Play interactive tourEdit tour

Windows Analysis Report
http://interpro.wisc.edu/courses/maintaining-asphalt-pavements/?utm_source=Brochure&utm_medium=postal&utm_campaign=D487&utm_term=SHB&utm_content=Sep

Overview

General Information

Sample URL:	http://interpro.wisc.edu/courses/maintaining-asphalt-pavements/?utm_source=Brochure&utm_medium=postal&utm_campaign=D487&utm_term=SHB&utm_content=Sep
Analysis ID:	1559629
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Form action URLs do not match main URL

HTML body contains low number of good links

HTML title does not match URL

HTTP GET or POST without a user agent

Queries the volume information (name, serial number etc) of a device

Classification

×

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://uw.ungerboeck.com/prod/emc00/PublicSignIn.aspx?&aat=35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d	Joe Sandbox AI: Score: 8 Reasons: The brand 'University of Wisconsin-Madison' is a well-known educational institution., The legitimate domain for the University of Wisconsin-Madison is 'wisc.edu'., The provided URL 'uw.ungerboeck.com' does not match the legitimate domain 'wisc.edu'., The domain 'ungerboeck.com' is not directly associated with the University of Wisconsin-Madison., The presence of input fields for 'Email Address / Username' and 'Password' on a non-matching domain is suspicious and indicative of phishing. DOM: 3.5.pages.csv
Source: https://uw.ungerboeck.com/prod/emc00/PublicSignIn.aspx?aat=35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d	Joe Sandbox AI: Score: 8 Reasons: The brand 'University of Wisconsin-Madison' is a well-known educational institution., The legitimate domain for the University of Wisconsin-Madison is 'wisc.edu'., The provided URL 'uw.ungerboeck.com' does not match the legitimate domain 'wisc.edu'., The domain 'ungerboeck.com' is not directly associated with the University of Wisconsin-Madison., The presence of input fields for 'Email Address / Username' and 'Password' on a non-matching domain is suspicious., The URL uses a subdomain 'uw' which could be misleading as it might imply association with the University of Wisconsin. DOM: 4.9.pages.csv
Source: https://uw.ungerboeck.com/prod/emc00/PublicSignIn.aspx?aat=35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d	Joe Sandbox AI: Score: 8 Reasons: The brand 'University of Wisconsin-Madison' is a well-known educational institution., The legitimate domain for the University of Wisconsin-Madison is 'wisc.edu'., The URL 'uw.ungerboeck.com' does not match the legitimate domain 'wisc.edu'., The domain 'ungerboeck.com' is not directly associated with the University of Wisconsin-Madison., The presence of input fields for 'Email Address / Username' and 'Password' on a non-matching domain is suspicious. DOM: 4.7.pages.csv

Form action URLs do not match main URL

Source: https://uw.ungerboeck.com/prod/emc00/PublicSignIn.aspx?aat=35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d

HTTP Parser: Form action: https://www.facebook.com/tr/ ungerboeck facebook

HTML body contains low number of good links

Source: https://uw.ungerboeck.com/prod/emc00/PublicSignIn.aspx?&aat=35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d	HTTP Parser: Number of links: 0
Source: https://uw.ungerboeck.com/prod/emc00/PublicSignIn.aspx?aat=35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d	HTTP Parser: Number of links: 0

HTML title does not match URL

Source: https://uw.ungerboeck.com/prod/emc00/PublicSignIn.aspx?&aat=35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d	HTTP Parser: Title: InterPro Registrations | University of Wisconsin-Madison does not match URL
Source: https://uw.ungerboeck.com/prod/emc00/PublicSignIn.aspx?aat=35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d	HTTP Parser: Title: InterPro Registrations | University of Wisconsin-Madison does not match URL

HTML body contains password input

Source: https://uw.ungerboeck.com/prod/emc00/PublicSignIn.aspx?&aat=35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d	HTTP Parser: <input type="password" .../> found
Source: https://uw.ungerboeck.com/prod/emc00/PublicSignIn.aspx?aat=35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d	HTTP Parser: <input type="password" .../> found

HTML page is missing a favicon

Source: https://uw.ungerboeck.com/prod/emc00/regload.html?aat=5a576b5836666f4d4d734735516c6546344d767341542b4f586c33616344786f335a3266626650657153593d&Timeout=1000&GACode=139795390&_ga=2.260120718.2047292829.1732125610-1541936858.1732125610

HTTP Parser: No favicon

META author tag missing

Source: https://uw.ungerboeck.com/prod/emc00/PublicSignIn.aspx?&aat=35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d	HTTP Parser: No <meta name="author".. found
Source: https://uw.ungerboeck.com/prod/emc00/PublicSignIn.aspx?aat=35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d	HTTP Parser: No <meta name="author".. found
Source: https://uw.ungerboeck.com/prod/emc00/PublicSignIn.aspx?aat=35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d	HTTP Parser: No <meta name="author".. found
Source: https://uw.ungerboeck.com/prod/emc00/PublicSignIn.aspx?aat=35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d	HTTP Parser: No <meta name="author".. found

META copyright tag missing

Source: https://uw.ungerboeck.com/prod/emc00/PublicSignIn.aspx?&aat=35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d	HTTP Parser: No <meta name="copyright".. found
Source: https://uw.ungerboeck.com/prod/emc00/PublicSignIn.aspx?aat=35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d	HTTP Parser: No <meta name="copyright".. found
Source: https://uw.ungerboeck.com/prod/emc00/PublicSignIn.aspx?aat=35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d	HTTP Parser: No <meta name="copyright".. found
Source: https://uw.ungerboeck.com/prod/emc00/PublicSignIn.aspx?aat=35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d	HTTP Parser: No <meta name="copyright".. found

Compliance

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.4:49875 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49940 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.4:50019 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.4:50019 version: TLS 1.2

Networking

HTTP GET or POST without a user agent

Source: global traffic

HTTP traffic detected: GET /ab?clientId=8BE9B3CD-1E19-4CE0-9725-398E0F144AA9 HTTP/1.1X-OfficeApp-BuildVersion: 16.0.11629.20316Accept-Encoding: gzip, deflateX-OfficeApp-Platform: universalX-OfficeApp-Language: en-CHX-OutlookMobile-Architecture: x64X-OutlookMobile-BuildFlavor: shipX-OutlookMobile-Environment: ProductionX-OfficeApp-MsoVersion: 10.0.19045X-OutlookMobile-HxServiceAccounts: NoneContent-Length: 0Content-Encoding: gzipHost: outlookmobile-office365-tas.msedge.netConnection: Keep-AliveCache-Control: no-cache

Connects to IPs without corresponding DNS lookups

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63

Downloads files from webservers via HTTP

Source: global traffic	HTTP traffic detected: GET /courses/maintaining-asphalt-pavements/?utm_source=Brochure&utm_medium=postal&utm_campaign=D487&utm_term=SHB&utm_content=Sep HTTP/1.1Host: interpro.wisc.eduConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/uw-csis-api/frontend/dist/styles/main.css?ver=2.18.0 HTTP/1.1Host: interpro.wisc.eduConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://interpro.wisc.edu/courses/maintaining-asphalt-pavements/?utm_source=Brochure&utm_medium=postal&utm_campaign=D487&utm_term=SHB&utm_content=SepAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/css/dashicons.min.css?ver=6.6.2 HTTP/1.1Host: interpro.wisc.eduConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://interpro.wisc.edu/courses/maintaining-asphalt-pavements/?utm_source=Brochure&utm_medium=postal&utm_campaign=D487&utm_term=SHB&utm_content=SepAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/megamenu-pro/icons/fontawesome6/css/all.min.css?ver=2.4 HTTP/1.1Host: interpro.wisc.eduConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://interpro.wisc.edu/courses/maintaining-asphalt-pavements/?utm_source=Brochure&utm_medium=postal&utm_campaign=D487&utm_term=SHB&utm_content=SepAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/megamenu-pro/icons/genericons/genericons/genericons.css?ver=2.4 HTTP/1.1Host: interpro.wisc.eduConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://interpro.wisc.edu/courses/maintaining-asphalt-pavements/?utm_source=Brochure&utm_medium=postal&utm_campaign=D487&utm_term=SHB&utm_content=SepAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/uw-theme/dist/main.min.css?ver=1.32.0 HTTP/1.1Host: interpro.wisc.eduConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://interpro.wisc.edu/courses/maintaining-asphalt-pavements/?utm_source=Brochure&utm_medium=postal&utm_campaign=D487&utm_term=SHB&utm_content=SepAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/uw-theme-child-epd/dist/styles/main.min.css?ver=9a38d19f643b787320ca17610fad4642 HTTP/1.1Host: interpro.wisc.eduConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://interpro.wisc.edu/courses/maintaining-asphalt-pavements/?utm_source=Brochure&utm_medium=postal&utm_campaign=D487&utm_term=SHB&utm_content=SepAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: */*Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /cookie-consent/1.1.0/uwcookieconsent.min.js?ver=1.1.0 HTTP/1.1Host: cdn.wisc.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://interpro.wisc.edu/courses/maintaining-asphalt-pavements/?utm_source=Brochure&utm_medium=postal&utm_campaign=D487&utm_term=SHB&utm_content=SepAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/megamenu-pro/icons/fontawesome6/webfonts/fa-regular-400.woff2 HTTP/1.1Host: interpro.wisc.eduConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://interpro.wisc.edusec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://interpro.wisc.edu/wp-content/plugins/megamenu-pro/icons/fontawesome6/css/all.min.css?ver=2.4Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/uw-theme/dist/fonts/uw-rh/redhat-display-latin.v14.woff2 HTTP/1.1Host: interpro.wisc.eduConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://interpro.wisc.edusec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://interpro.wisc.edu/courses/maintaining-asphalt-pavements/?utm_source=Brochure&utm_medium=postal&utm_campaign=D487&utm_term=SHB&utm_content=SepAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/uw-theme/dist/fonts/uw-rh/redhat-text-latin.v13.woff2 HTTP/1.1Host: interpro.wisc.eduConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://interpro.wisc.edusec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://interpro.wisc.edu/courses/maintaining-asphalt-pavements/?utm_source=Brochure&utm_medium=postal&utm_campaign=D487&utm_term=SHB&utm_content=SepAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/uw-theme/dist/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1Host: interpro.wisc.eduConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://interpro.wisc.edu/courses/maintaining-asphalt-pavements/?utm_source=Brochure&utm_medium=postal&utm_campaign=D487&utm_term=SHB&utm_content=SepAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/uw-csis-api/frontend/dist/scripts/selectize.min.js?ver=1.1.0 HTTP/1.1Host: interpro.wisc.eduConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://interpro.wisc.edu/courses/maintaining-asphalt-pavements/?utm_source=Brochure&utm_medium=postal&utm_campaign=D487&utm_term=SHB&utm_content=SepAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/uw-csis-api/frontend/dist/scripts/clipboard.min.js?ver=1.1.0 HTTP/1.1Host: interpro.wisc.eduConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://interpro.wisc.edu/courses/maintaining-asphalt-pavements/?utm_source=Brochure&utm_medium=postal&utm_campaign=D487&utm_term=SHB&utm_content=SepAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/uw-csis-api/frontend/dist/scripts/scripts.expanded.js?ver=2.18.0 HTTP/1.1Host: interpro.wisc.eduConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://interpro.wisc.edu/courses/maintaining-asphalt-pavements/?utm_source=Brochure&utm_medium=postal&utm_campaign=D487&utm_term=SHB&utm_content=SepAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/uw-theme/dist/main.min.js?ver=1.32.0 HTTP/1.1Host: interpro.wisc.eduConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://interpro.wisc.edu/courses/maintaining-asphalt-pavements/?utm_source=Brochure&utm_medium=postal&utm_campaign=D487&utm_term=SHB&utm_content=SepAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/uw-theme/dist/js/jquery-migrate/jquery-migrate.min.js?ver=3.4.0 HTTP/1.1Host: interpro.wisc.eduConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://interpro.wisc.edu/courses/maintaining-asphalt-pavements/?utm_source=Brochure&utm_medium=postal&utm_campaign=D487&utm_term=SHB&utm_content=SepAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/uw-theme-child-epd/dist/scripts/main.min.js?ver=5c0a3424ad10e6b7d0d5ae6fef9b29c7 HTTP/1.1Host: interpro.wisc.eduConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://interpro.wisc.edu/courses/maintaining-asphalt-pavements/?utm_source=Brochure&utm_medium=postal&utm_campaign=D487&utm_term=SHB&utm_content=SepAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/hoverIntent.min.js?ver=1.10.2 HTTP/1.1Host: interpro.wisc.eduConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://interpro.wisc.edu/courses/maintaining-asphalt-pavements/?utm_source=Brochure&utm_medium=postal&utm_campaign=D487&utm_term=SHB&utm_content=SepAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie-consent/1.1.0/uwcookieconsent.min.js?ver=1.1.0 HTTP/1.1Host: cdn.wisc.cloudConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/megamenu/js/maxmegamenu.js?ver=3.4 HTTP/1.1Host: interpro.wisc.eduConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://interpro.wisc.edu/courses/maintaining-asphalt-pavements/?utm_source=Brochure&utm_medium=postal&utm_campaign=D487&utm_term=SHB&utm_content=SepAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/uw-csis-api/frontend/dist/scripts/selectize.min.js?ver=1.1.0 HTTP/1.1Host: interpro.wisc.eduConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/uw-csis-api/frontend/dist/scripts/clipboard.min.js?ver=1.1.0 HTTP/1.1Host: interpro.wisc.eduConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/uw-theme/dist/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1Host: interpro.wisc.eduConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/megamenu-pro/assets/public.js?ver=2.4 HTTP/1.1Host: interpro.wisc.eduConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://interpro.wisc.edu/courses/maintaining-asphalt-pavements/?utm_source=Brochure&utm_medium=postal&utm_campaign=D487&utm_term=SHB&utm_content=SepAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/uw-theme/dist/js/jquery-migrate/jquery-migrate.min.js?ver=3.4.0 HTTP/1.1Host: interpro.wisc.eduConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/uw-csis-api/frontend/dist/scripts/scripts.expanded.js?ver=2.18.0 HTTP/1.1Host: interpro.wisc.eduConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/uw-theme/dist/main.min.js?ver=1.32.0 HTTP/1.1Host: interpro.wisc.eduConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/hoverIntent.min.js?ver=1.10.2 HTTP/1.1Host: interpro.wisc.eduConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/megamenu/js/maxmegamenu.js?ver=3.4 HTTP/1.1Host: interpro.wisc.eduConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/uw-theme-child-epd/dist/scripts/main.min.js?ver=5c0a3424ad10e6b7d0d5ae6fef9b29c7 HTTP/1.1Host: interpro.wisc.eduConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=rUPEdsBgULMVfse&MD=vPBmM3f9 HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/megamenu-pro/assets/public.js?ver=2.4 HTTP/1.1Host: interpro.wisc.eduConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/ga/rul?tid=G-P497LF1PMM&gacid=1541936858.1732125610&gtm=45je4bj0v878489483z871694474za200zb71694474&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101925629~102067555~102067808~102077855~102081485&z=1801789542 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://interpro.wisc.edu/courses/maintaining-asphalt-pavements/?utm_source=Brochure&utm_medium=postal&utm_campaign=D487&utm_term=SHB&utm_content=SepAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/uw-theme/dist/images/favicons/site.webmanifest HTTP/1.1Host: interpro.wisc.eduConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://interpro.wisc.edu/courses/maintaining-asphalt-pavements/?utm_source=Brochure&utm_medium=postal&utm_campaign=D487&utm_term=SHB&utm_content=SepAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /healthcheck HTTP/1.1Host: pagestates-tracking.crazyegg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://interpro.wisc.eduSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://interpro.wisc.edu/courses/maintaining-asphalt-pavements/?utm_source=Brochure&utm_medium=postal&utm_campaign=D487&utm_term=SHB&utm_content=SepAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /healthcheck HTTP/1.1Host: assets-tracking.crazyegg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://interpro.wisc.eduSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://interpro.wisc.edu/courses/maintaining-asphalt-pavements/?utm_source=Brochure&utm_medium=postal&utm_campaign=D487&utm_term=SHB&utm_content=SepAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: interpro.wisc.eduConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://interpro.wisc.edu/courses/maintaining-asphalt-pavements/?utm_source=Brochure&utm_medium=postal&utm_campaign=D487&utm_term=SHB&utm_content=SepAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.2047292829.1732125610; _gat_UA-68094028-1=1; _ga=GA1.1.1541936858.1732125610; _ga_P497LF1PMM=GS1.1.1732125611.1.0.1732125611.60.0.0; cebs=1; _ce.s=v~f983c2aad596bf9bba6ce3ba34a0ee9c1d5e31fd~lcw~1732125615132~vir~new~lva~1732125615131~vpv~0~lcw~1732125615134
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: interpro.wisc.eduConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.2047292829.1732125610; _gat_UA-68094028-1=1; _ga=GA1.1.1541936858.1732125610; _ga_P497LF1PMM=GS1.1.1732125611.1.0.1732125611.60.0.0; cebs=1; _ce.s=v~f983c2aad596bf9bba6ce3ba34a0ee9c1d5e31fd~lcw~1732125615132~vir~new~lva~1732125615131~vpv~0~lcw~1732125615134
Source: global traffic	HTTP traffic detected: GET /healthcheck HTTP/1.1Host: assets-tracking.crazyegg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /healthcheck HTTP/1.1Host: pagestates-tracking.crazyegg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /prod/emc00/regload.html?aat=5a576b5836666f4d4d734735516c6546344d767341542b4f586c33616344786f335a3266626650657153593d&Timeout=1000&GACode=139795390&_ga=2.260120718.2047292829.1732125610-1541936858.1732125610 HTTP/1.1Host: uw.ungerboeck.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://interpro.wisc.edu/courses/maintaining-asphalt-pavements/?utm_source=Brochure&utm_medium=postal&utm_campaign=D487&utm_term=SHB&utm_content=SepAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /clock?u=436902&st=219822&t=1732125615138&tk=8a62f271c4e54adf01ccce10e36ed939 HTTP/1.1Host: tracking.crazyegg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /regloadfiles/regload.css HTTP/1.1Host: uw-web.ungerboeck.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://uw.ungerboeck.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /regloadfiles/wordmark.gif HTTP/1.1Host: uw-web.ungerboeck.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://uw.ungerboeck.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=M5DSgPl0HW424/A/PQb+Sr0glp0He54rhtAWdkl2pBWUwWXpgzVx4RoV1Hx//VbvYMS4vG97sSCZX0Bk2jbARl6mSCUzh0x5eufG7+8TXw1P3MJHizbWDfDZuSa0; AWSALBCORS=M5DSgPl0HW424/A/PQb+Sr0glp0He54rhtAWdkl2pBWUwWXpgzVx4RoV1Hx//VbvYMS4vG97sSCZX0Bk2jbARl6mSCUzh0x5eufG7+8TXw1P3MJHizbWDfDZuSa0
Source: global traffic	HTTP traffic detected: GET /regloadfiles/crest.png HTTP/1.1Host: uw-web.ungerboeck.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://uw.ungerboeck.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=M5DSgPl0HW424/A/PQb+Sr0glp0He54rhtAWdkl2pBWUwWXpgzVx4RoV1Hx//VbvYMS4vG97sSCZX0Bk2jbARl6mSCUzh0x5eufG7+8TXw1P3MJHizbWDfDZuSa0; AWSALBCORS=M5DSgPl0HW424/A/PQb+Sr0glp0He54rhtAWdkl2pBWUwWXpgzVx4RoV1Hx//VbvYMS4vG97sSCZX0Bk2jbARl6mSCUzh0x5eufG7+8TXw1P3MJHizbWDfDZuSa0
Source: global traffic	HTTP traffic detected: GET /regloadfiles/background.jpg HTTP/1.1Host: uw-web.ungerboeck.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://uw-web.ungerboeck.com/regloadfiles/regload.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=M5DSgPl0HW424/A/PQb+Sr0glp0He54rhtAWdkl2pBWUwWXpgzVx4RoV1Hx//VbvYMS4vG97sSCZX0Bk2jbARl6mSCUzh0x5eufG7+8TXw1P3MJHizbWDfDZuSa0; AWSALBCORS=M5DSgPl0HW424/A/PQb+Sr0glp0He54rhtAWdkl2pBWUwWXpgzVx4RoV1Hx//VbvYMS4vG97sSCZX0Bk2jbARl6mSCUzh0x5eufG7+8TXw1P3MJHizbWDfDZuSa0
Source: global traffic	HTTP traffic detected: GET /regloadfiles/headerBar.jpg HTTP/1.1Host: uw-web.ungerboeck.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://uw-web.ungerboeck.com/regloadfiles/regload.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=M5DSgPl0HW424/A/PQb+Sr0glp0He54rhtAWdkl2pBWUwWXpgzVx4RoV1Hx//VbvYMS4vG97sSCZX0Bk2jbARl6mSCUzh0x5eufG7+8TXw1P3MJHizbWDfDZuSa0; AWSALBCORS=M5DSgPl0HW424/A/PQb+Sr0glp0He54rhtAWdkl2pBWUwWXpgzVx4RoV1Hx//VbvYMS4vG97sSCZX0Bk2jbARl6mSCUzh0x5eufG7+8TXw1P3MJHizbWDfDZuSa0
Source: global traffic	HTTP traffic detected: GET /prod/emc00/register.aspx?&aat=5a576b5836666f4d4d734735516c6546344d767341542b4f586c33616344786f335a3266626650657153593d&Timeout=1000&GACode=139795390&_ga=2.260120718.2047292829.1732125610-1541936858.1732125610 HTTP/1.1Host: uw.ungerboeck.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://uw.ungerboeck.com/prod/emc00/regload.html?aat=5a576b5836666f4d4d734735516c6546344d767341542b4f586c33616344786f335a3266626650657153593d&Timeout=1000&GACode=139795390&_ga=2.260120718.2047292829.1732125610-1541936858.1732125610Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=gdAUpMVmRDYNGM0FsMIVylE77j/9zBY5HruuWtd2m7ttr89bxAbBk477A56CJnakhX8GP+A9VyT1z2do9AGdqU2g57u9JcXsHQEojHtxlcza5YGWjBqK972bRqx6; AWSALBCORS=gdAUpMVmRDYNGM0FsMIVylE77j/9zBY5HruuWtd2m7ttr89bxAbBk477A56CJnakhX8GP+A9VyT1z2do9AGdqU2g57u9JcXsHQEojHtxlcza5YGWjBqK972bRqx6
Source: global traffic	HTTP traffic detected: GET /regloadfiles/wordmark.gif HTTP/1.1Host: uw-web.ungerboeck.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=Wam4pI54c5jQmLrmnjzv+jp6pDcrjjmLLtR/3w6e+Mf3BJqRqLb3phasxDrDyxvayVJ11+5B5DEee3QANaVtfhwmvVw+aqEFso0SQtOfTOUFbELqIXZ8Pu1Ye650; AWSALBCORS=Wam4pI54c5jQmLrmnjzv+jp6pDcrjjmLLtR/3w6e+Mf3BJqRqLb3phasxDrDyxvayVJ11+5B5DEee3QANaVtfhwmvVw+aqEFso0SQtOfTOUFbELqIXZ8Pu1Ye650
Source: global traffic	HTTP traffic detected: GET /regloadfiles/crest.png HTTP/1.1Host: uw-web.ungerboeck.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=MtwsqZ0on7wIbwRUAUmji9+/EQY3FU15K34jm9loZjLbDx+b02QPbtFVouQreAiizPo7kaqHwkKFhu1Ad+VLCN1RdJN+QkgLKFvVI4GX8X6M5H89sY0jlxjshXbJ; AWSALBCORS=MtwsqZ0on7wIbwRUAUmji9+/EQY3FU15K34jm9loZjLbDx+b02QPbtFVouQreAiizPo7kaqHwkKFhu1Ad+VLCN1RdJN+QkgLKFvVI4GX8X6M5H89sY0jlxjshXbJ
Source: global traffic	HTTP traffic detected: GET /regloadfiles/background.jpg HTTP/1.1Host: uw-web.ungerboeck.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=R/wZmHzy1CxQ7FRe8l/kGZqYl37CUJos+jwKeuSyILj8tMotKxkbMbD/xDSkfwMqwr1P/HpfHM67BWU7KhGdGtzOp5M1XkU0NlhtfOYQf29plE6axIXOap9pTNHq; AWSALBCORS=R/wZmHzy1CxQ7FRe8l/kGZqYl37CUJos+jwKeuSyILj8tMotKxkbMbD/xDSkfwMqwr1P/HpfHM67BWU7KhGdGtzOp5M1XkU0NlhtfOYQf29plE6axIXOap9pTNHq
Source: global traffic	HTTP traffic detected: GET /prod/emc00/register.aspx?&aat=5a576b5836666f4d4d734735516c6546344d767341542b4f586c33616344786f335a3266626650657153593d&Timeout=1000&GACode=139795390&_ga=2.260120718.2047292829.1732125610-1541936858.1732125610 HTTP/1.1Host: uw.ungerboeck.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://uw.ungerboeck.com/prod/emc00/regload.html?aat=5a576b5836666f4d4d734735516c6546344d767341542b4f586c33616344786f335a3266626650657153593d&Timeout=1000&GACode=139795390&_ga=2.260120718.2047292829.1732125610-1541936858.1732125610Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=X+3ARNn7KgPvyjBvZFnV/bGbyw37MwonO9u0suaW4eoiKRToIn/ITgzBBOe6STRWg7GbcWAqSVpKa8sU/a74EcJQo78Y2qbaV1cYqPIOfuGxk1UbD8exxmhVXLdb; AWSALBCORS=X+3ARNn7KgPvyjBvZFnV/bGbyw37MwonO9u0suaW4eoiKRToIn/ITgzBBOe6STRWg7GbcWAqSVpKa8sU/a74EcJQo78Y2qbaV1cYqPIOfuGxk1UbD8exxmhVXLdb; ASP.NET_SessionId=hplj0hjxwcyof5buciwx5bba; __AntiXsrfToken=3b9261caba1873c73d317ed7466940eb
Source: global traffic	HTTP traffic detected: GET /regloadfiles/headerBar.jpg HTTP/1.1Host: uw-web.ungerboeck.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=R/wZmHzy1CxQ7FRe8l/kGZqYl37CUJos+jwKeuSyILj8tMotKxkbMbD/xDSkfwMqwr1P/HpfHM67BWU7KhGdGtzOp5M1XkU0NlhtfOYQf29plE6axIXOap9pTNHq; AWSALBCORS=R/wZmHzy1CxQ7FRe8l/kGZqYl37CUJos+jwKeuSyILj8tMotKxkbMbD/xDSkfwMqwr1P/HpfHM67BWU7KhGdGtzOp5M1XkU0NlhtfOYQf29plE6axIXOap9pTNHq
Source: global traffic	HTTP traffic detected: GET /prod/emc00/PublicSignIn.aspx?&aat=35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d HTTP/1.1Host: uw.ungerboeck.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://uw.ungerboeck.com/prod/emc00/regload.html?aat=5a576b5836666f4d4d734735516c6546344d767341542b4f586c33616344786f335a3266626650657153593d&Timeout=1000&GACode=139795390&_ga=2.260120718.2047292829.1732125610-1541936858.1732125610Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hplj0hjxwcyof5buciwx5bba; _ga=GA1.2.1541936858.1732125610; _gid=GA1.2.2047292829.1732125610; _gat=1; AWSALB=8cVmUdB5tFDFTOwyjKxKdjHI7J2fwX1vPmA3nk8A8aOfQx2P7IryggNsff7+VAewnTlCz5p23r+2g8kdG2jjtWxAl7FCZPy/AEV+VyH4FrApoGFR4aWk2skrKT7U; AWSALBCORS=8cVmUdB5tFDFTOwyjKxKdjHI7J2fwX1vPmA3nk8A8aOfQx2P7IryggNsff7+VAewnTlCz5p23r+2g8kdG2jjtWxAl7FCZPy/AEV+VyH4FrApoGFR4aWk2skrKT7U; __AntiXsrfToken=a106a286404a66d70702f3df59b62dd5; fdleileilfblfhlfhlfel=932b5947804a5a7fef3de7df074e2e93; CookiesEnabled=a70c6a1bdcbac88b090aad1e36c12ee6
Source: global traffic	HTTP traffic detected: GET /prod/util00/styles/bootstrap.min.css HTTP/1.1Host: uw.ungerboeck.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://uw.ungerboeck.com/prod/emc00/PublicSignIn.aspx?&aat=35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hplj0hjxwcyof5buciwx5bba; _ga=GA1.2.1541936858.1732125610; _gid=GA1.2.2047292829.1732125610; _gat=1; fdleileilfblfhlfhlfel=932b5947804a5a7fef3de7df074e2e93; CookiesEnabled=a70c6a1bdcbac88b090aad1e36c12ee6; AWSALB=mW2T1S2Lq6ldQX66uwwJ6lzPHjH1Yj+Vf2Z+kiKqmucMJ5/H1+xF0lvl1Gn3h6KaeaemMl6tIaS46dyiqMBmAXtyi4UEaIDu7bB9+IsHT0e1/BJdhO6DHF2rKS+2; AWSALBCORS=mW2T1S2Lq6ldQX66uwwJ6lzPHjH1Yj+Vf2Z+kiKqmucMJ5/H1+xF0lvl1Gn3h6KaeaemMl6tIaS46dyiqMBmAXtyi4UEaIDu7bB9+IsHT0e1/BJdhO6DHF2rKS+2; __AntiXsrfToken=fdleileilfblfhlfhlfel
Source: global traffic	HTTP traffic detected: GET /prod/content/font-usi.min.css HTTP/1.1Host: uw.ungerboeck.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://uw.ungerboeck.com/prod/emc00/PublicSignIn.aspx?&aat=35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hplj0hjxwcyof5buciwx5bba; _ga=GA1.2.1541936858.1732125610; _gid=GA1.2.2047292829.1732125610; _gat=1; fdleileilfblfhlfhlfel=932b5947804a5a7fef3de7df074e2e93; CookiesEnabled=a70c6a1bdcbac88b090aad1e36c12ee6; AWSALB=mW2T1S2Lq6ldQX66uwwJ6lzPHjH1Yj+Vf2Z+kiKqmucMJ5/H1+xF0lvl1Gn3h6KaeaemMl6tIaS46dyiqMBmAXtyi4UEaIDu7bB9+IsHT0e1/BJdhO6DHF2rKS+2; AWSALBCORS=mW2T1S2Lq6ldQX66uwwJ6lzPHjH1Yj+Vf2Z+kiKqmucMJ5/H1+xF0lvl1Gn3h6KaeaemMl6tIaS46dyiqMBmAXtyi4UEaIDu7bB9+IsHT0e1/BJdhO6DHF2rKS+2; __AntiXsrfToken=fdleileilfblfhlfhlfel
Source: global traffic	HTTP traffic detected: GET /prod/WebResource.axd?d=U8bTl-icD-nuba8U6OWXtEtYi6_jkhnppULAATJ15Jg1abqvAtsLo6a4hoI5UUxi6Csazee42SaWlbuBnIeHSPuvti2uI9fsco_bwZjMevLgaqmMhICHoT8vj7ssA7Sz0&t=638630395962731949 HTTP/1.1Host: uw.ungerboeck.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://uw.ungerboeck.com/prod/emc00/PublicSignIn.aspx?&aat=35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hplj0hjxwcyof5buciwx5bba; _ga=GA1.2.1541936858.1732125610; _gid=GA1.2.2047292829.1732125610; _gat=1; fdleileilfblfhlfhlfel=932b5947804a5a7fef3de7df074e2e93; CookiesEnabled=a70c6a1bdcbac88b090aad1e36c12ee6; AWSALB=mW2T1S2Lq6ldQX66uwwJ6lzPHjH1Yj+Vf2Z+kiKqmucMJ5/H1+xF0lvl1Gn3h6KaeaemMl6tIaS46dyiqMBmAXtyi4UEaIDu7bB9+IsHT0e1/BJdhO6DHF2rKS+2; AWSALBCORS=mW2T1S2Lq6ldQX66uwwJ6lzPHjH1Yj+Vf2Z+kiKqmucMJ5/H1+xF0lvl1Gn3h6KaeaemMl6tIaS46dyiqMBmAXtyi4UEaIDu7bB9+IsHT0e1/BJdhO6DHF2rKS+2; __AntiXsrfToken=fdleileilfblfhlfhlfel
Source: global traffic	HTTP traffic detected: GET /prod/WebResource.axd?d=Vir7DXAp3sLBf_uhwYGZRyMuLUzQ9PlWzhFxGSV3YiKkztAgPM3NUOInMPAs7GVkOn89lbjSw4Pab-6cMSPQD_X4LL5Rjz0WjA72LmslFBapLABusM093yKfUzIrn5Jf0&t=638630395962731949 HTTP/1.1Host: uw.ungerboeck.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://uw.ungerboeck.com/prod/emc00/PublicSignIn.aspx?&aat=35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hplj0hjxwcyof5buciwx5bba; _ga=GA1.2.1541936858.1732125610; _gid=GA1.2.2047292829.1732125610; _gat=1; fdleileilfblfhlfhlfel=932b5947804a5a7fef3de7df074e2e93; CookiesEnabled=a70c6a1bdcbac88b090aad1e36c12ee6; AWSALB=mW2T1S2Lq6ldQX66uwwJ6lzPHjH1Yj+Vf2Z+kiKqmucMJ5/H1+xF0lvl1Gn3h6KaeaemMl6tIaS46dyiqMBmAXtyi4UEaIDu7bB9+IsHT0e1/BJdhO6DHF2rKS+2; AWSALBCORS=mW2T1S2Lq6ldQX66uwwJ6lzPHjH1Yj+Vf2Z+kiKqmucMJ5/H1+xF0lvl1Gn3h6KaeaemMl6tIaS46dyiqMBmAXtyi4UEaIDu7bB9+IsHT0e1/BJdhO6DHF2rKS+2; __AntiXsrfToken=fdleileilfblfhlfhlfel
Source: global traffic	HTTP traffic detected: GET /prod/WebResource.axd?d=V_BjGHrJs501tPR1rKeMFURQK4XxjNdqcgnLCd1_EWaxwuf4L3OziMtU_05OaJHX6ATx0xlUDKY4cciAEPWpAr55_dQkx7nAbUv6YTxmVnygMA6tA5Wdestu_PnbCmGZ0&t=638630395962731949 HTTP/1.1Host: uw.ungerboeck.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://uw.ungerboeck.com/prod/emc00/PublicSignIn.aspx?&aat=35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hplj0hjxwcyof5buciwx5bba; _ga=GA1.2.1541936858.1732125610; _gid=GA1.2.2047292829.1732125610; _gat=1; fdleileilfblfhlfhlfel=932b5947804a5a7fef3de7df074e2e93; CookiesEnabled=a70c6a1bdcbac88b090aad1e36c12ee6; AWSALB=mW2T1S2Lq6ldQX66uwwJ6lzPHjH1Yj+Vf2Z+kiKqmucMJ5/H1+xF0lvl1Gn3h6KaeaemMl6tIaS46dyiqMBmAXtyi4UEaIDu7bB9+IsHT0e1/BJdhO6DHF2rKS+2; AWSALBCORS=mW2T1S2Lq6ldQX66uwwJ6lzPHjH1Yj+Vf2Z+kiKqmucMJ5/H1+xF0lvl1Gn3h6KaeaemMl6tIaS46dyiqMBmAXtyi4UEaIDu7bB9+IsHT0e1/BJdhO6DHF2rKS+2; __AntiXsrfToken=fdleileilfblfhlfhlfel
Source: global traffic	HTTP traffic detected: GET /prod/util00/scripts/jquery.js HTTP/1.1Host: uw.ungerboeck.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://uw.ungerboeck.com/prod/emc00/PublicSignIn.aspx?&aat=35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hplj0hjxwcyof5buciwx5bba; _ga=GA1.2.1541936858.1732125610; _gid=GA1.2.2047292829.1732125610; _gat=1; fdleileilfblfhlfhlfel=932b5947804a5a7fef3de7df074e2e93; CookiesEnabled=a70c6a1bdcbac88b090aad1e36c12ee6; AWSALB=mW2T1S2Lq6ldQX66uwwJ6lzPHjH1Yj+Vf2Z+kiKqmucMJ5/H1+xF0lvl1Gn3h6KaeaemMl6tIaS46dyiqMBmAXtyi4UEaIDu7bB9+IsHT0e1/BJdhO6DHF2rKS+2; AWSALBCORS=mW2T1S2Lq6ldQX66uwwJ6lzPHjH1Yj+Vf2Z+kiKqmucMJ5/H1+xF0lvl1Gn3h6KaeaemMl6tIaS46dyiqMBmAXtyi4UEaIDu7bB9+IsHT0e1/BJdhO6DHF2rKS+2; __AntiXsrfToken=fdleileilfblfhlfhlfel
Source: global traffic	HTTP traffic detected: GET /prod/util00/scripts/bootstrap.min.js HTTP/1.1Host: uw.ungerboeck.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://uw.ungerboeck.com/prod/emc00/PublicSignIn.aspx?&aat=35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hplj0hjxwcyof5buciwx5bba; _ga=GA1.2.1541936858.1732125610; _gid=GA1.2.2047292829.1732125610; _gat=1; fdleileilfblfhlfhlfel=932b5947804a5a7fef3de7df074e2e93; CookiesEnabled=a70c6a1bdcbac88b090aad1e36c12ee6; AWSALB=mW2T1S2Lq6ldQX66uwwJ6lzPHjH1Yj+Vf2Z+kiKqmucMJ5/H1+xF0lvl1Gn3h6KaeaemMl6tIaS46dyiqMBmAXtyi4UEaIDu7bB9+IsHT0e1/BJdhO6DHF2rKS+2; AWSALBCORS=mW2T1S2Lq6ldQX66uwwJ6lzPHjH1Yj+Vf2Z+kiKqmucMJ5/H1+xF0lvl1Gn3h6KaeaemMl6tIaS46dyiqMBmAXtyi4UEaIDu7bB9+IsHT0e1/BJdhO6DHF2rKS+2; __AntiXsrfToken=fdleileilfblfhlfhlfel
Source: global traffic	HTTP traffic detected: GET /prod/WebResource.axd?d=pynGkmcFUV13He1Qd6_TZGXw9fvOH-pqCqBc1tp7zgOvCvQgIFnCsEoo1_goXkHwmBHC1A4GTDz_svfSCZ64HA2&t=638610691965203766 HTTP/1.1Host: uw.ungerboeck.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://uw.ungerboeck.com/prod/emc00/PublicSignIn.aspx?&aat=35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hplj0hjxwcyof5buciwx5bba; _ga=GA1.2.1541936858.1732125610; _gid=GA1.2.2047292829.1732125610; _gat=1; fdleileilfblfhlfhlfel=932b5947804a5a7fef3de7df074e2e93; CookiesEnabled=a70c6a1bdcbac88b090aad1e36c12ee6; AWSALB=mW2T1S2Lq6ldQX66uwwJ6lzPHjH1Yj+Vf2Z+kiKqmucMJ5/H1+xF0lvl1Gn3h6KaeaemMl6tIaS46dyiqMBmAXtyi4UEaIDu7bB9+IsHT0e1/BJdhO6DHF2rKS+2; AWSALBCORS=mW2T1S2Lq6ldQX66uwwJ6lzPHjH1Yj+Vf2Z+kiKqmucMJ5/H1+xF0lvl1Gn3h6KaeaemMl6tIaS46dyiqMBmAXtyi4UEaIDu7bB9+IsHT0e1/BJdhO6DHF2rKS+2; __AntiXsrfToken=fdleileilfblfhlfhlfel
Source: global traffic	HTTP traffic detected: GET /prod/WebResource.axd?d=O2PQBIpVeypHACrKnLMX6S86NcyT0CO8l1FLY9ISNjLfsZNDy7WruWPgGz58ZV_Vx7Z_hZMBUiBbXDy-MAaeNa4-Ul9QaWcTgN4udt1nTJBgHOEoq6L5lm9_6O0_9whE0&t=638630395962731949 HTTP/1.1Host: uw.ungerboeck.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://uw.ungerboeck.com/prod/emc00/PublicSignIn.aspx?&aat=35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hplj0hjxwcyof5buciwx5bba; _ga=GA1.2.1541936858.1732125610; _gid=GA1.2.2047292829.1732125610; _gat=1; fdleileilfblfhlfhlfel=932b5947804a5a7fef3de7df074e2e93; CookiesEnabled=a70c6a1bdcbac88b090aad1e36c12ee6; AWSALB=mW2T1S2Lq6ldQX66uwwJ6lzPHjH1Yj+Vf2Z+kiKqmucMJ5/H1+xF0lvl1Gn3h6KaeaemMl6tIaS46dyiqMBmAXtyi4UEaIDu7bB9+IsHT0e1/BJdhO6DHF2rKS+2; AWSALBCORS=mW2T1S2Lq6ldQX66uwwJ6lzPHjH1Yj+Vf2Z+kiKqmucMJ5/H1+xF0lvl1Gn3h6KaeaemMl6tIaS46dyiqMBmAXtyi4UEaIDu7bB9+IsHT0e1/BJdhO6DHF2rKS+2; __AntiXsrfToken=fdleileilfblfhlfhlfel
Source: global traffic	HTTP traffic detected: GET /prod/WebResource.axd?d=3oA-8BV39FG1mSdb0lvWaqRhzw_skJ-sNi-gEc8AX5kevqbGpryRl1r1sXpTo56DjIglcMr-NHcEZf01AdZuGJdsicrCRMd2BkrNYQOTq1iYyC5ENwGVKLdVTqcb73rZ0&t=638630395962731949 HTTP/1.1Host: uw.ungerboeck.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://uw.ungerboeck.com/prod/emc00/PublicSignIn.aspx?&aat=35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hplj0hjxwcyof5buciwx5bba; _ga=GA1.2.1541936858.1732125610; _gid=GA1.2.2047292829.1732125610; _gat=1; fdleileilfblfhlfhlfel=932b5947804a5a7fef3de7df074e2e93; CookiesEnabled=a70c6a1bdcbac88b090aad1e36c12ee6; AWSALB=mW2T1S2Lq6ldQX66uwwJ6lzPHjH1Yj+Vf2Z+kiKqmucMJ5/H1+xF0lvl1Gn3h6KaeaemMl6tIaS46dyiqMBmAXtyi4UEaIDu7bB9+IsHT0e1/BJdhO6DHF2rKS+2; AWSALBCORS=mW2T1S2Lq6ldQX66uwwJ6lzPHjH1Yj+Vf2Z+kiKqmucMJ5/H1+xF0lvl1Gn3h6KaeaemMl6tIaS46dyiqMBmAXtyi4UEaIDu7bB9+IsHT0e1/BJdhO6DHF2rKS+2; __AntiXsrfToken=fdleileilfblfhlfhlfel
Source: global traffic	HTTP traffic detected: GET /prod/WebResource.axd?d=ZhvZ6nEUu0uT2plC5wijYzKwJUP9SuIBXKiVItNiH9R4RSnTe36UEiguaNQWSBsvvoObfICHO7gbnLcT5PcONhHVHa2DH86zF6Pgdjlk2-IdmUPFTZmQ-6w1jDXcvAVQ0&t=638630395962731949 HTTP/1.1Host: uw.ungerboeck.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://uw.ungerboeck.com/prod/emc00/PublicSignIn.aspx?&aat=35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hplj0hjxwcyof5buciwx5bba; _ga=GA1.2.1541936858.1732125610; _gid=GA1.2.2047292829.1732125610; _gat=1; fdleileilfblfhlfhlfel=932b5947804a5a7fef3de7df074e2e93; CookiesEnabled=a70c6a1bdcbac88b090aad1e36c12ee6; AWSALB=mW2T1S2Lq6ldQX66uwwJ6lzPHjH1Yj+Vf2Z+kiKqmucMJ5/H1+xF0lvl1Gn3h6KaeaemMl6tIaS46dyiqMBmAXtyi4UEaIDu7bB9+IsHT0e1/BJdhO6DHF2rKS+2; AWSALBCORS=mW2T1S2Lq6ldQX66uwwJ6lzPHjH1Yj+Vf2Z+kiKqmucMJ5/H1+xF0lvl1Gn3h6KaeaemMl6tIaS46dyiqMBmAXtyi4UEaIDu7bB9+IsHT0e1/BJdhO6DHF2rKS+2; __AntiXsrfToken=fdleileilfblfhlfhlfel
Source: global traffic	HTTP traffic detected: GET /prod/util00/scripts/jquery.js HTTP/1.1Host: uw.ungerboeck.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hplj0hjxwcyof5buciwx5bba; _ga=GA1.2.1541936858.1732125610; _gid=GA1.2.2047292829.1732125610; _gat=1; fdleileilfblfhlfhlfel=932b5947804a5a7fef3de7df074e2e93; CookiesEnabled=a70c6a1bdcbac88b090aad1e36c12ee6; __AntiXsrfToken=fdleileilfblfhlfhlfel; AWSALB=T40VlyeRSvbm1zP+11J1z6UsdI75LSMUPd+1wOnkbVVx+UjA6i9iqB9yV1vS6uArZgWd8XTuviVa6fy96jdhqZ00HtQnFf0IC2jvRcKxkTdQkfhrg8//0NbpjI16; AWSALBCORS=T40VlyeRSvbm1zP+11J1z6UsdI75LSMUPd+1wOnkbVVx+UjA6i9iqB9yV1vS6uArZgWd8XTuviVa6fy96jdhqZ00HtQnFf0IC2jvRcKxkTdQkfhrg8//0NbpjI16
Source: global traffic	HTTP traffic detected: GET /prod/WebResource.axd?d=KdOFLQoTBri1oUJHVfTd9u2r7v_0g4w-tkZ0KvYAGv-hKJ_B5P7tBw_LqhkSS6fexkJPpeT2gi_PYcdHag0oawiX9aMHvMmNj59d4lRqOeYWMuCG3uP1Q2v9cwgx0O99f_yvvXcFPwn8WzsK5P4nSg2&t=638630395962731949 HTTP/1.1Host: uw.ungerboeck.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://uw.ungerboeck.com/prod/emc00/PublicSignIn.aspx?&aat=35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hplj0hjxwcyof5buciwx5bba; _ga=GA1.2.1541936858.1732125610; _gid=GA1.2.2047292829.1732125610; _gat=1; fdleileilfblfhlfhlfel=932b5947804a5a7fef3de7df074e2e93; CookiesEnabled=a70c6a1bdcbac88b090aad1e36c12ee6; AWSALB=mW2T1S2Lq6ldQX66uwwJ6lzPHjH1Yj+Vf2Z+kiKqmucMJ5/H1+xF0lvl1Gn3h6KaeaemMl6tIaS46dyiqMBmAXtyi4UEaIDu7bB9+IsHT0e1/BJdhO6DHF2rKS+2; AWSALBCORS=mW2T1S2Lq6ldQX66uwwJ6lzPHjH1Yj+Vf2Z+kiKqmucMJ5/H1+xF0lvl1Gn3h6KaeaemMl6tIaS46dyiqMBmAXtyi4UEaIDu7bB9+IsHT0e1/BJdhO6DHF2rKS+2; __AntiXsrfToken=fdleileilfblfhlfhlfel
Source: global traffic	HTTP traffic detected: GET /prod/WebResource.axd?d=x-Q0JOSfEvbuf6e-wLnXc2IfMJ6qrtaq73pRF9LHatS8m0CBiMVVSh5jKllIuGRKoV_1_NVelAGlwFIrJwDY34wbb6JTXcDsIGbN4jSWFLR--Hgnh2HAvfYwS3tB8Q1VRjZhOCqjOegW-E9hO4xLIA2&t=638630395962731949 HTTP/1.1Host: uw.ungerboeck.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://uw.ungerboeck.com/prod/emc00/PublicSignIn.aspx?&aat=35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hplj0hjxwcyof5buciwx5bba; _ga=GA1.2.1541936858.1732125610; _gid=GA1.2.2047292829.1732125610; _gat=1; fdleileilfblfhlfhlfel=932b5947804a5a7fef3de7df074e2e93; CookiesEnabled=a70c6a1bdcbac88b090aad1e36c12ee6; AWSALB=mW2T1S2Lq6ldQX66uwwJ6lzPHjH1Yj+Vf2Z+kiKqmucMJ5/H1+xF0lvl1Gn3h6KaeaemMl6tIaS46dyiqMBmAXtyi4UEaIDu7bB9+IsHT0e1/BJdhO6DHF2rKS+2; AWSALBCORS=mW2T1S2Lq6ldQX66uwwJ6lzPHjH1Yj+Vf2Z+kiKqmucMJ5/H1+xF0lvl1Gn3h6KaeaemMl6tIaS46dyiqMBmAXtyi4UEaIDu7bB9+IsHT0e1/BJdhO6DHF2rKS+2; __AntiXsrfToken=fdleileilfblfhlfhlfel
Source: global traffic	HTTP traffic detected: GET /prod/WebResource.axd?d=WBvAbC_2XTFyh_ZUX2NfuYdB15MrJegTcgOEtvkO9YV8ZlhxMj_dpIfHnzeWZTzB--ANaclSHOTR8YSzKKFE4Yfx5teMEwqCUikyYgNNSogjcIhDtSrXjhtEbTTGyzZ-Eq8S3v5xjiTk0BKGodtk3w2&t=638630395962731949 HTTP/1.1Host: uw.ungerboeck.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://uw.ungerboeck.com/prod/emc00/PublicSignIn.aspx?&aat=35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hplj0hjxwcyof5buciwx5bba; _ga=GA1.2.1541936858.1732125610; _gid=GA1.2.2047292829.1732125610; _gat=1; fdleileilfblfhlfhlfel=932b5947804a5a7fef3de7df074e2e93; CookiesEnabled=a70c6a1bdcbac88b090aad1e36c12ee6; AWSALB=mW2T1S2Lq6ldQX66uwwJ6lzPHjH1Yj+Vf2Z+kiKqmucMJ5/H1+xF0lvl1Gn3h6KaeaemMl6tIaS46dyiqMBmAXtyi4UEaIDu7bB9+IsHT0e1/BJdhO6DHF2rKS+2; AWSALBCORS=mW2T1S2Lq6ldQX66uwwJ6lzPHjH1Yj+Vf2Z+kiKqmucMJ5/H1+xF0lvl1Gn3h6KaeaemMl6tIaS46dyiqMBmAXtyi4UEaIDu7bB9+IsHT0e1/BJdhO6DHF2rKS+2; __AntiXsrfToken=fdleileilfblfhlfhlfel
Source: global traffic	HTTP traffic detected: GET /prod/WebResource.axd?d=pynGkmcFUV13He1Qd6_TZGXw9fvOH-pqCqBc1tp7zgOvCvQgIFnCsEoo1_goXkHwmBHC1A4GTDz_svfSCZ64HA2&t=638610691965203766 HTTP/1.1Host: uw.ungerboeck.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hplj0hjxwcyof5buciwx5bba; _ga=GA1.2.1541936858.1732125610; _gid=GA1.2.2047292829.1732125610; _gat=1; fdleileilfblfhlfhlfel=932b5947804a5a7fef3de7df074e2e93; CookiesEnabled=a70c6a1bdcbac88b090aad1e36c12ee6; __AntiXsrfToken=fdleileilfblfhlfhlfel; AWSALB=qyE2tTNHjlY2vabNVNOM/UPI9vo6e49jRLTnmF4IvaOUFO3cIck0+1BwKNNvtwNRC6iHbAEPkdscaPvV8IEL04BezwQymNe6Zs0xQNiTegKbCxNCAA0hZtv/brS7; AWSALBCORS=qyE2tTNHjlY2vabNVNOM/UPI9vo6e49jRLTnmF4IvaOUFO3cIck0+1BwKNNvtwNRC6iHbAEPkdscaPvV8IEL04BezwQymNe6Zs0xQNiTegKbCxNCAA0hZtv/brS7
Source: global traffic	HTTP traffic detected: GET /prod/util00/scripts/bootstrap.min.js HTTP/1.1Host: uw.ungerboeck.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hplj0hjxwcyof5buciwx5bba; _ga=GA1.2.1541936858.1732125610; _gid=GA1.2.2047292829.1732125610; _gat=1; fdleileilfblfhlfhlfel=932b5947804a5a7fef3de7df074e2e93; CookiesEnabled=a70c6a1bdcbac88b090aad1e36c12ee6; __AntiXsrfToken=fdleileilfblfhlfhlfel; AWSALB=qyE2tTNHjlY2vabNVNOM/UPI9vo6e49jRLTnmF4IvaOUFO3cIck0+1BwKNNvtwNRC6iHbAEPkdscaPvV8IEL04BezwQymNe6Zs0xQNiTegKbCxNCAA0hZtv/brS7; AWSALBCORS=qyE2tTNHjlY2vabNVNOM/UPI9vo6e49jRLTnmF4IvaOUFO3cIck0+1BwKNNvtwNRC6iHbAEPkdscaPvV8IEL04BezwQymNe6Zs0xQNiTegKbCxNCAA0hZtv/brS7
Source: global traffic	HTTP traffic detected: GET /prod/WebResource.axd?d=O2PQBIpVeypHACrKnLMX6S86NcyT0CO8l1FLY9ISNjLfsZNDy7WruWPgGz58ZV_Vx7Z_hZMBUiBbXDy-MAaeNa4-Ul9QaWcTgN4udt1nTJBgHOEoq6L5lm9_6O0_9whE0&t=638630395962731949 HTTP/1.1Host: uw.ungerboeck.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hplj0hjxwcyof5buciwx5bba; _ga=GA1.2.1541936858.1732125610; _gid=GA1.2.2047292829.1732125610; _gat=1; fdleileilfblfhlfhlfel=932b5947804a5a7fef3de7df074e2e93; CookiesEnabled=a70c6a1bdcbac88b090aad1e36c12ee6; __AntiXsrfToken=fdleileilfblfhlfhlfel; AWSALB=idNn+sNeHfPWXedreYUq7Qt/f1E4iFZZ++vuTJa3QXEhN8wmkTDavHuj5ONDPJIH70+mbz5impShkAqo5IAGxTxBmSwMO6g8wiz1WeRUHRf6yp3JFZEgysFyLJGQ; AWSALBCORS=idNn+sNeHfPWXedreYUq7Qt/f1E4iFZZ++vuTJa3QXEhN8wmkTDavHuj5ONDPJIH70+mbz5impShkAqo5IAGxTxBmSwMO6g8wiz1WeRUHRf6yp3JFZEgysFyLJGQ
Source: global traffic	HTTP traffic detected: GET /prod/WebResource.axd?d=MpBOBI5I2xoTzRBwXKuwTxeH7BaHx5_YsJYKKiJwi-q2fXIZoBO9PS9wqc9uyo-nJiQBcKhgtVhcvH-YR1BD19jDcwmOQxUH29osvWVYray3RGRqoGpM_0PRSXUrX_MVDmE0dT1HU3UUK9dykH-coA2&t=638630395962731949 HTTP/1.1Host: uw.ungerboeck.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://uw.ungerboeck.com/prod/emc00/PublicSignIn.aspx?&aat=35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hplj0hjxwcyof5buciwx5bba; _ga=GA1.2.1541936858.1732125610; _gid=GA1.2.2047292829.1732125610; _gat=1; fdleileilfblfhlfhlfel=932b5947804a5a7fef3de7df074e2e93; CookiesEnabled=a70c6a1bdcbac88b090aad1e36c12ee6; AWSALB=mW2T1S2Lq6ldQX66uwwJ6lzPHjH1Yj+Vf2Z+kiKqmucMJ5/H1+xF0lvl1Gn3h6KaeaemMl6tIaS46dyiqMBmAXtyi4UEaIDu7bB9+IsHT0e1/BJdhO6DHF2rKS+2; AWSALBCORS=mW2T1S2Lq6ldQX66uwwJ6lzPHjH1Yj+Vf2Z+kiKqmucMJ5/H1+xF0lvl1Gn3h6KaeaemMl6tIaS46dyiqMBmAXtyi4UEaIDu7bB9+IsHT0e1/BJdhO6DHF2rKS+2; __AntiXsrfToken=fdleileilfblfhlfhlfel
Source: global traffic	HTTP traffic detected: GET /prod/WebResource.axd?d=ZhvZ6nEUu0uT2plC5wijYzKwJUP9SuIBXKiVItNiH9R4RSnTe36UEiguaNQWSBsvvoObfICHO7gbnLcT5PcONhHVHa2DH86zF6Pgdjlk2-IdmUPFTZmQ-6w1jDXcvAVQ0&t=638630395962731949 HTTP/1.1Host: uw.ungerboeck.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hplj0hjxwcyof5buciwx5bba; _ga=GA1.2.1541936858.1732125610; _gid=GA1.2.2047292829.1732125610; _gat=1; fdleileilfblfhlfhlfel=932b5947804a5a7fef3de7df074e2e93; CookiesEnabled=a70c6a1bdcbac88b090aad1e36c12ee6; __AntiXsrfToken=fdleileilfblfhlfhlfel; AWSALB=vJ+E7eLdnFzEKj+nImQtU8mnixz26TVoaEP6VwPiRSOi8TfTEqh6e07sijEeEeqm3kH0ro+3BH5SyBb9f754vly1TwnPAcKzCsVzstS+T3C8BGlx2YG9ojMVC9Wl; AWSALBCORS=vJ+E7eLdnFzEKj+nImQtU8mnixz26TVoaEP6VwPiRSOi8TfTEqh6e07sijEeEeqm3kH0ro+3BH5SyBb9f754vly1TwnPAcKzCsVzstS+T3C8BGlx2YG9ojMVC9Wl
Source: global traffic	HTTP traffic detected: GET /prod/ScriptResource.axd?d=uHIkleVeDJf4xS50Krz-yCkM373bf9zkKwOpzW92eqX2k1tq4I5G78Ayg-BY2czvWcTvqE7_5PGmgDay8Sv8__b2qRKsYtoYawjFh-Gmhl7oY8dzbMmRr4waqHgkhVDI8EhJoGFm9SPrUqVQI2hFzKiEcne-JUYwOxmrNznPi9o1&t=ffffffffb201fd3f HTTP/1.1Host: uw.ungerboeck.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://uw.ungerboeck.com/prod/emc00/PublicSignIn.aspx?&aat=35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hplj0hjxwcyof5buciwx5bba; _ga=GA1.2.1541936858.1732125610; _gid=GA1.2.2047292829.1732125610; _gat=1; fdleileilfblfhlfhlfel=932b5947804a5a7fef3de7df074e2e93; CookiesEnabled=a70c6a1bdcbac88b090aad1e36c12ee6; AWSALB=mW2T1S2Lq6ldQX66uwwJ6lzPHjH1Yj+Vf2Z+kiKqmucMJ5/H1+xF0lvl1Gn3h6KaeaemMl6tIaS46dyiqMBmAXtyi4UEaIDu7bB9+IsHT0e1/BJdhO6DHF2rKS+2; AWSALBCORS=mW2T1S2Lq6ldQX66uwwJ6lzPHjH1Yj+Vf2Z+kiKqmucMJ5/H1+xF0lvl1Gn3h6KaeaemMl6tIaS46dyiqMBmAXtyi4UEaIDu7bB9+IsHT0e1/BJdhO6DHF2rKS+2; __AntiXsrfToken=fdleileilfblfhlfhlfel
Source: global traffic	HTTP traffic detected: GET /prod/WebResource.axd?d=3oA-8BV39FG1mSdb0lvWaqRhzw_skJ-sNi-gEc8AX5kevqbGpryRl1r1sXpTo56DjIglcMr-NHcEZf01AdZuGJdsicrCRMd2BkrNYQOTq1iYyC5ENwGVKLdVTqcb73rZ0&t=638630395962731949 HTTP/1.1Host: uw.ungerboeck.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hplj0hjxwcyof5buciwx5bba; _ga=GA1.2.1541936858.1732125610; _gid=GA1.2.2047292829.1732125610; _gat=1; fdleileilfblfhlfhlfel=932b5947804a5a7fef3de7df074e2e93; CookiesEnabled=a70c6a1bdcbac88b090aad1e36c12ee6; __AntiXsrfToken=fdleileilfblfhlfhlfel; AWSALB=guh4AOHeN5dXQjY/VfCyMCEsqTCTINtY2ybJaUAvvgPrnuWzaMyNTccRsKiHbhWhm3XT/g/GxaG4mqndogq3TXb1QKqjSY7RdMGaxl55C5RhqnEGAbgFB1oF1OQ6; AWSALBCORS=guh4AOHeN5dXQjY/VfCyMCEsqTCTINtY2ybJaUAvvgPrnuWzaMyNTccRsKiHbhWhm3XT/g/GxaG4mqndogq3TXb1QKqjSY7RdMGaxl55C5RhqnEGAbgFB1oF1OQ6
Source: global traffic	HTTP traffic detected: GET /prod/ScriptResource.axd?d=Jw6tUGWnA15YEa3ai3FadI1SacaMwkEN29POyrClvLwDVMsPqtI5bgLyM7YYTY-c1dWxrOD6OZvaytEtZBRx-mH5dDrXrleeUBi3jgicXtGIlNOUWvHUm4XqgT6gZNTtXag7fsuPJK-R4SCbpBeanmxTHLIHPSilblD25opuLhA1&t=ffffffffb201fd3f HTTP/1.1Host: uw.ungerboeck.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://uw.ungerboeck.com/prod/emc00/PublicSignIn.aspx?&aat=35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hplj0hjxwcyof5buciwx5bba; _ga=GA1.2.1541936858.1732125610; _gid=GA1.2.2047292829.1732125610; _gat=1; fdleileilfblfhlfhlfel=932b5947804a5a7fef3de7df074e2e93; CookiesEnabled=a70c6a1bdcbac88b090aad1e36c12ee6; AWSALB=mW2T1S2Lq6ldQX66uwwJ6lzPHjH1Yj+Vf2Z+kiKqmucMJ5/H1+xF0lvl1Gn3h6KaeaemMl6tIaS46dyiqMBmAXtyi4UEaIDu7bB9+IsHT0e1/BJdhO6DHF2rKS+2; AWSALBCORS=mW2T1S2Lq6ldQX66uwwJ6lzPHjH1Yj+Vf2Z+kiKqmucMJ5/H1+xF0lvl1Gn3h6KaeaemMl6tIaS46dyiqMBmAXtyi4UEaIDu7bB9+IsHT0e1/BJdhO6DHF2rKS+2; __AntiXsrfToken=fdleileilfblfhlfhlfel
Source: global traffic	HTTP traffic detected: GET /prod/WebResource.axd?d=KdOFLQoTBri1oUJHVfTd9u2r7v_0g4w-tkZ0KvYAGv-hKJ_B5P7tBw_LqhkSS6fexkJPpeT2gi_PYcdHag0oawiX9aMHvMmNj59d4lRqOeYWMuCG3uP1Q2v9cwgx0O99f_yvvXcFPwn8WzsK5P4nSg2&t=638630395962731949 HTTP/1.1Host: uw.ungerboeck.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hplj0hjxwcyof5buciwx5bba; _ga=GA1.2.1541936858.1732125610; _gid=GA1.2.2047292829.1732125610; _gat=1; fdleileilfblfhlfhlfel=932b5947804a5a7fef3de7df074e2e93; CookiesEnabled=a70c6a1bdcbac88b090aad1e36c12ee6; __AntiXsrfToken=fdleileilfblfhlfhlfel; AWSALB=nwGHaaTR/dHJlRYM5xym/bEorYcNARhTp1oGUcBllPGBk3Jfzhwhb6tcYDpp96w3Yu0Q9Ez6ViWYgI2MISyztnetEWvSixHDOmy3/GpdmcnowoaN+tjpkhQ09TIF; AWSALBCORS=nwGHaaTR/dHJlRYM5xym/bEorYcNARhTp1oGUcBllPGBk3Jfzhwhb6tcYDpp96w3Yu0Q9Ez6ViWYgI2MISyztnetEWvSixHDOmy3/GpdmcnowoaN+tjpkhQ09TIF
Source: global traffic	HTTP traffic detected: GET /prod/WebMethods.asmx/js HTTP/1.1Host: uw.ungerboeck.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://uw.ungerboeck.com/prod/emc00/PublicSignIn.aspx?&aat=35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hplj0hjxwcyof5buciwx5bba; _ga=GA1.2.1541936858.1732125610; _gid=GA1.2.2047292829.1732125610; _gat=1; fdleileilfblfhlfhlfel=932b5947804a5a7fef3de7df074e2e93; CookiesEnabled=a70c6a1bdcbac88b090aad1e36c12ee6; AWSALB=mW2T1S2Lq6ldQX66uwwJ6lzPHjH1Yj+Vf2Z+kiKqmucMJ5/H1+xF0lvl1Gn3h6KaeaemMl6tIaS46dyiqMBmAXtyi4UEaIDu7bB9+IsHT0e1/BJdhO6DHF2rKS+2; AWSALBCORS=mW2T1S2Lq6ldQX66uwwJ6lzPHjH1Yj+Vf2Z+kiKqmucMJ5/H1+xF0lvl1Gn3h6KaeaemMl6tIaS46dyiqMBmAXtyi4UEaIDu7bB9+IsHT0e1/BJdhO6DHF2rKS+2; __AntiXsrfToken=fdleileilfblfhlfhlfel
Source: global traffic	HTTP traffic detected: GET /prod/USIImageServer.ashx?ID=62&Class=J&FileExtension=jpg HTTP/1.1Host: uw.ungerboeck.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://uw.ungerboeck.com/prod/emc00/PublicSignIn.aspx?&aat=35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hplj0hjxwcyof5buciwx5bba; _ga=GA1.2.1541936858.1732125610; _gid=GA1.2.2047292829.1732125610; _gat=1; fdleileilfblfhlfhlfel=932b5947804a5a7fef3de7df074e2e93; CookiesEnabled=a70c6a1bdcbac88b090aad1e36c12ee6; __AntiXsrfToken=fdleileilfblfhlfhlfel; AWSALB=GcIehvG8bK+eB1JhcEDsv+Rqid9OTc++YWjUgNlB2Zejclci6wEkToY8ywWvwCHAdXHv1gdoZxeslRN5qkz+mF+NV07bNvxLiyVFg9AKcci1lF4oyKhiXAjMCUB+; AWSALBCORS=GcIehvG8bK+eB1JhcEDsv+Rqid9OTc++YWjUgNlB2Zejclci6wEkToY8ywWvwCHAdXHv1gdoZxeslRN5qkz+mF+NV07bNvxLiyVFg9AKcci1lF4oyKhiXAjMCUB+
Source: global traffic	HTTP traffic detected: GET /prod/WebResource.axd?d=WBvAbC_2XTFyh_ZUX2NfuYdB15MrJegTcgOEtvkO9YV8ZlhxMj_dpIfHnzeWZTzB--ANaclSHOTR8YSzKKFE4Yfx5teMEwqCUikyYgNNSogjcIhDtSrXjhtEbTTGyzZ-Eq8S3v5xjiTk0BKGodtk3w2&t=638630395962731949 HTTP/1.1Host: uw.ungerboeck.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hplj0hjxwcyof5buciwx5bba; _ga=GA1.2.1541936858.1732125610; _gid=GA1.2.2047292829.1732125610; _gat=1; fdleileilfblfhlfhlfel=932b5947804a5a7fef3de7df074e2e93; CookiesEnabled=a70c6a1bdcbac88b090aad1e36c12ee6; __AntiXsrfToken=fdleileilfblfhlfhlfel; AWSALB=LSZlHQpzATNcaJjiuxS10g9mQQ1cMnmt933mCmAGz01HjKfTb7VPVDKqHRdYJQpT4imeQk24xfr0ON+9+4Ccfky7sOYUM1XGFvIR7EYIkeOZJftIkUIUEwQqxURJ; AWSALBCORS=LSZlHQpzATNcaJjiuxS10g9mQQ1cMnmt933mCmAGz01HjKfTb7VPVDKqHRdYJQpT4imeQk24xfr0ON+9+4Ccfky7sOYUM1XGFvIR7EYIkeOZJftIkUIUEwQqxURJ
Source: global traffic	HTTP traffic detected: GET /prod/WebResource.axd?d=x-Q0JOSfEvbuf6e-wLnXc2IfMJ6qrtaq73pRF9LHatS8m0CBiMVVSh5jKllIuGRKoV_1_NVelAGlwFIrJwDY34wbb6JTXcDsIGbN4jSWFLR--Hgnh2HAvfYwS3tB8Q1VRjZhOCqjOegW-E9hO4xLIA2&t=638630395962731949 HTTP/1.1Host: uw.ungerboeck.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hplj0hjxwcyof5buciwx5bba; _ga=GA1.2.1541936858.1732125610; _gid=GA1.2.2047292829.1732125610; _gat=1; fdleileilfblfhlfhlfel=932b5947804a5a7fef3de7df074e2e93; CookiesEnabled=a70c6a1bdcbac88b090aad1e36c12ee6; __AntiXsrfToken=fdleileilfblfhlfhlfel; AWSALB=DOorL29jtCmseSKp4hz2eSfusoAFO9FsWgjPnRLn66LNIMqbKHw+IcA8wzLxyWFPfiIcnI8Fw1SMKN+niTVgUT61OzrpbuV7DizCxXR+Cvh31WLhqczED5++pc31; AWSALBCORS=DOorL29jtCmseSKp4hz2eSfusoAFO9FsWgjPnRLn66LNIMqbKHw+IcA8wzLxyWFPfiIcnI8Fw1SMKN+niTVgUT61OzrpbuV7DizCxXR+Cvh31WLhqczED5++pc31
Source: global traffic	HTTP traffic detected: GET /prod/WebResource.axd?d=MpBOBI5I2xoTzRBwXKuwTxeH7BaHx5_YsJYKKiJwi-q2fXIZoBO9PS9wqc9uyo-nJiQBcKhgtVhcvH-YR1BD19jDcwmOQxUH29osvWVYray3RGRqoGpM_0PRSXUrX_MVDmE0dT1HU3UUK9dykH-coA2&t=638630395962731949 HTTP/1.1Host: uw.ungerboeck.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hplj0hjxwcyof5buciwx5bba; _ga=GA1.2.1541936858.1732125610; _gid=GA1.2.2047292829.1732125610; _gat=1; fdleileilfblfhlfhlfel=932b5947804a5a7fef3de7df074e2e93; CookiesEnabled=a70c6a1bdcbac88b090aad1e36c12ee6; __AntiXsrfToken=fdleileilfblfhlfhlfel; AWSALB=YbQh9p0EIDNHYtg46oFVyQS17/y39JZz3FAj6VlJFRG2aFeCJvUuY27B370GMHfKggn3sDlqqY7+uNWQgdkwqwtSeaF83C7iHLFQWkmkRa1+AdtZdBT/wkp7TtrK; AWSALBCORS=YbQh9p0EIDNHYtg46oFVyQS17/y39JZz3FAj6VlJFRG2aFeCJvUuY27B370GMHfKggn3sDlqqY7+uNWQgdkwqwtSeaF83C7iHLFQWkmkRa1+AdtZdBT/wkp7TtrK
Source: global traffic	HTTP traffic detected: GET /prod/ScriptResource.axd?d=Jw6tUGWnA15YEa3ai3FadI1SacaMwkEN29POyrClvLwDVMsPqtI5bgLyM7YYTY-c1dWxrOD6OZvaytEtZBRx-mH5dDrXrleeUBi3jgicXtGIlNOUWvHUm4XqgT6gZNTtXag7fsuPJK-R4SCbpBeanmxTHLIHPSilblD25opuLhA1&t=ffffffffb201fd3f HTTP/1.1Host: uw.ungerboeck.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hplj0hjxwcyof5buciwx5bba; _ga=GA1.2.1541936858.1732125610; _gid=GA1.2.2047292829.1732125610; _gat=1; fdleileilfblfhlfhlfel=932b5947804a5a7fef3de7df074e2e93; CookiesEnabled=a70c6a1bdcbac88b090aad1e36c12ee6; __AntiXsrfToken=fdleileilfblfhlfhlfel; AWSALB=D0iDMcjD6715j3C5pbnarmvJV3aKZjRvR3LDBYjGpDnAPITBZTEEH5EEzcuRUg3sfVQpGH2L/ACHVxF2rz//ojnvk4j7T2my+IjeAXBxhaQv8g6mTtklxiHtN0EW; AWSALBCORS=D0iDMcjD6715j3C5pbnarmvJV3aKZjRvR3LDBYjGpDnAPITBZTEEH5EEzcuRUg3sfVQpGH2L/ACHVxF2rz//ojnvk4j7T2my+IjeAXBxhaQv8g6mTtklxiHtN0EW
Source: global traffic	HTTP traffic detected: GET /prod/USIImageServer.ashx?ID=27&Class=I&FileExtension=png HTTP/1.1Host: uw.ungerboeck.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://uw.ungerboeck.com/prod/emc00/PublicSignIn.aspx?&aat=35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hplj0hjxwcyof5buciwx5bba; _ga=GA1.2.1541936858.1732125610; _gid=GA1.2.2047292829.1732125610; _gat=1; fdleileilfblfhlfhlfel=932b5947804a5a7fef3de7df074e2e93; CookiesEnabled=a70c6a1bdcbac88b090aad1e36c12ee6; __AntiXsrfToken=fdleileilfblfhlfhlfel; AWSALB=KKuhKMUv4SHM+NNxNEfme3t4aTFmOojJBd29bR6bFC2t5nGYdLx+3OT15st5JL1iyyt2UbPz5/QiO+xd3GccvABl8sto92Cs+rgAmatTqtuYujCw+xqQT/dRom+L; AWSALBCORS=KKuhKMUv4SHM+NNxNEfme3t4aTFmOojJBd29bR6bFC2t5nGYdLx+3OT15st5JL1iyyt2UbPz5/QiO+xd3GccvABl8sto92Cs+rgAmatTqtuYujCw+xqQT/dRom+L
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /prod/ScriptResource.axd?d=uHIkleVeDJf4xS50Krz-yCkM373bf9zkKwOpzW92eqX2k1tq4I5G78Ayg-BY2czvWcTvqE7_5PGmgDay8Sv8__b2qRKsYtoYawjFh-Gmhl7oY8dzbMmRr4waqHgkhVDI8EhJoGFm9SPrUqVQI2hFzKiEcne-JUYwOxmrNznPi9o1&t=ffffffffb201fd3f HTTP/1.1Host: uw.ungerboeck.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hplj0hjxwcyof5buciwx5bba; _ga=GA1.2.1541936858.1732125610; _gid=GA1.2.2047292829.1732125610; _gat=1; fdleileilfblfhlfhlfel=932b5947804a5a7fef3de7df074e2e93; CookiesEnabled=a70c6a1bdcbac88b090aad1e36c12ee6; __AntiXsrfToken=fdleileilfblfhlfhlfel; AWSALB=KKuhKMUv4SHM+NNxNEfme3t4aTFmOojJBd29bR6bFC2t5nGYdLx+3OT15st5JL1iyyt2UbPz5/QiO+xd3GccvABl8sto92Cs+rgAmatTqtuYujCw+xqQT/dRom+L; AWSALBCORS=KKuhKMUv4SHM+NNxNEfme3t4aTFmOojJBd29bR6bFC2t5nGYdLx+3OT15st5JL1iyyt2UbPz5/QiO+xd3GccvABl8sto92Cs+rgAmatTqtuYujCw+xqQT/dRom+L
Source: global traffic	HTTP traffic detected: GET /prod/USIImageServer.ashx?ID=26&Class=I&FileExtension=png HTTP/1.1Host: uw.ungerboeck.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://uw.ungerboeck.com/prod/emc00/PublicSignIn.aspx?&aat=35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hplj0hjxwcyof5buciwx5bba; _ga=GA1.2.1541936858.1732125610; _gid=GA1.2.2047292829.1732125610; _gat=1; fdleileilfblfhlfhlfel=932b5947804a5a7fef3de7df074e2e93; CookiesEnabled=a70c6a1bdcbac88b090aad1e36c12ee6; __AntiXsrfToken=fdleileilfblfhlfhlfel; AWSALB=nDzIpAaenGRvmipCivFZhbd4EXF5uJ/1A3Sk8ZFdHQVrQ6GtMwJq7YSD++L/yRYDK/fwKKQNAVJgl6RNI7/orfdl4jxdl25Sx9+7y+fenpC8OcFT1pxHmGro2BTK; AWSALBCORS=nDzIpAaenGRvmipCivFZhbd4EXF5uJ/1A3Sk8ZFdHQVrQ6GtMwJq7YSD++L/yRYDK/fwKKQNAVJgl6RNI7/orfdl4jxdl25Sx9+7y+fenpC8OcFT1pxHmGro2BTK
Source: global traffic	HTTP traffic detected: GET /prod/USIImageServer.ashx?ID=63&Class=J&FileExtension=jpg HTTP/1.1Host: uw.ungerboeck.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://uw.ungerboeck.com/prod/emc00/PublicSignIn.aspx?&aat=35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hplj0hjxwcyof5buciwx5bba; _ga=GA1.2.1541936858.1732125610; _gid=GA1.2.2047292829.1732125610; _gat=1; fdleileilfblfhlfhlfel=932b5947804a5a7fef3de7df074e2e93; CookiesEnabled=a70c6a1bdcbac88b090aad1e36c12ee6; __AntiXsrfToken=fdleileilfblfhlfhlfel; AWSALB=8+8wWJFv4LWAXZ6se1VHHAjwKe3ymox6znBUgMwy2G5dMVISd2MLXMUsdrb8ZaP60Jx+JyKznAgSCzKn5x7dsPZp5XfdWHux+OYQsHIW1MTTUDkFpl+Pt4Hto0Is; AWSALBCORS=8+8wWJFv4LWAXZ6se1VHHAjwKe3ymox6znBUgMwy2G5dMVISd2MLXMUsdrb8ZaP60Jx+JyKznAgSCzKn5x7dsPZp5XfdWHux+OYQsHIW1MTTUDkFpl+Pt4Hto0Is
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://uw.ungerboeck.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /prod/USIImageServer.ashx?ID=62&Class=J&FileExtension=jpg HTTP/1.1Host: uw.ungerboeck.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hplj0hjxwcyof5buciwx5bba; _ga=GA1.2.1541936858.1732125610; _gid=GA1.2.2047292829.1732125610; _gat=1; fdleileilfblfhlfhlfel=932b5947804a5a7fef3de7df074e2e93; CookiesEnabled=a70c6a1bdcbac88b090aad1e36c12ee6; __AntiXsrfToken=fdleileilfblfhlfhlfel; AWSALB=nDzIpAaenGRvmipCivFZhbd4EXF5uJ/1A3Sk8ZFdHQVrQ6GtMwJq7YSD++L/yRYDK/fwKKQNAVJgl6RNI7/orfdl4jxdl25Sx9+7y+fenpC8OcFT1pxHmGro2BTK; AWSALBCORS=nDzIpAaenGRvmipCivFZhbd4EXF5uJ/1A3Sk8ZFdHQVrQ6GtMwJq7YSD++L/yRYDK/fwKKQNAVJgl6RNI7/orfdl4jxdl25Sx9+7y+fenpC8OcFT1pxHmGro2BTK
Source: global traffic	HTTP traffic detected: GET /prod/WebMethods.asmx/js HTTP/1.1Host: uw.ungerboeck.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hplj0hjxwcyof5buciwx5bba; _ga=GA1.2.1541936858.1732125610; _gid=GA1.2.2047292829.1732125610; _gat=1; fdleileilfblfhlfhlfel=932b5947804a5a7fef3de7df074e2e93; CookiesEnabled=a70c6a1bdcbac88b090aad1e36c12ee6; __AntiXsrfToken=fdleileilfblfhlfhlfel; AWSALB=8+8wWJFv4LWAXZ6se1VHHAjwKe3ymox6znBUgMwy2G5dMVISd2MLXMUsdrb8ZaP60Jx+JyKznAgSCzKn5x7dsPZp5XfdWHux+OYQsHIW1MTTUDkFpl+Pt4Hto0Is; AWSALBCORS=8+8wWJFv4LWAXZ6se1VHHAjwKe3ymox6znBUgMwy2G5dMVISd2MLXMUsdrb8ZaP60Jx+JyKznAgSCzKn5x7dsPZp5XfdWHux+OYQsHIW1MTTUDkFpl+Pt4Hto0Is
Source: global traffic	HTTP traffic detected: GET /USI/b_InterPro.png HTTP/1.1Host: epddata.engr.wisc.eduConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://uw.ungerboeck.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /prod/USIImageServer.ashx?ID=27&Class=I&FileExtension=png HTTP/1.1Host: uw.ungerboeck.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hplj0hjxwcyof5buciwx5bba; _ga=GA1.2.1541936858.1732125610; _gid=GA1.2.2047292829.1732125610; _gat=1; fdleileilfblfhlfhlfel=932b5947804a5a7fef3de7df074e2e93; CookiesEnabled=a70c6a1bdcbac88b090aad1e36c12ee6; __AntiXsrfToken=fdleileilfblfhlfhlfel; AWSALB=Jgzb9nHYdbrqwdzLYLMw0c2GLI8xChdS9mHxVt7wzbx44rqzfbgGSt7WPXUs3jLHfTTVOh+GTixNSUlMSTJR9tYFofGGq1/jTsvZQsPtja2nd/2WOAuASH0vsm/U; AWSALBCORS=Jgzb9nHYdbrqwdzLYLMw0c2GLI8xChdS9mHxVt7wzbx44rqzfbgGSt7WPXUs3jLHfTTVOh+GTixNSUlMSTJR9tYFofGGq1/jTsvZQsPtja2nd/2WOAuASH0vsm/U
Source: global traffic	HTTP traffic detected: GET /prod/USIImageServer.ashx?ID=63&Class=J&FileExtension=jpg HTTP/1.1Host: uw.ungerboeck.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hplj0hjxwcyof5buciwx5bba; _ga=GA1.2.1541936858.1732125610; _gid=GA1.2.2047292829.1732125610; _gat=1; fdleileilfblfhlfhlfel=932b5947804a5a7fef3de7df074e2e93; CookiesEnabled=a70c6a1bdcbac88b090aad1e36c12ee6; __AntiXsrfToken=fdleileilfblfhlfhlfel; AWSALB=Id/QiXeoPVGOO3lh31I8KXEchWcSWz5fnjCTfzNeFe6VZIWFPbPwOcV4mlklzzBjj83MzIhi0TvOLU9ZTNXrX+5EvONe9Z+cYS4bin1EiaCFqCWjfrdOPIM+EhS2; AWSALBCORS=Id/QiXeoPVGOO3lh31I8KXEchWcSWz5fnjCTfzNeFe6VZIWFPbPwOcV4mlklzzBjj83MzIhi0TvOLU9ZTNXrX+5EvONe9Z+cYS4bin1EiaCFqCWjfrdOPIM+EhS2
Source: global traffic	HTTP traffic detected: GET /prod/USIImageServer.ashx?ID=26&Class=I&FileExtension=png HTTP/1.1Host: uw.ungerboeck.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hplj0hjxwcyof5buciwx5bba; _ga=GA1.2.1541936858.1732125610; _gid=GA1.2.2047292829.1732125610; _gat=1; fdleileilfblfhlfhlfel=932b5947804a5a7fef3de7df074e2e93; CookiesEnabled=a70c6a1bdcbac88b090aad1e36c12ee6; __AntiXsrfToken=fdleileilfblfhlfhlfel; AWSALB=Naul9Tz5hCqAWF0x0Vyy99pH4G1QyxJ/9phzuwaFFOr6D7iIroJh3RulgIvm3tsPvpABusCCbmej4RND6O/XUfBZo5qW/S++dYLBqedF9RV5KnWrHndoTvxaNSXT; AWSALBCORS=Naul9Tz5hCqAWF0x0Vyy99pH4G1QyxJ/9phzuwaFFOr6D7iIroJh3RulgIvm3tsPvpABusCCbmej4RND6O/XUfBZo5qW/S++dYLBqedF9RV5KnWrHndoTvxaNSXT
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /visitor/v200/svrGP?pps=3&siteid=1427524768&ref2=https%3A%2F%2Fuw.ungerboeck.com%2Fprod%2Femc00%2Fregload.html%3Faat%3D5a576b5836666f4d4d734735516c6546344d767341542b4f586c33616344786f335a3266626650657153593d%26Timeout%3D1000%26GACode%3D139795390%26_ga%3D2.260120718.2047292829.1732125610-1541936858.1732125610&tzo=300&ms=893&optin=disabled HTTP/1.1Host: s1427524768.t.eloqua.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://uw.ungerboeck.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /USI/b_InterPro.png HTTP/1.1Host: epddata.engr.wisc.eduConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.2047292829.1732125610; _gat_UA-68094028-1=1; cebs=1; _ga=GA1.2.1541936858.1732125610; _ce.clock_data=-921%2C8.46.123.75%2C1%2C22210ca73bf1af2ec2eace74a96ee356%2CChrome%2CUS; cebsp_=1; _ga_P497LF1PMM=GS1.1.1732125611.1.1.1732125621.50.0.0; _ce.s=v~f983c2aad596bf9bba6ce3ba34a0ee9c1d5e31fd~lcw~1732125620592~vir~new~lva~1732125615131~vpv~0~v11.fhb~1732125619954~v11.lhb~1732125619954~v11.cs~219822~v11.s~4e57b430-a769-11ef-a2d3-bf59501d4c2f~v11.sla~1732125621721~lcw~1732125621721
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/config/178591269235291?v=2.9.177&r=stable&domain=uw.ungerboeck.com&hme=c3e4904c1dde42d643265ef909b9e193c41cedcd6f559a3ff5e1b178e36647fa&ex_m=70%2C121%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C172%2C175%2C187%2C183%2C184%2C186%2C29%2C101%2C53%2C77%2C185%2C167%2C170%2C180%2C181%2C188%2C131%2C41%2C189%2C190%2C34%2C143%2C15%2C50%2C195%2C194%2C133%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C168%2C171%2C140%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://uw.ungerboeck.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /visitor/v200/svrGP.aspx?pps=3&siteid=1427524768&ref2=https%3A%2F%2Fuw.ungerboeck.com%2Fprod%2Femc00%2Fregload.html%3Faat%3D5a576b5836666f4d4d734735516c6546344d767341542b4f586c33616344786f335a3266626650657153593d%26Timeout%3D1000%26GACode%3D139795390%26_ga%3D2.260120718.2047292829.1732125610-1541936858.1732125610&tzo=300&ms=893&optin=disabled&elqCookie=1 HTTP/1.1Host: s1427524768.t.eloqua.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://uw.ungerboeck.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ELOQUA=GUID=2F3794A0139A4B2DB39FD6E826A6F3CA; ELQSTATUS=OK
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /signals/config/178591269235291?v=2.9.177&r=stable&domain=uw.ungerboeck.com&hme=c3e4904c1dde42d643265ef909b9e193c41cedcd6f559a3ff5e1b178e36647fa&ex_m=70%2C121%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C172%2C175%2C187%2C183%2C184%2C186%2C29%2C101%2C53%2C77%2C185%2C167%2C170%2C180%2C181%2C188%2C131%2C41%2C189%2C190%2C34%2C143%2C15%2C50%2C195%2C194%2C133%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C168%2C171%2C140%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113 HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=178591269235291&ev=PageView&dl=https%3A%2F%2Fuw.ungerboeck.com%2Fprod%2Femc00%2FPublicSignIn.aspx%3F%26aat%3D35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d&rl=https%3A%2F%2Fuw.ungerboeck.com%2Fprod%2Femc00%2Fregload.html%3Faat%3D5a576b5836666f4d4d734735516c6546344d767341542b4f586c33616344786f335a3266626650657153593d%26Timeout%3D1000%26GACode%3D139795390%26_ga%3D2.260120718.2047292829.1732125610-1541936858.1732125610&if=false&ts=1732125644844&sw=1280&sh=1024&v=2.9.177&r=stable&ec=0&o=4126&fbp=fb.1.1732125644839.329253274989757733&cdl=API_unavailable&it=1732125641681&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://uw.ungerboeck.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=178591269235291&ev=PageView&dl=https%3A%2F%2Fuw.ungerboeck.com%2Fprod%2Femc00%2FPublicSignIn.aspx%3F%26aat%3D35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d&rl=https%3A%2F%2Fuw.ungerboeck.com%2Fprod%2Femc00%2Fregload.html%3Faat%3D5a576b5836666f4d4d734735516c6546344d767341542b4f586c33616344786f335a3266626650657153593d%26Timeout%3D1000%26GACode%3D139795390%26_ga%3D2.260120718.2047292829.1732125610-1541936858.1732125610&if=false&ts=1732125644844&sw=1280&sh=1024&v=2.9.177&r=stable&ec=0&o=4126&fbp=fb.1.1732125644839.329253274989757733&cdl=API_unavailable&it=1732125641681&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://uw.ungerboeck.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=178591269235291&ev=CompleteRegistration&dl=https%3A%2F%2Fuw.ungerboeck.com%2Fprod%2Femc00%2FPublicSignIn.aspx%3F%26aat%3D35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d&rl=https%3A%2F%2Fuw.ungerboeck.com%2Fprod%2Femc00%2Fregload.html%3Faat%3D5a576b5836666f4d4d734735516c6546344d767341542b4f586c33616344786f335a3266626650657153593d%26Timeout%3D1000%26GACode%3D139795390%26_ga%3D2.260120718.2047292829.1732125610-1541936858.1732125610&if=false&ts=1732125644847&sw=1280&sh=1024&v=2.9.177&r=stable&ec=1&o=4126&fbp=fb.1.1732125644839.329253274989757733&cdl=API_unavailable&it=1732125641681&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://uw.ungerboeck.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=178591269235291&ev=CompleteRegistration&dl=https%3A%2F%2Fuw.ungerboeck.com%2Fprod%2Femc00%2FPublicSignIn.aspx%3F%26aat%3D35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d&rl=https%3A%2F%2Fuw.ungerboeck.com%2Fprod%2Femc00%2Fregload.html%3Faat%3D5a576b5836666f4d4d734735516c6546344d767341542b4f586c33616344786f335a3266626650657153593d%26Timeout%3D1000%26GACode%3D139795390%26_ga%3D2.260120718.2047292829.1732125610-1541936858.1732125610&if=false&ts=1732125644847&sw=1280&sh=1024&v=2.9.177&r=stable&ec=1&o=4126&fbp=fb.1.1732125644839.329253274989757733&cdl=API_unavailable&it=1732125641681&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-source=navigation-sourceReferer: https://uw.ungerboeck.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /visitor/v200/svrGP.aspx?pps=3&siteid=1427524768&ref2=https%3A%2F%2Fuw.ungerboeck.com%2Fprod%2Femc00%2Fregload.html%3Faat%3D5a576b5836666f4d4d734735516c6546344d767341542b4f586c33616344786f335a3266626650657153593d%26Timeout%3D1000%26GACode%3D139795390%26_ga%3D2.260120718.2047292829.1732125610-1541936858.1732125610&tzo=300&ms=893&optin=disabled&elqCookie=1 HTTP/1.1Host: s1427524768.t.eloqua.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ELOQUA=GUID=2F3794A0139A4B2DB39FD6E826A6F3CA; ELQSTATUS=OK
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /tr/?id=178591269235291&ev=PageView&dl=https%3A%2F%2Fuw.ungerboeck.com%2Fprod%2Femc00%2FPublicSignIn.aspx%3F%26aat%3D35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d&rl=https%3A%2F%2Fuw.ungerboeck.com%2Fprod%2Femc00%2Fregload.html%3Faat%3D5a576b5836666f4d4d734735516c6546344d767341542b4f586c33616344786f335a3266626650657153593d%26Timeout%3D1000%26GACode%3D139795390%26_ga%3D2.260120718.2047292829.1732125610-1541936858.1732125610&if=false&ts=1732125644844&sw=1280&sh=1024&v=2.9.177&r=stable&ec=0&o=4126&fbp=fb.1.1732125644839.329253274989757733&cdl=API_unavailable&it=1732125641681&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=178591269235291&ev=PageView&dl=https%3A%2F%2Fuw.ungerboeck.com%2Fprod%2Femc00%2FPublicSignIn.aspx%3F%26aat%3D35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d&rl=https%3A%2F%2Fuw.ungerboeck.com%2Fprod%2Femc00%2Fregload.html%3Faat%3D5a576b5836666f4d4d734735516c6546344d767341542b4f586c33616344786f335a3266626650657153593d%26Timeout%3D1000%26GACode%3D139795390%26_ga%3D2.260120718.2047292829.1732125610-1541936858.1732125610&if=false&ts=1732125644844&sw=1280&sh=1024&v=2.9.177&r=stable&ec=0&o=4126&fbp=fb.1.1732125644839.329253274989757733&cdl=API_unavailable&it=1732125641681&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=178591269235291&ev=CompleteRegistration&dl=https%3A%2F%2Fuw.ungerboeck.com%2Fprod%2Femc00%2FPublicSignIn.aspx%3F%26aat%3D35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d&rl=https%3A%2F%2Fuw.ungerboeck.com%2Fprod%2Femc00%2Fregload.html%3Faat%3D5a576b5836666f4d4d734735516c6546344d767341542b4f586c33616344786f335a3266626650657153593d%26Timeout%3D1000%26GACode%3D139795390%26_ga%3D2.260120718.2047292829.1732125610-1541936858.1732125610&if=false&ts=1732125644847&sw=1280&sh=1024&v=2.9.177&r=stable&ec=1&o=4126&fbp=fb.1.1732125644839.329253274989757733&cdl=API_unavailable&it=1732125641681&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=178591269235291&ev=CompleteRegistration&dl=https%3A%2F%2Fuw.ungerboeck.com%2Fprod%2Femc00%2FPublicSignIn.aspx%3F%26aat%3D35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d&rl=https%3A%2F%2Fuw.ungerboeck.com%2Fprod%2Femc00%2Fregload.html%3Faat%3D5a576b5836666f4d4d734735516c6546344d767341542b4f586c33616344786f335a3266626650657153593d%26Timeout%3D1000%26GACode%3D139795390%26_ga%3D2.260120718.2047292829.1732125610-1541936858.1732125610&if=false&ts=1732125644847&sw=1280&sh=1024&v=2.9.177&r=stable&ec=1&o=4126&fbp=fb.1.1732125644839.329253274989757733&cdl=API_unavailable&it=1732125641681&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=178591269235291&ev=SubscribedButtonClick&dl=https%3A%2F%2Fuw.ungerboeck.com%2Fprod%2Femc00%2FPublicSignIn.aspx%3F%26aat%3D35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d&rl=https%3A%2F%2Fuw.ungerboeck.com%2Fprod%2Femc00%2Fregload.html%3Faat%3D5a576b5836666f4d4d734735516c6546344d767341542b4f586c33616344786f335a3266626650657153593d%26Timeout%3D1000%26GACode%3D139795390%26_ga%3D2.260120718.2047292829.1732125610-1541936858.1732125610&if=false&ts=1732125648073&cd[buttonFeatures]=%7B%22classList%22%3A%22ux-button-sign-in%20ux-page-btn%20btn%20webskin-navigation%22%2C%22destination%22%3A%22https%3A%2F%2Fuw.ungerboeck.com%2Fprod%2Femc00%2FPublicSignIn.aspx%3Faat%3D35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d%22%2C%22id%22%3A%22ctl00_cphBody_objLogin_LoginButton%22%2C%22imageUrl%22%3A%22%22%2C%22innerText%22%3A%22%22%2C%22numChildButtons%22%3A0%2C%22tag%22%3A%22input%22%2C%22type%22%3A%22submit%22%2C%22name%22%3A%22ctl00%24cphBody%24objLogin%24LoginButton%22%2C%22value%22%3A%22Sign%20In%22%7D&cd[buttonText]=Sign%20In&cd[formFeatures]=%5B%7B%22id%22%3A%22__EVENTTARGET%22%2C%22name%22%3A%22__EVENTTARGET%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%2C%22valueMeaning%22%3A%22empty%22%7D%2C%7B%22id%22%3A%22__EVENTARGUMENT%22%2C%22name%22%3A%22__EVENTARGUMENT%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%2C%22valueMeaning%22%3A%22empty%22%7D%2C%7B%22id%22%3A%22__VIEWSTATE%22%2C%22name%22%3A%22__VIEWSTATE%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%7D%2C%7B%22id%22%3A%22customHtmlSection%22%2C%22name%22%3A%22%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%2C%22valueMeaning%22%3A%22empty%22%7D%2C%7B%22id%22%3A%22ctl00_cphBody_signUpButton%22%2C%22name%22%3A%22ctl00%24cphBody%24signUpButton%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22submit%22%7D%2C%7B%22id%22%3A%22ctl00_cphBody_objLogin_UserName%22%2C%22name%22%3A%22ctl00%24cphBody%24objLogin%24UserName%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22text%22%2C%22valueMeaning%22%3A%22empty%22%7D%2C%7B%22id%22%3A%22ctl00_cphBody_objLogin_Password%22%2C%22name%22%3A%22ctl00%24cphBody%24objLogin%24Password%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22password%22%7D%2C%7B%22id%22%3A%22ctl00_cphBody_objLogin_RememberMe%22%2C%22name%22%3A%22ctl00%24cphBody%24objLogin%24RememberMe%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22checkbox%22%7D%2C%7B%22id%22%3A%22ctl00_TimeZoneOffset%22%2C%22name%22%3A%22ctl00%24TimeZoneOffset%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%2C%22valueMeaning%22%3A%22empty%22%7D%2C%7B%22id%22%3A%22__VIEWSTATEGENERATOR%22%2C%22name%22%3A%22__VIEWSTATEGENERATOR%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%7D%2C%7B%22id%22%3A%22__EVENTVALIDATION%22%2C%22name%22%3A%22__EVENTVALIDATION%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=rUPEdsBgULMVfse&MD=vPBmM3f9 HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /prod/WebResource.axd?d=ZhvZ6nEUu0uT2plC5wijYzKwJUP9SuIBXKiVItNiH9R4RSnTe36UEiguaNQWSBsvvoObfICHO7gbnLcT5PcONhHVHa2DH86zF6Pgdjlk2-IdmUPFTZmQ-6w1jDXcvAVQ0&t=638630395962731949 HTTP/1.1Host: uw.ungerboeck.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: ""sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://uw.ungerboeck.com/prod/emc00/PublicSignIn.aspx?aat=35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hplj0hjxwcyof5buciwx5bba; _gid=GA1.2.2047292829.1732125610; _gat=1; fdleileilfblfhlfhlfel=932b5947804a5a7fef3de7df074e2e93; CookiesEnabled=a70c6a1bdcbac88b090aad1e36c12ee6; __AntiXsrfToken=fdleileilfblfhlfhlfel; _gat_UA-68094028-1=1; _fbp=fb.1.1732125644839.329253274989757733; AWSALB=LZ4Zg+iJJ7ZxP8tv0DP6KibboCITO7YPJxC8RnqauROn7BOGrgng0iYiEGKE4Drvn4rr7nTxKJSv8wuhzVbSXGoI94uMTasT46xb88eynpOjXEV1O9m4j1BVzYA6; AWSALBCORS=LZ4Zg+iJJ7ZxP8tv0DP6KibboCITO7YPJxC8RnqauROn7BOGrgng0iYiEGKE4Drvn4rr7nTxKJSv8wuhzVbSXGoI94uMTasT46xb88eynpOjXEV1O9m4j1BVzYA6; _ga=GA1.2.1541936858.1732125610; _ga_P497LF1PMM=GS1.1.1732125646.1.1.1732125650.56.0.0
Source: global traffic	HTTP traffic detected: GET /prod/WebResource.axd?d=ZhvZ6nEUu0uT2plC5wijYzKwJUP9SuIBXKiVItNiH9R4RSnTe36UEiguaNQWSBsvvoObfICHO7gbnLcT5PcONhHVHa2DH86zF6Pgdjlk2-IdmUPFTZmQ-6w1jDXcvAVQ0&t=638630395962731949 HTTP/1.1Host: uw.ungerboeck.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hplj0hjxwcyof5buciwx5bba; _gid=GA1.2.2047292829.1732125610; _gat=1; fdleileilfblfhlfhlfel=932b5947804a5a7fef3de7df074e2e93; CookiesEnabled=a70c6a1bdcbac88b090aad1e36c12ee6; __AntiXsrfToken=fdleileilfblfhlfhlfel; _gat_UA-68094028-1=1; _fbp=fb.1.1732125644839.329253274989757733; _ga=GA1.2.1541936858.1732125610; _ga_P497LF1PMM=GS1.1.1732125646.1.1.1732125650.56.0.0; AWSALB=Ug+Ht7l6uazDixPv7ehIpHmd5+elhAV6K6Nnx5ZTkqgRFU3TyDic/VtoKo4MYS0o0IP0hPp3IBe/PbTDORB84kOSJkcV9Dj++vSh/7jTLAH1mnL8OSwlHfZY0xXh; AWSALBCORS=Ug+Ht7l6uazDixPv7ehIpHmd5+elhAV6K6Nnx5ZTkqgRFU3TyDic/VtoKo4MYS0o0IP0hPp3IBe/PbTDORB84kOSJkcV9Dj++vSh/7jTLAH1mnL8OSwlHfZY0xXhIf-None-Match: ""
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=178591269235291&ev=SubscribedButtonClick&dl=https%3A%2F%2Fuw.ungerboeck.com%2Fprod%2Femc00%2FPublicSignIn.aspx%3F%26aat%3D35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d&rl=https%3A%2F%2Fuw.ungerboeck.com%2Fprod%2Femc00%2Fregload.html%3Faat%3D5a576b5836666f4d4d734735516c6546344d767341542b4f586c33616344786f335a3266626650657153593d%26Timeout%3D1000%26GACode%3D139795390%26_ga%3D2.260120718.2047292829.1732125610-1541936858.1732125610&if=false&ts=1732125648073&cd[buttonFeatures]=%7B%22classList%22%3A%22ux-button-sign-in%20ux-page-btn%20btn%20webskin-navigation%22%2C%22destination%22%3A%22https%3A%2F%2Fuw.ungerboeck.com%2Fprod%2Femc00%2FPublicSignIn.aspx%3Faat%3D35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d%22%2C%22id%22%3A%22ctl00_cphBody_objLogin_LoginButton%22%2C%22imageUrl%22%3A%22%22%2C%22innerText%22%3A%22%22%2C%22numChildButtons%22%3A0%2C%22tag%22%3A%22input%22%2C%22type%22%3A%22submit%22%2C%22name%22%3A%22ctl00%24cphBody%24objLogin%24LoginButton%22%2C%22value%22%3A%22Sign%20In%22%7D&cd[buttonText]=Sign%20In&cd[formFeatures]=%5B%7B%22id%22%3A%22__EVENTTARGET%22%2C%22name%22%3A%22__EVENTTARGET%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%2C%22valueMeaning%22%3A%22empty%22%7D%2C%7B%22id%22%3A%22__EVENTARGUMENT%22%2C%22name%22%3A%22__EVENTARGUMENT%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%2C%22valueMeaning%22%3A%22empty%22%7D%2C%7B%22id%22%3A%22__VIEWSTATE%22%2C%22name%22%3A%22__VIEWSTATE%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%7D%2C%7B%22id%22%3A%22customHtmlSection%22%2C%22name%22%3A%22%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%2C%22valueMeaning%22%3A%22empty%22%7D%2C%7B%22id%22%3A%22ctl00_cphBody_signUpButton%22%2C%22name%22%3A%22ctl00%24cphBody%24signUpButton%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22submit%22%7D%2C%7B%22id%22%3A%22ctl00_cphBody_objLogin_UserName%22%2C%22name%22%3A%22ctl00%24cphBody%24objLogin%24UserName%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22text%22%2C%22valueMeaning%22%3A%22empty%22%7D%2C%7B%22id%22%3A%22ctl00_cphBody_objLogin_Password%22%2C%22name%22%3A%22ctl00%24cphBody%24objLogin%24Password%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22password%22%7D%2C%7B%22id%22%3A%22ctl00_cphBody_objLogin_RememberMe%22%2C%22name%22%3A%22ctl00%24cphBody%24objLogin%24RememberMe%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22checkbox%22%7D%2C%7B%22id%22%3A%22ctl00_TimeZoneOffset%22%2C%22name%22%3A%22ctl00%24TimeZoneOffset%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%2C%22valueMeaning%22%3A%22empty%22%7D%2C%7B%22id%22%3A%22__VIEWSTATEGENERATOR%22%2C%22name%22%3A%22__VIEWSTATEGENERATOR%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%7D%2C%7B%22id%22%3A%22__EVENTVALIDATION%22%2C%22name%22%3A%22__EVENTVALIDATION%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /prod/WebMethods.asmx/js HTTP/1.1Host: uw.ungerboeck.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: ""If-Modified-Since: Fri, 27 Sep 2024 18:13:14 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://uw.ungerboeck.com/prod/emc00/PublicSignIn.aspx?aat=35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hplj0hjxwcyof5buciwx5bba; _gid=GA1.2.2047292829.1732125610; _gat=1; fdleileilfblfhlfhlfel=932b5947804a5a7fef3de7df074e2e93; CookiesEnabled=a70c6a1bdcbac88b090aad1e36c12ee6; __AntiXsrfToken=fdleileilfblfhlfhlfel; _gat_UA-68094028-1=1; _fbp=fb.1.1732125644839.329253274989757733; _ga=GA1.2.1541936858.1732125610; _ga_P497LF1PMM=GS1.1.1732125646.1.1.1732125650.56.0.0; AWSALB=Ug+Ht7l6uazDixPv7ehIpHmd5+elhAV6K6Nnx5ZTkqgRFU3TyDic/VtoKo4MYS0o0IP0hPp3IBe/PbTDORB84kOSJkcV9Dj++vSh/7jTLAH1mnL8OSwlHfZY0xXh; AWSALBCORS=Ug+Ht7l6uazDixPv7ehIpHmd5+elhAV6K6Nnx5ZTkqgRFU3TyDic/VtoKo4MYS0o0IP0hPp3IBe/PbTDORB84kOSJkcV9Dj++vSh/7jTLAH1mnL8OSwlHfZY0xXh
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /tr/?id=178591269235291&ev=PageView&dl=https%3A%2F%2Fuw.ungerboeck.com%2Fprod%2Femc00%2FPublicSignIn.aspx%3Faat%3D35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d&rl=https%3A%2F%2Fuw.ungerboeck.com%2Fprod%2Femc00%2FPublicSignIn.aspx%3F%26aat%3D35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d&if=false&ts=1732125650711&sw=1280&sh=1024&v=2.9.177&r=stable&ec=0&o=4126&fbp=fb.1.1732125644839.329253274989757733&cdl=API_unavailable&it=1732125650702&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://uw.ungerboeck.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=178591269235291&ev=PageView&dl=https%3A%2F%2Fuw.ungerboeck.com%2Fprod%2Femc00%2FPublicSignIn.aspx%3Faat%3D35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d&rl=https%3A%2F%2Fuw.ungerboeck.com%2Fprod%2Femc00%2FPublicSignIn.aspx%3F%26aat%3D35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d&if=false&ts=1732125650711&sw=1280&sh=1024&v=2.9.177&r=stable&ec=0&o=4126&fbp=fb.1.1732125644839.329253274989757733&cdl=API_unavailable&it=1732125650702&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://uw.ungerboeck.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=178591269235291&ev=CompleteRegistration&dl=https%3A%2F%2Fuw.ungerboeck.com%2Fprod%2Femc00%2FPublicSignIn.aspx%3Faat%3D35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d&rl=https%3A%2F%2Fuw.ungerboeck.com%2Fprod%2Femc00%2FPublicSignIn.aspx%3F%26aat%3D35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d&if=false&ts=1732125650715&sw=1280&sh=1024&v=2.9.177&r=stable&ec=1&o=4126&fbp=fb.1.1732125644839.329253274989757733&cdl=API_unavailable&it=1732125650702&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://uw.ungerboeck.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=178591269235291&ev=CompleteRegistration&dl=https%3A%2F%2Fuw.ungerboeck.com%2Fprod%2Femc00%2FPublicSignIn.aspx%3Faat%3D35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d&rl=https%3A%2F%2Fuw.ungerboeck.com%2Fprod%2Femc00%2FPublicSignIn.aspx%3F%26aat%3D35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d&if=false&ts=1732125650715&sw=1280&sh=1024&v=2.9.177&r=stable&ec=1&o=4126&fbp=fb.1.1732125644839.329253274989757733&cdl=API_unavailable&it=1732125650702&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger=navigation-sourceReferer: https://uw.ungerboeck.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /prod/util00/fonts/glyphicons-halflings-regular.woff2 HTTP/1.1Host: uw.ungerboeck.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://uw.ungerboeck.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://uw.ungerboeck.com/prod/util00/styles/bootstrap.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hplj0hjxwcyof5buciwx5bba; _gid=GA1.2.2047292829.1732125610; _gat=1; fdleileilfblfhlfhlfel=932b5947804a5a7fef3de7df074e2e93; CookiesEnabled=a70c6a1bdcbac88b090aad1e36c12ee6; __AntiXsrfToken=fdleileilfblfhlfhlfel; _gat_UA-68094028-1=1; _fbp=fb.1.1732125644839.329253274989757733; _ga=GA1.2.1541936858.1732125610; _ga_P497LF1PMM=GS1.1.1732125646.1.1.1732125650.56.0.0; AWSALB=58l6U6+POXOzpc8sLdzZY5nIK2pmpKzE6YgHudMSDWINGoNEew9aP+3dljuUk+Psa5Gt8nw9LcZ+Z9IRrzThdmsyOEr4Df9tH7wNzQ0rjqwqKSjfnAcTTJieAyCK; AWSALBCORS=58l6U6+POXOzpc8sLdzZY5nIK2pmpKzE6YgHudMSDWINGoNEew9aP+3dljuUk+Psa5Gt8nw9LcZ+Z9IRrzThdmsyOEr4Df9tH7wNzQ0rjqwqKSjfnAcTTJieAyCK
Source: global traffic	HTTP traffic detected: GET /tr/?id=178591269235291&ev=PageView&dl=https%3A%2F%2Fuw.ungerboeck.com%2Fprod%2Femc00%2FPublicSignIn.aspx%3Faat%3D35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d&rl=https%3A%2F%2Fuw.ungerboeck.com%2Fprod%2Femc00%2FPublicSignIn.aspx%3F%26aat%3D35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d&if=false&ts=1732125650711&sw=1280&sh=1024&v=2.9.177&r=stable&ec=0&o=4126&fbp=fb.1.1732125644839.329253274989757733&cdl=API_unavailable&it=1732125650702&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=178591269235291&ev=CompleteRegistration&dl=https%3A%2F%2Fuw.ungerboeck.com%2Fprod%2Femc00%2FPublicSignIn.aspx%3Faat%3D35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d&rl=https%3A%2F%2Fuw.ungerboeck.com%2Fprod%2Femc00%2FPublicSignIn.aspx%3F%26aat%3D35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d&if=false&ts=1732125650715&sw=1280&sh=1024&v=2.9.177&r=stable&ec=1&o=4126&fbp=fb.1.1732125644839.329253274989757733&cdl=API_unavailable&it=1732125650702&coo=false&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=178591269235291&ev=PageView&dl=https%3A%2F%2Fuw.ungerboeck.com%2Fprod%2Femc00%2FPublicSignIn.aspx%3Faat%3D35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d&rl=https%3A%2F%2Fuw.ungerboeck.com%2Fprod%2Femc00%2FPublicSignIn.aspx%3F%26aat%3D35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d&if=false&ts=1732125650711&sw=1280&sh=1024&v=2.9.177&r=stable&ec=0&o=4126&fbp=fb.1.1732125644839.329253274989757733&cdl=API_unavailable&it=1732125650702&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=178591269235291&ev=CompleteRegistration&dl=https%3A%2F%2Fuw.ungerboeck.com%2Fprod%2Femc00%2FPublicSignIn.aspx%3Faat%3D35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d&rl=https%3A%2F%2Fuw.ungerboeck.com%2Fprod%2Femc00%2FPublicSignIn.aspx%3F%26aat%3D35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d&if=false&ts=1732125650715&sw=1280&sh=1024&v=2.9.177&r=stable&ec=1&o=4126&fbp=fb.1.1732125644839.329253274989757733&cdl=API_unavailable&it=1732125650702&coo=false&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /visitor/v200/svrGP?pps=3&siteid=1427524768&ref2=https%3A%2F%2Fuw.ungerboeck.com%2Fprod%2Femc00%2FPublicSignIn.aspx%3F%26aat%3D35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d&tzo=300&ms=798&optin=disabled HTTP/1.1Host: s1427524768.t.eloqua.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://uw.ungerboeck.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ELOQUA=GUID=2F3794A0139A4B2DB39FD6E826A6F3CA; ELQSTATUS=OK
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /prod/content/images/favicon.ico HTTP/1.1Host: uw.ungerboeck.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://uw.ungerboeck.com/prod/emc00/PublicSignIn.aspx?aat=35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hplj0hjxwcyof5buciwx5bba; _gid=GA1.2.2047292829.1732125610; _gat=1; fdleileilfblfhlfhlfel=932b5947804a5a7fef3de7df074e2e93; CookiesEnabled=a70c6a1bdcbac88b090aad1e36c12ee6; __AntiXsrfToken=fdleileilfblfhlfhlfel; _gat_UA-68094028-1=1; _fbp=fb.1.1732125644839.329253274989757733; _ga=GA1.2.1541936858.1732125610; _ga_P497LF1PMM=GS1.1.1732125646.1.1.1732125650.56.0.0; AWSALB=ZCom4b4ZdleW4hrhMpZwa74Bp9SXC7T/BUPClngN/912lTkGb2zAi8yHRaGvX6WmfBQqfgUpFkUaOEOgK7LehgEMjg+oOVvjnbPtabY2XPoBsxzBIM7eftN8tB18; AWSALBCORS=ZCom4b4ZdleW4hrhMpZwa74Bp9SXC7T/BUPClngN/912lTkGb2zAi8yHRaGvX6WmfBQqfgUpFkUaOEOgK7LehgEMjg+oOVvjnbPtabY2XPoBsxzBIM7eftN8tB18
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /visitor/v200/svrGP?pps=3&siteid=1427524768&ref2=https%3A%2F%2Fuw.ungerboeck.com%2Fprod%2Femc00%2FPublicSignIn.aspx%3F%26aat%3D35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d&tzo=300&ms=798&optin=disabled HTTP/1.1Host: s1427524768.t.eloqua.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ELOQUA=GUID=2F3794A0139A4B2DB39FD6E826A6F3CA; ELQSTATUS=OK
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /prod/content/images/favicon.ico HTTP/1.1Host: uw.ungerboeck.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=hplj0hjxwcyof5buciwx5bba; _gid=GA1.2.2047292829.1732125610; _gat=1; fdleileilfblfhlfhlfel=932b5947804a5a7fef3de7df074e2e93; CookiesEnabled=a70c6a1bdcbac88b090aad1e36c12ee6; __AntiXsrfToken=fdleileilfblfhlfhlfel; _gat_UA-68094028-1=1; _fbp=fb.1.1732125644839.329253274989757733; _ga=GA1.2.1541936858.1732125610; _ga_P497LF1PMM=GS1.1.1732125646.1.1.1732125650.56.0.0; AWSALB=AbKKzaUexSaNCGjZYH7hloo57N6/O2y38SAzFa6qTrHZ7CiaWpqCVl3ReLvRHKj7MFQwwqwpS5gEQ0NyioUSU+czS0vCzS0bo4dKTTak3DcEtaS3DAeTh0gNfp8J; AWSALBCORS=AbKKzaUexSaNCGjZYH7hloo57N6/O2y38SAzFa6qTrHZ7CiaWpqCVl3ReLvRHKj7MFQwwqwpS5gEQ0NyioUSU+czS0vCzS0bo4dKTTak3DcEtaS3DAeTh0gNfp8J
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=178591269235291&ev=SubscribedButtonClick&dl=https%3A%2F%2Fuw.ungerboeck.com%2Fprod%2Femc00%2FPublicSignIn.aspx%3Faat%3D35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d&rl=https%3A%2F%2Fuw.ungerboeck.com%2Fprod%2Femc00%2FPublicSignIn.aspx%3F%26aat%3D35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d&if=false&ts=1732125666433&cd[buttonFeatures]=%7B%22classList%22%3A%22%22%2C%22destination%22%3A%22mailto%3Aregistrations%40pyle.wisc.edu%22%2C%22id%22%3A%22%22%2C%22imageUrl%22%3A%22%22%2C%22innerText%22%3A%22registrations%40pyle.wisc.edu%22%2C%22numChildButtons%22%3A0%2C%22tag%22%3A%22a%22%2C%22type%22%3Anull%2C%22name%22%3A%22%22%7D&cd[buttonText]=%40&cd[formFeatures]=%5B%7B%22id%22%3A%22__EVENTTARGET%22%2C%22name%22%3A%22__EVENTTARGET%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%2C%22valueMeaning%22%3A%22empty%22%7D%2C%7B%22id%22%3A%22__EVENTARGUMENT%22%2C%22name%22%3A%22__EVENTARGUMENT%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%2C%22valueMeaning%22%3A%22empty%22%7D%2C%7B%22id%22%3A%22__VIEWSTATE%22%2C%22name%22%3A%22__VIEWSTATE%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%7D%2C%7B%22id%22%3A%22customHtmlSection%22%2C%22name%22%3A%22%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%2C%22valueMeaning%22%3A%22empty%22%7D%2C%7B%22id%22%3A%22ctl00_cphBody_signUpButton%22%2C%22name%22%3A%22ctl00%24cphBody%24signUpButton%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22submit%22%7D%2C%7B%22id%22%3A%22ctl00_cphBody_objLogin_UserName%22%2C%22name%22%3A%22ctl00%24cphBody%24objLogin%24UserName%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22text%22%2C%22valueMeaning%22%3A%22empty%22%7D%2C%7B%22id%22%3A%22ctl00_cphBody_objLogin_Password%22%2C%22name%22%3A%22ctl00%24cphBody%24objLogin%24Password%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22password%22%7D%2C%7B%22id%22%3A%22ctl00_cphBody_objLogin_RememberMe%22%2C%22name%22%3A%22ctl00%24cphBody%24objLogin%24RememberMe%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22checkbox%22%7D%2C%7B%22id%22%3A%22ctl00_cphBody_objLogin_LoginButton%22%2C%22name%22%3A%22ctl00%24cphBody%24objLogin%24LoginButton%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22submit%22%7D%2C%7B%22id%22%3A%22ctl00_TimeZoneOffset%22%2C%22name%22%3A%22ctl00%24TimeZoneOffset%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%7D%2C%7B%22id%22%3A%22__VIEWSTATEGENERATOR%22%2C%22name%22%3A%22__VIEWSTATEGENERATOR%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%7D%2C%7B%22id%22%3A%22__EVENTVALIDATION%22%2C%22name%22%3A%22__EVENTVALIDATION%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%7D%5D&cd[pageFeatures]=%7B%22title%22%3A%22InterPro%20Registrations%20%7C%20University%20of%20Wisconsin-Madison%22%7D&sw=1280&sh=1024&v=2.9.177&r=stable&ec=2&o=4126&fbp=fb.1.1732125644839.329253274989757733&cdl=API_unavailable&i
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=178591269235291&ev=SubscribedButtonClick&dl=https%3A%2F%2Fuw.ungerboeck.com%2Fprod%2Femc00%2FPublicSignIn.aspx%3Faat%3D35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d&rl=https%3A%2F%2Fuw.ungerboeck.com%2Fprod%2Femc00%2FPublicSignIn.aspx%3F%26aat%3D35377a726a43716977737670612f6235634e66346a72686358495a69347949545738352f474e51745754673d&if=false&ts=1732125666433&cd[buttonFeatures]=%7B%22classList%22%3A%22%22%2C%22destination%22%3A%22mailto%3Aregistrations%40pyle.wisc.edu%22%2C%22id%22%3A%22%22%2C%22imageUrl%22%3A%22%22%2C%22innerText%22%3A%22registrations%40pyle.wisc.edu%22%2C%22numChildButtons%22%3A0%2C%22tag%22%3A%22a%22%2C%22type%22%3Anull%2C%22name%22%3A%22%22%7D&cd[buttonText]=%40&cd[formFeatures]=%5B%7B%22id%22%3A%22__EVENTTARGET%22%2C%22name%22%3A%22__EVENTTARGET%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%2C%22valueMeaning%22%3A%22empty%22%7D%2C%7B%22id%22%3A%22__EVENTARGUMENT%22%2C%22name%22%3A%22__EVENTARGUMENT%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%2C%22valueMeaning%22%3A%22empty%22%7D%2C%7B%22id%22%3A%22__VIEWSTATE%22%2C%22name%22%3A%22__VIEWSTATE%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%7D%2C%7B%22id%22%3A%22customHtmlSection%22%2C%22name%22%3A%22%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%2C%22valueMeaning%22%3A%22empty%22%7D%2C%7B%22id%22%3A%22ctl00_cphBody_signUpButton%22%2C%22name%22%3A%22ctl00%24cphBody%24signUpButton%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22submit%22%7D%2C%7B%22id%22%3A%22ctl00_cphBody_objLogin_UserName%22%2C%22name%22%3A%22ctl00%24cphBody%24objLogin%24UserName%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22text%22%2C%22valueMeaning%22%3A%22empty%22%7D%2C%7B%22id%22%3A%22ctl00_cphBody_objLogin_Password%22%2C%22name%22%3A%22ctl00%24cphBody%24objLogin%24Password%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22password%22%7D%2C%7B%22id%22%3A%22ctl00_cphBody_objLogin_RememberMe%22%2C%22name%22%3A%22ctl00%24cphBody%24objLogin%24RememberMe%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22checkbox%22%7D%2C%7B%22id%22%3A%22ctl00_cphBody_objLogin_LoginButton%22%2C%22name%22%3A%22ctl00%24cphBody%24objLogin%24LoginButton%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22submit%22%7D%2C%7B%22id%22%3A%22ctl00_TimeZoneOffset%22%2C%22name%22%3A%22ctl00%24TimeZoneOffset%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%7D%2C%7B%22id%22%3A%22__VIEWSTATEGENERATOR%22%2C%22name%22%3A%22__VIEWSTATEGENERATOR%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%7D%2C%7B%22id%22%3A%22__EVENTVALIDATION%22%2C%22name%22%3A%22__EVENTVALIDATION%22%2C%22tag%22%3A%22input%22%2C%22inputType%22%3A%22hidden%22%7D%5D&cd[pageFeatures]=%7B%22title%22%3A%22InterPro%20Registrations%20%7C%20University%20of%20Wisconsin-Madison%22%7D&sw=1280&sh=1024&v=2.9.177&r=stable&ec=2&o=4126&fbp=fb.1.1732125644839.329253274989757733&cdl=API_unavailable&i
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ab?clientId=8BE9B3CD-1E19-4CE0-9725-398E0F144AA9 HTTP/1.1X-OfficeApp-BuildVersion: 16.0.11629.20316Accept-Encoding: gzip, deflateX-OfficeApp-Platform: universalX-OfficeApp-Language: en-CHX-OutlookMobile-Architecture: x64X-OutlookMobile-BuildFlavor: shipX-OutlookMobile-Environment: ProductionX-OfficeApp-MsoVersion: 10.0.19045X-OutlookMobile-HxServiceAccounts: NoneContent-Length: 0Content-Encoding: gzipHost: outlookmobile-office365-tas.msedge.netConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /courses/maintaining-asphalt-pavements/?utm_source=Brochure&utm_medium=postal&utm_campaign=D487&utm_term=SHB&utm_content=Sep HTTP/1.1Host: interpro.wisc.eduConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Found strings which match to known social media urls

Source: chromecache_141.2.dr	String found in binary or memory: <a aria-label="Share this on Facebook" href="http://www.facebook.com/sharer/sharer.php?u=https://interpro.wisc.edu/courses/maintaining-asphalt-pavements/" class="csis-button ghost"> equals www.facebook.com (Facebook)
Source: chromecache_141.2.dr	String found in binary or memory: <a aria-label="Share this on LinkedIn" href="http://www.linkedin.com/shareArticle?mini=true&url=https://interpro.wisc.edu/RA00315&title=Maintaining+Asphalt+Pavements&source=https://interpro.wisc.edu" class="csis-button ghost"> equals www.linkedin.com (Linkedin)
Source: chromecache_141.2.dr	String found in binary or memory: </svg></a></li><li id="uw-icon-youtube" class="uw-social-icon"><a aria-label="youtube" href="https://www.youtube.com/channel/UCL7P58qiF8e5DIErHmPJevw"><svg class="uw-social-symbols" viewBox="0 0 576 512" version="1.1" role="img" focusable="false" aria-hidden="true" aria-labelledby="dynid673e1f27d2b2b1.24098423"> equals www.youtube.com (Youtube)
Source: chromecache_262.2.dr, chromecache_263.2.dr	String found in binary or memory: <IMG HEIGHT="1" WIDTH="1" SRC="https://www.facebook.com/tr?id=108796089467244&ev=PageView&noscript=1" DISPLAY="none"> equals www.facebook.com (Facebook)
Source: chromecache_141.2.dr	String found in binary or memory: <li><ul class="uw-social-icons"><li id="uw-icon-facebook" class="uw-social-icon"><a aria-label="facebook" href="https://www.facebook.com/uwmadinterpro"><svg class="uw-social-symbols" viewBox="0 0 320 512" version="1.1" role="img" focusable="false" aria-hidden="true" aria-labelledby="dynid673e1f27d2a8b8.24665895"> equals www.facebook.com (Facebook)
Source: chromecache_182.2.dr	String found in binary or memory: M.getElementsByTagName("iframe"),la=N.length,ia=0;ia<la;ia++)if(!v&&c(N[ia],G.Re)){DK("https://www.youtube.com/iframe_api");v=!0;break}})}}else H(t.vtp_gtmOnSuccess)}var q=["www.youtube.com","www.youtube-nocookie.com"],r={UNSTARTED:-1,ENDED:0,PLAYING:1,PAUSED:2,BUFFERING:3,CUED:5},u,v=!1;Z.__ytl=n;Z.__ytl.o="ytl";Z.__ytl.isVendorTemplate=!0;Z.__ytl.priorityOverride=0;Z.__ytl.isInfrastructure=!1; equals www.youtube.com (Youtube)
Source: chromecache_185.2.dr, chromecache_196.2.dr, chromecache_139.2.dr, chromecache_182.2.dr, chromecache_258.2.dr, chromecache_236.2.dr, chromecache_221.2.dr, chromecache_238.2.dr, chromecache_245.2.dr	String found in binary or memory: Math.round(q);t["gtm.videoElapsedTime"]=Math.round(f);t["gtm.videoPercent"]=r;t["gtm.videoVisible"]=u;return t},Ak:function(){e=qb()},zd:function(){d()}}};var Zb=wa(["data-gtm-yt-inspected-"]),ID=["www.youtube.com","www.youtube-nocookie.com"],JD,KD=!1; equals www.youtube.com (Youtube)
Source: chromecache_139.2.dr, chromecache_258.2.dr, chromecache_236.2.dr, chromecache_221.2.dr, chromecache_238.2.dr, chromecache_245.2.dr	String found in binary or memory: if(!(e||f||g||k.length||m.length))return;var p={Dh:e,Bh:f,Ch:g,ji:k,ki:m,Re:n,Ib:b},q=B.YT;if(q)return q.ready&&q.ready(d),b;var r=B.onYouTubeIframeAPIReady;B.onYouTubeIframeAPIReady=function(){r&&r();d()};H(function(){for(var u=E.getElementsByTagName("script"),v=u.length,t=0;t<v;t++){var w=u[t].getAttribute("src");if(TD(w,"iframe_api")||TD(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!KD&&RD(x[A],p.Re))return qc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_251.2.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_251.2.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_251.2.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_185.2.dr, chromecache_196.2.dr, chromecache_182.2.dr	String found in binary or memory: var VC=function(a,b,c,d,e){var f=MA("fsl",c?"nv.mwt":"mwt",0),g;g=c?MA("fsl","nv.ids",[]):MA("fsl","ids",[]);if(!g.length)return!0;var k=RA(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);V(121);if(m==="https://www.facebook.com/tr/")return V(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!xz(k,zz(b, equals www.facebook.com (Facebook)
Source: chromecache_190.2.dr, chromecache_237.2.dr	String found in binary or memory: {"uid":436902,"dkey":"a3ee3ed4a927830d3e9b8630ac1aabf4","updated_at":1732105632,"version":"11.5.323","site_data_url_template":"https://script.crazyegg.com/pages/data-scripts/0043/6902/site/SITENAME.json","site_sampling_url_template":"https://script.crazyegg.com/pages/data-scripts/0043/6902/sampling/SITENAME.json","status_data_url":"https://script.crazyegg.com/pages/data-scripts/0043/6902/status.json","hud":{"host":"https://hud.crazyegg.com","script_url":"https://script.crazyegg.com/scripts/hud","core_api_auth_key":"328f1ce997216e712e088d88aeae5e2ccfa037d8f7166615fb1f0859c4be1d0c","launch_origins":["https://core.crazyegg.com"]},"survey_preview_dest":"https://api.crazyegg.com/surveys/preview","survey_launch_origins":["https://app.crazyegg.com","https://core.crazyegg.com"],"addon_preview_dest":"https://api.crazyegg.com/surveys/preview","addon_launch_origins":["https://app.crazyegg.com","https://core.crazyegg.com"],"ce_app_url":"https://app.crazyegg.com","flow_preview_url":"https://api.crazyegg.com/abtests/preview","clock_url":"https://tracking.crazyegg.com/clock","common_script_url":"https://script.crazyegg.com/pages/versioned/common-scripts/1db8eb7ffc8594e42c0729400701d1a8.js","status":"ok","counters_dest":"https://tracking.crazyegg.com/metrics","data_url":"https://script.crazyegg.com/pages/data-scripts/0043/6902/site/interpro.wisc.edu.json","sampling_data_url":"https://script.crazyegg.com/pages/data-scripts/0043/6902/sampling/interpro.wisc.edu.json","tracking_script_url":"https://script.crazyegg.com/pages/versioned/tracking-scripts/12ea412648d1035437916ed41b2a74c7.js","trackingpagestate_script_url":"https://script.crazyegg.com/pages/versioned/trackingpagestate-scripts/cdc746c62076757bb4e3133b83f84f01.js","thirdparty_script_url":"https://script.crazyegg.com/pages/versioned/thirdparty-scripts/4297f40ca027b6bdba6eebdbfbb17f58.js","sites":"%8&4!}%|%]!}$<$3$2$;$9$3$3$,!}&%%?&$%^!}$<!}&0%|&+%[$.%^%]&-!}$,!}%[&&&&%~%|%^${&&&$%?%|&%!}$<!}&0%|&+%[$.%^%]&-!}$,!}&+%^&+&+%|&&&%%.%^%[&&&*%]%|&%%`!}$<&,&*&-%^$,!}&*%^%[&&&*%]%|&%%`%0%^&,&,%|&%%`&+!}$<&4!}&(%?%`%^%1%?&*%`%^&,%|&%%`$|&%%?%@&!%^%]!}$<%_%?&!&+%^$,!}&(%?%`%^%1%?&*%`%^&,%|&%%`%2&*&!&+!}$<%8%;$,!}&*&-&!%^&+!}$<%8%;$,!}&$%?&+%~$|&!%^&$%^&%&,&+!}$<&%&-&!&!$,!}&+%?&$&(&!%|&%%`%0&,&*%?&,%^%`&2!}$<!}&-&%%|%_&&&*&$!}$,!}&+%?&$&(&!%|&%%`%*&-&$%.%^%[&&&*%]%|&%%`&+!}$<&%&-&!&!$,!}&+%?&$&(&!%|&%%`%0&,%?&*&,${%?&,%^!}$<&%&-&!&!$,!}&+%?&$&(&!%|&%%`%0&,%?&*&,${%?&,%^%2&%%|&1!}$<&%&-&!&!$,!}&+%?&$&(&!%|&%%`$|&%%]${%?&,%^!}$<&%&-&!&!$,!}&+%?&$&(&!%|&%%`$|&%%]${%?&,%^%2&%%|&1!}$<&%&-&!&!$,!}&+%?&$&(&!%|&%%`%2&(%]%?&,%^%]$^&,!}$<&%&-&!&!$,!}%^&%%]%0%^&+&+%|&&&%%+&%$_&!&&%[%~%^%]%2&*&!!}$<%_%?&!&+%^$,!}%@&!&&%[%~%^%]%2&*&!&+!}$<%8%;$,!}%@&!&&%[%~%^%]%.&-&!%^&+!}$<%8%;$,!}&(&*%^$`%?%[%{%^%$&$%?%`%^&+!}$<%_%?&!&+%^$,!}&*%^%[&&&*%]%$%_&*%?&$%^&+!}$<%_%?&!&+%^$,!}%{%|%]%^%$%_&*%?&$%^&+!}$<%_%?&!&+%^$,!}&+%?&$&(&!%|&%%`$`&&&$&(&!%^&,%^%]$^&,!}$<$2$8$4$1$4$;$2$4$2$1&6$,!}&*%^%[&&&*%]%|&%%`%=&*%?&,%|&&!}$<$2$9&6%;","segments":
Source: chromecache_190.2.dr, chromecache_237.2.dr	String found in binary or memory: {"uid":436902,"dkey":"a3ee3ed4a927830d3e9b8630ac1aabf4","updated_at":1732105632,"version":"11.5.323","site_data_url_template":"https://script.crazyegg.com/pages/data-scripts/0043/6902/site/SITENAME.json","site_sampling_url_template":"https://script.crazyegg.com/pages/data-scripts/0043/6902/sampling/SITENAME.json","status_data_url":"https://script.crazyegg.com/pages/data-scripts/0043/6902/status.json","hud":{"host":"https://hud.crazyegg.com","script_url":"https://script.crazyegg.com/scripts/hud","core_api_auth_key":"328f1ce997216e712e088d88aeae5e2ccfa037d8f7166615fb1f0859c4be1d0c","launch_origins":["https://core.crazyegg.com"]},"survey_preview_dest":"https://api.crazyegg.com/surveys/preview","survey_launch_origins":["https://app.crazyegg.com","https://core.crazyegg.com"],"addon_preview_dest":"https://api.crazyegg.com/surveys/preview","addon_launch_origins":["https://app.crazyegg.com","https://core.crazyegg.com"],"ce_app_url":"https://app.crazyegg.com","flow_preview_url":"https://api.crazyegg.com/abtests/preview","clock_url":"https://tracking.crazyegg.com/clock","common_script_url":"https://script.crazyegg.com/pages/versioned/common-scripts/1db8eb7ffc8594e42c0729400701d1a8.js","status":"ok","counters_dest":"https://tracking.crazyegg.com/metrics","data_url":"https://script.crazyegg.com/pages/data-scripts/0043/6902/site/interpro.wisc.edu.json","sampling_data_url":"https://script.crazyegg.com/pages/data-scripts/0043/6902/sampling/interpro.wisc.edu.json","tracking_script_url":"https://script.crazyegg.com/pages/versioned/tracking-scripts/12ea412648d1035437916ed41b2a74c7.js","trackingpagestate_script_url":"https://script.crazyegg.com/pages/versioned/trackingpagestate-scripts/cdc746c62076757bb4e3133b83f84f01.js","thirdparty_script_url":"https://script.crazyegg.com/pages/versioned/thirdparty-scripts/4297f40ca027b6bdba6eebdbfbb17f58.js","sites":"%8&4!}%|%]!}$<$3$2$;$9$3$3$,!}&%%?&$%^!}$<!}&0%|&+%[$.%^%]&-!}$,!}%[&&&&%~%|%^${&&&$%?%|&%!}$<!}&0%|&+%[$.%^%]&-!}$,!}&+%^&+&+%|&&&%%.%^%[&&&*%]%|&%%`!}$<&,&*&-%^$,!}&*%^%[&&&*%]%|&%%`%0%^&,&,%|&%%`&+!}$<&4!}&(%?%`%^%1%?&*%`%^&,%|&%%`$|&%%?%@&!%^%]!}$<%_%?&!&+%^$,!}&(%?%`%^%1%?&*%`%^&,%|&%%`%2&*&!&+!}$<%8%;$,!}&*&-&!%^&+!}$<%8%;$,!}&$%?&+%~$|&!%^&$%^&%&,&+!}$<&%&-&!&!$,!}&+%?&$&(&!%|&%%`%0&,&*%?&,%^%`&2!}$<!}&-&%%|%_&&&*&$!}$,!}&+%?&$&(&!%|&%%`%*&-&$%.%^%[&&&*%]%|&%%`&+!}$<&%&-&!&!$,!}&+%?&$&(&!%|&%%`%0&,%?&*&,${%?&,%^!}$<&%&-&!&!$,!}&+%?&$&(&!%|&%%`%0&,%?&*&,${%?&,%^%2&%%|&1!}$<&%&-&!&!$,!}&+%?&$&(&!%|&%%`$|&%%]${%?&,%^!}$<&%&-&!&!$,!}&+%?&$&(&!%|&%%`$|&%%]${%?&,%^%2&%%|&1!}$<&%&-&!&!$,!}&+%?&$&(&!%|&%%`%2&(%]%?&,%^%]$^&,!}$<&%&-&!&!$,!}%^&%%]%0%^&+&+%|&&&%%+&%$_&!&&%[%~%^%]%2&*&!!}$<%_%?&!&+%^$,!}%@&!&&%[%~%^%]%2&*&!&+!}$<%8%;$,!}%@&!&&%[%~%^%]%.&-&!%^&+!}$<%8%;$,!}&(&*%^$`%?%[%{%^%$&$%?%`%^&+!}$<%_%?&!&+%^$,!}&*%^%[&&&*%]%$%_&*%?&$%^&+!}$<%_%?&!&+%^$,!}%{%|%]%^%$%_&*%?&$%^&+!}$<%_%?&!&+%^$,!}&+%?&$&(&!%|&%%`$`&&&$&(&!%^&,%^%]$^&,!}$<$2$8$4$1$4$;$2$4$2$1&6$,!}&*%^%[&&&*%]%|&%%`%=&*%?&,%|&&!}$<$2$9&6%;","segments":
Source: chromecache_237.2.dr	String found in binary or memory: {"uid":436902,"dkey":"a3ee3ed4a927830d3e9b8630ac1aabf4","updated_at":1732105632,"version":"11.5.323","site_data_url_template":"https://script.crazyegg.com/pages/data-scripts/0043/6902/site/SITENAME.json","site_sampling_url_template":"https://script.crazyegg.com/pages/data-scripts/0043/6902/sampling/SITENAME.json","status_data_url":"https://script.crazyegg.com/pages/data-scripts/0043/6902/status.json","hud":{"host":"https://hud.crazyegg.com","script_url":"https://script.crazyegg.com/scripts/hud","core_api_auth_key":"328f1ce997216e712e088d88aeae5e2ccfa037d8f7166615fb1f0859c4be1d0c","launch_origins":["https://core.crazyegg.com"]},"survey_preview_dest":"https://api.crazyegg.com/surveys/preview","survey_launch_origins":["https://app.crazyegg.com","https://core.crazyegg.com"],"addon_preview_dest":"https://api.crazyegg.com/surveys/preview","addon_launch_origins":["https://app.crazyegg.com","https://core.crazyegg.com"],"ce_app_url":"https://app.crazyegg.com","flow_preview_url":"https://api.crazyegg.com/abtests/preview","clock_url":"https://tracking.crazyegg.com/clock","common_script_url":"https://script.crazyegg.com/pages/versioned/common-scripts/1db8eb7ffc8594e42c0729400701d1a8.js","status":"ok","counters_dest":"https://tracking.crazyegg.com/metrics","data_url":"https://script.crazyegg.com/pages/data-scripts/0043/6902/site/interpro.wisc.edu.json","sampling_data_url":"https://script.crazyegg.com/pages/data-scripts/0043/6902/sampling/interpro.wisc.edu.json","tracking_script_url":"https://script.crazyegg.com/pages/versioned/tracking-scripts/12ea412648d1035437916ed41b2a74c7.js","trackingpagestate_script_url":"https://script.crazyegg.com/pages/versioned/trackingpagestate-scripts/cdc746c62076757bb4e3133b83f84f01.js","thirdparty_script_url":"https://script.crazyegg.com/pages/versioned/thirdparty-scripts/4297f40ca027b6bdba6eebdbfbb17f58.js","sites":"%8&4!}%|%]!}$<$3$2$;$9$3$3$,!}&%%?&$%^!}$<!}&0%|&+%[$.%^%]&-!}$,!}%[&&&&%~%|%^${&&&$%?%|&%!}$<!}&0%|&+%[$.%^%]&-!}$,!}&+%^&+&+%|&&&%%.%^%[&&&*%]%|&%%`!}$<&,&*&-%^$,!}&*%^%[&&&*%]%|&%%`%0%^&,&,%|&%%`&+!}$<&4!}&(%?%`%^%1%?&*%`%^&,%|&%%`$|&%%?%@&!%^%]!}$<%_%?&!&+%^$,!}&(%?%`%^%1%?&*%`%^&,%|&%%`%2&*&!&+!}$<%8%;$,!}&*&-&!%^&+!}$<%8%;$,!}&$%?&+%~$|&!%^&$%^&%&,&+!}$<&%&-&!&!$,!}&+%?&$&(&!%|&%%`%0&,&*%?&,%^%`&2!}$<!}&-&%%|%_&&&*&$!}$,!}&+%?&$&(&!%|&%%`%*&-&$%.%^%[&&&*%]%|&%%`&+!}$<&%&-&!&!$,!}&+%?&$&(&!%|&%%`%0&,%?&*&,${%?&,%^!}$<&%&-&!&!$,!}&+%?&$&(&!%|&%%`%0&,%?&*&,${%?&,%^%2&%%|&1!}$<&%&-&!&!$,!}&+%?&$&(&!%|&%%`$|&%%]${%?&,%^!}$<&%&-&!&!$,!}&+%?&$&(&!%|&%%`$|&%%]${%?&,%^%2&%%|&1!}$<&%&-&!&!$,!}&+%?&$&(&!%|&%%`%2&(%]%?&,%^%]$^&,!}$<&%&-&!&!$,!}%^&%%]%0%^&+&+%|&&&%%+&%$_&!&&%[%~%^%]%2&*&!!}$<%_%?&!&+%^$,!}%@&!&&%[%~%^%]%2&*&!&+!}$<%8%;$,!}%@&!&&%[%~%^%]%.&-&!%^&+!}$<%8%;$,!}&(&*%^$`%?%[%{%^%$&$%?%`%^&+!}$<%_%?&!&+%^$,!}&*%^%[&&&*%]%$%_&*%?&$%^&+!}$<%_%?&!&+%^$,!}%{%|%]%^%$%_&*%?&$%^&+!}$<%_%?&!&+%^$,!}&+%?&$&(&!%|&%%`$`&&&$&(&!%^&,%^%]$^&,!}$<$2$8$4$1$4$;$2$4$2$1&6$,!}&*%^%[&&&*%]%|&%%`%=&*%?&,%|&&!}$<$2$9&6%;","segments":
Source: chromecache_260.2.dr, chromecache_186.2.dr	String found in binary or memory: {"uid":436902,"dkey":"a3ee3ed4a927830d3e9b8630ac1aabf4","updated_at":1732110621,"version":"11.5.323","site_data_url_template":"https://script.crazyegg.com/pages/data-scripts/0043/6902/site/SITENAME.json","site_sampling_url_template":"https://script.crazyegg.com/pages/data-scripts/0043/6902/sampling/SITENAME.json","status_data_url":"https://script.crazyegg.com/pages/data-scripts/0043/6902/status.json","hud":{"host":"https://hud.crazyegg.com","script_url":"https://script.crazyegg.com/scripts/hud","core_api_auth_key":"328f1ce997216e712e088d88aeae5e2ccfa037d8f7166615fb1f0859c4be1d0c","launch_origins":["https://core.crazyegg.com"]},"survey_preview_dest":"https://api.crazyegg.com/surveys/preview","survey_launch_origins":["https://app.crazyegg.com","https://core.crazyegg.com"],"addon_preview_dest":"https://api.crazyegg.com/surveys/preview","addon_launch_origins":["https://app.crazyegg.com","https://core.crazyegg.com"],"ce_app_url":"https://app.crazyegg.com","flow_preview_url":"https://api.crazyegg.com/abtests/preview","clock_url":"https://tracking.crazyegg.com/clock","common_script_url":"https://script.crazyegg.com/pages/versioned/common-scripts/1db8eb7ffc8594e42c0729400701d1a8.js","status":"ok","counters_dest":"https://tracking.crazyegg.com/metrics","data_url":"https://script.crazyegg.com/pages/data-scripts/0043/6902/site/uw.ungerboeck.com.json","sampling_data_url":"https://script.crazyegg.com/pages/data-scripts/0043/6902/sampling/uw.ungerboeck.com.json","tracking_script_url":"https://script.crazyegg.com/pages/versioned/tracking-scripts/12ea412648d1035437916ed41b2a74c7.js","trackingpagestate_script_url":"https://script.crazyegg.com/pages/versioned/trackingpagestate-scripts/cdc746c62076757bb4e3133b83f84f01.js","thirdparty_script_url":"https://script.crazyegg.com/pages/versioned/thirdparty-scripts/4297f40ca027b6bdba6eebdbfbb17f58.js","sites":"%8&4!}%|%]!}$<$3$2$;$9$3$3$,!}&%%?&$%^!}$<!}&0%|&+%[$.%^%]&-!}$,!}%[&&&&%~%|%^${&&&$%?%|&%!}$<!}&0%|&+%[$.%^%]&-!}$,!}&+%^&+&+%|&&&%%.%^%[&&&*%]%|&%%`!}$<&,&*&-%^$,!}&*%^%[&&&*%]%|&%%`%0%^&,&,%|&%%`&+!}$<&4!}&(%?%`%^%1%?&*%`%^&,%|&%%`$|&%%?%@&!%^%]!}$<%_%?&!&+%^$,!}&(%?%`%^%1%?&*%`%^&,%|&%%`%2&*&!&+!}$<%8%;$,!}&*&-&!%^&+!}$<%8%;$,!}&$%?&+%~$|&!%^&$%^&%&,&+!}$<&%&-&!&!$,!}&+%?&$&(&!%|&%%`%0&,&*%?&,%^%`&2!}$<!}&-&%%|%_&&&*&$!}$,!}&+%?&$&(&!%|&%%`%*&-&$%.%^%[&&&*%]%|&%%`&+!}$<&%&-&!&!$,!}&+%?&$&(&!%|&%%`%0&,%?&*&,${%?&,%^!}$<&%&-&!&!$,!}&+%?&$&(&!%|&%%`%0&,%?&*&,${%?&,%^%2&%%|&1!}$<&%&-&!&!$,!}&+%?&$&(&!%|&%%`$|&%%]${%?&,%^!}$<&%&-&!&!$,!}&+%?&$&(&!%|&%%`$|&%%]${%?&,%^%2&%%|&1!}$<&%&-&!&!$,!}&+%?&$&(&!%|&%%`%2&(%]%?&,%^%]$^&,!}$<&%&-&!&!$,!}%^&%%]%0%^&+&+%|&&&%%+&%$_&!&&%[%~%^%]%2&*&!!}$<%_%?&!&+%^$,!}%@&!&&%[%~%^%]%2&*&!&+!}$<%8%;$,!}%@&!&&%[%~%^%]%.&-&!%^&+!}$<%8%;$,!}&(&*%^$`%?%[%{%^%$&$%?%`%^&+!}$<%_%?&!&+%^$,!}&*%^%[&&&*%]%$%_&*%?&$%^&+!}$<%_%?&!&+%^$,!}%{%|%]%^%$%_&*%?&$%^&+!}$<%_%?&!&+%^$,!}&+%?&$&(&!%|&%%`$`&&&$&(&!%^&,%^%]$^&,!}$<$2$8$4$1$4$;$2$4$2$1&6$,!}&*%^%[&&&*%]%|&%%`%=&*%?&,%|&&!}$<$2$9&6%;","segments":
Source: chromecache_260.2.dr, chromecache_186.2.dr	String found in binary or memory: {"uid":436902,"dkey":"a3ee3ed4a927830d3e9b8630ac1aabf4","updated_at":1732110621,"version":"11.5.323","site_data_url_template":"https://script.crazyegg.com/pages/data-scripts/0043/6902/site/SITENAME.json","site_sampling_url_template":"https://script.crazyegg.com/pages/data-scripts/0043/6902/sampling/SITENAME.json","status_data_url":"https://script.crazyegg.com/pages/data-scripts/0043/6902/status.json","hud":{"host":"https://hud.crazyegg.com","script_url":"https://script.crazyegg.com/scripts/hud","core_api_auth_key":"328f1ce997216e712e088d88aeae5e2ccfa037d8f7166615fb1f0859c4be1d0c","launch_origins":["https://core.crazyegg.com"]},"survey_preview_dest":"https://api.crazyegg.com/surveys/preview","survey_launch_origins":["https://app.crazyegg.com","https://core.crazyegg.com"],"addon_preview_dest":"https://api.crazyegg.com/surveys/preview","addon_launch_origins":["https://app.crazyegg.com","https://core.crazyegg.com"],"ce_app_url":"https://app.crazyegg.com","flow_preview_url":"https://api.crazyegg.com/abtests/preview","clock_url":"https://tracking.crazyegg.com/clock","common_script_url":"https://script.crazyegg.com/pages/versioned/common-scripts/1db8eb7ffc8594e42c0729400701d1a8.js","status":"ok","counters_dest":"https://tracking.crazyegg.com/metrics","data_url":"https://script.crazyegg.com/pages/data-scripts/0043/6902/site/uw.ungerboeck.com.json","sampling_data_url":"https://script.crazyegg.com/pages/data-scripts/0043/6902/sampling/uw.ungerboeck.com.json","tracking_script_url":"https://script.crazyegg.com/pages/versioned/tracking-scripts/12ea412648d1035437916ed41b2a74c7.js","trackingpagestate_script_url":"https://script.crazyegg.com/pages/versioned/trackingpagestate-scripts/cdc746c62076757bb4e3133b83f84f01.js","thirdparty_script_url":"https://script.crazyegg.com/pages/versioned/thirdparty-scripts/4297f40ca027b6bdba6eebdbfbb17f58.js","sites":"%8&4!}%|%]!}$<$3$2$;$9$3$3$,!}&%%?&$%^!}$<!}&0%|&+%[$.%^%]&-!}$,!}%[&&&&%~%|%^${&&&$%?%|&%!}$<!}&0%|&+%[$.%^%]&-!}$,!}&+%^&+&+%|&&&%%.%^%[&&&*%]%|&%%`!}$<&,&*&-%^$,!}&*%^%[&&&*%]%|&%%`%0%^&,&,%|&%%`&+!}$<&4!}&(%?%`%^%1%?&*%`%^&,%|&%%`$|&%%?%@&!%^%]!}$<%_%?&!&+%^$,!}&(%?%`%^%1%?&*%`%^&,%|&%%`%2&*&!&+!}$<%8%;$,!}&*&-&!%^&+!}$<%8%;$,!}&$%?&+%~$|&!%^&$%^&%&,&+!}$<&%&-&!&!$,!}&+%?&$&(&!%|&%%`%0&,&*%?&,%^%`&2!}$<!}&-&%%|%_&&&*&$!}$,!}&+%?&$&(&!%|&%%`%*&-&$%.%^%[&&&*%]%|&%%`&+!}$<&%&-&!&!$,!}&+%?&$&(&!%|&%%`%0&,%?&*&,${%?&,%^!}$<&%&-&!&!$,!}&+%?&$&(&!%|&%%`%0&,%?&*&,${%?&,%^%2&%%|&1!}$<&%&-&!&!$,!}&+%?&$&(&!%|&%%`$|&%%]${%?&,%^!}$<&%&-&!&!$,!}&+%?&$&(&!%|&%%`$|&%%]${%?&,%^%2&%%|&1!}$<&%&-&!&!$,!}&+%?&$&(&!%|&%%`%2&(%]%?&,%^%]$^&,!}$<&%&-&!&!$,!}%^&%%]%0%^&+&+%|&&&%%+&%$_&!&&%[%~%^%]%2&*&!!}$<%_%?&!&+%^$,!}%@&!&&%[%~%^%]%2&*&!&+!}$<%8%;$,!}%@&!&&%[%~%^%]%.&-&!%^&+!}$<%8%;$,!}&(&*%^$`%?%[%{%^%$&$%?%`%^&+!}$<%_%?&!&+%^$,!}&*%^%[&&&*%]%$%_&*%?&$%^&+!}$<%_%?&!&+%^$,!}%{%|%]%^%$%_&*%?&$%^&+!}$<%_%?&!&+%^$,!}&+%?&$&(&!%|&%%`$`&&&$&(&!%^&,%^%]$^&,!}$<$2$8$4$1$4$;$2$4$2$1&6$,!}&*%^%[&&&*%]%|&%%`%=&*%?&,%|&&!}$<$2$9&6%;","segments":
Source: chromecache_186.2.dr	String found in binary or memory: {"uid":436902,"dkey":"a3ee3ed4a927830d3e9b8630ac1aabf4","updated_at":1732110621,"version":"11.5.323","site_data_url_template":"https://script.crazyegg.com/pages/data-scripts/0043/6902/site/SITENAME.json","site_sampling_url_template":"https://script.crazyegg.com/pages/data-scripts/0043/6902/sampling/SITENAME.json","status_data_url":"https://script.crazyegg.com/pages/data-scripts/0043/6902/status.json","hud":{"host":"https://hud.crazyegg.com","script_url":"https://script.crazyegg.com/scripts/hud","core_api_auth_key":"328f1ce997216e712e088d88aeae5e2ccfa037d8f7166615fb1f0859c4be1d0c","launch_origins":["https://core.crazyegg.com"]},"survey_preview_dest":"https://api.crazyegg.com/surveys/preview","survey_launch_origins":["https://app.crazyegg.com","https://core.crazyegg.com"],"addon_preview_dest":"https://api.crazyegg.com/surveys/preview","addon_launch_origins":["https://app.crazyegg.com","https://core.crazyegg.com"],"ce_app_url":"https://app.crazyegg.com","flow_preview_url":"https://api.crazyegg.com/abtests/preview","clock_url":"https://tracking.crazyegg.com/clock","common_script_url":"https://script.crazyegg.com/pages/versioned/common-scripts/1db8eb7ffc8594e42c0729400701d1a8.js","status":"ok","counters_dest":"https://tracking.crazyegg.com/metrics","data_url":"https://script.crazyegg.com/pages/data-scripts/0043/6902/site/uw.ungerboeck.com.json","sampling_data_url":"https://script.crazyegg.com/pages/data-scripts/0043/6902/sampling/uw.ungerboeck.com.json","tracking_script_url":"https://script.crazyegg.com/pages/versioned/tracking-scripts/12ea412648d1035437916ed41b2a74c7.js","trackingpagestate_script_url":"https://script.crazyegg.com/pages/versioned/trackingpagestate-scripts/cdc746c62076757bb4e3133b83f84f01.js","thirdparty_script_url":"https://script.crazyegg.com/pages/versioned/thirdparty-scripts/4297f40ca027b6bdba6eebdbfbb17f58.js","sites":"%8&4!}%|%]!}$<$3$2$;$9$3$3$,!}&%%?&$%^!}$<!}&0%|&+%[$.%^%]&-!}$,!}%[&&&&%~%|%^${&&&$%?%|&%!}$<!}&0%|&+%[$.%^%]&-!}$,!}&+%^&+&+%|&&&%%.%^%[&&&*%]%|&%%`!}$<&,&*&-%^$,!}&*%^%[&&&*%]%|&%%`%0%^&,&,%|&%%`&+!}$<&4!}&(%?%`%^%1%?&*%`%^&,%|&%%`$|&%%?%@&!%^%]!}$<%_%?&!&+%^$,!}&(%?%`%^%1%?&*%`%^&,%|&%%`%2&*&!&+!}$<%8%;$,!}&*&-&!%^&+!}$<%8%;$,!}&$%?&+%~$|&!%^&$%^&%&,&+!}$<&%&-&!&!$,!}&+%?&$&(&!%|&%%`%0&,&*%?&,%^%`&2!}$<!}&-&%%|%_&&&*&$!}$,!}&+%?&$&(&!%|&%%`%*&-&$%.%^%[&&&*%]%|&%%`&+!}$<&%&-&!&!$,!}&+%?&$&(&!%|&%%`%0&,%?&*&,${%?&,%^!}$<&%&-&!&!$,!}&+%?&$&(&!%|&%%`%0&,%?&*&,${%?&,%^%2&%%|&1!}$<&%&-&!&!$,!}&+%?&$&(&!%|&%%`$|&%%]${%?&,%^!}$<&%&-&!&!$,!}&+%?&$&(&!%|&%%`$|&%%]${%?&,%^%2&%%|&1!}$<&%&-&!&!$,!}&+%?&$&(&!%|&%%`%2&(%]%?&,%^%]$^&,!}$<&%&-&!&!$,!}%^&%%]%0%^&+&+%|&&&%%+&%$_&!&&%[%~%^%]%2&*&!!}$<%_%?&!&+%^$,!}%@&!&&%[%~%^%]%2&*&!&+!}$<%8%;$,!}%@&!&&%[%~%^%]%.&-&!%^&+!}$<%8%;$,!}&(&*%^$`%?%[%{%^%$&$%?%`%^&+!}$<%_%?&!&+%^$,!}&*%^%[&&&*%]%$%_&*%?&$%^&+!}$<%_%?&!&+%^$,!}%{%|%]%^%$%_&*%?&$%^&+!}$<%_%?&!&+%^$,!}&+%?&$&(&!%|&%%`$`&&&$&(&!%^&,%^%]$^&,!}$<$2$8$4$1$4$;$2$4$2$1&6$,!}&*%^%[&&&*%]%|&%%`%=&*%?&,%|&&!}$<$2$9&6%;","segments":

Performs DNS lookups

Source: global traffic	DNS traffic detected: DNS query: interpro.wisc.edu
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: cdn.wisc.cloud
Source: global traffic	DNS traffic detected: DNS query: script.crazyegg.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: tracking.crazyegg.com
Source: global traffic	DNS traffic detected: DNS query: pagestates-tracking.crazyegg.com
Source: global traffic	DNS traffic detected: DNS query: assets-tracking.crazyegg.com
Source: global traffic	DNS traffic detected: DNS query: uw.ungerboeck.com
Source: global traffic	DNS traffic detected: DNS query: ajax.aspnetcdn.com
Source: global traffic	DNS traffic detected: DNS query: uw-web.ungerboeck.com
Source: global traffic	DNS traffic detected: DNS query: img04.en25.com
Source: global traffic	DNS traffic detected: DNS query: s1427524768.t.eloqua.com
Source: global traffic	DNS traffic detected: DNS query: s152460131.t.eloqua.com
Source: global traffic	DNS traffic detected: DNS query: epddata.engr.wisc.edu
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com

Posts data to webserver

Source: unknown

HTTP traffic detected: POST /g/collect?v=2&tid=G-P497LF1PMM&gtm=45je4bj0v878489483z871694474za200zb71694474&_p=1732125600441&_gaz=1&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101925629~102067555~102067808~102077855~102081485&cid=1541936858.1732125610&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=Eg&_s=1&sid=1732125611&sct=1&seg=0&dl=https%3A%2F%2Finterpro.wisc.edu%2Fcourses%2Fmaintaining-asphalt-pavements%2F%3Futm_source%3DBrochure%26utm_medium%3Dpostal%26utm_campaign%3DD487%26utm_term%3DSHB%26utm_content%3DSep&dt=Maintaining%20Asphalt%20Pavements%20%E2%80%93%20Interdisciplinary%20Professional%20Programs%20%E2%80%93%20UW%E2%80%93Madison&en=page_view&_fv=1&_ss=1&tfd=14960 HTTP/1.1Host: analytics.google.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://interpro.wisc.eduX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://interpro.wisc.edu/courses/maintaining-asphalt-pavements/?utm_source=Brochure&utm_medium=postal&utm_campaign=D487&utm_term=SHB&utm_content=SepAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

URLs found in memory or binary data

Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: http://b.c2r.ts.cdn.office.net/pr
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: http://f.c2r.ts.cdn.office.net/pr
Source: chromecache_141.2.dr	String found in binary or memory: http://gmpg.org/xfn/11
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: http://olkflt.edog.officeapps.live.com/olkflt/outlookflighting.svc/api/glides
Source: HxAccounts.exe, 0000000D.00000002.2623699748.00000261E1451000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://test-exp-s2s.msedge.net/ab/
Source: HxAccounts.exe, 0000000D.00000002.2623699748.00000261E1451000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://test-exp-s2s.msedge.net/ab/cacheFileFullNotificationPercentagehttp://test-exp-s2s.msedge.net/
Source: HxAccounts.exe, 0000000D.00000002.2623699748.00000261E1451000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://test-exp-s2s.msedge.net/ab/gecacheMemoryFullNotificationPercentagecacheMemoryFullNotification
Source: chromecache_141.2.dr	String found in binary or memory: http://twitter.com/intent/tweet?original_referer=https://interpro.wisc.edu&text=Maintaining
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: http://weather.service.msn.com/data.aspx
Source: chromecache_141.2.dr	String found in binary or memory: http://www.linkedin.com/shareArticle?mini=true&url=https://interpro.wisc.edu/RA00315&title=Maintaini
Source: chromecache_263.2.dr	String found in binary or memory: http://www.wisc.edu
Source: chromecache_262.2.dr, chromecache_263.2.dr	String found in binary or memory: http://www.wisconsin.edu
Source: chromecache_141.2.dr	String found in binary or memory: https://AdvanceYourCareer.wisc.edu
Source: chromecache_141.2.dr	String found in binary or memory: https://accessible.wisc.edu/
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://addinsinstallation.store.office.com/app/acquisitionlogging
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://addinsinstallation.store.office.com/app/download
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/authenticated
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/preinstalled
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/unauthenticated
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://addinsinstallation.store.office.com/orgid/appinstall/authenticated
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://addinslicensing.store.office.com/apps/remove
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://addinslicensing.store.office.com/commerce/query
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://addinslicensing.store.office.com/entitlement/query
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://addinslicensing.store.office.com/orgid/apps/remove
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://addinslicensing.store.office.com/orgid/entitlement/query
Source: chromecache_245.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_216.2.dr	String found in binary or memory: https://ajax.aspnetcdn.com/ajax/jQuery/jquery-3.2.1.slim.min.js
Source: chromecache_162.2.dr, chromecache_178.2.dr, chromecache_195.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://analysis.windows.net/powerbi/api
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://api.aadrm.com
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://api.aadrm.com/
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://api.addins.omex.office.net/api/addins/search
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://api.addins.omex.office.net/appinfo/query
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://api.addins.omex.office.net/appstate/query
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://api.addins.store.office.com/addinstemplate
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://api.addins.store.office.com/app/query
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://api.addins.store.officeppe.com/addinstemplate
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://api.cortana.ai
Source: chromecache_190.2.dr, chromecache_260.2.dr, chromecache_237.2.dr, chromecache_186.2.dr	String found in binary or memory: https://api.crazyegg.com/abtests/preview
Source: chromecache_186.2.dr	String found in binary or memory: https://api.crazyegg.com/surveys/preview
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://api.diagnostics.office.com
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://api.diagnosticssdf.office.com
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://api.diagnosticssdf.office.com/v2/feedback
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://api.diagnosticssdf.office.com/v2/file
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://api.microsoftstream.com
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://api.microsoftstream.com/api/
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://api.office.net
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://api.officescripts.microsoftusercontent.com/api
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://api.onedrive.com
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://api.powerbi.com/beta/myorg/imports
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://api.powerbi.com/v1.0/myorg/datasets
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://api.powerbi.com/v1.0/myorg/groups
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://api.scheduler.
Source: chromecache_141.2.dr	String found in binary or memory: https://api.w.org/
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://apis.live.net/v5.0/
Source: HxAccounts.exe, 0000000D.00000002.2623634664.00000261E142B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://apis.live.net/v5.0/P
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://apis.mobile.m365.svc.cloud.microsoft
Source: chromecache_186.2.dr	String found in binary or memory: https://app.crazyegg.com
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://app.powerbi.com
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://arc.msn.com/v4/api/selection
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://asgsmsproxyapi.azurewebsites.net/
Source: chromecache_190.2.dr, chromecache_260.2.dr, chromecache_237.2.dr, chromecache_186.2.dr	String found in binary or memory: https://assets-tracking.crazyegg.com
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://augloop.office.com
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://augloop.office.com/v2
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://augloop.office.com;https://augloop-int.officeppe.com;https://augloop-dogfood.officeppe.com;h
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://autodiscover-s.outlook.com/
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
Source: HxAccounts.exe, 0000000D.00000002.2623290048.00000261E1400000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://az804205.vo.msecnd.net/
Source: HxAccounts.exe, 0000000D.00000002.2623290048.00000261E1400000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://az804205.vo.msecnd.net/f
Source: HxAccounts.exe, 0000000D.00000002.2623290048.00000261E1400000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://az815563.vo.msecnd.net/
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://canary.designerapp.
Source: chromecache_185.2.dr, chromecache_196.2.dr, chromecache_139.2.dr, chromecache_182.2.dr, chromecache_258.2.dr, chromecache_236.2.dr, chromecache_221.2.dr, chromecache_238.2.dr, chromecache_245.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designer-mobile
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/fonts
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/mobile-assets
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/mobile-dynamic-strings
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/mobile-home-screen
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/mobile-toolbar
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://cdn.entity.
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://cdn.hubblecontent.osi.office.net/
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://cdn.int.designerapp.osi.office.net/fonts
Source: chromecache_141.2.dr	String found in binary or memory: https://cdn.wisc.cloud/cookie-consent/1.1.0/uwcookieconsent.min.js?ver=1.1.0
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://client-office365-tas.msedge.net/ab
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://clients.config.office.net
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://clients.config.office.net/
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://clients.config.office.net/c2r/v1.0/DeltaAdvisory
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://clients.config.office.net/c2r/v1.0/InteractiveInstallation
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/android/policies
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/ios
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/mac
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/tenantassociationkey
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://cloudfiles.onenote.com/upload.aspx
Source: HxAccounts.exe, 0000000D.00000002.2623699748.00000261E1451000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://config.edge.skype.com/config/v1/
Source: HxAccounts.exe, 0000000D.00000002.2623699748.00000261E1451000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://config.edge.skype.com/config/v1/780dddc8-18a1-5781-895a-a690464fa89ccacheMemoryFullNotificat
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://config.edge.skype.com/config/v1/Office
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://config.edge.skype.com/config/v2/Office
Source: HxAccounts.exe, 0000000D.00000002.2623699748.00000261E1451000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://config.edge.skype.net/config/v1/
Source: chromecache_179.2.dr, chromecache_251.2.dr	String found in binary or memory: https://connect.facebook.net/
Source: chromecache_262.2.dr, chromecache_263.2.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: chromecache_179.2.dr, chromecache_251.2.dr	String found in binary or memory: https://connect.facebook.net/log/fbevents_telemetry/
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://consent.config.office.com/consentcheckin/v1.0/consents
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://consent.config.office.com/consentweb/v1.0/consents
Source: chromecache_186.2.dr	String found in binary or memory: https://core.crazyegg.com
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://cortana.ai
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://cortana.ai/api
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://cr.office.com
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://d.docs.live.net
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://dataservice.o365filtering.com
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://dataservice.o365filtering.com/
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://designerapp.azurewebsites.net
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://designerappservice.officeapps.live.com
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://dev.cortana.ai
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://dev0-api.acompli.net/autodetect
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://devnull.onenote.com
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://directory.services.
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://ecs.office.com
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://ecs.office.com/config/v1/Designer
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://ecs.office.com/config/v2/Office
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://edge.skype.com/registrar/prod
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://edge.skype.com/rps
Source: chromecache_141.2.dr	String found in binary or memory: https://engr.wisc.edu
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://enrichment.osi.office.net/
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Refresh/v1
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Resolve/v1
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Search/v1
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/StockHistory/v1
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/ipcheck/v1
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/Metadata/
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/Metadata/metadata.json
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/view/desktop/main.cshtml
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/view/web/main.cshtml
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://entitlement.diagnostics.office.com
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://entitlement.diagnosticssdf.office.com
Source: chromecache_262.2.dr, chromecache_263.2.dr	String found in binary or memory: https://epddata.engr.wisc.edu/USI/b_InterPro.png
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://excel.uservoice.com/forums/304936-excel-for-mobile-devices-tablets-phones-android
Source: chromecache_174.2.dr, chromecache_244.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_244.2.dr	String found in binary or memory: https://fontawesome.com/license
Source: chromecache_174.2.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_261.2.dr, chromecache_198.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_148.2.dr	String found in binary or memory: https://github.com/RedHatOfficial/RedHatFont)
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://globaldisco.crm.dynamics.com
Source: chromecache_141.2.dr	String found in binary or memory: https://goo.gl/maps/gw2w8zUwF6nYEzYc9
Source: chromecache_245.2.dr	String found in binary or memory: https://google.com
Source: chromecache_245.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://graph.ppe.windows.net
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://graph.ppe.windows.net/
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://graph.windows.net
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://graph.windows.net/
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/api/pivots/
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/api/telemetry
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/browse?cp=remix3d
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/browse?secureurl=1
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=icons&premium=1
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=stockimages&premium=1
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=stockvideos&premium=1
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsofticon?
Source: chromecache_190.2.dr, chromecache_260.2.dr, chromecache_237.2.dr, chromecache_186.2.dr	String found in binary or memory: https://hud.crazyegg.com
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://ic3.teams.office.com
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://incidents.diagnostics.office.com
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://incidents.diagnosticssdf.office.com
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://inclient.store.office.com/gyro/client
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://inclient.store.office.com/gyro/clientstore
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=ClipArt
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Facebook
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://insertmedia.bing.office.net/odc/insertmedia
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/?p=12097
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/RA00315
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/RA00315?utm_source=share
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/RA00383
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/about/
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/about/contact-us/
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/about/course-and-lodging-locations/
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/about/diversity-equity-and-inclusion/
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/about/earn-credit-hours/
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/about/leadership/
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/about/news/
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/about/podcasts/
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/about/privacy-policy/
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/about/professional-development-payment-options/
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/about/uw-madison-the-college-of-engineering/
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/about/vision-mission/
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/certificates/
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/comments/feed/
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/courses
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/courses/?topics=Streets%2C
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/courses/Improving-Public-Works-Construction-Inspection-Skills
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/courses/docks-and-marinas/
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/courses/emergency-railroad-bridge-inspections/
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/courses/maintaining-asphalt-pavements/
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/courses/managing-snow-and-ice-control-operations/
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/courses/pavement-system-design/
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/courses/solving-neighborhood-traffic-problems/
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/courses?topics=Streets%2C
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/courses?topics=Transportation
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/custom-courses-professional-development/
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/feed/
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/interpro-advisory-committee/
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/online-degrees/
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/sign-up-today/?subcategory=Streets
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/wp-content/plugins/megamenu-pro/assets/public.js?ver=2.4
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/wp-content/plugins/megamenu-pro/icons/fontawesome6/css/all.min.css?ver=2.4
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/wp-content/plugins/megamenu-pro/icons/genericons/genericons/genericons.css
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/wp-content/plugins/megamenu/js/maxmegamenu.js?ver=3.4
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/wp-content/plugins/uw-csis-api/frontend/dist/scripts/clipboard.min.js?ver=
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/wp-content/plugins/uw-csis-api/frontend/dist/scripts/scripts.expanded.js?v
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/wp-content/plugins/uw-csis-api/frontend/dist/scripts/selectize.min.js?ver=
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/wp-content/plugins/uw-csis-api/frontend/dist/styles/main.css?ver=2.18.0
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/wp-content/themes/uw-theme-child-epd/dist/scripts/main.min.js?ver=5c0a3424
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/wp-content/themes/uw-theme-child-epd/dist/styles/main.min.css?ver=9a38d19f
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/wp-content/themes/uw-theme/dist/css/ie.css?ver=1.32.0
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/wp-content/themes/uw-theme/dist/fonts/uw-rh/redhat-display-latin.v14.woff2
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/wp-content/themes/uw-theme/dist/fonts/uw-rh/redhat-text-latin.v13.woff2
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/wp-content/themes/uw-theme/dist/images/favicons/apple-touch-icon.png
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/wp-content/themes/uw-theme/dist/images/favicons/browserconfig.xml
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/wp-content/themes/uw-theme/dist/images/favicons/favicon-16x16.png
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/wp-content/themes/uw-theme/dist/images/favicons/favicon-32x32.png
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/wp-content/themes/uw-theme/dist/images/favicons/safari-pinned-tab.svg
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/wp-content/themes/uw-theme/dist/images/favicons/site.webmanifest
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/wp-content/themes/uw-theme/dist/js/jquery-migrate/jquery-migrate.min.js?ve
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/wp-content/themes/uw-theme/dist/js/jquery/jquery.min.js?ver=3.6.0
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/wp-content/themes/uw-theme/dist/js/polyfills/classList.js?ver=1.0.0
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/wp-content/themes/uw-theme/dist/main.min.css?ver=1.32.0
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/wp-content/themes/uw-theme/dist/main.min.js?ver=1.32.0
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/wp-includes/css/dashicons.min.css?ver=6.6.2
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/wp-includes/js/hoverIntent.min.js?ver=1.10.2
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/wp-json/
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/wp-json/oembed/1.0/embed?url=https%3A%2F%2Finterpro.wisc.edu%2Fcourses%2Fm
Source: chromecache_141.2.dr	String found in binary or memory: https://interpro.wisc.edu/xmlrpc.php?rsd
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://invites.office.com/
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://learningtools.onenote.com/learningtoolsapi/v2.0/GetFreeformSpeech
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://learningtools.onenote.com/learningtoolsapi/v2.0/Getvoices
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://lifecycle.office.com
Source: chromecache_141.2.dr	String found in binary or memory: https://linkedin.com/company/uwmadinterpro
Source: HxAccounts.exe, 0000000D.00000002.2638629568.00000261E8884000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com
Source: HxAccounts.exe, 0000000D.00000002.2638629568.00000261E8884000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://login.microsoftonline.com
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://login.microsoftonline.com/
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://login.microsoftonline.com/organizations
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://login.windows-ppe.net/common/oauth2/authorize
Source: HxAccounts.exe, 0000000D.00000002.2638629568.00000261E8884000.00000004.00000020.00020000.00000000.sdmp, 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://login.windows.local
Source: HxAccounts.exe, 0000000D.00000002.2638629568.00000261E8884000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.windows.local/
Source: HxAccounts.exe, 0000000D.00000002.2638629568.00000261E8884000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.windows.net
Source: HxAccounts.exe, 0000000D.00000002.2638629568.00000261E8884000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.windows.net/
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://login.windows.net/common/oauth2/authorize
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://loki.delve.office.com/api/v1/configuration/officewin32/
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://lookup.onenote.com/lookup/geolocation/v1
Source: chromecache_141.2.dr	String found in binary or memory: https://ltap.engr.wisc.edu
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://make.powerautomate.com
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://management.azure.com
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://management.azure.com/
Source: chromecache_141.2.dr	String found in binary or memory: https://map.wisc.edu/s/mlacbaz7
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://messagebroker.mobile.m365.svc.cloud.microsoft
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://messaging.action.office.com/
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://messaging.action.office.com/setcampaignaction
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://messaging.action.office.com/setuseraction16
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://messaging.engagement.office.com/
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://messaging.engagement.office.com/campaignmetadataaggregator
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://messaging.lifecycle.office.com/
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://messaging.lifecycle.office.com/getcustommessage16
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://messaging.office.com/
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://metadata.templates.cdn.office.net/client/log
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://mss.office.com
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://my.microsoftpersonalcontent.com
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://ncus.contentsync.
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://ncus.pagecontentsync.
Source: HxAccounts.exe, 0000000D.00000002.2623450509.00000261E1413000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://nexus.officeapps.live.comF
Source: HxAccounts.exe, 0000000D.00000002.2623450509.00000261E1413000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://nexusrules.officeapps.live.com
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://notification.m365.svc.cloud.microsoft/
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://notification.m365.svc.cloud.microsoft/PushNotifications.Register
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://o365auditrealtimeingestion.manage.office.com/api/userauditrecord
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://ocos-office365-s2s.msedge.net/ab
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://odc.officeapps.live.com/odc/stat/images/OneDriveUpsell.png
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://odc.officeapps.live.com/odc/xml?resource=OneDriveSignUpUpsell
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://odc.officeapps.live.com/odc/xml?resource=OneDriveSyncClientUpsell
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://ods-diagnostics-ppe.trafficmanager.net
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://ofcrecsvcapi-int.azurewebsites.net/
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://officeapps.live.com
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://officeci.azurewebsites.net/api/
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://officepyservice.office.net/
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://officepyservice.office.net/service.functionality
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://officesetup.getmicrosoftkey.com
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://ogma.osi.office.net/TradukoApi/api/v1.0/
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officeentities
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officeentitiesupdated
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officesharedentities
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officesharedentitiesupdated
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://onedrive.live.com
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://onedrive.live.com/embed?
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://otelrules.azureedge.net
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://otelrules.svc.static.microsoft
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://outlook.office.com
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://outlook.office.com/
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://outlook.office.com/autosuggest/api/v1/init?cvid=
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://outlook.office365.com
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://outlook.office365.com/
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://outlook.office365.com/api/v1.0/me/Activities
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://outlook.office365.com/autodiscover/autodiscover.json
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://outlook.office365.com/connectors
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://ovisualuiapp.azurewebsites.net/pbiagave/
Source: chromecache_245.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_185.2.dr, chromecache_196.2.dr, chromecache_139.2.dr, chromecache_182.2.dr, chromecache_258.2.dr, chromecache_236.2.dr, chromecache_221.2.dr, chromecache_238.2.dr, chromecache_245.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://pages.store.office.com/appshome.aspx?productgroup=Outlook
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://pages.store.office.com/review/query
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://pages.store.office.com/webapplandingpage.aspx
Source: chromecache_190.2.dr, chromecache_260.2.dr, chromecache_237.2.dr, chromecache_186.2.dr	String found in binary or memory: https://pagestates-tracking.crazyegg.com
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://partnerservices.getmicrosoftkey.com/PartnerProvisioning.svc/v1/subscriptions
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://portal.office.com/account/?ref=ClientMeControl
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://posarprodcssservice.accesscontrol.windows.net/v2/OAuth2-13
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://powerlift-frontdesk.acompli.net
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://powerlift.acompli.net
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://prod-global-autodetect.acompli.net/autodetect
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://prod.mds.office.com/mds/api/v1.0/clientmodeldirectory
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://pushchannel.1drv.ms
Source: chromecache_141.2.dr	String found in binary or memory: https://pyle.wisc.edu
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
Source: chromecache_190.2.dr, chromecache_260.2.dr, chromecache_237.2.dr, chromecache_186.2.dr	String found in binary or memory: https://recording.crazyegg.com
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://res.cdn.office.net
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://res.cdn.office.net/mro1cdnstorage/fonts/prod/4.40
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://res.cdn.office.net/polymer/models
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://res.getmicrosoftkey.com/api/redemptionevents
Source: chromecache_141.2.dr	String found in binary or memory: https://res.windsurfercrs.com/ibe/details.aspx?propertyid=16539&nights=1&checkin=12/1/2024&group=122
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://rpsticket.partnerservices.getmicrosoftkey.com
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://safelinks.protection.outlook.com/api/GetPolicy
Source: chromecache_190.2.dr, chromecache_260.2.dr, chromecache_237.2.dr, chromecache_186.2.dr	String found in binary or memory: https://sample-api-v2.crazyegg.com
Source: chromecache_190.2.dr, chromecache_260.2.dr, chromecache_237.2.dr, chromecache_186.2.dr	String found in binary or memory: https://sampling-ratio.crazyegg.com/ratio/v2
Source: chromecache_141.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_190.2.dr, chromecache_260.2.dr, chromecache_237.2.dr, chromecache_186.2.dr	String found in binary or memory: https://script.crazyegg.com/pages/data-scripts/0043/6902/sampling/SITENAME.json
Source: chromecache_190.2.dr, chromecache_237.2.dr	String found in binary or memory: https://script.crazyegg.com/pages/data-scripts/0043/6902/sampling/interpro.wisc.edu.json
Source: chromecache_260.2.dr, chromecache_186.2.dr	String found in binary or memory: https://script.crazyegg.com/pages/data-scripts/0043/6902/sampling/uw.ungerboeck.com.json
Source: chromecache_190.2.dr, chromecache_260.2.dr, chromecache_237.2.dr, chromecache_186.2.dr	String found in binary or memory: https://script.crazyegg.com/pages/data-scripts/0043/6902/site/SITENAME.json
Source: chromecache_190.2.dr, chromecache_237.2.dr	String found in binary or memory: https://script.crazyegg.com/pages/data-scripts/0043/6902/site/interpro.wisc.edu.json
Source: chromecache_260.2.dr, chromecache_186.2.dr	String found in binary or memory: https://script.crazyegg.com/pages/data-scripts/0043/6902/site/uw.ungerboeck.com.json
Source: chromecache_190.2.dr, chromecache_260.2.dr, chromecache_237.2.dr, chromecache_186.2.dr	String found in binary or memory: https://script.crazyegg.com/pages/data-scripts/0043/6902/status.json
Source: chromecache_185.2.dr, chromecache_196.2.dr, chromecache_182.2.dr	String found in binary or memory: https://script.crazyegg.com/pages/scripts/
Source: chromecache_190.2.dr, chromecache_260.2.dr, chromecache_237.2.dr, chromecache_186.2.dr	String found in binary or memory: https://script.crazyegg.com/pages/versioned/common-scripts/1db8eb7ffc8594e42c0729400701d1a8.js
Source: chromecache_190.2.dr, chromecache_260.2.dr, chromecache_237.2.dr, chromecache_186.2.dr	String found in binary or memory: https://script.crazyegg.com/pages/versioned/thirdparty-scripts/4297f40ca027b6bdba6eebdbfbb17f58.js
Source: chromecache_190.2.dr, chromecache_260.2.dr, chromecache_237.2.dr, chromecache_186.2.dr	String found in binary or memory: https://script.crazyegg.com/pages/versioned/tracking-scripts/12ea412648d1035437916ed41b2a74c7.js
Source: chromecache_190.2.dr, chromecache_260.2.dr, chromecache_237.2.dr, chromecache_186.2.dr	String found in binary or memory: https://script.crazyegg.com/pages/versioned/trackingpagestate-scripts/cdc746c62076757bb4e3133b83f84f
Source: chromecache_190.2.dr, chromecache_260.2.dr, chromecache_237.2.dr, chromecache_186.2.dr	String found in binary or memory: https://script.crazyegg.com/pages/versioned/transformations-scripts/ed79f7e5f64c1739a59fd9fbd940d4e2
Source: chromecache_190.2.dr, chromecache_260.2.dr, chromecache_237.2.dr, chromecache_186.2.dr	String found in binary or memory: https://script.crazyegg.com/scripts/hud
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://service.officepy.microsoftusercontent.com/
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://service.powerapps.com
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://settings.outlook.com
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://shell.suite.office.com:1443
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://skyapi.live.net/Activity/
Source: chromecache_262.2.dr, chromecache_263.2.dr	String found in binary or memory: https://software.ungerboeck.com/bridge/
Source: chromecache_262.2.dr, chromecache_263.2.dr	String found in binary or memory: https://software.ungerboeck.com/bridge/default.aspx?ver=citrix
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://sr.outlook.office.net/ws/speech/recognize/assistant/work
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://staging.cortana.ai
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://statics.teams.cdn.office.net/evergreen-assets/illustrations/win32/m365-device-desktop-dark-1
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://statics.teams.cdn.office.net/evergreen-assets/illustrations/win32/m365-device-desktop-dark-2
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://statics.teams.cdn.office.net/evergreen-assets/illustrations/win32/m365-device-desktop-hc-100
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://statics.teams.cdn.office.net/evergreen-assets/illustrations/win32/m365-device-desktop-hc-150
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://statics.teams.cdn.office.net/evergreen-assets/illustrations/win32/m365-device-desktop-hc-200
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://statics.teams.cdn.office.net/evergreen-assets/illustrations/win32/m365-device-desktop-light-
Source: chromecache_139.2.dr, chromecache_258.2.dr, chromecache_236.2.dr, chromecache_221.2.dr, chromecache_238.2.dr, chromecache_245.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_195.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://storage.live.com/clientlogs/uploadlocation
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://store.office.cn/addinstemplate
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://store.office.de/addinstemplate
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://substrate.office.com
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://substrate.office.com/Notes-Internal.ReadWrite
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://substrate.office.com/search/api/v1/SearchHistory
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://substrate.office.com/search/api/v2/init
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
Source: chromecache_162.2.dr, chromecache_178.2.dr, chromecache_195.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://tasks.office.com
Source: chromecache_185.2.dr, chromecache_196.2.dr, chromecache_139.2.dr, chromecache_182.2.dr, chromecache_258.2.dr, chromecache_236.2.dr, chromecache_221.2.dr, chromecache_238.2.dr, chromecache_245.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://templatesmetadata.office.net/
Source: chromecache_141.2.dr	String found in binary or memory: https://themadisonconcourse.ihotelier.com/book/dates-of-stay?groupID=4342861
Source: chromecache_190.2.dr, chromecache_260.2.dr, chromecache_237.2.dr, chromecache_186.2.dr	String found in binary or memory: https://tracking.crazyegg.com/clock
Source: chromecache_190.2.dr, chromecache_260.2.dr, chromecache_237.2.dr, chromecache_186.2.dr	String found in binary or memory: https://tracking.crazyegg.com/metrics
Source: chromecache_190.2.dr, chromecache_260.2.dr, chromecache_237.2.dr, chromecache_186.2.dr	String found in binary or memory: https://tracking.crazyegg.com/v11
Source: chromecache_141.2.dr	String found in binary or memory: https://twitter.com/UW_InterPro
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://uci.cdn.office.net/mirrored/smartlookup/current/
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://uci.officeapps.live.com/OfficeInsights/web/views/insights.desktop.html
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://uci.officeapps.live.com/OfficeInsights/web/views/insights.immersive.html
Source: chromecache_141.2.dr	String found in binary or memory: https://urldefense.com/v3/__http://www.andrewbraham.com/__;
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://useraudit.o365auditrealtimeingestion.manage.office.com
Source: chromecache_216.2.dr	String found in binary or memory: https://uw-web.ungerboeck.com/regloadfiles/crest.png
Source: chromecache_216.2.dr	String found in binary or memory: https://uw-web.ungerboeck.com/regloadfiles/regload.css
Source: chromecache_216.2.dr	String found in binary or memory: https://uw-web.ungerboeck.com/regloadfiles/wordmark.gif
Source: chromecache_262.2.dr, chromecache_263.2.dr	String found in binary or memory: https://uw.ungerboeck.com/prod/
Source: chromecache_262.2.dr, chromecache_263.2.dr	String found in binary or memory: https://uw.ungerboeck.com/prod/USIImageServer.ashx?ID=26&Class=I&FileExtension=png
Source: chromecache_262.2.dr, chromecache_263.2.dr	String found in binary or memory: https://uw.ungerboeck.com/prod/USIImageServer.ashx?ID=27&Class=I&FileExtension=png
Source: chromecache_262.2.dr, chromecache_263.2.dr	String found in binary or memory: https://uw.ungerboeck.com/prod/USIImageServer.ashx?ID=62&Class=J&FileExtension=jpg)
Source: chromecache_262.2.dr, chromecache_263.2.dr	String found in binary or memory: https://uw.ungerboeck.com/prod/USIImageServer.ashx?ID=63&Class=J&FileExtension=jpg);
Source: chromecache_141.2.dr	String found in binary or memory: https://uw.ungerboeck.com/prod/emc00/regload.html?aat=5a576b5836666f4d4d734735516c6546344d767341542b
Source: chromecache_141.2.dr	String found in binary or memory: https://uw.ungerboeck.com/prod/emc00/regload.html?aat=647265476633534c677049536e336e6c304146384b6171
Source: chromecache_141.2.dr	String found in binary or memory: https://uw.ungerboeck.com/prod/emc00/regload.html?aat=6f796c6b703672664e48444a38315654323831487a4b61
Source: chromecache_141.2.dr	String found in binary or memory: https://uwmadison.box.com/shared/static/37bddz02re17vd6rkz5q0spqptx50a7o.pdf
Source: chromecache_141.2.dr	String found in binary or memory: https://uwtheme.wordpress.wisc.edu/
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://visio.uservoice.com/forums/368202-visio-on-devices
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://web.microsoftstream.com/video/
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://webshell.suite.office.com
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://word-edit.officeapps.live.com/we/rrdiscovery.ashx
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://wus2.contentsync.
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://wus2.pagecontentsync.
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://www.bingapis.com/api/v7/urlpreview/search?appid=E93048236FE27D972F67C5AF722136866DF65FA2
Source: chromecache_141.2.dr	String found in binary or memory: https://www.boldgrid.com/w3-total-cache/
Source: chromecache_141.2.dr	String found in binary or memory: https://www.concoursehotel.com
Source: chromecache_185.2.dr, chromecache_196.2.dr, chromecache_182.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_162.2.dr, chromecache_178.2.dr, chromecache_195.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_162.2.dr, chromecache_178.2.dr, chromecache_195.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_162.2.dr, chromecache_178.2.dr, chromecache_195.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_245.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_162.2.dr, chromecache_178.2.dr, chromecache_195.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_141.2.dr	String found in binary or memory: https://www.google.com/maps/search/?api=1&query=Tuscany
Source: chromecache_245.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_245.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_139.2.dr, chromecache_258.2.dr, chromecache_236.2.dr, chromecache_221.2.dr, chromecache_238.2.dr, chromecache_245.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_162.2.dr, chromecache_178.2.dr, chromecache_195.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_262.2.dr, chromecache_141.2.dr, chromecache_263.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_141.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-P665ZJ
Source: chromecache_139.2.dr, chromecache_258.2.dr, chromecache_236.2.dr, chromecache_221.2.dr, chromecache_238.2.dr, chromecache_245.2.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_139.2.dr, chromecache_258.2.dr, chromecache_236.2.dr, chromecache_221.2.dr, chromecache_238.2.dr, chromecache_245.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://www.odwebp.svc.ms
Source: chromecache_141.2.dr	String found in binary or memory: https://www.tuscanylv.com
Source: chromecache_141.2.dr	String found in binary or memory: https://www.uwebc.wisc.edu
Source: chromecache_262.2.dr, chromecache_263.2.dr	String found in binary or memory: https://www.uwex.edu/conferencing/images/crest.png--
Source: chromecache_262.2.dr, chromecache_263.2.dr	String found in binary or memory: https://www.uwex.edu/conferencing/images/wordmark.gif--
Source: chromecache_141.2.dr	String found in binary or memory: https://www.wisc.edu
Source: chromecache_141.2.dr	String found in binary or memory: https://www.wisc.edu/privacy-notice/
Source: chromecache_141.2.dr	String found in binary or memory: https://www.wisconsin.edu
Source: chromecache_216.2.dr	String found in binary or memory: https://www.wisconsin.edu/
Source: 03D9F290-9C92-4273-A63D-A783A1658DF7.8.dr	String found in binary or memory: https://www.yammer.com
Source: chromecache_141.2.dr	String found in binary or memory: https://www.youtube.com/channel/UCL7P58qiF8e5DIErHmPJevw
Source: chromecache_185.2.dr, chromecache_196.2.dr, chromecache_139.2.dr, chromecache_182.2.dr, chromecache_258.2.dr, chromecache_236.2.dr, chromecache_221.2.dr, chromecache_238.2.dr, chromecache_245.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: HxAccounts.exe, 0000000D.00000002.2638629568.00000261E8884000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://xsts.auth.xboxlive.com
Source: HxAccounts.exe, 0000000D.00000002.2638629568.00000261E8884000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://xsts.auth.xboxlive.com/
Source: HxAccounts.exe, 0000000D.00000002.2638629568.00000261E8884000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://xsts.auth.xboxlive.com5

Uses HTTPS

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 50029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50019 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 50030 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.4:49875 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49940 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.4:50019 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.4:50019 version: TLS 1.2

System Summary

Classification label

Source: classification engine

Classification label: mal48.phis.win@22/214@74/21

Creates files inside the user directory

Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe

File created: C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\AppData

Jump to behavior

Reads software policies

Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Spawns processes

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1952 --field-trial-handle=2040,i,5733570616965742695,10474255410926708517,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://interpro.wisc.edu/courses/maintaining-asphalt-pavements/?utm_source=Brochure&utm_medium=postal&utm_campaign=D487&utm_term=SHB&utm_content=Sep"
Source: unknown	Process created: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe" -ServerName:microsoft.windowslive.mail.AppXfbjsbkxvprcgqg6q4c9jfr0pn3kv9x5s.mca
Source: unknown	Process created: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe" -ServerName:microsoft.windowslive.manageaccounts.AppXdbf3yp5apt3t7q877db3gnz5zqpf71zj.mca
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1952 --field-trial-handle=2040,i,5733570616965742695,10474255410926708517,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Tries to load missing DLLs

Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: apphelp.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: microsoft.applications.telemetry.windows.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msoimm.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mso40uiimm.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mso30imm.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mso20imm.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: office.ui.xaml.core.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: office.ui.xaml.word.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vccorlib140_app.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vcruntime140_app.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msvcp140_app.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vccorlib140_app.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msvcp140_app.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vcruntime140_app.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mso20imm.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vcruntime140_app.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msvcp140_app.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vccorlib140_app.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vcruntime140_app.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msvcp140_app.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mso98imm.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mso50imm.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mso20imm.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vcruntime140_app.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msvcp140_app.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vcruntime140_app.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msvcp140_app.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mso98imm.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: kernel.appcore.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: hxoutlook.model.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.storage.applicationdata.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: twinapi.appcore.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: wintypes.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: hxcomm.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: cryptsp.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.applicationmodel.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.globalization.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: bcp47langs.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: bcp47mrm.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: onecorecommonproxystub.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: profapi.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.staterepositorycore.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.networking.connectivity.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.networking.hostname.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.energy.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: rmclient.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.storage.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: wldp.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: propsys.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: rometadata.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.system.diagnostics.telemetry.platformtelemetryclient.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: hxoutlook.view.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: office.ui.xaml.hxshared.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: hxoutlook.viewmodel.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: clipc.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: hxoutlook.resources.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: logoncli.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.ui.xaml.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: coremessaging.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: iertutil.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: dcomp.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.ui.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windowmanagementapi.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: textinputframework.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: coreuicomponents.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: ntmarta.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: inputhost.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: onecoreuapcommonproxystub.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: uxtheme.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: urlmon.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: srvcli.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: netutils.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: dxgi.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mrmcorer.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.staterepositoryclient.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: resourcepolicyclient.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: d3d11.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: d3d10warp.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: dwrite.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: dxcore.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: d2d1.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.shell.servicehostbuilder.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: execmodelproxy.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: textshaping.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: uiamanager.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.ui.core.textinput.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.ui.immersive.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: dataexchange.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: cryptbase.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: userenv.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: profext.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: office.ui.xaml.hx.mail.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: threadpoolwinrt.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: twinapi.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.graphics.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: office.ui.xaml.hxcalendar.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.system.remotedesktop.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: winsta.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.ui.xaml.controls.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: directmanipulation.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.system.profile.systemid.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.system.profile.retailinfo.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msxml6.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: wininet.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: sspicli.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: ondemandconnroutehelper.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: winhttp.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mswsock.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: winrttracing.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: iphlpapi.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: winnsi.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: dnsapi.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: rasadhlp.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: ploptin.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: fwpuclnt.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: schannel.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.staterepositoryps.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windowscodecs.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: photometadatahandler.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: userdataaccountapis.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: userdataplatformhelperutil.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.accountscontrol.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: xmllite.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: accountsrt.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: aphostclient.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mskeyprotect.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: ntasn1.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: ncrypt.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: ncryptsslp.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msasn1.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: dpapi.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: rsaenh.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: gpapi.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: webservices.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: apphelp.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: hxoutlook.model.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: microsoft.applications.telemetry.windows.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: mso20imm.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vccorlib140_app.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vcruntime140_app.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: msvcp140_app.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: mso30imm.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: mso20imm.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vccorlib140_app.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vcruntime140_app.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: msvcp140_app.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vccorlib140_app.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: msvcp140_app.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vcruntime140_app.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: msvcp140_app.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vcruntime140_app.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: kernel.appcore.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.ui.xaml.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: coremessaging.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: bcp47langs.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: iertutil.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: dcomp.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: twinapi.appcore.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: wintypes.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.staterepositorycore.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.ui.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windowmanagementapi.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: textinputframework.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: inputhost.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: coreuicomponents.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: ntmarta.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: propsys.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: onecoreuapcommonproxystub.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: uxtheme.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: urlmon.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: srvcli.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: netutils.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: office.ui.xaml.hxaccounts.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: dxgi.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.storage.applicationdata.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: resourcepolicyclient.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: d3d11.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: d3d10warp.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: hxcomm.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: cryptsp.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.applicationmodel.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: dxcore.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: d2d1.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: dwrite.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.globalization.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: bcp47mrm.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: textshaping.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: onecorecommonproxystub.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: profapi.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.networking.connectivity.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.networking.hostname.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.energy.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: rmclient.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.storage.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: wldp.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: rometadata.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.system.diagnostics.telemetry.platformtelemetryclient.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: mrmcorer.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.staterepositoryclient.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.shell.servicehostbuilder.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: execmodelproxy.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: uiamanager.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.ui.core.textinput.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.ui.immersive.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: dataexchange.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: cryptbase.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.accountscontrol.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: xmllite.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.security.authentication.web.core.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vaultcli.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.ui.xaml.controls.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: directmanipulation.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: userenv.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: profext.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: winrttracing.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: hxoutlook.resources.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: msftedit.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: globinputhost.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windowscodecs.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.graphics.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: wuceffects.dll			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: threadpoolwinrt.dll			Jump to behavior

Uses an in-process (OLE) Automation server

Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A6FF50C0-56C0-71CA-5732-BED303A59628}\InProcServer32

Jump to behavior

Uses Rich Edit Controls

Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe

File opened: C:\Windows\SYSTEM32\msftedit.dll

Jump to behavior

Found graphical window changes (likely an installer)

Source: Window Recorder

Window detected: More than 3 window changes detected

Checks if Microsoft Office is installed

Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe

Key opened: \REGISTRY\A\{60182654-f18c-b624-e733-bbb502c8717b}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office Test\Special\PerfImm

Jump to behavior

Hooking and other Techniques for Hiding and Protection

Disables application error messsages (SetErrorMode)

Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior

Malware Analysis System Evasion

May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)

Source: settings.dat.8.dr

Binary or memory string: VMware, Inc. VMware20,1NE

Language, Device and Operating System Detection

Queries the volume information (name, serial number etc) of a device

Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsym.ttf VolumeInformation			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsym.ttf VolumeInformation			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\en-gb\locimages\offsym.ttf VolumeInformation			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\en-gb\locimages\offsym.ttf VolumeInformation			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsymsb.ttf VolumeInformation			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsymsb.ttf VolumeInformation			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\en-gb\locimages\offsymsb.ttf VolumeInformation			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\en-gb\locimages\offsymsb.ttf VolumeInformation			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsymsl.ttf VolumeInformation			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsymsl.ttf VolumeInformation			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\en-gb\locimages\offsymsl.ttf VolumeInformation			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsymsl.ttf VolumeInformation			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsymsl.ttf VolumeInformation			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Windows\Fonts\segoeuil.ttf VolumeInformation			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsym.ttf VolumeInformation			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsym.ttf VolumeInformation			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Windows\Fonts\segoeuisl.ttf VolumeInformation			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation			Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Queries volume information: C:\Windows\Fonts\segmdl2.ttf VolumeInformation			Jump to behavior