Edit tour

Windows Analysis Report
http://static.clarlity.com

Overview

General Information

Sample URL:	http://static.clarlity.com
Analysis ID:	651252
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Classification

Process Tree

System is start

chrome.exe (PID: 384 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --enable-automation --single-argument http://static.clarlity.com/ MD5: 74859601FB4BEEA84B40D874CCB56CAB)

chrome.exe (PID: 3484 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1652,17050148873617410223,8877625412963403,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2128 /prefetch:8 MD5: 74859601FB4BEEA84B40D874CCB56CAB)

cleanup

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620

Source: http://static.clarlity.com/	Avira URL Cloud: Label: malware
Source: https://static.clarlity.com/	Avira URL Cloud: Label: malware
Source: http://static.clarlity.com/26Microsoft	Avira URL Cloud: Label: malware
Source: https://static.clarlity.com/26Microsoft	Avira URL Cloud: Label: malware

Source: unknown	HTTPS traffic detected: 13.107.219.45:443 -> 192.168.2.3:57796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.219.45:443 -> 192.168.2.3:57797 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.6.158:443 -> 192.168.2.3:57795 version: TLS 1.2

Source: unknown	Network traffic detected: HTTP traffic on port 50793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61467 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61729
Source: unknown	Network traffic detected: HTTP traffic on port 57795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50793
Source: unknown	Network traffic detected: HTTP traffic on port 59521 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56604 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50278
Source: unknown	Network traffic detected: HTTP traffic on port 57797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64977
Source: unknown	Network traffic detected: HTTP traffic on port 52985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51493
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60570
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58181
Source: unknown	Network traffic detected: HTTP traffic on port 64470 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61467
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51559
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64470
Source: unknown	Network traffic detected: HTTP traffic on port 50278 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60570 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51493 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56604
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52985
Source: unknown	Network traffic detected: HTTP traffic on port 57796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57797
Source: unknown	Network traffic detected: HTTP traffic on port 51559 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59521
Source: unknown	Network traffic detected: HTTP traffic on port 61236 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58372
Source: unknown	Network traffic detected: HTTP traffic on port 61729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61236

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=92.0.4515.107&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1&x=id%3Dpkedcjkdefgpdelpbcmbmeomcjbeemfm%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda,pkedcjkdefgpdelpbcmbmeomcjbeemfmX-Goog-Update-Updater: chromecrx-92.0.4515.107Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: static.clarlity.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Google Chrome";v="92"sec-ch-ua-mobile: ?0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: clarity.microsoft.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Google Chrome";v="92"sec-ch-ua-mobile: ?0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/client/runtime.3982585e1c60c72e9f72.js HTTP/1.1Host: claritystatic.azureedge.netConnection: keep-alivesec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Google Chrome";v="92"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/client/polyfills.bc17208ff0f06e3e2a82.js HTTP/1.1Host: claritystatic.azureedge.netConnection: keep-alivesec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Google Chrome";v="92"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/client/react.049524836a08a787294a.js HTTP/1.1Host: claritystatic.azureedge.netConnection: keep-alivesec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Google Chrome";v="92"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/client/framework.dc461ed14e033c831b9c.js HTTP/1.1Host: claritystatic.azureedge.netConnection: keep-alivesec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Google Chrome";v="92"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/client/vendors.d7ea9c7d04c845367b40.js HTTP/1.1Host: claritystatic.azureedge.netConnection: keep-alivesec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Google Chrome";v="92"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/client/client.7958ba22cab3ce142d0d.js HTTP/1.1Host: claritystatic.azureedge.netConnection: keep-alivesec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Google Chrome";v="92"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-alivesec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Google Chrome";v="92"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/MicrosoftLogoWhite.webp HTTP/1.1Host: clarity.microsoft.comConnection: keep-alivesec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Google Chrome";v="92"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://clarity.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _csrf=ZjyH5RX8D-FrNJbRirs3eihY
Source: global traffic	HTTP traffic detected: GET /images/FeatureHeatmap.png HTTP/1.1Host: claritystatic.azureedge.netConnection: keep-alivesec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Google Chrome";v="92"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/logo.ico HTTP/1.1Host: claritystatic.azureedge.netConnection: keep-alivesec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Google Chrome";v="92"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/logo.ico HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: claritystatic.azureedge.net
Source: global traffic	HTTP traffic detected: GET /static/MicrosoftLogoWhite.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: clarity.microsoft.comCookie: _EDGE_V=1; MUID=1EC826F357326C2A094236A356E56DD2
Source: global traffic	HTTP traffic detected: GET /images/FeatureHeatmap.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: claritystatic.azureedge.net
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: static.clarlity.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: pnacl_public_x86_64_pnacl_llc_nexe.0.dr, pnacl_public_x86_64_pnacl_sz_nexe.0.dr	String found in binary or memory: http://llvm.org/):
Source: History Provider Cache.0.dr	String found in binary or memory: http://static.clarlity.com/26Microsoft
Source: 3578e76a-d2d3-481d-be57-0aed749b631f.tmp.3.dr, d895c22f-553c-41fb-8a27-1c6699ad33f0.tmp.3.dr	String found in binary or memory: https://accounts.google.com
Source: craw_window.js.0.dr	String found in binary or memory: https://accounts.google.com/MergeSession
Source: 3578e76a-d2d3-481d-be57-0aed749b631f.tmp.3.dr, d895c22f-553c-41fb-8a27-1c6699ad33f0.tmp.3.dr	String found in binary or memory: https://apis.google.com
Source: pnacl_public_x86_64_crtbegin_for_eh_o.0.dr	String found in binary or memory: https://chromium.googlesource.com/a/native_client/pnacl-clang.git
Source: pnacl_public_x86_64_crtbegin_for_eh_o.0.dr	String found in binary or memory: https://chromium.googlesource.com/a/native_client/pnacl-llvm.git
Source: 3578e76a-d2d3-481d-be57-0aed749b631f.tmp.3.dr, d895c22f-553c-41fb-8a27-1c6699ad33f0.tmp.3.dr	String found in binary or memory: https://clients2.google.com
Source: manifest.json1.0.dr, manifest.json.0.dr	String found in binary or memory: https://clients2.google.com/service/update2/crx
Source: 3578e76a-d2d3-481d-be57-0aed749b631f.tmp.3.dr, d895c22f-553c-41fb-8a27-1c6699ad33f0.tmp.3.dr	String found in binary or memory: https://clients2.googleusercontent.com
Source: pnacl_public_x86_64_ld_nexe.0.dr	String found in binary or memory: https://code.google.com/p/nativeclient/issues/entry
Source: pnacl_public_x86_64_ld_nexe.0.dr	String found in binary or memory: https://code.google.com/p/nativeclient/issues/entry%s:
Source: craw_background.js.0.dr, craw_window.js.0.dr	String found in binary or memory: https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p
Source: 3578e76a-d2d3-481d-be57-0aed749b631f.tmp.3.dr, d895c22f-553c-41fb-8a27-1c6699ad33f0.tmp.3.dr	String found in binary or memory: https://ogs.google.com
Source: craw_window.js.0.dr, manifest.json.0.dr	String found in binary or memory: https://payments.google.com/payments/v4/js/integrator.js
Source: craw_window.js.0.dr, manifest.json.0.dr	String found in binary or memory: https://sandbox.google.com/payments/v4/js/integrator.js
Source: 3578e76a-d2d3-481d-be57-0aed749b631f.tmp.3.dr, d895c22f-553c-41fb-8a27-1c6699ad33f0.tmp.3.dr	String found in binary or memory: https://ssl.gstatic.com
Source: History Provider Cache.0.dr	String found in binary or memory: https://static.clarlity.com/26Microsoft
Source: 3578e76a-d2d3-481d-be57-0aed749b631f.tmp.3.dr, d895c22f-553c-41fb-8a27-1c6699ad33f0.tmp.3.dr	String found in binary or memory: https://update.googleapis.com
Source: craw_background.js.0.dr, craw_window.js.0.dr	String found in binary or memory: https://www-googleapis-staging.sandbox.google.com
Source: 3578e76a-d2d3-481d-be57-0aed749b631f.tmp.3.dr, d895c22f-553c-41fb-8a27-1c6699ad33f0.tmp.3.dr	String found in binary or memory: https://www.google.com
Source: manifest.json.0.dr	String found in binary or memory: https://www.google.com/
Source: craw_window.js.0.dr	String found in binary or memory: https://www.google.com/accounts/OAuthLogin?issueuberauth=1
Source: craw_window.js.0.dr	String found in binary or memory: https://www.google.com/images/cleardot.gif
Source: craw_window.js.0.dr	String found in binary or memory: https://www.google.com/images/dot2.gif
Source: craw_window.js.0.dr	String found in binary or memory: https://www.google.com/images/x2.gif
Source: craw_background.js.0.dr	String found in binary or memory: https://www.google.com/intl/en-US/chrome/blank.html
Source: craw_background.js.0.dr, 3578e76a-d2d3-481d-be57-0aed749b631f.tmp.3.dr, craw_window.js.0.dr, d895c22f-553c-41fb-8a27-1c6699ad33f0.tmp.3.dr	String found in binary or memory: https://www.googleapis.com
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/auth/chromewebstore
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/auth/chromewebstore.readonly
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/auth/sierra
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/auth/sierrasandbox
Source: 3578e76a-d2d3-481d-be57-0aed749b631f.tmp.3.dr, d895c22f-553c-41fb-8a27-1c6699ad33f0.tmp.3.dr	String found in binary or memory: https://www.gstatic.com

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --enable-automation --single-argument http://static.clarlity.com/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1652,17050148873617410223,8877625412963403,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2128 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1652,17050148873617410223,8877625412963403,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2128 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	3 Non-Application Layer Protocol	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	4 Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	1 Ingress Tool Transfer	SIM Card Swap		Carrier Billing Fraud

Source	Detection	Scanner	Label	Link
http://static.clarlity.com	4%	Virustotal		Browse
http://static.clarlity.com	100%	Avira URL Cloud	malware

Source	Detection	Scanner	Link
C:\Users\user\AppData\Local\Temp\384_1385954082\_platform_specific\x86_64\pnacl_public_x86_64_ld_nexe	0%	Metadefender	Browse
C:\Users\user\AppData\Local\Temp\384_1385954082\_platform_specific\x86_64\pnacl_public_x86_64_ld_nexe	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\384_1385954082\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_llc_nexe	0%	Metadefender	Browse
C:\Users\user\AppData\Local\Temp\384_1385954082\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_llc_nexe	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\384_1385954082\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_sz_nexe	0%	Metadefender	Browse
C:\Users\user\AppData\Local\Temp\384_1385954082\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_sz_nexe	0%	ReversingLabs

Name	IP	Active	Malicious	Antivirus Detection	Reputation
accounts.google.com	142.250.181.237	true	false		high
part-0017.t-0009.fbs1-t-msedge.net	13.107.219.45	true	false	0%, Virustotal, Browse	unknown
b-0005.b-msedge.net	13.107.6.158	true	false	0%, Virustotal, Browse	unknown
clients.l.google.com	142.250.186.142	true	false		high
static.clarlity.com	185.253.33.179	true	false	4%, Virustotal, Browse	unknown
clients2.google.com	unknown	unknown	false		high
www.clarity.ms	unknown	unknown	false	1%, Virustotal, Browse	unknown
i.clarity.ms	unknown	unknown	false		unknown

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.6.158	b-0005.b-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.219.45	part-0017.t-0009.fbs1-t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.227.45	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
185.253.33.179	static.clarlity.com	Russian Federation	29182	THEFIRST-ASRU	false
142.250.181.237	accounts.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.186.142	clients.l.google.com	United States	15169	GOOGLEUS	false

IP
192.168.2.1
127.0.0.1

Joe Sandbox Version:	35.0.0 Citrine
Analysis ID:	651252
Start date and time: 23/06/202217:45:31	2022-06-23 17:45:31 +02:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 4m 33s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	http://static.clarlity.com
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.win@28/131@7/9
EGA Information:	Failed
HDC Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Adjust boot time Enable AMSI

Source	Detection	Scanner	Label
http://static.clarlity.com/	100%	Avira URL Cloud	malware
https://static.clarlity.com/	100%	Avira URL Cloud	malware
http://static.clarlity.com/26Microsoft	100%	Avira URL Cloud	malware
https://static.clarlity.com/26Microsoft	100%	Avira URL Cloud	malware

Name	Malicious	Antivirus Detection	Reputation
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=92.0.4515.107&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1&x=id%3Dpkedcjkdefgpdelpbcmbmeomcjbeemfm%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1	false		high
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard	false		high
http://static.clarlity.com/	true	Avira URL Cloud: malware	unknown
https://static.clarlity.com/	true	Avira URL Cloud: malware	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p	craw_background.js.0.dr, craw_window.js.0.dr	false		high
https://www.google.com/intl/en-US/chrome/blank.html	craw_background.js.0.dr	false		high
https://ogs.google.com	3578e76a-d2d3-481d-be57-0aed749b631f.tmp.3.dr, d895c22f-553c-41fb-8a27-1c6699ad33f0.tmp.3.dr	false		high
https://www.google.com/images/cleardot.gif	craw_window.js.0.dr	false		high
https://payments.google.com/payments/v4/js/integrator.js	craw_window.js.0.dr, manifest.json.0.dr	false		high
https://chromium.googlesource.com/a/native_client/pnacl-llvm.git	pnacl_public_x86_64_crtbegin_for_eh_o.0.dr	false		high
https://sandbox.google.com/payments/v4/js/integrator.js	craw_window.js.0.dr, manifest.json.0.dr	false		high
https://www.google.com/images/x2.gif	craw_window.js.0.dr	false		high
https://accounts.google.com/MergeSession	craw_window.js.0.dr	false		high
http://llvm.org/):	pnacl_public_x86_64_pnacl_llc_nexe.0.dr, pnacl_public_x86_64_pnacl_sz_nexe.0.dr	false		high
https://www.google.com	3578e76a-d2d3-481d-be57-0aed749b631f.tmp.3.dr, d895c22f-553c-41fb-8a27-1c6699ad33f0.tmp.3.dr	false		high
https://www.google.com/images/dot2.gif	craw_window.js.0.dr	false		high
https://code.google.com/p/nativeclient/issues/entry%s:	pnacl_public_x86_64_ld_nexe.0.dr	false		high
http://static.clarlity.com/26Microsoft	History Provider Cache.0.dr	true	Avira URL Cloud: malware	unknown
https://code.google.com/p/nativeclient/issues/entry	pnacl_public_x86_64_ld_nexe.0.dr	false		high
https://static.clarlity.com/26Microsoft	History Provider Cache.0.dr	true	Avira URL Cloud: malware	unknown
https://accounts.google.com	3578e76a-d2d3-481d-be57-0aed749b631f.tmp.3.dr, d895c22f-553c-41fb-8a27-1c6699ad33f0.tmp.3.dr	false		high
https://clients2.googleusercontent.com	3578e76a-d2d3-481d-be57-0aed749b631f.tmp.3.dr, d895c22f-553c-41fb-8a27-1c6699ad33f0.tmp.3.dr	false		high
https://apis.google.com	3578e76a-d2d3-481d-be57-0aed749b631f.tmp.3.dr, d895c22f-553c-41fb-8a27-1c6699ad33f0.tmp.3.dr	false		high
https://www.google.com/accounts/OAuthLogin?issueuberauth=1	craw_window.js.0.dr	false		high
https://www.google.com/	manifest.json.0.dr	false		high
https://www-googleapis-staging.sandbox.google.com	craw_background.js.0.dr, craw_window.js.0.dr	false		high
https://chromium.googlesource.com/a/native_client/pnacl-clang.git	pnacl_public_x86_64_crtbegin_for_eh_o.0.dr	false		high
https://clients2.google.com	3578e76a-d2d3-481d-be57-0aed749b631f.tmp.3.dr, d895c22f-553c-41fb-8a27-1c6699ad33f0.tmp.3.dr	false		high
https://clients2.google.com/service/update2/crx	manifest.json1.0.dr, manifest.json.0.dr	false		high

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	110525
Entropy (8bit):	6.033194282673867
Encrypted:	false
SSDEEP:	1536:S8HaR4UCQMlS0NgjfpObO7PScDwiFHJ6y4Mo6UQEy9hhCsjUtjOjXMW3:JHaR4UQgjF7PSc0iFHJ6yNTRgyjX7
MD5:	828F2558EBB3B438B876E42BC18C6E43
SHA1:	94F390524F735AEECEFC0BD834B63739D816B0AD
SHA-256:	BE6399C754848A410E6E3A2702F23E87FC966487072E574572D265E25AD2F9E6
SHA-512:	F00FD58F2C5A374003B492BE6E68AE466531F5B9E9CBBBCF157DFF63782A0FA11FB0C8915047F1AFAA08C569F2A1FF2F373E43044AF23D7853A5B7CE30569BF2
Malicious:	false
Reputation:	low
Preview:	{"browser":{"last_redirect_origin":"","shortcut_migration_version":"91.0.4472.77"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.656031569132766e+12,"network":1.655999171e+12,"ticks":170039524.0,"uncertainty":4001958.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABBQ7WxpM2gT7fMNkY5iRxkAAAAAAIAAAAAABBmAAAAAQAAIAAAALDWDwoLRYqp0NkiPsTxUN2QcOPsitaJrdacpo+ULE2PAAAAAA6AAAAAAgAAIAAAAOIeKQBWbQSCqXv1OSNS2lIZGHfAdJRwvbkapN4/FWvwMAAAAPz8I/w07KQb4Ut8ObsBGVgFwbuU88R362cCGZpNEtOEILJDMaKWOA4Y9ejBRTt5kEAAAADq8RkIezfgqGPgEaEMkhoGd9qhyBeyucXcRUPEI7mgYIxaDt8C5FJrjkEhV5EOUcUmR2SCzqYelImLnfOlbhRQ"},"policy":{"last_statistics_update":"13300505166191351"},"profile":{"info_cache":{"Default":{"active_time":1656031567.476837,"avatar_icon":"chrom

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jun 23, 2022 17:46:11.007333994 CEST	58981	53	192.168.2.3	1.1.1.1
Jun 23, 2022 17:46:11.056999922 CEST	53	58981	1.1.1.1	192.168.2.3
Jun 23, 2022 17:46:11.397166967 CEST	54143	53	192.168.2.3	1.1.1.1
Jun 23, 2022 17:46:11.400713921 CEST	64389	53	192.168.2.3	1.1.1.1
Jun 23, 2022 17:46:11.414675951 CEST	53	54143	1.1.1.1	192.168.2.3
Jun 23, 2022 17:46:11.418237925 CEST	53	64389	1.1.1.1	192.168.2.3
Jun 23, 2022 17:46:12.399838924 CEST	59026	53	192.168.2.3	1.1.1.1
Jun 23, 2022 17:46:13.097368002 CEST	50999	53	192.168.2.3	1.1.1.1
Jun 23, 2022 17:47:18.499634027 CEST	56310	53	192.168.2.3	1.1.1.1
Jun 23, 2022 17:48:19.504697084 CEST	54350	53	192.168.2.3	1.1.1.1

Timestamp	kBytes transferred	Direction	Data
Jun 23, 2022 17:46:11.458672047 CEST	178	OUT	GET / HTTP/1.1 Host: static.clarlity.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jun 23, 2022 17:46:11.514708996 CEST	193	IN	HTTP/1.1 301 Moved Permanently Server: nginx/1.20.2 Date: Thu, 23 Jun 2022 15:46:11 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://static.clarlity.com:443/ Data Raw: 61 39 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 30 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a9<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx/1.20.2</center></body></html>0
Jun 23, 2022 17:46:56.518534899 CEST	12411	OUT	Data Raw: 00 Data Ascii:

Timestamp	kBytes transferred	Direction	Data
2022-06-23 15:46:11 UTC	0	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+620
2022-06-23 15:46:11 UTC	0	OUT	Data Raw: 20 Data Ascii:
2022-06-23 15:46:11 UTC	2	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: https://www.google.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 23 Jun 2022 15:46:11 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin; report-to="IdentityListAccountsHttp" Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/IdentityListAccountsHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-YggJWJVhzW1XQvrfILuUGw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdentityListAccountsHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'nonce-YggJWJVhzW1XQvrfILuUGw' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdentityListAccountsHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Report-To: {"group":"IdentityListAccountsHttp","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/IdentityListAccountsHttp/external"}]} Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-06-23 15:46:11 UTC	4	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2022-06-23 15:46:11 UTC	4	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	kBytes transferred	Direction	Data
2022-06-23 15:46:11 UTC	0	OUT	GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=92.0.4515.107&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1&x=id%3Dpkedcjkdefgpdelpbcmbmeomcjbeemfm%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1 Host: clients2.google.com Connection: keep-alive X-Goog-Update-Interactivity: fg X-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda,pkedcjkdefgpdelpbcmbmeomcjbeemfm X-Goog-Update-Updater: chromecrx-92.0.4515.107 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-06-23 15:46:11 UTC	1	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-ne_hh6ual7YY4tIFyYJFgw' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 23 Jun 2022 15:46:11 GMT Content-Type: text/xml; charset=UTF-8 X-Daynum: 5652 X-Daystart: 31571 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-06-23 15:46:11 UTC	2	IN	Data Raw: 33 31 61 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 35 36 35 32 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 33 31 35 37 31 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 Data Ascii: 31a<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="5652" elapsed_seconds="31571"/><app appid="nmmhkkegccagdldgiimedpiccmgmieda" cohort="1::" cohortname=""
2022-06-23 15:46:11 UTC	2	IN	Data Raw: 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 2e 63 72 78 22 20 66 70 3d 22 31 2e 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 7a 65 3d 22 32 34 38 35 33 31 22 20 73 74 61 74 75 73 3d 22 6f 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 2e 30 2e 36 22 2f 3e 3c 2f 61 70 70 3e 3c 61 70 Data Ascii: mhkkegccagdldgiimedpiccmgmieda.crx" fp="1.81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" hash_sha256="81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" protected="0" size="248531" status="ok" version="1.0.0.6"/></app><ap
2022-06-23 15:46:11 UTC	2	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	kBytes transferred	Direction	Data
2022-06-23 15:46:17 UTC	10016	OUT	POST /api/v2 HTTP/1.1 Host: clarity.microsoft.com Connection: keep-alive Content-Length: 561 sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Google Chrome";v="92" accept: / CSRF-Token: A5gZhC91-9-8SIkok-4N8WRnFW2jE-4TNttk X-MSEdge-IG: 83E9DF4FF54847FAA33B3F3A44DCF9A6 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 content-type: application/json Origin: https://clarity.microsoft.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://clarity.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _csrf=ZjyH5RX8D-FrNJbRirs3eihY
2022-06-23 15:46:17 UTC	10016	OUT	Data Raw: 7b 22 6f 70 65 72 61 74 69 6f 6e 4e 61 6d 65 22 3a 22 67 65 74 41 63 63 6f 75 6e 74 53 74 61 74 75 73 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 7b 7d 2c 22 71 75 65 72 79 22 3a 22 71 75 65 72 79 20 67 65 74 41 63 63 6f 75 6e 74 53 74 61 74 75 73 20 7b 5c 6e 20 20 61 63 63 6f 75 6e 74 53 74 61 74 75 73 20 7b 5c 6e 20 20 20 20 74 68 69 72 64 50 61 72 74 79 41 75 74 68 65 64 5c 6e 20 20 20 20 75 73 65 72 44 61 74 61 20 7b 5c 6e 20 20 20 20 20 20 69 64 5c 6e 20 20 20 20 20 20 66 75 6c 6c 4e 61 6d 65 5c 6e 20 20 20 20 20 20 65 6d 61 69 6c 5c 6e 20 20 20 20 20 20 73 65 63 6f 6e 64 61 72 79 45 6d 61 69 6c 5c 6e 20 20 20 20 20 20 6c 61 6e 67 75 61 67 65 5c 6e 20 20 20 20 20 20 61 63 63 65 70 74 65 64 4c 61 74 65 73 74 54 65 72 6d 73 4f 66 55 73 65 5c 6e 20 20 20 Data Ascii: {"operationName":"getAccountStatus","variables":{},"query":"query getAccountStatus {\n accountStatus {\n thirdPartyAuthed\n userData {\n id\n fullName\n email\n secondaryEmail\n language\n acceptedLatestTermsOfUse\n
2022-06-23 15:46:17 UTC	10017	IN	HTTP/1.1 200 OK Cache-Control: max-age=0, no-cache, no-store, must-revalidate Keep-Alive: timeout=5 Content-Length: 479 Content-Type: application/json; charset=utf-8 ETag: W/"1df-0WIftgJZ2lolRi5FaPIhuD5QjsQ" Vary: Accept-Encoding X-DNS-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: C985244D92E048158A0B6B7D28259F02 Ref B: AM3EDGE0120 Ref C: 2022-06-23T15:46:17Z Date: Thu, 23 Jun 2022 15:46:17 GMT Connection: close
2022-06-23 15:46:17 UTC	10017	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 61 63 63 6f 75 6e 74 53 74 61 74 75 73 22 3a 7b 22 74 68 69 72 64 50 61 72 74 79 41 75 74 68 65 64 22 3a 66 61 6c 73 65 2c 22 75 73 65 72 44 61 74 61 22 3a 7b 22 69 64 22 3a 6e 75 6c 6c 2c 22 66 75 6c 6c 4e 61 6d 65 22 3a 6e 75 6c 6c 2c 22 65 6d 61 69 6c 22 3a 6e 75 6c 6c 2c 22 73 65 63 6f 6e 64 61 72 79 45 6d 61 69 6c 22 3a 6e 75 6c 6c 2c 22 6c 61 6e 67 75 61 67 65 22 3a 6e 75 6c 6c 2c 22 61 63 63 65 70 74 65 64 4c 61 74 65 73 74 54 65 72 6d 73 4f 66 55 73 65 22 3a 66 61 6c 73 65 2c 22 69 73 46 69 72 73 74 52 75 6e 22 3a 74 72 75 65 2c 22 63 6f 61 63 68 4d 61 72 6b 53 74 61 74 75 73 22 3a 7b 22 76 65 72 73 69 6f 6e 22 3a 30 2c 22 73 65 65 6e 22 3a 22 55 4e 53 45 45 4e 22 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 43 6f 61 Data Ascii: {"data":{"accountStatus":{"thirdPartyAuthed":false,"userData":{"id":null,"fullName":null,"email":null,"secondaryEmail":null,"language":null,"acceptedLatestTermsOfUse":false,"isFirstRun":true,"coachMarkStatus":{"version":0,"seen":"UNSEEN","__typename":"Coa

Timestamp	kBytes transferred	Direction	Data
2022-06-23 15:46:17 UTC	10018	OUT	GET /static/MicrosoftLogoWhite.webp HTTP/1.1 Host: clarity.microsoft.com Connection: keep-alive sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Google Chrome";v="92" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://clarity.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _csrf=ZjyH5RX8D-FrNJbRirs3eihY
2022-06-23 15:46:18 UTC	10019	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=0 Keep-Alive: timeout=5 Content-Length: 2136 Content-Type: image/webp Last-Modified: Mon, 23 May 2022 00:16:58 GMT Accept-Ranges: bytes ETag: W/"858-180ee462c90" X-DNS-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: FEA8074591824072898F6056CE9D48A9 Ref B: AM3EDGE0909 Ref C: 2022-06-23T15:46:17Z Date: Thu, 23 Jun 2022 15:46:17 GMT Connection: close
2022-06-23 15:46:18 UTC	10019	IN	Data Raw: 52 49 46 46 50 08 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 b7 00 00 23 00 00 41 4c 50 48 01 03 00 00 01 c7 a0 20 00 01 84 05 fc df 5b 17 22 82 60 92 a6 da 8e 81 c5 fb 0e 21 4b b6 ed a8 75 ae ac 80 0c b8 8b 2c ae ce fc 87 ea db 91 87 d2 ff 44 f4 df 81 db b6 91 a4 cc cc de bb 6a 7a a4 fb 05 fa e3 0e 84 71 c8 e4 17 15 61 72 fe 5f 93 b6 4c 63 c6 d2 00 76 3d 4e 21 6d db 36 85 2e d3 b6 15 25 c0 e8 63 1e cf 38 03 a7 90 01 b4 d0 85 ad 4a 07 ae 34 60 14 60 9f a7 cd 35 39 0d 94 40 65 03 0c 0f 6e 34 62 bc c1 66 f4 a4 db a2 7e e0 34 c2 1b 46 47 a3 91 83 f1 36 06 c0 43 fd c0 59 34 c0 9f 3d 32 7c 06 a7 a3 6a 81 d3 79 7c 1e b9 26 6f b4 36 38 18 87 37 7a f2 45 d6 63 a4 cf ea b6 64 d7 a3 14 6b b0 7c d6 bd 44 be 52 24 22 c6 93 63 31 12 05 ee 4d 05 13 1b aa b3 Data Ascii: RIFFPWEBPVP8X#ALPH ["`!Ku,Djzqar_Lcv=N!m6.%c8J4``59@en4bf~4FG6CY4=2\|jy\|&o687zEcdk\|DR$"c1M

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://static.clarlity.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Google\Chrome\User Data\32af24b7-8e6b-4ca4-9f91-b71a9d7b1c26.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\63e60e49-df27-46d0-b3fa-02bfa03eedf3.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\6b9537c1-fc51-4958-bf78-7feeb99aeb61.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\7444ee2a-05c7-45c7-83c9-9501bf5c4091.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\753d683a-f3ce-47ee-ad69-d581352f32f8.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\7e175efc-c788-4101-beea-420bee86d477.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\9f65ff68-23a7-412c-b484-e55f86cfb511.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\13e00e10-1d73-4edf-9ce0-bd19823476a6.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\3578e76a-d2d3-481d-be57-0aed749b631f.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\48c45130-639c-4828-a432-e0717693726d.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\506a3c1e-1ce9-4269-b6b8-51c9115019eb.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\59c98ba8-b128-4ecc-974e-0f5b70752c6e.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\90474a84-0be1-4e22-bcf3-0c167e667cd3.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_1\_metadata\computed_hashes.json

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Google Profile.ico (copy)

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent State (copy)

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences (copy)

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences (copy)

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\data_1

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Network Persistent State (copy)

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\000001.dbtmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\CURRENT (copy)

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\MANIFEST-000001

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\f5ec0849-d2be-414d-ab65-9445e79a95fc.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\7948abcf-4021-4246-bb2c-8e9d62b142e1.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network Persistent State (copy)

Windows Analysis Report
http://static.clarlity.com

Timestamp	kBytes transferred	Direction	Data
2022-06-23 15:46:20 UTC	10407	OUT	GET /images/logo.ico HTTP/1.1 Host: claritystatic.azureedge.net Connection: keep-alive sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Google Chrome";v="92" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-06-23 15:46:20 UTC	10408	IN	HTTP/1.1 200 OK Content-Length: 43120 Content-Type: image/x-icon Content-MD5: Bwu0/3Ny6szzMAY3ZGYq8Q== Last-Modified: Wed, 04 May 2022 17:55:20 GMT ETag: 0x8DA2DF74168CDFF X-Cache: TCP_HIT Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 456a2607-801e-001b-7208-864695000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob X-Azure-Ref: 0zIq0YgAAAADOCIDfA5CXRqjOAEKyhbhpRlJBMjMxMDUwNDE3MDExADMxMTA4NmFkLTVjMGEtNGEzYi1hMTBlLTg2NzY3YTJmNzJhZg== Date: Thu, 23 Jun 2022 15:46:19 GMT Connection: close
2022-06-23 15:46:20 UTC	10408	IN	Data Raw: 00 00 01 00 03 00 10 10 00 00 01 00 20 00 68 04 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 9e 04 00 00 00 00 00 00 01 00 20 00 2a 93 00 00 46 15 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d1 6d 3f df cd 6a 38 fe c5 6b 35 ff c3 6a 35 ff c0 69 34 ff bd 67 34 ff bc 65 34 fe b8 64 33 ff b5 62 34 ff b3 61 33 ff b1 5f 32 fe ae 5e 32 ff ac 5d 31 ff a9 5b 31 ff ad 5d 32 fe b8 68 3a df cd 5d 2c af c5 59 1f ff bc 5a 1b ff b8 59 1a ff b5 57 1a ff b2 54 1a ff af 53 19 ff ad 51 18 fe aa Data Ascii: h6 *F( m?j8k5j5i4g4e4d3b4a3_2^2]1[1]2h:],YZYWTSQ
2022-06-23 15:46:20 UTC	10424	IN	Data Raw: e1 e2 d8 3f 6c c8 66 98 6c 63 d5 99 08 67 a2 2f ca 90 1a 68 31 69 6e 60 0c 79 8b 5c 9d 08 ac 47 bd 40 4b 76 dd be 5f 18 f2 08 a9 21 3b e9 b8 0c b8 1f 0d f2 12 12 9c 38 ad 70 f2 04 5a 04 3c ea 00 24 ac 3b 50 12 8c 34 51 bc 46 fe c2 80 70 32 a9 87 02 cc f3 2f 97 8a 77 de be 21 ef 7f b0 eb d9 77 9d b8 3c a4 56 dd ad 89 d4 49 66 11 68 f1 f7 89 2c 6a 07 51 4e 1b bc 87 59 30 10 45 21 a0 3c 67 7c 29 72 30 25 83 b7 8c 19 f2 db f6 13 ef 80 29 db a6 13 f4 2c 1e e0 b0 e0 03 8b 00 fe e4 df bb 72 5a b1 38 d7 cd fb f4 2d b3 83 ec f3 a6 f6 03 8c 47 11 3a 83 b1 84 ce 2d 13 63 22 c4 e5 36 b9 b5 04 e4 22 6a f1 76 42 77 58 42 40 b1 cc e6 93 d3 82 b9 f8 b1 42 8e 61 c3 c9 71 a1 90 b2 1c 8f f8 38 13 7d 86 10 1c 18 36 64 ba bf 7d 96 b0 c3 77 e0 01 70 71 7b 4f 2f 7e b0 2b 97 2e Data Ascii: ?lflcg/h1in`y\G@Kv_!;8pZ<$;P4QFp2/w!w<VIfh,jQNY0E!<g\|)r0%),rZ8-G:-c"6"jvBwXB@Baq8}6d}wpq{O/~+.
2022-06-23 15:46:20 UTC	10440	IN	Data Raw: 76 e1 fa 30 4a 32 71 79 ea fd 6a 79 a6 c1 d5 42 92 86 93 cc ba aa f9 52 c3 96 9c 11 9e f7 f8 63 8f cb b1 47 4f 6a 3b 76 1c 54 cc 8c ce 14 db 93 b7 56 08 d7 d0 74 e5 a9 cb dc 0b 26 f7 35 79 f7 b8 59 5d 83 7d b9 d0 c6 cc 7c ac ae 56 7d 48 ff 6e 2c 26 c9 45 55 b3 0a 1d 4a 84 e3 d3 9c 1f 63 76 60 f9 f7 d2 e6 b1 fd ef 7f f5 cb cf 6e 7f 2f 72 fc 3d 23 80 de f5 2c 54 9e 24 13 13 50 b3 bb a1 53 96 00 97 67 0e ff 31 2d a2 c6 74 f0 ef 2a ba c2 98 17 2d 00 b3 46 d9 24 60 12 0e 93 f2 d2 87 69 0f 72 ca e7 76 b4 4e 34 7f b5 e1 c4 20 cc 61 01 e8 96 20 a4 0f 08 ed 2e e5 e5 f3 d6 b9 2c 3d d2 34 81 d4 20 da d0 e1 01 d8 0c 84 86 21 41 70 c1 3d 2d bf e7 30 be ae d0 c1 ba 56 2b 1c c2 a2 6b 0c a6 e6 53 21 84 3f ed d1 40 2a c6 5a 1e e7 38 16 7f c4 6a 2c 28 4e 64 56 e5 30 d7 3a Data Ascii: v0J2qyjyBRcGOj;vTVt&5yY]}\|V}Hn,&EUJcv`n/r=#,T$PSg1-t-F$`irvN4 a .,=4 !Ap=-0V+kS!?@Z8j,(NdV0:

Timestamp	kBytes transferred	Direction	Data
2022-06-23 15:46:22 UTC	10450	OUT	POST /api/v2 HTTP/1.1 Host: clarity.microsoft.com Connection: keep-alive Content-Length: 261 sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Google Chrome";v="92" accept: / CSRF-Token: A5gZhC91-9-8SIkok-4N8WRnFW2jE-4TNttk X-MSEdge-IG: 83E9DF4FF54847FAA33B3F3A44DCF9A6 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 content-type: application/json Origin: https://clarity.microsoft.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://clarity.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _csrf=ZjyH5RX8D-FrNJbRirs3eihY
2022-06-23 15:46:22 UTC	10451	OUT	Data Raw: 7b 22 6f 70 65 72 61 74 69 6f 6e 4e 61 6d 65 22 3a 22 62 61 74 63 68 45 76 65 6e 74 73 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 7b 22 6c 6f 67 73 22 3a 5b 7b 22 6c 65 76 65 6c 22 3a 22 49 4e 46 4f 22 2c 22 6b 65 79 22 3a 22 68 79 64 72 61 74 69 6f 6e 50 65 72 66 22 2c 22 65 78 74 72 61 49 6e 66 6f 22 3a 22 7b 5c 22 71 75 65 72 79 5c 22 3a 5c 22 67 65 74 41 63 63 6f 75 6e 74 53 74 61 74 75 73 5c 22 2c 5c 22 74 69 6d 65 54 61 6b 65 6e 5c 22 3a 31 32 35 32 2e 36 30 30 30 30 30 30 30 30 30 30 35 38 7d 22 7d 5d 2c 22 63 6c 69 63 6b 73 22 3a 5b 5d 7d 2c 22 71 75 65 72 79 22 3a 22 6d 75 74 61 74 69 6f 6e 20 62 61 74 63 68 45 76 65 6e 74 73 28 24 6c 6f 67 73 3a 20 5b 4c 6f 67 41 72 67 73 5d 29 20 7b 5c 6e 20 20 6c 6f 67 28 6c 6f 67 73 3a 20 24 6c 6f 67 73 29 5c Data Ascii: {"operationName":"batchEvents","variables":{"logs":[{"level":"INFO","key":"hydrationPerf","extraInfo":"{\"query\":\"getAccountStatus\",\"timeTaken\":1252.6000000000058}"}],"clicks":[]},"query":"mutation batchEvents($logs: [LogArgs]) {\n log(logs: $logs)\
2022-06-23 15:46:22 UTC	10451	IN	HTTP/1.1 200 OK Cache-Control: max-age=0, no-cache, no-store, must-revalidate Keep-Alive: timeout=5 Content-Length: 21 Content-Type: application/json; charset=utf-8 ETag: W/"15-IVtljokNVP25Tru4dL4hRVRjE3o" Vary: Accept-Encoding X-DNS-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: F7A9A14FF37841CC8847F38F6DC1FB76 Ref B: AMS04EDGE2114 Ref C: 2022-06-23T15:46:22Z Date: Thu, 23 Jun 2022 15:46:21 GMT Connection: close
2022-06-23 15:46:22 UTC	10452	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 6c 6f 67 22 3a 74 72 75 65 7d 7d Data Ascii: {"data":{"log":true}}

Timestamp	kBytes transferred	Direction	Data
2022-06-23 15:46:30 UTC	10452	OUT	GET /images/logo.ico HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36 Host: claritystatic.azureedge.net
2022-06-23 15:46:30 UTC	10452	IN	HTTP/1.1 200 OK Content-Length: 43120 Content-Type: image/x-icon Content-MD5: Bwu0/3Ny6szzMAY3ZGYq8Q== Last-Modified: Wed, 04 May 2022 17:55:20 GMT ETag: 0x8DA2DF74168CDFF X-Cache: TCP_HIT Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 456a2607-801e-001b-7208-864695000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob X-Azure-Ref: 01oq0YgAAAADJ58Hi53uVTpCoV28kWGnARlJBMjMxMDUwNDE4MDM3ADMxMTA4NmFkLTVjMGEtNGEzYi1hMTBlLTg2NzY3YTJmNzJhZg== Date: Thu, 23 Jun 2022 15:46:29 GMT Connection: close
2022-06-23 15:46:30 UTC	10453	IN	Data Raw: 00 00 01 00 03 00 10 10 00 00 01 00 20 00 68 04 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 9e 04 00 00 00 00 00 00 01 00 20 00 2a 93 00 00 46 15 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d1 6d 3f df cd 6a 38 fe c5 6b 35 ff c3 6a 35 ff c0 69 34 ff bd 67 34 ff bc 65 34 fe b8 64 33 ff b5 62 34 ff b3 61 33 ff b1 5f 32 fe ae 5e 32 ff ac 5d 31 ff a9 5b 31 ff ad 5d 32 fe b8 68 3a df cd 5d 2c af c5 59 1f ff bc 5a 1b ff b8 59 1a ff b5 57 1a ff b2 54 1a ff af 53 19 ff ad 51 18 fe aa Data Ascii: h6 *F( m?j8k5j5i4g4e4d3b4a3_2^2]1[1]2h:],YZYWTSQ
2022-06-23 15:46:30 UTC	10468	IN	Data Raw: e1 e2 d8 3f 6c c8 66 98 6c 63 d5 99 08 67 a2 2f ca 90 1a 68 31 69 6e 60 0c 79 8b 5c 9d 08 ac 47 bd 40 4b 76 dd be 5f 18 f2 08 a9 21 3b e9 b8 0c b8 1f 0d f2 12 12 9c 38 ad 70 f2 04 5a 04 3c ea 00 24 ac 3b 50 12 8c 34 51 bc 46 fe c2 80 70 32 a9 87 02 cc f3 2f 97 8a 77 de be 21 ef 7f b0 eb d9 77 9d b8 3c a4 56 dd ad 89 d4 49 66 11 68 f1 f7 89 2c 6a 07 51 4e 1b bc 87 59 30 10 45 21 a0 3c 67 7c 29 72 30 25 83 b7 8c 19 f2 db f6 13 ef 80 29 db a6 13 f4 2c 1e e0 b0 e0 03 8b 00 fe e4 df bb 72 5a b1 38 d7 cd fb f4 2d b3 83 ec f3 a6 f6 03 8c 47 11 3a 83 b1 84 ce 2d 13 63 22 c4 e5 36 b9 b5 04 e4 22 6a f1 76 42 77 58 42 40 b1 cc e6 93 d3 82 b9 f8 b1 42 8e 61 c3 c9 71 a1 90 b2 1c 8f f8 38 13 7d 86 10 1c 18 36 64 ba bf 7d 96 b0 c3 77 e0 01 70 71 7b 4f 2f 7e b0 2b 97 2e Data Ascii: ?lflcg/h1in`y\G@Kv_!;8pZ<$;P4QFp2/w!w<VIfh,jQNY0E!<g\|)r0%),rZ8-G:-c"6"jvBwXB@Baq8}6d}wpq{O/~+.
2022-06-23 15:46:30 UTC	10484	IN	Data Raw: 76 e1 fa 30 4a 32 71 79 ea fd 6a 79 a6 c1 d5 42 92 86 93 cc ba aa f9 52 c3 96 9c 11 9e f7 f8 63 8f cb b1 47 4f 6a 3b 76 1c 54 cc 8c ce 14 db 93 b7 56 08 d7 d0 74 e5 a9 cb dc 0b 26 f7 35 79 f7 b8 59 5d 83 7d b9 d0 c6 cc 7c ac ae 56 7d 48 ff 6e 2c 26 c9 45 55 b3 0a 1d 4a 84 e3 d3 9c 1f 63 76 60 f9 f7 d2 e6 b1 fd ef 7f f5 cb cf 6e 7f 2f 72 fc 3d 23 80 de f5 2c 54 9e 24 13 13 50 b3 bb a1 53 96 00 97 67 0e ff 31 2d a2 c6 74 f0 ef 2a ba c2 98 17 2d 00 b3 46 d9 24 60 12 0e 93 f2 d2 87 69 0f 72 ca e7 76 b4 4e 34 7f b5 e1 c4 20 cc 61 01 e8 96 20 a4 0f 08 ed 2e e5 e5 f3 d6 b9 2c 3d d2 34 81 d4 20 da d0 e1 01 d8 0c 84 86 21 41 70 c1 3d 2d bf e7 30 be ae d0 c1 ba 56 2b 1c c2 a2 6b 0c a6 e6 53 21 84 3f ed d1 40 2a c6 5a 1e e7 38 16 7f c4 6a 2c 28 4e 64 56 e5 30 d7 3a Data Ascii: v0J2qyjyBRcGOj;vTVt&5yY]}\|V}Hn,&EUJcv`n/r=#,T$PSg1-t-F$`irvN4 a .,=4 !Ap=-0V+kS!?@Z8j,(NdV0:

Timestamp	kBytes transferred	Direction	Data
2022-06-23 15:46:30 UTC	10452	OUT	GET /static/MicrosoftLogoWhite.png HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36 Host: clarity.microsoft.com Cookie: _EDGE_V=1; MUID=1EC826F357326C2A094236A356E56DD2
2022-06-23 15:46:30 UTC	10511	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=0 Keep-Alive: timeout=5 Content-Length: 1766 Content-Type: image/png Last-Modified: Mon, 23 May 2022 00:16:58 GMT Accept-Ranges: bytes ETag: W/"6e6-180ee462c90" X-DNS-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 5D3EE35C587343B39CAEC6B09B277269 Ref B: AM3EDGE0809 Ref C: 2022-06-23T15:46:30Z Date: Thu, 23 Jun 2022 15:46:30 GMT Connection: close
2022-06-23 15:46:30 UTC	10512	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 b8 00 00 00 24 08 06 00 00 00 3a 97 f0 ff 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 06 7b 49 44 41 54 78 01 ed 5c bd 6e e4 36 10 9e 0d ee 01 16 29 d2 9a f7 00 c1 ed a5 4a 67 1d 90 2a 4d 9c 36 40 b0 ba 3a 85 f7 9e 60 75 4f 60 bb 48 bd 3a 04 48 6b 5f 93 2a c0 ae bb 54 b1 0f 79 00 e9 da 14 f1 e6 09 18 8e 35 5c 8d b8 94 44 fd 21 3e 89 1f 40 70 45 0d 67 48 6a 34 1c 0e a9 05 f0 f0 f0 f0 f0 f8 34 31 fb eb f5 42 42 07 7c b9 b9 9f 61 fe f3 6f 5f 75 e2 f3 d3 b7 7f ce c0 c3 a3 67 7c 06 1e 1e 23 86 57 70 8f 51 c3 2b b8 c7 a8 e1 15 dc 63 d4 f0 0a ee 31 6a 78 05 ef 00 29 e5 5c a5 50 25 01 1e bd 43 8d Data Ascii: PNGIHDR$:pHYs%%IR$sRGBgAMAa{IDATx\n6)JgM6@:`uO`H:Hk_Ty5\D!>@pEgHj441BB\|ao_ug\|#WpQ+c1jx)\P%C

Timestamp	kBytes transferred	Direction	Data
2022-06-23 15:46:12 UTC	5	OUT	GET / HTTP/1.1 Host: clarity.microsoft.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Google Chrome";v="92" sec-ch-ua-mobile: ?0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-06-23 15:46:12 UTC	6	IN	HTTP/1.1 200 OK Cache-Control: max-age=0, no-cache, no-store, must-revalidate Keep-Alive: timeout=5 Content-Length: 5986 Content-Type: text/html; charset=utf-8 ETag: W/"1762-cR+nUOVfL/mLdRzZDQFAi9d+wyo" Vary: Accept-Encoding Set-Cookie: _csrf=ZjyH5RX8D-FrNJbRirs3eihY; Path=/ X-DNS-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 5639126648F74858890DFE2851D85BFC Ref B: AM3EDGE1014 Ref C: 2022-06-23T15:46:12Z Date: Thu, 23 Jun 2022 15:46:11 GMT Connection: close
2022-06-23 15:46:12 UTC	7	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 2f 3e 3c 74 69 74 6c 65 3e 4d 69 63 72 6f 73 6f 66 74 20 43 6c 61 72 69 74 79 20 2d 20 46 72 65 65 20 48 65 61 74 6d 61 70 73 20 26 20 53 65 73 73 69 6f 6e 20 52 65 63 6f 72 64 69 6e 67 73 3c 2f 74 69 74 6c 65 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6c 61 72 69 74 79 73 74 61 74 69 63 2e 61 7a 75 72 65 65 64 67 65 2e 6e 65 74 2f 69 6d 61 67 65 73 2f 6c 6f 67 6f 2e 69 63 6f 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 73 61 6d 65 2d 6f 72 69 67 69 6e 22 2f 3e 3c 6d 65 74 61 Data Ascii: <!doctype html><html lang="en"><head><meta charset="UTF-8"/><title>Microsoft Clarity - Free Heatmaps & Session Recordings</title><link rel="icon" href="https://claritystatic.azureedge.net/images/logo.ico"><meta name="referrer" content="same-origin"/><meta
2022-06-23 15:46:12 UTC	8	IN	Data Raw: 74 6d 61 70 73 2e 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 73 69 74 65 22 20 63 6f 6e 74 65 6e 74 3d 22 40 6d 73 66 74 43 6c 61 72 69 74 79 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 69 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 63 6c 61 72 69 74 79 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 54 77 69 74 74 65 72 5f 6f 67 5f 69 6d 61 67 65 2e 70 6e 67 22 2f 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 3d 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 7c 7c 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 67 74 61 67 28 29 7b 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 3b 7d 67 74 61 67 28 27 6a 73 27 2c 6e Data Ascii: tmaps."/><meta name="twitter:site" content="@msftClarity"/><meta name="twitter:image" content="https://clarity.microsoft.com/static/Twitter_og_image.png"/><script>window.dataLayer=window.dataLayer\|\|[];function gtag(){dataLayer.push(arguments);}gtag('js',n
2022-06-23 15:46:12 UTC	10	IN	Data Raw: 72 75 65 7d 2c 22 68 65 61 74 6d 61 70 43 68 61 6e 67 65 53 63 72 65 65 6e 73 68 6f 74 46 65 61 74 75 72 65 22 3a 7b 22 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 Data Ascii: rue},"heatmapChangeScreenshotFeature":{"enabled":false,"
2022-06-23 15:46:12 UTC	10	IN	Data Raw: 65 6e 61 62 6c 65 64 49 6e 56 6e 65 78 74 22 3a 74 72 75 65 7d 2c 22 73 68 61 72 69 6e 67 22 3a 7b 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 64 49 6e 56 6e 65 78 74 22 3a 74 72 75 65 7d 2c 22 75 6e 69 76 65 72 73 61 6c 46 69 6c 74 65 72 73 22 3a 7b 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 72 65 73 6f 75 72 63 65 43 61 63 68 69 6e 67 22 3a 7b 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 64 49 6e 56 6e 65 78 74 22 3a 74 72 75 65 7d 2c 22 73 65 67 6d 65 6e 74 73 4f 66 49 6e 74 65 72 65 73 74 73 22 3a 7b 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 73 6f 69 43 61 6c 6c 73 22 3a 7b 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 72 65 63 6f 72 64 69 6e 67 54 6f 48 65 61 74 6d 61 70 22 3a 7b 22 65 Data Ascii: enabledInVnext":true},"sharing":{"enabled":true,"enabledInVnext":true},"universalFilters":{"enabled":true},"resourceCaching":{"enabled":true,"enabledInVnext":true},"segmentsOfInterests":{"enabled":true},"soiCalls":{"enabled":true},"recordingToHeatmap":{"e

Timestamp	kBytes transferred	Direction	Data
2022-06-23 15:46:12 UTC	12	OUT	GET /scripts/client/runtime.3982585e1c60c72e9f72.js HTTP/1.1 Host: claritystatic.azureedge.net Connection: keep-alive sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Google Chrome";v="92" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-06-23 15:46:13 UTC	15	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=14400 Content-Length: 3543 Content-Type: application/javascript Content-MD5: LfitD7/xHDXEAc0L6YVIxA== Last-Modified: Thu, 23 Jun 2022 02:28:55 GMT ETag: 0x8DA54C01F0A045C Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 X-Cache: TCP_MISS x-ms-request-id: 1fe5560d-701e-002c-6318-87ea3a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob X-Azure-Ref-OriginShield: 0xIq0YgAAAAAUe1Z3bzChQo8cX+9wqTJHRlJBMjMxMDUwNDE4MDI3ADMxMTA4NmFkLTVjMGEtNGEzYi1hMTBlLTg2NzY3YTJmNzJhZg== X-Azure-Ref: 0xIq0YgAAAABiHMPxYeTOSqi3vpW+QWZvRlJBMjMxMDUwNDE5MDQ1ADMxMTA4NmFkLTVjMGEtNGEzYi1hMTBlLTg2NzY3YTJmNzJhZg== Date: Thu, 23 Jun 2022 15:46:12 GMT Connection: close
2022-06-23 15:46:13 UTC	16	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 72 2c 74 2c 6f 2c 6e 2c 61 3d 7b 7d 2c 69 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 76 61 72 20 72 3d 69 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 29 72 65 74 75 72 6e 20 72 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 69 5b 65 5d 3d 7b 69 64 3a 65 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 61 5b 65 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 6c 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 6c 2e 6d 3d 61 2c 65 3d 5b 5d 2c 6c 2e 4f 3d 28 72 2c 74 2c 6f 2c 6e 29 3d 3e 7b 69 66 28 21 74 29 7b 76 61 72 20 61 3d 31 2f 30 3b 66 6f 72 28 63 3d 30 3b 63 Data Ascii: (()=>{"use strict";var e,r,t,o,n,a={},i={};function l(e){var r=i[e];if(void 0!==r)return r.exports;var t=i[e]={id:e,loaded:!1,exports:{}};return a[e].call(t.exports,t,t.exports,l),t.loaded=!0,t.exports}l.m=a,e=[],l.O=(r,t,o,n)=>{if(!t){var a=1/0;for(c=0;c

Timestamp	kBytes transferred	Direction	Data
2022-06-23 15:46:12 UTC	13	OUT	GET /scripts/client/polyfills.bc17208ff0f06e3e2a82.js HTTP/1.1 Host: claritystatic.azureedge.net Connection: keep-alive sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Google Chrome";v="92" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-06-23 15:46:14 UTC	404	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=14400 Content-Length: 221458 Content-Type: application/javascript Content-MD5: jCBAgpYlrja9iQlylLjxpQ== Last-Modified: Thu, 23 Jun 2022 02:28:55 GMT ETag: 0x8DA54C01F0CC323 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 X-Cache: TCP_MISS x-ms-request-id: 0fd99b72-301e-006f-4318-87c0d3000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob X-Azure-Ref-OriginShield: 0xIq0YgAAAAC/7WIeFh2cSLyGHfxerVmtRlJBMjMxMDUwNDE3MDMxADMxMTA4NmFkLTVjMGEtNGEzYi1hMTBlLTg2NzY3YTJmNzJhZg== X-Azure-Ref: 0xIq0YgAAAABZNd6C+87sTIl2DK+bKNEYRlJBMjMxMDUwNDE5MDIxADMxMTA4NmFkLTVjMGEtNGEzYi1hMTBlLTg2NzY3YTJmNzJhZg== Date: Thu, 23 Jun 2022 15:46:13 GMT Connection: close
2022-06-23 15:46:14 UTC	404	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6c 61 72 69 74 79 5f 73 65 72 76 65 72 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6c 61 72 69 74 79 5f 73 65 72 76 65 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 32 39 5d 2c 7b 38 39 35 30 38 3a 28 74 2c 72 2c 65 29 3d 3e 7b 65 28 37 30 31 38 35 29 2c 65 28 33 34 35 32 31 29 3b 76 61 72 20 6e 3d 65 28 35 30 35 38 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 2e 41 72 72 61 79 2e 66 72 6f 6d 7d 2c 31 30 31 39 37 3a 28 74 2c 72 2c 65 29 3d 3e 7b 65 28 38 31 38 34 37 29 3b 76 61 72 20 6e 3d 65 28 35 30 35 38 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 2e 41 72 72 61 79 2e 69 73 41 72 72 61 79 7d 2c 33 37 35 39 35 3a 28 74 2c 72 2c 65 29 3d 3e 7b 65 28 37 39 33 39 38 29 3b 76 61 72 20 6e 3d 65 28 38 Data Ascii: (self.webpackChunkclarity_server=self.webpackChunkclarity_server\|\|[]).push([[429],{89508:(t,r,e)=>{e(70185),e(34521);var n=e(5058);t.exports=n.Array.from},10197:(t,r,e)=>{e(81847);var n=e(5058);t.exports=n.Array.isArray},37595:(t,r,e)=>{e(79398);var n=e(8
2022-06-23 15:46:14 UTC	420	IN	Data Raw: 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 6e 2e 53 79 6d 62 6f 6c 7c 7c 28 6e 2e 53 79 6d 62 6f 6c 3d 7b 7d 29 3b 6f 28 72 2c 74 29 7c 7c 61 28 72 2c 74 2c 7b 76 61 6c 75 65 3a 69 2e 66 28 74 29 7d 29 7d 7d 2c 39 32 32 39 30 3a 28 74 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 6e 3d 65 28 31 33 33 31 35 29 3b 74 2e 65 78 70 6f 72 74 73 3d 21 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 21 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 7b 7d 2c 31 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 7d 7d 29 5b 31 5d 7d 29 29 7d 2c 31 33 36 39 36 3a 28 74 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 6e 3d 65 28 38 32 32 30 32 29 2c 6f 3d 65 28 36 36 31 30 36 29 2c 69 3d 6e 2e 64 6f Data Ascii: orts=function(t){var r=n.Symbol\|\|(n.Symbol={});o(r,t)\|\|a(r,t,{value:i.f(t)})}},92290:(t,r,e)=>{var n=e(13315);t.exports=!n((function(){return 7!=Object.defineProperty({},1,{get:function(){return 7}})[1]}))},13696:(t,r,e)=>{var n=e(82202),o=e(66106),i=n.do
2022-06-23 15:46:14 UTC	436	IN	Data Raw: 20 63 3c 30 7c 7c 63 3e 3d 66 3f 74 3f 22 22 3a 76 6f 69 64 20 30 3a 28 61 3d 73 2e 63 68 61 72 43 6f 64 65 41 74 28 63 29 29 3c 35 35 32 39 36 7c 7c 61 3e 35 36 33 31 39 7c 7c 63 2b 31 3d 3d 3d 66 7c 7c 28 75 3d 73 2e 63 68 61 72 43 6f 64 65 41 74 28 63 2b 31 29 29 3c 35 36 33 32 30 7c 7c 75 3e 35 37 33 34 33 3f 74 3f 73 2e 63 68 61 72 41 74 28 63 29 3a 61 3a 74 3f 73 2e 73 6c 69 63 65 28 63 2c 63 2b 32 29 3a 75 2d 35 36 33 32 30 2b 28 61 2d 35 35 32 39 36 3c 3c 31 30 29 2b 36 35 35 33 36 7d 7d 3b 74 2e 65 78 70 6f 72 74 73 3d 7b 63 6f 64 65 41 74 3a 61 28 21 31 29 2c 63 68 61 72 41 74 3a 61 28 21 30 29 7d 7d 2c 38 30 35 32 3a 28 74 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 6e 3d 65 28 31 33 33 31 35 29 2c 6f 3d 65 28 39 36 39 32 29 3b 74 2e 65 78 70 6f 72 74 Data Ascii: c<0\|\|c>=f?t?"":void 0:(a=s.charCodeAt(c))<55296\|\|a>56319\|\|c+1===f\|\|(u=s.charCodeAt(c+1))<56320\|\|u>57343?t?s.charAt(c):a:t?s.slice(c,c+2):u-56320+(a-55296<<10)+65536}};t.exports={codeAt:a(!1),charAt:a(!0)}},8052:(t,r,e)=>{var n=e(13315),o=e(9692);t.export
2022-06-23 15:46:14 UTC	452	IN	Data Raw: 65 74 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 76 61 72 20 65 3d 69 28 6f 28 74 29 2c 72 29 3b 72 65 74 75 72 6e 21 28 65 26 26 21 65 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 29 26 26 64 65 6c 65 74 65 20 74 5b 72 5d 7d 7d 29 7d 2c 37 36 38 33 39 3a 28 74 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 6e 3d 65 28 36 35 36 30 39 29 2c 6f 3d 65 28 36 34 39 35 30 29 2c 69 3d 65 28 32 39 35 36 39 29 3b 6e 28 7b 74 61 72 67 65 74 3a 22 52 65 66 6c 65 63 74 22 2c 73 74 61 74 3a 21 30 2c 73 68 61 6d 3a 21 65 28 34 39 37 32 33 29 7d 2c 7b 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 69 28 6f 28 74 29 29 7d 7d 29 7d 2c 32 32 33 38 32 3a 28 74 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 6e 3d 65 28 Data Ascii: eteProperty:function(t,r){var e=i(o(t),r);return!(e&&!e.configurable)&&delete t[r]}})},76839:(t,r,e)=>{var n=e(65609),o=e(64950),i=e(29569);n({target:"Reflect",stat:!0,sham:!e(49723)},{getPrototypeOf:function(t){return i(o(t))}})},22382:(t,r,e)=>{var n=e(
2022-06-23 15:46:14 UTC	468	IN	Data Raw: 28 42 28 74 68 69 73 2c 38 2c 74 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 29 2c 35 32 29 7d 2c 73 65 74 49 6e 74 38 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 57 28 74 68 69 73 2c 31 2c 74 2c 4e 2c 72 29 7d 2c 73 65 74 55 69 6e 74 38 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 57 28 74 68 69 73 2c 31 2c 74 2c 4e 2c 72 29 7d 2c 73 65 74 49 6e 74 31 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 57 28 74 68 69 73 2c 32 2c 74 2c 46 2c 72 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 76 6f 69 64 20 30 29 7d 2c 73 65 74 55 69 6e 74 31 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 57 28 74 68 69 73 2c 32 2c 74 2c 46 2c 72 2c 61 Data Ascii: (B(this,8,t,arguments.length>1?arguments[1]:void 0),52)},setInt8:function(t,r){W(this,1,t,N,r)},setUint8:function(t,r){W(this,1,t,N,r)},setInt16:function(t,r){W(this,2,t,F,r,arguments.length>2?arguments[2]:void 0)},setUint16:function(t,r){W(this,2,t,F,r,a
2022-06-23 15:46:14 UTC	484	IN	Data Raw: 28 6e 2e 53 79 6d 62 6f 6c 3d 7b 7d 29 3b 6f 28 72 2c 74 29 7c 7c 61 28 72 2c 74 2c 7b 76 61 6c 75 65 3a 69 2e 66 28 74 29 7d 29 7d 7d 2c 31 39 37 38 31 3a 28 74 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 6e 3d 65 28 34 37 32 39 33 29 3b 74 2e 65 78 70 6f 72 74 73 3d 21 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 21 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 7b 7d 2c 31 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 7d 7d 29 5b 31 5d 7d 29 29 7d 2c 38 30 33 31 37 3a 28 74 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 6e 3d 65 28 31 37 38 35 34 29 2c 6f 3d 65 28 37 30 31 31 31 29 2c 69 3d 6e 2e 64 6f 63 75 6d 65 6e 74 2c 61 3d 6f 28 69 29 26 26 6f 28 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 29 Data Ascii: (n.Symbol={});o(r,t)\|\|a(r,t,{value:i.f(t)})}},19781:(t,r,e)=>{var n=e(47293);t.exports=!n((function(){return 7!=Object.defineProperty({},1,{get:function(){return 7}})[1]}))},80317:(t,r,e)=>{var n=e(17854),o=e(70111),i=n.document,a=o(i)&&o(i.createElement)
2022-06-23 15:46:14 UTC	500	IN	Data Raw: 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 26 26 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 3f 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 28 77 69 6e 64 6f 77 29 3a 5b 5d 3b 74 2e 65 78 70 6f 72 74 73 2e 66 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 61 26 26 22 5b 6f 62 6a 65 63 74 20 57 69 6e 64 6f 77 5d 22 3d 3d 69 2e 63 61 6c 6c 28 74 29 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6f 28 74 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 61 2e 73 6c 69 63 65 28 29 7d 7d 28 74 29 3a 6f 28 6e 28 74 29 29 7d 7d 2c 38 30 30 36 3a 28 74 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 6e 3d 65 28 31 36 33 32 34 29 2c 6f 3d 65 28 38 30 37 Data Ascii: peof window&&window&&Object.getOwnPropertyNames?Object.getOwnPropertyNames(window):[];t.exports.f=function(t){return a&&"[object Window]"==i.call(t)?function(t){try{return o(t)}catch(t){return a.slice()}}(t):o(n(t))}},8006:(t,r,e)=>{var n=e(16324),o=e(807
2022-06-23 15:46:14 UTC	516	IN	Data Raw: 6e 28 7b 67 6c 6f 62 61 6c 3a 21 30 2c 66 6f 72 63 65 64 3a 6f 2e 41 72 72 61 79 42 75 66 66 65 72 21 3d 3d 75 7d 2c 7b 41 72 72 61 79 42 75 66 66 65 72 3a 75 7d 29 2c 61 28 22 41 72 72 61 79 42 75 66 66 65 72 22 29 7d 2c 37 36 39 33 38 3a 28 74 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 6e 3d 65 28 38 32 31 30 39 29 2c 6f 3d 65 28 39 30 32 36 30 29 3b 6e 28 7b 74 61 72 67 65 74 3a 22 41 72 72 61 79 42 75 66 66 65 72 22 2c 73 74 61 74 3a 21 30 2c 66 6f 72 63 65 64 3a 21 6f 2e 4e 41 54 49 56 45 5f 41 52 52 41 59 5f 42 55 46 46 45 52 5f 56 49 45 57 53 7d 2c 7b 69 73 56 69 65 77 3a 6f 2e 69 73 56 69 65 77 7d 29 7d 2c 33 39 35 37 35 3a 28 74 2c 72 2c 65 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 65 28 38 32 31 30 39 29 2c 6f 3d 65 28 34 37 Data Ascii: n({global:!0,forced:o.ArrayBuffer!==u},{ArrayBuffer:u}),a("ArrayBuffer")},76938:(t,r,e)=>{var n=e(82109),o=e(90260);n({target:"ArrayBuffer",stat:!0,forced:!o.NATIVE_ARRAY_BUFFER_VIEWS},{isView:o.isView})},39575:(t,r,e)=>{"use strict";var n=e(82109),o=e(47
2022-06-23 15:46:14 UTC	531	IN	Data Raw: 76 61 72 20 65 3d 2d 31 2c 6e 3d 72 3b 2b 2b 65 3c 36 3b 29 6e 2b 3d 74 2a 70 5b 65 5d 2c 70 5b 65 5d 3d 6e 25 31 65 37 2c 6e 3d 63 28 6e 2f 31 65 37 29 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 36 2c 65 3d 30 3b 2d 2d 72 3e 3d 30 3b 29 65 2b 3d 70 5b 72 5d 2c 70 5b 72 5d 3d 63 28 65 2f 74 29 2c 65 3d 65 25 74 2a 31 65 37 7d 2c 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 36 2c 72 3d 22 22 3b 2d 2d 74 3e 3d 30 3b 29 69 66 28 22 22 21 3d 3d 72 7c 7c 30 3d 3d 3d 74 7c 7c 30 21 3d 3d 70 5b 74 5d 29 7b 76 61 72 20 65 3d 53 74 72 69 6e 67 28 70 5b 74 5d 29 3b 72 3d 22 22 3d 3d 3d 72 3f 65 3a 72 2b 61 2e 63 61 6c 6c 28 22 30 22 2c 37 2d 65 2e 6c 65 6e 67 74 68 29 2b 65 7d 72 65 74 75 72 6e 20 72 7d 3b Data Ascii: var e=-1,n=r;++e<6;)n+=tp[e],p[e]=n%1e7,n=c(n/1e7)},g=function(t){for(var r=6,e=0;--r>=0;)e+=p[r],p[r]=c(e/t),e=e%t1e7},y=function(){for(var t=6,r="";--t>=0;)if(""!==r\|\|0===t\|\|0!==p[t]){var e=String(p[t]);r=""===r?e:r+a.call("0",7-e.length)+e}return r};
2022-06-23 15:46:14 UTC	547	IN	Data Raw: 68 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 76 6f 69 64 20 30 29 7d 7d 29 2c 6f 29 7d 2c 31 35 32 31 38 3a 28 74 2c 72 2c 65 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 65 28 38 32 31 30 39 29 2c 6f 3d 65 28 31 34 32 33 30 29 3b 6e 28 7b 74 61 72 67 65 74 3a 22 53 74 72 69 6e 67 22 2c 70 72 6f 74 6f 3a 21 30 2c 66 6f 72 63 65 64 3a 65 28 34 33 34 32 39 29 28 22 61 6e 63 68 6f 72 22 29 7d 2c 7b 61 6e 63 68 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6f 28 74 68 69 73 2c 22 61 22 2c 22 6e 61 6d 65 22 2c 74 29 7d 7d 29 7d 2c 37 34 34 37 35 3a 28 74 2c 72 2c 65 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 65 28 38 32 31 30 39 29 2c 6f 3d 65 28 31 34 32 33 30 29 3b 6e 28 7b 74 61 72 67 65 Data Ascii: h?arguments[0]:void 0)}}),o)},15218:(t,r,e)=>{"use strict";var n=e(82109),o=e(14230);n({target:"String",proto:!0,forced:e(43429)("anchor")},{anchor:function(t){return o(this,"a","name",t)}})},74475:(t,r,e)=>{"use strict";var n=e(82109),o=e(14230);n({targe
2022-06-23 15:46:14 UTC	563	IN	Data Raw: 69 64 20 30 29 7d 29 29 7d 2c 31 38 39 32 37 3a 28 74 2c 72 2c 65 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 65 28 39 30 32 36 30 29 2c 6f 3d 65 28 34 32 30 39 32 29 2e 65 76 65 72 79 2c 69 3d 6e 2e 61 54 79 70 65 64 41 72 72 61 79 3b 28 30 2c 6e 2e 65 78 70 6f 72 74 54 79 70 65 64 41 72 72 61 79 4d 65 74 68 6f 64 29 28 22 65 76 65 72 79 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6f 28 69 28 74 68 69 73 29 2c 74 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 29 7d 29 29 7d 2c 33 33 31 30 35 3a 28 74 2c 72 2c 65 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 65 28 39 30 32 36 30 29 2c 6f 3d 65 28 32 31 32 38 35 29 2c Data Ascii: id 0)}))},18927:(t,r,e)=>{"use strict";var n=e(90260),o=e(42092).every,i=n.aTypedArray;(0,n.exportTypedArrayMethod)("every",(function(t){return o(i(this),t,arguments.length>1?arguments[1]:void 0)}))},33105:(t,r,e)=>{"use strict";var n=e(90260),o=e(21285),
2022-06-23 15:46:14 UTC	579	IN	Data Raw: 6e 28 74 29 7b 72 65 74 75 72 6e 20 61 28 74 68 69 73 29 2c 69 28 74 29 2c 6f 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 69 66 28 74 28 72 29 29 72 65 74 75 72 6e 20 6f 2e 73 74 6f 70 28 72 29 7d 29 2c 76 6f 69 64 20 30 2c 21 31 2c 21 30 29 2e 72 65 73 75 6c 74 7d 7d 29 7d 2c 38 32 34 39 39 3a 28 74 2c 72 2c 65 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 65 28 38 32 31 30 39 29 2c 6f 3d 65 28 31 33 30 39 39 29 2c 69 3d 65 28 31 39 36 37 30 29 2c 61 3d 65 28 37 31 32 34 36 29 2c 75 3d 65 28 35 34 39 35 36 29 2c 73 3d 65 28 35 33 34 31 31 29 2c 63 3d 75 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 72 2c 65 2c 6e 2c 75 2c 63 3d 74 68 69 73 2e 69 74 65 72 61 74 6f 72 3b 3b 29 7b 69 66 28 75 3d 74 68 Data Ascii: n(t){return a(this),i(t),o(this,(function(r){if(t(r))return o.stop(r)}),void 0,!1,!0).result}})},82499:(t,r,e)=>{"use strict";var n=e(82109),o=e(13099),i=e(19670),a=e(71246),u=e(54956),s=e(53411),c=u((function(t){for(var r,e,n,u,c=this.iterator;;){if(u=th
2022-06-23 15:46:14 UTC	595	IN	Data Raw: 7d 7d 29 7d 2c 31 31 34 37 37 3a 28 74 2c 72 2c 65 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 65 28 38 32 31 30 39 29 2c 6f 3d 65 28 33 31 39 31 33 29 2c 69 3d 65 28 31 39 36 37 30 29 2c 61 3d 65 28 34 39 39 37 34 29 2c 75 3d 65 28 39 36 37 36 37 29 2c 73 3d 65 28 32 30 34 30 38 29 3b 6e 28 7b 74 61 72 67 65 74 3a 22 53 65 74 22 2c 70 72 6f 74 6f 3a 21 30 2c 72 65 61 6c 3a 21 30 2c 66 6f 72 63 65 64 3a 6f 7d 2c 7b 65 76 65 72 79 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 69 28 74 68 69 73 29 2c 65 3d 75 28 72 29 2c 6e 3d 61 28 74 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 2c 33 29 3b 72 65 74 75 72 6e 21 73 28 65 2c 28 66 75 6e 63 74 69 6f 6e Data Ascii: }})},11477:(t,r,e)=>{"use strict";var n=e(82109),o=e(31913),i=e(19670),a=e(49974),u=e(96767),s=e(20408);n({target:"Set",proto:!0,real:!0,forced:o},{every:function(t){var r=i(this),e=u(r),n=a(t,arguments.length>1?arguments[1]:void 0,3);return!s(e,(function
2022-06-23 15:46:14 UTC	611	IN	Data Raw: 3d 61 29 74 2e 75 73 65 72 6e 61 6d 65 3d 6f 2e 75 73 65 72 6e 61 6d 65 2c 74 2e 70 61 73 73 77 6f 72 64 3d 6f 2e 70 61 73 73 77 6f 72 64 2c 74 2e 68 6f 73 74 3d 6f 2e 68 6f 73 74 2c 74 2e 70 6f 72 74 3d 6f 2e 70 6f 72 74 2c 74 2e 70 61 74 68 3d 6f 2e 70 61 74 68 2e 73 6c 69 63 65 28 29 2c 74 2e 71 75 65 72 79 3d 22 22 2c 66 3d 53 74 3b 65 6c 73 65 7b 69 66 28 22 23 22 21 3d 61 29 7b 74 2e 75 73 65 72 6e 61 6d 65 3d 6f 2e 75 73 65 72 6e 61 6d 65 2c 74 2e 70 61 73 73 77 6f 72 64 3d 6f 2e 70 61 73 73 77 6f 72 64 2c 74 2e 68 6f 73 74 3d 6f 2e 68 6f 73 74 2c 74 2e 70 6f 72 74 3d 6f 2e 70 6f 72 74 2c 74 2e 70 61 74 68 3d 6f 2e 70 61 74 68 2e 73 6c 69 63 65 28 29 2c 74 2e 70 61 74 68 2e 70 6f 70 28 29 2c 66 3d 62 74 3b 63 6f 6e 74 69 6e 75 65 7d 74 2e 75 73 65 Data Ascii: =a)t.username=o.username,t.password=o.password,t.host=o.host,t.port=o.port,t.path=o.path.slice(),t.query="",f=St;else{if("#"!=a){t.username=o.username,t.password=o.password,t.host=o.host,t.port=o.port,t.path=o.path.slice(),t.path.pop(),f=bt;continue}t.use

Timestamp	kBytes transferred	Direction	Data
2022-06-23 15:46:12 UTC	13	OUT	GET /scripts/client/react.049524836a08a787294a.js HTTP/1.1 Host: claritystatic.azureedge.net Connection: keep-alive sec-ch-ua: "Chromium";v="92", " Not A;Brand";v="99", "Google Chrome";v="92" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-06-23 15:46:13 UTC	36	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=14400 Content-Length: 131191 Content-Type: application/javascript Content-MD5: 62LkPTkrWkHbNayzoWa11g== Last-Modified: Thu, 23 Jun 2022 02:28:55 GMT ETag: 0x8DA54C01EF98C0F X-Cache: TCP_MISS Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 47b4d17e-e01e-0066-2f18-87da5d000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob X-Azure-Ref: 0xIq0YgAAAABVFaKO4B8NQLcSj7y5nmN5RlJBMjMxMDUwNDE3MDE3ADMxMTA4NmFkLTVjMGEtNGEzYi1hMTBlLTg2NzY3YTJmNzJhZg== Date: Thu, 23 Jun 2022 15:46:13 GMT Connection: close
2022-06-23 15:46:13 UTC	36	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 72 65 61 63 74 2e 30 34 39 35 32 34 38 33 36 61 30 38 61 37 38 37 32 39 34 61 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6c 61 72 69 74 79 5f 73 65 72 76 65 72 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6c 61 72 69 74 79 5f 73 65 72 76 65 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 31 34 5d 2c 7b 32 37 34 31 38 3a 65 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 2c 6e 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 Data Ascii: /! For license information please see react.049524836a08a787294a.js.LICENSE.txt /(self.webpackChunkclarity_server=self.webpackChunkclarity_server\|\|[]).push([[514],{27418:e=>{"use strict";var t=Object.getOwnPropertySymbols,n=Object.prototype.hasOwnPrope
2022-06-23 15:46:13 UTC	84	IN	Data Raw: 69 6e 67 28 31 29 2c 79 65 5b 74 5d 3d 79 65 5b 65 5d 7d 29 29 7d 29 29 3b 76 61 72 20 53 65 3d 6c 28 7b 6d 65 6e 75 69 74 65 6d 3a 21 30 7d 2c 7b 61 72 65 61 3a 21 30 2c 62 61 73 65 3a 21 30 2c 62 72 3a 21 30 2c 63 6f 6c 3a 21 30 2c 65 6d 62 65 64 3a 21 30 2c 68 72 3a 21 30 2c 69 6d 67 3a 21 30 2c 69 6e 70 75 74 3a 21 30 2c 6b 65 79 67 65 6e 3a 21 30 2c 6c 69 6e 6b 3a 21 30 2c 6d 65 74 61 3a 21 30 2c 70 61 72 61 6d 3a 21 30 2c 73 6f 75 72 63 65 3a 21 30 2c 74 72 61 63 6b 3a 21 30 2c 77 62 72 3a 21 30 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 45 65 28 65 2c 74 29 7b 69 66 28 74 29 7b 69 66 28 53 65 5b 65 5d 26 26 28 6e 75 6c 6c 21 3d 74 2e 63 68 69 6c 64 72 65 6e 7c 7c 6e 75 6c 6c 21 3d 74 2e 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c Data Ascii: ing(1),ye[t]=ye[e]}))}));var Se=l({menuitem:!0},{area:!0,base:!0,br:!0,col:!0,embed:!0,hr:!0,img:!0,input:!0,keygen:!0,link:!0,meta:!0,param:!0,source:!0,track:!0,wbr:!0});function Ee(e,t){if(t){if(Se[e]&&(null!=t.children\|\|null!=t.dangerouslySetInnerHTML
2022-06-23 15:46:13 UTC	100	IN	Data Raw: 74 29 7d 66 75 6e 63 74 69 6f 6e 20 69 72 28 65 2c 74 29 7b 69 66 28 22 69 6e 70 75 74 22 3d 3d 3d 65 7c 7c 22 63 68 61 6e 67 65 22 3d 3d 3d 65 29 72 65 74 75 72 6e 20 47 6e 28 74 29 7d 76 61 72 20 73 72 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 69 73 3f 4f 62 6a 65 63 74 2e 69 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 74 26 26 28 30 21 3d 3d 65 7c 7c 31 2f 65 3d 3d 31 2f 74 29 7c 7c 65 21 3d 65 26 26 74 21 3d 74 7d 2c 63 72 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3b 66 75 6e 63 74 69 6f 6e 20 66 72 28 65 2c 74 29 7b 69 66 28 73 72 28 65 2c 74 29 29 72 65 74 75 72 6e 21 30 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 Data Ascii: t)}function ir(e,t){if("input"===e\|\|"change"===e)return Gn(t)}var sr="function"==typeof Object.is?Object.is:function(e,t){return e===t&&(0!==e\|\|1/e==1/t)\|\|e!=e&&t!=t},cr=Object.prototype.hasOwnProperty;function fr(e,t){if(sr(e,t))return!0;if("object"!=typ
2022-06-23 15:46:13 UTC	116	IN	Data Raw: 65 2c 74 61 67 3a 6e 2e 74 61 67 2c 70 61 79 6c 6f 61 64 3a 6e 2e 70 61 79 6c 6f 61 64 2c 63 61 6c 6c 62 61 63 6b 3a 6e 2e 63 61 6c 6c 62 61 63 6b 2c 6e 65 78 74 3a 6e 75 6c 6c 7d 3b 6e 75 6c 6c 3d 3d 3d 61 3f 6c 3d 61 3d 6f 3a 61 3d 61 2e 6e 65 78 74 3d 6f 2c 6e 3d 6e 2e 6e 65 78 74 7d 77 68 69 6c 65 28 6e 75 6c 6c 21 3d 3d 6e 29 3b 6e 75 6c 6c 3d 3d 3d 61 3f 6c 3d 61 3d 74 3a 61 3d 61 2e 6e 65 78 74 3d 74 7d 65 6c 73 65 20 6c 3d 61 3d 74 3b 72 65 74 75 72 6e 20 6e 3d 7b 62 61 73 65 53 74 61 74 65 3a 72 2e 62 61 73 65 53 74 61 74 65 2c 66 69 72 73 74 42 61 73 65 55 70 64 61 74 65 3a 6c 2c 6c 61 73 74 42 61 73 65 55 70 64 61 74 65 3a 61 2c 73 68 61 72 65 64 3a 72 2e 73 68 61 72 65 64 2c 65 66 66 65 63 74 73 3a 72 2e 65 66 66 65 63 74 73 7d 2c 76 6f 69 64 Data Ascii: e,tag:n.tag,payload:n.payload,callback:n.callback,next:null};null===a?l=a=o:a=a.next=o,n=n.next}while(null!==n);null===a?l=a=t:a=a.next=t}else l=a=t;return n={baseState:r.baseState,firstBaseUpdate:l,lastBaseUpdate:a,shared:r.shared,effects:r.effects},void
2022-06-23 15:46:13 UTC	212	IN	Data Raw: 74 2c 6e 2c 61 2c 72 29 7d 5a 61 2e 66 6c 61 67 73 7c 3d 65 2c 6c 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3d 76 6f 28 31 7c 74 2c 6e 2c 61 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 6f 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 62 6f 28 35 31 36 2c 34 2c 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 53 6f 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 77 6f 28 35 31 36 2c 34 2c 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 45 6f 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 77 6f 28 34 2c 32 2c 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 6f 28 65 2c 74 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 3f 28 65 3d 65 28 29 2c 74 28 65 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 6e 75 6c 6c 29 7d 29 3a 6e 75 6c 6c 21 3d 74 3f 28 65 3d 65 28 29 2c Data Ascii: t,n,a,r)}Za.flags\|=e,l.memoizedState=vo(1\|t,n,a,r)}function ko(e,t){return bo(516,4,e,t)}function So(e,t){return wo(516,4,e,t)}function Eo(e,t){return wo(4,2,e,t)}function _o(e,t){return"function"==typeof t?(e=e(),t(e),function(){t(null)}):null!=t?(e=e(),
2022-06-23 15:46:13 UTC	228	IN	Data Raw: 6f 69 7a 65 64 50 72 6f 70 73 2e 66 61 6c 6c 62 61 63 6b 26 26 48 61 28 74 29 3a 6e 3d 6e 75 6c 6c 21 3d 3d 65 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 2c 72 26 26 21 6e 26 26 30 21 3d 28 32 26 74 2e 6d 6f 64 65 29 26 26 28 6e 75 6c 6c 3d 3d 3d 65 26 26 21 30 21 3d 3d 74 2e 6d 65 6d 6f 69 7a 65 64 50 72 6f 70 73 2e 75 6e 73 74 61 62 6c 65 5f 61 76 6f 69 64 54 68 69 73 46 61 6c 6c 62 61 63 6b 7c 7c 30 21 3d 28 31 26 44 61 2e 63 75 72 72 65 6e 74 29 3f 30 3d 3d 3d 49 75 26 26 28 49 75 3d 33 29 3a 28 30 21 3d 3d 49 75 26 26 33 21 3d 3d 49 75 7c 7c 28 49 75 3d 34 29 2c 6e 75 6c 6c 3d 3d 3d 4c 75 7c 7c 30 3d 3d 28 31 33 34 32 31 37 37 32 37 26 55 75 29 26 26 30 3d 3d 28 31 33 34 32 31 37 37 32 37 26 6a 75 29 7c 7c 6d 69 28 4c 75 2c 4f 75 29 29 29 2c 28 72 7c Data Ascii: oizedProps.fallback&&Ha(t):n=null!==e.memoizedState,r&&!n&&0!=(2&t.mode)&&(null===e&&!0!==t.memoizedProps.unstable_avoidThisFallback\|\|0!=(1&Da.current)?0===Iu&&(Iu=3):(0!==Iu&&3!==Iu\|\|(Iu=4),null===Lu\|\|0==(134217727&Uu)&&0==(134217727&ju)\|\|mi(Lu,Ou))),(r\|
2022-06-23 15:46:13 UTC	244	IN	Data Raw: 6b 3b 63 61 73 65 20 33 3a 52 61 28 29 2c 73 6c 28 70 6c 29 2c 73 6c 28 64 6c 29 2c 4b 61 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 35 3a 49 61 28 72 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 52 61 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 33 3a 63 61 73 65 20 31 39 3a 73 6c 28 44 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 30 3a 6e 61 28 72 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 33 3a 63 61 73 65 20 32 34 3a 77 69 28 29 7d 6e 3d 6e 2e 72 65 74 75 72 6e 7d 4c 75 3d 65 2c 7a 75 3d 57 69 28 65 2e 63 75 72 72 65 6e 74 2c 6e 75 6c 6c 29 2c 4f 75 3d 52 75 3d 46 75 3d 74 2c 49 75 3d 30 2c 44 75 3d 6e 75 6c 6c 2c 41 75 3d 6a 75 3d 55 75 3d 30 7d 66 75 6e 63 74 69 6f 6e 20 53 69 28 65 2c 74 29 7b 66 6f 72 28 3b 3b 29 7b 76 61 72 20 6e 3d 7a 75 3b 74 72 Data Ascii: k;case 3:Ra(),sl(pl),sl(dl),Ka();break;case 5:Ia(r);break;case 4:Ra();break;case 13:case 19:sl(Da);break;case 10:na(r);break;case 23:case 24:wi()}n=n.return}Lu=e,zu=Wi(e.current,null),Ou=Ru=Fu=t,Iu=0,Du=null,Au=ju=Uu=0}function Si(e,t){for(;;){var n=zu;tr
2022-06-23 15:46:13 UTC	260	IN	Data Raw: 6f 77 20 45 72 72 6f 72 28 6f 28 32 38 32 29 29 3b 69 66 28 72 3d 74 2e 70 65 6e 64 69 6e 67 50 72 6f 70 73 2c 6c 3d 6e 75 6c 6c 21 3d 3d 28 6c 3d 74 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 29 3f 6c 2e 65 6c 65 6d 65 6e 74 3a 6e 75 6c 6c 2c 69 61 28 65 2c 74 29 2c 64 61 28 74 2c 72 2c 6e 75 6c 6c 2c 6e 29 2c 28 72 3d 74 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 2e 65 6c 65 6d 65 6e 74 29 3d 3d 3d 6c 29 51 61 28 29 2c 74 3d 6e 75 28 65 2c 74 2c 6e 29 3b 65 6c 73 65 7b 69 66 28 28 61 3d 28 6c 3d 74 2e 73 74 61 74 65 4e 6f 64 65 29 2e 68 79 64 72 61 74 65 29 26 26 28 6a 61 3d 71 72 28 74 2e 73 74 61 74 65 4e 6f 64 65 2e 63 6f 6e 74 61 69 6e 65 72 49 6e 66 6f 2e 66 69 72 73 74 43 68 69 6c 64 29 2c 55 61 3d 74 2c 61 3d 41 61 3d 21 30 29 2c 61 29 7b 69 66 28 Data Ascii: ow Error(o(282));if(r=t.pendingProps,l=null!==(l=t.memoizedState)?l.element:null,ia(e,t),da(t,r,null,n),(r=t.memoizedState.element)===l)Qa(),t=nu(e,t,n);else{if((a=(l=t.stateNode).hydrate)&&(ja=qr(t.stateNode.containerInfo.firstChild),Ua=t,a=Aa=!0),a){if(
2022-06-23 15:46:13 UTC	275	IN	Data Raw: 3a 65 2c 5f 74 68 72 65 61 64 43 6f 75 6e 74 3a 30 2c 50 72 6f 76 69 64 65 72 3a 6e 75 6c 6c 2c 43 6f 6e 73 75 6d 65 72 3a 6e 75 6c 6c 7d 29 2e 50 72 6f 76 69 64 65 72 3d 7b 24 24 74 79 70 65 6f 66 3a 6f 2c 5f 63 6f 6e 74 65 78 74 3a 65 7d 2c 65 2e 43 6f 6e 73 75 6d 65 72 3d 65 7d 2c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 3d 45 2c 74 2e 63 72 65 61 74 65 46 61 63 74 6f 72 79 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 45 2e 62 69 6e 64 28 6e 75 6c 6c 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 74 79 70 65 3d 65 2c 74 7d 2c 74 2e 63 72 65 61 74 65 52 65 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 63 75 72 72 65 6e 74 3a 6e 75 6c 6c 7d 7d 2c 74 2e 66 6f 72 77 61 72 64 52 65 66 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 Data Ascii: :e,_threadCount:0,Provider:null,Consumer:null}).Provider={$$typeof:o,_context:e},e.Consumer=e},t.createElement=E,t.createFactory=function(e){var t=E.bind(null,e);return t.type=e,t},t.createRef=function(){return{current:null}},t.forwardRef=function(e){retu

Target ID:	0
Start time:	17:46:04
Start date:	23/06/2022
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --enable-automation --single-argument http://static.clarlity.com/
Imagebase:	0x7ff68c970000
File size:	2438312 bytes
MD5 hash:	74859601FB4BEEA84B40D874CCB56CAB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Target ID:	3
Start time:	17:46:06
Start date:	23/06/2022
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1652,17050148873617410223,8877625412963403,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2128 /prefetch:8
Imagebase:	0x7ff68c970000
File size:	2438312 bytes
MD5 hash:	74859601FB4BEEA84B40D874CCB56CAB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low