IOC Report
https://jmawireless-my.sharepoint.com

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 144
PNG image data, 192 x 103, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 145
HTML document, ASCII text, with very long lines (2345), with CRLF line terminators
downloaded
Chrome Cache Entry: 146
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 147
HTML document, Unicode text, UTF-8 text, with very long lines (941), with CRLF line terminators
dropped
Chrome Cache Entry: 148
GIF image data, version 89a, 352 x 3
dropped
Chrome Cache Entry: 149
ASCII text, with very long lines (61177)
downloaded
Chrome Cache Entry: 150
Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
downloaded
Chrome Cache Entry: 151
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 152
ASCII text, with very long lines (65446), with CRLF line terminators
downloaded
Chrome Cache Entry: 153
PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 154
ASCII text, with very long lines (512)
downloaded
Chrome Cache Entry: 155
MS Windows icon resource - 4 icons, 64x64, 32 bits/pixel, 32x32, 32 bits/pixel
downloaded
Chrome Cache Entry: 156
GIF image data, version 89a, 352 x 3
downloaded
Chrome Cache Entry: 157
PNG image data, 17 x 25, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 158
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 159
ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 160
GIF image data, version 89a, 352 x 3
dropped
Chrome Cache Entry: 161
PNG image data, 89 x 18, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 162
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 163
ASCII text, with very long lines (2054)
downloaded
Chrome Cache Entry: 164
ASCII text, with very long lines (43896)
downloaded
Chrome Cache Entry: 165
ASCII text, with very long lines (65450), with CRLF line terminators
downloaded
Chrome Cache Entry: 166
ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 167
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
downloaded
Chrome Cache Entry: 168
PNG image data, 89 x 18, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 169
HTML document, Unicode text, UTF-8 text, with very long lines (1094), with CRLF line terminators
downloaded
Chrome Cache Entry: 170
ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 171
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 444890
downloaded
Chrome Cache Entry: 172
PNG image data, 338 x 72, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 173
GIF image data, version 89a, 352 x 3
downloaded
Chrome Cache Entry: 174
ASCII text, with very long lines (3757)
downloaded
Chrome Cache Entry: 175
PNG image data, 17 x 25, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 176
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 177
ASCII text, with very long lines (14735)
downloaded
Chrome Cache Entry: 178
PNG image data, 16 x 25, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 179
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 180
MS Windows icon resource - 4 icons, 64x64, 32 bits/pixel, 32x32, 32 bits/pixel
dropped
Chrome Cache Entry: 181
ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 182
ASCII text, with very long lines (39257), with CRLF line terminators
downloaded
Chrome Cache Entry: 183
PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 184
ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 185
PNG image data, 16 x 25, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 186
PNG image data, 89 x 18, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 187
PNG image data, 720 x 405, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 188
PNG image data, 720 x 405, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 189
Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
downloaded
Chrome Cache Entry: 190
ASCII text, with very long lines (64612)
downloaded
Chrome Cache Entry: 191
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
dropped
Chrome Cache Entry: 192
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 193
ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 194
GIF image data, version 89a, 22 x 22
downloaded
Chrome Cache Entry: 195
ASCII text, with very long lines (45741)
downloaded
Chrome Cache Entry: 196
PNG image data, 89 x 18, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 197
Unicode text, UTF-8 text, with very long lines (32097)
downloaded
Chrome Cache Entry: 198
GIF image data, version 89a, 22 x 22
dropped
Chrome Cache Entry: 199
GIF image data, version 89a, 24 x 24
downloaded
Chrome Cache Entry: 200
PNG image data, 192 x 103, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 201
ASCII text, with very long lines (65447)
downloaded
Chrome Cache Entry: 202
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 203
ASCII text, with very long lines (65329), with CRLF line terminators
downloaded
Chrome Cache Entry: 204
ASCII text, with very long lines (64616)
downloaded
Chrome Cache Entry: 205
GIF image data, version 89a, 24 x 24
dropped
Chrome Cache Entry: 206
PNG image data, 338 x 72, 8-bit/color RGBA, non-interlaced
dropped
There are 54 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=2012,i,10823017092375802373,5579075643260688422,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://jmawireless-my.sharepoint.com"

URLs

Name
IP
Malicious
https://jmawireless-my.sharepoint.com
https://aadcdn.msftauthimages.net/dbd5a2dd-lfa6jvlreimgywhhs-c8kmaqnihskpfu3l8mv5xcc9i/logintenantbranding/0/illustration?ts=637441741242033826
13.107.213.60
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_presetpasswordsplitter_f7fbb7540d7be2ae771b.js
152.199.23.37
https://aadcdn.msftauth.net/shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg
152.199.23.37
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js
152.199.23.37
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js
152.199.23.37
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_vtf__v_j2jh3v2otg9k3lq2.js
152.199.23.37
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_ea3e62a2bdfb2b2ee8c8.js
152.199.23.37
https://passwordreset.microsoftonline.com/?ru=https%3a%2f%2flogin.microsoftonline.com%2ffd4efb89-68eb-42bb-bd22-018f0e50365b%2freprocess%3fctx%3drQQIARAAnVE_aNRgHE2aa-ydrT3q4ljOTj1z-ZJ8Sb4cdMi_04ras3-gnsiRP1_aeJdLmqTtXUsXdRAE6eyidnDoJIJYqqJzcegm3CxSO4h06qZ3uDgW3w8ej9_weLw3SXElrjwB_kJg-swAz-MYB_fVP4jHcvmXxW-X31aJ6k73Q-tr5cnDXVJZTtMoKbPs_cBa92PcxEnCBJ1SsmzFOAr9VlpywoCte2EcJKyLPWu1mZasJGrvkeQhSR6R5O7AiimpvCbysqYJECq6yvOaaZgQIE6ReEM3ZQlVOGTK0ORltfdjZEkSdQNAiHQJGBJSDFip6DpSRUNRFQVJOqfpmtQ7uWeHKrpqQN2AUNAMTRVNvjswOqOupst8n8LY38AnA9l-xnoUJukzKjNjgPVd6kzFvKEmPBdiz0YKIyFsM5C3bcZ2eZ4BHPIAFoEgifYBRYcRbvnuYYY8zgwDqjw0lMsTl4hx4jRD7gz26qW-f9z7RL9Tn_64-GX8_XXiYJBV51bWOq1bSzP29Ea7eGceuKo8JwZsI8Li_A2cWI0FVujUlAUOTEllbpsmt2l6n84OUXmiQOlV7hdNPj5H7Gf_f6jD82R3mMtlndCOrZbru2MTHGe7CCCBQTIGDORskbFtGTHAdqDgIAthZHWHYY52mpYfJGOTmwXfradhA7cK5c1CO0jqjtNXa1ZzFSeF8t1CL2rh3tbW1oORM7l_HiFOLxy9eHXy-9Hzn9eOR6_UrGrnqrbeuA2XikUnmk1qi8XZxZuNtoDnKpEcgXRaEWqRHBfVqdd54g81&mkt=en-US&hosted=0&device_platform=Windows+10
http://knockoutjs.com/
unknown
https://github.com/douglascrockford/JSON-js
unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_T2EBBtMmyv072RjbQwNpoQ2.js
152.199.23.37
https://login.windows-ppe.net
unknown
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_9oft0ybq1qhuafkqh5wryq2.css
152.199.23.37
http://gsgd.co.uk/sandbox/jquery/easing/
unknown
https://jmawireless-my.sharepoint.com/
13.107.136.10
https://login.microsoftonline.com/fd4efb89-68eb-42bb-bd22-018f0e50365b/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=E6A2B527BB3449CA22BEDE4081962DCE768F18E74E27A196%2D7665CD0448C60D689D4FFCC8A5D9A9986C1BCB6B6B79CA8FCAD4CD443BDBA5E2&redirect%5Furi=https%3A%2F%2Fjmawireless%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=23e42ba1%2D50b5%2D5000%2Da2da%2Dbc6ed7468b83
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_8e14dcf0e3ff5580d170.js
152.199.23.37
https://login.microsoftonline.com
unknown
http://www.opensource.org/licenses/mit-license.php)
unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
152.199.23.37
https://jmawireless-my.sharepoint.com/_layouts/15/Authenticate.aspx?Source=%2F
13.107.136.10
https://aadcdn.msftauthimages.net/dbd5a2dd-lfa6jvlreimgywhhs-c8kmaqnihskpfu3l8mv5xcc9i/logintenantbranding/0/bannerlogo?ts=637951424196423663
13.107.213.60
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
152.199.23.37
https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_RY3pVDLvjU_KKLtTKxjDFA2.js
152.199.23.37
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_7c1aa7609345f99e4914.js
152.199.23.37
https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
152.199.23.37
https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
152.199.23.37
https://jmawireless-my.sharepoint.com/_forms/default.aspx?ReturnUrl=%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252F&Source=cookie
13.107.136.10
https://aadcdn.msftauth.net/shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg
152.199.23.37
http://feross.org
unknown
https://account.live.com/resetpassword.aspx
unknown
https://login.microsoftonline.com/fd4efb89-68eb-42bb-bd22-018f0e50365b/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=E6A2B527BB3449CA22BEDE4081962DCE768F18E74E27A196%2D7665CD0448C60D689D4FFCC8A5D9A9986C1BCB6B6B79CA8FCAD4CD443BDBA5E2&redirect%5Furi=https%3A%2F%2Fjmawireless%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=23e42ba1%2D50b5%2D5000%2Da2da%2Dbc6ed7468b83&sso_reload=true
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js
152.199.23.37
There are 23 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
part-0039.t-0009.t-msedge.net
13.107.246.67
dual-spo-0005.spo-msedge.net
13.107.136.10
cs1100.wpc.omegacdn.net
152.199.23.37
part-0032.t-0009.t-msedge.net
13.107.213.60
www.google.com
142.250.185.164
part-0039.t-0009.fb-t-msedge.net
13.107.226.67
fp2e7a.wpc.phicdn.net
192.229.221.95
autologon.microsoftazuread-sso.com
40.126.32.138
passwordreset.microsoftonline.com
unknown
identity.nel.measure.office.net
unknown
aadcdn.msftauth.net
unknown
login.microsoftonline.com
unknown
jmawireless-my.sharepoint.com
unknown
ajax.aspnetcdn.com
unknown
aadcdn.msftauthimages.net
unknown
There are 5 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
13.107.136.10
dual-spo-0005.spo-msedge.net
United States
13.107.246.67
part-0039.t-0009.t-msedge.net
United States
192.168.2.4
unknown
unknown
192.168.2.5
unknown
unknown
142.250.185.164
www.google.com
United States
13.107.213.60
part-0032.t-0009.t-msedge.net
United States
13.107.226.67
part-0039.t-0009.fb-t-msedge.net
United States
239.255.255.250
unknown
Reserved
152.199.23.37
cs1100.wpc.omegacdn.net
United States

DOM / HTML

URL
Malicious
https://login.microsoftonline.com/fd4efb89-68eb-42bb-bd22-018f0e50365b/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=E6A2B527BB3449CA22BEDE4081962DCE768F18E74E27A196%2D7665CD0448C60D689D4FFCC8A5D9A9986C1BCB6B6B79CA8FCAD4CD443BDBA5E2&redirect%5Furi=https%3A%2F%2Fjmawireless%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=23e42ba1%2D50b5%2D5000%2Da2da%2Dbc6ed7468b83
https://login.microsoftonline.com/fd4efb89-68eb-42bb-bd22-018f0e50365b/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=E6A2B527BB3449CA22BEDE4081962DCE768F18E74E27A196%2D7665CD0448C60D689D4FFCC8A5D9A9986C1BCB6B6B79CA8FCAD4CD443BDBA5E2&redirect%5Furi=https%3A%2F%2Fjmawireless%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=23e42ba1%2D50b5%2D5000%2Da2da%2Dbc6ed7468b83&sso_reload=true
https://login.microsoftonline.com/fd4efb89-68eb-42bb-bd22-018f0e50365b/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=E6A2B527BB3449CA22BEDE4081962DCE768F18E74E27A196%2D7665CD0448C60D689D4FFCC8A5D9A9986C1BCB6B6B79CA8FCAD4CD443BDBA5E2&redirect%5Furi=https%3A%2F%2Fjmawireless%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=23e42ba1%2D50b5%2D5000%2Da2da%2Dbc6ed7468b83&sso_reload=true
https://login.microsoftonline.com/fd4efb89-68eb-42bb-bd22-018f0e50365b/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=E6A2B527BB3449CA22BEDE4081962DCE768F18E74E27A196%2D7665CD0448C60D689D4FFCC8A5D9A9986C1BCB6B6B79CA8FCAD4CD443BDBA5E2&redirect%5Furi=https%3A%2F%2Fjmawireless%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=23e42ba1%2D50b5%2D5000%2Da2da%2Dbc6ed7468b83&sso_reload=true
https://login.microsoftonline.com/fd4efb89-68eb-42bb-bd22-018f0e50365b/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=E6A2B527BB3449CA22BEDE4081962DCE768F18E74E27A196%2D7665CD0448C60D689D4FFCC8A5D9A9986C1BCB6B6B79CA8FCAD4CD443BDBA5E2&redirect%5Furi=https%3A%2F%2Fjmawireless%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=23e42ba1%2D50b5%2D5000%2Da2da%2Dbc6ed7468b83&sso_reload=true
https://passwordreset.microsoftonline.com/?ru=https%3a%2f%2flogin.microsoftonline.com%2ffd4efb89-68eb-42bb-bd22-018f0e50365b%2freprocess%3fctx%3drQQIARAAnVE_aNRgHE2aa-ydrT3q4ljOTj1z-ZJ8Sb4cdMi_04ras3-gnsiRP1_aeJdLmqTtXUsXdRAE6eyidnDoJIJYqqJzcegm3CxSO4h06qZ3uDgW3w8ej9_weLw3SXElrjwB_kJg-swAz-MYB_fVP4jHcvmXxW-X31aJ6k73Q-tr5cnDXVJZTtMoKbPs_cBa92PcxEnCBJ1SsmzFOAr9VlpywoCte2EcJKyLPWu1mZasJGrvkeQhSR6R5O7AiimpvCbysqYJECq6yvOaaZgQIE6ReEM3ZQlVOGTK0ORltfdjZEkSdQNAiHQJGBJSDFip6DpSRUNRFQVJOqfpmtQ7uWeHKrpqQN2AUNAMTRVNvjswOqOupst8n8LY38AnA9l-xnoUJukzKjNjgPVd6kzFvKEmPBdiz0YKIyFsM5C3bcZ2eZ4BHPIAFoEgifYBRYcRbvnuYYY8zgwDqjw0lMsTl4hx4jRD7gz26qW-f9z7RL9Tn_64-GX8_XXiYJBV51bWOq1bSzP29Ea7eGceuKo8JwZsI8Li_A2cWI0FVujUlAUOTEllbpsmt2l6n84OUXmiQOlV7hdNPj5H7Gf_f6jD82R3mMtlndCOrZbru2MTHGe7CCCBQTIGDORskbFtGTHAdqDgIAthZHWHYY52mpYfJGOTmwXfradhA7cK5c1CO0jqjtNXa1ZzFSeF8t1CL2rh3tbW1oORM7l_HiFOLxy9eHXy-9Hzn9eOR6_UrGrnqrbeuA2XikUnmk1qi8XZxZuNtoDnKpEcgXRaEWqRHBfVqdd54g81&mkt=en-US&hosted=0&device_platform=Windows+10
https://passwordreset.microsoftonline.com/?ru=https%3a%2f%2flogin.microsoftonline.com%2ffd4efb89-68eb-42bb-bd22-018f0e50365b%2freprocess%3fctx%3drQQIARAAnVE_aNRgHE2aa-ydrT3q4ljOTj1z-ZJ8Sb4cdMi_04ras3-gnsiRP1_aeJdLmqTtXUsXdRAE6eyidnDoJIJYqqJzcegm3CxSO4h06qZ3uDgW3w8ej9_weLw3SXElrjwB_kJg-swAz-MYB_fVP4jHcvmXxW-X31aJ6k73Q-tr5cnDXVJZTtMoKbPs_cBa92PcxEnCBJ1SsmzFOAr9VlpywoCte2EcJKyLPWu1mZasJGrvkeQhSR6R5O7AiimpvCbysqYJECq6yvOaaZgQIE6ReEM3ZQlVOGTK0ORltfdjZEkSdQNAiHQJGBJSDFip6DpSRUNRFQVJOqfpmtQ7uWeHKrpqQN2AUNAMTRVNvjswOqOupst8n8LY38AnA9l-xnoUJukzKjNjgPVd6kzFvKEmPBdiz0YKIyFsM5C3bcZ2eZ4BHPIAFoEgifYBRYcRbvnuYYY8zgwDqjw0lMsTl4hx4jRD7gz26qW-f9z7RL9Tn_64-GX8_XXiYJBV51bWOq1bSzP29Ea7eGceuKo8JwZsI8Li_A2cWI0FVujUlAUOTEllbpsmt2l6n84OUXmiQOlV7hdNPj5H7Gf_f6jD82R3mMtlndCOrZbru2MTHGe7CCCBQTIGDORskbFtGTHAdqDgIAthZHWHYY52mpYfJGOTmwXfradhA7cK5c1CO0jqjtNXa1ZzFSeF8t1CL2rh3tbW1oORM7l_HiFOLxy9eHXy-9Hzn9eOR6_UrGrnqrbeuA2XikUnmk1qi8XZxZuNtoDnKpEcgXRaEWqRHBfVqdd54g81&mkt=en-US&hosted=0&device_platform=Windows+10