& j2...h.@..".........`U.......R"..Dq.&.BJR 1.4`$.200...l........wg.y.[k/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (524)
Category:	downloaded
Size (bytes):	980
Entropy (8bit):	5.221020544248936
Encrypted:	false
SSDEEP:	24:ckGytSvuT/y67L/nV9jViHwukcglwYVTYVu:catwuby67pLRuxmwCTCu
MD5:	EC8AED9DF755A7B27E52317DCF532DF8
SHA1:	60F03B5BF43D1682D1CDB7DAF5A5A37FCD29D4E8
SHA-256:	C152DD3ED8493299EA2712FFC15A0043F417FEDCF4159B2C993A006501D82AC4
SHA-512:	16890D243CE2236AA2CD01C3C85D7B0AA1DB3DC8BF8B9CFE97AD18889F4030A0B6511C9F82C62F2BDA5F1029AFF4E12A9E35B0E182FC3B2B8B677618A589F5CF
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/socialfollow/v1/socialfollow/clientlibs/site.min.ACSHASHec8aed9df755a7b27e52317dcf532df8.js
Preview:	'use strict';$(document).ready(function(){var a=window.matchMedia("(prefers-color-scheme: dark)");a.addEventListener("change",function(k){{const d=document.querySelectorAll(".socialfollow .socialfollow-li img");if(d)for(var e=0;e<d.length;e++){var b=d[e].getAttribute("src"),g=d[e].getAttribute("data-src");b&&(k.matches?(-1<b.indexOf("\x26fmt\x3dpng-alpha")&&(b=b.replace("\x26fmt\x3dpng-alpha",""),d[e].setAttribute("src",b)),-1<b.indexOf("?fmt\x3dpng-alpha")&&(b=b.replace("?fmt\x3dpng-alpha",""),d[e].setAttribute("src",.b))):g&&d[e].setAttribute("src",g))}}});if(a.matches&&(a=document.querySelectorAll(".socialfollow .socialfollow-li img")))for(var f=0;f<a.length;f++){var c=a[f].getAttribute("src"),h=a[f].getAttribute("data-src");c&&(-1<c.indexOf("\x26fmt\x3dpng-alpha")?(c=c.replace("\x26fmt\x3dpng-alpha",""),a[f].setAttribute("src",c)):-1<c.indexOf("?fmt\x3dpng-alpha")?(c=c.replace("?fmt\x3dpng-alpha",""),a[f].setAttribute("src",c)):h&&a[f].setAttribute("src",h))}});

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 4, 2024 22:23:31.433274984 CET	55395	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:23:31.433598995 CET	57196	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:23:31.434117079 CET	56148	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:23:31.434376001 CET	59359	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:23:31.521300077 CET	53	62265	1.1.1.1	192.168.2.4
Jan 4, 2024 22:23:31.528306007 CET	53	55395	1.1.1.1	192.168.2.4
Jan 4, 2024 22:23:31.529016018 CET	53	56148	1.1.1.1	192.168.2.4
Jan 4, 2024 22:23:31.529169083 CET	53	59359	1.1.1.1	192.168.2.4
Jan 4, 2024 22:23:31.529503107 CET	53	57196	1.1.1.1	192.168.2.4
Jan 4, 2024 22:23:32.301939964 CET	53	59139	1.1.1.1	192.168.2.4
Jan 4, 2024 22:23:33.018923998 CET	55208	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:23:33.019314051 CET	58540	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:23:33.560122013 CET	63315	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:23:33.560535908 CET	52637	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:23:35.850884914 CET	54643	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:23:35.851435900 CET	63355	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:23:35.945609093 CET	53	54643	1.1.1.1	192.168.2.4
Jan 4, 2024 22:23:35.946649075 CET	53	63355	1.1.1.1	192.168.2.4
Jan 4, 2024 22:23:48.784013033 CET	65319	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:23:48.784518957 CET	65123	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:23:49.610445023 CET	53	49831	1.1.1.1	192.168.2.4
Jan 4, 2024 22:23:50.108097076 CET	51527	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:23:50.108561993 CET	61978	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:23:50.110799074 CET	59695	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:23:50.110966921 CET	61822	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:23:50.204191923 CET	53	51527	1.1.1.1	192.168.2.4
Jan 4, 2024 22:23:50.209419012 CET	53	59695	1.1.1.1	192.168.2.4
Jan 4, 2024 22:23:50.214924097 CET	53	61822	1.1.1.1	192.168.2.4
Jan 4, 2024 22:23:50.223136902 CET	53	61978	1.1.1.1	192.168.2.4
Jan 4, 2024 22:23:51.536946058 CET	53	53544	1.1.1.1	192.168.2.4
Jan 4, 2024 22:23:51.553421974 CET	58850	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:23:51.553739071 CET	62988	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:23:56.435633898 CET	138	138	192.168.2.4	192.168.2.255
Jan 4, 2024 22:24:08.369764090 CET	53	52713	1.1.1.1	192.168.2.4
Jan 4, 2024 22:24:19.485666037 CET	53828	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:24:19.485873938 CET	57879	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:24:21.535996914 CET	63043	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:24:21.536232948 CET	55972	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:24:26.991780043 CET	55351	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:24:26.992150068 CET	61033	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:24:27.214951038 CET	53	51981	1.1.1.1	192.168.2.4
Jan 4, 2024 22:24:27.216896057 CET	61370	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:24:27.217346907 CET	61028	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:24:27.226502895 CET	53	49761	1.1.1.1	192.168.2.4
Jan 4, 2024 22:24:27.314057112 CET	53	61028	1.1.1.1	192.168.2.4
Jan 4, 2024 22:24:27.316318989 CET	60878	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:24:27.316751957 CET	49297	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:24:27.336568117 CET	53	57668	1.1.1.1	192.168.2.4
Jan 4, 2024 22:24:27.345737934 CET	51098	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:24:27.346179962 CET	58177	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:24:27.411287069 CET	53	60878	1.1.1.1	192.168.2.4
Jan 4, 2024 22:24:27.411921024 CET	53	49297	1.1.1.1	192.168.2.4
Jan 4, 2024 22:24:27.415610075 CET	51289	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:24:27.416057110 CET	53236	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:24:27.441176891 CET	53	58177	1.1.1.1	192.168.2.4
Jan 4, 2024 22:24:27.519568920 CET	62636	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:24:27.520061970 CET	53482	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:24:27.553561926 CET	65404	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:24:27.553740025 CET	63060	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:24:27.622381926 CET	61796	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:24:27.622992992 CET	50052	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:24:27.661892891 CET	56821	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:24:27.662353039 CET	65040	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:24:27.717901945 CET	53	61796	1.1.1.1	192.168.2.4
Jan 4, 2024 22:24:27.718477011 CET	53	50052	1.1.1.1	192.168.2.4
Jan 4, 2024 22:24:27.757693052 CET	53	65040	1.1.1.1	192.168.2.4
Jan 4, 2024 22:24:27.758523941 CET	53	56821	1.1.1.1	192.168.2.4
Jan 4, 2024 22:24:27.765146971 CET	64943	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:24:27.765541077 CET	64783	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:24:27.923948050 CET	53	62508	1.1.1.1	192.168.2.4
Jan 4, 2024 22:24:27.926575899 CET	53	63723	1.1.1.1	192.168.2.4
Jan 4, 2024 22:24:31.436544895 CET	53	57020	1.1.1.1	192.168.2.4
Jan 4, 2024 22:24:31.541656017 CET	53	52905	1.1.1.1	192.168.2.4
Jan 4, 2024 22:24:38.339044094 CET	58645	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:24:38.339612961 CET	51827	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:24:38.343082905 CET	64454	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:24:38.343489885 CET	61874	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:24:38.436274052 CET	53	58885	1.1.1.1	192.168.2.4
Jan 4, 2024 22:24:38.439423084 CET	53	61874	1.1.1.1	192.168.2.4
Jan 4, 2024 22:24:38.442034960 CET	53	64454	1.1.1.1	192.168.2.4
Jan 4, 2024 22:24:38.442739964 CET	53	51176	1.1.1.1	192.168.2.4
Jan 4, 2024 22:24:38.547763109 CET	53	56099	1.1.1.1	192.168.2.4
Jan 4, 2024 22:24:40.407996893 CET	53	60700	1.1.1.1	192.168.2.4
Jan 4, 2024 22:24:40.408955097 CET	53	56770	1.1.1.1	192.168.2.4
Jan 4, 2024 22:24:40.532984018 CET	53	49269	1.1.1.1	192.168.2.4
Jan 4, 2024 22:24:40.533683062 CET	53	65308	1.1.1.1	192.168.2.4
Jan 4, 2024 22:24:51.557580948 CET	62341	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:24:51.557964087 CET	64878	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:24:59.169519901 CET	53	54636	1.1.1.1	192.168.2.4
Jan 4, 2024 22:25:00.829854012 CET	64247	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:25:00.830336094 CET	50940	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:25:00.924695969 CET	53	64247	1.1.1.1	192.168.2.4
Jan 4, 2024 22:25:00.926023006 CET	53	50940	1.1.1.1	192.168.2.4
Jan 4, 2024 22:25:11.792160988 CET	53	55547	1.1.1.1	192.168.2.4
Jan 4, 2024 22:25:15.952254057 CET	61502	53	192.168.2.4	1.1.1.1
Jan 4, 2024 22:25:15.952537060 CET	60205	53	192.168.2.4	1.1.1.1

Timestamp	Bytes transferred	Direction	Data
2024-01-04 21:23:31 UTC	680	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-01-04 21:23:31 UTC	1	OUT	Data Raw: 20 Data Ascii:
2024-01-04 21:23:32 UTC	1627	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: https://www.google.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 04 Jan 2024 21:23:32 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Security-Policy: script-src 'report-sample' 'nonce-qMcBO6QB2lAPP8xGIvgHag' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdentityListAccountsHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdentityListAccountsHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/IdentityListAccountsHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-04 21:23:32 UTC	23	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2024-01-04 21:23:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-01-04 21:23:31 UTC	752	OUT	GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1 Host: clients2.google.com Connection: keep-alive X-Goog-Update-Interactivity: fg X-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda X-Goog-Update-Updater: chromecrx-117.0.5938.132 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-04 21:23:32 UTC	732	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce--FT-Pk9Db7IS4I6qD4jBjg' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 04 Jan 2024 21:23:32 GMT Content-Type: text/xml; charset=UTF-8 X-Daynum: 6212 X-Daystart: 48212 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-04 21:23:32 UTC	520	IN	Data Raw: 32 63 39 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 36 32 31 32 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 34 38 32 31 32 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 Data Ascii: 2c9<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="6212" elapsed_seconds="48212"/><app appid="nmmhkkegccagdldgiimedpiccmgmieda" cohort="1::" cohortname=""
2024-01-04 21:23:32 UTC	200	IN	Data Raw: 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 7a 65 3d 22 32 34 38 35 33 31 22 20 73 74 61 74 75 73 3d 22 6f 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 2e 30 2e 36 22 2f 3e 3c 2f 61 70 70 3e 3c 2f 67 75 70 64 61 74 65 3e 0d 0a Data Ascii: 723f56b8717175c536685c5450122b30789464ad82" hash_sha256="81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" protected="0" size="248531" status="ok" version="1.0.0.6"/></app></gupdate>
2024-01-04 21:23:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-01-04 21:23:33 UTC	712	OUT	GET /.auth/invitations/accept HTTP/1.1 Host: purple-ground-080c0e60f.4.azurestaticapps.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-04 21:23:33 UTC	162	IN	HTTP/1.1 400 Bad Request Connection: close Content-Type: text/html Date: Thu, 04 Jan 2024 21:23:32 GMT Cache-Control: no-store Transfer-Encoding: chunked
2024-01-04 21:23:33 UTC	3133	IN	Data Raw: 63 33 36 0d 0a ef bb bf 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 41 7a 75 72 65 20 53 74 61 74 69 63 20 57 65 62 20 41 70 70 73 20 2d 20 34 30 30 3a 20 42 61 64 Data Ascii: c36<!DOCTYPE html><html lang=en><head> <meta charset=utf-8 /> <meta name=viewport content="width=device-width, initial-scale=1.0" /> <meta http-equiv=X-UA-Compatible content="IE=edge" /> <title>Azure Static Web Apps - 400: Bad
2024-01-04 21:23:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-01-04 21:23:36 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-01-04 21:23:37 UTC	496	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/073D) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=157233 Date: Thu, 04 Jan 2024 21:23:36 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-01-04 21:23:37 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-01-04 21:23:37 UTC	805	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0778) X-CID: 11 X-CCC: US X-Azure-Ref-OriginShield: Ref A: 52EA27DBDE0C4533B819423583F6692E Ref B: CH1AA2040902052 Ref C: 2023-07-09T23:10:08Z X-MSEdge-Ref: Ref A: 528BB8D443C042AA9AEA4EC3F75C7762 Ref B: CHI30EDGE0111 Ref C: 2023-07-09T23:11:11Z Content-Type: application/octet-stream X-Azure-Ref: 01uvbYwAAAACkqWtaEMjWQL/4cpisZkorTUVNMzBFREdFMDgxMQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=157195 Date: Thu, 04 Jan 2024 21:23:37 GMT Content-Length: 55 Connection: close X-CID: 2
2024-01-04 21:23:37 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-01-04 21:23:49 UTC	549	OUT	GET /scripts/c/ms.jsll-3.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-04 21:23:49 UTC	913	IN	HTTP/1.1 200 OK Date: Thu, 04 Jan 2024 21:23:49 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 185041 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=1800, immutable, no-transform Last-Modified: Thu, 21 Sep 2023 19:29:40 GMT ETag: 0x8DBBAD919F17481 x-ms-request-id: c2dc1c18-b01e-00b5-4d7b-3669c5000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 3.2.14 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-3.2.14.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240104T212349Z-yzu6989gyx4sva3bb00rcnz47w0000000evg00000000ghxw X-Cache: TCP_HIT Accept-Ranges: bytes
2024-01-04 21:23:49 UTC	15471	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 4c 4c 20 53 4b 55 2c 20 33 2e 32 2e 31 34 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 6e 29 74 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 Data Ascii: /! 1DS JSLL SKU, 3.2.14 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&def
2024-01-04 21:23:49 UTC	16384	IN	Data Raw: 26 26 74 29 3f 22 2e 22 2b 57 72 3a 70 29 2b 47 72 29 7d 66 75 6e 63 74 69 6f 6e 20 59 72 28 65 29 7b 76 61 72 20 61 3d 7b 69 64 3a 4a 72 28 22 5f 61 69 44 61 74 61 2d 22 2b 28 65 7c 7c 70 29 2b 22 2e 22 2b 57 72 29 2c 61 63 63 65 70 74 3a 51 72 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 76 61 72 20 69 3d 65 5b 61 2e 69 64 5d 3b 72 65 74 75 72 6e 20 69 3f 69 5b 4d 74 28 74 29 5d 3a 28 72 26 26 28 28 69 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 5b 65 2e 69 64 5d 3b 69 66 28 21 6e 29 7b 6e 3d 7b 7d 3b 74 72 79 7b 51 72 28 74 29 26 26 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 4b 72 29 74 72 79 7b 72 65 74 75 72 6e 20 4b 72 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6e 2c 65 6e 75 6d 65 72 61 62 6c Data Ascii: &&t)?"."+Wr:p)+Gr)}function Yr(e){var a={id:Jr("_aiData-"+(e\|\|p)+"."+Wr),accept:Qr,get:function(e,t,n,r){var i=e[a.id];return i?i[Mt(t)]:(r&&((i=function(e,t){var n=t[e.id];if(!n){n={};try{Qr(t)&&!function(e,t,n){if(Kr)try{return Kr(e,t,{value:n,enumerabl
2024-01-04 21:23:49 UTC	16384	IN	Data Raw: 68 5b 4d 61 5d 3d 72 3b 65 3d 5a 74 28 43 2e 64 69 73 61 62 6c 65 44 62 67 45 78 74 29 2c 21 30 3d 3d 3d 65 26 26 50 26 26 28 69 5b 49 65 5d 28 50 29 2c 50 3d 6e 75 6c 6c 29 2c 69 26 26 21 50 26 26 21 30 21 3d 3d 65 26 26 28 50 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 6d 72 29 7b 6d 72 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 79 72 5b 55 5d 3b 74 2b 2b 29 6d 72 5b 79 72 5b 74 5d 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 62 72 28 6e 29 3b 65 26 26 28 65 3d 65 2e 6c 69 73 74 65 6e 65 72 29 26 26 65 5b 74 5d 26 26 65 5b 74 5d 5b 4d 65 5d 28 65 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 28 79 72 5b 74 5d 2c 65 29 7d 72 65 74 75 72 6e 20 6d 72 7d 28 43 29 2c 69 5b Data Ascii: h[Ma]=r;e=Zt(C.disableDbgExt),!0===e&&P&&(i[Ie](P),P=null),i&&!P&&!0!==e&&(P=function(e){if(!mr){mr={};for(var t=0;t<yr[U];t++)mr[yr[t]]=function(t,n){return function(){var e=br(n);e&&(e=e.listener)&&e[t]&&e[t][Me](e,arguments)}}(yr[t],e)}return mr}(C),i[
2024-01-04 21:23:49 UTC	16384	IN	Data Raw: 77 26 26 77 69 6e 64 6f 77 2e 6f 70 65 72 61 26 26 65 5b 56 73 5d 3f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 65 5b 44 6f 5d 28 22 5c 6e 22 29 2c 72 3d 30 3b 72 3c 6e 5b 68 5d 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 6e 5b 72 5d 3b 6e 5b 72 2b 31 5d 26 26 28 69 2b 3d 22 40 22 2b 6e 5b 72 2b 31 5d 2c 72 2b 2b 29 2c 74 2e 70 75 73 68 28 69 29 7d 72 65 74 75 72 6e 7b 73 72 63 3a 65 2c 6f 62 6a 3a 74 7d 7d 28 65 5b 4f 6f 5d 29 3a 65 2e 72 65 61 73 6f 6e 26 26 65 2e 72 65 61 73 6f 6e 5b 4d 73 5d 3f 6e 3d 6a 73 28 65 2e 72 65 61 73 6f 6e 5b 4d 73 5d 29 3a 24 28 65 29 3f 6e 3d 6a 73 28 65 29 3a 28 74 3d 65 5b 56 73 5d 7c 7c 65 5b 48 73 5d 7c 7c 22 22 2c 24 28 65 5b 55 73 5d 29 26 26 28 74 26 26 28 74 2b 3d 22 5c 6e 22 29 Data Ascii: w&&window.opera&&e[Vs]?n=function(e){for(var t=[],n=e[Do]("\n"),r=0;r<n[h];r++){var i=n[r];n[r+1]&&(i+="@"+n[r+1],r++),t.push(i)}return{src:e,obj:t}}(e[Oo]):e.reason&&e.reason[Ms]?n=js(e.reason[Ms]):$(e)?n=js(e):(t=e[Vs]\|\|e[Hs]\|\|"",$(e[Us])&&(t&&(t+="\n")
2024-01-04 21:23:49 UTC	16384	IN	Data Raw: 36 2c 22 74 72 61 63 6b 4d 65 74 72 69 63 20 66 61 69 6c 65 64 2c 20 6d 65 74 72 69 63 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 3a 20 22 2b 76 28 72 29 2c 7b 65 78 63 65 70 74 69 6f 6e 3a 73 65 28 72 29 7d 29 7d 7d 2c 53 5b 55 63 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 72 79 7b 76 61 72 20 6e 3d 65 7c 7c 7b 7d 3b 6b 5b 55 63 5d 28 6e 2c 58 28 58 28 58 28 7b 7d 2c 6e 2e 70 72 6f 70 65 72 74 69 65 73 29 2c 6e 2e 6d 65 61 73 75 72 65 6d 65 6e 74 73 29 2c 74 29 29 2c 53 2e 63 6f 6e 66 69 67 5b 5f 63 5d 26 26 4f 5b 56 63 5d 28 6e 2e 6e 61 6d 65 2c 6e 2e 75 72 69 29 7d 63 61 74 63 68 28 72 29 7b 64 28 31 2c 33 37 2c 22 74 72 61 63 6b 50 61 67 65 56 69 65 77 20 66 61 69 6c 65 64 2c 20 70 61 67 65 20 76 69 65 77 20 77 69 6c 6c Data Ascii: 6,"trackMetric failed, metric will not be collected: "+v(r),{exception:se(r)})}},S[Uc]=function(e,t){try{var n=e\|\|{};k[Uc](n,X(X(X({},n.properties),n.measurements),t)),S.config[_c]&&O[Vc](n.name,n.uri)}catch(r){d(1,37,"trackPageView failed, page view will
2024-01-04 21:23:49 UTC	16384	IN	Data Raw: 26 26 31 3d 3d 3d 65 2e 6c 65 6e 67 74 68 29 7b 69 66 28 65 5b 30 5d 2e 68 72 65 66 29 72 65 74 75 72 6e 20 65 5b 30 5d 2e 68 72 65 66 3b 69 66 28 65 5b 30 5d 2e 73 72 63 29 72 65 74 75 72 6e 20 65 5b 30 5d 2e 73 72 63 7d 7d 72 65 74 75 72 6e 22 22 7d 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 49 4e 50 55 54 22 3a 76 61 72 20 6e 3d 74 2e 74 79 70 65 3b 6e 26 26 7a 75 5b 6e 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 5d 26 26 28 6e 3d 73 72 28 29 7c 7c 7b 7d 2c 65 3d 74 2e 66 6f 72 6d 3f 74 2e 66 6f 72 6d 2e 61 63 74 69 6f 6e 7c 7c 6e 2e 70 61 74 68 6e 61 6d 65 7c 7c 22 22 3a 6e 2e 70 61 74 68 6e 61 6d 65 7c 7c 22 22 29 7d 72 65 74 75 72 6e 20 65 7d 28 65 29 2c 6f 3d 6c 65 28 6f 3d 74 68 69 73 2e 5f 63 6f 6e 74 65 6e 74 48 61 6e 64 6c 65 72 2e 67 65 74 45 6c Data Ascii: &&1===e.length){if(e[0].href)return e[0].href;if(e[0].src)return e[0].src}}return""}();break;case"INPUT":var n=t.type;n&&zu[n.toUpperCase()]&&(n=sr()\|\|{},e=t.form?t.form.action\|\|n.pathname\|\|"":n.pathname\|\|"")}return e}(e),o=le(o=this._contentHandler.getEl
2024-01-04 21:23:49 UTC	16384	IN	Data Raw: 6b 50 61 67 65 56 69 65 77 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 49 2e 5f 72 65 63 6f 72 64 54 69 6d 65 53 70 61 6e 28 22 64 77 65 6c 6c 54 69 6d 65 22 2c 21 31 29 2c 54 2e 76 3d 30 2c 69 3d 21 31 2c 66 2e 69 64 2e 69 6e 69 74 69 61 6c 69 7a 65 49 64 73 28 29 2c 65 2e 69 64 3d 66 2e 69 64 2e 67 65 74 4c 61 73 74 50 61 67 65 56 69 65 77 49 64 28 29 2c 64 2e 73 65 6e 64 50 61 67 65 56 69 65 77 49 6e 74 65 72 6e 61 6c 28 65 2c 74 2c 72 28 65 29 29 7d 2c 66 2e 63 61 70 74 75 72 65 50 61 67 65 56 69 65 77 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 67 2e 63 61 70 74 75 72 65 50 61 67 65 56 69 65 77 28 65 2c 74 29 7d 2c 66 2e 74 72 61 63 6b 50 61 67 65 56 69 65 77 50 65 72 66 6f 72 6d 61 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 64 2e 73 65 Data Ascii: kPageView=function(e,t){I._recordTimeSpan("dwellTime",!1),T.v=0,i=!1,f.id.initializeIds(),e.id=f.id.getLastPageViewId(),d.sendPageViewInternal(e,t,r(e))},f.capturePageView=function(e,t){g.capturePageView(e,t)},f.trackPageViewPerformance=function(e,t){d.se
2024-01-04 21:23:49 UTC	16384	IN	Data Raw: 74 29 3f 65 3d 5b 74 5d 2e 63 6f 6e 63 61 74 28 65 29 3a 46 28 74 29 26 26 28 65 3d 74 2e 63 6f 6e 63 61 74 28 65 29 29 29 2c 65 7d 52 66 28 73 66 2c 73 66 2c 21 31 29 2c 52 66 28 74 66 2c 74 66 29 2c 52 66 28 6e 66 2c 22 43 6c 69 65 6e 74 2d 49 64 22 29 2c 52 66 28 6f 66 2c 6f 66 29 2c 52 66 28 72 66 2c 72 66 29 2c 52 66 28 61 66 2c 61 66 29 2c 52 66 28 68 63 2c 68 63 29 2c 46 66 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 48 66 3d 46 66 3b 66 75 6e 63 74 69 6f 6e 20 46 66 28 45 2c 65 2c 5f 2c 64 2c 78 29 7b 74 68 69 73 2e 5f 72 65 73 70 6f 6e 73 65 48 61 6e 64 6c 65 72 73 3d 5b 5d 3b 76 61 72 20 53 2c 4e 2c 44 2c 77 2c 41 2c 6b 2c 50 2c 4f 2c 52 2c 4d 2c 4c 3d 22 3f 63 6f 72 73 3d 74 72 75 65 26 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3d 22 2b 4a 6c 2c 55 Data Ascii: t)?e=[t].concat(e):F(t)&&(e=t.concat(e))),e}Rf(sf,sf,!1),Rf(tf,tf),Rf(nf,"Client-Id"),Rf(of,of),Rf(rf,rf),Rf(af,af),Rf(hc,hc),Ff.__ieDyn=1;var Hf=Ff;function Ff(E,e,_,d,x){this._responseHandlers=[];var S,N,D,w,A,k,P,O,R,M,L="?cors=true&content-type="+Jl,U
2024-01-04 21:23:49 UTC	16384	IN	Data Raw: 6e 75 6c 6c 2c 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 61 28 31 2c 30 2c 74 29 2c 76 28 29 2c 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 44 2e 69 73 43 6f 6d 70 6c 65 74 65 6c 79 49 64 6c 65 28 29 3f 65 28 29 3a 4c 3d 73 28 66 75 6e 63 74 69 6f 6e 28 29 7b 4c 3d 6e 75 6c 6c 2c 6e 28 65 29 7d 2c 2e 32 35 29 7d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 26 26 65 28 29 2c 30 3c 4d 2e 6c 65 6e 67 74 68 3f 4c 3d 73 28 66 75 6e 63 74 69 6f 6e 28 29 7b 4c 3d 6e 75 6c 6c 2c 72 28 4d 2e 73 68 69 66 74 28 29 2c 74 29 7d 2c 30 29 3a 28 4c 3d 6e 75 6c 6c 2c 6f 28 29 29 7d 29 7d 28 74 2c 6e 29 7d 2c 30 29 29 3a 4d 2e 70 75 73 68 28 74 29 3a 28 65 3d 63 28 29 2c 61 28 31 2c 31 2c 6e 29 2c 6e 75 6c 6c 21 3d 3d 74 26 26 74 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 74 Data Ascii: null,function r(e,t){a(1,0,t),v(),function n(e){D.isCompletelyIdle()?e():L=s(function(){L=null,n(e)},.25)}(function(){e&&e(),0<M.length?L=s(function(){L=null,r(M.shift(),t)},0):(L=null,o())})}(t,n)},0)):M.push(t):(e=c(),a(1,1,n),null!==t&&t!==undefined&&t
2024-01-04 21:23:49 UTC	16384	IN	Data Raw: 74 54 72 61 63 65 49 64 28 29 7c 7c 72 7d 2c 65 2e 67 65 74 4c 61 73 74 50 61 67 65 56 69 65 77 49 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 7d 7d 29 7d 63 70 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 75 70 3d 63 70 2c 6c 70 3d 22 64 75 72 61 74 69 6f 6e 22 2c 66 70 3d 22 70 72 6f 70 65 72 74 69 65 73 22 2c 64 70 3d 22 72 65 71 75 65 73 74 55 72 6c 22 2c 70 70 3d 22 69 6e 73 74 22 2c 67 70 3d 22 6c 65 6e 67 74 68 22 2c 68 70 3d 22 74 72 61 63 65 49 44 22 2c 76 70 3d 22 73 70 61 6e 49 44 22 2c 6d 70 3d 22 74 72 61 63 65 46 6c 61 67 73 22 2c 79 70 3d 22 63 6f 6e 74 65 78 74 22 2c 43 70 3d 22 61 62 6f 72 74 65 64 22 2c 62 70 3d 22 74 72 61 63 65 49 64 22 2c 54 70 3d 22 73 70 61 6e 49 64 22 2c 49 70 3d 22 63 6f 72 65 22 2c 45 70 3d 22 Data Ascii: tTraceId()\|\|r},e.getLastPageViewId=function(){return n}})}cp.__ieDyn=1;var up=cp,lp="duration",fp="properties",dp="requestUrl",pp="inst",gp="length",hp="traceID",vp="spanID",mp="traceFlags",yp="context",Cp="aborted",bp="traceId",Tp="spanId",Ip="core",Ep="

Timestamp	Bytes transferred	Direction	Data
2024-01-04 21:23:49 UTC	682	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE
2024-01-04 21:23:49 UTC	713	IN	HTTP/1.1 200 OK Date: Thu, 04 Jan 2024 21:23:49 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 35325 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 24c79382-501e-0022-1f02-3ff044000000 x-ms-version: 2009-09-19 x-azure-ref: 20240104T212349Z-vqgb7wwze50xr8ndx0wm4nqgu40000000exg00000000vrh5 Accept-Ranges: bytes
2024-01-04 21:23:49 UTC	15671	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-01-04 21:23:49 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 65 3f 65 2e 72 65 70 6c 61 63 65 28 2f 26 2f 67 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3e 2f 67 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 27 2f 67 2c 22 26 23 30 33 39 3b 22 29 3a 22 22 7d 2c 65 7d 28 29 2c 61 3d 6e 2e 6c 6f 63 61 6c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6f 2c 6e 2c 72 2c 69 2c 61 29 7b 74 68 69 73 2e 64 69 72 65 63 74 69 6f 6e 3d 22 6c 74 72 22 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 46 6f 63 75 73 45 6c 65 6d 65 6e 74 42 65 66 6f 72 65 50 6f 70 75 70 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6f 6b 69 Data Ascii: ){return e?e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'"):""},e}(),a=n.locals,l=function(){function e(e,t,o,n,r,i,a){this.direction="ltr",this.previousFocusElementBeforePopup=null,this.cooki
2024-01-04 21:23:49 UTC	16384	IN	Data Raw: 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c 61 62 65 6c 3a 68 6f 76 65 72 3a 3a 61 66 74 65 72 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 68 6f 76 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c Data Ascii: or"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + label:hover::after {\n background-color: "+e["radio-button-hover-background-color"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + l
2024-01-04 21:23:49 UTC	4278	IN	Data Raw: 65 6d 65 6e 74 42 79 49 64 28 22 77 63 70 43 6f 6e 73 65 6e 74 42 61 6e 6e 65 72 43 74 72 6c 22 29 7d 2c 65 2e 65 6d 69 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 74 5b 6f 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 3b 76 61 72 20 6e 3d 74 68 69 73 2e 65 76 65 6e 74 73 5b 65 5d 3b 6e 26 26 6e 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 74 29 7d 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 65 2e 61 64 64 45 76 65 6e 74 Data Ascii: ementById("wcpConsentBannerCtrl")},e.emit=function(e){for(var t=[],o=1;o<arguments.length;o++)t[o-1]=arguments[o];var n=this.events[e];n&&n.forEach((function(e){e.apply(null,t)}))},e.prototype.addEventListener=function(e,t,o){e.addEventListener?e.addEvent

Timestamp	Bytes transferred	Direction	Data
2024-01-04 21:23:51 UTC	915	OUT	POST /rest/v1/delivery?client=microsoftmscompoc&sessionId=18f997c7936b48b29bafcaa77f00f1a7&version=2.9.0 HTTP/1.1 Host: target.microsoft.com Connection: keep-alive Content-Length: 1020 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://learn.microsoft.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MSCC=NR; at_check=true; mbox=session#18f997c7936b48b29bafcaa77f00f1a7#1704405290
2024-01-04 21:23:51 UTC	1020	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 62 35 32 66 30 34 61 32 65 36 30 63 34 30 31 34 39 64 30 35 63 66 32 36 34 36 30 37 34 36 31 31 22 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 63 6c 69 65 6e 74 48 69 6e 74 73 22 3a 7b 22 6d 6f 62 69 6c 65 22 3a 66 61 6c 73 65 2c 22 70 6c 61 74 66 6f 72 6d 22 3a 22 57 69 6e 64 6f 77 73 22 2c 22 62 72 6f 77 73 65 72 55 41 57 69 74 68 4d 61 6a 6f 72 Data Ascii: {"requestId":"b52f04a2e60c40149d05cf2646074611","context":{"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","clientHints":{"mobile":false,"platform":"Windows","browserUAWithMajor
2024-01-04 21:23:51 UTC	845	IN	HTTP/1.1 200 OK date: Thu, 04 Jan 2024 21:23:51 GMT content-type: application/json;charset=UTF-8 vary: origin,access-control-request-method,access-control-request-headers,accept-encoding access-control-allow-origin: https://learn.microsoft.com access-control-allow-credentials: true x-request-id: b8bf1e88-1a8d-4524-9e63-fd8dccc5fb93 timing-allow-origin: * accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-01-04 21:23:51 UTC	457	IN	Data Raw: 31 63 32 0d 0a 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 72 65 71 75 65 73 74 49 64 22 3a 22 62 35 32 66 30 34 61 32 65 36 30 63 34 30 31 34 39 64 30 35 63 66 32 36 34 36 30 37 34 36 31 31 22 2c 22 63 6c 69 65 6e 74 22 3a 22 6d 69 63 72 6f 73 6f 66 74 6d 73 63 6f 6d 70 6f 63 22 2c 22 69 64 22 3a 7b 22 74 6e 74 49 64 22 3a 22 31 38 66 39 39 37 63 37 39 33 36 62 34 38 62 32 39 62 61 66 63 61 61 37 37 66 30 30 66 31 61 37 2e 33 34 5f 30 22 2c 22 74 68 69 72 64 50 61 72 74 79 49 64 22 3a 22 37 34 39 65 65 65 36 30 33 39 63 35 34 38 39 62 39 64 62 33 30 30 30 63 37 61 62 33 66 33 39 39 22 7d 2c 22 65 64 67 65 48 6f 73 74 22 3a 22 6d 62 6f 78 65 64 67 65 33 34 2e 74 74 2e 6f 6d 74 72 64 63 2e 6e 65 74 22 2c 22 70 72 65 66 65 74 63 68 22 3a 7b 7d 2c 22 74 65 Data Ascii: 1c2{"status":200,"requestId":"b52f04a2e60c40149d05cf2646074611","client":"microsoftmscompoc","id":{"tntId":"18f997c7936b48b29bafcaa77f00f1a7.34_0","thirdPartyId":"749eee6039c5489b9db3000c7ab3f399"},"edgeHost":"mboxedge34.tt.omtrdc.net","prefetch":{},"te
2024-01-04 21:23:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-01-04 21:23:51 UTC	655	OUT	GET /rest/v1/delivery?client=microsoftmscompoc&sessionId=18f997c7936b48b29bafcaa77f00f1a7&version=2.9.0 HTTP/1.1 Host: target.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MSCC=NR; at_check=true; mbox=session#18f997c7936b48b29bafcaa77f00f1a7#1704405290
2024-01-04 21:23:51 UTC	450	IN	HTTP/1.1 405 Method Not Allowed date: Thu, 04 Jan 2024 21:23:51 GMT content-type: application/json;charset=UTF-8 vary: accept-encoding referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-01-04 21:23:51 UTC	72	IN	Data Raw: 33 64 0d 0a 7b 22 73 74 61 74 75 73 22 3a 34 30 35 2c 22 6d 65 73 73 61 67 65 22 3a 22 52 65 71 75 65 73 74 20 6d 65 74 68 6f 64 20 27 47 45 54 27 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 3d{"status":405,"message":"Request method 'GET' not supported"}0

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://purple-ground-080c0e60f.4.azurestaticapps.net/.auth/invitations/accept

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Chrome Cache Entry: 164

Chrome Cache Entry: 165

Chrome Cache Entry: 166

Chrome Cache Entry: 167

Chrome Cache Entry: 168

Chrome Cache Entry: 169

Chrome Cache Entry: 170

Chrome Cache Entry: 171

Chrome Cache Entry: 172

Chrome Cache Entry: 173

Chrome Cache Entry: 174

Chrome Cache Entry: 175

Chrome Cache Entry: 176

Chrome Cache Entry: 177

Chrome Cache Entry: 178

Chrome Cache Entry: 179

Chrome Cache Entry: 180

Chrome Cache Entry: 181

Chrome Cache Entry: 182

Windows Analysis Report
https://purple-ground-080c0e60f.4.azurestaticapps.net/.auth/invitations/accept

Timestamp	Bytes transferred	Direction	Data
2024-01-04 21:24:01 UTC	1005	OUT	POST /rest/v1/delivery?client=microsoftmscompoc&sessionId=18f997c7936b48b29bafcaa77f00f1a7&version=2.9.0 HTTP/1.1 Host: target.microsoft.com Connection: keep-alive Content-Length: 1100 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://learn.microsoft.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MSCC=NR; at_check=true; MS0=a915e1c3ed5d461a96f81630f2e33eba; mbox=session#18f997c7936b48b29bafcaa77f00f1a7#1704405300\|PC#18f997c7936b48b29bafcaa77f00f1a7.34_0#1738583431
2024-01-04 21:24:01 UTC	1100	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 34 31 32 33 66 65 36 32 62 66 37 31 34 31 39 31 39 30 30 31 65 37 63 38 36 65 35 38 30 37 30 38 22 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 63 6c 69 65 6e 74 48 69 6e 74 73 22 3a 7b 22 6d 6f 62 69 6c 65 22 3a 66 61 6c 73 65 2c 22 70 6c 61 74 66 6f 72 6d 22 3a 22 57 69 6e 64 6f 77 73 22 2c 22 62 72 6f 77 73 65 72 55 41 57 69 74 68 4d 61 6a 6f 72 Data Ascii: {"requestId":"4123fe62bf7141919001e7c86e580708","context":{"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","clientHints":{"mobile":false,"platform":"Windows","browserUAWithMajor
2024-01-04 21:24:01 UTC	845	IN	HTTP/1.1 200 OK date: Thu, 04 Jan 2024 21:24:01 GMT content-type: application/json;charset=UTF-8 vary: origin,access-control-request-method,access-control-request-headers,accept-encoding access-control-allow-origin: https://learn.microsoft.com access-control-allow-credentials: true x-request-id: f63da6ac-70de-4e08-9589-a8d66c2afbe5 timing-allow-origin: * accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-01-04 21:24:01 UTC	457	IN	Data Raw: 31 63 32 0d 0a 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 72 65 71 75 65 73 74 49 64 22 3a 22 34 31 32 33 66 65 36 32 62 66 37 31 34 31 39 31 39 30 30 31 65 37 63 38 36 65 35 38 30 37 30 38 22 2c 22 63 6c 69 65 6e 74 22 3a 22 6d 69 63 72 6f 73 6f 66 74 6d 73 63 6f 6d 70 6f 63 22 2c 22 69 64 22 3a 7b 22 74 6e 74 49 64 22 3a 22 31 38 66 39 39 37 63 37 39 33 36 62 34 38 62 32 39 62 61 66 63 61 61 37 37 66 30 30 66 31 61 37 2e 33 34 5f 30 22 2c 22 74 68 69 72 64 50 61 72 74 79 49 64 22 3a 22 37 34 39 65 65 65 36 30 33 39 63 35 34 38 39 62 39 64 62 33 30 30 30 63 37 61 62 33 66 33 39 39 22 7d 2c 22 65 64 67 65 48 6f 73 74 22 3a 22 6d 62 6f 78 65 64 67 65 33 34 2e 74 74 2e 6f 6d 74 72 64 63 2e 6e 65 74 22 2c 22 70 72 65 66 65 74 63 68 22 3a 7b 7d 2c 22 74 65 Data Ascii: 1c2{"status":200,"requestId":"4123fe62bf7141919001e7c86e580708","client":"microsoftmscompoc","id":{"tntId":"18f997c7936b48b29bafcaa77f00f1a7.34_0","thirdPartyId":"749eee6039c5489b9db3000c7ab3f399"},"edgeHost":"mboxedge34.tt.omtrdc.net","prefetch":{},"te
2024-01-04 21:24:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-01-04 21:24:02 UTC	745	OUT	GET /rest/v1/delivery?client=microsoftmscompoc&sessionId=18f997c7936b48b29bafcaa77f00f1a7&version=2.9.0 HTTP/1.1 Host: target.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MSCC=NR; at_check=true; MS0=a915e1c3ed5d461a96f81630f2e33eba; mbox=session#18f997c7936b48b29bafcaa77f00f1a7#1704405301\|PC#18f997c7936b48b29bafcaa77f00f1a7.34_0#1738583441
2024-01-04 21:24:02 UTC	450	IN	HTTP/1.1 405 Method Not Allowed date: Thu, 04 Jan 2024 21:24:02 GMT content-type: application/json;charset=UTF-8 vary: accept-encoding referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-01-04 21:24:02 UTC	67	IN	Data Raw: 33 64 0d 0a 7b 22 73 74 61 74 75 73 22 3a 34 30 35 2c 22 6d 65 73 73 61 67 65 22 3a 22 52 65 71 75 65 73 74 20 6d 65 74 68 6f 64 20 27 47 45 54 27 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 7d 0d 0a Data Ascii: 3d{"status":405,"message":"Request method 'GET' not supported"}
2024-01-04 21:24:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-01-04 21:24:03 UTC	745	OUT	GET /rest/v1/delivery?client=microsoftmscompoc&sessionId=18f997c7936b48b29bafcaa77f00f1a7&version=2.9.0 HTTP/1.1 Host: target.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MSCC=NR; at_check=true; MS0=a915e1c3ed5d461a96f81630f2e33eba; mbox=session#18f997c7936b48b29bafcaa77f00f1a7#1704405302\|PC#18f997c7936b48b29bafcaa77f00f1a7.34_0#1738583442
2024-01-04 21:24:03 UTC	450	IN	HTTP/1.1 405 Method Not Allowed date: Thu, 04 Jan 2024 21:24:03 GMT content-type: application/json;charset=UTF-8 vary: accept-encoding referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-01-04 21:24:03 UTC	67	IN	Data Raw: 33 64 0d 0a 7b 22 73 74 61 74 75 73 22 3a 34 30 35 2c 22 6d 65 73 73 61 67 65 22 3a 22 52 65 71 75 65 73 74 20 6d 65 74 68 6f 64 20 27 47 45 54 27 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 7d 0d 0a Data Ascii: 3d{"status":405,"message":"Request method 'GET' not supported"}
2024-01-04 21:24:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-01-04 21:24:07 UTC	1005	OUT	POST /rest/v1/delivery?client=microsoftmscompoc&sessionId=18f997c7936b48b29bafcaa77f00f1a7&version=2.9.0 HTTP/1.1 Host: target.microsoft.com Connection: keep-alive Content-Length: 1408 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://learn.microsoft.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MSCC=NR; at_check=true; MS0=a915e1c3ed5d461a96f81630f2e33eba; mbox=session#18f997c7936b48b29bafcaa77f00f1a7#1704405306\|PC#18f997c7936b48b29bafcaa77f00f1a7.34_0#1738583442
2024-01-04 21:24:07 UTC	1408	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 32 32 32 66 35 65 38 61 37 36 61 37 34 63 31 63 61 39 39 66 30 31 31 66 33 38 30 32 31 64 62 35 22 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 63 6c 69 65 6e 74 48 69 6e 74 73 22 3a 7b 22 6d 6f 62 69 6c 65 22 3a 66 61 6c 73 65 2c 22 70 6c 61 74 66 6f 72 6d 22 3a 22 57 69 6e 64 6f 77 73 22 2c 22 62 72 6f 77 73 65 72 55 41 57 69 74 68 4d 61 6a 6f 72 Data Ascii: {"requestId":"222f5e8a76a74c1ca99f011f38021db5","context":{"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","clientHints":{"mobile":false,"platform":"Windows","browserUAWithMajor
2024-01-04 21:24:07 UTC	845	IN	HTTP/1.1 200 OK date: Thu, 04 Jan 2024 21:24:07 GMT content-type: application/json;charset=UTF-8 vary: origin,access-control-request-method,access-control-request-headers,accept-encoding access-control-allow-origin: https://learn.microsoft.com access-control-allow-credentials: true x-request-id: 2626417c-8148-4c26-a29d-44b07d72ba6a timing-allow-origin: * accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-01-04 21:24:07 UTC	457	IN	Data Raw: 31 63 32 0d 0a 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 72 65 71 75 65 73 74 49 64 22 3a 22 32 32 32 66 35 65 38 61 37 36 61 37 34 63 31 63 61 39 39 66 30 31 31 66 33 38 30 32 31 64 62 35 22 2c 22 63 6c 69 65 6e 74 22 3a 22 6d 69 63 72 6f 73 6f 66 74 6d 73 63 6f 6d 70 6f 63 22 2c 22 69 64 22 3a 7b 22 74 6e 74 49 64 22 3a 22 31 38 66 39 39 37 63 37 39 33 36 62 34 38 62 32 39 62 61 66 63 61 61 37 37 66 30 30 66 31 61 37 2e 33 34 5f 30 22 2c 22 74 68 69 72 64 50 61 72 74 79 49 64 22 3a 22 37 34 39 65 65 65 36 30 33 39 63 35 34 38 39 62 39 64 62 33 30 30 30 63 37 61 62 33 66 33 39 39 22 7d 2c 22 65 64 67 65 48 6f 73 74 22 3a 22 6d 62 6f 78 65 64 67 65 33 34 2e 74 74 2e 6f 6d 74 72 64 63 2e 6e 65 74 22 2c 22 70 72 65 66 65 74 63 68 22 3a 7b 7d 2c 22 74 65 Data Ascii: 1c2{"status":200,"requestId":"222f5e8a76a74c1ca99f011f38021db5","client":"microsoftmscompoc","id":{"tntId":"18f997c7936b48b29bafcaa77f00f1a7.34_0","thirdPartyId":"749eee6039c5489b9db3000c7ab3f399"},"edgeHost":"mboxedge34.tt.omtrdc.net","prefetch":{},"te
2024-01-04 21:24:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-01-04 21:24:11 UTC	1005	OUT	POST /rest/v1/delivery?client=microsoftmscompoc&sessionId=18f997c7936b48b29bafcaa77f00f1a7&version=2.9.0 HTTP/1.1 Host: target.microsoft.com Connection: keep-alive Content-Length: 1411 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://learn.microsoft.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MSCC=NR; at_check=true; MS0=a915e1c3ed5d461a96f81630f2e33eba; mbox=session#18f997c7936b48b29bafcaa77f00f1a7#1704405310\|PC#18f997c7936b48b29bafcaa77f00f1a7.34_0#1738583447
2024-01-04 21:24:11 UTC	1411	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 64 31 38 66 32 32 30 30 32 62 63 38 34 63 63 34 38 37 39 35 65 61 31 31 35 31 65 32 64 31 65 32 22 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 63 6c 69 65 6e 74 48 69 6e 74 73 22 3a 7b 22 6d 6f 62 69 6c 65 22 3a 66 61 6c 73 65 2c 22 70 6c 61 74 66 6f 72 6d 22 3a 22 57 69 6e 64 6f 77 73 22 2c 22 62 72 6f 77 73 65 72 55 41 57 69 74 68 4d 61 6a 6f 72 Data Ascii: {"requestId":"d18f22002bc84cc48795ea1151e2d1e2","context":{"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","clientHints":{"mobile":false,"platform":"Windows","browserUAWithMajor
2024-01-04 21:24:11 UTC	845	IN	HTTP/1.1 200 OK date: Thu, 04 Jan 2024 21:24:11 GMT content-type: application/json;charset=UTF-8 vary: origin,access-control-request-method,access-control-request-headers,accept-encoding access-control-allow-origin: https://learn.microsoft.com access-control-allow-credentials: true x-request-id: 0c37ba10-00d0-4ebe-a8d9-75e6de2a807f timing-allow-origin: * accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-01-04 21:24:11 UTC	457	IN	Data Raw: 31 63 32 0d 0a 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 72 65 71 75 65 73 74 49 64 22 3a 22 64 31 38 66 32 32 30 30 32 62 63 38 34 63 63 34 38 37 39 35 65 61 31 31 35 31 65 32 64 31 65 32 22 2c 22 63 6c 69 65 6e 74 22 3a 22 6d 69 63 72 6f 73 6f 66 74 6d 73 63 6f 6d 70 6f 63 22 2c 22 69 64 22 3a 7b 22 74 6e 74 49 64 22 3a 22 31 38 66 39 39 37 63 37 39 33 36 62 34 38 62 32 39 62 61 66 63 61 61 37 37 66 30 30 66 31 61 37 2e 33 34 5f 30 22 2c 22 74 68 69 72 64 50 61 72 74 79 49 64 22 3a 22 37 34 39 65 65 65 36 30 33 39 63 35 34 38 39 62 39 64 62 33 30 30 30 63 37 61 62 33 66 33 39 39 22 7d 2c 22 65 64 67 65 48 6f 73 74 22 3a 22 6d 62 6f 78 65 64 67 65 33 34 2e 74 74 2e 6f 6d 74 72 64 63 2e 6e 65 74 22 2c 22 70 72 65 66 65 74 63 68 22 3a 7b 7d 2c 22 74 65 Data Ascii: 1c2{"status":200,"requestId":"d18f22002bc84cc48795ea1151e2d1e2","client":"microsoftmscompoc","id":{"tntId":"18f997c7936b48b29bafcaa77f00f1a7.34_0","thirdPartyId":"749eee6039c5489b9db3000c7ab3f399"},"edgeHost":"mboxedge34.tt.omtrdc.net","prefetch":{},"te
2024-01-04 21:24:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-01-04 21:24:15 UTC	1005	OUT	POST /rest/v1/delivery?client=microsoftmscompoc&sessionId=18f997c7936b48b29bafcaa77f00f1a7&version=2.9.0 HTTP/1.1 Host: target.microsoft.com Connection: keep-alive Content-Length: 1417 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://learn.microsoft.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MSCC=NR; at_check=true; MS0=a915e1c3ed5d461a96f81630f2e33eba; mbox=session#18f997c7936b48b29bafcaa77f00f1a7#1704405314\|PC#18f997c7936b48b29bafcaa77f00f1a7.34_0#1738583450
2024-01-04 21:24:15 UTC	1417	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 36 34 38 35 37 32 63 34 38 34 65 63 34 36 32 61 39 32 61 64 64 35 34 34 63 65 66 36 65 63 63 38 22 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 63 6c 69 65 6e 74 48 69 6e 74 73 22 3a 7b 22 6d 6f 62 69 6c 65 22 3a 66 61 6c 73 65 2c 22 70 6c 61 74 66 6f 72 6d 22 3a 22 57 69 6e 64 6f 77 73 22 2c 22 62 72 6f 77 73 65 72 55 41 57 69 74 68 4d 61 6a 6f 72 Data Ascii: {"requestId":"648572c484ec462a92add544cef6ecc8","context":{"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","clientHints":{"mobile":false,"platform":"Windows","browserUAWithMajor
2024-01-04 21:24:15 UTC	845	IN	HTTP/1.1 200 OK date: Thu, 04 Jan 2024 21:24:15 GMT content-type: application/json;charset=UTF-8 vary: origin,access-control-request-method,access-control-request-headers,accept-encoding access-control-allow-origin: https://learn.microsoft.com access-control-allow-credentials: true x-request-id: 253d53fa-0824-46de-84ed-58ab0356289b timing-allow-origin: * accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-01-04 21:24:15 UTC	457	IN	Data Raw: 31 63 32 0d 0a 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 72 65 71 75 65 73 74 49 64 22 3a 22 36 34 38 35 37 32 63 34 38 34 65 63 34 36 32 61 39 32 61 64 64 35 34 34 63 65 66 36 65 63 63 38 22 2c 22 63 6c 69 65 6e 74 22 3a 22 6d 69 63 72 6f 73 6f 66 74 6d 73 63 6f 6d 70 6f 63 22 2c 22 69 64 22 3a 7b 22 74 6e 74 49 64 22 3a 22 31 38 66 39 39 37 63 37 39 33 36 62 34 38 62 32 39 62 61 66 63 61 61 37 37 66 30 30 66 31 61 37 2e 33 34 5f 30 22 2c 22 74 68 69 72 64 50 61 72 74 79 49 64 22 3a 22 37 34 39 65 65 65 36 30 33 39 63 35 34 38 39 62 39 64 62 33 30 30 30 63 37 61 62 33 66 33 39 39 22 7d 2c 22 65 64 67 65 48 6f 73 74 22 3a 22 6d 62 6f 78 65 64 67 65 33 34 2e 74 74 2e 6f 6d 74 72 64 63 2e 6e 65 74 22 2c 22 70 72 65 66 65 74 63 68 22 3a 7b 7d 2c 22 74 65 Data Ascii: 1c2{"status":200,"requestId":"648572c484ec462a92add544cef6ecc8","client":"microsoftmscompoc","id":{"tntId":"18f997c7936b48b29bafcaa77f00f1a7.34_0","thirdPartyId":"749eee6039c5489b9db3000c7ab3f399"},"edgeHost":"mboxedge34.tt.omtrdc.net","prefetch":{},"te
2024-01-04 21:24:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-01-04 21:24:29 UTC	1005	OUT	POST /rest/v1/delivery?client=microsoftmscompoc&sessionId=18f997c7936b48b29bafcaa77f00f1a7&version=2.9.0 HTTP/1.1 Host: target.microsoft.com Connection: keep-alive Content-Length: 1422 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://learn.microsoft.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MSCC=NR; at_check=true; MS0=a915e1c3ed5d461a96f81630f2e33eba; mbox=session#18f997c7936b48b29bafcaa77f00f1a7#1704405329\|PC#18f997c7936b48b29bafcaa77f00f1a7.34_0#1738583455
2024-01-04 21:24:29 UTC	1422	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 39 33 35 32 39 39 62 65 64 64 66 30 34 65 66 38 61 38 62 30 39 65 31 33 36 31 38 31 62 64 63 35 22 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 63 6c 69 65 6e 74 48 69 6e 74 73 22 3a 7b 22 6d 6f 62 69 6c 65 22 3a 66 61 6c 73 65 2c 22 70 6c 61 74 66 6f 72 6d 22 3a 22 57 69 6e 64 6f 77 73 22 2c 22 62 72 6f 77 73 65 72 55 41 57 69 74 68 4d 61 6a 6f 72 Data Ascii: {"requestId":"935299beddf04ef8a8b09e136181bdc5","context":{"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","clientHints":{"mobile":false,"platform":"Windows","browserUAWithMajor
2024-01-04 21:24:30 UTC	845	IN	HTTP/1.1 200 OK date: Thu, 04 Jan 2024 21:24:30 GMT content-type: application/json;charset=UTF-8 vary: origin,access-control-request-method,access-control-request-headers,accept-encoding access-control-allow-origin: https://learn.microsoft.com access-control-allow-credentials: true x-request-id: c65bd755-d133-4175-81d5-1d70682e4374 timing-allow-origin: * accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-01-04 21:24:30 UTC	457	IN	Data Raw: 31 63 32 0d 0a 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 72 65 71 75 65 73 74 49 64 22 3a 22 39 33 35 32 39 39 62 65 64 64 66 30 34 65 66 38 61 38 62 30 39 65 31 33 36 31 38 31 62 64 63 35 22 2c 22 63 6c 69 65 6e 74 22 3a 22 6d 69 63 72 6f 73 6f 66 74 6d 73 63 6f 6d 70 6f 63 22 2c 22 69 64 22 3a 7b 22 74 6e 74 49 64 22 3a 22 31 38 66 39 39 37 63 37 39 33 36 62 34 38 62 32 39 62 61 66 63 61 61 37 37 66 30 30 66 31 61 37 2e 33 34 5f 30 22 2c 22 74 68 69 72 64 50 61 72 74 79 49 64 22 3a 22 37 34 39 65 65 65 36 30 33 39 63 35 34 38 39 62 39 64 62 33 30 30 30 63 37 61 62 33 66 33 39 39 22 7d 2c 22 65 64 67 65 48 6f 73 74 22 3a 22 6d 62 6f 78 65 64 67 65 33 34 2e 74 74 2e 6f 6d 74 72 64 63 2e 6e 65 74 22 2c 22 70 72 65 66 65 74 63 68 22 3a 7b 7d 2c 22 74 65 Data Ascii: 1c2{"status":200,"requestId":"935299beddf04ef8a8b09e136181bdc5","client":"microsoftmscompoc","id":{"tntId":"18f997c7936b48b29bafcaa77f00f1a7.34_0","thirdPartyId":"749eee6039c5489b9db3000c7ab3f399"},"edgeHost":"mboxedge34.tt.omtrdc.net","prefetch":{},"te
2024-01-04 21:24:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-01-04 21:25:00 UTC	558	OUT	GET /meversion?partner=mshomepage&market=en-us&uhf=1 HTTP/1.1 Host: mem.gfx.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-04 21:25:01 UTC	639	IN	HTTP/1.1 200 OK Date: Thu, 04 Jan 2024 21:25:01 GMT Content-Type: application/javascript Content-Length: 30205 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, no-transform, max-age=7200 Expires: Thu, 04 Jan 2024 23:25:00 GMT X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS X-UA-Compatible: IE=edge Strict-Transport-Security: max-age=31536000; includeSubDomains x-azure-ref: 20240104T212500Z-53m4fn4qhx0bf05g8eexxzsfs80000000etg00000001suef X-Cache: TCP_MISS Accept-Ranges: bytes
2024-01-04 21:25:01 UTC	15745	IN	Data Raw: 77 69 6e 64 6f 77 2e 4d 53 41 3d 77 69 6e 64 6f 77 2e 4d 53 41 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 3d 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 2e 43 6f 6e 66 69 67 3d 7b 22 76 65 72 22 3a 22 31 30 2e 32 33 32 37 31 2e 35 22 2c 22 6d 6b 74 22 3a 22 65 6e 2d 55 53 22 2c 22 70 74 6e 22 3a 22 6d 73 68 6f 6d 65 70 61 67 65 22 2c 22 67 66 78 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6d 63 64 6e 2e 6d 73 66 74 61 75 74 68 2e 6e 65 74 22 2c 22 64 62 67 22 3a 66 61 6c 73 65 2c 22 61 61 64 22 3a 74 72 75 65 2c 22 69 6e 74 22 3a 66 61 6c 73 65 2c 22 70 78 79 22 3a 74 72 75 65 2c 22 6d 73 54 78 74 22 3a 66 61 6c 73 65 2c 22 72 77 64 22 3a 74 Data Ascii: window.MSA=window.MSA\|\|{};window.MSA.MeControl=window.MSA.MeControl\|\|{};window.MSA.MeControl.Config={"ver":"10.23271.5","mkt":"en-US","ptn":"mshomepage","gfx":"https://amcdn.msftauth.net","dbg":false,"aad":true,"int":false,"pxy":true,"msTxt":false,"rwd":t
2024-01-04 21:25:01 UTC	14460	IN	Data Raw: 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6a 65 28 7b 65 76 65 6e 74 54 79 70 65 3a 22 43 6c 69 65 6e 74 45 72 72 6f 72 22 2c 69 73 43 72 69 74 69 63 61 6c 3a 21 30 2c 6e 61 6d 65 3a 65 2e 6d 65 73 73 61 67 65 7c 7c 22 28 66 61 6c 73 65 79 20 6d 65 73 73 61 67 65 20 70 72 6f 70 65 72 74 79 20 6f 6e 20 65 72 72 6f 72 29 22 2c 74 79 70 65 3a 22 55 6e 68 61 6e 64 6c 65 64 50 72 6f 6d 69 73 65 52 65 6a 65 63 74 69 6f 6e 22 2c 64 65 74 61 69 6c 73 3a 65 2e 73 74 61 63 6b 7c 7c 22 22 2c 64 69 73 70 6c 61 79 65 64 3a 21 31 2c 73 65 76 65 72 69 74 79 3a 65 2e 6d 63 49 73 54 69 6d 65 6f 75 74 3f 33 3a 32 7d 29 7d 3b 76 61 72 20 71 65 3d 5b 5d 3b 76 61 72 20 47 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 57 65 28 65 29 7b 72 65 74 75 72 6e 20 47 65 5b 65 5d 7d 66 75 Data Ascii: n=function(e){je({eventType:"ClientError",isCritical:!0,name:e.message\|\|"(falsey message property on error)",type:"UnhandledPromiseRejection",details:e.stack\|\|"",displayed:!1,severity:e.mcIsTimeout?3:2})};var qe=[];var Ge={};function We(e){return Ge[e]}fu

Timestamp	Bytes transferred	Direction	Data
2024-01-04 21:25:01 UTC	449	OUT	GET /tools/pso/ping?as=chrome&brand=ONGR&pid=&hl=en&events=C1I,C2I,C7I,C1S,C7S&rep=2&rlz=C1:,C2:,C7:&id=000000000000000000000000000000000000000088DEE93F94 HTTP/1.1 Host: clients1.google.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br
2024-01-04 21:25:01 UTC	817	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-oCnGixoL5EGLNaa2iocPSg' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/download-dt/1 Content-Security-Policy: script-src 'report-sample' 'nonce-aqTFSXktkI52EGFuImS_aA' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/download-dt/1 Content-Type: text/plain; charset=utf-8 Content-Length: 220 Date: Thu, 04 Jan 2024 21:25:01 GMT Expires: Thu, 04 Jan 2024 21:25:01 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-04 21:25:01 UTC	220	IN	Data Raw: 72 6c 7a 43 31 3a 20 31 43 31 4f 4e 47 52 5f 65 6e 55 53 31 30 39 31 0a 72 6c 7a 43 32 3a 20 31 43 32 4f 4e 47 52 5f 65 6e 55 53 31 30 39 31 0a 72 6c 7a 43 37 3a 20 31 43 37 4f 4e 47 52 5f 65 6e 55 53 31 30 39 31 0a 64 63 63 3a 20 0a 73 65 74 5f 64 63 63 3a 20 43 31 3a 31 43 31 4f 4e 47 52 5f 65 6e 55 53 31 30 39 31 2c 43 32 3a 31 43 32 4f 4e 47 52 5f 65 6e 55 53 31 30 39 31 2c 43 37 3a 31 43 37 4f 4e 47 52 5f 65 6e 55 53 31 30 39 31 0a 65 76 65 6e 74 73 3a 20 43 31 49 2c 43 32 49 2c 43 37 49 2c 43 31 53 2c 43 37 53 0a 73 74 61 74 65 66 75 6c 2d 65 76 65 6e 74 73 3a 20 43 31 49 2c 43 32 49 2c 43 37 49 0a 63 72 63 33 32 3a 20 33 37 35 66 37 64 61 39 0a Data Ascii: rlzC1: 1C1ONGR_enUS1091rlzC2: 1C2ONGR_enUS1091rlzC7: 1C7ONGR_enUS1091dcc: set_dcc: C1:1C1ONGR_enUS1091,C2:1C2ONGR_enUS1091,C7:1C7ONGR_enUS1091events: C1I,C2I,C7I,C1S,C7Sstateful-events: C1I,C2I,C7Icrc32: 375f7da9

Target ID:	0
Start time:	22:23:28
Start date:	04/01/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false