Windows Analysis Report
Upper Shore Aging, Inc.pdf

• HCA enabled
• EGA enabled
• AMSI enabled

• Found application associated with file extension: .pdf
• Found PDF document
• Close Viewer

```json
{
  "riskscore": 0,
  "reasons": "The provided JavaScript code is related to performance measurement and does not exhibit any malicious behavior. It checks for the availability of the performance API and records timestamps. There are no indications of phishing or other harmful activities."
}

if(!spfxPerfMarks){var spfxPerfMarks = {};} var markPerfStage=function(key) {if(window.performance && typeof window.performance.now === 'function'){spfxPerfMarks[key]=window.performance.now();} else{spfxPerfMarks[key]=Date.now();} if (window.performance && typeof window.performance.mark === 'function') {window.performance.mark(key);}};

```json
{
  "riskscore": 2,
  "reasons": "The code appears to be part of a SharePoint page context information object, which is typical for legitimate SharePoint sites. It includes URLs and access tokens that are consistent with SharePoint's functionality. However, the presence of access tokens in the client-side code could potentially expose sensitive information if not properly secured. This is a minor risk but does not indicate malicious intent."
}

var _spPageContextInfo={"ListCountLimit":0,"FieldCountLimit":0,"ClientPrefetchBehavior":0,"IsConsumerListsPaidUser":false,"IsConsumerFilesPaidUser":false,"siteDisabled":false,"webServerRelativeUrl":"/personal/ahollis_uppershoreaging_org","webAbsoluteUrl":"https://uppershoreaging-my.sharepoint.com/personal/ahollis_uppershoreaging_org","viewId":"","webPropertyFlags2":0,"listId":"{239048c0-6704-4924-9306-b0e68e4b21c1}","listTemplateId":"","listPermsMask":{"High":48,"Low":134287360},"listUrl":"/personal/ahollis_uppershoreaging_org/Documents","listTitle":"Documents","listBaseTemplate":700,"listBaseType":1,"listForceCheckout":false,"thirdPartyReplyUrisUpdated":false,"ariaCollectorUrl":"https://browser.pipe.aria.microsoft.com/Collector/3.0/","secureBrokerDomainName":"securebroker.sharepointonline.com","oneDsCollectorUrl":"https://mobile.events.data.microsoft.com/OneCollector/1.0/","driveInfo":{".accessToken":"access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.eVqwwkExwGIRJoupVi95E0mnfQylLZUnNgfJMNIpYKE\u0026prooftoken=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.RWpgeeeOMfTHHRnWjZ-PlYtkQ3oy1MBgodF5mrepXr5ckf2XTKW6Nqytg5VxVDiN2D7Yi6FM7zXKfBu3RXW_AbHo9Tdkc9Ocy4A3Y4zgJ01V9BuGWXbJOgYhmJXxPUdhleDzGW5HegDJTkw8L3OcEbp0fBnKLxW7Ub9qDvzVYsm7Xb74PWhqTTWvd0LoSgmWt-53nL2joHzUhoriYLdxod7GLjffBTr0fwl2egs1eC-fxyWi_T8wm952O--LK1gD4aQC3c4UUV1Pex4vxJG6OkA0IXz5CMR96Pw9B6qNFyTZCMSukN1x5lP7jeVsJuR1wMc31XGitjjoem7opR_eqA",".driveUrl":"https://uppershoreaging-my.sharepoint.com/_api/v2.0/drives/b!_c-5mqmiAE6lI0tQ8YkBhooyy_THESZCk1mJK4migwPASJAjBGckSZMGsOaOSyHB",".driveAccessToken":"acce

```json
{
  "riskscore": 1,
  "reasons": "The provided JavaScript code appears to be related to configuring CDN failover mechanisms for loading resources from multiple URLs. It does not exhibit any behavior typically associated with malicious activity, such as data exfiltration, credential harvesting, or unauthorized access. The code is primarily focused on ensuring resource availability and handling fallback scenarios. Therefore, it is considered low risk."
}

window.__odsp_cdnConfig = {"baseUrls":["https://res-1.cdn.office.net/files/odsp-web-prod_2024-05-10.005/","https://res-2.cdn.office.net/files/odsp-web-prod_2024-05-10.005/"],"libraryKey":"sp-client","key":"odsp-web-prod_2024-05-10.005"};
(function () {
  var baseUrls = window.__odsp_cdnConfig.baseUrls;
  function getOrigin(url) {
    var match = url.match(/^https:\/\/[^\/]+\//);
    return match && match[0];
  }
  var origins = baseUrls.map(getOrigin);
  window.__backupBaseUrl = baseUrls[1];
  var backupBaseUrl = baseUrls[1];
  var failOverState = (window.__cdnFailOverState = {
    baseUrlFailedOver: false,
    modulesFalledBack: [],
    onPathFallback: function (moduleId, paths) {
      var failedModules = failOverState.modulesFalledBack;
      failedModules.push(moduleId);
      if (!failOverState.baseUrlFailedOver && failedModules.length >= 2) {
        for (var id in paths) {
          var items = paths[id];
          if (Array.isArray(items) && items.length > 1) {
            items.shift();
            require.undef(id);
            require(null, {
              skipMap: true
            })([id]);
          }
        }
        require.config({
          baseUrl: backupBaseUrl,
        });
        failOverState.baseUrlFailedOver = true;
      }
    },
  });
  function processConfigToSupportFailOver(config) {
    var paths = config.paths,
      bundles = config.bundles;
    function getUrl(origin, index) {
      return origin
        ? origins[index]
        : baseUrls[index];
    }
    for (var id in paths) {
      var path = paths[id];
      var backup;
      paths[id] = [];
      for (var _b = 0; _b < origins.length; _b++) {
        backup = path.replace(/^(https:\/\/[^\/]+\/)?/, function (match) {
          return getUrl(match, _b);
        });
        paths[id].push(backup);
      }
    }
    for (var id in bundles) {
      var path = paths[id];
      if (path) {
        for (var _a = bundles[id], i = _a.length - 1; i >= 0; i--) {
          paths[_a[i]] = path;
        }
      }
    }
    config.onPathFallback = function (opts) {
        var id = opts.moduleId,
        config = opts.config,
        deps = config && config.deps;
        if (id && deps && deps.indexOf(id) >= 0) {
            failOverState.onPathFallback(id, paths);
       }
    };
    return config;
  }
  var config = {paths:{"initial.resx":"oneuplightspeedwebpack/en-us/initial.resx","plt.office-ui-fabric-react":"oneuplightspeedwebpack/plt.office-ui-fabric-react","plt.odsp-common":"oneuplightspeedwebpack/plt.odsp-common","plt.items-view":"oneuplightspeedwebpack/plt.items-view","oneuplightspeedwebpack":"oneuplightspeedwebpack/oneuplightspeedwebpack","ondemand.resx":"oneuplightspeedwebpack/en-us/ondemand.resx","odsp.react.lib":"https://res-1.cdn.office.net/files/sp-client/odsp.react/odsp.react.lib-aa551099","odsp.1ds.lib":"https://res-1.cdn.office.net/files/sp-client/odsp.1ds/odsp.1ds.lib-0f147484","odsp-media":"https://res-1.cdn.office.net/files/sp-client/odsp-media-9dae1169

```json
{
  "riskscore": 0,
  "reasons": "The provided JavaScript code does not exhibit any malicious behavior. It primarily includes performance tracking, configuration settings, and a list of SRI (Subresource Integrity) hashes, which are used to ensure the integrity of resources. There are no signs of phishing, data exfiltration, or other malicious activities."
}

var g_responseEnd = new Date().getTime();window.performance && performance.mark('EUPL.W3CResponseEnd');window['FabricConfig'] = { fontBaseUrl: ''};window['__odsp_culture'] = 'en-us';window['__odspSriHashes'] = {"0":"sha256-6zmDBrAozdiLcbplz1Lgqq87t2hab7eCAbK3xbf9Ak0=","1":"sha256-MISjW4e9fytXupraC+jOFpkr4GVUkLLnvQxemy/tJ8w=","2":"sha256-Fn1w0+TyLj1Qe8MG5S03Uh5nnVMhKPQ+m+O9ExuQnvk=","3":"sha256-jLV+BQyGTdpLkb19MOOmLbAAxP+klauLX15wmrNA2vs=","4":"sha256-kyYAFGNCk8NQ2UaxTUOC+W31ZJ8oSgJ3nmZanE0uBzI=","5":"sha256-mgN05dJ4rypWE+UYd4ZytrkUZh6K01ERO5TRXTWTG0Q=","6":"sha256-JoHN3PjoK52fXzRNl7gsUkKP4zvjODVZ0LuW/Bavcc4=","7":"sha256-+iNCf0OsBQByjCzQOeUX+RHH0wv4xHDspYLhayda3s8=","8":"sha256-2lWhdDx+nfRoOtD9SIWR+PplW0VgKNZ+MFShy7Z5MKU=","9":"sha256-spy2plhyEoz4OnsoatAyYyh3Rt5OklXGHpc+5L4ua5w=","10":"sha256-S0497t7cmvCKI5Jue5d/gGT17ZV816sWBt3XsXAfXdQ=","11":"sha256-/PooNWMs1leNHIyKdnqbw1eLgYrdH0K96PbbhZLlPCQ=","12":"sha256-Qz1wa3hyZxt4aDdfZhr/sS663x85k6WZniImHg/2mDI=","13":"sha256-CVvvVzg/XnQMiZklF5C4I7tc4GPcvLBZq7NbQ+ebDpI=","14":"sha256-tm3OpcobyDf4CEpbjgu6deStGW3cAEazVU3mVqxcMcI=","15":"sha256-dhyzNKKBU55sa9Gc4jsKddcSPxRm7mznYx6kwPOQyd4=","16":"sha256-b6aMSw8b3MInqrhe97h1mJglCUCcwT6gVbc7Kq3YIHk=","17":"sha256-rxpa94YA63SRqgB4+KIZtGInRsMx+CSGZqPdLII7HT8=","18":"sha256-oj/ZPu4raq0PvYRlJR0K/bMJSu0+sXL8ixRegnEf2Gs=","19":"sha256-SMd/CkN49QCpA+ieGAYFnAxYztB2UeB8hJRZsavbMC4=","20":"sha256-OwMSI3jKhoxIk8GSvKwefBg+P2Q6PIYe7GKgdQVgoJE=","21":"sha256-IX6o97VbSdXj5VqLOJnsjgtyExTEudvGpYzHxE/PjL0=","22":"sha256-ZzHxQAX6mulJwvSLUkMlDnsXbdEr/vc8a7PsTmD5N10=","23":"sha256-mPsJevxdCNHQaGOF+eUVYqGlGTRk4yRqOWMaHGhVZFw=","24":"sha256-2H/mVimsBhNytmi4CFZoFt/oRV1drilXoLCrNikIM9g=","25":"sha256-clEBT0/awH0rXPA+aEa3p+DanlGbqsOVE9Q1CYyqRp8=","26":"sha256-rdyzZQ1yBWjatVPKyJywTUx5pSLj6UsFBjowh6ZkVFY=","27":"sha256-kc55f0ihhvwE2VUhQjfT+GO8fSYO+Ro4QmJ2xhRK/u4=","28":"sha256-qm/pnhop0ZKXz7AM2NEBobDvGGlLlRLmeJfkhYfGKWo=","29":"sha256-ekdBauhCmD4w8B0nXw7t6PH5SztDvNiPHSTYr05c7S4=","30":"sha256-Q2TvzVl++0JrA8UYrut3JPnumInGvaMKEfbcqnTsEOE=","31":"sha256-kl0lzZcLFp0ysG/IRtn/zeP5QuV2D3pi0znnRwvqq3Q=","32":"sha256-m5FG5fUUxo1oq0QQdrMkUTTYgzDqHNrP6ghc+0wTgDc=","33":"sha256-4aEW7fkOTuRI6TCsBc+Bo13OclbLrXFt7wq61xLiRv4=","34":"sha256-9PgBPZATeuMp9vRPD1jUTJM9PX7j4DPFKTFH6/SB+vs=","35":"sha256-JmyX6v0q4n3Dn2AxL3haCpqbLMtM8ocW8zDOi5i31ic=","36":"sha256-jw78GaSI8IV2wYjDQ471fz8UCI3qr2lI3YYUZGyn+zU=","37":"sha256-VPj+XEbSHTcqAeR6DCz8w/+SA06R4AX95hLK0iNtpd8=","38":"sha256-igyPghdwLXPjsfoFKV7U3UbWu2Kw+mlC1fCmDU7US7Q=","39":"sha256-hxc8dE+mAUB3ks/X66gVZjY8BPMUIMxaleqj4gdj0jI=","40":"sha256-TrnCq0TTV8IK5wxqEP8zIHcm9sLvL5qgpaOgZSXT7RQ=","41":"sha256-ksGnCq2L3ascj13r7w+LW5YYMmbK13YpdDT8klRta20=","42":"sha256-bGj5Jr3R0C+FA6NUsNxF0na7LtLbCsnL9CdKLMMtdRc=","43":"sha256-/p5xBRUpkUk4kpbseLjda5GGs0Gv9gKUgpPCEZ7ncH0=","44":"sha256-7LJ9n5yY/IAyOl7dGJn4F3dFr4R0G7nVIbtmi7cVCX4=","45":"sha256-F2cwgwCJe04LPFtGKYprSrcbIHYXhcsI5L76jxhADrw=","46":"sha256-EFSwNQ+nbIyU6p9U4OHuHDlysHTLeNypuBq7o8riWs8=","47":"sha256-4Rkml2kKVQWom

```json
{
  "riskscore": 2,
  "reasons": "The code dynamically loads a script from an external source (https://shell.cdn.office.net/api/ShellBootstrapper/business/OneShell) and handles errors by attempting to reload the script. While this behavior is not inherently malicious, it does introduce a slight risk if the external source is compromised. However, the domain 'office.net' appears to be a legitimate Microsoft domain, reducing the overall risk."
}

window.document.getElementById('SuiteNavShellCore').addEventListener('load', function() { (typeof markPerfStage === 'function' && markPerfStage('suiteNavScriptAsyncEnd')); if (window.executeSuiteNavOnce) { window.executeSuiteNavOnce() } });window.document.getElementById('SuiteNavShellCore').addEventListener('error', function() { 
var scriptElem = document.getElementById('SuiteNavShellCore');
scriptElem.parentNode.removeChild(scriptElem);
var newScript = document.createElement('script');
newScript.setAttribute('type', 'text/javascript');
newScript.setAttribute('id', 'SuiteNavShellCore');
newScript.setAttribute('src', 'https://shell.cdn.office.net/api/ShellBootstrapper/business/OneShell');
newScript.setAttribute('crossorigin', 'anonymous');
newScript.async = true;
newScript.addEventListener('load', function() { (typeof markPerfStage === 'function' && markPerfStage('suiteNavScriptAsyncEnd')); if (window.executeSuiteNavOnce) { window.executeSuiteNavOnce() } });
newScript.addEventListener('error', function() { window.o365ShellScriptLoadError = arguments[0]; (typeof markPerfStage === 'function' && markPerfStage('suiteNavScriptError')); if (window.executeSuiteNavOnce) { window.executeSuiteNavOnce() } });
document.head.appendChild(newScript); });

```json
{
  "riskscore": 1,
  "reasons": "The provided JavaScript code appears to be part of a SharePoint or similar document management system. It includes metadata and user information related to a PDF document. There are no indications of malicious behavior such as obfuscated code, suspicious network requests, or attempts to steal user data. The presence of user information and document metadata is typical for such systems. Therefore, the risk score is low."
}

var g_deferDataLoadTime = new Date().getTime();var g_payload = {"parameters":{"__metadata":{"type":"SP.RenderListDataParameters"},"RenderOptions":13850375,"AllowMultipleValueFilterForTaxonomyFields":true, "AddRequiredFields":true, "RequireFolderColoringFields": true}}; var g_listData = {"wpq":"","Templates":{},"ListData":{ "Row" : 
[{
	"ContentTypeId": "0x010100B86A268238A5494A8459B724ECD895C6",
	"_ModerationComments": "",
	"FileLeafRef": "Review and Print-RFP 0447283.pdf",
	"Modified_x0020_By": "i:0#.f|membership|ahollis@uppershoreaging.org",
	"Created_x0020_By": "i:0#.f|membership|ahollis@uppershoreaging.org",
	"File_x0020_Type": "pdf",
	"File_x0020_Type.mapapp": "",
	"HTML_x0020_File_x0020_Type.File_x0020_Type.mapcon": "",
	"HTML_x0020_File_x0020_Type.File_x0020_Type.mapico": "icpdf.png",
	"serverurl.progid": "",
	"ServerRedirectedEmbedUrl": "https:\u002f\u002fuppershoreaging-my.sharepoint.com\u002fpersonal\u002fahollis_uppershoreaging_org\u002f_layouts\u002f15\u002fEmbed.aspx?UniqueId=a5f5f6bc-ff5e-4540-9285-fcad5c7a5aa1",
	"File_x0020_Type.progid": "",
	"File_x0020_Type.url": "FALSE",
	"HTML_x0020_File_x0020_Type": "",
	"_SourceUrl": "",
	"_SharedFileIndex": "",
	"ComplianceAssetId": "",
	"Title": "",
	"SharedWith": "698",
	"IsMyDocuments": "",
	"IsMyDocuments.value": "",
	"SharedWithInternal": "",
	"_ShortcutUrl": "",
	"_ShortcutUrl.desc": "",
	"_ShortcutSiteId": "",
	"_ShortcutWebId": "",
	"_ShortcutUniqueId": "",
	"_ExtendedDescription": "",
	"TriggerFlowInfo": "",
	"MediaServiceMetadata": "",
	"MediaServiceFastMetadata": "",
	"MediaServiceAutoKeyPoints": "",
	"MediaServiceKeyPoints": "",
	"MediaServiceDateTaken": "",
	"PolicyDisabledUICapabilities": "7",
	"MediaServiceAutoTags": "",
	"MediaServiceOCR": "",
	"MediaServiceGenerationTime": "",
	"MediaServiceEventHashCode": "",
	"SharedWithUsers": "",
	"SharedWithDetails": "",
	"SharingHintHash": "",
	"_activity": "{\"FileActivityType\":\"9\",\"FileActivityTimeStamp\":\"2024-05-23T14:59:05.173Z\",\"FileActivityUsersOnPage\":[{\"DisplayName\":\"Andy Hollis\",\"Id\":\"ahollis@uppershoreaging.org\"}],\"FileActivityNavigationId\":null}",
	"_ColorHex": "",
	"_ColorTag": "",
	"_Emoji": "",
	"MediaServiceObjectDetectorVersions": "",
	"MediaServiceSystemTags": "",
	"MediaServiceSearchProperties": "",
	"ID": "698",
	"ContentType": "Document",
	"WelcomeViewId": "",
	"WelcomePageCustomized": "",
	"Created": "5\u002f23\u002f2024 7:56 AM",
	"Created.": "2024-05-23T14:56:52Z",
	"Created.FriendlyDisplay": "1|0|6|3",
	"Author": [{"id":"3","title":"Andy Hollis","email":"ahollis@uppershoreaging.org","sip":"ahollis@uppershoreaging.org","picture":"\u002fUser%20Photos\u002fProfile%20Pictures\u002f447c3f0d-3868-497c-b363-cfe54e9c02c2_MThumb.jpg"}],
	"Modified": "5\u002f23\u002f2024 7:56 AM",
	"Modified.": "2024-05-23T14:56:52Z",
	"Modified.FriendlyDisplay": "1|0|6|3",
	"Editor": [{"id":"3","title":"Andy Hollis","email":"ahollis@uppershoreaging.org","sip":"ahollis@uppershoreaging.org","picture":"\u002fUser%20Photo

```json
{
  "riskscore": 1,
  "reasons": "The provided JavaScript code appears to be part of a legitimate web application, specifically related to Microsoft's Office 365 suite. It includes functionality for rendering a navigation bar and handling promises for loading and rendering. There are no obvious signs of malicious activity such as data exfiltration, credential harvesting, or unauthorized access. The code also includes some theming and search query handling, which are typical for a web application. The presence of URLs and configurations related to Office 365 further supports the legitimacy of the code. However, as a precaution, any external URLs should be verified to ensure they are genuine and not part of a phishing attempt."
}

window.o365ShellLoadPromiseResolve = undefined; window.o365ShellLoadPromiseReject = undefined; window.o365ShellRenderPromiseResolve = undefined; window.o365ShellRenderPromiseReject = undefined; window.o365ShellPostRenderPromiseResolve = undefined; window.o365ShellPostRenderPromiseReject = undefined; window.o365ShellLoadPromise = new Promise(function (loadResolve, loadReject) { window.o365ShellLoadPromiseResolve = loadResolve, window.o365ShellLoadPromiseReject = loadReject }); window.o365ShellRenderPromise = new Promise(function (renderResolve, renderReject) { window.o365ShellRenderPromiseResolve = renderResolve, window.o365ShellRenderPromiseReject = renderReject }); window.o365ShellPostRenderPromise = new Promise(function (prResolve,prReject) { window.o365ShellPostRenderPromiseResolve = prResolve, window.o365ShellPostRenderPromiseReject = prReject });var executeSuiteNav = function () {var suiteNavPlaceholder = document.createElement('div');suiteNavPlaceholder.id = 'SuiteNavPlaceholder';suiteNavPlaceholder.style = "min-height: 48px";document.body.insertBefore(suiteNavPlaceholder, document.body.firstChild);if (window.o365ShellScriptLoadError) {o365ShellLoadPromiseReject(window.o365ShellScriptLoadError);o365ShellRenderPromiseReject(new Error('SuiteNavLoadError'));o365ShellPostRenderPromiseReject(new Error('SuiteNavLoadError'));return; }o365ShellLoadPromiseResolve();var themeData = {
                    Primary: 'transparent',
                    AppName: '#424242',
                    DefaultText: '#424242',
                    DefaultBackground: 'transparent',
                    HoverText: '#0F6CBD',
                    HoverBackground: '#EBEBEB',
                    SelectedText: '#0F6CBD',
                    SelectedBackground: '#E0E0E0',
                    PressedText: '#115EA3',
                    PressedBackground: '#D6D6D6',
                    SearchBoxBackgroundActive: '#FFFFFF',
                    SearchBoxBackgroundInactive: '#FFFFFF'
                };var searchQueryViewParam = window.location.search.substring(1).split('&').filter(function (s) { return s.indexOf('q=')===0; })[0]; var searchQuery = searchQueryViewParam ? decodeURIComponent(searchQueryViewParam.substring(2)) : ''; (typeof markPerfStage === 'function' && markPerfStage('suiteNavRenderAsyncStart'));O365Shell.RenderAsync({top: 'SuiteNavPlaceholder', layout: 'Mouse', enableSearchUX: false, initialSearchUXVisibility: false, initialSearchUXPlaceholderText: 'Search', initialSearchUXSearchText: searchQuery, enableDelayLoading: true, collapseO365Settings: false, disableDelayLoad: false, disableShellPlus: false, isThinHeader: true, enableLegacyResponsiveBehavior: false, expectSearchBoxSettings: true, darkAccent: '#82C7FF', shellAuthProviderConfig: { type: 'webAadWithMsaProxy', login_Hint: 'urn:spo:anon#4f0ed04952b0a7b5b28ec3950fab9d154e2fb8e62219bda93da346fe3ae61666', appSignInUrl: 'https://www.office.com/login?prompt=select_account&ru=%2Flaunch%2Fonedrive', appSignOutUrl: 'http

```json
{
  "riskscore": 0,
  "reasons": "The provided JavaScript code appears to be part of a legitimate web application configuration. It includes build information and settings for a module named 'OneUpLightSpeedWebPack'. There are no indications of malicious behavior such as data exfiltration, credential harvesting, or unauthorized access attempts."
}

window["_spModuleLink"]={"buildNumber":"odsp-web-prod_2024-05-10.005","targetBuildNumber":null,"isBuildAsExperimentRunning":false,"manifestName":"OneUpLightSpeedWebPack","scenarioName":"OneUpLightSpeedWebPack","bugLinkFormat":null,"ulsLinkFormat":null,"libraries":null,"usingRedirectCookie":false};

```json
{
  "riskscore": 1,
  "reasons": "The provided JavaScript code appears to be a polyfill or library for handling ES6 symbols. It does not exhibit any obvious malicious behavior such as data exfiltration, credential harvesting, or unauthorized access. The code primarily deals with defining and managing symbols, which are a feature of JavaScript. There are no suspicious network requests or obfuscated code that would indicate a phishing attempt. The risk score is set to 1 due to the general caution required when dealing with any third-party scripts."
}

!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports["es6-symbol"]=t():(e["es6-symbol"]=t(),e.Symbol=e.Symbol||e["es6-symbol"])}(window,function(){return n={},i.m=r=[function(e,t,r){"use strict";var n=r(16)();e.exports=function(e){return e!==n&&null!==e}},function(e,t,r){"use strict";e.exports=function(e){return null!=e}},function(e,t,r){"use strict";e.exports=r(3)()?Symbol:r(4)},function(e,t,r){"use strict";var n={object:!0,symbol:!0};e.exports=function(){var e;if("function"!=typeof Symbol)return!1;e=Symbol("test symbol");try{String(e)}catch(e){return!1}return!!n[typeof Symbol.iterator]&&!!n[typeof Symbol.toPrimitive]&&!!n[typeof Symbol.toStringTag]}},function(e,t,r){"use strict";var n,i,o,s,a=r(5),u=r(22),c=Object.create,f=Object.defineProperties,l=Object.defineProperty,p=Object.prototype,d=c(null);if("function"==typeof Symbol){n=Symbol;try{String(n()),s=!0}catch(e){}}var h,m=(h=c(null),function(e){for(var t,r,n=0;h[e+(n||"")];)++n;return h[e+=n||""]=!0,l(p,t="@@"+e,a.gs(null,function(e){r||(r=!0,l(this,t,a(e)),r=!1)})),t});o=function(e){if(this instanceof o)throw new TypeError("Symbol is not a constructor");return i(e)},e.exports=i=function e(t){var r;if(this instanceof e)throw new TypeError("Symbol is not a constructor");return s?n(t):(r=c(o.prototype),t=void 0===t?"":String(t),f(r,{__description__:a("",t),__name__:a("",m(t))}))},f(i,{for:a(function(e){return d[e]?d[e]:d[e]=i(String(e))}),keyFor:a(function(e){var t;for(t in u(e),d)if(d[t]===e)return t}),hasInstance:a("",n&&n.hasInstance||i("hasInstance")),isConcatSpreadable:a("",n&&n.isConcatSpreadable||i("isConcatSpreadable")),iterator:a("",n&&n.iterator||i("iterator")),match:a("",n&&n.match||i("match")),replace:a("",n&&n.replace||i("replace")),search:a("",n&&n.search||i("search")),species:a("",n&&n.species||i("species")),split:a("",n&&n.split||i("split")),toPrimitive:a("",n&&n.toPrimitive||i("toPrimitive")),toStringTag:a("",n&&n.toStringTag||i("toStringTag")),unscopables:a("",n&&n.unscopables||i("unscopables"))}),f(o.prototype,{constructor:a(i),toString:a("",function(){return this.__name__})}),f(i.prototype,{toString:a(function(){return"Symbol ("+u(this).__description__+")"}),valueOf:a(function(){return u(this)})}),l(i.prototype,i.toPrimitive,a("",function(){var e=u(this);return"symbol"==typeof e?e:e.toString()})),l(i.prototype,i.toStringTag,a("c","Symbol")),l(o.prototype,i.toStringTag,a("c",i.prototype[i.toStringTag])),l(o.prototype,i.toPrimitive,a("c",i.prototype[i.toPrimitive]))},function(e,t,r){"use strict";var a=r(1),u=r(6),c=r(10),f=r(18),l=r(19);(e.exports=function(e,t){var r,n,i,o,s;return arguments.length<2||"string"!=typeof e?(o=t,t=e,e=null):o=arguments[2],a(e)?(r=l.call(e,"c"),n=l.call(e,"e"),i=l.call(e,"w")):(r=i=!0,n=!1),s={value:t,configurable:r,enumerable:n,writable:i},o?c(f(o),s):s}).gs=function(e,t,r){var n,i,o,s;return"string"!=typeof e?(o=r,r=t,t=e,e=null):o

```json
{
  "riskscore": 1,
  "reasons": "The provided JavaScript code appears to be part of a legitimate functionality related to executing a navigation suite (likely for an Office 365 shell). It checks for certain URL parameters and conditions before executing the navigation suite. There are no obvious signs of malicious behavior such as data exfiltration, credential stealing, or unauthorized access. The use of window.parent and window.location.search is common in web applications. The risk score is set to 1 due to the minimal potential for misuse, but overall it seems benign."
}

window.executeSuiteNavOnce = function () {
    if (!window.hasSuiteNavExecuted && !!window.O365Shell) {
        (typeof markPerfStage === 'function' && markPerfStage('executeSuiteNavOnceStart'));
        
var params = window.location.search.substring(1).split('&') || [];
var shouldExecuteSuiteNav = true;
shouldExecuteSuiteNav &= params.indexOf('p=2') === -1;
shouldExecuteSuiteNav &= params.indexOf('p=12') === -1;
shouldExecuteSuiteNav &= params.indexOf('cl=true') === -1;
shouldExecuteSuiteNav &= params.filter(function (x) { return x.indexOf('parent') === 0; }).length === 0 || params.indexOf('p=5') !== -1;
try { shouldExecuteSuiteNav &= window.parent === window || window.parent.g_enableSuiteNavInIframe === true; } catch(err) { shouldExecuteSuiteNav = false; }
if (shouldExecuteSuiteNav) { executeSuiteNav(); window.hasSuiteNavExecuted = true; }

        (typeof markPerfStage === 'function' && markPerfStage('executeSuiteNavOnceEnd'));
        window.isSuiteNavDisabled = !window.hasSuiteNavExecuted;
    }
}
executeSuiteNavOnce();