Edit tour

Windows Analysis Report
http://package-microsoft.live

Overview

General Information

Sample URL:	http://package-microsoft.live
Analysis ID:	1431460
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5084 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2000 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=1700,i,15325232421416198394,9954172196171625074,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4556 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6796 --field-trial-handle=1700,i,15325232421416198394,9954172196171625074,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6624 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://package-microsoft.live" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /rest/v1/delivery?client=microsoftmscompoc&sessionId=71fb2f47b0484d84850a549583e27e01&version=2.9.0 HTTP/1.1Host: target.microsoft.comConnection: keep-aliveContent-Length: 995sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: */*Origin: https://learn.microsoft.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MSCC=NR; at_check=true; mbox=session#71fb2f47b0484d84850a549583e27e01#1714027000

Source: https://learn.microsoft.com/en-us/windows/package-manager/	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/windows/package-manager/#main	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/windows/	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/windows/release-health/	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/windows-server/	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/windows/iot/	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/windows-insider/	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/windows-365/	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/windows/dev-environment/	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/windows/dev-environment/	HTTP Parser: No favicon
Source: https://learn.microsoft.com/_themes/docs.theme/master/en-us/_themes/global/video-embed.html?id=54e6c532-a86c-4a39-81ab-40e28ce2ba96&locale=en-us&embedUrl=%2Fwindows%2Fdev-environment%2F	HTTP Parser: No favicon
Source: https://learn.microsoft.com/_themes/docs.theme/master/en-us/_themes/global/video-embed.html?id=54e6c532-a86c-4a39-81ab-40e28ce2ba96&locale=en-us&embedUrl=%2Fwindows%2Fdev-environment%2F	HTTP Parser: No favicon
Source: https://learn.microsoft.com/_themes/docs.theme/master/en-us/_themes/global/video-embed.html?id=54e6c532-a86c-4a39-81ab-40e28ce2ba96&locale=en-us&embedUrl=%2Fwindows%2Fdev-environment%2F	HTTP Parser: No favicon
Source: https://learn.microsoft.com/_themes/docs.theme/master/en-us/_themes/global/video-embed.html?id=72ad293b-b7aa-4a78-9111-46eb0e072d7b&locale=en-us&embedUrl=%2Fwindows%2Fdev-environment%2F	HTTP Parser: No favicon
Source: https://learn.microsoft.com/_themes/docs.theme/master/en-us/_themes/global/video-embed.html?id=72ad293b-b7aa-4a78-9111-46eb0e072d7b&locale=en-us&embedUrl=%2Fwindows%2Fdev-environment%2F	HTTP Parser: No favicon
Source: https://learn.microsoft.com/_themes/docs.theme/master/en-us/_themes/global/video-embed.html?id=72ad293b-b7aa-4a78-9111-46eb0e072d7b&locale=en-us&embedUrl=%2Fwindows%2Fdev-environment%2F	HTTP Parser: No favicon
Source: https://learn.microsoft.com/_themes/docs.theme/master/en-us/_themes/global/video-embed.html?show=one-dev-minute&ep=what-are-the-main-features-of-the-new-terminal--one-dev-question	HTTP Parser: No favicon
Source: https://learn.microsoft.com/_themes/docs.theme/master/en-us/_themes/global/video-embed.html?show=one-dev-minute&ep=what-can-i-do-with-wsl--one-dev-question	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/windows/wsl/	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/windows/terminal/	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/windows/terminal/	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 23.46.200.91:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.46.200.91:443 -> 192.168.2.4:49752 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.200.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_459.2.dr	String found in binary or memory: href="https://www.linkedin.com/cws/share?url=${encodeURIComponent(e)}&text=${encodeURIComponent(dS.replace("{credentialName}",t.title))}" equals www.linkedin.com (Linkedin)
Source: chromecache_459.2.dr	String found in binary or memory: href="https://www.facebook.com/sharer/sharer.php?u=${s}" equals www.facebook.com (Facebook)
Source: chromecache_459.2.dr	String found in binary or memory: href="https://www.linkedin.com/cws/share?url=${s}" equals www.linkedin.com (Linkedin)
Source: chromecache_459.2.dr	String found in binary or memory: </div>`;w(e,t)}}function kA(t){x.documentElement.classList.add("api-search-has-results");for(let{container:e}of vy)e.textContent=t}function Xne(){x.documentElement.classList.remove("api-search-has-results");for(let{container:t}of vy)t.innerHTML=""}function iEe(t,e){let o=dt(),n,r;if(o==="")n=_r[Rt].displayName,r=null;else{let a=e.packagesByMoniker[o];n=a.product.displayName,r=a.versionDisplayName}let s=x.createElement("h2");s.classList.add("api-search-results-heading","font-size-h3");let i=m`${EA.resultsHeadingTemplate.replace("{platformName}",n)}`;if(w(i,s),r!==null&&Rt==="rest"){let a=m`${ee(`${Oe(o)} REST ${EA.resultsHeadingTemplate.replace("{platformName}",n)}`)}`;w(a,s)}else if(r!==null){let a=m`${ee(`${EA.resultsHeadingTemplate.replace("{platformName}",n)} <span class="moniker-version">version ${Oe(r)}</span>`)}`;w(a,s)}t.appendChild(s)}function o1(t,e){if(e!==""&&!/[?&]view=/i.test(t)){let[n,r]=t.split("#");r=r===void 0?"":"#"+r,t=Rt==="rest"?`${n}${r}`:`${n}?view=${encodeURIComponent(e)}${r}`}let o=new URL(t,location.origin);return t=`${o.pathname}${o.search}${o.hash}`,Rt!=="rest"&&(t=`/${_.data.userLocale}${t}`),t}var fm="api-search-term-changed",Ch="";function gm(){return Ch}function n1(t){t=t.trim(),t!==Ch&&(Ch=t,_.data.pageTemplate==="ApiBrowserPage"&&Mt({term:Ch},"pushState"),window.dispatchEvent(new CustomEvent(fm,{detail:{term:Ch}})))}function Zne(){let t=oe().term;return t===void 0?"":t.trim()}_.data.pageTemplate==="ApiBrowserPage"&&(Ch=Zne(),window.addEventListener("popstate",()=>n1(Zne())));function ere(){q.addEventListener(fm,r1),q.addEventListener(Mr,r1),_.data.pageTemplate==="ApiBrowserPage"&&r1()}var AA="";function r1(){let t=gm(),e=dt(),o=`${t}/${e}`;return o===AA?Promise.resolve():(AA=o,_.data.pageTemplate==="ApiBrowserPage"&&e!==""&&t===""?(t1(),Promise.all([Wne(Rt,e,_.data.userLocale),il()]).then(([n,r])=>{if(o===AA){if(n.apiItems.length===0){kA(Xo);return}CA(r,n.apiItems,null)}},()=>{kA(TP)})):t.length<3?(Xne(),Promise.resolve()):_r[Rt].validSearchTerm.test(t)?(t1(),Promise.all([wA(Rt,e,t,_.data.userLocale),il()]).then(([n,r])=>{o===AA&&(s1(e,t,n.results.length),CA(r,n.results,n["@nextLink"]))},()=>{kA(TP)})):il().then(n=>CA(n,[],null)))}function s1(t,e,o){Ge({actionType:He.OTHER,behavior:Ee.SEARCH,content:{event:"api-browser-search",platform:Rt,moniker:t,term:e,results:o}})}var tre="api-search-field";function ore(){let t=x.createElement("form");t.classList.add(tre,"margin-top-xxs"),t.setAttribute(To.name,tre),t.action="javascript:",t.addEventListener("submit",l=>l.preventDefault());let e=x.createElement("label"),o=x.createElement("span");o.classList.add("visually-hidden"),o.textContent=mo,e.appendChild(o),t.appendChild(e);let n=x.createElement("input");n.type="search",n.classList.add("input","input-lg","padding-right-sm"),n.value=gm(),n.placeholder=mo,e.appendChild(n);let r=x.createElement("a");r.href="#",r.title=_2,r.classList.add("clear"),r.addEventListener("click",l=>{l.preventDefault(),n.value="",n.dispatchEvent(
Source: chromecache_459.2.dr	String found in binary or memory: </div>`;w(e,t)}}function kA(t){x.documentElement.classList.add("api-search-has-results");for(let{container:e}of vy)e.textContent=t}function Xne(){x.documentElement.classList.remove("api-search-has-results");for(let{container:t}of vy)t.innerHTML=""}function iEe(t,e){let o=dt(),n,r;if(o==="")n=_r[Rt].displayName,r=null;else{let a=e.packagesByMoniker[o];n=a.product.displayName,r=a.versionDisplayName}let s=x.createElement("h2");s.classList.add("api-search-results-heading","font-size-h3");let i=m`${EA.resultsHeadingTemplate.replace("{platformName}",n)}`;if(w(i,s),r!==null&&Rt==="rest"){let a=m`${ee(`${Oe(o)} REST ${EA.resultsHeadingTemplate.replace("{platformName}",n)}`)}`;w(a,s)}else if(r!==null){let a=m`${ee(`${EA.resultsHeadingTemplate.replace("{platformName}",n)} <span class="moniker-version">version ${Oe(r)}</span>`)}`;w(a,s)}t.appendChild(s)}function o1(t,e){if(e!==""&&!/[?&]view=/i.test(t)){let[n,r]=t.split("#");r=r===void 0?"":"#"+r,t=Rt==="rest"?`${n}${r}`:`${n}?view=${encodeURIComponent(e)}${r}`}let o=new URL(t,location.origin);return t=`${o.pathname}${o.search}${o.hash}`,Rt!=="rest"&&(t=`/${_.data.userLocale}${t}`),t}var fm="api-search-term-changed",Ch="";function gm(){return Ch}function n1(t){t=t.trim(),t!==Ch&&(Ch=t,_.data.pageTemplate==="ApiBrowserPage"&&Mt({term:Ch},"pushState"),window.dispatchEvent(new CustomEvent(fm,{detail:{term:Ch}})))}function Zne(){let t=oe().term;return t===void 0?"":t.trim()}_.data.pageTemplate==="ApiBrowserPage"&&(Ch=Zne(),window.addEventListener("popstate",()=>n1(Zne())));function ere(){q.addEventListener(fm,r1),q.addEventListener(Mr,r1),_.data.pageTemplate==="ApiBrowserPage"&&r1()}var AA="";function r1(){let t=gm(),e=dt(),o=`${t}/${e}`;return o===AA?Promise.resolve():(AA=o,_.data.pageTemplate==="ApiBrowserPage"&&e!==""&&t===""?(t1(),Promise.all([Wne(Rt,e,_.data.userLocale),il()]).then(([n,r])=>{if(o===AA){if(n.apiItems.length===0){kA(Xo);return}CA(r,n.apiItems,null)}},()=>{kA(TP)})):t.length<3?(Xne(),Promise.resolve()):_r[Rt].validSearchTerm.test(t)?(t1(),Promise.all([wA(Rt,e,t,_.data.userLocale),il()]).then(([n,r])=>{o===AA&&(s1(e,t,n.results.length),CA(r,n.results,n["@nextLink"]))},()=>{kA(TP)})):il().then(n=>CA(n,[],null)))}function s1(t,e,o){Ge({actionType:He.OTHER,behavior:Ee.SEARCH,content:{event:"api-browser-search",platform:Rt,moniker:t,term:e,results:o}})}var tre="api-search-field";function ore(){let t=x.createElement("form");t.classList.add(tre,"margin-top-xxs"),t.setAttribute(To.name,tre),t.action="javascript:",t.addEventListener("submit",l=>l.preventDefault());let e=x.createElement("label"),o=x.createElement("span");o.classList.add("visually-hidden"),o.textContent=mo,e.appendChild(o),t.appendChild(e);let n=x.createElement("input");n.type="search",n.classList.add("input","input-lg","padding-right-sm"),n.value=gm(),n.placeholder=mo,e.appendChild(n);let r=x.createElement("a");r.href="#",r.title=_2,r.classList.add("clear"),r.addEventListener("click",l=>{l.preventDefault(),n.value="",n.dispatchEvent(
Source: chromecache_459.2.dr	String found in binary or memory: </div>`;w(e,t)}}function kA(t){x.documentElement.classList.add("api-search-has-results");for(let{container:e}of vy)e.textContent=t}function Xne(){x.documentElement.classList.remove("api-search-has-results");for(let{container:t}of vy)t.innerHTML=""}function iEe(t,e){let o=dt(),n,r;if(o==="")n=_r[Rt].displayName,r=null;else{let a=e.packagesByMoniker[o];n=a.product.displayName,r=a.versionDisplayName}let s=x.createElement("h2");s.classList.add("api-search-results-heading","font-size-h3");let i=m`${EA.resultsHeadingTemplate.replace("{platformName}",n)}`;if(w(i,s),r!==null&&Rt==="rest"){let a=m`${ee(`${Oe(o)} REST ${EA.resultsHeadingTemplate.replace("{platformName}",n)}`)}`;w(a,s)}else if(r!==null){let a=m`${ee(`${EA.resultsHeadingTemplate.replace("{platformName}",n)} <span class="moniker-version">version ${Oe(r)}</span>`)}`;w(a,s)}t.appendChild(s)}function o1(t,e){if(e!==""&&!/[?&]view=/i.test(t)){let[n,r]=t.split("#");r=r===void 0?"":"#"+r,t=Rt==="rest"?`${n}${r}`:`${n}?view=${encodeURIComponent(e)}${r}`}let o=new URL(t,location.origin);return t=`${o.pathname}${o.search}${o.hash}`,Rt!=="rest"&&(t=`/${_.data.userLocale}${t}`),t}var fm="api-search-term-changed",Ch="";function gm(){return Ch}function n1(t){t=t.trim(),t!==Ch&&(Ch=t,_.data.pageTemplate==="ApiBrowserPage"&&Mt({term:Ch},"pushState"),window.dispatchEvent(new CustomEvent(fm,{detail:{term:Ch}})))}function Zne(){let t=oe().term;return t===void 0?"":t.trim()}_.data.pageTemplate==="ApiBrowserPage"&&(Ch=Zne(),window.addEventListener("popstate",()=>n1(Zne())));function ere(){q.addEventListener(fm,r1),q.addEventListener(Mr,r1),_.data.pageTemplate==="ApiBrowserPage"&&r1()}var AA="";function r1(){let t=gm(),e=dt(),o=`${t}/${e}`;return o===AA?Promise.resolve():(AA=o,_.data.pageTemplate==="ApiBrowserPage"&&e!==""&&t===""?(t1(),Promise.all([Wne(Rt,e,_.data.userLocale),il()]).then(([n,r])=>{if(o===AA){if(n.apiItems.length===0){kA(Xo);return}CA(r,n.apiItems,null)}},()=>{kA(TP)})):t.length<3?(Xne(),Promise.resolve()):_r[Rt].validSearchTerm.test(t)?(t1(),Promise.all([wA(Rt,e,t,_.data.userLocale),il()]).then(([n,r])=>{o===AA&&(s1(e,t,n.results.length),CA(r,n.results,n["@nextLink"]))},()=>{kA(TP)})):il().then(n=>CA(n,[],null)))}function s1(t,e,o){Ge({actionType:He.OTHER,behavior:Ee.SEARCH,content:{event:"api-browser-search",platform:Rt,moniker:t,term:e,results:o}})}var tre="api-search-field";function ore(){let t=x.createElement("form");t.classList.add(tre,"margin-top-xxs"),t.setAttribute(To.name,tre),t.action="javascript:",t.addEventListener("submit",l=>l.preventDefault());let e=x.createElement("label"),o=x.createElement("span");o.classList.add("visually-hidden"),o.textContent=mo,e.appendChild(o),t.appendChild(e);let n=x.createElement("input");n.type="search",n.classList.add("input","input-lg","padding-right-sm"),n.value=gm(),n.placeholder=mo,e.appendChild(n);let r=x.createElement("a");r.href="#",r.title=_2,r.classList.add("clear"),r.addEventListener("click",l=>{l.preventDefault(),n.value="",n.dispatchEvent(
Source: chromecache_459.2.dr	String found in binary or memory: </div>`}function gCe(t){return t.authenticationModes?t.authenticationModes.map(e=>e.type).includes("MSA"):!1}function hCe(t){let e=t.authenticationModes.find(o=>o.type==="MSA");return e?e.upn:null}function bCe(t){let e=t.authenticationModes.find(o=>o.type==="AAD");return e?e.upn:null}function _Ce(t,e,o){return e??(Qt(t.email)?o:t.email)??""}function $re(t){let e=gCe(t),o=e?hCe(t):null,n=e?null:bCe(t),r=_Ce(t,o,n);return[e,r]}function vCe(t,e){let[o,n]=$re(e);if(o){let i=t.querySelector("#report-msa-email-account");i.innerText=n}let r=t.querySelector("#opt-into-email-checkbox"),s=t.querySelector("#submitter-info");r.addEventListener("change",()=>{r.checked?s.hidden=!1:s.hidden=!0})}function yCe(t){if(!t)return;let e=t.querySelector("#select-reason"),o=t.querySelector("#other-reason-textarea-container"),n=o.querySelector("textarea");!e\|\|!o\|\|!n\|\|(e.value==="Other"&&(o.hidden=!1,n.required=!0),e.addEventListener("change",()=>{e.value==="Other"\|\|e.value==="14"?(o.hidden=!1,n.required=!0,n.disabled=!1):(o.hidden=!0,n.required=!1,n.disabled=!0)}))}var oo;function Nre(){let t=document.getElementById("share-to-linkedin-profile");t&&t.addEventListener("click",e=>{let o=e.currentTarget,n=JSON.parse(o.dataset.credential),r=document.createElement("div"),s=xCe(n);w(s,r),oo=new Se(r),oo.show();let i=document.getElementById("share-to-feed-button"),a=document.getElementById("linkedin-feed-message"),l=new URL(decodeURI(i.getAttribute("href")));a.onchange=()=>{l.searchParams.set("text",a.value),i.setAttribute("href",l.toString())}})}function xCe(t){let e=encodeURI(`https://${location.host}/api/credentials/share/${_.data.userLocale}/${R.userName}/${t?.credentialId}?sharingId=${R.sharingId}`),o=1035,n=i=>new Date(i).getFullYear(),r=i=>new Date(i).getMonth()+1,s=encodeURI(`https://www.linkedin.com/profile/add?startTask=CERTIFICATION_NAME&name=${t.title}&organizationId=${o}&issueYear=${n(t.awardedOn)}&issueMonth=${r(t.awardedOn)}&expirationYear=${t.expiresOn?n(t.expiresOn):""}&expirationMonth=${t.expiresOn?r(t.expiresOn):""}&certUrl=${e}&certId=${t.credentialId}&skills=${t.skills?`${t.skills.map(i=>encodeURIComponent(i)).join(",")}`:""}`);return m` equals www.linkedin.com (Linkedin)
Source: chromecache_334.2.dr	String found in binary or memory: "//www.linkedin.com/shareArticle?mini=true&url=" + equals www.linkedin.com (Linkedin)
Source: chromecache_334.2.dr	String found in binary or memory: url: "//www.facebook.com/share.php?u=" + h, equals www.facebook.com (Facebook)
Source: chromecache_603.2.dr, chromecache_486.2.dr	String found in binary or memory: "youTubeUrl": "https://www.youtube.com/watch?v=FCfwc-NNo30" equals www.youtube.com (Youtube)
Source: chromecache_616.2.dr	String found in binary or memory: "youTubeUrl": "https://www.youtube.com/watch?v=bC-60KNgLuE" equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=63wVlI9B3Ac&t=45s" data-linktype="external">How WSL accesses Linux files from Windows</a> \| Deep dive (24:59)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=75JBKfAqH3I" data-linktype="external">I'm a Linux developer. Why should I use WSL?</a> \| One Dev Question (1:04)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=AfhDwVASD2c" data-linktype="external">In WSL, can I use distros other than the ones in the Microsoft Store?</a> \| One Dev Question (1:03)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=I2jOuLU4o8E" data-linktype="external">WSL 2: Connect USB devices</a> \| Tabs vs Spaces (10:08)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=JuJ_Nx_bFEM" data-linktype="external">How is WSL integrated with Windows?</a> \| One Dev Question (1:34)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=K9GPOHrZgr4" data-linktype="external">New memory reclaim feature in WSL 2</a> \| Demo (6:01)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=MrZolfGm8Zk&t=3s" data-linktype="external">WSL2: Code faster on the Windows Subsystem for Linux!</a> \| Tabs vs Spaces (13:42)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=NYGMY9c90Oo" data-linktype="external">What is the Windows Subsystem for Linux (WSL)?</a> \| One Dev Question (0:40)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=OeomwrHLAR4" data-linktype="external">Why would I want to use Linux tools on Windows?</a> \| One Dev Question (1:20)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=PdxXlZJiuxA" data-linktype="external">GPU Accelerated Machine Learning with WSL 2</a> \| Tabs vs Spaces (16:28)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=UMQ5GQix0rs" data-linktype="external">How is WSL different than a virtual machine or dual booting?</a> \| One Dev Question</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=UxWN1BBr1bM" data-linktype="external">Web development on Windows (in 2019)</a> \| Demo (10:39)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=WnzKfwL3Iy0" data-linktype="external">What is a Linux distro?</a> \| One Dev Question (1:04)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=XkLjxr9iQ-8&t=1s" data-linktype="external">Visual Studio Code: Remote Dev with SSH, VMs, and WSL</a> \| Tabs vs Spaces (29:33)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=b9I7NZHni5c" data-linktype="external">Why was the Windows Subsystem for Linux created?</a> \| One Dev Question (1:14)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=jx5I-8_arqM" data-linktype="external">What is Linux?</a> \| One Dev Question (1:31)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=kC3eWRPzeWw" data-linktype="external">WSL: Run Linux GUI Apps</a> \| Tabs vs Spaces (17:16)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=kCB3gO32SPs" data-linktype="external">WSL and Linux Distributions equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=lOXatmtBb88" data-linktype="external">Build Node.JS apps with WSL</a> \| Highlight (3:15)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=lwhMThePdIo" data-linktype="external">Windows subsystem for Linux architecture: a deep dive</a> \| Build 2019 (58:10)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=m5tt9mDRPSw" data-linktype="external">Windows Dev Tool Updates: WSL, Terminal, Package Manager, and more</a> \| Tabs vs Spaces (20:46)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=n1YSFT5VK-Y" data-linktype="external">How do I configure a WSL distro to launch in the home directory in Terminal?</a> \| One Dev Question (0:47)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=pNwatyeXplY" data-linktype="external">WSL on Windows 11 - Demos with Craig Loewen and Scott Hanselman</a>\| Windows Wednesday (35:48)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=sqdHy1rC2t4" data-linktype="external">I'm a Windows developer. Why should I use WSL? \|</a> One Dev Question (0:58)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=teI6WA48_Rg" data-linktype="external">Can I use WSL for scripting?</a> \| One Dev Question (1:04)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=uO_F5W2LbSk" data-linktype="external">Customize your terminal with Oh My Posh and WSL Linux distros</a> \| Windows Wednesday (33:14)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=uUaFNRRS9yo&t=2s" data-linktype="external">How do I access files on my computer in WSL?</a> \| One Dev Question (1:41)</li> equals www.youtube.com (Youtube)
Source: chromecache_470.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/watch?v=ySS8Re6LDTQ" data-linktype="external">Web dev Sarah Tamsin and Craig Loewen chat about web development, content creation, and WSL</a> \| Dev Perspectives (12:22)</li> equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: package-microsoft.live
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: mscom.demdex.net
Source: global traffic	DNS traffic detected: DNS query: microsoftmscompoc.tt.omtrdc.net
Source: global traffic	DNS traffic detected: DNS query: mdec.nelreports.net
Source: global traffic	DNS traffic detected: DNS query: aka.ms
Source: global traffic	DNS traffic detected: DNS query: consentdeliveryfd.azurefd.net
Source: global traffic	DNS traffic detected: DNS query: mem.gfx.ms
Source: global traffic	DNS traffic detected: DNS query: dc.services.visualstudio.com
Source: global traffic	DNS traffic detected: DNS query: msfteventsb2c.b2clogin.com
Source: global traffic	DNS traffic detected: DNS query: assets.onestore.ms
Source: global traffic	DNS traffic detected: DNS query: ajax.aspnetcdn.com
Source: global traffic	DNS traffic detected: DNS query: c.s-microsoft.com
Source: global traffic	DNS traffic detected: DNS query: build2024-prod-east-us-signalr-function.azurewebsites.net
Source: global traffic	DNS traffic detected: DNS query: build2024-prod-east-us-signalr.service.signalr.net
Source: global traffic	DNS traffic detected: DNS query: www.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: a.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: learn-video.azurefd.net
Source: global traffic	DNS traffic detected: DNS query: microsoftwindows.112.2o7.net
Source: global traffic	DNS traffic detected: DNS query: amp.azure.net

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50296
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50182
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50181
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50183
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50186
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50204 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50196
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 50492 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50372
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50493
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50133
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50134
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 50347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50141
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50146
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50389
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50150
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50399
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50156
Source: unknown	Network traffic detected: HTTP traffic on port 50182 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50435 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50161
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50164
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50167
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 50491 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50443 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50357 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50346
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50346 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50357
Source: unknown	Network traffic detected: HTTP traffic on port 50133 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 50419 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 50167 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50442 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 50150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50492
Source: unknown	Network traffic detected: HTTP traffic on port 50181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50491
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50296 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50419
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50410
Source: unknown	Network traffic detected: HTTP traffic on port 50052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50399 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50410 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 50064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50098 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 50361 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50493 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50435
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50205
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50204
Source: unknown	Network traffic detected: HTTP traffic on port 50196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50442
Source: unknown	Network traffic detected: HTTP traffic on port 50372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=1700,i,15325232421416198394,9954172196171625074,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://package-microsoft.live"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6796 --field-trial-handle=1700,i,15325232421416198394,9954172196171625074,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=1700,i,15325232421416198394,9954172196171625074,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://package-microsoft.live"	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6796 --field-trial-handle=1700,i,15325232421416198394,9954172196171625074,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Install
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Install
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Install
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next

Source: chromecache_573.2.dr	Binary or memory string: {"category":{"biName":"windows-server","href":"/windows-server/","kind":"link","title":"Windows Server"},"items":[{"biName":"1-get-started","href":"/windows-server/get-started/get-started-with-windows-server/","kind":"link","title":"Get started"},{"biName":"2-failover-clustering","href":"/windows-server/failover-clustering/failover-clustering-overview/","kind":"link","title":"Failover clustering"},{"biName":"3-management","href":"/windows-server/administration/manage-windows-server/","kind":"link","title":"Management"},{"biName":"4-identity-and-access","href":"/windows-server/identity/identity-and-access/","kind":"link","title":"Identity and access"},{"biName":"5-networking","href":"/windows-server/networking/","kind":"link","title":"Networking"},{"biName":"6-troubleshooting","href":"/windows-server/troubleshoot/windows-server-troubleshooting/","kind":"link","title":"Troubleshooting"},{"biName":"7-related-products","items":[{"biName":"1-iis","href":"/iis/","kind":"link","title":"IIS"},{"biName":"2-remote-desktop","href":"/windows-server/remote/remote-desktop-services/welcome-to-rds/","kind":"link","title":"Remote Desktop"},{"biName":"3-hyper-v","href":"/windows-server/virtualization/hyper-v/hyper-v-on-windows-server/","kind":"link","title":"Hyper-V"},{"biName":"4-windows-server-essentials","href":"/windows-server-essentials/","kind":"link","title":"Windows Server Essentials"}],"kind":"menu","title":"Related products"}],"metadata":{"git_commit_id":"f2754fc1523dea045e72ba44e25ddae7af6429cd"},"schema":"ContentNav"}
Source: chromecache_492.2.dr	Binary or memory string: SvmcI

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label	Link
http://package-microsoft.live	0%	Avira URL Cloud	safe
http://package-microsoft.live	0%	Virustotal		Browse

Source	Detection	Scanner	Link
package-microsoft.live	0%	Virustotal	Browse
part-0012.t-0009.t-msedge.net	0%	Virustotal	Browse
adobetarget.data.adobedc.net	0%	Virustotal	Browse
part-0013.t-0009.t-msedge.net	0%	Virustotal	Browse
microsoftmscompoc.tt.omtrdc.net	0%	Virustotal	Browse
a.clarity.ms	0%	Virustotal	Browse
part-0029.t-0009.t-msedge.net	0%	Virustotal	Browse
build2024-prod-east-us-signalr-function.azurewebsites.net	0%	Virustotal	Browse
part-0042.t-0009.t-msedge.net	0%	Virustotal	Browse
assets.onestore.ms	0%	Virustotal	Browse
mdec.nelreports.net	0%	Virustotal	Browse
mem.gfx.ms	0%	Virustotal	Browse
www.clarity.ms	0%	Virustotal	Browse
learn-video.azurefd.net	0%	Virustotal	Browse
msfteventsb2c.b2clogin.com	0%	Virustotal	Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse
consentdeliveryfd.azurefd.net	0%	Virustotal	Browse

Source	Detection	Scanner	Label	Link
https://assets.onestore.ms	0%	URL Reputation	safe
http://polymer.github.io/AUTHORS.txt	0%	URL Reputation	safe
http://polymer.github.io/PATENTS.txt	0%	URL Reputation	safe
https://octokit.github.io/rest.js/#throttling	0%	URL Reputation	safe
http://polymer.github.io/CONTRIBUTORS.txt	0%	URL Reputation	safe
https://scottjehl.github.io/picturefill/	0%	URL Reputation	safe
https://mem.gfx.ms	0%	URL Reputation	safe
http://wonko.com/post/html-escaping)	0%	Avira URL Cloud	safe
https://www.clarity.ms/tag/g1ii9elxla	0%	Avira URL Cloud	safe
http://wonko.com/post/html-escaping)	0%	Virustotal		Browse
https://html5sec.org/#133)	0%	Avira URL Cloud	safe
https://build2024-prod-east-us-signalr.service.signalr.net/client/?hub=signalrhub&id=9jlbpRdxBJlSHHUcj3WR6AyHa7qAK02&access_token=eyJhbGciOiJIUzI1NiIsImtpZCI6Ii0xNzI0ODg4NjU2IiwidHlwIjoiSldUIn0.eyJuYmYiOjE3MTQwMjUxNjMsImV4cCI6MTcxNDAyODc2MywiaWF0IjoxNzE0MDI1MTYzLCJhdWQiOiJodHRwczovL2J1aWxkMjAyNC1wcm9kLWVhc3QtdXMtc2lnbmFsci5zZXJ2aWNlLnNpZ25hbHIubmV0L2NsaWVudC8_aHViPXNpZ25hbHJodWIifQ.hX8IwCeAM5RWJvOZomxFMB2UFOiD_a2HKaFo9vjB94E	0%	Avira URL Cloud	safe
https://learn-video.azurefd.net/	0%	Avira URL Cloud	safe
https://www.cafbaseline.com/	0%	Avira URL Cloud	safe
https://html5sec.org/#133)	0%	Virustotal		Browse
http://package-microsoft.live/	0%	Avira URL Cloud	safe
https://learn-video.azurefd.net/	0%	Virustotal		Browse
https://learn-video.azurefd.net/vod/player?show=one-dev-minute&ep=what-are-the-main-features-of-the-new-terminal--one-dev-question	0%	Avira URL Cloud	safe
https://learn-video.azurefd.net/vod/player?id=54e6c532-a86c-4a39-81ab-40e28ce2ba96&locale=en-us&embedUrl=%2Fwindows%2Fdev-environment%2F	0%	Virustotal		Browse
http://package-microsoft.live/	0%	Virustotal		Browse
https://www.cafbaseline.com/	1%	Virustotal		Browse
https://learn-video.azurefd.net/vod/player?id=54e6c532-a86c-4a39-81ab-40e28ce2ba96&locale=en-us&embedUrl=%2Fwindows%2Fdev-environment%2F	0%	Avira URL Cloud	safe
https://learn-video.azurefd.net/vod/player?show=one-dev-minute&ep=what-can-i-do-with-wsl--one-dev-question	0%	Avira URL Cloud	safe
https://build2024-prod-east-us-signalr.service.signalr.net/client/?hub=signalrhub&id=XhCLBGvyUjXQWwADQCG2Bg1EK52gK02&access_token=eyJhbGciOiJIUzI1NiIsImtpZCI6Ii0xNzI0ODg4NjU2IiwidHlwIjoiSldUIn0.eyJuYmYiOjE3MTQwMjUxNjMsImV4cCI6MTcxNDAyODc2MywiaWF0IjoxNzE0MDI1MTYzLCJhdWQiOiJodHRwczovL2J1aWxkMjAyNC1wcm9kLWVhc3QtdXMtc2lnbmFsci5zZXJ2aWNlLnNpZ25hbHIubmV0L2NsaWVudC8_aHViPXNpZ25hbHJodWIifQ.hX8IwCeAM5RWJvOZomxFMB2UFOiD_a2HKaFo9vjB94E	0%	Avira URL Cloud	safe
https://consentdeliveryfd.azurefd.net/mscc/lib/v2/wcp-consent.js	0%	Avira URL Cloud	safe
https://html5sec.org/#108)	0%	Avira URL Cloud	safe
https://html5sec.org/#108)	0%	Virustotal		Browse
https://consentdeliveryfd.azurefd.net/mscc/lib/v2/wcp-consent.js	0%	Virustotal		Browse
https://www.clarity.ms/tag/g1ii9elxla	1%	Virustotal		Browse

Name	Malicious	Antivirus Detection	Reputation
https://aka.ms/docs/player?show=one-dev-minute&ep=what-can-i-do-with-wsl--one-dev-question	false		high
https://aka.ms/docs/player?show=one-dev-minute&ep=what-are-the-main-features-of-the-new-terminal--one-dev-question	false		high
https://www.clarity.ms/tag/g1ii9elxla	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://build2024-prod-east-us-signalr.service.signalr.net/client/?hub=signalrhub&id=9jlbpRdxBJlSHHUcj3WR6AyHa7qAK02&access_token=eyJhbGciOiJIUzI1NiIsImtpZCI6Ii0xNzI0ODg4NjU2IiwidHlwIjoiSldUIn0.eyJuYmYiOjE3MTQwMjUxNjMsImV4cCI6MTcxNDAyODc2MywiaWF0IjoxNzE0MDI1MTYzLCJhdWQiOiJodHRwczovL2J1aWxkMjAyNC1wcm9kLWVhc3QtdXMtc2lnbmFsci5zZXJ2aWNlLnNpZ25hbHIubmV0L2NsaWVudC8_aHViPXNpZ25hbHJodWIifQ.hX8IwCeAM5RWJvOZomxFMB2UFOiD_a2HKaFo9vjB94E	false	Avira URL Cloud: safe	unknown
https://js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js	false		high
http://package-microsoft.live/	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://learn-video.azurefd.net/vod/player?show=one-dev-minute&ep=what-are-the-main-features-of-the-new-terminal--one-dev-question	false	Avira URL Cloud: safe	unknown
https://learn-video.azurefd.net/vod/player?id=54e6c532-a86c-4a39-81ab-40e28ce2ba96&locale=en-us&embedUrl=%2Fwindows%2Fdev-environment%2F	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://learn-video.azurefd.net/vod/player?show=one-dev-minute&ep=what-can-i-do-with-wsl--one-dev-question	false	Avira URL Cloud: safe	unknown
https://aka.ms/banner_mslearn_tier1?wt.mc_id=build24_t1_learnpromotion_events	false		high
https://js.monitor.azure.com/scripts/c/ms.jsll-3.min.js	false		high
https://consentdeliveryfd.azurefd.net/mscc/lib/v2/wcp-consent.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://build2024-prod-east-us-signalr.service.signalr.net/client/?hub=signalrhub&id=XhCLBGvyUjXQWwADQCG2Bg1EK52gK02&access_token=eyJhbGciOiJIUzI1NiIsImtpZCI6Ii0xNzI0ODg4NjU2IiwidHlwIjoiSldUIn0.eyJuYmYiOjE3MTQwMjUxNjMsImV4cCI6MTcxNDAyODc2MywiaWF0IjoxNzE0MDI1MTYzLCJhdWQiOiJodHRwczovL2J1aWxkMjAyNC1wcm9kLWVhc3QtdXMtc2lnbmFsci5zZXJ2aWNlLnNpZ25hbHIubmV0L2NsaWVudC8_aHViPXNpZ25hbHJodWIifQ.hX8IwCeAM5RWJvOZomxFMB2UFOiD_a2HKaFo9vjB94E	false	Avira URL Cloud: safe	unknown

Name	IP	Active	Malicious	Antivirus Detection	Reputation
hosts.build2024-prod-east-us-signalr-function.azurewebsites.net	20.119.16.10	true	false		unknown
microsoftwindows.112.2o7.net	63.140.39.150	true	false		high
package-microsoft.live	45.77.42.129	true	false	0%, Virustotal, Browse	unknown
aka.ms	104.94.110.183	true	false		high
part-0042.t-0009.t-msedge.net	13.107.213.70	true	false	0%, Virustotal, Browse	unknown
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	0%, Virustotal, Browse	unknown
build2024-prod-east-us-signalr.service.signalr.net	20.88.155.27	true	false		unknown
dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com	3.218.149.40	true	false		high
adobetarget.data.adobedc.net	63.140.39.35	true	false	0%, Virustotal, Browse	unknown
part-0013.t-0009.t-msedge.net	13.107.246.41	true	false	0%, Virustotal, Browse	unknown
www.google.com	64.233.177.106	true	false		high
part-0029.t-0009.t-msedge.net	13.107.213.57	true	false	0%, Virustotal, Browse	unknown
part-0012.t-0009.t-msedge.net	13.107.246.40	true	false	0%, Virustotal, Browse	unknown
js.monitor.azure.com	unknown	unknown	false		high
a.clarity.ms	unknown	unknown	false	0%, Virustotal, Browse	unknown
microsoftmscompoc.tt.omtrdc.net	unknown	unknown	false	0%, Virustotal, Browse	unknown
build2024-prod-east-us-signalr-function.azurewebsites.net	unknown	unknown	false	0%, Virustotal, Browse	unknown
www.clarity.ms	unknown	unknown	false	0%, Virustotal, Browse	unknown
mdec.nelreports.net	unknown	unknown	false	0%, Virustotal, Browse	unknown
msfteventsb2c.b2clogin.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
assets.onestore.ms	unknown	unknown	false	0%, Virustotal, Browse	unknown
mscom.demdex.net	unknown	unknown	false		high
ajax.aspnetcdn.com	unknown	unknown	false		high
mem.gfx.ms	unknown	unknown	false	0%, Virustotal, Browse	unknown
c.s-microsoft.com	unknown	unknown	false		high
learn-video.azurefd.net	unknown	unknown	false	0%, Virustotal, Browse	unknown
dc.services.visualstudio.com	unknown	unknown	false		high
consentdeliveryfd.azurefd.net	unknown	unknown	false	0%, Virustotal, Browse	unknown
amp.azure.net	unknown	unknown	false		high

Name	Source	Malicious	Antivirus Detection	Reputation
https://outlook.live.com/owa/	chromecache_336.2.dr	false		high
http://wonko.com/post/html-escaping)	chromecache_579.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://aka.ms/windows/officehours	chromecache_481.2.dr	false		high
https://aka.ms/how-to-get-23H2	chromecache_481.2.dr	false		high
http://seclists.org/fulldisclosure/2009/Sep/394	chromecache_579.2.dr	false		high
https://assets.onestore.ms	chromecache_505.2.dr	false	URL Reputation: safe	unknown
https://www.linkedin.com/cws/share?url=$	chromecache_459.2.dr	false		high
https://www.youtube.com/watch?v=uO_F5W2LbSk	chromecache_470.2.dr	false		high
http://polymer.github.io/AUTHORS.txt	chromecache_448.2.dr, chromecache_459.2.dr	false	URL Reputation: safe	unknown
https://github.com/MicrosoftDocs/WSL/blob/b9c9ed43e292d366dd059a530c3423e839f04353/WSL/index.md	chromecache_470.2.dr	false		high
https://github.com/nguyen-dows	chromecache_311.2.dr	false		high
https://www.youtube.com/watch?v=FCfwc-NNo30	chromecache_603.2.dr, chromecache_486.2.dr	false		high
http://www.opensource.org/licenses/mit-license.php	chromecache_439.2.dr, chromecache_453.2.dr	false		high
https://github.com/scottjehl/picturefill/blob/master/Authors.txt;	chromecache_328.2.dr	false		high
https://aka.ms/pshelpmechoose	chromecache_459.2.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=695438.	chromecache_579.2.dr	false		high
https://github.com/scooley	chromecache_470.2.dr	false		high
https://dummyimage.com/539x190	chromecache_323.2.dr	false		high
https://authoring-docs-microsoft.poolparty.biz/devrel/43b2e5aa-8a6d-4de2-a252-692232e5edc8	chromecache_311.2.dr, chromecache_673.2.dr, chromecache_547.2.dr, chromecache_481.2.dr, chromecache_470.2.dr	false		high
https://aka.ms/wrh/other-versions	chromecache_481.2.dr	false		high
https://html5sec.org/#133)	chromecache_579.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://learn-video.azurefd.net/	chromecache_459.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://ezgif.com/optimize	chromecache_301.2.dr	false		high
https://github.com/microsoft/clarity	chromecache_428.2.dr	false		high
https://www.cafbaseline.com/	chromecache_459.2.dr	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://github.com/microsoftdocs/windows-insider/blob/master/wip/index.yml	chromecache_547.2.dr	false		high
https://www.youtube.com/watch?v=63wVlI9B3Ac&t=45s	chromecache_470.2.dr	false		high
https://www.youtube.com/watch?v=lOXatmtBb88	chromecache_470.2.dr	false		high
https://aka.ms/terminal	chromecache_311.2.dr	false		high
https://github.com/MicrosoftDocs/show-pr/blob/4adbac1c31372b72e613c9bd318ab6b10f3eb1ad/shows/one-dev	chromecache_333.2.dr, chromecache_412.2.dr, chromecache_626.2.dr, chromecache_407.2.dr	false		high
https://www.skype.com/en/	chromecache_336.2.dr	false		high
http://polymer.github.io/PATENTS.txt	chromecache_448.2.dr, chromecache_459.2.dr	false	URL Reputation: safe	unknown
https://github.com/MicrosoftDocs/windows-release-pr/blob/live/windows/release-information/index.yml	chromecache_481.2.dr	false		high
https://github.com/KarenYin01	chromecache_547.2.dr	false		high
https://github.com/MicrosoftDocs/WSL/blob/live/WSL/index.md	chromecache_470.2.dr	false		high
https://mathiasbynens.be/notes/ambiguous-ampersands)	chromecache_579.2.dr	false		high
https://schema.org	chromecache_459.2.dr	false		high
https://www.youtube.com/watch?v=OeomwrHLAR4	chromecache_470.2.dr	false		high
https://github.com/MicrosoftDocs/windows-insider-pr/blob/5b7c4ba9375b0d4b8b4481b897284381ff8dce07/wi	chromecache_547.2.dr	false		high
http://underscorejs.org/LICENSE	chromecache_579.2.dr	false		high
https://www.onenote.com/	chromecache_336.2.dr	false		high
https://www.youtube.com/watch?v=JuJ_Nx_bFEM	chromecache_470.2.dr	false		high
https://github.com/MicrosoftDocs/windows-release-pr/blob/c12aa7ecc81418b4e40497179dd5386054dfb731/wi	chromecache_481.2.dr	false		high
https://octokit.github.io/rest.js/#throttling	chromecache_459.2.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/watch?v=lwhMThePdIo	chromecache_470.2.dr	false		high
https://www.youtube.com/watch?v=b9I7NZHni5c	chromecache_470.2.dr	false		high
https://aka.ms/PluginsForWindows	chromecache_673.2.dr	false		high
https://github.com/js-cookie/js-cookie	chromecache_448.2.dr, chromecache_459.2.dr, chromecache_338.2.dr	false		high
http://github.com/aFarkas/lazysizes	chromecache_393.2.dr	false		high
https://github.com/Blake-Madden	chromecache_673.2.dr	false		high
https://developer.mozilla.org/en-US/docs/JavaScript/Reference/Operators/Bitwise_Operators	chromecache_579.2.dr	false		high
https://medium.com/	chromecache_347.2.dr	false		high
https://aka.ms/Win10UpdateSize	chromecache_481.2.dr	false		high
https://github.com/alexbuckgit	chromecache_673.2.dr, chromecache_547.2.dr	false		high
https://github.com//issues	chromecache_311.2.dr, chromecache_673.2.dr, chromecache_470.2.dr	false		high
https://github.com/stevewhims	chromecache_673.2.dr	false		high
http://www.gimp.org/xmp/	chromecache_644.2.dr, chromecache_467.2.dr	false		high
https://www.youtube.com/watch?v=WnzKfwL3Iy0	chromecache_470.2.dr	false		high
https://html5sec.org/#108)	chromecache_579.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.9.1.min.js	chromecache_336.2.dr	false		high
https://github.com/microsoft/Windows-IoT-Samples	chromecache_493.2.dr, chromecache_395.2.dr	false		high
https://github.com/MicrosoftDocs/wsl/issues/new?template=doc-issue.yml	chromecache_470.2.dr	false		high
https://people.mozilla.org/~jorendorff/es6-draft.html#sec-tolength).	chromecache_579.2.dr	false		high
https://github.com/v-hearya	chromecache_673.2.dr	false		high
https://github.com/DCtheGeek	chromecache_547.2.dr, chromecache_470.2.dr	false		high
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_448.2.dr, chromecache_459.2.dr	false	URL Reputation: safe	unknown
https://www.linkedin.com/profile/add?startTask=CERTIFICATION_NAME&name=$	chromecache_459.2.dr	false		high
http://ecma-international.org/ecma-262/6.0/#sec-tolength).	chromecache_579.2.dr	false		high
https://github.com/MicrosoftDocs/terminal/issues/new?template=customer-feedback.yml	chromecache_311.2.dr	false		high
https://dummyimage.com/1083x190	chromecache_323.2.dr	false		high
https://msft.social/6yBBZZ	chromecache_407.2.dr	false		high
https://scottjehl.github.io/picturefill/	chromecache_328.2.dr	false	URL Reputation: safe	unknown
http://www.info-zip.org/FAQ.html#backslashes	chromecache_579.2.dr	false		high
https://github.com/mairaw	chromecache_311.2.dr	false		high
http://ecma-international.org/ecma-262/6.0/#sec-object.prototype.tostring)	chromecache_579.2.dr	false		high
https://github.com/cinnamon-msft	chromecache_311.2.dr	false		high
https://mem.gfx.ms	chromecache_505.2.dr, chromecache_347.2.dr	false	URL Reputation: safe	unknown
https://aka.ms/yourcaliforniaprivacychoices	chromecache_311.2.dr, chromecache_333.2.dr, chromecache_412.2.dr, chromecache_626.2.dr, chromecache_673.2.dr, chromecache_547.2.dr, chromecache_481.2.dr, chromecache_407.2.dr, chromecache_470.2.dr	false		high
https://github.com/MicrosoftDocs/windows-insider-pr/blob/live/wip/index.yml	chromecache_547.2.dr	false		high
https://github.com/craigloewen-msft	chromecache_470.2.dr	false		high
https://code.visualstudio.com/docs	chromecache_673.2.dr	false		high
https://onedrive.live.com/about/en-us/	chromecache_336.2.dr	false		high
https://www.youtube-nocookie.com/embed/hB0JCNgqQtk?enablejsapi=1	chromecache_631.2.dr, chromecache_642.2.dr	false		high
https://github.com/avestura	chromecache_673.2.dr	false		high
https://www.youtube.com/watch?v=sqdHy1rC2t4	chromecache_470.2.dr	false		high
https://dummyimage.com/1920x250	chromecache_323.2.dr	false		high
https://github.com/nodeca/pako/	chromecache_579.2.dr	false		high

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.41	part-0013.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.40	part-0012.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
63.140.38.189	unknown	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
104.94.110.183	aka.ms	United States	16625	AKAMAI-ASUS	false
23.54.202.151	unknown	United States	16625	AKAMAI-ASUS	false
13.107.213.41	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
63.140.39.35	adobetarget.data.adobedc.net	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
63.140.39.150	microsoftwindows.112.2o7.net	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
13.107.213.57	part-0029.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
20.88.155.27	build2024-prod-east-us-signalr.service.signalr.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
63.140.39.248	unknown	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
45.77.42.129	package-microsoft.live	United States	20473	AS-CHOOPAUS	false
34.236.6.138	unknown	United States	14618	AMAZON-AESUS	false
3.218.149.40	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
64.233.177.106	www.google.com	United States	15169	GOOGLEUS	false
13.107.213.70	part-0042.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1431460
Start date and time:	2024-04-25 08:04:42 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 23s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://package-microsoft.live
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@42/678@66/18
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://learn.microsoft.com/en-us/windows/package-manager/#main Browse: https://aka.ms/banner_mslearn_tier1?wt.mc_id=build24_t1_learnpromotion_events Browse: https://www.microsoft.com/ Browse: https://learn.microsoft.com/en-us/ Browse: https://learn.microsoft.com/en-us/windows/ Browse: https://learn.microsoft.com/en-us/windows/release-health/ Browse: https://learn.microsoft.com/en-us/windows-server/ Browse: https://learn.microsoft.com/en-us/windows/iot/ Browse: https://learn.microsoft.com/en-us/windows-insider/ Browse: https://learn.microsoft.com/en-us/windows-365/ Browse: https://learn.microsoft.com/en-us/windows/dev-environment/ Browse: https://learn.microsoft.com/en-us/windows/wsl/ Browse: https://learn.microsoft.com/en-us/windows/terminal/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 539 x 303, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	12925
Entropy (8bit):	7.744051907436348
Encrypted:	false
SSDEEP:	384:bKOKY9GIhriZBdjP888/4IibkRjqbqgHewOyx:usid7kZqb7fOyx
MD5:	23FD57CEDAB2153D08A46A923984AFFD
SHA1:	6355AB2296A51895ADD897D8316BCF4649135144
SHA-256:	744A8BF4BE3E20DD0A93C5AD6472B0716F03E7A67F601BB48D4440F9E2CA12F3
SHA-512:	BE432BC646651495CFBA7FC0ECCF0D42A36CDED4913699B9ED785C75C8643D36FF00842FAA17ECEBF2039167CCCADCA1DF4D11FE63EE701428A77CFE4E02C8AF
Malicious:	false
Reputation:	low
URL:	https://learn.microsoft.com/en-us/windows/images/wsa-icon.png
Preview:	.PNG........IHDR......./......$......sRGB....... .IDATx^..s......E..O.<$..%.\|l.^.=...G..6.....{l..IJ.D..)...F.U.YG...b.XU]..t.B.Q......x.eVV0.??....P..P..P..R .6R.fQ..P..P.........(..(..(P...F...8............P..P..P..U..T^.G..@..@...6..........@......K.(..(..(.....@..@..@...T.`.Ryi..P..P..P....(..(..(....lT/............x..P..P..P.R...J.q.@..@..@.`...........T...Q..4..(..(..(.l...@..@..@.J..6...Q..P..P....<..(..(..(P...F...8............P..P..P..U..T^.G..@..@...6..........@......K.(..(..(.....@..@..@...T.`.Ryi..P..P..P....(..(..(....lT/............x..P..P..P.R...J.q.@..@..@.`...........T...Q..4..(..(..(.l...(K.~WR\Vk......3..0...Y.`...1..+...a.H....}.A4.q1.WV .CEqG..w. L..<^YW..S.`...u........0....jv.....:...wS...F............9EA[....G..G...6.H"!LA.S....\|..g.....sW.tze...8..8..`......d93....hk.........<...{R..8.....l..y...@V..<.KO.rcO.~......I.=`.Fq}.pf.@.'...8:z.eG......./S.h@...]...v..N[..4.:...~.m.....J.....6...^. .JECi{=..f.....9.....

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 25, 2024 08:05:32.684374094 CEST	53	60364	1.1.1.1	192.168.2.4
Apr 25, 2024 08:05:32.726226091 CEST	53	63268	1.1.1.1	192.168.2.4
Apr 25, 2024 08:05:33.348432064 CEST	53	55207	1.1.1.1	192.168.2.4
Apr 25, 2024 08:05:33.593512058 CEST	64581	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:05:33.594047070 CEST	58053	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:05:33.731009960 CEST	53	64581	1.1.1.1	192.168.2.4
Apr 25, 2024 08:05:33.881314039 CEST	53	58053	1.1.1.1	192.168.2.4
Apr 25, 2024 08:05:34.412950039 CEST	65066	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:05:34.413098097 CEST	59276	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:05:34.550266027 CEST	53	65066	1.1.1.1	192.168.2.4
Apr 25, 2024 08:05:34.550535917 CEST	53	59276	1.1.1.1	192.168.2.4
Apr 25, 2024 08:05:36.226447105 CEST	64769	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:05:36.226819992 CEST	58175	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:05:36.336299896 CEST	53	64769	1.1.1.1	192.168.2.4
Apr 25, 2024 08:05:36.336503983 CEST	53	58175	1.1.1.1	192.168.2.4
Apr 25, 2024 08:05:37.302627087 CEST	62756	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:05:37.302906990 CEST	59407	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:05:38.963830948 CEST	53644	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:05:38.964140892 CEST	50263	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:05:39.011794090 CEST	57057	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:05:39.012262106 CEST	60255	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:05:39.078386068 CEST	53	53644	1.1.1.1	192.168.2.4
Apr 25, 2024 08:05:39.122466087 CEST	53	50263	1.1.1.1	192.168.2.4
Apr 25, 2024 08:05:39.138858080 CEST	53	60255	1.1.1.1	192.168.2.4
Apr 25, 2024 08:05:39.153428078 CEST	53	57057	1.1.1.1	192.168.2.4
Apr 25, 2024 08:05:40.915090084 CEST	53	63777	1.1.1.1	192.168.2.4
Apr 25, 2024 08:05:42.597459078 CEST	59529	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:05:42.597611904 CEST	52204	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:05:51.398705006 CEST	51933	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:05:51.398940086 CEST	58634	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:05:51.508585930 CEST	53	51933	1.1.1.1	192.168.2.4
Apr 25, 2024 08:05:51.509207964 CEST	53	58634	1.1.1.1	192.168.2.4
Apr 25, 2024 08:05:51.852243900 CEST	53	64521	1.1.1.1	192.168.2.4
Apr 25, 2024 08:05:53.196136951 CEST	51280	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:05:53.196244955 CEST	54923	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:05:53.376955032 CEST	64457	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:05:53.377383947 CEST	49290	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:05:55.745883942 CEST	138	138	192.168.2.4	192.168.2.255
Apr 25, 2024 08:05:58.661541939 CEST	64599	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:05:58.661909103 CEST	55429	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:05:58.716593981 CEST	59964	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:05:58.716720104 CEST	60085	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:05:59.463129997 CEST	63965	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:05:59.463380098 CEST	58972	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:05:59.465559006 CEST	50965	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:05:59.465714931 CEST	58115	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:06:00.035073042 CEST	52733	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:06:00.035819054 CEST	57877	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:06:00.123224020 CEST	56751	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:06:00.123527050 CEST	53514	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:06:02.258552074 CEST	55439	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:06:02.258789062 CEST	59632	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:06:02.397062063 CEST	53	55439	1.1.1.1	192.168.2.4
Apr 25, 2024 08:06:02.409128904 CEST	53	59632	1.1.1.1	192.168.2.4
Apr 25, 2024 08:06:03.139065027 CEST	49465	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:06:03.139240980 CEST	62545	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:06:03.173268080 CEST	65015	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:06:03.173743010 CEST	59794	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:06:03.743230104 CEST	53033	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:06:03.743479967 CEST	50944	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:06:03.745774031 CEST	53090	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:06:03.745774031 CEST	59485	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:06:03.869736910 CEST	53	59485	1.1.1.1	192.168.2.4
Apr 25, 2024 08:06:03.870398045 CEST	53	53090	1.1.1.1	192.168.2.4
Apr 25, 2024 08:06:03.881612062 CEST	53	50944	1.1.1.1	192.168.2.4
Apr 25, 2024 08:06:03.892534971 CEST	53	53033	1.1.1.1	192.168.2.4
Apr 25, 2024 08:06:04.930346966 CEST	65301	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:06:04.930613995 CEST	55606	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:06:05.056376934 CEST	53	55606	1.1.1.1	192.168.2.4
Apr 25, 2024 08:06:05.056529999 CEST	53	65301	1.1.1.1	192.168.2.4
Apr 25, 2024 08:06:06.497685909 CEST	54369	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:06:06.497874022 CEST	51172	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:06:10.158087015 CEST	53260	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:06:10.158404112 CEST	58711	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:06:10.268651962 CEST	53	58711	1.1.1.1	192.168.2.4
Apr 25, 2024 08:06:10.666388988 CEST	53	49913	1.1.1.1	192.168.2.4
Apr 25, 2024 08:06:29.799433947 CEST	59927	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:06:29.799619913 CEST	55783	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:06:30.815110922 CEST	56903	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:06:30.815340042 CEST	63363	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:06:30.924854040 CEST	53	56903	1.1.1.1	192.168.2.4
Apr 25, 2024 08:06:30.925525904 CEST	53	63363	1.1.1.1	192.168.2.4
Apr 25, 2024 08:06:31.839638948 CEST	53	49424	1.1.1.1	192.168.2.4
Apr 25, 2024 08:06:32.523602962 CEST	53	56806	1.1.1.1	192.168.2.4
Apr 25, 2024 08:06:38.896789074 CEST	53358	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:06:38.896889925 CEST	60807	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:06:39.564888000 CEST	65112	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:06:39.565257072 CEST	64601	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:06:39.566684008 CEST	50449	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:06:39.566814899 CEST	52721	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:06:39.675997972 CEST	53	64601	1.1.1.1	192.168.2.4
Apr 25, 2024 08:06:39.676011086 CEST	53	65112	1.1.1.1	192.168.2.4
Apr 25, 2024 08:06:39.678217888 CEST	53	50449	1.1.1.1	192.168.2.4
Apr 25, 2024 08:06:39.693480015 CEST	53	52721	1.1.1.1	192.168.2.4
Apr 25, 2024 08:06:43.090406895 CEST	59452	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:06:43.090629101 CEST	50436	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:06:44.689441919 CEST	59341	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:06:44.689595938 CEST	55218	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:06:44.789150000 CEST	53	59855	1.1.1.1	192.168.2.4
Apr 25, 2024 08:06:44.789546967 CEST	53	53436	1.1.1.1	192.168.2.4
Apr 25, 2024 08:06:44.815356016 CEST	53	55218	1.1.1.1	192.168.2.4
Apr 25, 2024 08:06:44.815895081 CEST	53	59341	1.1.1.1	192.168.2.4
Apr 25, 2024 08:06:44.900428057 CEST	53	56679	1.1.1.1	192.168.2.4
Apr 25, 2024 08:06:49.386507988 CEST	57361	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:06:49.386708021 CEST	59174	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:06:59.152756929 CEST	63296	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:06:59.152853966 CEST	59675	53	192.168.2.4	1.1.1.1
Apr 25, 2024 08:06:59.396536112 CEST	53	55142	1.1.1.1	192.168.2.4

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Apr 25, 2024 08:05:33.881398916 CEST	192.168.2.4	1.1.1.1	c22b	(Port unreachable)	Destination Unreachable
Apr 25, 2024 08:05:42.744368076 CEST	192.168.2.4	1.1.1.1	c275	(Port unreachable)	Destination Unreachable
Apr 25, 2024 08:06:36.337682962 CEST	192.168.2.4	1.1.1.1	c2e3	(Port unreachable)	Destination Unreachable
Apr 25, 2024 08:06:39.035355091 CEST	192.168.2.4	1.1.1.1	c2cd	(Port unreachable)	Destination Unreachable
Apr 25, 2024 08:06:40.511742115 CEST	192.168.2.4	1.1.1.1	c2e3	(Port unreachable)	Destination Unreachable
Apr 25, 2024 08:06:43.234616041 CEST	192.168.2.4	1.1.1.1	c275	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
Apr 25, 2024 08:05:34.090748072 CEST	437	OUT	GET / HTTP/1.1 Host: package-microsoft.live Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 25, 2024 08:05:34.409754992 CEST	168	IN	HTTP/1.1 308 Permanent Redirect Connection: close Location: https://package-microsoft.live/ Server: Caddy Date: Thu, 25 Apr 2024 06:05:34 GMT Content-Length: 0

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:05:35 UTC	665	OUT	GET / HTTP/1.1 Host: package-microsoft.live Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 06:05:35 UTC	299	IN	HTTP/1.1 301 Moved Permanently Alt-Svc: h3=":443"; ma=2592000 Location: https://learn.microsoft.com/en-us/windows/package-manager/ X-Content-Type-Options: nosniff X-Robots-Tag: noindex, nofollow, nosnippet, noarchive Date: Thu, 25 Apr 2024 06:05:35 GMT Content-Length: 0 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:05:37 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-25 06:05:37 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/073D) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=176297 Date: Thu, 25 Apr 2024 06:05:37 GMT Connection: close X-CID: 2

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://package-microsoft.live

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 259

Chrome Cache Entry: 260

Chrome Cache Entry: 261

Chrome Cache Entry: 262

Chrome Cache Entry: 263

Chrome Cache Entry: 264

Chrome Cache Entry: 265

Chrome Cache Entry: 266

Chrome Cache Entry: 267

Chrome Cache Entry: 268

Chrome Cache Entry: 269

Chrome Cache Entry: 270

Chrome Cache Entry: 271

Chrome Cache Entry: 272

Chrome Cache Entry: 273

Chrome Cache Entry: 274

Chrome Cache Entry: 275

Chrome Cache Entry: 276

Chrome Cache Entry: 277

Chrome Cache Entry: 278

Chrome Cache Entry: 279

Chrome Cache Entry: 280

Chrome Cache Entry: 281

Chrome Cache Entry: 282

Chrome Cache Entry: 283

Chrome Cache Entry: 284

Chrome Cache Entry: 285

Chrome Cache Entry: 286

Windows Analysis Report
http://package-microsoft.live

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:05:37 UTC	549	OUT	GET /scripts/c/ms.jsll-3.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 06:05:38 UTC	960	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 06:05:38 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 185160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=1800, immutable, no-transform Last-Modified: Mon, 25 Mar 2024 17:36:27 GMT ETag: 0x8DC4CF219992427 x-ms-request-id: c7df2a70-701e-0045-0b5b-95cc90000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 3.2.17 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-3.2.17.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240425T060537Z-16f56cb894fff7nsaw34vw5a9w00000003e0000000001tfw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-25 06:05:38 UTC	15424	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 4c 4c 20 53 4b 55 2c 20 33 2e 32 2e 31 37 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 6e 29 74 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 Data Ascii: /! 1DS JSLL SKU, 3.2.17 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&def
2024-04-25 06:05:38 UTC	16384	IN	Data Raw: 39 36 37 32 39 35 7c 33 26 74 29 3e 3e 3e 30 2c 6e 3d 30 29 3b 72 65 74 75 72 6e 20 72 7d 76 61 72 20 57 72 3d 65 2c 47 72 3d 22 32 2e 38 2e 31 38 22 2c 58 72 3d 22 2e 22 2b 4b 72 28 36 29 2c 51 72 3d 30 3b 66 75 6e 63 74 69 6f 6e 20 4a 72 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 5b 4d 5d 7c 7c 39 3d 3d 3d 65 5b 4d 5d 7c 7c 21 2b 65 5b 4d 5d 7d 66 75 6e 63 74 69 6f 6e 20 59 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 4d 74 28 65 2b 51 72 2b 2b 2b 28 28 74 3d 76 6f 69 64 20 30 21 3d 3d 74 26 26 74 29 3f 22 2e 22 2b 47 72 3a 70 29 2b 58 72 29 7d 66 75 6e 63 74 69 6f 6e 20 24 72 28 65 29 7b 76 61 72 20 61 3d 7b 69 64 3a 59 72 28 22 5f 61 69 44 61 74 61 2d 22 2b 28 65 7c 7c 70 29 2b 22 2e 22 2b 47 72 29 2c 61 63 63 65 70 74 3a 4a 72 2c 67 65 74 3a 66 75 Data Ascii: 967295\|3&t)>>>0,n=0);return r}var Wr=e,Gr="2.8.18",Xr="."+Kr(6),Qr=0;function Jr(e){return 1===e[M]\|\|9===e[M]\|\|!+e[M]}function Yr(e,t){return Mt(e+Qr+++((t=void 0!==t&&t)?"."+Gr:p)+Xr)}function $r(e){var a={id:Yr("_aiData-"+(e\|\|p)+"."+Gr),accept:Jr,get:fu
2024-04-25 06:05:38 UTC	16384	IN	Data Raw: 2c 68 5b 51 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 4e 26 26 74 6e 28 55 61 29 2c 68 5b 68 65 5d 28 29 26 26 74 6e 28 22 43 6f 72 65 20 73 68 6f 75 6c 64 20 6e 6f 74 20 62 65 20 69 6e 69 74 69 61 6c 69 7a 65 64 20 6d 6f 72 65 20 74 68 61 6e 20 6f 6e 63 65 22 29 2c 43 3d 65 7c 7c 7b 7d 2c 68 5b 76 65 5d 3d 43 2c 59 28 65 5b 6d 65 5d 29 26 26 74 6e 28 22 50 6c 65 61 73 65 20 70 72 6f 76 69 64 65 20 69 6e 73 74 72 75 6d 65 6e 74 61 74 69 6f 6e 20 6b 65 79 22 29 2c 69 3d 72 2c 68 5b 4c 61 5d 3d 72 3b 65 3d 5a 74 28 43 2e 64 69 73 61 62 6c 65 44 62 67 45 78 74 29 2c 21 30 3d 3d 3d 65 26 26 50 26 26 28 69 5b 49 65 5d 28 50 29 2c 50 3d 6e 75 6c 6c 29 2c 69 26 26 21 50 26 26 21 30 21 3d 3d 65 26 26 28 50 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b Data Ascii: ,h[Q]=function(e,t,n,r){N&&tn(Ua),h[he]()&&tn("Core should not be initialized more than once"),C=e\|\|{},h[ve]=C,Y(e[me])&&tn("Please provide instrumentation key"),i=r,h[La]=r;e=Zt(C.disableDbgExt),!0===e&&P&&(i[Ie](P),P=null),i&&!P&&!0!==e&&(P=function(e){
2024-04-25 06:05:38 UTC	16384	IN	Data Raw: 6f 6e 20 4b 73 28 65 29 7b 76 61 72 20 74 2c 6e 3d 6e 75 6c 6c 3b 69 66 28 65 29 74 72 79 7b 65 5b 4c 73 5d 3f 6e 3d 7a 73 28 65 5b 4c 73 5d 29 3a 65 5b 4d 73 5d 26 26 65 5b 4d 73 5d 5b 4c 73 5d 3f 6e 3d 7a 73 28 65 5b 4d 73 5d 5b 4c 73 5d 29 3a 65 2e 65 78 63 65 70 74 69 6f 6e 26 26 65 2e 65 78 63 65 70 74 69 6f 6e 5b 4c 73 5d 3f 6e 3d 7a 73 28 65 2e 65 78 63 65 70 74 69 6f 6e 5b 4c 73 5d 29 3a 6a 73 28 65 29 3f 6e 3d 65 3a 6a 73 28 65 5b 55 73 5d 29 3f 6e 3d 65 5b 55 73 5d 3a 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6f 70 65 72 61 26 26 65 5b 48 73 5d 3f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 65 5b 77 6f 5d 28 22 5c 6e 22 29 2c 72 3d 30 3b 72 3c 6e 5b 68 5d 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 6e 5b 72 Data Ascii: on Ks(e){var t,n=null;if(e)try{e[Ls]?n=zs(e[Ls]):e[Ms]&&e[Ms][Ls]?n=zs(e[Ms][Ls]):e.exception&&e.exception[Ls]?n=zs(e.exception[Ls]):js(e)?n=e:js(e[Us])?n=e[Us]:window&&window.opera&&e[Hs]?n=function(e){for(var t=[],n=e[wo]("\n"),r=0;r<n[h];r++){var i=n[r
2024-04-25 06:05:38 UTC	16384	IN	Data Raw: 6b 54 72 61 63 65 20 66 61 69 6c 65 64 2c 20 74 72 61 63 65 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 3a 20 22 2b 76 28 72 29 2c 7b 65 78 63 65 70 74 69 6f 6e 3a 73 65 28 72 29 7d 29 7d 7d 2c 53 2e 74 72 61 63 6b 4d 65 74 72 69 63 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 72 79 7b 76 61 72 20 6e 3d 54 63 28 65 2c 74 63 5b 52 63 5d 2c 74 63 5b 4d 63 5d 2c 53 5b 4c 63 5d 28 29 2c 74 29 3b 53 5b 47 5d 5b 55 63 5d 28 6e 29 7d 63 61 74 63 68 28 72 29 7b 64 28 31 2c 33 36 2c 22 74 72 61 63 6b 4d 65 74 72 69 63 20 66 61 69 6c 65 64 2c 20 6d 65 74 72 69 63 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 3a 20 22 2b 76 28 72 29 2c 7b 65 78 63 65 70 74 69 6f 6e 3a 73 65 28 72 29 7d 29 7d 7d 2c 53 5b 56 63 5d 3d 66 75 Data Ascii: kTrace failed, trace will not be collected: "+v(r),{exception:se(r)})}},S.trackMetric=function(e,t){try{var n=Tc(e,tc[Rc],tc[Mc],S[Lc](),t);S[G][Uc](n)}catch(r){d(1,36,"trackMetric failed, metric will not be collected: "+v(r),{exception:se(r)})}},S[Vc]=fu
2024-04-25 06:05:38 UTC	16384	IN	Data Raw: 7c 4c 74 28 72 2c 22 2f 22 29 29 26 26 28 61 2e 73 79 6e 63 3d 33 29 29 2c 65 26 26 28 61 2e 74 61 72 67 65 74 55 72 69 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 22 3b 73 77 69 74 63 68 28 74 2e 74 61 67 4e 61 6d 65 29 7b 63 61 73 65 22 41 22 3a 63 61 73 65 22 41 52 45 41 22 3a 65 3d 74 2e 68 72 65 66 7c 7c 22 22 3b 62 72 65 61 6b 3b 63 61 73 65 22 49 4d 47 22 3a 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 29 7b 76 61 72 20 65 3d 4d 75 28 74 2c 4c 75 29 3b 69 66 28 65 26 26 31 3d 3d 3d 65 2e 6c 65 6e 67 74 68 29 7b 69 66 28 65 5b 30 5d 2e 68 72 65 66 29 72 65 74 75 72 6e 20 65 5b 30 5d 2e 68 72 65 66 3b 69 66 28 65 5b 30 5d 2e 73 72 63 29 72 65 74 75 72 6e 20 65 5b 30 5d 2e 73 72 63 7d 7d 72 65 74 75 72 6e 22 22 7d 28 29 3b 62 72 Data Ascii: \|Lt(r,"/"))&&(a.sync=3)),e&&(a.targetUri=function(t){var e="";switch(t.tagName){case"A":case"AREA":e=t.href\|\|"";break;case"IMG":e=function(){if(t){var e=Mu(t,Lu);if(e&&1===e.length){if(e[0].href)return e[0].href;if(e[0].src)return e[0].src}}return""}();br
2024-04-25 06:05:38 UTC	16384	IN	Data Raw: 72 79 28 65 2c 74 29 7d 2c 66 2e 74 72 61 63 6b 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 29 7b 6e 2e 6c 61 74 65 6e 63 79 3d 6e 2e 6c 61 74 65 6e 63 79 7c 7c 31 2c 6e 2e 62 61 73 65 44 61 74 61 3d 6e 2e 62 61 73 65 44 61 74 61 7c 7c 7b 7d 2c 6e 2e 64 61 74 61 3d 6e 2e 64 61 74 61 7c 7c 7b 7d 2c 75 65 28 65 29 26 26 65 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6e 2e 64 61 74 61 5b 65 5d 3d 74 7d 29 2c 66 2e 63 6f 72 65 2e 74 72 61 63 6b 28 6e 29 7d 2c 66 2e 74 72 61 63 6b 50 61 67 65 56 69 65 77 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 49 2e 5f 72 65 63 6f 72 64 54 69 6d 65 53 70 61 6e 28 22 64 77 65 6c 6c 54 69 6d 65 22 2c 21 31 29 2c 54 2e 76 3d 30 2c 69 3d 21 31 2c 66 2e 69 64 2e 69 6e 69 74 69 61 6c 69 7a 65 49 64 73 28 29 Data Ascii: ry(e,t)},f.trackEvent=function(n,e){n.latency=n.latency\|\|1,n.baseData=n.baseData\|\|{},n.data=n.data\|\|{},ue(e)&&ee(e,function(e,t){n.data[e]=t}),f.core.track(n)},f.trackPageView=function(e,t){I._recordTimeSpan("dwellTime",!1),T.v=0,i=!1,f.id.initializeIds()
2024-04-25 06:05:38 UTC	16384	IN	Data Raw: 65 72 43 61 73 65 28 29 3d 3d 69 29 7b 6e 3d 21 30 3b 62 72 65 61 6b 7d 7d 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 56 66 28 65 2c 74 2c 6e 2c 72 29 7b 74 26 26 6e 26 26 30 3c 6e 2e 6c 65 6e 67 74 68 26 26 28 72 26 26 4f 66 5b 74 5d 3f 28 65 2e 68 64 72 73 5b 4f 66 5b 74 5d 5d 3d 6e 2c 65 2e 75 73 65 48 64 72 73 3d 21 30 29 3a 65 2e 75 72 6c 2b 3d 22 26 22 2b 74 2b 22 3d 22 2b 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 48 66 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 26 26 28 48 74 28 74 29 3f 65 3d 5b 74 5d 2e 63 6f 6e 63 61 74 28 65 29 3a 46 28 74 29 26 26 28 65 3d 74 2e 63 6f 6e 63 61 74 28 65 29 29 29 2c 65 7d 4d 66 28 63 66 2c 63 66 2c 21 31 29 2c 4d 66 28 6e 66 2c 6e 66 29 2c 4d 66 28 72 66 2c 22 43 6c 69 65 6e 74 2d 49 64 22 29 2c 4d 66 28 Data Ascii: erCase()==i){n=!0;break}}}return n}function Vf(e,t,n,r){t&&n&&0<n.length&&(r&&Of[t]?(e.hdrs[Of[t]]=n,e.useHdrs=!0):e.url+="&"+t+"="+n)}function Hf(e,t){return t&&(Ht(t)?e=[t].concat(e):F(t)&&(e=t.concat(e))),e}Mf(cf,cf,!1),Mf(nf,nf),Mf(rf,"Client-Id"),Mf(
2024-04-25 06:05:38 UTC	16384	IN	Data Raw: 61 74 68 2e 63 65 69 6c 28 72 29 2a 74 5b 31 5d 29 2c 30 3c 3d 6e 26 26 30 3c 3d 74 5b 31 5d 26 26 6e 3e 74 5b 31 5d 26 26 28 6e 3d 74 5b 31 5d 29 2c 74 2e 70 75 73 68 28 6e 29 2c 42 5b 65 5d 3d 74 29 7d 29 7d 2c 6c 2e 66 6c 75 73 68 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 21 30 29 2c 55 7c 7c 28 6e 3d 6e 7c 7c 31 2c 65 3f 6e 75 6c 6c 3d 3d 4c 3f 28 63 28 29 2c 6d 28 31 2c 30 2c 6e 29 2c 4c 3d 73 28 66 75 6e 63 74 69 6f 6e 28 29 7b 4c 3d 6e 75 6c 6c 2c 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 61 28 31 2c 30 2c 74 29 2c 76 28 29 2c 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 44 2e 69 73 43 6f 6d 70 6c 65 74 65 6c 79 49 64 6c 65 28 29 3f 65 28 29 3a 4c 3d 73 28 66 75 6e 63 74 69 6f 6e 28 29 7b 4c Data Ascii: ath.ceil(r)*t[1]),0<=n&&0<=t[1]&&n>t[1]&&(n=t[1]),t.push(n),B[e]=t)})},l.flush=function(e,t,n){void 0===e&&(e=!0),U\|\|(n=n\|\|1,e?null==L?(c(),m(1,0,n),L=s(function(){L=null,function r(e,t){a(1,0,t),v(),function n(e){D.isCompletelyIdle()?e():L=s(function(){L
2024-04-25 06:05:38 UTC	16384	IN	Data Raw: 28 29 7d 7d 29 2c 65 7d 74 28 73 70 2c 61 70 3d 43 74 29 2c 73 70 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 63 70 3d 73 70 3b 66 75 6e 63 74 69 6f 6e 20 75 70 28 74 29 7b 76 61 72 20 6e 3d 70 6f 28 29 2c 72 3d 74 61 28 29 3b 72 65 28 75 70 2c 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 67 65 74 54 72 61 63 65 49 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 26 26 74 2e 67 65 74 54 72 61 63 65 43 74 78 26 26 74 2e 67 65 74 54 72 61 63 65 43 74 78 28 29 2e 67 65 74 54 72 61 63 65 49 64 28 29 7c 7c 72 7d 2c 65 2e 67 65 74 4c 61 73 74 50 61 67 65 56 69 65 77 49 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 7d 7d 29 7d 75 70 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 6c 70 3d 75 70 2c 66 70 3d 22 64 75 72 61 Data Ascii: ()}}),e}t(sp,ap=Ct),sp.__ieDyn=1;var cp=sp;function up(t){var n=po(),r=ta();re(up,this,function(e){e.getTraceId=function(){return t&&t.getTraceCtx&&t.getTraceCtx().getTraceId()\|\|r},e.getLastPageViewId=function(){return n}})}up.__ieDyn=1;var lp=up,fp="dura

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:05:37 UTC	682	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE
2024-04-25 06:05:37 UTC	712	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 06:05:37 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 3410 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 87782d18-a01e-009a-7bce-96d09d000000 x-ms-version: 2009-09-19 x-azure-ref: 20240425T060537Z-16f56cb894fhr8rcrxcb44u4s400000003g00000000000mq Accept-Ranges: bytes
2024-04-25 06:05:38 UTC	16383	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-04-25 06:05:38 UTC	16383	IN	Data Raw: 61 2d 6c 61 62 65 6c 3d 22 27 2b 69 2e 65 73 63 61 70 65 48 74 6d 6c 28 74 68 69 73 2e 74 65 78 74 52 65 73 6f 75 72 63 65 73 2e 70 72 65 66 65 72 65 6e 63 65 73 44 69 61 6c 6f 67 43 6c 6f 73 65 4c 61 62 65 6c 29 2b 27 22 20 63 6c 61 73 73 3d 22 27 2b 61 2e 63 6c 6f 73 65 4d 6f 64 61 6c 49 63 6f 6e 2b 27 22 20 74 61 62 69 6e 64 65 78 3d 22 30 22 3e 26 23 78 32 37 31 35 3b 3c 2f 62 75 74 74 6f 6e 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 72 6f 6c 65 3d 22 64 6f 63 75 6d 65 6e 74 22 20 63 6c 61 73 73 3d 22 27 2b 61 2e 6d 6f 64 61 6c 42 6f 64 79 2b 27 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 31 20 63 6c 61 73 73 3d 22 27 2b 61 2e 6d 6f Data Ascii: a-label="'+i.escapeHtml(this.textResources.preferencesDialogCloseLabel)+'" class="'+a.closeModalIcon+'" tabindex="0">✕</button>\n <div role="document" class="'+a.modalBody+'">\n <div>\n <h1 class="'+a.mo
2024-04-25 06:05:38 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 7d 2c 65 7d 28 29 2c 64 3d 5b 22 61 72 22 2c 22 68 65 22 2c 22 70 73 22 2c 22 75 72 22 2c 22 66 61 22 2c 22 70 61 22 2c 22 73 64 22 2c 22 74 6b 22 2c 22 75 67 22 2c 22 79 69 22 2c 22 73 79 72 22 2c 22 6b 73 2d 61 72 61 62 22 5d 2c 75 3d 7b 22 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 22 3a 22 23 36 36 36 36 36 36 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 6f 70 61 63 69 74 79 22 3a 22 31 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f Data Ascii: background-color: "+e["radio-button-disabled-color"]+" !important;\n }"},e}(),d=["ar","he","ps","ur","fa","pa","sd","tk","ug","yi","syr","ks-arab"],u={"close-button-color":"#666666","secondary-button-disabled-opacity":"1","secondary-butto
2024-04-25 06:05:38 UTC	3567	IN	Data Raw: 28 22 2d 22 29 5b 30 5d 3b 6f 3d 65 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 3d 3d 3d 6e 7d 72 65 74 75 72 6e 20 6f 7d 28 65 2c 63 29 7d 29 29 3b 73 26 26 30 3d 3d 3d 73 2e 6c 65 6e 67 74 68 26 26 28 65 3d 22 65 6e 2d 55 53 22 29 2c 6f 2e 70 6c 61 63 65 68 6f 6c 64 65 72 45 6c 65 6d 65 6e 74 3d 6c 2c 72 26 26 6f 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 65 64 43 61 6c 6c 62 61 63 6b 73 2e 72 65 67 69 73 74 65 72 43 61 6c 6c 62 61 63 6b 28 72 29 2c 6f 2e 73 61 76 65 43 6f 6f 6b 69 65 28 29 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 3d 6e 65 77 20 66 28 21 31 29 2c 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 28 76 6f 69 64 20 30 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 29 2c 6f 2e 69 73 49 6e 69 74 52 65 61 64 79 3d 21 30 2c 74 68 69 73 2e 63 6f 6e 73 65 6e 74 43 68 61 6e Data Ascii: ("-")[0];o=e.split("-")[0]===n}return o}(e,c)}));s&&0===s.length&&(e="en-US"),o.placeholderElement=l,r&&o.consentChangedCallbacks.registerCallback(r),o.saveCookie(),o.siteConsent=new f(!1),null==n\|\|n(void 0,o.siteConsent),o.isInitReady=!0,this.consentChan

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:05:38 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-25 06:05:38 UTC	531	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0rcGnYgAAAAANOnx9vccHTr21ROgX9ESTU0pDRURHRTAzMDkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=176309 Date: Thu, 25 Apr 2024 06:05:38 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-25 06:05:38 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:05:40 UTC	914	OUT	POST /rest/v1/delivery?client=microsoftmscompoc&sessionId=71fb2f47b0484d84850a549583e27e01&version=2.9.0 HTTP/1.1 Host: target.microsoft.com Connection: keep-alive Content-Length: 995 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://learn.microsoft.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MSCC=NR; at_check=true; mbox=session#71fb2f47b0484d84850a549583e27e01#1714027000
2024-04-25 06:05:40 UTC	995	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 62 65 34 63 63 30 65 30 36 37 35 63 34 65 39 37 62 62 31 30 63 33 33 38 36 64 30 64 62 35 37 62 22 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 63 6c 69 65 6e 74 48 69 6e 74 73 22 3a 7b 22 6d 6f 62 69 6c 65 22 3a 66 61 6c 73 65 2c 22 70 6c 61 74 66 6f 72 6d 22 3a 22 57 69 6e 64 6f 77 73 22 2c 22 62 72 6f 77 73 65 72 55 41 57 69 74 68 4d 61 6a 6f 72 Data Ascii: {"requestId":"be4cc0e0675c4e97bb10c3386d0db57b","context":{"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","clientHints":{"mobile":false,"platform":"Windows","browserUAWithMajor
2024-04-25 06:05:40 UTC	845	IN	HTTP/1.1 200 OK date: Thu, 25 Apr 2024 06:05:40 GMT content-type: application/json;charset=UTF-8 vary: origin,access-control-request-method,access-control-request-headers,accept-encoding access-control-allow-origin: https://learn.microsoft.com access-control-allow-credentials: true x-request-id: 05d74772-a5e7-43f7-a0c2-97384594ddca timing-allow-origin: * accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-04-25 06:05:40 UTC	1539	IN	Data Raw: 35 66 37 0d 0a 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 72 65 71 75 65 73 74 49 64 22 3a 22 62 65 34 63 63 30 65 30 36 37 35 63 34 65 39 37 62 62 31 30 63 33 33 38 36 64 30 64 62 35 37 62 22 2c 22 63 6c 69 65 6e 74 22 3a 22 6d 69 63 72 6f 73 6f 66 74 6d 73 63 6f 6d 70 6f 63 22 2c 22 69 64 22 3a 7b 22 74 6e 74 49 64 22 3a 22 37 31 66 62 32 66 34 37 62 30 34 38 34 64 38 34 38 35 30 61 35 34 39 35 38 33 65 32 37 65 30 31 2e 33 34 5f 30 22 2c 22 74 68 69 72 64 50 61 72 74 79 49 64 22 3a 22 37 34 39 65 65 65 36 30 33 39 63 35 34 38 39 62 39 64 62 33 30 30 30 63 37 61 62 33 66 33 39 39 22 7d 2c 22 65 64 67 65 48 6f 73 74 22 3a 22 6d 62 6f 78 65 64 67 65 33 34 2e 74 74 2e 6f 6d 74 72 64 63 2e 6e 65 74 22 2c 22 70 72 65 66 65 74 63 68 22 3a 7b 7d 2c 22 74 65 Data Ascii: 5f7{"status":200,"requestId":"be4cc0e0675c4e97bb10c3386d0db57b","client":"microsoftmscompoc","id":{"tntId":"71fb2f47b0484d84850a549583e27e01.34_0","thirdPartyId":"749eee6039c5489b9db3000c7ab3f399"},"edgeHost":"mboxedge34.tt.omtrdc.net","prefetch":{},"te

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:05:42 UTC	707	OUT	GET /rest/v1/delivery?client=microsoftmscompoc&sessionId=71fb2f47b0484d84850a549583e27e01&version=2.9.0 HTTP/1.1 Host: target.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MSCC=NR; at_check=true; mbox=session#71fb2f47b0484d84850a549583e27e01#1714027001\|PC#71fb2f47b0484d84850a549583e27e01.34_0#1748205141
2024-04-25 06:05:42 UTC	450	IN	HTTP/1.1 405 Method Not Allowed date: Thu, 25 Apr 2024 06:05:42 GMT content-type: application/json;charset=UTF-8 vary: accept-encoding referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-04-25 06:05:42 UTC	67	IN	Data Raw: 33 64 0d 0a 7b 22 73 74 61 74 75 73 22 3a 34 30 35 2c 22 6d 65 73 73 61 67 65 22 3a 22 52 65 71 75 65 73 74 20 6d 65 74 68 6f 64 20 27 47 45 54 27 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 7d 0d 0a Data Ascii: 3d{"status":405,"message":"Request method 'GET' not supported"}
2024-04-25 06:05:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:05:48 UTC	1005	OUT	POST /rest/v1/delivery?client=microsoftmscompoc&sessionId=71fb2f47b0484d84850a549583e27e01&version=2.9.0 HTTP/1.1 Host: target.microsoft.com Connection: keep-alive Content-Length: 1075 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://learn.microsoft.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MSCC=NR; at_check=true; MS0=6fa2b837c85544b29140181f1222da91; mbox=session#71fb2f47b0484d84850a549583e27e01#1714027008\|PC#71fb2f47b0484d84850a549583e27e01.34_0#1748205141
2024-04-25 06:05:48 UTC	1075	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 30 30 66 38 66 39 32 30 65 39 62 30 34 39 30 66 39 39 38 61 38 63 34 30 34 66 65 35 32 37 34 38 22 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 63 6c 69 65 6e 74 48 69 6e 74 73 22 3a 7b 22 6d 6f 62 69 6c 65 22 3a 66 61 6c 73 65 2c 22 70 6c 61 74 66 6f 72 6d 22 3a 22 57 69 6e 64 6f 77 73 22 2c 22 62 72 6f 77 73 65 72 55 41 57 69 74 68 4d 61 6a 6f 72 Data Ascii: {"requestId":"00f8f920e9b0490f998a8c404fe52748","context":{"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","clientHints":{"mobile":false,"platform":"Windows","browserUAWithMajor
2024-04-25 06:05:48 UTC	845	IN	HTTP/1.1 200 OK date: Thu, 25 Apr 2024 06:05:48 GMT content-type: application/json;charset=UTF-8 vary: origin,access-control-request-method,access-control-request-headers,accept-encoding access-control-allow-origin: https://learn.microsoft.com access-control-allow-credentials: true x-request-id: dbda1637-51c2-4bb2-b510-e16d52b783bf timing-allow-origin: * accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-04-25 06:05:48 UTC	1521	IN	Data Raw: 35 65 61 0d 0a 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 72 65 71 75 65 73 74 49 64 22 3a 22 30 30 66 38 66 39 32 30 65 39 62 30 34 39 30 66 39 39 38 61 38 63 34 30 34 66 65 35 32 37 34 38 22 2c 22 63 6c 69 65 6e 74 22 3a 22 6d 69 63 72 6f 73 6f 66 74 6d 73 63 6f 6d 70 6f 63 22 2c 22 69 64 22 3a 7b 22 74 6e 74 49 64 22 3a 22 37 31 66 62 32 66 34 37 62 30 34 38 34 64 38 34 38 35 30 61 35 34 39 35 38 33 65 32 37 65 30 31 2e 33 34 5f 30 22 2c 22 74 68 69 72 64 50 61 72 74 79 49 64 22 3a 22 37 34 39 65 65 65 36 30 33 39 63 35 34 38 39 62 39 64 62 33 30 30 30 63 37 61 62 33 66 33 39 39 22 7d 2c 22 65 64 67 65 48 6f 73 74 22 3a 22 6d 62 6f 78 65 64 67 65 33 34 2e 74 74 2e 6f 6d 74 72 64 63 2e 6e 65 74 22 2c 22 70 72 65 66 65 74 63 68 22 3a 7b 7d 2c 22 74 65 Data Ascii: 5ea{"status":200,"requestId":"00f8f920e9b0490f998a8c404fe52748","client":"microsoftmscompoc","id":{"tntId":"71fb2f47b0484d84850a549583e27e01.34_0","thirdPartyId":"749eee6039c5489b9db3000c7ab3f399"},"edgeHost":"mboxedge34.tt.omtrdc.net","prefetch":{},"te
2024-04-25 06:05:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:05:49 UTC	745	OUT	GET /rest/v1/delivery?client=microsoftmscompoc&sessionId=71fb2f47b0484d84850a549583e27e01&version=2.9.0 HTTP/1.1 Host: target.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MSCC=NR; at_check=true; MS0=6fa2b837c85544b29140181f1222da91; mbox=session#71fb2f47b0484d84850a549583e27e01#1714027009\|PC#71fb2f47b0484d84850a549583e27e01.34_0#1748205149
2024-04-25 06:05:49 UTC	450	IN	HTTP/1.1 405 Method Not Allowed date: Thu, 25 Apr 2024 06:05:49 GMT content-type: application/json;charset=UTF-8 vary: accept-encoding referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-04-25 06:05:49 UTC	67	IN	Data Raw: 33 64 0d 0a 7b 22 73 74 61 74 75 73 22 3a 34 30 35 2c 22 6d 65 73 73 61 67 65 22 3a 22 52 65 71 75 65 73 74 20 6d 65 74 68 6f 64 20 27 47 45 54 27 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 7d 0d 0a Data Ascii: 3d{"status":405,"message":"Request method 'GET' not supported"}
2024-04-25 06:05:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:05:51 UTC	691	OUT	GET /banner_mslearn_tier1?wt.mc_id=build24_t1_learnpromotion_events HTTP/1.1 Host: aka.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 06:05:52 UTC	488	IN	HTTP/1.1 301 Moved Permanently Content-Length: 0 Server: Kestrel Location: https://build.microsoft.com?wt.mc_ID=Build2024_esc_corp_bn_oo_bn_msln_mslearn_home Request-Context: appId=cid-v1:9b037ab9-fa5a-4c09-81bd-41ffa859f01e X-Response-Cache-Status: True Expires: Thu, 25 Apr 2024 06:05:52 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 25 Apr 2024 06:05:52 GMT Connection: close Strict-Transport-Security: max-age=31536000 ; includeSubDomains

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:05:53 UTC	592	OUT	GET /scripts/c/ms.analytics-web-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://build.microsoft.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://build.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 06:05:53 UTC	967	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 06:05:53 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 155100 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=1800, immutable, no-transform Last-Modified: Thu, 04 Apr 2024 20:39:53 GMT ETag: 0x8DC54E761F2A250 x-ms-request-id: fa97b281-b01e-000d-4e1f-964790000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.1.2 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.analytics-web-4.1.2.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240425T060553Z-16f56cb894f79wk6x1g9kkehwn00000003cg000000007bvu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-25 06:05:53 UTC	15417	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 20 53 44 4b 20 41 6e 61 6c 79 74 69 63 73 20 57 65 62 2c 20 34 2e 31 2e 32 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 74 29 6e 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 Data Ascii: /! 1DS JS SDK Analytics Web, 4.1.2 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,n){var t="undefined";if("object"==typeof exports&&typeof module!=t)n(exports);else if("function"==typeof
2024-04-25 06:05:53 UTC	16384	IN	Data Raw: 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 49 50 72 6f 6d 69 73 65 20 22 2b 6f 28 29 2b 28 73 3f 22 20 2d 20 22 2b 59 72 28 63 29 3a 22 22 29 7d 2c 71 28 74 29 7c 7c 45 65 28 6a 72 2b 22 3a 20 65 78 65 63 75 74 6f 72 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 20 2d 20 22 2b 59 72 28 74 29 29 2c 67 28 33 2c 30 29 29 3b 74 72 79 7b 74 2e 63 61 6c 6c 28 76 2c 67 28 32 2c 30 29 2c 68 29 7d 63 61 74 63 68 28 6d 29 7b 68 28 6d 29 7d 72 65 74 75 72 6e 20 76 7d 66 75 6e 63 74 69 6f 6e 20 51 72 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 4a 72 28 51 72 2c 28 72 3d 4b 28 74 3d 6e 29 3f 74 3a 30 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 51 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 70 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 72 79 7b 65 Data Ascii: ng=function(){return"IPromise "+o()+(s?" - "+Yr(c):"")},q(t)\|\|Ee(jr+": executor is not a function - "+Yr(t)),g(3,0));try{t.call(v,g(2,0),h)}catch(m){h(m)}return v}function Qr(e,n){return Jr(Qr,(r=K(t=n)?t:0,function(e){Qn(function(){pe(e,function(e){try{e
2024-04-25 06:05:54 UTC	16384	IN	Data Raw: 6f 26 26 6f 2e 72 6d 28 29 2c 6f 3d 6e 75 6c 6c 2c 69 3d 5b 5d 2c 61 2e 68 26 26 61 2e 68 5b 7a 74 5d 28 29 2c 61 2e 68 3d 6e 75 6c 6c 2c 61 2e 63 62 3d 5b 5d 7d 3b 69 66 28 47 6f 28 69 2c 22 75 6e 6c 6f 61 64 22 2c 6e 75 6c 6c 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3d 65 5b 69 72 5d 28 6e 29 3b 65 26 26 28 74 3d 74 7c 7c 5b 5d 29 5b 59 5d 28 65 29 7d 29 2c 74 29 72 65 74 75 72 6e 20 5a 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 46 72 28 6e 69 28 74 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 28 29 2c 65 28 29 7d 29 7d 29 3b 72 28 29 7d 7d 29 7d 76 61 72 20 59 6f 3d 22 50 61 72 65 6e 74 43 6f 6e 74 65 78 74 4b 65 79 22 2c 4a 6f 3d 22 43 68 69 6c 64 72 65 6e 43 6f 6e 74 65 78 74 4b 65 79 22 2c 51 6f 3d 28 24 6f 2e 50 61 72 65 6e 74 43 Data Ascii: o&&o.rm(),o=null,i=[],a.h&&a.h[zt](),a.h=null,a.cb=[]};if(Go(i,"unload",null,function(e){e=e[ir](n);e&&(t=t\|\|[])[Y](e)}),t)return Zr(function(e){return Fr(ni(t),function(){r(),e()})});r()}})}var Yo="ParentContextKey",Jo="ChildrenContextKey",Qo=($o.ParentC
2024-04-25 06:05:54 UTC	16384	IN	Data Raw: 72 79 20 77 69 74 68 20 42 65 61 63 6f 6e 20 41 50 49 2c 20 72 65 74 72 69 65 64 20 77 69 74 68 20 6e 6f 72 6d 61 6c 20 73 65 6e 64 65 72 2e 22 29 29 29 7d 63 61 74 63 68 28 61 29 7b 43 26 26 6d 6f 28 64 2c 22 46 61 69 6c 65 64 20 74 6f 20 73 65 6e 64 20 74 65 6c 65 6d 65 74 72 79 20 75 73 69 6e 67 20 73 65 6e 64 42 65 61 63 6f 6e 20 41 50 49 2e 20 45 78 3a 22 2b 61 65 28 61 29 29 2c 54 28 6e 2c 43 3f 30 3a 34 30 30 2c 7b 7d 2c 22 22 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 2c 72 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 61 2c 6f 3d 74 5b 4d 72 5d 7c 7c 7b 7d 2c 63 3d 28 21 65 26 26 62 26 26 28 6e 3d 5a 72 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 3d 65 2c 61 3d 6e 7d 29 29 2c 43 26 26 65 26 26 74 2e 64 69 73 61 62 6c 65 58 68 72 53 79 6e 63 26 26 28 Data Ascii: ry with Beacon API, retried with normal sender.")))}catch(a){C&&mo(d,"Failed to send telemetry using sendBeacon API. Ex:"+ae(a)),T(n,C?0:400,{},"")}}function s(t,r,e){var n,i,a,o=t[Mr]\|\|{},c=(!e&&b&&(n=Zr(function(e,n){i=e,a=n})),C&&e&&t.disableXhrSync&&(
2024-04-25 06:05:54 UTC	16384	IN	Data Raw: 46 6c 3d 48 6c 3b 66 75 6e 63 74 69 6f 6e 20 48 6c 28 53 2c 65 2c 77 2c 63 29 7b 76 61 72 20 50 2c 41 2c 61 2c 5f 2c 44 2c 4f 2c 6b 2c 78 2c 52 2c 4d 2c 4c 2c 75 2c 55 2c 56 2c 42 2c 46 2c 48 2c 4b 2c 7a 2c 57 2c 71 2c 47 2c 58 2c 6a 2c 59 2c 4a 2c 51 2c 24 2c 5a 2c 65 65 2c 6e 65 2c 74 65 3d 21 31 3b 76 65 28 48 6c 2c 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 50 3d 6e 75 6c 6c 2c 41 3d 6e 65 77 20 62 6c 2c 61 3d 21 31 2c 5f 3d 6e 65 77 20 79 6c 2c 4d 3d 21 28 44 3d 30 29 2c 4c 3d 5b 5d 2c 75 3d 7b 7d 2c 55 3d 5b 5d 2c 6a 3d 5b 5d 2c 4a 3d 59 3d 58 3d 47 3d 71 3d 57 3d 7a 3d 76 6f 69 64 20 30 2c 5a 3d 4f 6c 28 29 2c 24 3d 4b 3d 48 3d 42 3d 74 65 3d 21 28 51 3d 5b 5d 29 3b 76 61 72 20 73 3d 21 28 6e 65 3d 46 3d 56 3d 52 3d 78 3d 6b 3d 4f 3d 6e 75 Data Ascii: Fl=Hl;function Hl(S,e,w,c){var P,A,a,_,D,O,k,x,R,M,L,u,U,V,B,F,H,K,z,W,q,G,X,j,Y,J,Q,$,Z,ee,ne,te=!1;ve(Hl,this,function(h){P=null,A=new bl,a=!1,_=new yl,M=!(D=0),L=[],u={},U=[],j=[],J=Y=X=G=q=W=z=void 0,Z=Ol(),$=K=H=B=te=!(Q=[]);var s=!(ne=F=V=R=x=k=O=nu
2024-04-25 06:05:54 UTC	16384	IN	Data Raw: 6c 49 64 3a 5b 31 2c 22 6c 6f 63 61 6c 49 64 22 5d 2c 69 64 3a 5b 32 2c 22 69 64 22 5d 7d 29 2c 24 6c 3d 65 28 7b 6f 73 4e 61 6d 65 3a 5b 30 2c 6f 5d 2c 76 65 72 3a 5b 31 2c 22 76 65 72 22 5d 7d 29 2c 5a 6c 3d 65 28 7b 76 65 72 3a 5b 30 2c 22 76 65 72 22 5d 2c 73 65 71 3a 5b 31 2c 22 73 65 71 22 5d 2c 69 6e 73 74 61 6c 6c 49 64 3a 5b 32 2c 22 69 6e 73 74 61 6c 6c 49 64 22 5d 2c 65 70 6f 63 68 3a 5b 33 2c 22 65 70 6f 63 68 22 5d 7d 29 2c 65 66 3d 65 28 7b 6d 73 66 70 63 3a 5b 30 2c 22 6d 73 66 70 63 22 5d 2c 61 6e 69 64 3a 5b 31 2c 22 61 6e 69 64 22 5d 2c 73 65 72 76 69 63 65 4e 61 6d 65 3a 5b 32 2c 22 73 65 72 76 69 63 65 4e 61 6d 65 22 5d 7d 29 2c 6e 66 3d 65 28 7b 70 6f 70 53 61 6d 70 6c 65 3a 5b 30 2c 22 70 6f 70 53 61 6d 70 6c 65 22 5d 2c 65 76 65 6e Data Ascii: lId:[1,"localId"],id:[2,"id"]}),$l=e({osName:[0,o],ver:[1,"ver"]}),Zl=e({ver:[0,"ver"],seq:[1,"seq"],installId:[2,"installId"],epoch:[3,"epoch"]}),ef=e({msfpc:[0,"msfpc"],anid:[1,"anid"],serviceName:[2,"serviceName"]}),nf=e({popSample:[0,"popSample"],even
2024-04-25 06:05:54 UTC	16384	IN	Data Raw: 69 3d 46 65 28 6e 2c 30 2c 31 35 30 29 2c 6d 65 28 65 2c 32 2c 35 37 2c 22 6e 61 6d 65 20 69 73 20 74 6f 6f 20 6c 6f 6e 67 2e 20 20 49 74 20 68 61 73 20 62 65 65 6e 20 74 72 75 6e 63 61 74 65 64 20 74 6f 20 31 35 30 20 63 68 61 72 61 63 74 65 72 73 2e 22 2c 7b 6e 61 6d 65 3a 6e 7d 2c 21 30 29 29 2c 69 7c 7c 6e 29 3b 69 66 28 6f 5b 68 5d 21 3d 3d 61 29 7b 66 6f 72 28 76 61 72 20 63 3d 30 2c 75 3d 6f 3b 74 5b 75 5d 21 3d 3d 75 6e 64 65 66 69 6e 65 64 3b 29 63 2b 2b 2c 75 3d 46 65 28 6f 2c 30 2c 31 34 37 29 2b 48 65 28 72 3d 22 30 30 22 2b 63 2c 72 5b 68 5d 2d 33 29 3b 6f 3d 75 7d 72 65 74 75 72 6e 20 6f 7d 66 75 6e 63 74 69 6f 6e 20 4d 64 28 65 2c 6e 2c 74 29 7b 76 61 72 20 72 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 31 30 32 34 Data Ascii: i=Fe(n,0,150),me(e,2,57,"name is too long. It has been truncated to 150 characters.",{name:n},!0)),i\|\|n);if(o[h]!==a){for(var c=0,u=o;t[u]!==undefined;)c++,u=Fe(o,0,147)+He(r="00"+c,r[h]-3);o=u}return o}function Md(e,n,t){var r;return void 0===t&&(t=1024
2024-04-25 06:05:54 UTC	16384	IN	Data Raw: 6f 75 74 20 63 61 6c 6c 69 6e 67 20 73 74 6f 70 2e 22 2c 7b 6e 61 6d 65 3a 65 2c 6b 65 79 3a 65 7d 2c 21 30 29 2c 63 5b 65 5d 3d 2b 6e 65 77 20 44 61 74 65 7d 2c 6f 2e 73 74 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 2c 72 29 7b 76 61 72 20 69 3d 63 5b 65 5d 3b 69 73 4e 61 4e 28 69 29 3f 6d 65 28 61 2c 32 2c 36 33 2c 22 73 74 6f 70 20 77 61 73 20 63 61 6c 6c 65 64 20 77 69 74 68 6f 75 74 20 61 20 63 6f 72 72 65 73 70 6f 6e 64 69 6e 67 20 73 74 61 72 74 2e 22 2c 7b 6e 61 6d 65 3a 65 2c 6b 65 79 3a 65 7d 2c 21 30 29 3a 28 69 3d 57 64 28 69 2c 2b 6e 65 77 20 44 61 74 65 29 2c 6f 2e 61 63 74 69 6f 6e 28 65 2c 6e 2c 69 2c 74 2c 72 29 29 2c 64 65 6c 65 74 65 20 63 5b 65 5d 2c 63 5b 65 5d 3d 75 6e 64 65 66 69 6e 65 64 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 Data Ascii: out calling stop.",{name:e,key:e},!0),c[e]=+new Date},o.stop=function(e,n,t,r){var i=c[e];isNaN(i)?me(a,2,63,"stop was called without a corresponding start.",{name:e,key:e},!0):(i=Wd(i,+new Date),o.action(e,n,i,t,r)),delete c[e],c[e]=undefined}};function
2024-04-25 06:05:54 UTC	16384	IN	Data Raw: 65 44 61 74 61 26 26 74 2e 5f 63 6f 6e 66 69 67 2e 63 6f 72 65 44 61 74 61 2e 70 61 67 65 54 61 67 73 26 26 28 74 2e 5f 70 61 67 65 54 61 67 73 3d 57 75 28 21 30 2c 74 2e 5f 70 61 67 65 54 61 67 73 2c 74 2e 5f 63 6f 6e 66 69 67 2e 63 6f 72 65 44 61 74 61 2e 70 61 67 65 54 61 67 73 29 29 2c 74 2e 5f 70 61 67 65 54 61 67 73 43 61 6c 6c 62 61 63 6b 26 26 28 74 2e 5f 70 61 67 65 54 61 67 73 3d 57 75 28 21 30 2c 74 2e 5f 70 61 67 65 54 61 67 73 2c 74 2e 5f 70 61 67 65 54 61 67 73 43 61 6c 6c 62 61 63 6b 28 29 29 29 2c 6f 65 28 6e 2e 70 61 67 65 54 61 67 73 29 26 26 28 74 2e 5f 70 61 67 65 54 61 67 73 3d 57 75 28 21 30 2c 74 2e 5f 70 61 67 65 54 61 67 73 2c 6e 2e 70 61 67 65 54 61 67 73 29 29 2c 65 2e 70 72 6f 70 65 72 74 69 65 73 3d 65 2e 70 72 6f 70 65 72 74 Data Ascii: eData&&t._config.coreData.pageTags&&(t._pageTags=Wu(!0,t._pageTags,t._config.coreData.pageTags)),t._pageTagsCallback&&(t._pageTags=Wu(!0,t._pageTags,t._pageTagsCallback())),oe(n.pageTags)&&(t._pageTags=Wu(!0,t._pageTags,n.pageTags)),e.properties=e.propert
2024-04-25 06:05:54 UTC	8611	IN	Data Raw: 65 28 6f 29 7c 7c 65 5b 6f 5d 3b 69 66 28 6f 29 7b 74 72 79 7b 76 61 72 20 75 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 6f 29 7d 63 61 74 63 68 28 73 29 7b 6d 65 28 74 68 69 73 2e 5f 74 72 61 63 65 4c 6f 67 67 65 72 2c 31 2c 35 30 37 2c 22 43 61 6e 20 6e 6f 74 20 70 61 72 73 65 20 22 2b 6f 29 7d 75 26 26 28 72 3d 75 2e 69 64 2c 69 3d 75 2e 63 4e 29 7d 65 6c 73 65 20 72 3d 63 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 74 68 69 73 2e 5f 63 6f 6e 74 65 6e 74 42 6c 6f 62 46 69 65 6c 64 4e 61 6d 65 73 2e 69 64 29 2c 69 3d 63 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 74 68 69 73 2e 5f 63 6f 6e 74 65 6e 74 42 6c 6f 62 46 69 65 6c 64 4e 61 6d 65 73 2e 63 6f 6e 74 65 6e 74 4e 61 6d 65 29 3b 72 26 26 28 61 5b 6e 5d 3d 72 29 2c 69 26 26 28 61 5b 74 5d 3d 69 29 7d 72 65 74 Data Ascii: e(o)\|\|e[o];if(o){try{var u=JSON.parse(o)}catch(s){me(this._traceLogger,1,507,"Can not parse "+o)}u&&(r=u.id,i=u.cN)}else r=c.getAttribute(this._contentBlobFieldNames.id),i=c.getAttribute(this._contentBlobFieldNames.contentName);r&&(a[n]=r),i&&(a[t]=i)}ret

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:05:53 UTC	627	OUT	GET /mwf/css/bundle/1.57.0/west-european/default/mwf-main.min.css HTTP/1.1 Host: mwf.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://build.microsoft.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://build.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 06:05:54 UTC	975	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 06:05:54 GMT Content-Type: text/css; charset=utf-8 Content-Length: 825986 Connection: close Cache-Control: public, max-age=31504932 Expires: Thu, 24 Apr 2025 21:28:07 GMT Last-Modified: Wed, 24 Apr 2024 21:28:06 GMT X-Activity-Id: cc889724-8bb2-417f-8eb3-18626dc28194 MS-CV: /Pty81I2KEetCPjN.0 X-AppVersion: 1.0.8857.28550 X-Az: {did:92e7dc58ca2143cfb2c818b047cc5cd1, rid: OneDeployContainer, sn: marketingsites-prod-odwestcentralus, dt: 2018-05-03T20:14:23.4188992Z, bt: 2024-04-01T23:51:40.0000000Z} ms-operation-id: 670c51d6ca980841a7de8f9d767b8a41 P3P: CP="CAO CONi OTR OUR DEM ONL" X-S1: 2024-04-24T21:28:07 X-S2: 2024-04-24T21:28:07 Timing-Allow-Origin: * Access-Control-Allow-Origin: * Access-Control-Allow-Methods: HEAD,GET,POST,PATCH,PUT,OPTIONS X-XSS-Protection: 1; mode=block x-azure-ref: 20240425T060553Z-16f56cb894fff7nsaw34vw5a9w00000003b00000000043ux X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-25 06:05:54 UTC	15409	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0a 2f 2a 21 20 31 2e 35 37 2e 30 20 7c 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 37 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 20 7c 20 54 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 66 69 6c 65 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 63 6f 6c 6c 65 63 74 69 76 65 6c 79 2c 20 22 54 68 69 72 64 20 50 61 72 74 79 20 43 6f 64 65 22 29 2e 20 4d 69 63 72 6f 73 6f 66 74 20 69 73 20 6e 6f 74 20 74 68 65 20 6f 72 69 67 69 6e 61 6c 20 61 75 74 68 6f 72 20 6f 66 20 74 68 65 20 54 68 69 72 64 20 50 61 72 74 79 20 43 6f 64 65 2e 20 54 68 65 20 6f 72 69 67 Data Ascii: @charset "UTF-8";/*! 1.57.0 \| Copyright 2017 Microsoft Corporation \| This software is based on or incorporates material from the files listed below (collectively, "Third Party Code"). Microsoft is not the original author of the Third Party Code. The orig
2024-04-25 06:05:54 UTC	118	IN	Data Raw: 62 61 28 30 2c 30 2c 30 2c 2e 39 29 7d 2e 78 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 68 61 64 65 2d 39 35 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 39 35 29 7d 2e 78 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 74 69 6e 74 2d 35 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 Data Ascii: ba(0,0,0,.9)}.x-background-shade-95{background-color:rgba(0,0,0,.95)}.x-background-tint-5{background-color:rgba(255,25
2024-04-25 06:05:54 UTC	16384	IN	Data Raw: 35 2c 32 35 35 2c 2e 30 35 29 7d 2e 78 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 74 69 6e 74 2d 31 30 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 31 29 7d 2e 78 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 74 69 6e 74 2d 31 35 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 31 35 29 7d 2e 78 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 74 69 6e 74 2d 32 30 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 32 29 7d 2e 78 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 74 69 6e 74 2d 33 30 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 33 29 7d 2e 78 2d Data Ascii: 5,255,.05)}.x-background-tint-10{background-color:rgba(255,255,255,.1)}.x-background-tint-15{background-color:rgba(255,255,255,.15)}.x-background-tint-20{background-color:rgba(255,255,255,.2)}.x-background-tint-30{background-color:rgba(255,255,255,.3)}.x-
2024-04-25 06:05:54 UTC	16384	IN	Data Raw: 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a3 ba 22 7d 2e 63 2d 67 6c 79 70 68 2e 67 6c 79 70 68 2d 67 72 6f 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a4 82 22 7d 2e 63 2d 67 6c 79 70 68 2e 67 6c 79 70 68 2d 72 65 70 61 69 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a4 8f 22 7d 2e 63 2d 67 6c 79 70 68 2e 67 6c 79 70 68 2d 6d 75 73 69 63 2d 69 6e 2d 63 6f 6c 6c 65 63 74 69 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a5 80 22 7d 2e 63 2d 67 6c 79 70 68 2e 67 6c 79 70 68 2d 6c 69 73 74 2d 6d 69 72 72 6f 72 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a9 95 22 7d 2e 63 2d 67 6c 79 70 68 2e 67 6c 79 70 68 2d 74 69 63 6b 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee ad 94 22 7d 2e 63 2d Data Ascii: ore{content:""}.c-glyph.glyph-group:before{content:""}.c-glyph.glyph-repair:before{content:""}.c-glyph.glyph-music-in-collection:before{content:""}.c-glyph.glyph-list-mirrored:before{content:""}.c-glyph.glyph-ticket:before{content:""}.c-
2024-04-25 06:05:54 UTC	16384	IN	Data Raw: 2e 63 2d 61 63 74 69 6f 6e 2d 6d 65 6e 75 2e 66 2d 73 65 63 6f 6e 64 61 72 79 3e 62 75 74 74 6f 6e 2e 63 2d 61 63 74 69 6f 6e 2d 74 72 69 67 67 65 72 3a 66 6f 63 75 73 3a 6e 6f 74 28 2e 78 2d 68 69 64 64 65 6e 2d 66 6f 63 75 73 29 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 2e 63 2d 61 63 74 69 6f 6e 2d 6d 65 6e 75 2e 66 2d 73 65 63 6f 6e 64 61 72 79 3e 62 75 74 74 6f 6e 2e 63 2d 61 63 74 69 6f 6e 2d 74 72 69 67 67 65 72 3a 61 63 74 69 76 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 34 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 39 38 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 39 38 29 7d 2e 63 2d 61 63 74 69 6f 6e 2d 6d 65 6e 75 2e 66 2d 73 65 63 6f Data Ascii: .c-action-menu.f-secondary>button.c-action-trigger:focus:not(.x-hidden-focus){text-decoration:underline}.c-action-menu.f-secondary>button.c-action-trigger:active{background:rgba(0,0,0,.4);-ms-transform:scale(.98);transform:scale(.98)}.c-action-menu.f-seco
2024-04-25 06:05:54 UTC	16384	IN	Data Raw: 74 6f 67 67 6c 65 20 70 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 32 30 30 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 30 7d 2e 63 2d 61 67 65 2d 72 61 74 69 6e 67 20 2e 63 2d 63 6f 6e 74 65 6e 74 2d 74 6f 67 67 6c 65 20 2e 63 2d 6c 69 73 74 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 63 2d 62 61 64 67 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 2e 30 37 35 65 6d 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 3b 77 Data Ascii: toggle p{overflow:hidden;box-sizing:content-box;max-height:200px;padding-top:0}.c-age-rating .c-content-toggle .c-list{margin-top:0;margin-bottom:0}.c-badge{font-size:13px;font-weight:600;display:inline-block;letter-spacing:.075em;text-overflow:ellipsis;w
2024-04-25 06:05:54 UTC	16384	IN	Data Raw: 74 68 65 6d 65 2d 6c 69 67 68 74 20 62 75 74 74 6f 6e 2e 63 2d 62 75 74 74 6f 6e 2e 66 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 6c 69 67 68 74 20 61 2e 63 2d 62 75 74 74 6f 6e 2e 66 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 74 68 65 6d 65 2d 6c 69 67 68 74 20 61 2e 63 2d 62 75 74 74 6f 6e 2e 66 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 6c 69 67 68 74 20 62 75 74 74 6f 6e 2e 63 2d 62 75 74 74 6f 6e 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 74 68 65 6d 65 2d 6c 69 67 68 74 20 62 75 74 74 6f 6e 2e 63 2d 62 75 74 74 6f 6e 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 3a 66 6f 63 75 73 7b 62 6f 72 64 65 72 2d Data Ascii: theme-light button.c-button.f-primary:focus,.theme-light a.c-button.f-primary:focus,.theme-dark .theme-light a.c-button.f-primary:focus,.theme-light button.c-button[type="submit"]:focus,.theme-dark .theme-light button.c-button[type="submit"]:focus{border-
2024-04-25 06:05:54 UTC	16384	IN	Data Raw: 6f 6c 6f 72 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 61 2e 63 2d 63 61 6c 6c 2d 74 6f 2d 61 63 74 69 6f 6e 2e 66 2d 73 65 63 6f 6e 64 61 72 79 3a 66 6f 63 75 73 3a 6e 6f 74 28 2e 78 2d 68 69 64 64 65 6e 2d 66 6f 63 75 73 29 20 73 70 61 6e 2c 2e 74 68 65 6d 65 2d 6c 69 67 68 74 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 61 2e 63 2d 63 61 6c 6c 2d 74 6f 2d 61 63 74 69 6f 6e 2e 66 2d 73 65 63 6f 6e 64 61 72 79 3a 66 6f 63 75 73 3a 6e 6f 74 28 2e 78 2d 68 69 64 64 65 6e 2d 66 6f 63 75 73 29 20 73 70 61 6e 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 62 75 74 74 6f 6e 2e 63 2d 63 61 6c 6c 2d 74 6f 2d 61 63 74 69 6f 6e 2e 66 2d 73 65 63 6f 6e 64 61 72 79 3a 66 6f 63 75 73 3a 6e 6f 74 28 2e 78 2d 68 69 64 64 65 6e 2d 66 6f 63 75 73 29 20 73 70 61 6e 2c 2e 74 Data Ascii: olor:#fff}.theme-dark a.c-call-to-action.f-secondary:focus:not(.x-hidden-focus) span,.theme-light .theme-dark a.c-call-to-action.f-secondary:focus:not(.x-hidden-focus) span,.theme-dark button.c-call-to-action.f-secondary:focus:not(.x-hidden-focus) span,.t
2024-04-25 06:05:54 UTC	16384	IN	Data Raw: 73 65 6c 2e 66 2d 6d 75 6c 74 69 2d 73 6c 69 64 65 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 2d 66 6c 69 70 70 65 72 3a 68 6f 76 65 72 2c 2e 63 2d 63 61 72 6f 75 73 65 6c 2e 66 2d 6d 75 6c 74 69 2d 73 6c 69 64 65 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 2d 66 6c 69 70 70 65 72 3a 61 63 74 69 76 65 2c 2e 63 2d 63 61 72 6f 75 73 65 6c 2e 66 2d 6d 75 6c 74 69 2d 73 6c 69 64 65 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 2d 66 6c 69 70 70 65 72 3a 66 6f 63 75 73 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 34 30 34 30 34 30 7d 2e 63 2d 63 61 72 6f 75 73 65 6c 2e 66 2d 6d 75 6c 74 69 2d 73 6c 69 64 65 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 2d 66 6c 69 70 70 65 72 3a 66 6f 63 75 73 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 35 62 35 62 35 62 3b 62 6f Data Ascii: sel.f-multi-slide.theme-dark .c-flipper:hover,.c-carousel.f-multi-slide.theme-dark .c-flipper:active,.c-carousel.f-multi-slide.theme-dark .c-flipper:focus{background:#404040}.c-carousel.f-multi-slide.theme-dark .c-flipper:focus{border:1px solid #5b5b5b;bo
2024-04-25 06:05:54 UTC	16384	IN	Data Raw: 70 65 3d 22 74 65 78 74 22 5d 3a 66 6f 63 75 73 3a 62 65 66 6f 72 65 7b 6f 75 74 6c 69 6e 65 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 36 29 7d 2e 74 68 65 6d 65 2d 6c 69 67 68 74 20 2e 63 2d 63 6f 6d 62 6f 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 74 65 78 74 22 5d 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 74 68 65 6d 65 2d 6c 69 67 68 74 20 2e 63 2d 63 6f 6d 62 6f 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 74 65 78 74 22 5d 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 2d 63 6f 6c 6f 72 3a 23 30 30 30 7d 2e 74 68 65 6d 65 2d 6c 69 67 68 74 20 2e 63 2d 63 6f 6d 62 6f 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 74 65 78 74 22 5d 3a 66 6f 63 75 73 3a 62 65 66 6f 72 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 74 68 65 6d Data Ascii: pe="text"]:focus:before{outline-color:rgba(255,255,255,.6)}.theme-light .c-combo input[type="text"]:focus,.theme-dark .theme-light .c-combo input[type="text"]:focus{outline-color:#000}.theme-light .c-combo input[type="text"]:focus:before,.theme-dark .them