Windows Analysis Report
https://security.microsoft.com/quarantine?id=97a71014-954b-4feb-794d-08dc6372e303%5C98d07de9-cb26-b9f0-ba1e-09ca04ceb516&recipientAddress=%40ENC%40D9yt9c5hG3%2F4wJDKGc%2FbR3AuhdsaTWJ0Bg22uw1BWgTyTC%2BWm%2FZe7jBqtCP%2FpiaYXc1LB9Cngaxkq7SO1S5t4A%3D%3D

Overview

General Information

Sample URL:	https://security.microsoft.com/quarantine?id=97a71014-954b-4feb-794d-08dc6372e303%5C98d07de9-cb26-b9f0-ba1e-09ca04ceb516&recipientAddress=%40ENC%40D9yt9c5hG3%2F4wJDKGc%2FbR3AuhdsaTWJ0Bg22uw1BWgTyTC%2B
Analysis ID:	1430822
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Found iframes

HTML body contains low number of good links

HTML title does not match URL

Submit button contains javascript call

Classification

Signatures

Found iframes

Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d39931C6663A5EF82%26opidt%3d1713942453%26uaid%3dc4c87b039cc74659b3188fb5a3c019f3%26contextid%3d11133D18AA8AB244%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=c4c87b039cc74659b3188fb5a3c019f3&suc=80ccca67-54bd-44ab-8625-4b79c4dc7775&lic=1

HTTP Parser: Iframe src: https://fpt.live.com/?session_id=c4c87b039cc74659b3188fb5a3c019f3&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SU&mkt=EN-US

HTML body contains low number of good links

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=80ccca67-54bd-44ab-8625-4b79c4dc7775&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DDzug0lI_IXDnhVCJ7NGNlLvocwRjW24aAqnJS1DJhb7X7INECHg-NTDvFftmtWfr2_dF8kZ_5hfbsu0IdVBtHBDn4VYB2kEH5l9s33_4qBYAQerow5gIkqIdK9T1oJ7-ozh3as2bRQNMp84qePi7C-2UxBXt7hzqPiTPJ4RIHRbdUGNcQEyZzzR0NCE5rSqwg7rjRQ45yvntL8U81M0BhyXAHaqyAxYKYgHZOKV3qVeeoVpnMwk6NXgvwByF1bP4KYmGLfEF5p6D8IDG0Xw5EIDO7kyd1gLS5nyn_sCIkeZYwsDQ9EpxpdfVCkNXKlgEn89LiHy2mvEiMcEbMHUENPXpwSMcem2cTZPFfqYv16_XeUheuY-PehCw7sK8uKADeu5IacXYF12qM4oIgpsMbCbv-Ti5FaP_fqvgoKPHV2o&response_mode=form_post&nonce=638495392267209921.MmMwMDcyYmMtNjNmYS00NTRlLTk1N2QtZjE1ZDAwMDhhN2ExZmY5ZDY2OGMtNTRhOC00NTIzLTg3ODgtM2FiYWRiY2UwZDVk&client-request-id=c4c87b03-9cc7-4659-b318-8fb5a3c019f3&redirect_uri=https%3A%2F%2Fsecurity.microsoft.com%2F&x-client-SKU=ID_NET461&x-client-ver=6.22.1.0	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=80ccca67-54bd-44ab-8625-4b79c4dc7775&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DDzug0lI_IXDnhVCJ7NGNlLvocwRjW24aAqnJS1DJhb7X7INECHg-NTDvFftmtWfr2_dF8kZ_5hfbsu0IdVBtHBDn4VYB2kEH5l9s33_4qBYAQerow5gIkqIdK9T1oJ7-ozh3as2bRQNMp84qePi7C-2UxBXt7hzqPiTPJ4RIHRbdUGNcQEyZzzR0NCE5rSqwg7rjRQ45yvntL8U81M0BhyXAHaqyAxYKYgHZOKV3qVeeoVpnMwk6NXgvwByF1bP4KYmGLfEF5p6D8IDG0Xw5EIDO7kyd1gLS5nyn_sCIkeZYwsDQ9EpxpdfVCkNXKlgEn89LiHy2mvEiMcEbMHUENPXpwSMcem2cTZPFfqYv16_XeUheuY-PehCw7sK8uKADeu5IacXYF12qM4oIgpsMbCbv-Ti5FaP_fqvgoKPHV2o&response_mode=form_post&nonce=638495392267209921.MmMwMDcyYmMtNjNmYS00NTRlLTk1N2QtZjE1ZDAwMDhhN2ExZmY5ZDY2OGMtNTRhOC00NTIzLTg3ODgtM2FiYWRiY2UwZDVk&client-request-id=c4c87b03-9cc7-4659-b318-8fb5a3c019f3&redirect_uri=https%3A%2F%2Fsecurity.microsoft.com%2F&x-client-SKU=ID_NET461&x-client-ver=6.22.1.0&sso_reload=true	HTTP Parser: Number of links: 0
Source: https://account.live.com/password/reset?wreply=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2freprocess%3fctx%3drQQIARAAhdNPi-NkAAbwZjpbZwbcHRZZRhGcgwcR2yZvkyYdGKRt0iZtk6Zpm0kCGpo0TdI0efOvTdM9C97c26J40tueRBHEg-xBcJm9LHtR9hPIHkQUlj3a-QRentPv9jzPyVG9AkAFq6AfFrEKdvE-hZqmOauTZQI35mUcnxllqg6IMm6QDROfmyRJEvHdk9Pi_Se__va12vnh7Isfv3389r-PkPecNA2Ti2o1scx17KZ5xXfNGCZwkVZM6Fd_QpBnCPIngjw6SOo1Cm8QtQYAdRKgjQbAKrzPZzxt5qrPp8JS8NUxigoTaTWYeJgARqm2ZDCNbu6N4wiA2Wq-Smi0CobdvZ9IzrB947ndYGLXhrSd8qDjqleSq4JpptGy9-LgzrC5Th1wEzB2d9Y_B8cLGPt6CJP0q-Lz4jC0Am7ehkFgmWnlhllB6pqz1IWBGMPQilPXSi7p3dpGV5zOKXTgyO0eKXSF1WADzUxaXgF81oyC3hije45BKiQnMG3WLgsTetNZpH56tYiBPu9QnqYTzsJI1ig3l1sp26IDXFZbwGNYYtVIajUdj1pqc2TFMCNszou4eb8xwWCPLMOdU5slwJBGAh9SeGSJLtkug-m2paSks4tEdyL2cIljJWM-7QrmiMm13U5ChTZDxOMos8l4KY1wIt8E6YCaUhiPtpxcabKzKG9u1b5qs9qwL9ci2bKgHAZ85tUFxd5krbyDGSLeV_3uYMF0iLBOUxzdRZWMYDh6SHr5HLMHYyLIAz1pc56lqVlCjxpMuA3nC7ntCUp_ZTMB1Ri4bA78DePyJmPw7JQRRCXMxrxp-cCcaGJnEakbrK4r1tSx1mpZtJx2RiZ9at1v0taa4GamonYwEPE45Oww4Y22sSlPXKIzE_VFtLFhX2RlAL8v...	HTTP Parser: Number of links: 0
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d39931C6663A5EF82%26opidt%3d1713942453%26uaid%3dc4c87b039cc74659b3188fb5a3c019f3%26contextid%3d11133D18AA8AB244%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=c4c87b039cc74659b3188fb5a3c019f3&suc=80ccca67-54bd-44ab-8625-4b79c4dc7775&lic=1	HTTP Parser: Number of links: 0

HTML title does not match URL

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=80ccca67-54bd-44ab-8625-4b79c4dc7775&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DDzug0lI_IXDnhVCJ7NGNlLvocwRjW24aAqnJS1DJhb7X7INECHg-NTDvFftmtWfr2_dF8kZ_5hfbsu0IdVBtHBDn4VYB2kEH5l9s33_4qBYAQerow5gIkqIdK9T1oJ7-ozh3as2bRQNMp84qePi7C-2UxBXt7hzqPiTPJ4RIHRbdUGNcQEyZzzR0NCE5rSqwg7rjRQ45yvntL8U81M0BhyXAHaqyAxYKYgHZOKV3qVeeoVpnMwk6NXgvwByF1bP4KYmGLfEF5p6D8IDG0Xw5EIDO7kyd1gLS5nyn_sCIkeZYwsDQ9EpxpdfVCkNXKlgEn89LiHy2mvEiMcEbMHUENPXpwSMcem2cTZPFfqYv16_XeUheuY-PehCw7sK8uKADeu5IacXYF12qM4oIgpsMbCbv-Ti5FaP_fqvgoKPHV2o&response_mode=form_post&nonce=638495392267209921.MmMwMDcyYmMtNjNmYS00NTRlLTk1N2QtZjE1ZDAwMDhhN2ExZmY5ZDY2OGMtNTRhOC00NTIzLTg3ODgtM2FiYWRiY2UwZDVk&client-request-id=c4c87b03-9cc7-4659-b318-8fb5a3c019f3&redirect_uri=https%3A%2F%2Fsecurity.microsoft.com%2F&x-client-SKU=ID_NET461&x-client-ver=6.22.1.0	HTTP Parser: Title: Redirecting does not match URL
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=80ccca67-54bd-44ab-8625-4b79c4dc7775&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DDzug0lI_IXDnhVCJ7NGNlLvocwRjW24aAqnJS1DJhb7X7INECHg-NTDvFftmtWfr2_dF8kZ_5hfbsu0IdVBtHBDn4VYB2kEH5l9s33_4qBYAQerow5gIkqIdK9T1oJ7-ozh3as2bRQNMp84qePi7C-2UxBXt7hzqPiTPJ4RIHRbdUGNcQEyZzzR0NCE5rSqwg7rjRQ45yvntL8U81M0BhyXAHaqyAxYKYgHZOKV3qVeeoVpnMwk6NXgvwByF1bP4KYmGLfEF5p6D8IDG0Xw5EIDO7kyd1gLS5nyn_sCIkeZYwsDQ9EpxpdfVCkNXKlgEn89LiHy2mvEiMcEbMHUENPXpwSMcem2cTZPFfqYv16_XeUheuY-PehCw7sK8uKADeu5IacXYF12qM4oIgpsMbCbv-Ti5FaP_fqvgoKPHV2o&response_mode=form_post&nonce=638495392267209921.MmMwMDcyYmMtNjNmYS00NTRlLTk1N2QtZjE1ZDAwMDhhN2ExZmY5ZDY2OGMtNTRhOC00NTIzLTg3ODgtM2FiYWRiY2UwZDVk&client-request-id=c4c87b03-9cc7-4659-b318-8fb5a3c019f3&redirect_uri=https%3A%2F%2Fsecurity.microsoft.com%2F&x-client-SKU=ID_NET461&x-client-ver=6.22.1.0&sso_reload=true	HTTP Parser: Title: Sign in to your account does not match URL
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d39931C6663A5EF82%26opidt%3d1713942453%26uaid%3dc4c87b039cc74659b3188fb5a3c019f3%26contextid%3d11133D18AA8AB244%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=c4c87b039cc74659b3188fb5a3c019f3&suc=80ccca67-54bd-44ab-8625-4b79c4dc7775&lic=1	HTTP Parser: Title: Create account does not match URL

Submit button contains javascript call

Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d39931C6663A5EF82%26opidt%3d1713942453%26uaid%3dc4c87b039cc74659b3188fb5a3c019f3%26contextid%3d11133D18AA8AB244%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=c4c87b039cc74659b3188fb5a3c019f3&suc=80ccca67-54bd-44ab-8625-4b79c4dc7775&lic=1	HTTP Parser: On click: OnBack(); return false;
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d39931C6663A5EF82%26opidt%3d1713942453%26uaid%3dc4c87b039cc74659b3188fb5a3c019f3%26contextid%3d11133D18AA8AB244%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=c4c87b039cc74659b3188fb5a3c019f3&suc=80ccca67-54bd-44ab-8625-4b79c4dc7775&lic=1	HTTP Parser: On click: HOSTUI.evt_inlineBack_onclick();
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d39931C6663A5EF82%26opidt%3d1713942453%26uaid%3dc4c87b039cc74659b3188fb5a3c019f3%26contextid%3d11133D18AA8AB244%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=c4c87b039cc74659b3188fb5a3c019f3&suc=80ccca67-54bd-44ab-8625-4b79c4dc7775&lic=1	HTTP Parser: On click: HOSTUI.evt_inlineBack_onclick();

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=80ccca67-54bd-44ab-8625-4b79c4dc7775&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DDzug0lI_IXDnhVCJ7NGNlLvocwRjW24aAqnJS1DJhb7X7INECHg-NTDvFftmtWfr2_dF8kZ_5hfbsu0IdVBtHBDn4VYB2kEH5l9s33_4qBYAQerow5gIkqIdK9T1oJ7-ozh3as2bRQNMp84qePi7C-2UxBXt7hzqPiTPJ4RIHRbdUGNcQEyZzzR0NCE5rSqwg7rjRQ45yvntL8U81M0BhyXAHaqyAxYKYgHZOKV3qVeeoVpnMwk6NXgvwByF1bP4KYmGLfEF5p6D8IDG0Xw5EIDO7kyd1gLS5nyn_sCIkeZYwsDQ9EpxpdfVCkNXKlgEn89LiHy2mvEiMcEbMHUENPXpwSMcem2cTZPFfqYv16_XeUheuY-PehCw7sK8uKADeu5IacXYF12qM4oIgpsMbCbv-Ti5FaP_fqvgoKPHV2o&response_mode=form_post&nonce=638495392267209921.MmMwMDcyYmMtNjNmYS00NTRlLTk1N2QtZjE1ZDAwMDhhN2ExZmY5ZDY2OGMtNTRhOC00NTIzLTg3ODgtM2FiYWRiY2UwZDVk&client-request-id=c4c87b03-9cc7-4659-b318-8fb5a3c019f3&redirect_uri=https%3A%2F%2Fsecurity.microsoft.com%2F&x-client-SKU=ID_NET461&x-client-ver=6.22.1.0&sso_reload=true

HTTP Parser: <input type="password" .../> found

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=80ccca67-54bd-44ab-8625-4b79c4dc7775&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DDzug0lI_IXDnhVCJ7NGNlLvocwRjW24aAqnJS1DJhb7X7INECHg-NTDvFftmtWfr2_dF8kZ_5hfbsu0IdVBtHBDn4VYB2kEH5l9s33_4qBYAQerow5gIkqIdK9T1oJ7-ozh3as2bRQNMp84qePi7C-2UxBXt7hzqPiTPJ4RIHRbdUGNcQEyZzzR0NCE5rSqwg7rjRQ45yvntL8U81M0BhyXAHaqyAxYKYgHZOKV3qVeeoVpnMwk6NXgvwByF1bP4KYmGLfEF5p6D8IDG0Xw5EIDO7kyd1gLS5nyn_sCIkeZYwsDQ9EpxpdfVCkNXKlgEn89LiHy2mvEiMcEbMHUENPXpwSMcem2cTZPFfqYv16_XeUheuY-PehCw7sK8uKADeu5IacXYF12qM4oIgpsMbCbv-Ti5FaP_fqvgoKPHV2o&response_mode=form_post&nonce=638495392267209921.MmMwMDcyYmMtNjNmYS00NTRlLTk1N2QtZjE1ZDAwMDhhN2ExZmY5ZDY2OGMtNTRhOC00NTIzLTg3ODgtM2FiYWRiY2UwZDVk&client-request-id=c4c87b03-9cc7-4659-b318-8fb5a3c019f3&redirect_uri=https%3A%2F%2Fsecurity.microsoft.com%2F&x-client-SKU=ID_NET461&x-client-ver=6.22.1.0	HTTP Parser: No favicon
Source: https://fpt.live.com/?session_id=c4c87b039cc74659b3188fb5a3c019f3&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SU&mkt=EN-US	HTTP Parser: No favicon

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=80ccca67-54bd-44ab-8625-4b79c4dc7775&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DDzug0lI_IXDnhVCJ7NGNlLvocwRjW24aAqnJS1DJhb7X7INECHg-NTDvFftmtWfr2_dF8kZ_5hfbsu0IdVBtHBDn4VYB2kEH5l9s33_4qBYAQerow5gIkqIdK9T1oJ7-ozh3as2bRQNMp84qePi7C-2UxBXt7hzqPiTPJ4RIHRbdUGNcQEyZzzR0NCE5rSqwg7rjRQ45yvntL8U81M0BhyXAHaqyAxYKYgHZOKV3qVeeoVpnMwk6NXgvwByF1bP4KYmGLfEF5p6D8IDG0Xw5EIDO7kyd1gLS5nyn_sCIkeZYwsDQ9EpxpdfVCkNXKlgEn89LiHy2mvEiMcEbMHUENPXpwSMcem2cTZPFfqYv16_XeUheuY-PehCw7sK8uKADeu5IacXYF12qM4oIgpsMbCbv-Ti5FaP_fqvgoKPHV2o&response_mode=form_post&nonce=638495392267209921.MmMwMDcyYmMtNjNmYS00NTRlLTk1N2QtZjE1ZDAwMDhhN2ExZmY5ZDY2OGMtNTRhOC00NTIzLTg3ODgtM2FiYWRiY2UwZDVk&client-request-id=c4c87b03-9cc7-4659-b318-8fb5a3c019f3&redirect_uri=https%3A%2F%2Fsecurity.microsoft.com%2F&x-client-SKU=ID_NET461&x-client-ver=6.22.1.0	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=80ccca67-54bd-44ab-8625-4b79c4dc7775&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DDzug0lI_IXDnhVCJ7NGNlLvocwRjW24aAqnJS1DJhb7X7INECHg-NTDvFftmtWfr2_dF8kZ_5hfbsu0IdVBtHBDn4VYB2kEH5l9s33_4qBYAQerow5gIkqIdK9T1oJ7-ozh3as2bRQNMp84qePi7C-2UxBXt7hzqPiTPJ4RIHRbdUGNcQEyZzzR0NCE5rSqwg7rjRQ45yvntL8U81M0BhyXAHaqyAxYKYgHZOKV3qVeeoVpnMwk6NXgvwByF1bP4KYmGLfEF5p6D8IDG0Xw5EIDO7kyd1gLS5nyn_sCIkeZYwsDQ9EpxpdfVCkNXKlgEn89LiHy2mvEiMcEbMHUENPXpwSMcem2cTZPFfqYv16_XeUheuY-PehCw7sK8uKADeu5IacXYF12qM4oIgpsMbCbv-Ti5FaP_fqvgoKPHV2o&response_mode=form_post&nonce=638495392267209921.MmMwMDcyYmMtNjNmYS00NTRlLTk1N2QtZjE1ZDAwMDhhN2ExZmY5ZDY2OGMtNTRhOC00NTIzLTg3ODgtM2FiYWRiY2UwZDVk&client-request-id=c4c87b03-9cc7-4659-b318-8fb5a3c019f3&redirect_uri=https%3A%2F%2Fsecurity.microsoft.com%2F&x-client-SKU=ID_NET461&x-client-ver=6.22.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=80ccca67-54bd-44ab-8625-4b79c4dc7775&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DDzug0lI_IXDnhVCJ7NGNlLvocwRjW24aAqnJS1DJhb7X7INECHg-NTDvFftmtWfr2_dF8kZ_5hfbsu0IdVBtHBDn4VYB2kEH5l9s33_4qBYAQerow5gIkqIdK9T1oJ7-ozh3as2bRQNMp84qePi7C-2UxBXt7hzqPiTPJ4RIHRbdUGNcQEyZzzR0NCE5rSqwg7rjRQ45yvntL8U81M0BhyXAHaqyAxYKYgHZOKV3qVeeoVpnMwk6NXgvwByF1bP4KYmGLfEF5p6D8IDG0Xw5EIDO7kyd1gLS5nyn_sCIkeZYwsDQ9EpxpdfVCkNXKlgEn89LiHy2mvEiMcEbMHUENPXpwSMcem2cTZPFfqYv16_XeUheuY-PehCw7sK8uKADeu5IacXYF12qM4oIgpsMbCbv-Ti5FaP_fqvgoKPHV2o&response_mode=form_post&nonce=638495392267209921.MmMwMDcyYmMtNjNmYS00NTRlLTk1N2QtZjE1ZDAwMDhhN2ExZmY5ZDY2OGMtNTRhOC00NTIzLTg3ODgtM2FiYWRiY2UwZDVk&client-request-id=c4c87b03-9cc7-4659-b318-8fb5a3c019f3&redirect_uri=https%3A%2F%2Fsecurity.microsoft.com%2F&x-client-SKU=ID_NET461&x-client-ver=6.22.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://account.live.com/password/reset?wreply=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2freprocess%3fctx%3drQQIARAAhdNPi-NkAAbwZjpbZwbcHRZZRhGcgwcR2yZvkyYdGKRt0iZtk6Zpm0kCGpo0TdI0efOvTdM9C97c26J40tueRBHEg-xBcJm9LHtR9hPIHkQUlj3a-QRentPv9jzPyVG9AkAFq6AfFrEKdvE-hZqmOauTZQI35mUcnxllqg6IMm6QDROfmyRJEvHdk9Pi_Se__va12vnh7Isfv3389r-PkPecNA2Ti2o1scx17KZ5xXfNGCZwkVZM6Fd_QpBnCPIngjw6SOo1Cm8QtQYAdRKgjQbAKrzPZzxt5qrPp8JS8NUxigoTaTWYeJgARqm2ZDCNbu6N4wiA2Wq-Smi0CobdvZ9IzrB947ndYGLXhrSd8qDjqleSq4JpptGy9-LgzrC5Th1wEzB2d9Y_B8cLGPt6CJP0q-Lz4jC0Am7ehkFgmWnlhllB6pqz1IWBGMPQilPXSi7p3dpGV5zOKXTgyO0eKXSF1WADzUxaXgF81oyC3hije45BKiQnMG3WLgsTetNZpH56tYiBPu9QnqYTzsJI1ig3l1sp26IDXFZbwGNYYtVIajUdj1pqc2TFMCNszou4eb8xwWCPLMOdU5slwJBGAh9SeGSJLtkug-m2paSks4tEdyL2cIljJWM-7QrmiMm13U5ChTZDxOMos8l4KY1wIt8E6YCaUhiPtpxcabKzKG9u1b5qs9qwL9ci2bKgHAZ85tUFxd5krbyDGSLeV_3uYMF0iLBOUxzdRZWMYDh6SHr5HLMHYyLIAz1pc56lqVlCjxpMuA3nC7ntCUp_ZTMB1Ri4bA78DePyJmPw7JQRRCXMxrxp-cCcaGJnEakbrK4r1tSx1mpZtJx2RiZ9at1v0taa4GamonYwEPE45Oww4Y22sSlPXKIzE_VFtLFhX2RlAL8v	HTTP Parser: No <meta name="author".. found
Source: https://account.live.com/password/reset?wreply=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2freprocess%3fctx%3drQQIARAAhdNPi-NkAAbwZjpbZwbcHRZZRhGcgwcR2yZvkyYdGKRt0iZtk6Zpm0kCGpo0TdI0efOvTdM9C97c26J40tueRBHEg-xBcJm9LHtR9hPIHkQUlj3a-QRentPv9jzPyVG9AkAFq6AfFrEKdvE-hZqmOauTZQI35mUcnxllqg6IMm6QDROfmyRJEvHdk9Pi_Se__va12vnh7Isfv3389r-PkPecNA2Ti2o1scx17KZ5xXfNGCZwkVZM6Fd_QpBnCPIngjw6SOo1Cm8QtQYAdRKgjQbAKrzPZzxt5qrPp8JS8NUxigoTaTWYeJgARqm2ZDCNbu6N4wiA2Wq-Smi0CobdvZ9IzrB947ndYGLXhrSd8qDjqleSq4JpptGy9-LgzrC5Th1wEzB2d9Y_B8cLGPt6CJP0q-Lz4jC0Am7ehkFgmWnlhllB6pqz1IWBGMPQilPXSi7p3dpGV5zOKXTgyO0eKXSF1WADzUxaXgF81oyC3hije45BKiQnMG3WLgsTetNZpH56tYiBPu9QnqYTzsJI1ig3l1sp26IDXFZbwGNYYtVIajUdj1pqc2TFMCNszou4eb8xwWCPLMOdU5slwJBGAh9SeGSJLtkug-m2paSks4tEdyL2cIljJWM-7QrmiMm13U5ChTZDxOMos8l4KY1wIt8E6YCaUhiPtpxcabKzKG9u1b5qs9qwL9ci2bKgHAZ85tUFxd5krbyDGSLeV_3uYMF0iLBOUxzdRZWMYDh6SHr5HLMHYyLIAz1pc56lqVlCjxpMuA3nC7ntCUp_ZTMB1Ri4bA78DePyJmPw7JQRRCXMxrxp-cCcaGJnEakbrK4r1tSx1mpZtJx2RiZ9at1v0taa4GamonYwEPE45Oww4Y22sSlPXKIzE_VFtLFhX2RlAL8v	HTTP Parser: No <meta name="author".. found
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d39931C6663A5EF82%26opidt%3d1713942453%26uaid%3dc4c87b039cc74659b3188fb5a3c019f3%26contextid%3d11133D18AA8AB244%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=c4c87b039cc74659b3188fb5a3c019f3&suc=80ccca67-54bd-44ab-8625-4b79c4dc7775&lic=1	HTTP Parser: No <meta name="author".. found

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=80ccca67-54bd-44ab-8625-4b79c4dc7775&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DDzug0lI_IXDnhVCJ7NGNlLvocwRjW24aAqnJS1DJhb7X7INECHg-NTDvFftmtWfr2_dF8kZ_5hfbsu0IdVBtHBDn4VYB2kEH5l9s33_4qBYAQerow5gIkqIdK9T1oJ7-ozh3as2bRQNMp84qePi7C-2UxBXt7hzqPiTPJ4RIHRbdUGNcQEyZzzR0NCE5rSqwg7rjRQ45yvntL8U81M0BhyXAHaqyAxYKYgHZOKV3qVeeoVpnMwk6NXgvwByF1bP4KYmGLfEF5p6D8IDG0Xw5EIDO7kyd1gLS5nyn_sCIkeZYwsDQ9EpxpdfVCkNXKlgEn89LiHy2mvEiMcEbMHUENPXpwSMcem2cTZPFfqYv16_XeUheuY-PehCw7sK8uKADeu5IacXYF12qM4oIgpsMbCbv-Ti5FaP_fqvgoKPHV2o&response_mode=form_post&nonce=638495392267209921.MmMwMDcyYmMtNjNmYS00NTRlLTk1N2QtZjE1ZDAwMDhhN2ExZmY5ZDY2OGMtNTRhOC00NTIzLTg3ODgtM2FiYWRiY2UwZDVk&client-request-id=c4c87b03-9cc7-4659-b318-8fb5a3c019f3&redirect_uri=https%3A%2F%2Fsecurity.microsoft.com%2F&x-client-SKU=ID_NET461&x-client-ver=6.22.1.0	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=80ccca67-54bd-44ab-8625-4b79c4dc7775&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DDzug0lI_IXDnhVCJ7NGNlLvocwRjW24aAqnJS1DJhb7X7INECHg-NTDvFftmtWfr2_dF8kZ_5hfbsu0IdVBtHBDn4VYB2kEH5l9s33_4qBYAQerow5gIkqIdK9T1oJ7-ozh3as2bRQNMp84qePi7C-2UxBXt7hzqPiTPJ4RIHRbdUGNcQEyZzzR0NCE5rSqwg7rjRQ45yvntL8U81M0BhyXAHaqyAxYKYgHZOKV3qVeeoVpnMwk6NXgvwByF1bP4KYmGLfEF5p6D8IDG0Xw5EIDO7kyd1gLS5nyn_sCIkeZYwsDQ9EpxpdfVCkNXKlgEn89LiHy2mvEiMcEbMHUENPXpwSMcem2cTZPFfqYv16_XeUheuY-PehCw7sK8uKADeu5IacXYF12qM4oIgpsMbCbv-Ti5FaP_fqvgoKPHV2o&response_mode=form_post&nonce=638495392267209921.MmMwMDcyYmMtNjNmYS00NTRlLTk1N2QtZjE1ZDAwMDhhN2ExZmY5ZDY2OGMtNTRhOC00NTIzLTg3ODgtM2FiYWRiY2UwZDVk&client-request-id=c4c87b03-9cc7-4659-b318-8fb5a3c019f3&redirect_uri=https%3A%2F%2Fsecurity.microsoft.com%2F&x-client-SKU=ID_NET461&x-client-ver=6.22.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=80ccca67-54bd-44ab-8625-4b79c4dc7775&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DDzug0lI_IXDnhVCJ7NGNlLvocwRjW24aAqnJS1DJhb7X7INECHg-NTDvFftmtWfr2_dF8kZ_5hfbsu0IdVBtHBDn4VYB2kEH5l9s33_4qBYAQerow5gIkqIdK9T1oJ7-ozh3as2bRQNMp84qePi7C-2UxBXt7hzqPiTPJ4RIHRbdUGNcQEyZzzR0NCE5rSqwg7rjRQ45yvntL8U81M0BhyXAHaqyAxYKYgHZOKV3qVeeoVpnMwk6NXgvwByF1bP4KYmGLfEF5p6D8IDG0Xw5EIDO7kyd1gLS5nyn_sCIkeZYwsDQ9EpxpdfVCkNXKlgEn89LiHy2mvEiMcEbMHUENPXpwSMcem2cTZPFfqYv16_XeUheuY-PehCw7sK8uKADeu5IacXYF12qM4oIgpsMbCbv-Ti5FaP_fqvgoKPHV2o&response_mode=form_post&nonce=638495392267209921.MmMwMDcyYmMtNjNmYS00NTRlLTk1N2QtZjE1ZDAwMDhhN2ExZmY5ZDY2OGMtNTRhOC00NTIzLTg3ODgtM2FiYWRiY2UwZDVk&client-request-id=c4c87b03-9cc7-4659-b318-8fb5a3c019f3&redirect_uri=https%3A%2F%2Fsecurity.microsoft.com%2F&x-client-SKU=ID_NET461&x-client-ver=6.22.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://account.live.com/password/reset?wreply=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2freprocess%3fctx%3drQQIARAAhdNPi-NkAAbwZjpbZwbcHRZZRhGcgwcR2yZvkyYdGKRt0iZtk6Zpm0kCGpo0TdI0efOvTdM9C97c26J40tueRBHEg-xBcJm9LHtR9hPIHkQUlj3a-QRentPv9jzPyVG9AkAFq6AfFrEKdvE-hZqmOauTZQI35mUcnxllqg6IMm6QDROfmyRJEvHdk9Pi_Se__va12vnh7Isfv3389r-PkPecNA2Ti2o1scx17KZ5xXfNGCZwkVZM6Fd_QpBnCPIngjw6SOo1Cm8QtQYAdRKgjQbAKrzPZzxt5qrPp8JS8NUxigoTaTWYeJgARqm2ZDCNbu6N4wiA2Wq-Smi0CobdvZ9IzrB947ndYGLXhrSd8qDjqleSq4JpptGy9-LgzrC5Th1wEzB2d9Y_B8cLGPt6CJP0q-Lz4jC0Am7ehkFgmWnlhllB6pqz1IWBGMPQilPXSi7p3dpGV5zOKXTgyO0eKXSF1WADzUxaXgF81oyC3hije45BKiQnMG3WLgsTetNZpH56tYiBPu9QnqYTzsJI1ig3l1sp26IDXFZbwGNYYtVIajUdj1pqc2TFMCNszou4eb8xwWCPLMOdU5slwJBGAh9SeGSJLtkug-m2paSks4tEdyL2cIljJWM-7QrmiMm13U5ChTZDxOMos8l4KY1wIt8E6YCaUhiPtpxcabKzKG9u1b5qs9qwL9ci2bKgHAZ85tUFxd5krbyDGSLeV_3uYMF0iLBOUxzdRZWMYDh6SHr5HLMHYyLIAz1pc56lqVlCjxpMuA3nC7ntCUp_ZTMB1Ri4bA78DePyJmPw7JQRRCXMxrxp-cCcaGJnEakbrK4r1tSx1mpZtJx2RiZ9at1v0taa4GamonYwEPE45Oww4Y22sSlPXKIzE_VFtLFhX2RlAL8v...	HTTP Parser: No <meta name="copyright".. found
Source: https://account.live.com/password/reset?wreply=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2freprocess%3fctx%3drQQIARAAhdNPi-NkAAbwZjpbZwbcHRZZRhGcgwcR2yZvkyYdGKRt0iZtk6Zpm0kCGpo0TdI0efOvTdM9C97c26J40tueRBHEg-xBcJm9LHtR9hPIHkQUlj3a-QRentPv9jzPyVG9AkAFq6AfFrEKdvE-hZqmOauTZQI35mUcnxllqg6IMm6QDROfmyRJEvHdk9Pi_Se__va12vnh7Isfv3389r-PkPecNA2Ti2o1scx17KZ5xXfNGCZwkVZM6Fd_QpBnCPIngjw6SOo1Cm8QtQYAdRKgjQbAKrzPZzxt5qrPp8JS8NUxigoTaTWYeJgARqm2ZDCNbu6N4wiA2Wq-Smi0CobdvZ9IzrB947ndYGLXhrSd8qDjqleSq4JpptGy9-LgzrC5Th1wEzB2d9Y_B8cLGPt6CJP0q-Lz4jC0Am7ehkFgmWnlhllB6pqz1IWBGMPQilPXSi7p3dpGV5zOKXTgyO0eKXSF1WADzUxaXgF81oyC3hije45BKiQnMG3WLgsTetNZpH56tYiBPu9QnqYTzsJI1ig3l1sp26IDXFZbwGNYYtVIajUdj1pqc2TFMCNszou4eb8xwWCPLMOdU5slwJBGAh9SeGSJLtkug-m2paSks4tEdyL2cIljJWM-7QrmiMm13U5ChTZDxOMos8l4KY1wIt8E6YCaUhiPtpxcabKzKG9u1b5qs9qwL9ci2bKgHAZ85tUFxd5krbyDGSLeV_3uYMF0iLBOUxzdRZWMYDh6SHr5HLMHYyLIAz1pc56lqVlCjxpMuA3nC7ntCUp_ZTMB1Ri4bA78DePyJmPw7JQRRCXMxrxp-cCcaGJnEakbrK4r1tSx1mpZtJx2RiZ9at1v0taa4GamonYwEPE45Oww4Y22sSlPXKIzE_VFtLFhX2RlAL8v...	HTTP Parser: No <meta name="copyright".. found
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d39931C6663A5EF82%26opidt%3d1713942453%26uaid%3dc4c87b039cc74659b3188fb5a3c019f3%26contextid%3d11133D18AA8AB244%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=c4c87b039cc74659b3188fb5a3c019f3&suc=80ccca67-54bd-44ab-8625-4b79c4dc7775&lic=1	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.202.57.177:443 -> 192.168.2.6:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.202.57.177:443 -> 192.168.2.6:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49698 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_Ggyc2EJnCaHFrI6xkBPLcg2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_jHSrlUosdD1xxbmcR_lMNA2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_l2bvdjfwt697xziuhxpwsg2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_7f0a8c2a247460fad87f.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_eb638da25d4055fbbb57.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_presetpasswordsplitter_3c78f555810791db83a9.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/js/reset-password-signinname_en_G9nzWSnqBfHRIaMd4FEm5g2.js HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://account.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/chunks/oneds-analytics-js_54b1724af1b05e2ba3db_en.js HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://account.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/favicon.ico?v=2 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/favicon.ico?v=2 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /converged_ux_v2_nBE5FSqn9KpH44ZlTc3VqQ2.css?v=1 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signup.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jqueryshim_hlu0tTfjWJFWYNt1WZrVqg2.js?v=1 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signup.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /knockout_3.3.0_X1BYS2jZMbi7hfUj8VuqFA2.js?v=1 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signup.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lwsignupstringscountrybirthdate_en-us_gdxUIqa3ijrOefuBnwhTKg2.js?v=1 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signup.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lightweightsignuppackage_9itStK--DdHYjkMJSN7X3A2.js?v=1 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signup.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /datarequestpackage_h-_7C7UzwdefXJT9njDBTQ2.js HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signup.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /oneds_MC5gQfpbTUjLu60sQCwU1w2.js?v=1 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg HTTP/1.1Host: acctcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg HTTP/1.1Host: acctcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: unknown

DNS traffic detected: queries for: www.google.com

Source: unknown

HTTP traffic detected: POST /report/MSA-UX-All HTTP/1.1Host: csp.microsoft.comConnection: keep-aliveContent-Length: 790sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/csp-reportAccept: */*Origin: https://signup.live.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: reportReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_117.2.dr	String found in binary or memory: https://fpt.live.com/
Source: chromecache_75.2.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_75.2.dr	String found in binary or memory: https://login.windows-ppe.net

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 23.202.57.177:443 -> 192.168.2.6:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.202.57.177:443 -> 192.168.2.6:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49698 version: TLS 1.2

Source: classification engine

Classification label: clean2.win@20/93@24/7

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2252 --field-trial-handle=2128,i,8466329584062212164,3061137521727942845,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://security.microsoft.com/quarantine?id=97a71014-954b-4feb-794d-08dc6372e303%5C98d07de9-cb26-b9f0-ba1e-09ca04ceb516&recipientAddress=%40ENC%40D9yt9c5hG3%2F4wJDKGc%2FbR3AuhdsaTWJ0Bg22uw1BWgTyTC%2BWm%2FZe7jBqtCP%2FpiaYXc1LB9Cngaxkq7SO1S5t4A%3D%3D"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2252 --field-trial-handle=2128,i,8466329584062212164,3061137521727942845,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next

Source: Window Recorder

Window detected: More than 3 window changes detected

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.101.104	unknown	United States	15169	GOOGLEUS	false
13.107.246.69	part-0041.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
192.229.211.199	cs1227.wpc.alphacdn.net	United States	15133	EDGECASTUS	false
13.107.213.69	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.141.147	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.6

Contacted Domains

Name	IP	Active
cs1100.wpc.omegacdn.net	152.199.4.44	true
part-0041.t-0009.t-msedge.net	13.107.246.69	true
sni1gl.wpc.alphacdn.net	152.195.19.97	true
www.google.com	142.250.141.147	true
cs1227.wpc.alphacdn.net	192.229.211.199	true
fp2e7a.wpc.phicdn.net	192.229.211.108	true
signup.live.com	unknown	unknown
identity.nel.measure.office.net	unknown	unknown
aadcdn.msftauth.net	unknown	unknown
logincdn.msftauth.net	unknown	unknown
login.microsoftonline.com	unknown	unknown
account.live.com	unknown	unknown
fpt.live.com	unknown	unknown
acctcdn.msftauth.net	unknown	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://fpt.live.com/?session_id=c4c87b039cc74659b3188fb5a3c019f3&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SU&mkt=EN-US	false		high

Name	Type	MD5	SHA1	SHA256
Chrome Cache Entry: 100	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 612341	E1F5FE684FA7D6B8F6B799DCA8BE75F2	9AE45E697348FCD2E29545B58D8B62F166BB9782	C51E9E2FEB0B82ECF225B4C0DA8AB51F79BAB68125BFD6B7E2783C9D8BD9CF55
Chrome Cache Entry: 101	GIF image data, version 89a, 352 x 3	B540A8E518037192E32C4FE58BF2DBAB	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
Chrome Cache Entry: 102	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors	12E3DAC858061D088023B2BD48E2FA96	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
Chrome Cache Entry: 103	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 223759	799F880143F17E47C4EFDBB3FF35A54C	8CECC74EB422322F78EDE1111F175A28725CCA9F	EA70CC2977F4DEB5236041A7A0628FA671FB8AD20A5E9E3FD6885A11359EF2FE
Chrome Cache Entry: 104	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864	0E176276362B94279A4492511BFCBD98	389FE6B51F62254BB98939896B8C89EBEFFE2A02	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
Chrome Cache Entry: 105	GIF image data, version 89a, 352 x 3	166DE53471265253AB3A456DEFE6DA23	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
Chrome Cache Entry: 106	ASCII text, with no line terminators	06B313E93DD76909460FBFC0CD98CB6B	C4F9B2BBD840A4328F85F54873C434336A193888	B4532478707B495D0BB1C21C314AEF959DD1A5E0F66E52DAD5FC332C8B697CBA
Chrome Cache Entry: 107	JSON data	9E576E34B18E986347909C29AE6A82C6	532C767978DC2B55854B3CA2D2DF5B4DB221C934	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
Chrome Cache Entry: 108	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 28981	E136BF6A4163DFAF362EE33A5CCE2141	6BF60E30FD6DC097BD7F50F67622C6ED2E9117FC	4C9D555EA3719C873C5EDDA8B109BD4A136ACBECE2DD0324FD7634F63BB4584E
Chrome Cache Entry: 109	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 22961	B59E39F9921CAFCA149EB9685B51F656	CE99E1B2CA50537D61B5F6004EA2D0F528725979	72DE626A972E4867B3D7A5E1E3A08812FD74C25FAD1132E934AD3565FFD5AD78
Chrome Cache Entry: 110	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 209667	5CD2B9AF646C5F18C0EC3285217823DA	1A8137E3ACB4134BC673C93B9E0F8C8A3D88C342	C05F76060D21B896CD9E06D7B6FBA8EADDA1192D5C2054E13848B1A352B608F1
Chrome Cache Entry: 111	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 95910	5E5918E943A26D2E4037BD7418076110	06B96FC7B61F3EF879A3D37536AE28BC47B0CF48	1F0A2E09C97C138320FBA7E9291D31247912914223FBFE953917005BAC107A88
Chrome Cache Entry: 112	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864	0E176276362B94279A4492511BFCBD98	389FE6B51F62254BB98939896B8C89EBEFFE2A02	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
Chrome Cache Entry: 113	GIF image data, version 89a, 352 x 3	166DE53471265253AB3A456DEFE6DA23	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
Chrome Cache Entry: 114	ASCII text, with no line terminators	6BB67F495601048D153FBC0E1B5D05CE	23A3E77DB69B11287E84568C2E94192A1EBE4E2C	5B053E9B260D50775B96A767F054A10724CF5EC33A2A5AD06842AB96B439A108
Chrome Cache Entry: 115	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651	9F368BC4580FED907775F31C6B26D6CF	E393A40B3E337F43057EEE3DE189F197AB056451	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
Chrome Cache Entry: 116	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 55071	978A6C1AA934E5B1C5320D515FD25662	64636EF3E1AD607F095DBA6CB01447AC133B483D	D1963B1837F4087E988FD18BB4CF25B38D61D675C4B6A6FC01158BD39945F10A
Chrome Cache Entry: 117	HTML document, Unicode text, UTF-8 text, with very long lines (23183), with CRLF line terminators	931AE70A2078E9DA0575B79CB09E3736	7BD0A5AD0CC81F1C44EF09C073030637B06FB5E5	5D7F0EE41C9B0C77CA7BF57795A7ECDCF927ABAA89E09A34864F1508350A3A31
Chrome Cache Entry: 118	SVG Scalable Vector Graphics image	EE5C8D9FB6248C938FD0DC19370E90BD	D01A22720918B781338B5BBF9202B241A5F99EE4	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
Chrome Cache Entry: 119	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 8111	1A9078EB7795CC2AB9BE86D02D21A853	0CD912EEE4E1FE283AD99FA0C69CDC1F32DA7025	B68C76624B9979DA1E4138A3570F2F944CF67343AFE8EC089C15E0266E8E2D35
Chrome Cache Entry: 120	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864	0E176276362B94279A4492511BFCBD98	389FE6B51F62254BB98939896B8C89EBEFFE2A02	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
Chrome Cache Entry: 121	GIF image data, version 89a, 352 x 3	B540A8E518037192E32C4FE58BF2DBAB	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
Chrome Cache Entry: 122	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors	12E3DAC858061D088023B2BD48E2FA96	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
Chrome Cache Entry: 123	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113084	92A840DC3D177339DAE03FEDF22A22B5	C1C9A6E6442388D07A9D9D72C12DA25094D6920F	4A986BA8875F22A0EABC356112A6790F90E114ADB72EAEC4632E03812EC1EDE4
Chrome Cache Entry: 124	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864	0E176276362B94279A4492511BFCBD98	389FE6B51F62254BB98939896B8C89EBEFFE2A02	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
Chrome Cache Entry: 125	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors	12E3DAC858061D088023B2BD48E2FA96	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
Chrome Cache Entry: 126	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113657	57911010756C90D58754C91EF1EE2765	BAA48FEF4866D7DAFD9F59417745EE838F0E63CA	87C5385BA17F84CC25FB7BBE1EDB4169BC702842BD74B758ACDC130986D55BC2
Chrome Cache Entry: 127	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 273170	68B3385A6DFFC8D64E019832ACC918ED	7D29DDA429CED1040EE8959B5688387D4DD1B4E0	17190922204C288B25C7DB6B10EB4130B147C53171E442B25BC1F2D56BB74AEC
Chrome Cache Entry: 73	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651	9F368BC4580FED907775F31C6B26D6CF	E393A40B3E337F43057EEE3DE189F197AB056451	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
Chrome Cache Entry: 74	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651	9F368BC4580FED907775F31C6B26D6CF	E393A40B3E337F43057EEE3DE189F197AB056451	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
Chrome Cache Entry: 75	HTML document, ASCII text, with very long lines (2345), with CRLF line terminators	E86EF8B6111E5FB1D1665BCDC90888C9	994BF7651CB967CD9053056AF2D69ACB74DB7F29	3410242720DE50B090D07A23AEE2DAD879B31D36F2615732962EC4CFA8A9D458
Chrome Cache Entry: 76	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651	9F368BC4580FED907775F31C6B26D6CF	E393A40B3E337F43057EEE3DE189F197AB056451	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
Chrome Cache Entry: 77	SVG Scalable Vector Graphics image	BC3D32A696895F78C19DF6C717586A5D	9191CB156A30A3ED79C44C0A16C95159E8FF689D	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
Chrome Cache Entry: 78	ASCII text, with no line terminators	7F6C2F2EC0AC79AF93AC42E55601E0D8	8DE377E67C5B4919C767A044051BFD52C77A985E	5F1077DECBD2768AD99AF5D592C4DDE934F19682BB8BAD05599F9D403344DA27
Chrome Cache Entry: 79	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors	12E3DAC858061D088023B2BD48E2FA96	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
Chrome Cache Entry: 80	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors	12E3DAC858061D088023B2BD48E2FA96	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
Chrome Cache Entry: 81	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 379	847A4212B99B9076EE39328B24CD30AF	73F15078CF1D396485F644A79B6E25EF0637685D	29DC0C26C372805325EB7EB926769E832A60B47BEF96A66436EC3EC05CD6128E
Chrome Cache Entry: 82	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651	9F368BC4580FED907775F31C6B26D6CF	E393A40B3E337F43057EEE3DE189F197AB056451	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
Chrome Cache Entry: 83	HTML document, ASCII text, with very long lines (2627), with CRLF line terminators	96D6902D421551AAE5B0625C2E35C940	817D47B33692C9AB14B32F25BFD69D51D840499E	211B69ECBE6D70536F7D06980C997DEA3CECD0E8804E1D4C244DF9A70C8AA663
Chrome Cache Entry: 84	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864	0E176276362B94279A4492511BFCBD98	389FE6B51F62254BB98939896B8C89EBEFFE2A02	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
Chrome Cache Entry: 85	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 4730	6B0D2BCDD2E39B2CB0BDAB6597E44505	C7199742BB5F63AEC0FD2DE7003A8B1C795D78A1	9BCEC3FDDE9BED6ABFDA1A875B596571E3DEFD078E2050DC1B2D85F4483CCAE0
Chrome Cache Entry: 86	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 141305	39D9433B35E581765AD76E19ECED2394	9A7D10B60067EF8B4F91519428B2D0A934A45966	9834FA7CFC5ABB48CE82A9A57027CDD5F9958B21B3048D6E497D87B414E0A55C
Chrome Cache Entry: 87	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 80144	A37BDBB8F418A4014C99AC1393E58A58	00C49FEF2C56BC87AAF99FAEE903E05986234BC8	99EF7CD8BC7584B2645FA63F11E101B1377CE314D7738FA57CB886813906BBD1
Chrome Cache Entry: 88	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592	4761405717E938D7E7400BB15715DB1E	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
Chrome Cache Entry: 89	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1378	6F68E9881DF18F8E251AB57D5786239B	C0F7A01A288752833390FC330995F25488BCE8EC	B33E30351B2F4EF67D53D2C6DBE189A4D572425037E4F1264A0190DC4A820845
Chrome Cache Entry: 90	SVG Scalable Vector Graphics image	BC3D32A696895F78C19DF6C717586A5D	9191CB156A30A3ED79C44C0A16C95159E8FF689D	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
Chrome Cache Entry: 91	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 90690	1E5B765B32C5F65973D835E9EE3EBF20	2AE4B7B8E6303DBB2424730062C2FB1D752219B5	D443B4A9F2542CAAD44E23D0D3917456E781BAB47CD000CDAB5A2AA571395379
Chrome Cache Entry: 92	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 444227	0868DA2DD5EFFED92904047439E49D48	D760173E5E6B25461B0D2A0B32D384FE659B2338	8C41E973CB5EE0194EBF3BAA0716EEEB57EED53552F042E200190E3C37F08CFD
Chrome Cache Entry: 93	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1378	6F68E9881DF18F8E251AB57D5786239B	C0F7A01A288752833390FC330995F25488BCE8EC	B33E30351B2F4EF67D53D2C6DBE189A4D572425037E4F1264A0190DC4A820845
Chrome Cache Entry: 94	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors	12E3DAC858061D088023B2BD48E2FA96	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
Chrome Cache Entry: 95	SVG Scalable Vector Graphics image	EE5C8D9FB6248C938FD0DC19370E90BD	D01A22720918B781338B5BBF9202B241A5F99EE4	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
Chrome Cache Entry: 96	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864	0E176276362B94279A4492511BFCBD98	389FE6B51F62254BB98939896B8C89EBEFFE2A02	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
Chrome Cache Entry: 97	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651	9F368BC4580FED907775F31C6B26D6CF	E393A40B3E337F43057EEE3DE189F197AB056451	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
Chrome Cache Entry: 98	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 379	847A4212B99B9076EE39328B24CD30AF	73F15078CF1D396485F644A79B6E25EF0637685D	29DC0C26C372805325EB7EB926769E832A60B47BEF96A66436EC3EC05CD6128E
Chrome Cache Entry: 99	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592	4761405717E938D7E7400BB15715DB1E	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF

Found iframes

HTTP Parser: Iframe src: https://fpt.live.com/?session_id=c4c87b039cc74659b3188fb5a3c019f3&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SU&mkt=EN-US

HTML body contains low number of good links

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=80ccca67-54bd-44ab-8625-4b79c4dc7775&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DDzug0lI_IXDnhVCJ7NGNlLvocwRjW24aAqnJS1DJhb7X7INECHg-NTDvFftmtWfr2_dF8kZ_5hfbsu0IdVBtHBDn4VYB2kEH5l9s33_4qBYAQerow5gIkqIdK9T1oJ7-ozh3as2bRQNMp84qePi7C-2UxBXt7hzqPiTPJ4RIHRbdUGNcQEyZzzR0NCE5rSqwg7rjRQ45yvntL8U81M0BhyXAHaqyAxYKYgHZOKV3qVeeoVpnMwk6NXgvwByF1bP4KYmGLfEF5p6D8IDG0Xw5EIDO7kyd1gLS5nyn_sCIkeZYwsDQ9EpxpdfVCkNXKlgEn89LiHy2mvEiMcEbMHUENPXpwSMcem2cTZPFfqYv16_XeUheuY-PehCw7sK8uKADeu5IacXYF12qM4oIgpsMbCbv-Ti5FaP_fqvgoKPHV2o&response_mode=form_post&nonce=638495392267209921.MmMwMDcyYmMtNjNmYS00NTRlLTk1N2QtZjE1ZDAwMDhhN2ExZmY5ZDY2OGMtNTRhOC00NTIzLTg3ODgtM2FiYWRiY2UwZDVk&client-request-id=c4c87b03-9cc7-4659-b318-8fb5a3c019f3&redirect_uri=https%3A%2F%2Fsecurity.microsoft.com%2F&x-client-SKU=ID_NET461&x-client-ver=6.22.1.0	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=80ccca67-54bd-44ab-8625-4b79c4dc7775&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DDzug0lI_IXDnhVCJ7NGNlLvocwRjW24aAqnJS1DJhb7X7INECHg-NTDvFftmtWfr2_dF8kZ_5hfbsu0IdVBtHBDn4VYB2kEH5l9s33_4qBYAQerow5gIkqIdK9T1oJ7-ozh3as2bRQNMp84qePi7C-2UxBXt7hzqPiTPJ4RIHRbdUGNcQEyZzzR0NCE5rSqwg7rjRQ45yvntL8U81M0BhyXAHaqyAxYKYgHZOKV3qVeeoVpnMwk6NXgvwByF1bP4KYmGLfEF5p6D8IDG0Xw5EIDO7kyd1gLS5nyn_sCIkeZYwsDQ9EpxpdfVCkNXKlgEn89LiHy2mvEiMcEbMHUENPXpwSMcem2cTZPFfqYv16_XeUheuY-PehCw7sK8uKADeu5IacXYF12qM4oIgpsMbCbv-Ti5FaP_fqvgoKPHV2o&response_mode=form_post&nonce=638495392267209921.MmMwMDcyYmMtNjNmYS00NTRlLTk1N2QtZjE1ZDAwMDhhN2ExZmY5ZDY2OGMtNTRhOC00NTIzLTg3ODgtM2FiYWRiY2UwZDVk&client-request-id=c4c87b03-9cc7-4659-b318-8fb5a3c019f3&redirect_uri=https%3A%2F%2Fsecurity.microsoft.com%2F&x-client-SKU=ID_NET461&x-client-ver=6.22.1.0&sso_reload=true	HTTP Parser: Number of links: 0
Source: https://account.live.com/password/reset?wreply=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2freprocess%3fctx%3drQQIARAAhdNPi-NkAAbwZjpbZwbcHRZZRhGcgwcR2yZvkyYdGKRt0iZtk6Zpm0kCGpo0TdI0efOvTdM9C97c26J40tueRBHEg-xBcJm9LHtR9hPIHkQUlj3a-QRentPv9jzPyVG9AkAFq6AfFrEKdvE-hZqmOauTZQI35mUcnxllqg6IMm6QDROfmyRJEvHdk9Pi_Se__va12vnh7Isfv3389r-PkPecNA2Ti2o1scx17KZ5xXfNGCZwkVZM6Fd_QpBnCPIngjw6SOo1Cm8QtQYAdRKgjQbAKrzPZzxt5qrPp8JS8NUxigoTaTWYeJgARqm2ZDCNbu6N4wiA2Wq-Smi0CobdvZ9IzrB947ndYGLXhrSd8qDjqleSq4JpptGy9-LgzrC5Th1wEzB2d9Y_B8cLGPt6CJP0q-Lz4jC0Am7ehkFgmWnlhllB6pqz1IWBGMPQilPXSi7p3dpGV5zOKXTgyO0eKXSF1WADzUxaXgF81oyC3hije45BKiQnMG3WLgsTetNZpH56tYiBPu9QnqYTzsJI1ig3l1sp26IDXFZbwGNYYtVIajUdj1pqc2TFMCNszou4eb8xwWCPLMOdU5slwJBGAh9SeGSJLtkug-m2paSks4tEdyL2cIljJWM-7QrmiMm13U5ChTZDxOMos8l4KY1wIt8E6YCaUhiPtpxcabKzKG9u1b5qs9qwL9ci2bKgHAZ85tUFxd5krbyDGSLeV_3uYMF0iLBOUxzdRZWMYDh6SHr5HLMHYyLIAz1pc56lqVlCjxpMuA3nC7ntCUp_ZTMB1Ri4bA78DePyJmPw7JQRRCXMxrxp-cCcaGJnEakbrK4r1tSx1mpZtJx2RiZ9at1v0taa4GamonYwEPE45Oww4Y22sSlPXKIzE_VFtLFhX2RlAL8v...	HTTP Parser: Number of links: 0
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d39931C6663A5EF82%26opidt%3d1713942453%26uaid%3dc4c87b039cc74659b3188fb5a3c019f3%26contextid%3d11133D18AA8AB244%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=c4c87b039cc74659b3188fb5a3c019f3&suc=80ccca67-54bd-44ab-8625-4b79c4dc7775&lic=1	HTTP Parser: Number of links: 0

HTML title does not match URL

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=80ccca67-54bd-44ab-8625-4b79c4dc7775&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DDzug0lI_IXDnhVCJ7NGNlLvocwRjW24aAqnJS1DJhb7X7INECHg-NTDvFftmtWfr2_dF8kZ_5hfbsu0IdVBtHBDn4VYB2kEH5l9s33_4qBYAQerow5gIkqIdK9T1oJ7-ozh3as2bRQNMp84qePi7C-2UxBXt7hzqPiTPJ4RIHRbdUGNcQEyZzzR0NCE5rSqwg7rjRQ45yvntL8U81M0BhyXAHaqyAxYKYgHZOKV3qVeeoVpnMwk6NXgvwByF1bP4KYmGLfEF5p6D8IDG0Xw5EIDO7kyd1gLS5nyn_sCIkeZYwsDQ9EpxpdfVCkNXKlgEn89LiHy2mvEiMcEbMHUENPXpwSMcem2cTZPFfqYv16_XeUheuY-PehCw7sK8uKADeu5IacXYF12qM4oIgpsMbCbv-Ti5FaP_fqvgoKPHV2o&response_mode=form_post&nonce=638495392267209921.MmMwMDcyYmMtNjNmYS00NTRlLTk1N2QtZjE1ZDAwMDhhN2ExZmY5ZDY2OGMtNTRhOC00NTIzLTg3ODgtM2FiYWRiY2UwZDVk&client-request-id=c4c87b03-9cc7-4659-b318-8fb5a3c019f3&redirect_uri=https%3A%2F%2Fsecurity.microsoft.com%2F&x-client-SKU=ID_NET461&x-client-ver=6.22.1.0	HTTP Parser: Title: Redirecting does not match URL
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=80ccca67-54bd-44ab-8625-4b79c4dc7775&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DDzug0lI_IXDnhVCJ7NGNlLvocwRjW24aAqnJS1DJhb7X7INECHg-NTDvFftmtWfr2_dF8kZ_5hfbsu0IdVBtHBDn4VYB2kEH5l9s33_4qBYAQerow5gIkqIdK9T1oJ7-ozh3as2bRQNMp84qePi7C-2UxBXt7hzqPiTPJ4RIHRbdUGNcQEyZzzR0NCE5rSqwg7rjRQ45yvntL8U81M0BhyXAHaqyAxYKYgHZOKV3qVeeoVpnMwk6NXgvwByF1bP4KYmGLfEF5p6D8IDG0Xw5EIDO7kyd1gLS5nyn_sCIkeZYwsDQ9EpxpdfVCkNXKlgEn89LiHy2mvEiMcEbMHUENPXpwSMcem2cTZPFfqYv16_XeUheuY-PehCw7sK8uKADeu5IacXYF12qM4oIgpsMbCbv-Ti5FaP_fqvgoKPHV2o&response_mode=form_post&nonce=638495392267209921.MmMwMDcyYmMtNjNmYS00NTRlLTk1N2QtZjE1ZDAwMDhhN2ExZmY5ZDY2OGMtNTRhOC00NTIzLTg3ODgtM2FiYWRiY2UwZDVk&client-request-id=c4c87b03-9cc7-4659-b318-8fb5a3c019f3&redirect_uri=https%3A%2F%2Fsecurity.microsoft.com%2F&x-client-SKU=ID_NET461&x-client-ver=6.22.1.0&sso_reload=true	HTTP Parser: Title: Sign in to your account does not match URL
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d39931C6663A5EF82%26opidt%3d1713942453%26uaid%3dc4c87b039cc74659b3188fb5a3c019f3%26contextid%3d11133D18AA8AB244%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=c4c87b039cc74659b3188fb5a3c019f3&suc=80ccca67-54bd-44ab-8625-4b79c4dc7775&lic=1	HTTP Parser: Title: Create account does not match URL

Submit button contains javascript call

Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d39931C6663A5EF82%26opidt%3d1713942453%26uaid%3dc4c87b039cc74659b3188fb5a3c019f3%26contextid%3d11133D18AA8AB244%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=c4c87b039cc74659b3188fb5a3c019f3&suc=80ccca67-54bd-44ab-8625-4b79c4dc7775&lic=1	HTTP Parser: On click: OnBack(); return false;
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d39931C6663A5EF82%26opidt%3d1713942453%26uaid%3dc4c87b039cc74659b3188fb5a3c019f3%26contextid%3d11133D18AA8AB244%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=c4c87b039cc74659b3188fb5a3c019f3&suc=80ccca67-54bd-44ab-8625-4b79c4dc7775&lic=1	HTTP Parser: On click: HOSTUI.evt_inlineBack_onclick();
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d39931C6663A5EF82%26opidt%3d1713942453%26uaid%3dc4c87b039cc74659b3188fb5a3c019f3%26contextid%3d11133D18AA8AB244%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=c4c87b039cc74659b3188fb5a3c019f3&suc=80ccca67-54bd-44ab-8625-4b79c4dc7775&lic=1	HTTP Parser: On click: HOSTUI.evt_inlineBack_onclick();

HTTP Parser: <input type="password" .../> found

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=80ccca67-54bd-44ab-8625-4b79c4dc7775&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DDzug0lI_IXDnhVCJ7NGNlLvocwRjW24aAqnJS1DJhb7X7INECHg-NTDvFftmtWfr2_dF8kZ_5hfbsu0IdVBtHBDn4VYB2kEH5l9s33_4qBYAQerow5gIkqIdK9T1oJ7-ozh3as2bRQNMp84qePi7C-2UxBXt7hzqPiTPJ4RIHRbdUGNcQEyZzzR0NCE5rSqwg7rjRQ45yvntL8U81M0BhyXAHaqyAxYKYgHZOKV3qVeeoVpnMwk6NXgvwByF1bP4KYmGLfEF5p6D8IDG0Xw5EIDO7kyd1gLS5nyn_sCIkeZYwsDQ9EpxpdfVCkNXKlgEn89LiHy2mvEiMcEbMHUENPXpwSMcem2cTZPFfqYv16_XeUheuY-PehCw7sK8uKADeu5IacXYF12qM4oIgpsMbCbv-Ti5FaP_fqvgoKPHV2o&response_mode=form_post&nonce=638495392267209921.MmMwMDcyYmMtNjNmYS00NTRlLTk1N2QtZjE1ZDAwMDhhN2ExZmY5ZDY2OGMtNTRhOC00NTIzLTg3ODgtM2FiYWRiY2UwZDVk&client-request-id=c4c87b03-9cc7-4659-b318-8fb5a3c019f3&redirect_uri=https%3A%2F%2Fsecurity.microsoft.com%2F&x-client-SKU=ID_NET461&x-client-ver=6.22.1.0	HTTP Parser: No favicon
Source: https://fpt.live.com/?session_id=c4c87b039cc74659b3188fb5a3c019f3&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SU&mkt=EN-US	HTTP Parser: No favicon

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=80ccca67-54bd-44ab-8625-4b79c4dc7775&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DDzug0lI_IXDnhVCJ7NGNlLvocwRjW24aAqnJS1DJhb7X7INECHg-NTDvFftmtWfr2_dF8kZ_5hfbsu0IdVBtHBDn4VYB2kEH5l9s33_4qBYAQerow5gIkqIdK9T1oJ7-ozh3as2bRQNMp84qePi7C-2UxBXt7hzqPiTPJ4RIHRbdUGNcQEyZzzR0NCE5rSqwg7rjRQ45yvntL8U81M0BhyXAHaqyAxYKYgHZOKV3qVeeoVpnMwk6NXgvwByF1bP4KYmGLfEF5p6D8IDG0Xw5EIDO7kyd1gLS5nyn_sCIkeZYwsDQ9EpxpdfVCkNXKlgEn89LiHy2mvEiMcEbMHUENPXpwSMcem2cTZPFfqYv16_XeUheuY-PehCw7sK8uKADeu5IacXYF12qM4oIgpsMbCbv-Ti5FaP_fqvgoKPHV2o&response_mode=form_post&nonce=638495392267209921.MmMwMDcyYmMtNjNmYS00NTRlLTk1N2QtZjE1ZDAwMDhhN2ExZmY5ZDY2OGMtNTRhOC00NTIzLTg3ODgtM2FiYWRiY2UwZDVk&client-request-id=c4c87b03-9cc7-4659-b318-8fb5a3c019f3&redirect_uri=https%3A%2F%2Fsecurity.microsoft.com%2F&x-client-SKU=ID_NET461&x-client-ver=6.22.1.0	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=80ccca67-54bd-44ab-8625-4b79c4dc7775&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DDzug0lI_IXDnhVCJ7NGNlLvocwRjW24aAqnJS1DJhb7X7INECHg-NTDvFftmtWfr2_dF8kZ_5hfbsu0IdVBtHBDn4VYB2kEH5l9s33_4qBYAQerow5gIkqIdK9T1oJ7-ozh3as2bRQNMp84qePi7C-2UxBXt7hzqPiTPJ4RIHRbdUGNcQEyZzzR0NCE5rSqwg7rjRQ45yvntL8U81M0BhyXAHaqyAxYKYgHZOKV3qVeeoVpnMwk6NXgvwByF1bP4KYmGLfEF5p6D8IDG0Xw5EIDO7kyd1gLS5nyn_sCIkeZYwsDQ9EpxpdfVCkNXKlgEn89LiHy2mvEiMcEbMHUENPXpwSMcem2cTZPFfqYv16_XeUheuY-PehCw7sK8uKADeu5IacXYF12qM4oIgpsMbCbv-Ti5FaP_fqvgoKPHV2o&response_mode=form_post&nonce=638495392267209921.MmMwMDcyYmMtNjNmYS00NTRlLTk1N2QtZjE1ZDAwMDhhN2ExZmY5ZDY2OGMtNTRhOC00NTIzLTg3ODgtM2FiYWRiY2UwZDVk&client-request-id=c4c87b03-9cc7-4659-b318-8fb5a3c019f3&redirect_uri=https%3A%2F%2Fsecurity.microsoft.com%2F&x-client-SKU=ID_NET461&x-client-ver=6.22.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=80ccca67-54bd-44ab-8625-4b79c4dc7775&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DDzug0lI_IXDnhVCJ7NGNlLvocwRjW24aAqnJS1DJhb7X7INECHg-NTDvFftmtWfr2_dF8kZ_5hfbsu0IdVBtHBDn4VYB2kEH5l9s33_4qBYAQerow5gIkqIdK9T1oJ7-ozh3as2bRQNMp84qePi7C-2UxBXt7hzqPiTPJ4RIHRbdUGNcQEyZzzR0NCE5rSqwg7rjRQ45yvntL8U81M0BhyXAHaqyAxYKYgHZOKV3qVeeoVpnMwk6NXgvwByF1bP4KYmGLfEF5p6D8IDG0Xw5EIDO7kyd1gLS5nyn_sCIkeZYwsDQ9EpxpdfVCkNXKlgEn89LiHy2mvEiMcEbMHUENPXpwSMcem2cTZPFfqYv16_XeUheuY-PehCw7sK8uKADeu5IacXYF12qM4oIgpsMbCbv-Ti5FaP_fqvgoKPHV2o&response_mode=form_post&nonce=638495392267209921.MmMwMDcyYmMtNjNmYS00NTRlLTk1N2QtZjE1ZDAwMDhhN2ExZmY5ZDY2OGMtNTRhOC00NTIzLTg3ODgtM2FiYWRiY2UwZDVk&client-request-id=c4c87b03-9cc7-4659-b318-8fb5a3c019f3&redirect_uri=https%3A%2F%2Fsecurity.microsoft.com%2F&x-client-SKU=ID_NET461&x-client-ver=6.22.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://account.live.com/password/reset?wreply=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2freprocess%3fctx%3drQQIARAAhdNPi-NkAAbwZjpbZwbcHRZZRhGcgwcR2yZvkyYdGKRt0iZtk6Zpm0kCGpo0TdI0efOvTdM9C97c26J40tueRBHEg-xBcJm9LHtR9hPIHkQUlj3a-QRentPv9jzPyVG9AkAFq6AfFrEKdvE-hZqmOauTZQI35mUcnxllqg6IMm6QDROfmyRJEvHdk9Pi_Se__va12vnh7Isfv3389r-PkPecNA2Ti2o1scx17KZ5xXfNGCZwkVZM6Fd_QpBnCPIngjw6SOo1Cm8QtQYAdRKgjQbAKrzPZzxt5qrPp8JS8NUxigoTaTWYeJgARqm2ZDCNbu6N4wiA2Wq-Smi0CobdvZ9IzrB947ndYGLXhrSd8qDjqleSq4JpptGy9-LgzrC5Th1wEzB2d9Y_B8cLGPt6CJP0q-Lz4jC0Am7ehkFgmWnlhllB6pqz1IWBGMPQilPXSi7p3dpGV5zOKXTgyO0eKXSF1WADzUxaXgF81oyC3hije45BKiQnMG3WLgsTetNZpH56tYiBPu9QnqYTzsJI1ig3l1sp26IDXFZbwGNYYtVIajUdj1pqc2TFMCNszou4eb8xwWCPLMOdU5slwJBGAh9SeGSJLtkug-m2paSks4tEdyL2cIljJWM-7QrmiMm13U5ChTZDxOMos8l4KY1wIt8E6YCaUhiPtpxcabKzKG9u1b5qs9qwL9ci2bKgHAZ85tUFxd5krbyDGSLeV_3uYMF0iLBOUxzdRZWMYDh6SHr5HLMHYyLIAz1pc56lqVlCjxpMuA3nC7ntCUp_ZTMB1Ri4bA78DePyJmPw7JQRRCXMxrxp-cCcaGJnEakbrK4r1tSx1mpZtJx2RiZ9at1v0taa4GamonYwEPE45Oww4Y22sSlPXKIzE_VFtLFhX2RlAL8v	HTTP Parser: No <meta name="author".. found
Source: https://account.live.com/password/reset?wreply=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2freprocess%3fctx%3drQQIARAAhdNPi-NkAAbwZjpbZwbcHRZZRhGcgwcR2yZvkyYdGKRt0iZtk6Zpm0kCGpo0TdI0efOvTdM9C97c26J40tueRBHEg-xBcJm9LHtR9hPIHkQUlj3a-QRentPv9jzPyVG9AkAFq6AfFrEKdvE-hZqmOauTZQI35mUcnxllqg6IMm6QDROfmyRJEvHdk9Pi_Se__va12vnh7Isfv3389r-PkPecNA2Ti2o1scx17KZ5xXfNGCZwkVZM6Fd_QpBnCPIngjw6SOo1Cm8QtQYAdRKgjQbAKrzPZzxt5qrPp8JS8NUxigoTaTWYeJgARqm2ZDCNbu6N4wiA2Wq-Smi0CobdvZ9IzrB947ndYGLXhrSd8qDjqleSq4JpptGy9-LgzrC5Th1wEzB2d9Y_B8cLGPt6CJP0q-Lz4jC0Am7ehkFgmWnlhllB6pqz1IWBGMPQilPXSi7p3dpGV5zOKXTgyO0eKXSF1WADzUxaXgF81oyC3hije45BKiQnMG3WLgsTetNZpH56tYiBPu9QnqYTzsJI1ig3l1sp26IDXFZbwGNYYtVIajUdj1pqc2TFMCNszou4eb8xwWCPLMOdU5slwJBGAh9SeGSJLtkug-m2paSks4tEdyL2cIljJWM-7QrmiMm13U5ChTZDxOMos8l4KY1wIt8E6YCaUhiPtpxcabKzKG9u1b5qs9qwL9ci2bKgHAZ85tUFxd5krbyDGSLeV_3uYMF0iLBOUxzdRZWMYDh6SHr5HLMHYyLIAz1pc56lqVlCjxpMuA3nC7ntCUp_ZTMB1Ri4bA78DePyJmPw7JQRRCXMxrxp-cCcaGJnEakbrK4r1tSx1mpZtJx2RiZ9at1v0taa4GamonYwEPE45Oww4Y22sSlPXKIzE_VFtLFhX2RlAL8v	HTTP Parser: No <meta name="author".. found
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d39931C6663A5EF82%26opidt%3d1713942453%26uaid%3dc4c87b039cc74659b3188fb5a3c019f3%26contextid%3d11133D18AA8AB244%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=c4c87b039cc74659b3188fb5a3c019f3&suc=80ccca67-54bd-44ab-8625-4b79c4dc7775&lic=1	HTTP Parser: No <meta name="author".. found

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=80ccca67-54bd-44ab-8625-4b79c4dc7775&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DDzug0lI_IXDnhVCJ7NGNlLvocwRjW24aAqnJS1DJhb7X7INECHg-NTDvFftmtWfr2_dF8kZ_5hfbsu0IdVBtHBDn4VYB2kEH5l9s33_4qBYAQerow5gIkqIdK9T1oJ7-ozh3as2bRQNMp84qePi7C-2UxBXt7hzqPiTPJ4RIHRbdUGNcQEyZzzR0NCE5rSqwg7rjRQ45yvntL8U81M0BhyXAHaqyAxYKYgHZOKV3qVeeoVpnMwk6NXgvwByF1bP4KYmGLfEF5p6D8IDG0Xw5EIDO7kyd1gLS5nyn_sCIkeZYwsDQ9EpxpdfVCkNXKlgEn89LiHy2mvEiMcEbMHUENPXpwSMcem2cTZPFfqYv16_XeUheuY-PehCw7sK8uKADeu5IacXYF12qM4oIgpsMbCbv-Ti5FaP_fqvgoKPHV2o&response_mode=form_post&nonce=638495392267209921.MmMwMDcyYmMtNjNmYS00NTRlLTk1N2QtZjE1ZDAwMDhhN2ExZmY5ZDY2OGMtNTRhOC00NTIzLTg3ODgtM2FiYWRiY2UwZDVk&client-request-id=c4c87b03-9cc7-4659-b318-8fb5a3c019f3&redirect_uri=https%3A%2F%2Fsecurity.microsoft.com%2F&x-client-SKU=ID_NET461&x-client-ver=6.22.1.0	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=80ccca67-54bd-44ab-8625-4b79c4dc7775&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DDzug0lI_IXDnhVCJ7NGNlLvocwRjW24aAqnJS1DJhb7X7INECHg-NTDvFftmtWfr2_dF8kZ_5hfbsu0IdVBtHBDn4VYB2kEH5l9s33_4qBYAQerow5gIkqIdK9T1oJ7-ozh3as2bRQNMp84qePi7C-2UxBXt7hzqPiTPJ4RIHRbdUGNcQEyZzzR0NCE5rSqwg7rjRQ45yvntL8U81M0BhyXAHaqyAxYKYgHZOKV3qVeeoVpnMwk6NXgvwByF1bP4KYmGLfEF5p6D8IDG0Xw5EIDO7kyd1gLS5nyn_sCIkeZYwsDQ9EpxpdfVCkNXKlgEn89LiHy2mvEiMcEbMHUENPXpwSMcem2cTZPFfqYv16_XeUheuY-PehCw7sK8uKADeu5IacXYF12qM4oIgpsMbCbv-Ti5FaP_fqvgoKPHV2o&response_mode=form_post&nonce=638495392267209921.MmMwMDcyYmMtNjNmYS00NTRlLTk1N2QtZjE1ZDAwMDhhN2ExZmY5ZDY2OGMtNTRhOC00NTIzLTg3ODgtM2FiYWRiY2UwZDVk&client-request-id=c4c87b03-9cc7-4659-b318-8fb5a3c019f3&redirect_uri=https%3A%2F%2Fsecurity.microsoft.com%2F&x-client-SKU=ID_NET461&x-client-ver=6.22.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=80ccca67-54bd-44ab-8625-4b79c4dc7775&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DDzug0lI_IXDnhVCJ7NGNlLvocwRjW24aAqnJS1DJhb7X7INECHg-NTDvFftmtWfr2_dF8kZ_5hfbsu0IdVBtHBDn4VYB2kEH5l9s33_4qBYAQerow5gIkqIdK9T1oJ7-ozh3as2bRQNMp84qePi7C-2UxBXt7hzqPiTPJ4RIHRbdUGNcQEyZzzR0NCE5rSqwg7rjRQ45yvntL8U81M0BhyXAHaqyAxYKYgHZOKV3qVeeoVpnMwk6NXgvwByF1bP4KYmGLfEF5p6D8IDG0Xw5EIDO7kyd1gLS5nyn_sCIkeZYwsDQ9EpxpdfVCkNXKlgEn89LiHy2mvEiMcEbMHUENPXpwSMcem2cTZPFfqYv16_XeUheuY-PehCw7sK8uKADeu5IacXYF12qM4oIgpsMbCbv-Ti5FaP_fqvgoKPHV2o&response_mode=form_post&nonce=638495392267209921.MmMwMDcyYmMtNjNmYS00NTRlLTk1N2QtZjE1ZDAwMDhhN2ExZmY5ZDY2OGMtNTRhOC00NTIzLTg3ODgtM2FiYWRiY2UwZDVk&client-request-id=c4c87b03-9cc7-4659-b318-8fb5a3c019f3&redirect_uri=https%3A%2F%2Fsecurity.microsoft.com%2F&x-client-SKU=ID_NET461&x-client-ver=6.22.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://account.live.com/password/reset?wreply=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2freprocess%3fctx%3drQQIARAAhdNPi-NkAAbwZjpbZwbcHRZZRhGcgwcR2yZvkyYdGKRt0iZtk6Zpm0kCGpo0TdI0efOvTdM9C97c26J40tueRBHEg-xBcJm9LHtR9hPIHkQUlj3a-QRentPv9jzPyVG9AkAFq6AfFrEKdvE-hZqmOauTZQI35mUcnxllqg6IMm6QDROfmyRJEvHdk9Pi_Se__va12vnh7Isfv3389r-PkPecNA2Ti2o1scx17KZ5xXfNGCZwkVZM6Fd_QpBnCPIngjw6SOo1Cm8QtQYAdRKgjQbAKrzPZzxt5qrPp8JS8NUxigoTaTWYeJgARqm2ZDCNbu6N4wiA2Wq-Smi0CobdvZ9IzrB947ndYGLXhrSd8qDjqleSq4JpptGy9-LgzrC5Th1wEzB2d9Y_B8cLGPt6CJP0q-Lz4jC0Am7ehkFgmWnlhllB6pqz1IWBGMPQilPXSi7p3dpGV5zOKXTgyO0eKXSF1WADzUxaXgF81oyC3hije45BKiQnMG3WLgsTetNZpH56tYiBPu9QnqYTzsJI1ig3l1sp26IDXFZbwGNYYtVIajUdj1pqc2TFMCNszou4eb8xwWCPLMOdU5slwJBGAh9SeGSJLtkug-m2paSks4tEdyL2cIljJWM-7QrmiMm13U5ChTZDxOMos8l4KY1wIt8E6YCaUhiPtpxcabKzKG9u1b5qs9qwL9ci2bKgHAZ85tUFxd5krbyDGSLeV_3uYMF0iLBOUxzdRZWMYDh6SHr5HLMHYyLIAz1pc56lqVlCjxpMuA3nC7ntCUp_ZTMB1Ri4bA78DePyJmPw7JQRRCXMxrxp-cCcaGJnEakbrK4r1tSx1mpZtJx2RiZ9at1v0taa4GamonYwEPE45Oww4Y22sSlPXKIzE_VFtLFhX2RlAL8v...	HTTP Parser: No <meta name="copyright".. found
Source: https://account.live.com/password/reset?wreply=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2freprocess%3fctx%3drQQIARAAhdNPi-NkAAbwZjpbZwbcHRZZRhGcgwcR2yZvkyYdGKRt0iZtk6Zpm0kCGpo0TdI0efOvTdM9C97c26J40tueRBHEg-xBcJm9LHtR9hPIHkQUlj3a-QRentPv9jzPyVG9AkAFq6AfFrEKdvE-hZqmOauTZQI35mUcnxllqg6IMm6QDROfmyRJEvHdk9Pi_Se__va12vnh7Isfv3389r-PkPecNA2Ti2o1scx17KZ5xXfNGCZwkVZM6Fd_QpBnCPIngjw6SOo1Cm8QtQYAdRKgjQbAKrzPZzxt5qrPp8JS8NUxigoTaTWYeJgARqm2ZDCNbu6N4wiA2Wq-Smi0CobdvZ9IzrB947ndYGLXhrSd8qDjqleSq4JpptGy9-LgzrC5Th1wEzB2d9Y_B8cLGPt6CJP0q-Lz4jC0Am7ehkFgmWnlhllB6pqz1IWBGMPQilPXSi7p3dpGV5zOKXTgyO0eKXSF1WADzUxaXgF81oyC3hije45BKiQnMG3WLgsTetNZpH56tYiBPu9QnqYTzsJI1ig3l1sp26IDXFZbwGNYYtVIajUdj1pqc2TFMCNszou4eb8xwWCPLMOdU5slwJBGAh9SeGSJLtkug-m2paSks4tEdyL2cIljJWM-7QrmiMm13U5ChTZDxOMos8l4KY1wIt8E6YCaUhiPtpxcabKzKG9u1b5qs9qwL9ci2bKgHAZ85tUFxd5krbyDGSLeV_3uYMF0iLBOUxzdRZWMYDh6SHr5HLMHYyLIAz1pc56lqVlCjxpMuA3nC7ntCUp_ZTMB1Ri4bA78DePyJmPw7JQRRCXMxrxp-cCcaGJnEakbrK4r1tSx1mpZtJx2RiZ9at1v0taa4GamonYwEPE45Oww4Y22sSlPXKIzE_VFtLFhX2RlAL8v...	HTTP Parser: No <meta name="copyright".. found
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3d39931C6663A5EF82%26opidt%3d1713942453%26uaid%3dc4c87b039cc74659b3188fb5a3c019f3%26contextid%3d11133D18AA8AB244%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=c4c87b039cc74659b3188fb5a3c019f3&suc=80ccca67-54bd-44ab-8625-4b79c4dc7775&lic=1	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.202.57.177:443 -> 192.168.2.6:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.202.57.177:443 -> 192.168.2.6:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49698 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_Ggyc2EJnCaHFrI6xkBPLcg2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_jHSrlUosdD1xxbmcR_lMNA2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_l2bvdjfwt697xziuhxpwsg2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_7f0a8c2a247460fad87f.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_eb638da25d4055fbbb57.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_presetpasswordsplitter_3c78f555810791db83a9.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/js/reset-password-signinname_en_G9nzWSnqBfHRIaMd4FEm5g2.js HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://account.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/chunks/oneds-analytics-js_54b1724af1b05e2ba3db_en.js HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://account.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/favicon.ico?v=2 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/favicon.ico?v=2 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /converged_ux_v2_nBE5FSqn9KpH44ZlTc3VqQ2.css?v=1 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signup.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jqueryshim_hlu0tTfjWJFWYNt1WZrVqg2.js?v=1 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signup.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /knockout_3.3.0_X1BYS2jZMbi7hfUj8VuqFA2.js?v=1 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signup.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lwsignupstringscountrybirthdate_en-us_gdxUIqa3ijrOefuBnwhTKg2.js?v=1 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signup.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lightweightsignuppackage_9itStK--DdHYjkMJSN7X3A2.js?v=1 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signup.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /datarequestpackage_h-_7C7UzwdefXJT9njDBTQ2.js HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signup.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /oneds_MC5gQfpbTUjLu60sQCwU1w2.js?v=1 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg HTTP/1.1Host: acctcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg HTTP/1.1Host: acctcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: unknown

DNS traffic detected: queries for: www.google.com

Source: unknown

Source: chromecache_117.2.dr	String found in binary or memory: https://fpt.live.com/
Source: chromecache_75.2.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_75.2.dr	String found in binary or memory: https://login.windows-ppe.net

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 23.202.57.177:443 -> 192.168.2.6:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.202.57.177:443 -> 192.168.2.6:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49698 version: TLS 1.2

Source: classification engine

Classification label: clean2.win@20/93@24/7

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2252 --field-trial-handle=2128,i,8466329584062212164,3061137521727942845,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://security.microsoft.com/quarantine?id=97a71014-954b-4feb-794d-08dc6372e303%5C98d07de9-cb26-b9f0-ba1e-09ca04ceb516&recipientAddress=%40ENC%40D9yt9c5hG3%2F4wJDKGc%2FbR3AuhdsaTWJ0Bg22uw1BWgTyTC%2BWm%2FZe7jBqtCP%2FpiaYXc1LB9Cngaxkq7SO1S5t4A%3D%3D"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2252 --field-trial-handle=2128,i,8466329584062212164,3061137521727942845,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next

Source: Window Recorder

Window detected: More than 3 window changes detected

ID:	1430822
Product:	CloudBasic
Start time:	09:06:16
Start date:	24.04.2024
Cookbook:	browseurl.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Windows Analysis Report
https://security.microsoft.com/quarantine?id=97a71014-954b-4feb-794d-08dc6372e303%5C98d07de9-cb26-b9f0-ba1e-09ca04ceb516&recipientAddress=%40ENC%40D9yt9c5hG3%2F4wJDKGc%2FbR3AuhdsaTWJ0Bg22uw1BWgTyTC%2BWm%2FZe7jBqtCP%2FpiaYXc1LB9Cngaxkq7SO1S5t4A%3D%3D

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report https://security.microsoft.com/quarantine?id=97a71014-954b-4feb-794d-08dc6372e303%5C98d07de9-cb26-b9f0-ba1e-09ca04ceb516&recipientAddress=%40ENC%40D9yt9c5hG3%2F4wJDKGc%2FbR3AuhdsaTWJ0Bg22uw1BWgTyTC%2BWm%2FZe7jBqtCP%2FpiaYXc1LB9Cngaxkq7SO1S5t4A%3D%3D

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
https://security.microsoft.com/quarantine?id=97a71014-954b-4feb-794d-08dc6372e303%5C98d07de9-cb26-b9f0-ba1e-09ca04ceb516&recipientAddress=%40ENC%40D9yt9c5hG3%2F4wJDKGc%2FbR3AuhdsaTWJ0Bg22uw1BWgTyTC%2BWm%2FZe7jBqtCP%2FpiaYXc1LB9Cngaxkq7SO1S5t4A%3D%3D