IOC Report
https://hillsclerk.securityeducation.com/

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 100
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 15708
downloaded
Chrome Cache Entry: 101
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 4730
downloaded
Chrome Cache Entry: 102
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
downloaded
Chrome Cache Entry: 103
Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
downloaded
Chrome Cache Entry: 104
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1378
downloaded
Chrome Cache Entry: 105
JSON data
dropped
Chrome Cache Entry: 106
ASCII text, with very long lines (12877), with no line terminators
downloaded
Chrome Cache Entry: 107
ASCII text, with very long lines (5559)
downloaded
Chrome Cache Entry: 108
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 443045
downloaded
Chrome Cache Entry: 109
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1378
dropped
Chrome Cache Entry: 110
JSON data
downloaded
Chrome Cache Entry: 111
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
dropped
Chrome Cache Entry: 112
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 379
downloaded
Chrome Cache Entry: 113
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
dropped
Chrome Cache Entry: 114
HTML document, ASCII text, with very long lines (2972)
dropped
Chrome Cache Entry: 115
PNG image data, 200 x 71, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 116
GIF image data, version 89a, 352 x 3
dropped
Chrome Cache Entry: 117
Web Open Font Format (Version 2), TrueType, length 9852, version 1.0
downloaded
Chrome Cache Entry: 118
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
downloaded
Chrome Cache Entry: 119
HTML document, ASCII text, with very long lines (2972)
downloaded
Chrome Cache Entry: 120
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 223759
downloaded
Chrome Cache Entry: 121
HTML document, ASCII text, with very long lines (2972)
downloaded
Chrome Cache Entry: 122
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
downloaded
Chrome Cache Entry: 123
GIF image data, version 89a, 352 x 3
dropped
Chrome Cache Entry: 124
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 125
JSON data
dropped
Chrome Cache Entry: 126
Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
downloaded
Chrome Cache Entry: 127
Web Open Font Format (Version 2), TrueType, length 16944, version 1.0
downloaded
Chrome Cache Entry: 128
JSON data
dropped
Chrome Cache Entry: 129
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 609680
downloaded
Chrome Cache Entry: 130
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
downloaded
Chrome Cache Entry: 131
JSON data
downloaded
Chrome Cache Entry: 132
GIF image data, version 89a, 352 x 3
downloaded
Chrome Cache Entry: 133
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 55021
downloaded
Chrome Cache Entry: 134
PNG image data, 200 x 71, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 135
HTML document, ASCII text, with very long lines (2972)
downloaded
Chrome Cache Entry: 136
HTML document, ASCII text, with very long lines (2972)
downloaded
Chrome Cache Entry: 137
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
dropped
Chrome Cache Entry: 138
GIF image data, version 89a, 352 x 3
downloaded
Chrome Cache Entry: 139
JSON data
downloaded
Chrome Cache Entry: 140
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
dropped
Chrome Cache Entry: 141
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113084
downloaded
Chrome Cache Entry: 142
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
dropped
Chrome Cache Entry: 143
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113657
downloaded
Chrome Cache Entry: 144
ASCII text
downloaded
Chrome Cache Entry: 82
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
dropped
Chrome Cache Entry: 83
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 84
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
downloaded
Chrome Cache Entry: 85
HTML document, ASCII text, with very long lines (2972)
dropped
Chrome Cache Entry: 86
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 141289
downloaded
Chrome Cache Entry: 87
HTML document, ASCII text, with very long lines (2345), with CRLF line terminators
downloaded
Chrome Cache Entry: 88
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
downloaded
Chrome Cache Entry: 89
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 90
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
downloaded
Chrome Cache Entry: 91
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 379
dropped
Chrome Cache Entry: 92
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
dropped
Chrome Cache Entry: 93
JSON data
dropped
Chrome Cache Entry: 94
HTML document, ASCII text, with very long lines (2972)
dropped
Chrome Cache Entry: 95
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 90613
downloaded
Chrome Cache Entry: 96
ASCII text, with very long lines (61641)
downloaded
Chrome Cache Entry: 97
ASCII text, with very long lines (2409)
downloaded
Chrome Cache Entry: 98
ASCII text, with very long lines (1592)
downloaded
Chrome Cache Entry: 99
ASCII text, with very long lines (3234)
downloaded
There are 54 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=2012,i,694522603986261116,3156022079628551790,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://hillsclerk.securityeducation.com/"

URLs

Name
IP
Malicious
https://hillsclerk.securityeducation.com/
https://hillsclerk.securityeducation.com/api/companymanagement/api/companyLoginProfile/hillsclerk
18.211.106.230
https://app.pendo.io
unknown
https://npms.io/search?q=ponyfill.
unknown
https://hillsclerk.securityeducation.com/favicon-32x32.png
18.211.106.230
https://global.localizecdn.com/api/lib/xG6eDWKawYmvs/g?v=0&l=en
104.18.4.175
https://hillsclerk.securityeducation.com/wombat-style-guide/fonts/roboto-latin-400.woff2
18.211.106.230
https://github.com/emn178/js-sha1
unknown
https://hillsclerk.securityeducation.com/platform-ember/vendor-a951d76bce4e0eb0f86ae64748ba6fda.css
18.211.106.230
https://github.com/taylorhakes/promise-polyfill
unknown
http://momentjs.com/guides/#/warnings/add-inverted-param/
unknown
https://login.windows-ppe.net
unknown
https://www.pendo.io/pendo-free/nps?utm_source=pendo_app&utm_medium=branded-nps&utm_campaign=free-br
unknown
https://hillsclerk.securityeducation.com/api/auth/saml/login?targetUrl=https://hillsclerk.securityeducation.com/
18.211.106.230
https://hillsclerk.securityeducation.com/wombat-style-guide/fonts/roboto-latin-400italic.woff2
18.211.106.230
http://testserver.example/v1/graph
unknown
https://github.com/wombatsecurity/wombat-style-guide/blob/master/
unknown
https://login.microsoftonline.com
unknown
http://git.io/EKPpnA
unknown
http://momentjs.com/guides/#/warnings/js-date/
unknown
https://hillsclerk.securityeducation.com/wombat-style-guide/images/logo.png
18.211.106.230
https://hillsclerk.securityeducation.com/localizejs/localize.js
18.211.106.230
http://momentjs.com/guides/#/warnings/define-locale/
unknown
https://hillsclerk.securityeducation.com/wombat-style-guide/fonts/wombaticons.woff2?00965ec43b6dcef594e13da207312244
18.211.106.230
https://hillsclerk.securityeducation.com/platform-ember/platform-ember-a841ee5014fc18a82dc1fc9e41b64f7c.js
18.211.106.230
https://github.com/theKashey/focus-lock/#focus-fighting
unknown
https://hillsclerk.securityeducation.com/platform-ember/platform-ember-cc9f435ba7b105175f5d2dfbfb14d579.css
18.211.106.230
https://www.proofpoint.com/us/products/security-awareness-reporting
unknown
http://www.ecma-international.org/ecma-262/5.1/#sec-C
unknown
https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p
unknown
http://momentjs.com/guides/#/warnings/zone/
unknown
https://hillsclerk.securityeducation.com/platform-ember/chunk.131.abd4932d5d56930bc068.js
18.211.106.230
https://global.localizecdn.com/api/lib/xG6eDWKawYmvs/g?v=8209&l=en
104.18.4.175
https://local.pendo.io:8080
unknown
https://momentjs.com/timezone/docs/#/use-it/browser/
unknown
https://hillsclerk.securityeducation.com/images/android-chrome-144x144.png
18.211.106.230
https://github.com/apollographql/invariant-packages)
unknown
https://hillsclerk.securityeducation.com/platform-ember/chunk.143.6d853b71ed5687725e31.js
18.211.106.230
https://hillsclerk.securityeducation.com/wombat-style-guide/fonts/roboto-latin-500.woff2
18.211.106.230
https://hillsclerk.securityeducation.com/manifest.json
18.211.106.230
https://hillsclerk.securityeducation.com/api/auth/jsonapi/authDetails/hillsclerk
18.211.106.230
https://deprecations.emberjs.com/v1.x/#toc_binding-style-attributes.
unknown
https://feedback.us.pendo.io
unknown
https://global.localizecdn.com/api/lib/xG6eDWKawYmvs/tl.gif?l=en&c=6828485
104.18.4.175
http://momentjs.com/guides/#/warnings/dst-shifted/
unknown
https://raw.github.com/emberjs/ember.js/master/LICENSE
unknown
https://featbot.io
unknown
https://jquery.org/license
unknown
https://global.localizecdn.com/api/lib/xG6eDWKawYmvs/tu?v=474
104.18.4.175
http://ember-concurrency.com/docs/task-cancelation-help
unknown
http://git.io/yBU2rg
unknown
https://jquery.com/
unknown
https://community.securityeducation.com/s/article/Interactive-Training-Section-508-WCAG-Compliant-Tr
unknown
https://hillsclerk.securityeducation.com/
https://hillsclerk.securityeducation.com/platform-ember/vendor-02d26fd8e43c2236915f27156ef6f4a3.js
18.211.106.230
https://code.highcharts.com/9.2.2/lib/
unknown
https://www.highcharts.com?credits
unknown
https://account.live.com/password/reset?wreply=https%3a%2f%2flogin.microsoftonline.com%2ff8c5973a-b6e5-4635-99d8-335ed112cd2f%2freprocess%3fctx%3drQQIARAA42Kwss8oKSkottLXz8jMySlOzkktytYrTk0uLcosqUxNKU1OLMnMz9NLzs_VTyzI1E8sLcnQL07MzdHPTS1JTEksSSwS4hJw_BdyxmDtTv8Z-x02TGzQOLyK0YpMU4OD_Q8xqjkGBRoamyeaJibpppkYGuiaWCQZ6VoaJ6bqppgbG1ummRkmmxumXGBkfMHIeIuJNRio02gWsybRdm5iVkmzSDa1NDdO1E0ySzXVNTEzNtW1tEyx0DU2Nk1NMTQ0Sk4xSrvAwvOKhceA2YqDg0uAQYJBgeEHC-MiVqCH1-9sWbV9mYLXrO_XZksrxDOcYtXXTzO3TEkx9jFPN4yycC4IDS0OrjBycfFL8Sz0cCoq9k_NDc5yDfIoSnOJtLWwMpzAxnuKjeEDG2MHO8MsdoZdnBSE2AFehh98a07deLLr6eR3Hq_4dbzdzSz1TXwTiz0qIyqd9X1TTQrKXdwKA8JNEqMCM10MjVNKQ7yLLNJTzCNtNwgwAAA1&mkt=en-US
https://rum-ingest.$
unknown
http://dev.apollodata.com/core/fragments.html#unique-names
unknown
https://autologon.microsoftazuread-sso.com/f8c5973a-b6e5-4635-99d8-335ed112cd2f/winauth/ssoprobe?client-request-id=cc54fe41-ad30-4fb9-98bf-40b0918028c3&_=1711632820509
40.126.62.129
http://momentjs.com/timezone/docs/#/data-loading/.
unknown
https://api.feedback.us.pendo.io
unknown
https://rum-ingest.us2.signalfx.com/v1/rum?auth=WNIydzf5FMPgsMK0kZosBA
35.199.162.154
https://portal.feedback.eu.pendo.io/app/#/pendo/auth?inIframe=true
unknown
https://hillsclerk.securityeducation.com/favicon.ico
18.211.106.230
https://hillsclerk.securityeducation.com/js/ie10-4d8fefae653b9ade02759391caba3c56.js
18.211.106.230
https://sizzlejs.com/
unknown
https://js.foundation/
unknown
https://github.com/uuidjs/uuid#getrandomvalues-not-supported
unknown
http://momentjs.com/guides/#/warnings/min-max/
unknown
http://help.pendo.io/resources/support-library/installation/metadata.html
unknown
There are 61 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
hillsclerk.securityeducation.com
18.211.106.230
cs1100.wpc.omegacdn.net
152.199.4.44
global.localizecdn.com
104.18.4.175
ingest.us2.signalfx.com
35.199.162.154
www.google.com
172.253.62.104
cs1227.wpc.alphacdn.net
192.229.211.199
part-0012.t-0009.t-msedge.net
13.107.246.40
fp2e7a.wpc.phicdn.net
192.229.211.108
autologon.microsoftazuread-sso.com
40.126.62.129
windowsupdatebg.s.llnwi.net
69.164.0.0
identity.nel.measure.office.net
unknown
rum-ingest.us2.signalfx.com
unknown
aadcdn.msftauth.net
unknown
logincdn.msftauth.net
unknown
login.microsoftonline.com
unknown
account.live.com
unknown
There are 6 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
13.107.246.40
part-0012.t-0009.t-msedge.net
United States
192.168.2.6
unknown
unknown
13.107.213.40
unknown
United States
40.126.62.129
autologon.microsoftazuread-sso.com
United States
172.253.62.104
www.google.com
United States
104.18.4.175
global.localizecdn.com
United States
104.18.5.175
unknown
United States
192.229.211.199
cs1227.wpc.alphacdn.net
United States
18.211.106.230
hillsclerk.securityeducation.com
United States
239.255.255.250
unknown
Reserved
35.199.162.154
ingest.us2.signalfx.com
United States
There are 1 hidden IPs, click here to show them.

DOM / HTML

URL
Malicious
https://hillsclerk.securityeducation.com/
https://login.microsoftonline.com/f8c5973a-b6e5-4635-99d8-335ed112cd2f/saml2?SAMLRequest=nVJbb9sgFP4riHd8gTixUZwqW1WtUqdmsbuHvRF83KBhyDg42v79XCdVu5c%2BTOIF8d3O%2BVjf%2FB4sOUNA411N8ySjBJz2nXHPNX1q71hJbzZrVIPlJ7kd49Ht4dcIGMlEdCgvLzUdg5NeoUHp1AAoo5bN9uuD5EkmT8FHr72lZIsIIU5Wn73DcYDQQDgbDU%2F7h5oeYzyhTNOjsRa1hfAzQdBjMPEPdKNWL7xE%2ByFVJ5OqKUr6Yp42zSMlt1Mi42bIm5D1z8Ylg9HBo%2B%2Bjd9Y4mBX6UhfVSih2WELBFktRsKrqSiZEAV2ec93xflbnlNz5oGGevKa9sgiU3N%2FWdLv%2FlouVKtSB9Ys8Y4vywFklFLBuJUTVL3O9yrsJizuFaM7wxkYc4d5hVC7WlGd8wTLBeNnmQorpFAkvqx%2BU7K5r%2B2TcpY6Pdny4gFB%2Badsd2z02LSXfX2udAPRaopzdw%2Fv2PhZWr5XRzX8WNEBUnYpqnb5PsLle%2F%2F1Vm78%3D&RelayState=https%3A%2F%2Fhillsclerk.securityeducation.com%2F&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=On9dAULqMpco2YalkQNqE80LzbmGLdk4mwbChX%2Bieq1WjHK3%2FHZzbi2LFsYJYh6sce%2B5hbnB2oinQpZqvGZsOjSSYDIfBGcpzscrwSgZe9vTl0YSIIvcZSbSYoFzG0HHoenyfXTo7XLX7xV%2BM3HD4t1B8a%2FBvurLQzCv2%2BAhvHk8aF%2FOsE8Rlq3CgKNixMrI8ZhGgBIikLK5ztoPpE1Yu7QKR0u8zxs8LVy5IEyZE7RMwkIJio
https://login.microsoftonline.com/f8c5973a-b6e5-4635-99d8-335ed112cd2f/saml2?SAMLRequest=nVJbb9sgFP4riHd8gTixUZwqW1WtUqdmsbuHvRF83KBhyDg42v79XCdVu5c%2BTOIF8d3O%2BVjf%2FB4sOUNA411N8ySjBJz2nXHPNX1q71hJbzZrVIPlJ7kd49Ht4dcIGMlEdCgvLzUdg5NeoUHp1AAoo5bN9uuD5EkmT8FHr72lZIsIIU5Wn73DcYDQQDgbDU%2F7h5oeYzyhTNOjsRa1hfAzQdBjMPEPdKNWL7xE%2ByFVJ5OqKUr6Yp42zSMlt1Mi42bIm5D1z8Ylg9HBo%2B%2Bjd9Y4mBX6UhfVSih2WELBFktRsKrqSiZEAV2ec93xflbnlNz5oGGevKa9sgiU3N%2FWdLv%2FlouVKtSB9Ys8Y4vywFklFLBuJUTVL3O9yrsJizuFaM7wxkYc4d5hVC7WlGd8wTLBeNnmQorpFAkvqx%2BU7K5r%2B2TcpY6Pdny4gFB%2Badsd2z02LSXfX2udAPRaopzdw%2Fv2PhZWr5XRzX8WNEBUnYpqnb5PsLle%2F%2F1Vm78%3D&RelayState=https%3A%2F%2Fhillsclerk.securityeducation.com%2F&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=On9dAULqMpco2YalkQNqE80LzbmGLdk4mwbChX%2Bieq1WjHK3%2FHZzbi2LFsYJYh6sce%2B5hbnB2oinQpZqvGZsOjSSYDIfBGcpzscrwSgZe9vTl0YSIIvcZSbSYoFzG0HHoenyfXTo7XLX7xV%2BM3HD4t1B8a%2FBvurLQzCv2%2BAhvHk8aF%2FOsE8Rlq3CgKNixMrI8ZhGgBIikLK5ztoPpE1Yu7QKR0u8zxs8LVy5IEyZE7RMwkIJio
https://login.microsoftonline.com/f8c5973a-b6e5-4635-99d8-335ed112cd2f/saml2?SAMLRequest=nVJbb9sgFP4riHd8gTixUZwqW1WtUqdmsbuHvRF83KBhyDg42v79XCdVu5c%2BTOIF8d3O%2BVjf%2FB4sOUNA411N8ySjBJz2nXHPNX1q71hJbzZrVIPlJ7kd49Ht4dcIGMlEdCgvLzUdg5NeoUHp1AAoo5bN9uuD5EkmT8FHr72lZIsIIU5Wn73DcYDQQDgbDU%2F7h5oeYzyhTNOjsRa1hfAzQdBjMPEPdKNWL7xE%2ByFVJ5OqKUr6Yp42zSMlt1Mi42bIm5D1z8Ylg9HBo%2B%2Bjd9Y4mBX6UhfVSih2WELBFktRsKrqSiZEAV2ec93xflbnlNz5oGGevKa9sgiU3N%2FWdLv%2FlouVKtSB9Ys8Y4vywFklFLBuJUTVL3O9yrsJizuFaM7wxkYc4d5hVC7WlGd8wTLBeNnmQorpFAkvqx%2BU7K5r%2B2TcpY6Pdny4gFB%2Badsd2z02LSXfX2udAPRaopzdw%2Fv2PhZWr5XRzX8WNEBUnYpqnb5PsLle%2F%2F1Vm78%3D&RelayState=https%3A%2F%2Fhillsclerk.securityeducation.com%2F&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=On9dAULqMpco2YalkQNqE80LzbmGLdk4mwbChX%2Bieq1WjHK3%2FHZzbi2LFsYJYh6sce%2B5hbnB2oinQpZqvGZsOjSSYDIfBGcpzscrwSgZe9vTl0YSIIvcZSbSYoFzG0HHoenyfXTo7XLX7xV%2BM3HD4t1B8a%2FBvurLQzCv2%2BAhvHk8aF%2FOsE8Rlq3CgKNixMrI8ZhGgBIikLK5ztoPpE1Yu7QKR0u8zxs8LVy5IEyZE7RMwkIJio
https://login.microsoftonline.com/f8c5973a-b6e5-4635-99d8-335ed112cd2f/saml2?SAMLRequest=nVJbb9sgFP4riHd8gTixUZwqW1WtUqdmsbuHvRF83KBhyDg42v79XCdVu5c%2BTOIF8d3O%2BVjf%2FB4sOUNA411N8ySjBJz2nXHPNX1q71hJbzZrVIPlJ7kd49Ht4dcIGMlEdCgvLzUdg5NeoUHp1AAoo5bN9uuD5EkmT8FHr72lZIsIIU5Wn73DcYDQQDgbDU%2F7h5oeYzyhTNOjsRa1hfAzQdBjMPEPdKNWL7xE%2ByFVJ5OqKUr6Yp42zSMlt1Mi42bIm5D1z8Ylg9HBo%2B%2Bjd9Y4mBX6UhfVSih2WELBFktRsKrqSiZEAV2ec93xflbnlNz5oGGevKa9sgiU3N%2FWdLv%2FlouVKtSB9Ys8Y4vywFklFLBuJUTVL3O9yrsJizuFaM7wxkYc4d5hVC7WlGd8wTLBeNnmQorpFAkvqx%2BU7K5r%2B2TcpY6Pdny4gFB%2Badsd2z02LSXfX2udAPRaopzdw%2Fv2PhZWr5XRzX8WNEBUnYpqnb5PsLle%2F%2F1Vm78%3D&RelayState=https%3A%2F%2Fhillsclerk.securityeducation.com%2F&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=On9dAULqMpco2YalkQNqE80LzbmGLdk4mwbChX%2Bieq1WjHK3%2FHZzbi2LFsYJYh6sce%2B5hbnB2oinQpZqvGZsOjSSYDIfBGcpzscrwSgZe9vTl0YSIIvcZSbSYoFzG0HHoenyfXTo7XLX7xV%2BM3HD4t1B8a%2FBvurLQzCv2%2BAhvHk8aF%2FOsE8Rlq3CgKNixMrI8ZhGgBIikLK5ztoPpE1Yu7QKR0u8zxs8LVy5IEyZE7RMwkIJio
https://login.microsoftonline.com/f8c5973a-b6e5-4635-99d8-335ed112cd2f/saml2?SAMLRequest=nVJbb9sgFP4riHd8gTixUZwqW1WtUqdmsbuHvRF83KBhyDg42v79XCdVu5c%2BTOIF8d3O%2BVjf%2FB4sOUNA411N8ySjBJz2nXHPNX1q71hJbzZrVIPlJ7kd49Ht4dcIGMlEdCgvLzUdg5NeoUHp1AAoo5bN9uuD5EkmT8FHr72lZIsIIU5Wn73DcYDQQDgbDU%2F7h5oeYzyhTNOjsRa1hfAzQdBjMPEPdKNWL7xE%2ByFVJ5OqKUr6Yp42zSMlt1Mi42bIm5D1z8Ylg9HBo%2B%2Bjd9Y4mBX6UhfVSih2WELBFktRsKrqSiZEAV2ec93xflbnlNz5oGGevKa9sgiU3N%2FWdLv%2FlouVKtSB9Ys8Y4vywFklFLBuJUTVL3O9yrsJizuFaM7wxkYc4d5hVC7WlGd8wTLBeNnmQorpFAkvqx%2BU7K5r%2B2TcpY6Pdny4gFB%2Badsd2z02LSXfX2udAPRaopzdw%2Fv2PhZWr5XRzX8WNEBUnYpqnb5PsLle%2F%2F1Vm78%3D&RelayState=https%3A%2F%2Fhillsclerk.securityeducation.com%2F&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=On9dAULqMpco2YalkQNqE80LzbmGLdk4mwbChX%2Bieq1WjHK3%2FHZzbi2LFsYJYh6sce%2B5hbnB2oinQpZqvGZsOjSSYDIfBGcpzscrwSgZe9vTl0YSIIvcZSbSYoFzG0HHoenyfXTo7XLX7xV%2BM3HD4t1B8a%2FBvurLQzCv2%2BAhvHk8aF%2FOsE8Rlq3CgKNixMrI8ZhGgBIikLK5ztoPpE1Yu7QKR0u8zxs8LVy5IEyZE7RMwkIJio
https://account.live.com/password/reset?wreply=https%3a%2f%2flogin.microsoftonline.com%2ff8c5973a-b6e5-4635-99d8-335ed112cd2f%2freprocess%3fctx%3drQQIARAA42Kwss8oKSkottLXz8jMySlOzkktytYrTk0uLcosqUxNKU1OLMnMz9NLzs_VTyzI1E8sLcnQL07MzdHPTS1JTEksSSwS4hJw_BdyxmDtTv8Z-x02TGzQOLyK0YpMU4OD_Q8xqjkGBRoamyeaJibpppkYGuiaWCQZ6VoaJ6bqppgbG1ummRkmmxumXGBkfMHIeIuJNRio02gWsybRdm5iVkmzSDa1NDdO1E0ySzXVNTEzNtW1tEyx0DU2Nk1NMTQ0Sk4xSrvAwvOKhceA2YqDg0uAQYJBgeEHC-MiVqCH1-9sWbV9mYLXrO_XZksrxDOcYtXXTzO3TEkx9jFPN4yycC4IDS0OrjBycfFL8Sz0cCoq9k_NDc5yDfIoSnOJtLWwMpzAxnuKjeEDG2MHO8MsdoZdnBSE2AFehh98a07deLLr6eR3Hq_4dbzdzSz1TXwTiz0qIyqd9X1TTQrKXdwKA8JNEqMCM10MjVNKQ7yLLNJTzCNtNwgwAAA1&mkt=en-US
https://account.live.com/password/reset?wreply=https%3a%2f%2flogin.microsoftonline.com%2ff8c5973a-b6e5-4635-99d8-335ed112cd2f%2freprocess%3fctx%3drQQIARAA42Kwss8oKSkottLXz8jMySlOzkktytYrTk0uLcosqUxNKU1OLMnMz9NLzs_VTyzI1E8sLcnQL07MzdHPTS1JTEksSSwS4hJw_BdyxmDtTv8Z-x02TGzQOLyK0YpMU4OD_Q8xqjkGBRoamyeaJibpppkYGuiaWCQZ6VoaJ6bqppgbG1ummRkmmxumXGBkfMHIeIuJNRio02gWsybRdm5iVkmzSDa1NDdO1E0ySzXVNTEzNtW1tEyx0DU2Nk1NMTQ0Sk4xSrvAwvOKhceA2YqDg0uAQYJBgeEHC-MiVqCH1-9sWbV9mYLXrO_XZksrxDOcYtXXTzO3TEkx9jFPN4yycC4IDS0OrjBycfFL8Sz0cCoq9k_NDc5yDfIoSnOJtLWwMpzAxnuKjeEDG2MHO8MsdoZdnBSE2AFehh98a07deLLr6eR3Hq_4dbzdzSz1TXwTiz0qIyqd9X1TTQrKXdwKA8JNEqMCM10MjVNKQ7yLLNJTzCNtNwgwAAA1&mkt=en-US
https://account.live.com/password/reset?wreply=https%3a%2f%2flogin.microsoftonline.com%2ff8c5973a-b6e5-4635-99d8-335ed112cd2f%2freprocess%3fctx%3drQQIARAA42Kwss8oKSkottLXz8jMySlOzkktytYrTk0uLcosqUxNKU1OLMnMz9NLzs_VTyzI1E8sLcnQL07MzdHPTS1JTEksSSwS4hJw_BdyxmDtTv8Z-x02TGzQOLyK0YpMU4OD_Q8xqjkGBRoamyeaJibpppkYGuiaWCQZ6VoaJ6bqppgbG1ummRkmmxumXGBkfMHIeIuJNRio02gWsybRdm5iVkmzSDa1NDdO1E0ySzXVNTEzNtW1tEyx0DU2Nk1NMTQ0Sk4xSrvAwvOKhceA2YqDg0uAQYJBgeEHC-MiVqCH1-9sWbV9mYLXrO_XZksrxDOcYtXXTzO3TEkx9jFPN4yycC4IDS0OrjBycfFL8Sz0cCoq9k_NDc5yDfIoSnOJtLWwMpzAxnuKjeEDG2MHO8MsdoZdnBSE2AFehh98a07deLLr6eR3Hq_4dbzdzSz1TXwTiz0qIyqd9X1TTQrKXdwKA8JNEqMCM10MjVNKQ7yLLNJTzCNtNwgwAAA1&mkt=en-US