IOC Report
https://login.officefitnesschallenge.com/generate-doc-uid-mkopl4uyg6rde32ws

loading gif

Files

File Path
Type
Category
Malicious
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 23 03:47:07 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 23 03:47:07 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 23 03:47:07 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 23 03:47:07 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 23 03:47:07 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
Chrome Cache Entry: 100
ASCII text, with very long lines (46090)
dropped
Chrome Cache Entry: 101
ASCII text, with very long lines (47531)
dropped
Chrome Cache Entry: 102
ASCII text, with very long lines (47531)
downloaded
Chrome Cache Entry: 103
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 104
ASCII text, with very long lines (14782)
downloaded
Chrome Cache Entry: 105
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 106
PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
downloaded
Chrome Cache Entry: 107
ASCII text, with very long lines (64612)
downloaded
Chrome Cache Entry: 108
Unicode text, UTF-8 text, with very long lines (32009)
dropped
Chrome Cache Entry: 109
ASCII text, with very long lines (61177)
downloaded
Chrome Cache Entry: 110
ASCII text, with very long lines (45797)
dropped
Chrome Cache Entry: 111
HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
downloaded
Chrome Cache Entry: 112
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 113
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
dropped
Chrome Cache Entry: 114
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
downloaded
Chrome Cache Entry: 115
PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
dropped
Chrome Cache Entry: 116
ASCII text, with very long lines (14782)
dropped
Chrome Cache Entry: 81
GIF image data, version 89a, 352 x 3
dropped
Chrome Cache Entry: 82
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 83
ASCII text, with very long lines (46090)
downloaded
Chrome Cache Entry: 84
GIF image data, version 89a, 352 x 3
downloaded
Chrome Cache Entry: 85
HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
downloaded
Chrome Cache Entry: 86
Unicode text, UTF-8 text, with very long lines (32009)
downloaded
Chrome Cache Entry: 87
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 88
ASCII text, with very long lines (64616)
downloaded
Chrome Cache Entry: 89
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 90
GIF image data, version 89a, 352 x 3
downloaded
Chrome Cache Entry: 91
GIF image data, version 89a, 352 x 3
dropped
Chrome Cache Entry: 92
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 93
ASCII text, with very long lines (64612)
dropped
Chrome Cache Entry: 94
PNG image data, 54 x 57, 8-bit/color RGB, non-interlaced
dropped
Chrome Cache Entry: 95
ASCII text, with very long lines (64616)
dropped
Chrome Cache Entry: 96
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 97
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 98
ASCII text, with very long lines (45797)
downloaded
Chrome Cache Entry: 99
PNG image data, 54 x 57, 8-bit/color RGB, non-interlaced
downloaded
There are 33 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2400 --field-trial-handle=2256,i,4156012260641755381,6022923510144052030,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://login.officefitnesschallenge.com/generate-doc-uid-mkopl4uyg6rde32ws"

URLs

Name
IP
Malicious
https://login.officefitnesschallenge.com/generate-doc-uid-mkopl4uyg6rde32ws
malicious
https://login.officefitnesschallenge.com/generate-doc-uid-mkopl4uyg6rde32ws?f=ku3qtgU
3.228.199.139
malicious
https://login.officefitnesschallenge.com/generate-doc-uid-mkopl4uyg6rde32ws
malicious
https://login.officefitnesschallenge.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638652556483356253.MmFjOWI0Y2YtMTllNC00YmNmLThkZTAtOTI3NGQ3YWE0NGMwMmRiNzM2MjMtZDc1Zi00YjlmLWE5YWUtNmU2YzFiY2FkMDk1&ui_locales=en-US&mkt=en-US&client-request-id=3465dd25-d66e-45e6-a5f3-a63b8dc72ff3&state=HfGgDqyLWXVqbO_4rGpGJ1_YhXUdieDK0jbCUe6HdD3Kd3Wcelbd5pGc24TEiBIXnLhUxO-sTw2N2TJIs8zB_4tl7Vpmtejzrn8Nbrv5S1T5iMyQDRHdSs8eOHT3hEuZv1sx0StiQ_f_pgaSbEMtdp0bTzWRnLW17udzIbuWOtWHjPrPeI9eLlbxNhMUQgd1k3A8gSKuyWMiF3XUIvAuqxauQrcOf4HujzgfgvJ6FyAxisgzJp5PTrRB7ANHQziyDMSTf2ZAlZxISsGfyA4rXQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true
malicious
https://login.officefitnesschallenge.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638652556483356253.MmFjOWI0Y2YtMTllNC00YmNmLThkZTAtOTI3NGQ3YWE0NGMwMmRiNzM2MjMtZDc1Zi00YjlmLWE5YWUtNmU2YzFiY2FkMDk1&ui_locales=en-US&mkt=en-US&client-request-id=3465dd25-d66e-45e6-a5f3-a63b8dc72ff3&state=HfGgDqyLWXVqbO_4rGpGJ1_YhXUdieDK0jbCUe6HdD3Kd3Wcelbd5pGc24TEiBIXnLhUxO-sTw2N2TJIs8zB_4tl7Vpmtejzrn8Nbrv5S1T5iMyQDRHdSs8eOHT3hEuZv1sx0StiQ_f_pgaSbEMtdp0bTzWRnLW17udzIbuWOtWHjPrPeI9eLlbxNhMUQgd1k3A8gSKuyWMiF3XUIvAuqxauQrcOf4HujzgfgvJ6FyAxisgzJp5PTrRB7ANHQziyDMSTf2ZAlZxISsGfyA4rXQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0
malicious
https://login.officefitnesschallenge.com/favicon.ico
3.228.199.139
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/8d6f16979f3328b3/1729658841496/9f42d7683ac8e7182dc8a473b931918c27ffe6c5ae480af2608ba90dcc50183b/v8E1__GT7NuRahd
104.18.94.41
https://login.officefitnesschallenge.com/
3.228.199.139
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/t4rjv/0x4AAAAAAAyKKgnVvGC1HdT_/auto/fbE/normal/auto/
104.18.94.41
https://www.officefitnesschallenge.com/login
3.228.199.139
https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_DQTmGfOEMmPUR-Vehc8U6Q2.js
152.199.21.175
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
152.199.21.175
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/932996238:1729657708:YgOTPOKqzvU0EC_Kf7mo0LT2N9zQrMCNeDjH8S5OQGs/8d6f16979f3328b3/lPkCY_iVBId1ZNcVKimo2Wbh.dJJZqceJSAXGdJsj88-1729658837-1.1.1.1-TRc9xxlqGUVD49Xsz6oTF1.e6VvrVTgUt7TsjzCnIV7m.8CXeXGbzGbrZNu5kPw0
104.18.94.41
http://knockoutjs.com/
unknown
https://login.officefitnesschallenge.com/s/cf34fdac75876922e05fe1ac0b2c9b68266f289353dfef449d85ed6ed255dbdb.js
3.228.199.139
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8d6f16979f3328b3&lang=auto
104.18.94.41
https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
152.199.21.175
https://github.com/douglascrockford/JSON-js
unknown
https://login.windows-ppe.net
unknown
https://upload.wikimedia.org/wikipedia/commons/4/44/Microsoft_logo.svg
185.15.59.240
https://login.microsoftonline.com
unknown
https://login.officefitnesschallenge.com/s/cf34fdac75876922e05fe1ac0b2c9b68266f289353dfef449d85ed6ed255dbdb
3.228.199.139
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js
152.199.21.175
http://www.opensource.org/licenses/mit-license.php)
unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js
152.199.21.175
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
152.199.21.175
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css
152.199.21.175
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
152.199.21.175
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1
104.18.94.41
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8d6f16979f3328b3/1729658841482/l3oPay69wRc4pto
104.18.94.41
https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
152.199.21.175
https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
152.199.21.175
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js
152.199.21.175
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js
152.199.21.175
http://feross.org
unknown
https://challenges.cloudflare.com/turnstile/v0/g/f2bbd6738e15/api.js
104.18.94.41
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js
152.199.21.175
There are 26 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
login.officefitnesschallenge.com
3.228.199.139
malicious
challenges.cloudflare.com
104.18.94.41
s-part-0017.t-0009.t-msedge.net
13.107.246.45
sni1gl.wpc.omegacdn.net
152.199.21.175
s-part-0017.t-0009.fb-t-msedge.net
13.107.253.45
www.google.com
172.217.18.4
upload.wikimedia.org
185.15.59.240
s-part-0039.t-0009.t-msedge.net
13.107.246.67
www.officefitnesschallenge.com
3.228.199.139
fp2e7a.wpc.phicdn.net
192.229.221.95
s-part-0032.t-0009.t-msedge.net
13.107.246.60
identity.nel.measure.office.net
unknown
aadcdn.msftauth.net
unknown
There are 3 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
3.228.199.139
login.officefitnesschallenge.com
United States
malicious
104.18.94.41
challenges.cloudflare.com
United States
172.217.18.4
www.google.com
United States
192.168.2.5
unknown
unknown
239.255.255.250
unknown
Reserved
185.15.59.240
upload.wikimedia.org
Netherlands
152.199.21.175
sni1gl.wpc.omegacdn.net
United States

DOM / HTML

URL
Malicious
https://login.officefitnesschallenge.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638652556483356253.MmFjOWI0Y2YtMTllNC00YmNmLThkZTAtOTI3NGQ3YWE0NGMwMmRiNzM2MjMtZDc1Zi00YjlmLWE5YWUtNmU2YzFiY2FkMDk1&ui_locales=en-US&mkt=en-US&client-request-id=3465dd25-d66e-45e6-a5f3-a63b8dc72ff3&state=HfGgDqyLWXVqbO_4rGpGJ1_YhXUdieDK0jbCUe6HdD3Kd3Wcelbd5pGc24TEiBIXnLhUxO-sTw2N2TJIs8zB_4tl7Vpmtejzrn8Nbrv5S1T5iMyQDRHdSs8eOHT3hEuZv1sx0StiQ_f_pgaSbEMtdp0bTzWRnLW17udzIbuWOtWHjPrPeI9eLlbxNhMUQgd1k3A8gSKuyWMiF3XUIvAuqxauQrcOf4HujzgfgvJ6FyAxisgzJp5PTrRB7ANHQziyDMSTf2ZAlZxISsGfyA4rXQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0
malicious
https://login.officefitnesschallenge.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638652556483356253.MmFjOWI0Y2YtMTllNC00YmNmLThkZTAtOTI3NGQ3YWE0NGMwMmRiNzM2MjMtZDc1Zi00YjlmLWE5YWUtNmU2YzFiY2FkMDk1&ui_locales=en-US&mkt=en-US&client-request-id=3465dd25-d66e-45e6-a5f3-a63b8dc72ff3&state=HfGgDqyLWXVqbO_4rGpGJ1_YhXUdieDK0jbCUe6HdD3Kd3Wcelbd5pGc24TEiBIXnLhUxO-sTw2N2TJIs8zB_4tl7Vpmtejzrn8Nbrv5S1T5iMyQDRHdSs8eOHT3hEuZv1sx0StiQ_f_pgaSbEMtdp0bTzWRnLW17udzIbuWOtWHjPrPeI9eLlbxNhMUQgd1k3A8gSKuyWMiF3XUIvAuqxauQrcOf4HujzgfgvJ6FyAxisgzJp5PTrRB7ANHQziyDMSTf2ZAlZxISsGfyA4rXQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true
malicious
https://login.officefitnesschallenge.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638652556483356253.MmFjOWI0Y2YtMTllNC00YmNmLThkZTAtOTI3NGQ3YWE0NGMwMmRiNzM2MjMtZDc1Zi00YjlmLWE5YWUtNmU2YzFiY2FkMDk1&ui_locales=en-US&mkt=en-US&client-request-id=3465dd25-d66e-45e6-a5f3-a63b8dc72ff3&state=HfGgDqyLWXVqbO_4rGpGJ1_YhXUdieDK0jbCUe6HdD3Kd3Wcelbd5pGc24TEiBIXnLhUxO-sTw2N2TJIs8zB_4tl7Vpmtejzrn8Nbrv5S1T5iMyQDRHdSs8eOHT3hEuZv1sx0StiQ_f_pgaSbEMtdp0bTzWRnLW17udzIbuWOtWHjPrPeI9eLlbxNhMUQgd1k3A8gSKuyWMiF3XUIvAuqxauQrcOf4HujzgfgvJ6FyAxisgzJp5PTrRB7ANHQziyDMSTf2ZAlZxISsGfyA4rXQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true
malicious
https://login.officefitnesschallenge.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638652556483356253.MmFjOWI0Y2YtMTllNC00YmNmLThkZTAtOTI3NGQ3YWE0NGMwMmRiNzM2MjMtZDc1Zi00YjlmLWE5YWUtNmU2YzFiY2FkMDk1&ui_locales=en-US&mkt=en-US&client-request-id=3465dd25-d66e-45e6-a5f3-a63b8dc72ff3&state=HfGgDqyLWXVqbO_4rGpGJ1_YhXUdieDK0jbCUe6HdD3Kd3Wcelbd5pGc24TEiBIXnLhUxO-sTw2N2TJIs8zB_4tl7Vpmtejzrn8Nbrv5S1T5iMyQDRHdSs8eOHT3hEuZv1sx0StiQ_f_pgaSbEMtdp0bTzWRnLW17udzIbuWOtWHjPrPeI9eLlbxNhMUQgd1k3A8gSKuyWMiF3XUIvAuqxauQrcOf4HujzgfgvJ6FyAxisgzJp5PTrRB7ANHQziyDMSTf2ZAlZxISsGfyA4rXQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true
malicious
https://login.officefitnesschallenge.com/generate-doc-uid-mkopl4uyg6rde32ws
https://login.officefitnesschallenge.com/generate-doc-uid-mkopl4uyg6rde32ws
https://login.officefitnesschallenge.com/generate-doc-uid-mkopl4uyg6rde32ws
https://login.officefitnesschallenge.com/generate-doc-uid-mkopl4uyg6rde32ws
https://login.officefitnesschallenge.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638652556483356253.MmFjOWI0Y2YtMTllNC00YmNmLThkZTAtOTI3NGQ3YWE0NGMwMmRiNzM2MjMtZDc1Zi00YjlmLWE5YWUtNmU2YzFiY2FkMDk1&ui_locales=en-US&mkt=en-US&client-request-id=3465dd25-d66e-45e6-a5f3-a63b8dc72ff3&state=HfGgDqyLWXVqbO_4rGpGJ1_YhXUdieDK0jbCUe6HdD3Kd3Wcelbd5pGc24TEiBIXnLhUxO-sTw2N2TJIs8zB_4tl7Vpmtejzrn8Nbrv5S1T5iMyQDRHdSs8eOHT3hEuZv1sx0StiQ_f_pgaSbEMtdp0bTzWRnLW17udzIbuWOtWHjPrPeI9eLlbxNhMUQgd1k3A8gSKuyWMiF3XUIvAuqxauQrcOf4HujzgfgvJ6FyAxisgzJp5PTrRB7ANHQziyDMSTf2ZAlZxISsGfyA4rXQ&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true