Windows Analysis Report
http://package-microsoft.live

There are no high impact signatures.

Phishing

Source: https://learn.microsoft.com/en-us/windows/package-manager/	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/windows/package-manager/#main	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/windows/	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/windows/release-health/	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/windows-server/	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/windows/iot/	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/windows-insider/	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/windows-365/	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/windows/dev-environment/	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/windows/dev-environment/	HTTP Parser: No favicon
Source: https://learn.microsoft.com/_themes/docs.theme/master/en-us/_themes/global/video-embed.html?id=54e6c532-a86c-4a39-81ab-40e28ce2ba96&locale=en-us&embedUrl=%2Fwindows%2Fdev-environment%2F	HTTP Parser: No favicon
Source: https://learn.microsoft.com/_themes/docs.theme/master/en-us/_themes/global/video-embed.html?id=54e6c532-a86c-4a39-81ab-40e28ce2ba96&locale=en-us&embedUrl=%2Fwindows%2Fdev-environment%2F	HTTP Parser: No favicon
Source: https://learn.microsoft.com/_themes/docs.theme/master/en-us/_themes/global/video-embed.html?id=54e6c532-a86c-4a39-81ab-40e28ce2ba96&locale=en-us&embedUrl=%2Fwindows%2Fdev-environment%2F	HTTP Parser: No favicon
Source: https://learn.microsoft.com/_themes/docs.theme/master/en-us/_themes/global/video-embed.html?id=72ad293b-b7aa-4a78-9111-46eb0e072d7b&locale=en-us&embedUrl=%2Fwindows%2Fdev-environment%2F	HTTP Parser: No favicon
Source: https://learn.microsoft.com/_themes/docs.theme/master/en-us/_themes/global/video-embed.html?id=72ad293b-b7aa-4a78-9111-46eb0e072d7b&locale=en-us&embedUrl=%2Fwindows%2Fdev-environment%2F	HTTP Parser: No favicon
Source: https://learn.microsoft.com/_themes/docs.theme/master/en-us/_themes/global/video-embed.html?id=72ad293b-b7aa-4a78-9111-46eb0e072d7b&locale=en-us&embedUrl=%2Fwindows%2Fdev-environment%2F	HTTP Parser: No favicon
Source: https://learn.microsoft.com/_themes/docs.theme/master/en-us/_themes/global/video-embed.html?show=one-dev-minute&ep=what-are-the-main-features-of-the-new-terminal--one-dev-question	HTTP Parser: No favicon
Source: https://learn.microsoft.com/_themes/docs.theme/master/en-us/_themes/global/video-embed.html?show=one-dev-minute&ep=what-can-i-do-with-wsl--one-dev-question	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/windows/wsl/	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/windows/terminal/	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/windows/terminal/	HTTP Parser: No favicon

Compliance

Source: unknown	HTTPS traffic detected: 23.46.200.91:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.46.200.91:443 -> 192.168.2.4:49752 version: TLS 1.2

Networking

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: package-microsoft.liveConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-3.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: */*Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rest/v1/delivery?client=microsoftmscompoc&sessionId=71fb2f47b0484d84850a549583e27e01&version=2.9.0 HTTP/1.1Host: target.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MSCC=NR; at_check=true; mbox=session#71fb2f47b0484d84850a549583e27e01#1714027001|PC#71fb2f47b0484d84850a549583e27e01.34_0#1748205141
Source: global traffic	HTTP traffic detected: GET /rest/v1/delivery?client=microsoftmscompoc&sessionId=71fb2f47b0484d84850a549583e27e01&version=2.9.0 HTTP/1.1Host: target.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MSCC=NR; at_check=true; MS0=6fa2b837c85544b29140181f1222da91; mbox=session#71fb2f47b0484d84850a549583e27e01#1714027009|PC#71fb2f47b0484d84850a549583e27e01.34_0#1748205149
Source: global traffic	HTTP traffic detected: GET /banner_mslearn_tier1?wt.mc_id=build24_t1_learnpromotion_events HTTP/1.1Host: aka.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.analytics-web-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://build.microsoft.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://build.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: consentdeliveryfd.azurefd.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://build.microsoft.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://build.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mwf/css/bundle/1.57.0/west-european/default/mwf-main.min.css HTTP/1.1Host: mwf.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://build.microsoft.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://build.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mwf/js/bundle/1.57.0/mwf-main.var.min.js HTTP/1.1Host: mwf.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://build.microsoft.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://build.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /meversion?partner=MSMyIgnite&market=en-us&uhf=1 HTTP/1.1Host: mem.gfx.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://build.microsoft.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://build.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://build.microsoft.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://build.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /client/negotiate?hub=signalrhub&negotiateVersion=1 HTTP/1.1Host: build2024-prod-east-us-signalr.service.signalr.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /client/?hub=signalrhub&id=9jlbpRdxBJlSHHUcj3WR6AyHa7qAK02&access_token=eyJhbGciOiJIUzI1NiIsImtpZCI6Ii0xNzI0ODg4NjU2IiwidHlwIjoiSldUIn0.eyJuYmYiOjE3MTQwMjUxNjMsImV4cCI6MTcxNDAyODc2MywiaWF0IjoxNzE0MDI1MTYzLCJhdWQiOiJodHRwczovL2J1aWxkMjAyNC1wcm9kLWVhc3QtdXMtc2lnbmFsci5zZXJ2aWNlLnNpZ25hbHIubmV0L2NsaWVudC8_aHViPXNpZ25hbHJodWIifQ.hX8IwCeAM5RWJvOZomxFMB2UFOiD_a2HKaFo9vjB94E HTTP/1.1Host: build2024-prod-east-us-signalr.service.signalr.netConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://build.microsoft.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: 1gSu1WhE33JGauTXVX7H0w==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /tag/g1ii9elxla HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://build.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rest/v1/delivery?client=microsoftmscompoc&sessionId=71fb2f47b0484d84850a549583e27e01&version=2.9.0 HTTP/1.1Host: target.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MSCC=NR; at_check=true; MS0=6fa2b837c85544b29140181f1222da91; mbox=session#71fb2f47b0484d84850a549583e27e01#1714027028|PC#71fb2f47b0484d84850a549583e27e01.34_0#1748205168
Source: global traffic	HTTP traffic detected: GET /client/negotiate?hub=signalrhub&negotiateVersion=1 HTTP/1.1Host: build2024-prod-east-us-signalr.service.signalr.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /client/?hub=signalrhub&id=XhCLBGvyUjXQWwADQCG2Bg1EK52gK02&access_token=eyJhbGciOiJIUzI1NiIsImtpZCI6Ii0xNzI0ODg4NjU2IiwidHlwIjoiSldUIn0.eyJuYmYiOjE3MTQwMjUxNjMsImV4cCI6MTcxNDAyODc2MywiaWF0IjoxNzE0MDI1MTYzLCJhdWQiOiJodHRwczovL2J1aWxkMjAyNC1wcm9kLWVhc3QtdXMtc2lnbmFsci5zZXJ2aWNlLnNpZ25hbHIubmV0L2NsaWVudC8_aHViPXNpZ25hbHJodWIifQ.hX8IwCeAM5RWJvOZomxFMB2UFOiD_a2HKaFo9vjB94E HTTP/1.1Host: build2024-prod-east-us-signalr.service.signalr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: text/event-streamCache-Control: no-cachesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://build.microsoft.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://build.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/0.7.32/clarity.js HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://build.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /client/?hub=signalrhub&id=XhCLBGvyUjXQWwADQCG2Bg1EK52gK02 HTTP/1.1Host: build2024-prod-east-us-signalr.service.signalr.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /client/?hub=signalrhub&id=XhCLBGvyUjXQWwADQCG2Bg1EK52gK02 HTTP/1.1Host: build2024-prod-east-us-signalr.service.signalr.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /client/?hub=signalrhub&id=XhCLBGvyUjXQWwADQCG2Bg1EK52gK02 HTTP/1.1Host: build2024-prod-east-us-signalr.service.signalr.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rest/v1/delivery?client=microsoftmscompoc&sessionId=71fb2f47b0484d84850a549583e27e01&version=2.9.0 HTTP/1.1Host: target.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MSCC=NR; at_check=true; MS0=6fa2b837c85544b29140181f1222da91; _clck=90bltc%7C2%7Cfl8%7C1%7C1576; _clsk=gi1dkj%7C1714025171105%7C1%7C1%7Ca.clarity.ms%2Fcollect; mbox=session#71fb2f47b0484d84850a549583e27e01#1714027032|PC#71fb2f47b0484d84850a549583e27e01.34_0#1748205172
Source: global traffic	HTTP traffic detected: GET /rest/v1/delivery?client=microsoftmscompoc&sessionId=71fb2f47b0484d84850a549583e27e01&version=2.9.0 HTTP/1.1Host: target.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MSCC=NR; at_check=true; MS0=6fa2b837c85544b29140181f1222da91; _clck=90bltc%7C2%7Cfl8%7C1%7C1576; _clsk=gi1dkj%7C1714025171105%7C1%7C1%7Ca.clarity.ms%2Fcollect; mbox=session#71fb2f47b0484d84850a549583e27e01#1714027037|PC#71fb2f47b0484d84850a549583e27e01.34_0#1748205177
Source: global traffic	HTTP traffic detected: GET /rest/v1/delivery?client=microsoftmscompoc&sessionId=71fb2f47b0484d84850a549583e27e01&version=2.9.0 HTTP/1.1Host: target.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MSCC=NR; at_check=true; MS0=6fa2b837c85544b29140181f1222da91; _clck=90bltc%7C2%7Cfl8%7C1%7C1576; _clsk=gi1dkj%7C1714025171105%7C1%7C1%7Ca.clarity.ms%2Fcollect; mbox=session#71fb2f47b0484d84850a549583e27e01#1714027041|PC#71fb2f47b0484d84850a549583e27e01.34_0#1748205181
Source: global traffic	HTTP traffic detected: GET /rest/v1/delivery?client=microsoftmscompoc&sessionId=71fb2f47b0484d84850a549583e27e01&version=2.9.0 HTTP/1.1Host: target.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MSCC=NR; at_check=true; MS0=6fa2b837c85544b29140181f1222da91; _clck=90bltc%7C2%7Cfl8%7C1%7C1576; _clsk=gi1dkj%7C1714025171105%7C1%7C1%7Ca.clarity.ms%2Fcollect; mbox=session#71fb2f47b0484d84850a549583e27e01#1714027044|PC#71fb2f47b0484d84850a549583e27e01.34_0#1748205181
Source: global traffic	HTTP traffic detected: GET /rest/v1/delivery?client=microsoftmscompoc&sessionId=71fb2f47b0484d84850a549583e27e01&version=2.9.0 HTTP/1.1Host: target.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MSCC=NR; at_check=true; MS0=6fa2b837c85544b29140181f1222da91; _clck=90bltc%7C2%7Cfl8%7C1%7C1576; _clsk=gi1dkj%7C1714025171105%7C1%7C1%7Ca.clarity.ms%2Fcollect; mbox=session#71fb2f47b0484d84850a549583e27e01#1714027046|PC#71fb2f47b0484d84850a549583e27e01.34_0#1748205184
Source: global traffic	HTTP traffic detected: GET /client/?hub=signalrhub&id=XhCLBGvyUjXQWwADQCG2Bg1EK52gK02 HTTP/1.1Host: build2024-prod-east-us-signalr.service.signalr.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rest/v1/delivery?client=microsoftmscompoc&sessionId=71fb2f47b0484d84850a549583e27e01&version=2.9.0 HTTP/1.1Host: target.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MSCC=NR; at_check=true; MS0=6fa2b837c85544b29140181f1222da91; _clck=90bltc%7C2%7Cfl8%7C1%7C1576; _clsk=gi1dkj%7C1714025171105%7C1%7C1%7Ca.clarity.ms%2Fcollect; mbox=session#71fb2f47b0484d84850a549583e27e01#1714027048|PC#71fb2f47b0484d84850a549583e27e01.34_0#1748205187
Source: global traffic	HTTP traffic detected: GET /vod/player?id=54e6c532-a86c-4a39-81ab-40e28ce2ba96&locale=en-us&embedUrl=%2Fwindows%2Fdev-environment%2F HTTP/1.1Host: learn-video.azurefd.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vod/player?id=72ad293b-b7aa-4a78-9111-46eb0e072d7b&locale=en-us&embedUrl=%2Fwindows%2Fdev-environment%2F HTTP/1.1Host: learn-video.azurefd.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rest/v1/delivery?client=microsoftmscompoc&sessionId=71fb2f47b0484d84850a549583e27e01&version=2.9.0 HTTP/1.1Host: target.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MSCC=NR; at_check=true; MS0=6fa2b837c85544b29140181f1222da91; _clck=90bltc%7C2%7Cfl8%7C1%7C1576; _clsk=gi1dkj%7C1714025171105%7C1%7C1%7Ca.clarity.ms%2Fcollect; mbox=session#71fb2f47b0484d84850a549583e27e01#1714027051|PC#71fb2f47b0484d84850a549583e27e01.34_0#1748205191
Source: global traffic	HTTP traffic detected: GET /docs/player?show=one-dev-minute&ep=what-can-i-do-with-wsl--one-dev-question HTTP/1.1Host: aka.msConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /docs/player?show=one-dev-minute&ep=what-are-the-main-features-of-the-new-terminal--one-dev-question HTTP/1.1Host: aka.msConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vod/player?show=one-dev-minute&ep=what-are-the-main-features-of-the-new-terminal--one-dev-question HTTP/1.1Host: learn-video.azurefd.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vod/player?show=one-dev-minute&ep=what-can-i-do-with-wsl--one-dev-question HTTP/1.1Host: learn-video.azurefd.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rest/v1/delivery?client=microsoftmscompoc&sessionId=71fb2f47b0484d84850a549583e27e01&version=2.9.0 HTTP/1.1Host: target.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MSCC=NR; at_check=true; MS0=6fa2b837c85544b29140181f1222da91; _clck=90bltc%7C2%7Cfl8%7C1%7C1576; _clsk=gi1dkj%7C1714025171105%7C1%7C1%7Ca.clarity.ms%2Fcollect; mbox=session#71fb2f47b0484d84850a549583e27e01#1714027061|PC#71fb2f47b0484d84850a549583e27e01.34_0#1748205201
Source: global traffic	HTTP traffic detected: GET /client/?hub=signalrhub&id=XhCLBGvyUjXQWwADQCG2Bg1EK52gK02 HTTP/1.1Host: build2024-prod-east-us-signalr.service.signalr.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rest/v1/delivery?client=microsoftmscompoc&sessionId=71fb2f47b0484d84850a549583e27e01&version=2.9.0 HTTP/1.1Host: target.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MSCC=NR; at_check=true; MS0=6fa2b837c85544b29140181f1222da91; _clck=90bltc%7C2%7Cfl8%7C1%7C1576; _clsk=gi1dkj%7C1714025171105%7C1%7C1%7Ca.clarity.ms%2Fcollect; mbox=session#71fb2f47b0484d84850a549583e27e01#1714027065|PC#71fb2f47b0484d84850a549583e27e01.34_0#1748205205
Source: global traffic	HTTP traffic detected: GET /client/?hub=signalrhub&id=XhCLBGvyUjXQWwADQCG2Bg1EK52gK02 HTTP/1.1Host: build2024-prod-east-us-signalr.service.signalr.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: package-microsoft.liveConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_459.2.dr	String found in binary or memory: href="https://www.linkedin.com/cws/share?url=${encodeURIComponent(e)}&text=${encodeURIComponent(dS.replace("{credentialName}",t.title))}" equals www.linkedin.com (Linkedin)
Source: chromecache_459.2.dr	String found in binary or memory: href="https://www.facebook.com/sharer/sharer.php?u=${s}" equals www.facebook.com (Facebook)
Source: chromecache_459.2.dr	String found in binary or memory: href="https://www.linkedin.com/cws/share?url=${s}" equals www.linkedin.com (Linkedin)
Source: chromecache_459.2.dr	String found in binary or memory: </div>`;w(e,t)}}function kA(t){x.documentElement.classList.add("api-search-has-results");for(let{container:e}of vy)e.textContent=t}function Xne(){x.documentElement.classList.remove("api-search-has-results");for(let{container:t}of vy)t.innerHTML=""}function iEe(t,e){let o=dt(),n,r;if(o==="")n=_r[Rt].displayName,r=null;else{let a=e.packagesByMoniker[o];n=a.product.displayName,r=a.versionDisplayName}let s=x.createElement("h2");s.classList.add("api-search-results-heading","font-size-h3");let i=m`${EA.resultsHeadingTemplate.replace("{platformName}",n)}`;if(w(i,s),r!==null&&Rt==="rest"){let a=m`${ee(`${Oe(o)} REST ${EA.resultsHeadingTemplate.replace("{platformName}",n)}`)}`;w(a,s)}else if(r!==null){let a=m`${ee(`${EA.resultsHeadingTemplate.replace("{platformName}",n)} <span class="moniker-version">version ${Oe(r)}</span>`)}`;w(a,s)}t.appendChild(s)}function o1(t,e){if(e!==""&&!/[?&]view=/i.test(t)){let[n,r]=t.split("#");r=r===void 0?"":"#"+r,t=Rt==="rest"?`${n}${r}`:`${n}?view=${encodeURIComponent(e)}${r}`}let o=new URL(t,location.origin);return t=`${o.pathname}${o.search}${o.hash}`,Rt!=="rest"&&(t=`/${_.data.userLocale}${t}`),t}var fm="api-search-term-changed",Ch="";function gm(){return Ch}function n1(t){t=t.trim(),t!==Ch&&(Ch=t,_.data.pageTemplate==="ApiBrowserPage"&&Mt({term:Ch},"pushState"),window.dispatchEvent(new CustomEvent(fm,{detail:{term:Ch}})))}function Zne(){let t=oe().term;return t===void 0?"":t.trim()}_.data.pageTemplate==="ApiBrowserPage"&&(Ch=Zne(),window.addEventListener("popstate",()=>n1(Zne())));function ere(){q.addEventListener(fm,r1),q.addEventListener(Mr,r1),_.data.pageTemplate==="ApiBrowserPage"&&r1()}var AA="";function r1(){let t=gm(),e=dt(),o=`${t}/${e}`;return o===AA?Promise.resolve():(AA=o,_.data.pageTemplate==="ApiBrowserPage"&&e!==""&&t===""?(t1(),Promise.all([Wne(Rt,e,_.data.userLocale),il()]).then(([n,r])=>{if(o===AA){if(n.apiItems.length===0){kA(Xo);return}CA(r,n.apiItems,null)}},()=>{kA(TP)})):t.length<3?(Xne(),Promise.resolve()):_r[Rt].validSearchTerm.test(t)?(t1(),Promise.all([wA(Rt,e,t,_.data.userLocale),il()]).then(([n,r])=>{o===AA&&(s1(e,t,n.results.length),CA(r,n.results,n["@nextLink"]))},()=>{kA(TP)})):il().then(n=>CA(n,[],null)))}function s1(t,e,o){Ge({actionType:He.OTHER,behavior:Ee.SEARCH,content:{event:"api-browser-search",platform:Rt,moniker:t,term:e,results:o}})}var tre="api-search-field";function ore(){let t=x.createElement("form");t.classList.add(tre,"margin-top-xxs"),t.setAttribute(To.name,tre),t.action="javascript:",t.addEventListener("submit",l=>l.preventDefault());let e=x.createElement("label"),o=x.createElement("span");o.classList.add("visually-hidden"),o.textContent=mo,e.appendChild(o),t.appendChild(e);let n=x.createElement("input");n.type="search",n.classList.add("input","input-lg","padding-right-sm"),n.value=gm(),n.placeholder=mo,e.appendChild(n);let r=x.createElement("a");r.href="#",r.title=_2,r.classList.add("clear"),r.addEventListener("click",l=>{l.preventDefault(),n.value="",n.dispatchEvent(
Source: chromecache_459.2.dr	String found in binary or memory: </div>`;w(e,t)}}function kA(t){x.documentElement.classList.add("api-search-has-results");for(let{container:e}of vy)e.textContent=t}function Xne(){x.documentElement.classList.remove("api-search-has-results");for(let{container:t}of vy)t.innerHTML=""}function iEe(t,e){let o=dt(),n,r;if(o==="")n=_r[Rt].displayName,r=null;else{let a=e.packagesByMoniker[o];n=a.product.displayName,r=a.versionDisplayName}let s=x.createElement("h2");s.classList.add("api-search-results-heading","font-size-h3");let i=m`${EA.resultsHeadingTemplate.replace("{platformName}",n)}`;if(w(i,s),r!==null&&Rt==="rest"){let a=m`${ee(`${Oe(o)} REST ${EA.resultsHeadingTemplate.replace("{platformName}",n)}`)}`;w(a,s)}else if(r!==null){let a=m`${ee(`${EA.resultsHeadingTemplate.replace("{platformName}",n)} <span class="moniker-version">version ${Oe(r)}</span>`)}`;w(a,s)}t.appendChild(s)}function o1(t,e){if(e!==""&&!/[?&]view=/i.test(t)){let[n,r]=t.split("#");r=r===void 0?"":"#"+r,t=Rt==="rest"?`${n}${r}`:`${n}?view=${encodeURIComponent(e)}${r}`}let o=new URL(t,location.origin);return t=`${o.pathname}${o.search}${o.hash}`,Rt!=="rest"&&(t=`/${_.data.userLocale}${t}`),t}var fm="api-search-term-changed",Ch="";function gm(){return Ch}function n1(t){t=t.trim(),t!==Ch&&(Ch=t,_.data.pageTemplate==="ApiBrowserPage"&&Mt({term:Ch},"pushState"),window.dispatchEvent(new CustomEvent(fm,{detail:{term:Ch}})))}function Zne(){let t=oe().term;return t===void 0?"":t.trim()}_.data.pageTemplate==="ApiBrowserPage"&&(Ch=Zne(),window.addEventListener("popstate",()=>n1(Zne())));function ere(){q.addEventListener(fm,r1),q.addEventListener(Mr,r1),_.data.pageTemplate==="ApiBrowserPage"&&r1()}var AA="";function r1(){let t=gm(),e=dt(),o=`${t}/${e}`;return o===AA?Promise.resolve():(AA=o,_.data.pageTemplate==="ApiBrowserPage"&&e!==""&&t===""?(t1(),Promise.all([Wne(Rt,e,_.data.userLocale),il()]).then(([n,r])=>{if(o===AA){if(n.apiItems.length===0){kA(Xo);return}CA(r,n.apiItems,null)}},()=>{kA(TP)})):t.length<3?(Xne(),Promise.resolve()):_r[Rt].validSearchTerm.test(t)?(t1(),Promise.all([wA(Rt,e,t,_.data.userLocale),il()]).then(([n,r])=>{o===AA&&(s1(e,t,n.results.length),CA(r,n.results,n["@nextLink"]))},()=>{kA(TP)})):il().then(n=>CA(n,[],null)))}function s1(t,e,o){Ge({actionType:He.OTHER,behavior:Ee.SEARCH,content:{event:"api-browser-search",platform:Rt,moniker:t,term:e,results:o}})}var tre="api-search-field";function ore(){let t=x.createElement("form");t.classList.add(tre,"margin-top-xxs"),t.setAttribute(To.name,tre),t.action="javascript:",t.addEventListener("submit",l=>l.preventDefault());let e=x.createElement("label"),o=x.createElement("span");o.classList.add("visually-hidden"),o.textContent=mo,e.appendChild(o),t.appendChild(e);let n=x.createElement("input");n.type="search",n.classList.add("input","input-lg","padding-right-sm"),n.value=gm(),n.placeholder=mo,e.appendChild(n);let r=x.createElement("a");r.href="#",r.title=_2,r.classList.add("clear"),r.addEventListener("click",l=>{l.preventDefault(),n.value="",n.dispatchEvent(
Source: chromecache_459.2.dr	String found in binary or memory: </div>`;w(e,t)}}function kA(t){x.documentElement.classList.add("api-search-has-results");for(let{container:e}of vy)e.textContent=t}function Xne(){x.documentElement.classList.remove("api-search-has-results");for(let{container:t}of vy)t.innerHTML=""}function iEe(t,e){let o=dt(),n,r;if(o==="")n=_r[Rt].displayName,r=null;else{let a=e.packagesByMoniker[o];n=a.product.displayName,r=a.versionDisplayName}let s=x.createElement("h2");s.classList.add("api-search-results-heading","font-size-h3");let i=m`${EA.resultsHeadingTemplate.replace("{platformName}",n)}`;if(w(i,s),r!==null&&Rt==="rest"){let a=m`${ee(`${Oe(o)} REST ${EA.resultsHeadingTemplate.replace("{platformName}",n)}`)}`;w(a,s)}else if(r!==null){let a=m`${ee(`${EA.resultsHeadingTemplate.replace("{platformName}",n)} <span class="moniker-version">version ${Oe(r)}</span>`)}`;w(a,s)}t.appendChild(s)}function o1(t,e){if(e!==""&&!/[?&]view=/i.test(t)){let[n,r]=t.split("#");r=r===void 0?"":"#"+r,t=Rt==="rest"?`${n}${r}`:`${n}?view=${encodeURIComponent(e)}${r}`}let o=new URL(t,location.origin);return t=`${o.pathname}${o.search}${o.hash}`,Rt!=="rest"&&(t=`/${_.data.userLocale}${t}`),t}var fm="api-search-term-changed",Ch="";function gm(){return Ch}function n1(t){t=t.trim(),t!==Ch&&(Ch=t,_.data.pageTemplate==="ApiBrowserPage"&&Mt({term:Ch},"pushState"),window.dispatchEvent(new CustomEvent(fm,{detail:{term:Ch}})))}function Zne(){let t=oe().term;return t===void 0?"":t.trim()}_.data.pageTemplate==="ApiBrowserPage"&&(Ch=Zne(),window.addEventListener("popstate",()=>n1(Zne())));function ere(){q.addEventListener(fm,r1),q.addEventListener(Mr,r1),_.data.pageTemplate==="ApiBrowserPage"&&r1()}var AA="";function r1(){let t=gm(),e=dt(),o=`${t}/${e}`;return o===AA?Promise.resolve():(AA=o,_.data.pageTemplate==="ApiBrowserPage"&&e!==""&&t===""?(t1(),Promise.all([Wne(Rt,e,_.data.userLocale),il()]).then(([n,r])=>{if(o===AA){if(n.apiItems.length===0){kA(Xo);return}CA(r,n.apiItems,null)}},()=>{kA(TP)})):t.length<3?(Xne(),Promise.resolve()):_r[Rt].validSearchTerm.test(t)?(t1(),Promise.all([wA(Rt,e,t,_.data.userLocale),il()]).then(([n,r])=>{o===AA&&(s1(e,t,n.results.length),CA(r,n.results,n["@nextLink"]))},()=>{kA(TP)})):il().then(n=>CA(n,[],null)))}function s1(t,e,o){Ge({actionType:He.OTHER,behavior:Ee.SEARCH,content:{event:"api-browser-search",platform:Rt,moniker:t,term:e,results:o}})}var tre="api-search-field";function ore(){let t=x.createElement("form");t.classList.add(tre,"margin-top-xxs"),t.setAttribute(To.name,tre),t.action="javascript:",t.addEventListener("submit",l=>l.preventDefault());let e=x.createElement("label"),o=x.createElement("span");o.classList.add("visually-hidden"),o.textContent=mo,e.appendChild(o),t.appendChild(e);let n=x.createElement("input");n.type="search",n.classList.add("input","input-lg","padding-right-sm"),n.value=gm(),n.placeholder=mo,e.appendChild(n);let r=x.createElement("a");r.href="#",r.title=_2,r.classList.add("clear"),r.addEventListener("click",l=>{l.preventDefault(),n.value="",n.dispatchEvent(
Source: chromecache_459.2.dr	String found in binary or memory: </div>`}function gCe(t){return t.authenticationModes?t.authenticationModes.map(e=>e.type).includes("MSA"):!1}function hCe(t){let e=t.authenticationModes.find(o=>o.type==="MSA");return e?e.upn:null}function bCe(t){let e=t.authenticationModes.find(o=>o.type==="AAD");return e?e.upn:null}function _Ce(t,e,o){return e??(Qt(t.email)?o:t.email)??""}function $re(t){let e=gCe(t),o=e?hCe(t):null,n=e?null:bCe(t),r=_Ce(t,o,n);return[e,r]}function vCe(t,e){let[o,n]=$re(e);if(o){let i=t.querySelector("#report-msa-email-account");i.innerText=n}let r=t.querySelector("#opt-into-email-checkbox"),s=t.querySelector("#submitter-info");r.addEventListener("change",()=>{r.checked?s.hidden=!1:s.hidden=!0})}function yCe(t){if(!t)return;let e=t.querySelector("#select-reason"),o=t.querySelector("#other-reason-textarea-container"),n=o.querySelector("textarea");!e||!o||!n||(e.value==="Other"&&(o.hidden=!1,n.required=!0),e.addEventListener("change",()=>{e.value==="Other"||e.value==="14"?(o.hidden=!1,n.required=!0,n.disabled=!1):(o.hidden=!0,n.required=!1,n.disabled=!0)}))}var oo;function Nre(){let t=document.getElementById("share-to-linkedin-profile");t&&t.addEventListener("click",e=>{let o=e.currentTarget,n=JSON.parse(o.dataset.credential),r=document.createElement("div"),s=xCe(n);w(s,r),oo=new Se(r),oo.show();let i=document.getElementById("share-to-feed-button"),a=document.getElementById("linkedin-feed-message"),l=new URL(decodeURI(i.getAttribute("href")));a.onchange=()=>{l.searchParams.set("text",a.value),i.setAttribute("href",l.toString())}})}function xCe(t){let e=encodeURI(`https://${location.host}/api/credentials/share/${_.data.userLocale}/${R.userName}/${t?.credentialId}?sharingId=${R.sharingId}`),o=1035,n=i=>new Date(i).getFullYear(),r=i=>new Date(i).getMonth()+1,s=encodeURI(`https://www.linkedin.com/profile/add?startTask=CERTIFICATION_NAME&name=${t.title}&organizationId=${o}&issueYear=${n(t.awardedOn)}&issueMonth=${r(t.awardedOn)}&expirationYear=${t.expiresOn?n(t.expiresOn):""}&expirationMonth=${t.expiresOn?r(t.expiresOn):""}&certUrl=${e}&certId=${t.credentialId}&skills=${t.skills?`${t.skills.map(i=>encodeURIComponent(i)).join(",")}`:""}`);return m` equals www.linkedin.com (Linkedin)
Source: chromecache_334.2.dr	String found in binary or memory: "//www.linkedin.com/shareArticle?mini=true&url=" + equals www.linkedin.com (Linkedin)
Source: chromecache_334.2.dr	String found in binary or memory: url: "//www.facebook.com/share.php?u=" + h, equals www.facebook.com (Facebook)
Source: chromecache_603.2.dr, chromecache_486.2.dr	String found in binary or memory: "youTubeUrl": "https://www.youtube.com/watch?v=FCfwc-NNo30" equals www.youtube.com (Youtube)
Source: chromecache_616.2.dr	String found in binary or memory: "youTubeUrl": "https://www.youtube.com/watch?v=bC-60KNgLuE" equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=63wVlI9B3Ac&amp;t=45s" data-linktype="external">How WSL accesses Linux files from Windows</a> | Deep dive (24:59)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=75JBKfAqH3I" data-linktype="external">I'm a Linux developer. Why should I use WSL?</a> | One Dev Question (1:04)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=AfhDwVASD2c" data-linktype="external">In WSL, can I use distros other than the ones in the Microsoft Store?</a> | One Dev Question (1:03)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=I2jOuLU4o8E" data-linktype="external">WSL 2: Connect USB devices</a> | Tabs vs Spaces (10:08)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=JuJ_Nx_bFEM" data-linktype="external">How is WSL integrated with Windows?</a> | One Dev Question (1:34)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=K9GPOHrZgr4" data-linktype="external">New memory reclaim feature in WSL 2</a> | Demo (6:01)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=MrZolfGm8Zk&amp;t=3s" data-linktype="external">WSL2: Code faster on the Windows Subsystem for Linux!</a> | Tabs vs Spaces (13:42)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=NYGMY9c90Oo" data-linktype="external">What is the Windows Subsystem for Linux (WSL)?</a> | One Dev Question (0:40)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=OeomwrHLAR4" data-linktype="external">Why would I want to use Linux tools on Windows?</a> | One Dev Question (1:20)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=PdxXlZJiuxA" data-linktype="external">GPU Accelerated Machine Learning with WSL 2</a> | Tabs vs Spaces (16:28)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=UMQ5GQix0rs" data-linktype="external">How is WSL different than a virtual machine or dual booting?</a> | One Dev Question</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=UxWN1BBr1bM" data-linktype="external">Web development on Windows (in 2019)</a> | Demo (10:39)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=WnzKfwL3Iy0" data-linktype="external">What is a Linux distro?</a> | One Dev Question (1:04)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=XkLjxr9iQ-8&amp;t=1s" data-linktype="external">Visual Studio Code: Remote Dev with SSH, VMs, and WSL</a> | Tabs vs Spaces (29:33)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=b9I7NZHni5c" data-linktype="external">Why was the Windows Subsystem for Linux created?</a> | One Dev Question (1:14)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=jx5I-8_arqM" data-linktype="external">What is Linux?</a> | One Dev Question (1:31)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=kC3eWRPzeWw" data-linktype="external">WSL: Run Linux GUI Apps</a> | Tabs vs Spaces (17:16)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=kCB3gO32SPs" data-linktype="external">WSL and Linux Distributions equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=lOXatmtBb88" data-linktype="external">Build Node.JS apps with WSL</a> | Highlight (3:15)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=lwhMThePdIo" data-linktype="external">Windows subsystem for Linux architecture: a deep dive</a> | Build 2019 (58:10)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=m5tt9mDRPSw" data-linktype="external">Windows Dev Tool Updates: WSL, Terminal, Package Manager, and more</a> | Tabs vs Spaces (20:46)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=n1YSFT5VK-Y" data-linktype="external">How do I configure a WSL distro to launch in the home directory in Terminal?</a> | One Dev Question (0:47)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=pNwatyeXplY" data-linktype="external">WSL on Windows 11 - Demos with Craig Loewen and Scott Hanselman</a>| Windows Wednesday (35:48)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=sqdHy1rC2t4" data-linktype="external">I'm a Windows developer. Why should I use WSL? |</a> One Dev Question (0:58)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=teI6WA48_Rg" data-linktype="external">Can I use WSL for scripting?</a> | One Dev Question (1:04)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=uO_F5W2LbSk" data-linktype="external">Customize your terminal with Oh My Posh and WSL Linux distros</a> | Windows Wednesday (33:14)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=uUaFNRRS9yo&amp;t=2s" data-linktype="external">How do I access files on my computer in WSL?</a> | One Dev Question (1:41)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=ySS8Re6LDTQ" data-linktype="external">Web dev Sarah Tamsin and Craig Loewen chat about web development, content creation, and WSL</a> | Dev Perspectives (12:22)</li> equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: package-microsoft.live
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: mscom.demdex.net
Source: global traffic	DNS traffic detected: DNS query: microsoftmscompoc.tt.omtrdc.net
Source: global traffic	DNS traffic detected: DNS query: mdec.nelreports.net
Source: global traffic	DNS traffic detected: DNS query: aka.ms
Source: global traffic	DNS traffic detected: DNS query: consentdeliveryfd.azurefd.net
Source: global traffic	DNS traffic detected: DNS query: mem.gfx.ms
Source: global traffic	DNS traffic detected: DNS query: dc.services.visualstudio.com
Source: global traffic	DNS traffic detected: DNS query: msfteventsb2c.b2clogin.com
Source: global traffic	DNS traffic detected: DNS query: assets.onestore.ms
Source: global traffic	DNS traffic detected: DNS query: ajax.aspnetcdn.com
Source: global traffic	DNS traffic detected: DNS query: c.s-microsoft.com
Source: global traffic	DNS traffic detected: DNS query: build2024-prod-east-us-signalr-function.azurewebsites.net
Source: global traffic	DNS traffic detected: DNS query: build2024-prod-east-us-signalr.service.signalr.net
Source: global traffic	DNS traffic detected: DNS query: www.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: a.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: learn-video.azurefd.net
Source: global traffic	DNS traffic detected: DNS query: microsoftwindows.112.2o7.net
Source: global traffic	DNS traffic detected: DNS query: amp.azure.net

Source: unknown

HTTP traffic detected: POST /rest/v1/delivery?client=microsoftmscompoc&sessionId=71fb2f47b0484d84850a549583e27e01&version=2.9.0 HTTP/1.1Host: target.microsoft.comConnection: keep-aliveContent-Length: 995sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: */*Origin: https://learn.microsoft.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MSCC=NR; at_check=true; mbox=session#71fb2f47b0484d84850a549583e27e01#1714027000

Source: chromecache_579.2.dr	String found in binary or memory: http://dojofoundation.org/
Source: chromecache_579.2.dr	String found in binary or memory: http://ecma-international.org/ecma-262/6.0/#sec-number.max_safe_integer)
Source: chromecache_579.2.dr	String found in binary or memory: http://ecma-international.org/ecma-262/6.0/#sec-object.keys)
Source: chromecache_579.2.dr	String found in binary or memory: http://ecma-international.org/ecma-262/6.0/#sec-object.prototype.tostring)
Source: chromecache_579.2.dr	String found in binary or memory: http://ecma-international.org/ecma-262/6.0/#sec-tolength).
Source: chromecache_439.2.dr, chromecache_579.2.dr, chromecache_453.2.dr	String found in binary or memory: http://feross.org
Source: chromecache_393.2.dr	String found in binary or memory: http://github.com/aFarkas/lazysizes
Source: chromecache_551.2.dr	String found in binary or memory: http://github.com/requirejs/almond/LICENSE
Source: chromecache_529.2.dr	String found in binary or memory: http://github.com/requirejs/domReady
Source: chromecache_529.2.dr	String found in binary or memory: http://github.com/requirejs/requirejs/LICENSE
Source: chromecache_296.2.dr	String found in binary or memory: http://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RWHRNu?ver=6a9c
Source: chromecache_579.2.dr	String found in binary or memory: http://jsperf.com/arraybuffer-to-string-apply-performance/2
Source: chromecache_579.2.dr	String found in binary or memory: http://jsperf.com/converting-a-uint8array-to-a-string/2
Source: chromecache_448.2.dr, chromecache_459.2.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_448.2.dr, chromecache_459.2.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_448.2.dr, chromecache_459.2.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_448.2.dr, chromecache_459.2.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_311.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_626.2.dr, chromecache_673.2.dr, chromecache_547.2.dr, chromecache_481.2.dr, chromecache_407.2.dr, chromecache_470.2.dr, chromecache_336.2.dr	String found in binary or memory: http://schema.org/Organization
Source: chromecache_579.2.dr	String found in binary or memory: http://seclists.org/fulldisclosure/2009/Sep/394
Source: chromecache_579.2.dr	String found in binary or memory: http://stuk.github.io/jszip/documentation/howto/read_zip.html
Source: chromecache_579.2.dr	String found in binary or memory: http://underscorejs.org/LICENSE
Source: chromecache_579.2.dr	String found in binary or memory: http://unix.stackexchange.com/questions/14705/the-zip-formats-external-file-attribute
Source: chromecache_579.2.dr	String found in binary or memory: http://wonko.com/post/html-escaping)
Source: chromecache_328.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_579.2.dr	String found in binary or memory: http://www.delorie.com/djgpp/doc/rbinter/it/52/13.html
Source: chromecache_579.2.dr	String found in binary or memory: http://www.delorie.com/djgpp/doc/rbinter/it/65/16.html
Source: chromecache_579.2.dr	String found in binary or memory: http://www.delorie.com/djgpp/doc/rbinter/it/66/16.html
Source: chromecache_579.2.dr	String found in binary or memory: http://www.ecma-international.org/publications/files/ECMA-ST/ECMA-262.pdf
Source: chromecache_644.2.dr, chromecache_467.2.dr	String found in binary or memory: http://www.gimp.org/xmp/
Source: chromecache_579.2.dr	String found in binary or memory: http://www.info-zip.org/FAQ.html#backslashes
Source: chromecache_439.2.dr, chromecache_453.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_260.2.dr, chromecache_424.2.dr, chromecache_451.2.dr, chromecache_585.2.dr	String found in binary or memory: http://www.videolan.org/x264.html
Source: chromecache_579.2.dr	String found in binary or memory: http://www.webtoolkit.info/
Source: chromecache_579.2.dr	String found in binary or memory: http://zlib.net/manual.html#Advanced
Source: chromecache_579.2.dr	String found in binary or memory: http://zlib.net/manual.html#Advanced)
Source: chromecache_336.2.dr	String found in binary or memory: https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.9.1.min.js
Source: chromecache_470.2.dr	String found in binary or memory: https://aka.ms/ContentUserFeedback
Source: chromecache_481.2.dr	String found in binary or memory: https://aka.ms/How-To-Get-Windows-11
Source: chromecache_673.2.dr	String found in binary or memory: https://aka.ms/PluginsForWindows
Source: chromecache_481.2.dr	String found in binary or memory: https://aka.ms/W10/how-to-get-22H2
Source: chromecache_481.2.dr	String found in binary or memory: https://aka.ms/W11/how-to-get-22H2
Source: chromecache_481.2.dr	String found in binary or memory: https://aka.ms/Win10UpdateSize
Source: chromecache_459.2.dr	String found in binary or memory: https://aka.ms/banner_mslearn_tier1?wt.mc_id=build24_t1_learnpromotion_events
Source: chromecache_459.2.dr	String found in binary or memory: https://aka.ms/certhelp
Source: chromecache_673.2.dr	String found in binary or memory: https://aka.ms/devhome
Source: chromecache_481.2.dr	String found in binary or memory: https://aka.ms/how-to-get-23H2
Source: chromecache_459.2.dr	String found in binary or memory: https://aka.ms/pshelpmechoose
Source: chromecache_311.2.dr	String found in binary or memory: https://aka.ms/terminal
Source: chromecache_311.2.dr	String found in binary or memory: https://aka.ms/terminal-preview
Source: chromecache_481.2.dr	String found in binary or memory: https://aka.ms/windows/officehours
Source: chromecache_481.2.dr	String found in binary or memory: https://aka.ms/wrh/other-versions
Source: chromecache_311.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_626.2.dr, chromecache_673.2.dr, chromecache_547.2.dr, chromecache_481.2.dr, chromecache_407.2.dr, chromecache_470.2.dr	String found in binary or memory: https://aka.ms/yourcaliforniaprivacychoices
Source: chromecache_505.2.dr	String found in binary or memory: https://assets.onestore.ms
Source: chromecache_336.2.dr	String found in binary or memory: https://assets.onestore.ms/cdnfiles/external/mwf/long/v1/v1.25.0/css/mwf-west-european-default.min.c
Source: chromecache_311.2.dr, chromecache_673.2.dr, chromecache_547.2.dr, chromecache_481.2.dr, chromecache_470.2.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/43b2e5aa-8a6d-4de2-a252-692232e5edc8
Source: chromecache_311.2.dr, chromecache_673.2.dr, chromecache_547.2.dr, chromecache_481.2.dr, chromecache_470.2.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/bcbcbad5-4208-4783-8035-8481272c98b8
Source: chromecache_336.2.dr	String found in binary or memory: https://az725175.vo.msecnd.net/scripts/jsll-4.js
Source: chromecache_459.2.dr	String found in binary or memory: https://aznb-ame-prod.azureedge.net/component/$
Source: chromecache_673.2.dr	String found in binary or memory: https://blogs.windows.com/windowsdeveloper/2023/05/23/bringing-the-power-of-ai-to-windows-11-unlocki
Source: chromecache_481.2.dr	String found in binary or memory: https://blogs.windows.com/windowsexperience/2024/02/29/microsoft-copilot-improvements-for-windows-11
Source: chromecache_481.2.dr	String found in binary or memory: https://blogs.windows.com/windowsexperience/?p=176473
Source: chromecache_481.2.dr	String found in binary or memory: https://blogs.windows.com/windowsexperience/?p=178424
Source: chromecache_579.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=142792)
Source: chromecache_579.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=695438.
Source: chromecache_459.2.dr	String found in binary or memory: https://channel9.msdn.com/
Source: chromecache_311.2.dr	String found in binary or memory: https://channel9.msdn.com/Blogs/One-Dev-Minute/What-is-a-command-line-shell--One-Dev-Question
Source: chromecache_579.2.dr	String found in binary or memory: https://code.google.com/p/v8/issues/detail?id=2291
Source: chromecache_673.2.dr	String found in binary or memory: https://code.visualstudio.com/docs
Source: chromecache_673.2.dr	String found in binary or memory: https://code.visualstudio.com/download
Source: chromecache_347.2.dr	String found in binary or memory: https://consentdeliveryfd.azurefd.net/mscc/lib/v2/wcp-consent.js
Source: chromecache_579.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/JavaScript/Reference/Operators/Bitwise_Operators
Source: chromecache_579.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Functions/rest_parameters).
Source: chromecache_323.2.dr	String found in binary or memory: https://dummyimage.com/1083x190
Source: chromecache_323.2.dr	String found in binary or memory: https://dummyimage.com/1920x250
Source: chromecache_323.2.dr	String found in binary or memory: https://dummyimage.com/539x190
Source: chromecache_579.2.dr	String found in binary or memory: https://es5.github.io/#x8)
Source: chromecache_301.2.dr	String found in binary or memory: https://ezgif.com/optimize
Source: chromecache_459.2.dr	String found in binary or memory: https://github.com/$
Source: chromecache_311.2.dr, chromecache_673.2.dr, chromecache_470.2.dr	String found in binary or memory: https://github.com//issues
Source: chromecache_673.2.dr	String found in binary or memory: https://github.com/Blake-Madden
Source: chromecache_547.2.dr, chromecache_470.2.dr	String found in binary or memory: https://github.com/DCtheGeek
Source: chromecache_547.2.dr	String found in binary or memory: https://github.com/DaniHalfin
Source: chromecache_547.2.dr	String found in binary or memory: https://github.com/KarenYin01
Source: chromecache_470.2.dr	String found in binary or memory: https://github.com/Microsoft/WSL/issues
Source: chromecache_311.2.dr, chromecache_546.2.dr, chromecache_553.2.dr, chromecache_403.2.dr	String found in binary or memory: https://github.com/Microsoft/terminal/issues
Source: chromecache_470.2.dr	String found in binary or memory: https://github.com/MicrosoftDocs/WSL/blob/b9c9ed43e292d366dd059a530c3423e839f04353/WSL/index.md
Source: chromecache_470.2.dr	String found in binary or memory: https://github.com/MicrosoftDocs/WSL/blob/live/WSL/index.md
Source: chromecache_470.2.dr	String found in binary or memory: https://github.com/MicrosoftDocs/WSL/issues
Source: chromecache_333.2.dr, chromecache_412.2.dr, chromecache_626.2.dr, chromecache_407.2.dr	String found in binary or memory: https://github.com/MicrosoftDocs/show-pr/blob/4adbac1c31372b72e613c9bd318ab6b10f3eb1ad/shows/one-dev
Source: chromecache_626.2.dr	String found in binary or memory: https://github.com/MicrosoftDocs/show-pr/blob/live/shows/one-dev-minute/what-are-the-main-features-o
Source: chromecache_407.2.dr	String found in binary or memory: https://github.com/MicrosoftDocs/show-pr/blob/live/shows/one-dev-minute/what-can-i-do-with-wsl--one-
Source: chromecache_311.2.dr	String found in binary or memory: https://github.com/MicrosoftDocs/terminal/blob/e9cdbe5e7a9dc57a423735bd3d477c201fafc697/TerminalDocs
Source: chromecache_311.2.dr	String found in binary or memory: https://github.com/MicrosoftDocs/terminal/blob/live/TerminalDocs/index.md
Source: chromecache_311.2.dr	String found in binary or memory: https://github.com/MicrosoftDocs/terminal/blob/main/TerminalDocs/index.md
Source: chromecache_311.2.dr	String found in binary or memory: https://github.com/MicrosoftDocs/terminal/issues/new?template=customer-feedback.yml
Source: chromecache_673.2.dr	String found in binary or memory: https://github.com/MicrosoftDocs/windows-dev-docs-pr/blob/22d4bacdcd3a05e5aa086f4694e1534c97d92a62/h
Source: chromecache_673.2.dr	String found in binary or memory: https://github.com/MicrosoftDocs/windows-dev-docs-pr/blob/live/hub/dev-environment/index.md
Source: chromecache_673.2.dr	String found in binary or memory: https://github.com/MicrosoftDocs/windows-dev-docs/blob/docs/hub/dev-environment/index.md
Source: chromecache_673.2.dr	String found in binary or memory: https://github.com/MicrosoftDocs/windows-dev-docs/issues/new?template=1-customer-feedback.yml
Source: chromecache_547.2.dr	String found in binary or memory: https://github.com/MicrosoftDocs/windows-insider-pr/blob/5b7c4ba9375b0d4b8b4481b897284381ff8dce07/wi
Source: chromecache_547.2.dr	String found in binary or memory: https://github.com/MicrosoftDocs/windows-insider-pr/blob/live/wip/index.yml
Source: chromecache_481.2.dr	String found in binary or memory: https://github.com/MicrosoftDocs/windows-release-pr/blob/c12aa7ecc81418b4e40497179dd5386054dfb731/wi
Source: chromecache_481.2.dr	String found in binary or memory: https://github.com/MicrosoftDocs/windows-release-pr/blob/live/windows/release-information/index.yml
Source: chromecache_470.2.dr	String found in binary or memory: https://github.com/MicrosoftDocs/wsl/blob/main/WSL/index.md
Source: chromecache_470.2.dr	String found in binary or memory: https://github.com/MicrosoftDocs/wsl/issues/new?template=doc-issue.yml
Source: chromecache_470.2.dr	String found in binary or memory: https://github.com/VSC-Service-Account
Source: chromecache_673.2.dr, chromecache_547.2.dr	String found in binary or memory: https://github.com/alexbuckgit
Source: chromecache_673.2.dr	String found in binary or memory: https://github.com/alvinashcraft
Source: chromecache_547.2.dr	String found in binary or memory: https://github.com/arshields7
Source: chromecache_673.2.dr	String found in binary or memory: https://github.com/avestura
Source: chromecache_311.2.dr	String found in binary or memory: https://github.com/cinnamon-msft
Source: chromecache_470.2.dr	String found in binary or memory: https://github.com/craigloewen-msft
Source: chromecache_459.2.dr	String found in binary or memory: https://github.com/dotnet/try
Source: chromecache_347.2.dr	String found in binary or memory: https://github.com/facebook/react/issues/12897#issuecomment-410036991
Source: chromecache_459.2.dr	String found in binary or memory: https://github.com/jonschlinkert/is-plain-object
Source: chromecache_448.2.dr, chromecache_459.2.dr, chromecache_338.2.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_311.2.dr	String found in binary or memory: https://github.com/mairaw
Source: chromecache_311.2.dr, chromecache_673.2.dr, chromecache_470.2.dr	String found in binary or memory: https://github.com/mattwojo
Source: chromecache_470.2.dr	String found in binary or memory: https://github.com/microsoft/WSL/issues
Source: chromecache_673.2.dr	String found in binary or memory: https://github.com/microsoft/Windows-Dev-Performance/issues
Source: chromecache_493.2.dr, chromecache_395.2.dr	String found in binary or memory: https://github.com/microsoft/Windows-IoT-Samples
Source: chromecache_428.2.dr	String found in binary or memory: https://github.com/microsoft/clarity
Source: chromecache_547.2.dr	String found in binary or memory: https://github.com/microsoftdocs/windows-insider/blob/master/wip/index.yml
Source: chromecache_311.2.dr	String found in binary or memory: https://github.com/nguyen-dows
Source: chromecache_579.2.dr	String found in binary or memory: https://github.com/nodeca/pako/
Source: chromecache_470.2.dr	String found in binary or memory: https://github.com/scooley
Source: chromecache_328.2.dr	String found in binary or memory: https://github.com/scottjehl/picturefill/blob/master/Authors.txt;
Source: chromecache_673.2.dr	String found in binary or memory: https://github.com/stevewhims
Source: chromecache_470.2.dr	String found in binary or memory: https://github.com/sudeepku
Source: chromecache_673.2.dr	String found in binary or memory: https://github.com/v-alexmandel
Source: chromecache_311.2.dr, chromecache_470.2.dr	String found in binary or memory: https://github.com/v-alje
Source: chromecache_673.2.dr	String found in binary or memory: https://github.com/v-hearya
Source: chromecache_470.2.dr	String found in binary or memory: https://github.com/v-surgos
Source: chromecache_311.2.dr	String found in binary or memory: https://github.com/wjandrea
Source: chromecache_311.2.dr	String found in binary or memory: https://github.com/zadjii-msft
Source: chromecache_579.2.dr	String found in binary or memory: https://html5sec.org/#102)
Source: chromecache_579.2.dr	String found in binary or memory: https://html5sec.org/#108)
Source: chromecache_579.2.dr	String found in binary or memory: https://html5sec.org/#133)
Source: chromecache_579.2.dr	String found in binary or memory: https://html5sec.org/#59)
Source: chromecache_579.2.dr	String found in binary or memory: https://html5sec.org/)
Source: chromecache_505.2.dr, chromecache_347.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net
Source: chromecache_336.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE1Mu3b?ver=5c31
Source: chromecache_470.2.dr	String found in binary or memory: https://insider.windows.com/getting-started
Source: chromecache_579.2.dr	String found in binary or memory: https://jquery.org/
Source: chromecache_347.2.dr	String found in binary or memory: https://js.monitor.azure.com/scripts/c/ms.analytics-web-4.min.js
Source: chromecache_311.2.dr, chromecache_678.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_660.2.dr, chromecache_283.2.dr, chromecache_626.2.dr, chromecache_673.2.dr, chromecache_547.2.dr, chromecache_481.2.dr, chromecache_407.2.dr, chromecache_279.2.dr, chromecache_470.2.dr	String found in binary or memory: https://js.monitor.azure.com/scripts/c/ms.jsll-3.min.js
Source: chromecache_459.2.dr	String found in binary or memory: https://learn-video.azurefd.net/
Source: chromecache_459.2.dr	String found in binary or memory: https://learn-video.azurefd.net/vod/player
Source: chromecache_673.2.dr	String found in binary or memory: https://learn-video.azurefd.net/vod/player?id=54e6c532-a86c-4a39-81ab-40e28ce2ba96
Source: chromecache_673.2.dr	String found in binary or memory: https://learn-video.azurefd.net/vod/player?id=72ad293b-b7aa-4a78-9111-46eb0e072d7b
Source: chromecache_579.2.dr	String found in binary or memory: https://lodash.com/
Source: chromecache_579.2.dr	String found in binary or memory: https://lodash.com/license
Source: chromecache_459.2.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev
Source: chromecache_459.2.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2017-0
Source: chromecache_459.2.dr	String found in binary or memory: https://management.azure.com/subscriptions?api-version=2016-06-01
Source: chromecache_579.2.dr	String found in binary or memory: https://mathiasbynens.be/notes/ambiguous-ampersands)
Source: chromecache_347.2.dr	String found in binary or memory: https://medium.com/
Source: chromecache_505.2.dr, chromecache_347.2.dr	String found in binary or memory: https://mem.gfx.ms
Source: chromecache_481.2.dr	String found in binary or memory: https://microsoft-devrel.poolparty.biz/DevRelOfferingOntology/19ec6774-09b8-473e-a17e-b17b518bbad7
Source: chromecache_481.2.dr	String found in binary or memory: https://microsoft-devrel.poolparty.biz/DevRelOfferingOntology/ade36b61-c646-4bd8-87ee-f3a843461962
Source: chromecache_505.2.dr	String found in binary or memory: https://microsoftwindows.112.2o7.net
Source: chromecache_328.2.dr	String found in binary or memory: https://modernizr.com/download/?-eventlistener-picture-printshiv-setclasses
Source: chromecache_407.2.dr	String found in binary or memory: https://msft.social/6yBBZZ
Source: chromecache_579.2.dr	String found in binary or memory: https://mths.be/he).
Source: chromecache_459.2.dr	String found in binary or memory: https://octokit.github.io/rest.js/#throttling
Source: chromecache_336.2.dr	String found in binary or memory: https://onedrive.live.com/about/en-us/
Source: chromecache_336.2.dr	String found in binary or memory: https://outlook.live.com/owa/
Source: chromecache_579.2.dr	String found in binary or memory: https://people.mozilla.org/~jorendorff/es6-draft.html#sec-number.max_safe_integer)
Source: chromecache_579.2.dr	String found in binary or memory: https://people.mozilla.org/~jorendorff/es6-draft.html#sec-tolength).
Source: chromecache_589.2.dr, chromecache_296.2.dr	String found in binary or memory: https://prod-video-cms-rt-microsoft-com.akamaized.net/cms/api/am/videofiledata/RWHAdS-enus?ver=9e1e
Source: chromecache_589.2.dr, chromecache_296.2.dr	String found in binary or memory: https://prod-video-cms-rt-microsoft-com.akamaized.net/cms/api/am/videofiledata/RWHAdS-tscriptenus?ve
Source: chromecache_336.2.dr	String found in binary or memory: https://products.office.com/en-us/home
Source: chromecache_336.2.dr	String found in binary or memory: https://products.office.com/en-us/microsoft-teams/free?icid=SSM_AS_Promo_Apps_MicrosoftTeams
Source: chromecache_459.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_328.2.dr	String found in binary or memory: https://scottjehl.github.io/picturefill/
Source: chromecache_336.2.dr	String found in binary or memory: https://statics-marketingsites-wcus-ms-com.akamaized.net/statics/override.css?c=7
Source: chromecache_459.2.dr	String found in binary or memory: https://twitter.com/intent/tweet?original_referer=$
Source: chromecache_415.2.dr	String found in binary or memory: https://ussearchprod.trafficmanager.net/services/api/v1.0/store/categories
Source: chromecache_589.2.dr, chromecache_296.2.dr	String found in binary or memory: https://wus-streaming-video-rt-microsoft-com.akamaized.net/020210c9-3f44-44ca-9edd-08f7c91b3541/0d87
Source: chromecache_296.2.dr	String found in binary or memory: https://wus-streaming-video-rt-microsoft-com.akamaized.net/b3b9734f-71ca-46e7-beed-415f649d9674/0d87
Source: chromecache_459.2.dr	String found in binary or memory: https://www.cafbaseline.com/
Source: chromecache_311.2.dr	String found in binary or memory: https://www.hanselman.com/blog/WhatsTheDifferenceBetweenAConsoleATerminalAndAShell.aspx
Source: chromecache_459.2.dr	String found in binary or memory: https://www.linkedin.com/cws/share?url=$
Source: chromecache_459.2.dr	String found in binary or memory: https://www.linkedin.com/profile/add?startTask=CERTIFICATION_NAME&name=$
Source: chromecache_336.2.dr	String found in binary or memory: https://www.onenote.com/
Source: chromecache_336.2.dr	String found in binary or memory: https://www.skype.com/en/
Source: chromecache_336.2.dr	String found in binary or memory: https://www.xbox.com/
Source: chromecache_388.2.dr, chromecache_511.2.dr	String found in binary or memory: https://www.youtube-nocookie.com/embed/48k317kOxqg?enablejsapi=1
Source: chromecache_631.2.dr, chromecache_642.2.dr	String found in binary or memory: https://www.youtube-nocookie.com/embed/hB0JCNgqQtk?enablejsapi=1
Source: chromecache_470.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=63wVlI9B3Ac&t=45s
Source: chromecache_470.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=75JBKfAqH3I
Source: chromecache_470.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=AfhDwVASD2c
Source: chromecache_603.2.dr, chromecache_486.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=FCfwc-NNo30
Source: chromecache_470.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=I2jOuLU4o8E
Source: chromecache_470.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=JuJ_Nx_bFEM
Source: chromecache_470.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=K9GPOHrZgr4
Source: chromecache_470.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=MrZolfGm8Zk&t=3s
Source: chromecache_470.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=NYGMY9c90Oo
Source: chromecache_470.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=OeomwrHLAR4
Source: chromecache_470.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=PdxXlZJiuxA
Source: chromecache_470.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=UMQ5GQix0rs
Source: chromecache_470.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=UxWN1BBr1bM
Source: chromecache_470.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=WnzKfwL3Iy0
Source: chromecache_470.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=XkLjxr9iQ-8&t=1s
Source: chromecache_470.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=b9I7NZHni5c
Source: chromecache_616.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=bC-60KNgLuE
Source: chromecache_470.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=jx5I-8_arqM
Source: chromecache_470.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=kC3eWRPzeWw
Source: chromecache_470.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=kCB3gO32SPs
Source: chromecache_470.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=lOXatmtBb88
Source: chromecache_470.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=lwhMThePdIo
Source: chromecache_470.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=m5tt9mDRPSw
Source: chromecache_470.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=n1YSFT5VK-Y
Source: chromecache_470.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=pNwatyeXplY
Source: chromecache_470.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=sqdHy1rC2t4
Source: chromecache_470.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=teI6WA48_Rg
Source: chromecache_470.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=uO_F5W2LbSk
Source: chromecache_470.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=uUaFNRRS9yo&t=2s
Source: chromecache_470.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=ySS8Re6LDTQ

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50296
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50182
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50181
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50183
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50186
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50204 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50196
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 50492 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50372
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50493
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50133
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50134
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 50347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50141
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50146
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50389
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50150
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50399
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50156
Source: unknown	Network traffic detected: HTTP traffic on port 50182 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50435 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50161
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50164
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50167
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 50491 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50443 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50357 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50346
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50346 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50357
Source: unknown	Network traffic detected: HTTP traffic on port 50133 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 50419 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 50167 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50442 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 50150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50492
Source: unknown	Network traffic detected: HTTP traffic on port 50181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50491
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50296 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50419
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50410
Source: unknown	Network traffic detected: HTTP traffic on port 50052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50399 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50410 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 50064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50098 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 50361 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50493 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50435
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50205
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50204
Source: unknown	Network traffic detected: HTTP traffic on port 50196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50442
Source: unknown	Network traffic detected: HTTP traffic on port 50372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 23.46.200.91:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.46.200.91:443 -> 192.168.2.4:49752 version: TLS 1.2

System Summary

Source: classification engine

Classification label: clean0.win@42/678@66/18

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=1700,i,15325232421416198394,9954172196171625074,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://package-microsoft.live"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6796 --field-trial-handle=1700,i,15325232421416198394,9954172196171625074,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=1700,i,15325232421416198394,9954172196171625074,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://package-microsoft.live"			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6796 --field-trial-handle=1700,i,15325232421416198394,9954172196171625074,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Install
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Install
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Install
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next

Source: Window Recorder

Window detected: More than 3 window changes detected

Malware Analysis System Evasion

Source: chromecache_573.2.dr

Binary or memory string: {"category":{"biName":"windows-server","href":"/windows-server/","kind":"link","title":"Windows Server"},"items":[{"biName":"1-get-started","href":"/windows-server/get-started/get-started-with-windows-server/","kind":"link","title":"Get started"},{"biName":"2-failover-clustering","href":"/windows-server/failover-clustering/failover-clustering-overview/","kind":"link","title":"Failover clustering"},{"biName":"3-management","href":"/windows-server/administration/manage-windows-server/","kind":"link","title":"Management"},{"biName":"4-identity-and-access","href":"/windows-server/identity/identity-and-access/","kind":"link","title":"Identity and access"},{"biName":"5-networking","href":"/windows-server/networking/","kind":"link","title":"Networking"},{"biName":"6-troubleshooting","href":"/windows-server/troubleshoot/windows-server-troubleshooting/","kind":"link","title":"Troubleshooting"},{"biName":"7-related-products","items":[{"biName":"1-iis","href":"/iis/","kind":"link","title":"IIS"},{"biName":"2-remote-desktop","href":"/windows-server/remote/remote-desktop-services/welcome-to-rds/","kind":"link","title":"Remote Desktop"},{"biName":"3-hyper-v","href":"/windows-server/virtualization/hyper-v/hyper-v-on-windows-server/","kind":"link","title":"Hyper-V"},{"biName":"4-windows-server-essentials","href":"/windows-server-essentials/","kind":"link","title":"Windows Server Essentials"}],"kind":"menu","title":"Related products"}],"metadata":{"git_commit_id":"f2754fc1523dea045e72ba44e25ddae7af6429cd"},"schema":"ContentNav"}

Source: chromecache_492.2.dr

Binary or memory string: SvmcI