Play interactive tourEdit tour

Windows Analysis Report
https://teams.microsoft.com/v2/?meetingjoin=true#/l/meetup-join/19:d81bd4fe28f34d95aa8b764f4b9a7d05@thread.skype/1718003117882?context={"Tid"%3a"a9633fc0-aacc-4105-90b2-398485636c5d"%2c"Oid"%3a"847e53e2-7c4e-45e0-82dc-4253ff7c582b"}&anon=true&deeplinkId=56e387e7-5cc9-4bf4-b9e7-bf

Overview

General Information

Sample URL:	https://teams.microsoft.com/v2/?meetingjoin=true#/l/meetup-join/19:d81bd4fe28f34d95aa8b764f4b9a7d05@thread.skype/1718003117882?context={"Tid"%3a"a9633fc0-aacc-4105-90b2-398485636c5d"%2c"Oi
Analysis ID:	1455024
Infos:

Detection

Score:	3
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML title does not match URL

HTTP GET or POST without a user agent

Stores files to the Windows start menu directory

URL contains potential PII (phishing indication)

Uses insecure TLS / SSL version for HTTPS connection

Classification

×

Joe Sandbox Signatures

• • Phishing
• • Compliance
• • Networking
• • System Summary
• • Boot Survival

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Phishing

HTML body contains low number of good links

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=5e3ce6c0-2b1f-4285-8d4b-75ee78787346&scope=https%3A%2F%2Fapi.spaces.skype.com%2F.default%20openid%20profile%20offline_access&redirect_uri=https%3A%2F%2Fteams.microsoft.com%2Fv2&client-request-id=Core-f12d460b-beb0-4de6-9715-e2870952dbd3&response_mode=fragment&response_type=code&x-client-SKU=msal.js.browser&x-client-VER=3.7.1&client_info=1&code_challenge=-HGPu_hyy_87xlomdg1A7H2ioPipnRRQm2QKe44OVrU&code_challenge_method=S256&prompt=none&nonce=147a92b7-d59b-4943-8475-7f29c60bf7bb&state=eyJpZCI6ImEyYjlmNDkzLTQ4YWQtNDljMy1hOTkwLWZmZmZjMzczYjQxMyIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19

HTTP Parser: Number of links: 0

HTML title does not match URL

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=5e3ce6c0-2b1f-4285-8d4b-75ee78787346&scope=https%3A%2F%2Fapi.spaces.skype.com%2F.default%20openid%20profile%20offline_access&redirect_uri=https%3A%2F%2Fteams.microsoft.com%2Fv2&client-request-id=Core-f12d460b-beb0-4de6-9715-e2870952dbd3&response_mode=fragment&response_type=code&x-client-SKU=msal.js.browser&x-client-VER=3.7.1&client_info=1&code_challenge=-HGPu_hyy_87xlomdg1A7H2ioPipnRRQm2QKe44OVrU&code_challenge_method=S256&prompt=none&nonce=147a92b7-d59b-4943-8475-7f29c60bf7bb&state=eyJpZCI6ImEyYjlmNDkzLTQ4YWQtNDljMy1hOTkwLWZmZmZjMzczYjQxMyIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19

HTTP Parser: Title: Redirecting does not match URL

URL contains potential PII (phishing indication)

Source: https://teams.microsoft.com/v2/?meetingjoin=true#/l/meetup-join/19:d81bd4fe28f34d95aa8b764f4b9a7d05@thread.skype/1718003117882?context=%7b%22Tid%22%3a%22a9633fc0-aacc-4105-90b2-398485636c5d%22%2c%22Oid%22%3a%22847e53e2-7c4e-45e0-82dc-4253ff7c582b%22%7d&anon=true&deeplinkId=56e387e7-5cc9-4bf4-b9e7-bf87d5e88022

Sample URL: PII: 19:d81bd4fe28f34d95aa8b764f4b9a7d05@thread.skype

HTML page is missing a favicon

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=5e3ce6c0-2b1f-4285-8d4b-75ee78787346&scope=https%3A%2F%2Fapi.spaces.skype.com%2F.default%20openid%20profile%20offline_access&redirect_uri=https%3A%2F%2Fteams.microsoft.com%2Fv2&client-request-id=Core-f12d460b-beb0-4de6-9715-e2870952dbd3&response_mode=fragment&response_type=code&x-client-SKU=msal.js.browser&x-client-VER=3.7.1&client_info=1&code_challenge=-HGPu_hyy_87xlomdg1A7H2ioPipnRRQm2QKe44OVrU&code_challenge_method=S256&prompt=none&nonce=147a92b7-d59b-4943-8475-7f29c60bf7bb&state=eyJpZCI6ImEyYjlmNDkzLTQ4YWQtNDljMy1hOTkwLWZmZmZjMzczYjQxMyIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19

HTTP Parser: No favicon

META author tag missing

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=5e3ce6c0-2b1f-4285-8d4b-75ee78787346&scope=https%3A%2F%2Fapi.spaces.skype.com%2F.default%20openid%20profile%20offline_access&redirect_uri=https%3A%2F%2Fteams.microsoft.com%2Fv2&client-request-id=Core-f12d460b-beb0-4de6-9715-e2870952dbd3&response_mode=fragment&response_type=code&x-client-SKU=msal.js.browser&x-client-VER=3.7.1&client_info=1&code_challenge=-HGPu_hyy_87xlomdg1A7H2ioPipnRRQm2QKe44OVrU&code_challenge_method=S256&prompt=none&nonce=147a92b7-d59b-4943-8475-7f29c60bf7bb&state=eyJpZCI6ImEyYjlmNDkzLTQ4YWQtNDljMy1hOTkwLWZmZmZjMzczYjQxMyIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19

HTTP Parser: No <meta name="author".. found

META copyright tag missing

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=5e3ce6c0-2b1f-4285-8d4b-75ee78787346&scope=https%3A%2F%2Fapi.spaces.skype.com%2F.default%20openid%20profile%20offline_access&redirect_uri=https%3A%2F%2Fteams.microsoft.com%2Fv2&client-request-id=Core-f12d460b-beb0-4de6-9715-e2870952dbd3&response_mode=fragment&response_type=code&x-client-SKU=msal.js.browser&x-client-VER=3.7.1&client_info=1&code_challenge=-HGPu_hyy_87xlomdg1A7H2ioPipnRRQm2QKe44OVrU&code_challenge_method=S256&prompt=none&nonce=147a92b7-d59b-4943-8475-7f29c60bf7bb&state=eyJpZCI6ImEyYjlmNDkzLTQ4YWQtNDljMy1hOTkwLWZmZmZjMzczYjQxMyIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoic2lsZW50In19

HTTP Parser: No <meta name="copyright".. found

Compliance

Uses insecure TLS / SSL version for HTTPS connection

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49767 version: TLS 1.0

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49729 version: TLS 1.2

Networking

Detected non-DNS traffic on DNS port

Source: global traffic

TCP traffic: 192.168.2.5:50155 -> 1.1.1.1:53

HTTP GET or POST without a user agent

Source: global traffic

HTTP traffic detected: GET / HTTP/1.1Host: ipinfo.ioConnection: Keep-Alive

Uses insecure TLS / SSL version for HTTPS connection

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49767 version: TLS 1.0

Connects to IPs without corresponding DNS lookups

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Downloads files from webservers via HTTP

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: ipinfo.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v2/?meetingjoin=true HTTP/1.1Host: teams.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/worker/precompiled-web-worker-9300e78213b5b707.js HTTP/1.1Host: teams.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://teams.microsoft.com/v2/?meetingjoin=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: clocale=en-us; MUIDB=04DFFA4612536C6031A5EEDD13266D49
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: */*Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /v2/worker/precompiled-telemetry-web-worker-f8e7464df9ccd40c.js HTTP/1.1Host: teams.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://teams.microsoft.com/v2/?meetingjoin=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: clocale=en-us; MUIDB=04DFFA4612536C6031A5EEDD13266D49
Source: global traffic	HTTP traffic detected: GET /v2/manifest.json HTTP/1.1Host: teams.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://teams.microsoft.com/v2/?meetingjoin=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: clocale=en-us; MUIDB=04DFFA4612536C6031A5EEDD13266D49; MicrosoftApplicationsTelemetryDeviceId=1abe2ded-f883-4362-9485-28f343ad024b
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_RY3pVDLvjU_KKLtTKxjDFA2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2 HTTP/1.1Host: teams.microsoft.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MicrosoftApplicationsTelemetryDeviceId=1abe2ded-f883-4362-9485-28f343ad024b
Source: global traffic	HTTP traffic detected: GET /v2/ HTTP/1.1Host: teams.microsoft.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MicrosoftApplicationsTelemetryDeviceId=1abe2ded-f883-4362-9485-28f343ad024b
Source: global traffic	HTTP traffic detected: GET /api/mt/amer/beta/atpsafelinks/getpolicy/ HTTP/1.1Host: teams.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-ms-session-id: 5b350a64-b7a0-4bda-be41-ec1725a51f98x-ms-client-type: webx-ms-client-version: 1415/24050307617sec-ch-ua-mobile: ?0authorization: BearerUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36x-skypetoken: eyJhbGciOiJSUzI1NiIsImtpZCI6IjYwNUVCMzFEMzBBMjBEQkRBNTMxODU2MkM4QTM2RDFCMzIyMkE2MTkiLCJ4NXQiOiJZRjZ6SFRDaURiMmxNWVZpeUtOdEd6SWlwaGsiLCJ0eXAiOiJKV1QifQ.eyJpYXQiOjE3MTgwOTU0MjksImV4cCI6MTcxODE4MTgyOSwic2t5cGVpZCI6InRlYW1zdmlzaXRvcjoyNGI0M2Q3YTY3ZTg0NGRiYWEwZjExMzc5ZTJiNzBkZiIsInNjcCI6NzgwLCJjc2kiOiIxNzE4MDk1NDI5IiwicmduIjoiYW1lciJ9.RJdSex9S1jMRoaVSlRQkB6o0yopgeu381ZP41bUOE74drt9slnr19gQKWdQEl9Z9ipNXelIF0LBndByjT0-K_XhSHVt5_SXau5aR5wipCVMblDgmKmCnMC9wawqibp8qz0WtVsQnia8sQDRC066IFuB96FDc8hXj_BEzKNgzADS1UCISQI0S_AjVDps1CP3eWtgElhvmrtTVgR2yAHr5W9EE7mbv7pm18VRuVC_3Z_ZrPDuUErTq0CaDGSWMGMG0MbQutBfg9QBCRch2djRdX_2cwcEKnEHnjFfEYkifdxU4EjHfWc76yPbUgPcSVddZETOrc_IcQh84wA6Wbjgg0Qx-ms-request-id: x-ms-client-caller: sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://teams.microsoft.com/v2/?meetingjoin=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: clocale=en-us; MUIDB=04DFFA4612536C6031A5EEDD13266D49; MicrosoftApplicationsTelemetryDeviceId=1abe2ded-f883-4362-9485-28f343ad024b
Source: global traffic	HTTP traffic detected: GET /api/authsvc/v1.0/authz/visitor HTTP/1.1Host: teams.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUIDB=04DFFA4612536C6031A5EEDD13266D49; MicrosoftApplicationsTelemetryDeviceId=1abe2ded-f883-4362-9485-28f343ad024b
Source: global traffic	HTTP traffic detected: GET /api/mt/amer/beta/atpsafelinks/getpolicy/ HTTP/1.1Host: teams.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-ms-session-id: 5b350a64-b7a0-4bda-be41-ec1725a51f98x-ms-client-type: webx-ms-client-version: 1415/24050307617sec-ch-ua-mobile: ?0authorization: BearerUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36x-skypetoken: eyJhbGciOiJSUzI1NiIsImtpZCI6IjYwNUVCMzFEMzBBMjBEQkRBNTMxODU2MkM4QTM2RDFCMzIyMkE2MTkiLCJ4NXQiOiJZRjZ6SFRDaURiMmxNWVZpeUtOdEd6SWlwaGsiLCJ0eXAiOiJKV1QifQ.eyJpYXQiOjE3MTgwOTU0MjksImV4cCI6MTcxODE4MTgyOSwic2t5cGVpZCI6InRlYW1zdmlzaXRvcjoyNGI0M2Q3YTY3ZTg0NGRiYWEwZjExMzc5ZTJiNzBkZiIsInNjcCI6NzgwLCJjc2kiOiIxNzE4MDk1NDI5IiwicmduIjoiYW1lciJ9.RJdSex9S1jMRoaVSlRQkB6o0yopgeu381ZP41bUOE74drt9slnr19gQKWdQEl9Z9ipNXelIF0LBndByjT0-K_XhSHVt5_SXau5aR5wipCVMblDgmKmCnMC9wawqibp8qz0WtVsQnia8sQDRC066IFuB96FDc8hXj_BEzKNgzADS1UCISQI0S_AjVDps1CP3eWtgElhvmrtTVgR2yAHr5W9EE7mbv7pm18VRuVC_3Z_ZrPDuUErTq0CaDGSWMGMG0MbQutBfg9QBCRch2djRdX_2cwcEKnEHnjFfEYkifdxU4EjHfWc76yPbUgPcSVddZETOrc_IcQh84wA6Wbjgg0Qx-ms-request-id: x-ms-client-caller: sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://teams.microsoft.com/v2/?meetingjoin=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: clocale=en-us; MUIDB=04DFFA4612536C6031A5EEDD13266D49; MicrosoftApplicationsTelemetryDeviceId=1abe2ded-f883-4362-9485-28f343ad024b
Source: global traffic	HTTP traffic detected: GET /api/chatsvc/amer/v1/users/ME/conversations/48%3Anotifications?view=msnp24Equivalent HTTP/1.1Host: teams.microsoft.comConnection: keep-aliveclientinfo: os=windows; osVer=NT 10.0; proc=x86; lcid=en-us; deviceType=1; country=us; clientName=skypeteams; clientVer=1415/24050307617; utcOffset=-04:00; timezone=America/New_Yorkbehavioroverride: redirectAs404authentication: skypetoken=eyJhbGciOiJSUzI1NiIsImtpZCI6IjYwNUVCMzFEMzBBMjBEQkRBNTMxODU2MkM4QTM2RDFCMzIyMkE2MTkiLCJ4NXQiOiJZRjZ6SFRDaURiMmxNWVZpeUtOdEd6SWlwaGsiLCJ0eXAiOiJKV1QifQ.eyJpYXQiOjE3MTgwOTU0MjksImV4cCI6MTcxODE4MTgyOSwic2t5cGVpZCI6InRlYW1zdmlzaXRvcjoyNGI0M2Q3YTY3ZTg0NGRiYWEwZjExMzc5ZTJiNzBkZiIsInNjcCI6NzgwLCJjc2kiOiIxNzE4MDk1NDI5IiwicmduIjoiYW1lciJ9.RJdSex9S1jMRoaVSlRQkB6o0yopgeu381ZP41bUOE74drt9slnr19gQKWdQEl9Z9ipNXelIF0LBndByjT0-K_XhSHVt5_SXau5aR5wipCVMblDgmKmCnMC9wawqibp8qz0WtVsQnia8sQDRC066IFuB96FDc8hXj_BEzKNgzADS1UCISQI0S_AjVDps1CP3eWtgElhvmrtTVgR2yAHr5W9EE7mbv7pm18VRuVC_3Z_ZrPDuUErTq0CaDGSWMGMG0MbQutBfg9QBCRch2djRdX_2cwcEKnEHnjFfEYkifdxU4EjHfWc76yPbUgPcSVddZETOrc_IcQh84wA6Wbjgg0QUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://teams.microsoft.com/v2/worker/precompiled-web-worker-9300e78213b5b707.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: clocale=en-us; MUIDB=04DFFA4612536C6031A5EEDD13266D49; MicrosoftApplicationsTelemetryDeviceId=1abe2ded-f883-4362-9485-28f343ad024b
Source: global traffic	HTTP traffic detected: GET /api/csa/amer/api/v1/translator/languages?locale=en-us HTTP/1.1Host: teams.microsoft.comConnection: keep-alivex-ms-session-id: 5b350a64-b7a0-4bda-be41-ec1725a51f98x-ms-client-type: cdlworkerx-ms-client-version: 1415/24050307617authorization: BearerUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/jsonx-ms-request-id: 75779e85-171a-435e-914b-2a1383612c02cache-control: no-store, no-cachex-ms-client-caller: x-ringoverride: generalx-ms-use-acs-translation: trueAccept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://teams.microsoft.com/v2/worker/precompiled-web-worker-9300e78213b5b707.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: clocale=en-us; MUIDB=04DFFA4612536C6031A5EEDD13266D49; MicrosoftApplicationsTelemetryDeviceId=1abe2ded-f883-4362-9485-28f343ad024b
Source: global traffic	HTTP traffic detected: GET /api/csa/amer/api/v1/teams/users/anonymous?isPrefetch=false&enableMembershipSummary=true&enableRC2Fetch=false HTTP/1.1Host: teams.microsoft.comConnection: keep-alivex-ms-session-id: 5b350a64-b7a0-4bda-be41-ec1725a51f98x-ms-client-type: cdlworkerx-ms-client-version: 1415/24050307617authorization: Bearer eyJhbGciOiJSUzI1NiIsImtpZCI6IjYwNUVCMzFEMzBBMjBEQkRBNTMxODU2MkM4QTM2RDFCMzIyMkE2MTkiLCJ4NXQiOiJZRjZ6SFRDaURiMmxNWVZpeUtOdEd6SWlwaGsiLCJ0eXAiOiJKV1QifQ.eyJpYXQiOjE3MTgwOTU0MjksImV4cCI6MTcxODE4MTgyOSwic2t5cGVpZCI6InRlYW1zdmlzaXRvcjoyNGI0M2Q3YTY3ZTg0NGRiYWEwZjExMzc5ZTJiNzBkZiIsInNjcCI6NzgwLCJjc2kiOiIxNzE4MDk1NDI5IiwicmduIjoiYW1lciJ9.RJdSex9S1jMRoaVSlRQkB6o0yopgeu381ZP41bUOE74drt9slnr19gQKWdQEl9Z9ipNXelIF0LBndByjT0-K_XhSHVt5_SXau5aR5wipCVMblDgmKmCnMC9wawqibp8qz0WtVsQnia8sQDRC066IFuB96FDc8hXj_BEzKNgzADS1UCISQI0S_AjVDps1CP3eWtgElhvmrtTVgR2yAHr5W9EE7mbv7pm18VRuVC_3Z_ZrPDuUErTq0CaDGSWMGMG0MbQutBfg9QBCRch2djRdX_2cwcEKnEHnjFfEYkifdxU4EjHfWc76yPbUgPcSVddZETOrc_IcQh84wA6Wbjgg0QUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36x-ms-db-fast-failed: falsex-ms-request-id: e3c5d5b1-38e6-4c62-b6c5-10d233158c42cache-control: no-store, no-cachex-ms-request-priority: 0x-ms-client-caller: x-ringoverride: generalAccept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://teams.microsoft.com/v2/worker/precompiled-web-worker-9300e78213b5b707.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: clocale=en-us; MUIDB=04DFFA4612536C6031A5EEDD13266D49; MicrosoftApplicationsTelemetryDeviceId=1abe2ded-f883-4362-9485-28f343ad024b
Source: global traffic	HTTP traffic detected: GET /api/mt/amer/beta/userSettings/blocklist HTTP/1.1Host: teams.microsoft.comConnection: keep-alivex-ms-session-id: 5b350a64-b7a0-4bda-be41-ec1725a51f98x-ms-client-type: cdlworkerx-ms-client-version: 1415/24050307617authorization: BearerUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36x-skypetoken: eyJhbGciOiJSUzI1NiIsImtpZCI6IjYwNUVCMzFEMzBBMjBEQkRBNTMxODU2MkM4QTM2RDFCMzIyMkE2MTkiLCJ4NXQiOiJZRjZ6SFRDaURiMmxNWVZpeUtOdEd6SWlwaGsiLCJ0eXAiOiJKV1QifQ.eyJpYXQiOjE3MTgwOTU0MjksImV4cCI6MTcxODE4MTgyOSwic2t5cGVpZCI6InRlYW1zdmlzaXRvcjoyNGI0M2Q3YTY3ZTg0NGRiYWEwZjExMzc5ZTJiNzBkZiIsInNjcCI6NzgwLCJjc2kiOiIxNzE4MDk1NDI5IiwicmduIjoiYW1lciJ9.RJdSex9S1jMRoaVSlRQkB6o0yopgeu381ZP41bUOE74drt9slnr19gQKWdQEl9Z9ipNXelIF0LBndByjT0-K_XhSHVt5_SXau5aR5wipCVMblDgmKmCnMC9wawqibp8qz0WtVsQnia8sQDRC066IFuB96FDc8hXj_BEzKNgzADS1UCISQI0S_AjVDps1CP3eWtgElhvmrtTVgR2yAHr5W9EE7mbv7pm18VRuVC_3Z_ZrPDuUErTq0CaDGSWMGMG0MbQutBfg9QBCRch2djRdX_2cwcEKnEHnjFfEYkifdxU4EjHfWc76yPbUgPcSVddZETOrc_IcQh84wA6Wbjgg0Qx-ms-request-id: x-ms-client-caller: BlockedListSyncStrategy-onStartupAccept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://teams.microsoft.com/v2/worker/precompiled-web-worker-9300e78213b5b707.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: clocale=en-us; MUIDB=04DFFA4612536C6031A5EEDD13266D49; MicrosoftApplicationsTelemetryDeviceId=1abe2ded-f883-4362-9485-28f343ad024b
Source: global traffic	HTTP traffic detected: GET /api/csa/amer/api/v1/translator/languages?locale=en-us HTTP/1.1Host: teams.microsoft.comConnection: keep-alivex-ms-session-id: 5b350a64-b7a0-4bda-be41-ec1725a51f98x-ms-client-type: cdlworkerx-ms-client-version: 1415/24050307617authorization: BearerUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/jsonx-ms-request-id: 75779e85-171a-435e-914b-2a1383612c02cache-control: no-store, no-cachex-ms-client-caller: x-ringoverride: generalx-ms-use-acs-translation: trueAccept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://teams.microsoft.com/v2/worker/precompiled-web-worker-9300e78213b5b707.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: clocale=en-us; MUIDB=04DFFA4612536C6031A5EEDD13266D49; MicrosoftApplicationsTelemetryDeviceId=1abe2ded-f883-4362-9485-28f343ad024b
Source: global traffic	HTTP traffic detected: GET /api/mt/amer/beta/userSettings/blocklist HTTP/1.1Host: teams.microsoft.comConnection: keep-alivex-ms-session-id: 5b350a64-b7a0-4bda-be41-ec1725a51f98x-ms-client-type: cdlworkerx-ms-client-version: 1415/24050307617authorization: BearerUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36x-skypetoken: eyJhbGciOiJSUzI1NiIsImtpZCI6IjYwNUVCMzFEMzBBMjBEQkRBNTMxODU2MkM4QTM2RDFCMzIyMkE2MTkiLCJ4NXQiOiJZRjZ6SFRDaURiMmxNWVZpeUtOdEd6SWlwaGsiLCJ0eXAiOiJKV1QifQ.eyJpYXQiOjE3MTgwOTU0MjksImV4cCI6MTcxODE4MTgyOSwic2t5cGVpZCI6InRlYW1zdmlzaXRvcjoyNGI0M2Q3YTY3ZTg0NGRiYWEwZjExMzc5ZTJiNzBkZiIsInNjcCI6NzgwLCJjc2kiOiIxNzE4MDk1NDI5IiwicmduIjoiYW1lciJ9.RJdSex9S1jMRoaVSlRQkB6o0yopgeu381ZP41bUOE74drt9slnr19gQKWdQEl9Z9ipNXelIF0LBndByjT0-K_XhSHVt5_SXau5aR5wipCVMblDgmKmCnMC9wawqibp8qz0WtVsQnia8sQDRC066IFuB96FDc8hXj_BEzKNgzADS1UCISQI0S_AjVDps1CP3eWtgElhvmrtTVgR2yAHr5W9EE7mbv7pm18VRuVC_3Z_ZrPDuUErTq0CaDGSWMGMG0MbQutBfg9QBCRch2djRdX_2cwcEKnEHnjFfEYkifdxU4EjHfWc76yPbUgPcSVddZETOrc_IcQh84wA6Wbjgg0Qx-ms-request-id: x-ms-client-caller: BlockedListSyncStrategy-onStartupAccept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://teams.microsoft.com/v2/worker/precompiled-web-worker-9300e78213b5b707.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: clocale=en-us; MUIDB=04DFFA4612536C6031A5EEDD13266D49; MicrosoftApplicationsTelemetryDeviceId=1abe2ded-f883-4362-9485-28f343ad024b
Source: global traffic	HTTP traffic detected: GET /api/csa/amer/api/v1/teams/users/anonymous?isPrefetch=false&enableMembershipSummary=true&enableRC2Fetch=false HTTP/1.1Host: teams.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUIDB=04DFFA4612536C6031A5EEDD13266D49; MicrosoftApplicationsTelemetryDeviceId=1abe2ded-f883-4362-9485-28f343ad024b
Source: global traffic	HTTP traffic detected: GET /api/mt/amer/beta/users/defaultProfilePictureV2?displayname=Unknown%20User&size=undefined HTTP/1.1Host: teams.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://teams.microsoft.com/v2/?meetingjoin=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: clocale=en-us; MUIDB=04DFFA4612536C6031A5EEDD13266D49; MicrosoftApplicationsTelemetryDeviceId=1abe2ded-f883-4362-9485-28f343ad024b

Performs DNS lookups

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: us-api.asm.skype.com
Source: global traffic	DNS traffic detected: DNS query: teams.nel.measure.office.net

Posts data to webserver

Source: unknown

HTTP traffic detected: POST /api/authsvc/v1.0/authz/visitor HTTP/1.1Host: teams.microsoft.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"claimschallengecapable: truex-ms-skip-phone: trueclientrequestid: 07e8541e-a6e8-4a03-898c-d34f62656b44x-ms-client-type: webx-ms-client-version: 1415/24050307617sec-ch-ua-mobile: ?0authorization: Bearerms-teams-authz-type: ExplicitLoginUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36x-client-ui-language: en-usx-ms-request-id: 07e8541e-a6e8-4a03-898c-d34f62656b44sec-ch-ua-platform: "Windows"Accept: */*Origin: https://teams.microsoft.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://teams.microsoft.com/v2/?meetingjoin=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: clocale=en-us; MUIDB=04DFFA4612536C6031A5EEDD13266D49; MicrosoftApplicationsTelemetryDeviceId=1abe2ded-f883-4362-9485-28f343ad024b

Tries to download or post to a non-existing HTTP route (HTTP/1.1 404 Not Found / 503 Service Unavailable / 403 Forbidden)

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not Foundstrict-transport-security: max-age=2592000x-ring-info: web: general [assigned], mt: general [assigned]requestid: f9f0221bc5b803218569bc407e7d8730x-content-type-options: nosnifftiming-allow-origin: *x-xss-protection: 1; mode=blockx-frame-options: SAMEORIGINx-envoy-upstream-service-time: 19x-request-id: 8b39905e-0596-4960-8aa5-851886c81382X-Cache: CONFIG_NOCACHEX-MSEdge-Ref: Ref A: 13323224C89746968B03D2F0CA8F9117 Ref B: DFW311000110045 Ref C: 2024-06-11T08:43:10ZDate: Tue, 11 Jun 2024 08:43:09 GMTConnection: closeContent-Length: 0

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheContent-Length: 227Content-Type: application/json; charset=utf-8MS-CV: T2IEEgvtIUuBLkaJC+qxpQ.0ContextId: tcid=0,server=msgapi-production-eus-03-0,cv=T2IEEgvtIUuBLkaJC+qxpQ.0x-ms-latency: 33.7288X-Cache: CONFIG_NOCACHEX-MSEdge-Ref: Ref A: B4D9DD7755EF4785B736B23AF99B933B Ref B: DFW311000102053 Ref C: 2024-06-11T08:43:58ZDate: Tue, 11 Jun 2024 08:43:57 GMTConnection: close

URLs found in memory or binary data

Source: chromecache_455.2.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_638.2.dr	String found in binary or memory: http://schema.skype.com/CodeBlockEditor
Source: chromecache_492.2.dr	String found in binary or memory: http://www.ecma-international.org/publications/files/ECMA-ST/ECMA-404.pdf).
Source: chromecache_455.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_455.2.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js
Source: chromecache_541.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/103333-ce0bb66e9d8a2d6a.js.map
Source: chromecache_597.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/108560-c2ffdd2a1796f2b5.js.map
Source: chromecache_423.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/112363-74a99a80db962f73.js.map
Source: chromecache_602.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/113292-6c616470c2265b80.js.map
Source: chromecache_591.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/118843-952381ba325541f9.js.map
Source: chromecache_572.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/120116-267e9ee37c3619b9.js.map
Source: chromecache_574.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/12262-233ed48138dfaafd.js.map
Source: chromecache_522.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/123372-b923b75de272f6cb.js.map
Source: chromecache_524.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/123433-e7d17ed4fc6595df.js.map
Source: chromecache_570.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/131458-e0bafdd3df1b6e61.js.map
Source: chromecache_610.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/135662-b1a230e9c80ba0ff.js.map
Source: chromecache_464.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/138971-278d1df904e3f327.js.map
Source: chromecache_521.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/145476-0c4bbc34fa1995fb.js.map
Source: chromecache_580.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/146280-aeba489956729ecb.js.map
Source: chromecache_523.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/150990-fee1ef462e9189a7.js.map
Source: chromecache_631.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/151894-af5c07e5c2621262.js.map
Source: chromecache_532.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/15233-a95c5b3ae197697a.js.map
Source: chromecache_520.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/155153-d132f0847cd18b5f.js.map
Source: chromecache_518.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/160262-295a3137d29fedcd.js.map
Source: chromecache_621.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/164606-c4d325774db5e7d0.js.map
Source: chromecache_579.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/178095-980256a9efaf9e98.js.map
Source: chromecache_506.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/188824-05b61409daec8caf.js.map
Source: chromecache_607.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/19156-fc41951ba84d2584.js.map
Source: chromecache_409.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/191736-b838f4baf460bc0f.js.map
Source: chromecache_655.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/192895-f36f9c9972e760bc.js.map
Source: chromecache_443.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/193726-874dc8146298a04b.js.map
Source: chromecache_416.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/197373-a2799728d61a745d.js.map
Source: chromecache_504.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/20389-d49a7100e426ac91.js.map
Source: chromecache_493.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/21633-ced203f422e76da6.js.map
Source: chromecache_653.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/217606-f3b721b5a9b9bf7a.js.map
Source: chromecache_526.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/223831-584f48bf36d136ae.js.map
Source: chromecache_467.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/234945-3771dd8e378e22bb.js.map
Source: chromecache_553.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/239461-c774a8d13505a937.js.map
Source: chromecache_433.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/247486-a83b3a80100bc925.js.map
Source: chromecache_593.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/247671-0b41393253901a57.js.map
Source: chromecache_558.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/249196-05a53e0fc2e837a8.js.map
Source: chromecache_430.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/251316-4b166c665802bc67.js.map
Source: chromecache_554.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/253196-20f26578ebcb74fc.js.map
Source: chromecache_586.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/259389-4f836ab966f6eb01.js.map
Source: chromecache_420.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/266815-55d7f0dcc5e87669.js.map
Source: chromecache_546.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/271069-37c6a6627684da1f.js.map
Source: chromecache_512.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/277249-2c74230dd76c76f4.js.map
Source: chromecache_555.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/283366-8f8fd72fa22c75eb.js.map
Source: chromecache_453.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/28814-8089789f43d6ceaa.js.map
Source: chromecache_649.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/293357-e547af2925503aaa.js.map
Source: chromecache_484.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/297272-034baf3a9c7c01e5.js.map
Source: chromecache_637.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/298161-27ff756509e709f8.js.map
Source: chromecache_412.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/302515-bcabfa5307effcb1.js.map
Source: chromecache_525.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/308996-8694cefe20e3856d.js.map
Source: chromecache_442.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/31219-bc4aac0d1e74ac43.js.map
Source: chromecache_641.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/33335-d801b0f93bea76a9.js.map
Source: chromecache_491.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/337639-e2645371279e5e81.js.map
Source: chromecache_479.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/345540-d9b205cb4bd96607.js.map
Source: chromecache_646.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/351584-ae9aaf1af48c80bf.js.map
Source: chromecache_437.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/355296-f010bb3d7c77ba67.js.map
Source: chromecache_647.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/359826-cb45470b31ba1530.js.map
Source: chromecache_513.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/367152-195a35c98a626a0b.js.map
Source: chromecache_497.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/369941-4f2fd0db436a8567.js.map
Source: chromecache_516.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/377345-2f6ee9e0279a0190.js.map
Source: chromecache_589.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/381297-b3c1dc2a1fa33428.js.map
Source: chromecache_620.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/38261-9c3096eee72a368c.js.map
Source: chromecache_627.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/383235-f5f089c0f456f2d3.js.map
Source: chromecache_441.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/39247-482684fe0bcfb8eb.js.map
Source: chromecache_418.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/405750-e55de3164ad52bd9.js.map
Source: chromecache_603.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/405969-82b5b91c881a6167.js.map
Source: chromecache_536.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/406074-74a225d165f8be36.js.map
Source: chromecache_551.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/410028-935283f3f5a89b69.js.map
Source: chromecache_485.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/411735-ecfc65788a74c53c.js.map
Source: chromecache_515.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/424777-8c469ee905588647.js.map
Source: chromecache_438.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/426914-9a6d2b51df1cc6c6.js.map
Source: chromecache_624.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/43389-2af587ea8714dd60.js.map
Source: chromecache_529.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/435959-3ae1d512a3063297.js.map
Source: chromecache_608.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/4455-e308f602ce2b4dd2.js.map
Source: chromecache_450.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/447901-79e8886e35e9683a.js.map
Source: chromecache_633.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/453329-ea599f848b6a4c3f.js.map
Source: chromecache_626.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/466171-e1899a0930e94d01.js.map
Source: chromecache_495.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/470312-98ba5531862ba9b5.js.map
Source: chromecache_564.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/470947-a2867c5cb81201fa.js.map
Source: chromecache_477.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/473679-f7f3c884d718fc47.js.map
Source: chromecache_632.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/477168-7212f4fb7c873074.js.map
Source: chromecache_499.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/495133-04bb49950c7c36c1.js.map
Source: chromecache_468.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/495583-66d9fbd13568cd03.js.map
Source: chromecache_424.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/500408-7e3617bed848589c.js.map
Source: chromecache_517.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/501145-574c58bdda0e512b.js.map
Source: chromecache_565.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/501838-51e19435f6b85daa.js.map
Source: chromecache_492.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/515170-52d6c645647d1fb6.js.map
Source: chromecache_507.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/516152-d7b9d1259544ed70.js.map
Source: chromecache_539.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/516394-5b0ea090745e86f3.js.map
Source: chromecache_617.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/517479-705e8a5d39b40107.js.map
Source: chromecache_530.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/520129-fefc5b222c3b3030.js.map
Source: chromecache_429.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/522980-6e072c92f5e82f60.js.map
Source: chromecache_619.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/524312-568942857f7ab6ff.js.map
Source: chromecache_414.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/524786-0ffe3cc7f88c9819.js.map
Source: chromecache_605.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/52925-8a568b568a21887f.js.map
Source: chromecache_472.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/536008-62ec9170be27cd04.js.map
Source: chromecache_505.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/543131-a896149b5840655e.js.map
Source: chromecache_535.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/543158-b5088f4fffc4b5b1.js.map
Source: chromecache_537.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/544116-a85cc973c7ae347d.js.map
Source: chromecache_636.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/546528-a017ba2c621241e1.js.map
Source: chromecache_560.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/552520-24c59df5e2010aef.js.map
Source: chromecache_625.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/552648-8e7a3e9bf7a50ef2.js.map
Source: chromecache_483.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/555568-42caef566cb299e8.js.map
Source: chromecache_408.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/559333-0cd81af2be4a3eb1.js.map
Source: chromecache_498.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/561622-6014d55cbb97475c.js.map
Source: chromecache_590.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/56185-069df8594ed7545f.js.map
Source: chromecache_457.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/562228-ffa5d03402791e11.js.map
Source: chromecache_428.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/564709-f257eeecf1ddb0c0.js.map
Source: chromecache_478.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/566494-9935ea751fbeeef5.js.map
Source: chromecache_595.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/568672-23905f256f8636e6.js.map
Source: chromecache_582.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/579209-8edc50e79d87858e.js.map
Source: chromecache_421.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/596504-3028e17b3ae105a2.js.map
Source: chromecache_533.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/599718-1f8bd9225668e81a.js.map
Source: chromecache_448.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/602034-fa297775d30c9292.js.map
Source: chromecache_575.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/605381-56e537c567f70984.js.map
Source: chromecache_578.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/608668-fe93c9cb25015581.js.map
Source: chromecache_422.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/614837-b2f58787aca2a59d.js.map
Source: chromecache_606.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/618882-144fe5226d5f938b.js.map
Source: chromecache_644.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/626568-c965d6e424414170.js.map
Source: chromecache_540.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/630437-d935216ed58c4b79.js.map
Source: chromecache_614.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/633551-00e91350c1343fed.js.map
Source: chromecache_431.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/644963-35e0429f21eab35f.js.map
Source: chromecache_456.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/650145-95c6a509abab5b6c.js.map
Source: chromecache_527.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/654951-172dbc3053992c5b.js.map
Source: chromecache_604.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/660040-c44937bae11aaf85.js.map
Source: chromecache_425.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/663942-72c362d322380a0d.js.map
Source: chromecache_584.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/670983-d488488a07f26e81.js.map
Source: chromecache_411.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/675601-85668b88a54fff36.js.map
Source: chromecache_514.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/677963-01eecfb17838260e.js.map
Source: chromecache_419.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/690879-e328575fd182d349.js.map
Source: chromecache_489.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/691895-52618b06af2053b5.js.map
Source: chromecache_552.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/698382-a1c7311f75328605.js.map
Source: chromecache_609.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/708514-292526a465031317.js.map
Source: chromecache_652.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/714549-f79e011bf4be93e4.js.map
Source: chromecache_415.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/722640-adb92f8d655155f5.js.map
Source: chromecache_534.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/725461-651e01b728b8a903.js.map
Source: chromecache_452.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/737231-1878faec3d754b0f.js.map
Source: chromecache_439.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/738688-f6e3b1853db54a57.js.map
Source: chromecache_544.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/741097-771315d2eef6a4da.js.map
Source: chromecache_466.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/745468-057ce189ecd13d68.js.map
Source: chromecache_645.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/74936-0491a788d0cc0b5f.js.map
Source: chromecache_656.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/75754-564d4bfee0b6b83d.js.map
Source: chromecache_599.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/759277-af35275cdfa2b36b.js.map
Source: chromecache_538.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/759435-b228c0e050b2696b.js.map
Source: chromecache_459.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/77164-cc84d3efb9974245.js.map
Source: chromecache_410.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/775915-bddf7d8b814ef3a7.js.map
Source: chromecache_531.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/777013-65c5c9e95fa4aa1b.js.map
Source: chromecache_490.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/77704-27130be948295784.js.map
Source: chromecache_426.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/780837-ad2bf1a4146b510e.js.map
Source: chromecache_447.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/782904-a3275a6b61068a30.js.map
Source: chromecache_503.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/783512-53f95c2c034efbae.js.map
Source: chromecache_487.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/788081-ae808d783558ebe6.js.map
Source: chromecache_469.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/79861-621c8015969b12c6.js.map
Source: chromecache_587.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/80316-cc0b320fa67f7322.js.map
Source: chromecache_510.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/803757-0928485462ea512c.js.map
Source: chromecache_585.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/803908-1e10acb68dc76bcc.js.map
Source: chromecache_481.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/804618-6d00876ebb9f2ff9.js.map
Source: chromecache_566.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/80513-09d36904eca4fb44.js.map
Source: chromecache_643.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/806261-87346840a70070bd.js.map
Source: chromecache_482.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/807714-2238b576354cffc5.js.map
Source: chromecache_615.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/808530-32eb6d5e2ec96d73.js.map
Source: chromecache_623.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/810993-588f60559dc7fa52.js.map
Source: chromecache_651.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/812522-7e19551ee4de30c2.js.map
Source: chromecache_571.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/815702-58024747f77bc439.js.map
Source: chromecache_622.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/834380-26f08061d5f7af79.js.map
Source: chromecache_596.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/850629-9b2b1062f5d58f9e.js.map
Source: chromecache_488.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/852437-8d98f05001f3ab5a.js.map
Source: chromecache_640.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/859078-c3ed3183f5d5fe57.js.map
Source: chromecache_502.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/861694-57382fe272e8b830.js.map
Source: chromecache_629.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/865969-60adfe8523848a5d.js.map
Source: chromecache_474.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/866012-152d4d9a78eb73ea.js.map
Source: chromecache_594.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/876152-2de946c73dba1ce8.js.map
Source: chromecache_563.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/877980-fea84d5ea70aa469.js.map
Source: chromecache_559.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/879489-e3f56f90ae90a068.js.map
Source: chromecache_463.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/881367-dfabe8e3cac24268.js.map
Source: chromecache_547.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/888790-d07d0f17a6e18349.js.map
Source: chromecache_446.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/899904-498dc7aba27a8280.js.map
Source: chromecache_436.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/905134-3b3da70f4ff252a5.js.map
Source: chromecache_573.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/905199-d2d4b683ebd2a493.js.map
Source: chromecache_628.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/90576-38f83150842a982b.js.map
Source: chromecache_598.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/905944-611d1c05adde1b41.js.map
Source: chromecache_588.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/908818-95f20d21d9e37297.js.map
Source: chromecache_454.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/913266-3cc1736a55352448.js.map
Source: chromecache_634.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/913584-35885e92b94210df.js.map
Source: chromecache_635.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/915956-0f98f958383fd68d.js.map
Source: chromecache_417.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/926656-5df9ec70bae7add1.js.map
Source: chromecache_542.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/929498-50eac5190bf6cf61.js.map
Source: chromecache_618.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/939417-3dd7d13154b537ce.js.map
Source: chromecache_432.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/940682-c515edb82c483ee0.js.map
Source: chromecache_557.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/943434-45f930352f286b55.js.map
Source: chromecache_440.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/9493-d8f585e371cce5cc.js.map
Source: chromecache_567.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/951147-1c4a9eda87a738b1.js.map
Source: chromecache_592.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/9691-88b50eaadc76f931.js.map
Source: chromecache_543.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/971004-cc0941746eb9b0e4.js.map
Source: chromecache_413.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/977003-1f75c270cd0d294e.js.map
Source: chromecache_601.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/98017-a7ea41c6a20138cc.js.map
Source: chromecache_548.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/981783-904e00b45cc688fd.js.map
Source: chromecache_444.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/987554-ceb1fc4c74855368.js.map
Source: chromecache_569.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/995105-ca3d7c0a156494e4.js.map
Source: chromecache_550.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/995384-5f7048fd80b03035.js.map
Source: chromecache_581.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/995629-0da27d6472edf596.js.map
Source: chromecache_494.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/996226-e905eb927ad8191f.js.map
Source: chromecache_508.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/998279-0a75ec8fedd88cac.js.map
Source: chromecache_501.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/async-entry-53338466783bf793.js.map
Source: chromecache_639.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/calendar-locale-en-us-c3bd2a2f6f4a6872.js.ma
Source: chromecache_445.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/calling-cdl-calling-package-loader-f3d7fb6d4
Source: chromecache_435.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/calling-locale-en-us-0ba1dcc5f8a0ec55.js.map
Source: chromecache_528.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/config-prod-7dee4af10c1836f8.js.map
Source: chromecache_434.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/core-essentials-21a92aa04c84d805.js.map
Source: chromecache_642.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/data-schema-76b63564af588992.js.map
Source: chromecache_511.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/gallery-locale-en-us-fa03cc1fb7e944bc.js.map
Source: chromecache_583.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/global-auth-79bab38ef80edf64.js.map
Source: chromecache_648.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/main-cc8172a87a2b94ec.js.map
Source: chromecache_473.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/main-locale-en-us-79a71473a4698fa1.js.map
Source: chromecache_509.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/main-locale-en-us-e435d6aaf12a8fe7.worker.js
Source: chromecache_630.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/meeting-collaboration-locale-en-us-8b240ff5c
Source: chromecache_451.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/msal-service-3184c5436ebd3c84.js.map
Source: chromecache_500.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/msteams/data-view-schema-a2955928bda618c6.js
Source: chromecache_519.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/premium-benefits-locale-en-us-cfad7653402ae9
Source: chromecache_561.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/r_data-client-calling-1f52767527ff7b8b.js.ma
Source: chromecache_549.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/r_data-resolvers-browser-1gql-view-data-1526
Source: chromecache_556.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/r_data-resolvers-cypress-only-0d395bfd792d3d
Source: chromecache_577.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/r_data-schema-b974a8a9e7e65faa.js.map
Source: chromecache_568.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/r_data-schema-cdl-f87e11f86c4a89eb.js.map
Source: chromecache_616.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/recurrence-locale-en-us-651b2b023666e1f6.js.
Source: chromecache_654.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/services-calling-service-adapters-2254d9c484
Source: chromecache_449.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/services-crashes-b467980279c2026c.js.map
Source: chromecache_612.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/services-io-activity-85eb63ccdcd3a891.js.map
Source: chromecache_465.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/services-people-4516f1cd36ac4751.js.map
Source: chromecache_638.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/shell-app-3788b92f3ffb04d2.js.map
Source: chromecache_461.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/supermassive-incremental-link-6c570c33c0feda
Source: chromecache_496.2.dr	String found in binary or memory: https://local.teams.office.com/sourcemaps/hashed-assets/teams-and-channels-locale-en-us-966fae0fb80f

Uses HTTPS

Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50372
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50332
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50335
Source: unknown	Network traffic detected: HTTP traffic on port 50324 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50181
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50382
Source: unknown	Network traffic detected: HTTP traffic on port 50366 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50335 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50387 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50387
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 50367 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 50329 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 50332 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50371 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50322 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50368 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50364 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50326 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 50316 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50168
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50324
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50367
Source: unknown	Network traffic detected: HTTP traffic on port 50372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50371
Source: unknown	Network traffic detected: HTTP traffic on port 50181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 443

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49729 version: TLS 1.2

System Summary

Classification label

Source: classification engine

Classification label: clean3.win@22/486@12/5

Creates files inside the user directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Spawns processes

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2412 --field-trial-handle=2208,i,9057244393216316232,7462036577190797063,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://teams.microsoft.com/v2/?meetingjoin=true#/l/meetup-join/19:d81bd4fe28f34d95aa8b764f4b9a7d05@thread.skype/1718003117882?context=%7b%22Tid%22%3a%22a9633fc0-aacc-4105-90b2-398485636c5d%22%2c%22Oid%22%3a%22847e53e2-7c4e-45e0-82dc-4253ff7c582b%22%7d&anon=true&deeplinkId=56e387e7-5cc9-4bf4-b9e7-bf87d5e88022"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2412 --field-trial-handle=2208,i,9057244393216316232,7462036577190797063,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Windows shortcut file (LNK) contains relative path

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Found graphical window changes (likely an installer)

Source: Window Recorder

Window detected: More than 3 window changes detected

Boot Survival

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk			Jump to behavior