Edit tour

Windows Analysis Report
https://sway.cloud.microsoft/Sac2nvv7Mrz0mzbj?ref=Link

Overview

General Information

Sample URL:	https://sway.cloud.microsoft/Sac2nvv7Mrz0mzbj?ref=Link
Analysis ID:	1470044
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Form action URLs do not match main URL

Found iframes

HTML body contains low number of good links

HTML title does not match URL

Program does not show much activity (idle)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3872 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6024 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2492 --field-trial-handle=2256,i,7678980693930225314,13678371135031919408,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7040 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6760 --field-trial-handle=2256,i,7678980693930225314,13678371135031919408,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2848 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6700 --field-trial-handle=2256,i,7678980693930225314,13678371135031919408,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6396 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sway.cloud.microsoft/Sac2nvv7Mrz0mzbj?ref=Link" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://sway.cloud.microsoft

LLM: Score: 8 brands: Microsoft Reasons: The URL 'https://sway.cloud.microsoft' is suspicious because it uses a subdomain structure that is not typical for Microsoft services. Legitimate Microsoft services usually use subdomains directly under 'microsoft.com' (e.g., 'sway.microsoft.com'). The page has a prominent login form, which is a common feature of phishing sites. The use of social engineering techniques is evident as the page prompts the user to sign in with a work or school account, which can mislead users into providing their credentials. There is no CAPTCHA present, which is often used in legitimate sites to prevent automated attacks. The overall design resembles a legitimate Microsoft login page, but the domain discrepancy raises significant concerns. DOM: 0.0.pages.csv

Source: https://login.live.com/oauth20_authorize.srf?client_id=10fa57ef-4895-4ab2-872c-8c3613d4f7fb&scope=openid+profile+offline_access&redirect_uri=https%3a%2f%2fwww.microsoft.com%2fcascadeauth%2faccount%2fsignin-oidc&response_type=code&state=CfDJ8GIDTS11_mxJlLbEvLbfH9OjmyRsSeiQY_ZdveYcKJC1MnU92VueW_5DkMElkoA55TknUw7dyN-BPytKmtRn4iNsGvSDZekQMKqv3wbJn7AaE7EEjAog9rZgx8s8fTEUuLZJSnbNRdQFA7k46IEOU-jdIjxLx0FEmIUmOjfw-jVRQKu30jb_QPD2ACWVSVN0SysRgDr--UI7hymZooKh9erhBrlURM13T0sQ4gw0uhTsEk4az6OppzUNO4zYpIHRaMRw85g7kwhpJtjdjX917ER9DJ2JXWvcOLBD86HIvHB7xdShclLcH_LKpWkXsAV7ACaOp99ufhcXP0kPeQZWMtfI0agUwjL2tixUiQxi0GVcM9IJ4AZAIskOawBKFWoYTXkf5kweljycAILcxvlysVdKSudjyLAXTUPj7KbT-rDyz3DLlnuGDXlFnbKCW_uKjKA2PK5PyFBIe8IYjaoV6MPCIdrt80hnjJnOL2RZE2191VRxum6gq6r3BHMMto0H2w&response_mode=form_post&nonce=638561211923006825.ZDY3ZjI1MmYtOGU5MS00OGQ2LTlmMzItYzhkNmE0YWY1MjY1N2Y5ZWY3ZGUtNzYxMC00YmY1LTkyMDAtNmVjYTE2ZDU5M2Mz&prompt=none&code_challenge=KK4AwrOLneexa1rLgK0WM-spgjNMYzv0lzHtefJIrfk&code_challenge_method=S256&x-client-SKU=ID_NET6_0&x-...

HTTP Parser: Form action: https://www.microsoft.com/cascadeauth/account/signin-oidc live microsoft

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c13cb6fd407&redirect_uri=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20profile%20offline_access&response_mode=form_post&nonce=638561211999833391.OTI2MWM1NTAtYmQ5MS00MzM3LWFhNmMtZTUxODc2ZmM2MzNkNDE2YzUzZDgtZDMwOC00ZWEwLTllZGUtZmEwZmZhMDU0ZTk2&prompt=none&nopa=2&state=CfDJ8CiTzr73KWNFsUGcHEnPeJpZQYRuZllgDIYVrWl4_AKUmFdiY-5XzW0ZvIbQK66oXDvmkoVwSryCNo3XqCfB04huRZh9L_qCKfrfcKHz-2No_iMh9dGZxbURBR5SXIFhDoPEnnfPQ5kYE9fJGy44WE7fSAjdiuapSmxQVGQCcqMMMpBwRYE9co6XK2iGvaleJZ6JnRBzzEH8PRZVdhZVfVCtjp_8qxsLU5TN_VWAqfO7MCRsdWET_PrljYSuJYbpSRWhHPhgYeMl5Hx-ZhiOHiZG3hhvyG-eCUDT90zPF9TTjBw8YHNk2BQXQImapV7WEoSbzBw4hS0_3Aa6numBTa19OJGTpO9hmCvKOWefwYEx&x-client-SKU=ID_NET6_0&x-client-ver=6.35.0.0

Source: https://login.live.com/oauth20_authorize.srf?client_id=10fa57ef-4895-4ab2-872c-8c3613d4f7fb&scope=openid+profile+offline_access&redirect_uri=https%3a%2f%2fwww.microsoft.com%2fcascadeauth%2faccount%2fsignin-oidc&response_type=code&state=CfDJ8GIDTS11_mxJlLbEvLbfH9OjmyRsSeiQY_ZdveYcKJC1MnU92VueW_5DkMElkoA55TknUw7dyN-BPytKmtRn4iNsGvSDZekQMKqv3wbJn7AaE7EEjAog9rZgx8s8fTEUuLZJSnbNRdQFA7k46IEOU-jdIjxLx0FEmIUmOjfw-jVRQKu30jb_QPD2ACWVSVN0SysRgDr--UI7hymZooKh9erhBrlURM13T0sQ4gw0uhTsEk4az6OppzUNO4zYpIHRaMRw85g7kwhpJtjdjX917ER9DJ2JXWvcOLBD86HIvHB7xdShclLcH_LKpWkXsAV7ACaOp99ufhcXP0kPeQZWMtfI0agUwjL2tixUiQxi0GVcM9IJ4AZAIskOawBKFWoYTXkf5kweljycAILcxvlysVdKSudjyLAXTUPj7KbT-rDyz3DLlnuGDXlFnbKCW_uKjKA2PK5PyFBIe8IYjaoV6MPCIdrt80hnjJnOL2RZE2191VRxum6gq6r3BHMMto0H2w&response_mode=form_post&nonce=638561211923006825.ZDY3ZjI1MmYtOGU5MS00OGQ2LTlmMzItYzhkNmE0YWY1MjY1N2Y5ZWY3ZGUtNzYxMC00YmY1LTkyMDAtNmVjYTE2ZDU5M2Mz&prompt=none&code_challenge=KK4AwrOLneexa1rLgK0WM-spgjNMYzv0lzHtefJIrfk&code_challenge_method=S256&x-client-SKU=ID_NET6_0&x-...	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c13cb6fd407&redirect_uri=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20profile%20offline_access&response_mode=form_post&nonce=638561211999833391.OTI2MWM1NTAtYmQ5MS00MzM3LWFhNmMtZTUxODc2ZmM2MzNkNDE2YzUzZDgtZDMwOC00ZWEwLTllZGUtZmEwZmZhMDU0ZTk2&prompt=none&nopa=2&state=CfDJ8CiTzr73KWNFsUGcHEnPeJpZQYRuZllgDIYVrWl4_AKUmFdiY-5XzW0ZvIbQK66oXDvmkoVwSryCNo3XqCfB04huRZh9L_qCKfrfcKHz-2No_iMh9dGZxbURBR5SXIFhDoPEnnfPQ5kYE9fJGy44WE7fSAjdiuapSmxQVGQCcqMMMpBwRYE9co6XK2iGvaleJZ6JnRBzzEH8PRZVdhZVfVCtjp_8qxsLU5TN_VWAqfO7MCRsdWET_PrljYSuJYbpSRWhHPhgYeMl5Hx-ZhiOHiZG3hhvyG-eCUDT90zPF9TTjBw8YHNk2BQXQImapV7WEoSbzBw4hS0_3Aa6numBTa19OJGTpO9hmCvKOWefwYEx&x-client-SKU=ID_NET6_0&x-client-ver=6.35.0.0	HTTP Parser: Number of links: 0

Source: https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=155&ct=1720524340&rver=7.5.2146.0&wp=MBI_SSL&wreply=https:%2F%2Fsway.cloud.microsoft%2Fauthredir%3Furl%3Dhttps%253a%252f%252fsway.cloud.microsoft%253a443%252fhome%252fsso%26hurl%3D%252bZ9wRR%252bJ0PU5Zb%252fYOli0tOBBaorRbnj16q%252fabzIZrmU%253d.eYXYY3UWHyHk0EBPKj%252bKALZv%252fDn6oAcVMb6h%252bY9udo0%253d%26ipt%3D0%26sn%3Dalternate%26si%3D1%26wctx%3D8c56732f-17da-41b6-908f-fff3265dca45&lc=1033&id=296906&lw=1&fl=easi2&aadredir=1	HTTP Parser: Title: Sign in to your Microsoft account does not match URL
Source: https://login.live.com/oauth20_authorize.srf?client_id=10fa57ef-4895-4ab2-872c-8c3613d4f7fb&scope=openid+profile+offline_access&redirect_uri=https%3a%2f%2fwww.microsoft.com%2fcascadeauth%2faccount%2fsignin-oidc&response_type=code&state=CfDJ8GIDTS11_mxJlLbEvLbfH9OjmyRsSeiQY_ZdveYcKJC1MnU92VueW_5DkMElkoA55TknUw7dyN-BPytKmtRn4iNsGvSDZekQMKqv3wbJn7AaE7EEjAog9rZgx8s8fTEUuLZJSnbNRdQFA7k46IEOU-jdIjxLx0FEmIUmOjfw-jVRQKu30jb_QPD2ACWVSVN0SysRgDr--UI7hymZooKh9erhBrlURM13T0sQ4gw0uhTsEk4az6OppzUNO4zYpIHRaMRw85g7kwhpJtjdjX917ER9DJ2JXWvcOLBD86HIvHB7xdShclLcH_LKpWkXsAV7ACaOp99ufhcXP0kPeQZWMtfI0agUwjL2tixUiQxi0GVcM9IJ4AZAIskOawBKFWoYTXkf5kweljycAILcxvlysVdKSudjyLAXTUPj7KbT-rDyz3DLlnuGDXlFnbKCW_uKjKA2PK5PyFBIe8IYjaoV6MPCIdrt80hnjJnOL2RZE2191VRxum6gq6r3BHMMto0H2w&response_mode=form_post&nonce=638561211923006825.ZDY3ZjI1MmYtOGU5MS00OGQ2LTlmMzItYzhkNmE0YWY1MjY1N2Y5ZWY3ZGUtNzYxMC00YmY1LTkyMDAtNmVjYTE2ZDU5M2Mz&prompt=none&code_challenge=KK4AwrOLneexa1rLgK0WM-spgjNMYzv0lzHtefJIrfk&code_challenge_method=S256&x-client-SKU=ID_NET6_0&x-...	HTTP Parser: Title: Continue does not match URL
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c13cb6fd407&redirect_uri=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20profile%20offline_access&response_mode=form_post&nonce=638561211999833391.OTI2MWM1NTAtYmQ5MS00MzM3LWFhNmMtZTUxODc2ZmM2MzNkNDE2YzUzZDgtZDMwOC00ZWEwLTllZGUtZmEwZmZhMDU0ZTk2&prompt=none&nopa=2&state=CfDJ8CiTzr73KWNFsUGcHEnPeJpZQYRuZllgDIYVrWl4_AKUmFdiY-5XzW0ZvIbQK66oXDvmkoVwSryCNo3XqCfB04huRZh9L_qCKfrfcKHz-2No_iMh9dGZxbURBR5SXIFhDoPEnnfPQ5kYE9fJGy44WE7fSAjdiuapSmxQVGQCcqMMMpBwRYE9co6XK2iGvaleJZ6JnRBzzEH8PRZVdhZVfVCtjp_8qxsLU5TN_VWAqfO7MCRsdWET_PrljYSuJYbpSRWhHPhgYeMl5Hx-ZhiOHiZG3hhvyG-eCUDT90zPF9TTjBw8YHNk2BQXQImapV7WEoSbzBw4hS0_3Aa6numBTa19OJGTpO9hmCvKOWefwYEx&x-client-SKU=ID_NET6_0&x-client-ver=6.35.0.0	HTTP Parser: Title: Redirecting does not match URL

Source: about:blank	HTTP Parser: No favicon
Source: https://www.xbox.com/en-US/	HTTP Parser: No favicon
Source: https://www.xbox.com/en-US/	HTTP Parser: No favicon
Source: https://www.xbox.com/en-US/	HTTP Parser: No favicon
Source: https://www.xbox.com/en-US/	HTTP Parser: No favicon
Source: https://fpt.microsoft.com/tags?session_id=771645ce-baa8-406b-94b2-13496ffa2b30	HTTP Parser: No favicon
Source: https://www.bing.com/secure/Passport.aspx?popup=1&ssl=1	HTTP Parser: No favicon
Source: https://login.live.com/oauth20_authorize.srf?client_id=10fa57ef-4895-4ab2-872c-8c3613d4f7fb&scope=openid+profile+offline_access&redirect_uri=https%3a%2f%2fwww.microsoft.com%2fcascadeauth%2faccount%2fsignin-oidc&response_type=code&state=CfDJ8GIDTS11_mxJlLbEvLbfH9OjmyRsSeiQY_ZdveYcKJC1MnU92VueW_5DkMElkoA55TknUw7dyN-BPytKmtRn4iNsGvSDZekQMKqv3wbJn7AaE7EEjAog9rZgx8s8fTEUuLZJSnbNRdQFA7k46IEOU-jdIjxLx0FEmIUmOjfw-jVRQKu30jb_QPD2ACWVSVN0SysRgDr--UI7hymZooKh9erhBrlURM13T0sQ4gw0uhTsEk4az6OppzUNO4zYpIHRaMRw85g7kwhpJtjdjX917ER9DJ2JXWvcOLBD86HIvHB7xdShclLcH_LKpWkXsAV7ACaOp99ufhcXP0kPeQZWMtfI0agUwjL2tixUiQxi0GVcM9IJ4AZAIskOawBKFWoYTXkf5kweljycAILcxvlysVdKSudjyLAXTUPj7KbT-rDyz3DLlnuGDXlFnbKCW_uKjKA2PK5PyFBIe8IYjaoV6MPCIdrt80hnjJnOL2RZE2191VRxum6gq6r3BHMMto0H2w&response_mode=form_post&nonce=638561211923006825.ZDY3ZjI1MmYtOGU5MS00OGQ2LTlmMzItYzhkNmE0YWY1MjY1N2Y5ZWY3ZGUtNzYxMC00YmY1LTkyMDAtNmVjYTE2ZDU5M2Mz&prompt=none&code_challenge=KK4AwrOLneexa1rLgK0WM-spgjNMYzv0lzHtefJIrfk&code_challenge_method=S256&x-client-SKU=ID_NET6_0&x-...	HTTP Parser: No favicon
Source: https://www.microsoft.com/store/buy/cartcount	HTTP Parser: No favicon
Source: https://www.microsoft.com/cascadeauth/account/silentauth?auth=None	HTTP Parser: No favicon
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c13cb6fd407&redirect_uri=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20profile%20offline_access&response_mode=form_post&nonce=638561211999833391.OTI2MWM1NTAtYmQ5MS00MzM3LWFhNmMtZTUxODc2ZmM2MzNkNDE2YzUzZDgtZDMwOC00ZWEwLTllZGUtZmEwZmZhMDU0ZTk2&prompt=none&nopa=2&state=CfDJ8CiTzr73KWNFsUGcHEnPeJpZQYRuZllgDIYVrWl4_AKUmFdiY-5XzW0ZvIbQK66oXDvmkoVwSryCNo3XqCfB04huRZh9L_qCKfrfcKHz-2No_iMh9dGZxbURBR5SXIFhDoPEnnfPQ5kYE9fJGy44WE7fSAjdiuapSmxQVGQCcqMMMpBwRYE9co6XK2iGvaleJZ6JnRBzzEH8PRZVdhZVfVCtjp_8qxsLU5TN_VWAqfO7MCRsdWET_PrljYSuJYbpSRWhHPhgYeMl5Hx-ZhiOHiZG3hhvyG-eCUDT90zPF9TTjBw8YHNk2BQXQImapV7WEoSbzBw4hS0_3Aa6numBTa19OJGTpO9hmCvKOWefwYEx&x-client-SKU=ID_NET6_0&x-client-ver=6.35.0.0	HTTP Parser: No favicon
Source: https://support.microsoft.com/en-us/silentsigninhandler	HTTP Parser: No favicon
Source: https://fpt.microsoft.com/tags?session_id=a3a81856-2e30-45c2-a393-5c886b81a94e	HTTP Parser: No favicon
Source: https://publisher.liveperson.net/iframe-le-tag/iframe-cs.html?lpsite=60270350&lpsection=store-sales-en-us&buttons=lpChatService,lpChatSales	HTTP Parser: No favicon
Source: https://publisher.liveperson.net/iframe-le-tag/iframe-cs.html?lpsite=60270350&lpsection=store-sales-en-us&buttons=lpChatService,lpChatSales	HTTP Parser: No favicon
Source: https://publisher.liveperson.net/iframe-le-tag/iframe-cs.html?lpsite=60270350&lpsection=store-sales-en-us&buttons=lpChatService,lpChatSales	HTTP Parser: No favicon

Source: https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=155&ct=1720524340&rver=7.5.2146.0&wp=MBI_SSL&wreply=https:%2F%2Fsway.cloud.microsoft%2Fauthredir%3Furl%3Dhttps%253a%252f%252fsway.cloud.microsoft%253a443%252fhome%252fsso%26hurl%3D%252bZ9wRR%252bJ0PU5Zb%252fYOli0tOBBaorRbnj16q%252fabzIZrmU%253d.eYXYY3UWHyHk0EBPKj%252bKALZv%252fDn6oAcVMb6h%252bY9udo0%253d%26ipt%3D0%26sn%3Dalternate%26si%3D1%26wctx%3D8c56732f-17da-41b6-908f-fff3265dca45&lc=1033&id=296906&lw=1&fl=easi2&aadredir=1	HTTP Parser: No <meta name="author".. found
Source: https://login.live.com/oauth20_authorize.srf?client_id=10fa57ef-4895-4ab2-872c-8c3613d4f7fb&scope=openid+profile+offline_access&redirect_uri=https%3a%2f%2fwww.microsoft.com%2fcascadeauth%2faccount%2fsignin-oidc&response_type=code&state=CfDJ8GIDTS11_mxJlLbEvLbfH9OjmyRsSeiQY_ZdveYcKJC1MnU92VueW_5DkMElkoA55TknUw7dyN-BPytKmtRn4iNsGvSDZekQMKqv3wbJn7AaE7EEjAog9rZgx8s8fTEUuLZJSnbNRdQFA7k46IEOU-jdIjxLx0FEmIUmOjfw-jVRQKu30jb_QPD2ACWVSVN0SysRgDr--UI7hymZooKh9erhBrlURM13T0sQ4gw0uhTsEk4az6OppzUNO4zYpIHRaMRw85g7kwhpJtjdjX917ER9DJ2JXWvcOLBD86HIvHB7xdShclLcH_LKpWkXsAV7ACaOp99ufhcXP0kPeQZWMtfI0agUwjL2tixUiQxi0GVcM9IJ4AZAIskOawBKFWoYTXkf5kweljycAILcxvlysVdKSudjyLAXTUPj7KbT-rDyz3DLlnuGDXlFnbKCW_uKjKA2PK5PyFBIe8IYjaoV6MPCIdrt80hnjJnOL2RZE2191VRxum6gq6r3BHMMto0H2w&response_mode=form_post&nonce=638561211923006825.ZDY3ZjI1MmYtOGU5MS00OGQ2LTlmMzItYzhkNmE0YWY1MjY1N2Y5ZWY3ZGUtNzYxMC00YmY1LTkyMDAtNmVjYTE2ZDU5M2Mz&prompt=none&code_challenge=KK4AwrOLneexa1rLgK0WM-spgjNMYzv0lzHtefJIrfk&code_challenge_method=S256&x-client-SKU=ID_NET6_0&x-	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c13cb6fd407&redirect_uri=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20profile%20offline_access&response_mode=form_post&nonce=638561211999833391.OTI2MWM1NTAtYmQ5MS00MzM3LWFhNmMtZTUxODc2ZmM2MzNkNDE2YzUzZDgtZDMwOC00ZWEwLTllZGUtZmEwZmZhMDU0ZTk2&prompt=none&nopa=2&state=CfDJ8CiTzr73KWNFsUGcHEnPeJpZQYRuZllgDIYVrWl4_AKUmFdiY-5XzW0ZvIbQK66oXDvmkoVwSryCNo3XqCfB04huRZh9L_qCKfrfcKHz-2No_iMh9dGZxbURBR5SXIFhDoPEnnfPQ5kYE9fJGy44WE7fSAjdiuapSmxQVGQCcqMMMpBwRYE9co6XK2iGvaleJZ6JnRBzzEH8PRZVdhZVfVCtjp_8qxsLU5TN_VWAqfO7MCRsdWET_PrljYSuJYbpSRWhHPhgYeMl5Hx-ZhiOHiZG3hhvyG-eCUDT90zPF9TTjBw8YHNk2BQXQImapV7WEoSbzBw4hS0_3Aa6numBTa19OJGTpO9hmCvKOWefwYEx&x-client-SKU=ID_NET6_0&x-client-ver=6.35.0.0	HTTP Parser: No <meta name="author".. found

Source: https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=155&ct=1720524340&rver=7.5.2146.0&wp=MBI_SSL&wreply=https:%2F%2Fsway.cloud.microsoft%2Fauthredir%3Furl%3Dhttps%253a%252f%252fsway.cloud.microsoft%253a443%252fhome%252fsso%26hurl%3D%252bZ9wRR%252bJ0PU5Zb%252fYOli0tOBBaorRbnj16q%252fabzIZrmU%253d.eYXYY3UWHyHk0EBPKj%252bKALZv%252fDn6oAcVMb6h%252bY9udo0%253d%26ipt%3D0%26sn%3Dalternate%26si%3D1%26wctx%3D8c56732f-17da-41b6-908f-fff3265dca45&lc=1033&id=296906&lw=1&fl=easi2&aadredir=1	HTTP Parser: No <meta name="copyright".. found
Source: https://login.live.com/oauth20_authorize.srf?client_id=10fa57ef-4895-4ab2-872c-8c3613d4f7fb&scope=openid+profile+offline_access&redirect_uri=https%3a%2f%2fwww.microsoft.com%2fcascadeauth%2faccount%2fsignin-oidc&response_type=code&state=CfDJ8GIDTS11_mxJlLbEvLbfH9OjmyRsSeiQY_ZdveYcKJC1MnU92VueW_5DkMElkoA55TknUw7dyN-BPytKmtRn4iNsGvSDZekQMKqv3wbJn7AaE7EEjAog9rZgx8s8fTEUuLZJSnbNRdQFA7k46IEOU-jdIjxLx0FEmIUmOjfw-jVRQKu30jb_QPD2ACWVSVN0SysRgDr--UI7hymZooKh9erhBrlURM13T0sQ4gw0uhTsEk4az6OppzUNO4zYpIHRaMRw85g7kwhpJtjdjX917ER9DJ2JXWvcOLBD86HIvHB7xdShclLcH_LKpWkXsAV7ACaOp99ufhcXP0kPeQZWMtfI0agUwjL2tixUiQxi0GVcM9IJ4AZAIskOawBKFWoYTXkf5kweljycAILcxvlysVdKSudjyLAXTUPj7KbT-rDyz3DLlnuGDXlFnbKCW_uKjKA2PK5PyFBIe8IYjaoV6MPCIdrt80hnjJnOL2RZE2191VRxum6gq6r3BHMMto0H2w&response_mode=form_post&nonce=638561211923006825.ZDY3ZjI1MmYtOGU5MS00OGQ2LTlmMzItYzhkNmE0YWY1MjY1N2Y5ZWY3ZGUtNzYxMC00YmY1LTkyMDAtNmVjYTE2ZDU5M2Mz&prompt=none&code_challenge=KK4AwrOLneexa1rLgK0WM-spgjNMYzv0lzHtefJIrfk&code_challenge_method=S256&x-client-SKU=ID_NET6_0&x-...	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c13cb6fd407&redirect_uri=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20profile%20offline_access&response_mode=form_post&nonce=638561211999833391.OTI2MWM1NTAtYmQ5MS00MzM3LWFhNmMtZTUxODc2ZmM2MzNkNDE2YzUzZDgtZDMwOC00ZWEwLTllZGUtZmEwZmZhMDU0ZTk2&prompt=none&nopa=2&state=CfDJ8CiTzr73KWNFsUGcHEnPeJpZQYRuZllgDIYVrWl4_AKUmFdiY-5XzW0ZvIbQK66oXDvmkoVwSryCNo3XqCfB04huRZh9L_qCKfrfcKHz-2No_iMh9dGZxbURBR5SXIFhDoPEnnfPQ5kYE9fJGy44WE7fSAjdiuapSmxQVGQCcqMMMpBwRYE9co6XK2iGvaleJZ6JnRBzzEH8PRZVdhZVfVCtjp_8qxsLU5TN_VWAqfO7MCRsdWET_PrljYSuJYbpSRWhHPhgYeMl5Hx-ZhiOHiZG3hhvyG-eCUDT90zPF9TTjBw8YHNk2BQXQImapV7WEoSbzBw4hS0_3Aa6numBTa19OJGTpO9hmCvKOWefwYEx&x-client-SKU=ID_NET6_0&x-client-ver=6.35.0.0	HTTP Parser: No <meta name="copyright".. found

Source: chromecache_787.2.dr	String found in binary or memory: 'data-otto-youtubeid="' + $(this).attr("href").replace("lightboxyt:https://www.youtube.com/watch?v=", "") + '" ' + equals www.youtube.com (Youtube)
Source: chromecache_612.2.dr	String found in binary or memory: <a itemprop="sameAs" href="http://twitter.com/share?url=https://www.microsoft.com/en-us/windows/" aria-label="Share this page on X (formerly Twitter)" target="_blank"> equals www.twitter.com (Twitter)
Source: chromecache_612.2.dr	String found in binary or memory: <a itemprop="sameAs" href="http://www.facebook.com/windows" aria-label="Follow Microsoft Windows on Facebook" target="_blank"> equals www.facebook.com (Facebook)
Source: chromecache_612.2.dr	String found in binary or memory: <a itemprop="sameAs" href="http://www.twitter.com/windows" aria-label="Follow Microsoft Windows on X (formerly Twitter)" target="_blank"> equals www.twitter.com (Twitter)
Source: chromecache_612.2.dr	String found in binary or memory: <a itemprop="sameAs" href="https://www.facebook.com/sharer/sharer.php?m2w&s=100&u=https://www.microsoft.com/en-us/windows/" aria-label="Share this page on Facebook" target="_blank"> equals www.facebook.com (Facebook)
Source: chromecache_818.2.dr	String found in binary or memory: "sameAs":["https://www.facebook.com/sharer/sharer.php?m2w\u0026s\u003d100\u0026u\u003dhttps://www.microsoft.com/en-us/surface/home","https://twitter.com/share?url\u003dhttps://www.microsoft.com/en-us/surface/home","https://www.linkedin.com/cws/share?url\u003dhttps://www.microsoft.com/en-us/surface/home"] equals www.facebook.com (Facebook)
Source: chromecache_818.2.dr	String found in binary or memory: "sameAs":["https://www.facebook.com/sharer/sharer.php?m2w\u0026s\u003d100\u0026u\u003dhttps://www.microsoft.com/en-us/surface/home","https://twitter.com/share?url\u003dhttps://www.microsoft.com/en-us/surface/home","https://www.linkedin.com/cws/share?url\u003dhttps://www.microsoft.com/en-us/surface/home"] equals www.linkedin.com (Linkedin)
Source: chromecache_818.2.dr	String found in binary or memory: "sameAs":["https://www.facebook.com/sharer/sharer.php?m2w\u0026s\u003d100\u0026u\u003dhttps://www.microsoft.com/en-us/surface/home","https://twitter.com/share?url\u003dhttps://www.microsoft.com/en-us/surface/home","https://www.linkedin.com/cws/share?url\u003dhttps://www.microsoft.com/en-us/surface/home"] equals www.twitter.com (Twitter)
Source: chromecache_818.2.dr	String found in binary or memory: "sameAs":["https://www.facebook.com/surface","https://www.twitter.com/surface","https://www.instagram.com/surface","https://www.linkedin.com/showcase/microsoft-surface"] equals www.facebook.com (Facebook)
Source: chromecache_818.2.dr	String found in binary or memory: "sameAs":["https://www.facebook.com/surface","https://www.twitter.com/surface","https://www.instagram.com/surface","https://www.linkedin.com/showcase/microsoft-surface"] equals www.linkedin.com (Linkedin)
Source: chromecache_818.2.dr	String found in binary or memory: "sameAs":["https://www.facebook.com/surface","https://www.twitter.com/surface","https://www.instagram.com/surface","https://www.linkedin.com/showcase/microsoft-surface"] equals www.twitter.com (Twitter)
Source: chromecache_818.2.dr	String found in binary or memory: <a class="d-inline-block action-trigger" href="https://twitter.com/share?url=https://www.microsoft.com/en-us/surface/home" target="_blank" aria-label="Share this page on Twitter" data-bi-ecn="SHARE MICROSOFT SURFACE ON TWITTER" data-bi-bhvr="126" data-bi-cn="Share this page on Twitter" data-bi-socchn="Share this page on Twitter" data-bi-ct="Social Button" data-bi-pa="body" data-bi-compnm="Social Follow - horizontal"> equals www.twitter.com (Twitter)
Source: chromecache_818.2.dr	String found in binary or memory: <a class="d-inline-block action-trigger" href="https://www.facebook.com/sharer/sharer.php?m2w&s=100&u=https://www.microsoft.com/en-us/surface/home" target="_blank" aria-label="Share this page on Facebook" data-bi-ecn="SHARE MICROSOFT SURFACE ON FACEBOOK" data-bi-bhvr="126" data-bi-cn="Share this page on Facebook" data-bi-socchn="Share this page on Facebook" data-bi-ct="Social Button" data-bi-pa="body" data-bi-compnm="Social Follow - horizontal"> equals www.facebook.com (Facebook)
Source: chromecache_818.2.dr	String found in binary or memory: <a class="d-inline-block action-trigger" href="https://www.facebook.com/surface" target="_blank" aria-label="Follow this page on Facebook" data-bi-ecn="FOLLOW MICROSOFT SURFACE ON FACEBOOK" data-bi-bhvr="126" data-bi-cn="Follow this page on Facebook" data-bi-socchn="Follow this page on Facebook" data-bi-ct="Social Button" data-bi-pa="body" data-bi-compnm="Social Follow - horizontal"> equals www.facebook.com (Facebook)
Source: chromecache_818.2.dr	String found in binary or memory: <a class="d-inline-block action-trigger" href="https://www.linkedin.com/cws/share?url=https://www.microsoft.com/en-us/surface/home" target="_blank" aria-label="Share this page on LinkedIn" data-bi-ecn="SHARE MICROSOFT SURFACE ON LINKEDIN" data-bi-bhvr="126" data-bi-cn="Share this page on LinkedIn" data-bi-socchn="Share this page on LinkedIn" data-bi-ct="Social Button" data-bi-pa="body" data-bi-compnm="Social Follow - horizontal"> equals www.linkedin.com (Linkedin)
Source: chromecache_818.2.dr	String found in binary or memory: <a class="d-inline-block action-trigger" href="https://www.linkedin.com/showcase/microsoft-surface" target="_blank" aria-label="Follow this page on LinkedIn" data-bi-ecn="FOLLOW MICROSOFT SURFACE ON LINKEDIN" data-bi-bhvr="126" data-bi-cn="Follow this page on LinkedIn" data-bi-socchn="Follow this page on LinkedIn" data-bi-ct="Social Button" data-bi-pa="body" data-bi-compnm="Social Follow - horizontal"> equals www.linkedin.com (Linkedin)
Source: chromecache_818.2.dr	String found in binary or memory: <a class="d-inline-block action-trigger" href="https://www.twitter.com/surface" target="_blank" aria-label="Follow this page on Twitter" data-bi-ecn="FOLLOW MICROSOFT SURFACE ON TWITTER" data-bi-bhvr="126" data-bi-cn="Follow this page on Twitter" data-bi-socchn="Follow this page on Twitter" data-bi-ct="Social Button" data-bi-pa="body" data-bi-compnm="Social Follow - horizontal"> equals www.twitter.com (Twitter)
Source: chromecache_1416.2.dr	String found in binary or memory: (function() { var sharingGlobalConfig ={"thumbnailUrlFormat":"https://www.bing.com/th?id={0}","defaultFormCode":"EX0023","facebookShareFormat":"https://www.facebook.com/dialog/feed?app_id={3}\u0026display=popup\u0026link={0}\u0026redirect_uri={1}\u0026ref={2}","facebookMessengerUrlFormat":"http://www.facebook.com/dialog/send?app_id={0}\u0026display=popup\u0026link={1}\u0026redirect_uri={2}","facebookFormCode":"EX0023","fbInitialHeight":576,"fbmInitialWidth":640,"facebookAppId":"3732605936979161","twitterApi":"https://twitter.com/intent/tweet?hashtags={0}\u0026text={1}\u0026url={2}","twitterFormCode":"EX0024","twitterInitialHeight":576,"twitterInitialWidth":720,"defaultInitialHeight":255,"whatsAppSchema":"whatsapp://send?text={0}","whatsAppStoreUrl":"","whatsAppFormCode":"EX0053","mailLauncherUrl":"mailto:?subject={0} \u0026body={1}","mailFormCode":"EX0025","smsProtocol":"","smsFormCode":"EX0052","loadingUrl":"/loading","useBlankLoadingPage":false,"closeRedirectUrl":"/share/fbre","pinterestUrlFormat":"https://pinterest.com/pin/create/button/?url={0}\u0026media={1}\u0026description={2}","pinterestFormCode":"EX0051","mybingFormCode":"shtomb","mybingRedirectUrl":"https://www.bing.com/myprofile?tid=id_chatmessagetab\u0026FORM=shtomb","skypeUrlFormat":"https://web.skype.com/share?url={0}\u0026source=button\u0026text={1}","skypeInitialHeight":665,"skypeInitialWidth":305,"outlookComLauncherUrl":"https://outlook.live.com/owa/?subject={0}\u0026body={1}\u0026path=/mail/action/compose","gmailLauncherUrl":"https://mail.google.com/mail/?view=cm\u0026fs=1\u0026tf=1\u0026su={0}\u0026body={1}","linkedInUrlFormat":"https://www.linkedin.com/shareArticle?mini=true\u0026url={0}\u0026title={1}\u0026summary={2}","linkedInFormCode":"EX0062","oneNoteUrlFormat":"https://www.onenote.com/clipper/save?attributionUrl={0}\u0026sourceUrl={1}\u0026imgUrl={1}\u0026title={2}\u0026description={3}","oneNoteInitialHeight":565,"oneNoteInitialWidth":550,"oneNoteFormCode":"EX0060","checkAppInstall":"","checkAppTimeout":200,"weiboShareFormat":"https://service.weibo.com/share/share.php?title={0}\u0026placeholder=Bing\u0026url={1}\u0026pic={2}","weiboFormCode":"SHDLWE","qzoneShareFormat":"https://sns.qzone.qq.com/cgi-bin/qzshare/cgi_qzshare_onekey?title={0}\u0026summary={1}\u0026url={2}\u0026pics={3}","qzoneFormCode":"SHDLQZ","isCNEnglishSearch":false,"redditShareFormat":"https://www.reddit.com/submit?url={0}\u0026title={1}","redditFormCode":"EX0061","useLocationReplace":false,"getUrlFormCode":"EX0050","enableGetShareLinkFromServerForGetUrl":true,"isUnderside":false}; if(sj_evt) { sj_evt.fire("GlobalActionMenuV2Wrapper.InitSharingGlobalConfig", sharingGlobalConfig); } })();; equals www.facebook.com (Facebook)
Source: chromecache_1416.2.dr	String found in binary or memory: (function() { var sharingGlobalConfig ={"thumbnailUrlFormat":"https://www.bing.com/th?id={0}","defaultFormCode":"EX0023","facebookShareFormat":"https://www.facebook.com/dialog/feed?app_id={3}\u0026display=popup\u0026link={0}\u0026redirect_uri={1}\u0026ref={2}","facebookMessengerUrlFormat":"http://www.facebook.com/dialog/send?app_id={0}\u0026display=popup\u0026link={1}\u0026redirect_uri={2}","facebookFormCode":"EX0023","fbInitialHeight":576,"fbmInitialWidth":640,"facebookAppId":"3732605936979161","twitterApi":"https://twitter.com/intent/tweet?hashtags={0}\u0026text={1}\u0026url={2}","twitterFormCode":"EX0024","twitterInitialHeight":576,"twitterInitialWidth":720,"defaultInitialHeight":255,"whatsAppSchema":"whatsapp://send?text={0}","whatsAppStoreUrl":"","whatsAppFormCode":"EX0053","mailLauncherUrl":"mailto:?subject={0} \u0026body={1}","mailFormCode":"EX0025","smsProtocol":"","smsFormCode":"EX0052","loadingUrl":"/loading","useBlankLoadingPage":false,"closeRedirectUrl":"/share/fbre","pinterestUrlFormat":"https://pinterest.com/pin/create/button/?url={0}\u0026media={1}\u0026description={2}","pinterestFormCode":"EX0051","mybingFormCode":"shtomb","mybingRedirectUrl":"https://www.bing.com/myprofile?tid=id_chatmessagetab\u0026FORM=shtomb","skypeUrlFormat":"https://web.skype.com/share?url={0}\u0026source=button\u0026text={1}","skypeInitialHeight":665,"skypeInitialWidth":305,"outlookComLauncherUrl":"https://outlook.live.com/owa/?subject={0}\u0026body={1}\u0026path=/mail/action/compose","gmailLauncherUrl":"https://mail.google.com/mail/?view=cm\u0026fs=1\u0026tf=1\u0026su={0}\u0026body={1}","linkedInUrlFormat":"https://www.linkedin.com/shareArticle?mini=true\u0026url={0}\u0026title={1}\u0026summary={2}","linkedInFormCode":"EX0062","oneNoteUrlFormat":"https://www.onenote.com/clipper/save?attributionUrl={0}\u0026sourceUrl={1}\u0026imgUrl={1}\u0026title={2}\u0026description={3}","oneNoteInitialHeight":565,"oneNoteInitialWidth":550,"oneNoteFormCode":"EX0060","checkAppInstall":"","checkAppTimeout":200,"weiboShareFormat":"https://service.weibo.com/share/share.php?title={0}\u0026placeholder=Bing\u0026url={1}\u0026pic={2}","weiboFormCode":"SHDLWE","qzoneShareFormat":"https://sns.qzone.qq.com/cgi-bin/qzshare/cgi_qzshare_onekey?title={0}\u0026summary={1}\u0026url={2}\u0026pics={3}","qzoneFormCode":"SHDLQZ","isCNEnglishSearch":false,"redditShareFormat":"https://www.reddit.com/submit?url={0}\u0026title={1}","redditFormCode":"EX0061","useLocationReplace":false,"getUrlFormCode":"EX0050","enableGetShareLinkFromServerForGetUrl":true,"isUnderside":false}; if(sj_evt) { sj_evt.fire("GlobalActionMenuV2Wrapper.InitSharingGlobalConfig", sharingGlobalConfig); } })();; equals www.linkedin.com (Linkedin)
Source: chromecache_1416.2.dr	String found in binary or memory: (function() { var sharingGlobalConfig ={"thumbnailUrlFormat":"https://www.bing.com/th?id={0}","defaultFormCode":"EX0023","facebookShareFormat":"https://www.facebook.com/dialog/feed?app_id={3}\u0026display=popup\u0026link={0}\u0026redirect_uri={1}\u0026ref={2}","facebookMessengerUrlFormat":"http://www.facebook.com/dialog/send?app_id={0}\u0026display=popup\u0026link={1}\u0026redirect_uri={2}","facebookFormCode":"EX0023","fbInitialHeight":576,"fbmInitialWidth":640,"facebookAppId":"3732605936979161","twitterApi":"https://twitter.com/intent/tweet?hashtags={0}\u0026text={1}\u0026url={2}","twitterFormCode":"EX0024","twitterInitialHeight":576,"twitterInitialWidth":720,"defaultInitialHeight":255,"whatsAppSchema":"whatsapp://send?text={0}","whatsAppStoreUrl":"","whatsAppFormCode":"EX0053","mailLauncherUrl":"mailto:?subject={0} \u0026body={1}","mailFormCode":"EX0025","smsProtocol":"","smsFormCode":"EX0052","loadingUrl":"/loading","useBlankLoadingPage":false,"closeRedirectUrl":"/share/fbre","pinterestUrlFormat":"https://pinterest.com/pin/create/button/?url={0}\u0026media={1}\u0026description={2}","pinterestFormCode":"EX0051","mybingFormCode":"shtomb","mybingRedirectUrl":"https://www.bing.com/myprofile?tid=id_chatmessagetab\u0026FORM=shtomb","skypeUrlFormat":"https://web.skype.com/share?url={0}\u0026source=button\u0026text={1}","skypeInitialHeight":665,"skypeInitialWidth":305,"outlookComLauncherUrl":"https://outlook.live.com/owa/?subject={0}\u0026body={1}\u0026path=/mail/action/compose","gmailLauncherUrl":"https://mail.google.com/mail/?view=cm\u0026fs=1\u0026tf=1\u0026su={0}\u0026body={1}","linkedInUrlFormat":"https://www.linkedin.com/shareArticle?mini=true\u0026url={0}\u0026title={1}\u0026summary={2}","linkedInFormCode":"EX0062","oneNoteUrlFormat":"https://www.onenote.com/clipper/save?attributionUrl={0}\u0026sourceUrl={1}\u0026imgUrl={1}\u0026title={2}\u0026description={3}","oneNoteInitialHeight":565,"oneNoteInitialWidth":550,"oneNoteFormCode":"EX0060","checkAppInstall":"","checkAppTimeout":200,"weiboShareFormat":"https://service.weibo.com/share/share.php?title={0}\u0026placeholder=Bing\u0026url={1}\u0026pic={2}","weiboFormCode":"SHDLWE","qzoneShareFormat":"https://sns.qzone.qq.com/cgi-bin/qzshare/cgi_qzshare_onekey?title={0}\u0026summary={1}\u0026url={2}\u0026pics={3}","qzoneFormCode":"SHDLQZ","isCNEnglishSearch":false,"redditShareFormat":"https://www.reddit.com/submit?url={0}\u0026title={1}","redditFormCode":"EX0061","useLocationReplace":false,"getUrlFormCode":"EX0050","enableGetShareLinkFromServerForGetUrl":true,"isUnderside":false}; if(sj_evt) { sj_evt.fire("GlobalActionMenuV2Wrapper.InitSharingGlobalConfig", sharingGlobalConfig); } })();; equals www.twitter.com (Twitter)
Source: chromecache_923.2.dr	String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=null;e.exports=new h(function(d,e){try{n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}}}catch(a){return}function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL\|\|!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=func

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2492 --field-trial-handle=2256,i,7678980693930225314,13678371135031919408,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sway.cloud.microsoft/Sac2nvv7Mrz0mzbj?ref=Link"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6760 --field-trial-handle=2256,i,7678980693930225314,13678371135031919408,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6700 --field-trial-handle=2256,i,7678980693930225314,13678371135031919408,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2492 --field-trial-handle=2256,i,7678980693930225314,13678371135031919408,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6760 --field-trial-handle=2256,i,7678980693930225314,13678371135031919408,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6700 --field-trial-handle=2256,i,7678980693930225314,13678371135031919408,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source	Detection	Scanner	Label
https://schema.org	0%	URL Reputation	safe
http://www.opensource.org/licenses/mit-license.php)	0%	URL Reputation	safe
https://assets.xboxservices.com/assets/f1/32/f13203e7-9970-4c96-866e-ec09d83ed9fc.jpg?n=3741250_Larg	0%	Avira URL Cloud	safe
https://assets.xboxservices.com/assets/b0/5e/b05eb3af-fda3-481c-8edc-585eb33b864a.svg?n=Homepage-FY2	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-arrayspeciescreate	0%	Avira URL Cloud	safe
https://www.suno.ai/privacy)	0%	Avira URL Cloud	safe
https://s7mbrstream.scene7.com/is/content/microsoftcorp/_media_/451/4517ef9e-1ad0-4ce0-b05d-b93bee60	0%	Avira URL Cloud	safe
https://github.com/mozilla/rhino/issues/346	0%	Avira URL Cloud	safe
https://outlook.live.com/owa/	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-object.prototype.tostring	0%	Avira URL Cloud	safe
https://www.xbox.com/fr-FR/auth/msa?action=logIn&returnUrl=https%3A%2F%2Fwww.xbox.com%2Ffr-FR%2F&ru=	0%	Avira URL Cloud	safe
https://login.microsoftonline.com/uxlogout?appid	0%	Avira URL Cloud	safe
https://support.office.com/tr-tr/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	0%	Avira URL Cloud	safe
https://assets.onestore.ms	0%	Avira URL Cloud	safe
https://github.com/zloirock/core-js	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-object.getownpropertydescriptor	0%	Avira URL Cloud	safe
https://www.xbox.com/games/store/p/9NWCLTZDSR75	0%	Avira URL Cloud	safe
https://assets.adobedtm.com/5ef092d1efb5/80899f83bd8d/f191cf6053bd/RCce966efc9a8346eb83ceccae0050120	0%	Avira URL Cloud	safe
https://www.xbox.com/games	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-array.prototype.push	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://www.xbox.com/accessories/controllers/xbox-wireless-controller	0%	Avira URL Cloud	safe
https://bugs.chromium.org/p/v8/issues/detail?id=12681	0%	Avira URL Cloud	safe
https://assets.xboxservices.com/assets/4d/5b/4d5bbe35-084c-4cdf-935e-e6a261f5e4c5.jpg?n=EA-Sports-FC	0%	Avira URL Cloud	safe
https://github.com/tc39/proposal-array-filtering	0%	Avira URL Cloud	safe
https://www.xbox.com/consoles	0%	Avira URL Cloud	safe
https://assets.adobedtm.com/launch-ENbcb8955aa2f84046af210e3226cdda04.js	0%	Avira URL Cloud	safe
https://assets.adobedtm.com/5ef092d1efb5/e6b4ca74378c/e4ab99b403b2/RC3e827fbc407d4843914675a6376d58e	0%	Avira URL Cloud	safe
https://www.xbox.com/promotions/sales/sales-and-specials	0%	Avira URL Cloud	safe
https://assets.xboxservices.com/assets/77/a9/77a91d59-1c67-42c3-a0f7-22c607e87305.jpg?n=039394958888	0%	Avira URL Cloud	safe
https://support.office.com/ar-sa/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	0%	Avira URL Cloud	safe
https://s7mbrstream.scene7.com/is/content/microsoftcorp/_media_/135/135cc82c-bd88-417f-ace1-cc5b166d	0%	Avira URL Cloud	safe
https://assets.xboxservices.com/assets/d6/5b/d65b2327-5273-4227-9be2-f112c4b0b7e8.jpg?n=Halo_Home-He	0%	Avira URL Cloud	safe
https://assets.xboxservices.com/assets/12/74/12744081-03f9-42a4-87be-e869ddce3327.svg?n=Homepage-FY2	0%	Avira URL Cloud	safe
https://aka.ms/KeySupport	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-tointegerorinfinity	0%	Avira URL Cloud	safe
https://cdnssl.clicktale.net/www32/ptc/05d32363-d534-4d93-9b65-cde674775e71.js	0%	Avira URL Cloud	safe
https://github.com/es-shims/es5-shim/issues/150	0%	Avira URL Cloud	safe
https://api.company-target.com/api/v2/ip.json?key=70aff8023e038d56ea636f68e5c5922b	0%	Avira URL Cloud	safe
https://github.com/w3c/aria-practices/pull/1757	0%	Avira URL Cloud	safe
https://axios-http.com	0%	Avira URL Cloud	safe
https://www.xbox.com/es-MX/auth/msa?action=logIn&returnUrl=https%3A%2F%2Fwww.xbox.com%2Fes-MX%2F&ru=	0%	Avira URL Cloud	safe
https://www.xbox.com/xbox-game-pass#join	0%	Avira URL Cloud	safe
https://www.xbox.com/zh-HK/auth/msa?action=logIn&returnUrl=https%3A%2F%2Fwww.xbox.com%2Fzh-HK%2F&ru=	0%	Avira URL Cloud	safe
https://2e6ce2ab2870e62cb4620de77fa717.1b.environment.api.powerplatform.com/powervirtualagents/botsb	0%	Avira URL Cloud	safe
https://github.com/microsoft/clarity	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-getmethod	0%	Avira URL Cloud	safe
https://assets.xboxservices.com/assets/5f/2a/5f2a28b0-be52-436a-9842-fbce84e068c3.jpg?n=XOG_Home-Her	0%	Avira URL Cloud	safe
https://support.office.com/en-ie/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	0%	Avira URL Cloud	safe
https://developer.mozilla.org/en-US/docs/Web/Accessibility/ARIA/Roles/Alert_Role	0%	Avira URL Cloud	safe
https://keycode.info/table-of-all-keycodes	0%	Avira URL Cloud	safe
https://support.office.com/en-ae/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	0%	Avira URL Cloud	safe
https://assets.xboxservices.com/assets/16/4c/164c6390-353e-49ac-a0b8-32e1e59e2d50.jpg?n=Elden-Ring_S	0%	Avira URL Cloud	safe
https://assets.xboxservices.com/assets/e0/5e/e05ee801-7365-4a33-b1ed-0254fc3625e7.jpg?n=0655432224_L	0%	Avira URL Cloud	safe
https://www.xbox.com/de-AT/auth/msa?action=logIn&returnUrl=https%3A%2F%2Fwww.xbox.com%2Fde-AT%2F&ru=	0%	Avira URL Cloud	safe
https://www.xbox.com/es-ES/auth/msa?action=logIn&returnUrl=https%3A%2F%2Fwww.xbox.com%2Fes-ES%2F&ru=	0%	Avira URL Cloud	safe
https://www.skype.com/en/	0%	Avira URL Cloud	safe
https://www.suno.ai/legal/terms	0%	Avira URL Cloud	safe
https://assets.xboxservices.com/assets/92/89/9289d8a6-b9bb-4259-ac1f-e37639ca56fb.jpg?n=02249943_Sma	0%	Avira URL Cloud	safe
https://support.office.com/zh-cn/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	0%	Avira URL Cloud	safe
https://www.xbox.com/en-GB/auth/msa?action=logIn&returnUrl=https%3A%2F%2Fwww.xbox.com%2Fen-GB%2F&ru=	0%	Avira URL Cloud	safe
https://developer.mozilla.org/en-US/docs/Web/API/KeyboardEvent/key/Key_Values	0%	Avira URL Cloud	safe
https://support.office.com/th-th/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	0%	Avira URL Cloud	safe
https://assets.xboxservices.com/assets/9f/91/9f91def7-092b-4500-bb4f-bbe406331104.jpg?n=XGP-2024_Sma	0%	Avira URL Cloud	safe
https://assets.xboxservices.com/assets/80/86/80869814-58e6-4646-9293-e5be2f847123.jpg?n=Assassins-Cr	0%	Avira URL Cloud	safe
https://origin-ppe.xbox.com	0%	Avira URL Cloud	safe
http://www.twitter.com/windows	0%	Avira URL Cloud	safe
https://assets.xboxservices.com/assets/14/e9/14e91134-f69a-48b4-85dd-f160361e4128.jpg?n=Elden-Ring_P	0%	Avira URL Cloud	safe
https://github.com/douglascrockford/JSON-js	0%	Avira URL Cloud	safe
https://www.suno.ai/legal/privacy	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-string.prototype.includes	0%	Avira URL Cloud	safe
https://www.linkedin.com/showcase/microsoft-surface	0%	Avira URL Cloud	safe
https://schema.org/ListItem	0%	Avira URL Cloud	safe
https://assets.xboxservices.com/assets/37/ec/37ec5a7a-08b4-466f-93e3-81fb5dd0b471.svg?n=Homepage-FY2	0%	Avira URL Cloud	safe
https://assets.xboxservices.com/assets/83/34/8334bc16-011d-4f9a-b5e0-0fc4031fc167.png?n=playbutton.p	0%	Avira URL Cloud	safe
https://assets.adobedtm.com/5ef092d1efb5/e6b4ca74378c/e4ab99b403b2/RC719fca38d7b34d53b47cd51f8087572	0%	Avira URL Cloud	safe
https://assets.xboxservices.com/assets/59/0f/590f50e9-4ed1-485f-a4d1-f4877015fb99.jpg?n=XGP-2024_Sma	0%	Avira URL Cloud	safe
https://www.xbox.com/games/store/p/9PCNGJ2HCG00	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-parseint-string-radix	0%	Avira URL Cloud	safe
https://www.xbox.com/accessories	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-array.prototype.map	0%	Avira URL Cloud	safe
https://www.onenote.com/	0%	Avira URL Cloud	safe
https://github.com/zloirock/core-js/issues/1130	0%	Avira URL Cloud	safe
https://gear.xbox.com	0%	Avira URL Cloud	safe
https://support.office.com/he-il/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-tolength	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-array.prototype-	0%	Avira URL Cloud	safe
https://assets.xboxservices.com/assets/f6/d8/f6d88804-1334-47e6-8270-02e396a81235.mp4?n=230022_Large	0%	Avira URL Cloud	safe
https://assets.xboxservices.com/assets/76/4f/764f6f3a-7112-4221-9a09-dc9dfe33961c.jpg?n=284993_Large	0%	Avira URL Cloud	safe
https://www.xbox.com/games/senuas-saga-hellblade-ii	0%	Avira URL Cloud	safe
https://assets.adobedtm.com/5ef092d1efb5/e6b4ca74378c/e4ab99b403b2/RC763fa4cd2e3f4366b114c9c5d30dd07	0%	Avira URL Cloud	safe
https://assets.xboxservices.com/assets/96/b1/96b1ed72-925c-43ff-aada-34052d9330ec.jpg?n=XGP-2024_Sma	0%	Avira URL Cloud	safe
https://assets.xboxservices.com/assets/95/04/9504e8f4-43d8-45df-a977-38d432dc1386.jpg?n=153142244433	0%	Avira URL Cloud	safe
https://assets.xboxservices.com/assets/50/19/5019ef4e-1d09-492d-aab4-1112a53f4787.jpg?n=EA-Sports-FC	0%	Avira URL Cloud	safe
http://github.com/aFarkas/lazysizes	0%	Avira URL Cloud	safe
https://assets.xboxservices.com/assets/74/3d/743dc10e-825f-46b0-acaa-ef105e847bfa.jpg?n=9999390003_S	0%	Avira URL Cloud	safe
https://support.office.com/it-it/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	0%	Avira URL Cloud	safe
https://breeze.aimon.applicationinsights.io	0%	Avira URL Cloud	safe

Name	Malicious	Antivirus Detection	Reputation
about:blank	false	Avira URL Cloud: safe	unknown
https://lpcdn.lpsnmedia.net/le_secure_storage/3.28.1-release_1349276690/storage.secure.min.html?loc=https%3A%2F%2Fpublisher.liveperson.net&site=60270350&env=prod&isCrossDomain=true&accdn=accdn.lpsnmedia.net	false		unknown
https://www.xbox.com/en-US/	false		unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/mozilla/rhino/issues/346	chromecache_1034.2.dr	false	Avira URL Cloud: safe	unknown
https://login.microsoftonline.com/uxlogout?appid	chromecache_980.2.dr	false	Avira URL Cloud: safe	unknown
https://outlook.live.com/owa/	chromecache_811.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-object.prototype.tostring	chromecache_1034.2.dr	false	Avira URL Cloud: safe	unknown
https://assets.xboxservices.com/assets/b0/5e/b05eb3af-fda3-481c-8edc-585eb33b864a.svg?n=Homepage-FY2	chromecache_905.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-arrayspeciescreate	chromecache_1034.2.dr	false	Avira URL Cloud: safe	unknown
https://s7mbrstream.scene7.com/is/content/microsoftcorp/_media_/451/4517ef9e-1ad0-4ce0-b05d-b93bee60	chromecache_823.2.dr	false	Avira URL Cloud: safe	unknown
https://assets.xboxservices.com/assets/f1/32/f13203e7-9970-4c96-866e-ec09d83ed9fc.jpg?n=3741250_Larg	chromecache_905.2.dr	false	Avira URL Cloud: safe	unknown
https://www.xbox.com/fr-FR/auth/msa?action=logIn&returnUrl=https%3A%2F%2Fwww.xbox.com%2Ffr-FR%2F&ru=	chromecache_905.2.dr	false	Avira URL Cloud: safe	unknown
https://www.suno.ai/privacy)	chromecache_694.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-object.getownpropertydescriptor	chromecache_1034.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/zloirock/core-js	chromecache_1034.2.dr	false	Avira URL Cloud: safe	unknown
https://www.xbox.com/games/store/p/9NWCLTZDSR75	chromecache_1419.2.dr	false	Avira URL Cloud: safe	unknown
https://assets.onestore.ms	chromecache_1052.2.dr, chromecache_917.2.dr, chromecache_1238.2.dr	false	Avira URL Cloud: safe	unknown
https://support.office.com/tr-tr/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_1191.2.dr	false	Avira URL Cloud: safe	unknown
https://assets.adobedtm.com/5ef092d1efb5/80899f83bd8d/f191cf6053bd/RCce966efc9a8346eb83ceccae0050120	chromecache_829.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-array.prototype.push	chromecache_1034.2.dr	false	Avira URL Cloud: safe	unknown
https://www.xbox.com/accessories/controllers/xbox-wireless-controller	chromecache_905.2.dr	false	Avira URL Cloud: safe	unknown
https://www.xbox.com/games	chromecache_905.2.dr	false	Avira URL Cloud: safe	unknown
https://bugs.chromium.org/p/v8/issues/detail?id=12681	chromecache_1034.2.dr	false	Avira URL Cloud: safe	unknown
https://s7mbrstream.scene7.com/is/content/microsoftcorp/_media_/135/135cc82c-bd88-417f-ace1-cc5b166d	chromecache_823.2.dr	false	Avira URL Cloud: safe	unknown
https://www.xbox.com/consoles	chromecache_905.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/tc39/proposal-array-filtering	chromecache_1034.2.dr	false	Avira URL Cloud: safe	unknown
https://assets.xboxservices.com/assets/4d/5b/4d5bbe35-084c-4cdf-935e-e6a261f5e4c5.jpg?n=EA-Sports-FC	chromecache_1419.2.dr	false	Avira URL Cloud: safe	unknown
https://www.xbox.com/promotions/sales/sales-and-specials	chromecache_905.2.dr	false	Avira URL Cloud: safe	unknown
https://support.office.com/ar-sa/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_1191.2.dr	false	Avira URL Cloud: safe	unknown
https://assets.adobedtm.com/5ef092d1efb5/e6b4ca74378c/e4ab99b403b2/RC3e827fbc407d4843914675a6376d58e	chromecache_640.2.dr	false	Avira URL Cloud: safe	unknown
https://assets.adobedtm.com/launch-ENbcb8955aa2f84046af210e3226cdda04.js	chromecache_849.2.dr	false	Avira URL Cloud: safe	unknown
https://assets.xboxservices.com/assets/77/a9/77a91d59-1c67-42c3-a0f7-22c607e87305.jpg?n=039394958888	chromecache_1419.2.dr	false	Avira URL Cloud: safe	unknown
https://assets.xboxservices.com/assets/d6/5b/d65b2327-5273-4227-9be2-f112c4b0b7e8.jpg?n=Halo_Home-He	chromecache_905.2.dr	false	Avira URL Cloud: safe	unknown
https://aka.ms/KeySupport	chromecache_818.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-tointegerorinfinity	chromecache_1034.2.dr	false	Avira URL Cloud: safe	unknown
https://cdnssl.clicktale.net/www32/ptc/05d32363-d534-4d93-9b65-cde674775e71.js	chromecache_818.2.dr	false	Avira URL Cloud: safe	unknown
https://assets.xboxservices.com/assets/12/74/12744081-03f9-42a4-87be-e869ddce3327.svg?n=Homepage-FY2	chromecache_905.2.dr	false	Avira URL Cloud: safe	unknown
https://api.company-target.com/api/v2/ip.json?key=70aff8023e038d56ea636f68e5c5922b	chromecache_742.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/es-shims/es5-shim/issues/150	chromecache_1034.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/w3c/aria-practices/pull/1757	chromecache_1034.2.dr	false	Avira URL Cloud: safe	unknown
https://axios-http.com	chromecache_1185.2.dr	false	Avira URL Cloud: safe	unknown
https://www.xbox.com/zh-HK/auth/msa?action=logIn&returnUrl=https%3A%2F%2Fwww.xbox.com%2Fzh-HK%2F&ru=	chromecache_905.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/microsoft/clarity	chromecache_635.2.dr, chromecache_1274.2.dr	false	Avira URL Cloud: safe	unknown
https://2e6ce2ab2870e62cb4620de77fa717.1b.environment.api.powerplatform.com/powervirtualagents/botsb	chromecache_818.2.dr	false	Avira URL Cloud: safe	unknown
https://www.xbox.com/es-MX/auth/msa?action=logIn&returnUrl=https%3A%2F%2Fwww.xbox.com%2Fes-MX%2F&ru=	chromecache_905.2.dr	false	Avira URL Cloud: safe	unknown
https://www.xbox.com/xbox-game-pass#join	chromecache_1419.2.dr	false	Avira URL Cloud: safe	unknown
https://keycode.info/table-of-all-keycodes	chromecache_1034.2.dr	false	Avira URL Cloud: safe	unknown
https://assets.xboxservices.com/assets/5f/2a/5f2a28b0-be52-436a-9842-fbce84e068c3.jpg?n=XOG_Home-Her	chromecache_905.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-getmethod	chromecache_1034.2.dr	false	Avira URL Cloud: safe	unknown
https://developer.mozilla.org/en-US/docs/Web/Accessibility/ARIA/Roles/Alert_Role	chromecache_1191.2.dr	false	Avira URL Cloud: safe	unknown
https://support.office.com/en-ie/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_1191.2.dr	false	Avira URL Cloud: safe	unknown
https://www.xbox.com/es-ES/auth/msa?action=logIn&returnUrl=https%3A%2F%2Fwww.xbox.com%2Fes-ES%2F&ru=	chromecache_905.2.dr	false	Avira URL Cloud: safe	unknown
https://support.office.com/en-ae/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_1191.2.dr	false	Avira URL Cloud: safe	unknown
https://www.xbox.com/de-AT/auth/msa?action=logIn&returnUrl=https%3A%2F%2Fwww.xbox.com%2Fde-AT%2F&ru=	chromecache_905.2.dr	false	Avira URL Cloud: safe	unknown
https://assets.xboxservices.com/assets/16/4c/164c6390-353e-49ac-a0b8-32e1e59e2d50.jpg?n=Elden-Ring_S	chromecache_905.2.dr	false	Avira URL Cloud: safe	unknown
https://assets.xboxservices.com/assets/e0/5e/e05ee801-7365-4a33-b1ed-0254fc3625e7.jpg?n=0655432224_L	chromecache_905.2.dr	false	Avira URL Cloud: safe	unknown
https://www.skype.com/en/	chromecache_811.2.dr, chromecache_818.2.dr, chromecache_612.2.dr	false	Avira URL Cloud: safe	unknown
https://www.suno.ai/legal/terms	chromecache_1485.2.dr	false	Avira URL Cloud: safe	unknown
https://assets.xboxservices.com/assets/92/89/9289d8a6-b9bb-4259-ac1f-e37639ca56fb.jpg?n=02249943_Sma	chromecache_905.2.dr	false	Avira URL Cloud: safe	unknown
https://support.office.com/zh-cn/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_1191.2.dr	false	Avira URL Cloud: safe	unknown
https://www.xbox.com/en-GB/auth/msa?action=logIn&returnUrl=https%3A%2F%2Fwww.xbox.com%2Fen-GB%2F&ru=	chromecache_905.2.dr	false	Avira URL Cloud: safe	unknown
https://assets.xboxservices.com/assets/9f/91/9f91def7-092b-4500-bb4f-bbe406331104.jpg?n=XGP-2024_Sma	chromecache_905.2.dr	false	Avira URL Cloud: safe	unknown
https://assets.xboxservices.com/assets/80/86/80869814-58e6-4646-9293-e5be2f847123.jpg?n=Assassins-Cr	chromecache_905.2.dr	false	Avira URL Cloud: safe	unknown
https://developer.mozilla.org/en-US/docs/Web/API/KeyboardEvent/key/Key_Values	chromecache_1034.2.dr	false	Avira URL Cloud: safe	unknown
https://origin-ppe.xbox.com	chromecache_900.2.dr, chromecache_875.2.dr	false	Avira URL Cloud: safe	unknown
http://www.twitter.com/windows	chromecache_612.2.dr	false	Avira URL Cloud: safe	unknown
https://support.office.com/th-th/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_1191.2.dr	false	Avira URL Cloud: safe	unknown
https://assets.xboxservices.com/assets/14/e9/14e91134-f69a-48b4-85dd-f160361e4128.jpg?n=Elden-Ring_P	chromecache_1419.2.dr	false	Avira URL Cloud: safe	unknown
https://www.suno.ai/legal/privacy	chromecache_1485.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/douglascrockford/JSON-js	chromecache_1168.2.dr, chromecache_1293.2.dr	false	Avira URL Cloud: safe	unknown
https://schema.org	chromecache_818.2.dr	false	URL Reputation: safe	unknown
https://www.xbox.com/games/store/p/9PCNGJ2HCG00	chromecache_905.2.dr	false	Avira URL Cloud: safe	unknown
https://www.linkedin.com/showcase/microsoft-surface	chromecache_818.2.dr	false	Avira URL Cloud: safe	unknown
https://assets.xboxservices.com/assets/59/0f/590f50e9-4ed1-485f-a4d1-f4877015fb99.jpg?n=XGP-2024_Sma	chromecache_905.2.dr	false	Avira URL Cloud: safe	unknown
https://schema.org/ListItem	chromecache_612.2.dr	false	Avira URL Cloud: safe	unknown
https://assets.xboxservices.com/assets/83/34/8334bc16-011d-4f9a-b5e0-0fc4031fc167.png?n=playbutton.p	chromecache_787.2.dr	false	Avira URL Cloud: safe	unknown
https://assets.adobedtm.com/5ef092d1efb5/e6b4ca74378c/e4ab99b403b2/RC719fca38d7b34d53b47cd51f8087572	chromecache_974.2.dr	false	Avira URL Cloud: safe	unknown
https://assets.xboxservices.com/assets/37/ec/37ec5a7a-08b4-466f-93e3-81fb5dd0b471.svg?n=Homepage-FY2	chromecache_905.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-parseint-string-radix	chromecache_1034.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-string.prototype.includes	chromecache_1034.2.dr	false	Avira URL Cloud: safe	unknown
https://www.xbox.com/accessories	chromecache_905.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/	chromecache_811.2.dr	false	Avira URL Cloud: safe	unknown
http://www.opensource.org/licenses/mit-license.php)	chromecache_1168.2.dr, chromecache_1293.2.dr	false	URL Reputation: safe	unknown
https://assets.xboxservices.com/assets/f6/d8/f6d88804-1334-47e6-8270-02e396a81235.mp4?n=230022_Large	chromecache_787.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/zloirock/core-js/issues/1130	chromecache_1034.2.dr	false	Avira URL Cloud: safe	unknown
https://assets.xboxservices.com/assets/76/4f/764f6f3a-7112-4221-9a09-dc9dfe33961c.jpg?n=284993_Large	chromecache_905.2.dr	false	Avira URL Cloud: safe	unknown
https://support.office.com/he-il/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_1191.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-array.prototype.map	chromecache_1034.2.dr	false	Avira URL Cloud: safe	unknown
https://gear.xbox.com	chromecache_905.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-tolength	chromecache_1034.2.dr	false	Avira URL Cloud: safe	unknown
https://www.xbox.com/games/senuas-saga-hellblade-ii	chromecache_905.2.dr, chromecache_1419.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-array.prototype-	chromecache_1034.2.dr	false	Avira URL Cloud: safe	unknown
https://assets.adobedtm.com/5ef092d1efb5/e6b4ca74378c/e4ab99b403b2/RC763fa4cd2e3f4366b114c9c5d30dd07	chromecache_1595.2.dr	false	Avira URL Cloud: safe	unknown
https://assets.xboxservices.com/assets/96/b1/96b1ed72-925c-43ff-aada-34052d9330ec.jpg?n=XGP-2024_Sma	chromecache_905.2.dr	false	Avira URL Cloud: safe	unknown
https://assets.xboxservices.com/assets/50/19/5019ef4e-1d09-492d-aab4-1112a53f4787.jpg?n=EA-Sports-FC	chromecache_1419.2.dr	false	Avira URL Cloud: safe	unknown
https://assets.xboxservices.com/assets/95/04/9504e8f4-43d8-45df-a977-38d432dc1386.jpg?n=153142244433	chromecache_1419.2.dr	false	Avira URL Cloud: safe	unknown
https://assets.xboxservices.com/assets/74/3d/743dc10e-825f-46b0-acaa-ef105e847bfa.jpg?n=9999390003_S	chromecache_905.2.dr	false	Avira URL Cloud: safe	unknown
https://support.office.com/it-it/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_1191.2.dr	false	Avira URL Cloud: safe	unknown
http://github.com/aFarkas/lazysizes	chromecache_919.2.dr	false	Avira URL Cloud: safe	unknown
https://breeze.aimon.applicationinsights.io	chromecache_1118.2.dr	false	Avira URL Cloud: safe	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
63.34.165.131	unknown	United States	16509	AMAZON-02US	false
13.107.246.42	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
37.252.171.149	unknown	European Union	29990	ASN-APPNEXUS	false
13.107.246.45	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.18.24.173	unknown	United States	13335	CLOUDFLARENETUS	false
20.50.88.242	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.44	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
18.205.40.214	unknown	United States	14618	AMAZON-AESUS	false
2.16.164.121	unknown	European Union	20940	AKAMAI-ASN1EU	false
142.250.185.227	unknown	United States	15169	GOOGLEUS	false
66.235.152.225	unknown	United States	15224	OMNITUREUS	false
20.114.189.70	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
20.190.160.14	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
44.238.139.12	unknown	United States	16509	AMAZON-02US	false
88.221.110.176	unknown	European Union	20940	AKAMAI-ASN1EU	false
20.190.159.23	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
2.16.1.154	unknown	European Union	20940	AKAMAI-ASN1EU	false
20.199.58.43	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.102.40.143	unknown	United States	16625	AKAMAI-ASUS	false
52.111.243.44	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
2.23.209.140	unknown	European Union	1273	CWVodafoneGroupPLCEU	false
198.47.127.205	unknown	United States	62713	AS-PUBMATICUS	false
52.111.243.45	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
18.245.199.123	unknown	United States	16509	AMAZON-02US	false
52.51.71.34	unknown	United States	16509	AMAZON-02US	false
204.79.197.237	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
151.101.193.44	unknown	United States	54113	FASTLYUS	false
23.218.209.163	unknown	United States	6453	AS6453US	false
1.1.1.1	unknown	Australia	13335	CLOUDFLARENETUS	false
13.89.179.14	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.248.245.213	unknown	United States	16509	AMAZON-02US	false
2.19.224.46	unknown	European Union	16625	AKAMAI-ASUS	false
63.32.136.28	unknown	United States	16509	AMAZON-02US	false
157.240.0.35	unknown	United States	32934	FACEBOOKUS	false
172.217.18.4	unknown	United States	15169	GOOGLEUS	false
18.130.29.255	unknown	United States	16509	AMAZON-02US	false
151.101.130.49	unknown	United States	54113	FASTLYUS	false
104.102.44.165	unknown	United States	16625	AKAMAI-ASUS	false
52.211.254.3	unknown	United States	16509	AMAZON-02US	false
34.204.32.41	unknown	United States	14618	AMAZON-AESUS	false

IP
192.168.2.17
192.168.2.16
192.168.2.4

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1470044
Start date and time:	2024-07-09 13:24:26 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 28s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://sway.cloud.microsoft/Sac2nvv7Mrz0mzbj?ref=Link
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@43/1765@0/100
Cookbook Comments:	Browse: https://sway.cloud.microsoft/ Browse: https://www.microsoft.com/ Browse: https://www.microsoft.com/microsoft-365 Browse: https://www.microsoft.com/en-us/microsoft-teams/group-chat-software Browse: https://copilot.microsoft.com/ Browse: https://www.microsoft.com/en-us/windows/ Browse: https://www.microsoft.com/surface Browse: https://www.xbox.com/ Browse: https://www.microsoft.com/en-us/store/b/sale?icid=gm_nav_L0_salepage Browse: https://www.microsoft.com/en-us/store/b/business Browse: https://support.microsoft.com/en-us

Input	Output
URL: https://sway.cloud.microsoft/Sac2nvv7Mrz0mzbj?ref=Link Model: Perplexity: mixtral-8x7b-instruct	{"loginform": true,"urgency": false,"captcha": false,"reasons": ["The webpage contains a 'Sign-in' form which explicitly requests sensitive information in the form of a work or school account.","The text does not create a sense of urgency or interest as it simply instructs the user to sign-in with their account."]}
Title: Sway - Sign-in OCR: Sign-in is required Sign in with a work or school account to view this Sway. Sign in
URL: https://sway.cloud.microsoft/ Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form, as there are no explicit requests for sensitive information such as passwords, email addresses, usernames, phone numbers, or credit card numbers.","The text does not create a sense of urgency, as there are no phrases that encourage immediate action or imply negative consequences for not taking action.","The webpage does not contain a CAPTCHA or any other anti-robot detection mechanism.","The webpage is promoting Microsoft products such as Microsoft 365, Teams, Windows, Surface, Xbox, and Office 365, and encourages users to sign in to Sway to create visually striking newsletters, presentations, and documentation."]}
Title: Microsoft Sway \| Create visually striking newsletters, presentations, and documentation in minutes OCR: Microsoft Microsoft 365 Teams Copilot Windows Surface Xbox Deals Small Business Support Buy Office 365 All Microsoft Sign in Sway Crsate visually'trlkin;newsletterswesentation and dpcumentation in inutes Get started What you can make in Sway Newsletters Presentations Communications
URL: https://sway.cloud.microsoft/ Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form, as there are no explicit requests for sensitive information such as passwords, email addresses, usernames, phone numbers, or credit card numbers.","The text does not create a sense of urgency, as there are no phrases that encourage immediate action such as 'Click here to view document', 'To view secured document click here', or 'Open the link to see your invoice.'","The webpage does not contain a CAPTCHA or any other anti-robot detection mechanism."]}
Title: Microsoft Sway \| Create visually striking newsletters, presentations, and documentation in minutes OCR: Take the power of A1 on the go with the free Copilot app No, thanks Get the Copilot app Create images, get help with writing, end search faster Microsoft Microsoft 365 Teams Copilot Windows Surface Xbox Deals Small Business Support Buy Office 365 All Microsoft Sway Create visuallygrVking newslettersWesentation and dpcUmentation in inutes=4'4 Get started What you can make in Sway Newsletters Presentations Communications
URL: https://sway.cloud.microsoft Model: gpt-4o	```json{ "phishing_score": 8, "brands": "Microsoft", "phishing": true, "suspicious_domain": true, "has_prominent_loginform": true, "has_captcha": false, "setechniques": true, "has_suspicious_link": false, "legitmate_domain": "microsoft.com", "reasons": "The URL 'https://sway.cloud.microsoft' is suspicious because it uses a subdomain structure that is not typical for Microsoft services. Legitimate Microsoft services usually use subdomains directly under 'microsoft.com' (e.g., 'sway.microsoft.com'). The page has a prominent login form, which is a common feature of phishing sites. The use of social engineering techniques is evident as the page prompts the user to sign in with a work or school account, which can mislead users into providing their credentials. There is no CAPTCHA present, which is often used in legitimate sites to prevent automated attacks. The overall design resembles a legitimate Microsoft login page, but the domain discrepancy raises significant concerns."}

URL: https://www.microsoft.com/en-us/microsoft-365 Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The title of the webpage 'Your request has been blocked' suggests that it's a security or access control measure, but it does not contain a login form.","The text does not create a sense of urgency or interest as it is a generic message about a blocked request.","There is no CAPTCHA or anti-robot detection mechanism present on the webpage."]}
Title: Your request has been blocked. This could be due to several reasons. OCR: Microsoft Microsoft 365 Copilot Windows Surface Xbox Deals Small Business All Microsoft Teams Support Your current User-Agent string appears to be from an automated process, if this is incorrect, please click this link: United States English Microsoft Homepage What's new Microsoft Store Education Business Developer & IT Company Surface Laptop Studio 2 Account profile Microsoft in education Microsoft Cloud Azure Surface Laptop Go 3 Download Center Devices for education Microsoft Security Developer Center About Microsoft Surface Pro 9 Microsoft Store Microsoft Teams for Education Dynamics 365 Documentation Compary news Surface Laptop 5 Microsoft 365 Microsoft 365 Microsoft Leam Privacy at Microsoft Microsoft Copilot Order tracking How to Ouy for your school Microsoft Power Platform Microsoft Tech Community I r,vestors Copilot ir Windows Certified Refurbished Educator training and Microsoft Teams Azure Marketplace Diversity and inclusion development Microsoft 365 Microsoft Store Promise Copilot for Microsoft 365 AppSource Accessibility Deals for students and parents Windcws I I apps Flexible Payments Small ausiress Sustainability Visual Studio Azure for students English (United States) Sitem ap Contact Microsoft Privacy Terms of use Trademarks Safety & eco Recycling About our ads Microsoft 2024.303
URL: https://support.microsoft.com/en-us Model: Perplexity: mixtral-8x7b-instruct	{"loginform": true,"urgency": false,"captcha": false,"reasons": ["The webpage contains a login form which explicitly requests sensitive information such as passwords, email addresses, usernames, phone numbers or credit card numbers (CVV).","The text does not create a sense of urgency or interest as it is a general welcome message and does not contain any calls to action such as 'Click here to view document' or 'To view secured document click here'.","The webpage does not contain a CAPTCHA or any other anti-robot detection mechanism."]}
Title: Microsoft Support OCR: i Microsoft Support Microsoft 365 Office Products Devices Account & billing Buy Microsoft 365 All Microsoft More Welcome to Microsoft Support Please sign in so we may serve you better Sign in How can we help you? Microsoft 365 Outlook Microsoft Store OneDrive Windows rf Microsoft Teams Microsoft Edge Gaming MORE MICROSOFT PRODUCTS Trending topics Microsoft 365 Microsoft account & storage Activation Windows & devices Install Microsoft 365 Sign in to your Microsoft account Activate Office Windows 1 1 system requirements Manage your subscriptions Change your Microsoft account Activate Windows Windows 8.1 end of support password Manage payment and billing Find your Windows product key Find your hardware warranty How does Microsoft storage work?
URL: https://support.microsoft.com/en-us Model: Perplexity: mixtral-8x7b-instruct	{"loginform": true,"urgency": false,"captcha": false,"reasons": ["The webpage contains a login form which requests sensitive information such as email addresses and passwords.","The text does not create a sense of urgency.","There is no CAPTCHA or anti-robot detection mechanism on the webpage."]}
Title: Microsoft Support OCR: You're invited to try Microsoft 365 for free Ur&k Microsoft Support Microsoft 365 Office Products Devices Account & billing Buy Microsoft 365 All Microsoft More Sign in with Microsoft Sign in or create an account. Welcome to Microsoft Suppor Please sign in so we may serve you better Sign in How can we help you? Eti OneDrive Windows Surface devices Microsoft Teams Microsoft 365 Microsoft Store Microsoft Edge Gaming MORE MICROSOFT PRODUCTS > Trending topics Microsoft 365 Microsoft account & storage Activation Windows & devices Install Microsoft 365 Sign in to your Microsoft account Activate Office Windows 11 system requirements Manage your subscriptions Change your Microsoft account Activate Windows Windows 8.1 end of support password Manage payment and billing Find your Windows product key Find your hardware warranty How does Microsoft storage work?
URL: https://support.microsoft.com Model: gpt-4o	```json{ "phishing_score": 0, "brands": "Microsoft", "phishing": false, "suspicious_domain": false, "has_prominent_loginform": true, "has_captcha": false, "setechniques": false, "has_suspicious_link": false, "legitmate_domain": "microsoft.com", "reasons": "The URL 'https://support.microsoft.com' is a legitimate domain associated with Microsoft. The webpage design and content match the typical style of Microsoft's official support page. There are no suspicious elements, social engineering techniques, or suspicious links present. The login form is prominent, which is expected for a support page requiring user authentication. No captcha is present, which is also typical for such pages. Therefore, the site is determined to be legitimate."}

URL: https://support.microsoft.com Model: gpt-4o	```json{ "phishing_score": 0, "brands": "Microsoft", "phishing": false, "suspicious_domain": false, "has_prominent_loginform": true, "has_captcha": false, "setechniques": false, "has_suspicious_link": false, "legitmate_domain": "microsoft.com", "reasons": "The URL 'https://support.microsoft.com' is a legitimate domain associated with Microsoft. The webpage design, branding, and content are consistent with Microsoft's official support site. There are no suspicious elements, such as misleading links or social engineering techniques, present in the image. The login form is prominently displayed, which is typical for support sites requiring user authentication. There is no CAPTCHA present, which is also common for legitimate support pages. Based on the analysis, there is no evidence to suggest that this is a phishing site."}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text
Category:	downloaded
Size (bytes):	11540
Entropy (8bit):	4.2021829682985645
Encrypted:	false
SSDEEP:	192:kGfddNqdxepC04i780u9hSbD050ucvVnunSCZ5WzMYQIqIxiSCy7yNep3OeGtSC4:FfqfeQ06Lobw50ucvVnCW+vaxRVCjBAx
MD5:	CFF87F95FFBD752224F38A06535D2122
SHA1:	C1867282DA62D1A684D341DAFA7E6B2975544125
SHA-256:	64B04CE8C62C6D806CC94DF9E59D4456F0E86AC15FF8D17AD3B7D4A855B2B25D
SHA-512:	D6682107862FE7F33448F38E9E16280A4039B5E3A04879A3E1D8018954D2D02246E62BFE9E5C8C6FD3FA1A25BDAC919C6328143DEF08F40BE26BD168E0004C25
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-tabs-common.min.ACSHASHcff87f95ffbd752224f38a06535d2122.js
Preview:	/*. Addresses common concerns with the Tabs-family components; coordinates initialization and nesting of multiple tabs on a page. . Supports:. * - empty tab titles. * - spaces in tab titles. * - special characters in tab titles. * . * When creating a new Tabs-based compoent, add a new selector to the "allTabTypes" array. /..(function () {. "use strict";.. var NS = "cmp";. var IS;. var selectors;.. /. Tabs Configuration. . @typedef {Object} TabsConfig Represents a Tabs configuration. * @property {HTMLElement} element The HTMLElement representing the Tabs. * @property {Object} options The Tabs options. /.. /. Tabs. . @class Tabs. * @classdesc An interactive Tabs component for navigating a list of tabs. * @param {TabsConfig} config The Tabs configuration. */. function Tabs(config) {. var that = this;.. if (config && config.element) {.

Target ID:	0
Start time:	07:25:15
Start date:	09/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Target ID:	2
Start time:	07:25:18
Start date:	09/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2492 --field-trial-handle=2256,i,7678980693930225314,13678371135031919408,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Target ID:	3
Start time:	07:25:20
Start date:	09/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sway.cloud.microsoft/Sac2nvv7Mrz0mzbj?ref=Link"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Target ID:	8
Start time:	07:26:13
Start date:	09/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6760 --field-trial-handle=2256,i,7678980693930225314,13678371135031919408,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://sway.cloud.microsoft/Sac2nvv7Mrz0mzbj?ref=Link

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Malware Analysis System Evasion

Anti Debugging

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 1000

Chrome Cache Entry: 1001

Chrome Cache Entry: 1002

Chrome Cache Entry: 1003

Chrome Cache Entry: 1004

Chrome Cache Entry: 1005

Chrome Cache Entry: 1006

Chrome Cache Entry: 1007

Chrome Cache Entry: 1008

Chrome Cache Entry: 1009

Chrome Cache Entry: 1010

Chrome Cache Entry: 1011

Chrome Cache Entry: 1012

Chrome Cache Entry: 1013

Chrome Cache Entry: 1014

Chrome Cache Entry: 1015

Chrome Cache Entry: 1016

Chrome Cache Entry: 1017

Chrome Cache Entry: 1018

Chrome Cache Entry: 1019

Chrome Cache Entry: 1020

Chrome Cache Entry: 1021

Chrome Cache Entry: 1022

Chrome Cache Entry: 1023

Chrome Cache Entry: 1024

Chrome Cache Entry: 1025

Chrome Cache Entry: 1026

Windows Analysis Report
https://sway.cloud.microsoft/Sac2nvv7Mrz0mzbj?ref=Link