Edit tour

Windows Analysis Report
https://www.bankmenia.org/nam/637d506f-142f-4107-9bcc-a59b77f4bd0e/12944f91-d9a9-47ba-b0e0-0852caa7c9eb/e4cc60f1-b3fe-4c79-b712-f90205d752c4/landing?id=aTVrMDg1UW84OU85Y3Z3YUtZSTFJWUtCbWZ6a2FzT1BUSDUyRUZVNTB4LzRMczdKYi9DQUxtYVk2eXdOaW82eWN4a1VCRzRUQ1U4MHd6UmN2RVZGdHNKdGxGbU1kUG54MDBCR245Q1Y5eG5NNzBT

Overview

General Information

Sample URL:	https://www.bankmenia.org/nam/637d506f-142f-4107-9bcc-a59b77f4bd0e/12944f91-d9a9-47ba-b0e0-0852caa7c9eb/e4cc60f1-b3fe-4c79-b712-f90205d752c4/landing?id=aTVrMDg1UW84OU85Y3Z3YUtZSTFJWUtCbWZ6a2FzT1BUSDUy
Analysis ID:	1411863
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

HTML body contains low number of good links

HTML body with high number of embedded images detected

HTML title does not match URL

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4308 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3628 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2360 --field-trial-handle=2328,i,11421508955882250948,12753002877424257319,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 360 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.bankmenia.org/nam/637d506f-142f-4107-9bcc-a59b77f4bd0e/12944f91-d9a9-47ba-b0e0-0852caa7c9eb/e4cc60f1-b3fe-4c79-b712-f90205d752c4/landing?id=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" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

• AV Detection
• Phishing
• Compliance
• Networking
• System Summary
• Boot Survival

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://www.bankmenia.org/nam/637d506f-142f-4107-9bcc-a59b77f4bd0e/12944f91-d9a9-47ba-b0e0-0852caa7c9eb/e4cc60f1-b3fe-4c79-b712-f90205d752c4/landing?id=aTVrMDg1UW84OU85Y3Z3YUtZSTFJWUtCbWZ6a2FzT1BUSDUyRUZVNTB4LzRMczdKYi9DQUxtYVk2eXdOaW82eWN4a1VCRzRUQ1U4MHd6UmN2RVZGdHNKdGxGbU1kUG54MDBCR245Q1Y5eG5NNzBTRDFobkZRQkwvZTVsc20yb2k0WThmV2JoRTNyMzFvR1pIQnQya01CZnJMdytmK3J5ZktHOGIzMDZSK0FZR0JPUTZ6cXljTStTTHF4TTN0MGthd25SekY3RTlWekRHVVFCQWNCMHUvOEtUa0F1bjFnWnZmUkNRam9nN2NnN09mU2xnQ2xZdVhIUEQzZ29uRVlnNE1mNFRnSkN1VWZWbU1FWmF2MGY2VlBucm9sTTREV3piV2Rsb0dRSnZRa1BOUUdFYU1MR0UweFB2ekEyZFV2WXBKOHJHWWpkdzJVY0xIWTNLTXBWSTB1cGlRdEJSZk9rK3orSTFZbXVudW1XT2RtbFoySzBsS0lYRUhOcDRBaXVtZmhkMDhBdWJhSW1LeUNsUFRlSjN4UT09

Avira URL Cloud: detection malicious, Label: phishing

Antivirus detection for URL or domain

Source: https://www.bankmenia.org/Content/Sign_In_files/style.css	Avira URL Cloud: Label: phishing
Source: https://www.bankmenia.org/favicon.ico	Avira URL Cloud: Label: phishing
Source: https://www.bankmenia.org/Content/coachmark.js	Avira URL Cloud: Label: phishing
Source: https://www.bankmenia.org//637d506f-142f-4107-9bcc-a59b77f4bd0e/12944f91-d9a9-47ba-b0e0-0852caa7c9eb	Avira URL Cloud: Label: phishing
Source: https://www.bankmenia.org/Content/bootstrap.min.js	Avira URL Cloud: Label: phishing
Source: https://www.bankmenia.org/nam/Landing/GoToTraining/aTVrMDg1UW84OU85Y3Z3YUtZSTFJWUtCbWZ6a2FzT1BUSDUyRUZVNTB4LzRMczdKYi9DQUxtYVk2eXdOaW82eWN4a1VCRzRUQ1U4MHd6UmN2RVZGdHNKdGxGbU1kUG54MDBCR245Q1Y5eG5NNzBTRDFobkZRQkwvZTVsc20yb2k0WThmV2JoRTNyMzFvR1pIQnQya01CZnJMdytmK3J5ZktHOGIzMDZSK0FZR0JPUTZ6cXljTStTTHF4TTN0MGthd25SekY3RTlWekRHVVFCQWNCMHUvOEtUa0F1bjFnWnZmUkNRam9nN2NnN09mU2xnQ2xZdVhIUEQzZ29uRVlnNE1mNFRnSkN1VWZWbU1FWmF2MGY2VlBucm9sTTREV3piV2Rsb0dRSnZRa1BOUUdFYU1MR0UweFB2ekEyZFV2WXBKOHJHWWpkdzJVY0xIWTNLTXBWSTB1cGlRdEJSZk9rK3orSTFZbXVudW1XT2RtbFoySzBsS0lYRUhOcDRBaXVtZmhkMDhBdWJhSW1LeUNsUFRlSjN4UT09	Avira URL Cloud: Label: phishing
Source: https://www.bankmenia.org/Content/translate.js	Avira URL Cloud: Label: phishing
Source: https://www.bankmenia.org/Content/jquery-3.5.1.min.js	Avira URL Cloud: Label: phishing

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=80ccca67-54bd-44ab-8625-4b79c4dc7775&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3D7XqXudXfWWUHvX2Z6DKYlzGZHkuJhwiTTArLn_fGa0AKpMltoiAaqguxCdXNpwIfQ3LMS67qZY0ePCtfvOw6AOCGt0D78Kxed3Z0hfhmfMyEAw_5K8OuCPfBdUjUtgqAKEJGqjZbVjrXOuKyOw5dyf4_ltdrXTZRd1athtCQ-bY&response_mode=form_post&nonce=638464602542625829.MWI5YjIyZmEtMWNhYS00ZDBlLTg2OWMtOWMxNTBhODM2MDA0NzBkYzJjZmEtYjI3Zi00MGE5LWEwM2EtNGUwOWVkMDc3ODBh&client-request-id=96382f1e-c7e6-4fb8-ab45-73ae980ec1a8&redirect_uri=https%3A%2F%2Fsecurity.microsoft.com%2F&x-client-SKU=ID_NET461&x-client-ver=6.22.1.0	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=80ccca67-54bd-44ab-8625-4b79c4dc7775&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3D7XqXudXfWWUHvX2Z6DKYlzGZHkuJhwiTTArLn_fGa0AKpMltoiAaqguxCdXNpwIfQ3LMS67qZY0ePCtfvOw6AOCGt0D78Kxed3Z0hfhmfMyEAw_5K8OuCPfBdUjUtgqAKEJGqjZbVjrXOuKyOw5dyf4_ltdrXTZRd1athtCQ-bY&response_mode=form_post&nonce=638464602542625829.MWI5YjIyZmEtMWNhYS00ZDBlLTg2OWMtOWMxNTBhODM2MDA0NzBkYzJjZmEtYjI3Zi00MGE5LWEwM2EtNGUwOWVkMDc3ODBh&client-request-id=96382f1e-c7e6-4fb8-ab45-73ae980ec1a8&redirect_uri=https%3A%2F%2Fsecurity.microsoft.com%2F&x-client-SKU=ID_NET461&x-client-ver=6.22.1.0&sso_reload=true	HTTP Parser: Number of links: 1
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=80ccca67-54bd-44ab-8625-4b79c4dc7775&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DVbhwFFTOeMDfkcgfbfOHXMF9rrKkhkyDw7s4erkEBoQO54dsObe6G4AceHfd4aXrLRlj5Z-T0pI7rM0Dg0toImxey8BlimABYDq8mYKYrGclmpvpavGXV7I0CcJz6dtr3Xo17hyc3gWMhEnFAvfd3Qpj9u9Y88vnyiRmVDlj-BvpxWIXMnaRbMdRHJqDhdgEHHTey_ixP7h4d16NGPNOiOJ2vQLFtNVBo4K5BuWqCGTn6C3kLDopYnah-vHd-3ILP6OY9Teq-ehC54G7YInbKVuRjsBJ45Ow1vnNOI8eY8FExq0HGi1MHt2wwMgK1wRR3pXtnizChgV61lwdlm_BT945uY8bByQ9I-QEJwC5KY3hWoaItM2rCXwSVi5pkZKS&response_mode=form_post&nonce=638464602623301127.YzVkOTBiNTItM2E3My00MWEzLWEyZjAtNmNlNDU3ZDEyODFmZjU5NTRhZjMtMzM5ZC00MDg1LWExMDEtYWUyNDhkZDNiZTg0&client-request-id=59b3cbc0-6113-49ad-b633-d50d10b21f98&redirect_uri=https%3A%2F%2Fsecurity.microsoft.com%2F&x-client-SKU=ID_NET461&x-client-ver=6.22.1.0	HTTP Parser: Number of links: 1

HTTP Parser: Total embedded image size: 41662

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=80ccca67-54bd-44ab-8625-4b79c4dc7775&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3D7XqXudXfWWUHvX2Z6DKYlzGZHkuJhwiTTArLn_fGa0AKpMltoiAaqguxCdXNpwIfQ3LMS67qZY0ePCtfvOw6AOCGt0D78Kxed3Z0hfhmfMyEAw_5K8OuCPfBdUjUtgqAKEJGqjZbVjrXOuKyOw5dyf4_ltdrXTZRd1athtCQ-bY&response_mode=form_post&nonce=638464602542625829.MWI5YjIyZmEtMWNhYS00ZDBlLTg2OWMtOWMxNTBhODM2MDA0NzBkYzJjZmEtYjI3Zi00MGE5LWEwM2EtNGUwOWVkMDc3ODBh&client-request-id=96382f1e-c7e6-4fb8-ab45-73ae980ec1a8&redirect_uri=https%3A%2F%2Fsecurity.microsoft.com%2F&x-client-SKU=ID_NET461&x-client-ver=6.22.1.0	HTTP Parser: Title: Redirecting does not match URL
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=80ccca67-54bd-44ab-8625-4b79c4dc7775&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3D7XqXudXfWWUHvX2Z6DKYlzGZHkuJhwiTTArLn_fGa0AKpMltoiAaqguxCdXNpwIfQ3LMS67qZY0ePCtfvOw6AOCGt0D78Kxed3Z0hfhmfMyEAw_5K8OuCPfBdUjUtgqAKEJGqjZbVjrXOuKyOw5dyf4_ltdrXTZRd1athtCQ-bY&response_mode=form_post&nonce=638464602542625829.MWI5YjIyZmEtMWNhYS00ZDBlLTg2OWMtOWMxNTBhODM2MDA0NzBkYzJjZmEtYjI3Zi00MGE5LWEwM2EtNGUwOWVkMDc3ODBh&client-request-id=96382f1e-c7e6-4fb8-ab45-73ae980ec1a8&redirect_uri=https%3A%2F%2Fsecurity.microsoft.com%2F&x-client-SKU=ID_NET461&x-client-ver=6.22.1.0&sso_reload=true	HTTP Parser: Title: Sign in to your account does not match URL
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=80ccca67-54bd-44ab-8625-4b79c4dc7775&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DVbhwFFTOeMDfkcgfbfOHXMF9rrKkhkyDw7s4erkEBoQO54dsObe6G4AceHfd4aXrLRlj5Z-T0pI7rM0Dg0toImxey8BlimABYDq8mYKYrGclmpvpavGXV7I0CcJz6dtr3Xo17hyc3gWMhEnFAvfd3Qpj9u9Y88vnyiRmVDlj-BvpxWIXMnaRbMdRHJqDhdgEHHTey_ixP7h4d16NGPNOiOJ2vQLFtNVBo4K5BuWqCGTn6C3kLDopYnah-vHd-3ILP6OY9Teq-ehC54G7YInbKVuRjsBJ45Ow1vnNOI8eY8FExq0HGi1MHt2wwMgK1wRR3pXtnizChgV61lwdlm_BT945uY8bByQ9I-QEJwC5KY3hWoaItM2rCXwSVi5pkZKS&response_mode=form_post&nonce=638464602623301127.YzVkOTBiNTItM2E3My00MWEzLWEyZjAtNmNlNDU3ZDEyODFmZjU5NTRhZjMtMzM5ZC00MDg1LWExMDEtYWUyNDhkZDNiZTg0&client-request-id=59b3cbc0-6113-49ad-b633-d50d10b21f98&redirect_uri=https%3A%2F%2Fsecurity.microsoft.com%2F&x-client-SKU=ID_NET461&x-client-ver=6.22.1.0	HTTP Parser: Title: Sign in to your account does not match URL

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=80ccca67-54bd-44ab-8625-4b79c4dc7775&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3D7XqXudXfWWUHvX2Z6DKYlzGZHkuJhwiTTArLn_fGa0AKpMltoiAaqguxCdXNpwIfQ3LMS67qZY0ePCtfvOw6AOCGt0D78Kxed3Z0hfhmfMyEAw_5K8OuCPfBdUjUtgqAKEJGqjZbVjrXOuKyOw5dyf4_ltdrXTZRd1athtCQ-bY&response_mode=form_post&nonce=638464602542625829.MWI5YjIyZmEtMWNhYS00ZDBlLTg2OWMtOWMxNTBhODM2MDA0NzBkYzJjZmEtYjI3Zi00MGE5LWEwM2EtNGUwOWVkMDc3ODBh&client-request-id=96382f1e-c7e6-4fb8-ab45-73ae980ec1a8&redirect_uri=https%3A%2F%2Fsecurity.microsoft.com%2F&x-client-SKU=ID_NET461&x-client-ver=6.22.1.0&sso_reload=true	HTTP Parser: <input type="password" .../> found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=80ccca67-54bd-44ab-8625-4b79c4dc7775&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DVbhwFFTOeMDfkcgfbfOHXMF9rrKkhkyDw7s4erkEBoQO54dsObe6G4AceHfd4aXrLRlj5Z-T0pI7rM0Dg0toImxey8BlimABYDq8mYKYrGclmpvpavGXV7I0CcJz6dtr3Xo17hyc3gWMhEnFAvfd3Qpj9u9Y88vnyiRmVDlj-BvpxWIXMnaRbMdRHJqDhdgEHHTey_ixP7h4d16NGPNOiOJ2vQLFtNVBo4K5BuWqCGTn6C3kLDopYnah-vHd-3ILP6OY9Teq-ehC54G7YInbKVuRjsBJ45Ow1vnNOI8eY8FExq0HGi1MHt2wwMgK1wRR3pXtnizChgV61lwdlm_BT945uY8bByQ9I-QEJwC5KY3hWoaItM2rCXwSVi5pkZKS&response_mode=form_post&nonce=638464602623301127.YzVkOTBiNTItM2E3My00MWEzLWEyZjAtNmNlNDU3ZDEyODFmZjU5NTRhZjMtMzM5ZC00MDg1LWExMDEtYWUyNDhkZDNiZTg0&client-request-id=59b3cbc0-6113-49ad-b633-d50d10b21f98&redirect_uri=https%3A%2F%2Fsecurity.microsoft.com%2F&x-client-SKU=ID_NET461&x-client-ver=6.22.1.0	HTTP Parser: <input type="password" .../> found

Source: https://www.bankmenia.org/nam/637d506f-142f-4107-9bcc-a59b77f4bd0e/12944f91-d9a9-47ba-b0e0-0852caa7c9eb/e4cc60f1-b3fe-4c79-b712-f90205d752c4/landing?id=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	HTTP Parser: No favicon
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=80ccca67-54bd-44ab-8625-4b79c4dc7775&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3D7XqXudXfWWUHvX2Z6DKYlzGZHkuJhwiTTArLn_fGa0AKpMltoiAaqguxCdXNpwIfQ3LMS67qZY0ePCtfvOw6AOCGt0D78Kxed3Z0hfhmfMyEAw_5K8OuCPfBdUjUtgqAKEJGqjZbVjrXOuKyOw5dyf4_ltdrXTZRd1athtCQ-bY&response_mode=form_post&nonce=638464602542625829.MWI5YjIyZmEtMWNhYS00ZDBlLTg2OWMtOWMxNTBhODM2MDA0NzBkYzJjZmEtYjI3Zi00MGE5LWEwM2EtNGUwOWVkMDc3ODBh&client-request-id=96382f1e-c7e6-4fb8-ab45-73ae980ec1a8&redirect_uri=https%3A%2F%2Fsecurity.microsoft.com%2F&x-client-SKU=ID_NET461&x-client-ver=6.22.1.0	HTTP Parser: No favicon
Source: https://www.bankmenia.org/	HTTP Parser: No favicon

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=80ccca67-54bd-44ab-8625-4b79c4dc7775&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3D7XqXudXfWWUHvX2Z6DKYlzGZHkuJhwiTTArLn_fGa0AKpMltoiAaqguxCdXNpwIfQ3LMS67qZY0ePCtfvOw6AOCGt0D78Kxed3Z0hfhmfMyEAw_5K8OuCPfBdUjUtgqAKEJGqjZbVjrXOuKyOw5dyf4_ltdrXTZRd1athtCQ-bY&response_mode=form_post&nonce=638464602542625829.MWI5YjIyZmEtMWNhYS00ZDBlLTg2OWMtOWMxNTBhODM2MDA0NzBkYzJjZmEtYjI3Zi00MGE5LWEwM2EtNGUwOWVkMDc3ODBh&client-request-id=96382f1e-c7e6-4fb8-ab45-73ae980ec1a8&redirect_uri=https%3A%2F%2Fsecurity.microsoft.com%2F&x-client-SKU=ID_NET461&x-client-ver=6.22.1.0	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=80ccca67-54bd-44ab-8625-4b79c4dc7775&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3D7XqXudXfWWUHvX2Z6DKYlzGZHkuJhwiTTArLn_fGa0AKpMltoiAaqguxCdXNpwIfQ3LMS67qZY0ePCtfvOw6AOCGt0D78Kxed3Z0hfhmfMyEAw_5K8OuCPfBdUjUtgqAKEJGqjZbVjrXOuKyOw5dyf4_ltdrXTZRd1athtCQ-bY&response_mode=form_post&nonce=638464602542625829.MWI5YjIyZmEtMWNhYS00ZDBlLTg2OWMtOWMxNTBhODM2MDA0NzBkYzJjZmEtYjI3Zi00MGE5LWEwM2EtNGUwOWVkMDc3ODBh&client-request-id=96382f1e-c7e6-4fb8-ab45-73ae980ec1a8&redirect_uri=https%3A%2F%2Fsecurity.microsoft.com%2F&x-client-SKU=ID_NET461&x-client-ver=6.22.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=80ccca67-54bd-44ab-8625-4b79c4dc7775&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3D7XqXudXfWWUHvX2Z6DKYlzGZHkuJhwiTTArLn_fGa0AKpMltoiAaqguxCdXNpwIfQ3LMS67qZY0ePCtfvOw6AOCGt0D78Kxed3Z0hfhmfMyEAw_5K8OuCPfBdUjUtgqAKEJGqjZbVjrXOuKyOw5dyf4_ltdrXTZRd1athtCQ-bY&response_mode=form_post&nonce=638464602542625829.MWI5YjIyZmEtMWNhYS00ZDBlLTg2OWMtOWMxNTBhODM2MDA0NzBkYzJjZmEtYjI3Zi00MGE5LWEwM2EtNGUwOWVkMDc3ODBh&client-request-id=96382f1e-c7e6-4fb8-ab45-73ae980ec1a8&redirect_uri=https%3A%2F%2Fsecurity.microsoft.com%2F&x-client-SKU=ID_NET461&x-client-ver=6.22.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=80ccca67-54bd-44ab-8625-4b79c4dc7775&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DVbhwFFTOeMDfkcgfbfOHXMF9rrKkhkyDw7s4erkEBoQO54dsObe6G4AceHfd4aXrLRlj5Z-T0pI7rM0Dg0toImxey8BlimABYDq8mYKYrGclmpvpavGXV7I0CcJz6dtr3Xo17hyc3gWMhEnFAvfd3Qpj9u9Y88vnyiRmVDlj-BvpxWIXMnaRbMdRHJqDhdgEHHTey_ixP7h4d16NGPNOiOJ2vQLFtNVBo4K5BuWqCGTn6C3kLDopYnah-vHd-3ILP6OY9Teq-ehC54G7YInbKVuRjsBJ45Ow1vnNOI8eY8FExq0HGi1MHt2wwMgK1wRR3pXtnizChgV61lwdlm_BT945uY8bByQ9I-QEJwC5KY3hWoaItM2rCXwSVi5pkZKS&response_mode=form_post&nonce=638464602623301127.YzVkOTBiNTItM2E3My00MWEzLWEyZjAtNmNlNDU3ZDEyODFmZjU5NTRhZjMtMzM5ZC00MDg1LWExMDEtYWUyNDhkZDNiZTg0&client-request-id=59b3cbc0-6113-49ad-b633-d50d10b21f98&redirect_uri=https%3A%2F%2Fsecurity.microsoft.com%2F&x-client-SKU=ID_NET461&x-client-ver=6.22.1.0	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=80ccca67-54bd-44ab-8625-4b79c4dc7775&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DVbhwFFTOeMDfkcgfbfOHXMF9rrKkhkyDw7s4erkEBoQO54dsObe6G4AceHfd4aXrLRlj5Z-T0pI7rM0Dg0toImxey8BlimABYDq8mYKYrGclmpvpavGXV7I0CcJz6dtr3Xo17hyc3gWMhEnFAvfd3Qpj9u9Y88vnyiRmVDlj-BvpxWIXMnaRbMdRHJqDhdgEHHTey_ixP7h4d16NGPNOiOJ2vQLFtNVBo4K5BuWqCGTn6C3kLDopYnah-vHd-3ILP6OY9Teq-ehC54G7YInbKVuRjsBJ45Ow1vnNOI8eY8FExq0HGi1MHt2wwMgK1wRR3pXtnizChgV61lwdlm_BT945uY8bByQ9I-QEJwC5KY3hWoaItM2rCXwSVi5pkZKS&response_mode=form_post&nonce=638464602623301127.YzVkOTBiNTItM2E3My00MWEzLWEyZjAtNmNlNDU3ZDEyODFmZjU5NTRhZjMtMzM5ZC00MDg1LWExMDEtYWUyNDhkZDNiZTg0&client-request-id=59b3cbc0-6113-49ad-b633-d50d10b21f98&redirect_uri=https%3A%2F%2Fsecurity.microsoft.com%2F&x-client-SKU=ID_NET461&x-client-ver=6.22.1.0	HTTP Parser: No <meta name="author".. found

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=80ccca67-54bd-44ab-8625-4b79c4dc7775&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3D7XqXudXfWWUHvX2Z6DKYlzGZHkuJhwiTTArLn_fGa0AKpMltoiAaqguxCdXNpwIfQ3LMS67qZY0ePCtfvOw6AOCGt0D78Kxed3Z0hfhmfMyEAw_5K8OuCPfBdUjUtgqAKEJGqjZbVjrXOuKyOw5dyf4_ltdrXTZRd1athtCQ-bY&response_mode=form_post&nonce=638464602542625829.MWI5YjIyZmEtMWNhYS00ZDBlLTg2OWMtOWMxNTBhODM2MDA0NzBkYzJjZmEtYjI3Zi00MGE5LWEwM2EtNGUwOWVkMDc3ODBh&client-request-id=96382f1e-c7e6-4fb8-ab45-73ae980ec1a8&redirect_uri=https%3A%2F%2Fsecurity.microsoft.com%2F&x-client-SKU=ID_NET461&x-client-ver=6.22.1.0	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=80ccca67-54bd-44ab-8625-4b79c4dc7775&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3D7XqXudXfWWUHvX2Z6DKYlzGZHkuJhwiTTArLn_fGa0AKpMltoiAaqguxCdXNpwIfQ3LMS67qZY0ePCtfvOw6AOCGt0D78Kxed3Z0hfhmfMyEAw_5K8OuCPfBdUjUtgqAKEJGqjZbVjrXOuKyOw5dyf4_ltdrXTZRd1athtCQ-bY&response_mode=form_post&nonce=638464602542625829.MWI5YjIyZmEtMWNhYS00ZDBlLTg2OWMtOWMxNTBhODM2MDA0NzBkYzJjZmEtYjI3Zi00MGE5LWEwM2EtNGUwOWVkMDc3ODBh&client-request-id=96382f1e-c7e6-4fb8-ab45-73ae980ec1a8&redirect_uri=https%3A%2F%2Fsecurity.microsoft.com%2F&x-client-SKU=ID_NET461&x-client-ver=6.22.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=80ccca67-54bd-44ab-8625-4b79c4dc7775&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3D7XqXudXfWWUHvX2Z6DKYlzGZHkuJhwiTTArLn_fGa0AKpMltoiAaqguxCdXNpwIfQ3LMS67qZY0ePCtfvOw6AOCGt0D78Kxed3Z0hfhmfMyEAw_5K8OuCPfBdUjUtgqAKEJGqjZbVjrXOuKyOw5dyf4_ltdrXTZRd1athtCQ-bY&response_mode=form_post&nonce=638464602542625829.MWI5YjIyZmEtMWNhYS00ZDBlLTg2OWMtOWMxNTBhODM2MDA0NzBkYzJjZmEtYjI3Zi00MGE5LWEwM2EtNGUwOWVkMDc3ODBh&client-request-id=96382f1e-c7e6-4fb8-ab45-73ae980ec1a8&redirect_uri=https%3A%2F%2Fsecurity.microsoft.com%2F&x-client-SKU=ID_NET461&x-client-ver=6.22.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=80ccca67-54bd-44ab-8625-4b79c4dc7775&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DVbhwFFTOeMDfkcgfbfOHXMF9rrKkhkyDw7s4erkEBoQO54dsObe6G4AceHfd4aXrLRlj5Z-T0pI7rM0Dg0toImxey8BlimABYDq8mYKYrGclmpvpavGXV7I0CcJz6dtr3Xo17hyc3gWMhEnFAvfd3Qpj9u9Y88vnyiRmVDlj-BvpxWIXMnaRbMdRHJqDhdgEHHTey_ixP7h4d16NGPNOiOJ2vQLFtNVBo4K5BuWqCGTn6C3kLDopYnah-vHd-3ILP6OY9Teq-ehC54G7YInbKVuRjsBJ45Ow1vnNOI8eY8FExq0HGi1MHt2wwMgK1wRR3pXtnizChgV61lwdlm_BT945uY8bByQ9I-QEJwC5KY3hWoaItM2rCXwSVi5pkZKS&response_mode=form_post&nonce=638464602623301127.YzVkOTBiNTItM2E3My00MWEzLWEyZjAtNmNlNDU3ZDEyODFmZjU5NTRhZjMtMzM5ZC00MDg1LWExMDEtYWUyNDhkZDNiZTg0&client-request-id=59b3cbc0-6113-49ad-b633-d50d10b21f98&redirect_uri=https%3A%2F%2Fsecurity.microsoft.com%2F&x-client-SKU=ID_NET461&x-client-ver=6.22.1.0	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=80ccca67-54bd-44ab-8625-4b79c4dc7775&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DVbhwFFTOeMDfkcgfbfOHXMF9rrKkhkyDw7s4erkEBoQO54dsObe6G4AceHfd4aXrLRlj5Z-T0pI7rM0Dg0toImxey8BlimABYDq8mYKYrGclmpvpavGXV7I0CcJz6dtr3Xo17hyc3gWMhEnFAvfd3Qpj9u9Y88vnyiRmVDlj-BvpxWIXMnaRbMdRHJqDhdgEHHTey_ixP7h4d16NGPNOiOJ2vQLFtNVBo4K5BuWqCGTn6C3kLDopYnah-vHd-3ILP6OY9Teq-ehC54G7YInbKVuRjsBJ45Ow1vnNOI8eY8FExq0HGi1MHt2wwMgK1wRR3pXtnizChgV61lwdlm_BT945uY8bByQ9I-QEJwC5KY3hWoaItM2rCXwSVi5pkZKS&response_mode=form_post&nonce=638464602623301127.YzVkOTBiNTItM2E3My00MWEzLWEyZjAtNmNlNDU3ZDEyODFmZjU5NTRhZjMtMzM5ZC00MDg1LWExMDEtYWUyNDhkZDNiZTg0&client-request-id=59b3cbc0-6113-49ad-b633-d50d10b21f98&redirect_uri=https%3A%2F%2Fsecurity.microsoft.com%2F&x-client-SKU=ID_NET461&x-client-ver=6.22.1.0	HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49729 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.5:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.5:49720 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49729 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /nam/637d506f-142f-4107-9bcc-a59b77f4bd0e/12944f91-d9a9-47ba-b0e0-0852caa7c9eb/e4cc60f1-b3fe-4c79-b712-f90205d752c4/landing?id=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 HTTP/1.1Host: www.bankmenia.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Content/jquery-3.5.1.min.js HTTP/1.1Host: www.bankmenia.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bankmenia.org/nam/637d506f-142f-4107-9bcc-a59b77f4bd0e/12944f91-d9a9-47ba-b0e0-0852caa7c9eb/e4cc60f1-b3fe-4c79-b712-f90205d752c4/landing?id=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-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Content/translate.js HTTP/1.1Host: www.bankmenia.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bankmenia.org/nam/637d506f-142f-4107-9bcc-a59b77f4bd0e/12944f91-d9a9-47ba-b0e0-0852caa7c9eb/e4cc60f1-b3fe-4c79-b712-f90205d752c4/landing?id=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-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Content/coachmark.js HTTP/1.1Host: www.bankmenia.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bankmenia.org/nam/637d506f-142f-4107-9bcc-a59b77f4bd0e/12944f91-d9a9-47ba-b0e0-0852caa7c9eb/e4cc60f1-b3fe-4c79-b712-f90205d752c4/landing?id=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-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Content/bootstrap.min.js HTTP/1.1Host: www.bankmenia.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bankmenia.org/nam/637d506f-142f-4107-9bcc-a59b77f4bd0e/12944f91-d9a9-47ba-b0e0-0852caa7c9eb/e4cc60f1-b3fe-4c79-b712-f90205d752c4/landing?id=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-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.bankmenia.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bankmenia.org/nam/637d506f-142f-4107-9bcc-a59b77f4bd0e/12944f91-d9a9-47ba-b0e0-0852caa7c9eb/e4cc60f1-b3fe-4c79-b712-f90205d752c4/landing?id=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-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_GW4zPEKtwiiwtRHaCqGPVw2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_Hl2bk1L3qQZ3wvMD_PMo5Q2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_pevuvrbnnz-5coi_b4jtbw2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.bankmenia.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_7f0a8c2a247460fad87f.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Content/Sign_In_files/style.css HTTP/1.1Host: www.bankmenia.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.bankmenia.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_eb638da25d4055fbbb57.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.bankmenia.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bankmenia.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET 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 HTTP/1.1Host: www.bankmenia.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /calendar/view/week HTTP/1.1Host: outlook.office.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: unknown

DNS traffic detected: queries for: www.bankmenia.org

Source: unknown

HTTP traffic detected: POST /threshold/xls.aspx HTTP/1.1Origin: https://www.bing.comReferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: */*Accept-Language: en-CHContent-type: text/xmlX-Agent-DeviceId: 01000A410900D492X-BM-CBT: 1696428841X-BM-DateFormat: dd/MM/yyyyX-BM-DeviceDimensions: 784x984X-BM-DeviceDimensionsLogical: 784x984X-BM-DeviceScale: 100X-BM-DTZ: 120X-BM-Market: CHX-BM-Theme: 000000;0078d7X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22X-Device-isOptin: falseX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-Device-OSSKU: 48X-Device-Touch: falseX-DeviceID: 01000A410900D492X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticshX-MSEdge-ExternalExpType: JointCoordX-PositionerType: DesktopX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIX-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateX-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard TimeX-UserAgeClass: UnknownAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comContent-Length: 2484Connection: Keep-AliveCache-Control: no-cacheCookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1710863423054&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF

Source: chromecache_99.2.dr	String found in binary or memory: http://feross.org
Source: chromecache_100.2.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_100.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_91.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_95.2.dr, chromecache_100.2.dr, chromecache_99.2.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js
Source: chromecache_91.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_91.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_84.2.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_84.2.dr	String found in binary or memory: https://login.windows-ppe.net
Source: chromecache_92.2.dr	String found in binary or memory: https://outlook.office.com/calendar/view/week
Source: chromecache_92.2.dr	String found in binary or memory: https://www.bankmenia.org//637d506f-142f-4107-9bcc-a59b77f4bd0e/12944f91-d9a9-47ba-b0e0-0852caa7c9eb

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.5:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.5:49720 version: TLS 1.2

Source: classification engine

Classification label: mal56.win@23/50@14/7

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2360 --field-trial-handle=2328,i,11421508955882250948,12753002877424257319,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.bankmenia.org/nam/637d506f-142f-4107-9bcc-a59b77f4bd0e/12944f91-d9a9-47ba-b0e0-0852caa7c9eb/e4cc60f1-b3fe-4c79-b712-f90205d752c4/landing?id=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"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2360 --field-trial-handle=2328,i,11421508955882250948,12753002877424257319,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://www.bankmenia.org/nam/637d506f-142f-4107-9bcc-a59b77f4bd0e/12944f91-d9a9-47ba-b0e0-0852caa7c9eb/e4cc60f1-b3fe-4c79-b712-f90205d752c4/landing?id=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	100%	Avira URL Cloud	phishing

Source	Detection	Scanner	Label
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	0%	URL Reputation	safe
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_7f0a8c2a247460fad87f.js	0%	Avira URL Cloud	safe
https://www.bankmenia.org/Content/Sign_In_files/style.css	100%	Avira URL Cloud	phishing
https://www.bankmenia.org/favicon.ico	100%	Avira URL Cloud	phishing
https://www.bankmenia.org/Content/coachmark.js	100%	Avira URL Cloud	phishing
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_pevuvrbnnz-5coi_b4jtbw2.js	0%	Avira URL Cloud	safe
https://www.bankmenia.org//637d506f-142f-4107-9bcc-a59b77f4bd0e/12944f91-d9a9-47ba-b0e0-0852caa7c9eb	100%	Avira URL Cloud	phishing
https://www.bankmenia.org/Content/bootstrap.min.js	100%	Avira URL Cloud	phishing
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_eb638da25d4055fbbb57.js	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_Hl2bk1L3qQZ3wvMD_PMo5Q2.js	0%	Avira URL Cloud	safe
https://www.bankmenia.org/nam/Landing/GoToTraining/aTVrMDg1UW84OU85Y3Z3YUtZSTFJWUtCbWZ6a2FzT1BUSDUyRUZVNTB4LzRMczdKYi9DQUxtYVk2eXdOaW82eWN4a1VCRzRUQ1U4MHd6UmN2RVZGdHNKdGxGbU1kUG54MDBCR245Q1Y5eG5NNzBTRDFobkZRQkwvZTVsc20yb2k0WThmV2JoRTNyMzFvR1pIQnQya01CZnJMdytmK3J5ZktHOGIzMDZSK0FZR0JPUTZ6cXljTStTTHF4TTN0MGthd25SekY3RTlWekRHVVFCQWNCMHUvOEtUa0F1bjFnWnZmUkNRam9nN2NnN09mU2xnQ2xZdVhIUEQzZ29uRVlnNE1mNFRnSkN1VWZWbU1FWmF2MGY2VlBucm9sTTREV3piV2Rsb0dRSnZRa1BOUUdFYU1MR0UweFB2ekEyZFV2WXBKOHJHWWpkdzJVY0xIWTNLTXBWSTB1cGlRdEJSZk9rK3orSTFZbXVudW1XT2RtbFoySzBsS0lYRUhOcDRBaXVtZmhkMDhBdWJhSW1LeUNsUFRlSjN4UT09	100%	Avira URL Cloud	phishing
https://www.bankmenia.org/Content/translate.js	100%	Avira URL Cloud	phishing
https://www.bankmenia.org/Content/jquery-3.5.1.min.js	100%	Avira URL Cloud	phishing

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
ooc-g2.tm-4.office.com	52.96.109.130	true	false	high
cs1100.wpc.omegacdn.net	152.199.4.44	true	false	unknown
www.google.com	142.250.176.196	true	false	high
part-0012.t-0009.t-msedge.net	13.107.246.40	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
identity.nel.measure.office.net	unknown	unknown	false	high
outlook.office.com	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	unknown
login.microsoftonline.com	unknown	unknown	false	high
www.bankmenia.org	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_7f0a8c2a247460fad87f.js	false	Avira URL Cloud: safe	unknown
https://www.bankmenia.org/Content/Sign_In_files/style.css	false	Avira URL Cloud: phishing	unknown
https://www.bankmenia.org/Content/coachmark.js	false	Avira URL Cloud: phishing	unknown
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_eb638da25d4055fbbb57.js	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	false	URL Reputation: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	false	URL Reputation: safe	unknown
https://www.bankmenia.org/favicon.ico	false	Avira URL Cloud: phishing	unknown
https://www.bankmenia.org/Content/bootstrap.min.js	false	Avira URL Cloud: phishing	unknown
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_pevuvrbnnz-5coi_b4jtbw2.js	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_Hl2bk1L3qQZ3wvMD_PMo5Q2.js	false	Avira URL Cloud: safe	unknown
https://www.bankmenia.org/Content/translate.js	false	Avira URL Cloud: phishing	unknown
https://www.bankmenia.org/	false		unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	false	URL Reputation: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	false	URL Reputation: safe	unknown
https://www.bankmenia.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	false	Avira URL Cloud: phishing	unknown
https://www.bankmenia.org/Content/jquery-3.5.1.min.js	false	Avira URL Cloud: phishing	unknown
https://www.bankmenia.org/nam/637d506f-142f-4107-9bcc-a59b77f4bd0e/12944f91-d9a9-47ba-b0e0-0852caa7c9eb/e4cc60f1-b3fe-4c79-b712-f90205d752c4/landing?id=aTVrMDg1UW84OU85Y3Z3YUtZSTFJWUtCbWZ6a2FzT1BUSDUyRUZVNTB4LzRMczdKYi9DQUxtYVk2eXdOaW82eWN4a1VCRzRUQ1U4MHd6UmN2RVZGdHNKdGxGbU1kUG54MDBCR245Q1Y5eG5NNzBTRDFobkZRQkwvZTVsc20yb2k0WThmV2JoRTNyMzFvR1pIQnQya01CZnJMdytmK3J5ZktHOGIzMDZSK0FZR0JPUTZ6cXljTStTTHF4TTN0MGthd25SekY3RTlWekRHVVFCQWNCMHUvOEtUa0F1bjFnWnZmUkNRam9nN2NnN09mU2xnQ2xZdVhIUEQzZ29uRVlnNE1mNFRnSkN1VWZWbU1FWmF2MGY2VlBucm9sTTREV3piV2Rsb0dRSnZRa1BOUUdFYU1MR0UweFB2ekEyZFV2WXBKOHJHWWpkdzJVY0xIWTNLTXBWSTB1cGlRdEJSZk9rK3orSTFZbXVudW1XT2RtbFoySzBsS0lYRUhOcDRBaXVtZmhkMDhBdWJhSW1LeUNsUFRlSjN4UT09	true		unknown
https://outlook.office.com/calendar/view/week	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://knockoutjs.com/	chromecache_100.2.dr	false		high
https://github.com/douglascrockford/JSON-js	chromecache_95.2.dr, chromecache_100.2.dr, chromecache_99.2.dr	false		high
https://getbootstrap.com/)	chromecache_91.2.dr	false		high
https://login.windows-ppe.net	chromecache_84.2.dr	false		high
https://www.bankmenia.org//637d506f-142f-4107-9bcc-a59b77f4bd0e/12944f91-d9a9-47ba-b0e0-0852caa7c9eb	chromecache_92.2.dr	false	Avira URL Cloud: phishing	unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_91.2.dr	false		high
https://login.microsoftonline.com	chromecache_84.2.dr	false		high
http://www.opensource.org/licenses/mit-license.php)	chromecache_100.2.dr	false		high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_91.2.dr	false		high
http://feross.org	chromecache_99.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.40	part-0012.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.176.196	www.google.com	United States	15169	GOOGLEUS	false
52.96.109.130	ooc-g2.tm-4.office.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
152.199.4.44	cs1100.wpc.omegacdn.net	United States	15133	EDGECASTUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
13.107.213.40	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1411863
Start date and time:	2024-03-19 16:49:48 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 16s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.bankmenia.org/nam/637d506f-142f-4107-9bcc-a59b77f4bd0e/12944f91-d9a9-47ba-b0e0-0852caa7c9eb/e4cc60f1-b3fe-4c79-b712-f90205d752c4/landing?id=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
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.win@23/50@14/7
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://security.microsoft.com/trainingassignments Browse: https://www.bankmenia.org/ Browse: https://www.bankmenia.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 Browse: https://outlook.office.com/calendar/view/week

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.72.110, 142.250.176.195, 142.250.31.84, 34.104.35.123, 20.12.23.50, 23.206.121.31, 23.206.121.29, 23.206.121.32, 23.206.121.16, 23.206.121.53, 23.206.121.10, 23.206.121.21, 23.206.121.35, 23.206.121.20, 13.107.6.192, 72.21.81.240, 192.229.211.108, 40.126.24.146, 20.190.152.22, 20.190.152.21, 20.190.152.19, 40.126.24.81, 40.126.24.147, 20.190.152.20, 40.126.24.84, 52.165.164.15, 23.40.179.187, 23.40.179.168, 40.126.24.82, 40.126.24.148, 142.251.40.202, 142.250.80.106, 142.251.32.106, 142.250.81.234, 142.251.41.10, 142.250.176.202, 142.250.65.170, 142.251.40.234, 142.251.35.170, 142.251.40.170, 142.250.65.234, 142.250.65.202, 142.250.80.42, 142.250.72.106, 142.250.80.10, 142.250.80.74, 20.166.126.56, 142.250.65.163
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, protection.office.trafficmanager.net, clientservices.googleapis.com, a767.dspw65.akamai.net, ak.privatelink.msidentity.com, a1894.dscb.akamai.net, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, login.live.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, sls.update.microsoft.com, update.googleapis.com, hlb.apr-52dd2-0.edgecastdns.net, azurefd-t-prod.trafficmanager.net, login.mso.msidentity.com, glb.sls.prod.dcat.dsp.trafficmanager.net, prdv4a.aadg.msidentity.com, fs.microsoft.com, b-0037.b-msedge.net, accounts.google.com, content-autofill.googleapis.com, aadcdnoriginwus2.azureedge.net, www.tm.ak.prd.aadg.akadns.net, www.tm.v4.a.prd.aadg.akadns.net, wu.ec.azureedge.net, ctldl.windowsupdate.com, aadcdn.msauth.net, wu-bg-shim.trafficmanager.net, firstparty-azurefd-prod.trafficmanager.net, login.msa.msidentity.com, download.windowsupdate.com.edgesuite.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://www.bankmenia.org/nam/637d506f-142f-4107-9bcc-a59b77f4bd0e/12944f91-d9a9-47ba-b0e0-0852caa7c9eb/e4cc60f1-b3fe-4c79-b712-f90205d752c4/landing?id=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

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Mar 19 14:50:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.976189904228843
Encrypted:	false
SSDEEP:	48:8jdaTmmVH2idAKZdA19ehwiZUklqehry+3:8cbaky
MD5:	ED87AE6E251ED59FAB1E39031522D97A
SHA1:	FADD4593BE3923CEF74EC206CF4B440D0CF63F52
SHA-256:	2D2554EB2025A50A74215760CF58266F6E3861D1B7185B62FCBDD974B687750E
SHA-512:	D2698E99F2D9BD941A9D5894F27960E0E453260860F818E534B089CCD13BD54489B297209EEF2032C68AF2AF3F3641D3CE412FAB35B3DFCF56C3E5301010079E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......1.z..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IsXR~....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VsXR~....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VsXR~....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VsXR~..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VsXU~...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........(.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 19, 2024 16:50:39.036478996 CET	53	51260	1.1.1.1	192.168.2.5
Mar 19, 2024 16:50:39.037827015 CET	53	54454	1.1.1.1	192.168.2.5
Mar 19, 2024 16:50:39.614959002 CET	53	53805	1.1.1.1	192.168.2.5
Mar 19, 2024 16:50:40.358056068 CET	51187	53	192.168.2.5	1.1.1.1
Mar 19, 2024 16:50:40.358784914 CET	63848	53	192.168.2.5	1.1.1.1
Mar 19, 2024 16:50:42.756990910 CET	50071	53	192.168.2.5	1.1.1.1
Mar 19, 2024 16:50:42.757308006 CET	61716	53	192.168.2.5	1.1.1.1
Mar 19, 2024 16:50:42.845472097 CET	53	50071	1.1.1.1	192.168.2.5
Mar 19, 2024 16:50:42.845979929 CET	53	61716	1.1.1.1	192.168.2.5
Mar 19, 2024 16:50:54.451550007 CET	65279	53	192.168.2.5	1.1.1.1
Mar 19, 2024 16:50:54.451853991 CET	55713	53	192.168.2.5	1.1.1.1
Mar 19, 2024 16:50:56.699229002 CET	53	57086	1.1.1.1	192.168.2.5
Mar 19, 2024 16:50:56.913507938 CET	51364	53	192.168.2.5	1.1.1.1
Mar 19, 2024 16:50:56.913728952 CET	52056	53	192.168.2.5	1.1.1.1
Mar 19, 2024 16:50:56.916627884 CET	54446	53	192.168.2.5	1.1.1.1
Mar 19, 2024 16:50:56.916938066 CET	58448	53	192.168.2.5	1.1.1.1
Mar 19, 2024 16:50:57.005587101 CET	53	54446	1.1.1.1	192.168.2.5
Mar 19, 2024 16:50:57.005808115 CET	53	58448	1.1.1.1	192.168.2.5
Mar 19, 2024 16:50:58.388880014 CET	65229	53	192.168.2.5	1.1.1.1
Mar 19, 2024 16:50:58.389254093 CET	52116	53	192.168.2.5	1.1.1.1
Mar 19, 2024 16:50:58.476888895 CET	53	65229	1.1.1.1	192.168.2.5
Mar 19, 2024 16:50:58.477494001 CET	53	52116	1.1.1.1	192.168.2.5
Mar 19, 2024 16:50:58.950733900 CET	53	62183	1.1.1.1	192.168.2.5
Mar 19, 2024 16:51:05.348205090 CET	54701	53	192.168.2.5	1.1.1.1
Mar 19, 2024 16:51:05.348347902 CET	50942	53	192.168.2.5	1.1.1.1
Mar 19, 2024 16:51:05.436534882 CET	53	50942	1.1.1.1	192.168.2.5
Mar 19, 2024 16:51:05.436551094 CET	53	54701	1.1.1.1	192.168.2.5
Mar 19, 2024 16:51:15.564831972 CET	53	61669	1.1.1.1	192.168.2.5
Mar 19, 2024 16:51:38.197063923 CET	53	55580	1.1.1.1	192.168.2.5
Mar 19, 2024 16:51:38.688447952 CET	53	61517	1.1.1.1	192.168.2.5

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 19, 2024 16:50:40.483923912 CET	1.1.1.1	192.168.2.5	0xce12	No error (0)	www.bankmenia.org	astprod02.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2024 16:50:40.483923912 CET	1.1.1.1	192.168.2.5	0xce12	No error (0)	astprod02.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2024 16:50:40.483923912 CET	1.1.1.1	192.168.2.5	0xce12	No error (0)	shed.dual-low.part-0012.t-0009.t-msedge.net	part-0012.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2024 16:50:40.483923912 CET	1.1.1.1	192.168.2.5	0xce12	No error (0)	part-0012.t-0009.t-msedge.net		13.107.246.40	A (IP address)	IN (0x0001)	false
Mar 19, 2024 16:50:40.483923912 CET	1.1.1.1	192.168.2.5	0xce12	No error (0)	part-0012.t-0009.t-msedge.net		13.107.213.40	A (IP address)	IN (0x0001)	false
Mar 19, 2024 16:50:40.485011101 CET	1.1.1.1	192.168.2.5	0x8ea2	No error (0)	www.bankmenia.org	astprod02.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2024 16:50:40.485011101 CET	1.1.1.1	192.168.2.5	0x8ea2	No error (0)	astprod02.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2024 16:50:42.845472097 CET	1.1.1.1	192.168.2.5	0x4f83	No error (0)	www.google.com		142.250.176.196	A (IP address)	IN (0x0001)	false
Mar 19, 2024 16:50:42.845979929 CET	1.1.1.1	192.168.2.5	0xdfd3	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 19, 2024 16:50:53.755908012 CET	1.1.1.1	192.168.2.5	0x90b	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2024 16:50:53.755908012 CET	1.1.1.1	192.168.2.5	0x90b	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Mar 19, 2024 16:50:54.539402008 CET	1.1.1.1	192.168.2.5	0xd1a1	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2024 16:50:54.539804935 CET	1.1.1.1	192.168.2.5	0x275e	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2024 16:50:55.333501101 CET	1.1.1.1	192.168.2.5	0x9b2a	No error (0)	shed.dual-low.part-0012.t-0009.t-msedge.net	part-0012.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2024 16:50:55.333501101 CET	1.1.1.1	192.168.2.5	0x9b2a	No error (0)	part-0012.t-0009.t-msedge.net		13.107.213.40	A (IP address)	IN (0x0001)	false
Mar 19, 2024 16:50:55.333501101 CET	1.1.1.1	192.168.2.5	0x9b2a	No error (0)	part-0012.t-0009.t-msedge.net		13.107.246.40	A (IP address)	IN (0x0001)	false
Mar 19, 2024 16:50:57.001401901 CET	1.1.1.1	192.168.2.5	0x2743	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2024 16:50:57.001420021 CET	1.1.1.1	192.168.2.5	0xe5ff	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2024 16:50:57.005587101 CET	1.1.1.1	192.168.2.5	0x5c99	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2024 16:50:57.005587101 CET	1.1.1.1	192.168.2.5	0x5c99	No error (0)	cs1100.wpc.omegacdn.net		152.199.4.44	A (IP address)	IN (0x0001)	false
Mar 19, 2024 16:50:57.005808115 CET	1.1.1.1	192.168.2.5	0x5f8b	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2024 16:50:58.476888895 CET	1.1.1.1	192.168.2.5	0x883d	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2024 16:50:58.476888895 CET	1.1.1.1	192.168.2.5	0x883d	No error (0)	cs1100.wpc.omegacdn.net		152.199.4.44	A (IP address)	IN (0x0001)	false
Mar 19, 2024 16:50:58.477494001 CET	1.1.1.1	192.168.2.5	0xbd29	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2024 16:51:05.436534882 CET	1.1.1.1	192.168.2.5	0xfe40	No error (0)	outlook.office.com	substrate.office.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2024 16:51:05.436534882 CET	1.1.1.1	192.168.2.5	0xfe40	No error (0)	substrate.office.com	outlook.office365.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2024 16:51:05.436534882 CET	1.1.1.1	192.168.2.5	0xfe40	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2024 16:51:05.436551094 CET	1.1.1.1	192.168.2.5	0xabdb	No error (0)	outlook.office.com	substrate.office.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2024 16:51:05.436551094 CET	1.1.1.1	192.168.2.5	0xabdb	No error (0)	substrate.office.com	outlook.office365.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2024 16:51:05.436551094 CET	1.1.1.1	192.168.2.5	0xabdb	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2024 16:51:05.436551094 CET	1.1.1.1	192.168.2.5	0xabdb	No error (0)	ooc-g2.tm-4.office.com		52.96.109.130	A (IP address)	IN (0x0001)	false
Mar 19, 2024 16:51:05.436551094 CET	1.1.1.1	192.168.2.5	0xabdb	No error (0)	ooc-g2.tm-4.office.com		52.96.111.82	A (IP address)	IN (0x0001)	false
Mar 19, 2024 16:51:05.436551094 CET	1.1.1.1	192.168.2.5	0xabdb	No error (0)	ooc-g2.tm-4.office.com		52.96.181.34	A (IP address)	IN (0x0001)	false
Mar 19, 2024 16:51:05.436551094 CET	1.1.1.1	192.168.2.5	0xabdb	No error (0)	ooc-g2.tm-4.office.com		40.97.190.2	A (IP address)	IN (0x0001)	false
Mar 19, 2024 16:51:05.436551094 CET	1.1.1.1	192.168.2.5	0xabdb	No error (0)	ooc-g2.tm-4.office.com		52.96.111.98	A (IP address)	IN (0x0001)	false
Mar 19, 2024 16:51:05.436551094 CET	1.1.1.1	192.168.2.5	0xabdb	No error (0)	ooc-g2.tm-4.office.com		52.96.88.50	A (IP address)	IN (0x0001)	false
Mar 19, 2024 16:51:05.436551094 CET	1.1.1.1	192.168.2.5	0xabdb	No error (0)	ooc-g2.tm-4.office.com		52.96.38.82	A (IP address)	IN (0x0001)	false
Mar 19, 2024 16:51:05.436551094 CET	1.1.1.1	192.168.2.5	0xabdb	No error (0)	ooc-g2.tm-4.office.com		52.96.182.98	A (IP address)	IN (0x0001)	false
Mar 19, 2024 16:51:07.376921892 CET	1.1.1.1	192.168.2.5	0x64aa	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2024 16:51:07.376921892 CET	1.1.1.1	192.168.2.5	0x64aa	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Mar 19, 2024 16:51:30.626915932 CET	1.1.1.1	192.168.2.5	0x77f8	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2024 16:51:30.626915932 CET	1.1.1.1	192.168.2.5	0x77f8	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Mar 19, 2024 16:51:51.392323971 CET	1.1.1.1	192.168.2.5	0xa34d	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2024 16:51:51.392323971 CET	1.1.1.1	192.168.2.5	0xa34d	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-03-19 15:50:40 UTC	1330	OUT	GET /nam/637d506f-142f-4107-9bcc-a59b77f4bd0e/12944f91-d9a9-47ba-b0e0-0852caa7c9eb/e4cc60f1-b3fe-4c79-b712-f90205d752c4/landing?id=aTVrMDg1UW84OU85Y3Z3YUtZSTFJWUtCbWZ6a2FzT1BUSDUyRUZVNTB4LzRMczdKYi9DQUxtYVk2eXdOaW82eWN4a1VCRzRUQ1U4MHd6UmN2RVZGdHNKdGxGbU1kUG54MDBCR245Q1Y5eG5NNzBTRDFobkZRQkwvZTVsc20yb2k0WThmV2JoRTNyMzFvR1pIQnQya01CZnJMdytmK3J5ZktHOGIzMDZSK0FZR0JPUTZ6cXljTStTTHF4TTN0MGthd25SekY3RTlWekRHVVFCQWNCMHUvOEtUa0F1bjFnWnZmUkNRam9nN2NnN09mU2xnQ2xZdVhIUEQzZ29uRVlnNE1mNFRnSkN1VWZWbU1FWmF2MGY2VlBucm9sTTREV3piV2Rsb0dRSnZRa1BOUUdFYU1MR0UweFB2ekEyZFV2WXBKOHJHWWpkdzJVY0xIWTNLTXBWSTB1cGlRdEJSZk9rK3orSTFZbXVudW1XT2RtbFoySzBsS0lYRUhOcDRBaXVtZmhkMDhBdWJhSW1LeUNsUFRlSjN4UT09 HTTP/1.1 Host: www.bankmenia.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-19 15:50:41 UTC	418	IN	HTTP/1.1 200 OK Date: Tue, 19 Mar 2024 15:50:41 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Request-Context: appId= Strict-Transport-Security: max-age=2592000 Content-Security-Policy: img-src https: data: ; style-src 'self' 'unsafe-inline'; script-src 'self' x-azure-ref: 20240319T155040Z-eavyhs79g15tf5kxh8c3mbxpq800000000ag00000000sgby X-Cache: CONFIG_NOCACHE
2024-03-19 15:50:41 UTC	15966	IN	Data Raw: 34 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 31 30 2e 30 30 30 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 Data Ascii: 4000<!DOCTYPE html><html><head> <title></title> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta http-equiv="X-UA-Compatible" content="IE=10.000"> <meta name="viewport" content="width=device-width, initia
2024-03-19 15:50:41 UTC	426	IN	Data Raw: 47 43 78 43 49 4c 46 79 30 64 2b 64 5a 58 38 39 66 54 70 4a 35 36 38 48 4e 43 6f 69 32 73 59 4e 2b 72 68 49 68 75 6d 2f 77 65 61 37 35 37 66 66 66 72 37 50 2f 2f 37 4d 38 38 6d 6f 42 4e 68 56 61 5a 62 71 36 66 2f 37 7a 30 39 6d 45 33 6a 6a 32 30 59 30 49 5a 67 30 59 6e 44 6b 6f 31 58 35 38 6c 50 64 7a 39 43 50 35 5a 68 34 71 69 47 69 62 42 71 5a 4b 6b 4f 54 34 34 4f 50 70 43 67 6d 39 2b 7a 65 6c 5a 5a 35 6d 58 4e 6b 70 4c 41 39 4a 4e 6e 76 37 34 57 59 58 56 57 76 2b 54 4c 55 74 4a 6e 4e 42 6b 46 31 77 77 32 73 64 37 4d 6d 48 37 79 2f 4f 34 46 7a 34 34 68 49 50 46 6d 37 51 2f 44 4c 73 68 62 38 44 63 2f 2f 65 39 62 33 62 43 6b 50 42 70 75 79 4c 6a 33 44 6e 76 6a 33 57 38 38 6d 34 44 4e 79 58 73 73 75 48 67 65 33 37 37 39 4a 4d 4b 71 68 4b 66 62 67 79 57 2f Data Ascii: GCxCILFy0d+dZX89fTpJ568HNCoi2sYN+rhIhum/wea757fffr7P//7M88moBNhVaZbq6f/7z09mE3jj20Y0IZg0YnDko1X58lPdz9CP5Zh4qiGibBqZKkOT44OPpCgm9+zelZZ5mXNkpLA9JNnv74WYXVWv+TLUtJnNBkF1ww2sd7MmH7y/O4Fz44hIPFm7Q/DLshb8Dc//e9b3bCkPBpuyLj3Dnvj3W88m4DNyXssuHge3779JMKqhKfbgyW/
2024-03-19 15:50:41 UTC	16384	IN	Data Raw: 38 30 30 30 0d 0a 56 69 64 34 4f 6c 70 4f 6a 74 4e 59 33 56 6d 43 39 45 6a 6b 4e 6b 77 61 5a 78 51 53 45 57 65 54 51 32 54 4d 79 6c 72 58 36 6a 2f 58 75 7a 54 53 6a 32 37 79 33 61 69 51 68 30 73 38 38 4e 6f 36 78 6c 68 6f 4b 66 31 57 63 4f 6f 6f 6c 35 51 59 53 46 75 6a 77 6d 65 44 6d 52 36 72 70 78 4f 33 53 43 73 7a 6f 78 73 6a 2b 6b 79 54 4b 4e 63 68 48 56 6a 6a 32 6c 62 77 64 4f 42 6b 6a 36 6a 79 53 69 34 56 68 41 33 32 4d 52 36 4d 33 76 54 70 66 2b 48 49 51 32 54 38 30 6a 76 37 45 68 45 7a 36 66 43 49 30 48 44 70 48 47 59 78 33 2f 73 69 58 70 2b 36 58 2f 77 5a 53 4d 6e 42 44 77 37 55 74 4b 33 34 4e 56 6c 6e 54 73 41 46 66 75 73 6a 71 65 30 30 34 39 66 76 66 30 4e 2f 2b 31 70 46 73 36 4b 78 44 62 5a 47 53 6d 64 78 6f 6e 2b 30 65 33 62 33 2f 46 66 39 42 Data Ascii: 8000Vid4OlpOjtNY3VmC9EjkNkwaZxQSEWeTQ2TMylrX6j/XuzTSj27y3aiQh0s88No6xlhoKf1WcOool5QYSFujwmeDmR6rpxO3SCszoxsj+kyTKNchHVjj2lbwdOBkj6jySi4VhA32MR6M3vTpf+HIQ2T80jv7EhEz6fCI0HDpHGYx3/siXp+6X/wZSMnBDw7UtK34NVlnTsAFfusjqe0049fvf0N/+1pFs6KxDbZGSmdxon+0e3b3/Ff9B
2024-03-19 15:50:41 UTC	16384	IN	Data Raw: 4f 44 45 67 4d 54 6b 34 4c 6a 4d 78 4e 56 6f 69 49 47 5a 70 62 47 77 39 49 6d 4a 73 59 57 4e 72 49 69 42 7a 64 48 4a 76 61 32 55 39 49 69 4d 30 4d 6a 51 77 4e 44 4d 69 49 48 4e 30 63 6d 39 72 5a 53 31 33 61 57 52 30 61 44 30 69 4d 69 49 76 50 67 6f 38 63 47 46 30 61 43 42 6b 50 53 4a 4e 4e 54 41 77 4c 6a 63 33 4e 43 41 79 4d 6a 59 75 4e 54 59 7a 51 7a 55 79 4d 53 34 35 4e 44 45 67 4d 6a 49 35 4c 6a 55 30 4d 79 41 31 4d 54 63 75 4e 7a 41 35 49 44 49 77 4f 43 34 32 4f 44 59 67 4e 54 45 33 4c 6a 63 77 4f 53 41 79 4d 44 67 75 4e 6a 67 32 54 44 55 79 4f 43 34 78 4d 44 55 67 4d 6a 41 77 4c 6a 59 78 4f 45 77 30 4e 6a 63 75 4f 54 63 33 49 44 45 32 4e 43 34 35 4d 54 4a 4d 4e 44 55 79 4c 6a 41 34 4e 69 41 79 4d 7a 63 75 4e 44 67 34 51 7a 51 34 4d 43 34 32 4e 6a 4d Data Ascii: ODEgMTk4LjMxNVoiIGZpbGw9ImJsYWNrIiBzdHJva2U9IiM0MjQwNDMiIHN0cm9rZS13aWR0aD0iMiIvPgo8cGF0aCBkPSJNNTAwLjc3NCAyMjYuNTYzQzUyMS45NDEgMjI5LjU0MyA1MTcuNzA5IDIwOC42ODYgNTE3LjcwOSAyMDguNjg2TDUyOC4xMDUgMjAwLjYxOEw0NjcuOTc3IDE2NC45MTJMNDUyLjA4NiAyMzcuNDg4QzQ4MC42NjM
2024-03-19 15:50:41 UTC	8	IN	Data Raw: 4d 6a 63 30 4c 6a 0d 0a Data Ascii: Mjc0Lj
2024-03-19 15:50:41 UTC	16384	IN	Data Raw: 36 37 30 63 0d 0a 45 34 4e 69 41 7a 4e 44 51 75 4e 6a 41 31 49 44 49 33 4e 43 34 78 4f 44 5a 44 4d 7a 51 31 4c 6a 6b 33 4e 79 41 79 4e 7a 51 75 4d 54 67 32 49 44 4d 30 4e 79 34 78 4d 6a 67 67 4d 6a 63 30 4c 6a 51 77 4f 43 41 7a 4e 44 67 75 4d 44 59 67 4d 6a 63 30 4c 6a 67 31 4e 46 59 79 4e 7a 59 75 4e 44 67 34 51 7a 4d 30 4e 79 34 77 4e 43 41 79 4e 7a 55 75 4f 44 51 30 49 44 4d 30 4e 53 34 34 4d 7a 4d 67 4d 6a 63 31 4c 6a 55 79 4d 53 41 7a 4e 44 51 75 4e 44 4d 34 49 44 49 33 4e 53 34 31 4d 6a 46 44 4d 7a 51 7a 4c 6a 41 79 4e 69 41 79 4e 7a 55 75 4e 54 49 78 49 44 4d 30 4d 53 34 34 4e 6a 6b 67 4d 6a 63 32 4c 6a 41 77 4f 43 41 7a 4e 44 41 75 4f 54 59 33 49 44 49 33 4e 69 34 35 4f 45 4d 7a 4e 44 41 75 4d 44 59 30 49 44 49 33 4e 79 34 35 4e 54 4d 67 4d 7a 4d Data Ascii: 670cE4NiAzNDQuNjA1IDI3NC4xODZDMzQ1Ljk3NyAyNzQuMTg2IDM0Ny4xMjggMjc0LjQwOCAzNDguMDYgMjc0Ljg1NFYyNzYuNDg4QzM0Ny4wNCAyNzUuODQ0IDM0NS44MzMgMjc1LjUyMSAzNDQuNDM4IDI3NS41MjFDMzQzLjAyNiAyNzUuNTIxIDM0MS44NjkgMjc2LjAwOCAzNDAuOTY3IDI3Ni45OEMzNDAuMDY0IDI3Ny45NTMgMzM
2024-03-19 15:50:41 UTC	10004	IN	Data Raw: 73 70 61 6e 20 63 6c 61 73 73 3d 27 63 6f 61 63 68 6d 61 72 6b 62 75 74 74 6f 6e 63 6f 6e 74 61 69 6e 65 72 27 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 27 63 6f 61 63 68 6d 61 72 6b 62 75 74 74 6f 6e 20 70 72 65 76 69 6f 75 73 27 3e 20 50 72 65 76 69 6f 75 73 20 3c 2f 62 75 74 74 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 27 63 6f 61 63 68 6d 61 72 6b 62 75 74 74 6f 6e 20 6e 65 78 74 27 3e 20 4e 65 78 74 20 3c 2f 62 75 74 74 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 70 61 6e 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 73 70 61 6e 3e 0d 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0d 0a 3c 2f 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 3c 73 Data Ascii: span class='coachmarkbuttoncontainer'> <button class='coachmarkbutton previous'> Previous </button> <button class='coachmarkbutton next'> Next </button> </span> </span> </span></span></span><s
2024-03-19 15:50:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-03-19 15:50:42 UTC	1216	OUT	GET /Content/jquery-3.5.1.min.js HTTP/1.1 Host: www.bankmenia.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bankmenia.org/nam/637d506f-142f-4107-9bcc-a59b77f4bd0e/12944f91-d9a9-47ba-b0e0-0852caa7c9eb/e4cc60f1-b3fe-4c79-b712-f90205d752c4/landing?id=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 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-19 15:50:43 UTC	403	IN	HTTP/1.1 200 OK Date: Tue, 19 Mar 2024 15:50:43 GMT Content-Type: application/javascript Content-Length: 89478 Connection: close ETag: "1da6fbb5cf40e06" Last-Modified: Wed, 06 Mar 2024 11:42:27 GMT Request-Context: appId= Strict-Transport-Security: max-age=2592000 x-azure-ref: 20240319T155042Z-edmhq8787d7593pykadxkax9qn00000000gg000000009qg2 X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-03-19 15:50:43 UTC	15981	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 Data Ascii: /! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2024-03-19 15:50:43 UTC	403	IN	Data Raw: 28 79 29 7b 77 68 69 6c 65 28 6c 29 7b 61 3d 65 3b 77 68 69 6c 65 28 61 3d 61 5b 6c 5d 29 69 66 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 21 31 3b 75 3d 6c 3d 22 6f 6e 6c 79 22 3d 3d 3d 68 26 26 21 75 26 26 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 7d 72 65 74 75 72 6e 21 30 7d 69 66 28 75 3d 5b 6d 3f 63 2e 66 69 72 73 74 43 68 69 6c 64 3a 63 2e 6c 61 73 74 43 68 69 6c 64 5d 2c 6d 26 26 70 29 7b 64 3d 28 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 63 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 Data Ascii: (y){while(l){a=e;while(a=a[l])if(x?a.nodeName.toLowerCase()===f:1===a.nodeType)return!1;u=l="only"===h&&!u&&"nextSibling"}return!0}if(u=[m?c.firstChild:c.lastChild],m&&p){d=(s=(r=(i=(o=(a=c)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&
2024-03-19 15:50:43 UTC	16384	IN	Data Raw: 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 3d 5b 6b 2c 64 5d 29 2c 61 3d 3d 3d 65 Data Ascii: (a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]=[k,d]),a===e
2024-03-19 15:50:43 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 68 69 73 2e 65 78 70 61 6e 64 6f 2c 7b 76 61 6c 75 65 Data Ascii: ){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.defineProperty(e,this.expando,{value
2024-03-19 15:50:44 UTC	8192	IN	Data Raw: 74 28 73 2e 74 79 70 65 29 3f 75 2e 63 68 65 63 6b 65 64 3d 73 2e 63 68 65 63 6b 65 64 3a 22 69 6e 70 75 74 22 21 3d 3d 6c 26 26 22 74 65 78 74 61 72 65 61 22 21 3d 3d 6c 7c 7c 28 75 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 73 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 3b 69 66 28 74 29 69 66 28 6e 29 66 6f 72 28 6f 3d 6f 7c 7c 76 65 28 65 29 2c 61 3d 61 7c 7c 76 65 28 63 29 2c 72 3d 30 2c 69 3d 6f 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 4f 65 28 6f 5b 72 5d 2c 61 5b 72 5d 29 3b 65 6c 73 65 20 4f 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 Data Ascii: t(s.type)?u.checked=s.checked:"input"!==l&&"textarea"!==l\|\|(u.defaultValue=s.defaultValue);if(t)if(n)for(o=o\|\|ve(e),a=a\|\|ve(c),r=0,i=o.length;r<i;r++)Oe(o[r],a[r]);else Oe(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:func
2024-03-19 15:50:44 UTC	16384	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 7b 7d 2c 61 3d 30 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 29 7b 66 6f 72 28 72 3d 49 65 28 65 29 2c 69 3d 74 2e 6c 65 6e 67 74 68 3b 61 3c 69 3b 61 2b 2b 29 6f 5b 74 5b 61 5d 5d 3d 53 2e 63 73 73 28 65 2c 74 5b 61 5d 2c 21 31 2c 72 29 3b 72 65 74 75 72 6e 20 6f 7d 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 6e 3f 53 2e 73 74 79 6c 65 28 65 2c 74 2c 6e 29 3a 53 2e 63 73 73 28 65 2c 74 29 7d 2c 65 2c 74 2c 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 7d 29 2c 28 28 53 2e 54 77 65 65 6e 3d 65 74 29 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 65 74 2c 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c Data Ascii: function(e,t,n){var r,i,o={},a=0;if(Array.isArray(t)){for(r=Ie(e),i=t.length;a<i;a++)o[t[a]]=S.css(e,t[a],!1,r);return o}return void 0!==n?S.style(e,t,n):S.css(e,t)},e,t,1<arguments.length)}}),((S.Tween=et).prototype={constructor:et,init:function(e,t,n,r,
2024-03-19 15:50:44 UTC	15750	IN	Data Raw: 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 53 2e 70 72 6f 70 28 74 68 69 73 2c 22 65 6c 65 6d 65 6e 74 73 22 29 3b 72 65 74 75 72 6e 20 65 3f 53 2e 6d 61 6b 65 41 72 72 61 79 28 65 29 3a 74 68 69 73 7d 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 74 79 70 65 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 61 6d 65 26 26 21 53 28 74 68 69 73 29 2e 69 73 28 22 3a 64 69 73 61 62 6c 65 64 22 29 26 26 4e 74 2e 74 65 73 74 28 74 68 69 73 2e 6e 6f 64 65 4e 61 6d 65 29 26 26 21 41 74 2e 74 65 73 74 28 65 29 26 26 28 74 68 69 73 2e 63 68 65 63 6b 65 64 7c 7c 21 70 65 2e 74 65 73 74 28 65 29 29 7d 29 2e 6d 61 70 28 66 75 6e Data Ascii: ray:function(){return this.map(function(){var e=S.prop(this,"elements");return e?S.makeArray(e):this}).filter(function(){var e=this.type;return this.name&&!S(this).is(":disabled")&&Nt.test(this.nodeName)&&!At.test(e)&&(this.checked\|\|!pe.test(e))}).map(fun

Timestamp	Bytes transferred	Direction	Data
2024-03-19 15:50:42 UTC	1209	OUT	GET /Content/translate.js HTTP/1.1 Host: www.bankmenia.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bankmenia.org/nam/637d506f-142f-4107-9bcc-a59b77f4bd0e/12944f91-d9a9-47ba-b0e0-0852caa7c9eb/e4cc60f1-b3fe-4c79-b712-f90205d752c4/landing?id=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 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-19 15:50:43 UTC	402	IN	HTTP/1.1 200 OK Date: Tue, 19 Mar 2024 15:50:43 GMT Content-Type: application/javascript Content-Length: 4899 Connection: close ETag: "1da6fb920284e23" Last-Modified: Wed, 06 Mar 2024 11:26:26 GMT Request-Context: appId= Strict-Transport-Security: max-age=2592000 x-azure-ref: 20240319T155042Z-6eb2dyw32p4dz96a64kw9r310s00000003gg0000000016nt X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-03-19 15:50:43 UTC	4899	IN	Data Raw: ef bb bf 76 61 72 20 63 6f 6d 6d 65 6e 74 73 20 3d 20 4f 62 6a 65 63 74 28 29 3b 0d 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 42 72 6f 77 73 65 72 28 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 75 61 20 3d 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2c 20 74 65 6d 2c 0d 0a 20 20 20 20 20 20 20 20 4d 20 3d 20 75 61 2e 6d 61 74 63 68 28 2f 28 6f 70 65 72 61 7c 63 68 72 6f 6d 65 7c 73 61 66 61 72 69 7c 66 69 72 65 66 6f 78 7c 6d 73 69 65 7c 74 72 69 64 65 6e 74 28 3f 3d 5c 2f 29 29 5c 2f 3f 5c 73 2a 28 5c 64 2b 29 2f 69 29 20 7c 7c 20 5b 5d 3b 0d 0a 20 20 20 20 69 66 20 28 2f 74 72 69 64 65 6e 74 2f 69 2e 74 65 73 74 28 4d 5b 31 5d 29 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 74 65 6d 20 3d 20 2f 5c 62 72 76 5b 20 3a 5d 2b 28 5c 64 2b 29 2f 67 2e 65 78 Data Ascii: var comments = Object();function getBrowser() { var ua = navigator.userAgent, tem, M = ua.match(/(opera\|chrome\|safari\|firefox\|msie\|trident(?=\/))\/?\s*(\d+)/i) \|\| []; if (/trident/i.test(M[1])) { tem = /\brv[ :]+(\d+)/g.ex

Timestamp	Bytes transferred	Direction	Data
2024-03-19 15:50:42 UTC	1209	OUT	GET /Content/coachmark.js HTTP/1.1 Host: www.bankmenia.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bankmenia.org/nam/637d506f-142f-4107-9bcc-a59b77f4bd0e/12944f91-d9a9-47ba-b0e0-0852caa7c9eb/e4cc60f1-b3fe-4c79-b712-f90205d752c4/landing?id=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 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-19 15:50:43 UTC	402	IN	HTTP/1.1 200 OK Date: Tue, 19 Mar 2024 15:50:43 GMT Content-Type: application/javascript Content-Length: 5512 Connection: close ETag: "1da6fb6e0606388" Last-Modified: Wed, 06 Mar 2024 11:10:20 GMT Request-Context: appId= Strict-Transport-Security: max-age=2592000 x-azure-ref: 20240319T155042Z-s68839g6453up80v26qe5d4er8000000009g00000000nkya X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-03-19 15:50:43 UTC	5512	IN	Data Raw: ef bb bf 64 69 73 61 62 6c 65 41 6e 63 68 6f 72 54 61 67 73 28 29 3b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 27 42 6f 64 79 27 29 5b 30 5d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 79 6c 65 22 2c 20 22 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 20 61 6c 6c 3b 22 29 0d 0a 76 61 72 20 69 6e 64 69 63 61 74 6f 72 49 44 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 69 6e 64 69 63 61 74 6f 72 49 64 53 74 72 69 6e 67 27 29 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 69 6e 64 69 63 61 74 6f 72 49 64 53 74 72 69 6e 67 27 29 2e 73 70 6c 69 74 28 27 2c 27 29 3b 0d 0a 76 61 72 20 63 6f 61 63 68 4d 61 72 6b 56 65 72 73 69 6f 6e 20 3d 20 64 6f 63 75 6d 65 Data Ascii: disableAnchorTags();document.getElementsByClassName('Body')[0].setAttribute("style", "pointer-events: all;")var indicatorIDs = document.getElementById('indicatorIdString').getAttribute('indicatorIdString').split(',');var coachMarkVersion = docume

Timestamp	Bytes transferred	Direction	Data
2024-03-19 15:50:42 UTC	1213	OUT	GET /Content/bootstrap.min.js HTTP/1.1 Host: www.bankmenia.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bankmenia.org/nam/637d506f-142f-4107-9bcc-a59b77f4bd0e/12944f91-d9a9-47ba-b0e0-0852caa7c9eb/e4cc60f1-b3fe-4c79-b712-f90205d752c4/landing?id=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 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-19 15:50:44 UTC	403	IN	HTTP/1.1 200 OK Date: Tue, 19 Mar 2024 15:50:43 GMT Content-Type: application/javascript Content-Length: 51045 Connection: close ETag: "1da6fbb5ff08365" Last-Modified: Wed, 06 Mar 2024 11:42:32 GMT Request-Context: appId= Strict-Transport-Security: max-age=2592000 x-azure-ref: 20240319T155042Z-mdsr0aadk162h3zqwrpdfx6ffn000000034g00000000kugm X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-03-19 15:50:44 UTC	15981	IN	Data Raw: 2f 2a 21 0d 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0d 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0d 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0d 0a 20 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: /! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2024-03-19 15:50:44 UTC	403	IN	Data Raw: 61 72 65 6e 74 29 3b 76 61 72 20 65 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 63 6f 6c 6c 61 70 73 65 22 5d 5b 64 61 74 61 2d 70 61 72 65 6e 74 3d 22 27 2b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 72 65 6e 74 2b 27 22 5d 27 2c 69 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 29 3b 72 65 74 75 72 6e 20 73 74 28 69 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 6e 2e 5f 61 64 64 41 72 69 61 41 6e 64 43 6f 6c 6c 61 70 73 65 64 43 6c 61 73 73 28 61 2e 5f 67 65 74 54 61 72 67 65 74 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 65 29 2c 5b 65 5d 29 7d 29 2c 74 7d 2c 74 2e 5f 61 64 64 41 72 69 61 41 6e 64 43 6f 6c 6c 61 70 73 65 64 43 6c 61 73 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 Data Ascii: arent);var e='[data-toggle="collapse"][data-parent="'+this._config.parent+'"]',i=[].slice.call(t.querySelectorAll(e));return st(i).each(function(t,e){n._addAriaAndCollapsedClass(a._getTargetFromElement(e),[e])}),t},t._addAriaAndCollapsedClass=function(t,e
2024-03-19 15:50:44 UTC	16384	IN	Data Raw: 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 29 3b 72 65 74 75 72 6e 20 65 3f 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 65 29 3a 6e 75 6c 6c 7d 2c 61 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 73 74 28 74 68 69 73 29 2c 65 3d 74 2e 64 61 74 61 28 6c 74 29 2c 6e 3d 6c 28 7b 7d 2c 75 74 2c 74 2e 64 61 74 61 28 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 69 26 26 69 3f 69 3a 7b 7d 29 3b 69 66 28 21 65 26 26 6e 2e 74 6f 67 67 6c 65 26 26 2f 73 68 6f 77 7c 68 69 64 65 2f 2e 74 65 73 74 28 69 29 26 26 28 6e 2e 74 6f 67 67 6c 65 3d 21 31 29 2c 65 7c 7c 28 65 3d 6e 65 77 20 61 Data Ascii: orFromElement(t);return e?document.querySelector(e):null},a._jQueryInterface=function(i){return this.each(function(){var t=st(this),e=t.data(lt),n=l({},ut,t.data(),"object"==typeof i&&i?i:{});if(!e&&n.toggle&&/show\|hide/.test(i)&&(n.toggle=!1),e\|\|(e=new a
2024-03-19 15:50:44 UTC	16384	IN	Data Raw: 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 42 6f 6f 74 73 74 72 61 70 20 74 6f 6f 6c 74 69 70 73 20 72 65 71 75 69 72 65 20 50 6f 70 70 65 72 2e 6a 73 20 28 68 74 74 70 73 3a 2f 2f 70 6f 70 70 65 72 2e 6a 73 2e 6f 72 67 29 22 29 3b 74 68 69 73 2e 5f 69 73 45 6e 61 62 6c 65 64 3d 21 30 2c 74 68 69 73 2e 5f 74 69 6d 65 6f 75 74 3d 30 2c 74 68 69 73 2e 5f 68 6f 76 65 72 53 74 61 74 65 3d 22 22 2c 74 68 69 73 2e 5f 61 63 74 69 76 65 54 72 69 67 67 65 72 3d 7b 7d 2c 74 68 69 73 2e 5f 70 6f 70 70 65 72 3d 6e 75 6c 6c 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3d 74 2c 74 68 69 73 2e 63 6f 6e 66 69 67 3d 74 68 69 73 2e 5f 67 65 74 43 6f 6e 66 69 67 28 65 29 2c 74 68 69 73 2e 74 69 70 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 73 65 74 4c 69 73 74 65 6e Data Ascii: throw new TypeError("Bootstrap tooltips require Popper.js (https://popper.js.org)");this._isEnabled=!0,this._timeout=0,this._hoverState="",this._activeTrigger={},this._popper=null,this.element=t,this.config=this._getConfig(e),this.tip=null,this._setListen
2024-03-19 15:50:44 UTC	1893	IN	Data Raw: 2c 6e 29 7b 76 61 72 20 69 3d 74 68 69 73 2c 72 3d 28 22 55 4c 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 62 6e 28 65 29 2e 66 69 6e 64 28 52 6e 29 3a 62 6e 28 65 29 2e 63 68 69 6c 64 72 65 6e 28 4c 6e 29 29 5b 30 5d 2c 6f 3d 6e 26 26 72 26 26 62 6e 28 72 29 2e 68 61 73 43 6c 61 73 73 28 6b 6e 29 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 2e 5f 74 72 61 6e 73 69 74 69 6f 6e 43 6f 6d 70 6c 65 74 65 28 74 2c 72 2c 6e 29 7d 3b 69 66 28 72 26 26 6f 29 7b 76 61 72 20 61 3d 46 6e 2e 67 65 74 54 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 72 29 3b 62 6e 28 72 29 2e 6f 6e 65 28 46 6e 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 73 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e Data Ascii: ,n){var i=this,r=("UL"===e.nodeName?bn(e).find(Rn):bn(e).children(Ln))[0],o=n&&r&&bn(r).hasClass(kn),s=function(){return i._transitionComplete(t,r,n)};if(r&&o){var a=Fn.getTransitionDurationFromElement(r);bn(r).one(Fn.TRANSITION_END,s).emulateTransitionEn

Timestamp	Bytes transferred	Direction	Data
2024-03-19 15:50:44 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-03-19 15:50:44 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/079C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=99251 Date: Tue, 19 Mar 2024 15:50:44 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-03-19 15:50:44 UTC	1260	OUT	GET /favicon.ico HTTP/1.1 Host: www.bankmenia.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bankmenia.org/nam/637d506f-142f-4107-9bcc-a59b77f4bd0e/12944f91-d9a9-47ba-b0e0-0852caa7c9eb/e4cc60f1-b3fe-4c79-b712-f90205d752c4/landing?id=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 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-19 15:50:45 UTC	336	IN	HTTP/1.1 500 Internal Server Error Date: Tue, 19 Mar 2024 15:50:45 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Request-Context: appId= Strict-Transport-Security: max-age=2592000 x-azure-ref: 20240319T155044Z-ch1g8a2ypt4695h0h30r9kx48g00000000m000000000f1hu X-Cache: CONFIG_NOCACHE
2024-03-19 15:50:45 UTC	4278	IN	Data Raw: 31 30 61 65 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4d 69 63 72 6f 73 6f 66 74 20 70 61 67 65 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 30 30 70 78 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6c 75 6d 6e 32 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 70 78 20 30 70 78 20 Data Ascii: 10ae<!DOCTYPE html><html><head> <meta name="viewport" content="width=device-width"> <title>Microsoft page</title> <style> body { padding: 100px 0; } .column2 { padding: 0px 0px
2024-03-19 15:50:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-03-19 15:50:44 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-03-19 15:50:45 UTC	455	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0778) X-CID: 11 Cache-Control: public, max-age=99284 Date: Tue, 19 Mar 2024 15:50:44 GMT Content-Length: 55 Connection: close X-CID: 2
2024-03-19 15:50:45 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-03-19 15:50:55 UTC	2148	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2484 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1710863423054&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2024-03-19 15:50:55 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-03-19 15:50:55 UTC	2483	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-03-19 15:50:55 UTC	476	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 8D65A5BFC4C741BB878F154DCAD39747 Ref B: CO1EDGE2322 Ref C: 2024-03-19T15:50:55Z Date: Tue, 19 Mar 2024 15:50:55 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.57ed0117.1710863455.348e7377

Timestamp	Bytes transferred	Direction	Data
2024-03-19 15:50:55 UTC	633	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_GW4zPEKtwiiwtRHaCqGPVw2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-19 15:50:55 UTC	797	IN	HTTP/1.1 200 OK Date: Tue, 19 Mar 2024 15:50:55 GMT Content-Type: application/x-javascript Content-Length: 49608 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Feb 2024 19:13:24 GMT ETag: 0x8DC2E5A2EB17559 x-ms-request-id: 27015d4a-301e-0041-54c6-781d8d000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240319T155055Z-6uzrh0531p5x38hzf3ythnf5xg000000033000000000a7ws x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-03-19 15:50:55 UTC	15587	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 6d 5b e3 38 d2 30 fa fd fe 15 c1 bb 87 89 27 26 e4 05 68 70 da 9d 27 0d 74 37 33 40 18 12 a6 67 16 58 2e 27 56 c0 dd c1 ce da 0e 34 03 39 bf fd d4 8b 64 cb 8e 43 f7 ec 7d ae f3 e5 cc 4b b0 a5 92 2c 95 aa 4a 55 a5 92 b4 f9 f3 da ff 54 7e ae 6c fc f8 3f 95 c1 b0 77 3e ac f4 3f 54 86 9f 8e ce 0f 2a 67 f0 f6 67 e5 b4 3f 3c da 3f fc f1 7a f0 a3 f8 ff f0 ce 8f 2b 13 7f 2a 2a f0 77 e4 c6 c2 ab 84 41 25 8c 2a 7e 30 0e a3 59 18 b9 89 88 2b f7 f0 1b f9 ee b4 32 89 c2 fb 4a 72 27 2a b3 28 fc 22 c6 49 5c 99 fa 71 02 85 46 62 1a 3e 56 aa 50 5d e4 55 ce dc 28 79 aa 1c 9d 99 75 a8 5f 40 6d fe ad 1f 40 e9 71 38 7b 82 e7 bb a4 12 84 89 3f 16 15 37 f0 a8 b6 29 bc 04 b1 a8 cc 03 4f 44 95 c7 3b 7f 7c 57 39 f1 c7 51 18 87 93 a4 12 89 b1 f0 Data Ascii: m[80'&hp't73@gX.'V49dC}K,JUT~l?w>?Tgg?<?z+wA%~0Y+2Jr'*("I\qFb>VP]U(yu_@m@q8{?7)OD;\|W9Q
2024-03-19 15:50:55 UTC	16384	IN	Data Raw: 80 ed 83 29 fa 85 69 39 77 40 a6 b8 34 e8 78 1e e3 ba 5a 72 c0 a2 e8 e0 d5 87 80 2a b0 3a c2 09 9f 3d 46 27 d3 6b 27 91 a5 df aa c8 03 59 2b 91 fa 92 5d 31 6a 78 8a 61 2c 94 86 a2 7d c4 7c 96 e7 3e 2d 4c ab 41 57 0d 00 e2 4a 6f 8e 5b 3a cc 4d bb 18 2c d2 6a 0c 2d 1f 6f 3a 48 ef 83 ab 9a 66 1d 45 27 65 ac 6a 44 88 a7 f1 9b 78 39 8f 69 be 82 db 6d d3 a2 93 4c 1a 78 48 38 9e ed 65 b9 8c f1 ec 64 c8 14 6d 78 4e 38 1e 73 32 77 7c 3c 75 85 34 7c 3a ce 98 8f cf e7 23 de ad 31 5d 28 5f 9f 30 73 b0 51 8e 0a ca 3d ba 2d 31 c7 e7 34 90 27 74 64 8c c5 27 3e 65 1f f4 b4 c3 35 f3 b7 d4 4d d5 d9 5c d3 4b 71 2d 0f 4d 9c 5a 6e 74 4b a7 5d c5 d0 4f 75 5f e1 71 e8 ca a5 63 10 f5 63 bc 41 90 b1 ef 2c 1f 03 85 d8 76 ab b9 83 5e c6 eb eb 6b d3 6e 52 17 74 d6 19 62 ba 70 6a 16 Data Ascii: )i9w@4xZr*:=F'k'Y+]1jxa,}\|>-LAWJo[:M,j-o:HfE'ejDx9imLxH8edmxN8s2w\|<u4\|:#1](_0sQ=-14'td'>e5M\Kq-MZntK]Ou_qccA,v^knRtbpj
2024-03-19 15:50:55 UTC	16384	IN	Data Raw: d5 48 b7 90 f8 06 eb 52 aa e3 01 83 db 2a e6 2d 33 8e 4e fc d6 41 54 3f e8 4b 15 5a 97 b1 9e f5 9a 05 cb 91 ce b4 a9 73 65 4e 1a ba a5 f6 d3 80 93 d0 36 58 c5 86 59 51 16 48 c7 6f 1a e8 5b ff 5a a5 45 32 e1 48 07 fd c3 b5 7f 79 ee b1 29 d6 9a 96 a4 47 2f c0 39 9f 7f 8f e1 54 ec 28 93 bb 73 22 31 36 d6 0d 92 85 85 fc 07 89 eb bc 2f 89 ae a8 2f f8 83 e9 0a 7c fe e0 c9 cb 67 8a 70 21 4f 14 08 1e 28 3c 48 63 d5 b4 6c 76 cd 24 99 d6 21 76 28 a1 76 41 47 26 4b 62 d7 f5 b6 00 61 32 b0 f4 dd 7c ab 3b 59 3f e0 f7 8c 8f a6 55 11 89 2d 90 a4 11 aa 9e cf 05 76 78 98 76 92 1a d4 0d e1 76 a0 63 3a 7d a6 fe 3a a3 aa 45 9c 80 4d 88 4c 35 ed d3 c7 7d 11 b1 8c 7c 61 01 3f 8e 56 59 4f ef 0c 5d c3 e7 14 99 71 f5 1b cf 67 4c a9 e5 f4 6d 89 8d 59 dd 3f 89 11 50 09 95 1a 87 71 Data Ascii: HR*-3NAT?KZseN6XYQHo[ZE2Hy)G/9T(s"16//\|gp!O(<Hclv$!v(vAG&Kba2\|;Y?U-vxvvc:}:EML5}\|a?VYO]qgLmY?Pq
2024-03-19 15:50:55 UTC	1253	IN	Data Raw: 25 97 b8 31 41 d3 62 9b 8c cf 4e bc 5e d3 ed f6 5d 4d 57 0e 6e 6f dd a8 e7 28 ef de 03 f0 1e f7 c5 c1 01 da 1c 1c 5e 44 18 1d e5 b5 2e 06 f4 03 24 2c 55 39 ea e0 3c 7a 10 be 71 d7 32 44 41 ef ba 33 13 16 98 94 48 7a 50 36 1b 35 72 4f e8 dc 39 a8 bb f2 c4 95 0c 13 ca c9 9d 13 93 86 37 a3 79 5a 94 15 c7 76 8d b3 b1 07 de 33 16 75 3c 88 ca fd fb ce 72 99 4d b3 65 92 2f ce 2e d2 d9 59 72 76 31 bd 98 7e bc 3c 5f 50 5b f2 65 fa 31 75 d8 d9 1e 2f c1 0d 88 2e 90 df 46 1c d7 24 62 2f f3 da df 61 df 1d 05 be 6f cf 8a f3 2a 37 8e 39 0d 27 1d e5 ee c8 9e db 70 35 1c 39 4a b3 6b 9c 59 6c 5f 23 d7 31 0b 76 04 67 ba a4 3d 07 ef cb 7a 02 06 a6 2c e7 55 1b a4 58 a4 49 23 8a f8 d4 5a 79 ff a6 a3 38 15 5f 4c dc 66 2b fe 6a bc 9c f4 ee 40 1f e7 00 0b f3 07 73 95 bc 16 d2 0e Data Ascii: %1AbN^]MWno(^D.$,U9<zq2DA3HzP65rO97yZv3u<rMe/.Yrv1~<_P[e1u/.F$b/ao*79'p59JkYl_#1vg=z,UXI#Zy8_Lf+j@s

Timestamp	Bytes transferred	Direction	Data
2024-03-19 15:50:57 UTC	660	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-19 15:50:57 UTC	734	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 7092966 Cache-Control: public, max-age=31536000 Content-MD5: kqhA3D0Xczna4D/t8ioitQ== Content-Type: text/css Date: Tue, 19 Mar 2024 15:50:57 GMT Etag: 0x8DC070858CA028D Last-Modified: Wed, 27 Dec 2023 18:19:21 GMT Server: ECAcc (nya/7935) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 18b1eed2-601e-0061-4592-393306000000 x-ms-version: 2009-09-19 Content-Length: 113084 Connection: close
2024-03-19 15:50:57 UTC	16383	IN	Data Raw: 2f 2a 21 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2a 2f 2f 2a 21 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 Data Ascii: /! Copyright (C) Microsoft Corporation. All rights reserved. //*!------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------This file is based on or incorporates material from the projects listed
2024-03-19 15:50:57 UTC	1	IN	Data Raw: 73 Data Ascii: s
2024-03-19 15:50:57 UTC	16383	IN	Data Raw: 2d 31 2c 2e 63 6f 6c 2d 78 73 2d 32 2c 2e 63 6f 6c 2d 78 73 2d 33 2c 2e 63 6f 6c 2d 78 73 2d 34 2c 2e 63 6f 6c 2d 78 73 2d 35 2c 2e 63 6f 6c 2d 78 73 2d 36 2c 2e 63 6f 6c 2d 78 73 2d 37 2c 2e 63 6f 6c 2d 78 73 2d 38 2c 2e 63 6f 6c 2d 78 73 2d 39 2c 2e 63 6f 6c 2d 78 73 2d 31 30 2c 2e 63 6f 6c 2d 78 73 2d 31 31 2c 2e 63 6f 6c 2d 78 73 2d 31 32 2c 2e 63 6f 6c 2d 78 73 2d 31 33 2c 2e 63 6f 6c 2d 78 73 2d 31 34 2c 2e 63 6f 6c 2d 78 73 2d 31 35 2c 2e 63 6f 6c 2d 78 73 2d 31 36 2c 2e 63 6f 6c 2d 78 73 2d 31 37 2c 2e 63 6f 6c 2d 78 73 2d 31 38 2c 2e 63 6f 6c 2d 78 73 2d 31 39 2c 2e 63 6f 6c 2d 78 73 2d 32 30 2c 2e 63 6f 6c 2d 78 73 2d 32 31 2c 2e 63 6f 6c 2d 78 73 2d 32 32 2c 2e 63 6f 6c 2d 78 73 2d 32 33 2c 2e 63 6f 6c 2d 78 73 2d 32 34 7b 66 6c 6f 61 74 3a 6c Data Ascii: -1,.col-xs-2,.col-xs-3,.col-xs-4,.col-xs-5,.col-xs-6,.col-xs-7,.col-xs-8,.col-xs-9,.col-xs-10,.col-xs-11,.col-xs-12,.col-xs-13,.col-xs-14,.col-xs-15,.col-xs-16,.col-xs-17,.col-xs-18,.col-xs-19,.col-xs-20,.col-xs-21,.col-xs-22,.col-xs-23,.col-xs-24{float:l
2024-03-19 15:50:57 UTC	16383	IN	Data Raw: 67 69 6e 2d 6c 65 66 74 3a 39 35 2e 38 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 32 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 30 25 7d 7d 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 62 6f 72 64 65 72 3a 30 3b 6d 69 6e 2d 77 69 64 74 68 3a 30 7d 6c 65 67 65 6e 64 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 30 7d 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 65 61 72 63 68 22 5d 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f Data Ascii: gin-left:95.83333%}.col-xl-offset-24{margin-left:100%}}fieldset{padding:0;margin:0;border:0;min-width:0}legend{display:block;width:100%;padding:0;border:0}label{display:inline-block;max-width:100%}input[type="search"]{-webkit-box-sizing:border-box;-moz-bo
2024-03-19 15:50:57 UTC	2	IN	Data Raw: 6c 6f Data Ascii: lo
2024-03-19 15:50:57 UTC	16383	IN	Data Raw: 77 2d 78 3a 61 75 74 6f 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 2e 30 31 25 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 35 33 39 70 78 29 7b 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 68 69 64 64 65 6e 3b 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 3a 2d 6d 73 2d 61 75 74 6f 68 69 64 69 6e 67 2d 73 63 72 6f 6c 6c 62 61 72 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 68 2c 2e 74 61 62 6c 65 Data Ascii: w-x:auto;min-height:.01%}@media screen and (max-width:539px){.table-responsive{width:100%;margin-bottom:15px;overflow-y:hidden;-ms-overflow-style:-ms-autohiding-scrollbar}.table-responsive>.table{margin-bottom:0}.table-responsive>.table>thead>tr>th,.table
2024-03-19 15:50:57 UTC	16383	IN	Data Raw: 2c 22 54 75 6e 67 61 22 2c 22 4c 61 6f 20 55 49 22 2c 22 52 61 61 76 69 22 2c 22 49 73 6b 6f 6f 6c 61 20 50 6f 74 61 22 2c 22 4c 61 74 68 61 22 2c 22 4c 65 65 6c 61 77 61 64 65 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 61 48 65 69 20 55 49 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4a 68 65 6e 67 48 65 69 20 55 49 22 2c 22 4d 61 6c 67 75 6e 20 47 6f 74 68 69 63 22 2c 22 45 73 74 72 61 6e 67 65 6c 6f 20 45 64 65 73 73 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 48 69 6d 61 6c 61 79 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4e 65 77 20 54 61 69 20 4c 75 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 50 68 61 67 73 50 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 54 61 69 20 4c 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 69 20 42 61 69 74 69 22 2c 22 4d 6f 6e 67 6f 6c Data Ascii: ,"Tunga","Lao UI","Raavi","Iskoola Pota","Latha","Leelawadee","Microsoft YaHei UI","Microsoft JhengHei UI","Malgun Gothic","Estrangelo Edessa","Microsoft Himalaya","Microsoft New Tai Lue","Microsoft PhagsPa","Microsoft Tai Le","Microsoft Yi Baiti","Mongol
2024-03-19 15:50:57 UTC	2	IN	Data Raw: 79 70 Data Ascii: yp
2024-03-19 15:50:57 UTC	16383	IN	Data Raw: 65 3d 22 72 65 73 65 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 35 64 61 36 7d 2e 62 74 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2d 66 6f 63 75 73 2c 2e 62 74 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 62 75 74 74 6f 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 65 73 65 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c Data Ascii: e="reset"].btn-primary:hover{background-color:#005da6}.btn.btn-primary-focus,.btn.btn-primary:focus,button.btn-primary:focus,input[type="button"].btn-primary:focus,input[type="submit"].btn-primary:focus,input[type="reset"].btn-primary:focus{background-col
2024-03-19 15:50:57 UTC	14781	IN	Data Raw: 6e 2d 74 6f 70 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 32 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 38 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 37 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 2e 33 36 33 32 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 2e 33 36 33 32 70 78 3b 63 6f 6c 6f 72 3a 23 31 62 31 62 31 62 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 36 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 32 70 Data Ascii: n-top:20px;margin-bottom:1.25rem;margin-top:1.25rem;font-size:24px;line-height:28px;font-weight:300;line-height:1.75rem;padding-bottom:2.3632px;padding-top:2.3632px;color:#1b1b1b;font-size:1.5rem;font-weight:600;padding:0;margin-top:16px;margin-bottom:12p

Timestamp	Bytes transferred	Direction	Data
2024-03-19 15:50:57 UTC	637	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_Hl2bk1L3qQZ3wvMD_PMo5Q2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-19 15:50:57 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1669725 Cache-Control: public, max-age=31536000 Content-MD5: 1uzPl8n+Ut+zC4UAn8LmMw== Content-Type: application/x-javascript Date: Tue, 19 Mar 2024 15:50:57 GMT Etag: 0x8DC37D39B96BCE4 Last-Modified: Tue, 27 Feb 2024 20:35:16 GMT Server: ECAcc (nya/79A5) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: c07680fa-c01e-0047-47e5-6a5839000000 x-ms-version: 2009-09-19 Content-Length: 443039 Connection: close
2024-03-19 15:50:57 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-03-19 15:50:57 UTC	16383	IN	Data Raw: 37 22 2c 50 50 5f 45 5f 49 44 50 5f 42 49 4e 44 49 4e 47 5f 45 58 49 53 54 53 5f 53 41 4d 53 55 4e 47 3a 22 38 30 30 34 34 35 33 45 22 2c 50 50 5f 45 5f 54 52 41 4e 53 46 45 52 5f 54 4f 4b 45 4e 5f 49 4e 56 41 4c 49 44 5f 53 45 53 53 49 4f 4e 3a 22 38 30 30 34 33 35 41 30 22 7d 2c 6e 2e 45 73 74 73 45 72 72 6f 72 3d 7b 55 73 65 72 41 63 63 6f 75 6e 74 53 65 6c 65 63 74 69 6f 6e 49 6e 76 61 6c 69 64 3a 22 31 36 30 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 3a 22 35 30 30 32 30 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 41 70 69 56 65 72 73 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3a 22 35 30 30 32 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 4d 73 61 47 75 65 73 74 55 73 65 72 73 4e 6f 74 53 75 70 70 6f 72 74 Data Ascii: 7",PP_E_IDP_BINDING_EXISTS_SAMSUNG:"8004453E",PP_E_TRANSFER_TOKEN_INVALID_SESSION:"800435A0"},n.EstsError={UserAccountSelectionInvalid:"16001",UserUnauthorized:"50020",UserUnauthorizedApiVersionNotSupported:"500201",UserUnauthorizedMsaGuestUsersNotSupport
2024-03-19 15:50:57 UTC	2	IN	Data Raw: 2e 6a Data Ascii: .j
2024-03-19 15:50:57 UTC	16383	IN	Data Raw: 6f 69 6e 28 65 2e 71 75 65 72 79 2c 22 26 22 2c 22 3d 22 29 29 2c 65 2e 66 72 61 67 6d 65 6e 74 26 26 28 6e 2b 3d 22 23 22 2b 63 2e 6a 6f 69 6e 28 65 2e 66 72 61 67 6d 65 6e 74 2c 22 26 22 2c 22 3d 22 29 29 2c 6e 7d 2c 61 70 70 65 6e 64 43 75 72 72 65 6e 74 51 75 65 72 79 50 61 72 61 6d 65 74 65 72 49 66 4e 6f 74 45 78 69 73 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 44 2e 70 61 72 73 65 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3b 72 65 74 75 72 6e 20 63 2e 66 6f 72 45 61 63 68 28 6e 2e 71 75 65 72 79 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 65 3d 44 2e 61 64 64 49 66 4e 6f 74 45 78 69 73 74 28 65 2c 6e 2c 74 29 7d 29 29 2c 65 7d 2c 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 Data Ascii: oin(e.query,"&","=")),e.fragment&&(n+="#"+c.join(e.fragment,"&","=")),n},appendCurrentQueryParameterIfNotExist:function(e){var n=D.parse(window.location.href);return c.forEach(n.query,(function(n,t){e=D.addIfNotExist(e,n,t)})),e},append:function(e,n){var
2024-03-19 15:50:57 UTC	16383	IN	Data Raw: 65 73 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 2c 69 2c 61 29 7b 6c 3f 6c 2e 74 72 61 63 65 45 6e 64 52 65 71 75 65 73 74 28 65 2c 6e 2c 74 2c 69 2c 61 29 3a 61 26 26 61 28 29 7d 2c 73 2e 73 65 74 50 61 67 65 56 69 65 77 4d 6f 64 65 6c 3d 75 28 22 73 65 74 50 61 67 65 56 69 65 77 4d 6f 64 65 6c 22 29 2c 73 2e 6c 6f 67 43 6f 6d 70 6f 6e 65 6e 74 45 76 65 6e 74 3d 75 28 22 6c 6f 67 43 6f 6d 70 6f 6e 65 6e 74 45 76 65 6e 74 22 29 2c 73 2e 6c 6f 67 56 69 65 77 53 74 61 74 65 3d 75 28 22 6c 6f 67 56 69 65 77 53 74 61 74 65 22 29 2c 73 2e 73 65 74 56 69 65 77 56 69 65 77 4d 6f 64 65 6c 3d 75 28 22 73 65 74 56 69 65 77 56 69 65 77 4d 6f 64 65 6c 22 29 2c 73 2e 73 77 69 74 63 68 56 69 65 77 3d 75 28 22 73 77 69 74 63 68 56 69 65 77 22 29 2c 73 2e 70 6f 73 Data Ascii: est=function(e,n,t,i,a){l?l.traceEndRequest(e,n,t,i,a):a&&a()},s.setPageViewModel=u("setPageViewModel"),s.logComponentEvent=u("logComponentEvent"),s.logViewState=u("logViewState"),s.setViewViewModel=u("setViewViewModel"),s.switchView=u("switchView"),s.pos
2024-03-19 15:50:57 UTC	16383	IN	Data Raw: 5d 5d 3a 5b 5d 2c 53 3f 5b 5b 22 69 64 22 2c 53 5d 5d 3a 5b 5d 2c 43 3f 5b 5b 22 63 6c 69 65 6e 74 5f 69 64 22 2c 43 5d 5d 3a 5b 5d 2c 77 3f 5b 5b 22 66 63 69 22 2c 77 5d 5d 3a 5b 5d 2c 78 3f 5b 5b 22 6e 6f 70 61 22 2c 78 5d 5d 3a 5b 5d 29 2c 63 3d 7b 74 61 72 67 65 74 55 72 6c 3a 72 2e 61 64 64 28 22 47 65 74 4f 6e 65 54 69 6d 65 43 6f 64 65 2e 73 72 66 22 2c 61 29 2c 72 65 71 75 65 73 74 54 79 70 65 3a 69 2e 52 65 71 75 65 73 74 54 79 70 65 2e 50 6f 73 74 2c 64 61 74 61 3a 6f 2e 67 65 6e 65 72 61 74 65 52 65 71 75 65 73 74 53 74 72 69 6e 67 28 6d 29 2c 69 73 41 73 79 6e 63 3a 21 30 2c 74 69 6d 65 6f 75 74 3a 5f 2c 73 75 63 63 65 73 73 43 61 6c 6c 62 61 63 6b 3a 79 2c 66 61 69 6c 75 72 65 43 61 6c 6c 62 61 63 6b 3a 6b 2c 74 69 6d 65 6f 75 74 43 61 6c 6c Data Ascii: ]]:[],S?[["id",S]]:[],C?[["client_id",C]]:[],w?[["fci",w]]:[],x?[["nopa",x]]:[]),c={targetUrl:r.add("GetOneTimeCode.srf",a),requestType:i.RequestType.Post,data:o.generateRequestString(m),isAsync:!0,timeout:_,successCallback:y,failureCallback:k,timeoutCall
2024-03-19 15:50:57 UTC	16383	IN	Data Raw: 43 6f 6d 70 6f 6e 65 6e 74 28 70 2e 65 78 74 72 61 63 74 28 22 6c 63 22 29 29 29 29 7d 28 6e 2e 43 72 65 64 65 6e 74 69 61 6c 73 2e 46 65 64 65 72 61 74 69 6f 6e 52 65 64 69 72 65 63 74 55 72 6c 2c 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 6d 2e 43 6c 6f 75 64 46 65 64 65 72 61 74 69 6f 6e 3a 69 2e 69 64 70 52 65 64 69 72 65 63 74 55 72 6c 3d 6e 2e 43 72 65 64 65 6e 74 69 61 6c 73 2e 46 65 64 65 72 61 74 69 6f 6e 52 65 64 69 72 65 63 74 55 72 6c 3b 62 72 65 61 6b 3b 63 61 73 65 20 6d 2e 4c 69 6e 6b 65 64 49 6e 3a 69 2e 69 64 70 52 65 64 69 72 65 63 74 55 72 6c 3d 6e 2e 43 72 65 64 65 6e 74 69 61 6c 73 2e 4c 69 6e 6b 65 64 49 6e 50 61 72 61 6d 73 2e 4c 69 6e 6b 65 64 49 6e 52 65 64 69 72 65 63 74 55 72 6c 2c 69 2e 69 64 70 52 65 64 69 72 65 63 74 50 72 6f Data Ascii: Component(p.extract("lc"))))}(n.Credentials.FederationRedirectUrl,e);break;case m.CloudFederation:i.idpRedirectUrl=n.Credentials.FederationRedirectUrl;break;case m.LinkedIn:i.idpRedirectUrl=n.Credentials.LinkedInParams.LinkedInRedirectUrl,i.idpRedirectPro
2024-03-19 15:50:57 UTC	16383	IN	Data Raw: 75 73 65 72 6e 61 6d 65 3a 66 2e 63 6c 65 61 6e 73 65 55 73 65 72 6e 61 6d 65 28 61 29 2c 70 72 6f 6f 66 44 61 74 61 3a 4f 2e 70 72 6f 6f 66 2e 64 61 74 61 2c 70 72 6f 6f 66 54 79 70 65 3a 4f 2e 70 72 6f 6f 66 2e 74 79 70 65 2c 70 75 72 70 6f 73 65 3a 4f 2e 70 72 6f 6f 66 2e 69 73 4e 6f 70 61 3f 6c 2e 50 75 72 70 6f 73 65 2e 4e 6f 50 61 73 73 77 6f 72 64 3a 6c 2e 50 75 72 70 6f 73 65 2e 4f 74 63 4c 6f 67 69 6e 2c 66 6c 6f 77 54 6f 6b 65 6e 3a 70 2c 69 73 45 6e 63 72 79 70 74 65 64 3a 4f 2e 70 72 6f 6f 66 2e 69 73 45 6e 63 72 79 70 74 65 64 2c 73 69 74 65 49 64 3a 78 2c 63 6c 69 65 6e 74 49 64 3a 79 2c 66 6f 72 77 61 72 64 65 64 43 6c 69 65 6e 74 49 64 3a 6b 2c 6e 6f 50 61 42 75 62 62 6c 65 56 65 72 73 69 6f 6e 3a 54 2c 73 75 63 63 65 73 73 43 61 6c 6c 62 Data Ascii: username:f.cleanseUsername(a),proofData:O.proof.data,proofType:O.proof.type,purpose:O.proof.isNopa?l.Purpose.NoPassword:l.Purpose.OtcLogin,flowToken:p,isEncrypted:O.proof.isEncrypted,siteId:x,clientId:y,forwardedClientId:k,noPaBubbleVersion:T,successCallb
2024-03-19 15:50:57 UTC	16383	IN	Data Raw: 73 22 29 7d 29 29 2c 61 2e 73 68 6f 77 46 6f 6f 74 65 72 43 6f 6e 74 72 6f 6c 3d 69 2e 70 75 72 65 43 6f 6d 70 75 74 65 64 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 72 26 26 61 2e 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 4d 65 74 68 6f 64 73 28 29 26 26 61 2e 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 4d 65 74 68 6f 64 73 28 29 2e 68 61 73 49 6e 69 74 69 61 6c 56 69 65 77 53 68 6f 77 6e 28 29 7d 29 29 2c 61 2e 73 68 6f 77 4c 6f 67 6f 3d 69 2e 70 75 72 65 43 6f 6d 70 75 74 65 64 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 28 61 2e 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 4d 65 74 68 6f 64 73 28 29 26 26 61 2e 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 4d 65 74 68 6f 64 73 28 29 2e 63 75 Data Ascii: s")})),a.showFooterControl=i.pureComputed((function(){return!r&&a.paginationControlMethods()&&a.paginationControlMethods().hasInitialViewShown()})),a.showLogo=i.pureComputed((function(){return!(a.paginationControlMethods()&&a.paginationControlMethods().cu
2024-03-19 15:50:57 UTC	6	IN	Data Raw: 6b 65 64 3a 63 61 Data Ascii: ked:ca

Timestamp	Bytes transferred	Direction	Data
2024-03-19 15:50:57 UTC	656	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_pevuvrbnnz-5coi_b4jtbw2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-19 15:50:57 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2674916 Cache-Control: public, max-age=31536000 Content-MD5: CWi6wHL02j8bOmrVCAJelA== Content-Type: application/x-javascript Date: Tue, 19 Mar 2024 15:50:57 GMT Etag: 0x8DC2F767FC0BDAD Last-Modified: Sat, 17 Feb 2024 05:08:37 GMT Server: ECAcc (nya/790B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 26c190bb-201e-0075-23c1-612f2c000000 x-ms-version: 2009-09-19 Content-Length: 55021 Connection: close
2024-03-19 15:50:57 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 69 5b 6e 5d 29 72 65 74 75 72 6e 20 69 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 69 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 69 2c 6f 2e 70 3d 22 22 2c 6f 28 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 69 29 7b 69 28 32 29 3b 76 61 72 20 6e 3d 69 28 31 29 2c 74 3d 69 28 35 29 2c 72 3d 69 28 36 29 2c 61 3d 72 2e 53 74 72 69 6e Data Ascii: !function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.Strin
2024-03-19 15:50:57 UTC	16383	IN	Data Raw: 44 65 73 63 72 69 70 74 69 6f 6e 5f 55 6e 66 61 6d 69 6c 69 61 72 44 65 76 69 63 65 3d 22 54 6f 20 73 69 67 6e 20 69 6e 20 77 69 74 68 20 7b 30 7d 2c 20 70 6c 65 61 73 65 20 66 6f 6c 6c 6f 77 20 74 68 65 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 6f 6e 20 79 6f 75 72 20 70 68 6f 6e 65 20 61 6e 64 20 65 6e 74 65 72 20 74 68 65 20 6e 75 6d 62 65 72 20 79 6f 75 20 73 65 65 20 62 65 6c 6f 77 2e 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 54 69 74 6c 65 3d 22 52 65 71 75 65 73 74 20 74 69 6d 65 6f 75 74 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 50 61 67 65 44 65 73 63 72 69 70 74 69 6f 6e 3d 22 57 65 20 64 69 64 6e 27 74 20 68 65 61 72 20 66 72 6f 6d 20 79 6f 75 20 69 6e 20 74 69 6d 65 Data Ascii: Description_UnfamiliarDevice="To sign in with {0}, please follow the instructions on your phone and enter the number you see below.",e.CT_RNGC_STR_LS_Timeout_Title="Request timeout",e.CT_RNGC_STR_LS_Timeout_PageDescription="We didn't hear from you in time
2024-03-19 15:50:57 UTC	16383	IN	Data Raw: 6f 74 50 61 73 73 77 6f 72 64 30 22 20 68 72 65 66 3d 22 23 22 3e 72 65 73 65 74 20 69 74 20 6e 6f 77 2e 3c 2f 61 3e 27 3a 27 59 6f 75 72 20 65 6d 61 69 6c 20 6f 72 20 70 61 73 73 77 6f 72 64 20 69 73 20 69 6e 63 6f 72 72 65 63 74 2e 20 49 66 20 79 6f 75 20 64 6f 6e 5c 27 74 20 72 65 6d 65 6d 62 65 72 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 2c 20 3c 61 20 69 64 3d 22 69 64 41 5f 49 4c 5f 46 6f 72 67 6f 74 50 61 73 73 77 6f 72 64 30 22 20 68 72 65 66 3d 22 23 22 3e 72 65 73 65 74 20 69 74 20 6e 6f 77 2e 3c 2f 61 3e 27 2c 65 2e 43 54 5f 53 54 52 5f 43 6f 6e 66 69 72 6d 53 65 6e 64 5f 4f 74 63 3d 22 57 65 27 6c 6c 20 73 65 6e 64 20 61 20 63 6f 64 65 20 74 6f 20 7b 30 7d 20 74 6f 20 73 69 67 6e 20 79 6f 75 20 69 6e 2e 22 2c 65 2e 43 54 5f 4f 54 43 5f 53 54 Data Ascii: otPassword0" href="#">reset it now.</a>':'Your email or password is incorrect. If you don\'t remember your password, <a id="idA_IL_ForgotPassword0" href="#">reset it now.</a>',e.CT_STR_ConfirmSend_Otc="We'll send a code to {0} to sign you in.",e.CT_OTC_ST
2024-03-19 15:50:57 UTC	3	IN	Data Raw: 65 41 70 Data Ascii: eAp
2024-03-19 15:50:57 UTC	5869	IN	Data Raw: 70 56 65 72 73 69 6f 6e 22 2c 46 6c 6f 77 54 6f 6b 65 6e 45 78 70 69 72 65 64 54 66 61 3a 22 46 6c 6f 77 54 6f 6b 65 6e 45 78 70 69 72 65 64 22 2c 41 70 70 6c 69 63 61 74 69 6f 6e 55 73 65 64 49 73 4e 6f 74 41 6e 41 70 70 72 6f 76 65 64 41 70 70 52 65 71 75 69 72 65 64 42 79 43 6f 6e 64 69 74 69 6f 6e 61 6c 41 63 63 65 73 73 3a 22 35 33 30 30 32 31 22 2c 42 6c 6f 63 6b 65 64 42 79 43 6f 6e 64 69 74 69 6f 6e 61 6c 41 63 63 65 73 73 3a 22 35 33 30 30 33 22 2c 42 6c 6f 63 6b 65 64 42 79 43 6f 6e 64 69 74 69 6f 6e 61 6c 41 63 63 65 73 73 46 6f 72 52 65 6d 6f 74 65 44 65 76 69 63 65 46 6c 6f 77 3a 22 35 33 30 30 33 33 22 2c 42 72 6f 6b 65 72 41 70 70 4e 6f 74 49 6e 73 74 61 6c 6c 65 64 3a 22 35 30 31 32 37 22 2c 42 72 6f 6b 65 72 41 70 70 4e 6f 74 49 6e 73 74 Data Ascii: pVersion",FlowTokenExpiredTfa:"FlowTokenExpired",ApplicationUsedIsNotAnApprovedAppRequiredByConditionalAccess:"530021",BlockedByConditionalAccess:"53003",BlockedByConditionalAccessForRemoteDeviceFlow:"530033",BrokerAppNotInstalled:"50127",BrokerAppNotInst

Timestamp	Bytes transferred	Direction	Data
2024-03-19 15:50:57 UTC	640	OUT	GET / HTTP/1.1 Host: www.bankmenia.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-19 15:50:58 UTC	317	IN	HTTP/1.1 200 OK Date: Tue, 19 Mar 2024 15:50:58 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Request-Context: appId= Strict-Transport-Security: max-age=2592000 x-azure-ref: 20240319T155057Z-bcuvx21bpx2st1sqn8umvf1fw400000000eg00000000f7sr X-Cache: CONFIG_NOCACHE
2024-03-19 15:50:58 UTC	889	IN	Data Raw: 33 37 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 69 6e 67 20 53 75 63 63 65 73 73 66 75 6c 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 31 30 2e 30 30 30 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 Data Ascii: 372<!DOCTYPE html><html><head> <title>Ping Successful</title> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta http-equiv="X-UA-Compatible" content="IE=10.000"> <meta name="viewport" content="width=device
2024-03-19 15:50:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-03-19 15:50:58 UTC	651	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-19 15:50:58 UTC	719	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 7915673 Cache-Control: public, max-age=31536000 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Content-Type: image/x-icon Date: Tue, 19 Mar 2024 15:50:58 GMT Etag: 0x8D8731240E548EB Last-Modified: Sun, 18 Oct 2020 03:02:30 GMT Server: ECAcc (nya/792F) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 24fad771-c01e-003f-7517-32f228000000 x-ms-version: 2009-09-19 Content-Length: 17174 Connection: close
2024-03-19 15:50:58 UTC	16383	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-03-19 15:50:58 UTC	791	IN	Data Raw: 01 80 00 00 01 80 00 28 00 00 00 18 00 00 00 30 00 00 00 01 00 04 00 00 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 Data Ascii: (0"P""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330

Timestamp	Bytes transferred	Direction	Data
2024-03-19 15:50:58 UTC	620	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_7f0a8c2a247460fad87f.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-19 15:50:58 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2215143 Cache-Control: public, max-age=31536000 Content-MD5: eZ+IAUPxfkfE79uz/zWlTA== Content-Type: application/x-javascript Date: Tue, 19 Mar 2024 15:50:58 GMT Etag: 0x8DC2E5A3BC19A93 Last-Modified: Thu, 15 Feb 2024 19:13:46 GMT Server: ECAcc (nya/78C4) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 4b31b8fb-101e-006e-7def-65ba19000000 x-ms-version: 2009-09-19 Content-Length: 223759 Connection: close
2024-03-19 15:50:58 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-03-19 15:50:58 UTC	16383	IN	Data Raw: 30 21 3d 3d 28 6e 3d 65 2e 6f 72 69 67 69 6e 61 6c 4c 69 6e 65 2d 74 2e 6f 72 69 67 69 6e 61 6c 4c 69 6e 65 29 7c 7c 30 21 3d 3d 28 6e 3d 65 2e 6f 72 69 67 69 6e 61 6c 43 6f 6c 75 6d 6e 2d 74 2e 6f 72 69 67 69 6e 61 6c 43 6f 6c 75 6d 6e 29 3f 6e 3a 66 28 65 2e 6e 61 6d 65 2c 74 2e 6e 61 6d 65 29 7d 2c 74 2e 63 6f 6d 70 61 72 65 42 79 47 65 6e 65 72 61 74 65 64 50 6f 73 69 74 69 6f 6e 73 49 6e 66 6c 61 74 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 65 2e 67 65 6e 65 72 61 74 65 64 4c 69 6e 65 2d 74 2e 67 65 6e 65 72 61 74 65 64 4c 69 6e 65 3b 72 65 74 75 72 6e 20 30 21 3d 3d 72 7c 7c 30 21 3d 3d 28 72 3d 65 2e 67 65 6e 65 72 61 74 65 64 43 6f 6c 75 6d 6e 2d 74 2e 67 65 6e 65 72 61 74 65 64 43 6f 6c 75 6d 6e 29 7c 7c 30 21 3d 3d 28 Data Ascii: 0!==(n=e.originalLine-t.originalLine)\|\|0!==(n=e.originalColumn-t.originalColumn)?n:f(e.name,t.name)},t.compareByGeneratedPositionsInflated=function(e,t){var r=e.generatedLine-t.generatedLine;return 0!==r\|\|0!==(r=e.generatedColumn-t.generatedColumn)\|\|0!==(
2024-03-19 15:50:58 UTC	16383	IN	Data Raw: 67 74 68 3b 69 2b 3d 32 29 6f 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 5b 69 5d 2b 32 35 36 2a 6e 5b 69 2b 31 5d 29 3b 72 65 74 75 72 6e 20 6f 7d 66 75 6e 63 74 69 6f 6e 20 52 28 65 2c 74 2c 72 29 7b 69 66 28 65 25 31 21 3d 30 7c 7c 65 3c 30 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 6f 66 66 73 65 74 20 69 73 20 6e 6f 74 20 75 69 6e 74 22 29 3b 69 66 28 65 2b 74 3e 72 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 54 72 79 69 6e 67 20 74 6f 20 61 63 63 65 73 73 20 62 65 79 6f 6e 64 20 62 75 66 66 65 72 20 6c 65 6e 67 74 68 22 29 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 65 2c 74 2c 72 2c 6e 2c 6f 2c 69 29 7b 69 66 28 21 75 2e 69 73 42 75 66 66 65 72 28 65 29 29 74 68 72 6f 77 20 6e 65 Data Ascii: gth;i+=2)o+=String.fromCharCode(n[i]+256*n[i+1]);return o}function R(e,t,r){if(e%1!=0\|\|e<0)throw new RangeError("offset is not uint");if(e+t>r)throw new RangeError("Trying to access beyond buffer length")}function M(e,t,r,n,o,i){if(!u.isBuffer(e))throw ne
2024-03-19 15:50:58 UTC	16383	IN	Data Raw: 20 65 3d 74 68 69 73 3b 65 3d 65 2e 70 61 72 65 6e 74 3b 29 65 5b 68 5d 3d 21 31 7d 7d 7d 2c 7b 6b 65 79 3a 22 6e 65 78 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 74 68 69 73 2e 70 61 72 65 6e 74 29 72 65 74 75 72 6e 20 75 6e 64 65 66 69 6e 65 64 3b 76 61 72 20 65 3d 74 68 69 73 2e 70 61 72 65 6e 74 2e 69 6e 64 65 78 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 65 6e 74 2e 6e 6f 64 65 73 5b 65 2b 31 5d 7d 7d 2c 7b 6b 65 79 3a 22 70 6f 73 69 74 69 6f 6e 42 79 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 74 68 69 73 2e 73 6f 75 72 63 65 2e 73 74 61 72 74 3b 69 66 28 65 2e 69 6e 64 65 78 29 72 3d 74 68 69 73 2e 70 6f 73 69 74 69 6f 6e 49 6e 73 69 64 65 28 65 2e 69 6e 64 Data Ascii: e=this;e=e.parent;)e[h]=!1}}},{key:"next",value:function(){if(!this.parent)return undefined;var e=this.parent.index(this);return this.parent.nodes[e+1]}},{key:"positionBy",value:function(e,t){var r=this.source.start;if(e.index)r=this.positionInside(e.ind
2024-03-19 15:50:58 UTC	16383	IN	Data Raw: 70 61 72 73 65 28 29 7d 63 61 74 63 68 28 73 29 7b 74 68 72 6f 77 20 73 7d 72 65 74 75 72 6e 20 69 2e 72 6f 6f 74 7d 3b 74 5b 22 64 65 66 61 75 6c 74 22 5d 3d 73 2c 65 2e 65 78 70 6f 72 74 73 3d 74 5b 22 64 65 66 61 75 6c 74 22 5d 7d 2c 35 39 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3b 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 2c 74 5b 22 64 65 66 61 75 6c 74 22 5d 3d 76 6f 69 64 20 30 3b 76 61 72 20 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 72 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 76 61 72 20 72 3b 72 65 74 75 72 6e 28 72 3d 65 2e 63 61 6c 6c 28 74 68 69 73 2c 74 29 7c 7c 74 68 69 73 29 2e 74 79 70 65 3d 22 63 6f 6d 6d 65 6e 74 22 2c 72 7d 72 65 74 75 72 6e 20 Data Ascii: parse()}catch(s){throw s}return i.root};t["default"]=s,e.exports=t["default"]},595:function(e,t,r){"use strict";var n;t.__esModule=!0,t["default"]=void 0;var o=function(e){var t,r;function n(t){var r;return(r=e.call(this,t)\|\|this).type="comment",r}return
2024-03-19 15:50:58 UTC	16383	IN	Data Raw: 72 65 74 75 72 6e 20 61 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 2e 22 29 7d 72 65 74 75 72 6e 28 22 73 74 72 69 6e 67 22 3d 3d 3d 74 3f 53 74 72 69 6e 67 3a 4e 75 6d 62 65 72 29 28 65 29 7d 28 65 2c 22 73 74 72 69 6e 67 22 29 3b 72 65 74 75 72 6e 22 73 79 6d 62 6f 6c 22 3d 3d 6e 28 74 29 3f 74 3a 53 74 72 69 6e 67 28 74 29 7d 76 61 72 20 73 3d 72 28 36 33 36 29 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 72 2c 6e 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 28 74 68 69 73 2c Data Ascii: return a primitive value.")}return("string"===t?String:Number)(e)}(e,"string");return"symbol"==n(t)?t:String(t)}var s=r(636),a=function(){function e(t,r,n){!function(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}(this,
2024-03-19 15:50:58 UTC	16383	IN	Data Raw: 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 73 79 6e 63 28 29 2e 74 68 65 6e 28 65 2c 65 29 7d 2c 66 2e 68 61 6e 64 6c 65 45 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 72 79 7b 69 66 28 74 68 69 73 2e 65 72 72 6f 72 3d 65 2c 22 43 73 73 53 79 6e 74 61 78 45 72 72 6f 72 22 21 3d 3d 65 2e 6e 61 6d 65 7c 7c 65 2e 70 6c 75 67 69 6e 29 7b 69 66 28 74 2e 70 6f 73 74 63 73 73 56 65 72 73 69 6f 6e 29 3b 7d 65 6c 73 65 20 65 2e 70 6c 75 67 69 6e 3d 74 2e 70 6f 73 74 63 73 73 50 6c 75 67 69 6e 2c 65 2e 73 65 74 4d 65 73 73 61 67 65 28 29 7d 63 61 74 63 68 28 72 29 7b 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 72 29 7d 7d 2c 66 2e 61 73 79 6e 63 54 69 63 6b Data Ascii: ction(e){return this.async().then(e,e)},f.handleError=function(e,t){try{if(this.error=e,"CssSyntaxError"!==e.name\|\|e.plugin){if(t.postcssVersion);}else e.plugin=t.postcssPlugin,e.setMessage()}catch(r){console&&console.error&&console.error(r)}},f.asyncTick
2024-03-19 15:50:58 UTC	16383	IN	Data Raw: 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 72 61 77 73 2e 62 65 74 77 65 65 6e 29 72 65 74 75 72 6e 20 74 3d 65 2e 72 61 77 73 2e 62 65 74 77 65 65 6e 2e 72 65 70 6c 61 63 65 28 2f 5b 5e 5c 73 3a 5d 2f 67 2c 22 22 29 2c 21 31 7d 29 29 2c 74 7d 7d 2c 7b 6b 65 79 3a 22 72 61 77 45 6d 70 74 79 42 6f 64 79 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 65 2e 77 61 6c 6b 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 2e 6e 6f 64 65 73 26 26 30 3d 3d 3d 65 2e 6e 6f 64 65 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 28 74 3d 65 2e 72 61 77 73 2e 61 66 74 65 72 29 29 72 65 74 75 72 6e 21 31 7d 29 29 2c 74 7d 7d 2c 7b 6b 65 79 3a 22 72 61 77 49 6e 64 65 6e 74 22 2c 76 61 6c 75 65 3a 66 Data Ascii: fined"!=typeof e.raws.between)return t=e.raws.between.replace(/[^\s:]/g,""),!1})),t}},{key:"rawEmptyBody",value:function(e){var t;return e.walk((function(e){if(e.nodes&&0===e.nodes.length&&void 0!==(t=e.raws.after))return!1})),t}},{key:"rawIndent",value:f
2024-03-19 15:50:58 UTC	16383	IN	Data Raw: 79 3a 22 72 75 6e 4f 6e 52 6f 6f 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 72 65 73 75 6c 74 2e 6c 61 73 74 50 6c 75 67 69 6e 3d 65 3b 74 72 79 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 64 28 65 29 26 26 65 2e 4f 6e 63 65 29 7b 69 66 28 22 64 6f 63 75 6d 65 6e 74 22 3d 3d 3d 74 68 69 73 2e 72 65 73 75 6c 74 2e 72 6f 6f 74 2e 74 79 70 65 29 7b 76 61 72 20 72 3d 74 68 69 73 2e 72 65 73 75 6c 74 2e 72 6f 6f 74 2e 6e 6f 64 65 73 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 65 2e 4f 6e 63 65 28 72 2c 74 2e 68 65 6c 70 65 72 73 29 7d 29 29 3b 72 65 74 75 72 6e 20 50 28 72 5b 30 5d 29 3f 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 72 29 3a 72 7d 72 65 74 75 72 6e 20 65 Data Ascii: y:"runOnRoot",value:function(e){var t=this;this.result.lastPlugin=e;try{if("object"===d(e)&&e.Once){if("document"===this.result.root.type){var r=this.result.root.nodes.map((function(r){return e.Once(r,t.helpers)}));return P(r[0])?Promise.all(r):r}return e
2024-03-19 15:50:58 UTC	16383	IN	Data Raw: 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 21 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 3b 69 66 28 6f 28 74 68 69 73 2c 65 29 2c 74 68 69 73 2e 74 79 70 65 3d 22 77 61 72 6e 69 6e 67 22 2c 74 68 69 73 2e 74 65 78 74 3d 74 2c 72 2e 6e 6f 64 65 26 26 72 2e 6e 6f 64 65 2e 73 6f 75 72 63 65 29 7b 76 61 72 20 6e 3d 72 2e 6e 6f 64 65 2e 72 61 6e 67 65 42 79 28 72 29 3b 74 68 69 73 2e 6c 69 6e 65 3d 6e 2e 73 74 61 72 74 2e 6c 69 6e 65 2c 74 68 69 73 2e 63 6f 6c 75 6d 6e 3d 6e 2e 73 74 61 72 74 2e 63 6f 6c 75 6d 6e 2c 74 68 69 73 2e 65 6e 64 4c 69 6e 65 3d 6e 2e 65 6e 64 2e 6c 69 6e 65 2c 74 68 69 73 2e 65 6e 64 43 6f 6c 75 6d 6e 3d 6e 2e 65 6e 64 2e 63 6f 6c 75 6d 6e 7d 66 6f 72 28 Data Ascii: ments.length>1&&arguments[1]!==undefined?arguments[1]:{};if(o(this,e),this.type="warning",this.text=t,r.node&&r.node.source){var n=r.node.rangeBy(r);this.line=n.start.line,this.column=n.start.column,this.endLine=n.end.line,this.endColumn=n.end.column}for(

Timestamp	Bytes transferred	Direction	Data
2024-03-19 15:50:58 UTC	564	OUT	GET /Content/Sign_In_files/style.css HTTP/1.1 Host: www.bankmenia.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.bankmenia.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-19 15:50:59 UTC	388	IN	HTTP/1.1 200 OK Date: Tue, 19 Mar 2024 15:50:59 GMT Content-Type: text/css Content-Length: 7868 Connection: close ETag: "1da6fbb5cf54d3c" Last-Modified: Wed, 06 Mar 2024 11:42:27 GMT Request-Context: appId= Strict-Transport-Security: max-age=2592000 x-azure-ref: 20240319T155058Z-fa1fe52puh0tx1gmc2adqpu7yn00000000mg00000000au5z X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-03-19 15:50:59 UTC	7868	IN	Data Raw: 2a 20 7b 0d 0a 09 6d 61 72 67 69 6e 3a 30 70 78 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 30 70 78 3b 0d 0a 7d 0d 0a 68 74 6d 6c 2c 20 62 6f 64 79 0d 0a 7b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 31 30 30 25 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 31 30 30 25 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 65 67 6f 65 20 55 49 22 20 2c 20 22 53 65 67 6f 65 22 20 2c 20 22 53 65 67 6f 65 55 49 2d 52 65 67 75 6c 61 72 2d 66 69 6e 61 6c 22 2c 20 54 61 68 6f 6d 61 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 Data Ascii: * {margin:0px;padding:0px;}html, body{ height:100%; width:100%; background-color:#ffffff; color:#000000; font-weight:normal; font-family:"Segoe UI" , "Segoe" , "SegoeUI-Regular-final", Tahoma, Helvetica, Arial, sa

Timestamp	Bytes transferred	Direction	Data
2024-03-19 15:50:58 UTC	664	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-19 15:50:59 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 25721937 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Tue, 19 Mar 2024 15:50:59 GMT Etag: 0x8DB5C3F466DE917 Last-Modified: Wed, 24 May 2023 10:11:43 GMT Server: ECAcc (nya/791B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: d5d3e10a-601e-001b-0624-90b5e2000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-03-19 15:50:59 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Chrome Cache Entry: 92

Chrome Cache Entry: 93

Chrome Cache Entry: 94

Chrome Cache Entry: 95

Chrome Cache Entry: 96

Chrome Cache Entry: 97

Timestamp	Bytes transferred	Direction	Data
2024-03-19 15:50:58 UTC	665	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-19 15:50:59 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 25721937 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Tue, 19 Mar 2024 15:50:59 GMT Etag: 0x8DB5C3F495F4B8C Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (nya/7949) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: ac5ee99a-d01e-0064-7624-90b7da000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-03-19 15:50:59 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Timestamp	Bytes transferred	Direction	Data
2024-03-19 15:50:59 UTC	665	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-19 15:51:00 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1628158 Cache-Control: public, max-age=31536000 Content-MD5: R2FAVxfpONfnQAuxVxXbHg== Content-Type: image/svg+xml Date: Tue, 19 Mar 2024 15:51:00 GMT Etag: 0x8DB5C3F4BB4F03C Last-Modified: Wed, 24 May 2023 10:11:52 GMT Server: ECAcc (nya/7972) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 0110ca54-501e-007a-1046-6ba633000000 x-ms-version: 2009-09-19 Content-Length: 1592 Connection: close
2024-03-19 15:51:00 UTC	1592	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 2c 30 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,

Timestamp	Bytes transferred	Direction	Data
2024-03-19 15:51:00 UTC	590	OUT	GET /favicon.ico HTTP/1.1 Host: www.bankmenia.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bankmenia.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-19 15:51:01 UTC	336	IN	HTTP/1.1 500 Internal Server Error Date: Tue, 19 Mar 2024 15:51:01 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Request-Context: appId= Strict-Transport-Security: max-age=2592000 x-azure-ref: 20240319T155100Z-96kvh00x6h0kz4unh2dhw2d2x000000002n000000000ekf4 X-Cache: CONFIG_NOCACHE
2024-03-19 15:51:01 UTC	4278	IN	Data Raw: 31 30 61 65 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4d 69 63 72 6f 73 6f 66 74 20 70 61 67 65 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 30 30 70 78 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6c 75 6d 6e 32 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 70 78 20 30 70 78 20 Data Ascii: 10ae<!DOCTYPE html><html><head> <meta name="viewport" content="width=device-width"> <title>Microsoft page</title> <style> body { padding: 100px 0; } .column2 { padding: 0px 0px
2024-03-19 15:51:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-03-19 15:51:01 UTC	1209	OUT	GET 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 HTTP/1.1 Host: www.bankmenia.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-19 15:51:02 UTC	488	IN	HTTP/1.1 302 Found Date: Tue, 19 Mar 2024 15:51:02 GMT Content-Length: 0 Connection: close Location: https://security.microsoft.com/trainingassignments/assignment?cid=12944f91-d9a9-47ba-b0e0-0852caa7c9eb&trid=db8175cd-bafe-433a-a823-a2d6dd6c5e6a&uid=fd9f5c6d-3b23-4cbc-9da0-bb18b464c33b&isDedupEnabled=True Request-Context: appId= Strict-Transport-Security: max-age=2592000 x-azure-ref: 20240319T155101Z-7ttgvpcsqt73tftv4k0pa7cm04000000035g00000000bapk X-Cache: CONFIG_NOCACHE

Timestamp	Bytes transferred	Direction	Data
2024-03-19 15:51:05 UTC	659	OUT	GET /calendar/view/week HTTP/1.1 Host: outlook.office.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-19 15:51:05 UTC	901	IN	HTTP/1.1 417 Server: Microsoft-IIS/10.0 request-id: 764f4cd4-4e77-bb8b-9e5e-23c62d28312d Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Alt-Svc: h3=":443",h3-29=":443" X-PreferredRoutingKeyDiagnostics: 0 X-CalculatedFETarget: PH8PR07CU002.internal.outlook.com X-BackEndHttpStatus: 417 X-CalculatedBETarget: PH0PR13MB4988.NAMPRD13.PROD.OUTLOOK.COM X-BackEndHttpStatus: 417 x-besku: UNKNOWN X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-Proxy-RoutingCorrectness: 1 X-Proxy-BackendServerStatus: 417 X-BEPartition: Clique/CLNAMPRD13PHX00 X-FEProxyInfo: BL1PR13CA0071.NAMPRD13.PROD.OUTLOOK.COM X-FEEFZInfo: MNZ MS-CV: 1ExPdndOi7ueXiPGLSgxLQ.1.1 X-FEServer: PH8PR07CA0048 X-FirstHopCafeEFZ: MNZ X-Powered-By: ASP.NET X-FEServer: BL1PR13CA0071 Date: Tue, 19 Mar 2024 15:51:05 GMT Connection: close Content-Length: 0

Target ID:	0
Start time:	16:50:34
Start date:	19/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Target ID:	2
Start time:	16:50:37
Start date:	19/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2360 --field-trial-handle=2328,i,11421508955882250948,12753002877424257319,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Target ID:	3
Start time:	16:50:39
Start date:	19/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.bankmenia.org/nam/637d506f-142f-4107-9bcc-a59b77f4bd0e/12944f91-d9a9-47ba-b0e0-0852caa7c9eb/e4cc60f1-b3fe-4c79-b712-f90205d752c4/landing?id=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"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre