| Source: | Binary string: B.interval),this.pDb=!0,this.khe=new Date,so.show(Yc.a.eci),Jk.tSe()))}eo(B,X,sa){Array.add(this.bR,new Bv.a(!0,B,X,sa));zc.App.hv.MS()}forceOutbound(){}bYa(){return 4!==this._state}QJa(){1===this._state?this.$0a():this.ic&&2===this.ic.status&&(this.BZ(),this.gO.execute(B=>{B.wbb();B.uja();B.DUa()}))}get buf(){return!0}$0a(){var B=this.Jb.fileId?In.a.fmd(this.Jb.ei,"",this.Jb.km):In.a.fmd(wb.AFrameworkApplication.uo,zc.App.vgb,null),X=wb.AFrameworkApplication.J;B.ForceTransform=Ce.WoncaApp.xpc;B.IsNewFile= source: chromecache_276.1.dr, chromecache_323.1.dr |
| Source: | Binary string: "RetryOnFailure";break;case 0:wb.AFrameworkApplication.oja.RetryReason="None";break;case 4:wb.AFrameworkApplication.oja.RetryReason="RedirectedClusterOnServer"}}gBf(){wb.AFrameworkApplication.oja.RetryStartTime=0<this.Acc?this.nCe.getTime():0;wb.AFrameworkApplication.oja.RetryCountWhileParsing=this.Acc;this.ufi(this.d9a);this.a_i()}a_i(){this.Acc=this.d9a=0}fv(B){this._state=4;B||this.pDb||Jk.tSe()}Mc(B,X,sa,La,eb,lb,Nb,fc=!1){wb.AFrameworkApplication.oja.BootFailed=!0;var mc={};mc.ErrorCode=B;mc.Message= source: chromecache_276.1.dr, chromecache_323.1.dr |
| Source: | Binary string: !1;let va=0;ca.FW&&(pa=ca.ZA.Cla(V));this.UVf(V,xa,!1);var ra=V.cpBegin;V=V.node;this.ajj(la.a.Fe(V,ra+1));xa=V.pdb(ra);Ka=Ka(xa);xa.blob=Ka;if(ca.YHd&&6===xa.blob.zj){if(0<ra){const wa=V.Ba;va=wa.uXa(ra);0<=va-1&&(ra=wa.K(va-1),xa.$a=new ua.a(xa,ra.$a?ra.$a.fi:u.a.nil),!ca.FW&&ra.hyperlink&&this.Qe.cG(xa.$a))}ca.FW&&(pa?xa.Yk&&(xa.Yk=!1,V.Ba.K(va+1).Yk=!0):xa.$a&&xa.$a.cache.Xr&&this.Qe.cG(xa.$a))}if(D.a.instance.K(57))for(V.lq(),pa=Ka.v8,xa.$a&&pa--,V.wordRunProperties.JYa(Math.max(0,Ka.ef-1),2, source: chromecache_276.1.dr, chromecache_323.1.dr |
| Source: | Binary string: this.ow.YD&&(ae.a.instance.K(58)&&this.yQ!==B.Cells.length-1&&(La.yb.enabled=0),this.j$f(La),this.ow=null,this.yQ++);sa=Jk.v9f(X.getTime());1>sa&&(sa=1);if(this.ow||Jk.Xfa(sa)){this.gX+=sa;B=wb.AFrameworkApplication.J.vb("MaxBootDeserializationTimeInMs",0);if(0<B&&this.gX>B)return this.Mc(Yc.a.pzf,CommonUiStrings.CannotOpenFile,!1,!0,!1,null,null),this.Aw.dispose(),!1;this.setActive();return!1}}return!0}pFi(){if(this.pDb)this.KAf();else if(2!==this.ic.statusCode||Yo.a.Fva(this.ic.Qm))this.hhh();else{var B= source: chromecache_276.1.dr, chromecache_323.1.dr |
| Source: | Binary string: case 2:a=Ed.a.Hib}return this.Jj.ja(a,0)}j9i(a){this.Jj.setValue(qs.uRd,a);this.xM()}Hhb(){return this.Jj.ja(qs.uRd,!1)}S3h(){return this.Jj.Oa(qs.uRd)}$2h(){return gc.a.instance.K(13)?this.Jj.Oa(ec.a.Yr)||this.Jj.Oa(Ed.a.Gib)||this.Jj.Oa(Ed.a.Hib):this.Jj.Oa(ec.a.Yr)}xM(){if(ca.a.Mob){var a=Gf.a.instance.Na.Ra.Ga,c=a.node;if(c===this.Maa)this.Maa.rm(16,!0);else{this.Maa=c;c=this.Maa.Ofa();try{this.Maa.pdb(a.cpBegin).UY=!0}finally{c&&c.dispose()}}}}IVi(){if(ca.a.Mob&&this.Maa){var a=0,c=this.Maa.Ofa(); source: chromecache_340.1.dr |
| Source: | Binary string: sa,La,eb,lb,Nb,fc=null,mc=null,$c=0){super();this.nCe=this.khe=this.aF=this.vi=this.rx=this.nX=this.qh=this.Aw=null;this.gX=this.yQ=0;this.ow=null;this.bR=[];this.Jpe=null;this.d9a=this.Acc=0;this.pDb=this.Fpe=!1;this.pBa=null;this.lia=0;this.va=new hh.a;this.vS=null;this.Jb=B;this.aha=X;this.Ia=sa;this.gO=La;this.Ir=eb;this.S5b=fc;this.cac=Nb;zc.App.hv.register(this);this.bob=!0;this.iU="GraphSpaceRootReplicator";lb&&""!==lb&&(this.iU+="_"+lb);0<$c&&(mc||(mc=zf.TaskManager.instance),mc.Fb(new Zc.a(3, source: chromecache_276.1.dr, chromecache_323.1.dr |
| Source: | Binary string: BE=H(63763);class Iv{constructor(b){this.fc=b;this.tXc=new Hv.a}qgc(b,e,m,I,U=null,ka=null,Ia=null){b=b.pdb(e);b.li||(b.li=new AE.a(b));b.li.add(new pr(b,m,I,U,ka,Ia));b.isFromErrorRangeSplit=!0}GUf(b){return b.oc&&b.oc.li&&b.oc.li.lXb(e=>e===b,[b.type])?!0:!1}FVi(b,e){if(b.type===e.type&&b.te&&!e.te&&b.oc&&b.oc.li&&b.oc.li.contains(b)&&e.oc&&e.oc.li&&e.oc.li.contains(e)){var m=[b.type];b.oc.li.lXb(I=>I===b,m);e.oc.li.lXb(I=>I===e,m)}}Wyj(b,e,m){if(!e)return!1;m=new Tz.a([m]);for(let I=0;I<b.length;I++){const U= source: chromecache_460.1.dr |
| Source: | Binary string: 1,1E3*$c,vd=>{this.uDg(vd)},132)))}get IBd(){return this.Jpe||(this.Jpe=ib.a.instance.resolve("Wonca.IGraphSpaceRootReplicatorErrorHandler"))}dIg(B){this.va.addHandler(Jk.nwd,B)}get O1(){return 4===this._state?super.O1:1}get eK(){return this.iU}uDg(B){4===this._state||this.pDb||(this.qh?vb.ULS.sendTraceTag(41821144,338,15,"GetCells still processing response when abort call came after {0} ms. Not aborting.",B.interval):(vb.ULS.sendTraceTag(41821145,338,15,"GetCells aborting boot after it did not complete in {0} ms.", source: chromecache_276.1.dr, chromecache_323.1.dr |
| Source: | Binary string: X);fr.a.UDb("InitializeLocalCobalt",B.InitializeLocalCobaltStartTime,B.InitializeLocalCobaltEndTime,X);this.Ir.Ac("ServerData",X)}}BZ(){wb.AFrameworkApplication.J.Z("RefactorParseServerResponseIsEnabled")?this.pFi():this.oFi()}oFi(){if(this.pDb)this.KAf();else if(2!==this.ic.statusCode||Yo.a.Fva(this.ic.Qm)){if(!(wb.AFrameworkApplication.Uf||ae.a.instance.K(58)&&zc.App.GIf)){var B={["RetryCount"]:this.lia,["StatusCode"]:this.ic.statusCode,["HttpStatus"]:this.ic.httpStatusCode.toString(),["HasResponseObjects"]:!Yo.a.Fva(this.ic.Qm)}; source: chromecache_276.1.dr, chromecache_323.1.dr |
| Source: | Binary string: sa,2,fc),$c.hyperlink=null,eb=mc,La=!0;else if(La&&$c.Yk){this.Ind(B,$c,sa,2,fc);$c.Yk=!1;lb=$c.cp;Nb=mc;break}La&&$c.$a&&this.Cc.cG($c.$a)}sa=ad.ParagraphReader.text(B).substring(X.oc.cp,lb);this.fc.replaceTextRange(bi.a.createTextRange(B,X.oc.cp,lb),sa,!0,!1);for(X=eb;X<=Nb;)eb=B.Ba.K(X++),lb=B.pdb(eb.cp+sa.length),eb.$a&&(lb.$a=eb.$a.ld(lb));B.lq()}flc(B,X,sa){sa.wordRunProperties.Euc(X?B-1:B,2);ae.a.instance.K(57)&&(sa.wordRunProperties.EP.W(B,Nk.CharacterPropertiesEditor.u8),sa.wordRunProperties.yZ.W(B, source: chromecache_276.1.dr, chromecache_323.1.dr |
| Source: | Binary string: this.i3f(ha);da.a.Keb().then(ia=>{ia.update(ha);return null})}i3f(ha){const {AFrameworkApplication:ia}=d(40343);this.nVc=ha;if(ia.fa){ia.Hmc();ia.fa.lJ(!1);const Y={};Y.activeDivZIndex=ia.fa.dY;ha.dialogHostProperties=Y}ha.dialogButtonsOption=void 0!==ha.dialogButtonsOption&&null!==ha.dialogButtonsOption?ha.dialogButtonsOption:this.lc;ha=this.PDb(1,ha);ha=this.PDb(2,ha);ha=this.PDb(3,ha);ha=this.PDb(4,ha);ha=this.PDb(0,ha);ha.defaultExecutionButton=ha.defaultExecutionButton||this.c6a;ha.hideCloseButton= source: chromecache_276.1.dr, chromecache_323.1.dr |
| Source: | Binary string: Ga):Va.end<hb.end?Ga++:r++}return R}mJe(r,R){let ja=!1;for(const Ga of R){R=Ga.errorDetails;ja=1===R.proofingType||ja;let Va=r.pdb(Ga.begin);Va.Sm=new Jd(Va,R);Va.isFromErrorRangeSplit=!0;Va=r.pdb(Ga.end);Va.UJ=!0;Va.isFromErrorRangeSplit=!0}ja&&(r.SPb=!1)}uUf(r,R){if(!Lf.a.fh(R)){r=r.Ba;for(const ja of R){R=r.Cz(ja.begin);const Ga=r.Cz(ja.end);R&&R.Sm&&Ga&&Ga.UJ?(R.Sm=null,Ga.UJ=!1):(R=String.format("Could not find and remove ErrorRange from CHPs. Cp Begin: {0}, Cp End: {1}",ja.begin,ja.end),la.ULS.sendTraceTag(37532355, source: chromecache_276.1.dr, chromecache_323.1.dr |
| Source: | Binary string: rb,Mb){2===Mb&&this.BM(!0,"OnDictationTimeout");return 32}Q9f(){this.uCb||(this.uCb=!0,this.lw.isVisible()?(this.snc("RibbonClicked"),this.uCb=!1):this.showFloatie(),this.yNc())}showFloatie(Wa=!0){na.ULS.sendTraceTag(573190859,394,50,"Show dictation floatie triggered");this.lw.showFloatie((new S.a(this.Wb.KA)).displayName).then(()=>{this.i6a&&(this.i6a.aLc(),this.Wb.dSb=new Date,this.Wb.Pdb||(this.Wb.Pdb=new Date));0===this.IG.Dz()&&(Wa?this.QKa():this.lw&&this.lw.vHf(),this.uCb=!1);this.Wb.$Pb&& source: chromecache_460.1.dr |
| Source: | Binary string: void 0!==this.Wb.Pdb&&null!==this.Wb.Pdb&&Array.add(this.qf.dataFields,{name:"FirstSeen",string:this.Wb.Pdb.toISOString()});void 0!==this.Wb.dSb&&null!==this.Wb.dSb&&Array.add(this.qf.dataFields,{name:"LastSeen",string:this.Wb.dSb.toISOString()})}onFinalResultAnnotationResponse(b,e,m){b=b+this.xUc-(this.Q7c+(e+m)/1E4);this.Qbd+=b;this.J3c<b&&(this.J3c=b);this.Y3c>b&&(this.Y3c=b)}onPartialResultAnnotationResponse(b,e,m){b=b+this.xUc-(this.Q7c+(e+m)/1E4);this.Tbd+=b;this.M3c<b&&(this.M3c=b);this.Z3c> source: chromecache_460.1.dr |
| Source: unknown | TCP traffic detected without corresponding DNS query: 204.79.197.200 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 204.79.197.200 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 204.79.197.200 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 204.79.197.203 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 204.79.197.203 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 204.79.197.203 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 204.79.197.203 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 184.28.90.27 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 184.28.90.27 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 184.28.90.27 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 184.28.90.27 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 184.28.90.27 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 184.28.90.27 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 184.28.90.27 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 20.189.173.13 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 184.28.90.27 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 184.28.90.27 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 184.28.90.27 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 184.28.90.27 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 184.28.90.27 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 184.28.90.27 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 20.189.173.13 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 204.79.197.203 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 20.189.173.13 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 184.28.90.27 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 184.28.90.27 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 184.28.90.27 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 184.28.90.27 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 184.28.90.27 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 184.28.90.27 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 20.189.173.13 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 20.189.173.13 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 204.79.197.203 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 192.229.211.108 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 192.229.211.108 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 20.189.173.13 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 192.229.211.108 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 192.229.211.108 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 192.229.211.108 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 204.79.197.203 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 192.229.211.108 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 20.189.173.13 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 192.229.211.108 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 52.149.20.212 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 52.149.20.212 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 52.149.20.212 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 52.149.20.212 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 52.149.20.212 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 52.149.20.212 |
| Source: unknown | TCP traffic detected without corresponding DNS query: 52.149.20.212 |
| Source: global traffic | HTTP traffic detected: GET /o/c/76471f3776916fd0/EomjtsItbi9Ag0bnzrJDx08BhxVWepFoAXrJFoYeR9IZ0A?e=5%3aEFCh5b&sharingv2=true&fromShare=true&at=9 HTTP/1.1Host: 1drv.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /:o:/g/personal/76471F3776916FD0/EomjtsItbi9Ag0bnzrJDx08BhxVWepFoAXrJFoYeR9IZ0A?resid=76471F3776916FD0!sc2b6a3896e2d402f8346e7ceb243c74f&ithint=onenote&e=5%3aEFCh5b&sharingv2=true&fromShare=true&at=9&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL28vYy83NjQ3MWYzNzc2OTE2ZmQwL0VvbWp0c0l0Ymk5QWcwYm56ckpEeDA4Qmh4VldlcEZvQVhySkZvWWVSOUlaMEE_ZT01OkVGQ2g1YiZzaGFyaW5ndjI9dHJ1ZSZmcm9tU2hhcmU9dHJ1ZSZhdD05 HTTP/1.1Host: onedrive.live.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /personal/76471f3776916fd0/_layouts/15/Doc.aspx?sourcedoc=%7Bc2b6a389-6e2d-402f-8346-e7ceb243c74f%7D&action=default&fromShare=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL28vYy83NjQ3MWYzNzc2OTE2ZmQwL0VvbWp0c0l0Ymk5QWcwYm56ckpEeDA4Qmh4VldlcEZvQVhySkZvWWVSOUlaMEE_ZT01OkVGQ2g1YiZzaGFyaW5ndjI9dHJ1ZSZmcm9tU2hhcmU9dHJ1ZSZhdD05&slrid=64165da1-90a4-6000-a17a-a7453b5ea7e9&originalPath=aHR0cHM6Ly8xZHJ2Lm1zL28vYy83NjQ3MWYzNzc2OTE2ZmQwL0VvbWp0c0l0Ymk5QWcwYm56ckpEeDA4Qmh4VldlcEZvQVhySkZvWWVSOUlaMEE_cnRpbWU9d3B6TnEwUDAzRWc&CID=e20b8c70-5808-4803-b162-15b8d742ff39&_SRM=0:G:36 HTTP/1.1Host: onedrive.live.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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 |
| Source: global traffic | HTTP traffic detected: GET /o/RemoteUls.ashx?build=16.0.18214.41004&waccluster=PUS10&usid=d0fa52e3-0f3d-e35c-d61d-a94526612b29 HTTP/1.1Host: usc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /o/RemoteUls.ashx?build=16.0.18214.41004&waccluster=PUS10&usid=d0fa52e3-0f3d-e35c-d61d-a94526612b29 HTTP/1.1Host: usc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=hGEKNxxd99ywXE5&MD=RRr1cbPr HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com |
| Source: global traffic | HTTP traffic detected: GET /o/OneNote.ashx HTTP/1.1Host: onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /o/RemoteUls.ashx?build=16.0.18214.41004&waccluster=PUS10&usid=d0fa52e3-0f3d-e35c-d61d-a94526612b29 HTTP/1.1Host: usc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: */*Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com |
| Source: global traffic | HTTP traffic detected: GET /o/RemoteUls.ashx?build=16.0.18214.41004&waccluster=PUS10&usid=d0fa52e3-0f3d-e35c-d61d-a94526612b29 HTTP/1.1Host: usc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /o/proofing.ashx?WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2F76471f3776916fd0%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F76471F3776916FD0%21sc2b6a3896e2d402f8346e7ceb243c74f&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6InVYZWhRSlBsZVZqTkNiYWtVaEdENkl5RlFRayJ9%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%2EqqR2MljbYVw0Rm4K4jXzgfOFuADCpethkb5Gv67SUEJwjQTknCjidoN0WKR5FhFbXQ%2DCcOn%2DtrVZbKeBJa%2DIXNN8NcVmDwushKwjjGGTm92K1L%5FzbfYFZZANDsXp5NaGKM564QNjfwnBHkMFz2kBdVC1e20I3Db2mD%5FAdL8V99LRXs4xORPgErnFLNjxYlOlleTJGesPYI5JEb7e9Sn%5Fsur3oz7UQIDoYfc9RXyhGrRdQQSYKqnNHjGrHNv54atFJog9IT9AwTp1%2Dzr4QkZurY6r9dZZpAGR%2DzDB2byiZOD5K7WSkgft2L2l0UTAMqMOrNqF%2DY5KuvdT2BCz7W0ZgQ&access_token_ttl=1730213467266&apitype=LanguageInfo HTTP/1.1Host: onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /o/OneNoteS2SHandler.ashx?action=educationuser&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2F76471f3776916fd0%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F76471F3776916FD0%21sc2b6a3896e2d402f8346e7ceb243c74f&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6InVYZWhRSlBsZVZqTkNiYWtVaEdENkl5RlFRayJ9%2EeyJhdWQiOiJ3b3BpL215Lm1pY3Jvc29mdHBlcnNvbmFsY29udGVudC5jb21AOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwiaXNzIjoiMDAwMDAwMDMtMDAwMC0wZmYxLWNlMDAtMDAwMDAwMDAwMDAwQDkwMTQwMTIyLTg1MTYtMTFlMS04ZWZmLTQ5MzA0OTI0MDE5YiIsIm5iZiI6IjE3Mjk3ODUwNjciLCJleHAiOiIxNzMwMjEzNDY3IiwibmFtZWlkIjoiMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jMTNlNzExNjllZTFmNjk5OTNmMmEzNDFiZTFmNzFhM2Q2N2UxYTU1NjgzZTVlZDA2ZmQ2MzM2MGViYzMyMTk3MCIsIm5paSI6Im1pY3Jvc29mdC5zaGFyZXBvaW50IiwiaXN1c2VyIjoidHJ1ZSIsImNhY2hla2V5IjoiMGguZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jMTNlNzExNjllZTFmNjk5OTNmMmEzNDFiZTFmNzFhM2Q2N2UxYTU1NjgzZTVlZDA2ZmQ2MzM2MGViYzMyMTk3MCIsInNoYXJpbmdpZCI6ImtLZUhIVFcvUmtpaS92UkFYMnhITHciLCJpc2xvb3BiYWNrIjoiVHJ1ZSIsImFwcGN0eCI6ImMyYjZhMzg5NmUyZDQwMmY4MzQ2ZTdjZWIyNDNjNzRmO2dGUFZXR3JZZG5lN3JrTmJaUDJoVVYvWWUyQT07RGVmYXVsdDsyNzE0ZWY0ZjViNjE0NTNmYjc0MTFiZTczMWI2MDVkYzs7VHJ1ZTs7OzM4NDA7NjQxNjVkYTEtMzBlZC02MDAwLWFkMTQtNWJlMzYyZjEwNzAzIiwiZmlkIjoiMTkzODk1In0%2EqqR2MljbYVw0Rm4K4jXzgfOFuADCpethkb5Gv67SUEJwjQTknCjidoN0WKR5FhFbXQ%2DCcOn%2DtrVZbKeBJa%2DIXNN8NcVmDwushKwjjGGTm92K1L%5FzbfYFZZANDsXp5NaGKM564QNjfwnBHkMFz2kBdVC1e20I3Db2mD%5FAdL8V99LRXs4xORPgErnFLNjxYlOlleTJGesPYI5JEb7e9Sn%5Fsur3oz7UQIDoYfc9RXyhGrRdQQSYKqnNHjGrHNv54atFJog9IT9AwTp1%2Dzr4QkZurY6r9dZZpAGR%2DzDB2byiZOD5K7WSkgft2L2l0UTAMqMOrNqF%2DY5KuvdT2BCz7W0ZgQ&access_token_ttl=1730213467266 HTTP/1.1Host: onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /o/RemoteUls.ashx?build=16.0.18214.41004&waccluster=PUS10&usid=d0fa52e3-0f3d-e35c-d61d-a94526612b29 HTTP/1.1Host: usc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /o/proofing.ashx?WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2F76471f3776916fd0%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F76471F3776916FD0%21sc2b6a3896e2d402f8346e7ceb243c74f&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6InVYZWhRSlBsZVZqTkNiYWtVaEdENkl5RlFRayJ9%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%2EqqR2MljbYVw0Rm4K4jXzgfOFuADCpethkb5Gv67SUEJwjQTknCjidoN0WKR5FhFbXQ%2DCcOn%2DtrVZbKeBJa%2DIXNN8NcVmDwushKwjjGGTm92K1L%5FzbfYFZZANDsXp5NaGKM564QNjfwnBHkMFz2kBdVC1e20I3Db2mD%5FAdL8V99LRXs4xORPgErnFLNjxYlOlleTJGesPYI5JEb7e9Sn%5Fsur3oz7UQIDoYfc9RXyhGrRdQQSYKqnNHjGrHNv54atFJog9IT9AwTp1%2Dzr4QkZurY6r9dZZpAGR%2DzDB2byiZOD5K7WSkgft2L2l0UTAMqMOrNqF%2DY5KuvdT2BCz7W0ZgQ&access_token_ttl=1730213467266 HTTP/1.1Host: onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /o/RemoteUls.ashx?build=16.0.18214.41004&waccluster=PUS10&usid=d0fa52e3-0f3d-e35c-d61d-a94526612b29 HTTP/1.1Host: usc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /o/proofing.ashx?WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2F76471f3776916fd0%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F76471F3776916FD0%21sc2b6a3896e2d402f8346e7ceb243c74f&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6InVYZWhRSlBsZVZqTkNiYWtVaEdENkl5RlFRayJ9%2EeyJhdWQiOiJ3b3BpL215Lm1pY3Jvc29mdHBlcnNvbmFsY29udGVudC5jb21AOTE4ODA0MGQtNmM2Ny00YzViLWIxMTItMzZhMzA0YjY2ZGFkIiwiaXNzIjoiMDAwMDAwMDMtMDAwMC0wZmYxLWNlMDAtMDAwMDAwMDAwMDAwQDkwMTQwMTIyLTg1MTYtMTFlMS04ZWZmLTQ5MzA0OTI0MDE5YiIsIm5iZiI6IjE3Mjk3ODUwNjciLCJleHAiOiIxNzMwMjEzNDY3IiwibmFtZWlkIjoiMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jMTNlNzExNjllZTFmNjk5OTNmMmEzNDFiZTFmNzFhM2Q2N2UxYTU1NjgzZTVlZDA2ZmQ2MzM2MGViYzMyMTk3MCIsIm5paSI6Im1pY3Jvc29mdC5zaGFyZXBvaW50IiwiaXN1c2VyIjoidHJ1ZSIsImNhY2hla2V5IjoiMGguZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jMTNlNzExNjllZTFmNjk5OTNmMmEzNDFiZTFmNzFhM2Q2N2UxYTU1NjgzZTVlZDA2ZmQ2MzM2MGViYzMyMTk3MCIsInNoYXJpbmdpZCI6ImtLZUhIVFcvUmtpaS92UkFYMnhITHciLCJpc2xvb3BiYWNrIjoiVHJ1ZSIsImFwcGN0eCI6ImMyYjZhMzg5NmUyZDQwMmY4MzQ2ZTdjZWIyNDNjNzRmO2dGUFZXR3JZZG5lN3JrTmJaUDJoVVYvWWUyQT07RGVmYXVsdDsyNzE0ZWY0ZjViNjE0NTNmYjc0MTFiZTczMWI2MDVkYzs7VHJ1ZTs7OzM4NDA7NjQxNjVkYTEtMzBlZC02MDAwLWFkMTQtNWJlMzYyZjEwNzAzIiwiZmlkIjoiMTkzODk1In0%2EqqR2MljbYVw0Rm4K4jXzgfOFuADCpethkb5Gv67SUEJwjQTknCjidoN0WKR5FhFbXQ%2DCcOn%2DtrVZbKeBJa%2DIXNN8NcVmDwushKwjjGGTm92K1L%5FzbfYFZZANDsXp5NaGKM564QNjfwnBHkMFz2kBdVC1e20I3Db2mD%5FAdL8V99LRXs4xORPgErnFLNjxYlOlleTJGesPYI5JEb7e9Sn%5Fsur3oz7UQIDoYfc9RXyhGrRdQQSYKqnNHjGrHNv54atFJog9IT9AwTp1%2Dzr4QkZurY6r9dZZpAGR%2DzDB2byiZOD5K7WSkgft2L2l0UTAMqMOrNqF%2DY5KuvdT2BCz7W0ZgQ&access_token_ttl=1730213467266 HTTP/1.1Host: onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /o/App_Scripts/Acl/Acl1033.js HTTP/1.1Host: onenote.officeapps.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmy.microsoftpersonalcontent.com%2Fpersonal%2F76471f3776916fd0%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F76471F3776916FD0!sc2b6a3896e2d402f8346e7ceb243c74f&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fonedrive.live.com%22%2C%22pmshare%22%3Atrue%2C%22redeem%22%3A%22aHR0cHM6Ly8xZHJ2Lm1zL28vYy83NjQ3MWYzNzc2OTE2ZmQwL0VvbWp0c0l0Ymk5QWcwYm56ckpEeDA4Qmh4VldlcEZvQVhySkZvWWVSOUlaMEE_ZT01OkVGQ2g1YiZzaGFyaW5ndjI9dHJ1ZSZmcm9tU2hhcmU9dHJ1ZSZhdD05%22%7D&wdenableroaming=1&mscc=1&wdodb=1&hid=64165DA1-30ED-6000-AD14-5BE362F10703.0&uih=onedrivecom&wdlcid=en-US&dchat=1&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1729785063228&jsapi=1&jsapiver=v1&newsession=1&corrid=d0fa52e3-0f3d-e35c-d61d-a94526612b29&usid=d0fa52e3-0f3d-e35c-d61d-a94526612b29&sftc=1&sams=1&cac=1&sfp=1&hch=1&hwfh=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtectedAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 |
| Source: global traffic | HTTP traffic detected: GET /o/App_Scripts/Acl/Acl1033.js HTTP/1.1Host: onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /o/RemoteUls.ashx?build=16.0.18214.41004&waccluster=PUS10&usid=d0fa52e3-0f3d-e35c-d61d-a94526612b29 HTTP/1.1Host: usc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /o/RemoteTelemetry.ashx?usid=d0fa52e3-0f3d-e35c-d61d-a94526612b29&build=16.0.18214.41004&waccluster=PUS10 HTTP/1.1Host: onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ShCLSessionID=1729785093977_0.7255023029099736 |
| Source: global traffic | HTTP traffic detected: GET /files/fabric-cdn-prod_20240129.001/assets/icons/fabric-icons-a13498cf.woff HTTP/1.1Host: res.cdn.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://onenote.officeapps.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://onenote.officeapps.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /9?ai=xd HTTP/1.1Host: mann.ru.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /9?ai=xd HTTP/1.1Host: mann.ru.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /o/AppSettingsHandler.ashx?app=OneNote&usid=d0fa52e3-0f3d-e35c-d61d-a94526612b29&build= HTTP/1.1Host: onenote.officeapps.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://onedrive.live.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://onedrive.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=8d7b21294c7d2c94 HTTP/1.1Host: mann.ru.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mann.ru.com/9?ai=xd&__cf_chl_rt_tk=iBAVvT1q0k_Ls9aZfzbK2qfH49f0zYwhU0jEUzklYIc-1729785099-1.0.1.1-8h8.Ro3xP9Pql1_Emvx.x3Z6MCdAIZ_cuji_ogYf0K8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /o/AppSettingsHandler.ashx?app=OneNote&usid=d0fa52e3-0f3d-e35c-d61d-a94526612b29&build= HTTP/1.1Host: onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ShCLSessionID=1729785093977_0.7255023029099736 |
| Source: global traffic | HTTP traffic detected: GET /suite/RemoteTelemetry.ashx?usid=d0fa52e3-0f3d-e35c-d61d-a94526612b29 HTTP/1.1Host: common.online.office.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /oa/WacOAuth.aspx?replyUrl=https://onenote.officeapps.live.com&usid=d0fa52e3-0f3d-e35c-d61d-a94526612b29&WacUserType=WOPI&sv=1&msalv3=1 HTTP/1.1Host: oauth.officeapps.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://onenote.officeapps.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9 |
| Source: global traffic | HTTP traffic detected: GET /o/AddinServiceHandler.ashx?action=laststoreupdate&app=4&lc=EN-US&WOPIsrc=https%3A%2F%2Fmy%2Emicrosoftpersonalcontent%2Ecom%2Fpersonal%2F76471f3776916fd0%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F76471F3776916FD0%21sc2b6a3896e2d402f8346e7ceb243c74f&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6InVYZWhRSlBsZVZqTkNiYWtVaEdENkl5RlFRayJ9%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%2EqqR2MljbYVw0Rm4K4jXzgfOFuADCpethkb5Gv67SUEJwjQTknCjidoN0WKR5FhFbXQ%2DCcOn%2DtrVZbKeBJa%2DIXNN8NcVmDwushKwjjGGTm92K1L%5FzbfYFZZANDsXp5NaGKM564QNjfwnBHkMFz2kBdVC1e20I3Db2mD%5FAdL8V99LRXs4xORPgErnFLNjxYlOlleTJGesPYI5JEb7e9Sn%5Fsur3oz7UQIDoYfc9RXyhGrRdQQSYKqnNHjGrHNv54atFJog9IT9AwTp1%2Dzr4QkZurY6r9dZZpAGR%2DzDB2byiZOD5K7WSkgft2L2l0UTAMqMOrNqF%2DY5KuvdT2BCz7W0ZgQ&access_token_ttl=1730213467266 HTTP/1.1Host: onenote.officeapps.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"haep: 3X-WacFrontEnd: DM3PEPF00014BEAX-UserSessionId: d0fa52e3-0f3d-e35c-d61d-a94526612b29sec-ch-ua-mobile: ?0X-OfficeVersion: 16.0.18214.41004X-Key: FKnkhRu+5j+BXU4OS+9ASxmg7jKgTA8vtRLm9+84Nvg=;wI/3PDglHIP2H0iVs0ptMMCmcs78fWZzVug+3+yUO+w=,638653818706795394X-WacUserAgent: MSWACONSyncUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-Requested-With: XMLHttpRequestX-UserType: WOPIX-xhr: 1X-IsCoauthSession: trueX-WacCluster: PUS10sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://oneno |
Edit tour
chrome.exe (PID: 3872 cmdline: 
