Edit tour

Windows Analysis Report
https://uconn-my.sharepoint.com/:o:/g/personal/lisa_frank_uconn_edu/EryHWVeqJnhDu2fh5Y44MT4BNS9VFRX04eNZiwiwvmi1JQ?e=5%3amqjzyy&at=9

Overview

General Information

Sample URL:	https://uconn-my.sharepoint.com/:o:/g/personal/lisa_frank_uconn_edu/EryHWVeqJnhDu2fh5Y44MT4BNS9VFRX04eNZiwiwvmi1JQ?e=5%3amqjzyy&at=9
Analysis ID:	1478568
Infos:

Detection

Score:	3
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML title does not match URL

HTTP GET or POST without a user agent

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6832 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://uconn-my.sharepoint.com/:o:/g/personal/lisa_frank_uconn_edu/EryHWVeqJnhDu2fh5Y44MT4BNS9VFRX04eNZiwiwvmi1JQ?e=5%3amqjzyy&at=9 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 6640 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1924,i,2586806153096979946,14282725627711045495,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

Joe Sandbox Signatures

• Phishing
• Compliance
• Networking
• System Summary
• Boot Survival

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://login.microsoftonline.com/17f1a87e-2a25-4eaa-b9df-9d439034b080/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=6B44686139FB2C2E7FCFF0222F8BF48AA3799D5D159F685C%2D55AF5ECA5938483B569883E8EDF79F84EA18B0A54A71D1F979715BE25D785466&redirect%5Furi=https%3A%2F%2Fuconn%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=d9da3ea1%2D2035%2D6000%2D1cba%2D0d4b28d323a4	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/17f1a87e-2a25-4eaa-b9df-9d439034b080/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=6B44686139FB2C2E7FCFF0222F8BF48AA3799D5D159F685C%2D55AF5ECA5938483B569883E8EDF79F84EA18B0A54A71D1F979715BE25D785466&redirect%5Furi=https%3A%2F%2Fuconn%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=d9da3ea1%2D2035%2D6000%2D1cba%2D0d4b28d323a4&sso_reload=true	HTTP Parser: Number of links: 0

Source: https://uconn-my.sharepoint.com/:o:/g/personal/lisa_frank_uconn_edu/EryHWVeqJnhDu2fh5Y44MT4BNS9VFRX04eNZiwiwvmi1JQ?e=5%3amqjzyy&at=9

HTTP Parser: Base64 decoded: +)\.\d+))/.test(navigator.userAgent) || /[?&]env=TeamsWebView/.test(location.search) || /Teams\/((?:(\d+)\.)?(?:(\d+)\.)?(?:(\d+)\.\d+))(?:\/(\\d+))?/.test(navigator.userAgent) || window.name ...

Source: https://login.microsoftonline.com/17f1a87e-2a25-4eaa-b9df-9d439034b080/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=6B44686139FB2C2E7FCFF0222F8BF48AA3799D5D159F685C%2D55AF5ECA5938483B569883E8EDF79F84EA18B0A54A71D1F979715BE25D785466&redirect%5Furi=https%3A%2F%2Fuconn%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=d9da3ea1%2D2035%2D6000%2D1cba%2D0d4b28d323a4	HTTP Parser: Title: Redirecting does not match URL
Source: https://login.microsoftonline.com/17f1a87e-2a25-4eaa-b9df-9d439034b080/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=6B44686139FB2C2E7FCFF0222F8BF48AA3799D5D159F685C%2D55AF5ECA5938483B569883E8EDF79F84EA18B0A54A71D1F979715BE25D785466&redirect%5Furi=https%3A%2F%2Fuconn%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=d9da3ea1%2D2035%2D6000%2D1cba%2D0d4b28d323a4&sso_reload=true	HTTP Parser: Title: Sign in to your account does not match URL

Source: https://login.microsoftonline.com/17f1a87e-2a25-4eaa-b9df-9d439034b080/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=6B44686139FB2C2E7FCFF0222F8BF48AA3799D5D159F685C%2D55AF5ECA5938483B569883E8EDF79F84EA18B0A54A71D1F979715BE25D785466&redirect%5Furi=https%3A%2F%2Fuconn%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=d9da3ea1%2D2035%2D6000%2D1cba%2D0d4b28d323a4

HTTP Parser: No favicon

Source: https://login.microsoftonline.com/17f1a87e-2a25-4eaa-b9df-9d439034b080/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=6B44686139FB2C2E7FCFF0222F8BF48AA3799D5D159F685C%2D55AF5ECA5938483B569883E8EDF79F84EA18B0A54A71D1F979715BE25D785466&redirect%5Furi=https%3A%2F%2Fuconn%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=d9da3ea1%2D2035%2D6000%2D1cba%2D0d4b28d323a4	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/17f1a87e-2a25-4eaa-b9df-9d439034b080/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=6B44686139FB2C2E7FCFF0222F8BF48AA3799D5D159F685C%2D55AF5ECA5938483B569883E8EDF79F84EA18B0A54A71D1F979715BE25D785466&redirect%5Furi=https%3A%2F%2Fuconn%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=d9da3ea1%2D2035%2D6000%2D1cba%2D0d4b28d323a4&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/17f1a87e-2a25-4eaa-b9df-9d439034b080/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=6B44686139FB2C2E7FCFF0222F8BF48AA3799D5D159F685C%2D55AF5ECA5938483B569883E8EDF79F84EA18B0A54A71D1F979715BE25D785466&redirect%5Furi=https%3A%2F%2Fuconn%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=d9da3ea1%2D2035%2D6000%2D1cba%2D0d4b28d323a4&sso_reload=true	HTTP Parser: No <meta name="author".. found

Source: https://login.microsoftonline.com/17f1a87e-2a25-4eaa-b9df-9d439034b080/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=6B44686139FB2C2E7FCFF0222F8BF48AA3799D5D159F685C%2D55AF5ECA5938483B569883E8EDF79F84EA18B0A54A71D1F979715BE25D785466&redirect%5Furi=https%3A%2F%2Fuconn%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=d9da3ea1%2D2035%2D6000%2D1cba%2D0d4b28d323a4	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/17f1a87e-2a25-4eaa-b9df-9d439034b080/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=6B44686139FB2C2E7FCFF0222F8BF48AA3799D5D159F685C%2D55AF5ECA5938483B569883E8EDF79F84EA18B0A54A71D1F979715BE25D785466&redirect%5Furi=https%3A%2F%2Fuconn%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=d9da3ea1%2D2035%2D6000%2D1cba%2D0d4b28d323a4&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/17f1a87e-2a25-4eaa-b9df-9d439034b080/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=6B44686139FB2C2E7FCFF0222F8BF48AA3799D5D159F685C%2D55AF5ECA5938483B569883E8EDF79F84EA18B0A54A71D1F979715BE25D785466&redirect%5Furi=https%3A%2F%2Fuconn%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=d9da3ea1%2D2035%2D6000%2D1cba%2D0d4b28d323a4&sso_reload=true	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.17:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.17:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.31.71:443 -> 192.168.2.17:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.23.209.133:443 -> 192.168.2.17:49803 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: uconn-my.sharepoint.com to https://login.microsoftonline.com:443/17f1a87e-2a25-4eaa-b9df-9d439034b080/oauth2/authorize?client%5fid=00000003%2d0000%2d0ff1%2dce00%2d000000000000&response%5fmode=form%5fpost&response%5ftype=code%20id%5ftoken&resource=00000003%2d0000%2d0ff1%2dce00%2d000000000000&scope=openid&nonce=6b44686139fb2c2e7fcff0222f8bf48aa3799d5d159f685c%2d55af5eca5938483b569883e8edf79f84ea18b0a54a71d1f979715be25d785466&redirect%5furi=https%3a%2f%2fuconn%2dmy%2esharepoint%2ecom%2f%5fforms%2fdefault%2easpx&state=od0w&claims=%7b%22id%5ftoken%22%3a%7b%22xms%5fcc%22%3a%7b%22values%22%3a%5b%22cp1%22%5d%7d%7d%7d&wsucxt=1&cobrandid=11bd8083%2d87e0%2d41b5%2dbb78%2d0bc43c8a8e8a&client%2drequest%2did=d9da3ea1%2d2035%2d6000%2d1cba%2d0d4b28d323a4

Source: global traffic

HTTP traffic detected: GET /ab HTTP/1.1Host: evoke-windowsservices-tas.msedge.netCache-Control: no-store, no-cacheX-PHOTOS-CALLERID: 9NMPJ99VJBWVX-EVOKE-RING: X-WINNEXT-RING: PublicX-WINNEXT-TELEMETRYLEVEL: BasicX-WINNEXT-OSVERSION: 10.0.19045.0X-WINNEXT-APPVERSION: 1.23082.131.0X-WINNEXT-PLATFORM: DesktopX-WINNEXT-CANTAILOR: FalseX-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd}X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI=If-None-Match: 2056388360_-1434155563Accept-Encoding: gzip, deflate, br

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.71
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.71
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.71
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.71
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.71
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.71
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.71

Source: global traffic	HTTP traffic detected: GET /:o:/g/personal/lisa_frank_uconn_edu/EryHWVeqJnhDu2fh5Y44MT4BNS9VFRX04eNZiwiwvmi1JQ?e=5%3amqjzyy&at=9 HTTP/1.1Host: uconn-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/1033/styles/corev15.css?rev=gzHVbYEq83HWY83fQnDKyQ%3D%3DTAG205 HTTP/1.1Host: uconn-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://uconn-my.sharepoint.com/:o:/g/personal/lisa_frank_uconn_edu/EryHWVeqJnhDu2fh5Y44MT4BNS9VFRX04eNZiwiwvmi1JQ?e=5%3amqjzyy&at=9Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/1033/styles/error.css?rev=tF7fyfzbaQzNoASoSDlV4A%3D%3DTAG205 HTTP/1.1Host: uconn-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://uconn-my.sharepoint.com/:o:/g/personal/lisa_frank_uconn_edu/EryHWVeqJnhDu2fh5Y44MT4BNS9VFRX04eNZiwiwvmi1JQ?e=5%3amqjzyy&at=9Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=bTMVwVBOQTEWXfMTeLPRauMAlGZqlxO6d24w9vRq_hFodF38zo2etBqBoUodT-tYm25MhloUihc-1Ve_WEURLUwehSrxj_ZVDaAtcdvGOVa3nTLiPG244WzuXTxsJ7AeU3UoPuKWYe8l4bslAFyMC4itMHMs0xqeoebVbeAWrL2M3Ue6OkkM4ErGNkc-hXoq0&t=74258c30 HTTP/1.1Host: uconn-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://uconn-my.sharepoint.com/:o:/g/personal/lisa_frank_uconn_edu/EryHWVeqJnhDu2fh5Y44MT4BNS9VFRX04eNZiwiwvmi1JQ?e=5%3amqjzyy&at=9Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=5obXSffBrxKutWSM22_pc7pcwCPAoEDMMxba-3OLRteC_0xzaX0A_FPG2nWf2LmXV0_rWDQ8FIN9EmE74nFkz7YodIXt4M965BjNYp7d6d0MJLH8joaq6AEYE7UVUcCvvhhr6XMWP6xqcLac9mpAJSUTlNa0xHCRubif0OQeM8lfF0mXakbsEBNu2W2vTd7g0&t=74258c30 HTTP/1.1Host: uconn-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://uconn-my.sharepoint.com/:o:/g/personal/lisa_frank_uconn_edu/EryHWVeqJnhDu2fh5Y44MT4BNS9VFRX04eNZiwiwvmi1JQ?e=5%3amqjzyy&at=9Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=4NuAIey-1eXTfkmwTY3x91AumVU41ZLXV-ngbxqay8EH9oB-ZoIb1xeI6WPlgpVrLZIQx9e3BaGa57iiGEphJoZDFLyxRnIQenOP4SDscZ01&t=638533172441064469 HTTP/1.1Host: uconn-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://uconn-my.sharepoint.com/:o:/g/personal/lisa_frank_uconn_edu/EryHWVeqJnhDu2fh5Y44MT4BNS9VFRX04eNZiwiwvmi1JQ?e=5%3amqjzyy&at=9Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=5obXSffBrxKutWSM22_pc7pcwCPAoEDMMxba-3OLRteC_0xzaX0A_FPG2nWf2LmXV0_rWDQ8FIN9EmE74nFkz7YodIXt4M965BjNYp7d6d0MJLH8joaq6AEYE7UVUcCvvhhr6XMWP6xqcLac9mpAJSUTlNa0xHCRubif0OQeM8lfF0mXakbsEBNu2W2vTd7g0&t=74258c30 HTTP/1.1Host: uconn-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=bTMVwVBOQTEWXfMTeLPRauMAlGZqlxO6d24w9vRq_hFodF38zo2etBqBoUodT-tYm25MhloUihc-1Ve_WEURLUwehSrxj_ZVDaAtcdvGOVa3nTLiPG244WzuXTxsJ7AeU3UoPuKWYe8l4bslAFyMC4itMHMs0xqeoebVbeAWrL2M3Ue6OkkM4ErGNkc-hXoq0&t=74258c30 HTTP/1.1Host: uconn-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=4NuAIey-1eXTfkmwTY3x91AumVU41ZLXV-ngbxqay8EH9oB-ZoIb1xeI6WPlgpVrLZIQx9e3BaGa57iiGEphJoZDFLyxRnIQenOP4SDscZ01&t=638533172441064469 HTTP/1.1Host: uconn-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/favicon.ico?rev=47 HTTP/1.1Host: uconn-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://uconn-my.sharepoint.com/:o:/g/personal/lisa_frank_uconn_edu/EryHWVeqJnhDu2fh5Y44MT4BNS9VFRX04eNZiwiwvmi1JQ?e=5%3amqjzyy&at=9Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/favicon.ico?rev=47 HTTP/1.1Host: uconn-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=99mkac2chMnpP2c&MD=HAY1hrLU HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /personal/lisa_frank_uconn_edu HTTP/1.1Host: uconn-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://uconn-my.sharepoint.com/:o:/g/personal/lisa_frank_uconn_edu/EryHWVeqJnhDu2fh5Y44MT4BNS9VFRX04eNZiwiwvmi1JQ?e=5%3amqjzyy&at=9Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: WSS_FullScreenMode=false
Source: global traffic	HTTP traffic detected: GET /personal/lisa_frank_uconn_edu/_layouts/15/Authenticate.aspx?Source=%2Fpersonal%2Flisa%5Ffrank%5Fuconn%5Fedu HTTP/1.1Host: uconn-my.sharepoint.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://uconn-my.sharepoint.com/:o:/g/personal/lisa_frank_uconn_edu/EryHWVeqJnhDu2fh5Y44MT4BNS9VFRX04eNZiwiwvmi1JQ?e=5%3amqjzyy&at=9Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: WSS_FullScreenMode=false
Source: global traffic	HTTP traffic detected: GET /_forms/default.aspx?ReturnUrl=%2fpersonal%2flisa_frank_uconn_edu%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fpersonal%252Flisa%255Ffrank%255Fuconn%255Fedu&Source=cookie HTTP/1.1Host: uconn-my.sharepoint.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://uconn-my.sharepoint.com/:o:/g/personal/lisa_frank_uconn_edu/EryHWVeqJnhDu2fh5Y44MT4BNS9VFRX04eNZiwiwvmi1JQ?e=5%3amqjzyy&at=9Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: WSS_FullScreenMode=false; RpsContextCookie=U291cmNlPSUyRnBlcnNvbmFsJTJGbGlzYSU1RmZyYW5rJTVGdWNvbm4lNUZlZHU=
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_sw-M8KkV3_nBot-G1ImRcw2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_sw-M8KkV3_nBot-G1ImRcw2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_qzvqnltrxpy99ajspyxbgq2.css HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_Q3A1xKaK6oPrhbQSUwvJBQ2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Me.htm?v=3 HTTP/1.1Host: login.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_ixsmqakdnvme1h2u2lb1cq2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_ixsmqakdnvme1h2u2lb1cq2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_Q3A1xKaK6oPrhbQSUwvJBQ2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dbd5a2dd-8-rdvb7tk2-dqizgleza7igirczl4pbqrnmrs7u0uis/logintenantbranding/0/favicon?ts=638201101065629855 HTTP/1.1Host: aadcdn.msftauthimages.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dbd5a2dd-8-rdvb7tk2-dqizgleza7igirczl4pbqrnmrs7u0uis/logintenantbranding/0/favicon?ts=638201101065629855 HTTP/1.1Host: aadcdn.msftauthimages.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_758d4d3367a37038a3b2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dbd5a2dd-8-rdvb7tk2-dqizgleza7igirczl4pbqrnmrs7u0uis/logintenantbranding/0/customcss?ts=638201101081188424 HTTP/1.1Host: aadcdn.msftauthimages.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"hpgrequestid: 8e6f72cb-7c4c-4053-8569-6d4bca783900sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36client-request-id: d9da3ea1-2035-6000-1cba-0d4b28d323a4Content-type: application/x-www-form-urlencodedhpgid: 1104Accept: application/jsonhpgact: 1800sec-ch-ua-platform: "Windows"Origin: https://login.microsoftonline.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pverticalsplittemplate_57bc5e33d941270831cb.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_758d4d3367a37038a3b2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dbd5a2dd-8-rdvb7tk2-dqizgleza7igirczl4pbqrnmrs7u0uis/logintenantbranding/0/customcss?ts=638201101081188424 HTTP/1.1Host: aadcdn.msftauthimages.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dbd5a2dd-8-rdvb7tk2-dqizgleza7igirczl4pbqrnmrs7u0uis/logintenantbranding/0/bannerlogo?ts=638201105802239319 HTTP/1.1Host: aadcdn.msftauthimages.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pverticalsplittemplate_57bc5e33d941270831cb.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dbd5a2dd-8-rdvb7tk2-dqizgleza7igirczl4pbqrnmrs7u0uis/logintenantbranding/0/illustration?ts=638201101075209950 HTTP/1.1Host: aadcdn.msftauthimages.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dbd5a2dd-8-rdvb7tk2-dqizgleza7igirczl4pbqrnmrs7u0uis/logintenantbranding/0/bannerlogo?ts=638201105802239319 HTTP/1.1Host: aadcdn.msftauthimages.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dbd5a2dd-8-rdvb7tk2-dqizgleza7igirczl4pbqrnmrs7u0uis/logintenantbranding/0/illustration?ts=638201101075209950 HTTP/1.1Host: aadcdn.msftauthimages.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=99mkac2chMnpP2c&MD=HAY1hrLU HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ab HTTP/1.1Host: evoke-windowsservices-tas.msedge.netCache-Control: no-store, no-cacheX-PHOTOS-CALLERID: 9NMPJ99VJBWVX-EVOKE-RING: X-WINNEXT-RING: PublicX-WINNEXT-TELEMETRYLEVEL: BasicX-WINNEXT-OSVERSION: 10.0.19045.0X-WINNEXT-APPVERSION: 1.23082.131.0X-WINNEXT-PLATFORM: DesktopX-WINNEXT-CANTAILOR: FalseX-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd}X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI=If-None-Match: 2056388360_-1434155563Accept-Encoding: gzip, deflate, br
Source: global traffic	HTTP traffic detected: GET /client/config?cc=CH&setlang=en-CH HTTP/1.1X-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateAccept-Encoding: gzip, deflateX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-UserAgeClass: UnknownX-BM-Market: CHX-BM-DateFormat: dd/MM/yyyyX-Device-OSSKU: 48X-BM-DTZ: -240X-DeviceID: 01000A41090080B6X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Search-TimeZone: Bias=300; DaylightBias=-60; TimeZoneKeyName=Eastern Standard TimeX-BM-Theme: 000000;0078d7X-Search-RPSToken: t%3DEwDoAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAWl/atVVn5O1Eun1O1iGDXVEq%2BGSR7Exo2E/WQQmI%2Bvc09L/RK0dZZuEovBlc3w%2Be5oepwp899BuAJhEIzauuZBha1GOblWhWPCOJmej3kwc1aLgacLkkR5dk03jhpX6gNOgkkc8TzjDDOyBIwfhCBd%2BHVcJOL2jEcX%2B9dx2Oh5pAOscUmDllzj/jRyorz6Wt9ypPsPqWNmizIp9MoWORv7nKvXyEnPaFbRtp1cZppgHFWFIPBiJ4hbkIy4NVkXj72rSTRbOXF8XyFPx22ZlnDa1pSiut6E3HjL/twwuBxjVSjgrK1S6M8VzfEiO%2BzuvFdcxTErsXX1KOJ8jZLnPhhUQZgAAEM8YQ%2BQ2tPIDpBM43340tZuwAQQaGWrAkrm6Jsz1/c/HJ%2BCnPn8FXtnkO8nSeASqpWJaVvdOYDgRd0RsgodvtTwazAPnb7ur8MZlL6cMHmfPBwQn/CPG5UnWIENjpzBj6Ug8VHMpLXUt3e8WFwGlRi%2BQ%2BRRO%2BNp6A/fqU5NqFBeplXI7sWSreL1eTfiusruHxHOix9S6R38ioyJEbLVzxPK4TH/KqiZqQpy7yShG%2BNEr5wIi8Yoycbzsgi9kKth86Si5ZYKO6VpFZ0i6NEMkmmRNtJ5OaxumYYu2oj%2B1VNjkAD3Bqymbn9wr5Rn28/PGZzCA/nSRHHqbUVztBjCOCJC6jVMvMkPprG/wUpwwuaO564DIiJhQX33MAbLK1aNHgc0cYmrMI03H5qSTXyt%2BPEqktYE/5KfKgau6fvygzm%2BC7qxSdyy2dUlbs%2BZz2y98IU2rCquda2Fzrgl2u/EEgx/5kCt29oK63kxUF1%2BK5eU8Zbkk6kI9idoWd4d3F50VH8O1cLPpScSVaYIEUVNvoadmuiHWxP3aXyrvcI98vcA5EqqF7%2BbZSrLPWMXgOXpuBI2u273ORfPysQkXgxA2zJV5NtcB%26p%3DX-Agent-DeviceId: 01000A41090080B6X-BM-CBT: 1721669596User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045X-Device-isOptin: falseAccept-language: en-GB, en, en-USX-Device-Touch: falseX-Device-ClientSession: A90CDEA8022E42BC84A54F4E900E8B59X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIHost: www.bing.comConnection: Keep-AliveCookie: SRCHUID=V=2&GUID=C4EAB6C130004333A34B5668AE4E4D10&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=en; MUID=4590362BB5CF472B95BBEDB3112D4B7B; MUIDB=4590362BB5CF472B95BBEDB3112D4B7B

Source: global traffic	DNS traffic detected: DNS query: uconn-my.sharepoint.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: identity.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauthimages.net
Source: global traffic	DNS traffic detected: DNS query: autologon.microsoftazuread-sso.com

Source: unknown

HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 4775Host: login.live.com

Source: chromecache_198.1.dr, chromecache_184.1.dr	String found in binary or memory: http://feross.org
Source: chromecache_199.1.dr, chromecache_162.1.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_199.1.dr, chromecache_162.1.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_198.1.dr, chromecache_172.1.dr, chromecache_199.1.dr, chromecache_164.1.dr, chromecache_202.1.dr, chromecache_162.1.dr, chromecache_157.1.dr, chromecache_178.1.dr, chromecache_184.1.dr, chromecache_160.1.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js
Source: chromecache_152.1.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_152.1.dr	String found in binary or memory: https://login.windows-ppe.net
Source: chromecache_150.1.dr	String found in binary or memory: https://res-1.cdn.office.net/bld/_layouts/15/16.0.25103.12006/1033/initstrings.js
Source: chromecache_150.1.dr	String found in binary or memory: https://res-1.cdn.office.net/bld/_layouts/15/16.0.25103.12006/blank.js
Source: chromecache_150.1.dr	String found in binary or memory: https://res-1.cdn.office.net/bld/_layouts/15/16.0.25103.12006/init.js
Source: chromecache_150.1.dr	String found in binary or memory: https://res-1.cdn.office.net/bld/_layouts/15/16.0.25103.12006/theming.js
Source: chromecache_150.1.dr	String found in binary or memory: https://res.cdn.office.net/teams-js/2.21.0/js/MicrosoftTeams.min.js

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49696
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49696 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746

Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.17:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.17:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.31.71:443 -> 192.168.2.17:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.23.209.133:443 -> 192.168.2.17:49803 version: TLS 1.2

Source: classification engine

Classification label: clean3.win@14/92@22/8

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://uconn-my.sharepoint.com/:o:/g/personal/lisa_frank_uconn_edu/EryHWVeqJnhDu2fh5Y44MT4BNS9VFRX04eNZiwiwvmi1JQ?e=5%3amqjzyy&at=9
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1924,i,2586806153096979946,14282725627711045495,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1924,i,2586806153096979946,14282725627711045495,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://uconn-my.sharepoint.com/:o:/g/personal/lisa_frank_uconn_edu/EryHWVeqJnhDu2fh5Y44MT4BNS9VFRX04eNZiwiwvmi1JQ?e=5%3amqjzyy&at=9	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
http://knockoutjs.com/	0%	URL Reputation	safe
https://login.windows-ppe.net	0%	URL Reputation	safe
https://login.microsoftonline.com	0%	URL Reputation	safe
http://www.opensource.org/licenses/mit-license.php)	0%	URL Reputation	safe
http://feross.org	0%	URL Reputation	safe
https://github.com/douglascrockford/JSON-js	0%	Avira URL Cloud	safe
https://aadcdn.msftauthimages.net/dbd5a2dd-8-rdvb7tk2-dqizgleza7igirczl4pbqrnmrs7u0uis/logintenantbranding/0/favicon?ts=638201101065629855	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_ixsmqakdnvme1h2u2lb1cq2.js	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pverticalsplittemplate_57bc5e33d941270831cb.js	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js	0%	Avira URL Cloud	safe
https://uconn-my.sharepoint.com/_forms/default.aspx?ReturnUrl=%2fpersonal%2flisa_frank_uconn_edu%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fpersonal%252Flisa%255Ffrank%255Fuconn%255Fedu&Source=cookie	0%	Avira URL Cloud	safe
https://uconn-my.sharepoint.com/ScriptResource.axd?d=bTMVwVBOQTEWXfMTeLPRauMAlGZqlxO6d24w9vRq_hFodF38zo2etBqBoUodT-tYm25MhloUihc-1Ve_WEURLUwehSrxj_ZVDaAtcdvGOVa3nTLiPG244WzuXTxsJ7AeU3UoPuKWYe8l4bslAFyMC4itMHMs0xqeoebVbeAWrL2M3Ue6OkkM4ErGNkc-hXoq0&t=74258c30	0%	Avira URL Cloud	safe
https://uconn-my.sharepoint.com/_layouts/15/1033/styles/error.css?rev=tF7fyfzbaQzNoASoSDlV4A%3D%3DTAG205	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_758d4d3367a37038a3b2.js	0%	Avira URL Cloud	safe
https://aadcdn.msftauthimages.net/dbd5a2dd-8-rdvb7tk2-dqizgleza7igirczl4pbqrnmrs7u0uis/logintenantbranding/0/bannerlogo?ts=638201105802239319	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js	0%	Avira URL Cloud	safe
https://uconn-my.sharepoint.com/_layouts/15/images/favicon.ico?rev=47	0%	Avira URL Cloud	safe
https://uconn-my.sharepoint.com/_layouts/15/1033/styles/corev15.css?rev=gzHVbYEq83HWY83fQnDKyQ%3D%3DTAG205	0%	Avira URL Cloud	safe
https://aadcdn.msftauthimages.net/dbd5a2dd-8-rdvb7tk2-dqizgleza7igirczl4pbqrnmrs7u0uis/logintenantbranding/0/illustration?ts=638201101075209950	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif	0%	Avira URL Cloud	safe
https://uconn-my.sharepoint.com/personal/lisa_frank_uconn_edu/_layouts/15/Authenticate.aspx?Source=%2Fpersonal%2Flisa%5Ffrank%5Fuconn%5Fedu	0%	Avira URL Cloud	safe
https://uconn-my.sharepoint.com/WebResource.axd?d=4NuAIey-1eXTfkmwTY3x91AumVU41ZLXV-ngbxqay8EH9oB-ZoIb1xeI6WPlgpVrLZIQx9e3BaGa57iiGEphJoZDFLyxRnIQenOP4SDscZ01&t=638533172441064469	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_Q3A1xKaK6oPrhbQSUwvJBQ2.js	0%	Avira URL Cloud	safe
https://uconn-my.sharepoint.com/ScriptResource.axd?d=5obXSffBrxKutWSM22_pc7pcwCPAoEDMMxba-3OLRteC_0xzaX0A_FPG2nWf2LmXV0_rWDQ8FIN9EmE74nFkz7YodIXt4M965BjNYp7d6d0MJLH8joaq6AEYE7UVUcCvvhhr6XMWP6xqcLac9mpAJSUTlNa0xHCRubif0OQeM8lfF0mXakbsEBNu2W2vTd7g0&t=74258c30	0%	Avira URL Cloud	safe
https://aadcdn.msftauthimages.net/dbd5a2dd-8-rdvb7tk2-dqizgleza7igirczl4pbqrnmrs7u0uis/logintenantbranding/0/customcss?ts=638201101081188424	0%	Avira URL Cloud	safe
https://uconn-my.sharepoint.com/personal/lisa_frank_uconn_edu	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
s-part-0014.t-0009.t-msedge.net	13.107.246.42	true	false	unknown
dual-spo-0005.spo-msedge.net	13.107.136.10	true	false	unknown
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	unknown
www.google.com	172.217.18.100	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
autologon.microsoftazuread-sso.com	20.190.159.2	true	false	unknown
uconn-my.sharepoint.com	unknown	unknown	false	unknown
identity.nel.measure.office.net	unknown	unknown	false	unknown
aadcdn.msftauth.net	unknown	unknown	false	unknown
login.microsoftonline.com	unknown	unknown	false	unknown
aadcdn.msftauthimages.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_ixsmqakdnvme1h2u2lb1cq2.js	false	Avira URL Cloud: safe	unknown
https://login.microsoftonline.com/17f1a87e-2a25-4eaa-b9df-9d439034b080/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=6B44686139FB2C2E7FCFF0222F8BF48AA3799D5D159F685C%2D55AF5ECA5938483B569883E8EDF79F84EA18B0A54A71D1F979715BE25D785466&redirect%5Furi=https%3A%2F%2Fuconn%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=d9da3ea1%2D2035%2D6000%2D1cba%2D0d4b28d323a4&sso_reload=true	false		unknown
https://aadcdn.msftauthimages.net/dbd5a2dd-8-rdvb7tk2-dqizgleza7igirczl4pbqrnmrs7u0uis/logintenantbranding/0/bannerlogo?ts=638201105802239319	false	Avira URL Cloud: safe	unknown
https://uconn-my.sharepoint.com/ScriptResource.axd?d=bTMVwVBOQTEWXfMTeLPRauMAlGZqlxO6d24w9vRq_hFodF38zo2etBqBoUodT-tYm25MhloUihc-1Ve_WEURLUwehSrxj_ZVDaAtcdvGOVa3nTLiPG244WzuXTxsJ7AeU3UoPuKWYe8l4bslAFyMC4itMHMs0xqeoebVbeAWrL2M3Ue6OkkM4ErGNkc-hXoq0&t=74258c30	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauthimages.net/dbd5a2dd-8-rdvb7tk2-dqizgleza7igirczl4pbqrnmrs7u0uis/logintenantbranding/0/favicon?ts=638201101065629855	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pverticalsplittemplate_57bc5e33d941270831cb.js	false	Avira URL Cloud: safe	unknown
https://uconn-my.sharepoint.com/:o:/g/personal/lisa_frank_uconn_edu/EryHWVeqJnhDu2fh5Y44MT4BNS9VFRX04eNZiwiwvmi1JQ?e=5%3amqjzyy&at=9	false		unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js	false	Avira URL Cloud: safe	unknown
https://uconn-my.sharepoint.com/_layouts/15/1033/styles/error.css?rev=tF7fyfzbaQzNoASoSDlV4A%3D%3DTAG205	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_758d4d3367a37038a3b2.js	false	Avira URL Cloud: safe	unknown
https://uconn-my.sharepoint.com/_forms/default.aspx?ReturnUrl=%2fpersonal%2flisa_frank_uconn_edu%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fpersonal%252Flisa%255Ffrank%255Fuconn%255Fedu&Source=cookie	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js	false	Avira URL Cloud: safe	unknown
https://uconn-my.sharepoint.com/_layouts/15/images/favicon.ico?rev=47	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauthimages.net/dbd5a2dd-8-rdvb7tk2-dqizgleza7igirczl4pbqrnmrs7u0uis/logintenantbranding/0/illustration?ts=638201101075209950	false	Avira URL Cloud: safe	unknown
https://uconn-my.sharepoint.com/_layouts/15/1033/styles/corev15.css?rev=gzHVbYEq83HWY83fQnDKyQ%3D%3DTAG205	false	Avira URL Cloud: safe	unknown
https://login.microsoftonline.com/17f1a87e-2a25-4eaa-b9df-9d439034b080/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=6B44686139FB2C2E7FCFF0222F8BF48AA3799D5D159F685C%2D55AF5ECA5938483B569883E8EDF79F84EA18B0A54A71D1F979715BE25D785466&redirect%5Furi=https%3A%2F%2Fuconn%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=d9da3ea1%2D2035%2D6000%2D1cba%2D0d4b28d323a4	false		unknown
https://uconn-my.sharepoint.com/personal/lisa_frank_uconn_edu/_layouts/15/Authenticate.aspx?Source=%2Fpersonal%2Flisa%5Ffrank%5Fuconn%5Fedu	false	Avira URL Cloud: safe	unknown
https://uconn-my.sharepoint.com/WebResource.axd?d=4NuAIey-1eXTfkmwTY3x91AumVU41ZLXV-ngbxqay8EH9oB-ZoIb1xeI6WPlgpVrLZIQx9e3BaGa57iiGEphJoZDFLyxRnIQenOP4SDscZ01&t=638533172441064469	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauthimages.net/dbd5a2dd-8-rdvb7tk2-dqizgleza7igirczl4pbqrnmrs7u0uis/logintenantbranding/0/customcss?ts=638201101081188424	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_Q3A1xKaK6oPrhbQSUwvJBQ2.js	false	Avira URL Cloud: safe	unknown
https://uconn-my.sharepoint.com/ScriptResource.axd?d=5obXSffBrxKutWSM22_pc7pcwCPAoEDMMxba-3OLRteC_0xzaX0A_FPG2nWf2LmXV0_rWDQ8FIN9EmE74nFkz7YodIXt4M965BjNYp7d6d0MJLH8joaq6AEYE7UVUcCvvhhr6XMWP6xqcLac9mpAJSUTlNa0xHCRubif0OQeM8lfF0mXakbsEBNu2W2vTd7g0&t=74258c30	false	Avira URL Cloud: safe	unknown
https://uconn-my.sharepoint.com/personal/lisa_frank_uconn_edu	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://knockoutjs.com/	chromecache_199.1.dr, chromecache_162.1.dr	false	URL Reputation: safe	unknown
https://github.com/douglascrockford/JSON-js	chromecache_198.1.dr, chromecache_172.1.dr, chromecache_199.1.dr, chromecache_164.1.dr, chromecache_202.1.dr, chromecache_162.1.dr, chromecache_157.1.dr, chromecache_178.1.dr, chromecache_184.1.dr, chromecache_160.1.dr	false	Avira URL Cloud: safe	unknown
https://login.windows-ppe.net	chromecache_152.1.dr	false	URL Reputation: safe	unknown
https://login.microsoftonline.com	chromecache_152.1.dr	false	URL Reputation: safe	unknown
http://www.opensource.org/licenses/mit-license.php)	chromecache_199.1.dr, chromecache_162.1.dr	false	URL Reputation: safe	unknown
http://feross.org	chromecache_198.1.dr, chromecache_184.1.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.42	s-part-0014.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.136.10	dual-spo-0005.spo-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.60	s-part-0032.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
40.126.31.71	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
152.199.21.175	sni1gl.wpc.omegacdn.net	United States	15133	EDGECASTUS	false
172.217.18.100	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.17

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1478568
Start date and time:	2024-07-22 19:31:55 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 2m 33s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://uconn-my.sharepoint.com/:o:/g/personal/lisa_frank_uconn_edu/EryHWVeqJnhDu2fh5Y44MT4BNS9VFRX04eNZiwiwvmi1JQ?e=5%3amqjzyy&at=9
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean3.win@14/92@22/8
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, svchost.exe, TextInputHost.exe
Excluded IPs from analysis (whitelisted): 216.58.206.78, 108.177.15.84, 216.58.206.35, 34.104.35.123, 2.23.209.46, 2.23.209.11, 2.23.209.42, 2.23.209.37, 192.229.221.95, 20.190.159.64, 20.190.159.75, 40.126.31.67, 20.190.159.0, 20.190.159.2, 40.126.31.69, 20.190.159.68, 20.190.159.73, 95.101.54.121, 95.101.54.113, 142.250.185.138, 216.58.206.42, 172.217.16.138, 142.250.185.202, 142.250.186.42, 216.58.212.138, 142.250.185.234, 142.250.184.202, 172.217.18.106, 142.250.185.74, 142.250.186.74, 142.250.74.202, 142.250.185.170, 216.58.206.74, 142.250.185.106, 142.250.181.234, 20.42.73.25
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, e40491.dscd.akamaiedge.net, clientservices.googleapis.com, res-1.cdn.office.net, browser.events.data.trafficmanager.net, ak.privatelink.msidentity.com, a1894.dscb.akamai.net, clients2.google.com, ocsp.digicert.com, login.live.com, onedscolprdeus06.eastus.cloudapp.azure.com, login.mso.msidentity.com, res-1.cdn.office.net-c.edgekey.net.globalredir.akadns.net, www.bing.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, aadcdnoriginwus2.azureedge.net, aadcdn-msft.azureedge.net, www.tm.ak.prd.aadg.akadns.net, aadcdn-msft.afd.azureedge.net, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, browser.events.data.microsoft.com, edgedl.me.gvt1.com, nel.measure.office.net.edgesuite.net, evoke-windowsservices-tas.msedge.net, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com, res-1.cdn.office.net-c.edgekey.net, 193584-ipv4v6w.farm.dprodmgd105.sharepointonline.com.akadns.ne
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://uconn-my.sharepoint.com/:o:/g/personal/lisa_frank_uconn_edu/EryHWVeqJnhDu2fh5Y44MT4BNS9VFRX04eNZiwiwvmi1JQ?e=5%3amqjzyy&at=9

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Jul 22 16:32:28 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.993829502147451
Encrypted:	false
SSDEEP:	48:89ld5Tm7z6JH1idAKZdA1JehwiZUklqehiy+3:89REKpy
MD5:	0A033BED70805FFF3985421F521016BB
SHA1:	C376F66FBF780FA89B855C5F37E3C75EF9C1EF56
SHA-256:	1E6C3FE801F8E4EE34787BE27CFE9485E0EBF28BF8FA7872D820E43C14BF462D
SHA-512:	3E34A75AB8BFFC4207B4E087C4AF8C374FDEA970BF51D292A5356793CF0A28EADC8210355641F8940A78BB334667FC14CBB71390760792E8325A7377B2FA32D0
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....<W..].......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.X......M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.X.............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.X.............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........o.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 22, 2024 19:32:26.255507946 CEST	59519	53	192.168.2.17	1.1.1.1
Jul 22, 2024 19:32:26.255662918 CEST	61063	53	192.168.2.17	1.1.1.1
Jul 22, 2024 19:32:26.771573067 CEST	53	57890	1.1.1.1	192.168.2.17
Jul 22, 2024 19:32:26.772545099 CEST	53	60961	1.1.1.1	192.168.2.17
Jul 22, 2024 19:32:27.841361046 CEST	53	60350	1.1.1.1	192.168.2.17
Jul 22, 2024 19:32:28.751389980 CEST	62908	53	192.168.2.17	1.1.1.1
Jul 22, 2024 19:32:28.751539946 CEST	54193	53	192.168.2.17	1.1.1.1
Jul 22, 2024 19:32:30.404638052 CEST	53158	53	192.168.2.17	1.1.1.1
Jul 22, 2024 19:32:30.404778957 CEST	52090	53	192.168.2.17	1.1.1.1
Jul 22, 2024 19:32:30.413203001 CEST	53	52090	1.1.1.1	192.168.2.17
Jul 22, 2024 19:32:30.419281006 CEST	53	53158	1.1.1.1	192.168.2.17
Jul 22, 2024 19:32:44.829118013 CEST	53	54080	1.1.1.1	192.168.2.17
Jul 22, 2024 19:32:45.426496983 CEST	57060	53	192.168.2.17	1.1.1.1
Jul 22, 2024 19:32:45.426698923 CEST	59868	53	192.168.2.17	1.1.1.1
Jul 22, 2024 19:32:47.992429018 CEST	53784	53	192.168.2.17	1.1.1.1
Jul 22, 2024 19:32:47.992578983 CEST	60130	53	192.168.2.17	1.1.1.1
Jul 22, 2024 19:32:49.019742012 CEST	64926	53	192.168.2.17	1.1.1.1
Jul 22, 2024 19:32:49.019882917 CEST	50346	53	192.168.2.17	1.1.1.1
Jul 22, 2024 19:32:49.207045078 CEST	56374	53	192.168.2.17	1.1.1.1
Jul 22, 2024 19:32:49.207199097 CEST	51812	53	192.168.2.17	1.1.1.1
Jul 22, 2024 19:32:49.215595961 CEST	53	56374	1.1.1.1	192.168.2.17
Jul 22, 2024 19:32:49.215708971 CEST	53	51812	1.1.1.1	192.168.2.17
Jul 22, 2024 19:32:50.578668118 CEST	63945	53	192.168.2.17	1.1.1.1
Jul 22, 2024 19:32:50.578823090 CEST	56090	53	192.168.2.17	1.1.1.1
Jul 22, 2024 19:32:50.586333990 CEST	53	63945	1.1.1.1	192.168.2.17
Jul 22, 2024 19:32:50.586347103 CEST	53	56090	1.1.1.1	192.168.2.17
Jul 22, 2024 19:32:52.282118082 CEST	51885	53	192.168.2.17	1.1.1.1
Jul 22, 2024 19:32:52.282382965 CEST	56843	53	192.168.2.17	1.1.1.1
Jul 22, 2024 19:32:53.155332088 CEST	56282	53	192.168.2.17	1.1.1.1
Jul 22, 2024 19:32:53.155491114 CEST	64881	53	192.168.2.17	1.1.1.1
Jul 22, 2024 19:32:56.473504066 CEST	53523	53	192.168.2.17	1.1.1.1
Jul 22, 2024 19:32:56.473797083 CEST	61324	53	192.168.2.17	1.1.1.1
Jul 22, 2024 19:32:56.483587027 CEST	53	61324	1.1.1.1	192.168.2.17
Jul 22, 2024 19:32:56.484134912 CEST	53	53523	1.1.1.1	192.168.2.17
Jul 22, 2024 19:32:59.045867920 CEST	53	57596	1.1.1.1	192.168.2.17

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jul 22, 2024 19:32:26.772563934 CEST	1.1.1.1	192.168.2.17	0xcc5e	No error (0)	uconn-my.sharepoint.com	uconn.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 22, 2024 19:32:26.772563934 CEST	1.1.1.1	192.168.2.17	0xcc5e	No error (0)	uconn.sharepoint.com	5436-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 22, 2024 19:32:26.772563934 CEST	1.1.1.1	192.168.2.17	0xcc5e	No error (0)	5436-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com	193584-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 22, 2024 19:32:26.772563934 CEST	1.1.1.1	192.168.2.17	0xcc5e	No error (0)	193584-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com	193584-ipv4v6w.farm.dprodmgd105.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 22, 2024 19:32:26.772563934 CEST	1.1.1.1	192.168.2.17	0xcc5e	No error (0)	193584-ipv4v6.farm.dprodmgd105.aa-rt.sharepoint.com.dual-spo-0005.spo-msedge.net	dual-spo-0005.spo-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 22, 2024 19:32:26.772563934 CEST	1.1.1.1	192.168.2.17	0xcc5e	No error (0)	dual-spo-0005.spo-msedge.net		13.107.136.10	A (IP address)	IN (0x0001)	false
Jul 22, 2024 19:32:26.772563934 CEST	1.1.1.1	192.168.2.17	0xcc5e	No error (0)	dual-spo-0005.spo-msedge.net		13.107.138.10	A (IP address)	IN (0x0001)	false
Jul 22, 2024 19:32:26.772572994 CEST	1.1.1.1	192.168.2.17	0xce99	No error (0)	uconn-my.sharepoint.com	uconn.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 22, 2024 19:32:26.772572994 CEST	1.1.1.1	192.168.2.17	0xce99	No error (0)	uconn.sharepoint.com	5436-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 22, 2024 19:32:26.772572994 CEST	1.1.1.1	192.168.2.17	0xce99	No error (0)	5436-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com	193584-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 22, 2024 19:32:26.772572994 CEST	1.1.1.1	192.168.2.17	0xce99	No error (0)	193584-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com	193584-ipv4v6w.farm.dprodmgd105.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 22, 2024 19:32:28.792248011 CEST	1.1.1.1	192.168.2.17	0x2f85	No error (0)	uconn-my.sharepoint.com	uconn.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 22, 2024 19:32:28.792248011 CEST	1.1.1.1	192.168.2.17	0x2f85	No error (0)	uconn.sharepoint.com	5436-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 22, 2024 19:32:28.792248011 CEST	1.1.1.1	192.168.2.17	0x2f85	No error (0)	5436-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com	193584-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 22, 2024 19:32:28.792248011 CEST	1.1.1.1	192.168.2.17	0x2f85	No error (0)	193584-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com	193584-ipv4v6w.farm.dprodmgd105.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 22, 2024 19:32:28.792248011 CEST	1.1.1.1	192.168.2.17	0x2f85	No error (0)	193584-ipv4v6.farm.dprodmgd105.aa-rt.sharepoint.com.dual-spo-0005.spo-msedge.net	dual-spo-0005.spo-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 22, 2024 19:32:28.792248011 CEST	1.1.1.1	192.168.2.17	0x2f85	No error (0)	dual-spo-0005.spo-msedge.net		13.107.136.10	A (IP address)	IN (0x0001)	false
Jul 22, 2024 19:32:28.792248011 CEST	1.1.1.1	192.168.2.17	0x2f85	No error (0)	dual-spo-0005.spo-msedge.net		13.107.138.10	A (IP address)	IN (0x0001)	false
Jul 22, 2024 19:32:28.804266930 CEST	1.1.1.1	192.168.2.17	0xfa6a	No error (0)	uconn-my.sharepoint.com	uconn.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 22, 2024 19:32:28.804266930 CEST	1.1.1.1	192.168.2.17	0xfa6a	No error (0)	uconn.sharepoint.com	5436-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 22, 2024 19:32:28.804266930 CEST	1.1.1.1	192.168.2.17	0xfa6a	No error (0)	5436-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com	193584-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 22, 2024 19:32:28.804266930 CEST	1.1.1.1	192.168.2.17	0xfa6a	No error (0)	193584-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com	193584-ipv4v6w.farm.dprodmgd105.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 22, 2024 19:32:30.413203001 CEST	1.1.1.1	192.168.2.17	0x96cc	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 22, 2024 19:32:30.419281006 CEST	1.1.1.1	192.168.2.17	0xfa6	No error (0)	www.google.com		172.217.18.100	A (IP address)	IN (0x0001)	false
Jul 22, 2024 19:32:45.434971094 CEST	1.1.1.1	192.168.2.17	0x13b1	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 22, 2024 19:32:45.435132980 CEST	1.1.1.1	192.168.2.17	0x3c58	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 22, 2024 19:32:46.785034895 CEST	1.1.1.1	192.168.2.17	0xfd69	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 22, 2024 19:32:46.785034895 CEST	1.1.1.1	192.168.2.17	0xfd69	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Jul 22, 2024 19:32:47.965823889 CEST	1.1.1.1	192.168.2.17	0xa0f6	No error (0)	shed.dual-low.s-part-0014.t-0009.t-msedge.net	s-part-0014.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 22, 2024 19:32:47.965823889 CEST	1.1.1.1	192.168.2.17	0xa0f6	No error (0)	s-part-0014.t-0009.t-msedge.net		13.107.246.42	A (IP address)	IN (0x0001)	false
Jul 22, 2024 19:32:48.059242964 CEST	1.1.1.1	192.168.2.17	0x32fe	No error (0)	uconn-my.sharepoint.com	uconn.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 22, 2024 19:32:48.059242964 CEST	1.1.1.1	192.168.2.17	0x32fe	No error (0)	uconn.sharepoint.com	5436-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 22, 2024 19:32:48.059242964 CEST	1.1.1.1	192.168.2.17	0x32fe	No error (0)	5436-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com	193584-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 22, 2024 19:32:48.059242964 CEST	1.1.1.1	192.168.2.17	0x32fe	No error (0)	193584-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com	193584-ipv4v6w.farm.dprodmgd105.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 22, 2024 19:32:48.059242964 CEST	1.1.1.1	192.168.2.17	0x32fe	No error (0)	193584-ipv4v6.farm.dprodmgd105.aa-rt.sharepoint.com.dual-spo-0005.spo-msedge.net	dual-spo-0005.spo-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 22, 2024 19:32:48.059242964 CEST	1.1.1.1	192.168.2.17	0x32fe	No error (0)	dual-spo-0005.spo-msedge.net		13.107.136.10	A (IP address)	IN (0x0001)	false
Jul 22, 2024 19:32:48.059242964 CEST	1.1.1.1	192.168.2.17	0x32fe	No error (0)	dual-spo-0005.spo-msedge.net		13.107.138.10	A (IP address)	IN (0x0001)	false
Jul 22, 2024 19:32:48.061616898 CEST	1.1.1.1	192.168.2.17	0xa776	No error (0)	uconn-my.sharepoint.com	uconn.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 22, 2024 19:32:48.061616898 CEST	1.1.1.1	192.168.2.17	0xa776	No error (0)	uconn.sharepoint.com	5436-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 22, 2024 19:32:48.061616898 CEST	1.1.1.1	192.168.2.17	0xa776	No error (0)	5436-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com	193584-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 22, 2024 19:32:48.061616898 CEST	1.1.1.1	192.168.2.17	0xa776	No error (0)	193584-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com	193584-ipv4v6w.farm.dprodmgd105.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 22, 2024 19:32:49.027055025 CEST	1.1.1.1	192.168.2.17	0x5e5	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 22, 2024 19:32:49.029377937 CEST	1.1.1.1	192.168.2.17	0xabb7	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 22, 2024 19:32:49.215595961 CEST	1.1.1.1	192.168.2.17	0x4891	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 22, 2024 19:32:49.215595961 CEST	1.1.1.1	192.168.2.17	0x4891	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 22, 2024 19:32:49.215595961 CEST	1.1.1.1	192.168.2.17	0x4891	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Jul 22, 2024 19:32:49.215708971 CEST	1.1.1.1	192.168.2.17	0xa4a0	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 22, 2024 19:32:49.215708971 CEST	1.1.1.1	192.168.2.17	0xa4a0	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 22, 2024 19:32:50.586333990 CEST	1.1.1.1	192.168.2.17	0x5d01	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 22, 2024 19:32:50.586333990 CEST	1.1.1.1	192.168.2.17	0x5d01	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 22, 2024 19:32:50.586333990 CEST	1.1.1.1	192.168.2.17	0x5d01	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Jul 22, 2024 19:32:50.586347103 CEST	1.1.1.1	192.168.2.17	0x53b9	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 22, 2024 19:32:50.586347103 CEST	1.1.1.1	192.168.2.17	0x53b9	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 22, 2024 19:32:52.291748047 CEST	1.1.1.1	192.168.2.17	0x839f	No error (0)	aadcdn.msftauthimages.net	aadcdn-msft.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 22, 2024 19:32:52.291748047 CEST	1.1.1.1	192.168.2.17	0x839f	No error (0)	shed.dual-low.s-part-0014.t-0009.t-msedge.net	s-part-0014.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 22, 2024 19:32:52.291748047 CEST	1.1.1.1	192.168.2.17	0x839f	No error (0)	s-part-0014.t-0009.t-msedge.net		13.107.246.42	A (IP address)	IN (0x0001)	false
Jul 22, 2024 19:32:52.293064117 CEST	1.1.1.1	192.168.2.17	0xda2	No error (0)	aadcdn.msftauthimages.net	aadcdn-msft.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 22, 2024 19:32:53.163908958 CEST	1.1.1.1	192.168.2.17	0xe867	No error (0)	aadcdn.msftauthimages.net	aadcdn-msft.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 22, 2024 19:32:53.163908958 CEST	1.1.1.1	192.168.2.17	0xe867	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 22, 2024 19:32:53.163908958 CEST	1.1.1.1	192.168.2.17	0xe867	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Jul 22, 2024 19:32:53.164155006 CEST	1.1.1.1	192.168.2.17	0xd2a1	No error (0)	aadcdn.msftauthimages.net	aadcdn-msft.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 22, 2024 19:32:56.484134912 CEST	1.1.1.1	192.168.2.17	0x3ba8	No error (0)	autologon.microsoftazuread-sso.com		20.190.159.2	A (IP address)	IN (0x0001)	false
Jul 22, 2024 19:32:56.484134912 CEST	1.1.1.1	192.168.2.17	0x3ba8	No error (0)	autologon.microsoftazuread-sso.com		40.126.31.69	A (IP address)	IN (0x0001)	false
Jul 22, 2024 19:32:56.484134912 CEST	1.1.1.1	192.168.2.17	0x3ba8	No error (0)	autologon.microsoftazuread-sso.com		20.190.159.0	A (IP address)	IN (0x0001)	false
Jul 22, 2024 19:32:56.484134912 CEST	1.1.1.1	192.168.2.17	0x3ba8	No error (0)	autologon.microsoftazuread-sso.com		20.190.159.64	A (IP address)	IN (0x0001)	false
Jul 22, 2024 19:32:56.484134912 CEST	1.1.1.1	192.168.2.17	0x3ba8	No error (0)	autologon.microsoftazuread-sso.com		20.190.159.71	A (IP address)	IN (0x0001)	false
Jul 22, 2024 19:32:56.484134912 CEST	1.1.1.1	192.168.2.17	0x3ba8	No error (0)	autologon.microsoftazuread-sso.com		20.190.159.75	A (IP address)	IN (0x0001)	false
Jul 22, 2024 19:32:56.484134912 CEST	1.1.1.1	192.168.2.17	0x3ba8	No error (0)	autologon.microsoftazuread-sso.com		20.190.159.4	A (IP address)	IN (0x0001)	false
Jul 22, 2024 19:32:56.484134912 CEST	1.1.1.1	192.168.2.17	0x3ba8	No error (0)	autologon.microsoftazuread-sso.com		40.126.31.67	A (IP address)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-07-22 17:32:27 UTC	766	OUT	GET /:o:/g/personal/lisa_frank_uconn_edu/EryHWVeqJnhDu2fh5Y44MT4BNS9VFRX04eNZiwiwvmi1JQ?e=5%3amqjzyy&at=9 HTTP/1.1 Host: uconn-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-22 17:32:27 UTC	1490	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 234575 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,2102272,40,204,424456,0,1279840,38 X-SharePointHealthScore: 1 Referrer-Policy: no-referrer, strict-origin-when-cross-origin SharePointError: 0 X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: d4da3ea1-60db-6000-05d1-59fee998434c request-id: d4da3ea1-60db-6000-05d1-59fee998434c MS-CV: oT7a1NtgAGAF0Vn+6ZhDTA.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=17f1a87e-2a25-4eaa-b9df-9d439034b080&destinationEndpoint=Edge-Prod-EWR31r5b&frontEnd=AFD&RemoteIP=8.46.123.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 SPRequestDuration: 122 SPIisLatency: 4 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25103 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 9A9DD826DD9F4868AC59A183F1B831D5 Ref B: EWR311000103023 Ref C: 2024-07-22T17:32:27Z Date: Mon, 22 Jul 2024 17:32:26 GMT Connection: close
2024-07-22 17:32:27 UTC	1285	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 0d 0a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3a 6f 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 6d 69 63 72 6f 73 6f 66 74 2d 63 6f 6d 3a 6f 66 66 69 63 65 3a 6f 66 66 69 63 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 47 45 4e 45 52 41 54 4f 52 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 69 63 72 6f 73 6f 66 74 20 53 68 61 72 65 50 6f 69 6e 74 22 20 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN""http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns:o="urn:schemas-microsoft-com:office:office" lang="en-us" dir="ltr"><head><meta name="GENERATOR" content="Microsoft SharePoint"
2024-07-22 17:32:27 UTC	8192	IN	Data Raw: 53 50 4f 66 66 53 77 69 74 63 68 65 73 3d 7b 22 35 43 30 41 38 37 42 34 2d 46 36 33 33 2d 34 38 37 34 2d 41 33 43 30 2d 46 38 36 42 33 42 38 37 42 33 34 42 22 3a 31 2c 22 31 46 35 30 41 42 43 43 2d 31 42 43 46 2d 34 31 37 44 2d 41 33 30 41 2d 43 34 46 43 37 37 30 42 34 41 42 32 22 3a 31 2c 22 37 46 46 38 42 32 44 41 2d 35 38 32 34 2d 34 44 43 44 2d 41 39 46 36 2d 44 41 45 30 41 34 33 39 32 37 32 46 22 3a 31 2c 22 43 32 38 34 35 36 34 31 2d 35 35 43 45 2d 34 42 42 38 2d 39 44 35 36 2d 33 41 41 34 41 36 32 44 46 34 35 43 22 3a 31 2c 22 41 37 44 31 35 41 46 42 2d 42 43 43 35 2d 34 38 42 44 2d 42 38 42 36 2d 41 39 32 36 41 34 42 45 31 37 31 41 22 3a 31 2c 22 30 31 46 39 45 31 36 41 2d 35 38 34 45 2d 34 36 33 34 2d 39 45 46 46 2d 32 43 32 31 42 44 43 33 45 38 Data Ascii: SPOffSwitches={"5C0A87B4-F633-4874-A3C0-F86B3B87B34B":1,"1F50ABCC-1BCF-417D-A30A-C4FC770B4AB2":1,"7FF8B2DA-5824-4DCD-A9F6-DAE0A439272F":1,"C2845641-55CE-4BB8-9D56-3AA4A62DF45C":1,"A7D15AFB-BCC5-48BD-B8B6-A926A4BE171A":1,"01F9E16A-584E-4634-9EFF-2C21BDC3E8
2024-07-22 17:32:27 UTC	5539	IN	Data Raw: 30 2d 41 41 32 36 2d 43 33 37 39 44 34 46 39 34 43 42 45 22 3a 31 2c 22 45 30 32 45 39 34 41 36 2d 44 45 43 33 2d 34 37 39 41 2d 41 33 44 31 2d 30 31 32 38 44 45 42 38 33 32 35 43 22 3a 31 2c 22 32 37 33 38 35 35 35 38 2d 33 31 45 43 2d 34 38 30 41 2d 39 43 33 39 2d 46 45 45 46 41 34 38 44 46 39 31 46 22 3a 31 2c 22 34 37 35 30 33 41 39 38 2d 46 42 30 36 2d 34 34 30 41 2d 42 39 32 31 2d 31 34 35 37 41 32 32 42 31 37 46 39 22 3a 31 2c 22 32 38 43 42 39 30 36 34 2d 30 33 33 33 2d 34 33 32 30 2d 41 30 31 33 2d 41 30 42 43 45 43 36 45 36 45 45 35 22 3a 31 2c 22 41 37 36 44 30 34 42 41 2d 35 46 35 44 2d 34 31 32 35 2d 39 30 36 43 2d 34 44 46 37 41 45 35 37 30 38 30 35 22 3a 31 2c 22 32 44 43 44 31 33 30 32 2d 43 30 44 37 2d 34 43 30 35 2d 38 41 35 36 2d 30 32 Data Ascii: 0-AA26-C379D4F94CBE":1,"E02E94A6-DEC3-479A-A3D1-0128DEB8325C":1,"27385558-31EC-480A-9C39-FEEFA48DF91F":1,"47503A98-FB06-440A-B921-1457A22B17F9":1,"28CB9064-0333-4320-A013-A0BCEC6E6EE5":1,"A76D04BA-5F5D-4125-906C-4DF7AE570805":1,"2DCD1302-C0D7-4C05-8A56-02
2024-07-22 17:32:27 UTC	8192	IN	Data Raw: 44 46 2d 35 34 31 38 39 44 39 30 30 30 42 31 22 3a 31 2c 22 30 34 38 37 37 35 33 32 2d 44 37 34 36 2d 34 44 37 44 2d 39 44 35 35 2d 43 44 33 30 43 46 37 43 41 33 37 46 22 3a 31 2c 22 42 32 46 34 43 31 42 45 2d 39 45 45 30 2d 34 36 36 32 2d 38 30 37 32 2d 43 42 39 34 39 32 38 44 38 37 44 38 22 3a 31 2c 22 39 35 44 41 31 45 42 38 2d 45 46 42 30 2d 34 33 41 43 2d 42 42 38 36 2d 42 41 37 30 35 35 37 33 46 31 36 42 22 3a 31 2c 22 33 44 43 32 43 45 35 32 2d 34 37 34 46 2d 34 34 45 46 2d 39 34 41 34 2d 43 38 41 31 44 45 30 43 43 43 37 35 22 3a 31 2c 22 35 43 44 36 38 37 31 36 2d 42 39 42 46 2d 34 34 39 39 2d 42 46 45 43 2d 38 46 45 39 31 39 34 43 31 39 32 33 22 3a 31 2c 22 36 36 35 44 34 37 39 35 2d 31 34 32 36 2d 34 38 36 41 2d 39 34 37 43 2d 36 43 31 37 41 39 Data Ascii: DF-54189D9000B1":1,"04877532-D746-4D7D-9D55-CD30CF7CA37F":1,"B2F4C1BE-9EE0-4662-8072-CB94928D87D8":1,"95DA1EB8-EFB0-43AC-BB86-BA705573F16B":1,"3DC2CE52-474F-44EF-94A4-C8A1DE0CCC75":1,"5CD68716-B9BF-4499-BFEC-8FE9194C1923":1,"665D4795-1426-486A-947C-6C17A9
2024-07-22 17:32:27 UTC	8192	IN	Data Raw: 2d 34 34 39 37 2d 41 39 34 39 2d 39 42 45 34 33 36 38 36 41 43 41 34 22 3a 31 2c 22 31 44 32 35 32 38 36 44 2d 32 30 43 41 2d 34 36 35 33 2d 41 34 32 35 2d 44 36 30 38 44 44 42 37 33 39 30 41 22 3a 31 2c 22 32 32 36 38 45 31 36 34 2d 31 31 45 31 2d 34 41 34 42 2d 39 41 38 32 2d 46 41 46 38 33 31 36 44 34 44 45 39 22 3a 31 2c 22 35 43 44 32 30 43 46 31 2d 35 42 43 35 2d 37 33 37 30 2d 42 38 33 30 2d 45 31 44 39 34 44 31 34 32 42 35 35 22 3a 31 2c 22 33 45 36 33 37 34 37 37 2d 36 46 46 37 2d 34 45 39 41 2d 38 30 33 33 2d 37 38 36 37 41 44 38 34 43 44 32 46 22 3a 31 2c 22 33 42 35 41 42 30 31 39 2d 46 43 30 32 2d 34 39 45 30 2d 38 30 32 46 2d 44 30 35 35 33 42 36 43 44 44 31 31 22 3a 31 2c 22 41 36 36 33 36 30 35 30 2d 41 36 36 37 2d 34 36 38 37 2d 41 32 37 Data Ascii: -4497-A949-9BE43686ACA4":1,"1D25286D-20CA-4653-A425-D608DDB7390A":1,"2268E164-11E1-4A4B-9A82-FAF8316D4DE9":1,"5CD20CF1-5BC5-7370-B830-E1D94D142B55":1,"3E637477-6FF7-4E9A-8033-7867AD84CD2F":1,"3B5AB019-FC02-49E0-802F-D0553B6CDD11":1,"A6636050-A667-4687-A27
2024-07-22 17:32:27 UTC	8192	IN	Data Raw: 33 44 46 2d 30 36 35 38 2d 34 33 39 41 2d 41 32 38 31 2d 33 31 44 34 43 34 44 43 43 32 32 43 22 3a 31 2c 22 45 45 33 42 30 44 39 36 2d 32 31 33 44 2d 34 46 46 44 2d 42 33 38 31 2d 43 34 30 38 33 44 38 37 35 36 46 42 22 3a 31 2c 22 46 39 43 39 39 35 37 36 2d 43 38 39 37 2d 34 41 39 34 2d 38 44 30 45 2d 44 33 45 36 36 31 37 44 35 35 41 31 22 3a 31 2c 22 33 42 41 33 34 37 30 30 2d 43 37 44 36 2d 34 42 43 36 2d 41 37 44 33 2d 41 43 46 44 42 33 45 33 30 39 41 38 22 3a 31 2c 22 38 43 35 38 45 32 38 31 2d 35 45 37 31 2d 34 37 30 44 2d 38 34 35 35 2d 35 39 41 33 33 32 42 30 41 31 30 38 22 3a 31 2c 22 39 34 44 41 30 43 36 33 2d 38 31 30 43 2d 34 30 35 33 2d 42 43 41 36 2d 32 32 42 43 31 44 35 33 44 33 39 37 22 3a 31 2c 22 43 34 44 34 44 37 32 42 2d 42 33 35 36 2d Data Ascii: 3DF-0658-439A-A281-31D4C4DCC22C":1,"EE3B0D96-213D-4FFD-B381-C4083D8756FB":1,"F9C99576-C897-4A94-8D0E-D3E6617D55A1":1,"3BA34700-C7D6-4BC6-A7D3-ACFDB3E309A8":1,"8C58E281-5E71-470D-8455-59A332B0A108":1,"94DA0C63-810C-4053-BCA6-22BC1D53D397":1,"C4D4D72B-B356-
2024-07-22 17:32:27 UTC	8192	IN	Data Raw: 31 2c 22 33 38 45 39 44 32 43 35 2d 37 45 41 45 2d 34 37 33 34 2d 39 37 37 36 2d 38 45 33 35 44 46 30 38 36 33 36 37 22 3a 31 2c 22 43 39 41 46 33 37 38 36 2d 42 43 31 41 2d 34 38 39 44 2d 39 36 32 46 2d 31 37 41 44 32 36 36 33 36 46 45 41 22 3a 31 2c 22 45 46 43 30 33 41 34 34 2d 41 43 38 45 2d 34 33 35 43 2d 39 36 31 44 2d 38 35 37 38 32 41 33 38 37 44 32 37 22 3a 31 2c 22 44 41 37 32 43 45 38 32 2d 39 38 37 39 2d 34 32 31 31 2d 39 31 34 42 2d 37 32 42 35 36 30 45 43 38 33 43 44 22 3a 31 2c 22 33 41 34 31 32 33 39 38 2d 39 32 44 44 2d 34 46 35 39 2d 38 35 45 35 2d 31 42 46 32 46 42 30 35 32 30 38 36 22 3a 31 2c 22 44 33 39 36 33 44 39 46 2d 31 37 46 41 2d 34 43 33 44 2d 38 32 41 32 2d 43 41 35 31 37 37 42 37 35 37 34 32 22 3a 31 2c 22 32 38 46 39 32 46 Data Ascii: 1,"38E9D2C5-7EAE-4734-9776-8E35DF086367":1,"C9AF3786-BC1A-489D-962F-17AD26636FEA":1,"EFC03A44-AC8E-435C-961D-85782A387D27":1,"DA72CE82-9879-4211-914B-72B560EC83CD":1,"3A412398-92DD-4F59-85E5-1BF2FB052086":1,"D3963D9F-17FA-4C3D-82A2-CA5177B75742":1,"28F92F
2024-07-22 17:32:27 UTC	8192	IN	Data Raw: 34 33 43 41 44 32 22 3a 31 2c 22 30 44 36 30 37 46 35 31 2d 31 30 36 31 2d 34 43 43 36 2d 42 43 34 44 2d 30 38 39 37 36 37 30 41 30 41 44 31 22 3a 31 2c 22 35 46 33 30 37 42 42 43 2d 32 38 30 46 2d 34 34 38 36 2d 38 43 32 34 2d 41 33 37 42 42 41 32 32 42 41 43 31 22 3a 31 2c 22 43 32 37 45 42 30 33 33 2d 43 36 36 39 2d 34 32 39 43 2d 41 39 43 45 2d 32 42 34 39 33 36 39 30 33 41 33 41 22 3a 31 2c 22 42 44 36 30 43 32 35 36 2d 36 37 33 35 2d 34 31 44 45 2d 38 39 31 43 2d 37 46 43 41 37 34 38 43 45 45 33 38 22 3a 31 2c 22 34 35 43 34 33 41 38 42 2d 42 36 32 31 2d 34 32 43 32 2d 42 42 46 38 2d 33 30 30 46 46 35 31 34 34 44 43 32 22 3a 31 2c 22 30 41 33 43 33 45 43 36 2d 36 44 38 41 2d 34 33 46 46 2d 42 37 36 42 2d 32 30 30 32 38 39 35 38 30 32 43 34 22 3a 31 Data Ascii: 43CAD2":1,"0D607F51-1061-4CC6-BC4D-0897670A0AD1":1,"5F307BBC-280F-4486-8C24-A37BBA22BAC1":1,"C27EB033-C669-429C-A9CE-2B4936903A3A":1,"BD60C256-6735-41DE-891C-7FCA748CEE38":1,"45C43A8B-B621-42C2-BBF8-300FF5144DC2":1,"0A3C3EC6-6D8A-43FF-B76B-2002895802C4":1
2024-07-22 17:32:27 UTC	8192	IN	Data Raw: 41 2d 31 41 33 38 34 34 46 34 43 41 32 46 22 3a 31 2c 22 45 42 31 38 34 37 45 45 2d 33 46 30 46 2d 34 36 45 34 2d 38 39 31 34 2d 34 34 41 41 38 45 36 35 35 32 41 39 22 3a 31 2c 22 38 33 44 38 38 30 32 42 2d 32 35 36 44 2d 34 38 41 31 2d 41 38 34 35 2d 36 37 37 41 34 38 34 33 42 46 31 42 22 3a 31 2c 22 45 37 44 30 42 43 46 43 2d 31 31 44 38 2d 34 38 45 45 2d 39 38 34 38 2d 42 39 33 46 32 38 39 38 37 31 37 38 22 3a 31 2c 22 36 46 36 46 45 35 34 37 2d 42 36 32 42 2d 34 44 45 31 2d 38 42 41 33 2d 42 42 45 34 31 45 34 31 44 31 45 43 22 3a 31 2c 22 46 38 35 35 45 44 31 32 2d 44 30 35 41 2d 34 43 44 31 2d 39 31 37 44 2d 43 34 37 35 35 42 32 42 32 35 46 45 22 3a 31 2c 22 42 41 32 44 33 39 46 33 2d 34 31 41 41 2d 34 32 33 37 2d 41 41 43 42 2d 34 43 38 32 32 42 34 Data Ascii: A-1A3844F4CA2F":1,"EB1847EE-3F0F-46E4-8914-44AA8E6552A9":1,"83D8802B-256D-48A1-A845-677A4843BF1B":1,"E7D0BCFC-11D8-48EE-9848-B93F28987178":1,"6F6FE547-B62B-4DE1-8BA3-BBE41E41D1EC":1,"F855ED12-D05A-4CD1-917D-C4755B2B25FE":1,"BA2D39F3-41AA-4237-AACB-4C822B4
2024-07-22 17:32:27 UTC	8192	IN	Data Raw: 34 44 32 39 2d 41 41 41 38 2d 42 30 44 42 33 34 32 44 43 39 41 41 22 3a 31 2c 22 32 35 31 35 42 39 38 45 2d 34 37 30 34 2d 34 30 43 35 2d 42 31 45 42 2d 32 33 34 34 38 44 36 39 34 45 35 44 22 3a 31 2c 22 42 35 46 32 34 32 36 42 2d 35 37 33 32 2d 34 41 38 34 2d 42 33 46 38 2d 35 38 38 36 46 43 41 30 30 41 34 41 22 3a 31 2c 22 46 42 33 41 45 38 46 32 2d 43 39 36 42 2d 34 44 31 34 2d 39 45 32 46 2d 36 34 36 32 46 42 36 34 33 35 31 30 22 3a 31 2c 22 44 41 38 38 37 34 43 34 2d 36 38 33 44 2d 34 44 31 44 2d 38 46 42 41 2d 35 37 38 31 41 32 37 46 32 38 37 31 22 3a 31 2c 22 37 32 46 37 37 31 35 38 2d 41 45 38 39 2d 34 42 34 42 2d 39 45 46 33 2d 44 45 43 46 30 31 41 35 45 35 41 31 22 3a 31 2c 22 36 35 43 39 35 38 38 43 2d 44 45 42 41 2d 34 32 39 33 2d 38 39 35 38 Data Ascii: 4D29-AAA8-B0DB342DC9AA":1,"2515B98E-4704-40C5-B1EB-23448D694E5D":1,"B5F2426B-5732-4A84-B3F8-5886FCA00A4A":1,"FB3AE8F2-C96B-4D14-9E2F-6462FB643510":1,"DA8874C4-683D-4D1D-8FBA-5781A27F2871":1,"72F77158-AE89-4B4B-9EF3-DECF01A5E5A1":1,"65C9588C-DEBA-4293-8958

Timestamp	Bytes transferred	Direction	Data
2024-07-22 17:32:27 UTC	719	OUT	GET /_layouts/15/1033/styles/corev15.css?rev=gzHVbYEq83HWY83fQnDKyQ%3D%3DTAG205 HTTP/1.1 Host: uconn-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://uconn-my.sharepoint.com/:o:/g/personal/lisa_frank_uconn_edu/EryHWVeqJnhDu2fh5Y44MT4BNS9VFRX04eNZiwiwvmi1JQ?e=5%3amqjzyy&at=9 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-22 17:32:28 UTC	730	IN	HTTP/1.1 200 OK Cache-Control: max-age=31536000 Content-Length: 341640 Content-Type: text/css Last-Modified: Tue, 16 Jul 2024 03:02:44 GMT Accept-Ranges: bytes ETag: "4fb9da12cd7da1:0" P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,525568,0,40,79417,0,302430,39 SPRequestDuration: 3 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25103 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 0A4C4DE4FCAF46BCB9581C6AB6A5351D Ref B: EWR311000104011 Ref C: 2024-07-22T17:32:27Z Date: Mon, 22 Jul 2024 17:32:27 GMT Connection: close
2024-07-22 17:32:28 UTC	1502	IN	Data Raw: 2f 2a 20 5f 6c 63 69 64 3d 22 31 30 33 33 22 0d 0a 5f 4c 6f 63 61 6c 42 69 6e 64 69 6e 67 20 2a 2f 0d 0a 62 6f 64 79 2c 0d 0a 2e 6d 73 2d 63 6f 72 65 2d 64 65 66 61 75 6c 74 46 6f 6e 74 2c 0d 0a 23 70 61 67 65 53 74 61 74 75 73 42 61 72 2c 0d 0a 23 68 79 62 72 69 64 54 6f 6f 6c 74 69 70 53 74 61 74 75 73 42 61 72 2c 0d 0a 2e 6d 73 2d 73 74 61 74 75 73 2d 6d 73 67 2c 0d 0a 2e 6a 73 2d 63 61 6c 6c 6f 75 74 2d 62 6f 64 79 0d 0a 7b 0d 0a 2f 2a 20 5b 52 65 70 6c 61 63 65 46 6f 6e 74 28 74 68 65 6d 65 46 6f 6e 74 3a 22 62 6f 64 79 22 29 5d 20 2a 2f 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 65 67 6f 65 20 55 49 22 2c 22 53 65 67 6f 65 22 2c 54 61 68 6f 6d 61 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 66 6f 6e 74 Data Ascii: /* _lcid="1033"_LocalBinding /body,.ms-core-defaultFont,#pageStatusBar,#hybridTooltipStatusBar,.ms-status-msg,.js-callout-body{/ [ReplaceFont(themeFont:"body")] */ font-family:"Segoe UI","Segoe",Tahoma,Helvetica,Arial,sans-serif;font
2024-07-22 17:32:28 UTC	8192	IN	Data Raw: 20 2a 2f 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 65 67 6f 65 20 55 49 20 53 65 6d 69 6c 69 67 68 74 22 2c 22 53 65 67 6f 65 20 55 49 22 2c 22 53 65 67 6f 65 22 2c 54 61 68 6f 6d 61 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 2f 2a 20 5b 52 65 70 6c 61 63 65 43 6f 6c 6f 72 28 74 68 65 6d 65 43 6f 6c 6f 72 3a 22 53 74 72 6f 6e 67 42 6f 64 79 54 65 78 74 22 29 5d 20 2a 2f 20 63 6f 6c 6f 72 3a 23 32 36 32 36 32 36 3b 0d 0a 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 0d 0a 7d 0d 0a 68 32 2c 2e 6d 73 2d 68 32 0d 0a 7b 0d 0a 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 34 36 65 6d 3b 0d 0a 7d 0d 0a 68 33 2c 2e 6d 73 2d 68 33 0d 0a 7b 0d 0a 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 31 35 65 6d 3b 0d 0a 7d 0d 0a 68 34 2c 68 Data Ascii: / font-family:"Segoe UI Semilight","Segoe UI","Segoe",Tahoma,Helvetica,Arial,sans-serif;/ [ReplaceColor(themeColor:"StrongBodyText")] */ color:#262626;font-weight:300;}h2,.ms-h2{font-size:1.46em;}h3,.ms-h3{font-size:1.15em;}h4,h
2024-07-22 17:32:28 UTC	6082	IN	Data Raw: 6e 75 2d 62 6f 78 42 69 67 2c 0d 0a 2e 6d 73 2d 77 65 6c 63 6f 6d 65 2d 72 6f 6f 74 20 3e 20 2e 6d 73 2d 63 6f 72 65 2d 6d 65 6e 75 2d 62 6f 78 2c 0d 0a 2e 6d 73 2d 77 65 6c 63 6f 6d 65 2d 72 6f 6f 74 20 3e 20 2e 6d 73 2d 63 6f 72 65 2d 6d 65 6e 75 2d 62 6f 78 42 69 67 0d 0a 7b 0d 0a 70 61 64 64 69 6e 67 2d 74 6f 70 3a 34 70 78 3b 0d 0a 7d 0d 0a 23 6d 73 2d 68 65 6c 70 0d 0a 7b 0d 0a 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 68 65 69 67 68 74 3a 33 30 70 78 3b 0d 0a 7d 0d 0a 2e 6d 73 2d 64 64 2d 62 75 74 74 6f 6e 0d 0a 7b 0d 0a 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 3b 0d 0a 7d 0d 0a 64 69 76 2e 6d 73 2d 63 75 69 2d 54 61 62 52 6f 77 52 69 67 68 74 0d 0a Data Ascii: nu-boxBig,.ms-welcome-root > .ms-core-menu-box,.ms-welcome-root > .ms-core-menu-boxBig{padding-top:4px;}#ms-help{display:inline-block;height:30px;}.ms-dd-button{display:inline-block;margin-left:5px;}div.ms-cui-TabRowRight
2024-07-22 17:32:28 UTC	8192	IN	Data Raw: 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 7d 0d 0a 2e 6d 73 2d 63 6f 72 65 2d 68 65 61 64 65 72 20 2e 6d 73 2d 73 72 63 68 2d 73 62 0d 0a 7b 0d 0a 2f 2a 20 5b 52 65 70 6c 61 63 65 43 6f 6c 6f 72 28 74 68 65 6d 65 43 6f 6c 6f 72 3a 22 48 65 61 64 65 72 42 61 63 6b 67 72 6f 75 6e 64 22 2c 6f 70 61 63 69 74 79 3a 22 31 22 29 5d 20 2a 2f 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 0d 0a 2f 2a 20 5b 52 65 70 6c 61 63 65 43 6f 6c 6f 72 28 74 68 65 6d 65 43 6f 6c 6f 72 3a 22 48 65 61 64 65 72 42 61 63 6b 67 72 6f 75 6e 64 22 29 5d 20 2a 2f 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 20 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 38 35 20 29 3b 0d 0a 7d 0d 0a 2e 6d 73 2d 73 72 63 68 2d 73 62 2d 62 6f 72 Data Ascii: ay:inline-block;}.ms-core-header .ms-srch-sb{/* [ReplaceColor(themeColor:"HeaderBackground",opacity:"1")] / background-color:#fff;/ [ReplaceColor(themeColor:"HeaderBackground")] */ background-color:rgba( 255,255,255,0.85 );}.ms-srch-sb-bor
2024-07-22 17:32:28 UTC	8192	IN	Data Raw: 6e 65 65 64 49 45 46 69 6c 74 65 72 20 2e 6d 73 2d 73 74 6f 72 65 66 72 6f 6e 74 2d 61 70 70 69 63 6f 6e 73 70 61 6e 0d 0a 7b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 0d 0a 2f 2a 20 5b 52 65 70 6c 61 63 65 43 6f 6c 6f 72 28 74 68 65 6d 65 43 6f 6c 6f 72 3a 22 45 6d 70 68 61 73 69 73 42 61 63 6b 67 72 6f 75 6e 64 22 29 5d 20 2a 2f 20 2d 6d 73 2d 66 69 6c 74 65 72 3a 22 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 47 72 61 64 69 65 6e 74 54 79 70 65 3d 30 2c 73 74 61 72 74 43 6f 6c 6f 72 73 74 72 3d 23 66 66 30 30 37 32 63 36 2c 65 6e 64 43 6f 6c 6f 72 73 74 72 3d 23 66 66 30 30 37 32 63 36 29 22 3b 0d 0a 7d 0d 0a 2e 6d 73 Data Ascii: needIEFilter .ms-storefront-appiconspan{background-color:transparent;/* [ReplaceColor(themeColor:"EmphasisBackground")] */ -ms-filter:"progid:DXImageTransform.Microsoft.gradient(GradientType=0,startColorstr=#ff0072c6,endColorstr=#ff0072c6)";}.ms
2024-07-22 17:32:28 UTC	8192	IN	Data Raw: 79 6c 65 3a 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 2e 6d 73 2d 63 6f 72 65 2d 66 6f 72 6d 2d 65 72 72 6f 72 2c 0d 0a 2e 6d 73 2d 65 72 72 6f 72 2c 0d 0a 2e 6d 73 2d 66 6f 72 6d 76 61 6c 69 64 61 74 69 6f 6e 2c 0d 0a 2e 6d 73 2d 64 69 66 66 64 65 6c 65 74 65 6e 6f 73 74 72 69 6b 65 2c 0d 0a 2e 6d 73 2d 64 69 66 66 64 65 6c 65 74 65 0d 0a 7b 0d 0a 2f 2a 20 5b 52 65 70 6c 61 63 65 43 6f 6c 6f 72 28 74 68 65 6d 65 43 6f 6c 6f 72 3a 22 45 72 72 6f 72 54 65 78 74 22 29 5d 20 2a 2f 20 63 6f 6c 6f 72 3a 23 62 66 30 30 30 30 3b 0d 0a 7d 0d 0a 2e 6d 73 2d 74 6f 6f 6c 74 69 70 0d 0a 7b 0d 0a 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 0d 0a 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 64 6f 74 74 65 64 3b 0d 0a 7d 0d 0a 2e 6d 73 2d 65 6d 70 74 79 Data Ascii: yle:none;}.ms-core-form-error,.ms-error,.ms-formvalidation,.ms-diffdeletenostrike,.ms-diffdelete{/* [ReplaceColor(themeColor:"ErrorText")] */ color:#bf0000;}.ms-tooltip{text-decoration:none;border-bottom:1px dotted;}.ms-empty
2024-07-22 17:32:28 UTC	8192	IN	Data Raw: 7b 0d 0a 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 30 70 78 3b 0d 0a 7d 0d 0a 2e 6d 73 2d 69 6e 64 65 6e 74 0d 0a 7b 0d 0a 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 35 70 78 3b 0d 0a 7d 0d 0a 2e 6d 73 2d 68 69 67 68 43 6f 6e 74 72 61 73 74 42 6f 72 64 65 72 0d 0a 7b 0d 0a 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0d 0a 7d 0d 0a 2e 6d 73 2d 63 75 72 73 6f 72 44 65 66 61 75 6c 74 0d 0a 7b 0d 0a 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 3b 0d 0a 7d 0d 0a 2e 6d 73 2d 63 75 72 73 6f 72 50 6f 69 6e 74 65 72 0d 0a 7b 0d 0a 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 0d 0a 7d 0d 0a 2e 6d 73 2d 73 68 61 64 6f 77 0d 0a 7b 0d 0a 62 6f 78 2d 73 68 61 64 6f 77 3a 30 70 78 20 30 70 78 20 37 70 78 20 30 70 78 20 72 67 62 61 28 30 Data Ascii: {margin-left:20px;}.ms-indent{margin-left:25px;}.ms-highContrastBorder{border:1px solid transparent;}.ms-cursorDefault{cursor:default;}.ms-cursorPointer{cursor:pointer;}.ms-shadow{box-shadow:0px 0px 7px 0px rgba(0
2024-07-22 17:32:28 UTC	8192	IN	Data Raw: 6f 6c 6f 72 3a 22 43 6f 6e 74 65 6e 74 41 63 63 65 6e 74 33 22 2c 6f 70 61 63 69 74 79 3a 22 31 22 29 5d 20 2a 2f 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 32 38 38 30 35 34 3b 7d 0d 0a 2e 6d 73 2d 43 6f 6e 74 65 6e 74 41 63 63 65 6e 74 34 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 7b 2f 2a 20 5b 52 65 70 6c 61 63 65 43 6f 6c 6f 72 28 74 68 65 6d 65 43 6f 6c 6f 72 3a 22 43 6f 6e 74 65 6e 74 41 63 63 65 6e 74 34 22 2c 6f 70 61 63 69 74 79 3a 22 31 22 29 5d 20 2a 2f 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 37 36 37 39 35 36 3b 7d 0d 0a 2e 6d 73 2d 43 6f 6e 74 65 6e 74 41 63 63 65 6e 74 35 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 7b 2f 2a 20 5b 52 65 70 6c 61 63 65 43 6f 6c 6f 72 28 74 68 65 6d 65 43 6f 6c 6f 72 3a 22 43 6f 6e 74 65 6e 74 41 63 63 65 6e 74 35 22 Data Ascii: olor:"ContentAccent3",opacity:"1")] / border-color:#288054;}.ms-ContentAccent4-borderColor{/ [ReplaceColor(themeColor:"ContentAccent4",opacity:"1")] / border-color:#767956;}.ms-ContentAccent5-borderColor{/ [ReplaceColor(themeColor:"ContentAccent5"
2024-07-22 17:32:28 UTC	8192	IN	Data Raw: 31 20 4c 69 67 68 74 65 73 74 22 3b 0d 0a 2f 2a 20 5b 43 6f 6c 6f 72 4e 61 6d 65 5d 20 2a 2f 20 2d 6d 73 2d 63 6f 6c 6f 72 3a 22 4c 69 67 68 74 20 42 6c 75 65 22 3b 0d 0a 7d 0d 0a 2e 6d 73 2d 72 74 65 54 68 65 6d 65 46 6f 72 65 43 6f 6c 6f 72 2d 36 2d 31 0d 0a 7b 0d 0a 2f 2a 20 5b 52 65 70 6c 61 63 65 43 6f 6c 6f 72 28 74 68 65 6d 65 43 6f 6c 6f 72 3a 22 43 6f 6e 74 65 6e 74 41 63 63 65 6e 74 32 2d 4c 69 67 68 74 65 73 74 22 2c 6f 70 61 63 69 74 79 3a 22 31 22 29 5d 20 2a 2f 20 63 6f 6c 6f 72 3a 23 44 35 46 36 46 46 3b 0d 0a 2d 6d 73 2d 6e 61 6d 65 3a 22 41 63 63 65 6e 74 20 32 20 4c 69 67 68 74 65 73 74 22 3b 0d 0a 2f 2a 20 5b 43 6f 6c 6f 72 4e 61 6d 65 5d 20 2a 2f 20 2d 6d 73 2d 63 6f 6c 6f 72 3a 22 50 69 6e 6b 22 3b 0d 0a 7d 0d 0a 2e 6d 73 2d 72 74 65 Data Ascii: 1 Lightest";/* [ColorName] / -ms-color:"Light Blue";}.ms-rteThemeForeColor-6-1{/ [ReplaceColor(themeColor:"ContentAccent2-Lightest",opacity:"1")] / color:#D5F6FF;-ms-name:"Accent 2 Lightest";/ [ColorName] */ -ms-color:"Pink";}.ms-rte
2024-07-22 17:32:28 UTC	8192	IN	Data Raw: 65 6e 74 20 34 20 44 61 72 6b 65 73 74 22 3b 0d 0a 2f 2a 20 5b 43 6f 6c 6f 72 4e 61 6d 65 5d 20 2a 2f 20 2d 6d 73 2d 63 6f 6c 6f 72 3a 22 42 72 6f 77 6e 22 3b 0d 0a 7d 0d 0a 2e 6d 73 2d 72 74 65 54 68 65 6d 65 46 6f 72 65 43 6f 6c 6f 72 2d 39 2d 35 0d 0a 7b 0d 0a 2f 2a 20 5b 52 65 70 6c 61 63 65 43 6f 6c 6f 72 28 74 68 65 6d 65 43 6f 6c 6f 72 3a 22 43 6f 6e 74 65 6e 74 41 63 63 65 6e 74 35 2d 44 61 72 6b 65 73 74 22 2c 6f 70 61 63 69 74 79 3a 22 31 22 29 5d 20 2a 2f 20 63 6f 6c 6f 72 3a 23 37 36 30 30 31 39 3b 0d 0a 2d 6d 73 2d 6e 61 6d 65 3a 22 41 63 63 65 6e 74 20 35 20 44 61 72 6b 65 73 74 22 3b 0d 0a 2f 2a 20 5b 43 6f 6c 6f 72 4e 61 6d 65 5d 20 2a 2f 20 2d 6d 73 2d 63 6f 6c 6f 72 3a 22 44 61 72 6b 20 47 72 65 65 6e 22 3b 0d 0a 7d 0d 0a 2e 6d 73 2d 72 Data Ascii: ent 4 Darkest";/* [ColorName] / -ms-color:"Brown";}.ms-rteThemeForeColor-9-5{/ [ReplaceColor(themeColor:"ContentAccent5-Darkest",opacity:"1")] / color:#760019;-ms-name:"Accent 5 Darkest";/ [ColorName] */ -ms-color:"Dark Green";}.ms-r

Timestamp	Bytes transferred	Direction	Data
2024-07-22 17:32:28 UTC	717	OUT	GET /_layouts/15/1033/styles/error.css?rev=tF7fyfzbaQzNoASoSDlV4A%3D%3DTAG205 HTTP/1.1 Host: uconn-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://uconn-my.sharepoint.com/:o:/g/personal/lisa_frank_uconn_edu/EryHWVeqJnhDu2fh5Y44MT4BNS9VFRX04eNZiwiwvmi1JQ?e=5%3amqjzyy&at=9 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-22 17:32:28 UTC	739	IN	HTTP/1.1 200 OK Cache-Control: max-age=31536000 Content-Length: 622 Content-Type: text/css Last-Modified: Tue, 16 Jul 2024 03:02:43 GMT Accept-Ranges: bytes ETag: "b29dea02cd7da1:0" P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 1,8409600,120,77,5681396,8409600,8409600,39 SPRequestDuration: 4 SPIisLatency: 2 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25103 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: C3AE3DC616C6464CAE8BD61DCBAB59B8 Ref B: EWR311000102009 Ref C: 2024-07-22T17:32:28Z Date: Mon, 22 Jul 2024 17:32:28 GMT Connection: close
2024-07-22 17:32:28 UTC	622	IN	Data Raw: 2f 2a 20 5f 6c 63 69 64 3d 22 31 30 33 33 22 0d 0a 5f 4c 6f 63 61 6c 42 69 6e 64 69 6e 67 20 2a 2f 0d 0a 23 6d 73 2d 65 72 72 6f 72 2d 68 65 61 64 65 72 0d 0a 7b 0d 0a 6d 61 72 67 69 6e 3a 31 31 38 70 78 20 30 70 78 20 31 36 70 78 3b 0d 0a 6d 69 6e 2d 68 65 69 67 68 74 3a 35 30 70 78 3b 0d 0a 7d 0d 0a 23 6d 73 2d 65 72 72 6f 72 2d 67 6f 62 61 63 6b 63 6f 6e 74 0d 0a 7b 0d 0a 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 38 70 78 3b 0d 0a 7d 0d 0a 23 6d 73 2d 61 63 63 65 73 73 44 65 6e 69 65 64 2d 72 65 71 44 69 61 6c 6f 67 0d 0a 7b 0d 0a 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 0d 0a 7d 0d 0a 23 6d 73 2d 65 72 72 6f 72 2d 62 6f 64 79 0d 0a 7b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 61 75 74 6f 3b 0d 0a 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 3b 0d Data Ascii: /* _lcid="1033"_LocalBinding */#ms-error-header{margin:118px 0px 16px;min-height:50px;}#ms-error-gobackcont{margin-top:28px;}#ms-accessDenied-reqDialog{max-width:100%;}#ms-error-body{background-size:auto;overflow:auto;

Timestamp	Bytes transferred	Direction	Data
2024-07-22 17:32:28 UTC	856	OUT	GET /ScriptResource.axd?d=bTMVwVBOQTEWXfMTeLPRauMAlGZqlxO6d24w9vRq_hFodF38zo2etBqBoUodT-tYm25MhloUihc-1Ve_WEURLUwehSrxj_ZVDaAtcdvGOVa3nTLiPG244WzuXTxsJ7AeU3UoPuKWYe8l4bslAFyMC4itMHMs0xqeoebVbeAWrL2M3Ue6OkkM4ErGNkc-hXoq0&t=74258c30 HTTP/1.1 Host: uconn-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://uconn-my.sharepoint.com/:o:/g/personal/lisa_frank_uconn_edu/EryHWVeqJnhDu2fh5Y44MT4BNS9VFRX04eNZiwiwvmi1JQ?e=5%3amqjzyy&at=9 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-22 17:32:28 UTC	787	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 25609 Content-Type: application/x-javascript Content-Encoding: gzip Expires: Tue, 22 Jul 2025 17:32:28 GMT Last-Modified: Mon, 22 Jul 2024 17:32:28 GMT P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,4204800,44,238,2355034,0,2515804,39 X-AspNet-Version: 4.0.30319 SPRequestDuration: 10 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25103 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: E2A39A7A373B457E9B97F3F028187193 Ref B: EWR311000101017 Ref C: 2024-07-22T17:32:28Z Date: Mon, 22 Jul 2024 17:32:28 GMT Connection: close
2024-07-22 17:32:28 UTC	3716	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd d9 72 1b 49 92 28 fa 3e 66 f3 0f 64 8e 8a 42 36 92 20 29 55 2f 05 28 c5 d1 da a5 1e 6d 47 52 75 77 0d c9 96 e5 06 20 49 10 c9 42 02 92 58 04 be ec 3c dc 4f ba bf 70 7d 89 3d 23 01 50 aa 3e 73 8f 59 97 95 a4 44 2c 1e 11 1e 1e 1e 1e 1e ee 1e ff ef ff fe 7f 0e 0e f6 bf fa bf 7f ff b7 83 83 9d 27 d5 d5 f5 ac 1c 8d e7 3b 9d 27 e1 ce ab 32 9b 55 75 35 9c 43 fa ec aa 9a 25 f3 b2 9a f6 76 1e 4d 26 3b 54 a8 de 99 15 75 31 fb 54 e4 3d ac fd 8d 6d ab d6 1e 9d 27 5f 7a e7 f5 bf ff db f3 c5 34 a3 26 3f 7e 9c 5f 5f 15 af 93 cb 22 0e 64 62 30 30 b2 b3 49 52 d7 f1 7c b6 28 74 6a 36 2b 92 79 f1 24 99 4c d2 24 bb 88 87 22 bd 93 46 49 78 33 2b e6 8b d9 74 47 25 86 37 9f 92 d9 4e 11 27 b3 d1 e2 b2 98 ce eb de a4 98 8e e6 e3 41 39 ec 14 0f Data Ascii: rI(>fdB6 )U/(mGRuw IBX<Op}=#P>sYD,';'2Uu5C%vM&;Tu1T=m'_z4&?~__"db00IR\|(tj6+y$L$"FIx3+tG%7N'A9
2024-07-22 17:32:28 UTC	8192	IN	Data Raw: 4a da 8e 3b 93 a6 76 c9 fe 21 19 3e 82 c4 fc 1a 08 24 c4 5b 09 32 a8 a4 c4 e7 a8 ee 28 38 3d d9 4f be a3 4b 81 e4 c1 21 fc 64 53 f8 e4 0b 88 36 59 17 c8 55 8b 68 09 8a 68 24 9b 19 b7 9a 20 9e b9 b2 05 a6 41 97 15 fe d3 95 ea b1 5f 1e d0 5b f8 4d 60 39 8e 3c a9 66 45 ef bc 0e fa c8 17 22 3b ef cf 93 2a 45 7d 0d fb b1 b4 14 7a 0f bb c1 c6 42 4f aa cb 2b 58 e2 d3 f9 2b 60 a0 93 b6 52 3f 42 87 ab d9 75 5b f6 eb 62 fe b9 9a 5d b4 65 ff ad 48 a1 2f 9f 4a 94 32 65 11 26 80 17 4f cb fa aa aa 93 74 62 89 8c 8d 4c bd a5 c4 9e cc c6 21 be 13 38 45 c4 fe cf 82 c5 e3 45 39 c9 0b 9b f3 b1 74 7a 85 97 8a 71 9b d8 98 a8 7b 70 ca 0a 8e 49 15 20 ef 3c ce fa 27 52 0b 41 8b 0c 3b ca 3f 81 40 71 71 34 3a 60 0e 0a b8 24 88 35 fd 96 2e 9d 18 df 5a 4e 5f 45 5c eb 25 f4 ef 56 35 Data Ascii: J;v!>$[2(8=OK!dS6YUhh$ A_[M`9<fE";*E}zBO+X+`R?Bu[b]eH/J2e&OtbL!8EE9tzq{pI <'RA;?@qq4:`$5.ZN_E\%V5
2024-07-22 17:32:28 UTC	3811	IN	Data Raw: 4f fe 81 41 8c ce c2 d3 53 8a 66 74 80 ac ed f4 b4 d3 d9 3f 3e 21 33 d7 b0 73 dc 3f 49 f6 7f 7d b4 ff df 67 cb 0e 06 8b e9 2e f7 43 ca c3 a0 3b c7 a7 a7 21 d5 83 fa 77 a3 60 74 0b 54 14 34 88 27 38 a2 78 fb 09 12 d5 9a 63 39 a1 fe 9f 9e 7e 39 3c dc 87 bf 8f 9e 9f 41 7f ca 5b f7 87 c0 fd 79 52 a5 c9 64 33 f8 db 0c f7 bc ae a6 8d 5e 07 27 ff 88 fa 37 ab d3 d3 13 98 03 c0 69 ef f4 74 bf fb 2c 29 86 93 e9 6c 7f b1 73 7a 3a 3d 3d 9d 9d 9e ce cf 82 db 37 c6 d6 46 4d 44 61 60 9e d3 d3 1e cc 7c c0 53 ff bb db ce 1c c7 35 c4 15 fb bc 2c 26 39 bd bd 15 f0 3b 5c c1 d6 40 50 96 75 63 21 66 31 a2 79 81 52 5a 10 89 af 23 f5 75 4f 7d dd 57 5f df ab af df ab af 3f a8 af 3f d2 57 4a 7f cf e9 ef a9 ca e3 d4 21 fd 3d 53 a9 85 fa 1a ca af 23 d5 97 23 d5 97 23 d5 97 23 d5 97 Data Ascii: OASft?>!3s?I}g.C;!w`tT4'8xc9~9<A[yRd3^'7it,)lsz:==7FMDa`\|S5,&9;\@Puc!f1yRZ#uO}W_??WJ!=S####
2024-07-22 17:32:28 UTC	8192	IN	Data Raw: 00 65 1f 99 0c f5 06 e7 1f 83 5c cb df 30 bf 7a c1 ba c4 49 f6 4b da 6e 7c 03 09 bc 4f 86 c9 ac dc 76 f9 0a e3 ee 1e 9f 2d f7 f6 e4 17 00 cd 96 cb cc 5a ce 9b 57 4f 4e 56 58 c0 f9 e5 23 e8 23 fe 27 15 af c4 67 83 64 70 1e 27 51 67 14 c3 9e a6 b4 26 6f 89 12 c3 b0 f5 6c 25 e2 c1 bc 9f 5f 4f c8 14 4c 2e f6 79 32 c2 9d ef 58 7d d9 61 0c fb 92 8e 3b b2 25 5e 85 f2 17 ae aa bd 3d 3a 0f 05 8f df 3c fd 19 68 9a e4 e1 51 ef 8a a2 85 b0 0e 30 49 eb 6a b2 98 17 68 be 78 93 77 63 13 d6 a0 d0 bf 71 0e f9 21 02 0f 9d 3f 8c ef 53 65 fd ec 0d 50 33 ae 1b 84 42 b4 19 22 ac 46 36 00 e5 dc d5 6a 2b e4 64 8c 9c 71 9c 1e a7 6a 14 0a 0f bb b0 2f 8f ed 31 89 89 31 38 31 cc 11 4e 8d 4e 80 63 d7 2d 70 ad b1 c9 26 ee c1 8f 1f 5e bd 84 ef 4e 62 71 c2 c4 e0 6c 80 99 fd d8 ce 3e 1c Data Ascii: e\0zIKn\|Ov-ZWONVX##'gdp'Qg&ol%_OL.y2X}a;%^=:<hQ0Ijhxwcq!?SeP3B"F6j+dqj/1181NNc-p&^Nbql>
2024-07-22 17:32:28 UTC	1698	IN	Data Raw: 3a cc 2b 5f 66 9e 57 d8 29 04 89 6a df ac dc 63 ef 6c 23 8c fb d7 23 1b eb 1a 8d e6 3b 0d 04 06 61 98 89 d6 d8 91 51 3c e7 b7 d3 a8 a9 3d bb 54 0d f8 25 8b cb 24 db 2b 51 d8 03 c1 84 10 11 5c f8 fb 8c fd 10 16 a4 d1 38 be c0 19 40 f6 41 93 39 e6 77 21 a1 c9 cd eb 2d 93 eb 0d be f4 fa 81 1f d6 ca 89 b2 70 e5 1f a1 17 37 bb 99 92 1c b2 5e ee 88 d5 59 1f d2 b0 9b c3 07 c0 1b 96 cb e1 c3 f8 3e fe 3b 96 6c 82 ec f0 61 bf 19 6f 35 80 db 71 09 7a ce d0 58 fa 43 58 fa 99 67 e9 8b 34 75 49 55 0e 14 05 4a c3 5a 20 bc 32 be 05 b7 16 24 b2 b1 8a dd 61 c9 c8 d7 21 c2 ed 57 54 46 41 00 ff 87 62 60 f2 7a a5 5d 28 fa 38 42 25 09 46 8e 80 59 cb 61 3d d4 40 4c 99 e5 61 a8 5f 39 74 5c f3 d3 d0 79 58 10 c5 33 7a 06 0d 37 09 96 6b 3f ce d9 48 4f 9c b8 59 7c 3f 6c ef 8e 90 8a Data Ascii: :+_fW)jcl##;aQ<=T%$+Q\8@A9w!-p7^Y>;lao5qzXCXg4uIUJZ 2$a!WTFAb`z](8B%FYa=@La_9t\yX3z7k?HOY\|?l

Timestamp	Bytes transferred	Direction	Data
2024-07-22 17:32:28 UTC	856	OUT	GET /ScriptResource.axd?d=5obXSffBrxKutWSM22_pc7pcwCPAoEDMMxba-3OLRteC_0xzaX0A_FPG2nWf2LmXV0_rWDQ8FIN9EmE74nFkz7YodIXt4M965BjNYp7d6d0MJLH8joaq6AEYE7UVUcCvvhhr6XMWP6xqcLac9mpAJSUTlNa0xHCRubif0OQeM8lfF0mXakbsEBNu2W2vTd7g0&t=74258c30 HTTP/1.1 Host: uconn-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://uconn-my.sharepoint.com/:o:/g/personal/lisa_frank_uconn_edu/EryHWVeqJnhDu2fh5Y44MT4BNS9VFRX04eNZiwiwvmi1JQ?e=5%3amqjzyy&at=9 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-22 17:32:28 UTC	782	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 9984 Content-Type: application/x-javascript Content-Encoding: gzip Expires: Tue, 22 Jul 2025 17:32:28 GMT Last-Modified: Mon, 22 Jul 2024 17:32:28 GMT P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,1051136,0,0,3883179,0,1051136,39 X-AspNet-Version: 4.0.30319 SPRequestDuration: 9 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25103 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: D3C43854FF0C458C8D8F50D255AE1CD4 Ref B: EWR311000102011 Ref C: 2024-07-22T17:32:28Z Date: Mon, 22 Jul 2024 17:32:27 GMT Connection: close
2024-07-22 17:32:28 UTC	3038	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e5 7d 6b 73 db 48 92 e0 f7 89 98 ff 40 61 7b 65 62 55 86 e4 de bd b8 08 d2 68 85 5e 9e d6 9e 5f 61 cb d3 33 21 6b 15 05 a0 48 42 02 01 1a 00 6d ab 25 fe b2 fb b0 3f 69 ff c2 65 d6 0b 55 40 81 a4 e4 9e bd 8b b8 89 1e 99 a8 77 65 66 65 66 65 66 55 fd d7 ff fe cf fd fd e7 4f fe df 9f ff b4 bf 3f 38 29 16 77 65 3a 9d d5 83 e1 89 3f 78 93 c6 65 51 15 93 1a d2 cb 45 51 d2 3a 2d f2 60 70 94 65 03 5e a8 1a 94 ac 62 e5 57 96 04 58 fb 07 fb d6 bd 1d dd d0 ef bf b1 e8 55 51 ce ab e0 a6 fa f3 9f 2e ee 16 2c b8 2e d9 34 ad 6a 56 7e 8c cb 74 51 0f bd be f2 1e b9 b4 f3 60 f0 8c a7 db c9 1f 59 99 d2 2c fd 5d cc aa 9b ff 96 d5 df 8a f2 d6 91 73 52 cc 17 45 ce f2 fa 4d 91 b0 0c 0b 5c f9 63 3e 48 35 c6 b7 74 ce aa 05 8d d9 d0 fb 78 57 05 6a 74 Data Ascii: }ksH@a{ebUh^_a3!kHBm%?ieU@wefefefUO?8)we:?xeQEQ:-`pe^bWXUQ.,.4jV~tQ`Y,]sREM\c>H5txWjt
2024-07-22 17:32:28 UTC	6946	IN	Data Raw: 4f 79 0a 23 38 4f 2a 54 67 50 b8 59 41 7d 04 d6 e5 20 95 26 66 60 95 dc 3a 79 48 83 9b 22 cd 87 b0 d5 f5 47 a0 8f 38 6d 2c 42 7a 27 7b a1 f7 e0 ed c5 6a bc 2c 8f 01 bf 9f 3e 9c eb 30 f4 a1 b3 b6 bf e7 85 de 9e a3 74 02 39 bb 5e 33 eb 96 3e 65 06 a0 50 d0 ab 22 bd 75 bc e7 20 18 41 72 03 8a 51 4c ec f9 62 58 49 b1 2c 63 c5 31 47 91 10 e9 39 90 6c 7d 51 68 e1 61 ae bf 09 61 b8 06 39 0f 6f 4c c2 07 64 16 2a 5b ef 38 7a 09 ff df 0b 93 c3 9f 47 2f 14 4e 30 8e 80 4c c3 61 72 08 bf f6 5e 5c 8d 3c cf 57 a0 5c 0a 9c 9c 36 3d a2 94 68 2c c3 13 62 7d 32 32 45 df 96 23 6a 48 3b 49 90 74 85 f1 f3 d3 79 70 5a cc f9 b6 bc a5 ca 37 25 89 27 6c 5b 1e e9 35 f5 08 57 c7 76 8d c5 68 fd b1 db 72 d8 85 36 b5 28 d4 3a 02 82 1a 6d 45 4d 73 0e 0b d2 b6 4d 99 0d 75 ec 80 7e e3 62 Data Ascii: Oy#8OTgPYA} &f`:yH"G8m,Bz'{j,>0t9^3>eP"u ArQLbXI,c1G9l}Qhaa9oLd[8zG/N0Lar^\<W\6=h,b}22E#jH;ItypZ7%'l[5Wvhr6(:mEMsMu~b

Timestamp	Bytes transferred	Direction	Data
2024-07-22 17:32:28 UTC	778	OUT	GET /WebResource.axd?d=4NuAIey-1eXTfkmwTY3x91AumVU41ZLXV-ngbxqay8EH9oB-ZoIb1xeI6WPlgpVrLZIQx9e3BaGa57iiGEphJoZDFLyxRnIQenOP4SDscZ01&t=638533172441064469 HTTP/1.1 Host: uconn-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://uconn-my.sharepoint.com/:o:/g/personal/lisa_frank_uconn_edu/EryHWVeqJnhDu2fh5Y44MT4BNS9VFRX04eNZiwiwvmi1JQ?e=5%3amqjzyy&at=9 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-22 17:32:28 UTC	756	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 23063 Content-Type: application/x-javascript Expires: Tue, 22 Jul 2025 07:24:06 GMT Last-Modified: Wed, 03 Jul 2024 09:44:59 GMT P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,525568,0,0,652494,0,148281,39 X-AspNet-Version: 4.0.30319 SPRequestDuration: 3 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25103 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 5333E82250364BF3A9208D567237A362 Ref B: EWR311000107033 Ref C: 2024-07-22T17:32:28Z Date: Mon, 22 Jul 2024 17:32:28 GMT Connection: close
2024-07-22 17:32:28 UTC	3238	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 57 65 62 46 6f 72 6d 5f 50 6f 73 74 42 61 63 6b 4f 70 74 69 6f 6e 73 28 65 76 65 6e 74 54 61 72 67 65 74 2c 20 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 2c 20 76 61 6c 69 64 61 74 69 6f 6e 2c 20 76 61 6c 69 64 61 74 69 6f 6e 47 72 6f 75 70 2c 20 61 63 74 69 6f 6e 55 72 6c 2c 20 74 72 61 63 6b 46 6f 63 75 73 2c 20 63 6c 69 65 6e 74 53 75 62 6d 69 74 29 20 7b 0d 0a 20 20 20 20 74 68 69 73 2e 65 76 65 6e 74 54 61 72 67 65 74 20 3d 20 65 76 65 6e 74 54 61 72 67 65 74 3b 0d 0a 20 20 20 20 74 68 69 73 2e 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 20 3d 20 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 3b 0d 0a 20 20 20 20 74 68 69 73 2e 76 61 6c 69 64 61 74 69 6f 6e 20 3d 20 76 61 6c 69 64 61 74 69 6f 6e 3b 0d 0a 20 20 20 20 74 68 69 73 2e 76 61 6c Data Ascii: function WebForm_PostBackOptions(eventTarget, eventArgument, validation, validationGroup, actionUrl, trackFocus, clientSubmit) { this.eventTarget = eventTarget; this.eventArgument = eventArgument; this.validation = validation; this.val
2024-07-22 17:32:28 UTC	8192	IN	Data Raw: 6e 64 65 78 5d 20 3d 20 6e 75 6c 6c 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 5f 5f 73 79 6e 63 68 72 6f 6e 6f 75 73 43 61 6c 6c 42 61 63 6b 49 6e 64 65 78 20 3d 20 63 61 6c 6c 62 61 63 6b 49 6e 64 65 78 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 69 66 20 28 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 4d 65 74 68 6f 64 45 78 69 73 74 73 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 78 6d 6c 52 65 71 75 65 73 74 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 20 3d 20 57 65 62 46 6f 72 6d 5f 43 61 6c 6c 62 61 63 6b 43 6f 6d 70 6c 65 74 65 3b 0d 0a 20 20 20 20 20 20 20 20 63 61 6c 6c 62 61 63 6b 2e 78 6d 6c 52 65 71 75 65 73 74 20 3d 20 78 6d 6c 52 65 71 75 65 73 74 3b 0d 0a 20 20 20 20 20 20 20 20 2f 2f 20 65 2e 67 2e 20 68 74 Data Ascii: ndex] = null; } __synchronousCallBackIndex = callbackIndex; } if (setRequestHeaderMethodExists) { xmlRequest.onreadystatechange = WebForm_CallbackComplete; callback.xmlRequest = xmlRequest; // e.g. ht
2024-07-22 17:32:28 UTC	4320	IN	Data Raw: 72 73 74 41 76 61 69 6c 61 62 6c 65 53 6c 6f 74 28 61 72 72 61 79 2c 20 65 6c 65 6d 65 6e 74 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 69 3b 0d 0a 20 20 20 20 66 6f 72 20 28 69 20 3d 20 30 3b 20 69 20 3c 20 61 72 72 61 79 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 61 72 72 61 79 5b 69 5d 29 20 62 72 65 61 6b 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 61 72 72 61 79 5b 69 5d 20 3d 20 65 6c 65 6d 65 6e 74 3b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 69 3b 0d 0a 7d 0d 0a 76 61 72 20 5f 5f 6e 6f 6e 4d 53 44 4f 4d 42 72 6f 77 73 65 72 20 3d 20 28 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 61 70 70 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 27 65 78 70 6c 6f 72 65 72 27 29 20 Data Ascii: rstAvailableSlot(array, element) { var i; for (i = 0; i < array.length; i++) { if (!array[i]) break; } array[i] = element; return i;}var __nonMSDOMBrowser = (window.navigator.appName.toLowerCase().indexOf('explorer')
2024-07-22 17:32:28 UTC	7313	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 64 65 66 61 75 6c 74 42 75 74 74 6f 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 61 6c 6c 5b 74 61 72 67 65 74 5d 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 64 65 66 61 75 6c 74 42 75 74 74 6f 6e 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 57 65 62 46 6f 72 6d 5f 53 69 6d 75 6c 61 74 65 43 6c 69 63 6b 28 64 65 66 61 75 6c 74 42 75 74 74 6f 6e 2c 20 65 76 65 6e 74 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 20 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 57 65 62 46 6f 72 6d 5f 47 65 74 53 63 72 6f 6c 6c 58 28 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 5f 5f 6e 6f 6e 4d 53 44 4f 4d 42 72 6f 77 73 65 72 29 Data Ascii: defaultButton = document.all[target]; } if (defaultButton) { return WebForm_SimulateClick(defaultButton, event); } } return true;}function WebForm_GetScrollX() { if (__nonMSDOMBrowser)

Timestamp	Bytes transferred	Direction	Data
2024-07-22 17:32:29 UTC	572	OUT	GET /ScriptResource.axd?d=5obXSffBrxKutWSM22_pc7pcwCPAoEDMMxba-3OLRteC_0xzaX0A_FPG2nWf2LmXV0_rWDQ8FIN9EmE74nFkz7YodIXt4M965BjNYp7d6d0MJLH8joaq6AEYE7UVUcCvvhhr6XMWP6xqcLac9mpAJSUTlNa0xHCRubif0OQeM8lfF0mXakbsEBNu2W2vTd7g0&t=74258c30 HTTP/1.1 Host: uconn-my.sharepoint.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-22 17:32:29 UTC	783	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 9984 Content-Type: application/x-javascript Content-Encoding: gzip Expires: Tue, 22 Jul 2025 17:32:29 GMT Last-Modified: Mon, 22 Jul 2024 17:32:29 GMT P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,2102272,0,360,472367,0,1458444,39 X-AspNet-Version: 4.0.30319 SPRequestDuration: 7 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25103 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 2C6F895EC88247E486A0DBDE61D4ED68 Ref B: EWR311000103047 Ref C: 2024-07-22T17:32:29Z Date: Mon, 22 Jul 2024 17:32:28 GMT Connection: close
2024-07-22 17:32:29 UTC	2021	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e5 7d 6b 73 db 48 92 e0 f7 89 98 ff 40 61 7b 65 62 55 86 e4 de bd b8 08 d2 68 85 5e 9e d6 9e 5f 61 cb d3 33 21 6b 15 05 a0 48 42 02 01 1a 00 6d ab 25 fe b2 fb b0 3f 69 ff c2 65 d6 0b 55 40 81 a4 e4 9e bd 8b b8 89 1e 99 a8 77 65 66 65 66 65 66 55 fd d7 ff fe cf fd fd e7 4f fe df 9f ff b4 bf 3f 38 29 16 77 65 3a 9d d5 83 e1 89 3f 78 93 c6 65 51 15 93 1a d2 cb 45 51 d2 3a 2d f2 60 70 94 65 03 5e a8 1a 94 ac 62 e5 57 96 04 58 fb 07 fb d6 bd 1d dd d0 ef bf b1 e8 55 51 ce ab e0 a6 fa f3 9f 2e ee 16 2c b8 2e d9 34 ad 6a 56 7e 8c cb 74 51 0f bd be f2 1e b9 b4 f3 60 f0 8c a7 db c9 1f 59 99 d2 2c fd 5d cc aa 9b ff 96 d5 df 8a f2 d6 91 73 52 cc 17 45 ce f2 fa 4d 91 b0 0c 0b 5c f9 63 3e 48 35 c6 b7 74 ce aa 05 8d d9 d0 fb 78 57 05 6a 74 Data Ascii: }ksH@a{ebUh^_a3!kHBm%?ieU@wefefefUO?8)we:?xeQEQ:-`pe^bWXUQ.,.4jV~tQ`Y,]sREM\c>H5txWjt
2024-07-22 17:32:29 UTC	7963	IN	Data Raw: 0e 9d 85 7e e3 8a c0 a7 1c f5 1f 17 02 4c 1a 91 8a 82 65 b0 52 24 71 51 bc 02 b6 dd 46 7a 91 65 50 99 a3 d0 c2 79 59 c4 a8 ab e4 53 b9 04 2d 38 08 62 11 52 9d 55 a1 76 19 d6 25 cd 2b 24 ae 57 29 cb 12 40 ad 77 7d fd d7 f3 b3 df 3e 5e 1c 5d 9c 9d bd 3d f9 f0 f7 f7 17 67 a7 c0 e7 8c e4 57 e7 67 af 4f 4f de 7d 7a 7b e1 29 42 c0 dd 22 fa db ab 70 ff 3f 86 f8 f1 b0 00 1d e3 5b 51 26 0f b3 34 49 58 fe 50 81 52 14 cf 1e 6a 96 3d 2c cb ec 81 cd 81 93 3e e4 cb 79 c4 ca 07 18 c3 94 3d c4 45 56 94 0f b8 1a 51 33 e2 3f 1e e6 00 8a d9 c3 37 c6 6e 1f 74 22 fe 78 9e 15 31 cd fc 9f f6 d3 8d 2c c8 b4 41 5e 73 7f 24 1a 0c 25 5a 5e a7 b6 cb a9 31 ed 48 53 a3 f9 a1 b5 91 b3 56 0b 63 db 95 c9 0b 0b 43 72 0a 8a ef 91 89 ee 4d fe ad 9d 50 1a 20 61 95 5e 47 86 7f da e1 6c 72 4d Data Ascii: ~LeR$qQFzePyYS-8bRUv%+$W)@w}>^]=gWgOO}z{)B"p?[Q&4IXPRj=,>y=EVQ3?7nt"x1,A^s$%Z^1HSVcCrMP a^GlrM

Timestamp	Bytes transferred	Direction	Data
2024-07-22 17:32:29 UTC	494	OUT	GET /WebResource.axd?d=4NuAIey-1eXTfkmwTY3x91AumVU41ZLXV-ngbxqay8EH9oB-ZoIb1xeI6WPlgpVrLZIQx9e3BaGa57iiGEphJoZDFLyxRnIQenOP4SDscZ01&t=638533172441064469 HTTP/1.1 Host: uconn-my.sharepoint.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-22 17:32:30 UTC	753	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 23063 Content-Type: application/x-javascript Expires: Tue, 22 Jul 2025 05:20:16 GMT Last-Modified: Fri, 07 Jun 2024 07:34:04 GMT P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,525568,0,0,515,0,26271,241 X-AspNet-Version: 4.0.30319 SPRequestDuration: 5 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25103 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 3AE4E3DBC8C6412EA00F71E2E6CBBC0B Ref B: EWR311000108039 Ref C: 2024-07-22T17:32:30Z Date: Mon, 22 Jul 2024 17:32:29 GMT Connection: close
2024-07-22 17:32:30 UTC	3417	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 57 65 62 46 6f 72 6d 5f 50 6f 73 74 42 61 63 6b 4f 70 74 69 6f 6e 73 28 65 76 65 6e 74 54 61 72 67 65 74 2c 20 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 2c 20 76 61 6c 69 64 61 74 69 6f 6e 2c 20 76 61 6c 69 64 61 74 69 6f 6e 47 72 6f 75 70 2c 20 61 63 74 69 6f 6e 55 72 6c 2c 20 74 72 61 63 6b 46 6f 63 75 73 2c 20 63 6c 69 65 6e 74 53 75 62 6d 69 74 29 20 7b 0d 0a 20 20 20 20 74 68 69 73 2e 65 76 65 6e 74 54 61 72 67 65 74 20 3d 20 65 76 65 6e 74 54 61 72 67 65 74 3b 0d 0a 20 20 20 20 74 68 69 73 2e 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 20 3d 20 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 3b 0d 0a 20 20 20 20 74 68 69 73 2e 76 61 6c 69 64 61 74 69 6f 6e 20 3d 20 76 61 6c 69 64 61 74 69 6f 6e 3b 0d 0a 20 20 20 20 74 68 69 73 2e 76 61 6c Data Ascii: function WebForm_PostBackOptions(eventTarget, eventArgument, validation, validationGroup, actionUrl, trackFocus, clientSubmit) { this.eventTarget = eventTarget; this.eventArgument = eventArgument; this.validation = validation; this.val
2024-07-22 17:32:30 UTC	8192	IN	Data Raw: 62 61 63 6b 43 6f 6d 70 6c 65 74 65 3b 0d 0a 20 20 20 20 20 20 20 20 63 61 6c 6c 62 61 63 6b 2e 78 6d 6c 52 65 71 75 65 73 74 20 3d 20 78 6d 6c 52 65 71 75 65 73 74 3b 0d 0a 20 20 20 20 20 20 20 20 2f 2f 20 65 2e 67 2e 20 68 74 74 70 3a 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 61 63 74 69 6f 6e 20 3d 20 74 68 65 46 6f 72 6d 2e 61 63 74 69 6f 6e 20 7c 7c 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 2c 20 66 72 61 67 6d 65 6e 74 49 6e 64 65 78 20 3d 20 61 63 74 69 6f 6e 2e 69 6e 64 65 78 4f 66 28 27 23 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 66 72 61 67 6d 65 6e 74 49 6e 64 65 78 20 21 3d 3d 20 2d 31 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 63 74 69 6f 6e 20 3d 20 61 63 74 69 6f 6e 2e 73 75 62 73 Data Ascii: backComplete; callback.xmlRequest = xmlRequest; // e.g. http: var action = theForm.action \|\| document.location.pathname, fragmentIndex = action.indexOf('#'); if (fragmentIndex !== -1) { action = action.subs
2024-07-22 17:32:30 UTC	4144	IN	Data Raw: 6e 4d 53 44 4f 4d 42 72 6f 77 73 65 72 20 3d 20 28 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 61 70 70 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 27 65 78 70 6c 6f 72 65 72 27 29 20 3d 3d 20 2d 31 29 3b 0d 0a 76 61 72 20 5f 5f 74 68 65 46 6f 72 6d 50 6f 73 74 44 61 74 61 20 3d 20 22 22 3b 0d 0a 76 61 72 20 5f 5f 74 68 65 46 6f 72 6d 50 6f 73 74 43 6f 6c 6c 65 63 74 69 6f 6e 20 3d 20 6e 65 77 20 41 72 72 61 79 28 29 3b 0d 0a 76 61 72 20 5f 5f 63 61 6c 6c 62 61 63 6b 54 65 78 74 54 79 70 65 73 20 3d 20 2f 5e 28 74 65 78 74 7c 70 61 73 73 77 6f 72 64 7c 68 69 64 64 65 6e 7c 73 65 61 72 63 68 7c 74 65 6c 7c 75 72 6c 7c 65 6d 61 69 6c 7c 6e 75 6d 62 65 72 7c 72 61 6e 67 65 7c 63 6f 6c 6f 72 7c 64 61 74 65 74 69 6d Data Ascii: nMSDOMBrowser = (window.navigator.appName.toLowerCase().indexOf('explorer') == -1);var __theFormPostData = "";var __theFormPostCollection = new Array();var __callbackTextTypes = /^(text\|password\|hidden\|search\|tel\|url\|email\|number\|range\|color\|datetim
2024-07-22 17:32:30 UTC	7310	IN	Data Raw: 20 20 20 20 20 20 20 20 64 65 66 61 75 6c 74 42 75 74 74 6f 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 61 6c 6c 5b 74 61 72 67 65 74 5d 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 64 65 66 61 75 6c 74 42 75 74 74 6f 6e 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 57 65 62 46 6f 72 6d 5f 53 69 6d 75 6c 61 74 65 43 6c 69 63 6b 28 64 65 66 61 75 6c 74 42 75 74 74 6f 6e 2c 20 65 76 65 6e 74 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 20 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 57 65 62 46 6f 72 6d 5f 47 65 74 53 63 72 6f 6c 6c 58 28 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 5f 5f 6e 6f 6e 4d 53 44 4f 4d 42 72 6f 77 73 65 72 29 20 7b 0d Data Ascii: defaultButton = document.all[target]; } if (defaultButton) { return WebForm_SimulateClick(defaultButton, event); } } return true;}function WebForm_GetScrollX() { if (__nonMSDOMBrowser) {

Timestamp	Bytes transferred	Direction	Data
2024-07-22 17:32:30 UTC	728	OUT	GET /_layouts/15/images/favicon.ico?rev=47 HTTP/1.1 Host: uconn-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://uconn-my.sharepoint.com/:o:/g/personal/lisa_frank_uconn_edu/EryHWVeqJnhDu2fh5Y44MT4BNS9VFRX04eNZiwiwvmi1JQ?e=5%3amqjzyy&at=9 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-22 17:32:30 UTC	734	IN	HTTP/1.1 200 OK Cache-Control: max-age=31536000 Content-Length: 7886 Content-Type: image/x-icon Last-Modified: Sat, 13 Jul 2024 03:39:38 GMT Accept-Ranges: bytes ETag: "e5347e49d6d4da1:0" P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,525568,0,0,1226587,0,350371,38 SPRequestDuration: 3 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25103 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 9BFA271592824B2A8E5EEF7B140610A9 Ref B: EWR311000104053 Ref C: 2024-07-22T17:32:30Z Date: Mon, 22 Jul 2024 17:32:30 GMT Connection: close
2024-07-22 17:32:30 UTC	5	IN	Data Raw: 00 00 01 00 03 Data Ascii:
2024-07-22 17:32:30 UTC	7881	IN	Data Raw: 00 20 20 00 00 01 00 20 00 a8 10 00 00 36 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 de 10 00 00 10 10 00 00 01 00 20 00 68 04 00 00 66 1a 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 c6 37 30 d0 c6 37 af d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 af d0 c6 37 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 6 hf( @ 7077777770

Timestamp	Bytes transferred	Direction	Data
2024-07-22 17:32:31 UTC	384	OUT	GET /_layouts/15/images/favicon.ico?rev=47 HTTP/1.1 Host: uconn-my.sharepoint.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-22 17:32:31 UTC	733	IN	HTTP/1.1 200 OK Cache-Control: max-age=31536000 Content-Length: 7886 Content-Type: image/x-icon Last-Modified: Sat, 13 Jul 2024 03:39:38 GMT Accept-Ranges: bytes ETag: "e5347e49d6d4da1:0" P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,525568,3,0,609594,0,525568,39 SPRequestDuration: 4 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25103 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 2467984BA1BD4199BCAAEF52C5F5E543 Ref B: EWR311000103021 Ref C: 2024-07-22T17:32:31Z Date: Mon, 22 Jul 2024 17:32:30 GMT Connection: close
2024-07-22 17:32:31 UTC	3131	IN	Data Raw: 00 00 01 00 03 00 20 20 00 00 01 00 20 00 a8 10 00 00 36 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 de 10 00 00 10 10 00 00 01 00 20 00 68 04 00 00 66 1a 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 c6 37 30 d0 c6 37 af d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 af d0 c6 37 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 6 hf( @ 7077777770
2024-07-22 17:32:31 UTC	4755	IN	Data Raw: 6c 03 ff 70 6c 03 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 65 61 03 70 65 61 03 ff 65 61 03 ff 65 61 03 ff 65 61 03 ff 65 61 03 ff 65 61 03 ff 65 61 03 ff 65 61 03 ff 65 61 03 ff 65 61 03 ff 65 61 03 ff 67 63 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 70 6c 03 30 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff Data Ascii: lpleapeaeaeaeaeaeaeaeaeaeaeagcplplplplplplplppl0plplplplplplplplplplplplplplplplpl

Timestamp	Bytes transferred	Direction	Data
2024-07-22 17:32:38 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=99mkac2chMnpP2c&MD=HAY1hrLU HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-07-22 17:32:39 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 8e4544d0-0ec7-498b-a648-26b65d3f99c4 MS-RequestId: 20e3bb85-7754-4529-8cdd-4c07aa9adb46 MS-CV: eCLfk+XPMEWKaqoS.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 22 Jul 2024 17:32:38 GMT Connection: close Content-Length: 24490
2024-07-22 17:32:39 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-07-22 17:32:39 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Timestamp	Bytes transferred	Direction	Data
2024-07-22 17:32:43 UTC	879	OUT	GET /personal/lisa_frank_uconn_edu HTTP/1.1 Host: uconn-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://uconn-my.sharepoint.com/:o:/g/personal/lisa_frank_uconn_edu/EryHWVeqJnhDu2fh5Y44MT4BNS9VFRX04eNZiwiwvmi1JQ?e=5%3amqjzyy&at=9 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: WSS_FullScreenMode=false
2024-07-22 17:32:43 UTC	2078	IN	HTTP/1.1 302 Found Content-Length: 256 Content-Type: text/html; charset=utf-8 Location: https://uconn-my.sharepoint.com/personal/lisa_frank_uconn_edu/_layouts/15/Authenticate.aspx?Source=%2Fpersonal%2Flisa%5Ffrank%5Fuconn%5Fedu P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,1051136,39,40,943617,0,646292,39 X-SharePointHealthScore: 3 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: d8da3ea1-c0b8-5000-f014-cbc837af6bde request-id: d8da3ea1-c0b8-5000-f014-cbc837af6bde MS-CV: oT7a2LjAAFDwFMvIN69r3g.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=00000000-0000-0000-0000-000000000000&destinationEndpoint=Edge-Prod-EWR31r5d&frontEnd=AFD&RemoteIP=8.46.123.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 37 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25103 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: DF0E9428C8214860B3FE6407516330C2 Ref B: EWR311000108037 Ref C: 2024-07-22T17:32:43Z Date: Mon, 22 Jul 2024 17:32:42 GMT Connection: close
2024-07-22 17:32:43 UTC	256	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 63 6f 6e 6e 2d 6d 79 2e 73 68 61 72 65 70 6f 69 6e 74 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c 2f 6c 69 73 61 5f 66 72 61 6e 6b 5f 75 63 6f 6e 6e 5f 65 64 75 2f 5f 6c 61 79 6f 75 74 73 2f 31 35 2f 41 75 74 68 65 6e 74 69 63 61 74 65 2e 61 73 70 78 3f 53 6f 75 72 63 65 3d 25 32 46 70 65 72 73 6f 6e 61 6c 25 32 46 6c 69 73 61 25 35 46 66 72 61 6e 6b 25 35 46 75 63 6f 6e 6e 25 35 46 65 64 75 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://uconn-my.sharepoint.com/personal/lisa_frank_uconn_edu/_layouts/15/Authenticate.aspx?Source=%2Fpersonal%2Flisa%5Ffrank%5Fuconn%5Fedu">here</a>.</h2></body></html>

Timestamp	Bytes transferred	Direction	Data
2024-07-22 17:32:44 UTC	957	OUT	GET /personal/lisa_frank_uconn_edu/_layouts/15/Authenticate.aspx?Source=%2Fpersonal%2Flisa%5Ffrank%5Fuconn%5Fedu HTTP/1.1 Host: uconn-my.sharepoint.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://uconn-my.sharepoint.com/:o:/g/personal/lisa_frank_uconn_edu/EryHWVeqJnhDu2fh5Y44MT4BNS9VFRX04eNZiwiwvmi1JQ?e=5%3amqjzyy&at=9 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: WSS_FullScreenMode=false
2024-07-22 17:32:44 UTC	1769	IN	HTTP/1.1 302 Found Cache-Control: private Content-Length: 298 Content-Type: text/html; charset=utf-8 Location: /_forms/default.aspx?ReturnUrl=%2fpersonal%2flisa_frank_uconn_edu%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fpersonal%252Flisa%255Ffrank%255Fuconn%255Fedu&Source=cookie P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: RpsContextCookie=U291cmNlPSUyRnBlcnNvbmFsJTJGbGlzYSU1RmZyYW5rJTVGdWNvbm4lNUZlZHU=; expires=Mon, 22-Jul-2024 17:42:44 GMT; path=/; SameSite=None; secure; HttpOnly X-NetworkStatistics: 0,2102272,0,198,305121,0,1152632,38 X-SharePointHealthScore: 1 X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: d9da3ea1-4007-6000-1cba-04ffe24e9ac8 request-id: d9da3ea1-4007-6000-1cba-04ffe24e9ac8 MS-CV: oT7a2QdAAGAcugT/4k6ayA.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=00000000-0000-0000-0000-000000000000&destinationEndpoint=Edge-Prod-EWR31r5d&frontEnd=AFD&RemoteIP=8.46.123.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 SPRequestDuration: 15 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25103 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 7FB76CBD74514B4E8BF4B8DB6222BDD9 Ref B: EWR311000108027 Ref C: 2024-07-22T17:32:44Z Date: Mon, 22 Jul 2024 17:32:44 GMT Connection: close
2024-07-22 17:32:44 UTC	298	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 5f 66 6f 72 6d 73 2f 64 65 66 61 75 6c 74 2e 61 73 70 78 3f 52 65 74 75 72 6e 55 72 6c 3d 25 32 66 70 65 72 73 6f 6e 61 6c 25 32 66 6c 69 73 61 5f 66 72 61 6e 6b 5f 75 63 6f 6e 6e 5f 65 64 75 25 32 66 5f 6c 61 79 6f 75 74 73 25 32 66 31 35 25 32 66 41 75 74 68 65 6e 74 69 63 61 74 65 2e 61 73 70 78 25 33 66 53 6f 75 72 63 65 25 33 64 25 32 35 32 46 70 65 72 73 6f 6e 61 6c 25 32 35 32 46 6c 69 73 61 25 32 35 35 46 66 72 61 6e 6b 25 32 35 35 46 75 63 6f 6e 6e 25 32 35 35 46 65 64 75 26 61 6d 70 3b 53 6f 75 72 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/_forms/default.aspx?ReturnUrl=%2fpersonal%2flisa_frank_uconn_edu%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fpersonal%252Flisa%255Ffrank%255Fuconn%255Fedu&Sour

Timestamp	Bytes transferred	Direction	Data
2024-07-22 17:32:45 UTC	1109	OUT	GET /_forms/default.aspx?ReturnUrl=%2fpersonal%2flisa_frank_uconn_edu%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fpersonal%252Flisa%255Ffrank%255Fuconn%255Fedu&Source=cookie HTTP/1.1 Host: uconn-my.sharepoint.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://uconn-my.sharepoint.com/:o:/g/personal/lisa_frank_uconn_edu/EryHWVeqJnhDu2fh5Y44MT4BNS9VFRX04eNZiwiwvmi1JQ?e=5%3amqjzyy&at=9 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: WSS_FullScreenMode=false; RpsContextCookie=U291cmNlPSUyRnBlcnNvbmFsJTJGbGlzYSU1RmZyYW5rJTVGdWNvbm4lNUZlZHU=
2024-07-22 17:32:45 UTC	3674	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 881 Content-Type: text/html; charset=utf-8 Expires: -1 Location: https://login.microsoftonline.com:443/17f1a87e-2a25-4eaa-b9df-9d439034b080/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=6B44686139FB2C2E7FCFF0222F8BF48AA3799D5D159F685C%2D55AF5ECA5938483B569883E8EDF79F84EA18B0A54A71D1F979715BE25D785466&redirect%5Furi=https%3A%2F%2Fuconn%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=d9da3ea1%2D2035%2D6000%2D1cba%2D0d4b28d323a4 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: nSGt-6B44686139FB2C2E7FCFF0222F8BF48AA3799D5D159F685C=gYEwRjQ0RTE5NzlFMENENzg1RkFCOUFBNzY3NzQ1MUUyNTZCMTg0NjFBMThEREQwQTUxMDZCNDQ2ODYxMzlGQjJDMkU3RkNGRjAyMjJGOEJGNDhBQTM3OTlENUQxNTlGNjg1QxIxMzM2NjE0MzQwNTI5Nzk0MDgXdWNvbm4tbXkuc2hhcmVwb2ludC5jb21l7vZvaMdfj/t+PxvI71mw0DmKee17Gx1UoISR/2Op3e+hnHP6VX138d+kzQAKkECtibJ9HgODcjavcUXMCxJmP5SOMuJaFqNjbhcmqoBtp8o8wgPVGvzxIR4tKNUkhGO63dtlwpxLAqv6g6kqmVHd2bMQY3aKf3NheJw4YmhO6UMUVCRBddmhX2Gz5/Z1eP3Oq06slRAN9RBnkm1jFXC+aPYtQumx+4itnaP7SRABuHZafklhbOX2xyqYqZ3oYacbBNIcatmRbKt0VbJdz0dkklyayBKXENo5jzbqNxD9FrVX7+s4E7zSEIye8IJr/GVVtWUu7D2BOftS1BqsT8p+jwAAAA==; expires=Mon, 22-Jul-2024 17:36:45 GMT; path=/; SameSite=None; secure; HttpOnly Set-Cookie: nSGt-6B44686139FB2C2E7FCFF0222F8BF48AA3799D5D159F685C=; expires=Thu, 01-Jan-1970 08:00:00 GMT; path=/; SameSite=None; Partitioned; secure; HttpOnly Set-Cookie: RpsContextCookie=U291cmNlPSUyRnBlcnNvbmFsJTJGbGlzYSU1RmZyYW5rJTVGdWNvbm4lNUZlZHUmUHJldmlvdXNSZXF1ZXN0Q29ycmVsYXRpb25JZD1kOWRhM2VhMSUyRDIwMzUlMkQ2MDAwJTJEMWNiYSUyRDBkNGIyOGQzMjNhNCZSZXR1cm5Vcmw9JTJGcGVyc29uYWwlMkZsaXNhJTVGZnJhbmslNUZ1Y29ubiU1RmVkdSUyRiU1RmxheW91dHMlMkYxNSUyRkF1dGhlbnRpY2F0ZSUyRWFzcHglM0ZTb3VyY2UlM0QlMjUyRnBlcnNvbmFsJTI1MkZsaXNhJTI1NUZmcmFuayUyNTVGdWNvbm4lMjU1RmVkdQ==; expires=Mon, 22-Jul-2024 17:42:45 GMT; path=/; SameSite=None; secure; HttpOnly Set-Cookie: RpsContextCookie=; expires=Thu, 01-Jan-1970 08:00:00 GMT; path=/; SameSite=None; Partitioned; secure; HttpOnly X-NetworkStatistics: 0,2102272,41,121,2397354,0,1175121,39 X-SharePointHealthScore: 1 X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: d9da3ea1-2035-6000-1cba-0d4b28d323a4 request-id: d9da3ea1-2035-6000-1cba-0d4b28d323a4 MS-CV: oT7a2TUgAGAcug1LKNMjpA.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=17f1a87e-2a25-4eaa-b9df-9d439034b080&destinationEndpoint=Edge-Prod-EWR31r5b&frontEnd=AFD&RemoteIP=8.46.123.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 SPRequestDuration: 70 SPIisLatency: 0 Include-Referred-Token-Binding-ID: true X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25103 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 0013028C613F4D19BC76CF7709C2EAF4 Ref B: EWR311000103037 Ref C: 2024-07-22T17:32:45Z Date: Mon, 22 Jul 2024 17:32:44 GMT Connection: close
2024-07-22 17:32:45 UTC	881	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 6f 6e 6c 69 6e 65 2e 63 6f 6d 3a 34 34 33 2f 31 37 66 31 61 38 37 65 2d 32 61 32 35 2d 34 65 61 61 2d 62 39 64 66 2d 39 64 34 33 39 30 33 34 62 30 38 30 2f 6f 61 75 74 68 32 2f 61 75 74 68 6f 72 69 7a 65 3f 63 6c 69 65 6e 74 25 35 46 69 64 3d 30 30 30 30 30 30 30 33 25 32 44 30 30 30 30 25 32 44 30 66 66 31 25 32 44 63 65 30 30 25 32 44 30 30 30 30 30 30 30 30 30 30 30 30 26 61 6d 70 3b 72 65 73 70 6f 6e 73 65 25 35 46 6d 6f 64 65 3d 66 6f 72 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://login.microsoftonline.com:443/17f1a87e-2a25-4eaa-b9df-9d439034b080/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=for

Timestamp	Bytes transferred	Direction	Data
2024-07-22 17:32:46 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-22 17:32:47 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF4C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=254227 Date: Mon, 22 Jul 2024 17:32:46 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-07-22 17:32:47 UTC	633	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_sw-M8KkV3_nBot-G1ImRcw2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-22 17:32:47 UTC	818	IN	HTTP/1.1 200 OK Date: Mon, 22 Jul 2024 17:32:47 GMT Content-Type: application/x-javascript Content-Length: 49696 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 24 May 2024 22:13:21 GMT ETag: 0x8DC7C3EB8EDBF94 x-ms-request-id: b97cb715-c01e-0064-33b9-d632ce000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240722T173247Z-15b94bb6ff9l65tv1z07gzckqw0000000h4g0000000045hn x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-07-22 17:32:47 UTC	15566	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd eb 5b e3 38 d2 38 fa fd fd 2b 82 77 0f 13 4f 4c c8 05 68 70 da 9d 5f 1a e8 6e 66 80 30 24 cc e5 05 96 c7 89 15 f0 74 b0 b3 b6 c3 65 20 e7 6f 3f 75 91 6c d9 71 e8 9e dd f3 9c 2f 67 2e c4 96 4a b2 54 aa 2a 55 95 4a d2 e6 8f 6b ff 53 f9 b1 b2 f1 fd ff 54 06 c3 de f9 b0 d2 ff 54 19 7e 39 3a 3f a8 9c c1 db 1f 95 d3 fe f0 68 ff f0 fb eb c1 8f e2 ff c3 3b 3f ae 4c fc a9 a8 c0 ef c8 8d 85 57 09 83 4a 18 55 fc 60 1c 46 b3 30 72 13 11 57 ee e1 6f e4 bb d3 ca 24 0a ef 2b c9 9d a8 cc a2 f0 4f 31 4e e2 ca d4 8f 13 28 34 12 d3 f0 b1 52 85 ea 22 af 72 e6 46 c9 73 e5 e8 cc ac 43 fd 02 6a f3 6f fd 00 4a 8f c3 d9 33 3c df 25 95 20 4c fc b1 a8 b8 81 47 b5 4d e1 25 88 45 65 1e 78 22 aa 3c de f9 e3 bb ca 89 3f 8e c2 38 9c 24 95 48 8c 85 ff Data Ascii: [88+wOLhp_nf0$te o?ulq/g.JT*UJkSTT~9:?h;?LWJU`F0rWo$+O1N(4R"rFsCjoJ3<% LGM%Eex"<?8$H
2024-07-22 17:32:47 UTC	16384	IN	Data Raw: 97 54 f3 53 f3 32 8c 02 fa 7d e9 7a 52 90 4a da 17 b0 b9 c2 43 2e b7 f6 3f f6 cf 11 8a 63 a5 49 a4 a8 49 28 d5 0d 41 59 e3 36 4b e1 be dd c8 64 fa 76 93 fc 38 74 42 0b 75 16 78 23 72 79 77 a4 26 b6 6d 43 64 2f 6c 19 d9 74 94 90 61 91 60 34 f0 86 29 63 e5 69 ae 49 b5 65 76 82 3a 1d fc 74 11 80 41 e2 c1 88 1c 3e e1 11 1b 00 db 07 eb f8 4f 26 f5 dc 61 9e e2 d2 a0 a3 84 8c eb 6a c9 61 90 a2 83 77 39 02 26 c1 28 09 27 7c 4e 1a 9d a2 af 9d 9a 96 7e ab 22 0f 8f ad 44 ea 4b 76 c5 a8 e1 89 8b b1 50 0a 8c f6 11 f3 45 9e 51 b5 30 ad 06 5d 8b 00 a8 29 bd 0a 6f e9 e0 39 ed a6 b3 48 ab 31 b4 7c bc 95 21 bd e0 ae 6a 9a 75 94 ac 94 b1 aa 11 21 de 1c 60 e2 45 42 a6 f9 06 6e b7 4d 8b 4e 5d 69 e0 81 e6 78 0e 99 e5 32 c6 b3 53 2c 53 b4 e1 99 e6 78 24 cb dc f1 f1 84 18 32 00 Data Ascii: TS2}zRJC.?cII(AY6Kdv8tBux#ryw&mCd/lta`4)ciIev:tA>O&ajaw9&('\|N~"DKvPEQ0])o9H1\|!ju!`EBnMN]ix2S,Sx$2
2024-07-22 17:32:47 UTC	16384	IN	Data Raw: f2 4f 5b d4 a4 9d 57 5a a4 b5 86 e8 cd 7e 78 25 c4 db 48 a6 01 0e cf 44 6d 1e 41 54 1d 69 1d 00 32 87 8c 70 54 bd c4 49 e5 f3 7a f4 57 6d 21 e3 e3 28 9f c9 5e 7b a7 de e3 ad 96 b5 b6 5a 64 aa 0d c1 66 a8 dd 1d a4 50 a3 73 c5 d5 f6 8a 7f d5 6d e8 af f9 78 76 d2 ae b3 65 79 eb 8f 56 52 89 bd 02 4b 5d 8b 6c 9c ec da 22 a6 62 47 ab 46 ba 85 c4 37 58 97 52 1d 0f 18 dc 56 31 6f 99 71 74 e2 b7 0e a2 fa 41 5f aa d0 ba 8c f5 ac d7 2c 58 8e 74 a6 4d 9d 2b 73 d2 d0 2d b5 9f 06 9c 84 b6 c1 2a 36 cc 8a b2 40 3a 7e d3 40 df fa d7 2a 2d 92 09 47 3a e8 0b d7 be f2 dc 63 53 ac 35 2d 49 8f 5e 80 73 3e ff 1e c3 a9 d8 51 26 77 e7 44 62 6c ac 1b 24 0b 0b f9 0f 12 d7 79 5f 12 5d 51 5f f0 07 d3 15 f8 fc c1 93 97 cf 14 e1 42 9e 28 10 3c 50 78 90 c6 aa 69 d9 ec 9a 49 32 ad 43 ec Data Ascii: O[WZ~x%HDmATi2pTIzWm!(^{ZdfPsmxveyVRK]l"bGF7XRV1oqtA_,XtM+s-6@:~@-G:cS5-I^s>Q&wDbl$y_]Q_B(<PxiI2C
2024-07-22 17:32:47 UTC	1362	IN	Data Raw: eb da 58 47 f9 9b 46 cc 13 08 64 da 0c 9a 50 9e 2d 6a 50 48 14 af c7 23 18 0e a7 3e 06 23 48 88 f9 87 13 83 84 72 88 31 2d cc 3c 9f da 66 8d df 09 4d 5e b3 bb 47 09 c7 18 f5 f7 d6 55 7a 5f b9 01 6e 11 07 0a 1c d9 f5 fb 05 7b 3f 19 17 80 be 98 57 2d 92 59 26 82 49 8a 36 e5 8b 2b 65 1e 58 2d 18 ee d3 0b 52 db 21 24 56 0e 21 e2 92 4b dc 98 a0 69 b1 4d c6 67 27 5e af e9 76 fb ae a6 2b 07 b7 b7 6e d4 73 94 77 ef 01 78 8f fb e2 e0 00 6d 0e 0e 2f 22 8c 8e f2 5a 17 03 fa 01 12 96 aa 1c 75 70 1e 3d 08 df b8 6b 19 a2 a0 77 dd 99 09 0b 4c 4a 24 3d 28 9b 8d 1a b9 27 74 ee 1c d4 5d 79 e2 4a 86 09 e5 e4 ce 89 49 c3 9b d1 3c 2d ca 8a 63 bb c6 d9 d8 03 ef 19 8b 3a 1e 44 e5 fe 7d 67 b9 cc a6 d9 32 c9 17 67 17 e9 ec 2c 39 bb 98 5e 4c 3f 5e 9e 2f a8 2d f9 32 fd 98 3a ec 6c Data Ascii: XGFdP-jPH#>#Hr1-<fM^GUz_n{?W-Y&I6+eX-R!$V!KiMg'^v+nswxm/"Zup=kwLJ$=('t]yJI<-c:D}g2g,9^L?^/-2:l

Timestamp	Bytes transferred	Direction	Data
2024-07-22 17:32:47 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-22 17:32:48 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=254226 Date: Mon, 22 Jul 2024 17:32:48 GMT Content-Length: 55 Connection: close X-CID: 2
2024-07-22 17:32:48 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-07-22 17:32:50 UTC	660	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_qzvqnltrxpy99ajspyxbgq2.css HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-22 17:32:50 UTC	734	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1575841 Cache-Control: public, max-age=31536000 Content-MD5: SJgdPPV+fFjKfj6FHvk1Tg== Content-Type: text/css Date: Mon, 22 Jul 2024 17:32:50 GMT Etag: 0x8DC9BAA0E5931F9 Last-Modified: Wed, 03 Jul 2024 21:49:46 GMT Server: ECAcc (lhc/794C) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 6c7d298f-b01e-00dc-1d08-ce9a59000000 x-ms-version: 2009-09-19 Content-Length: 113401 Connection: close
2024-07-22 17:32:50 UTC	16383	IN	Data Raw: 2f 2a 21 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2a 2f 2f 2a 21 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 Data Ascii: /! Copyright (C) Microsoft Corporation. All rights reserved. //*!------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------This file is based on or incorporates material from the projects listed
2024-07-22 17:32:50 UTC	16383	IN	Data Raw: 73 2d 31 2c 2e 63 6f 6c 2d 78 73 2d 32 2c 2e 63 6f 6c 2d 78 73 2d 33 2c 2e 63 6f 6c 2d 78 73 2d 34 2c 2e 63 6f 6c 2d 78 73 2d 35 2c 2e 63 6f 6c 2d 78 73 2d 36 2c 2e 63 6f 6c 2d 78 73 2d 37 2c 2e 63 6f 6c 2d 78 73 2d 38 2c 2e 63 6f 6c 2d 78 73 2d 39 2c 2e 63 6f 6c 2d 78 73 2d 31 30 2c 2e 63 6f 6c 2d 78 73 2d 31 31 2c 2e 63 6f 6c 2d 78 73 2d 31 32 2c 2e 63 6f 6c 2d 78 73 2d 31 33 2c 2e 63 6f 6c 2d 78 73 2d 31 34 2c 2e 63 6f 6c 2d 78 73 2d 31 35 2c 2e 63 6f 6c 2d 78 73 2d 31 36 2c 2e 63 6f 6c 2d 78 73 2d 31 37 2c 2e 63 6f 6c 2d 78 73 2d 31 38 2c 2e 63 6f 6c 2d 78 73 2d 31 39 2c 2e 63 6f 6c 2d 78 73 2d 32 30 2c 2e 63 6f 6c 2d 78 73 2d 32 31 2c 2e 63 6f 6c 2d 78 73 2d 32 32 2c 2e 63 6f 6c 2d 78 73 2d 32 33 2c 2e 63 6f 6c 2d 78 73 2d 32 34 7b 66 6c 6f 61 74 3a Data Ascii: s-1,.col-xs-2,.col-xs-3,.col-xs-4,.col-xs-5,.col-xs-6,.col-xs-7,.col-xs-8,.col-xs-9,.col-xs-10,.col-xs-11,.col-xs-12,.col-xs-13,.col-xs-14,.col-xs-15,.col-xs-16,.col-xs-17,.col-xs-18,.col-xs-19,.col-xs-20,.col-xs-21,.col-xs-22,.col-xs-23,.col-xs-24{float:
2024-07-22 17:32:50 UTC	16383	IN	Data Raw: 72 67 69 6e 2d 6c 65 66 74 3a 39 35 2e 38 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 32 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 30 25 7d 7d 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 62 6f 72 64 65 72 3a 30 3b 6d 69 6e 2d 77 69 64 74 68 3a 30 7d 6c 65 67 65 6e 64 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 30 7d 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 65 61 72 63 68 22 5d 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 Data Ascii: rgin-left:95.83333%}.col-xl-offset-24{margin-left:100%}}fieldset{padding:0;margin:0;border:0;min-width:0}legend{display:block;width:100%;padding:0;border:0}label{display:inline-block;max-width:100%}input[type="search"]{-webkit-box-sizing:border-box;-moz-b
2024-07-22 17:32:50 UTC	16383	IN	Data Raw: 66 6c 6f 77 2d 78 3a 61 75 74 6f 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 2e 30 31 25 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 35 33 39 70 78 29 7b 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 68 69 64 64 65 6e 3b 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 3a 2d 6d 73 2d 61 75 74 6f 68 69 64 69 6e 67 2d 73 63 72 6f 6c 6c 62 61 72 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 68 2c 2e 74 61 Data Ascii: flow-x:auto;min-height:.01%}@media screen and (max-width:539px){.table-responsive{width:100%;margin-bottom:15px;overflow-y:hidden;-ms-overflow-style:-ms-autohiding-scrollbar}.table-responsive>.table{margin-bottom:0}.table-responsive>.table>thead>tr>th,.ta
2024-07-22 17:32:50 UTC	4	IN	Data Raw: 55 49 22 2c Data Ascii: UI",
2024-07-22 17:32:50 UTC	16383	IN	Data Raw: 22 54 75 6e 67 61 22 2c 22 4c 61 6f 20 55 49 22 2c 22 52 61 61 76 69 22 2c 22 49 73 6b 6f 6f 6c 61 20 50 6f 74 61 22 2c 22 4c 61 74 68 61 22 2c 22 4c 65 65 6c 61 77 61 64 65 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 61 48 65 69 20 55 49 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4a 68 65 6e 67 48 65 69 20 55 49 22 2c 22 4d 61 6c 67 75 6e 20 47 6f 74 68 69 63 22 2c 22 45 73 74 72 61 6e 67 65 6c 6f 20 45 64 65 73 73 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 48 69 6d 61 6c 61 79 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4e 65 77 20 54 61 69 20 4c 75 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 50 68 61 67 73 50 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 54 61 69 20 4c 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 69 20 42 61 69 74 69 22 2c 22 4d 6f 6e 67 6f 6c 69 Data Ascii: "Tunga","Lao UI","Raavi","Iskoola Pota","Latha","Leelawadee","Microsoft YaHei UI","Microsoft JhengHei UI","Malgun Gothic","Estrangelo Edessa","Microsoft Himalaya","Microsoft New Tai Lue","Microsoft PhagsPa","Microsoft Tai Le","Microsoft Yi Baiti","Mongoli
2024-07-22 17:32:50 UTC	16383	IN	Data Raw: 70 65 3d 22 72 65 73 65 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 35 64 61 36 7d 2e 62 74 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2d 66 6f 63 75 73 2c 2e 62 74 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 62 75 74 74 6f 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 65 73 65 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f Data Ascii: pe="reset"].btn-primary:hover{background-color:#005da6}.btn.btn-primary-focus,.btn.btn-primary:focus,button.btn-primary:focus,input[type="button"].btn-primary:focus,input[type="submit"].btn-primary:focus,input[type="reset"].btn-primary:focus{background-co
2024-07-22 17:32:50 UTC	15099	IN	Data Raw: 20 4d 61 74 68 22 7d 2e 61 70 70 2d 6e 61 6d 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 32 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 38 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 37 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 2e 33 36 33 32 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 2e 33 36 33 32 70 78 3b 63 6f 6c 6f 72 3a 23 31 62 31 62 31 62 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 70 61 Data Ascii: Math"}.app-name{margin-bottom:20px;margin-top:20px;margin-bottom:1.25rem;margin-top:1.25rem;font-size:24px;line-height:28px;font-weight:300;line-height:1.75rem;padding-bottom:2.3632px;padding-top:2.3632px;color:#1b1b1b;font-size:1.5rem;font-weight:600;pa

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://uconn-my.sharepoint.com/:o:/g/personal/lisa_frank_uconn_edu/EryHWVeqJnhDu2fh5Y44MT4BNS9VFRX04eNZiwiwvmi1JQ?e=5%3amqjzyy&at=9

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Chrome Cache Entry: 164

Chrome Cache Entry: 165

Chrome Cache Entry: 166

Chrome Cache Entry: 167

Chrome Cache Entry: 168

Chrome Cache Entry: 169

Windows Analysis Report
https://uconn-my.sharepoint.com/:o:/g/personal/lisa_frank_uconn_edu/EryHWVeqJnhDu2fh5Y44MT4BNS9VFRX04eNZiwiwvmi1JQ?e=5%3amqjzyy&at=9

Timestamp	Bytes transferred	Direction	Data
2024-07-22 17:32:50 UTC	637	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_Q3A1xKaK6oPrhbQSUwvJBQ2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-22 17:32:50 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2669021 Cache-Control: public, max-age=31536000 Content-MD5: go75uU/MhcBRDMfi4bT3Bw== Content-Type: application/x-javascript Date: Mon, 22 Jul 2024 17:32:50 GMT Etag: 0x8DC90CF2B178E59 Last-Modified: Thu, 20 Jun 2024 02:17:43 GMT Server: ECAcc (lhc/791B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: e8eb8f30-e01e-00ed-5e16-c4904a000000 x-ms-version: 2009-09-19 Content-Length: 448825 Connection: close
2024-07-22 17:32:50 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-07-22 17:32:50 UTC	16383	IN	Data Raw: 44 49 4e 47 5f 4e 4f 54 5f 41 4c 4c 4f 57 45 44 3a 22 38 30 30 34 37 38 44 37 22 2c 50 50 5f 45 5f 49 44 50 5f 42 49 4e 44 49 4e 47 5f 45 58 49 53 54 53 5f 53 41 4d 53 55 4e 47 3a 22 38 30 30 34 34 35 33 45 22 2c 50 50 5f 45 5f 54 52 41 4e 53 46 45 52 5f 54 4f 4b 45 4e 5f 49 4e 56 41 4c 49 44 5f 53 45 53 53 49 4f 4e 3a 22 38 30 30 34 33 35 41 30 22 7d 2c 6e 2e 45 73 74 73 45 72 72 6f 72 3d 7b 55 73 65 72 41 63 63 6f 75 6e 74 53 65 6c 65 63 74 69 6f 6e 49 6e 76 61 6c 69 64 3a 22 31 36 30 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 3a 22 35 30 30 32 30 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 41 70 69 56 65 72 73 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3a 22 35 30 30 32 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a Data Ascii: DING_NOT_ALLOWED:"800478D7",PP_E_IDP_BINDING_EXISTS_SAMSUNG:"8004453E",PP_E_TRANSFER_TOKEN_INVALID_SESSION:"800435A0"},n.EstsError={UserAccountSelectionInvalid:"16001",UserUnauthorized:"50020",UserUnauthorizedApiVersionNotSupported:"500201",UserUnauthoriz
2024-07-22 17:32:50 UTC	16383	IN	Data Raw: 72 69 6e 67 28 30 2c 61 29 2c 74 3d 64 2e 64 6f 75 62 6c 65 53 70 6c 69 74 28 65 2e 73 75 62 73 74 72 69 6e 67 28 61 2b 31 2c 6f 29 2c 22 26 22 2c 22 3d 22 29 2c 69 3d 64 2e 64 6f 75 62 6c 65 53 70 6c 69 74 28 65 2e 73 75 62 73 74 72 69 6e 67 28 6f 2b 31 29 2c 22 26 22 2c 22 3d 22 29 29 7d 72 65 74 75 72 6e 7b 6f 72 69 67 69 6e 41 6e 64 50 61 74 68 3a 6e 2c 71 75 65 72 79 3a 74 2c 66 72 61 67 6d 65 6e 74 3a 69 7d 7d 2c 6a 6f 69 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 6f 72 69 67 69 6e 41 6e 64 50 61 74 68 7c 7c 22 22 3b 72 65 74 75 72 6e 20 65 2e 71 75 65 72 79 26 26 28 6e 2b 3d 22 3f 22 2b 63 2e 6a 6f 69 6e 28 65 2e 71 75 65 72 79 2c 22 26 22 2c 22 3d 22 29 29 2c 65 2e 66 72 61 67 6d 65 6e 74 26 26 28 6e 2b 3d 22 23 22 2b 63 2e Data Ascii: ring(0,a),t=d.doubleSplit(e.substring(a+1,o),"&","="),i=d.doubleSplit(e.substring(o+1),"&","="))}return{originAndPath:n,query:t,fragment:i}},join:function(e){var n=e.originAndPath\|\|"";return e.query&&(n+="?"+c.join(e.query,"&","=")),e.fragment&&(n+="#"+c.
2024-07-22 17:32:50 UTC	3	IN	Data Raw: 6f 61 64 Data Ascii: oad
2024-07-22 17:32:50 UTC	16383	IN	Data Raw: 43 6c 69 65 6e 74 54 72 61 63 69 6e 67 4f 70 74 69 6f 6e 73 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 5b 6e 5d 2e 61 70 70 6c 79 28 61 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 73 2e 6c 6f 67 45 76 65 6e 74 3d 75 28 22 6c 6f 67 45 76 65 6e 74 22 29 2c 73 2e 6c 6f 67 55 73 65 72 49 6e 74 65 72 61 63 74 69 6f 6e 45 76 65 6e 74 3d 75 28 22 6c 6f 67 55 73 65 72 49 6e 74 65 72 61 63 74 69 6f 6e 45 76 65 6e 74 22 29 2c 73 2e 74 72 61 63 65 42 65 67 69 6e 52 65 71 75 65 73 74 3d 75 28 22 74 72 61 63 65 42 65 67 69 6e 52 65 71 75 65 73 74 22 29 2c 73 2e 74 72 61 63 65 45 6e 64 52 65 71 75 65 73 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 2c 69 2c 61 29 7b 6c 3f 6c 2e 74 72 61 63 65 45 6e 64 52 65 71 75 65 73 74 28 65 2c 6e Data Ascii: ClientTracingOptions",function(){if(a)return a[n].apply(a,arguments)}),s.logEvent=u("logEvent"),s.logUserInteractionEvent=u("logUserInteractionEvent"),s.traceBeginRequest=u("traceBeginRequest"),s.traceEndRequest=function(e,n,t,i,a){l?l.traceEndRequest(e,n
2024-07-22 17:32:50 UTC	16383	IN	Data Raw: 65 79 5d 7c 7c 22 22 2c 66 3d 74 5b 73 2e 44 69 73 70 6c 61 79 53 69 67 6e 46 6f 72 55 49 5d 7c 7c 22 22 2c 6e 3d 6c 21 3d 3d 70 2e 53 75 63 63 65 73 73 29 3a 28 6c 3d 70 2e 45 72 72 6f 72 2c 75 3d 22 22 2c 66 3d 22 22 2c 6e 3d 21 30 29 2c 6e 3f 6c 3d 3d 3d 70 2e 46 54 45 72 72 6f 72 3f 68 28 65 2c 64 29 3a 76 28 65 2c 64 29 3a 62 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 67 3d 22 22 2c 6c 3d 70 2e 45 72 72 6f 72 2c 75 3d 22 22 2c 66 3d 22 22 2c 76 28 64 29 7d 66 75 6e 63 74 69 6f 6e 20 54 28 29 7b 6c 3d 70 2e 54 69 6d 65 6f 75 74 2c 75 3d 22 22 2c 66 3d 22 22 2c 67 3d 22 22 2c 76 28 64 29 7d 64 2e 67 65 74 4f 74 63 53 74 61 74 75 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 2e 69 73 43 6f 6d 70 6c 65 74 65 28 29 3f 6c 3a 70 2e Data Ascii: ey]\|\|"",f=t[s.DisplaySignForUI]\|\|"",n=l!==p.Success):(l=p.Error,u="",f="",n=!0),n?l===p.FTError?h(e,d):v(e,d):b(e)}function k(){g="",l=p.Error,u="",f="",v(d)}function T(){l=p.Timeout,u="",f="",g="",v(d)}d.getOtcStatus=function(){return d.isComplete()?l:p.
2024-07-22 17:32:50 UTC	16383	IN	Data Raw: 5f 75 73 65 72 6e 61 6d 65 3a 65 7d 29 3a 69 2e 69 64 70 52 65 64 69 72 65 63 74 55 72 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 62 65 29 7b 76 61 72 20 74 3d 70 2e 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 28 22 3f 22 2b 62 65 2c 22 77 63 74 78 22 2c 22 4c 6f 67 69 6e 4f 70 74 69 6f 6e 73 25 33 44 33 25 32 36 22 2b 70 2e 65 78 74 72 61 63 74 28 22 77 63 74 78 22 2c 22 3f 22 2b 62 65 29 29 3b 74 3d 74 2e 73 75 62 73 74 72 28 31 29 2c 65 3d 70 2e 61 70 70 65 6e 64 28 65 2c 74 29 7d 65 6c 73 65 20 65 3d 70 2e 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 28 65 2c 22 77 63 74 78 22 2c 22 4c 6f 67 69 6e 4f 70 74 69 6f 6e 73 25 33 44 33 25 32 36 22 2b 70 2e 65 78 74 72 61 63 74 28 22 77 63 74 78 22 2c 65 29 29 3b 72 65 74 75 72 6e 20 65 3d 70 Data Ascii: _username:e}):i.idpRedirectUrl=function(e,n){if(be){var t=p.appendOrReplace("?"+be,"wctx","LoginOptions%3D3%26"+p.extract("wctx","?"+be));t=t.substr(1),e=p.append(e,t)}else e=p.appendOrReplace(e,"wctx","LoginOptions%3D3%26"+p.extract("wctx",e));return e=p
2024-07-22 17:32:50 UTC	16383	IN	Data Raw: 4c 69 6e 6b 3d 21 31 2c 6e 2e 73 68 6f 77 46 6f 72 67 6f 74 55 73 65 72 6e 61 6d 65 3d 76 2c 6e 2e 69 73 55 73 65 72 4b 6e 6f 77 6e 3d 21 21 75 2e 63 72 65 64 54 79 70 65 2c 6e 2e 64 69 73 70 6c 61 79 48 65 6c 70 3d 21 75 2e 63 72 65 64 54 79 70 65 2c 6e 2e 68 69 64 65 43 72 65 64 53 77 69 74 63 68 4c 69 6e 6b 3d 68 2c 6e 2e 69 73 4f 66 66 6c 69 6e 65 41 63 63 6f 75 6e 74 56 69 73 69 62 6c 65 3d 44 2c 6e 2e 61 72 69 61 44 65 73 63 72 69 62 65 64 42 79 3d 5f 2c 6e 2e 73 65 74 46 6f 63 75 73 3d 43 2c 6e 2e 69 73 50 6c 61 74 66 6f 72 6d 41 75 74 68 65 6e 74 69 63 61 74 6f 72 41 76 61 69 6c 61 62 6c 65 3d 69 2e 6f 62 73 65 72 76 61 62 6c 65 28 21 31 29 2c 6e 2e 63 72 65 64 4c 69 6e 6b 45 72 72 6f 72 3d 69 2e 6f 62 73 65 72 76 61 62 6c 65 28 29 2c 6e 2e 66 69 Data Ascii: Link=!1,n.showForgotUsername=v,n.isUserKnown=!!u.credType,n.displayHelp=!u.credType,n.hideCredSwitchLink=h,n.isOfflineAccountVisible=D,n.ariaDescribedBy=_,n.setFocus=C,n.isPlatformAuthenticatorAvailable=i.observable(!1),n.credLinkError=i.observable(),n.fi
2024-07-22 17:32:50 UTC	16383	IN	Data Raw: 6e 65 64 49 6e 3a 65 2e 69 73 53 69 67 6e 65 64 49 6e 7d 7d 29 29 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3d 72 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 69 3d 74 28 32 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 61 3d 74 68 69 73 2c 6f 3d 65 2c 72 3d 6f 2e 66 48 69 64 65 46 6f 6f 74 65 72 2c 73 3d 6f 2e 66 53 68 6f 77 50 61 67 65 4c 65 76 65 6c 54 69 74 6c 65 41 6e 64 44 65 73 63 2c 63 3d 6e 75 6c 6c 3b 61 2e 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 4d 65 74 68 6f 64 73 3d 6e 7c 7c 69 2e 6f 62 73 65 72 76 61 62 6c 65 28 29 2c 61 2e 62 61 63 6b 67 72 6f 75 6e 64 4c 6f 67 6f 55 72 6c 3d 74 7c 7c 69 2e 6f 62 73 65 72 76 61 62 6c 65 28 29 2c 61 2e 61 6e 69 6d 61 74 69 6f 6e 45 Data Ascii: nedIn:e.isSignedIn}}))}};e.exports=r},function(e,n,t){var i=t(2);e.exports=function(e,n,t){var a=this,o=e,r=o.fHideFooter,s=o.fShowPageLevelTitleAndDesc,c=null;a.paginationControlMethods=n\|\|i.observable(),a.backgroundLogoUrl=t\|\|i.observable(),a.animationE
2024-07-22 17:32:50 UTC	16383	IN	Data Raw: 2c 65 3d 66 2e 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 28 65 2c 22 75 73 65 72 6e 61 6d 65 22 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 29 2c 65 3d 66 2e 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 28 65 2c 22 6d 6b 74 22 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 66 2e 65 78 74 72 61 63 74 28 22 6d 6b 74 22 29 29 29 29 2c 65 3d 66 2e 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 28 65 2c 22 6c 63 22 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 66 2e 65 78 74 72 61 63 74 28 22 6c 63 22 29 29 29 29 2c 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 66 2e Data Ascii: ,e=f.appendOrReplace(e,"username",encodeURIComponent(t)),e=f.appendOrReplace(e,"mkt",encodeURIComponent(decodeURIComponent(f.extract("mkt")))),e=f.appendOrReplace(e,"lc",encodeURIComponent(decodeURIComponent(f.extract("lc")))),document.location.replace(f.

Timestamp	Bytes transferred	Direction	Data
2024-07-22 17:32:50 UTC	683	OUT	GET /Me.htm?v=3 HTTP/1.1 Host: login.live.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-22 17:32:50 UTC	762	IN	HTTP/1.1 200 OK Cache-Control: max-age=315360000 Content-Type: text/html; charset=utf-8 Expires: Thu, 20 Jul 2034 17:32:50 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C555_BL2 x-ms-request-id: b7d6847b-694c-4ea8-a55f-4f49846e5d05 PPServer: PPV: 30 H: BL02EPF0001D9FF V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Set-Cookie: uaid=894a132c6ea14fcf89bc2b2be0c52c10; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly Set-Cookie: MSPRequ=id=N&lt=1721669570&co=1; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly Date: Mon, 22 Jul 2024 17:32:50 GMT Connection: close Content-Length: 3439
2024-07-22 17:32:50 UTC	3439	IN	Data Raw: 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 65 29 74 5b 73 5d 3d 65 5b 73 5d 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 6e 29 7b 69 66 28 73 5b 6e 5d 29 72 65 74 75 72 6e 20 73 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 73 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 65 29 2c 69 2e 6c 6f 61 64 65 64 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 73 3d 7b 7d 3b 72 65 74 75 72 6e 20 65 2e 6d 3d 74 Data Ascii: <script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t

Timestamp	Bytes transferred	Direction	Data
2024-07-22 17:32:50 UTC	656	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_ixsmqakdnvme1h2u2lb1cq2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-22 17:32:50 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2877628 Cache-Control: public, max-age=31536000 Content-MD5: r4VRICOkIy9qDkY5jq2lbg== Content-Type: application/x-javascript Date: Mon, 22 Jul 2024 17:32:50 GMT Etag: 0x8DC90020779542E Last-Modified: Wed, 19 Jun 2024 01:49:16 GMT Server: ECAcc (lhc/791A) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: c59e1121-b01e-000c-1531-c2ae3f000000 x-ms-version: 2009-09-19 Content-Length: 55504 Connection: close
2024-07-22 17:32:50 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 69 5b 6e 5d 29 72 65 74 75 72 6e 20 69 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 69 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 69 2c 6f 2e 70 3d 22 22 2c 6f 28 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 69 29 7b 69 28 32 29 3b 76 61 72 20 6e 3d 69 28 31 29 2c 74 3d 69 28 35 29 2c 72 3d 69 28 36 29 2c 61 3d 72 2e 53 74 72 69 6e Data Ascii: !function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.Strin
2024-07-22 17:32:50 UTC	16383	IN	Data Raw: 44 65 73 63 72 69 70 74 69 6f 6e 5f 55 6e 66 61 6d 69 6c 69 61 72 44 65 76 69 63 65 3d 22 54 6f 20 73 69 67 6e 20 69 6e 20 77 69 74 68 20 7b 30 7d 2c 20 70 6c 65 61 73 65 20 66 6f 6c 6c 6f 77 20 74 68 65 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 6f 6e 20 79 6f 75 72 20 70 68 6f 6e 65 20 61 6e 64 20 65 6e 74 65 72 20 74 68 65 20 6e 75 6d 62 65 72 20 79 6f 75 20 73 65 65 20 62 65 6c 6f 77 2e 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 54 69 74 6c 65 3d 22 52 65 71 75 65 73 74 20 74 69 6d 65 6f 75 74 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 50 61 67 65 44 65 73 63 72 69 70 74 69 6f 6e 3d 22 57 65 20 64 69 64 6e 27 74 20 68 65 61 72 20 66 72 6f 6d 20 79 6f 75 20 69 6e 20 74 69 6d 65 Data Ascii: Description_UnfamiliarDevice="To sign in with {0}, please follow the instructions on your phone and enter the number you see below.",e.CT_RNGC_STR_LS_Timeout_Title="Request timeout",e.CT_RNGC_STR_LS_Timeout_PageDescription="We didn't hear from you in time
2024-07-22 17:32:50 UTC	2	IN	Data Raw: 20 64 Data Ascii: d
2024-07-22 17:32:50 UTC	16383	IN	Data Raw: 69 66 66 65 72 65 6e 74 20 61 63 63 6f 75 6e 74 20 6f 72 20 3c 61 20 69 64 3d 22 61 61 64 53 65 6c 66 53 69 67 6e 75 70 22 20 68 72 65 66 3d 22 23 22 3e 63 72 65 61 74 65 20 61 20 6e 65 77 20 6f 6e 65 3c 2f 61 3e 2e 27 2c 65 2e 43 54 5f 50 57 44 5f 53 54 52 5f 45 72 72 6f 72 5f 57 72 6f 6e 67 43 72 65 64 73 3d 6f 2e 66 4c 6f 63 6b 55 73 65 72 6e 61 6d 65 7c 7c 6f 2e 66 48 69 64 65 52 65 73 65 74 50 61 73 73 77 6f 72 64 4c 69 6e 6b 3f 22 54 68 65 20 70 61 73 73 77 6f 72 64 20 69 73 20 69 6e 63 6f 72 72 65 63 74 2e 20 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 2e 22 3a 6f 2e 66 41 6c 6c 6f 77 50 68 6f 6e 65 53 69 67 6e 49 6e 3f 27 59 6f 75 72 20 61 63 63 6f 75 6e 74 20 6f 72 20 70 61 73 73 77 6f 72 64 20 69 73 20 69 6e 63 6f 72 72 65 63 74 2e 20 49 66 Data Ascii: ifferent account or <a id="aadSelfSignup" href="#">create a new one</a>.',e.CT_PWD_STR_Error_WrongCreds=o.fLockUsername\|\|o.fHideResetPasswordLink?"The password is incorrect. Please try again.":o.fAllowPhoneSignIn?'Your account or password is incorrect. If
2024-07-22 17:32:50 UTC	6353	IN	Data Raw: 72 79 52 65 61 63 68 65 64 3a 22 56 6f 69 63 65 4f 54 50 41 75 74 68 46 61 69 6c 65 64 4d 61 78 41 6c 6c 6f 77 65 64 43 6f 64 65 52 65 74 72 79 52 65 61 63 68 65 64 22 2c 41 63 63 65 73 73 50 61 73 73 42 6c 6f 63 6b 65 64 42 79 50 6f 6c 69 63 79 54 66 61 3a 22 41 63 63 65 73 73 50 61 73 73 42 6c 6f 63 6b 65 64 42 79 50 6f 6c 69 63 79 22 2c 49 6e 76 61 6c 69 64 41 63 63 65 73 73 50 61 73 73 54 66 61 3a 22 49 6e 76 61 6c 69 64 41 63 63 65 73 73 50 61 73 73 22 2c 41 63 63 65 73 73 50 61 73 73 45 78 70 69 72 65 64 54 66 61 3a 22 41 63 63 65 73 73 50 61 73 73 45 78 70 69 72 65 64 22 2c 41 63 63 65 73 73 50 61 73 73 41 6c 72 65 61 64 79 55 73 65 64 54 66 61 3a 22 41 63 63 65 73 73 50 61 73 73 41 6c 72 65 61 64 79 55 73 65 64 22 2c 41 70 70 4c 6f 63 6b 52 65 71 Data Ascii: ryReached:"VoiceOTPAuthFailedMaxAllowedCodeRetryReached",AccessPassBlockedByPolicyTfa:"AccessPassBlockedByPolicy",InvalidAccessPassTfa:"InvalidAccessPass",AccessPassExpiredTfa:"AccessPassExpired",AccessPassAlreadyUsedTfa:"AccessPassAlreadyUsed",AppLockReq

Timestamp	Bytes transferred	Direction	Data
2024-07-22 17:32:51 UTC	431	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_ixsmqakdnvme1h2u2lb1cq2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-22 17:32:51 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2877629 Cache-Control: public, max-age=31536000 Content-MD5: r4VRICOkIy9qDkY5jq2lbg== Content-Type: application/x-javascript Date: Mon, 22 Jul 2024 17:32:51 GMT Etag: 0x8DC90020779542E Last-Modified: Wed, 19 Jun 2024 01:49:16 GMT Server: ECAcc (lhc/791A) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: c59e1121-b01e-000c-1531-c2ae3f000000 x-ms-version: 2009-09-19 Content-Length: 55504 Connection: close
2024-07-22 17:32:51 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 69 5b 6e 5d 29 72 65 74 75 72 6e 20 69 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 69 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 69 2c 6f 2e 70 3d 22 22 2c 6f 28 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 69 29 7b 69 28 32 29 3b 76 61 72 20 6e 3d 69 28 31 29 2c 74 3d 69 28 35 29 2c 72 3d 69 28 36 29 2c 61 3d 72 2e 53 74 72 69 6e Data Ascii: !function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.Strin
2024-07-22 17:32:51 UTC	1	IN	Data Raw: 44 Data Ascii: D
2024-07-22 17:32:51 UTC	16383	IN	Data Raw: 65 73 63 72 69 70 74 69 6f 6e 5f 55 6e 66 61 6d 69 6c 69 61 72 44 65 76 69 63 65 3d 22 54 6f 20 73 69 67 6e 20 69 6e 20 77 69 74 68 20 7b 30 7d 2c 20 70 6c 65 61 73 65 20 66 6f 6c 6c 6f 77 20 74 68 65 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 6f 6e 20 79 6f 75 72 20 70 68 6f 6e 65 20 61 6e 64 20 65 6e 74 65 72 20 74 68 65 20 6e 75 6d 62 65 72 20 79 6f 75 20 73 65 65 20 62 65 6c 6f 77 2e 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 54 69 74 6c 65 3d 22 52 65 71 75 65 73 74 20 74 69 6d 65 6f 75 74 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 50 61 67 65 44 65 73 63 72 69 70 74 69 6f 6e 3d 22 57 65 20 64 69 64 6e 27 74 20 68 65 61 72 20 66 72 6f 6d 20 79 6f 75 20 69 6e 20 74 69 6d 65 2e Data Ascii: escription_UnfamiliarDevice="To sign in with {0}, please follow the instructions on your phone and enter the number you see below.",e.CT_RNGC_STR_LS_Timeout_Title="Request timeout",e.CT_RNGC_STR_LS_Timeout_PageDescription="We didn't hear from you in time.
2024-07-22 17:32:51 UTC	16383	IN	Data Raw: 64 69 66 66 65 72 65 6e 74 20 61 63 63 6f 75 6e 74 20 6f 72 20 3c 61 20 69 64 3d 22 61 61 64 53 65 6c 66 53 69 67 6e 75 70 22 20 68 72 65 66 3d 22 23 22 3e 63 72 65 61 74 65 20 61 20 6e 65 77 20 6f 6e 65 3c 2f 61 3e 2e 27 2c 65 2e 43 54 5f 50 57 44 5f 53 54 52 5f 45 72 72 6f 72 5f 57 72 6f 6e 67 43 72 65 64 73 3d 6f 2e 66 4c 6f 63 6b 55 73 65 72 6e 61 6d 65 7c 7c 6f 2e 66 48 69 64 65 52 65 73 65 74 50 61 73 73 77 6f 72 64 4c 69 6e 6b 3f 22 54 68 65 20 70 61 73 73 77 6f 72 64 20 69 73 20 69 6e 63 6f 72 72 65 63 74 2e 20 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 2e 22 3a 6f 2e 66 41 6c 6c 6f 77 50 68 6f 6e 65 53 69 67 6e 49 6e 3f 27 59 6f 75 72 20 61 63 63 6f 75 6e 74 20 6f 72 20 70 61 73 73 77 6f 72 64 20 69 73 20 69 6e 63 6f 72 72 65 63 74 2e 20 49 Data Ascii: different account or <a id="aadSelfSignup" href="#">create a new one</a>.',e.CT_PWD_STR_Error_WrongCreds=o.fLockUsername\|\|o.fHideResetPasswordLink?"The password is incorrect. Please try again.":o.fAllowPhoneSignIn?'Your account or password is incorrect. I
2024-07-22 17:32:51 UTC	6354	IN	Data Raw: 74 72 79 52 65 61 63 68 65 64 3a 22 56 6f 69 63 65 4f 54 50 41 75 74 68 46 61 69 6c 65 64 4d 61 78 41 6c 6c 6f 77 65 64 43 6f 64 65 52 65 74 72 79 52 65 61 63 68 65 64 22 2c 41 63 63 65 73 73 50 61 73 73 42 6c 6f 63 6b 65 64 42 79 50 6f 6c 69 63 79 54 66 61 3a 22 41 63 63 65 73 73 50 61 73 73 42 6c 6f 63 6b 65 64 42 79 50 6f 6c 69 63 79 22 2c 49 6e 76 61 6c 69 64 41 63 63 65 73 73 50 61 73 73 54 66 61 3a 22 49 6e 76 61 6c 69 64 41 63 63 65 73 73 50 61 73 73 22 2c 41 63 63 65 73 73 50 61 73 73 45 78 70 69 72 65 64 54 66 61 3a 22 41 63 63 65 73 73 50 61 73 73 45 78 70 69 72 65 64 22 2c 41 63 63 65 73 73 50 61 73 73 41 6c 72 65 61 64 79 55 73 65 64 54 66 61 3a 22 41 63 63 65 73 73 50 61 73 73 41 6c 72 65 61 64 79 55 73 65 64 22 2c 41 70 70 4c 6f 63 6b 52 65 Data Ascii: tryReached:"VoiceOTPAuthFailedMaxAllowedCodeRetryReached",AccessPassBlockedByPolicyTfa:"AccessPassBlockedByPolicy",InvalidAccessPassTfa:"InvalidAccessPass",AccessPassExpiredTfa:"AccessPassExpired",AccessPassAlreadyUsedTfa:"AccessPassAlreadyUsed",AppLockRe

Timestamp	Bytes transferred	Direction	Data
2024-07-22 17:32:51 UTC	579	OUT	GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-22 17:32:51 UTC	751	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 10410589 Cache-Control: public, max-age=31536000 Content-MD5: wegr9xrdYirQ87+FcvY0/A== Content-Type: application/x-javascript Date: Mon, 22 Jul 2024 17:32:51 GMT Etag: 0x8DB5D44A2CEB430 Last-Modified: Thu, 25 May 2023 17:22:37 GMT Server: ECAcc (lhc/7931) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: e556728b-d01e-00f6-6fae-7d057f000000 x-ms-version: 2009-09-19 Content-Length: 190152 Connection: close
2024-07-22 17:32:51 UTC	16383	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 74 65 6c 65 6d 65 74 72 79 5f 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 74 65 6c 65 6d 65 74 72 79 5f 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 5d 2c 5b 2c 2c 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 22 56 61 6c 75 65 4b 69 6e 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 65 7d 29 29 2c 6e 2e 64 28 74 2c 22 45 76 65 6e 74 4c 61 74 65 6e 63 79 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 61 7d 29 29 2c 6e 2e 64 28 74 2c 22 45 76 65 6e 74 50 65 72 73 69 73 74 65 6e 63 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 62 7d Data Ascii: (window.telemetry_webpackJsonp=window.telemetry_webpackJsonp\|\|[]).push([[2],[,,,function(e,t,n){"use strict";n.r(t),n.d(t,"ValueKind",(function(){return r.e})),n.d(t,"EventLatency",(function(){return r.a})),n.d(t,"EventPersistence",(function(){return r.b}
2024-07-22 17:32:51 UTC	1	IN	Data Raw: 74 Data Ascii: t
2024-07-22 17:32:52 UTC	16383	IN	Data Raw: 2c 22 50 72 6f 70 65 72 74 69 65 73 50 6c 75 67 69 6e 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 2e 61 7d 29 29 2c 6e 2e 64 28 74 2c 22 50 6f 73 74 43 68 61 6e 6e 65 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 2e 61 7d 29 29 2c 6e 2e 64 28 74 2c 22 43 6f 72 65 55 74 69 6c 73 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 2e 61 7d 29 29 2c 6e 2e 64 28 74 2c 22 42 45 5f 50 52 4f 46 49 4c 45 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 2e 61 7d 29 29 2c 6e 2e 64 28 74 2c 22 4e 52 54 5f 50 52 4f 46 49 4c 45 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 2e 62 7d 29 29 2c 6e 2e 64 28 74 2c 22 52 54 5f 50 52 4f 46 49 4c 45 22 2c 28 66 75 6e 63 74 69 6f 6e Data Ascii: ,"PropertiesPlugin",(function(){return g.a})),n.d(t,"PostChannel",(function(){return v.a})),n.d(t,"CoreUtils",(function(){return c.a})),n.d(t,"BE_PROFILE",(function(){return p.a})),n.d(t,"NRT_PROFILE",(function(){return p.b})),n.d(t,"RT_PROFILE",(function
2024-07-22 17:32:52 UTC	16383	IN	Data Raw: 69 73 2e 74 79 70 65 4e 61 6d 65 29 29 7c 7c 22 6e 6f 74 5f 73 70 65 63 69 66 69 65 64 22 3b 76 61 72 20 61 3d 74 2e 73 74 61 63 6b 44 65 74 61 69 6c 73 7c 7c 6c 65 28 74 29 3b 74 68 69 73 2e 70 61 72 73 65 64 53 74 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 65 2e 6f 62 6a 3b 69 66 28 6e 26 26 6e 2e 6c 65 6e 67 74 68 3e 30 29 7b 74 3d 5b 5d 3b 76 61 72 20 72 3d 30 2c 69 3d 30 3b 4f 62 6a 65 63 74 28 53 2e 62 29 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 67 65 2e 72 65 67 65 78 2e 74 65 73 74 28 6e 29 29 7b 76 61 72 20 61 3d 6e 65 77 20 67 65 28 6e 2c 72 2b 2b 29 3b 69 2b 3d 61 2e 73 69 7a 65 49 6e 42 79 74 65 73 2c 74 2e 70 75 73 68 28 61 29 7d 7d 29 29 3b Data Ascii: is.typeName))\|\|"not_specified";var a=t.stackDetails\|\|le(t);this.parsedStack=function(e){var t,n=e.obj;if(n&&n.length>0){t=[];var r=0,i=0;Object(S.b)(n,(function(e){var n=e.toString();if(ge.regex.test(n)){var a=new ge(n,r++);i+=a.sizeInBytes,t.push(a)}}));
2024-07-22 17:32:52 UTC	16383	IN	Data Raw: 63 79 20 70 72 65 76 65 6e 74 73 20 75 73 20 66 72 6f 6d 20 67 65 74 74 69 6e 67 20 74 68 65 20 64 65 74 61 69 6c 73 20 6f 66 20 74 68 69 73 20 65 78 63 65 70 74 69 6f 6e 2e 20 43 6f 6e 73 69 64 65 72 20 75 73 69 6e 67 20 74 68 65 20 27 63 72 6f 73 73 6f 72 69 67 69 6e 27 20 61 74 74 72 69 62 75 74 65 2e 22 2c 61 2c 74 2e 6c 69 6e 65 4e 75 6d 62 65 72 7c 7c 30 2c 74 2e 63 6f 6c 75 6d 6e 4e 75 6d 62 65 72 7c 7c 30 2c 6e 2c 72 2c 6e 75 6c 6c 2c 6f 29 2c 63 29 3a 28 74 2e 65 72 72 6f 72 53 72 63 7c 7c 28 74 2e 65 72 72 6f 72 53 72 63 3d 6f 29 2c 65 2e 74 72 61 63 6b 45 78 63 65 70 74 69 6f 6e 28 7b 65 78 63 65 70 74 69 6f 6e 3a 74 2c 73 65 76 65 72 69 74 79 4c 65 76 65 6c 3a 33 7d 2c 63 29 29 7d 63 61 74 63 68 28 65 29 7b 76 61 72 20 75 3d 6e 3f 6e 2e 6e 61 Data Ascii: cy prevents us from getting the details of this exception. Consider using the 'crossorigin' attribute.",a,t.lineNumber\|\|0,t.columnNumber\|\|0,n,r,null,o),c):(t.errorSrc\|\|(t.errorSrc=o),e.trackException({exception:t,severityLevel:3},c))}catch(e){var u=n?n.na
2024-07-22 17:32:52 UTC	16383	IN	Data Raw: 65 3d 4f 62 6a 65 63 74 28 63 2e 74 29 28 65 29 3f 65 3a 7b 7d 3b 76 61 72 20 6e 3d 7b 7d 2c 72 3d 4f 62 6a 65 63 74 28 63 2e 74 29 28 74 29 3f 74 3a 7b 7d 3b 74 68 69 73 2e 5f 73 65 74 42 61 73 69 63 50 72 6f 70 65 72 74 69 65 73 28 6e 2c 65 29 2c 74 68 69 73 2e 5f 73 65 74 50 61 67 65 54 61 67 73 28 6e 2c 65 29 2c 6e 2e 69 73 4d 61 6e 75 61 6c 3d 21 65 2e 69 73 41 75 74 6f 2c 72 2e 62 65 68 61 76 69 6f 72 3d 74 68 69 73 2e 5f 67 65 74 42 65 68 61 76 69 6f 72 28 65 29 2c 72 2e 76 70 48 65 69 67 68 74 3d 65 2e 76 70 48 65 69 67 68 74 2c 72 2e 76 70 57 69 64 74 68 3d 65 2e 76 70 57 69 64 74 68 2c 72 2e 66 72 61 6d 65 77 6f 72 6b 3d 65 2e 66 72 61 6d 65 77 6f 72 6b 2c 72 2e 73 79 73 74 65 6d 54 69 6d 69 6e 67 3d 65 2e 73 79 73 74 65 6d 54 69 6d 69 6e 67 2c Data Ascii: e=Object(c.t)(e)?e:{};var n={},r=Object(c.t)(t)?t:{};this._setBasicProperties(n,e),this._setPageTags(n,e),n.isManual=!e.isAuto,r.behavior=this._getBehavior(e),r.vpHeight=e.vpHeight,r.vpWidth=e.vpWidth,r.framework=e.framework,r.systemTiming=e.systemTiming,
2024-07-22 17:32:52 UTC	16383	IN	Data Raw: 6f 72 22 5d 29 2c 65 2e 65 6d 70 74 79 53 6e 69 70 70 65 74 51 75 65 75 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 29 7b 4f 62 6a 65 63 74 28 53 2e 73 29 28 6e 29 7c 7c 6e 2c 4f 62 6a 65 63 74 28 53 2e 43 29 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 69 66 28 4f 62 6a 65 63 74 28 53 2e 76 29 28 6e 29 26 26 21 4f 62 6a 65 63 74 28 53 2e 70 29 28 72 29 26 26 6e 26 26 22 5f 22 21 3d 3d 6e 5b 30 5d 26 26 2d 31 3d 3d 3d 4f 62 6a 65 63 74 28 53 2e 63 29 28 52 74 2c 6e 29 29 74 72 79 7b 74 5b 6e 5d 3d 72 7d 63 61 74 63 68 28 74 29 7b 4f 62 6a 65 63 74 28 66 2e 64 29 28 65 2e 6c 6f 67 67 65 72 2c 32 2c 35 31 34 2c 22 46 61 69 6c 65 64 20 74 6f 20 73 65 74 20 5b 22 2b 6e 2b 22 5d 20 64 75 Data Ascii: or"]),e.emptySnippetQueue=function(t){try{if(function(){if(t){Object(S.s)(n)\|\|n,Object(S.C)(e,(function(n,r){if(Object(S.v)(n)&&!Object(S.p)(r)&&n&&"_"!==n[0]&&-1===Object(S.c)(Rt,n))try{t[n]=r}catch(t){Object(f.d)(e.logger,2,514,"Failed to set ["+n+"] du
2024-07-22 17:32:52 UTC	16383	IN	Data Raw: 20 65 2e 69 6e 64 65 78 4f 66 28 74 2c 6e 29 3b 76 61 72 20 72 3d 65 5b 61 2e 78 5d 2c 69 3d 6e 7c 7c 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 6f 3d 4d 61 74 68 2e 6d 61 78 28 69 3e 3d 30 3f 69 3a 72 2d 4d 61 74 68 2e 61 62 73 28 69 29 2c 30 29 3b 6f 3c 72 3b 6f 2b 2b 29 69 66 28 6f 20 69 6e 20 65 26 26 65 5b 6f 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6f 7d 63 61 74 63 68 28 65 29 7b 7d 7d 72 65 74 75 72 6e 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 57 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3b 69 66 28 65 29 7b 69 66 28 65 2e 6d 61 70 29 72 65 74 75 72 6e 20 65 2e 6d 61 70 28 74 2c 6e 29 3b 76 61 72 20 69 3d 65 5b 61 2e 78 5d 2c 6f 3d 6e 7c 7c 65 3b 72 3d 6e 65 77 20 41 72 72 61 79 28 69 29 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 69 3b 63 2b 2b Data Ascii: e.indexOf(t,n);var r=e[a.x],i=n\|\|0;try{for(var o=Math.max(i>=0?i:r-Math.abs(i),0);o<r;o++)if(o in e&&e[o]===t)return o}catch(e){}}return-1}function W(e,t,n){var r;if(e){if(e.map)return e.map(t,n);var i=e[a.x],o=n\|\|e;r=new Array(i);try{for(var c=0;c<i;c++
2024-07-22 17:32:52 UTC	16383	IN	Data Raw: 69 2e 45 5d 7c 7c 39 3d 3d 3d 65 5b 69 2e 45 5d 7c 7c 21 2b 65 5b 69 2e 45 5d 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 5b 65 2e 69 64 5d 3b 69 66 28 21 6e 29 7b 6e 3d 7b 7d 3b 74 72 79 7b 6c 28 74 29 26 26 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 75 29 74 72 79 7b 72 65 74 75 72 6e 20 75 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6e 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 21 31 7d 28 74 2c 65 2e 69 64 2c 6e 29 7c 7c 28 74 5b 65 2e 69 64 5d 3d 6e 29 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 Data Ascii: i.E]\|\|9===e[i.E]\|\|!+e[i.E]}function d(e,t){var n=t[e.id];if(!n){n={};try{l(t)&&(function(e,t,n){if(u)try{return u(e,t,{value:n,enumerable:!1,configurable:!0}),!0}catch(e){}return!1}(t,e.id,n)\|\|(t[e.id]=n))}catch(e){}}return n}function b(e,t){return void 0
2024-07-22 17:32:52 UTC	16383	IN	Data Raw: 2c 73 65 74 4e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 26 26 64 2e 73 65 74 4e 61 6d 65 28 65 29 2c 62 2e 6e 61 6d 65 3d 65 7d 2c 67 65 74 54 72 61 63 65 49 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 2e 74 72 61 63 65 49 64 7d 2c 73 65 74 54 72 61 63 65 49 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 26 26 64 2e 73 65 74 54 72 61 63 65 49 64 28 65 29 2c 4f 62 6a 65 63 74 28 6f 2e 66 29 28 65 29 26 26 28 62 2e 74 72 61 63 65 49 64 3d 65 29 7d 2c 67 65 74 53 70 61 6e 49 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 2e 70 61 72 65 6e 74 49 64 7d 2c 73 65 74 53 70 61 6e 49 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 26 26 64 2e 73 65 74 53 70 61 6e 49 64 28 65 29 2c 4f 62 6a 65 63 74 28 6f 2e 65 29 28 65 29 26 Data Ascii: ,setName:function(e){d&&d.setName(e),b.name=e},getTraceId:function(){return b.traceId},setTraceId:function(e){d&&d.setTraceId(e),Object(o.f)(e)&&(b.traceId=e)},getSpanId:function(){return b.parentId},setSpanId:function(e){d&&d.setSpanId(e),Object(o.e)(e)&

Timestamp	Bytes transferred	Direction	Data
2024-07-22 17:32:53 UTC	698	OUT	GET /dbd5a2dd-8-rdvb7tk2-dqizgleza7igirczl4pbqrnmrs7u0uis/logintenantbranding/0/favicon?ts=638201101065629855 HTTP/1.1 Host: aadcdn.msftauthimages.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-22 17:32:53 UTC	770	IN	HTTP/1.1 200 OK Date: Mon, 22 Jul 2024 17:32:53 GMT Content-Type: image/* Content-Length: 4831 Connection: close Cache-Control: public, max-age=86400 Last-Modified: Fri, 19 May 2023 16:21:46 GMT ETag: 0x8DB588524862309 x-ms-request-id: 13d516fc-501e-004a-055d-dca4dc000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240722T173253Z-15b94bb6ff9v2qb4b95d0p0en400000005wg00000000rq8f x-fd-int-roxy-purgeid: 50755578 X-Cache: TCP_MISS X-Content-Type-Options: nosniff Accept-Ranges: bytes
2024-07-22 17:32:53 UTC	4831	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff e1 03 2d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 Data Ascii: JFIFDucky<ExifII*-http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Timestamp	Bytes transferred	Direction	Data
2024-07-22 17:32:53 UTC	620	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-22 17:32:53 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2669023 Cache-Control: public, max-age=31536000 Content-MD5: /tr7rG0APA0Nym9G/DMFwg== Content-Type: application/x-javascript Date: Mon, 22 Jul 2024 17:32:53 GMT Etag: 0x8DC90CF0C1378C3 Last-Modified: Thu, 20 Jun 2024 02:16:51 GMT Server: ECAcc (lhc/791B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 281a1f59-901e-00f2-0416-c4a977000000 x-ms-version: 2009-09-19 Content-Length: 406986 Connection: close
2024-07-22 17:32:53 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-07-22 17:32:53 UTC	1	IN	Data Raw: 69 Data Ascii: i
2024-07-22 17:32:53 UTC	16383	IN	Data Raw: 3d 4d 61 74 68 2e 6d 69 6e 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 6e 28 74 29 3b 72 65 74 75 72 6e 20 72 3c 30 3f 6f 28 72 2b 65 2c 30 29 3a 69 28 72 2c 65 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 33 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 5b 5d 5b 74 5d 3b 72 65 74 75 72 6e 21 21 72 26 26 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 31 7d 2c 31 29 7d 29 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e Data Ascii: =Math.min;t.exports=function(t,e){var r=n(t);return r<0?o(r+e,0):i(r,e)}},function(t,e,r){"use strict";var n=r(536);t.exports=function(t,e){var r=[][t];return!!r&&n((function(){r.call(null,e\|\|function(){return 1},1)}))}},function(t,e,r){"use strict";var n
2024-07-22 17:32:53 UTC	16383	IN	Data Raw: 31 7d 29 2c 65 7d 28 72 28 36 38 31 29 29 3b 45 2e 72 65 67 69 73 74 65 72 50 61 72 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 67 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 41 74 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6d 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 52 6f 6f 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 62 3d 74 7d 2c 74 2e 65 78 70 6f 72 74 73 3d 45 2c 45 5b 22 64 65 66 61 75 6c 74 22 5d 3d 45 2c 45 2e 72 65 62 75 69 6c 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 61 74 72 75 6c 65 22 3d 3d 3d 74 2e 74 79 70 65 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 29 3a 22 72 75 6c 65 Data Ascii: 1}),e}(r(681));E.registerParse=function(t){v=t},E.registerRule=function(t){g=t},E.registerAtRule=function(t){m=t},E.registerRoot=function(t){b=t},t.exports=E,E["default"]=E,E.rebuild=function(t){"atrule"===t.type?Object.setPrototypeOf(t,m.prototype):"rule
2024-07-22 17:32:53 UTC	16383	IN	Data Raw: 22 21 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 26 26 28 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 28 74 29 7c 7c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 29 29 72 65 74 75 72 6e 20 74 2e 62 79 74 65 4c 65 6e 67 74 68 3b 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 22 22 2b 74 29 3b 76 61 72 20 72 3d 74 2e 6c 65 6e 67 74 68 3b 69 66 28 30 3d 3d 3d 72 29 72 65 74 75 72 6e 20 30 3b 66 6f 72 28 76 61 72 20 6e 3d 21 31 3b 3b 29 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 22 61 73 63 69 69 22 3a 63 61 73 65 22 6c 61 74 69 6e 31 22 3a 63 61 73 65 22 62 69 6e 61 72 79 Data Ascii: "!=typeof ArrayBuffer&&"function"==typeof ArrayBuffer.isView&&(ArrayBuffer.isView(t)\|\|t instanceof ArrayBuffer))return t.byteLength;"string"!=typeof t&&(t=""+t);var r=t.length;if(0===r)return 0;for(var n=!1;;)switch(e){case"ascii":case"latin1":case"binary
2024-07-22 17:32:53 UTC	16383	IN	Data Raw: 67 3b 66 75 6e 63 74 69 6f 6e 20 4e 28 74 29 7b 72 65 74 75 72 6e 20 74 3c 31 36 3f 22 30 22 2b 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 3a 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 74 2c 65 29 7b 76 61 72 20 72 3b 65 3d 65 7c 7c 49 6e 66 69 6e 69 74 79 3b 66 6f 72 28 76 61 72 20 6e 3d 74 2e 6c 65 6e 67 74 68 2c 6f 3d 6e 75 6c 6c 2c 69 3d 5b 5d 2c 73 3d 30 3b 73 3c 6e 3b 2b 2b 73 29 7b 69 66 28 28 72 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 73 29 29 3e 35 35 32 39 35 26 26 72 3c 35 37 33 34 34 29 7b 69 66 28 21 6f 29 7b 69 66 28 72 3e 35 36 33 31 39 29 7b 28 65 2d 3d 33 29 3e 2d 31 26 26 69 2e 70 75 73 68 28 32 33 39 2c 31 39 31 2c 31 38 39 29 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 73 2b 31 3d 3d 3d 6e 29 7b 28 65 2d Data Ascii: g;function N(t){return t<16?"0"+t.toString(16):t.toString(16)}function F(t,e){var r;e=e\|\|Infinity;for(var n=t.length,o=null,i=[],s=0;s<n;++s){if((r=t.charCodeAt(s))>55295&&r<57344){if(!o){if(r>56319){(e-=3)>-1&&i.push(239,191,189);continue}if(s+1===n){(e-
2024-07-22 17:32:53 UTC	16383	IN	Data Raw: 76 61 72 20 72 2c 6e 2c 6f 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 26 26 6e 75 6c 6c 21 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 74 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 65 26 26 65 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 74 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 Data Ascii: var r,n,o;return function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Super expression must either be null or a function");t.prototype=Object.create(e&&e.prototype,{constructor:{value:t,writable:!0,configurable:!0}}),Object.defineProperty(
2024-07-22 17:32:53 UTC	16383	IN	Data Raw: 29 7d 72 65 74 75 72 6e 20 6e 65 77 20 6f 5b 22 64 65 66 61 75 6c 74 22 5d 28 74 29 7d 2c 65 2e 77 61 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6e 6f 64 65 3a 74 68 69 73 7d 3b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 72 29 6e 5b 6f 5d 3d 72 5b 6f 5d 3b 72 65 74 75 72 6e 20 74 2e 77 61 72 6e 28 65 2c 6e 29 7d 2c 65 2e 72 65 6d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 65 6e 74 26 26 74 68 69 73 2e 70 61 72 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 29 2c 74 68 69 73 2e 70 61 72 65 6e 74 3d 75 6e 64 65 66 69 6e 65 64 2c 74 68 69 73 7d 2c 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 73 5b 22 Data Ascii: )}return new o["default"](t)},e.warn=function(t,e,r){var n={node:this};for(var o in r)n[o]=r[o];return t.warn(e,n)},e.remove=function(){return this.parent&&this.parent.removeChild(this),this.parent=undefined,this},e.toString=function(t){void 0===t&&(t=s["
2024-07-22 17:32:53 UTC	16383	IN	Data Raw: 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 61 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 21 6f 2e 70 72 65 70 61 72 65 53 74 61 63 6b 54 72 61 63 65 29 66 6f 72 28 3b 65 2d 2d 3b 29 74 3d 69 28 74 2c 75 2c 22 22 29 3b 72 65 74 75 72 6e 20 74 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 33 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 21 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 6e 75 6c 6c 2c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 6e 65 77 20 74 29 21 3d 3d 74 2e 70 72 6f Data Ascii: exports=function(t,e){if(a&&"string"==typeof t&&!o.prepareStackTrace)for(;e--;)t=i(t,u,"");return t}},function(t,e,r){"use strict";var n=r(536);t.exports=!n((function(){function t(){}return t.prototype.constructor=null,Object.getPrototypeOf(new t)!==t.pro
2024-07-22 17:32:53 UTC	16383	IN	Data Raw: 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 21 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 3b 65 2e 70 6c 75 67 69 6e 7c 7c 74 68 69 73 2e 6c 61 73 74 50 6c 75 67 69 6e 26 26 74 68 69 73 2e 6c 61 73 74 50 6c 75 67 69 6e 2e 70 6f 73 74 63 73 73 50 6c 75 67 69 6e 26 26 28 65 2e 70 6c 75 67 69 6e 3d 74 68 69 73 2e 6c 61 73 74 50 6c 75 67 69 6e 2e 70 6f 73 74 63 73 73 50 6c 75 67 69 6e 29 3b 76 61 72 20 72 3d 6e 65 77 20 73 28 74 2c 65 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 65 73 73 61 67 65 73 2e 70 75 73 68 28 72 29 2c 72 7d 7d 2c 7b 6b 65 79 3a 22 77 61 72 6e 69 6e 67 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 65 73 73 61 67 65 73 2e 66 69 6c 74 65 72 28 28 66 75 Data Ascii: &arguments[1]!==undefined?arguments[1]:{};e.plugin\|\|this.lastPlugin&&this.lastPlugin.postcssPlugin&&(e.plugin=this.lastPlugin.postcssPlugin);var r=new s(t,e);return this.messages.push(r),r}},{key:"warnings",value:function(){return this.messages.filter((fu

Timestamp	Bytes transferred	Direction	Data
2024-07-22 17:32:54 UTC	622	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_758d4d3367a37038a3b2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-22 17:32:55 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2664153 Cache-Control: public, max-age=31536000 Content-MD5: IMkyhRIRvkJUeG4IEtZVuA== Content-Type: application/x-javascript Date: Mon, 22 Jul 2024 17:32:55 GMT Etag: 0x8DC90CF0CCB4B72 Last-Modified: Thu, 20 Jun 2024 02:16:52 GMT Server: ECAcc (lhc/7936) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: a4323966-a01e-0015-6822-c46d0e000000 x-ms-version: 2009-09-19 Content-Length: 15755 Connection: close
2024-07-22 17:32:55 UTC	15755	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a

Timestamp	Bytes transferred	Direction	Data
2024-07-22 17:32:54 UTC	670	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-22 17:32:55 UTC	716	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 10410802 Cache-Control: public, max-age=31536000 Content-MD5: Fm3lNHEmUlOrOkVt7+baIw== Content-Type: image/gif Date: Mon, 22 Jul 2024 17:32:55 GMT Etag: 0x8DB5C3F4982FD30 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7945) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: c8ea465c-601e-0025-11ad-7d4c1f000000 x-ms-version: 2009-09-19 Content-Length: 2672 Connection: close
2024-07-22 17:32:55 UTC	2672	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Timestamp	Bytes transferred	Direction	Data
2024-07-22 17:32:54 UTC	666	OUT	OPTIONS /dbd5a2dd-8-rdvb7tk2-dqizgleza7igirczl4pbqrnmrs7u0uis/logintenantbranding/0/customcss?ts=638201101081188424 HTTP/1.1 Host: aadcdn.msftauthimages.net Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: client-request-id,hpgact,hpgid,hpgrequestid Origin: https://login.microsoftonline.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-22 17:32:55 UTC	571	IN	HTTP/1.1 200 OK Date: Mon, 22 Jul 2024 17:32:54 GMT Content-Length: 0 Connection: close x-ms-request-id: 4e4f095b-101e-0029-055d-dc3927000000 x-ms-version: 2015-02-21 Access-Control-Allow-Origin: https://login.microsoftonline.com Access-Control-Allow-Methods: GET Access-Control-Allow-Headers: client-request-id,hpgact,hpgid,hpgrequestid Access-Control-Max-Age: 60 Access-Control-Allow-Credentials: true x-azure-ref: 20240722T173254Z-15b94bb6ff946tsk57vgfu36pn0000000hu000000000ed4h X-Cache: TCP_MISS X-Content-Type-Options: nosniff Accept-Ranges: bytes