Edit tour

Windows Analysis Report
https://visualstudio.microsoft.com/visual-cpp-build-tools/

Overview

General Information

Sample URL:	https://visualstudio.microsoft.com/visual-cpp-build-tools/
Analysis ID:	879252
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML body contains low number of good links

Found iframes

HTML title does not match URL

Form action URLs do not match main URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6024 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank MD5: 0FEC2748F363150DC54C1CAFFB1A9408)

chrome.exe (PID: 1496 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1880 --field-trial-handle=1756,i,10750135827697059561,10689653260712311203,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8 MD5: 0FEC2748F363150DC54C1CAFFB1A9408)

chrome.exe (PID: 5816 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" "https://visualstudio.microsoft.com/visual-cpp-build-tools/ MD5: 0FEC2748F363150DC54C1CAFFB1A9408)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c13cb6fd407&redirect_uri=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20profile%20offline_access&response_mode=form_post&nonce=638211415845626934.NmMzM2IxNjQtMDgxYi00ZTAzLTkzMmItNTM5YzVkYzJjYjBkNGQ5ODVjMzgtMzE1Mi00ODhkLTgyOTgtMGEyYjNkNjc2ZTRj&prompt=none&nopa=2&state=CfDJ8KF5Qmcm115NjurBGg3HPsy4XZYBL315rrnYzphkMEX-8XX0QmOXie_cxZdqgZ2mpgVzIb5rV4ifbNYgiTvrxzuQ7FkUb702lrznmio4JNe-_d0DAV768cbbXBggevSZnULMwxwqkBHgjoXdMvWVoQcbo9uK3ZoCjqQtkiOa0og0SsYfIIguXsaAcNgfIlBeAkCjoeCUuBgV5mrJrUhGEWfSyvTuk4k6TryL4HqeNLWdwhyQsBE7tRhS1bifIYKhh2b4abiCztlqbim9SiMikUjKi0-Dhm6JgVl-OCkR6YINakp2zxCDacX9Eq_OcKmMWq53fyy6kEexrd7FYp9DjVXXdRz_PiGt8o8OIF9lAwn0&x-client-SKU=ID_NETSTANDARD2_0&x-client-ver=6.7.1.0&sso_reload=true

HTTP Parser: Number of links: 0

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c13cb6fd407&redirect_uri=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20profile%20offline_access&response_mode=form_post&nonce=638211415845626934.NmMzM2IxNjQtMDgxYi00ZTAzLTkzMmItNTM5YzVkYzJjYjBkNGQ5ODVjMzgtMzE1Mi00ODhkLTgyOTgtMGEyYjNkNjc2ZTRj&prompt=none&nopa=2&state=CfDJ8KF5Qmcm115NjurBGg3HPsy4XZYBL315rrnYzphkMEX-8XX0QmOXie_cxZdqgZ2mpgVzIb5rV4ifbNYgiTvrxzuQ7FkUb702lrznmio4JNe-_d0DAV768cbbXBggevSZnULMwxwqkBHgjoXdMvWVoQcbo9uK3ZoCjqQtkiOa0og0SsYfIIguXsaAcNgfIlBeAkCjoeCUuBgV5mrJrUhGEWfSyvTuk4k6TryL4HqeNLWdwhyQsBE7tRhS1bifIYKhh2b4abiCztlqbim9SiMikUjKi0-Dhm6JgVl-OCkR6YINakp2zxCDacX9Eq_OcKmMWq53fyy6kEexrd7FYp9DjVXXdRz_PiGt8o8OIF9lAwn0&x-client-SKU=ID_NETSTANDARD2_0&x-client-ver=6.7.1.0&sso_reload=true	HTTP Parser: Iframe src: https://login.live.com/Me.htm?v=3
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c13cb6fd407&redirect_uri=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20profile%20offline_access&response_mode=form_post&nonce=638211415845626934.NmMzM2IxNjQtMDgxYi00ZTAzLTkzMmItNTM5YzVkYzJjYjBkNGQ5ODVjMzgtMzE1Mi00ODhkLTgyOTgtMGEyYjNkNjc2ZTRj&prompt=none&nopa=2&state=CfDJ8KF5Qmcm115NjurBGg3HPsy4XZYBL315rrnYzphkMEX-8XX0QmOXie_cxZdqgZ2mpgVzIb5rV4ifbNYgiTvrxzuQ7FkUb702lrznmio4JNe-_d0DAV768cbbXBggevSZnULMwxwqkBHgjoXdMvWVoQcbo9uK3ZoCjqQtkiOa0og0SsYfIIguXsaAcNgfIlBeAkCjoeCUuBgV5mrJrUhGEWfSyvTuk4k6TryL4HqeNLWdwhyQsBE7tRhS1bifIYKhh2b4abiCztlqbim9SiMikUjKi0-Dhm6JgVl-OCkR6YINakp2zxCDacX9Eq_OcKmMWq53fyy6kEexrd7FYp9DjVXXdRz_PiGt8o8OIF9lAwn0&x-client-SKU=ID_NETSTANDARD2_0&x-client-ver=6.7.1.0&sso_reload=true	HTTP Parser: Iframe src: https://login.live.com/Me.htm?v=3

HTTP Parser: Title: Redirecting does not match URL

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c13cb6fd407&redirect_uri=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20profile%20offline_access&response_mode=form_post&nonce=638211415845626934.NmMzM2IxNjQtMDgxYi00ZTAzLTkzMmItNTM5YzVkYzJjYjBkNGQ5ODVjMzgtMzE1Mi00ODhkLTgyOTgtMGEyYjNkNjc2ZTRj&prompt=none&nopa=2&state=CfDJ8KF5Qmcm115NjurBGg3HPsy4XZYBL315rrnYzphkMEX-8XX0QmOXie_cxZdqgZ2mpgVzIb5rV4ifbNYgiTvrxzuQ7FkUb702lrznmio4JNe-_d0DAV768cbbXBggevSZnULMwxwqkBHgjoXdMvWVoQcbo9uK3ZoCjqQtkiOa0og0SsYfIIguXsaAcNgfIlBeAkCjoeCUuBgV5mrJrUhGEWfSyvTuk4k6TryL4HqeNLWdwhyQsBE7tRhS1bifIYKhh2b4abiCztlqbim9SiMikUjKi0-Dhm6JgVl-OCkR6YINakp2zxCDacX9Eq_OcKmMWq53fyy6kEexrd7FYp9DjVXXdRz_PiGt8o8OIF9lAwn0&x-client-SKU=ID_NETSTANDARD2_0&x-client-ver=6.7.1.0&sso_reload=true	HTTP Parser: Form action: https://support.microsoft.com/signin-oidc microsoftonline microsoft
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c13cb6fd407&redirect_uri=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20profile%20offline_access&response_mode=form_post&nonce=638211415845626934.NmMzM2IxNjQtMDgxYi00ZTAzLTkzMmItNTM5YzVkYzJjYjBkNGQ5ODVjMzgtMzE1Mi00ODhkLTgyOTgtMGEyYjNkNjc2ZTRj&prompt=none&nopa=2&state=CfDJ8KF5Qmcm115NjurBGg3HPsy4XZYBL315rrnYzphkMEX-8XX0QmOXie_cxZdqgZ2mpgVzIb5rV4ifbNYgiTvrxzuQ7FkUb702lrznmio4JNe-_d0DAV768cbbXBggevSZnULMwxwqkBHgjoXdMvWVoQcbo9uK3ZoCjqQtkiOa0og0SsYfIIguXsaAcNgfIlBeAkCjoeCUuBgV5mrJrUhGEWfSyvTuk4k6TryL4HqeNLWdwhyQsBE7tRhS1bifIYKhh2b4abiCztlqbim9SiMikUjKi0-Dhm6JgVl-OCkR6YINakp2zxCDacX9Eq_OcKmMWq53fyy6kEexrd7FYp9DjVXXdRz_PiGt8o8OIF9lAwn0&x-client-SKU=ID_NETSTANDARD2_0&x-client-ver=6.7.1.0&sso_reload=true	HTTP Parser: Form action: https://support.microsoft.com/signin-oidc microsoftonline microsoft

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c13cb6fd407&redirect_uri=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20profile%20offline_access&response_mode=form_post&nonce=638211415845626934.NmMzM2IxNjQtMDgxYi00ZTAzLTkzMmItNTM5YzVkYzJjYjBkNGQ5ODVjMzgtMzE1Mi00ODhkLTgyOTgtMGEyYjNkNjc2ZTRj&prompt=none&nopa=2&state=CfDJ8KF5Qmcm115NjurBGg3HPsy4XZYBL315rrnYzphkMEX-8XX0QmOXie_cxZdqgZ2mpgVzIb5rV4ifbNYgiTvrxzuQ7FkUb702lrznmio4JNe-_d0DAV768cbbXBggevSZnULMwxwqkBHgjoXdMvWVoQcbo9uK3ZoCjqQtkiOa0og0SsYfIIguXsaAcNgfIlBeAkCjoeCUuBgV5mrJrUhGEWfSyvTuk4k6TryL4HqeNLWdwhyQsBE7tRhS1bifIYKhh2b4abiCztlqbim9SiMikUjKi0-Dhm6JgVl-OCkR6YINakp2zxCDacX9Eq_OcKmMWq53fyy6kEexrd7FYp9DjVXXdRz_PiGt8o8OIF9lAwn0&x-client-SKU=ID_NETSTANDARD2_0&x-client-ver=6.7.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c13cb6fd407&redirect_uri=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20profile%20offline_access&response_mode=form_post&nonce=638211415845626934.NmMzM2IxNjQtMDgxYi00ZTAzLTkzMmItNTM5YzVkYzJjYjBkNGQ5ODVjMzgtMzE1Mi00ODhkLTgyOTgtMGEyYjNkNjc2ZTRj&prompt=none&nopa=2&state=CfDJ8KF5Qmcm115NjurBGg3HPsy4XZYBL315rrnYzphkMEX-8XX0QmOXie_cxZdqgZ2mpgVzIb5rV4ifbNYgiTvrxzuQ7FkUb702lrznmio4JNe-_d0DAV768cbbXBggevSZnULMwxwqkBHgjoXdMvWVoQcbo9uK3ZoCjqQtkiOa0og0SsYfIIguXsaAcNgfIlBeAkCjoeCUuBgV5mrJrUhGEWfSyvTuk4k6TryL4HqeNLWdwhyQsBE7tRhS1bifIYKhh2b4abiCztlqbim9SiMikUjKi0-Dhm6JgVl-OCkR6YINakp2zxCDacX9Eq_OcKmMWq53fyy6kEexrd7FYp9DjVXXdRz_PiGt8o8OIF9lAwn0&x-client-SKU=ID_NETSTANDARD2_0&x-client-ver=6.7.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found

Source: https://visualstudio.microsoft.com/visual-cpp-build-tools/	HTTP Parser: No favicon
Source: https://visualstudio.microsoft.com/visual-cpp-build-tools/	HTTP Parser: No favicon
Source: https://visualstudio.microsoft.com/visual-cpp-build-tools/	HTTP Parser: No favicon
Source: https://visualstudio.microsoft.com/visual-cpp-build-tools/	HTTP Parser: No favicon
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c13cb6fd407&redirect_uri=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20profile%20offline_access&response_mode=form_post&nonce=638211415845626934.NmMzM2IxNjQtMDgxYi00ZTAzLTkzMmItNTM5YzVkYzJjYjBkNGQ5ODVjMzgtMzE1Mi00ODhkLTgyOTgtMGEyYjNkNjc2ZTRj&prompt=none&nopa=2&state=CfDJ8KF5Qmcm115NjurBGg3HPsy4XZYBL315rrnYzphkMEX-8XX0QmOXie_cxZdqgZ2mpgVzIb5rV4ifbNYgiTvrxzuQ7FkUb702lrznmio4JNe-_d0DAV768cbbXBggevSZnULMwxwqkBHgjoXdMvWVoQcbo9uK3ZoCjqQtkiOa0og0SsYfIIguXsaAcNgfIlBeAkCjoeCUuBgV5mrJrUhGEWfSyvTuk4k6TryL4HqeNLWdwhyQsBE7tRhS1bifIYKhh2b4abiCztlqbim9SiMikUjKi0-Dhm6JgVl-OCkR6YINakp2zxCDacX9Eq_OcKmMWq53fyy6kEexrd7FYp9DjVXXdRz_PiGt8o8OIF9lAwn0&x-client-SKU=ID_NETSTANDARD2_0&x-client-ver=6.7.1.0&sso_reload=true	HTTP Parser: No favicon
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c13cb6fd407&redirect_uri=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20profile%20offline_access&response_mode=form_post&nonce=638211415845626934.NmMzM2IxNjQtMDgxYi00ZTAzLTkzMmItNTM5YzVkYzJjYjBkNGQ5ODVjMzgtMzE1Mi00ODhkLTgyOTgtMGEyYjNkNjc2ZTRj&prompt=none&nopa=2&state=CfDJ8KF5Qmcm115NjurBGg3HPsy4XZYBL315rrnYzphkMEX-8XX0QmOXie_cxZdqgZ2mpgVzIb5rV4ifbNYgiTvrxzuQ7FkUb702lrznmio4JNe-_d0DAV768cbbXBggevSZnULMwxwqkBHgjoXdMvWVoQcbo9uK3ZoCjqQtkiOa0og0SsYfIIguXsaAcNgfIlBeAkCjoeCUuBgV5mrJrUhGEWfSyvTuk4k6TryL4HqeNLWdwhyQsBE7tRhS1bifIYKhh2b4abiCztlqbim9SiMikUjKi0-Dhm6JgVl-OCkR6YINakp2zxCDacX9Eq_OcKmMWq53fyy6kEexrd7FYp9DjVXXdRz_PiGt8o8OIF9lAwn0&x-client-SKU=ID_NETSTANDARD2_0&x-client-ver=6.7.1.0&sso_reload=true	HTTP Parser: No favicon
Source: https://support.microsoft.com/en-us/silentsigninhandler	HTTP Parser: No favicon
Source: https://support.microsoft.com/en-us/silentsigninhandler	HTTP Parser: No favicon

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c13cb6fd407&redirect_uri=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20profile%20offline_access&response_mode=form_post&nonce=638211415845626934.NmMzM2IxNjQtMDgxYi00ZTAzLTkzMmItNTM5YzVkYzJjYjBkNGQ5ODVjMzgtMzE1Mi00ODhkLTgyOTgtMGEyYjNkNjc2ZTRj&prompt=none&nopa=2&state=CfDJ8KF5Qmcm115NjurBGg3HPsy4XZYBL315rrnYzphkMEX-8XX0QmOXie_cxZdqgZ2mpgVzIb5rV4ifbNYgiTvrxzuQ7FkUb702lrznmio4JNe-_d0DAV768cbbXBggevSZnULMwxwqkBHgjoXdMvWVoQcbo9uK3ZoCjqQtkiOa0og0SsYfIIguXsaAcNgfIlBeAkCjoeCUuBgV5mrJrUhGEWfSyvTuk4k6TryL4HqeNLWdwhyQsBE7tRhS1bifIYKhh2b4abiCztlqbim9SiMikUjKi0-Dhm6JgVl-OCkR6YINakp2zxCDacX9Eq_OcKmMWq53fyy6kEexrd7FYp9DjVXXdRz_PiGt8o8OIF9lAwn0&x-client-SKU=ID_NETSTANDARD2_0&x-client-ver=6.7.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c13cb6fd407&redirect_uri=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20profile%20offline_access&response_mode=form_post&nonce=638211415845626934.NmMzM2IxNjQtMDgxYi00ZTAzLTkzMmItNTM5YzVkYzJjYjBkNGQ5ODVjMzgtMzE1Mi00ODhkLTgyOTgtMGEyYjNkNjc2ZTRj&prompt=none&nopa=2&state=CfDJ8KF5Qmcm115NjurBGg3HPsy4XZYBL315rrnYzphkMEX-8XX0QmOXie_cxZdqgZ2mpgVzIb5rV4ifbNYgiTvrxzuQ7FkUb702lrznmio4JNe-_d0DAV768cbbXBggevSZnULMwxwqkBHgjoXdMvWVoQcbo9uK3ZoCjqQtkiOa0og0SsYfIIguXsaAcNgfIlBeAkCjoeCUuBgV5mrJrUhGEWfSyvTuk4k6TryL4HqeNLWdwhyQsBE7tRhS1bifIYKhh2b4abiCztlqbim9SiMikUjKi0-Dhm6JgVl-OCkR6YINakp2zxCDacX9Eq_OcKmMWq53fyy6kEexrd7FYp9DjVXXdRz_PiGt8o8OIF9lAwn0&x-client-SKU=ID_NETSTANDARD2_0&x-client-ver=6.7.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\GoogleUpdater

Jump to behavior

Source: unknown

DNS traffic detected: queries for: clients2.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867

Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=104.0.5112.81&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-104.0.5112.81Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://visualstudio.microsoft.com/visual-cpp-build-tools/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-3.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://visualstudio.microsoft.com/visual-cpp-build-tools/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /meversion?partner=VisualStudio&market=en-us&uhf=1 HTTP/1.1Host: mem.gfx.msConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://visualstudio.microsoft.com/visual-cpp-build-tools/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.shared.analytics.mectrl-3.2.7.gbl.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://visualstudio.microsoft.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://visualstudio.microsoft.com/visual-cpp-build-tools/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c1a9f67c29cb.js?lv=1 HTTP/1.1Host: w.usabilla.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://visualstudio.microsoft.com/visual-cpp-build-tools/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/prod/79c4587260504799a892b837b8edf476 HTTP/1.1Host: d6tizftlrpuof.cloudfront.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://visualstudio.microsoft.com/visual-cpp-build-tools/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/me/MeControl/10.23082.2/en-US/meBoot.min.js HTTP/1.1Host: mem.gfx.msConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://visualstudio.microsoft.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://visualstudio.microsoft.com/visual-cpp-build-tools/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/me/MeControl/10.23082.2/en-US/meCore.min.js HTTP/1.1Host: mem.gfx.msConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://visualstudio.microsoft.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://visualstudio.microsoft.com/visual-cpp-build-tools/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /16.000/content/js/MeControl_n-VhF3L8J_WuGWRJbN0tTg2.js HTTP/1.1Host: logincdn.msftauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://login.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /me/mecache?partner=visualstudio&wreply=https%3A%2F%2Fvisualstudio.microsoft.com HTTP/1.1Host: mem.gfx.msConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://visualstudio.microsoft.com/visual-cpp-build-tools/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/prod/79c4587260504799a892b837b8edf476 HTTP/1.1Host: d6tizftlrpuof.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3rdpartycookies HTTP/1.1Host: aka.msConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3rdpartycookies HTTP/1.1Host: aka.msConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.analytics-web-3.2.7.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://support.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /meversion?partner=SMCConvergence&market=en-us&uhf=1 HTTP/1.1Host: mem.gfx.msConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://support.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /me/mecache?partner=smcconvergence&wreply=https%3A%2F%2Fsupport.microsoft.com HTTP/1.1Host: mem.gfx.msConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://support.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /meversion?partner=mshomepage&market=de-ch&uhf=1 HTTP/1.1Host: mem.gfx.msConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_343.1.dr	String found in binary or memory: "sameAs":["https://www.facebook.com/microsoftschweiz","https://twitter.com/microsoft_ch","https://www.linkedin.com/company/1035","https://www.youtube.com/user/MicrosoftCH","https://www.instagram.com/microsoftch/"] equals www.facebook.com (Facebook)
Source: chromecache_343.1.dr	String found in binary or memory: "sameAs":["https://www.facebook.com/microsoftschweiz","https://twitter.com/microsoft_ch","https://www.linkedin.com/company/1035","https://www.youtube.com/user/MicrosoftCH","https://www.instagram.com/microsoftch/"] equals www.linkedin.com (Linkedin)
Source: chromecache_343.1.dr	String found in binary or memory: "sameAs":["https://www.facebook.com/microsoftschweiz","https://twitter.com/microsoft_ch","https://www.linkedin.com/company/1035","https://www.youtube.com/user/MicrosoftCH","https://www.instagram.com/microsoftch/"] equals www.twitter.com (Twitter)
Source: chromecache_343.1.dr	String found in binary or memory: "sameAs":["https://www.facebook.com/microsoftschweiz","https://twitter.com/microsoft_ch","https://www.linkedin.com/company/1035","https://www.youtube.com/user/MicrosoftCH","https://www.instagram.com/microsoftch/"] equals www.youtube.com (Youtube)
Source: chromecache_343.1.dr	String found in binary or memory: <a class="d-inline-block" href="https://www.facebook.com/microsoftschweiz" target="_blank" data-bi-ecn="Facebook" data-bi-bhvr="126" data-bi-cn="Facebook" data-bi-socchn="Facebook" data-bi-ct="Social Button" data-bi-pa="body" data-bi-compnm="Social Follow - horizontal"> equals www.facebook.com (Facebook)
Source: chromecache_343.1.dr	String found in binary or memory: <a class="d-inline-block" href="https://www.linkedin.com/company/1035" target="_blank" data-bi-ecn="LinkedIn" data-bi-bhvr="126" data-bi-cn="LinkedIn" data-bi-socchn="LinkedIn" data-bi-ct="Social Button" data-bi-pa="body" data-bi-compnm="Social Follow - horizontal"> equals www.linkedin.com (Linkedin)
Source: chromecache_343.1.dr	String found in binary or memory: <a class="d-inline-block" href="https://www.youtube.com/user/MicrosoftCH" target="_blank" data-bi-ecn="Youtube" data-bi-bhvr="126" data-bi-cn="Youtube" data-bi-socchn="Youtube" data-bi-ct="Social Button" data-bi-pa="body" data-bi-compnm="Social Follow - horizontal"> equals www.youtube.com (Youtube)
Source: chromecache_210.1.dr	String found in binary or memory: var fusionLightboxVars={"status_lightbox":"1","lightbox_gallery":"","lightbox_skin":"dark","lightbox_title":"","lightbox_arrows":"","lightbox_slideshow_speed":"1000","lightbox_autoplay":"","lightbox_opacity":"0.85","lightbox_desc":"","lightbox_social":"","lightbox_social_links":{"facebook":{"source":"https:\/\/www.facebook.com\/sharer.php?u={URL}","text":"Share on Facebook"},"twitter":{"source":"https:\/\/twitter.com\/share?url={URL}","text":"Share on Twitter"},"linkedin":{"source":"https:\/\/www.linkedin.com\/shareArticle?mini=true&url={URL}","text":"Share on LinkedIn"},"mail":{"source":"mailto:?body={URL}","text":"Share by Email"}},"lightbox_deeplinking":"","lightbox_path":"vertical","lightbox_post_images":"","lightbox_animation_speed":"normal","l10n":{"close":"Press Esc to close","enterFullscreen":"Enter Fullscreen (Shift+Enter)","exitFullscreen":"Exit Fullscreen (Shift+Enter)","slideShow":"Slideshow","next":"Next","previous":"Previous"}}; equals www.facebook.com (Facebook)
Source: chromecache_210.1.dr	String found in binary or memory: var fusionLightboxVars={"status_lightbox":"1","lightbox_gallery":"","lightbox_skin":"dark","lightbox_title":"","lightbox_arrows":"","lightbox_slideshow_speed":"1000","lightbox_autoplay":"","lightbox_opacity":"0.85","lightbox_desc":"","lightbox_social":"","lightbox_social_links":{"facebook":{"source":"https:\/\/www.facebook.com\/sharer.php?u={URL}","text":"Share on Facebook"},"twitter":{"source":"https:\/\/twitter.com\/share?url={URL}","text":"Share on Twitter"},"linkedin":{"source":"https:\/\/www.linkedin.com\/shareArticle?mini=true&url={URL}","text":"Share on LinkedIn"},"mail":{"source":"mailto:?body={URL}","text":"Share by Email"}},"lightbox_deeplinking":"","lightbox_path":"vertical","lightbox_post_images":"","lightbox_animation_speed":"normal","l10n":{"close":"Press Esc to close","enterFullscreen":"Enter Fullscreen (Shift+Enter)","exitFullscreen":"Exit Fullscreen (Shift+Enter)","slideShow":"Slideshow","next":"Next","previous":"Previous"}}; equals www.linkedin.com (Linkedin)
Source: chromecache_210.1.dr	String found in binary or memory: var fusionLightboxVars={"status_lightbox":"1","lightbox_gallery":"","lightbox_skin":"dark","lightbox_title":"","lightbox_arrows":"","lightbox_slideshow_speed":"1000","lightbox_autoplay":"","lightbox_opacity":"0.85","lightbox_desc":"","lightbox_social":"","lightbox_social_links":{"facebook":{"source":"https:\/\/www.facebook.com\/sharer.php?u={URL}","text":"Share on Facebook"},"twitter":{"source":"https:\/\/twitter.com\/share?url={URL}","text":"Share on Twitter"},"linkedin":{"source":"https:\/\/www.linkedin.com\/shareArticle?mini=true&url={URL}","text":"Share on LinkedIn"},"mail":{"source":"mailto:?body={URL}","text":"Share by Email"}},"lightbox_deeplinking":"","lightbox_path":"vertical","lightbox_post_images":"","lightbox_animation_speed":"normal","l10n":{"close":"Press Esc to close","enterFullscreen":"Enter Fullscreen (Shift+Enter)","exitFullscreen":"Exit Fullscreen (Shift+Enter)","slideShow":"Slideshow","next":"Next","previous":"Previous"}}; equals www.twitter.com (Twitter)

Source: chromecache_263.1.dr, chromecache_190.1.dr	String found in binary or memory: http://github.com/requirejs/almond/LICENSE
Source: chromecache_343.1.dr	String found in binary or memory: http://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RWO4yJ?ver=2ab3"
Source: chromecache_343.1.dr	String found in binary or memory: http://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RWOalS?ver=cc6e"
Source: chromecache_308.1.dr	String found in binary or memory: http://purl.eligrey.com/github/classList.js/blob/master/classList.js
Source: chromecache_343.1.dr, chromecache_246.1.dr	String found in binary or memory: http://schema.org/Organization
Source: chromecache_343.1.dr	String found in binary or memory: https://accdn.lpsnmedia.net
Source: chromecache_253.1.dr	String found in binary or memory: https://aka.ms/3rdpartycookies
Source: chromecache_246.1.dr	String found in binary or memory: https://aka.ms/vs/17/release/vs_BuildTools.exe
Source: chromecache_246.1.dr	String found in binary or memory: https://aka.ms/vsstatus
Source: chromecache_246.1.dr	String found in binary or memory: https://aka.ms/yourcaliforniaprivacychoices
Source: chromecache_343.1.dr	String found in binary or memory: https://analytics.tiktok.com
Source: chromecache_199.1.dr	String found in binary or memory: https://api.usabilla.com/v2/f/
Source: chromecache_246.1.dr	String found in binary or memory: https://app.vsaex.visualstudio.com/go/profile?mkt=en-us
Source: chromecache_246.1.dr	String found in binary or memory: https://app.vssps.visualstudio.com/_signout?mkt=en-us
Source: chromecache_343.1.dr	String found in binary or memory: https://cdnssl.clicktale.net
Source: chromecache_343.1.dr	String found in binary or memory: https://cdnssl.clicktale.net/www32/ptc/05d32363-d534-4d93-9b65-cde674775e71.js
Source: chromecache_246.1.dr	String found in binary or memory: https://code.visualstudio.com/?wt.mc_id=DX_841432
Source: chromecache_246.1.dr	String found in binary or memory: https://code.visualstudio.com/blogs
Source: chromecache_246.1.dr	String found in binary or memory: https://code.visualstudio.com/docs
Source: chromecache_343.1.dr	String found in binary or memory: https://d.impactradius-event.com
Source: chromecache_199.1.dr	String found in binary or memory: https://d6tizftlrpuof.cloudfront.net/live/resources/throbber.gif)
Source: chromecache_199.1.dr	String found in binary or memory: https://d6tizftlrpuof.cloudfront.net/live/scripts/campaign-include/a5f669c28be1979ab5e2785121a6e10b/
Source: chromecache_219.1.dr	String found in binary or memory: https://devvs.wpengine.com/wp-content/uploads/2022/09/Visual-Studio-Code_Icon.svg
Source: chromecache_219.1.dr	String found in binary or memory: https://devvs.wpengine.com/wp-content/uploads/2022/09/Visual-Studio-Mac_Icon.svg
Source: chromecache_219.1.dr	String found in binary or memory: https://devvs.wpengine.com/wp-content/uploads/2022/09/Visual-Studio_Icon.svg
Source: chromecache_212.1.dr	String found in binary or memory: https://github.com/carhartl/jquery-cookie
Source: chromecache_246.1.dr	String found in binary or memory: https://github.com/features/actions
Source: chromecache_246.1.dr	String found in binary or memory: https://github.com/nodejs/node-gyp
Source: chromecache_343.1.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net
Source: chromecache_246.1.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE1MmB8?ver=6c43g
Source: chromecache_343.1.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE1Mu3b?ver=5c31
Source: chromecache_283.1.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_283.1.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_283.1.dr	String found in binary or memory: https://js.foundation/
Source: chromecache_343.1.dr	String found in binary or memory: https://js.monitor.azure.com
Source: chromecache_246.1.dr	String found in binary or memory: https://js.monitor.azure.com/scripts/c/ms.jsll-3.min.js
Source: chromecache_343.1.dr, chromecache_246.1.dr	String found in binary or memory: https://login.live.com/me.srf?wa=wsignin1.0
Source: chromecache_195.1.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_195.1.dr	String found in binary or memory: https://login.windows-ppe.net
Source: chromecache_343.1.dr	String found in binary or memory: https://lpcdn.lpsnmedia.net
Source: chromecache_343.1.dr	String found in binary or memory: https://lptag.liveperson.net
Source: chromecache_246.1.dr	String found in binary or memory: https://manage.visualstudio.com/GetHelp
Source: chromecache_246.1.dr	String found in binary or memory: https://marketplace.visualstudio.com/
Source: chromecache_246.1.dr	String found in binary or memory: https://marketplace.visualstudio.com/vs
Source: chromecache_246.1.dr	String found in binary or memory: https://marketplace.visualstudio.com/vscode
Source: chromecache_343.1.dr	String found in binary or memory: https://mem.gfx.ms
Source: chromecache_246.1.dr	String found in binary or memory: https://my.visualstudio.com/GetHelp
Source: chromecache_343.1.dr	String found in binary or memory: https://onedrive.live.com/about/de-ch/
Source: chromecache_343.1.dr	String found in binary or memory: https://outlook.live.com/owa/
Source: chromecache_343.1.dr	String found in binary or memory: https://publisher.liveperson.net
Source: chromecache_343.1.dr, chromecache_246.1.dr	String found in binary or memory: https://schema.org
Source: chromecache_283.1.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_343.1.dr	String found in binary or memory: https://start.microsoftapp.net/start?pc_campaign=UHF_Banner_15mkts&adjust=y9xgnyl_5sblqid"
Source: chromecache_343.1.dr	String found in binary or memory: https://twitter.com/microsoft_ch
Source: chromecache_246.1.dr	String found in binary or memory: https://vcpkg.io/en/index.html
Source: chromecache_199.1.dr	String found in binary or memory: https://w.usabilla.com/a/t?m=b&b=
Source: chromecache_246.1.dr	String found in binary or memory: https://wiki.python.org/moin/WindowsCompilers
Source: chromecache_343.1.dr	String found in binary or memory: https://www.clarity.ms
Source: chromecache_343.1.dr	String found in binary or memory: https://www.instagram.com/microsoftch/
Source: chromecache_343.1.dr	String found in binary or memory: https://www.linkedin.com/company/1035
Source: chromecache_343.1.dr	String found in binary or memory: https://www.onenote.com/?omkt=de-CH
Source: chromecache_246.1.dr	String found in binary or memory: https://www.rust-lang.org/downloads.html
Source: chromecache_343.1.dr	String found in binary or memory: https://www.skype.com/de/
Source: chromecache_343.1.dr	String found in binary or memory: https://www.xbox.com/
Source: chromecache_343.1.dr	String found in binary or memory: https://www.youtube.com/user/MicrosoftCH

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1880 --field-trial-handle=1756,i,10750135827697059561,10689653260712311203,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "https://visualstudio.microsoft.com/visual-cpp-build-tools/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1880 --field-trial-handle=1756,i,10750135827697059561,10689653260712311203,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	2 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	3 Non-Application Layer Protocol	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	4 Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	1 Ingress Tool Transfer	SIM Card Swap		Carrier Billing Fraud

Source	Detection	Scanner	Label
https://analytics.tiktok.com	0%	URL Reputation	safe
https://mem.gfx.ms/meversion?partner=SMCConvergence&market=en-us&uhf=1	0%	URL Reputation	safe
https://mem.gfx.ms	0%	URL Reputation	safe
https://js.foundation/	0%	URL Reputation	safe
https://vcpkg.io/en/index.html	0%	Avira URL Cloud	safe
https://mem.gfx.ms/scripts/me/MeControl/10.23082.2/en-US/meBoot.min.js	0%	Avira URL Cloud	safe
https://mem.gfx.ms/meversion?partner=VisualStudio&market=en-us&uhf=1	0%	Avira URL Cloud	safe
https://mem.gfx.ms/meversion?partner=mshomepage&market=de-ch&uhf=1	0%	Avira URL Cloud	safe
https://www.clarity.ms	0%	Avira URL Cloud	safe
https://start.microsoftapp.net/start?pc_campaign=UHF_Banner_15mkts&adjust=y9xgnyl_5sblqid"	0%	Avira URL Cloud	safe
https://logincdn.msftauth.net/16.000/content/js/MeControl_n-VhF3L8J_WuGWRJbN0tTg2.js	0%	Avira URL Cloud	safe
https://d.impactradius-event.com	0%	Avira URL Cloud	safe
https://mem.gfx.ms/scripts/me/MeControl/10.23082.2/en-US/meCore.min.js	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
cs1100.wpc.omegacdn.net	152.199.23.37	true	false	unknown
accounts.google.com	142.250.203.109	true	false	high
sni1gl.wpc.alphacdn.net	152.199.21.175	true	false	unknown
part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
aka.ms	23.38.22.250	true	false	high
w.usabilla.com	3.248.140.233	true	false	high
d6tizftlrpuof.cloudfront.net	18.66.188.18	true	false	high
www.google.com	142.250.203.100	true	false	high
part-0032.t-0009.fdv2-t-msedge.net	13.107.237.60	true	false	unknown
cs1227.wpc.alphacdn.net	192.229.221.185	true	false	unknown
d.impactradius-event.com	35.186.249.72	true	false	unknown
liveperson.map.fastly.net	151.101.1.192	true	false	unknown
clients.l.google.com	142.250.203.110	true	false	high
via.placeholder.com	23.23.94.125	true	false	high
d1xbuscas8tetl.cloudfront.net	108.138.36.91	true	false	high
js.monitor.azure.com	unknown	unknown	false	high
lpcdn.lpsnmedia.net	unknown	unknown	false	high
ajax.aspnetcdn.com	unknown	unknown	false	high
clients2.google.com	unknown	unknown	false	high
publisher.liveperson.net	unknown	unknown	false	high
cdnssl.clicktale.net	unknown	unknown	false	high
accdn.lpsnmedia.net	unknown	unknown	false	high
www.clarity.ms	unknown	unknown	false	unknown
aadcdn.msftauth.net	unknown	unknown	false	unknown
logincdn.msftauth.net	unknown	unknown	false	unknown
mem.gfx.ms	unknown	unknown	false	unknown
app.vssps.visualstudio.com	unknown	unknown	false	high
c.s-microsoft.com	unknown	unknown	false	high
support.content.office.net	unknown	unknown	false	high
analytics.tiktok.com	unknown	unknown	false	unknown
login.microsoftonline.com	unknown	unknown	false	high
lptag.liveperson.net	unknown	unknown	false	high
acctcdn.msftauth.net	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://logincdn.msftauth.net/16.000/content/js/MeControl_n-VhF3L8J_WuGWRJbN0tTg2.js	false	Avira URL Cloud: safe	unknown
https://mem.gfx.ms/meversion?partner=VisualStudio&market=en-us&uhf=1	false	Avira URL Cloud: safe	unknown
https://aka.ms/3rdpartycookies	false		high
https://d6tizftlrpuof.cloudfront.net/themes/prod/79c4587260504799a892b837b8edf476	false		high
https://mem.gfx.ms/scripts/me/MeControl/10.23082.2/en-US/meCore.min.js	false	Avira URL Cloud: safe	unknown
https://w.usabilla.com/c1a9f67c29cb.js?lv=1	false		high
about:blank	false		low
https://js.monitor.azure.com/scripts/c/ms.jsll-3.min.js	false		high
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard	false		high
https://mem.gfx.ms/meversion?partner=SMCConvergence&market=en-us&uhf=1	false	URL Reputation: safe	unknown
https://js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.2.7.gbl.min.js	false		high
https://js.monitor.azure.com/scripts/c/ms.analytics-web-3.2.7.min.js	false		high
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=104.0.5112.81&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1	false		high
https://mem.gfx.ms/meversion?partner=mshomepage&market=de-ch&uhf=1	false	Avira URL Cloud: safe	unknown
https://mem.gfx.ms/scripts/me/MeControl/10.23082.2/en-US/meBoot.min.js	false	Avira URL Cloud: safe	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://outlook.live.com/owa/	chromecache_343.1.dr	false		high
https://www.onenote.com/?omkt=de-CH	chromecache_343.1.dr	false		high
https://js.monitor.azure.com	chromecache_343.1.dr	false		high
https://github.com/carhartl/jquery-cookie	chromecache_212.1.dr	false		high
https://d6tizftlrpuof.cloudfront.net/live/resources/throbber.gif)	chromecache_199.1.dr	false		high
https://www.skype.com/de/	chromecache_343.1.dr	false		high
https://github.com/nodejs/node-gyp	chromecache_246.1.dr	false		high
https://manage.visualstudio.com/GetHelp	chromecache_246.1.dr	false		high
https://app.vssps.visualstudio.com/_signout?mkt=en-us	chromecache_246.1.dr	false		high
https://code.visualstudio.com/blogs	chromecache_246.1.dr	false		high
https://login.windows-ppe.net	chromecache_195.1.dr	false		high
https://app.vsaex.visualstudio.com/go/profile?mkt=en-us	chromecache_246.1.dr	false		high
https://www.rust-lang.org/downloads.html	chromecache_246.1.dr	false		high
https://lptag.liveperson.net	chromecache_343.1.dr	false		high
https://analytics.tiktok.com	chromecache_343.1.dr	false	URL Reputation: safe	unknown
https://login.microsoftonline.com	chromecache_195.1.dr	false		high
https://github.com/features/actions	chromecache_246.1.dr	false		high
https://w.usabilla.com/a/t?m=b&b=	chromecache_199.1.dr	false		high
https://www.instagram.com/microsoftch/	chromecache_343.1.dr	false		high
https://marketplace.visualstudio.com/vscode	chromecache_246.1.dr	false		high
https://www.clarity.ms	chromecache_343.1.dr	false	Avira URL Cloud: safe	unknown
http://purl.eligrey.com/github/classList.js/blob/master/classList.js	chromecache_308.1.dr	false		high
https://cdnssl.clicktale.net/www32/ptc/05d32363-d534-4d93-9b65-cde674775e71.js	chromecache_343.1.dr	false		high
https://cdnssl.clicktale.net	chromecache_343.1.dr	false		high
https://publisher.liveperson.net	chromecache_343.1.dr	false		high
https://wiki.python.org/moin/WindowsCompilers	chromecache_246.1.dr	false		high
https://devvs.wpengine.com/wp-content/uploads/2022/09/Visual-Studio-Mac_Icon.svg	chromecache_219.1.dr	false		high
http://github.com/requirejs/almond/LICENSE	chromecache_263.1.dr, chromecache_190.1.dr	false		high
https://marketplace.visualstudio.com/vs	chromecache_246.1.dr	false		high
https://d.impactradius-event.com	chromecache_343.1.dr	false	Avira URL Cloud: safe	unknown
https://start.microsoftapp.net/start?pc_campaign=UHF_Banner_15mkts&adjust=y9xgnyl_5sblqid"	chromecache_343.1.dr	false	Avira URL Cloud: safe	unknown
https://my.visualstudio.com/GetHelp	chromecache_246.1.dr	false		high
https://onedrive.live.com/about/de-ch/	chromecache_343.1.dr	false		high
https://lpcdn.lpsnmedia.net	chromecache_343.1.dr	false		high
https://devvs.wpengine.com/wp-content/uploads/2022/09/Visual-Studio-Code_Icon.svg	chromecache_219.1.dr	false		high
https://www.youtube.com/user/MicrosoftCH	chromecache_343.1.dr	false		high
https://schema.org	chromecache_343.1.dr, chromecache_246.1.dr	false		high
https://aka.ms/vsstatus	chromecache_246.1.dr	false		high
https://mem.gfx.ms	chromecache_343.1.dr	false	URL Reputation: safe	unknown
https://aka.ms/yourcaliforniaprivacychoices	chromecache_246.1.dr	false		high
https://code.visualstudio.com/docs	chromecache_246.1.dr	false		high
https://jquery.org/license	chromecache_283.1.dr	false		high
https://twitter.com/microsoft_ch	chromecache_343.1.dr	false		high
https://jquery.com/	chromecache_283.1.dr	false		high
https://devvs.wpengine.com/wp-content/uploads/2022/09/Visual-Studio_Icon.svg	chromecache_219.1.dr	false		high
https://vcpkg.io/en/index.html	chromecache_246.1.dr	false	Avira URL Cloud: safe	unknown
https://accdn.lpsnmedia.net	chromecache_343.1.dr	false		high
https://www.linkedin.com/company/1035	chromecache_343.1.dr	false		high
https://www.xbox.com/	chromecache_343.1.dr	false		high
http://schema.org/Organization	chromecache_343.1.dr, chromecache_246.1.dr	false		high
https://code.visualstudio.com/?wt.mc_id=DX_841432	chromecache_246.1.dr	false		high
https://aka.ms/vs/17/release/vs_BuildTools.exe	chromecache_246.1.dr	false		high
https://sizzlejs.com/	chromecache_283.1.dr	false		high
https://js.foundation/	chromecache_283.1.dr	false	URL Reputation: safe	unknown
https://marketplace.visualstudio.com/	chromecache_246.1.dr	false		high
https://d6tizftlrpuof.cloudfront.net/live/scripts/campaign-include/a5f669c28be1979ab5e2785121a6e10b/	chromecache_199.1.dr	false		high
https://api.usabilla.com/v2/f/	chromecache_199.1.dr	false		high

IP	Domain	Country	ASN	ASN Name	Malicious
23.38.22.250	aka.ms	United States	16625	AKAMAI-ASUS	false
142.250.203.110	clients.l.google.com	United States	15169	GOOGLEUS	false
13.107.246.60	part-0032.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
151.101.1.192	liveperson.map.fastly.net	United States	54113	FASTLYUS	false
3.248.140.233	w.usabilla.com	United States	16509	AMAZON-02US	false
142.250.203.109	accounts.google.com	United States	15169	GOOGLEUS	false
108.138.36.91	d1xbuscas8tetl.cloudfront.net	United States	16509	AMAZON-02US	false
142.250.203.100	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
192.229.221.185	cs1227.wpc.alphacdn.net	United States	15133	EDGECASTUS	false
35.186.249.72	d.impactradius-event.com	United States	15169	GOOGLEUS	false
152.199.21.175	sni1gl.wpc.alphacdn.net	United States	15133	EDGECASTUS	false
13.107.237.60	part-0032.t-0009.fdv2-t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
152.199.23.37	cs1100.wpc.omegacdn.net	United States	15133	EDGECASTUS	false
18.66.188.18	d6tizftlrpuof.cloudfront.net	United States	3	MIT-GATEWAYSUS	false

Joe Sandbox Version:	37.1.0 Beryl
Analysis ID:	879252
Start date and time:	2023-05-31 16:51:12 +02:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 7m 31s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://visualstudio.microsoft.com/visual-cpp-build-tools/
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 104, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	6
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@32/187@28/16
EGA Information:	Failed
HDC Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://aka.ms/3rdpartycookies Browse: https://www.microsoft.com/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3099
Entropy (8bit):	5.109503778709418
Encrypted:	false
SSDEEP:	96:tvf6vg+aV0z/3jPE4hyZhtvzQkz9uvGJ6xDxr4snL:t6o077V0htvvzP61uw
MD5:	BF2936A8434A954EF48E8DAFE632C2A6
SHA1:	ED9FB1AAB6FFA0216A0940EFB341D65ABACAECC0
SHA-256:	59E293462A6ACB2ED52299C1BB554B25F1A784385FB5A4157F9735173152F7A2
SHA-512:	AC0FE1096B15938D428A7E78AFC042C98E89C2ECB0D0A45F22DFF0EF129516031C8323A9FF4CF533161B9D53B2A883A54521193E49F2D85E550D9A6175E27090
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 23.0.2, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 70 70" style="enable-background:new 0 0 70 70;" xml:space="preserve">.<style type="text/css">...st0{opacity:0.7;fill:none;enable-background:new ;}...st1{fill:#52218A;}...st2{fill:#6C33AF;}...st3{fill:#854CC7;}...st4{fill:#B179F1;}...st5{opacity:0.25;}...st6{fill-rule:evenodd;clip-rule:evenodd;fill:url(#SVGID_1_);}.</style>.<rect class="st0" width="70" height="70"/>.<g>..<path class="st1" d="M17.789,49.714c-0.602,0.516-1.444,0.65-2.177,0.344l-3.818-1.591c-0.783-0.326-1.294-1.092-1.294-1.94V24.104...c0-0.849,0.51-1.614,1.294-1.94l3.818-1.591c0.732-0.305,1.574-0.172,2.177,0.344l0.857,0.735c-0.77-0.55-1.839,0-1.839,0.947...v25.434c0,0.946,1.069,1.496,1.839,0.946L17.789,49.714z"/>..<g>...<path class="st2" d="M11.794,4

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 31, 2023 16:52:12.387228966 CEST	49724	53	192.168.2.5	8.8.8.8
May 31, 2023 16:52:12.387375116 CEST	61452	53	192.168.2.5	8.8.8.8
May 31, 2023 16:52:12.407788038 CEST	53	49724	8.8.8.8	192.168.2.5
May 31, 2023 16:52:12.429195881 CEST	53	61452	8.8.8.8	192.168.2.5
May 31, 2023 16:52:14.586276054 CEST	60975	53	192.168.2.5	8.8.8.8
May 31, 2023 16:52:16.315222979 CEST	58532	53	192.168.2.5	8.8.8.8
May 31, 2023 16:52:16.338835001 CEST	53	58532	8.8.8.8	192.168.2.5
May 31, 2023 16:52:22.988506079 CEST	56687	53	192.168.2.5	8.8.8.8
May 31, 2023 16:52:31.652180910 CEST	60177	53	192.168.2.5	8.8.8.8
May 31, 2023 16:52:31.677424908 CEST	53	60177	8.8.8.8	192.168.2.5
May 31, 2023 16:52:33.335969925 CEST	60019	53	192.168.2.5	8.8.8.8
May 31, 2023 16:52:33.380577087 CEST	53	60019	8.8.8.8	192.168.2.5
May 31, 2023 16:52:33.707649946 CEST	53823	53	192.168.2.5	8.8.8.8
May 31, 2023 16:52:35.329077959 CEST	53555	53	192.168.2.5	8.8.8.8
May 31, 2023 16:52:35.335679054 CEST	50086	53	192.168.2.5	8.8.8.8
May 31, 2023 16:52:47.263962984 CEST	55609	53	192.168.2.5	8.8.8.8
May 31, 2023 16:52:47.278597116 CEST	53	55609	8.8.8.8	192.168.2.5
May 31, 2023 16:52:52.961030006 CEST	50005	53	192.168.2.5	8.8.8.8
May 31, 2023 16:52:52.962872982 CEST	61190	53	192.168.2.5	8.8.8.8
May 31, 2023 16:52:53.439846992 CEST	62000	53	192.168.2.5	8.8.8.8
May 31, 2023 16:53:04.355470896 CEST	61928	53	192.168.2.5	8.8.8.8
May 31, 2023 16:53:07.195755959 CEST	50444	53	192.168.2.5	8.8.8.8
May 31, 2023 16:53:07.230123997 CEST	53	50444	8.8.8.8	192.168.2.5
May 31, 2023 16:53:16.371269941 CEST	55592	53	192.168.2.5	8.8.8.8
May 31, 2023 16:53:16.395749092 CEST	53	55592	8.8.8.8	192.168.2.5
May 31, 2023 16:53:29.939750910 CEST	53	63907	8.8.8.8	192.168.2.5
May 31, 2023 16:53:29.965646029 CEST	62604	53	192.168.2.5	8.8.8.8
May 31, 2023 16:53:30.013930082 CEST	64760	53	192.168.2.5	8.8.8.8
May 31, 2023 16:53:30.019068956 CEST	58373	53	192.168.2.5	8.8.8.8
May 31, 2023 16:53:30.082084894 CEST	61887	53	192.168.2.5	8.8.8.8
May 31, 2023 16:53:30.146476030 CEST	57508	53	192.168.2.5	8.8.8.8
May 31, 2023 16:53:30.222825050 CEST	60368	53	192.168.2.5	8.8.8.8
May 31, 2023 16:53:30.228019953 CEST	63957	53	192.168.2.5	8.8.8.8
May 31, 2023 16:53:30.230885983 CEST	56478	53	192.168.2.5	8.8.8.8
May 31, 2023 16:53:30.251768112 CEST	52294	53	192.168.2.5	8.8.8.8
May 31, 2023 16:53:30.254214048 CEST	53	56478	8.8.8.8	192.168.2.5
May 31, 2023 16:53:30.269936085 CEST	50777	53	192.168.2.5	8.8.8.8
May 31, 2023 16:53:30.281269073 CEST	53	52294	8.8.8.8	192.168.2.5
May 31, 2023 16:53:46.913500071 CEST	54447	53	192.168.2.5	8.8.8.8
May 31, 2023 16:53:46.934709072 CEST	53	57114	8.8.8.8	192.168.2.5
May 31, 2023 16:53:46.936597109 CEST	53	54447	8.8.8.8	192.168.2.5
May 31, 2023 16:53:47.014199018 CEST	53	58182	8.8.8.8	192.168.2.5

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4054
Entropy (8bit):	7.797012573497454
Encrypted:	false
SSDEEP:	48:zICvnyRHJ3BRZPcSPQ72N2xoiR4fTJX/rj4sFNMkk5/p1k2lPUmbm39o4aL7V9XH:10nvE724xoiRQJPrjpLKSFl9oX31Z1d
MD5:	9F14C20150A003D7CE4DE57C298F0FBA
SHA1:	DAA53CF17CC45878A1B153F3C3BF47DC9669D78F
SHA-256:	112FEC798B78AA02E102A724B5CB1990C0F909BC1D8B7B1FA256EAB41BBC0960
SHA-512:	D4F6E49C854E15FE48D6A1F1A03FDA93218AB8FCDB2C443668E7DF478830831ACC2B41DAEFC25ED38FCC8D96C4401377374FED35C36A5017A11E63C8DAE5C487
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............J.......tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13:40 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:A00BC639840A11E68CBEB97C2156C7FD" xmpMM:InstanceID="xmp.iid:A00BC638840A11E68CBEB97C2156C7FD" xmp:CreatorTool="Adobe Photoshop CC 2015.5 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A2C931A470A111E6AEDFA14578553B7B" stRef:documentID="xmp.did:A2C931A570A111E6AEDFA14578553B7B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......DIDATx..\..UU.>.7..3....h.L..& j2...h.@..".........`U.......R"..Dq.&.BJR 1.4`$.200...l........wg.y.[k/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	631
Entropy (8bit):	6.391875872958697
Encrypted:	false
SSDEEP:	12:6v/7s6UVprYe6IZeuLgou+/CAztgbbvCR00aJzS4VQIjXuYEMwoQIjXuHBOLPMdo:hX7rRkf+/rMcCJzAIjNEMwNIj8Efl9
MD5:	FB2ED9313C602F40B7A2762ACC15FF89
SHA1:	8A390D07A8401D40CBC1A16D873911FA4CB463F5
SHA-256:	B241D02FAB4B17291AF37993EB249F9303EB5897610ABAFAC4C9F6AA6A878369
SHA-512:	9CBCF5C7B8409494F6D543434ECAFF42DE8A2D0632A17931062D7D1CC130D43E61162EEDB0965B545E65E0687DED4D4B51E29631568AF34B157A7D02A3852508
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....D.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<...{PLTE.P".J$x......P".P".J$x.........K..K..K..D.o..w..w..w.........................................................P"...................$tRNS.DD...CC..DEC..CEDDEC..CED...CC...DD.c,8....bKGD(........pHYs...........~.....tIME....."4...4...QIDAT8...G.. ...Q..s....?......s.f..a`.A... .bA!..,/dYQ.....a.((j^.m?4..Q.?.....2>.........%tEXtdate:create.2020-05-28T22:34:52+02:00.t.....%tEXtdate:modify.2020-05-28T22:34:52+02:00.)<'...WzTXtRaw profile type iptc..x.....qV((.O..I.R..#..c..#.K.... D.4.d.#.T ...........H.J.....t.B5.....IEND.B`.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1446), with no line terminators
Category:	downloaded
Size (bytes):	1446
Entropy (8bit):	5.006074391371269
Encrypted:	false
SSDEEP:	24:lA2jkLkz5Jj7kw4OiHjkUo4OjHjkZrkMb4bn12T7kw4Orn1bpkMb4OOkUo4Om1Dg:3gIz5B4w4Oeg94ObgZoq4jAT4w4OzIq3
MD5:	6006C18FD2781AB21A95EF104660ACCC
SHA1:	70AC013729EE06F53CF69D2BDA8AD2A59B81C190
SHA-256:	CA300600842195E113FF02AAAA06158A7C448FBFDE2E17238DB2BEA0BBD59078
SHA-512:	ADD11C97402EAD29A8793BFC36D08AE52E313B9E435863CF14AEF2653F9449017D253589B8428A101871DDD66CFA4C2B7F365783E707865F1541EA8AA6A88B16
Malicious:	false
Reputation:	low
URL:	https://visualstudio.microsoft.com/wp-content/plugins/vscom-fusion-extension/css/vscom-feature-hero.min.css?ver=1681237298
Preview:	.vscom-hero--fifty-fifty{gap:80px}@media (max-width:1084px){.fusion-fullwidth.vscom-hero-h1,.fusion-fullwidth.vscom-hero-h2{background-image:unset!important}.vscom-hero--fifty-fifty{gap:24px}}#main .fusion-fullwidth.vscom-hero-h1 .angled-bottom{padding-top:5rem;padding-bottom:5rem}@media (min-width:1084px){.fusion-fullwidth.vscom-hero-h2 .angled-bottom{padding-top:5rem;padding-bottom:5rem}}@media (min-width:1084px){.fusion-fullwidth.vscom-hero-h3{padding-top:3rem!important}}.fusion-fullwidth.vscom-hero-h3 .angled-bottom{padding-bottom:4rem}@media screen and (max-width:1084px){#main .fusion-fullwidth.vscom-hero-h1 .angled-bottom{padding-top:0;padding-bottom:0}}@media screen and (max-width:1083px){.fusion-fullwidth.vscom-hero-h3 .angled-bottom{padding-top:0;padding-bottom:0}.fusion-fullwidth.vscom-hero-h2 .angled-bottom{padding-top:2rem;padding-bottom:3rem}}.image-stack--bottom{float:left;width:90%;margin-right:-100%;position:relative;z-index:0}.image-stack--top{float:right;width:100%;pa

Timestamp	kBytes transferred	Direction	Data
2023-05-31 14:52:13 UTC	0	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-05-31 14:52:13 UTC	0	OUT	Data Raw: 20 Data Ascii:
2023-05-31 14:52:13 UTC	1	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: https://www.google.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 31 May 2023 14:52:13 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-a9iWajE57EOewZbHBYSMoA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdentityListAccountsHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdentityListAccountsHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/IdentityListAccountsHttp/cspreport Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-05-31 14:52:13 UTC	2	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2023-05-31 14:52:13 UTC	2	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	kBytes transferred	Direction	Data
2023-05-31 14:52:13 UTC	0	OUT	GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=104.0.5112.81&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1 Host: clients2.google.com Connection: keep-alive X-Goog-Update-Interactivity: fg X-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda X-Goog-Update-Updater: chromecrx-104.0.5112.81 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-05-31 14:52:13 UTC	2	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-XHMTjLha1InTxy_L3-Fcig' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 31 May 2023 14:52:13 GMT Content-Type: text/xml; charset=UTF-8 X-Daynum: 5994 X-Daystart: 28333 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-05-31 14:52:13 UTC	3	IN	Data Raw: 32 63 39 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 35 39 39 34 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 32 38 33 33 33 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 Data Ascii: 2c9<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="5994" elapsed_seconds="28333"/><app appid="nmmhkkegccagdldgiimedpiccmgmieda" cohort="1::" cohortname=""
2023-05-31 14:52:13 UTC	4	IN	Data Raw: 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 7a 65 3d 22 32 34 38 35 33 31 22 20 73 74 61 74 75 73 3d 22 6f 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 2e 30 2e 36 22 2f 3e 3c 2f 61 70 70 3e 3c 2f 67 75 70 64 61 74 65 3e 0d 0a Data Ascii: 723f56b8717175c536685c5450122b30789464ad82" hash_sha256="81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" protected="0" size="248531" status="ok" version="1.0.0.6"/></app></gupdate>
2023-05-31 14:52:13 UTC	4	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	kBytes transferred	Direction	Data
2023-05-31 14:52:37 UTC	909	OUT	GET /16.000/content/js/MeControl_n-VhF3L8J_WuGWRJbN0tTg2.js HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://login.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-05-31 14:52:37 UTC	910	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 677116 Cache-Control: public, max-age=31536000 Content-MD5: riSSSQ2YA8kI2pHdGko1pA== Content-Type: application/x-javascript Date: Wed, 31 May 2023 14:52:37 GMT Etag: 0x8DB4DF076CE1D41 Last-Modified: Sat, 06 May 2023 05:12:18 GMT Server: ECAcc (muc/3332) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: b501f631-c01e-0068-7ea7-8d7b59000000 x-ms-version: 2009-09-19 Content-Length: 17287 Connection: close
2023-05-31 14:52:37 UTC	911	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 62 5a 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 74 72 75 65 3a 61 3d 3d 30 7c 7c 61 3d 3d 66 61 6c 73 65 7c 7c 61 3d 3d 22 22 7d 66 75 6e 63 74 69 6f 6e 20 5f 44 75 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 5f 62 5a 28 61 29 3f 61 3a 62 7d 66 75 6e 63 74 69 6f 6e 20 5f 4b 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 7d 66 75 6e 63 74 69 6f 6e 20 5f 42 44 28 61 29 7b 72 65 74 75 72 6e 20 22 66 75 6e 63 74 69 6f 6e 22 2e 5f 66 31 28 74 79 70 65 6f 66 20 61 2c 74 72 75 65 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 46 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 3d 3d 22 73 74 72 69 6e 67 22 7d 66 75 6e 63 74 69 6f 6e 20 5f 42 45 28 61 29 7b 72 65 74 75 72 6e 20 5f 62 5a 28 61 29 26 26 5f Data Ascii: function _bZ(a){return a?true:a==0\|\|a==false\|\|a==""}function _Du(a,b){return _bZ(a)?a:b}function _K(a){return a instanceof Array}function _BD(a){return "function"._f1(typeof a,true)}function _F(a){return typeof a=="string"}function _BE(a){return _bZ(a)&&_
2023-05-31 14:52:37 UTC	927	IN	Data Raw: 64 69 72 65 63 74 55 72 69 56 61 6c 69 64 3d 53 65 72 76 65 72 44 61 74 61 2e 63 41 3b 69 66 28 64 29 62 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3d 64 7d 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 62 29 7d 2c 5f 64 77 3a 66 75 6e 63 74 69 6f 6e 28 64 2c 63 2c 61 29 7b 76 61 72 20 62 3d 7b 65 72 72 6f 72 3a 64 2c 75 73 65 72 4c 69 73 74 3a 5b 5d 2c 70 6f 73 74 4c 6f 67 6f 75 74 52 65 64 69 72 65 63 74 55 72 69 56 61 6c 69 64 3a 63 7d 3b 69 66 28 61 29 62 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3d 61 3b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 62 29 7d 2c 5f 66 34 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 4d 65 43 6f 6e 74 72 6f 6c 2e 5f 6a 51 28 61 2e 6f 72 69 67 69 6e 29 21 3d 3d 4d 65 43 6f 6e 74 72 6f 6c 2e Data Ascii: directUriValid=ServerData.cA;if(d)b.performance=d}return JSON.stringify(b)},_dw:function(d,c,a){var b={error:d,userList:[],postLogoutRedirectUriValid:c};if(a)b.performance=a;return JSON.stringify(b)},_f4:function(a){if(MeControl._jQ(a.origin)!==MeControl.

Timestamp	kBytes transferred	Direction	Data
2023-05-31 14:52:37 UTC	928	OUT	GET /me/mecache?partner=visualstudio&wreply=https%3A%2F%2Fvisualstudio.microsoft.com HTTP/1.1 Host: mem.gfx.ms Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://visualstudio.microsoft.com/visual-cpp-build-tools/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-05-31 14:52:37 UTC	928	IN	HTTP/1.1 200 OK Cache-Control: public, no-transform, max-age=43200 Content-Length: 3395 Content-Type: text/html; charset=utf-8 Expires: Wed, 31 May 2023 07:15:19 GMT X-Cache: TCP_HIT X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors https://visualstudio.microsoft.com; X-UA-Compatible: IE=edge Strict-Transport-Security: max-age=31536000; includeSubDomains X-Azure-Ref-OriginShield: 02b12ZAAAAAAll4TxEpBORbY3l+TlqiJmRlJBMjMxMDUwNDE3MDA5AGVhYzVmNDlmLWUwMmQtNGY0MS1iMGE2LTJkNTBmOWZjZjg0YQ== X-Azure-Ref: 0NV93ZAAAAAAknGHAyPpDTILPi67eJbEYRlJBMzFFREdFMDkxMQBlYWM1ZjQ5Zi1lMDJkLTRmNDEtYjBhNi0yZDUwZjlmY2Y4NGE= Date: Wed, 31 May 2023 14:52:37 GMT Connection: close
2023-05-31 14:52:37 UTC	929	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 20 2f 3e 0d 0a 20 20 20 20 0d 0a 20 20 20 20 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 62 6f 64 79 22 20 72 6f 6c 65 3d 22 6d 61 69 6e 22 3e 0d Data Ascii: <!DOCTYPE html><html lang="en" ><head> <meta charset="utf-8" /> <meta http-equiv="X-UA-Compatible" content="IE=edge" /> <meta name="viewport" content="width=device-width" /> </head><body> <div id="body" role="main">

Timestamp	kBytes transferred	Direction	Data
2023-05-31 14:52:37 UTC	932	OUT	GET /themes/prod/79c4587260504799a892b837b8edf476 HTTP/1.1 Host: d6tizftlrpuof.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-05-31 14:52:37 UTC	933	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 2704 Connection: close Date: Wed, 31 May 2023 14:52:38 GMT Last-Modified: Fri, 05 Jul 2019 11:32:24 GMT ETag: "19cce30ec620c62a0c8f48314f973299" Cache-Control: max-age=315360000, no-transform, public Content-Encoding: gzip x-amz-version-id: aQcUcu02ZGRvndZ_fVDK_uk874MLij9f Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 c414bd1a4ce7ace94cbfdfa8efcbe5a6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P1 X-Amz-Cf-Id: UfvQ7OP1BItYV_-MXM3SLUSkYwI8FFvleG_q6UU7mbOgbfVlPxf5cw==
2023-05-31 14:52:37 UTC	933	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 01 79 0a 86 f5 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 82 08 06 00 00 00 34 79 8a e5 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 0a 33 49 44 41 54 78 01 ed 5b 09 70 95 d5 15 3e d9 13 12 b2 93 9d 40 76 08 21 61 0d 24 61 09 12 90 d8 c1 31 1d ad 6b ab 32 a2 65 94 82 05 2d 55 9c 8a 32 5a b1 43 41 71 19 2d 62 e9 62 3b 42 5b 28 16 a5 ac 09 51 2c 1a 0c 01 52 c8 42 c2 92 90 85 18 f2 c8 46 16 7a ce cd fb 93 97 7f 7b ef 7a ff 44 a6 f3 9f 19 78 ef bf f7 fe f7 7c 39 f7 9e e5 9e 7b 9e d3 4d 24 b8 85 c9 95 b0 39 3d ba f3 96 85 e8 7c cb 22 b3 02 33 01 8a ae 90 29 41 53 82 a2 12 10 7d df dc 83 a6 04 45 25 20 fa be b9 07 4d 09 8a 4a 40 f4 fd 61 dd 83 51 01 5e dc 78 85 01 fa 79 b9 42 a8 af 87 5d c6 49 61 3e 50 f8 Data Ascii: yPNGIHDR(4ysRGB3IDATx[p>@v!a$a1k2e-U2ZCAq-bb;B[(Q,RBFz{zDx\|9{M$9=\|"3)AS}E% MJ@aQ^xyB]Ia>P

Timestamp	kBytes transferred	Direction	Data
2023-05-31 14:52:47 UTC	936	OUT	GET /3rdpartycookies HTTP/1.1 Host: aka.ms Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-05-31 14:52:52 UTC	937	IN	HTTP/1.1 301 Moved Permanently Content-Length: 0 Server: Kestrel Location: https://support.microsoft.com/en-us/topic/third-party-cookie-inventory-81ca0c3d-c122-415c-874c-55610e017a6a Request-Context: appId=cid-v1:b47e5e27-bf85-45ba-a97c-0377ce0e5779 X-Response-Cache-Status: True Expires: Wed, 31 May 2023 14:52:52 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 31 May 2023 14:52:52 GMT Connection: close Strict-Transport-Security: max-age=31536000 ; includeSubDomains

Timestamp	kBytes transferred	Direction	Data
2023-05-31 14:52:53 UTC	938	OUT	GET /scripts/c/ms.analytics-web-3.2.7.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-05-31 14:52:53 UTC	939	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=31536000, immutable, no-transform Content-Length: 139129 Content-Type: text/javascript; charset=utf-8 Content-MD5: Sb/q47QLN6j5URAwRjCa2Q== Last-Modified: Wed, 05 Oct 2022 16:53:02 GMT ETag: 0x8DAA6F2110CCD22 X-Cache: TCP_HIT x-ms-request-id: 5b11d47f-a01e-0004-602e-8d3483000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 3.2.7 Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * X-Azure-Ref-OriginShield: 0Gpx2ZAAAAAD+g3Ezlgz6SqiCAV/aCbPgRlJBMjMxMDUwNDE3MDUxAGYxY2E3M2Q0LTg4ODMtNGNhZi1hYmRjLWZlMmQ1NjdhZmI5Ng== X-Azure-Ref: 0RV93ZAAAAADuve40Us07RYYYj591ojkpRlJBMzFFREdFMDkxNgBmMWNhNzNkNC04ODgzLTRjYWYtYWJkYy1mZTJkNTY3YWZiOTY= Date: Wed, 31 May 2023 14:52:53 GMT Connection: close
2023-05-31 14:52:53 UTC	940	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 20 53 44 4b 20 41 6e 61 6c 79 74 69 63 73 20 57 65 62 2c 20 33 2e 32 2e 37 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 75 3d 22 66 75 6e 63 74 69 6f 6e 22 2c 73 3d 22 6f 62 6a 65 63 74 22 2c 6c 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 2c 66 3d 22 70 72 6f 74 6f 74 79 70 65 22 2c 6c 3d 22 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 22 2c 67 3d 4f Data Ascii: /! 1DS JS SDK Analytics Web, 3.2.7 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */var e=this,t=function(n){"use strict";var u="function",s="object",le="undefined",f="prototype",l="hasOwnProperty",g=O
2023-05-31 14:52:53 UTC	955	IN	Data Raw: 63 68 28 69 29 7b 7d 7d 28 74 2c 65 2e 69 64 2c 6e 29 26 26 28 74 5b 65 2e 69 64 5d 3d 6e 29 7d 63 61 74 63 68 28 69 29 7b 7d 7d 72 65 74 75 72 6e 20 6e 7d 28 61 2c 65 29 29 5b 78 74 28 74 29 5d 3d 6e 29 2c 6e 29 7d 2c 6b 69 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 65 26 26 65 5b 74 5d 29 74 72 79 7b 64 65 6c 65 74 65 20 65 5b 74 5d 7d 63 61 74 63 68 28 6e 29 7b 7d 7d 7d 3b 72 65 74 75 72 6e 20 61 7d 76 61 72 20 65 72 3d 22 74 6f 47 4d 54 53 74 72 69 6e 67 22 2c 74 72 3d 22 74 6f 55 54 43 53 74 72 69 6e 67 22 2c 6e 72 3d 22 63 6f 6f 6b 69 65 22 2c 69 72 3d 22 65 78 70 69 72 65 73 22 2c 72 72 3d 22 65 6e 61 62 6c 65 64 22 2c 61 72 3d 22 69 73 43 6f 6f 6b 69 65 55 73 65 44 69 73 61 62 6c 65 64 22 2c 6f 72 3d 22 64 69 73 61 62 6c 65 43 6f Data Ascii: ch(i){}}(t,e.id,n)&&(t[e.id]=n)}catch(i){}}return n}(a,e))[xt(t)]=n),n)},kill:function(e,t){if(e&&e[t])try{delete e[t]}catch(n){}}};return a}var er="toGMTString",tr="toUTCString",nr="cookie",ir="expires",rr="enabled",ar="isCookieUseDisabled",or="disableCo
2023-05-31 14:52:53 UTC	971	IN	Data Raw: 74 50 65 72 66 4d 67 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 3d 65 7d 2c 76 2e 65 76 65 6e 74 43 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 5b 78 5d 7d 2c 76 2e 72 65 6c 65 61 73 65 51 75 65 75 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 70 26 26 30 3c 6e 5b 78 5d 26 26 28 65 3d 6e 2c 6e 3d 5b 5d 2c 74 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 68 28 29 5b 6b 5d 28 65 29 7d 29 29 7d 2c 76 2e 70 6f 6c 6c 49 6e 74 65 72 6e 61 6c 4c 6f 67 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 3d 65 7c 7c 6e 75 6c 6c 3b 65 3d 24 74 28 79 2e 64 69 61 67 6e 6f 73 74 69 63 4c 6f 67 49 6e 74 65 72 76 61 6c 29 3b 72 65 74 75 72 6e 20 65 26 26 30 3c 65 7c 7c 28 65 3d 31 65 34 29 2c 5f 26 26 63 6c 65 61 72 49 6e 74 65 72 76 61 6c Data Ascii: tPerfMgr=function(e){i=e},v.eventCnt=function(){return n[x]},v.releaseQueue=function(){var e;p&&0<n[x]&&(e=n,n=[],te(e,function(e){h()[k](e)}))},v.pollInternalLogs=function(e){w=e\|\|null;e=$t(y.diagnosticLogInterval);return e&&0<e\|\|(e=1e4),_&&clearInterval
2023-05-31 14:52:53 UTC	987	IN	Data Raw: 74 5b 63 5d 2c 6f 3d 28 6f 5b 75 5d 7c 7c 28 6f 5b 75 5d 3d 7b 66 3a 7b 7d 7d 29 2c 6f 5b 75 5d 5b 72 63 5d 7c 7c 28 6f 5b 75 5d 5b 72 63 5d 3d 7b 7d 29 29 3b 6f 3d 6f 5b 6e 5d 3d 7b 7d 2c 45 28 69 2e 76 61 6c 75 65 29 3f 6f 2e 61 3d 7b 74 3a 72 7d 3a 6f 2e 74 3d 72 7d 7d 7d 76 61 72 20 73 63 3d 22 73 65 6e 64 41 74 74 65 6d 70 74 22 2c 6c 63 3d 22 26 4e 6f 52 65 73 70 6f 6e 73 65 42 6f 64 79 3d 74 72 75 65 22 2c 66 63 3d 28 28 6f 3d 7b 7d 29 5b 31 5d 3d 74 2c 6f 5b 31 30 30 5d 3d 74 2c 6f 5b 32 30 30 5d 3d 22 73 65 6e 74 22 2c 6f 5b 38 30 30 34 5d 3d 5f 6f 2c 6f 5b 38 30 30 33 5d 3d 5f 6f 2c 6f 29 2c 64 63 3d 7b 7d 2c 70 63 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 67 63 28 65 2c 74 2c 6e 29 7b 64 63 5b 65 5d 3d 74 2c 21 31 21 3d 3d 6e 26 26 28 70 63 5b 74 Data Ascii: t[c],o=(o[u]\|\|(o[u]={f:{}}),o[u][rc]\|\|(o[u][rc]={}));o=o[n]={},E(i.value)?o.a={t:r}:o.t=r}}}var sc="sendAttempt",lc="&NoResponseBody=true",fc=((o={})[1]=t,o[100]=t,o[200]="sent",o[8004]=_o,o[8003]=_o,o),dc={},pc={};function gc(e,t,n){dc[e]=t,!1!==n&&(pc[t
2023-05-31 14:52:53 UTC	1003	IN	Data Raw: 2c 51 3f 73 28 32 2c 32 29 3a 6f 28 29 29 2c 6c 2e 70 72 6f 63 65 73 73 4e 65 78 74 28 65 2c 74 29 7d 2c 6c 2e 5f 64 6f 54 65 61 72 64 6f 77 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3b 73 28 32 2c 32 29 2c 52 3d 21 30 2c 50 2e 74 65 61 72 64 6f 77 6e 28 29 2c 65 61 28 6e 75 6c 6c 2c 78 29 2c 6e 61 28 6e 75 6c 6c 2c 78 29 2c 6e 3d 6a 72 28 4c 72 2c 78 29 2c 24 72 28 5b 78 72 5d 2c 6e 75 6c 6c 2c 6e 29 2c 24 72 28 5b 5f 72 5d 2c 6e 75 6c 6c 2c 6e 29 2c 69 28 29 7d 2c 6c 2e 73 65 74 45 76 65 6e 74 51 75 65 75 65 4c 69 6d 69 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 48 3d 30 3c 65 3f 65 3a 31 65 34 2c 44 3d 30 3c 74 3f 74 3a 30 2c 4e 28 29 3b 76 61 72 20 6e 3d 65 3c 46 3b 69 66 28 21 6e 26 26 30 3c 5f 29 66 6f 72 28 76 61 72 20 Data Ascii: ,Q?s(2,2):o()),l.processNext(e,t)},l._doTeardown=function(e,t){var n;s(2,2),R=!0,P.teardown(),ea(null,x),na(null,x),n=jr(Lr,x),$r([xr],null,n),$r([_r],null,n),i()},l.setEventQueueLimits=function(e,t){H=0<e?e:1e4,D=0<t?t:0,N();var n=e<F;if(!n&&0<_)for(var
2023-05-31 14:52:53 UTC	1019	IN	Data Raw: 79 43 6c 6f 75 64 43 6f 6e 74 65 78 74 28 65 29 29 2c 74 65 28 47 74 28 72 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 30 3d 3d 3d 47 74 28 72 5b 65 5d 29 2e 6c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 72 5b 65 5d 7d 29 2c 6e 3d 63 2c 69 3d 65 2e 64 61 74 61 2c 6e 26 26 65 65 28 6e 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 5b 65 5d 7c 7c 28 69 5b 65 5d 3d 74 29 7d 29 2c 61 2e 70 72 6f 63 65 73 73 4e 65 78 74 28 65 2c 74 29 7d 2c 61 2e 67 65 74 50 72 6f 70 65 72 74 69 65 73 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 2c 61 2e 73 65 74 50 72 6f 70 65 72 74 79 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 63 5b 65 5d 3d 74 7d 2c 61 2e 5f 64 6f 54 65 61 72 64 6f 77 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 Data Ascii: yCloudContext(e)),te(Gt(r),function(e){0===Gt(r[e]).length&&delete r[e]}),n=c,i=e.data,n&&ee(n,function(e,t){i[e]\|\|(i[e]=t)}),a.processNext(e,t)},a.getPropertiesContext=function(){return o},a.setProperty=function(e,t){c[e]=t},a._doTeardown=function(e,t){v
2023-05-31 14:52:53 UTC	1035	IN	Data Raw: 70 65 26 26 30 3c 74 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 22 6e 61 76 69 67 61 74 69 6f 6e 22 29 5b 72 66 5d 3f 63 69 28 29 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 22 6e 61 76 69 67 61 74 69 6f 6e 22 29 5b 30 5d 3a 6e 75 6c 6c 2c 6e 3d 62 66 28 29 2c 69 3d 30 2c 72 3d 30 2c 61 3d 30 2c 6f 3d 30 3b 28 74 7c 7c 6e 29 26 26 28 74 3d 74 3f 28 69 3d 74 5b 6e 66 5d 2c 72 3d 30 3d 3d 3d 74 2e 73 74 61 72 74 54 69 6d 65 3f 74 5b 67 66 5d 3a 7a 73 28 74 2e 73 74 61 72 74 54 69 6d 65 2c 74 5b 67 66 5d 29 2c 61 3d 7a 73 28 74 2e 72 65 71 75 65 73 74 53 74 61 72 74 2c 74 5b 6c 66 5d 29 2c 6f 3d 7a 73 28 74 5b 6c 66 5d 2c 74 5b 70 66 5d 29 2c 7a 73 28 74 2e 72 65 73 70 6f 6e 73 65 45 6e 64 2c 74 5b 64 66 5d 29 29 3a 28 69 3d 7a 73 28 6e Data Ascii: pe&&0<t.getEntriesByType("navigation")[rf]?ci().getEntriesByType("navigation")[0]:null,n=bf(),i=0,r=0,a=0,o=0;(t\|\|n)&&(t=t?(i=t[nf],r=0===t.startTime?t[gf]:zs(t.startTime,t[gf]),a=zs(t.requestStart,t[lf]),o=zs(t[lf],t[pf]),zs(t.responseEnd,t[df])):(i=zs(n
2023-05-31 14:52:53 UTC	1051	IN	Data Raw: 65 54 61 67 73 28 65 2c 6e 29 2c 69 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 3d 4a 66 28 69 2e 6d 65 74 61 54 61 67 73 2c 69 2e 5f 63 6f 6e 66 69 67 2e 63 6f 72 65 44 61 74 61 2c 22 70 61 67 65 54 79 70 65 22 29 2c 69 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 3d 4a 66 28 69 2e 6d 65 74 61 54 61 67 73 2c 69 2e 5f 63 6f 6e 66 69 67 2e 63 6f 72 65 44 61 74 61 2c 22 6d 61 72 6b 65 74 22 29 2c 69 2e 5f 62 65 68 61 76 69 6f 72 4d 65 74 61 54 61 67 3d 4a 66 28 69 2e 6d 65 74 61 54 61 67 73 2c 69 2e 5f 63 6f 6e 66 69 67 2e 63 6f 72 65 44 61 74 61 2c 22 62 65 68 61 76 69 6f 72 22 29 2c 75 65 28 6e 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 6e 2e 70 61 67 65 54 79 70 65 29 2c 75 65 28 69 2e 5f 70 61 67 65 54 79 70 65 4d 65 Data Ascii: eTags(e,n),i._pageTypeMetaTag=Jf(i.metaTags,i._config.coreData,"pageType"),i._marketMetaTag=Jf(i.metaTags,i._config.coreData,"market"),i._behaviorMetaTag=Jf(i.metaTags,i._config.coreData,"behavior"),ue(n.pageType)&&(e.pageType=n.pageType),ue(i._pageTypeMe
2023-05-31 14:52:53 UTC	1066	IN	Data Raw: 3a 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 74 68 69 73 2e 5f 63 6f 6e 74 65 6e 74 42 6c 6f 62 46 69 65 6c 64 4e 61 6d 65 73 2e 63 6f 6e 74 65 6e 74 53 6f 75 72 63 65 29 2c 70 72 6f 64 75 63 74 3a 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 74 68 69 73 2e 5f 63 6f 6e 74 65 6e 74 42 6c 6f 62 46 69 65 6c 64 4e 61 6d 65 73 2e 70 72 6f 64 75 63 74 49 64 29 2c 74 79 70 65 3a 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 74 68 69 73 2e 5f 63 6f 6e 74 65 6e 74 42 6c 6f 62 46 69 65 6c 64 4e 61 6d 65 73 2e 63 6f 6e 74 65 6e 74 54 79 70 65 29 7d 7d 2c 62 64 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 67 65 74 44 65 66 61 75 6c 74 43 6f 6e 74 65 6e 74 4e 61 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 31 3d 3d 3d 74 7c 7c 6a 66 28 65 29 7c 7c 21 65 2e Data Ascii: :e.getAttribute(this._contentBlobFieldNames.contentSource),product:e.getAttribute(this._contentBlobFieldNames.productId),type:e.getAttribute(this._contentBlobFieldNames.contentType)}},bd.prototype._getDefaultContentName=function(e,t){if(!1===t\|\|jf(e)\|\|!e.

Timestamp	kBytes transferred	Direction	Data
2023-05-31 14:53:03 UTC	1076	OUT	GET /meversion?partner=SMCConvergence&market=en-us&uhf=1 HTTP/1.1 Host: mem.gfx.ms Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-05-31 14:53:03 UTC	1076	IN	HTTP/1.1 200 OK Cache-Control: public, no-transform, max-age=43200 Content-Length: 29720 Content-Type: application/javascript Expires: Wed, 31 May 2023 11:18:45 GMT X-Cache: TCP_HIT X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS X-UA-Compatible: IE=edge Strict-Transport-Security: max-age=31536000; includeSubDomains X-Azure-Ref-OriginShield: 05td2ZAAAAABhvsERbaucQoPLO1StXQulRlJBMjMxMDUwNDE4MDUxAGVhYzVmNDlmLWUwMmQtNGY0MS1iMGE2LTJkNTBmOWZjZjg0YQ== X-Azure-Ref: 0T193ZAAAAABW6uFXYXmBSZO+TyEp7/MJRlJBMzFFREdFMDkxMABlYWM1ZjQ5Zi1lMDJkLTRmNDEtYjBhNi0yZDUwZjlmY2Y4NGE= Date: Wed, 31 May 2023 14:53:03 GMT Connection: close
2023-05-31 14:53:03 UTC	1077	IN	Data Raw: 77 69 6e 64 6f 77 2e 4d 53 41 3d 77 69 6e 64 6f 77 2e 4d 53 41 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 3d 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 2e 43 6f 6e 66 69 67 3d 7b 22 76 65 72 22 3a 22 31 30 2e 32 33 30 38 32 2e 32 22 2c 22 6d 6b 74 22 3a 22 65 6e 2d 55 53 22 2c 22 70 74 6e 22 3a 22 73 6d 63 63 6f 6e 76 65 72 67 65 6e 63 65 22 2c 22 67 66 78 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6d 63 64 6e 2e 6d 73 66 74 61 75 74 68 2e 6e 65 74 22 2c 22 64 62 67 22 3a 66 61 6c 73 65 2c 22 61 61 64 22 3a 74 72 75 65 2c 22 69 6e 74 22 3a 66 61 6c 73 65 2c 22 70 78 79 22 3a 74 72 75 65 2c 22 6d 73 54 78 74 22 3a 66 61 6c 73 65 2c 22 72 77 Data Ascii: window.MSA=window.MSA\|\|{};window.MSA.MeControl=window.MSA.MeControl\|\|{};window.MSA.MeControl.Config={"ver":"10.23082.2","mkt":"en-US","ptn":"smcconvergence","gfx":"https://amcdn.msftauth.net","dbg":false,"aad":true,"int":false,"pxy":true,"msTxt":false,"rw
2023-05-31 14:53:03 UTC	1092	IN	Data Raw: 72 2c 6f 29 7d 76 61 72 20 48 65 3d 7b 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 69 6e 6c 69 6e 65 22 3a 22 6d 65 49 6e 6c 69 6e 65 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 62 6f 6f 74 22 3a 22 6d 65 42 6f 6f 74 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 63 6f 72 65 22 3a 22 6d 65 43 6f 72 65 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 58 65 28 65 29 7b 74 72 79 7b 65 20 69 6e 20 48 65 26 26 28 65 3d 48 65 5b 65 5d 29 2c 7a 65 28 29 3b 76 61 72 20 6e 3d 71 65 28 65 29 3b 69 66 28 6e 29 72 65 74 75 72 6e 20 6e 2e 62 75 6e 64 6c 65 50 72 6f 6d 69 73 65 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 75 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 62 65 28 66 75 6e 63 74 69 6f 6e 28 69 2c 61 29 7b 76 61 72 20 65 3d 67 28 29 2c 63 3d 66 75 6e Data Ascii: r,o)}var He={"@mecontrol/web-inline":"meInline","@mecontrol/web-boot":"meBoot","@mecontrol/web-core":"meCore"};function Xe(e){try{e in He&&(e=He[e]),ze();var n=qe(e);if(n)return n.bundlePromise;var t=function(u){return new be(function(i,a){var e=g(),c=fun

Timestamp	kBytes transferred	Direction	Data
2023-05-31 14:53:10 UTC	1106	OUT	GET /me/mecache?partner=smcconvergence&wreply=https%3A%2F%2Fsupport.microsoft.com HTTP/1.1 Host: mem.gfx.ms Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://support.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-05-31 14:53:10 UTC	1107	IN	HTTP/1.1 200 OK Cache-Control: public, no-transform, max-age=43200 Content-Length: 3392 Content-Type: text/html; charset=utf-8 Expires: Wed, 31 May 2023 15:52:04 GMT X-Cache: TCP_HIT X-Content-Type-Options: nosniff X-Frame-Options: allow-from https://support.microsoft.com Content-Security-Policy: frame-ancestors https://support.microsoft.com; X-UA-Compatible: IE=edge Strict-Transport-Security: max-age=31536000; includeSubDomains X-Azure-Ref-OriginShield: 0Zcp2ZAAAAADWpXU8PQX4Qb31SFrG27tURlJBMjMxMDUwNDE3MDMxAGVhYzVmNDlmLWUwMmQtNGY0MS1iMGE2LTJkNTBmOWZjZjg0YQ== X-Azure-Ref: 0Vl93ZAAAAACAa7q4V5VnSKffTBj+VLVBRlJBMzFFREdFMDMwNwBlYWM1ZjQ5Zi1lMDJkLTRmNDEtYjBhNi0yZDUwZjlmY2Y4NGE= Date: Wed, 31 May 2023 14:53:09 GMT Connection: close
2023-05-31 14:53:10 UTC	1107	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 20 2f 3e 0d 0a 20 20 20 20 0d 0a 20 20 20 20 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 62 6f 64 79 22 20 72 6f 6c 65 3d 22 6d 61 69 6e 22 3e 0d Data Ascii: <!DOCTYPE html><html lang="en" ><head> <meta charset="utf-8" /> <meta http-equiv="X-UA-Compatible" content="IE=edge" /> <meta name="viewport" content="width=device-width" /> </head><body> <div id="body" role="main">

Timestamp	kBytes transferred	Direction	Data
2023-05-31 14:53:47 UTC	1111	OUT	GET /meversion?partner=mshomepage&market=de-ch&uhf=1 HTTP/1.1 Host: mem.gfx.ms Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-05-31 14:53:47 UTC	1111	IN	HTTP/1.1 200 OK Cache-Control: public, no-transform, max-age=43200 Content-Length: 29712 Content-Type: application/javascript Expires: Thu, 01 Jun 2023 02:53:47 GMT X-Cache: TCP_MISS X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS X-UA-Compatible: IE=edge Strict-Transport-Security: max-age=31536000; includeSubDomains X-Azure-Ref-OriginShield: 0e193ZAAAAADdrre7IqgbQZTavLHQ04AtRlJBMjMxMDUwNDE4MDIzAGVhYzVmNDlmLWUwMmQtNGY0MS1iMGE2LTJkNTBmOWZjZjg0YQ== X-Azure-Ref: 0e193ZAAAAABHGor8/r9MQYauBOi4h5dqRlJBMzFFREdFMDQxNABlYWM1ZjQ5Zi1lMDJkLTRmNDEtYjBhNi0yZDUwZjlmY2Y4NGE= Date: Wed, 31 May 2023 14:53:47 GMT Connection: close
2023-05-31 14:53:47 UTC	1112	IN	Data Raw: 77 69 6e 64 6f 77 2e 4d 53 41 3d 77 69 6e 64 6f 77 2e 4d 53 41 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 3d 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 2e 43 6f 6e 66 69 67 3d 7b 22 76 65 72 22 3a 22 31 30 2e 32 33 30 38 32 2e 32 22 2c 22 6d 6b 74 22 3a 22 64 65 2d 44 45 22 2c 22 70 74 6e 22 3a 22 6d 73 68 6f 6d 65 70 61 67 65 22 2c 22 67 66 78 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6d 63 64 6e 2e 6d 73 66 74 61 75 74 68 2e 6e 65 74 22 2c 22 64 62 67 22 3a 66 61 6c 73 65 2c 22 61 61 64 22 3a 74 72 75 65 2c 22 69 6e 74 22 3a 66 61 6c 73 65 2c 22 70 78 79 22 3a 74 72 75 65 2c 22 6d 73 54 78 74 22 3a 66 61 6c 73 65 2c 22 72 77 64 22 3a 74 Data Ascii: window.MSA=window.MSA\|\|{};window.MSA.MeControl=window.MSA.MeControl\|\|{};window.MSA.MeControl.Config={"ver":"10.23082.2","mkt":"de-DE","ptn":"mshomepage","gfx":"https://amcdn.msftauth.net","dbg":false,"aad":true,"int":false,"pxy":true,"msTxt":false,"rwd":t
2023-05-31 14:53:47 UTC	1127	IN	Data Raw: 72 20 48 65 3d 7b 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 69 6e 6c 69 6e 65 22 3a 22 6d 65 49 6e 6c 69 6e 65 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 62 6f 6f 74 22 3a 22 6d 65 42 6f 6f 74 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 63 6f 72 65 22 3a 22 6d 65 43 6f 72 65 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 58 65 28 65 29 7b 74 72 79 7b 65 20 69 6e 20 48 65 26 26 28 65 3d 48 65 5b 65 5d 29 2c 7a 65 28 29 3b 76 61 72 20 6e 3d 71 65 28 65 29 3b 69 66 28 6e 29 72 65 74 75 72 6e 20 6e 2e 62 75 6e 64 6c 65 50 72 6f 6d 69 73 65 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 75 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 62 65 28 66 75 6e 63 74 69 6f 6e 28 69 2c 61 29 7b 76 61 72 20 65 3d 67 28 29 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: r He={"@mecontrol/web-inline":"meInline","@mecontrol/web-boot":"meBoot","@mecontrol/web-core":"meCore"};function Xe(e){try{e in He&&(e=He[e]),ze();var n=qe(e);if(n)return n.bundlePromise;var t=function(u){return new be(function(i,a){var e=g(),c=function(e

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://visualstudio.microsoft.com/visual-cpp-build-tools/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 178

Chrome Cache Entry: 179

Chrome Cache Entry: 180

Chrome Cache Entry: 181

Chrome Cache Entry: 182

Chrome Cache Entry: 183

Chrome Cache Entry: 184

Chrome Cache Entry: 185

Chrome Cache Entry: 186

Chrome Cache Entry: 187

Chrome Cache Entry: 188

Chrome Cache Entry: 189

Chrome Cache Entry: 190

Chrome Cache Entry: 191

Chrome Cache Entry: 192

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Chrome Cache Entry: 195

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Chrome Cache Entry: 204

Chrome Cache Entry: 205

Chrome Cache Entry: 206

Windows Analysis Report
https://visualstudio.microsoft.com/visual-cpp-build-tools/

Timestamp	kBytes transferred	Direction	Data
2023-05-31 14:52:14 UTC	69	OUT	GET /scripts/c/ms.jsll-3.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://visualstudio.microsoft.com/visual-cpp-build-tools/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-05-31 14:52:14 UTC	142	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=1800, immutable, no-transform Content-Length: 183646 Content-Type: text/javascript; charset=utf-8 Content-MD5: /marBaXljvDfmTXcxJKiCA== Last-Modified: Tue, 16 May 2023 17:35:05 GMT ETag: 0x8DB5633E2D59C23 X-Cache: TCP_HIT x-ms-request-id: 033e1ecf-101e-0103-0acc-93ba51000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 3.2.11 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-3.2.11.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * X-Azure-Ref-OriginShield: 0eF53ZAAAAADOFdYllX6tRpZ2OipuJuU4RlJBMjMxMDUwNDE4MDQ5AGYxY2E3M2Q0LTg4ODMtNGNhZi1hYmRjLWZlMmQ1NjdhZmI5Ng== X-Azure-Ref: 0Hl93ZAAAAADChK+vlN7ySqSFRhUq/Y8TRlJBMzFFREdFMDQwNwBmMWNhNzNkNC04ODgzLTRjYWYtYWJkYy1mZTJkNTY3YWZiOTY= Date: Wed, 31 May 2023 14:52:14 GMT Connection: close
2023-05-31 14:52:14 UTC	143	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 4c 4c 20 53 4b 55 2c 20 33 2e 32 2e 31 31 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 66 3d 22 66 75 6e 63 74 69 6f 6e 22 2c 64 3d 22 6f 62 6a 65 63 74 22 2c 66 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 2c 7a 3d 22 70 72 6f 74 6f 74 79 70 65 22 2c 67 3d 22 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 22 2c 6d 3d 4f 62 6a 65 63 74 2c 79 3d 6d 5b 7a Data Ascii: /! 1DS JSLL SKU, 3.2.11 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */var e=this,t=function(l){"use strict";var f="function",d="object",fe="undefined",z="prototype",g="hasOwnProperty",m=Object,y=m[z
2023-05-31 14:52:14 UTC	294	IN	Data Raw: 6c 65 64 22 2c 61 69 3d 22 64 69 73 61 62 6c 65 43 6f 6f 6b 69 65 73 55 73 61 67 65 22 2c 6f 69 3d 22 5f 63 6b 4d 67 72 22 2c 73 69 3d 6e 75 6c 6c 2c 63 69 3d 6e 75 6c 6c 2c 75 69 3d 6e 75 6c 6c 2c 6c 69 3d 6f 65 28 29 2c 66 69 3d 7b 7d 2c 64 69 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 70 69 28 65 29 7b 72 65 74 75 72 6e 21 65 7c 7c 65 2e 69 73 45 6e 61 62 6c 65 64 28 29 7d 66 75 6e 63 74 69 6f 6e 20 67 69 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 26 26 65 26 26 46 28 65 2e 69 67 6e 6f 72 65 43 6f 6f 6b 69 65 73 29 26 26 2d 31 21 3d 3d 65 2e 69 67 6e 6f 72 65 43 6f 6f 6b 69 65 73 5b 6b 5d 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 76 69 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3b 72 65 74 75 72 6e 20 65 3f 6e 3d 65 2e 67 65 74 43 6f 6f 6b 69 65 4d 67 72 28 29 3a Data Ascii: led",ai="disableCookiesUsage",oi="_ckMgr",si=null,ci=null,ui=null,li=oe(),fi={},di={};function pi(e){return!e\|\|e.isEnabled()}function gi(e,t){return t&&e&&F(e.ignoreCookies)&&-1!==e.ignoreCookies[k](t)}function vi(e,t){var n,r;return e?n=e.getCookieMgr():
2023-05-31 14:52:14 UTC	310	IN	Data Raw: 2e 71 75 65 75 65 29 7d 29 2c 4a 74 28 74 29 7d 2c 76 2e 74 72 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 4b 65 79 3d 65 2e 69 4b 65 79 7c 7c 43 5b 6d 65 5d 2c 65 5b 43 65 5d 3d 65 5b 43 65 5d 7c 7c 7a 74 28 6e 65 77 20 44 61 74 65 29 2c 65 2e 76 65 72 3d 65 2e 76 65 72 7c 7c 22 34 2e 30 22 2c 21 4e 26 26 76 5b 76 65 5d 28 29 3f 6d 28 29 5b 56 5d 28 65 29 3a 72 5b 4c 5d 28 65 29 7d 2c 76 5b 62 65 5d 3d 6d 2c 76 5b 70 65 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 20 69 7c 7c 28 69 3d 71 28 28 28 65 3d 7b 7d 29 5b 54 65 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 7d 2c 65 5b 49 65 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 7d 2c 65 5b 72 74 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 7d 2c 65 5b 69 74 5d 3d 66 75 6e Data Ascii: .queue)}),Jt(t)},v.track=function(e){e.iKey=e.iKey\|\|C[me],e[Ce]=e[Ce]\|\|zt(new Date),e.ver=e.ver\|\|"4.0",!N&&v[ve]()?m()[V](e):r[L](e)},v[be]=m,v[pe]=function(){var e;return i\|\|(i=q(((e={})[Te]=function(e){},e[Ie]=function(e){},e[rt]=function(e){},e[it]=fun
2023-05-31 14:52:14 UTC	326	IN	Data Raw: 6e 3d 46 73 28 65 2c 21 30 29 29 2c 30 21 3d 3d 6e 5b 56 6f 5d 28 74 29 26 26 22 53 74 72 69 6e 67 22 21 3d 3d 74 3f 74 2b 22 3a 22 2b 6e 3a 6e 7d 63 61 74 63 68 28 72 29 7b 7d 72 65 74 75 72 6e 22 22 2b 28 65 7c 7c 22 22 29 7d 58 73 2e 43 72 65 61 74 65 41 75 74 6f 45 78 63 65 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 2c 61 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 4b 73 28 69 7c 7c 61 7c 7c 65 29 2c 75 3d 7b 7d 3b 72 65 74 75 72 6e 20 75 5b 4d 6f 5d 3d 71 73 28 65 2c 63 29 2c 75 2e 75 72 6c 3d 74 2c 75 2e 6c 69 6e 65 4e 75 6d 62 65 72 3d 6e 2c 75 2e 63 6f 6c 75 6d 6e 4e 75 6d 62 65 72 3d 72 2c 75 2e 65 72 72 6f 72 3d 57 73 28 69 7c 7c 61 7c 7c 65 29 2c 75 2e 65 76 74 3d 57 73 28 61 7c 7c 65 29 2c 75 5b 6a 6f 5d 3d 63 2c 75 2e 73 Data Ascii: n=Fs(e,!0)),0!==n[Vo](t)&&"String"!==t?t+":"+n:n}catch(r){}return""+(e\|\|"")}Xs.CreateAutoException=function(e,t,n,r,i,a,o,s){var c=Ks(i\|\|a\|\|e),u={};return u[Mo]=qs(e,c),u.url=t,u.lineNumber=n,u.columnNumber=r,u.error=Ws(i\|\|a\|\|e),u.evt=Ws(a\|\|e),u[jo]=c,u.s
2023-05-31 14:52:14 UTC	342	IN	Data Raw: 56 69 65 77 50 65 72 66 6f 72 6d 61 6e 63 65 20 66 61 69 6c 65 64 2c 20 70 61 67 65 20 76 69 65 77 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 3a 20 22 2b 68 28 6e 29 2c 7b 65 78 63 65 70 74 69 6f 6e 3a 73 65 28 6e 29 7d 29 7d 7d 2c 53 2e 73 74 61 72 74 54 72 61 63 6b 50 61 67 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 72 79 7b 76 61 72 20 74 3b 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 26 26 28 65 3d 28 74 3d 6f 65 28 29 29 26 26 74 2e 74 69 74 6c 65 7c 7c 22 22 29 2c 41 2e 73 74 61 72 74 28 65 29 7d 63 61 74 63 68 28 6e 29 7b 64 28 31 2c 33 31 2c 22 73 74 61 72 74 54 72 61 63 6b 50 61 67 65 20 66 61 69 6c 65 64 2c 20 70 61 67 65 20 76 69 65 77 20 6d 61 79 20 6e 6f 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 3a 20 22 2b Data Ascii: ViewPerformance failed, page view will not be collected: "+h(n),{exception:se(n)})}},S.startTrackPage=function(e){try{var t;"string"!=typeof e&&(e=(t=oe())&&t.title\|\|""),A.start(e)}catch(n){d(1,31,"startTrackPage failed, page view may not be collected: "+
2023-05-31 14:52:14 UTC	358	IN	Data Raw: 3d 74 79 70 65 6f 66 28 69 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 63 61 6c 6c 62 61 63 6b 2e 70 61 67 65 41 63 74 69 6f 6e 43 6f 6e 74 65 6e 74 54 61 67 73 29 3f 69 28 65 29 3a 7b 7d 2c 74 26 26 74 2e 63 6f 6e 74 65 6e 74 54 61 67 73 3f 74 2e 63 6f 6e 74 65 6e 74 54 61 67 73 3a 7b 7d 29 29 2c 61 2e 63 6f 6e 74 65 6e 74 3d 74 68 69 73 2e 5f 67 65 74 43 6f 6e 74 65 6e 74 46 6f 72 6d 61 74 74 65 64 28 73 29 2c 6e 2e 74 69 6d 65 54 6f 41 63 74 69 6f 6e 3d 74 68 69 73 2e 5f 67 65 74 54 69 6d 65 54 6f 43 6c 69 63 6b 28 29 2c 6e 2e 72 65 66 55 72 69 3d 75 65 28 74 2e 72 65 66 55 72 69 29 3f 74 2e 72 65 66 55 72 69 3a 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 63 6f 72 65 44 61 74 61 2e 72 65 66 65 72 72 65 72 55 72 69 2c 58 75 28 74 68 69 73 2e 5f 63 6f 6e 66 69 Data Ascii: =typeof(i=this._config.callback.pageActionContentTags)?i(e):{},t&&t.contentTags?t.contentTags:{})),a.content=this._getContentFormatted(s),n.timeToAction=this._getTimeToClick(),n.refUri=ue(t.refUri)?t.refUri:this._config.coreData.referrerUri,Xu(this._confi
2023-05-31 14:52:14 UTC	374	IN	Data Raw: 64 61 74 65 28 65 2c 74 29 7d 2c 66 2e 63 61 70 74 75 72 65 43 6f 6e 74 65 6e 74 55 70 64 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 68 2e 63 61 70 74 75 72 65 43 6f 6e 74 65 6e 74 55 70 64 61 74 65 28 65 2c 74 29 7d 2c 66 2e 74 72 61 63 6b 50 61 67 65 55 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 7c 7c 28 69 3d 21 30 2c 6d 2e 74 72 61 63 6b 50 61 67 65 55 6e 6c 6f 61 64 28 65 2c 74 29 29 7d 2c 66 2e 63 61 70 74 75 72 65 50 61 67 65 55 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 7c 7c 28 69 3d 21 30 2c 6d 2e 63 61 70 74 75 72 65 50 61 67 65 55 6e 6c 6f 61 64 28 65 2c 74 29 29 7d 2c 66 2e 5f 70 6f 70 75 6c 61 74 65 50 61 67 65 56 69 65 77 50 65 72 66 6f 72 6d 61 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 Data Ascii: date(e,t)},f.captureContentUpdate=function(e,t){h.captureContentUpdate(e,t)},f.trackPageUnload=function(e,t){i\|\|(i=!0,m.trackPageUnload(e,t))},f.capturePageUnload=function(e,t){i\|\|(i=!0,m.capturePageUnload(e,t))},f._populatePageViewPerformance=function(e)
2023-05-31 14:52:14 UTC	390	IN	Data Raw: 30 30 2c 7b 7d 2c 65 29 2c 66 28 65 29 7d 2c 72 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6d 28 74 2c 34 30 30 2c 7b 7d 29 7d 2c 72 2e 6f 6e 74 69 6d 65 6f 75 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6d 28 74 2c 35 30 30 2c 7b 7d 29 7d 2c 72 2e 6f 6e 70 72 6f 67 72 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 6e 3f 72 2e 73 65 6e 64 28 65 2e 64 61 74 61 29 3a 78 2e 73 65 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 73 65 6e 64 28 65 2e 64 61 74 61 29 7d 2c 30 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 69 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 65 2e 75 72 6c 53 74 72 69 6e 67 2c 61 3d 21 31 2c 6f 3d 21 31 3b 28 6e 3d 7b 62 6f 64 79 3a 65 2e 64 61 74 61 2c 6d 65 74 68 6f 64 3a 47 6c 7d 29 2e 4d 69 63 72 6f 73 6f 66 74 5f 41 70 70 6c 69 Data Ascii: 00,{},e),f(e)},r.onerror=function(){m(t,400,{})},r.ontimeout=function(){m(t,500,{})},r.onprogress=function(){},n?r.send(e.data):x.set(function(){r.send(e.data)},0)}function o(e,i,t){var n,r=e.urlString,a=!1,o=!1;(n={body:e.data,method:Gl}).Microsoft_Appli
2023-05-31 14:52:14 UTC	406	IN	Data Raw: 74 2c 6e 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 21 30 29 2c 55 7c 7c 28 6e 3d 6e 7c 7c 31 2c 65 3f 6e 75 6c 6c 3d 3d 4c 3f 28 63 28 29 2c 6d 28 31 2c 30 2c 6e 29 2c 4c 3d 73 28 66 75 6e 63 74 69 6f 6e 28 29 7b 4c 3d 6e 75 6c 6c 2c 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 61 28 31 2c 30 2c 74 29 2c 68 28 29 2c 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 44 2e 69 73 43 6f 6d 70 6c 65 74 65 6c 79 49 64 6c 65 28 29 3f 65 28 29 3a 4c 3d 73 28 66 75 6e 63 74 69 6f 6e 28 29 7b 4c 3d 6e 75 6c 6c 2c 6e 28 65 29 7d 2c 2e 32 35 29 7d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 26 26 65 28 29 2c 30 3c 52 2e 6c 65 6e 67 74 68 3f 4c 3d 73 28 66 75 6e 63 74 69 6f 6e 28 29 7b 4c 3d 6e 75 6c 6c 2c 72 28 52 2e 73 68 69 66 74 28 29 2c 74 29 7d 2c 30 29 3a 28 4c Data Ascii: t,n){void 0===e&&(e=!0),U\|\|(n=n\|\|1,e?null==L?(c(),m(1,0,n),L=s(function(){L=null,function r(e,t){a(1,0,t),h(),function n(e){D.isCompletelyIdle()?e():L=s(function(){L=null,n(e)},.25)}(function(){e&&e(),0<R.length?L=s(function(){L=null,r(R.shift(),t)},0):(L
2023-05-31 14:52:14 UTC	422	IN	Data Raw: 44 22 2c 67 70 3d 22 73 70 61 6e 49 44 22 2c 76 70 3d 22 74 72 61 63 65 46 6c 61 67 73 22 2c 68 70 3d 22 63 6f 6e 74 65 78 74 22 2c 6d 70 3d 22 61 62 6f 72 74 65 64 22 2c 79 70 3d 22 74 72 61 63 65 49 64 22 2c 43 70 3d 22 73 70 61 6e 49 64 22 2c 62 70 3d 22 63 6f 72 65 22 2c 54 70 3d 22 69 6e 63 6c 75 64 65 43 6f 72 72 65 6c 61 74 69 6f 6e 48 65 61 64 65 72 73 22 2c 49 70 3d 22 63 61 6e 49 6e 63 6c 75 64 65 43 6f 72 72 65 6c 61 74 69 6f 6e 48 65 61 64 65 72 22 2c 45 70 3d 22 67 65 74 41 62 73 6f 6c 75 74 65 55 72 6c 22 2c 5f 70 3d 22 68 65 61 64 65 72 73 22 2c 78 70 3d 22 72 65 71 75 65 73 74 48 65 61 64 65 72 73 22 2c 53 70 3d 22 61 70 70 49 64 22 2c 4e 70 3d 22 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 22 2c 44 70 3d 22 74 72 61 63 6b 44 65 70 65 Data Ascii: D",gp="spanID",vp="traceFlags",hp="context",mp="aborted",yp="traceId",Cp="spanId",bp="core",Tp="includeCorrelationHeaders",Ip="canIncludeCorrelationHeader",Ep="getAbsoluteUrl",_p="headers",xp="requestHeaders",Sp="appId",Np="setRequestHeader",Dp="trackDepe
2023-05-31 14:52:14 UTC	438	IN	Data Raw: 65 73 70 6f 6e 73 65 53 69 7a 65 42 79 74 65 73 29 26 26 28 65 2e 62 61 73 65 44 61 74 61 2e 72 65 73 70 6f 6e 73 65 53 69 7a 65 42 79 74 65 73 3d 74 2e 72 65 73 70 6f 6e 73 65 53 69 7a 65 42 79 74 65 73 29 7d 3b 76 61 72 20 71 67 2c 42 67 3d 7a 67 3b 66 75 6e 63 74 69 6f 6e 20 7a 67 28 29 7b 74 68 69 73 2e 5f 71 6f 73 45 76 65 6e 74 3d 6e 65 77 20 55 67 7d 66 75 6e 63 74 69 6f 6e 20 6a 67 28 29 7b 76 61 72 20 66 2c 61 2c 6f 2c 64 2c 70 2c 65 3d 71 67 2e 63 61 6c 6c 28 74 68 69 73 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 65 2e 69 64 65 6e 74 69 66 69 65 72 3d 22 51 6f 73 50 6c 75 67 69 6e 22 2c 65 2e 76 65 72 73 69 6f 6e 3d 22 33 2e 32 2e 31 31 22 2c 72 65 28 6a 67 2c 65 2c 66 75 6e 63 74 69 6f 6e 28 75 2c 6c 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 Data Ascii: esponseSizeBytes)&&(e.baseData.responseSizeBytes=t.responseSizeBytes)};var qg,Bg=zg;function zg(){this._qosEvent=new Ug}function jg(){var f,a,o,d,p,e=qg.call(this)\|\|this;return e.identifier="QosPlugin",e.version="3.2.11",re(jg,e,function(u,l){function r(e
2023-05-31 14:52:14 UTC	454	IN	Data Raw: 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 28 22 67 65 74 50 61 67 65 56 69 65 77 49 6d 70 72 65 73 73 69 6f 6e 47 75 69 64 22 29 2c 22 22 7d 3b 76 61 72 20 6e 76 3d 72 76 3b 66 75 6e 63 74 69 6f 6e 20 72 76 28 65 29 7b 74 68 69 73 2e 5f 73 6b 75 3d 65 7d 61 76 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6f 28 22 49 78 20 69 6e 69 74 22 29 7d 2c 61 76 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6f 28 22 49 78 20 73 65 74 22 29 7d 3b 76 61 72 20 69 76 3d 61 76 3b 66 75 6e 63 74 69 6f 6e 20 61 76 28 29 7b 74 68 69 73 2e 74 65 73 74 48 6f 6f 6b 3d 7b 7d 7d 73 76 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 6f 76 3d 73 76 3b 66 75 6e 63 74 69 6f 6e 20 73 76 28 65 29 7b 76 61 72 Data Ascii: ction(){return o("getPageViewImpressionGuid"),""};var nv=rv;function rv(e){this._sku=e}av.prototype.init=function(e){o("Ix init")},av.prototype.set=function(e){o("Ix set")};var iv=av;function av(){this.testHook={}}sv.__ieDyn=1;var ov=sv;function sv(e){var

Timestamp	kBytes transferred	Direction	Data
2023-05-31 14:52:23 UTC	459	OUT	GET /meversion?partner=VisualStudio&market=en-us&uhf=1 HTTP/1.1 Host: mem.gfx.ms Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://visualstudio.microsoft.com/visual-cpp-build-tools/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-05-31 14:52:23 UTC	459	IN	HTTP/1.1 200 OK Cache-Control: public, no-transform, max-age=43200 Content-Length: 29716 Content-Type: application/javascript Expires: Wed, 31 May 2023 19:17:06 GMT X-Cache: TCP_HIT X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS X-UA-Compatible: IE=edge Strict-Transport-Security: max-age=31536000; includeSubDomains X-Azure-Ref-OriginShield: 04vx2ZAAAAAB+HzozPhYHT6gqaB9naqnWRlJBMjMxMDUwNDE3MDM5AGVhYzVmNDlmLWUwMmQtNGY0MS1iMGE2LTJkNTBmOWZjZjg0YQ== X-Azure-Ref: 0J193ZAAAAABmi3Kn8ZhFSYk33bM6zFlTRlJBMzFFREdFMDkxNwBlYWM1ZjQ5Zi1lMDJkLTRmNDEtYjBhNi0yZDUwZjlmY2Y4NGE= Date: Wed, 31 May 2023 14:52:23 GMT Connection: close
2023-05-31 14:52:23 UTC	460	IN	Data Raw: 77 69 6e 64 6f 77 2e 4d 53 41 3d 77 69 6e 64 6f 77 2e 4d 53 41 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 3d 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 2e 43 6f 6e 66 69 67 3d 7b 22 76 65 72 22 3a 22 31 30 2e 32 33 30 38 32 2e 32 22 2c 22 6d 6b 74 22 3a 22 65 6e 2d 55 53 22 2c 22 70 74 6e 22 3a 22 76 69 73 75 61 6c 73 74 75 64 69 6f 22 2c 22 67 66 78 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6d 63 64 6e 2e 6d 73 66 74 61 75 74 68 2e 6e 65 74 22 2c 22 64 62 67 22 3a 66 61 6c 73 65 2c 22 61 61 64 22 3a 74 72 75 65 2c 22 69 6e 74 22 3a 66 61 6c 73 65 2c 22 70 78 79 22 3a 74 72 75 65 2c 22 6d 73 54 78 74 22 3a 66 61 6c 73 65 2c 22 72 77 64 22 Data Ascii: window.MSA=window.MSA\|\|{};window.MSA.MeControl=window.MSA.MeControl\|\|{};window.MSA.MeControl.Config={"ver":"10.23082.2","mkt":"en-US","ptn":"visualstudio","gfx":"https://amcdn.msftauth.net","dbg":false,"aad":true,"int":false,"pxy":true,"msTxt":false,"rwd"
2023-05-31 14:52:23 UTC	475	IN	Data Raw: 7d 76 61 72 20 48 65 3d 7b 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 69 6e 6c 69 6e 65 22 3a 22 6d 65 49 6e 6c 69 6e 65 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 62 6f 6f 74 22 3a 22 6d 65 42 6f 6f 74 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 63 6f 72 65 22 3a 22 6d 65 43 6f 72 65 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 58 65 28 65 29 7b 74 72 79 7b 65 20 69 6e 20 48 65 26 26 28 65 3d 48 65 5b 65 5d 29 2c 7a 65 28 29 3b 76 61 72 20 6e 3d 71 65 28 65 29 3b 69 66 28 6e 29 72 65 74 75 72 6e 20 6e 2e 62 75 6e 64 6c 65 50 72 6f 6d 69 73 65 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 75 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 62 65 28 66 75 6e 63 74 69 6f 6e 28 69 2c 61 29 7b 76 61 72 20 65 3d 67 28 29 2c 63 3d 66 75 6e 63 74 69 6f Data Ascii: }var He={"@mecontrol/web-inline":"meInline","@mecontrol/web-boot":"meBoot","@mecontrol/web-core":"meCore"};function Xe(e){try{e in He&&(e=He[e]),ze();var n=qe(e);if(n)return n.bundlePromise;var t=function(u){return new be(function(i,a){var e=g(),c=functio

Timestamp	kBytes transferred	Direction	Data
2023-05-31 14:52:31 UTC	489	OUT	GET /scripts/c/ms.shared.analytics.mectrl-3.2.7.gbl.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://visualstudio.microsoft.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://visualstudio.microsoft.com/visual-cpp-build-tools/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-05-31 14:52:31 UTC	490	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=31536000, immutable, no-transform Content-Length: 90648 Content-Type: text/javascript; charset=utf-8 Content-MD5: bG4aPNgugaurnXq8OXoQfQ== Last-Modified: Wed, 05 Oct 2022 16:53:03 GMT ETag: 0x8DAA6F2118B127C X-Cache: TCP_HIT x-ms-request-id: 1108f08b-d01e-001b-3027-8d0dbe000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 3.2.7 Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * X-Azure-Ref-OriginShield: 0ncV2ZAAAAADiF8tnLKbwT48jMNDgPbdmRlJBMjMxMDUwNDE3MDM1AGYxY2E3M2Q0LTg4ODMtNGNhZi1hYmRjLWZlMmQ1NjdhZmI5Ng== X-Azure-Ref: 0L193ZAAAAACHzItS4wXsR5yVym8vT6fSRlJBMzFFREdFMDMxNgBmMWNhNzNkNC04ODgzLTRjYWYtYWJkYy1mZTJkNTY3YWZiOTY= Date: Wed, 31 May 2023 14:52:30 GMT Connection: close
2023-05-31 14:52:31 UTC	490	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 20 53 44 4b 20 53 68 61 72 65 64 20 41 6e 61 6c 79 74 69 63 73 2c 20 33 2e 32 2e 37 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 66 3d 22 66 75 6e 63 74 69 6f 6e 22 2c 6d 3d 22 6f 62 6a 65 63 74 22 2c 63 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 2c 61 3d 22 70 72 6f 74 6f 74 79 70 65 22 2c 43 3d 22 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 22 2c 49 3d 4f 62 6a 65 63 74 2c 53 3d 49 Data Ascii: /! 1DS JS SDK Shared Analytics, 3.2.7 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e){"use strict";var f="function",m="object",ce="undefined",a="prototype",C="hasOwnProperty",I=Object,S=I
2023-05-31 14:52:31 UTC	506	IN	Data Raw: 21 3d 3d 6e 3f 69 69 28 6e 29 3a 65 7d 7d 29 5b 75 6e 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 3d 21 31 21 3d 3d 65 7d 2c 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 2c 72 2c 69 29 7b 76 61 72 20 6f 2c 61 2c 75 2c 73 3d 21 31 3b 72 65 74 75 72 6e 21 69 69 28 64 29 7c 7c 28 61 3d 63 2c 28 75 3d 65 29 26 26 61 26 26 72 65 28 61 2e 62 6c 6f 63 6b 65 64 43 6f 6f 6b 69 65 73 29 26 26 2d 31 21 3d 3d 61 2e 62 6c 6f 63 6b 65 64 43 6f 6f 6b 69 65 73 5b 74 6e 5d 28 75 29 7c 7c 6f 69 28 61 2c 75 29 29 7c 7c 28 61 3d 7b 7d 2c 2d 31 21 3d 3d 28 6f 3d 28 75 3d 5a 28 6e 7c 7c 76 29 29 5b 74 6e 5d 28 22 3b 22 29 29 26 26 28 75 3d 5a 28 6e 5b 72 6e 5d 28 30 2c 6f 29 29 2c 61 3d 63 69 28 6e 5b 72 6e 5d 28 6f 2b 31 29 29 29 2c 53 74 28 61 2c 22 64 6f 6d Data Ascii: !==n?ii(n):e}})[un]=function(e){r=!1!==e},e.set=function(e,n,t,r,i){var o,a,u,s=!1;return!ii(d)\|\|(a=c,(u=e)&&a&&re(a.blockedCookies)&&-1!==a.blockedCookies[tn](u)\|\|oi(a,u))\|\|(a={},-1!==(o=(u=Z(n\|\|v))[tn](";"))&&(u=Z(n[rn](0,o)),a=ci(n[rn](o+1))),St(a,"dom
2023-05-31 14:52:31 UTC	522	IN	Data Raw: 29 29 7d 2c 70 2e 65 76 74 4e 61 6d 65 73 70 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 50 7d 2c 70 5b 71 65 5d 3d 66 2c 70 2e 67 65 74 54 72 61 63 65 43 74 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3b 72 65 74 75 72 6e 20 4d 7c 7c 28 6e 3d 7b 7d 2c 4d 3d 7b 67 65 74 4e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 5b 45 65 5d 7d 2c 73 65 74 4e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 5b 45 65 5d 3d 65 7d 2c 67 65 74 54 72 61 63 65 49 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 5b 53 6e 5d 7d 2c 73 65 74 54 72 61 63 65 49 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 58 69 28 65 29 26 26 28 6e 5b 53 6e 5d 3d 65 29 7d 2c 67 65 74 53 70 61 6e 49 64 3a 66 75 6e 63 74 69 6f Data Ascii: ))},p.evtNamespace=function(){return P},p[qe]=f,p.getTraceCtx=function(e){var n;return M\|\|(n={},M={getName:function(){return n[Ee]},setName:function(e){n[Ee]=e},getTraceId:function(){return n[Sn]},setTraceId:function(e){Xi(e)&&(n[Sn]=e)},getSpanId:functio
2023-05-31 14:52:31 UTC	538	IN	Data Raw: 28 74 29 72 65 74 75 72 6e 28 6e 3d 4b 61 28 74 29 29 3f 74 2e 73 70 6c 69 74 28 6e 29 5b 30 5d 3a 74 7d 7d 72 65 74 75 72 6e 20 55 61 7d 28 74 2c 72 29 29 2c 6e 2e 6e 61 6d 65 26 26 6e 2e 6e 61 6d 65 21 3d 3d 55 61 7c 7c 21 24 28 65 2e 70 6c 61 74 66 6f 72 6d 29 7c 7c 28 6e 2e 6e 61 6d 65 3d 65 2e 70 6c 61 74 66 6f 72 6d 29 29 7d 2c 71 61 3d 22 4d 69 63 72 6f 73 6f 66 74 41 70 70 6c 69 63 61 74 69 6f 6e 73 54 65 6c 65 6d 65 74 72 79 44 65 76 69 63 65 49 64 22 2c 56 61 3d 28 48 61 2e 5f 5f 69 65 44 79 6e 3d 31 2c 48 61 29 3b 66 75 6e 63 74 69 6f 6e 20 48 61 28 75 2c 73 29 7b 76 61 72 20 63 3d 30 3b 65 65 28 48 61 2c 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 2c 74 2c 72 2c 69 2c 6f 3d 75 2e 70 72 6f 70 65 72 74 79 53 74 6f 72 61 67 Data Ascii: (t)return(n=Ka(t))?t.split(n)[0]:t}}return Ua}(t,r)),n.name&&n.name!==Ua\|\|!$(e.platform)\|\|(n.name=e.platform))},qa="MicrosoftApplicationsTelemetryDeviceId",Va=(Ha.__ieDyn=1,Ha);function Ha(u,s){var c=0;ee(Ha,this,function(e){var n,t,r,i,o=u.propertyStorag
2023-05-31 14:52:31 UTC	554	IN	Data Raw: 73 3d 61 3f 36 35 65 33 3a 32 65 36 2c 63 3d 30 2c 6c 3d 30 3b 63 3c 65 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 66 3d 65 5b 63 5d 3b 69 66 28 66 29 7b 69 66 28 68 3c 3d 74 29 7b 67 2e 6f 76 65 72 66 6c 6f 77 3d 70 2e 73 70 6c 69 74 28 63 29 3b 62 72 65 61 6b 7d 76 61 72 20 64 3d 79 2e 67 65 74 45 76 65 6e 74 42 6c 6f 62 28 66 29 3b 69 66 28 64 26 26 64 2e 6c 65 6e 67 74 68 3c 3d 73 29 7b 76 61 72 20 76 3d 64 2e 6c 65 6e 67 74 68 3b 69 66 28 75 3c 6e 2e 6c 65 6e 67 74 68 2b 76 29 7b 67 2e 6f 76 65 72 66 6c 6f 77 3d 70 2e 73 70 6c 69 74 28 63 29 3b 62 72 65 61 6b 7d 6e 26 26 28 6e 2b 3d 22 5c 6e 22 29 2c 6e 2b 3d 64 2c 32 30 3c 2b 2b 6c 26 26 28 6e 2e 73 75 62 73 74 72 28 30 2c 31 29 2c 6c 3d 30 29 2c 72 3d 21 30 2c 74 2b 2b 7d 65 6c 73 65 28 64 3f 69 3a Data Ascii: s=a?65e3:2e6,c=0,l=0;c<e.length;){var f=e[c];if(f){if(h<=t){g.overflow=p.split(c);break}var d=y.getEventBlob(f);if(d&&d.length<=s){var v=d.length;if(u<n.length+v){g.overflow=p.split(c);break}n&&(n+="\n"),n+=d,20<++l&&(n.substr(0,1),l=0),r=!0,t++}else(d?i:
2023-05-31 14:52:31 UTC	570	IN	Data Raw: 65 76 74 4e 61 6d 65 73 70 61 63 65 26 26 76 2e 65 76 74 4e 61 6d 65 73 70 61 63 65 28 29 29 3b 76 61 72 20 74 2c 72 3d 70 2e 5f 67 65 74 54 65 6c 43 74 78 28 29 2c 69 3d 28 64 2e 65 78 74 65 6e 73 69 6f 6e 43 6f 6e 66 69 67 5b 70 2e 69 64 65 6e 74 69 66 69 65 72 5d 3d 64 2e 65 78 74 65 6e 73 69 6f 6e 43 6f 6e 66 69 67 5b 70 2e 69 64 65 6e 74 69 66 69 65 72 5d 7c 7c 7b 7d 2c 54 3d 72 2e 67 65 74 45 78 74 43 66 67 28 70 2e 69 64 65 6e 74 69 66 69 65 72 29 2c 41 3d 52 73 28 54 2e 73 65 74 54 69 6d 65 6f 75 74 4f 76 65 72 72 69 64 65 2c 54 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 4f 76 65 72 72 69 64 65 29 2c 4a 3d 21 54 2e 64 69 73 61 62 6c 65 4f 70 74 69 6d 69 7a 65 4f 62 6a 26 26 21 21 61 65 28 22 63 68 72 6f 6d 65 22 29 2c 6e 3d 65 2e 67 65 74 57 50 61 72 Data Ascii: evtNamespace&&v.evtNamespace());var t,r=p._getTelCtx(),i=(d.extensionConfig[p.identifier]=d.extensionConfig[p.identifier]\|\|{},T=r.getExtCfg(p.identifier),A=Rs(T.setTimeoutOverride,T.clearTimeoutOverride),J=!T.disableOptimizeObj&&!!ae("chrome"),n=e.getWPar

Timestamp	kBytes transferred	Direction	Data
2023-05-31 14:52:31 UTC	579	OUT	GET /c1a9f67c29cb.js?lv=1 HTTP/1.1 Host: w.usabilla.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://visualstudio.microsoft.com/visual-cpp-build-tools/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-05-31 14:52:31 UTC	580	IN	HTTP/1.1 200 OK Date: Wed, 31 May 2023 14:52:31 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public,max-age=0 Etag: "c66b1a8e1f234be450553fdb4461308c" Pragma: no-cache X-Widget-Server: 2.1
2023-05-31 14:52:31 UTC	580	IN	Data Raw: 34 63 39 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 21 3d 77 69 6e 64 6f 77 26 26 28 77 69 6e 64 6f 77 2e 6c 69 67 68 74 6e 69 6e 67 6a 73 7c 7c 66 75 6e 63 74 69 6f 6e 28 64 2c 66 29 7b 76 61 72 20 65 3d 64 2e 6c 69 67 68 74 6e 69 6e 67 6a 73 3d 7b 6d 6f 64 75 6c 65 73 3a 66 2e 6d 6f 64 75 6c 65 73 7d 2c 72 3d 66 2e 6d 6f 64 75 6c 65 73 3b 65 2e 65 78 70 65 6e 73 69 76 65 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 2e 5f 77 61 69 74 66 6f 72 6c 6f 61 64 3d 21 30 3b 72 65 74 75 72 6e 20 62 7d 3b 76 6f 69 64 20 30 3b 65 2e 72 65 71 75 69 72 65 3d 66 2e 72 65 71 75 69 72 65 3b 65 2e 70 72 6f 76 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 6c 29 7b 66 75 6e 63 74 69 6f 6e 20 6d 28 29 7b 76 61 72 20 61 3d 64 2e 63 6f 6e 73 Data Ascii: 4c9(function(){window.parent!=window&&(window.lightningjs\|\|function(d,f){var e=d.lightningjs={modules:f.modules},r=f.modules;e.expensive=function(b){b._waitforload=!0;return b};void 0;e.require=f.require;e.provide=function(b,l){function m(){var a=d.cons
2023-05-31 14:52:31 UTC	581	IN	Data Raw: 35 61 64 0d 0a 64 65 66 69 6e 65 64 22 29 3b 65 6c 73 65 7b 67 2e 70 72 6f 76 69 64 65 64 3d 21 30 3b 76 61 72 20 68 3d 28 67 2e 5f 2e 73 7c 7c 5b 5d 29 2e 73 6c 69 63 65 28 29 3b 76 61 72 20 70 3d 7b 30 3a 6c 7d 3b 76 61 72 20 71 3d 5b 5d 3b 76 61 72 20 76 3d 7b 7d 3b 76 61 72 20 75 3d 21 31 3b 68 26 26 68 5b 30 5d 26 26 28 70 5b 68 5b 30 5d 5b 31 5d 5d 3d 6c 29 3b 6c 2e 5f 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 75 3d 21 30 3b 66 6f 72 28 76 61 72 20 61 3d 71 2e 73 68 69 66 74 28 29 3b 61 3b 29 66 28 61 29 2c 61 3d 71 2e 73 68 69 66 74 28 29 7d 3b 67 2e 5f 2e 73 3d 7b 70 75 73 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 68 2e 70 75 73 68 28 61 29 3b 74 28 29 7d 7d 3b 74 28 29 7d 7d 3b 72 2e 6c 69 67 68 74 6e 69 6e 67 6a 73 2e 70 72 6f 76 69 64 65 Data Ascii: 5addefined");else{g.provided=!0;var h=(g._.s\|\|[]).slice();var p={0:l};var q=[];var v={};var u=!1;h&&h[0]&&(p[h[0][1]]=l);l._load=function(){u=!0;for(var a=q.shift();a;)f(a),a=q.shift()};g._.s={push:function(a){h.push(a);t()}};t()}};r.lightningjs.provide
2023-05-31 14:52:31 UTC	582	IN	Data Raw: 66 66 32 0d 0a 6f 6e 3a 66 2c 6c 61 62 65 6c 3a 64 2c 76 61 6c 75 65 3a 62 2c 6e 6f 6e 49 6e 74 65 72 61 63 74 69 6f 6e 3a 63 7d 29 7d 2c 0a 6f 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 66 2c 64 2c 62 29 7b 76 61 72 20 63 3d 6e 75 6c 6c 3b 62 2e 61 64 6f 62 65 26 26 62 2e 61 64 6f 62 65 2e 41 70 70 4d 65 61 73 75 72 65 3f 63 3d 62 2e 61 64 6f 62 65 2e 41 70 70 4d 65 61 73 75 72 65 28 29 3a 65 2e 73 5f 67 69 26 26 28 65 2e 73 5f 61 63 63 6f 75 6e 74 7c 7c 65 2e 73 26 26 65 2e 73 2e 61 63 63 6f 75 6e 74 29 26 26 28 63 3d 65 2e 73 5f 67 69 28 65 2e 73 5f 61 63 63 6f 75 6e 74 7c 7c 65 2e 73 26 26 65 2e 73 2e 61 63 63 6f 75 6e 74 29 29 3b 76 61 72 20 67 3d 5b 5d 3b 69 66 28 63 26 26 63 2e 74 6c 29 7b 76 61 72 20 68 3d 21 31 3b 61 2e 65 26 26 28 63 2e 6c 69 6e 6b Data Ascii: ff2on:f,label:d,value:b,nonInteraction:c})},ot:function(a,f,d,b){var c=null;b.adobe&&b.adobe.AppMeasure?c=b.adobe.AppMeasure():e.s_gi&&(e.s_account\|\|e.s&&e.s.account)&&(c=e.s_gi(e.s_account\|\|e.s&&e.s.account));var g=[];if(c&&c.tl){var h=!1;a.e&&(c.link
2023-05-31 14:52:31 UTC	586	IN	Data Raw: 62 36 30 0d 0a 7b 76 61 72 20 64 2c 63 3b 62 3d 62 7c 7c 7b 7d 3b 62 2e 5f 6c 61 62 65 6c 3d 62 2e 5f 63 61 6d 70 61 69 67 6e 5f 69 64 3d 65 3b 62 2e 5f 61 63 74 69 6f 6e 3d 66 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 28 64 3d 77 69 6e 64 6f 77 2e 75 73 61 62 69 6c 6c 61 5f 6c 69 76 65 29 3f 6e 75 6c 6c 21 3d 28 63 3d 64 2e 65 76 65 6e 74 73 29 3f 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 63 2e 65 76 65 6e 74 3f 63 2e 65 76 65 6e 74 28 22 63 61 6d 70 61 69 67 6e 22 2c 61 2c 62 29 3a 76 6f 69 64 20 30 3a 76 6f 69 64 20 30 3a 76 6f 69 64 20 30 7d 3b 6e 2e 68 69 74 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 63 29 7b 6e 75 6c 6c 3d 3d 63 26 26 28 63 3d 6e 75 6c 6c 29 3b 62 28 64 2c 22 61 22 29 3b 72 65 74 75 72 6e 20 61 28 22 61 22 2c 63 2c 22 43 Data Ascii: b60{var d,c;b=b\|\|{};b._label=b._campaign_id=e;b._action=f;return null!=(d=window.usabilla_live)?null!=(c=d.events)?"function"===typeof c.event?c.event("campaign",a,b):void 0:void 0:void 0};n.hit=function(d,c){null==c&&(c=null);b(d,"a");return a("a",c,"C
2023-05-31 14:52:31 UTC	589	IN	Data Raw: 35 62 34 0d 0a 7c 7c 30 2c 67 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7c 7c 30 2c 67 2e 62 6f 64 79 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 7c 7c 30 2c 67 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 7c 7c 0a 30 29 3b 69 66 28 22 62 6f 74 74 6f 6d 22 3d 3d 3d 74 68 69 73 2e 70 6f 73 26 26 63 2d 28 61 2b 62 29 3c 3d 74 68 69 73 2e 6d 61 72 67 69 6e 7c 7c 22 74 6f 70 22 3d 3d 3d 74 68 69 73 2e 70 6f 73 26 26 61 3e 3d 74 68 69 73 2e 6d 61 72 67 69 6e 29 72 65 74 75 72 6e 20 74 68 69 73 2e 74 3d 21 30 2c 74 68 69 73 2e 63 61 6c 6c 62 61 63 6b 28 29 2c 74 68 69 73 2e 64 65 73 74 72 6f 79 28 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 67 67 65 72 65 64 3d 66 75 6e Data Ascii: 5b4\|\|0,g.documentElement.offsetHeight\|\|0,g.body.clientHeight\|\|0,g.documentElement.clientHeight\|\|0);if("bottom"===this.pos&&c-(a+b)<=this.margin\|\|"top"===this.pos&&a>=this.margin)return this.t=!0,this.callback(),this.destroy()};b.prototype.triggered=fun
2023-05-31 14:52:32 UTC	591	IN	Data Raw: 35 62 34 0d 0a 62 28 61 2c 62 2c 63 29 7b 74 68 69 73 2e 63 61 6c 6c 62 61 63 6b 3d 63 3b 74 68 69 73 2e 69 64 3d 72 2b 2b 3b 74 68 69 73 2e 6e 61 6d 65 3d 61 2e 6e 61 6d 65 3b 74 68 69 73 2e 5f 74 72 69 67 67 65 72 65 64 3d 21 31 3b 74 68 69 73 2e 6e 61 6d 65 20 69 6e 20 70 7c 7c 28 70 5b 74 68 69 73 2e 6e 61 6d 65 5d 3d 7b 74 72 69 67 67 65 72 65 64 3a 21 31 2c 6c 69 73 74 3a 5b 5d 7d 29 3b 70 5b 74 68 69 73 2e 6e 61 6d 65 5d 2e 74 72 69 67 67 65 72 65 64 26 26 28 74 68 69 73 2e 5f 74 72 69 67 67 65 72 65 64 3d 0a 21 30 29 3b 70 5b 74 68 69 73 2e 6e 61 6d 65 5d 2e 6c 69 73 74 2e 70 75 73 68 28 74 68 69 73 29 7d 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 67 67 65 72 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 74 72 Data Ascii: 5b4b(a,b,c){this.callback=c;this.id=r++;this.name=a.name;this._triggered=!1;this.name in p\|\|(p[this.name]={triggered:!1,list:[]});p[this.name].triggered&&(this._triggered=!0);p[this.name].list.push(this)}b.prototype.triggered=function(){return this._tr
2023-05-31 14:52:32 UTC	592	IN	Data Raw: 35 62 34 0d 0a 61 74 63 68 28 22 74 61 62 6c 65 74 22 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 66 6f 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 74 63 68 28 22 66 69 72 65 66 6f 78 22 29 26 26 74 68 69 73 2e 6d 61 74 63 68 28 22 74 61 62 6c 65 74 22 29 26 26 21 74 68 69 73 2e 6d 61 74 63 68 28 22 61 6e 64 72 6f 69 64 22 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 6f 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 69 6f 73 28 29 7c 7c 74 68 69 73 2e 6d 61 6e 64 28 29 7c 7c 74 68 69 73 2e 6d 77 69 6e 28 29 7c 7c 74 68 69 73 2e 6d 72 69 6d 28 29 7c 7c 74 68 69 73 2e 6d 66 6f 73 28 29 7c 7c 74 68 69 73 2e 6d 6d 65 65 28 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 61 62 3d 0a 66 Data Ascii: 5b4atch("tablet")};b.prototype.tfos=function(){return this.match("firefox")&&this.match("tablet")&&!this.match("android")};b.prototype.mob=function(){return this.mios()\|\|this.mand()\|\|this.mwin()\|\|this.mrim()\|\|this.mfos()\|\|this.mmee()};b.prototype.tab=f
2023-05-31 14:52:32 UTC	594	IN	Data Raw: 35 62 34 0d 0a 68 65 63 6b 56 61 6c 75 65 73 28 29 7d 2c 31 45 33 29 3b 74 68 69 73 2e 63 68 65 63 6b 56 61 6c 75 65 73 28 29 7d 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 68 65 63 6b 73 3d 7b 65 71 75 61 6c 73 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 22 22 2b 61 3d 3d 3d 22 22 2b 62 7d 2c 6e 65 71 75 61 6c 73 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 22 22 2b 61 21 3d 3d 22 22 2b 62 7d 2c 63 6f 6e 74 61 69 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 28 6e 65 77 20 52 65 67 45 78 70 28 62 2c 22 69 22 29 29 2e 74 65 73 74 28 61 29 7d 2c 6e 63 6f 6e 74 61 69 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 21 28 6e 65 77 20 52 65 67 45 78 70 28 62 2c 22 69 22 29 29 2e 74 65 Data Ascii: 5b4heckValues()},1E3);this.checkValues()}b.prototype.checks={equals:function(a,b){return""+a===""+b},nequals:function(a,b){return""+a!==""+b},contains:function(a,b){return(new RegExp(b,"i")).test(a)},ncontains:function(a,b){return!(new RegExp(b,"i")).te
2023-05-31 14:52:32 UTC	595	IN	Data Raw: 31 31 31 35 0d 0a 20 70 29 7b 69 66 28 21 70 5b 62 5d 2e 74 72 69 67 67 65 72 65 64 29 7b 76 61 72 20 64 3d 70 5b 62 5d 2e 6c 69 73 74 3b 76 61 72 20 63 3d 30 3b 66 6f 72 28 61 3d 64 2e 6c 65 6e 67 74 68 3b 63 3c 61 3b 63 2b 2b 29 7b 76 61 72 20 66 3d 64 5b 63 5d 3b 66 2e 74 72 69 67 67 65 72 28 29 7d 7d 72 65 74 75 72 6e 20 70 5b 62 5d 2e 74 72 69 67 67 65 72 65 64 3d 21 30 7d 72 65 74 75 72 6e 20 70 5b 62 5d 3d 7b 74 72 69 67 67 65 72 65 64 3a 21 30 2c 6c 69 73 74 3a 5b 5d 7d 7d 3b 76 61 72 20 79 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 2c 64 29 7b 76 61 72 20 63 3b 76 61 72 20 66 3d 5b 22 2d 77 65 62 6b 69 74 2d 22 2c 22 2d 6d 6f 7a 2d 22 2c 22 2d 6f 2d 22 2c 22 2d 6d 73 2d 22 5d 3b 76 61 72 20 65 3d 30 3b 66 6f 72 28 63 3d 66 2e 6c 65 6e 67 74 68 3b 65 Data Ascii: 1115 p){if(!p[b].triggered){var d=p[b].list;var c=0;for(a=d.length;c<a;c++){var f=d[c];f.trigger()}}return p[b].triggered=!0}return p[b]={triggered:!0,list:[]}};var y=function(b,a,d){var c;var f=["-webkit-","-moz-","-o-","-ms-"];var e=0;for(c=f.length;e
2023-05-31 14:52:32 UTC	599	IN	Data Raw: 35 61 63 0d 0a 22 3a 31 30 30 30 7d 2c 7b 22 74 79 70 65 22 3a 22 73 63 72 6f 6c 6c 22 2c 22 6d 61 72 67 69 6e 22 3a 33 30 30 2c 22 70 6f 73 22 3a 22 62 6f 74 74 6f 6d 22 7d 2c 7b 22 74 79 70 65 22 3a 22 75 72 6c 22 2c 22 6d 61 74 63 68 22 3a 22 68 72 65 66 22 2c 22 71 75 65 72 79 22 3a 66 61 6c 73 65 2c 22 69 6e 76 65 72 74 22 3a 66 61 6c 73 65 2c 22 72 65 67 65 78 70 22 3a 22 28 5e 64 65 76 62 6c 6f 67 73 5c 5c 2e 6d 69 63 72 6f 73 6f 66 74 5c 5c 2e 63 6f 6d 5c 2f 29 22 7d 5d 2c 22 72 22 3a 33 30 2c 22 65 22 3a 66 61 6c 73 65 7d 2c 22 34 32 31 38 33 34 62 35 65 32 65 63 22 3a 7b 22 76 22 3a 31 2c 22 61 22 3a 66 61 6c 73 65 2c 22 74 22 3a 5b 7b 22 74 79 70 65 22 3a 22 64 65 6c 61 79 22 2c 22 74 69 6d 65 22 3a 35 30 30 30 2c 22 6d 75 6c 74 69 70 6c 69 65 Data Ascii: 5ac":1000},{"type":"scroll","margin":300,"pos":"bottom"},{"type":"url","match":"href","query":false,"invert":false,"regexp":"(^devblogs\\.microsoft\\.com\/)"}],"r":30,"e":false},"421834b5e2ec":{"v":1,"a":false,"t":[{"type":"delay","time":5000,"multiplie
2023-05-31 14:52:32 UTC	601	IN	Data Raw: 31 63 38 34 0d 0a 61 38 38 31 34 37 36 30 22 3a 7b 22 76 22 3a 33 2c 22 61 22 3a 66 61 6c 73 65 2c 22 74 22 3a 5b 7b 22 74 79 70 65 22 3a 22 64 65 6c 61 79 22 2c 22 74 69 6d 65 22 3a 31 35 30 30 30 2c 22 6d 75 6c 74 69 70 6c 69 65 72 22 3a 31 30 30 30 7d 2c 7b 22 74 79 70 65 22 3a 22 75 72 6c 22 2c 22 6d 61 74 63 68 22 3a 22 70 61 74 68 6e 61 6d 65 22 2c 22 71 75 65 72 79 22 3a 66 61 6c 73 65 2c 22 69 6e 76 65 72 74 22 3a 66 61 6c 73 65 2c 22 72 65 67 65 78 70 22 3a 22 28 5c 2f 76 73 5c 2f 24 29 22 7d 2c 7b 22 74 79 70 65 22 3a 22 64 65 76 69 63 65 22 2c 22 74 65 73 74 73 22 3a 5b 22 64 65 73 6b 22 5d 7d 5d 2c 22 65 22 3a 66 61 6c 73 65 7d 2c 22 66 38 62 62 31 31 36 65 38 31 37 35 22 3a 7b 22 76 22 3a 31 34 2c 22 61 22 3a 66 61 6c 73 65 2c 22 74 22 3a 5b Data Ascii: 1c84a8814760":{"v":3,"a":false,"t":[{"type":"delay","time":15000,"multiplier":1000},{"type":"url","match":"pathname","query":false,"invert":false,"regexp":"(\/vs\/$)"},{"type":"device","tests":["desk"]}],"e":false},"f8bb116e8175":{"v":14,"a":false,"t":[
2023-05-31 14:52:32 UTC	608	IN	Data Raw: 31 31 31 35 0d 0a 5c 2e 63 6f 6d 5c 2f 24 29 22 7d 2c 7b 22 74 79 70 65 22 3a 22 75 72 6c 22 2c 22 6d 61 74 63 68 22 3a 22 68 72 65 66 22 2c 22 71 75 65 72 79 22 3a 74 72 75 65 2c 22 69 6e 76 65 72 74 22 3a 66 61 6c 73 65 2c 22 72 65 67 65 78 70 22 3a 22 28 5e 68 74 74 70 73 5c 5c 3a 5c 2f 5c 2f 76 69 73 75 61 6c 73 74 75 64 69 6f 5c 5c 2e 6d 69 63 72 6f 73 6f 66 74 5c 5c 2e 63 6f 6d 24 29 22 7d 5d 2c 22 65 22 3a 66 61 6c 73 65 7d 2c 22 37 65 66 66 30 65 31 35 38 65 31 34 22 3a 7b 22 76 22 3a 34 2c 22 61 22 3a 66 61 6c 73 65 2c 22 74 22 3a 5b 7b 22 74 79 70 65 22 3a 22 64 65 6c 61 79 22 2c 22 74 69 6d 65 22 3a 36 30 30 30 30 2c 22 6d 75 6c 74 69 70 6c 69 65 72 22 3a 36 30 30 30 30 7d 2c 7b 22 74 79 70 65 22 3a 22 75 72 6c 22 2c 22 6d 61 74 63 68 22 3a 22 Data Ascii: 1115\.com\/$)"},{"type":"url","match":"href","query":true,"invert":false,"regexp":"(^https\\:\/\/visualstudio\\.microsoft\\.com$)"}],"e":false},"7eff0e158e14":{"v":4,"a":false,"t":[{"type":"delay","time":60000,"multiplier":60000},{"type":"url","match":"
2023-05-31 14:52:32 UTC	612	IN	Data Raw: 62 36 30 0d 0a 6f 6e 3d 6e 75 6c 6c 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 63 68 61 6e 63 65 48 69 74 3d 6e 75 6c 6c 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 61 64 43 61 6d 70 61 69 67 6e 3d 6e 75 6c 6c 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 70 61 67 65 56 69 73 69 74 43 6f 75 6e 74 3d 6e 75 6c 6c 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 72 65 73 65 74 49 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 65 78 70 69 72 61 74 69 6f 6e 3d 6e 75 6c 6c 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 73 61 76 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 74 68 69 73 2e 74 65 73 74 69 6e 67 29 7b 76 61 72 20 61 3d 5b 5d 3b 61 2e 70 75 73 68 28 48 28 74 68 69 73 2e 5f 63 6c 69 63 6b 65 64 29 29 3b 61 2e 70 75 73 68 28 74 68 69 Data Ascii: b60on=null;b.prototype._chanceHit=null;b.prototype._adCampaign=null;b.prototype._pageVisitCount=null;b.prototype._resetInterval=null;b.prototype._expiration=null;b.prototype.save=function(){if(!this.testing){var a=[];a.push(H(this._clicked));a.push(thi
2023-05-31 14:52:32 UTC	615	IN	Data Raw: 31 63 37 36 0d 0a 72 65 74 75 72 6e 20 61 2e 66 69 72 73 74 54 69 6d 65 3d 21 31 2c 61 2e 61 63 74 69 76 61 74 65 28 29 7d 65 6c 73 65 20 72 65 74 75 72 6e 20 61 2e 65 66 66 65 63 74 2e 73 74 6f 70 28 29 7d 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 73 68 6f 75 6c 64 41 63 74 69 76 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 30 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 61 63 74 69 76 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 73 75 63 63 65 73 73 3d 0a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 66 61 69 6c 75 72 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 66 65 65 64 62 61 63 6b 43 6c 69 63 6b 65 64 3d 66 75 6e 63 74 69 Data Ascii: 1c76return a.firstTime=!1,a.activate()}else return a.effect.stop()})};b.prototype.shouldActivate=function(){return!0};b.prototype.activate=function(){};b.prototype.success=function(){};b.prototype.failure=function(){};b.prototype.feedbackClicked=functi
2023-05-31 14:52:32 UTC	622	IN	Data Raw: 35 62 34 0d 0a 74 3b 7d 22 5d 2e 6a 6f 69 6e 28 22 22 29 3b 0a 30 3c 6c 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 68 65 61 64 22 29 2e 6c 65 6e 67 74 68 26 26 28 61 3d 77 69 6e 64 6f 77 2e 63 72 65 61 74 65 53 74 79 6c 65 45 6c 65 6d 65 6e 74 28 7b 74 79 70 65 3a 22 74 65 78 74 2f 63 73 73 22 2c 6e 6f 6e 63 65 3a 61 7d 2c 6d 29 2c 6c 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 68 65 61 64 22 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 29 3b 61 3d 6c 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 61 2e 73 72 63 3d 2f 4d 53 49 45 5b 20 5d 2b 36 2f 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 3f 22 6a 61 76 61 73 63 72 69 70 74 3a 66 Data Ascii: 5b4t;}"].join("");0<l.getElementsByTagName("head").length&&(a=window.createStyleElement({type:"text/css",nonce:a},m),l.getElementsByTagName("head")[0].appendChild(a));a=l.createElement("iframe");a.src=/MSIE[ ]+6/.test(navigator.userAgent)?"javascript:f
2023-05-31 14:52:32 UTC	623	IN	Data Raw: 31 30 66 64 0d 0a 2e 73 74 79 6c 65 2e 62 6f 74 74 6f 6d 3d 30 3b 62 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 23 35 35 35 22 3b 62 2e 73 74 79 6c 65 2e 6f 70 61 63 69 74 79 3d 22 30 2e 38 22 3b 62 2e 73 74 79 6c 65 2e 66 69 6c 74 65 72 3d 22 61 6c 70 68 61 28 6f 70 61 63 69 74 79 3d 38 30 29 22 3b 65 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 3b 76 61 72 20 64 3d 65 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 64 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 61 62 73 6f 6c 75 74 65 22 3b 64 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 35 30 25 22 3b 64 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 35 30 25 22 3b 64 2e 73 74 79 6c 65 2e 6d 61 72 67 69 6e 3d 22 2d 33 32 70 78 20 30 20 30 20 2d 33 32 70 78 22 3b 64 Data Ascii: 10fd.style.bottom=0;b.style.background="#555";b.style.opacity="0.8";b.style.filter="alpha(opacity=80)";e.body.appendChild(b);var d=e.createElement("div");d.style.position="absolute";d.style.left="50%";d.style.top="50%";d.style.margin="-32px 0 0 -32px";d
2023-05-31 14:52:32 UTC	628	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	kBytes transferred	Direction	Data
2023-05-31 14:52:33 UTC	628	OUT	GET /themes/prod/79c4587260504799a892b837b8edf476 HTTP/1.1 Host: d6tizftlrpuof.cloudfront.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://visualstudio.microsoft.com/visual-cpp-build-tools/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-05-31 14:52:33 UTC	628	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 2704 Connection: close Date: Wed, 31 May 2023 14:52:34 GMT Last-Modified: Fri, 05 Jul 2019 11:32:24 GMT ETag: "19cce30ec620c62a0c8f48314f973299" Cache-Control: max-age=315360000, no-transform, public Content-Encoding: gzip x-amz-version-id: aQcUcu02ZGRvndZ_fVDK_uk874MLij9f Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 c3f546c2f6132a41e608317139aa8faa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P1 X-Amz-Cf-Id: kRqtSK4GVSU62JT6H7t3N1rqet404R0HqjXlkjbDg_0ODDDiWqZMBQ==
2023-05-31 14:52:33 UTC	629	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 01 79 0a 86 f5 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 82 08 06 00 00 00 34 79 8a e5 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 0a 33 49 44 41 54 78 01 ed 5b 09 70 95 d5 15 3e d9 13 12 b2 93 9d 40 76 08 21 61 0d 24 61 09 12 90 d8 c1 31 1d ad 6b ab 32 a2 65 94 82 05 2d 55 9c 8a 32 5a b1 43 41 71 19 2d 62 e9 62 3b 42 5b 28 16 a5 ac 09 51 2c 1a 0c 01 52 c8 42 c2 92 90 85 18 f2 c8 46 16 7a ce cd fb 93 97 7f 7b ef 7a ff 44 a6 f3 9f 19 78 ef bf f7 fe f7 7c 39 f7 9e e5 9e 7b 9e d3 4d 24 b8 85 c9 95 b0 39 3d ba f3 96 85 e8 7c cb 22 b3 02 33 01 8a ae 90 29 41 53 82 a2 12 10 7d df dc 83 a6 04 45 25 20 fa be b9 07 4d 09 8a 4a 40 f4 fd 61 dd 83 51 01 5e dc 78 85 01 fa 79 b9 42 a8 af 87 5d c6 49 61 3e 50 f8 Data Ascii: yPNGIHDR(4ysRGB3IDATx[p>@v!a$a1k2e-U2ZCAq-bb;B[(Q,RBFz{zDx\|9{M$9=\|"3)AS}E% MJ@aQ^xyB]Ia>P

Timestamp	kBytes transferred	Direction	Data
2023-05-31 14:52:34 UTC	632	OUT	GET /scripts/me/MeControl/10.23082.2/en-US/meBoot.min.js HTTP/1.1 Host: mem.gfx.ms Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://visualstudio.microsoft.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://visualstudio.microsoft.com/visual-cpp-build-tools/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-05-31 14:52:34 UTC	632	IN	HTTP/1.1 200 OK Content-Length: 181223 Content-Type: application/javascript Last-Modified: Tue, 16 May 2023 22:42:02 GMT ETag: "1d988824e0372e7" X-Cache: TCP_HIT X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * X-UA-Compatible: IE=edge Strict-Transport-Security: max-age=31536000; includeSubDomains X-Azure-Ref-OriginShield: 0wzB3ZAAAAABwVJETQalOR6wCrGTqy5tBRlJBMjMxMDUwNDE4MDE5AGVhYzVmNDlmLWUwMmQtNGY0MS1iMGE2LTJkNTBmOWZjZjg0YQ== X-Azure-Ref: 0Ml93ZAAAAAC6oBnG475LSpmrPddrPQtpRlJBMzFFREdFMDQxNwBlYWM1ZjQ5Zi1lMDJkLTRmNDEtYjBhNi0yZDUwZjlmY2Y4NGE= Date: Wed, 31 May 2023 14:52:34 GMT Connection: close
2023-05-31 14:52:34 UTC	633	IN	Data Raw: 4d 65 43 6f 6e 74 72 6f 6c 44 65 66 69 6e 65 28 22 6d 65 42 6f 6f 74 22 2c 5b 22 65 78 70 6f 72 74 73 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 69 6e 6c 69 6e 65 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 53 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 69 3d 7b 7d 2c 75 3d 5b 5d 2c 70 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 4f 28 74 2c 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 2c 69 2c 61 3d 70 3b 66 6f 72 28 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 32 3c 69 2d 2d 3b 29 75 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 5b 69 5d 29 3b 66 6f 72 28 65 26 26 6e 75 6c 6c 21 3d 65 2e 63 68 69 6c 64 72 65 6e 26 26 28 75 2e 6c 65 6e 67 74 68 7c 7c 75 2e 70 75 73 68 28 65 2e 63 68 69 6c 64 Data Ascii: MeControlDefine("meBoot",["exports","@mecontrol/web-inline"],function(t,S){"use strict";var c=function(){},i={},u=[],p=[];function O(t,e){var r,n,o,i,a=p;for(i=arguments.length;2<i--;)u.push(arguments[i]);for(e&&null!=e.children&&(u.length\|\|u.push(e.child
2023-05-31 14:52:34 UTC	648	IN	Data Raw: 61 79 28 74 29 2c 72 3d 30 3b 72 3c 74 3b 72 2b 2b 29 65 5b 72 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3b 72 65 74 75 72 6e 20 30 3d 3d 3d 65 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 7d 3a 31 3d 3d 3d 65 2e 6c 65 6e 67 74 68 3f 65 5b 30 5d 3a 65 2e 72 65 64 75 63 65 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 28 65 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 61 72 67 75 6d 65 6e 74 73 29 29 7d 7d 29 7d 76 61 72 20 74 74 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 3b 66 75 6e 63 74 69 6f 6e 20 65 74 28 74 29 7b 76 61 72 20 65 2c 72 2c 6e 2c 6f 3d 22 22 2c 69 3d 74 79 70 65 6f 66 20 74 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 69 7c 7c 22 Data Ascii: ay(t),r=0;r<t;r++)e[r]=arguments[r];return 0===e.length?function(t){return t}:1===e.length?e[0]:e.reduce(function(t,e){return function(){return t(e.apply(void 0,arguments))}})}var tt=Array.isArray;function et(t){var e,r,n,o="",i=typeof t;if("string"==i\|\|"
2023-05-31 14:52:34 UTC	664	IN	Data Raw: 65 22 73 74 72 69 6e 67 22 3a 72 65 74 75 72 6e 22 22 3d 3d 3d 74 7c 7c 21 77 65 2e 74 65 73 74 28 74 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 4f 65 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 31 3b 72 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 65 5b 72 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 6f 3d 65 3b 6e 3c 6f 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 6f 5b 6e 5d 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 69 29 69 66 28 53 2e 68 61 73 4f 77 6e 28 69 2c 61 29 29 7b 76 61 72 20 73 3d 69 5b 61 5d 3b 6e 75 6c 6c 3d 3d 73 7c 7c 53 65 28 73 29 7c 7c 28 74 5b 61 5d 3d 73 29 7d 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 Data Ascii: e"string":return""===t\|\|!we.test(t);default:return!1}}function Oe(t){for(var e=[],r=1;r<arguments.length;r++)e[r-1]=arguments[r];for(var n=0,o=e;n<o.length;n++){var i=o[n];for(var a in i)if(S.hasOwn(i,a)){var s=i[a];null==s\|\|Se(s)\|\|(t[a]=s)}}return t}func
2023-05-31 14:52:34 UTC	680	IN	Data Raw: 74 68 69 73 2e 70 72 6f 70 73 2c 72 3d 65 2e 63 73 73 43 6c 61 73 73 2c 6e 3d 65 2e 63 68 69 6c 64 72 65 6e 2c 6f 3d 74 68 69 73 2e 73 74 61 74 65 2e 61 63 74 69 76 61 74 65 64 3b 72 65 74 75 72 6e 20 4f 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 3a 65 74 28 5b 72 2c 28 74 3d 7b 7d 2c 74 2e 6d 65 63 74 72 6c 5f 66 6f 63 75 73 5f 76 69 73 69 62 6c 65 3d 6f 2c 74 29 5d 29 7d 2c 6e 29 7d 2c 66 72 29 3b 66 75 6e 63 74 69 6f 6e 20 66 72 28 74 29 7b 76 61 72 20 65 3d 75 72 2e 63 61 6c 6c 28 74 68 69 73 2c 74 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 65 2e 73 74 61 74 65 3d 7b 61 63 74 69 76 61 74 65 64 3a 21 21 74 2e 76 69 73 69 62 6c 65 4f 6e 53 74 61 72 74 7d 2c 65 2e 68 61 73 52 65 63 65 6e 74 4b 65 79 62 6f 61 72 64 41 63 74 69 6f 6e 3d 21 31 2c 65 2e 6b 65 Data Ascii: this.props,r=e.cssClass,n=e.children,o=this.state.activated;return O("div",{class:et([r,(t={},t.mectrl_focus_visible=o,t)])},n)},fr);function fr(t){var e=ur.call(this,t)\|\|this;return e.state={activated:!!t.visibleOnStart},e.hasRecentKeyboardAction=!1,e.ke
2023-05-31 14:52:34 UTC	696	IN	Data Raw: 74 55 72 6c 29 3b 63 61 73 65 22 73 69 67 6e 4f 75 74 46 72 6f 6d 49 64 70 22 3a 72 65 74 75 72 6e 21 31 3b 63 61 73 65 22 73 69 67 6e 4f 75 74 41 6e 64 46 6f 72 67 65 74 46 72 6f 6d 49 64 70 22 3a 72 65 74 75 72 6e 20 78 74 28 6e 75 6c 6c 3d 3d 3d 28 72 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 6d 73 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 73 69 67 6e 4f 75 74 41 6e 64 46 6f 72 67 65 74 55 72 6c 29 3b 63 61 73 65 22 73 77 69 74 63 68 22 3a 72 65 74 75 72 6e 20 78 74 28 74 68 69 73 2e 63 6f 6e 66 69 67 2e 61 70 70 53 77 69 74 63 68 55 72 6c 29 3b 63 61 73 65 22 73 77 69 74 63 68 54 6f 22 3a 72 65 74 75 72 6e 20 78 74 28 74 68 69 73 2e 63 6f 6e 66 69 67 2e 61 70 70 53 77 69 74 63 68 54 6f 55 72 6c 29 3b 63 61 73 65 22 67 65 74 Data Ascii: tUrl);case"signOutFromIdp":return!1;case"signOutAndForgetFromIdp":return xt(null===(r=this.config.msa)\|\|void 0===r?void 0:r.signOutAndForgetUrl);case"switch":return xt(this.config.appSwitchUrl);case"switchTo":return xt(this.config.appSwitchToUrl);case"get
2023-05-31 14:52:34 UTC	712	IN	Data Raw: 6f 6e 20 67 6e 28 74 29 7b 72 65 74 75 72 6e 21 21 74 26 26 2d 31 3c 6d 74 28 74 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 6c 6f 67 69 6e 2e 6c 69 76 65 2e 63 6f 6d 22 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 79 6e 28 74 29 7d 76 61 72 20 79 6e 3d 28 76 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 73 75 70 70 6f 72 74 73 4d 73 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 6d 73 61 6c 4a 73 57 69 74 68 4d 73 61 22 3d 3d 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 74 79 70 65 7d 2c 76 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 4f 70 65 72 61 74 69 6f 6e 53 75 70 70 6f 72 74 65 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 3b 73 77 69 74 63 68 28 74 29 7b Data Ascii: on gn(t){return!!t&&-1<mt(t).toLowerCase().indexOf("login.live.com")}function mn(t){return new yn(t)}var yn=(vn.prototype.supportsMsa=function(){return"msalJsWithMsa"===this.config.type},vn.prototype.isOperationSupported=function(t,e){var r,n,o;switch(t){
2023-05-31 14:52:34 UTC	728	IN	Data Raw: 6f 61 64 2e 63 61 63 68 65 64 44 61 74 61 2c 6c 3d 74 2c 66 3d 30 3b 66 3c 64 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 7b 69 66 28 79 3d 6c 5b 6e 75 6c 6c 21 3d 28 6f 3d 64 5b 66 5d 2e 61 63 63 6f 75 6e 74 49 64 29 3f 6f 3a 64 5b 66 5d 2e 70 61 79 6c 6f 61 64 2e 6b 65 79 5d 29 7b 76 61 72 20 68 3d 64 5b 66 5d 2e 70 61 79 6c 6f 61 64 3b 79 2e 70 69 63 74 75 72 65 55 72 6c 3d 6e 75 6c 6c 21 3d 28 69 3d 79 2e 70 69 63 74 75 72 65 55 72 6c 29 3f 69 3a 68 2e 72 65 73 6f 75 72 63 65 2c 79 2e 63 61 63 68 65 4d 65 74 61 3f 79 2e 63 61 63 68 65 4d 65 74 61 2e 70 69 63 74 75 72 65 55 72 6c 3d 68 2e 72 65 73 6f 75 72 63 65 45 54 61 67 3a 79 2e 63 61 63 68 65 4d 65 74 61 3d 28 28 72 3d 7b 7d 29 2e 70 69 63 74 75 72 65 55 72 6c 3d 68 2e 72 65 73 6f 75 72 63 65 45 54 61 67 Data Ascii: oad.cachedData,l=t,f=0;f<d.length;f++){if(y=l[null!=(o=d[f].accountId)?o:d[f].payload.key]){var h=d[f].payload;y.pictureUrl=null!=(i=y.pictureUrl)?i:h.resource,y.cacheMeta?y.cacheMeta.pictureUrl=h.resourceETag:y.cacheMeta=((r={}).pictureUrl=h.resourceETag
2023-05-31 14:52:34 UTC	744	IN	Data Raw: 61 6e 74 5c 78 33 62 6f 75 74 6c 69 6e 65 2d 77 69 64 74 68 5c 78 33 61 32 70 78 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 5c 78 33 61 2d 32 70 78 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 37 64 2e 6d 65 63 74 72 6c 5f 67 6c 79 70 68 5c 78 37 62 6f 76 65 72 66 6c 6f 77 5c 78 33 61 68 69 64 64 65 6e 5c 78 33 62 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 5c 78 33 61 63 6f 76 65 72 5c 78 33 62 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 5c 78 33 61 63 65 6e 74 65 72 20 63 65 6e 74 65 72 5c 78 33 62 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 5c 78 33 61 6e 6f 2d 72 65 70 65 61 74 5c 78 37 64 2e 67 6c 79 70 68 5f 6d 6f 72 65 5c 78 37 62 77 69 64 74 68 5c 78 33 61 32 34 70 78 5c 78 33 Data Ascii: ant\x3boutline-width\x3a2px\x21important\x3boutline-offset\x3a-2px\x21important\x7d.mectrl_glyph\x7boverflow\x3ahidden\x3bbackground-size\x3acover\x3bbackground-position\x3acenter center\x3bbackground-repeat\x3ano-repeat\x7d.glyph_more\x7bwidth\x3a24px\x3
2023-05-31 14:52:34 UTC	760	IN	Data Raw: 39 20 31 34 68 32 2e 34 33 6c 35 2e 35 38 20 31 31 2e 32 35 61 31 2e 30 34 36 20 31 2e 30 34 36 20 30 20 30 31 2d 31 2e 37 39 31 20 31 2e 30 38 6c 2d 2e 35 34 39 2d 31 2e 30 38 7a 5c 78 32 37 5c 78 32 66 5c 78 32 35 33 45 5c 78 32 35 33 43 5c 78 32 66 67 5c 78 32 35 33 45 5c 78 32 35 33 43 5c 78 32 66 73 76 67 5c 78 32 35 33 45 5c 78 32 32 5c 78 32 39 5c 78 37 64 2e 63 2d 75 68 66 68 5c 78 33 65 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 2d 6d 65 20 2e 67 6c 79 70 68 5f 61 63 63 6f 75 6e 74 5f 63 69 72 63 6c 65 2c 2e 6d 65 63 74 72 6c 5f 74 68 65 6d 65 5f 61 7a 75 72 65 5f 68 63 64 61 72 6b 20 2e 67 6c 79 70 68 5f 61 63 63 6f 75 6e 74 5f 63 69 72 63 6c 65 2c 2e 6d 65 63 74 72 6c 5f 74 68 65 6d 65 5f 64 61 72 6b 20 2e 67 6c 79 70 68 5f 61 63 63 6f 75 6e 74 Data Ascii: 9 14h2.43l5.58 11.25a1.046 1.046 0 01-1.791 1.08l-.549-1.08z\x27\x2f\x253E\x253C\x2fg\x253E\x253C\x2fsvg\x253E\x22\x29\x7d.c-uhfh\x3e.theme-dark .c-me .glyph_account_circle,.mectrl_theme_azure_hcdark .glyph_account_circle,.mectrl_theme_dark .glyph_account
2023-05-31 14:52:34 UTC	776	IN	Data Raw: 34 68 2d 32 2e 33 32 39 56 38 2e 35 30 37 68 32 2e 33 32 39 7a 6d 37 2e 30 36 34 2d 31 2e 36 39 34 61 33 2e 32 32 35 20 33 2e 32 32 35 20 30 20 30 30 31 2e 31 34 35 2d 2e 32 34 20 34 2e 38 30 38 20 34 2e 38 30 38 20 30 20 30 30 31 2e 31 35 35 2d 2e 36 33 36 56 31 38 61 34 2e 36 35 39 20 34 2e 36 35 39 20 30 20 30 31 2d 31 2e 32 36 36 2e 34 38 31 20 36 2e 39 20 36 2e 39 20 30 20 30 31 2d 31 2e 35 35 34 2e 31 36 33 20 34 2e 37 30 37 20 34 2e 37 30 37 20 30 20 30 31 2d 34 2e 39 31 38 2d 34 2e 39 30 37 20 35 2e 36 34 34 20 35 2e 36 34 34 20 30 20 30 31 31 2e 34 2d 33 2e 39 33 32 20 35 2e 30 35 34 20 35 2e 30 35 34 20 30 20 30 31 33 2e 39 35 35 2d 31 2e 35 34 35 20 35 2e 34 32 20 35 2e 34 32 20 30 20 30 31 31 2e 33 32 34 2e 31 36 39 20 34 2e 34 20 34 2e 34 20 Data Ascii: 4h-2.329V8.507h2.329zm7.064-1.694a3.225 3.225 0 001.145-.24 4.808 4.808 0 001.155-.636V18a4.659 4.659 0 01-1.266.481 6.9 6.9 0 01-1.554.163 4.707 4.707 0 01-4.918-4.907 5.644 5.644 0 011.4-3.932 5.054 5.054 0 013.955-1.545 5.42 5.42 0 011.324.169 4.4 4.4
2023-05-31 14:52:34 UTC	792	IN	Data Raw: 64 5c 78 33 64 5c 78 32 37 4d 36 20 35 61 31 38 2e 34 35 34 20 31 38 2e 34 35 34 20 30 20 30 31 36 20 31 76 31 63 30 20 2e 39 38 34 2d 2e 31 34 33 20 31 2e 39 33 35 2d 2e 34 33 20 32 2e 38 35 32 2d 2e 32 38 36 2e 39 31 36 2d 2e 36 39 20 31 2e 37 36 38 2d 31 2e 32 31 20 32 2e 35 35 34 41 39 2e 37 32 35 20 39 2e 37 32 35 20 30 20 30 31 36 20 31 36 61 39 2e 35 39 35 20 39 2e 35 39 35 20 30 20 30 31 2d 32 2e 34 36 2d 31 2e 34 38 34 20 39 2e 36 35 20 39 2e 36 35 20 30 20 30 31 2d 31 2e 38 39 32 2d 32 2e 31 30 32 41 31 30 2e 32 34 35 20 31 30 2e 32 34 35 20 30 20 30 31 2e 34 33 20 39 2e 38 36 37 20 39 2e 31 31 33 20 39 2e 31 31 33 20 30 20 30 31 30 20 37 2e 30 32 33 63 30 2d 2e 30 36 37 2e 30 30 35 2d 2e 31 34 35 2e 30 31 36 2d 2e 32 33 34 6c 2e 30 33 2d 2e 32 Data Ascii: d\x3d\x27M6 5a18.454 18.454 0 016 1v1c0 .984-.143 1.935-.43 2.852-.286.916-.69 1.768-1.21 2.554A9.725 9.725 0 016 16a9.595 9.595 0 01-2.46-1.484 9.65 9.65 0 01-1.892-2.102A10.245 10.245 0 01.43 9.867 9.113 9.113 0 010 7.023c0-.067.005-.145.016-.234l.03-.2
2023-05-31 14:52:34 UTC	808	IN	Data Raw: 63 74 72 6c 5f 74 68 65 6d 65 5f 64 61 72 6b 20 2e 6d 65 63 74 72 6c 5f 61 75 74 68 41 70 70 5f 63 6c 6f 73 65 5c 78 33 61 68 6f 76 65 72 5c 78 37 62 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 30 30 35 62 61 31 5c 78 37 64 2e 63 2d 75 68 66 68 5c 78 33 65 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 2d 6d 65 20 2e 6d 65 63 74 72 6c 5f 61 75 74 68 41 70 70 5f 62 61 6e 6e 65 72 5c 78 33 61 66 6f 63 75 73 2c 2e 63 2d 75 68 66 68 5c 78 33 65 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 2d 6d 65 20 2e 6d 65 63 74 72 6c 5f 61 75 74 68 41 70 70 5f 62 61 6e 6e 65 72 5f 70 61 72 65 6e 74 5c 78 33 61 66 6f 63 75 73 2c 2e 63 2d 75 68 66 68 5c 78 33 65 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 2d 6d 65 20 2e 6d 65 63 74 72 6c 5f 61 75 74 68 41 Data Ascii: ctrl_theme_dark .mectrl_authApp_close\x3ahover\x7bbackground-color\x3a\x23005ba1\x7d.c-uhfh\x3e.theme-dark .c-me .mectrl_authApp_banner\x3afocus,.c-uhfh\x3e.theme-dark .c-me .mectrl_authApp_banner_parent\x3afocus,.c-uhfh\x3e.theme-dark .c-me .mectrl_authA

Target ID:	0
Start time:	16:52:10
Start date:	31/05/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Imagebase:	0x7ff7d31b0000
File size:	2851656 bytes
MD5 hash:	0FEC2748F363150DC54C1CAFFB1A9408
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Target ID:	1
Start time:	16:52:11
Start date:	31/05/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1880 --field-trial-handle=1756,i,10750135827697059561,10689653260712311203,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7d31b0000
File size:	2851656 bytes
MD5 hash:	0FEC2748F363150DC54C1CAFFB1A9408
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Target ID:	2
Start time:	16:52:13
Start date:	31/05/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" "https://visualstudio.microsoft.com/visual-cpp-build-tools/
Imagebase:	0x7ff7d31b0000
File size:	2851656 bytes
MD5 hash:	0FEC2748F363150DC54C1CAFFB1A9408
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Network device logs, Network intrusion detection system, Packet capture, Process use of network, SSL/TLS inspection, Web proxy
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre