Edit tour

Windows Analysis Report
https://mail-donotreply.com/click/65b6d0e2-d9dd-417c-a2b8-70690576459e

Overview

General Information

Sample URL:	https://mail-donotreply.com/click/65b6d0e2-d9dd-417c-a2b8-70690576459e
Analysis ID:	1647238
Infos:

Detection

Score:	48
Range:	0 - 100
Confidence:	100%

Signatures

AI detected landing page (webpage, office document or email)

AI detected suspicious Javascript

Creates files inside the system directory

Deletes files inside the Windows folder

Detected suspicious crossdomain redirect

HTML page contains hidden javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5460 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6012 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1920,i,1507782837297758160,9221004649092087704,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=1928 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 2440 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-pre-read-main-dll --field-trial-handle=1920,i,1507782837297758160,9221004649092087704,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6580 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mail-donotreply.com/click/65b6d0e2-d9dd-417c-a2b8-70690576459e" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Joe Sandbox Signatures

• Phishing
• Compliance
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

Phishing

AI detected landing page (webpage, office document or email)

Source: https://mail-donotreply.com/click/65b6d0e2-d9dd-417c-a2b8-70690576459e

Joe Sandbox AI: Page contains button: 'CLICK TO START' Source: '0.0.pages.csv'

AI detected suspicious Javascript

Source: 0.2..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://mail-donotreply.com/js/click.js... This script exhibits several high-risk behaviors, including data exfiltration, dynamic code execution, and the use of obfuscated URLs. The script tracks user interactions (mouse/touch movements and window visibility changes) and sends data to an unspecified endpoint, potentially for malicious purposes. Additionally, the script dynamically constructs a URL and launches a session, which could be used for phishing or other malicious activities. Overall, the combination of these behaviors suggests a high-risk script that requires further investigation.
Source: 0.1..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://mail-donotreply.com/click/65b6d0e2-d9dd-41... This script exhibits high-risk behaviors, including dynamic code execution and potential data exfiltration. The use of `window.open()` to launch a new window with a URL parameter suggests a phishing attempt, and the `setTimeout()` function to reload the page after 2 seconds further indicates malicious intent. The presence of a GUID in the variable name also raises suspicion. Overall, this script demonstrates a high risk of being a malicious phishing attempt.

Source: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=true

HTTP Parser: Base64 decoded: <style> @font-face { font-family: "Open Sans Full"; font-style: normal; font-weight: 400; src: url("./html5/lib/stylesheets/mobile-fonts/open-sans-regular.woff") format("woff"); } * { margin: 0; padding: 0; }...

Source: https://mail-donotreply.com/click/65b6d0e2-d9dd-417c-a2b8-70690576459e	HTTP Parser: No favicon
Source: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=true	HTTP Parser: No favicon
Source: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=true	HTTP Parser: No favicon
Source: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=true	HTTP Parser: No favicon
Source: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=true	HTTP Parser: No favicon
Source: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=true	HTTP Parser: No favicon
Source: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=true	HTTP Parser: No favicon
Source: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=true	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 142.251.40.228:443 -> 192.168.2.6:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.49.104.18:443 -> 192.168.2.6:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.49.104.18:443 -> 192.168.2.6:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.38:443 -> 192.168.2.6:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.40:443 -> 192.168.2.6:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.179.73.44:443 -> 192.168.2.6:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.188.247.144:443 -> 192.168.2.6:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.49.104.18:443 -> 192.168.2.6:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.40:443 -> 192.168.2.6:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.49.104.18:443 -> 192.168.2.6:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.35.93.47:443 -> 192.168.2.6:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.40:443 -> 192.168.2.6:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.40:443 -> 192.168.2.6:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.35.93.104:443 -> 192.168.2.6:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.40:443 -> 192.168.2.6:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.40:443 -> 192.168.2.6:49787 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: mail-donotreply.com to https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={"_objecttype":"agent","name":"xew23qwrt qztrgyunm","account":{"homepage":null,"name":"zwqeuhgf@dhrgt.com","hashstring":null}}&auth=basic%20omjhnjyxztc2lwflm2mtndg1zc04mzi2lwfhmgiwndzhzwvmmq==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=true

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.131
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.131
Source: unknown	TCP traffic detected without corresponding DNS query: 23.44.203.210
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.215
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.215
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /click/65b6d0e2-d9dd-417c-a2b8-70690576459e HTTP/1.1Host: mail-donotreply.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/click.js HTTP/1.1Host: mail-donotreply.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mail-donotreply.com/click/65b6d0e2-d9dd-417c-a2b8-70690576459eAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: TiPMix=95.1343766316205; x-ms-routing-name=self
Source: global traffic	HTTP traffic detected: GET /scripts/b/ai.2.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-aliveOrigin: https://mail-donotreply.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://mail-donotreply.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessionimages/0.png HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mail-donotreply.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: mail-donotreply.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mail-donotreply.com/click/65b6d0e2-d9dd-417c-a2b8-70690576459eAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: TiPMix=95.1343766316205; x-ms-routing-name=self; ai_user=bcFR4GLdiVU6tetWeJNbq+\|2025-03-24T15:31:36.831Z
Source: global traffic	HTTP traffic detected: GET //v2/track HTTP/1.1Host: eastus-8.in.applicationinsights.azure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /register/65b6d0e2-d9dd-417c-a2b8-70690576459e HTTP/1.1Host: mail-donotreply.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: TiPMix=95.1343766316205; x-ms-routing-name=self; ai_user=bcFR4GLdiVU6tetWeJNbq+\|2025-03-24T15:31:36.831Z; ai_session=2hxRR7joqvDJJ2TkAiQejN\|1742830296946\|1742830296946
Source: global traffic	HTTP traffic detected: GET /runtime/fb7d9dbd-254d-499d-8256-1596aba0b2ca/true HTTP/1.1Host: mail-donotreply.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://mail-donotreply.com/click/65b6d0e2-d9dd-417c-a2b8-70690576459eAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: TiPMix=95.1343766316205; x-ms-routing-name=self; ai_user=bcFR4GLdiVU6tetWeJNbq+\|2025-03-24T15:31:36.831Z; ai_session=2hxRR7joqvDJJ2TkAiQejN\|1742830296946\|1742830296946
Source: global traffic	HTTP traffic detected: GET /register/65b6d0e2-d9dd-417c-a2b8-70690576459e HTTP/1.1Host: mail-donotreply.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: TiPMix=95.1343766316205; x-ms-routing-name=self; ai_user=bcFR4GLdiVU6tetWeJNbq+\|2025-03-24T15:31:36.831Z; ai_session=2hxRR7joqvDJJ2TkAiQejN\|1742830296946\|1742830296946
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=true HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://mail-donotreply.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET //v2/track HTTP/1.1Host: eastus-8.in.applicationinsights.azure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/html5/data/css/output.min.css HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/lms/scormdriver.js HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/story_content/triggers.js HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /click/65b6d0e2-d9dd-417c-a2b8-70690576459e HTTP/1.1Host: mail-donotreply.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://mail-donotreply.com/click/65b6d0e2-d9dd-417c-a2b8-70690576459eAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: TiPMix=95.1343766316205; x-ms-routing-name=self; ai_user=bcFR4GLdiVU6tetWeJNbq+\|2025-03-24T15:31:36.831Z; ai_session=2hxRR7joqvDJJ2TkAiQejN\|1742830296946\|1742830296946
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/story_content/user.js HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/html5/lib/scripts/bootstrapper.min.js HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessionimages/0.png HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mail-donotreply.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET //v2/track HTTP/1.1Host: eastus-8.in.applicationinsights.azure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/analytics-frame.html HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/html5/lib/stylesheets/desktop.min.css HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/html5/lib/scripts/frame.desktop.min.js HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/html5/data/js/frame.js HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/html5/lib/scripts/slides.min.js HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/html5/data/js/data.js HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/html5/data/js/paths.js HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/html5/lib/stylesheets/mobile-fonts/open-sans-light.woff HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-aliveOrigin: https://cdn.arcticwolfsat.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/html5/lib/stylesheets/desktop.min.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/html5/lib/stylesheets/mobile-fonts/open-sans-regular.woff HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-aliveOrigin: https://cdn.arcticwolfsat.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/html5/lib/stylesheets/desktop.min.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/html5/lib/stylesheets/mobile-fonts/open-sans-bold.woff HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-aliveOrigin: https://cdn.arcticwolfsat.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/html5/lib/stylesheets/desktop.min.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/activities/state?stateId=resume&activityId=http%3A%2F%2Fx0x&agent=%7B%22objectType%22%3A%22Agent%22%7D&attemptid=22993130&tracking=true HTTP/1.1Host: mail-donotreply.comConnection: keep-alivesec-ch-ua-platform: "Windows"Authorization: Basic OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36X-Experience-API-Version: 1.0.2sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://cdn.arcticwolfsat.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cdn.arcticwolfsat.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/html5/data/js/5jaSt9Sp1Ff.js HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/mobile/6NQ3yy3Yuny.png HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/mobile/6gWoTepJK9i.png HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/mobile/6gWoTepJK9i_RC2C6D2.png HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/statements?statementId=3c1f27ef-aec8-4396-b8ce-2f0afd676ce6&attemptid=22993130&tracking=true HTTP/1.1Host: mail-donotreply.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: TiPMix=95.1343766316205; x-ms-routing-name=self; ai_user=bcFR4GLdiVU6tetWeJNbq+\|2025-03-24T15:31:36.831Z; ai_session=2hxRR7joqvDJJ2TkAiQejN\|1742830296946\|1742830309124
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/mobile/6gWoTepJK9i.png HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/mobile/6gWoTepJK9i_RC2C6D2.png HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/import HTTP/1.1Host: metrics.articulate.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/statements?statementId=2159c8d0-6ce7-4e3e-8d34-9c98bc7bcbae&attemptid=22993130&tracking=true HTTP/1.1Host: mail-donotreply.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: TiPMix=95.1343766316205; x-ms-routing-name=self; ai_user=bcFR4GLdiVU6tetWeJNbq+\|2025-03-24T15:31:36.831Z; ai_session=2hxRR7joqvDJJ2TkAiQejN\|1742830296946\|1742830309124
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/mobile/6NQ3yy3Yuny.png HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/html5/data/js/65vgNqkuL9U.js HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/javascriptsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/html5/data/js/6bgUtanaZsL.js HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/javascriptsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/html5/data/js/65vgNqkuL9U.js HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/html5/data/js/5oBmN8LSYxA.js HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/javascriptsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/html5/data/js/6bgUtanaZsL.js HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/activities/state?stateId=resume&activityId=http%3A%2F%2Fx0x&agent=%7B%22objectType%22%3A%22Agent%22%7D&attemptid=22993130&tracking=true HTTP/1.1Host: mail-donotreply.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: TiPMix=95.1343766316205; x-ms-routing-name=self; ai_user=bcFR4GLdiVU6tetWeJNbq+\|2025-03-24T15:31:36.831Z; ai_session=2hxRR7joqvDJJ2TkAiQejN\|1742830296946\|1742830309124
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/mobile/640YBgygOGV.png HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/html5/data/js/5oBmN8LSYxA.js HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/mobile/5p6cgZyNKJj.png HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/mobile/640YBgygOGV.png HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/mobile/6LHYBwX4NF6.png HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/mobile/5p6cgZyNKJj.png HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/mobile/6VS0cLbAhT3.png HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/mobile/6LHYBwX4NF6.png HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/mobile/6ovEgwMc9ui.png HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/mobile/6VS0cLbAhT3.png HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/mobile/5XYrEpNXX6a.png HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/mobile/6ovEgwMc9ui.png HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/mobile/5neg8Z24NCJ.png HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/mobile/5XYrEpNXX6a.png HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/story_content/6roxDjgXCJt_44100_56_1.mp3 HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-alivesec-ch-ua-platform: "Windows"Accept-Encoding: identity;q=1, ;q=0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=trueAccept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/mobile/5neg8Z24NCJ.png HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/story_content/639Co8cUkKY_44100_56_1.mp3 HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-alivesec-ch-ua-platform: "Windows"Accept-Encoding: identity;q=1, ;q=0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=trueAccept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/story_content/5nMoWZLMyka_44100_56_1.mp3 HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-alivesec-ch-ua-platform: "Windows"Accept-Encoding: identity;q=1, ;q=0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=trueAccept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/story_content/6jIBSq5kwRL_44100_56_1.mp3 HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-alivesec-ch-ua-platform: "Windows"Accept-Encoding: identity;q=1, ;q=0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=trueAccept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/story_content/6iF9fpQUf9J_44100_56_1.mp3 HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-alivesec-ch-ua-platform: "Windows"Accept-Encoding: identity;q=1, ;q=0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=trueAccept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/story_content/6INEg3UoTPf_44100_56_1.mp3 HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-alivesec-ch-ua-platform: "Windows"Accept-Encoding: identity;q=1, ;q=0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=trueAccept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /api/statements?statementId=12b4ddce-8a85-4522-a5d5-29e534313a40&attemptid=22993130&tracking=true HTTP/1.1Host: mail-donotreply.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: TiPMix=95.1343766316205; x-ms-routing-name=self; ai_user=bcFR4GLdiVU6tetWeJNbq+\|2025-03-24T15:31:36.831Z; ai_session=2hxRR7joqvDJJ2TkAiQejN\|1742830296946\|1742830309124
Source: global traffic	HTTP traffic detected: GET /api/statements?statementId=fbc7c922-65f4-4366-a8d8-8122426decf7&attemptid=22993130&tracking=true HTTP/1.1Host: mail-donotreply.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: TiPMix=95.1343766316205; x-ms-routing-name=self; ai_user=bcFR4GLdiVU6tetWeJNbq+\|2025-03-24T15:31:36.831Z; ai_session=2hxRR7joqvDJJ2TkAiQejN\|1742830296946\|1742830309124
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/activities/state?stateId=resume&activityId=http%3A%2F%2Fx0x&agent=%7B%22objectType%22%3A%22Agent%22%7D&attemptid=22993130&tracking=true HTTP/1.1Host: mail-donotreply.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: TiPMix=95.1343766316205; x-ms-routing-name=self; ai_user=bcFR4GLdiVU6tetWeJNbq+\|2025-03-24T15:31:36.831Z; ai_session=2hxRR7joqvDJJ2TkAiQejN\|1742830296946\|1742830309124
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/mobile/6Nv6XqOSYDu.jpg HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/mobile/6Nv6XqOSYDu.jpg HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/story_content/6EkCFPOvVT3_44100_56_1.mp3 HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-alivesec-ch-ua-platform: "Windows"Accept-Encoding: identity;q=1, ;q=0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=trueAccept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/mobile/5czlrc0SLtR.png HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/mobile/5czlrc0SLtR.png HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/story_content/5vg88SEaWYj_44100_56_1.mp3 HTTP/1.1Host: cdn.arcticwolfsat.comConnection: keep-alivesec-ch-ua-platform: "Windows"Accept-Encoding: identity;q=1, ;q=0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=trueAccept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /api/activities/state?stateId=resume&activityId=http%3A%2F%2Fx0x&agent=%7B%22objectType%22%3A%22Agent%22%7D&attemptid=22993130&tracking=true HTTP/1.1Host: mail-donotreply.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: TiPMix=95.1343766316205; x-ms-routing-name=self; ai_user=bcFR4GLdiVU6tetWeJNbq+\|2025-03-24T15:31:36.831Z; ai_session=2hxRR7joqvDJJ2TkAiQejN\|1742830296946\|1742830309124

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: mail-donotreply.com
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: cdn.arcticwolfsat.com
Source: global traffic	DNS traffic detected: DNS query: eastus-8.in.applicationinsights.azure.com
Source: global traffic	DNS traffic detected: DNS query: metrics.articulate.com

Source: unknown

HTTP traffic detected: POST //v2/track HTTP/1.1Host: eastus-8.in.applicationinsights.azure.comConnection: keep-aliveContent-Length: 1758sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-type: application/jsonsec-ch-ua-mobile: ?0Accept: */*Origin: https://mail-donotreply.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mail-donotreply.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Length: 0Connection: closeDate: Mon, 24 Mar 2025 15:31:38 GMTServer: Microsoft-IIS/10.0Strict-Transport-Security: max-age=3600Request-Context: appId=cid-v1:f9583db6-1b2a-423f-ac31-5f5f20737515X-Powered-By: ASP.NET
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: application/jsonContent-Length: 42Connection: closeDate: Mon, 24 Mar 2025 15:32:07 GMTx-amz-apigw-id: H8AmyFMpoAMEiIQ=x-amzn-RequestId: 1f729ebf-c544-4eef-84a8-0e5cc5e00a43x-amzn-ErrorType: MissingAuthenticationTokenExceptionX-Cache: Error from cloudfrontVia: 1.1 774fddee085016d16b500fd9201faeb2.cloudfront.net (CloudFront)X-Amz-Cf-Pop: JFK50-P8X-Amz-Cf-Id: dCLHEqWmEsgSW3RbpXY5fWHJrB0iK6qb7_hZqCGLusS5U3mG4O9yaQ==

Source: chromecache_103.4.dr	String found in binary or memory: http://adlnet.gov/expapi/activities/assessment
Source: chromecache_103.4.dr	String found in binary or memory: http://adlnet.gov/expapi/activities/cmi.interaction
Source: chromecache_103.4.dr	String found in binary or memory: http://adlnet.gov/expapi/activities/course
Source: chromecache_103.4.dr	String found in binary or memory: http://adlnet.gov/expapi/activities/interaction
Source: chromecache_103.4.dr	String found in binary or memory: http://adlnet.gov/expapi/activities/link
Source: chromecache_103.4.dr	String found in binary or memory: http://adlnet.gov/expapi/activities/media
Source: chromecache_103.4.dr	String found in binary or memory: http://adlnet.gov/expapi/activities/meeting
Source: chromecache_103.4.dr	String found in binary or memory: http://adlnet.gov/expapi/activities/module
Source: chromecache_103.4.dr	String found in binary or memory: http://adlnet.gov/expapi/activities/objective
Source: chromecache_103.4.dr	String found in binary or memory: http://adlnet.gov/expapi/activities/performance
Source: chromecache_103.4.dr	String found in binary or memory: http://adlnet.gov/expapi/activities/question
Source: chromecache_103.4.dr	String found in binary or memory: http://adlnet.gov/expapi/activities/simulation
Source: chromecache_103.4.dr	String found in binary or memory: http://adlnet.gov/expapi/verbs/answered
Source: chromecache_103.4.dr	String found in binary or memory: http://adlnet.gov/expapi/verbs/attempted
Source: chromecache_103.4.dr	String found in binary or memory: http://adlnet.gov/expapi/verbs/attended
Source: chromecache_103.4.dr	String found in binary or memory: http://adlnet.gov/expapi/verbs/completed
Source: chromecache_103.4.dr	String found in binary or memory: http://adlnet.gov/expapi/verbs/created
Source: chromecache_103.4.dr	String found in binary or memory: http://adlnet.gov/expapi/verbs/experienced
Source: chromecache_103.4.dr	String found in binary or memory: http://adlnet.gov/expapi/verbs/failed
Source: chromecache_103.4.dr	String found in binary or memory: http://adlnet.gov/expapi/verbs/imported
Source: chromecache_103.4.dr	String found in binary or memory: http://adlnet.gov/expapi/verbs/initialized
Source: chromecache_103.4.dr	String found in binary or memory: http://adlnet.gov/expapi/verbs/interacted
Source: chromecache_103.4.dr	String found in binary or memory: http://adlnet.gov/expapi/verbs/passed
Source: chromecache_103.4.dr	String found in binary or memory: http://adlnet.gov/expapi/verbs/shared
Source: chromecache_103.4.dr	String found in binary or memory: http://adlnet.gov/expapi/verbs/terminated
Source: chromecache_103.4.dr	String found in binary or memory: http://adlnet.gov/expapi/verbs/voided
Source: chromecache_103.4.dr	String found in binary or memory: http://blogs.msdn.com/b/ie/archive/2006/01/23/516393.aspx
Source: chromecache_103.4.dr	String found in binary or memory: http://blogs.msdn.com/b/ie/archive/2010/09/07/transitioning-existing-code-to-the-es5-getter-setter-a
Source: chromecache_103.4.dr	String found in binary or memory: http://cypressnorth.com/programming/internet-explorer-aborting-ajax-requests-fixed/
Source: chromecache_103.4.dr	String found in binary or memory: http://dev.w3.org/2006/webapi/WebIDL/#es-type-mapping
Source: chromecache_103.4.dr	String found in binary or memory: http://dvcs.w3.org/hg/url/raw-file/tip/Overview.html#collect-url-parameters
Source: chromecache_103.4.dr	String found in binary or memory: http://dvcs.w3.org/hg/url/raw-file/tip/Overview.html#constructor
Source: chromecache_103.4.dr	String found in binary or memory: http://dvcs.w3.org/hg/url/raw-file/tip/Overview.html#url-parameter-serialization
Source: chromecache_103.4.dr	String found in binary or memory: http://forums.intermapper.com/viewtopic.php?p=1096#1096
Source: chromecache_103.4.dr	String found in binary or memory: http://id.tincanapi.com/activity/software/
Source: chromecache_103.4.dr	String found in binary or memory: http://id.tincanapi.com/activity/software/scormdriver/
Source: chromecache_103.4.dr	String found in binary or memory: http://id.tincanapi.com/activitytype/source
Source: chromecache_103.4.dr	String found in binary or memory: http://id.tincanapi.com/extension/cmi-interaction-weighting
Source: chromecache_103.4.dr	String found in binary or memory: http://labs.apache.org/webarch/uri/rfc/rfc3986.html
Source: chromecache_103.4.dr	String found in binary or memory: http://mathiasbynens.be/demo/url-regex
Source: chromecache_103.4.dr	String found in binary or memory: http://mathiasbynens.be/notes/javascript-encoding
Source: chromecache_103.4.dr	String found in binary or memory: http://medialize.github.io/URI.js/
Source: chromecache_103.4.dr	String found in binary or memory: http://mths.be/punycode
Source: chromecache_103.4.dr	String found in binary or memory: http://opensource.org/licenses/GPL-3.0
Source: chromecache_103.4.dr	String found in binary or memory: http://pieisgood.org/test/script-link-events/
Source: chromecache_103.4.dr	String found in binary or memory: http://rodneyrehm.de/t/url-regex.html
Source: chromecache_103.4.dr	String found in binary or memory: http://stackoverflow.com/a/21553982
Source: chromecache_103.4.dr	String found in binary or memory: http://stackoverflow.com/a/2880929
Source: chromecache_103.4.dr	String found in binary or memory: http://stackoverflow.com/questions/10046972/msie-returns-status-code-of-1223-for-ajax-request
Source: chromecache_103.4.dr	String found in binary or memory: http://tools.ietf.org/html/draft-ietf-6man-text-addr-representation-04#section-6
Source: chromecache_103.4.dr	String found in binary or memory: http://tools.ietf.org/html/rfc3492#section-3.4
Source: chromecache_103.4.dr	String found in binary or memory: http://tools.ietf.org/html/rfc3986
Source: chromecache_142.4.dr	String found in binary or memory: http://underscorejs.org/LICENSE
Source: chromecache_103.4.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_100.4.dr	String found in binary or memory: http://www.articulate.com
Source: chromecache_103.4.dr	String found in binary or memory: http://www.blah.com/blahblah&AICC_SID=12345
Source: chromecache_103.4.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_103.4.dr	String found in binary or memory: http://www.broofa.com/Tools/Math.uuid.js
Source: chromecache_103.4.dr	String found in binary or memory: http://www.iana.org/assignments/uri-schemes.html
Source: chromecache_103.4.dr	String found in binary or memory: http://www.ietf.org/rfc/rfc4291.txt
Source: chromecache_103.4.dr	String found in binary or memory: http://www.khronos.org/registry/typedarray/specs/latest/
Source: chromecache_103.4.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license
Source: chromecache_103.4.dr	String found in binary or memory: http://www.scorm.com
Source: chromecache_103.4.dr	String found in binary or memory: https://bitbucket.org/lindenlab/llsd
Source: chromecache_157.4.dr	String found in binary or memory: https://cdn.arcticwolfsat.com/sessionimages/0.png
Source: chromecache_103.4.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/JavaScript/Reference/Global_Objects/Date/now
Source: chromecache_103.4.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/JavaScript/Reference/Global_Objects/encodeURIComponent
Source: chromecache_103.4.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script#See_also
Source: chromecache_103.4.dr	String found in binary or memory: https://developer.mozilla.org/en/JavaScript/Reference/Global_Objects/Array/forEach
Source: chromecache_103.4.dr	String found in binary or memory: https://developer.mozilla.org/en/JavaScript/Reference/Global_Objects/JSON#Browser_compatibility
Source: chromecache_157.4.dr	String found in binary or memory: https://eastus-8.in.applicationinsights.azure.com/;LiveEndpoint=https://eastus.livediagnostics.monit
Source: chromecache_103.4.dr	String found in binary or memory: https://encoding.spec.whatwg.org/
Source: chromecache_103.4.dr	String found in binary or memory: https://encoding.spec.whatwg.org/encodings.json
Source: chromecache_157.4.dr	String found in binary or memory: https://fonts.googleapis.com
Source: chromecache_157.4.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Encode
Source: chromecache_157.4.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_150.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/encodesans/v19/LDIhapOFNxEwR-Bd1O9uYNmnUQomAgE25imKSbHLR8A6WQw.woff2)
Source: chromecache_150.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/encodesans/v19/LDIhapOFNxEwR-Bd1O9uYNmnUQomAgE25imKSbHLRsA6WQw.woff2)
Source: chromecache_150.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/encodesans/v19/LDIhapOFNxEwR-Bd1O9uYNmnUQomAgE25imKSbHLSMA6.woff2)
Source: chromecache_133.4.dr	String found in binary or memory: https://gist.github.com/982883
Source: chromecache_103.4.dr	String found in binary or memory: https://github.com/google/closure-compiler/issues/247
Source: chromecache_103.4.dr	String found in binary or memory: https://github.com/inexorabletash/polyfill
Source: chromecache_103.4.dr	String found in binary or memory: https://github.com/jquery/jquery/blob/1.10.2/src/ajax.js#L549
Source: chromecache_103.4.dr	String found in binary or memory: https://github.com/jquery/jquery/blob/1.10.2/src/ajax/xhr.js#L97)
Source: chromecache_103.4.dr	String found in binary or memory: https://github.com/medialize/URI.js/commit/85ac21783c11f8ccab06106dba9735a31a86924d#commitcomment-82
Source: chromecache_103.4.dr	String found in binary or memory: https://github.com/medialize/URI.js/issues/87
Source: chromecache_103.4.dr	String found in binary or memory: https://github.com/medialize/URI.js/issues/91
Source: chromecache_103.4.dr	String found in binary or memory: https://github.com/medialize/URI.js/issues/92
Source: chromecache_103.4.dr	String found in binary or memory: https://github.com/ttaubert/node-arraybuffer-slice
Source: chromecache_103.4.dr	String found in binary or memory: https://github.com/umdjs/umd/blob/master/returnExports.js
Source: chromecache_142.4.dr	String found in binary or memory: https://greensock.com
Source: chromecache_142.4.dr	String found in binary or memory: https://greensock.com/standard-license
Source: chromecache_103.4.dr	String found in binary or memory: https://heycam.github.io/webidl/#dfn-obtain-unicode
Source: chromecache_157.4.dr	String found in binary or memory: https://js.monitor.azure.com/scripts/b/ai.2.min.js
Source: chromecache_142.4.dr	String found in binary or memory: https://lodash.com/
Source: chromecache_142.4.dr	String found in binary or memory: https://lodash.com/license
Source: chromecache_133.4.dr	String found in binary or memory: https://metrics.articulate.com/v1/import
Source: chromecache_142.4.dr	String found in binary or memory: https://openjsf.org/
Source: chromecache_103.4.dr	String found in binary or memory: https://w3id.org/xapi/cmi5/context/categories/cmi5
Source: chromecache_103.4.dr	String found in binary or memory: https://w3id.org/xapi/cmi5/context/categories/moveon
Source: chromecache_103.4.dr	String found in binary or memory: https://w3id.org/xapi/cmi5/context/extensions/masteryscore
Source: chromecache_103.4.dr	String found in binary or memory: https://w3id.org/xapi/cmi5/context/extensions/sessionid
Source: chromecache_103.4.dr	String found in binary or memory: https://w3id.org/xapi/cmi5/result/extensions/progress
Source: chromecache_103.4.dr	String found in binary or memory: https://www.ietf.org/rfc/rfc3987.txt

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49686 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49681 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49681
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 142.251.40.228:443 -> 192.168.2.6:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.49.104.18:443 -> 192.168.2.6:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.49.104.18:443 -> 192.168.2.6:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.38:443 -> 192.168.2.6:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.40:443 -> 192.168.2.6:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.179.73.44:443 -> 192.168.2.6:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.188.247.144:443 -> 192.168.2.6:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.49.104.18:443 -> 192.168.2.6:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.40:443 -> 192.168.2.6:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.49.104.18:443 -> 192.168.2.6:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.35.93.47:443 -> 192.168.2.6:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.40:443 -> 192.168.2.6:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.40:443 -> 192.168.2.6:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.35.93.104:443 -> 192.168.2.6:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.40:443 -> 192.168.2.6:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.40:443 -> 192.168.2.6:49787 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir5460_1743082809

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir5460_1743082809

Jump to behavior

Source: classification engine

Classification label: mal48.win@26/112@24/9

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1920,i,1507782837297758160,9221004649092087704,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=1928 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mail-donotreply.com/click/65b6d0e2-d9dd-417c-a2b8-70690576459e"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-pre-read-main-dll --field-trial-handle=1920,i,1507782837297758160,9221004649092087704,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1920,i,1507782837297758160,9221004649092087704,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=1928 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-pre-read-main-dll --field-trial-handle=1920,i,1507782837297758160,9221004649092087704,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	2 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://mail-donotreply.com/click/65b6d0e2-d9dd-417c-a2b8-70690576459e	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://w3id.org/xapi/cmi5/context/categories/cmi5	0%	Avira URL Cloud	safe
https://mail-donotreply.com/register/65b6d0e2-d9dd-417c-a2b8-70690576459e	0%	Avira URL Cloud	safe
https://mail-donotreply.com/api/statements?statementId=3c1f27ef-aec8-4396-b8ce-2f0afd676ce6&attemptid=22993130&tracking=true	0%	Avira URL Cloud	safe
https://mail-donotreply.com/runtime/fb7d9dbd-254d-499d-8256-1596aba0b2ca/true	0%	Avira URL Cloud	safe
https://mail-donotreply.com/api/statements?statementId=fbc7c922-65f4-4366-a8d8-8122426decf7&attemptid=22993130&tracking=true	0%	Avira URL Cloud	safe
http://labs.apache.org/webarch/uri/rfc/rfc3986.html	0%	Avira URL Cloud	safe
http://dvcs.w3.org/hg/url/raw-file/tip/Overview.html#url-parameter-serialization	0%	Avira URL Cloud	safe
http://dev.w3.org/2006/webapi/WebIDL/#es-type-mapping	0%	Avira URL Cloud	safe
http://id.tincanapi.com/activity/software/scormdriver/	0%	Avira URL Cloud	safe
https://encoding.spec.whatwg.org/	0%	Avira URL Cloud	safe
http://www.scorm.com	0%	Avira URL Cloud	safe
https://w3id.org/xapi/cmi5/context/categories/moveon	0%	Avira URL Cloud	safe
http://rodneyrehm.de/t/url-regex.html	0%	Avira URL Cloud	safe
https://mail-donotreply.com/js/click.js	0%	Avira URL Cloud	safe
http://id.tincanapi.com/activity/software/	0%	Avira URL Cloud	safe
https://mail-donotreply.com/api/activities/state?stateId=resume&activityId=http%3A%2F%2Fx0x&agent=%7B%22objectType%22%3A%22Agent%22%7D&attemptid=22993130&tracking=true	0%	Avira URL Cloud	safe
https://mail-donotreply.com/api/statements?statementId=2159c8d0-6ce7-4e3e-8d34-9c98bc7bcbae&attemptid=22993130&tracking=true	0%	Avira URL Cloud	safe
http://dvcs.w3.org/hg/url/raw-file/tip/Overview.html#constructor	0%	Avira URL Cloud	safe
http://pieisgood.org/test/script-link-events/	0%	Avira URL Cloud	safe
http://dvcs.w3.org/hg/url/raw-file/tip/Overview.html#collect-url-parameters	0%	Avira URL Cloud	safe
https://mail-donotreply.com/api/statements?statementId=12b4ddce-8a85-4522-a5d5-29e534313a40&attemptid=22993130&tracking=true	0%	Avira URL Cloud	safe
https://w3id.org/xapi/cmi5/result/extensions/progress	0%	Avira URL Cloud	safe
http://www.blah.com/blahblah&AICC_SID=12345	0%	Avira URL Cloud	safe
https://w3id.org/xapi/cmi5/context/extensions/sessionid	0%	Avira URL Cloud	safe
http://www.opensource.org/licenses/mit-license	0%	Avira URL Cloud	safe
https://mail-donotreply.com/favicon.ico	0%	Avira URL Cloud	safe
http://forums.intermapper.com/viewtopic.php?p=1096#1096	0%	Avira URL Cloud	safe
http://mathiasbynens.be/demo/url-regex	0%	Avira URL Cloud	safe
http://mathiasbynens.be/notes/javascript-encoding	0%	Avira URL Cloud	safe
https://heycam.github.io/webidl/#dfn-obtain-unicode	0%	Avira URL Cloud	safe
https://w3id.org/xapi/cmi5/context/extensions/masteryscore	0%	Avira URL Cloud	safe
http://id.tincanapi.com/extension/cmi-interaction-weighting	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
s-part-0010.t-0009.t-msedge.net	13.107.246.38	true	false	high
s-part-0012.t-0009.t-msedge.net	13.107.246.40	true	false	high
www.google.com	142.251.40.228	true	false	high
metrics.articulate.com	13.35.93.47	true	false	high
mail-donotreply.com	20.49.104.18	true	true	unknown
gig-ai-prod-eastus-0.trafficmanager.net	52.179.73.44	true	false	high
js.monitor.azure.com	unknown	unknown	false	high
cdn.arcticwolfsat.com	unknown	unknown	false	high
eastus-8.in.applicationinsights.azure.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://mail-donotreply.com/register/65b6d0e2-d9dd-417c-a2b8-70690576459e	false	Avira URL Cloud: safe	unknown
https://mail-donotreply.com/api/statements?statementId=3c1f27ef-aec8-4396-b8ce-2f0afd676ce6&attemptid=22993130&tracking=true	false	Avira URL Cloud: safe	unknown
https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/html5/data/js/65vgNqkuL9U.js	false		high
https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/mobile/5p6cgZyNKJj.png	false		high
https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/html5/lib/stylesheets/mobile-fonts/open-sans-light.woff	false		high
https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/html5/data/css/output.min.css	false		high
https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/story_content/5vg88SEaWYj_44100_56_1.mp3	false		high
https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/story_content/5nMoWZLMyka_44100_56_1.mp3	false		high
https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/story_content/6jIBSq5kwRL_44100_56_1.mp3	false		high
https://mail-donotreply.com/runtime/fb7d9dbd-254d-499d-8256-1596aba0b2ca/true	false	Avira URL Cloud: safe	unknown
https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/mobile/6NQ3yy3Yuny.png	false		high
https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/html5/lib/scripts/frame.desktop.min.js	false		high
https://cdn.arcticwolfsat.com/favicon.ico	false		high
https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/mobile/6VS0cLbAhT3.png	false		high
https://mail-donotreply.com/api/statements?statementId=fbc7c922-65f4-4366-a8d8-8122426decf7&attemptid=22993130&tracking=true	false	Avira URL Cloud: safe	unknown
https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/html5/data/js/5oBmN8LSYxA.js	false		high
https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/mobile/5XYrEpNXX6a.png	false		high
https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/story_content/639Co8cUkKY_44100_56_1.mp3	false		high
https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/story_content/user.js	false		high
https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/html5/data/js/data.js	false		high
https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/story_content/triggers.js	false		high
https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/mobile/6ovEgwMc9ui.png	false		high
https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/html5/data/js/frame.js	false		high
https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/html5/lib/stylesheets/mobile-fonts/open-sans-regular.woff	false		high
https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/mobile/6gWoTepJK9i_RC2C6D2.png	false		high
https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/analytics-frame.html	false		high
https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/html5/lib/scripts/slides.min.js	false		high
https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/story_content/6INEg3UoTPf_44100_56_1.mp3	false		high
https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/mobile/5neg8Z24NCJ.png	false		high
https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/story_content/6roxDjgXCJt_44100_56_1.mp3	false		high
https://mail-donotreply.com/api/statements?statementId=2159c8d0-6ce7-4e3e-8d34-9c98bc7bcbae&attemptid=22993130&tracking=true	false	Avira URL Cloud: safe	unknown
https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/html5/lib/scripts/bootstrapper.min.js	false		high
https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/story_content/6iF9fpQUf9J_44100_56_1.mp3	false		high
https://js.monitor.azure.com/scripts/b/ai.2.min.js	false		high
https://mail-donotreply.com/js/click.js	true	Avira URL Cloud: safe	unknown
https://mail-donotreply.com/api/activities/state?stateId=resume&activityId=http%3A%2F%2Fx0x&agent=%7B%22objectType%22%3A%22Agent%22%7D&attemptid=22993130&tracking=true	false	Avira URL Cloud: safe	unknown
https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/story_content/6EkCFPOvVT3_44100_56_1.mp3	false		high
https://mail-donotreply.com/api/statements?statementId=12b4ddce-8a85-4522-a5d5-29e534313a40&attemptid=22993130&tracking=true	false	Avira URL Cloud: safe	unknown
https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/html5/data/js/6bgUtanaZsL.js	false		high
https://mail-donotreply.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/html5/lib/stylesheets/mobile-fonts/open-sans-bold.woff	false		high
https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/html5/data/js/5jaSt9Sp1Ff.js	false		high
https://mail-donotreply.com/click/65b6d0e2-d9dd-417c-a2b8-70690576459e	true		unknown
https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/lms/scormdriver.js	false		high
https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/mobile/6gWoTepJK9i.png	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://opensource.org/licenses/GPL-3.0	chromecache_103.4.dr	false		high
https://github.com/jquery/jquery/blob/1.10.2/src/ajax/xhr.js#L97)	chromecache_103.4.dr	false		high
http://stackoverflow.com/a/21553982	chromecache_103.4.dr	false		high
http://www.broofa.com	chromecache_103.4.dr	false		high
http://dvcs.w3.org/hg/url/raw-file/tip/Overview.html#url-parameter-serialization	chromecache_103.4.dr	false	Avira URL Cloud: safe	unknown
https://github.com/inexorabletash/polyfill	chromecache_103.4.dr	false		high
https://github.com/medialize/URI.js/commit/85ac21783c11f8ccab06106dba9735a31a86924d#commitcomment-82	chromecache_103.4.dr	false		high
https://openjsf.org/	chromecache_142.4.dr	false		high
http://dev.w3.org/2006/webapi/WebIDL/#es-type-mapping	chromecache_103.4.dr	false	Avira URL Cloud: safe	unknown
https://w3id.org/xapi/cmi5/context/categories/cmi5	chromecache_103.4.dr	false	Avira URL Cloud: safe	unknown
https://encoding.spec.whatwg.org/	chromecache_103.4.dr	false	Avira URL Cloud: safe	unknown
http://labs.apache.org/webarch/uri/rfc/rfc3986.html	chromecache_103.4.dr	false	Avira URL Cloud: safe	unknown
http://tools.ietf.org/html/rfc3986	chromecache_103.4.dr	false		high
https://developer.mozilla.org/en-US/docs/JavaScript/Reference/Global_Objects/Date/now	chromecache_103.4.dr	false		high
http://id.tincanapi.com/activity/software/scormdriver/	chromecache_103.4.dr	false	Avira URL Cloud: safe	unknown
http://tools.ietf.org/html/rfc3492#section-3.4	chromecache_103.4.dr	false		high
http://underscorejs.org/LICENSE	chromecache_142.4.dr	false		high
https://developer.mozilla.org/en/JavaScript/Reference/Global_Objects/Array/forEach	chromecache_103.4.dr	false		high
https://greensock.com/standard-license	chromecache_142.4.dr	false		high
https://eastus-8.in.applicationinsights.azure.com/;LiveEndpoint=https://eastus.livediagnostics.monit	chromecache_157.4.dr	false		high
https://w3id.org/xapi/cmi5/context/categories/moveon	chromecache_103.4.dr	false	Avira URL Cloud: safe	unknown
http://www.scorm.com	chromecache_103.4.dr	false	Avira URL Cloud: safe	unknown
https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script#See_also	chromecache_103.4.dr	false		high
http://id.tincanapi.com/activity/software/	chromecache_103.4.dr	false	Avira URL Cloud: safe	unknown
http://www.articulate.com	chromecache_100.4.dr	false		high
https://developer.mozilla.org/en/JavaScript/Reference/Global_Objects/JSON#Browser_compatibility	chromecache_103.4.dr	false		high
http://rodneyrehm.de/t/url-regex.html	chromecache_103.4.dr	false	Avira URL Cloud: safe	unknown
https://github.com/ttaubert/node-arraybuffer-slice	chromecache_103.4.dr	false		high
http://pieisgood.org/test/script-link-events/	chromecache_103.4.dr	false	Avira URL Cloud: safe	unknown
http://dvcs.w3.org/hg/url/raw-file/tip/Overview.html#constructor	chromecache_103.4.dr	false	Avira URL Cloud: safe	unknown
http://dvcs.w3.org/hg/url/raw-file/tip/Overview.html#collect-url-parameters	chromecache_103.4.dr	false	Avira URL Cloud: safe	unknown
https://github.com/jquery/jquery/blob/1.10.2/src/ajax.js#L549	chromecache_103.4.dr	false		high
http://www.ietf.org/rfc/rfc4291.txt	chromecache_103.4.dr	false		high
http://www.blah.com/blahblah&AICC_SID=12345	chromecache_103.4.dr	false	Avira URL Cloud: safe	unknown
http://www.opensource.org/licenses/mit-license	chromecache_103.4.dr	false	Avira URL Cloud: safe	unknown
https://github.com/medialize/URI.js/issues/87	chromecache_103.4.dr	false		high
http://stackoverflow.com/questions/10046972/msie-returns-status-code-of-1223-for-ajax-request	chromecache_103.4.dr	false		high
https://w3id.org/xapi/cmi5/result/extensions/progress	chromecache_103.4.dr	false	Avira URL Cloud: safe	unknown
https://github.com/google/closure-compiler/issues/247	chromecache_103.4.dr	false		high
http://blogs.msdn.com/b/ie/archive/2010/09/07/transitioning-existing-code-to-the-es5-getter-setter-a	chromecache_103.4.dr	false		high
https://w3id.org/xapi/cmi5/context/extensions/sessionid	chromecache_103.4.dr	false	Avira URL Cloud: safe	unknown
http://blogs.msdn.com/b/ie/archive/2006/01/23/516393.aspx	chromecache_103.4.dr	false		high
http://mathiasbynens.be/notes/javascript-encoding	chromecache_103.4.dr	false	Avira URL Cloud: safe	unknown
https://gist.github.com/982883	chromecache_133.4.dr	false		high
http://www.apache.org/licenses/LICENSE-2.0	chromecache_103.4.dr	false		high
https://greensock.com	chromecache_142.4.dr	false		high
http://id.tincanapi.com/extension/cmi-interaction-weighting	chromecache_103.4.dr	false	Avira URL Cloud: safe	unknown
https://w3id.org/xapi/cmi5/context/extensions/masteryscore	chromecache_103.4.dr	false	Avira URL Cloud: safe	unknown
http://forums.intermapper.com/viewtopic.php?p=1096#1096	chromecache_103.4.dr	false	Avira URL Cloud: safe	unknown
https://github.com/medialize/URI.js/issues/92	chromecache_103.4.dr	false		high
https://lodash.com/	chromecache_142.4.dr	false		high
https://github.com/medialize/URI.js/issues/91	chromecache_103.4.dr	false		high
http://mathiasbynens.be/demo/url-regex	chromecache_103.4.dr	false	Avira URL Cloud: safe	unknown
http://tools.ietf.org/html/draft-ietf-6man-text-addr-representation-04#section-6	chromecache_103.4.dr	false		high
https://heycam.github.io/webidl/#dfn-obtain-unicode	chromecache_103.4.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.40	s-part-0012.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.35.93.47	metrics.articulate.com	United States	16509	AMAZON-02US	false
142.251.40.228	www.google.com	United States	15169	GOOGLEUS	false
52.188.247.144	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.35.93.104	unknown	United States	16509	AMAZON-02US	false
20.49.104.18	mail-donotreply.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	true
52.179.73.44	gig-ai-prod-eastus-0.trafficmanager.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.38	s-part-0010.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false

Private

IP
192.168.2.6

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1647238
Start date and time:	2025-03-24 16:30:22 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 36s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://mail-donotreply.com/click/65b6d0e2-d9dd-417c-a2b8-70690576459e
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	16
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@26/112@24/9
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.40.142, 142.251.32.99, 142.250.81.238, 172.253.122.84, 142.251.40.206, 142.250.65.238, 142.250.176.206, 142.250.64.67, 142.251.40.106, 199.232.214.172, 142.250.80.78, 142.251.40.238, 142.250.80.46, 142.250.65.163, 184.31.69.3, 4.175.87.197
Excluded domains from analysis (whitelisted): fonts.googleapis.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://mail-donotreply.com/click/65b6d0e2-d9dd-417c-a2b8-70690576459e

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (4003), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	21056
Entropy (8bit):	5.617345106132824
Encrypted:	false
SSDEEP:	384:pRZJPUt6fsXY5Q/BZEnkgk4i/weTGMtwMPu4jVGq3E5AC8hC:PLQ6fsH/QnkM+BXwgjVRiR8k
MD5:	7E29C3D5C847AD265A8C20EE2B518289
SHA1:	0F11C7A56426248579507F4FF01FAF7D8B86D70D
SHA-256:	1AE8138A1C7C6111EAAB69ED324F80D9167A020537BABD8E26FF54A3DC711EA8
SHA-512:	F0E06C6EA8400A08123B2100ED517D6ECA6959DA117E5D44E2CED5FAAF0CE239CD4B86503FAB2DA3049DCA4732DFF46223E1692008311E38555E1C2F93445A02
Malicious:	false
Reputation:	low
URL:	"https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=true"
Preview:	.<!doctype html>..<html lang="en-US">..<head>.. <meta charset="utf-8">.. Created using Storyline 360 x64 - http://www.articulate.com -->.. version: 3.96.33815.0 -->.. <title>Arctic Wolf Managed Security Awareness</title>.. <meta http-equiv="x-ua-compatible" content="IE=edge"/>.. <meta name="viewport" content="width=device-width,initial-scale=1,user-scalable=no,shrink-to-fit=no,minimal-ui"/>.. <meta name="apple-mobile-web-app-capable" content="yes"/>.. <style>.. html, body { height: 100%; padding: 0; margin: 0 }.. #app { height: 100%; width: 100%; }.. </style>.... <script>.. window.DS = {};.. window.globals = {.. DATA_PATH_BASE: '',.. HAS_FRAME: true,.. HAS_SLIDE: true,.... lmsPresent: false,.. tinCanPresent: true,.. cmi5Present: false,.. aoSupport: false,.. scale: 'noscale',.. captureRc: false,.. browserSize: 'optimal',.. bgColor: '#282828',.. features: 'DropInAcc,DropInBase,DropInCore,DropIn

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 24, 2025 16:31:30.759470940 CET	53	52647	1.1.1.1	192.168.2.6
Mar 24, 2025 16:31:30.781272888 CET	53	59497	1.1.1.1	192.168.2.6
Mar 24, 2025 16:31:31.597557068 CET	53	59536	1.1.1.1	192.168.2.6
Mar 24, 2025 16:31:34.857980967 CET	62186	53	192.168.2.6	1.1.1.1
Mar 24, 2025 16:31:34.858119965 CET	61530	53	192.168.2.6	1.1.1.1
Mar 24, 2025 16:31:34.963310003 CET	53	62186	1.1.1.1	192.168.2.6
Mar 24, 2025 16:31:34.963412046 CET	53	61530	1.1.1.1	192.168.2.6
Mar 24, 2025 16:31:35.686954021 CET	58594	53	192.168.2.6	1.1.1.1
Mar 24, 2025 16:31:35.687093019 CET	58598	53	192.168.2.6	1.1.1.1
Mar 24, 2025 16:31:35.791632891 CET	53	58594	1.1.1.1	192.168.2.6
Mar 24, 2025 16:31:35.797075033 CET	53	58598	1.1.1.1	192.168.2.6
Mar 24, 2025 16:31:36.691354036 CET	53	56055	1.1.1.1	192.168.2.6
Mar 24, 2025 16:31:37.146522045 CET	49400	53	192.168.2.6	1.1.1.1
Mar 24, 2025 16:31:37.146675110 CET	53254	53	192.168.2.6	1.1.1.1
Mar 24, 2025 16:31:37.148678064 CET	60307	53	192.168.2.6	1.1.1.1
Mar 24, 2025 16:31:37.148808956 CET	58297	53	192.168.2.6	1.1.1.1
Mar 24, 2025 16:31:37.253281116 CET	53	49400	1.1.1.1	192.168.2.6
Mar 24, 2025 16:31:37.253302097 CET	53	53254	1.1.1.1	192.168.2.6
Mar 24, 2025 16:31:37.286272049 CET	53	58297	1.1.1.1	192.168.2.6
Mar 24, 2025 16:31:37.294986010 CET	53	60307	1.1.1.1	192.168.2.6
Mar 24, 2025 16:31:38.253752947 CET	64799	53	192.168.2.6	1.1.1.1
Mar 24, 2025 16:31:38.253992081 CET	54415	53	192.168.2.6	1.1.1.1
Mar 24, 2025 16:31:38.356775999 CET	53	64799	1.1.1.1	192.168.2.6
Mar 24, 2025 16:31:38.406806946 CET	53	54415	1.1.1.1	192.168.2.6
Mar 24, 2025 16:31:39.490360022 CET	63117	53	192.168.2.6	1.1.1.1
Mar 24, 2025 16:31:39.490556002 CET	62580	53	192.168.2.6	1.1.1.1
Mar 24, 2025 16:31:39.599246979 CET	53	62580	1.1.1.1	192.168.2.6
Mar 24, 2025 16:31:39.599304914 CET	53	63117	1.1.1.1	192.168.2.6
Mar 24, 2025 16:31:40.105551004 CET	62369	53	192.168.2.6	1.1.1.1
Mar 24, 2025 16:31:40.105779886 CET	60516	53	192.168.2.6	1.1.1.1
Mar 24, 2025 16:31:40.214137077 CET	53	62369	1.1.1.1	192.168.2.6
Mar 24, 2025 16:31:40.214257002 CET	53	60516	1.1.1.1	192.168.2.6
Mar 24, 2025 16:31:47.508552074 CET	58617	53	192.168.2.6	1.1.1.1
Mar 24, 2025 16:31:47.508673906 CET	53381	53	192.168.2.6	1.1.1.1
Mar 24, 2025 16:31:47.643507957 CET	53	53381	1.1.1.1	192.168.2.6
Mar 24, 2025 16:31:47.651693106 CET	53	58617	1.1.1.1	192.168.2.6
Mar 24, 2025 16:31:48.632998943 CET	53	64645	1.1.1.1	192.168.2.6
Mar 24, 2025 16:32:04.291723967 CET	64450	53	192.168.2.6	1.1.1.1
Mar 24, 2025 16:32:04.291871071 CET	62446	53	192.168.2.6	1.1.1.1
Mar 24, 2025 16:32:04.399312973 CET	53	64450	1.1.1.1	192.168.2.6
Mar 24, 2025 16:32:04.402328014 CET	53	62446	1.1.1.1	192.168.2.6
Mar 24, 2025 16:32:06.359327078 CET	53955	53	192.168.2.6	1.1.1.1
Mar 24, 2025 16:32:06.359488010 CET	59687	53	192.168.2.6	1.1.1.1
Mar 24, 2025 16:32:06.464113951 CET	53	59687	1.1.1.1	192.168.2.6
Mar 24, 2025 16:32:06.464438915 CET	53	53955	1.1.1.1	192.168.2.6
Mar 24, 2025 16:32:07.092947006 CET	64026	53	192.168.2.6	1.1.1.1
Mar 24, 2025 16:32:07.093172073 CET	49190	53	192.168.2.6	1.1.1.1
Mar 24, 2025 16:32:07.232857943 CET	53	49190	1.1.1.1	192.168.2.6
Mar 24, 2025 16:32:07.233329058 CET	53	64026	1.1.1.1	192.168.2.6
Mar 24, 2025 16:32:07.385916948 CET	53998	53	192.168.2.6	1.1.1.1
Mar 24, 2025 16:32:07.386118889 CET	54229	53	192.168.2.6	1.1.1.1
Mar 24, 2025 16:32:07.492705107 CET	53	54229	1.1.1.1	192.168.2.6
Mar 24, 2025 16:32:07.501456022 CET	53	53998	1.1.1.1	192.168.2.6
Mar 24, 2025 16:32:07.617554903 CET	53	54532	1.1.1.1	192.168.2.6
Mar 24, 2025 16:32:24.882225990 CET	138	138	192.168.2.6	192.168.2.255
Mar 24, 2025 16:32:30.343776941 CET	53	56922	1.1.1.1	192.168.2.6
Mar 24, 2025 16:32:30.608732939 CET	53	55994	1.1.1.1	192.168.2.6
Mar 24, 2025 16:32:33.154553890 CET	53	49784	1.1.1.1	192.168.2.6

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:31:36 UTC	711	OUT	GET /click/65b6d0e2-d9dd-417c-a2b8-70690576459e HTTP/1.1 Host: mail-donotreply.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:31:36 UTC	501	IN	HTTP/1.1 200 OK Connection: close Content-Type: text/html; charset=utf-8 Date: Mon, 24 Mar 2025 15:31:36 GMT Server: Microsoft-IIS/10.0 Set-Cookie: TiPMix=95.1343766316205; path=/; HttpOnly; Domain=mail-donotreply.com; Max-Age=3600; Secure; SameSite=None Set-Cookie: x-ms-routing-name=self; path=/; HttpOnly; Domain=mail-donotreply.com; Max-Age=3600; Secure; SameSite=None Transfer-Encoding: chunked Request-Context: appId=cid-v1:f9583db6-1b2a-423f-ac31-5f5f20737515 X-Powered-By: ASP.NET
2025-03-24 15:31:36 UTC	3595	IN	Data Raw: 65 33 61 0d 0a 0a 3c 68 74 6d 6c 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 44 6f 6e 26 23 78 32 37 3b 74 20 50 61 6e 69 63 21 20 28 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 6f 66 20 52 65 69 6d 62 75 72 73 65 6d 65 6e 74 20 52 65 71 75 65 73 74 29 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 2e 6c 61 75 6e 63 68 5f 62 74 6e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 3b 0a 20 20 20 20 20 20 20 Data Ascii: e3a<html><head> <meta name="robots" content="noindex"> <title>Don't Panic! (Confirmation of Reimbursement Request)</title> <style> .launch_btn { -webkit-border-radius: 0; -moz-border-radius: 0;
2025-03-24 15:31:36 UTC	54	IN	Data Raw: 65 6e 74 2d 74 79 70 65 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 29 2c 61 2e 73 65 6e 64 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 0d 0a Data Ascii: ent-type","application/json"),a.send(JSON.stringify(
2025-03-24 15:31:36 UTC	3751	IN	Data Raw: 65 61 30 0d 0a 65 29 29 7d 7d 7d 28 6c 2c 70 29 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 29 7b 66 7c 7c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 21 74 26 26 6d 2e 63 6f 72 65 7c 7c 61 28 29 7d 2c 35 30 30 29 7d 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 6c 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6b 29 3b 6e 2e 73 72 63 3d 68 3b 76 61 72 20 65 3d 79 5b 77 5d 3b 72 65 74 75 72 6e 21 65 26 26 22 22 21 3d 3d 65 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 6e 5b 77 5d 7c 7c 28 6e 5b 77 5d 3d 65 29 2c 6e 2e 6f 6e 6c 6f 61 64 3d 69 2c 6e 2e 6f 6e 65 72 72 6f 72 3d 61 2c 6e 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6c 6f 61 64 65 64 22 21 Data Ascii: ea0e))}}}(l,p))}function i(e,t){f\|\|setTimeout(function(){!t&&m.core\|\|a()},500)}var e=function(){var n=l.createElement(k);n.src=h;var e=y[w];return!e&&""!==e\|\|"undefined"==n[w]\|\|(n[w]=e),n.onload=i,n.onerror=a,n.onreadystatechange=function(e,t){"loaded"!
2025-03-24 15:31:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:31:36 UTC	640	OUT	GET /js/click.js HTTP/1.1 Host: mail-donotreply.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mail-donotreply.com/click/65b6d0e2-d9dd-417c-a2b8-70690576459e Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: TiPMix=95.1343766316205; x-ms-routing-name=self
2025-03-24 15:31:36 UTC	340	IN	HTTP/1.1 200 OK Content-Length: 2084 Connection: close Content-Type: text/javascript Date: Mon, 24 Mar 2025 15:31:36 GMT Server: Microsoft-IIS/10.0 Accept-Ranges: bytes ETag: "1db8dfe289ab224" Last-Modified: Wed, 05 Mar 2025 18:41:08 GMT Request-Context: appId=cid-v1:f9583db6-1b2a-423f-ac31-5f5f20737515 X-Powered-By: ASP.NET
2025-03-24 15:31:36 UTC	2084	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 20 0a 6c 65 74 20 63 6c 69 63 6b 20 3d 20 66 61 6c 73 65 3b 0a 0a 2f 2f 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 20 77 69 74 68 20 70 6f 69 6e 74 65 72 20 65 76 65 6e 74 73 20 0a 69 66 20 28 77 69 6e 64 6f 77 2e 50 6f 69 6e 74 65 72 45 76 65 6e 74 29 20 7b 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 70 6f 69 6e 74 65 72 6d 6f 76 65 27 2c 20 65 76 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 69 66 28 63 6c 69 63 6b 20 3d 3d 20 66 61 6c 73 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 69 63 6b 20 3d 20 74 72 75 65 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 67 69 73 74 65 72 28 70 68 69 73 68 69 6e 67 41 74 74 65 6d 70 74 47 55 49 44 29 3b 20 0a 20 Data Ascii: "use strict"; let click = false;// implementation with pointer events if (window.PointerEvent) { document.addEventListener('pointermove', ev => { if(click == false) { click = true; register(phishingAttemptGUID);

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:31:37 UTC	585	OUT	GET /scripts/b/ai.2.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive Origin: https://mail-donotreply.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://mail-donotreply.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:31:37 UTC	917	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 15:31:37 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 123063 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=1800, immutable, no-transform Last-Modified: Wed, 05 Feb 2025 20:28:13 GMT ETag: 0x8DD46239D267699 x-ms-request-id: 779e8542-b01e-00ea-7bdd-960a6f000000 x-ms-version: 2009-09-19 x-ms-meta-aijssdksrc: [cdn]/scripts/b/ai.2.8.18.min.js x-ms-meta-aijssdkver: 2.8.18 Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-aijssdksrc,x-ms-meta-aijssdkver,x-ms-meta-lastmodified,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20250324T153137Z-17cccd5449bzd7mthC1EWRrdxw0000000b2g000000007smm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-24 15:31:37 UTC	15467	IN	Data Raw: 2f 2a 21 0a 20 2a 20 41 70 70 6c 69 63 61 74 69 6f 6e 20 49 6e 73 69 67 68 74 73 20 4a 61 76 61 53 63 72 69 70 74 20 53 44 4b 20 2d 20 57 65 62 2c 20 32 2e 38 2e 31 38 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 74 29 6e 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 Data Ascii: /! Application Insights JavaScript SDK - Web, 2.8.18 * Copyright (c) Microsoft and contributors. All rights reserved. */!function(e,n){var t="undefined";if("object"==typeof exports&&typeof module!=t)n(exports);else if("function"==typeof define&&def
2025-03-24 15:31:37 UTC	16384	IN	Data Raw: 29 7b 61 26 26 61 5b 47 65 5d 26 26 61 5b 47 65 5d 28 22 65 78 63 65 70 74 69 6f 6e 22 2c 63 29 7d 66 69 6e 61 6c 6c 79 7b 61 26 26 65 2e 66 69 72 65 28 61 29 2c 65 5b 47 65 5d 28 56 72 2c 75 29 7d 7d 72 65 74 75 72 6e 20 74 28 29 7d 76 61 72 20 4b 72 3d 34 32 39 34 39 36 37 32 39 36 2c 58 72 3d 34 32 39 34 39 36 37 32 39 35 2c 57 72 3d 21 31 2c 47 72 3d 31 32 33 34 35 36 37 38 39 2c 4a 72 3d 39 38 37 36 35 34 33 32 31 3b 66 75 6e 63 74 69 6f 6e 20 24 72 28 65 29 7b 65 3c 30 26 26 28 65 3e 3e 3e 3d 30 29 2c 47 72 3d 31 32 33 34 35 36 37 38 39 2b 65 26 58 72 2c 4a 72 3d 39 38 37 36 35 34 33 32 31 2d 65 26 58 72 2c 57 72 3d 21 30 7d 66 75 6e 63 74 69 6f 6e 20 51 72 28 29 7b 74 72 79 7b 76 61 72 20 65 3d 32 31 34 37 34 38 33 36 34 37 26 65 74 28 29 3b 24 72 Data Ascii: ){a&&a[Ge]&&a[Ge]("exception",c)}finally{a&&e.fire(a),e[Ge](Vr,u)}}return t()}var Kr=4294967296,Xr=4294967295,Wr=!1,Gr=123456789,Jr=987654321;function $r(e){e<0&&(e>>>=0),Gr=123456789+e&Xr,Jr=987654321-e&Xr,Wr=!0}function Qr(){try{var e=2147483647&et();$r
2025-03-24 15:31:37 UTC	16384	IN	Data Raw: 65 74 43 68 61 6e 6e 65 6c 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 73 26 26 30 3c 73 5b 52 5d 26 26 24 28 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 26 26 30 3c 65 2e 71 75 65 75 65 5b 52 5d 26 26 28 24 28 65 2e 71 75 65 75 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 5b 73 65 5d 3d 3d 3d 6e 29 72 65 74 75 72 6e 20 74 3d 65 2c 2d 31 7d 29 2c 74 29 29 72 65 74 75 72 6e 2d 31 7d 29 2c 74 7d 2c 66 6c 75 73 68 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 2c 69 29 7b 76 61 72 20 6f 3d 31 2c 6e 3d 21 31 2c 61 3d 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 6f 2d 2d 2c 6e 26 26 30 3d 3d 3d 6f 26 26 28 61 26 26 28 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 61 29 2c 61 3d 6e 75 6c 6c 29 Data Ascii: etChannel:function(n){var t=null;return s&&0<s[R]&&$(s,function(e){if(e&&0<e.queue[R]&&($(e.queue,function(e){if(e[se]===n)return t=e,-1}),t))return-1}),t},flush:function(t,e,r,i){var o=1,n=!1,a=null;function u(){o--,n&&0===o&&(a&&(clearTimeout(a),a=null)
2025-03-24 15:31:37 UTC	16384	IN	Data Raw: 69 73 61 62 6c 65 43 6f 72 72 65 6c 61 74 69 6f 6e 48 65 61 64 65 72 73 29 72 65 74 75 72 6e 21 31 3b 69 66 28 65 26 26 65 5b 4b 61 5d 29 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 65 2e 63 6f 72 72 65 6c 61 74 69 6f 6e 48 65 61 64 65 72 45 78 63 6c 75 64 65 50 61 74 74 65 72 6e 73 5b 67 5d 3b 72 2b 2b 29 69 66 28 65 5b 4b 61 5d 5b 72 5d 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 69 3d 58 75 28 6e 29 2e 68 6f 73 74 5b 71 61 5d 28 29 3b 69 66 28 21 69 7c 7c 2d 31 3d 3d 3d 69 5b 58 61 5d 28 22 3a 34 34 33 22 29 26 26 2d 31 3d 3d 3d 69 5b 58 61 5d 28 22 3a 38 30 22 29 7c 7c 28 69 3d 28 24 75 28 6e 2c 21 30 29 7c 7c 22 22 29 5b 71 61 5d 28 29 29 2c 28 21 65 7c 7c 21 65 2e 65 6e 61 62 6c 65 43 6f 72 73 43 6f 72 72 65 6c 61 74 69 6f 6e 29 Data Ascii: isableCorrelationHeaders)return!1;if(e&&e[Ka])for(var r=0;r<e.correlationHeaderExcludePatterns[g];r++)if(e[Ka][r].test(n))return!1;var i=Xu(n).host[qa]();if(!i\|\|-1===i[Xa](":443")&&-1===i[Xa](":80")\|\|(i=($u(n,!0)\|\|"")[qa]()),(!e\|\|!e.enableCorsCorrelation)
2025-03-24 15:31:38 UTC	16384	IN	Data Raw: 69 2e 61 6a 78 6d 6e 2e 22 2c 59 73 3d 22 64 69 61 67 4c 6f 67 22 2c 5a 73 3d 22 5f 61 6a 61 78 44 61 74 61 22 2c 65 6c 3d 22 66 65 74 63 68 22 2c 6e 6c 3d 22 46 61 69 6c 65 64 20 74 6f 20 6d 6f 6e 69 74 6f 72 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 22 2c 69 3d 22 2c 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 64 61 74 61 20 66 6f 72 20 74 68 69 73 20 61 6a 61 78 20 63 61 6c 6c 20 22 2c 74 6c 3d 69 2b 22 6d 61 79 20 62 65 20 69 6e 63 6f 72 72 65 63 74 2e 22 2c 72 6c 3d 69 2b 22 77 6f 6e 27 74 20 62 65 20 73 65 6e 74 2e 22 2c 69 6c 3d 22 46 61 69 6c 65 64 20 74 6f 20 67 65 74 20 52 65 71 75 65 73 74 2d 43 6f 6e 74 65 78 74 20 63 6f 72 72 65 6c 61 74 69 6f 6e 20 68 65 61 64 65 72 20 61 73 20 69 74 20 6d 61 79 20 62 65 20 6e 6f 74 20 69 6e 63 6c 75 64 65 64 20 Data Ascii: i.ajxmn.",Ys="diagLog",Zs="_ajaxData",el="fetch",nl="Failed to monitor XMLHttpRequest",i=", monitoring data for this ajax call ",tl=i+"may be incorrect.",rl=i+"won't be sent.",il="Failed to get Request-Context correlation header as it may be not included
2025-03-24 15:31:38 UTC	16384	IN	Data Raw: 61 63 6b 50 61 67 65 56 69 65 77 3a 20 6e 61 76 69 67 61 74 69 6f 6e 20 74 69 6d 69 6e 67 20 41 50 49 20 75 73 65 64 20 66 6f 72 20 63 61 6c 63 75 6c 61 74 69 6f 6e 20 6f 66 20 70 61 67 65 20 64 75 72 61 74 69 6f 6e 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 69 6e 20 74 68 69 73 20 62 72 6f 77 73 65 72 2e 20 54 68 69 73 20 70 61 67 65 20 76 69 65 77 20 77 69 6c 6c 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 20 77 69 74 68 6f 75 74 20 64 75 72 61 74 69 6f 6e 20 61 6e 64 20 74 69 6d 69 6e 67 20 69 6e 66 6f 2e 22 29 29 3b 76 61 72 20 75 2c 6e 2c 63 3d 21 31 2c 73 3d 67 5b 66 64 5d 28 29 5b 64 64 5d 3b 30 3c 73 26 26 28 75 3d 6e 63 28 73 2c 2b 6e 65 77 20 44 61 74 65 29 2c 67 5b 70 64 5d 28 75 29 7c 7c 28 75 3d 75 6e 64 65 66 69 6e 65 64 29 29 2c 58 28 Data Ascii: ackPageView: navigation timing API used for calculation of page duration is not supported in this browser. This page view will be collected without duration and timing info."));var u,n,c=!1,s=g[fd]()[dd];0<s&&(u=nc(s,+new Date),g[pd](u)\|\|(u=undefined)),X(
2025-03-24 15:31:38 UTC	16384	IN	Data Raw: 6e 26 26 57 28 6e 5b 5a 64 5d 29 3f 6e 5b 5a 64 5d 28 29 3a 22 45 72 72 6f 72 20 73 65 72 69 61 6c 69 7a 69 6e 67 20 6f 62 6a 65 63 74 22 2c 6e 75 6c 6c 2c 21 30 29 7d 7d 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 6e 29 7b 69 66 28 65 29 69 66 28 71 28 65 29 29 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 72 3d 30 3b 72 3c 65 5b 4f 5d 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 73 28 65 5b 72 5d 2c 6e 2b 22 5b 22 2b 72 2b 22 5d 22 29 3b 74 5b 6f 70 5d 28 69 29 7d 65 6c 73 65 20 48 28 66 2c 31 2c 35 34 2c 22 54 68 69 73 20 66 69 65 6c 64 20 77 61 73 20 73 70 65 63 69 66 69 65 64 20 61 73 20 61 6e 20 61 72 72 61 79 20 69 6e 20 74 68 65 20 63 6f 6e 74 72 61 63 74 20 62 75 74 20 74 68 65 20 69 74 65 6d 20 69 73 20 6e 6f 74 20 61 6e 20 61 72 72 61 79 Data Ascii: n&&W(n[Zd])?n[Zd]():"Error serializing object",null,!0)}}return c}function l(e,n){if(e)if(q(e))for(var t=[],r=0;r<e[O];r++){var i=s(e[r],n+"["+r+"]");t[op](i)}else H(f,1,54,"This field was specified as an array in the contract but the item is not an array
2025-03-24 15:31:38 UTC	9292	IN	Data Raw: 28 6e 29 3f 48 28 63 2c 32 2c 36 30 2c 22 53 65 74 74 69 6e 67 20 61 75 74 68 20 75 73 65 72 20 63 6f 6e 74 65 78 74 20 66 61 69 6c 65 64 2e 20 55 73 65 72 20 61 75 74 68 2f 61 63 63 6f 75 6e 74 20 69 64 20 73 68 6f 75 6c 64 20 62 65 20 6f 66 20 74 79 70 65 20 73 74 72 69 6e 67 2c 20 61 6e 64 20 6e 6f 74 20 63 6f 6e 74 61 69 6e 20 63 6f 6d 6d 61 73 2c 20 73 65 6d 69 2d 63 6f 6c 6f 6e 73 2c 20 65 71 75 61 6c 20 73 69 67 6e 73 2c 20 73 70 61 63 65 73 2c 20 6f 72 20 76 65 72 74 69 63 61 6c 2d 62 61 72 73 2e 22 2c 21 30 29 3a 28 72 5b 4b 76 5d 3d 65 2c 65 3d 72 5b 4b 76 5d 2c 6e 26 26 28 72 5b 4c 76 5d 3d 6e 2c 65 3d 5b 72 5b 4b 76 5d 2c 72 2e 61 63 63 6f 75 6e 74 49 64 5d 5b 59 76 5d 28 73 67 5b 5a 76 5d 29 29 2c 74 26 26 73 2e 73 65 74 28 73 67 5b 65 67 5d Data Ascii: (n)?H(c,2,60,"Setting auth user context failed. User auth/account id should be of type string, and not contain commas, semi-colons, equal signs, spaces, or vertical-bars.",!0):(r[Kv]=e,e=r[Kv],n&&(r[Lv]=n,e=[r[Kv],r.accountId][Yv](sg[Zv])),t&&s.set(sg[eg]

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:31:37 UTC	644	OUT	GET /sessionimages/0.png HTTP/1.1 Host: cdn.arcticwolfsat.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://mail-donotreply.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:31:37 UTC	413	IN	HTTP/1.1 404 The specified blob does not exist. Date: Mon, 24 Mar 2025 15:31:37 GMT Content-Type: application/xml Content-Length: 215 Connection: close x-ms-request-id: 1ab38625-301e-0041-7ad1-9c733b000000 x-ms-version: 2009-09-19 x-azure-ref: 20250324T153137Z-17cccd5449blr9xfhC1EWR6mgs0000000axg00000000pt6v x-fd-int-roxy-purgeid: 82233142 X-Cache: TCP_MISS Strict-Transport-Security: max-age=3600
2025-03-24 15:31:37 UTC	215	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 31 61 62 33 38 36 32 35 2d 33 30 31 65 2d 30 30 34 31 2d 37 61 64 31 2d 39 63 37 33 33 62 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 35 2d 30 33 2d 32 34 54 31 35 3a 33 31 3a 33 37 2e 37 37 31 32 36 39 38 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:1ab38625-301e-0041-7ad1-9c733b000000Time:2025-03-24T15:31:37.7712698Z</Message></Error>

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:31:38 UTC	757	OUT	GET /favicon.ico HTTP/1.1 Host: mail-donotreply.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mail-donotreply.com/click/65b6d0e2-d9dd-417c-a2b8-70690576459e Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: TiPMix=95.1343766316205; x-ms-routing-name=self; ai_user=bcFR4GLdiVU6tetWeJNbq+\|2025-03-24T15:31:36.831Z
2025-03-24 15:31:38 UTC	261	IN	HTTP/1.1 404 Not Found Content-Length: 0 Connection: close Date: Mon, 24 Mar 2025 15:31:38 GMT Server: Microsoft-IIS/10.0 Strict-Transport-Security: max-age=3600 Request-Context: appId=cid-v1:f9583db6-1b2a-423f-ac31-5f5f20737515 X-Powered-By: ASP.NET

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:31:38 UTC	549	OUT	OPTIONS //v2/track HTTP/1.1 Host: eastus-8.in.applicationinsights.azure.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://mail-donotreply.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://mail-donotreply.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:31:38 UTC	423	IN	HTTP/1.1 204 No Content Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin,X-Requested-With,Content-Name,Content-Type,Accept,Cache-Control,Sdk-Context,X-Set-Cross-Origin-Resource-Policy,Content-Encoding Access-Control-Allow-Methods: POST Access-Control-Max-Age: 3600 Date: Mon, 24 Mar 2025 15:31:38 GMT Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:31:39 UTC	648	OUT	POST //v2/track HTTP/1.1 Host: eastus-8.in.applicationinsights.azure.com Connection: keep-alive Content-Length: 1758 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-type: application/json sec-ch-ua-mobile: ?0 Accept: / Origin: https://mail-donotreply.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mail-donotreply.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:31:39 UTC	1758	OUT	Data Raw: 5b 7b 22 74 69 6d 65 22 3a 22 32 30 32 35 2d 30 33 2d 32 34 54 31 35 3a 33 31 3a 33 36 2e 39 34 38 5a 22 2c 22 69 4b 65 79 22 3a 22 65 33 35 33 33 61 61 61 2d 31 37 31 30 2d 34 33 34 38 2d 61 33 64 39 2d 32 61 37 62 62 34 35 64 33 36 30 39 22 2c 22 6e 61 6d 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 41 70 70 6c 69 63 61 74 69 6f 6e 49 6e 73 69 67 68 74 73 2e 65 33 35 33 33 61 61 61 31 37 31 30 34 33 34 38 61 33 64 39 32 61 37 62 62 34 35 64 33 36 30 39 2e 50 61 67 65 76 69 65 77 22 2c 22 74 61 67 73 22 3a 7b 22 61 69 2e 75 73 65 72 2e 69 64 22 3a 22 62 63 46 52 34 47 4c 64 69 56 55 36 74 65 74 57 65 4a 4e 62 71 2b 22 2c 22 61 69 2e 73 65 73 73 69 6f 6e 2e 69 64 22 3a 22 32 68 78 52 52 37 6a 6f 71 76 44 4a 4a 32 54 6b 41 69 51 65 6a 4e 22 2c 22 61 69 2e 64 Data Ascii: [{"time":"2025-03-24T15:31:36.948Z","iKey":"e3533aaa-1710-4348-a3d9-2a7bb45d3609","name":"Microsoft.ApplicationInsights.e3533aaa17104348a3d92a7bb45d3609.Pageview","tags":{"ai.user.id":"bcFR4GLdiVU6tetWeJNbq+","ai.session.id":"2hxRR7joqvDJJ2TkAiQejN","ai.d
2025-03-24 15:31:39 UTC	291	IN	HTTP/1.1 200 OK Transfer-Encoding: chunked Content-Type: application/json; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Date: Mon, 24 Mar 2025 15:31:38 GMT Connection: close
2025-03-24 15:31:39 UTC	68	IN	Data Raw: 33 45 0d 0a 7b 22 69 74 65 6d 73 52 65 63 65 69 76 65 64 22 3a 32 2c 22 69 74 65 6d 73 41 63 63 65 70 74 65 64 22 3a 32 2c 22 61 70 70 49 64 22 3a 6e 75 6c 6c 2c 22 65 72 72 6f 72 73 22 3a 5b 5d 7d 0d 0a Data Ascii: 3E{"itemsReceived":2,"itemsAccepted":2,"appId":null,"errors":[]}
2025-03-24 15:31:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:31:39 UTC	1031	OUT	POST /register/65b6d0e2-d9dd-417c-a2b8-70690576459e HTTP/1.1 Host: mail-donotreply.com Connection: keep-alive Content-Length: 36 request-id: \|33aa7b25cca446f88c6f2bb5c1e6d370.ca9e9b02302d46f7 traceparent: 00-33aa7b25cca446f88c6f2bb5c1e6d370-ca9e9b02302d46f7-01 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 Accept: / Origin: https://mail-donotreply.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mail-donotreply.com/click/65b6d0e2-d9dd-417c-a2b8-70690576459e Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: TiPMix=95.1343766316205; x-ms-routing-name=self; ai_user=bcFR4GLdiVU6tetWeJNbq+\|2025-03-24T15:31:36.831Z; ai_session=2hxRR7joqvDJJ2TkAiQejN\|1742830296946\|1742830296946
2025-03-24 15:31:39 UTC	36	OUT	Data Raw: 36 35 62 36 64 30 65 32 2d 64 39 64 64 2d 34 31 37 63 2d 61 32 62 38 2d 37 30 36 39 30 35 37 36 34 35 39 65 Data Ascii: 65b6d0e2-d9dd-417c-a2b8-70690576459e
2025-03-24 15:31:40 UTC	269	IN	HTTP/1.1 200 OK Connection: close Content-Type: application/json; charset=utf-8 Date: Mon, 24 Mar 2025 15:31:39 GMT Server: Microsoft-IIS/10.0 Transfer-Encoding: chunked Request-Context: appId=cid-v1:f9583db6-1b2a-423f-ac31-5f5f20737515 X-Powered-By: ASP.NET
2025-03-24 15:31:40 UTC	44	IN	Data Raw: 32 36 0d 0a 22 66 62 37 64 39 64 62 64 2d 32 35 34 64 2d 34 39 39 64 2d 38 32 35 36 2d 31 35 39 36 61 62 61 30 62 32 63 61 22 0d 0a Data Ascii: 26"fb7d9dbd-254d-499d-8256-1596aba0b2ca"
2025-03-24 15:31:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:31:39 UTC	414	OUT	GET //v2/track HTTP/1.1 Host: eastus-8.in.applicationinsights.azure.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:31:40 UTC	232	IN	HTTP/1.1 405 Method Not Allowed Allow: POST Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Date: Mon, 24 Mar 2025 15:31:39 GMT Connection: close

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1120552
Entropy (8bit):	4.799028996726421
Encrypted:	false
SSDEEP:	12288:hZNQ2YLelkT+i/nwch5+PDvRsoQ8BATKFk/kpEKwFM0CTAv5Nps:hZNJe+i/nH0VTAv5Nps
MD5:	E372629D59F6F0BB3D842CB2971F713A
SHA1:	58B0F4BC43CD8582772BFC42F6D4DFA0E47BBE25
SHA-256:	B03906B18375220B66E6864C04E8C2657A0C0DAF7BA00C3DAF453DA7C3F08533
SHA-512:	8B825A7458F6303C22D9C84F5EB5AA880FE575B59CAD31BC8227352E5CAA8E8DEA88281CAA7016ED101A1B7E109FB1A08B93AA7B91230B12825B2FB4424A69EF
Malicious:	false
Reputation:	low
URL:	https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/lms/scormdriver.js
Preview:	.var VERSION = "7.7.0";..var PREFERENCE_DEFAULT = 0;.var PREFERENCE_OFF = -1;.var PREFERENCE_ON = 1;..var LESSON_STATUS_PASSED = 1; //the user completed the content with a score sufficient to pass.var LESSON_STATUS_COMPLETED = 2; //the user completed the content.var LESSON_STATUS_FAILED = 3; //the user completed the content but his/her score was not sufficient to pass.var LESSON_STATUS_INCOMPLETE = 4; //the user began the content but did not complete it.var LESSON_STATUS_BROWSED = 5; //the user looked at the content but was not making a recorded attempt at it.var LESSON_STATUS_NOT_ATTEMPTED = 6; //the user has not started the content..var ENTRY_REVIEW = 1;.var ENTRY_FIRST_TIME = 2;.var ENTRY_RESUME = 3;..var MODE_NORMAL = 1;.var MODE_BROWSE = 2;.var MODE_REVIEW = 3;..var MAX_CMI_TIME = 36002439990; //max CMI Timespan 9999:99:99.99..var NO_ERROR = 0;.var ERROR_LMS = 1;.var ERROR_INVALID_PREFERENCE = 2;.var ERROR_INVALID_NUMBE

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:31:40 UTC	605	OUT	GET /register/65b6d0e2-d9dd-417c-a2b8-70690576459e HTTP/1.1 Host: mail-donotreply.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: TiPMix=95.1343766316205; x-ms-routing-name=self; ai_user=bcFR4GLdiVU6tetWeJNbq+\|2025-03-24T15:31:36.831Z; ai_session=2hxRR7joqvDJJ2TkAiQejN\|1742830296946\|1742830296946
2025-03-24 15:31:40 UTC	269	IN	HTTP/1.1 200 OK Connection: close Content-Type: application/json; charset=utf-8 Date: Mon, 24 Mar 2025 15:31:40 GMT Server: Microsoft-IIS/10.0 Transfer-Encoding: chunked Request-Context: appId=cid-v1:f9583db6-1b2a-423f-ac31-5f5f20737515 X-Powered-By: ASP.NET
2025-03-24 15:31:40 UTC	44	IN	Data Raw: 32 36 0d 0a 22 66 62 37 64 39 64 62 64 2d 32 35 34 64 2d 34 39 39 64 2d 38 32 35 36 2d 31 35 39 36 61 62 61 30 62 32 63 61 22 0d 0a Data Ascii: 26"fb7d9dbd-254d-499d-8256-1596aba0b2ca"
2025-03-24 15:31:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:31:46 UTC	1031	OUT	POST /register/65b6d0e2-d9dd-417c-a2b8-70690576459e HTTP/1.1 Host: mail-donotreply.com Connection: keep-alive Content-Length: 36 request-id: \|33aa7b25cca446f88c6f2bb5c1e6d370.08e0cf30f5bf48ba traceparent: 00-33aa7b25cca446f88c6f2bb5c1e6d370-08e0cf30f5bf48ba-01 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 Accept: / Origin: https://mail-donotreply.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mail-donotreply.com/click/65b6d0e2-d9dd-417c-a2b8-70690576459e Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: TiPMix=95.1343766316205; x-ms-routing-name=self; ai_user=bcFR4GLdiVU6tetWeJNbq+\|2025-03-24T15:31:36.831Z; ai_session=2hxRR7joqvDJJ2TkAiQejN\|1742830296946\|1742830296946
2025-03-24 15:31:46 UTC	36	OUT	Data Raw: 36 35 62 36 64 30 65 32 2d 64 39 64 64 2d 34 31 37 63 2d 61 32 62 38 2d 37 30 36 39 30 35 37 36 34 35 39 65 Data Ascii: 65b6d0e2-d9dd-417c-a2b8-70690576459e
2025-03-24 15:31:46 UTC	269	IN	HTTP/1.1 200 OK Connection: close Content-Type: application/json; charset=utf-8 Date: Mon, 24 Mar 2025 15:31:46 GMT Server: Microsoft-IIS/10.0 Transfer-Encoding: chunked Request-Context: appId=cid-v1:f9583db6-1b2a-423f-ac31-5f5f20737515 X-Powered-By: ASP.NET
2025-03-24 15:31:46 UTC	44	IN	Data Raw: 32 36 0d 0a 22 66 62 37 64 39 64 62 64 2d 32 35 34 64 2d 34 39 39 64 2d 38 32 35 36 2d 31 35 39 36 61 62 61 30 62 32 63 61 22 0d 0a Data Ascii: 26"fb7d9dbd-254d-499d-8256-1596aba0b2ca"
2025-03-24 15:31:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:31:47 UTC	983	OUT	GET /runtime/fb7d9dbd-254d-499d-8256-1596aba0b2ca/true HTTP/1.1 Host: mail-donotreply.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://mail-donotreply.com/click/65b6d0e2-d9dd-417c-a2b8-70690576459e Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: TiPMix=95.1343766316205; x-ms-routing-name=self; ai_user=bcFR4GLdiVU6tetWeJNbq+\|2025-03-24T15:31:36.831Z; ai_session=2hxRR7joqvDJJ2TkAiQejN\|1742830296946\|1742830296946
2025-03-24 15:31:47 UTC	627	IN	HTTP/1.1 302 Found Content-Length: 0 Connection: close Date: Mon, 24 Mar 2025 15:31:47 GMT Server: Microsoft-IIS/10.0 Location: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={"_ObjectType":"Agent","Name":"Xew23QWRT QztrgYunm","Account":{"HomePage":null,"Name":"zwqeuhgf@dhrgt.com","HashString":null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=true Request-Context: appId=cid-v1:f9583db6-1b2a-423f-ac31-5f5f20737515 X-Powered-By: ASP.NET

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:31:48 UTC	1123	OUT	GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=true HTTP/1.1 Host: cdn.arcticwolfsat.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://mail-donotreply.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:31:49 UTC	549	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 15:31:48 GMT Content-Type: text/html Content-Length: 21056 Connection: close Vary: Accept-Encoding Last-Modified: Thu, 23 Jan 2025 14:49:04 GMT ETag: 0x8DD3BBD150AAB00 x-ms-request-id: 0d7f2ca7-f01e-0003-0dd1-9ccabb000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20250324T153148Z-17cccd5449bqnwr7hC1EWRa6600000000b4g000000001wu1 x-fd-int-roxy-purgeid: 82233142 X-Cache: TCP_MISS Strict-Transport-Security: max-age=3600 Accept-Ranges: bytes
2025-03-24 15:31:49 UTC	15835	IN	Data Raw: ef bb bf 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 20 20 3c 21 2d 2d 20 43 72 65 61 74 65 64 20 75 73 69 6e 67 20 53 74 6f 72 79 6c 69 6e 65 20 33 36 30 20 78 36 34 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 72 74 69 63 75 6c 61 74 65 2e 63 6f 6d 20 20 2d 2d 3e 0d 0a 20 20 3c 21 2d 2d 20 76 65 72 73 69 6f 6e 3a 20 33 2e 39 36 2e 33 33 38 31 35 2e 30 20 2d 2d 3e 0d 0a 20 20 3c 74 69 74 6c 65 3e 41 72 63 74 69 63 20 57 6f 6c 66 20 4d 61 6e 61 67 65 64 20 53 65 63 75 72 69 74 79 20 41 77 61 72 65 6e 65 73 73 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 Data Ascii: <!doctype html><html lang="en-US"><head> <meta charset="utf-8"> ... Created using Storyline 360 x64 - http://www.articulate.com --> ... version: 3.96.33815.0 --> <title>Arctic Wolf Managed Security Awareness</title> <meta http-equ
2025-03-24 15:31:49 UTC	5221	IN	Data Raw: 6e 6e 65 63 74 69 6f 6e 4d 65 73 73 61 67 65 73 29 20 7b 20 72 65 74 75 72 6e 3b 20 7d 0d 0a 20 20 20 20 20 20 76 61 72 20 74 69 63 6b 73 20 3d 20 30 3b 0d 0a 20 20 20 20 20 20 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 63 68 65 63 6b 4c 6f 61 64 65 64 49 64 29 3b 0d 0a 20 20 20 20 20 20 63 68 65 63 6b 4c 6f 61 64 65 64 49 64 20 3d 20 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 6c 6f 61 64 65 64 20 3d 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 61 73 73 65 74 43 6f 75 6e 74 20 3d 3d 3d 20 30 20 26 26 20 6c 6f 61 64 65 64 20 3d 3d 3d 20 30 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 63 68 65 63 6b 4c 6f 61 64 65 64 49 64 29 3b 0d 0a 20 20 Data Ascii: nnectionMessages) { return; } var ticks = 0; clearInterval(checkLoadedId); checkLoadedId = setInterval(function() { var loaded = 0; if (assetCount === 0 && loaded === 0) { clearInterval(checkLoadedId);

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:31:49 UTC	1030	OUT	GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/html5/data/css/output.min.css HTTP/1.1 Host: cdn.arcticwolfsat.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=true Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:31:49 UTC	542	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 15:31:49 GMT Content-Type: text/css Content-Length: 535965 Connection: close Vary: Accept-Encoding Last-Modified: Thu, 23 Jan 2025 14:49:04 GMT ETag: 0x8DD3BBD15293429 x-ms-request-id: 0d7f2f06-f01e-0003-4bd1-9ccabb000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20250324T153149Z-17cccd5449bg7c4bhC1EWR84740000000b300000000060a3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Strict-Transport-Security: max-age=3600 Accept-Ranges: bytes
2025-03-24 15:31:49 UTC	15842	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4c 61 74 6f 42 6f 6c 64 20 43 68 61 72 73 65 74 31 5f 20 42 6f 6c 64 31 33 42 35 41 36 31 45 27 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 66 6f 6e 74 2d 77 6f 66 66 3b 62 61 73 65 36 34 2c 64 30 39 47 52 67 41 42 41 41 41 41 41 43 54 34 41 41 38 41 41 41 41 41 54 78 67 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 42 50 55 79 38 79 41 41 41 42 57 41 41 41 41 46 73 41 41 41 42 67 32 75 65 74 6b 47 4e 74 59 58 41 41 41 41 47 30 41 41 41 41 61 77 41 41 41 52 54 70 36 4f 73 76 59 33 5a 30 49 41 41 41 41 69 41 41 41 41 41 72 41 41 41 41 4c 67 66 49 47 61 42 6d 63 47 64 74 41 41 Data Ascii: @font-face { font-family: 'LatoBold Charset1_ Bold13B5A61E'; src: url('data:application/font-woff;base64,d09GRgABAAAAACT4AA8AAAAATxgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABPUy8yAAABWAAAAFsAAABg2uetkGNtYXAAAAG0AAAAawAAARTp6OsvY3Z0IAAAAiAAAAArAAAALgfIGaBmcGdtAA
2025-03-24 15:31:49 UTC	16384	IN	Data Raw: 33 47 49 75 2b 35 53 56 6b 54 33 36 49 2b 5a 38 35 4c 7a 31 67 43 6e 6a 70 6f 78 43 52 68 55 51 59 6f 59 6c 34 75 51 78 61 70 59 74 68 79 41 54 30 57 51 4e 69 4b 70 69 6b 7a 64 67 71 51 51 55 69 6c 30 34 6b 59 46 35 6c 62 4e 57 30 48 79 59 48 6e 61 71 4e 70 76 6d 78 48 39 72 43 77 58 4f 58 53 57 6b 72 76 70 7a 6f 5a 79 2f 62 71 50 30 36 72 6c 41 71 41 33 2f 67 34 6a 74 76 63 46 51 4d 55 42 66 39 64 6b 57 4a 6c 6c 59 7a 66 73 58 33 38 6a 6c 36 4a 6c 41 51 58 33 77 46 32 48 4f 35 6c 75 63 52 55 33 75 68 48 37 67 54 6b 4d 58 61 67 35 4e 39 53 6f 4f 6d 39 57 43 55 59 73 37 46 36 53 43 53 5a 65 52 61 71 52 42 6c 32 78 4d 38 36 68 54 4d 37 64 49 67 36 45 51 58 79 43 77 78 6b 6c 5a 4e 75 46 6a 6e 41 5a 72 47 58 67 6e 51 31 6c 44 77 35 44 4a 42 68 43 45 79 42 4d Data Ascii: 3GIu+5SVkT36I+Z85Lz1gCnjpoxCRhUQYoYl4uQxapYthyAT0WQNiKpikzdgqQQUil04kYF5lbNW0HyYHnaqNpvmxH9rCwXOXSWkrvpzoZy/bqP06rlAqA3/g4jtvcFQMUBf9dkWJllYzfsX38jl6JlAQX3wF2HO5lucRU3uhH7gTkMXag5N9SoOm9WCUYs7F6SCSZeRaqRBl2xM86hTM7dIg6EQXyCwxklZNuFjnAZrGXgnQ1lDw5DJBhCEyBM
2025-03-24 15:31:50 UTC	16384	IN	Data Raw: 4e 67 33 70 2f 4c 76 4b 61 6d 50 37 70 34 41 61 45 69 4d 78 36 61 42 70 32 35 62 75 51 37 68 51 30 30 46 58 44 31 45 4d 7a 56 67 35 44 67 38 52 65 2b 57 51 58 67 74 52 71 67 33 51 6e 33 73 31 71 58 47 4c 6d 50 59 67 5a 77 50 78 67 36 63 6a 30 50 4f 49 49 52 6d 50 55 39 37 30 46 58 54 50 6d 7a 5a 6f 4d 34 69 2f 6f 73 77 45 74 4d 4d 4b 6e 6c 56 31 6b 77 4e 6a 36 63 67 74 4a 42 35 68 4d 61 34 67 61 50 46 73 76 47 44 6c 46 6e 7a 33 56 67 76 44 64 4d 6d 38 34 77 6d 78 6b 6f 44 31 54 70 37 6d 4d 4e 73 33 48 30 2f 66 71 6e 67 37 46 32 6a 58 50 34 6a 54 34 71 6b 33 46 5a 41 54 74 6d 62 67 6b 4b 33 36 69 74 4b 70 77 61 75 32 6c 7a 34 59 30 37 51 59 55 54 4a 79 32 66 4e 43 39 66 45 78 79 7a 61 57 76 78 62 5a 46 55 57 6d 51 72 53 5a 6f 56 4f 6c 31 6b 50 32 4a 54 54 Data Ascii: Ng3p/LvKamP7p4AaEiMx6aBp25buQ7hQ00FXD1EMzVg5Dg8Re+WQXgtRqg3Qn3s1qXGLmPYgZwPxg6cj0POIIRmPU970FXTPmzZoM4i/oswEtMMKnlV1kwNj6cgtJB5hMa4gaPFsvGDlFnz3VgvDdMm84wmxkoD1Tp7mMNs3H0/fqng7F2jXP4jT4qk3FZATtmbgkK36itKpwau2lz4Y07QYUTJy2fNC9fExyzaWvxbZFUWmQrSZoVOl1kP2JTT
2025-03-24 15:31:50 UTC	16384	IN	Data Raw: 69 51 68 58 69 41 79 56 74 43 47 62 4a 55 42 4a 52 68 53 37 7a 35 30 45 4c 68 33 68 75 68 48 33 7a 5a 67 37 44 55 71 42 4b 43 38 5a 7a 68 4f 6d 69 64 45 76 5a 42 51 61 4f 7a 74 71 70 2b 32 4d 6e 55 2b 4d 4a 38 7a 51 49 4e 52 7a 59 46 36 43 4e 32 4f 77 46 33 6c 6a 33 44 42 44 36 4e 7a 51 36 4a 37 52 44 54 4f 32 47 58 46 30 77 57 46 48 2f 68 39 75 6e 54 6d 32 74 65 32 2b 79 44 4f 49 36 53 38 4d 4c 64 4d 76 33 6f 6c 38 51 71 35 74 71 6d 53 4a 49 70 78 64 4e 4c 50 44 47 2f 4a 65 2b 65 76 49 6e 4f 53 56 49 64 54 37 34 6e 4f 4c 66 46 63 50 78 53 38 73 49 49 58 69 66 4d 63 46 55 38 68 57 5a 7a 30 70 4f 66 34 45 31 74 78 38 36 45 5a 66 49 68 6c 7a 73 39 44 6b 49 57 48 36 76 4f 61 73 4a 34 62 41 50 45 52 31 50 33 67 78 53 30 55 7a 73 50 62 4c 76 72 58 50 59 49 30 Data Ascii: iQhXiAyVtCGbJUBJRhS7z50ELh3huhH3zZg7DUqBKC8ZzhOmidEvZBQaOztqp+2MnU+MJ8zQINRzYF6CN2OwF3lj3DBD6NzQ6J7RDTO2GXF0wWFH/h9unTm2te2+yDOI6S8MLdMv3ol8Qq5tqmSJIpxdNLPDG/Je+evInOSVIdT74nOLfFcPxS8sIIXifMcFU8hWZz0pOf4E1tx86EZfIhlzs9DkIWH6vOasJ4bAPER1P3gxS0UzsPbLvrXPYI0
2025-03-24 15:31:50 UTC	16384	IN	Data Raw: 41 41 39 45 41 5a 67 49 53 43 41 55 43 43 77 59 45 41 67 49 43 41 67 49 45 34 41 41 75 2f 38 41 41 65 46 73 41 41 41 41 4a 41 41 41 41 41 46 52 4e 51 79 41 41 51 41 41 69 42 6b 41 46 30 2f 35 52 41 54 4d 48 50 67 47 79 51 41 41 42 2f 2f 2f 2f 41 41 41 45 4a 67 57 37 41 41 41 41 49 41 41 56 65 4e 70 6a 59 47 52 67 38 47 58 61 72 38 52 6b 79 61 4c 47 77 4f 42 77 69 33 55 58 6b 4b 2f 67 57 4a 53 5a 6d 4b 4d 41 41 2f 2b 42 67 4d 48 2b 2f 7a 2f 48 49 4a 38 67 41 77 4f 67 4b 67 59 41 57 2b 6b 4f 37 33 6a 61 37 64 5a 56 62 42 5a 57 41 49 62 68 74 32 74 49 43 6b 57 47 44 52 38 36 59 44 42 73 75 4f 76 51 59 63 4f 47 44 68 30 32 33 48 33 59 30 4f 45 36 64 4e 68 77 39 79 45 64 58 73 48 61 55 71 50 36 2f 30 56 4b 69 37 75 65 66 54 73 58 43 30 76 54 70 4c 74 59 46 70 Data Ascii: AA9EAZgISCAUCCwYEAgICAgIE4AAu/8AAeFsAAAAJAAAAAFRNQyAAQAAiBkAF0/5RATMHPgGyQAAB////AAAEJgW7AAAAIAAVeNpjYGRg8GXar8RkyaLGwOBwi3UXkK/gWJSZmKMAA/+BgMH+/z/HIJ8gAwOgKgYAW+kO73ja7dZVbBZWAIbht2tICkWGDR86YDBsuOvQYcOGDh023H3Y0OE6dNhw9yEdXsHaUqP6/0VKi7uefTsXC0vTpLtYFp
2025-03-24 15:31:50 UTC	16384	IN	Data Raw: 4b 56 36 69 42 70 57 5a 35 74 35 48 67 7a 5a 7a 36 69 69 73 4f 56 32 54 6d 44 67 66 50 63 4e 49 42 4a 64 54 44 6d 35 6d 6c 53 39 2b 74 53 4c 75 57 35 57 41 78 6e 6b 73 6e 69 78 67 41 2f 63 55 72 59 73 6b 57 76 4d 45 57 45 76 4f 55 2b 54 55 71 4f 57 6e 64 50 7a 48 55 62 2f 72 4a 7a 69 47 76 6c 55 71 4f 78 2f 5a 56 68 38 4e 49 42 79 33 47 6f 67 57 68 67 71 47 4c 46 4d 79 36 67 77 6d 76 38 6f 35 61 43 76 64 38 72 44 74 30 6f 66 70 2b 2b 36 33 39 39 68 74 73 58 56 34 70 39 77 4b 55 34 63 4d 54 73 36 41 6a 59 6f 58 78 46 48 36 79 53 73 35 33 4c 6e 57 2b 34 58 44 30 35 5a 67 74 4f 68 67 6b 55 41 38 47 6b 79 6c 48 50 53 56 56 31 32 45 6e 61 2f 78 30 6f 62 63 72 31 64 6a 42 69 37 6f 53 45 68 4e 4b 33 42 56 34 78 49 75 61 6f 70 6d 79 61 36 4d 51 46 35 61 53 63 6b Data Ascii: KV6iBpWZ5t5HgzZz6iisOV2TmDgfPcNIBJdTDm5mlS9+tSLuW5WAxnksnixgA/cUrYskWvMEWEvOU+TUqOWndPzHUb/rJziGvlUqOx/ZVh8NIBy3GogWhgqGLFMy6gwmv8o5aCvd8rDt0ofp++6399htsXV4p9wKU4cMTs6AjYoXxFH6ySs53LnW+4XD05ZgtOhgkUA8GkylHPSVV12Ena/x0obcr1djBi7oSEhNK3BV4xIuaopmya6MQF5aSck
2025-03-24 15:31:50 UTC	16384	IN	Data Raw: 6c 64 6c 6a 71 43 2b 52 50 75 49 52 37 76 47 5a 70 47 39 54 52 56 48 5a 2f 47 30 32 51 71 4d 50 55 46 5a 6f 32 71 57 47 70 69 73 59 6d 6a 7a 4e 6f 73 4d 4d 63 78 37 65 35 52 66 57 33 57 38 31 72 46 65 4f 36 55 43 49 71 75 35 54 32 51 59 2f 57 61 6a 6a 69 2f 38 4c 31 6a 45 6d 37 58 39 36 50 36 76 6a 7a 4e 37 77 50 31 62 76 79 4e 75 53 39 35 6e 34 57 2b 51 6d 6e 61 52 70 54 71 36 2f 49 76 78 35 49 35 31 67 61 79 57 44 35 68 48 50 48 6c 50 5a 6d 70 6a 6b 4d 35 50 49 5a 74 37 6b 66 31 44 4a 6c 4c 5a 54 54 51 50 45 4e 4b 76 44 36 36 33 33 38 7a 33 6d 37 2b 68 6b 2b 6f 50 58 72 31 31 34 52 32 38 7a 75 73 41 64 50 35 44 56 59 6f 74 71 50 4d 71 65 59 63 6c 6d 4a 6d 53 68 72 53 37 52 4f 59 71 64 61 70 58 71 38 7a 2b 45 31 4c 6f 67 53 6a 37 54 56 49 56 54 47 56 5a Data Ascii: ldljqC+RPuIR7vGZpG9TRVHZ/G02QqMPUFZo2qWGpisYmjzNosMMcx7e5RfW3W81rFeO6UCIqu5T2QY/Wajji/8L1jEm7X96P6vjzN7wP1bvyNuS95n4W+QmnaRpTq6/Ivx5I51gayWD5hHPHlPZmpjkM5PIZt7kf1DJlLZTTQPENKvD66338z3m7+hk+oPXr114R28zusAdP5DVYotqPMqeYclmJmShrS7ROYqdapXq8z+E1LogSj7TVIVTGVZ
2025-03-24 15:31:50 UTC	16384	IN	Data Raw: 75 72 55 48 33 56 2b 33 44 6b 61 65 36 41 48 44 64 65 76 51 2f 5a 37 41 4a 43 65 6e 70 4d 43 41 5a 50 7a 37 36 66 56 36 55 6c 7a 58 7a 6c 65 36 78 6f 33 72 65 6d 56 6e 56 78 79 57 64 78 59 6a 2f 67 70 62 72 34 30 65 73 51 50 62 38 2f 32 32 46 66 6e 42 2b 32 43 68 74 61 41 46 54 4f 58 2b 41 46 64 75 31 55 4d 6c 6c 4b 46 74 32 48 74 6c 65 4e 33 68 33 36 33 65 63 32 46 50 63 49 4a 38 64 6d 76 2b 38 52 69 76 56 52 76 44 49 52 77 69 33 55 75 53 30 53 57 4b 7a 50 71 64 36 6a 30 46 2b 32 48 50 48 36 37 65 70 4f 47 4d 54 77 71 79 72 78 5a 74 61 57 7a 59 6f 62 6d 78 6f 57 62 6d 69 6f 77 7a 53 61 72 6d 74 6d 6a 63 4e 33 68 73 57 4c 52 31 33 33 72 30 32 66 4e 57 62 7a 6d 75 33 69 4f 65 57 72 33 6c 75 4c 31 76 51 58 46 75 31 4f 78 6e 56 2b 39 47 72 50 2b 70 35 36 6e Data Ascii: urUH3V+3Dkae6AHDdevQ/Z7AJCenpMCAZPz76fV6UlzXzle6xo3remVnVxyWdxYj/gpbr40esQPb8/22FfnB+2ChtaAFTOX+AFdu1UMllKFt2HtleN3h363ec2FPcIJ8dmv+8RivVRvDIRwi3UuS0SWKzPqd6j0F+2HPH67epOGMTwqyrxZtaWzYobmxoWbmiowzSarmtmjcN3hsWLR133r02fNWbzmu3iOeWr3luL1vQXFu1OxnV+9GrP+p56n
2025-03-24 15:31:50 UTC	16384	IN	Data Raw: 63 65 31 4a 58 48 73 53 70 30 2f 6d 63 6c 59 6e 50 61 6e 39 58 44 4c 50 53 58 55 4f 39 33 4d 79 70 31 6e 4b 35 53 7a 6c 6b 56 31 71 59 6c 61 79 79 30 2f 42 4b 5a 63 6d 5a 32 69 58 79 31 2f 4b 4d 33 41 70 39 38 50 53 70 4e 73 31 35 2f 44 54 4c 65 57 78 33 73 67 74 6d 63 74 50 39 41 7a 33 35 7a 4f 36 66 4c 68 6c 37 4f 71 5a 2b 51 79 6e 75 5a 4a 4c 6d 38 75 31 7a 2b 58 61 35 33 4a 66 44 65 59 32 7a 4f 58 61 35 33 4c 74 63 33 56 64 46 76 65 53 37 4d 37 78 33 57 30 2f 6c 39 43 64 78 35 46 5a 53 4c 61 33 56 32 6a 69 68 37 77 65 4c 32 54 2f 63 66 62 6e 73 7a 75 4a 59 37 52 65 2b 4b 57 39 63 68 4f 6e 61 4e 64 36 6e 66 33 76 63 35 70 45 39 6c 2b 6c 30 37 43 32 6d 73 44 50 38 71 5a 4f 6f 39 37 55 38 57 6f 2f 31 31 4c 46 75 61 72 59 2f 7a 7a 37 64 7a 41 76 50 63 39 Data Ascii: ce1JXHsSp0/mclYnPan9XDLPSXUO93Myp1nK5SzlkV1qYlayy0/BKZcmZ2iXy1/KM3Ap98PSpNs15/DTLeWx3sgtmctP9Az35zO6fLhl7OqZ+QynuZJLm8u1z+Xa53JfDeY2zOXa53Ltc3VdFveS7M7x3W0/l9Cdx5FZSLa3V2jih7weL2T/cfbnszuJY7Re+KW9chOnaNd6nf3vc5pE9l+l07C2msDP8qZOo97U8Wo/11LFuarY/zz7dzAvPc9
2025-03-24 15:31:50 UTC	16384	IN	Data Raw: 46 50 35 32 52 36 78 49 51 45 4f 6a 6a 4b 48 2f 48 31 53 4e 71 52 66 58 36 67 77 52 37 78 38 4a 6d 4c 4d 4e 46 32 55 59 75 32 67 76 71 4f 59 61 76 79 57 2f 52 39 65 56 55 32 44 67 59 2f 4a 4c 2b 44 4e 50 54 6d 4d 76 4d 43 64 6d 59 71 56 72 5a 77 30 78 6b 33 4c 64 48 45 42 45 66 7a 72 51 63 7a 5a 35 55 66 6a 48 4d 62 38 53 49 38 41 43 48 31 4b 54 36 35 72 43 4c 37 78 38 38 6c 54 6a 35 46 54 39 50 50 33 57 49 79 6a 5a 39 54 4d 4d 71 62 64 36 52 44 62 71 36 55 57 50 6d 79 6b 66 4a 45 70 30 39 2f 44 31 64 62 4a 57 75 45 6b 58 70 50 4e 33 43 74 6d 56 31 38 51 74 38 6b 75 58 52 4c 73 50 64 50 42 78 6c 43 71 57 64 73 6d 42 47 59 6d 62 54 47 4f 79 64 45 56 6d 6d 62 7a 46 70 2b 76 6a 48 39 4f 45 39 63 35 55 70 37 53 4d 66 30 7a 63 56 51 73 4b 72 2f 66 78 4c 56 54 Data Ascii: FP52R6xIQEOjjKH/H1SNqRfX6gwR7x8JmLMNF2UYu2gvqOYavyW/R9eVU2DgY/JL+DNPTmMvMCdmYqVrZw0xk3LdHEBEfzrQczZ5UfjHMb8SI8ACH1KT65rCL7x88lTj5FT9PP3WIyjZ9TMMqbd6RDbq6UWPmykfJEp09/D1dbJWuEkXpPN3CtmV18Qt8kuXRLsPdPBxlCqWdsmBGYmbTGOydEVmmbzFp+vjH9OE9c5Up7SMf0zcVQsKr/fxLVT

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:31:49 UTC	1005	OUT	GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/lms/scormdriver.js HTTP/1.1 Host: cdn.arcticwolfsat.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=true Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:31:50 UTC	557	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 15:31:49 GMT Content-Type: application/javascript Content-Length: 1120552 Connection: close Vary: Accept-Encoding Last-Modified: Thu, 23 Jan 2025 14:49:04 GMT ETag: 0x8DD3BBD15322AC5 x-ms-request-id: 8cbe5b55-501e-0078-70d1-9c8827000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20250324T153149Z-17cccd5449bhkn97hC1EWRp7ew0000000b20000000009k2x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Strict-Transport-Security: max-age=3600 Accept-Ranges: bytes
2025-03-24 15:31:50 UTC	15827	IN	Data Raw: 0a 76 61 72 20 56 45 52 53 49 4f 4e 20 3d 20 22 37 2e 37 2e 30 22 3b 0a 0a 76 61 72 20 50 52 45 46 45 52 45 4e 43 45 5f 44 45 46 41 55 4c 54 20 3d 20 30 3b 0a 76 61 72 20 50 52 45 46 45 52 45 4e 43 45 5f 4f 46 46 20 20 20 20 20 3d 20 2d 31 3b 0a 76 61 72 20 50 52 45 46 45 52 45 4e 43 45 5f 4f 4e 20 20 20 20 20 20 3d 20 31 3b 0a 0a 76 61 72 20 4c 45 53 53 4f 4e 5f 53 54 41 54 55 53 5f 50 41 53 53 45 44 20 20 20 20 20 20 20 20 3d 20 31 3b 20 20 20 20 2f 2f 74 68 65 20 75 73 65 72 20 63 6f 6d 70 6c 65 74 65 64 20 74 68 65 20 63 6f 6e 74 65 6e 74 20 77 69 74 68 20 61 20 73 63 6f 72 65 20 73 75 66 66 69 63 69 65 6e 74 20 74 6f 20 70 61 73 73 0a 76 61 72 20 4c 45 53 53 4f 4e 5f 53 54 41 54 55 53 5f 43 4f 4d 50 4c 45 54 45 44 20 20 20 20 20 3d 20 32 3b 20 20 20 Data Ascii: var VERSION = "7.7.0";var PREFERENCE_DEFAULT = 0;var PREFERENCE_OFF = -1;var PREFERENCE_ON = 1;var LESSON_STATUS_PASSED = 1; //the user completed the content with a score sufficient to passvar LESSON_STATUS_COMPLETED = 2;
2025-03-24 15:31:50 UTC	16384	IN	Data Raw: 65 6c 76 65 73 20 6f 75 74 0a 20 20 20 20 69 66 20 28 21 20 49 73 56 61 6c 69 64 43 4d 49 54 69 6d 65 53 70 61 6e 28 73 74 72 54 69 6d 65 29 29 7b 0a 20 20 20 20 20 20 20 20 57 72 69 74 65 54 6f 44 65 62 75 67 28 22 45 52 52 4f 52 20 2d 20 49 6e 76 61 6c 69 64 20 54 69 6d 65 53 70 61 6e 22 29 3b 0a 20 20 20 20 20 20 20 20 53 65 74 45 72 72 6f 72 49 6e 66 6f 28 53 43 4f 52 4d 5f 45 52 52 4f 52 5f 47 45 4e 45 52 41 4c 2c 20 22 4c 4d 53 20 45 52 52 4f 52 20 2d 20 49 6e 76 61 6c 69 64 20 74 69 6d 65 20 73 70 61 6e 20 70 61 73 73 65 64 20 74 6f 20 43 6f 6e 76 65 72 74 43 4d 49 54 69 6d 65 53 70 61 6e 54 6f 4d 53 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 65 63 68 6e 69 63 61 6c 20 73 75 70 70 6f 72 74 22 29 3b 0a 20 20 20 20 20 20 20 20 72 65 74 75 Data Ascii: elves out if (! IsValidCMITimeSpan(strTime)){ WriteToDebug("ERROR - Invalid TimeSpan"); SetErrorInfo(SCORM_ERROR_GENERAL, "LMS ERROR - Invalid time span passed to ConvertCMITimeSpanToMS, please contact technical support"); retu
2025-03-24 15:31:50 UTC	16384	IN	Data Raw: 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 69 66 20 28 73 74 72 4d 61 78 2e 6c 65 6e 67 74 68 20 3e 20 30 20 26 26 20 21 49 73 56 61 6c 69 64 44 65 63 69 6d 61 6c 28 73 74 72 4d 61 78 29 29 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 57 72 69 74 65 54 6f 44 65 62 75 67 28 22 52 65 74 75 72 6e 69 6e 67 20 46 61 6c 73 65 20 2d 20 6d 61 78 20 76 61 6c 75 65 20 73 75 70 70 6c 69 65 64 20 66 6f 72 20 72 61 6e 67 65 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 64 65 63 69 6d 61 6c 2c 20 6d 61 78 3d 22 20 2b 20 73 74 72 4d 61 78 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2f 2f 6d Data Ascii: return false; } if (strMax.length > 0 && !IsValidDecimal(strMax)) { WriteToDebug("Returning False - max value supplied for range is not a valid decimal, max=" + strMax); return false; } //m
2025-03-24 15:31:50 UTC	16384	IN	Data Raw: 65 22 29 3b 0a 20 20 20 20 53 43 4f 52 4d 32 30 30 34 5f 43 6c 65 61 72 45 72 72 6f 72 49 6e 66 6f 28 29 3b 0a 20 20 20 20 72 65 74 75 72 6e 20 53 43 4f 52 4d 32 30 30 34 5f 43 61 6c 6c 47 65 74 56 61 6c 75 65 28 22 63 6d 69 2e 6c 65 61 72 6e 65 72 5f 6e 61 6d 65 22 29 3b 0a 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 53 43 4f 52 4d 32 30 30 34 5f 47 65 74 42 6f 6f 6b 6d 61 72 6b 28 29 7b 0a 20 20 20 20 57 72 69 74 65 54 6f 44 65 62 75 67 28 22 49 6e 20 53 43 4f 52 4d 32 30 30 34 5f 47 65 74 42 6f 6f 6b 6d 61 72 6b 22 29 3b 0a 20 20 20 20 53 43 4f 52 4d 32 30 30 34 5f 43 6c 65 61 72 45 72 72 6f 72 49 6e 66 6f 28 29 3b 0a 20 20 20 20 72 65 74 75 72 6e 20 53 43 4f 52 4d 32 30 30 34 5f 43 61 6c 6c 47 65 74 56 61 6c 75 65 28 22 63 6d 69 2e 6c 6f 63 61 74 69 6f 6e Data Ascii: e"); SCORM2004_ClearErrorInfo(); return SCORM2004_CallGetValue("cmi.learner_name");}function SCORM2004_GetBookmark(){ WriteToDebug("In SCORM2004_GetBookmark"); SCORM2004_ClearErrorInfo(); return SCORM2004_CallGetValue("cmi.location
2025-03-24 15:31:50 UTC	16384	IN	Data Raw: 4e 5f 52 45 53 55 4c 54 5f 43 4f 52 52 45 43 54 29 7b 0a 20 20 20 20 20 20 20 20 73 74 72 52 65 73 75 6c 74 20 3d 20 53 43 4f 52 4d 32 30 30 34 5f 52 45 53 55 4c 54 5f 43 4f 52 52 45 43 54 3b 0a 20 20 20 20 7d 0a 20 20 20 20 65 6c 73 65 20 69 66 20 28 53 74 72 69 6e 67 28 62 6c 6e 43 6f 72 72 65 63 74 29 20 3d 3d 20 22 66 61 6c 73 65 22 20 7c 7c 20 62 6c 6e 43 6f 72 72 65 63 74 20 3d 3d 20 49 4e 54 45 52 41 43 54 49 4f 4e 5f 52 45 53 55 4c 54 5f 57 52 4f 4e 47 29 7b 20 20 20 20 20 20 2f 2f 63 6f 6d 70 61 72 65 20 61 67 61 69 6e 73 74 20 74 68 65 20 73 74 72 69 6e 67 20 22 66 61 6c 73 65 22 20 62 65 63 61 75 73 65 20 28 22 22 20 3d 3d 20 66 61 6c 73 65 29 20 65 76 61 6c 75 61 74 65 73 20 74 6f 20 74 72 75 65 0a 20 20 20 20 20 20 20 20 73 74 72 52 65 73 75 Data Ascii: N_RESULT_CORRECT){ strResult = SCORM2004_RESULT_CORRECT; } else if (String(blnCorrect) == "false" \|\| blnCorrect == INTERACTION_RESULT_WRONG){ //compare against the string "false" because ("" == false) evaluates to true strResu
2025-03-24 15:31:50 UTC	16384	IN	Data Raw: 73 6f 6e 20 6d 6f 64 65 22 29 3b 0a 20 20 20 20 20 20 20 20 53 43 4f 52 4d 32 30 30 34 5f 53 65 74 45 72 72 6f 72 49 6e 66 6f 4d 61 6e 75 61 6c 6c 79 28 53 43 4f 52 4d 32 30 30 34 5f 45 52 52 4f 52 5f 49 4e 56 41 4c 49 44 5f 4c 45 53 53 4f 4e 5f 4d 4f 44 45 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 49 6e 76 61 6c 69 64 20 6c 65 73 73 6f 6e 5f 6d 6f 64 65 20 76 6f 63 61 62 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 4c 4d 53 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 73 74 72 4c 65 73 73 6f 6e 4d 6f 64 65 3d 22 20 2b 20 73 74 72 4c 65 73 73 6f 6e 4d 6f 64 65 29 3b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 0a Data Ascii: son mode"); SCORM2004_SetErrorInfoManually(SCORM2004_ERROR_INVALID_LESSON_MODE, "Invalid lesson_mode vocab received from LMS", "strLessonMode=" + strLessonMode); return null;
2025-03-24 15:31:50 UTC	16384	IN	Data Raw: 44 65 62 75 67 28 22 49 6e 20 53 43 4f 52 4d 32 30 30 34 5f 53 65 74 50 6f 69 6e 74 42 61 73 65 64 53 63 6f 72 65 20 69 6e 74 53 63 6f 72 65 3d 22 20 2b 20 69 6e 74 53 63 6f 72 65 20 2b 20 22 2c 20 69 6e 74 4d 61 78 53 63 6f 72 65 3d 22 20 2b 20 69 6e 74 4d 61 78 53 63 6f 72 65 20 2b 20 22 2c 20 69 6e 74 4d 69 6e 53 63 6f 72 65 3d 22 20 2b 20 69 6e 74 4d 69 6e 53 63 6f 72 65 29 3b 0a 0a 20 20 20 20 53 43 4f 52 4d 32 30 30 34 5f 43 6c 65 61 72 45 72 72 6f 72 49 6e 66 6f 28 29 3b 0a 0a 20 20 20 20 69 66 28 69 6e 74 53 63 6f 72 65 20 3e 3d 20 69 6e 74 4d 69 6e 53 63 6f 72 65 29 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 66 6c 74 43 61 6c 63 75 6c 61 74 65 64 53 63 6f 72 65 20 3d 20 69 6e 74 53 63 6f 72 65 20 2f 20 69 6e 74 4d 61 78 53 63 6f 72 65 3b 0a 20 Data Ascii: Debug("In SCORM2004_SetPointBasedScore intScore=" + intScore + ", intMaxScore=" + intMaxScore + ", intMinScore=" + intMinScore); SCORM2004_ClearErrorInfo(); if(intScore >= intMinScore) { fltCalculatedScore = intScore / intMaxScore;
2025-03-24 15:31:50 UTC	16384	IN	Data Raw: 3b 0a 20 20 20 20 53 43 4f 52 4d 32 30 30 34 5f 43 6c 65 61 72 45 72 72 6f 72 49 6e 66 6f 28 29 3b 0a 20 20 20 20 2f 2f 66 69 72 73 74 20 63 68 65 63 6b 20 74 6f 20 73 65 65 20 69 66 20 69 74 20 69 73 20 61 20 63 68 6f 69 63 65 20 6e 61 76 20 72 65 71 75 65 73 74 0a 20 20 20 20 76 61 72 20 72 65 67 56 61 6c 69 64 43 68 6f 69 63 65 20 3d 20 2f 5e 5c 7b 74 61 72 67 65 74 3d 5b 2e 41 2d 5a 61 2d 7a 30 2d 39 5f 2d 5d 2b 5c 7d 63 68 6f 69 63 65 24 2f 3b 0a 20 20 20 20 69 66 20 28 73 74 72 4e 61 76 52 65 71 75 65 73 74 2e 6d 61 74 63 68 28 72 65 67 56 61 6c 69 64 43 68 6f 69 63 65 29 29 7b 0a 20 20 20 20 20 20 20 20 53 43 4f 52 4d 32 30 30 34 5f 43 61 6c 6c 53 65 74 56 61 6c 75 65 28 22 61 64 6c 2e 6e 61 76 2e 72 65 71 75 65 73 74 22 2c 73 74 72 4e 61 76 52 65 Data Ascii: ; SCORM2004_ClearErrorInfo(); //first check to see if it is a choice nav request var regValidChoice = /^\{target=[.A-Za-z0-9_-]+\}choice$/; if (strNavRequest.match(regValidChoice)){ SCORM2004_CallSetValue("adl.nav.request",strNavRe
2025-03-24 15:31:50 UTC	16384	IN	Data Raw: 65 20 4f 70 65 6e 65 72 22 29 3b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 20 20 20 20 7d 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 53 43 4f 52 4d 32 30 30 34 5f 57 69 6e 64 6f 77 48 61 73 50 61 72 65 6e 74 28 77 6e 64 29 7b 0a 20 20 20 20 57 72 69 74 65 54 6f 44 65 62 75 67 28 22 49 6e 20 53 43 4f 52 4d 32 30 30 34 5f 57 69 6e 64 6f 77 48 61 73 50 61 72 65 6e 74 22 29 3b 0a 20 20 20 20 69 66 20 28 28 77 6e 64 2e 70 61 72 65 6e 74 20 21 3d 20 6e 75 6c 6c 29 20 26 26 20 28 77 6e 64 2e 70 61 72 65 6e 74 20 21 3d 20 77 6e 64 29 20 26 26 20 28 74 79 70 65 6f 66 28 77 6e 64 2e 70 61 72 65 6e 74 29 20 21 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 29 7b 0a 20 20 20 20 20 20 20 20 57 72 69 74 65 54 6f 44 65 62 75 67 28 22 57 69 6e 64 6f 77 Data Ascii: e Opener"); return false; }}function SCORM2004_WindowHasParent(wnd){ WriteToDebug("In SCORM2004_WindowHasParent"); if ((wnd.parent != null) && (wnd.parent != wnd) && (typeof(wnd.parent) != "undefined")){ WriteToDebug("Window
2025-03-24 15:31:51 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 69 6e 74 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 20 3d 20 43 6f 6e 76 65 72 74 43 4d 49 54 69 6d 65 53 70 61 6e 54 6f 4d 53 28 73 74 72 43 4d 49 54 69 6d 65 29 3b 0a 0a 20 20 20 20 57 72 69 74 65 54 6f 44 65 62 75 67 28 22 69 6e 74 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 3d 22 20 2b 20 69 6e 74 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 29 3b 0a 0a 20 20 20 20 72 65 74 75 72 6e 20 69 6e 74 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 3b 0a 7d 0a 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 53 43 4f 52 4d 5f 44 69 73 70 6c 61 79 4d 65 73 73 61 67 65 4f 6e 54 69 6d 65 6f 75 74 28 29 7b 0a 0a 20 20 20 20 76 61 72 20 73 74 72 54 4c 41 3b 0a 0a 20 20 20 20 53 43 4f 52 4d 5f 43 6c 65 61 72 45 72 72 Data Ascii: return null; } intMilliseconds = ConvertCMITimeSpanToMS(strCMITime); WriteToDebug("intMilliseconds=" + intMilliseconds); return intMilliseconds;}function SCORM_DisplayMessageOnTimeout(){ var strTLA; SCORM_ClearErr

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:31:49 UTC	1012	OUT	GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/story_content/triggers.js HTTP/1.1 Host: cdn.arcticwolfsat.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=true Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:31:49 UTC	530	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 15:31:49 GMT Content-Type: application/javascript Content-Length: 271 Connection: close Last-Modified: Thu, 23 Jan 2025 14:49:04 GMT ETag: 0x8DD3BBD15176DD9 x-ms-request-id: a319be92-901e-0048-0cd1-9c36e8000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20250324T153149Z-17cccd5449bvftlphC1EWRsrrs0000000b1000000000cxwy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Strict-Transport-Security: max-age=3600 Accept-Ranges: bytes
2025-03-24 15:31:49 UTC	271	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 45 78 65 63 75 74 65 53 63 72 69 70 74 28 73 74 72 49 64 29 0d 0a 7b 0d 0a 20 20 73 77 69 74 63 68 20 28 73 74 72 49 64 29 0d 0a 20 20 7b 0d 0a 20 20 7d 0d 0a 7d 0d 0a 0d 0a 77 69 6e 64 6f 77 2e 49 6e 69 74 45 78 65 63 75 74 65 53 63 72 69 70 74 73 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 0d 0a 7b 0d 0a 76 61 72 20 70 6c 61 79 65 72 20 3d 20 47 65 74 50 6c 61 79 65 72 28 29 3b 0d 0a 76 61 72 20 6f 62 6a 65 63 74 20 3d 20 70 6c 61 79 65 72 2e 6f 62 6a 65 63 74 3b 0d 0a 76 61 72 20 61 64 64 54 6f 54 69 6d 65 6c 69 6e 65 20 3d 20 70 6c 61 79 65 72 2e 61 64 64 54 6f 54 69 6d 65 6c 69 6e 65 3b 0d 0a 76 61 72 20 73 65 74 56 61 72 20 3d 20 70 6c 61 79 65 72 2e 53 65 74 56 61 72 3b 0d 0a 76 61 72 20 67 65 74 56 61 72 20 3d 20 70 6c 61 79 Data Ascii: function ExecuteScript(strId){ switch (strId) { }}window.InitExecuteScripts = function(){var player = GetPlayer();var object = player.object;var addToTimeline = player.addToTimeline;var setVar = player.SetVar;var getVar = play

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:31:49 UTC	1008	OUT	GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/story_content/user.js HTTP/1.1 Host: cdn.arcticwolfsat.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=true Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:31:49 UTC	537	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 15:31:49 GMT Content-Type: application/javascript Content-Length: 201 Connection: close Last-Modified: Thu, 23 Jan 2025 14:49:04 GMT ETag: 0x8DD3BBD151A50C9 x-ms-request-id: db2dccf5-e01e-000f-7bd1-9c5db3000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20250324T153149Z-17cccd5449bxd7kxhC1EWRapns0000000ay000000000n3fm x-fd-int-roxy-purgeid: 82233142 X-Cache: TCP_MISS Strict-Transport-Security: max-age=3600 Accept-Ranges: bytes
2025-03-24 15:31:49 UTC	201	IN	Data Raw: 77 69 6e 64 6f 77 2e 49 6e 69 74 55 73 65 72 53 63 72 69 70 74 73 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 0d 0a 7b 0d 0a 76 61 72 20 70 6c 61 79 65 72 20 3d 20 47 65 74 50 6c 61 79 65 72 28 29 3b 0d 0a 76 61 72 20 6f 62 6a 65 63 74 20 3d 20 70 6c 61 79 65 72 2e 6f 62 6a 65 63 74 3b 0d 0a 76 61 72 20 61 64 64 54 6f 54 69 6d 65 6c 69 6e 65 20 3d 20 70 6c 61 79 65 72 2e 61 64 64 54 6f 54 69 6d 65 6c 69 6e 65 3b 0d 0a 76 61 72 20 73 65 74 56 61 72 20 3d 20 70 6c 61 79 65 72 2e 53 65 74 56 61 72 3b 0d 0a 76 61 72 20 67 65 74 56 61 72 20 3d 20 70 6c 61 79 65 72 2e 47 65 74 56 61 72 3b 0d 0a 7d 3b 0d 0a Data Ascii: window.InitUserScripts = function(){var player = GetPlayer();var object = player.object;var addToTimeline = player.addToTimeline;var setVar = player.SetVar;var getVar = player.GetVar;};

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:31:49 UTC	1024	OUT	GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/html5/lib/scripts/bootstrapper.min.js HTTP/1.1 Host: cdn.arcticwolfsat.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=true Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:31:50 UTC	564	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 15:31:49 GMT Content-Type: application/javascript Content-Length: 1020849 Connection: close Vary: Accept-Encoding Last-Modified: Thu, 23 Jan 2025 14:49:04 GMT ETag: 0x8DD3BBD15318F30 x-ms-request-id: 6803eace-c01e-0027-69d1-9c3c1b000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20250324T153149Z-17cccd5449bxd7kxhC1EWRapns0000000b300000000069w2 x-fd-int-roxy-purgeid: 82233142 X-Cache: TCP_MISS Strict-Transport-Security: max-age=3600 Accept-Ranges: bytes
2025-03-24 15:31:50 UTC	15820	IN	Data Raw: ef bb bf 2f 2a 21 20 64 73 2d 62 6f 6f 74 73 74 72 61 70 20 2d 20 76 31 2e 30 2e 30 2e 33 33 38 31 35 20 2d 20 32 30 32 35 2d 30 31 2d 31 38 20 30 3a 31 61 6d 20 55 54 43 0d 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 32 35 20 3b 20 4e 6f 74 20 4c 69 63 65 6e 73 65 64 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 73 5f 5f 3d 7b 39 38 34 37 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 69 2c 72 3b 69 3d 5b 6e 28 33 35 33 37 29 5d 2c 76 6f 69 64 20 30 3d 3d 3d 28 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 5b 6e 28 32 35 34 33 29 2c 6e 28 37 39 32 30 29 Data Ascii: /! ds-bootstrap - v1.0.0.33815 - 2025-01-18 0:1am UTC Copyright (c) 2025 ; Not Licensed */(function(){var __webpack_modules__={9847:function(t,e,n){var i,r;i=[n(3537)],void 0===(r=function(){Promise.resolve().then((function(){var t=[n(2543),n(7920)
2025-03-24 15:31:50 UTC	16384	IN	Data Raw: 4f 62 6a 65 63 74 22 3d 3d 3d 6e 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 28 6e 3d 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 29 3b 69 66 28 22 4d 61 70 22 3d 3d 3d 6e 7c 7c 22 53 65 74 22 3d 3d 3d 6e 29 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 74 29 3b 69 66 28 22 41 72 67 75 6d 65 6e 74 73 22 3d 3d 3d 6e 7c 7c 2f 5e 28 3f 3a 55 69 7c 49 29 6e 74 28 3f 3a 38 7c 31 36 7c 33 32 29 28 3f 3a 43 6c 61 6d 70 65 64 29 3f 41 72 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 6f 28 74 2c 65 29 7d 28 74 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 73 70 72 65 61 64 20 6e 6f 6e 2d 69 74 65 72 61 62 6c Data Ascii: Object"===n&&t.constructor&&(n=t.constructor.name);if("Map"===n\|\|"Set"===n)return Array.from(t);if("Arguments"===n\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(n))return o(t,e)}(t)\|\|function(){throw new TypeError("Invalid attempt to spread non-iterabl
2025-03-24 15:31:50 UTC	16384	IN	Data Raw: 72 73 3f 70 2e 61 74 74 72 73 28 29 2e 6b 65 79 3a 6e 75 6c 6c 2c 67 3d 6e 75 6c 6c 21 3d 75 26 26 6e 75 6c 6c 21 3d 75 2e 61 74 74 72 73 3f 75 2e 61 74 74 72 73 28 29 2e 6b 65 79 3a 6e 75 6c 6c 3b 69 66 28 6e 75 6c 6c 3d 3d 76 26 26 6e 75 6c 6c 3d 3d 67 29 63 6f 6e 74 69 6e 75 65 3b 69 66 28 6e 75 6c 6c 3d 3d 76 26 26 6e 75 6c 6c 21 3d 67 29 7b 69 2e 70 75 73 68 28 7b 61 63 74 69 6f 6e 3a 68 2c 69 6e 64 65 78 3a 6f 2c 63 75 72 72 3a 6c 2c 70 72 65 76 3a 61 7d 29 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 6e 75 6c 6c 21 3d 76 26 26 6e 75 6c 6c 3d 3d 67 29 7b 30 3d 3d 3d 65 2e 6c 65 6e 67 74 68 26 26 69 2e 70 75 73 68 28 7b 61 63 74 69 6f 6e 3a 64 2c 69 6e 64 65 78 3a 6f 2c 63 75 72 72 3a 6c 2c 70 72 65 76 3a 61 7d 29 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 76 Data Ascii: rs?p.attrs().key:null,g=null!=u&&null!=u.attrs?u.attrs().key:null;if(null==v&&null==g)continue;if(null==v&&null!=g){i.push({action:h,index:o,curr:l,prev:a});continue}if(null!=v&&null==g){0===e.length&&i.push({action:d,index:o,curr:l,prev:a});continue}if(v
2025-03-24 15:31:50 UTC	16384	IN	Data Raw: 65 76 50 72 6f 70 73 29 29 2c 6e 75 6c 6c 21 3d 74 68 69 73 2e 70 72 65 76 53 74 61 74 65 26 26 28 74 68 69 73 2e 73 74 6f 72 65 64 50 72 65 76 53 74 61 74 65 3d 6c 28 7b 7d 2c 74 68 69 73 2e 70 72 65 76 53 74 61 74 65 29 29 29 2c 44 53 2e 66 6c 61 67 4d 61 6e 61 67 65 72 2e 64 72 6f 70 49 6e 43 6f 72 65 3f 6e 75 6c 6c 21 3d 74 68 69 73 2e 63 6f 6d 70 6f 6e 65 6e 74 57 69 6c 6c 52 65 63 65 69 76 65 50 72 6f 70 73 26 26 74 68 69 73 2e 69 73 4d 6f 75 6e 74 65 64 28 29 26 26 21 74 68 69 73 5b 78 28 22 66 6f 72 63 65 55 70 64 61 74 65 22 29 5d 26 26 74 68 69 73 2e 63 6f 6d 70 6f 6e 65 6e 74 57 69 6c 6c 52 65 63 65 69 76 65 50 72 6f 70 73 28 74 68 69 73 2e 6e 65 78 74 50 72 6f 70 73 29 3a 44 53 2e 66 6c 61 67 4d 61 6e 61 67 65 72 2e 64 72 6f 70 49 6e 49 6e 74 Data Ascii: evProps)),null!=this.prevState&&(this.storedPrevState=l({},this.prevState))),DS.flagManager.dropInCore?null!=this.componentWillReceiveProps&&this.isMounted()&&!this[x("forceUpdate")]&&this.componentWillReceiveProps(this.nextProps):DS.flagManager.dropInInt
2025-03-24 15:31:50 UTC	16384	IN	Data Raw: 29 3a 6e 2e 63 61 6e 63 65 6c 4e 75 64 67 65 28 29 7d 29 29 2c 61 28 74 68 69 73 2c 22 6f 6e 52 65 73 69 7a 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 20 69 6e 20 6e 2e 73 70 72 69 74 65 73 29 7b 6e 2e 73 70 72 69 74 65 73 5b 74 5d 2e 75 73 65 72 44 61 74 61 2e 63 73 73 4d 61 72 6b 65 72 2e 72 65 73 69 7a 65 28 29 7d 7d 29 29 2c 61 28 74 68 69 73 2c 22 6f 6e 46 6f 72 63 65 52 65 6e 64 65 72 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 3d 3d 3d 6e 2e 69 64 26 26 28 6e 2e 72 65 6e 64 65 72 65 72 2e 72 65 6e 64 65 72 28 6e 2e 73 63 65 6e 65 2c 6e 2e 63 61 6d 65 72 61 29 2c 6e 2e 63 73 73 52 65 6e 64 65 72 65 72 2e 72 65 6e 64 65 72 28 6e 2e 63 73 73 53 63 65 6e 65 2c 6e 2e 63 61 6d 65 72 61 29 29 7d 29 29 2c 61 28 74 68 69 73 Data Ascii: ):n.cancelNudge()})),a(this,"onResize",(function(){for(var t in n.sprites){n.sprites[t].userData.cssMarker.resize()}})),a(this,"onForceRender",(function(t){t===n.id&&(n.renderer.render(n.scene,n.camera),n.cssRenderer.render(n.cssScene,n.camera))})),a(this
2025-03-24 15:31:50 UTC	16384	IN	Data Raw: 65 5f 69 6d 61 67 65 5f 69 6e 74 65 72 61 63 74 69 6f 6e 5f 70 72 65 76 22 29 3b 74 2b 3d 27 5c 6e 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 61 63 63 2d 73 68 61 64 6f 77 2d 65 6c 20 61 63 63 2d 62 75 74 74 6f 6e 20 61 63 63 2d 74 68 72 65 65 2d 73 69 78 74 79 2d 6e 61 76 2d 62 74 6e 20 61 63 63 2d 74 68 72 65 65 2d 73 69 78 74 79 2d 6e 61 76 2d 6e 65 78 74 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 74 61 62 69 6e 64 65 78 3d 22 30 22 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 27 2e 63 6f 6e 63 61 74 28 72 2c 27 22 5c 6e 20 20 20 20 20 20 20 20 20 20 3e 3c 70 3e 3c 73 70 61 6e 3e 27 29 2e 63 6f 6e 63 61 74 Data Ascii: e_image_interaction_prev");t+='\n <button\n class="acc-shadow-el acc-button acc-three-sixty-nav-btn acc-three-sixty-nav-next"\n tabindex="0" type="button"\n aria-label="'.concat(r,'"\n ><p><span>').concat
2025-03-24 15:31:50 UTC	16384	IN	Data Raw: 26 23 31 37 36 3b 5c 6e 20 20 20 20 20 20 3c 2f 64 69 76 3e 22 29 7d 7d 2c 7b 6b 65 79 3a 22 72 65 73 65 74 43 72 6f 70 49 6d 61 67 65 4d 65 64 69 61 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 63 61 6e 63 65 6c 43 72 6f 70 49 6d 61 67 65 4d 65 64 69 61 28 21 31 29 2c 74 68 69 73 2e 73 65 74 43 72 6f 70 49 6d 61 67 65 4d 65 64 69 61 28 21 30 29 7d 7d 2c 7b 6b 65 79 3a 22 63 61 6e 63 65 6c 43 72 6f 70 49 6d 61 67 65 4d 65 64 69 61 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 75 6c 6c 21 3d 74 68 69 73 2e 63 72 6f 70 54 6f 6f 6c 26 26 28 74 68 69 73 2e 63 72 6f 70 54 6f 6f 6c 2e 68 69 64 65 28 29 2c 74 68 69 73 2e 63 72 6f 70 54 6f 6f 6c 3d 6e 75 6c 6c 29 2c 74 68 69 73 2e 63 72 6f 70 54 6f 6f 6c 53 68 6f 77 6e Data Ascii: °\n </div>")}},{key:"resetCropImageMedia",value:function(){this.cancelCropImageMedia(!1),this.setCropImageMedia(!0)}},{key:"cancelCropImageMedia",value:function(t){null!=this.cropTool&&(this.cropTool.hide(),this.cropTool=null),this.cropToolShown
2025-03-24 15:31:50 UTC	16384	IN	Data Raw: 69 67 67 65 72 45 76 65 6e 74 28 22 6f 6e 6c 69 6e 6b 72 65 6c 65 61 73 65 22 2c 74 2e 75 73 65 72 44 61 74 61 2e 69 64 29 3a 22 6d 6f 76 65 22 21 3d 3d 65 7c 7c 74 2e 75 73 65 72 44 61 74 61 2e 69 73 4f 76 65 72 3f 22 6f 75 74 22 3d 3d 3d 65 26 26 28 74 2e 75 73 65 72 44 61 74 61 2e 69 73 4f 76 65 72 3d 21 31 29 3a 74 2e 75 73 65 72 44 61 74 61 2e 69 73 4f 76 65 72 3d 21 30 7d 7d 2c 7b 6b 65 79 3a 22 67 65 74 4d 61 72 6b 65 72 49 6e 74 65 72 73 65 63 74 69 6f 6e 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 69 3d 74 68 69 73 2c 72 3d 21 31 3b 74 68 69 73 2e 6d 6f 75 73 65 52 61 79 2e 78 3d 74 2f 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 2a 32 2d 31 2c 74 68 69 73 2e 6d 6f 75 73 65 52 61 79 2e 79 3d 2d 65 2f Data Ascii: iggerEvent("onlinkrelease",t.userData.id):"move"!==e\|\|t.userData.isOver?"out"===e&&(t.userData.isOver=!1):t.userData.isOver=!0}},{key:"getMarkerIntersection",value:function(t,e,n){var i=this,r=!1;this.mouseRay.x=t/window.innerWidth*2-1,this.mouseRay.y=-e/
2025-03-24 15:31:50 UTC	16384	IN	Data Raw: 72 72 65 6e 74 54 69 6d 65 7d 2c 72 65 71 75 65 73 74 53 74 61 6c 65 46 72 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 66 72 61 6d 65 52 65 71 75 65 73 74 65 64 7c 7c 74 68 69 73 2e 73 74 61 6c 65 46 72 61 6d 65 52 65 71 75 65 73 74 65 64 7c 7c 74 68 69 73 2e 63 6c 6f 63 6b 4f 76 65 72 72 69 64 64 65 6e 7c 7c 28 74 68 69 73 2e 73 74 61 6c 65 46 72 61 6d 65 52 65 71 75 65 73 74 65 64 3d 21 30 2c 77 69 6e 64 6f 77 2e 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 74 68 69 73 2e 74 69 63 6b 2e 62 69 6e 64 28 74 68 69 73 29 29 29 7d 2c 72 65 71 75 65 73 74 45 6e 64 46 72 61 6d 65 54 69 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 66 72 61 6d 65 52 65 71 75 65 73 74 65 64 7c 7c 74 68 69 73 2e 63 6c 6f 63 6b 4f 76 Data Ascii: rrentTime},requestStaleFrame:function(){this.frameRequested\|\|this.staleFrameRequested\|\|this.clockOverridden\|\|(this.staleFrameRequested=!0,window.requestAnimationFrame(this.tick.bind(this)))},requestEndFrameTick:function(){this.frameRequested\|\|this.clockOv
2025-03-24 15:31:50 UTC	16384	IN	Data Raw: 65 73 6b 74 6f 70 2e 6d 69 6e 2e 6a 73 22 7d 2c 63 73 73 4c 6f 63 61 74 69 6f 6e 73 3a 7b 4d 4f 42 49 4c 45 3a 73 2b 22 2f 6d 6f 62 69 6c 65 2e 6d 69 6e 2e 63 73 73 22 2c 44 45 53 4b 54 4f 50 3a 73 2b 22 2f 64 65 73 6b 74 6f 70 2e 6d 69 6e 2e 63 73 73 22 7d 2c 70 6c 61 79 65 72 3a 7b 7d 2c 4c 49 4e 45 5f 42 52 45 41 4b 5f 52 45 47 45 58 3a 2f 5c 6e 7c 5c 72 2f 2c 74 68 65 6d 65 3a 7b 7d 2c 73 65 74 54 68 65 6d 65 43 6f 6e 73 74 61 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 6c 2e 74 68 65 6d 65 5b 74 5d 3d 65 7d 2c 73 74 72 69 6e 67 73 3a 7b 50 52 4f 4a 45 43 54 5f 54 49 54 4c 45 3a 22 70 72 6f 6a 65 63 74 2d 74 69 74 6c 65 22 2c 52 45 53 55 4d 45 3a 22 72 65 73 75 6d 65 22 2c 52 45 53 54 41 52 54 3a 22 72 65 73 74 61 72 74 22 7d 2c 65 6c 73 3a 7b Data Ascii: esktop.min.js"},cssLocations:{MOBILE:s+"/mobile.min.css",DESKTOP:s+"/desktop.min.css"},player:{},LINE_BREAK_REGEX:/\n\|\r/,theme:{},setThemeConstant:function(t,e){l.theme[t]=e},strings:{PROJECT_TITLE:"project-title",RESUME:"resume",RESTART:"restart"},els:{

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:31:56 UTC	1170	OUT	GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/analytics-frame.html HTTP/1.1 Host: cdn.arcticwolfsat.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=true Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:31:56 UTC	548	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 15:31:56 GMT Content-Type: text/html Content-Length: 4117 Connection: close Vary: Accept-Encoding Last-Modified: Thu, 23 Jan 2025 14:49:04 GMT ETag: 0x8DD3BBD150E9E32 x-ms-request-id: c5402075-c01e-0055-17d1-9c3b54000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20250324T153156Z-17cccd5449bh49mhhC1EWRu7400000000b2g000000007vgt x-fd-int-roxy-purgeid: 82233142 X-Cache: TCP_MISS Strict-Transport-Security: max-age=3600 Accept-Ranges: bytes
2025-03-24 15:31:56 UTC	4117	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 2f 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 20 20 2f 2a 20 6a 73 68 69 6e 74 20 69 67 6e 6f 72 65 3a 73 74 61 72 74 20 2a 2f 0d 0a 20 20 20 20 20 20 2f 2f 20 6a 73 63 73 3a 64 69 73 61 62 6c 65 0d 0a 20 20 20 20 20 20 2f 2f 20 68 74 74 70 73 3a 2f 2f 67 69 73 74 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 39 38 32 38 38 33 0d 0a 20 20 20 20 20 20 76 61 72 20 75 75 69 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 61 29 20 7b 0d Data Ascii: <!doctype html><html> <head> <meta charset="utf-8" /> <meta name="referrer" content="origin" /> <script> /* jshint ignore:start */ // jscs:disable // https://gist.github.com/982883 var uuid = function(a) {

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://mail-donotreply.com/click/65b6d0e2-d9dd-417c-a2b8-70690576459e

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Windows Analysis Report
https://mail-donotreply.com/click/65b6d0e2-d9dd-417c-a2b8-70690576459e

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:31:56 UTC	1038	OUT	GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/html5/lib/stylesheets/desktop.min.css HTTP/1.1 Host: cdn.arcticwolfsat.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=true Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:31:56 UTC	549	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 15:31:56 GMT Content-Type: text/css Content-Length: 153016 Connection: close Vary: Accept-Encoding Last-Modified: Thu, 23 Jan 2025 14:49:04 GMT ETag: 0x8DD3BBD152C8BCF x-ms-request-id: c7716e63-201e-003f-13d1-9ce37c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20250324T153156Z-17cccd5449bvftlphC1EWRsrrs0000000ay000000000p75e x-fd-int-roxy-purgeid: 82233142 X-Cache: TCP_MISS Strict-Transport-Security: max-age=3600 Accept-Ranges: bytes
2025-03-24 15:31:56 UTC	15835	IN	Data Raw: 40 6d 65 64 69 61 28 66 6f 72 63 65 64 2d 63 6f 6c 6f 72 73 3a 20 61 63 74 69 76 65 29 2c 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 3a 20 61 63 74 69 76 65 29 7b 2e 73 68 6f 77 2d 66 6f 63 75 73 20 2e 74 61 62 2d 66 6f 63 75 73 2d 62 6f 78 2c 2e 73 6b 69 70 6e 61 76 7b 66 6f 72 63 65 64 2d 63 6f 6c 6f 72 2d 61 64 6a 75 73 74 3a 6e 6f 6e 65 3b 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 2d 61 64 6a 75 73 74 3a 6e 6f 6e 65 7d 23 6f 75 74 6c 69 6e 65 2d 73 65 61 72 63 68 2d 63 6f 6e 74 65 6e 74 20 2e 63 73 2d 6c 69 73 74 69 74 65 6d 2c 23 6f 75 74 6c 69 6e 65 2d 73 65 61 72 63 68 2d 63 6f 6e 74 65 6e 74 20 2e 73 65 61 72 63 68 2d 63 6c 65 61 72 7b 66 6f 72 63 65 64 2d 63 6f 6c 6f 72 2d 61 64 6a 75 73 74 3a 6e 6f 6e 65 3b 2d 6d 73 2d 68 69 Data Ascii: @media(forced-colors: active),(-ms-high-contrast: active){.show-focus .tab-focus-box,.skipnav{forced-color-adjust:none;-ms-high-contrast-adjust:none}#outline-search-content .cs-listitem,#outline-search-content .search-clear{forced-color-adjust:none;-ms-hi
2025-03-24 15:31:56 UTC	16384	IN	Data Raw: 62 6c 6f 63 6b 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 74 65 78 74 2d 73 68 61 64 6f 77 3a 2d 31 70 78 20 30 70 78 20 23 30 30 30 2c 30 70 78 20 31 70 78 20 23 30 30 30 2c 31 70 78 20 30 70 78 20 23 30 30 30 2c 30 70 78 20 2d 31 70 78 20 23 30 30 30 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 33 31 33 37 33 61 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 30 70 78 20 30 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 7d 2e 63 61 70 74 69 6f 6e 20 70 20 70 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d Data Ascii: block;pointer-events:none;padding:10px;text-shadow:-1px 0px #000,0px 1px #000,1px 0px #000,0px -1px #000;color:#fff;border-radius:4px;background:#31373a;margin:0 0 10px 0;padding:10px;text-align:center;line-height:1.5}.caption p p:last-child{margin-bottom
2025-03-24 15:31:57 UTC	16384	IN	Data Raw: 74 69 6e 67 73 20 68 32 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 34 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 33 34 70 78 7d 2e 6d 6f 62 69 6c 65 2d 76 69 64 65 6f 2d 73 65 74 74 69 6e 67 73 20 2e 6d 6f 62 69 6c 65 2d 76 69 64 65 6f 2d 6f 70 74 69 6f 6e 7b 6d 61 72 67 69 6e 3a 32 32 70 78 20 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 61 6c 6c 7d 2e 6d 6f 62 69 6c 65 2d 76 69 64 65 6f 2d 73 65 74 74 69 6e 67 73 20 2e 6d 6f 62 69 6c 65 2d 76 69 64 65 6f 2d 6f 70 74 69 6f 6e 20 73 65 6c 65 63 74 7b 77 69 64 74 68 3a 35 30 25 3b 68 65 69 67 68 74 3a 33 32 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 Data Ascii: tings h2{font-weight:bold;font-size:18px;margin-top:24px;margin-bottom:34px}.mobile-video-settings .mobile-video-option{margin:22px 0;font-size:14px;pointer-events:all}.mobile-video-settings .mobile-video-option select{width:50%;height:32px;margin-top:10p
2025-03-24 15:31:57 UTC	16384	IN	Data Raw: 2d 72 61 64 69 75 73 3a 38 70 78 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 7d 2e 73 69 64 65 62 61 72 2d 72 69 67 68 74 3a 6e 6f 74 28 2e 73 69 64 65 62 61 72 2d 63 6c 6f 73 65 64 29 2e 74 68 65 6d 65 2d 63 6c 61 73 73 69 63 20 2e 6d 65 73 73 61 67 65 2d 77 69 6e 64 6f 77 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 32 30 70 78 7d 2e 73 69 64 65 62 61 72 2d 6c 65 66 74 3a 6e 6f 74 28 2e 73 69 64 65 62 61 72 2d 63 6c 6f 73 65 64 29 2e 74 68 65 6d 65 2d 63 6c 61 73 73 69 63 20 2e 6d 65 73 73 61 67 65 2d 77 69 6e 64 6f 77 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 32 30 70 78 7d 2e 6e 6f 2d 73 69 64 65 62 61 72 20 2e 6d 65 73 73 61 67 65 2d 77 69 6e 64 6f 77 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 6d Data Ascii: -radius:8px;border:1px solid rgba(0,0,0,0)}.sidebar-right:not(.sidebar-closed).theme-classic .message-window{margin-left:-120px}.sidebar-left:not(.sidebar-closed).theme-classic .message-window{margin-left:120px}.no-sidebar .message-window{margin-left:0}.m
2025-03-24 15:31:57 UTC	16384	IN	Data Raw: 3a 22 22 3b 77 69 64 74 68 3a 30 70 78 3b 68 65 69 67 68 74 3a 30 70 78 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 33 70 78 20 30 20 33 70 78 20 34 70 78 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 20 23 30 30 30 7d 2e 73 65 71 75 65 6e 63 65 2d 63 74 72 6c 2d 62 61 72 3a 61 66 74 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 74 6f 70 3a 2d 32 70 78 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 77 69 64 74 68 3a 30 70 78 3b 68 65 69 67 68 74 3a 30 70 78 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 73 Data Ascii: :"";width:0px;height:0px;border-style:solid;border-width:3px 0 3px 4px;border-color:rgba(0,0,0,0) rgba(0,0,0,0) rgba(0,0,0,0) #000}.sequence-ctrl-bar:after{position:relative;float:right;top:-2px;display:block;content:"";width:0px;height:0px;border-style:s
2025-03-24 15:31:57 UTC	16384	IN	Data Raw: 6c 2e 2d 6d 73 2d 20 2e 74 6f 70 2d 74 61 62 3a 62 65 66 6f 72 65 7b 74 6f 70 3a 33 30 25 20 21 69 6d 70 6f 72 74 61 6e 74 7d 68 74 6d 6c 2e 2d 6d 73 2d 20 2e 74 68 65 6d 65 2d 75 6e 69 66 69 65 64 20 2e 76 69 64 65 6f 2d 63 6f 6e 74 72 6f 6c 73 2d 70 6c 61 79 2d 70 61 75 73 65 20 73 76 67 2e 70 61 75 73 65 2d 69 63 6f 6e 7b 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 68 74 6d 6c 2e 2d 77 65 62 6b 69 74 2d 2c 68 74 6d 6c 2e 2d 77 65 62 6b 69 74 2d 20 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 29 3b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c Data Ascii: l.-ms- .top-tab:before{top:30% !important}html.-ms- .theme-unified .video-controls-play-pause svg.pause-icon{transform:none !important}html.-webkit-,html.-webkit- body{-webkit-tap-highlight-color:rgba(255,255,255,0);-webkit-tap-highlight-color:rgba(0,0,0,
2025-03-24 15:31:57 UTC	16384	IN	Data Raw: 63 6f 6e 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 35 30 25 3b 74 6f 70 3a 35 30 25 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 20 2d 35 30 25 29 20 73 63 61 6c 65 28 31 2e 31 29 7d 73 76 67 2e 70 61 6e 65 6c 2d 76 69 64 65 6f 2d 70 6c 61 79 2d 69 63 6f 6e 20 72 65 63 74 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 73 76 67 2e 70 61 6e 65 6c 2d 76 69 64 65 6f 2d 70 6c 61 79 2d 69 63 6f 6e 2e 76 69 64 65 6f 2d 69 73 2d 70 6c 61 79 69 6e 67 20 72 65 63 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 73 76 67 2e 70 61 6e 65 6c 2d 76 69 64 65 6f 2d 70 6c 61 79 2d 69 63 6f 6e 2e 76 69 64 65 6f 2d 69 73 2d 70 6c 61 79 69 6e 67 20 70 61 74 68 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 73 76 67 2e 70 61 Data Ascii: con{position:absolute;left:50%;top:50%;transform:translate(-50%, -50%) scale(1.1)}svg.panel-video-play-icon rect{display:none}svg.panel-video-play-icon.video-is-playing rect{display:block}svg.panel-video-play-icon.video-is-playing path{display:none}svg.pa
2025-03-24 15:31:57 UTC	16384	IN	Data Raw: 23 63 63 63 7d 23 74 6f 70 2d 65 6c 6c 69 70 73 69 73 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 23 74 6f 70 2d 65 6c 6c 69 70 73 69 73 20 2e 70 61 6e 65 6c 2d 61 72 72 6f 77 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 35 30 25 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 31 30 30 25 29 3b 74 6f 70 3a 34 35 70 78 3b 7a 2d 69 6e 64 65 78 3a 39 39 39 39 7d 2e 74 6f 70 2d 65 6c 6c 69 70 73 69 73 2d 70 61 6e 65 6c 7b 7a 2d 69 6e 64 65 78 3a 34 3b 77 69 64 74 68 3a 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 68 65 69 67 68 74 3a 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 74 6f 70 2d 65 6c 6c 69 70 73 69 73 2d 70 61 6e 65 6c 20 2e 70 61 6e 65 6c 7b 7a 2d 69 6e 64 65 78 3a 39 39 39 39 20 21 69 6d Data Ascii: #ccc}#top-ellipsis{cursor:pointer}#top-ellipsis .panel-arrow{position:absolute;left:50%;transform:translate(-100%);top:45px;z-index:9999}.top-ellipsis-panel{z-index:4;width:auto !important;height:auto !important}.top-ellipsis-panel .panel{z-index:9999 !im
2025-03-24 15:31:57 UTC	16384	IN	Data Raw: 63 6b 7d 2e 6d 69 63 72 6f 2d 73 63 72 6f 6c 6c 62 61 72 20 2e 73 63 72 6f 6c 6c 61 72 65 61 2d 62 74 6e 3a 61 66 74 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 70 78 3b 6c 65 66 74 3a 30 70 78 3b 77 69 64 74 68 3a 38 70 78 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 62 35 62 35 62 35 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 70 78 20 31 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 20 33 35 30 6d 73 20 6c Data Ascii: ck}.micro-scrollbar .scrollarea-btn:after{position:absolute;top:0px;left:0px;width:8px;height:100%;background:#b5b5b5;pointer-events:none;box-shadow:0 0 0px 1px rgba(0,0,0,0);border-radius:5px;content:"";display:block;-webkit-transition:background 350ms l
2025-03-24 15:31:57 UTC	6109	IN	Data Raw: 73 6f 6c 69 64 20 23 66 66 30 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 72 65 73 75 6d 65 2d 73 68 6f 77 6e 20 23 73 6c 69 64 65 2c 2e 72 65 73 75 6d 65 2d 73 68 6f 77 6e 20 23 62 6f 74 74 6f 6d 2d 62 61 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 6d 6f 62 69 6c 65 2d 73 74 61 72 74 2d 72 65 73 75 6d 65 2d 74 65 78 74 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 63 61 6c 63 28 35 39 25 20 2d 20 35 34 70 78 29 3b 6c 65 66 74 3a 30 3b 72 69 67 68 74 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 63 6f 6c 6f 72 3a 23 36 33 36 33 36 33 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 35 70 78 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 30 7d 2e 6d 6f 62 69 6c 65 2d 73 74 61 72 74 Data Ascii: solid #ff0 !important}.resume-shown #slide,.resume-shown #bottom-bar{display:none}.mobile-start-resume-text{position:absolute;top:calc(59% - 54px);left:0;right:0;font-size:1.2em;text-align:center;color:#636363;padding-left:15px;z-index:10000}.mobile-start

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:31:56 UTC	1025	OUT	GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/html5/lib/scripts/frame.desktop.min.js HTTP/1.1 Host: cdn.arcticwolfsat.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=true Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:31:57 UTC	556	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 15:31:57 GMT Content-Type: application/javascript Content-Length: 372629 Connection: close Vary: Accept-Encoding Last-Modified: Thu, 23 Jan 2025 14:49:04 GMT ETag: 0x8DD3BBD1519DC20 x-ms-request-id: b37143ce-401e-0016-62d1-9cdd08000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20250324T153156Z-17cccd5449bfs6jfhC1EWR67880000000b50000000000r08 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Strict-Transport-Security: max-age=3600 Accept-Ranges: bytes
2025-03-24 15:31:57 UTC	15828	IN	Data Raw: ef bb bf 2f 2a 21 20 64 73 2d 62 6f 6f 74 73 74 72 61 70 20 2d 20 76 31 2e 30 2e 30 2e 33 33 38 31 35 20 2d 20 32 30 32 35 2d 30 31 2d 31 38 20 30 3a 31 61 6d 20 55 54 43 0d 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 32 35 20 3b 20 4e 6f 74 20 4c 69 63 65 6e 73 65 64 20 2a 2f 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 Data Ascii: /! ds-bootstrap - v1.0.0.33815 - 2025-01-18 0:1am UTC Copyright (c) 2025 ; Not Licensed */!function(){"use strict";function e(t){return e="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&
2025-03-24 15:31:57 UTC	16384	IN	Data Raw: 70 64 61 74 65 3f 74 68 69 73 2e 68 61 73 41 6c 6c 43 68 69 6c 64 72 65 6e 28 29 26 26 28 74 68 69 73 2e 70 6f 73 69 74 69 6f 6e 43 68 69 6c 64 72 65 6e 28 65 29 2c 74 68 69 73 2e 75 70 64 61 74 65 53 69 7a 65 28 29 29 3a 74 68 69 73 2e 70 6f 73 69 74 69 6f 6e 43 68 69 6c 64 72 65 6e 28 65 29 7d 7d 2c 7b 6b 65 79 3a 22 69 73 42 6c 6f 63 6b 65 64 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6b 2e 74 68 65 6d 65 2e 69 73 43 6c 61 73 73 69 63 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 47 2e 67 65 74 54 6f 70 4e 61 6d 65 53 70 61 63 65 28 29 2c 74 3d 47 2e 67 65 74 43 75 72 72 65 6e 74 4e 61 6d 65 53 70 61 63 65 28 29 2c 6e 3d 47 2e 67 65 74 42 6c 6f 63 6b 65 72 28 74 2e 6e 61 6d 65 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 Data Ascii: pdate?this.hasAllChildren()&&(this.positionChildren(e),this.updateSize()):this.positionChildren(e)}},{key:"isBlocked",value:function(){if(k.theme.isClassic)return!1;var e=G.getTopNameSpace(),t=G.getCurrentNameSpace(),n=G.getBlocker(t.name);return null!=e&
2025-03-24 15:31:57 UTC	16384	IN	Data Raw: 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 5f 2e 65 61 63 68 28 5f 2e 66 69 6c 74 65 72 28 74 2e 63 68 69 6c 64 72 65 6e 2c 22 76 69 65 77 4c 6f 67 69 63 2e 73 68 6f 77 69 6e 67 22 2c 21 30 29 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 70 75 73 68 28 74 2e 6e 61 6d 65 4b 65 79 29 7d 29 29 7d 29 29 2c 65 7d 28 29 3b 58 65 28 47 2e 67 65 74 4e 61 6d 65 73 70 61 63 65 28 56 65 29 29 2c 69 2e 64 65 73 74 72 6f 79 28 29 2c 44 53 2e 70 75 62 53 75 62 2e 74 72 69 67 67 65 72 28 46 65 29 2c 47 2e 6e 61 6d 65 53 70 61 63 65 73 5b 56 65 5d 3d 6e 75 6c 6c 2c 6e 28 29 2c 4b 65 2e 6f 66 66 28 48 65 2c 65 29 2c 72 2e 63 72 65 61 74 65 57 69 6e 64 6f 77 28 22 5f 66 72 61 6d 65 22 29 2c 69 2e 72 65 72 65 6e 64 65 72 28 29 2c 74 2e 66 6f 72 45 61 Data Ascii: ,(function(t){_.each(_.filter(t.children,"viewLogic.showing",!0),(function(t){return e.push(t.nameKey)}))})),e}();Xe(G.getNamespace(Ve)),i.destroy(),DS.pubSub.trigger(Fe),G.nameSpaces[Ve]=null,n(),Ke.off(He,e),r.createWindow("_frame"),i.rerender(),t.forEa
2025-03-24 15:31:57 UTC	16384	IN	Data Raw: 29 29 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6e 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6e 2c 65 7d 47 2e 64 65 66 28 6e 6e 2c 74 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 47 2e 6d 6f 64 65 6c 2c 74 3d 65 2e 67 65 74 53 74 72 69 6e 67 28 22 61 63 63 5f 73 6b 69 70 6e 61 76 69 67 61 74 69 6f 6e 22 29 3b 72 65 74 75 72 6e 7b 74 61 67 3a 22 62 75 74 74 6f 6e 22 2c 61 72 69 61 53 74 72 69 6e 67 49 64 3a 22 61 63 63 5f 73 6b 69 70 6e 61 76 69 67 61 74 69 6f 6e 22 2c 61 74 74 72 73 3a 7b 69 64 3a 6e 6e 2c 22 61 72 69 61 2d 6c 61 62 65 6c 22 3a 74 2c 74 61 62 69 Data Ascii: ))in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}G.def(nn,tn,(function(){var e=G.model,t=e.getString("acc_skipnavigation");return{tag:"button",ariaStringId:"acc_skipnavigation",attrs:{id:nn,"aria-label":t,tabi
2025-03-24 15:31:57 UTC	16384	IN	Data Raw: 35 20 34 2e 32 35 20 34 2e 34 20 33 2e 37 35 20 35 2e 30 35 20 33 2e 35 20 35 2e 37 20 33 2e 32 20 36 2e 35 35 20 33 2e 32 20 37 2e 33 35 20 33 2e 32 20 37 2e 39 35 20 33 2e 34 35 20 38 2e 35 35 20 33 2e 37 20 39 2e 30 35 20 34 2e 32 20 4c 20 38 2e 36 20 34 2e 38 35 20 51 20 38 2e 35 20 34 2e 39 20 38 2e 34 35 20 35 20 38 2e 33 35 20 35 2e 30 35 20 38 2e 32 20 35 2e 30 35 20 38 2e 31 20 35 2e 30 35 20 37 2e 39 35 20 34 2e 39 35 20 37 2e 38 35 20 34 2e 39 20 37 2e 36 35 20 34 2e 38 20 37 2e 35 20 34 2e 36 35 20 37 2e 32 35 20 34 2e 36 20 37 20 34 2e 35 20 36 2e 36 35 20 34 2e 35 20 36 2e 32 20 34 2e 35 20 35 2e 38 35 20 34 2e 37 20 5a 22 2f 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 3c 2f 73 76 67 3e 27 7d 2c 63 61 70 74 69 6f 6e 73 4f 66 66 3a 66 75 6e 63 74 Data Ascii: 5 4.25 4.4 3.75 5.05 3.5 5.7 3.2 6.55 3.2 7.35 3.2 7.95 3.45 8.55 3.7 9.05 4.2 L 8.6 4.85 Q 8.5 4.9 8.45 5 8.35 5.05 8.2 5.05 8.1 5.05 7.95 4.95 7.85 4.9 7.65 4.8 7.5 4.65 7.25 4.6 7 4.5 6.65 4.5 6.2 4.5 5.85 4.7 Z"/>\n </svg>'},captionsOff:funct
2025-03-24 15:31:58 UTC	16384	IN	Data Raw: 64 3b 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 3b 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 22 29 2e 63 6f 6e 63 61 74 28 74 2c 27 3b 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 34 35 64 65 67 29 3b 22 20 2f 3e 5c 6e 20 20 20 20 27 29 7d 2c 63 68 65 63 6b 6d 61 72 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 27 3c 73 76 67 20 20 63 6c 61 73 73 3d 22 63 73 2d 69 63 6f 6e 20 63 68 65 63 6b 2d 69 63 6f 6e 22 20 66 6f 63 75 73 61 62 6c 65 3d 22 66 61 6c 73 65 22 20 77 69 64 74 68 3d 22 31 36 70 78 22 20 68 65 69 67 68 74 3d 22 31 36 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 Data Ascii: d; border-bottom: 1px solid; border-color: ").concat(t,'; border-bottom-right-radius: 3px; transform: rotate(45deg);" />\n ')},checkmark:function(){return'<svg class="cs-icon check-icon" focusable="false" width="16px" height="16px" viewBox="0 0 16 16"
2025-03-24 15:31:58 UTC	16384	IN	Data Raw: 54 69 6d 65 72 3d 6e 75 6c 6c 2c 77 69 6e 64 6f 77 2e 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 44 53 2e 70 75 62 53 75 62 2e 74 72 69 67 67 65 72 2e 62 69 6e 64 28 44 53 2e 70 75 62 53 75 62 2c 44 53 2e 65 76 65 6e 74 73 2e 74 69 6d 65 72 2e 48 49 44 44 45 4e 29 29 29 2c 74 68 69 73 2e 74 6f 67 67 6c 65 56 69 73 69 62 69 6c 69 74 79 28 21 31 29 7d 7d 2c 7b 6b 65 79 3a 22 74 6f 67 67 6c 65 56 69 73 69 62 69 6c 69 74 79 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 78 69 28 65 3f 5b 22 61 64 64 22 2c 22 72 65 6d 6f 76 65 22 5d 3a 5b 22 72 65 6d 6f 76 65 22 2c 22 61 64 64 22 5d 2c 32 29 2c 6e 3d 74 5b 30 5d 2c 69 3d 74 5b 31 5d 3b 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 61 73 73 4c 69 73 74 5b Data Ascii: Timer=null,window.requestAnimationFrame(DS.pubSub.trigger.bind(DS.pubSub,DS.events.timer.HIDDEN))),this.toggleVisibility(!1)}},{key:"toggleVisibility",value:function(e){var t=xi(e?["add","remove"]:["remove","add"],2),n=t[0],i=t[1];document.body.classList[
2025-03-24 15:31:58 UTC	16384	IN	Data Raw: 28 22 44 65 72 69 76 65 64 20 63 6f 6e 73 74 72 75 63 74 6f 72 73 20 6d 61 79 20 6f 6e 6c 79 20 72 65 74 75 72 6e 20 6f 62 6a 65 63 74 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 20 65 7d 28 65 29 7d 28 74 68 69 73 2c 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 52 72 28 65 29 7b 72 65 74 75 72 6e 20 52 72 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 Data Ascii: ("Derived constructors may only return object or undefined");return function(e){if(void 0===e)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return e}(e)}(this,n)}}function Rr(e){return Rr=Object.setPrototypeOf?Objec
2025-03-24 15:31:58 UTC	16384	IN	Data Raw: 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 28 72 3d 69 2e 6b 65 79 2c 6f 3d 76 6f 69 64 20 30 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 49 6f 28 65 29 7c 7c 6e 75 6c 6c 3d 3d 3d 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 6e 3d 65 5b 53 79 6d 62 6f 6c 2e 74 6f 50 72 69 6d 69 74 69 76 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 7b Data Ascii: or(var n=0;n<t.length;n++){var i=t[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(e,(r=i.key,o=void 0,o=function(e,t){if("object"!==Io(e)\|\|null===e)return e;var n=e[Symbol.toPrimitive];if(void 0!==n){
2025-03-24 15:31:58 UTC	16384	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 73 70 72 65 61 64 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 20 69 74 65 72 61 62 6c 65 2c 20 6e 6f 6e 2d 61 72 72 61 79 20 6f 62 6a 65 63 74 73 20 6d 75 73 74 20 68 61 76 65 20 61 20 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 20 6d 65 74 68 6f 64 2e 22 29 7d 28 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 61 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 7d 28 65 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 Data Ascii: function(){throw new TypeError("Invalid attempt to spread non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function Ka(e,t){return function(e){if(Array.isArray(e))return e}(e)\|\|function(e,t){v

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:31:58 UTC	1009	OUT	GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/html5/data/js/frame.js HTTP/1.1 Host: cdn.arcticwolfsat.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=true Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:31:59 UTC	562	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 15:31:59 GMT Content-Type: application/javascript Content-Length: 62543 Connection: close Vary: Accept-Encoding Last-Modified: Thu, 23 Jan 2025 14:49:04 GMT ETag: 0x8DD3BBD15113353 x-ms-request-id: e3c46da9-e01e-0042-60d1-9c925f000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20250324T153158Z-17cccd5449bcdqb4hC1EWRt7pn00000000tg0000000044ep x-fd-int-roxy-purgeid: 82233142 X-Cache: TCP_MISS Strict-Transport-Security: max-age=3600 Accept-Ranges: bytes
2025-03-24 15:31:59 UTC	15822	IN	Data Raw: ef bb bf 77 69 6e 64 6f 77 2e 67 6c 6f 62 61 6c 50 72 6f 76 69 64 65 44 61 74 61 28 27 66 72 61 6d 65 27 2c 20 27 7b 22 64 65 66 61 75 6c 74 5f 6c 61 79 6f 75 74 22 3a 22 6e 70 6e 78 6e 61 6e 62 6e 73 6e 66 6e 73 31 30 31 31 30 30 30 30 31 30 31 22 2c 22 74 65 78 74 64 69 72 65 63 74 69 6f 6e 22 3a 22 6c 74 72 22 2c 22 72 65 6e 64 65 72 69 6e 67 45 6e 67 69 6e 65 54 79 70 65 22 3a 31 2c 22 64 65 76 69 63 65 22 3a 66 61 6c 73 65 2c 22 66 6f 6e 74 73 63 61 6c 65 22 3a 31 30 30 2c 22 63 61 70 74 69 6f 6e 46 6f 6e 74 53 63 61 6c 65 22 3a 31 30 30 2c 22 6b 62 73 68 6f 72 74 63 75 74 73 22 3a 66 61 6c 73 65 2c 22 73 6b 69 70 5f 6e 61 76 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 6c 65 73 73 22 3a 66 61 6c 73 65 2c 22 6f 75 74 70 75 74 74 Data Ascii: window.globalProvideData('frame', '{"default_layout":"npnxnanbnsnfns10110000101","textdirection":"ltr","renderinguserType":1,"device":false,"fontscale":100,"captionFontScale":100,"kbshortcuts":false,"skip_nav_enabled":true,"chromeless":false,"outputt
2025-03-24 15:31:59 UTC	16384	IN	Data Raw: 55 4b 35 75 7a 4d 32 78 56 78 56 66 4e 2f 66 6b 6e 32 51 61 6f 70 6e 69 50 47 65 45 76 33 42 7a 51 36 66 74 2f 63 39 45 47 37 6d 52 57 59 30 52 35 79 4e 6b 6e 31 6b 30 48 2f 61 35 41 2b 78 38 45 4e 57 6a 50 6e 53 6c 34 47 6c 73 43 49 63 77 36 6d 78 76 36 47 76 73 53 39 57 45 36 73 50 31 67 44 2b 44 4f 46 69 79 39 31 6d 58 68 67 46 2f 46 74 44 41 50 72 45 4d 52 2f 30 5a 7a 35 66 77 6b 52 6f 47 53 4d 77 38 57 46 69 43 6b 47 54 33 57 53 74 78 45 62 48 6e 71 4e 67 72 2b 4a 55 38 67 4a 70 41 43 6c 6f 2b 67 42 77 52 55 42 4a 56 38 4a 47 72 4a 41 36 38 4a 41 5a 5a 6e 43 2b 42 51 5a 56 6b 76 6d 74 6b 72 56 45 52 55 47 56 56 53 41 62 35 7a 73 79 36 35 5a 6d 54 67 30 64 50 62 64 76 61 64 2f 43 52 6a 52 73 66 4f 64 69 33 62 65 75 70 6f 34 4d 6e 6e 37 6d 6c 65 32 56 Data Ascii: UK5uzM2xVxVfN/fkn2QaopniPGeEv3BzQ6ft/c9EG7mRWY0R5yNkn1k0H/a5A+x8ENWjPnSl4GlsCIcw6mxv6GvsS9WE6sP1gD+DOFiy91mXhgF/FtDAPrEMR/0Zz5fwkRoGSMw8WFiCkGT3WStxEbHnqNgr+JU8gJpAClo+gBwRUBJV8JGrJA68JAZZnC+BQZVkvmtkrVERUGVVSAb5zsy65ZmTg0dPbdvad/CRjRsfOdi3beupo4Mnn7mle2V
2025-03-24 15:31:59 UTC	16384	IN	Data Raw: 42 41 6e 45 61 79 47 78 58 59 52 56 69 79 45 4e 6c 73 46 79 32 4d 54 35 7a 5a 41 48 2b 56 41 41 57 36 41 51 64 74 4e 6e 44 2b 79 46 4b 74 67 48 2b 2b 45 41 48 4b 52 76 4e 64 52 41 4c 64 52 42 50 62 69 67 41 52 71 68 43 5a 71 68 42 64 6f 59 37 77 54 39 54 72 4a 39 75 6a 63 37 77 33 49 5a 47 37 76 68 4a 75 63 47 68 72 35 6a 71 41 38 2f 39 65 47 6e 50 76 7a 55 68 35 2f 36 38 47 4e 56 4f 2f 63 79 4c 7a 6e 76 4a 38 2f 39 35 4c 4b 66 58 50 61 54 79 33 35 79 32 55 38 75 2b 38 6c 6c 50 37 6e 73 35 31 37 6b 35 56 37 6b 35 56 37 6b 35 56 37 6b 4a 54 2f 39 35 4b 56 66 33 76 35 78 44 59 37 37 6a 33 58 59 79 6a 70 73 5a 64 62 36 33 6e 56 34 4d 75 31 55 53 4e 43 6a 64 39 4a 36 5a 71 38 6e 73 73 4f 4a 62 42 4b 52 54 53 4b 79 53 54 79 6c 4c 57 46 39 74 72 49 2b 57 34 6c Data Ascii: BAnEayGxXYRViyENlsFy2MT5zZAH+VAAW6AQdtNnD+yFKtgH++EAHKRvNdRALdRBPbigARqhCZqhBdoY7wT9TrJ9ujc7w3IZG7vhJucGhr5jqA8/9eGnPvzUh5/68GNVO/cyLznvJ8/95LKfXPaTy35y2U8u+8llP7ns517k5V7k5V7k5V7kJT/95KVf3v5xDY77j3XYyjpsZdb63nV4Mu1USNCjd9J6Zq8nssOJbBKRTSKySTylLWF9trI+W4l
2025-03-24 15:31:59 UTC	13953	IN	Data Raw: 67 6d 71 56 67 65 56 66 58 55 4b 52 56 34 55 64 34 6e 2b 34 52 51 73 34 48 74 30 31 6a 76 76 64 42 37 5a 74 50 38 2f 51 74 72 4c 6d 77 65 47 2f 31 63 4f 33 48 36 6e 68 75 59 33 33 4c 4e 79 55 58 5a 66 63 79 64 75 2f 61 50 39 47 5a 64 38 50 7a 62 79 56 4d 4f 38 43 38 53 39 6e 4b 6a 53 78 43 52 4f 6d 77 6c 57 6a 47 36 34 32 56 72 35 55 45 30 6d 51 35 6d 32 52 71 45 34 34 6f 6d 56 58 4a 2b 64 53 47 41 63 52 4c 41 6d 42 7a 54 71 67 48 79 42 56 4f 5a 6f 4b 57 63 46 45 63 53 57 63 6b 44 51 2b 6f 69 45 36 56 52 75 58 77 57 56 41 77 32 75 63 4a 67 6b 31 75 61 44 39 4c 74 45 30 34 50 34 69 55 58 66 75 71 4d 70 72 7a 65 5a 4e 54 68 69 43 61 39 33 6c 54 55 79 58 34 30 72 6d 63 2f 77 74 33 4b 76 56 71 34 31 6c 4c 66 36 38 70 33 63 71 63 6f 54 52 77 6f 67 54 46 77 56 Data Ascii: gmqVgeVfXUKRV4Ud4n+4RQs4Ht01jvvdB7ZtP8/QtrLmweG/1cO3H6nhuY33LNyUXZfcydu/aP9GZd8PzbyVMO8C8S9nKjSxCROmwlWjG642Vr5UE0mQ5m2RqE44omVXJ+dSGAcRLAmBzTqgHyBVOZoKWcFEcSWckDQ+oiE6VRuXwWVAw2ucJgk1uaD9LtE04P4iUXfuqMprzeZNThiCa93lTUyX40rmc/wt3KvVq41lLf68p3cqcoTRwogTFwV

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:31:59 UTC	1018	OUT	GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/html5/lib/scripts/slides.min.js HTTP/1.1 Host: cdn.arcticwolfsat.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=true Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:32:00 UTC	557	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 15:31:59 GMT Content-Type: application/javascript Content-Length: 1047376 Connection: close Vary: Accept-Encoding Last-Modified: Thu, 23 Jan 2025 14:49:04 GMT ETag: 0x8DD3BBD1528BF81 x-ms-request-id: e9c8dde2-601e-002e-41d1-9c79c8000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20250324T153159Z-17cccd5449bg7c4bhC1EWR84740000000b40000000003fne x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Strict-Transport-Security: max-age=3600 Accept-Ranges: bytes
2025-03-24 15:32:00 UTC	15827	IN	Data Raw: ef bb bf 2f 2a 21 20 64 73 2d 62 6f 6f 74 73 74 72 61 70 20 2d 20 76 31 2e 30 2e 30 2e 33 33 38 31 35 20 2d 20 32 30 32 35 2d 30 31 2d 31 38 20 30 3a 31 61 6d 20 55 54 43 0d 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 32 35 20 3b 20 4e 6f 74 20 4c 69 63 65 6e 73 65 64 20 2a 2f 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 38 36 39 36 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 32 32 39 30 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 31 38 33 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 76 61 72 20 6e 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 29 72 65 74 75 72 6e 20 6f 28 74 29 7d 28 74 29 7c 7c 66 75 6e 63 74 69 Data Ascii: /! ds-bootstrap - v1.0.0.33815 - 2025-01-18 0:1am UTC Copyright (c) 2025 ; Not Licensed */!function(){var t={8696:function(){},2290:function(){},1830:function(t,e,i){var n;function r(t){return function(t){if(Array.isArray(t))return o(t)}(t)\|\|functi
2025-03-24 15:32:00 UTC	16384	IN	Data Raw: 68 69 73 2e 73 74 61 74 65 2e 75 73 65 41 63 63 54 65 78 74 3f 22 68 69 64 64 65 6e 22 3a 22 76 69 73 69 62 6c 65 22 2c 70 6f 69 6e 74 65 72 45 76 65 6e 74 73 3a 22 6e 6f 6e 65 22 7d 7d 2c 21 74 68 69 73 2e 73 74 61 74 65 2e 75 73 65 41 63 63 54 65 78 74 26 26 65 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 76 67 22 2c 7b 77 69 64 74 68 3a 28 76 2d 32 35 2d 35 29 2a 6d 2c 68 65 69 67 68 74 3a 53 2a 6d 2c 76 69 65 77 42 6f 78 3a 5b 30 2c 30 2c 76 2d 32 35 2c 53 5d 2e 6a 6f 69 6e 28 22 20 22 29 2c 22 64 61 74 61 2d 78 6d 6c 6e 73 2d 78 6c 69 6e 6b 22 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 2c 66 6f 63 75 73 61 62 6c 65 3a 22 66 61 6c 73 65 22 7d 2c 65 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6e Data Ascii: his.state.useAccText?"hidden":"visible",pointerEvents:"none"}},!this.state.useAccText&&e.createElement("svg",{width:(v-25-5)m,height:Sm,viewBox:[0,0,v-25,S].join(" "),"data-xmlns-xlink":"http://www.w3.org/1999/xlink",focusable:"false"},e.createElement(n
2025-03-24 15:32:00 UTC	16384	IN	Data Raw: 74 2c 65 2c 69 29 7b 76 61 72 20 6e 3b 76 6f 69 64 20 30 3d 3d 3d 28 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 69 28 32 35 37 37 29 3b 72 65 74 75 72 6e 7b 50 6c 61 63 65 48 6f 6c 64 65 72 53 6c 69 64 65 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 73 44 72 6f 70 49 6e 26 26 28 65 3d 44 53 2e 44 72 6f 70 49 6e 29 2c 65 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 70 6c 61 63 65 68 6f 6c 64 65 72 2d 6f 62 6a 65 63 74 22 2c 73 74 79 6c 65 3a 7b 77 69 64 74 68 3a 74 68 69 73 2e 70 72 6f 70 73 2e 6d 6f 64 65 6c 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 74 68 69 73 2e 70 72 6f 70 73 2e 6d 6f 64 65 6c 2e 68 65 69 67 68 74 7d 7d 2c 74 68 69 73 Data Ascii: t,e,i){var n;void 0===(n=function(t){var e=i(2577);return{PlaceHolderSlideObject:function(){return this.isDropIn&&(e=DS.DropIn),e.createElement("div",{className:"placeholder-object",style:{width:this.props.model.width,height:this.props.model.height}},this
2025-03-24 15:32:00 UTC	16384	IN	Data Raw: 66 6f 72 6d 53 63 61 6c 65 28 6c 29 2c 6e 2e 74 72 61 6e 73 66 6f 72 6d 54 72 61 6e 73 6c 61 74 65 28 72 2e 70 78 69 66 79 28 4d 61 74 68 2e 72 6f 75 6e 64 28 63 29 29 2c 72 2e 70 78 69 66 79 28 4d 61 74 68 2e 72 6f 75 6e 64 28 75 29 29 29 5d 2e 6a 6f 69 6e 28 22 20 22 29 2c 73 5b 74 68 69 73 2e 63 73 73 54 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 5d 3d 74 68 69 73 2e 73 74 61 74 65 2e 6f 72 69 67 69 6e 7c 7c 22 30 20 30 22 2c 73 2e 6d 61 72 67 69 6e 3d 22 30 22 2c 6c 3d 31 29 3a 73 5b 74 68 69 73 2e 63 73 73 54 72 61 6e 73 66 6f 72 6d 5d 3d 6e 2e 74 72 61 6e 73 66 6f 72 6d 54 72 61 6e 73 6c 61 74 65 28 72 2e 70 78 69 66 79 28 4d 61 74 68 2e 72 6f 75 6e 64 28 63 29 29 2c 72 2e 70 78 69 66 79 28 4d 61 74 68 2e 72 6f 75 6e 64 28 75 29 29 29 2c 6e 75 6c 6c Data Ascii: formScale(l),n.transformTranslate(r.pxify(Math.round(c)),r.pxify(Math.round(u)))].join(" "),s[this.cssTransformOrigin]=this.state.origin\|\|"0 0",s.margin="0",l=1):s[this.cssTransform]=n.transformTranslate(r.pxify(Math.round(c)),r.pxify(Math.round(u))),null
2025-03-24 15:32:00 UTC	16384	IN	Data Raw: 73 44 72 6f 70 49 6e 26 26 28 65 3d 44 53 2e 44 72 6f 70 49 6e 29 2c 65 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 67 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 76 65 63 74 6f 72 2d 74 65 78 74 2d 69 74 65 6d 22 7d 2c 65 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 67 22 2c 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 68 69 73 2e 67 65 74 54 72 61 6e 73 66 6f 72 6d 28 29 7d 2c 74 68 69 73 2e 70 72 6f 70 73 2e 68 61 73 53 68 61 64 6f 77 26 26 65 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 74 2c 7b 72 65 66 3a 22 69 74 65 6d 53 68 61 64 6f 77 22 2c 69 73 53 68 61 64 6f 77 3a 21 30 2c 70 61 74 68 4c 69 62 3a 74 68 69 73 2e 73 74 61 74 65 2e 63 75 72 50 61 74 68 4c 69 62 2c 63 6f 6d 6d 61 6e 64 73 65 74 49 64 3a 74 68 69 73 2e 73 74 61 74 65 2e 63 75 72 43 6f Data Ascii: sDropIn&&(e=DS.DropIn),e.createElement("g",{className:"vector-text-item"},e.createElement("g",{transform:this.getTransform()},this.props.hasShadow&&e.createElement(t,{ref:"itemShadow",isShadow:!0,pathLib:this.state.curPathLib,commandsetId:this.state.curCo
2025-03-24 15:32:00 UTC	16384	IN	Data Raw: 61 6c 75 65 29 2c 61 2e 6c 65 6e 67 74 68 21 3d 3d 65 29 3b 6c 3d 21 30 29 3b 7d 63 61 74 63 68 28 74 29 7b 63 3d 21 30 2c 72 3d 74 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 69 66 28 21 6c 26 26 6e 75 6c 6c 21 3d 69 2e 72 65 74 75 72 6e 26 26 28 73 3d 69 2e 72 65 74 75 72 6e 28 29 2c 4f 62 6a 65 63 74 28 73 29 21 3d 3d 73 29 29 72 65 74 75 72 6e 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 63 29 74 68 72 6f 77 20 72 7d 7d 72 65 74 75 72 6e 20 61 7d 7d 28 74 2c 65 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 21 74 29 72 65 74 75 72 6e 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 29 72 65 74 75 72 6e 20 6f 28 74 2c 65 29 3b 76 61 72 20 69 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 Data Ascii: alue),a.length!==e);l=!0);}catch(t){c=!0,r=t}finally{try{if(!l&&null!=i.return&&(s=i.return(),Object(s)!==s))return}finally{if(c)throw r}}return a}}(t,e)\|\|function(t,e){if(!t)return;if("string"==typeof t)return o(t,e);var i=Object.prototype.toString.call(
2025-03-24 15:32:00 UTC	16384	IN	Data Raw: 70 2c 6f 6e 53 63 72 6f 6c 6c 3a 74 68 69 73 2e 6f 6e 53 63 72 6f 6c 6c 2c 6f 6e 4d 6f 75 73 65 44 6f 77 6e 3a 74 68 69 73 2e 6f 6e 42 65 67 69 6e 54 65 78 74 53 65 6c 65 63 74 2c 6f 6e 4d 6f 75 73 65 55 70 3a 74 68 69 73 2e 6f 6e 54 65 78 74 4d 6f 75 73 65 55 70 2c 6f 6e 44 6f 75 62 6c 65 43 6c 69 63 6b 3a 74 68 69 73 2e 6f 6e 44 6f 75 62 6c 65 43 6c 69 63 6b 2c 74 79 70 65 3a 22 74 65 78 74 22 2c 70 6c 61 63 65 68 6f 6c 64 65 72 3a 74 68 69 73 2e 73 74 61 74 65 2e 70 6c 61 63 65 68 6f 6c 64 65 72 2c 76 61 6c 75 65 3a 74 68 69 73 2e 73 74 61 74 65 2e 69 6e 70 75 74 56 61 6c 75 65 2c 73 70 65 6c 6c 43 68 65 63 6b 3a 74 68 69 73 2e 73 74 61 74 65 2e 73 70 65 6c 6c 63 68 65 63 6b 2c 6d 61 78 4c 65 6e 67 74 68 3a 6e 3e 30 3f 6e 3a 22 22 7d 29 29 29 7d 7d 7d Data Ascii: p,onScroll:this.onScroll,onMouseDown:this.onBeginTextSelect,onMouseUp:this.onTextMouseUp,onDoubleClick:this.onDoubleClick,type:"text",placeholder:this.state.placeholder,value:this.state.inputValue,spellCheck:this.state.spellcheck,maxLength:n>0?n:""})))}}}
2025-03-24 15:32:00 UTC	16384	IN	Data Raw: 2e 77 69 64 74 68 2c 73 3d 6e 2e 68 65 69 67 68 74 2c 61 3d 4d 61 74 68 2e 6d 69 6e 28 6f 2f 36 32 30 2c 73 2f 32 37 35 2c 31 29 2c 6c 3d 61 3c 2e 34 3b 72 65 74 75 72 6e 20 6c 26 26 28 61 3d 4d 61 74 68 2e 6d 69 6e 28 6f 2f 31 39 32 2c 73 2f 31 32 35 2c 31 29 29 2c 74 68 69 73 2e 69 73 44 72 6f 70 49 6e 26 26 28 65 3d 44 53 2e 44 72 6f 70 49 6e 29 2c 65 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 6c 6f 63 61 6c 2d 68 6c 73 2d 6d 73 67 22 2c 73 74 79 6c 65 3a 7b 77 69 64 74 68 3a 22 22 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 70 72 6f 70 73 2e 77 69 64 74 68 2c 22 70 78 22 29 2c 68 65 69 67 68 74 3a 22 22 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 70 72 6f 70 73 2e 68 65 69 67 68 74 2c 22 70 78 22 29 7d 7d Data Ascii: .width,s=n.height,a=Math.min(o/620,s/275,1),l=a<.4;return l&&(a=Math.min(o/192,s/125,1)),this.isDropIn&&(e=DS.DropIn),e.createElement("div",{className:"local-hls-msg",style:{width:"".concat(this.props.width,"px"),height:"".concat(this.props.height,"px")}}
2025-03-24 15:32:00 UTC	16384	IN	Data Raw: 31 31 2c 38 20 4c 33 35 2c 38 20 43 33 36 2c 38 20 33 38 2c 39 20 33 38 2c 31 31 20 4c 33 38 2c 38 34 20 43 33 38 2c 38 35 20 33 37 2c 38 36 20 33 37 2c 38 36 20 4c 32 35 2c 39 38 20 43 32 33 2c 31 30 30 20 32 32 2c 31 30 30 20 32 30 2c 39 38 20 4c 38 2c 38 36 20 43 38 2c 38 36 20 38 2c 38 35 20 38 2c 38 34 20 4c 38 2c 31 31 20 43 38 2c 39 20 39 2c 38 20 31 31 2c 38 20 5a 22 7d 29 2c 65 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 6c 74 65 72 22 2c 7b 69 64 3a 22 76 69 64 65 6f 2d 76 6f 6c 75 6d 65 2d 66 69 6c 74 65 72 22 2c 78 3a 22 2d 34 31 2e 37 25 22 2c 79 3a 22 2d 31 33 2e 34 25 22 2c 77 69 64 74 68 3a 22 31 38 33 2e 33 25 22 2c 68 65 69 67 68 74 3a 22 31 32 35 2e 35 25 22 2c 66 69 6c 74 65 72 55 6e 69 74 73 3a 22 6f 62 6a 65 63 74 42 6f 75 Data Ascii: 11,8 L35,8 C36,8 38,9 38,11 L38,84 C38,85 37,86 37,86 L25,98 C23,100 22,100 20,98 L8,86 C8,86 8,85 8,84 L8,11 C8,9 9,8 11,8 Z"}),e.createElement("filter",{id:"video-volume-filter",x:"-41.7%",y:"-13.4%",width:"183.3%",height:"125.5%",filterUnits:"objectBou
2025-03-24 15:32:00 UTC	16384	IN	Data Raw: 6c 69 70 73 65 22 7d 29 29 2c 65 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 6f 2e 6a 6f 69 6e 28 22 20 22 29 7d 2c 65 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 6b 65 62 61 62 2d 61 72 72 6f 77 2d 62 6f 72 64 65 72 22 7d 29 2c 65 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 63 6f 6e 74 65 6e 74 22 7d 2c 74 68 69 73 2e 70 72 6f 70 73 2e 6f 70 74 69 6f 6e 73 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 6f 3d 69 2e 69 64 2c 6c 3d 69 2e 76 61 6c 75 65 2c 63 3d 69 2e 6c 61 62 65 6c 2c 75 3d 5b 22 63 68 65 63 6b 62 6f 78 22 5d 3b 6c 26 26 75 2e 70 75 73 68 28 22 63 68 65 63 6b 65 Data Ascii: lipse"})),e.createElement("div",{className:o.join(" ")},e.createElement("div",{className:"kebab-arrow-border"}),e.createElement("div",{className:"content"},this.props.options.map((function(i){var o=i.id,l=i.value,c=i.label,u=["checkbox"];l&&u.push("checke

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:32:03 UTC	1008	OUT	GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/html5/data/js/data.js HTTP/1.1 Host: cdn.arcticwolfsat.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=true Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:32:03 UTC	562	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 15:32:03 GMT Content-Type: application/javascript Content-Length: 36830 Connection: close Vary: Accept-Encoding Last-Modified: Thu, 23 Jan 2025 14:49:04 GMT ETag: 0x8DD3BBD1510BE98 x-ms-request-id: d89ea536-f01e-0071-48d1-9ccdf4000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20250324T153203Z-17cccd5449bvj9xqhC1EWRh59s0000000azg00000000h973 x-fd-int-roxy-purgeid: 82233142 X-Cache: TCP_MISS Strict-Transport-Security: max-age=3600 Accept-Ranges: bytes
2025-03-24 15:32:03 UTC	15822	IN	Data Raw: ef bb bf 77 69 6e 64 6f 77 2e 67 6c 6f 62 61 6c 50 72 6f 76 69 64 65 44 61 74 61 28 27 64 61 74 61 27 2c 20 27 7b 22 76 65 72 73 69 6f 6e 22 3a 22 33 2e 39 36 2e 33 33 38 31 35 2e 30 22 2c 22 62 77 56 65 72 73 69 6f 6e 22 3a 22 34 2e 30 22 2c 22 74 69 6e 63 61 6e 56 65 72 73 69 6f 6e 22 3a 22 31 2e 30 22 2c 22 74 69 6e 63 61 6e 4c 61 6e 67 75 61 67 65 22 3a 22 75 6e 64 22 2c 22 70 72 6f 6a 65 63 74 49 64 22 3a 22 35 58 79 55 37 52 77 54 78 6c 57 22 2c 22 63 6f 75 72 73 65 49 64 22 3a 22 36 4e 30 4f 79 50 65 72 31 54 6a 5f 63 6f 75 72 73 65 5f 69 64 22 2c 22 65 6e 74 72 79 50 6f 69 6e 74 22 3a 22 5f 70 6c 61 79 65 72 2e 35 77 48 5a 78 72 4d 4a 59 77 4b 22 2c 22 69 6f 73 46 6f 6e 74 73 22 3a 22 6d 6f 62 69 6c 65 2f 66 6f 6e 74 73 2e 6a 73 6f 6e 22 2c 22 64 Data Ascii: window.globalProvideData('data', '{"version":"3.96.33815.0","bwVersion":"4.0","tincanVersion":"1.0","tincanLanguage":"und","projectId":"5XyU7RwTxlW","courseId":"6N0OyPer1Tj_course_id","entryPoint":"_player.5wHZxrMJYwK","iosFonts":"mobile/fonts.json","d
2025-03-24 15:32:03 UTC	16384	IN	Data Raw: 31 2c 22 68 65 69 67 68 74 22 3a 37 38 2c 22 72 65 73 75 6d 65 22 3a 66 61 6c 73 65 2c 22 75 73 65 48 61 6e 64 43 75 72 73 6f 72 22 3a 74 72 75 65 2c 22 69 64 22 3a 22 52 65 73 75 6d 65 50 72 6f 6d 70 74 53 6c 69 64 65 5f 53 63 72 6f 6c 6c 22 7d 2c 7b 22 6b 69 6e 64 22 3a 22 62 75 74 74 6f 6e 22 2c 22 73 68 61 70 65 6d 61 73 6b 49 64 22 3a 22 22 2c 22 78 50 6f 73 22 3a 31 30 37 2c 22 79 50 6f 73 22 3a 31 31 30 2c 22 74 61 62 49 6e 64 65 78 22 3a 32 2c 22 74 61 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 78 4f 66 66 73 65 74 22 3a 30 2c 22 79 4f 66 66 73 65 74 22 3a 30 2c 22 72 6f 74 61 74 65 58 50 6f 73 22 3a 35 30 2c 22 72 6f 74 61 74 65 59 50 6f 73 22 3a 31 35 2c 22 73 63 61 6c 65 58 22 3a 31 30 30 2c 22 73 63 61 6c 65 59 22 3a 31 30 30 2c 22 61 6c Data Ascii: 1,"height":78,"resume":false,"useHandCursor":true,"id":"ResumePromptSlide_Scroll"},{"kind":"button","shapemaskId":"","xPos":107,"yPos":110,"tabIndex":2,"tabEnabled":true,"xOffset":0,"yOffset":0,"rotateXPos":50,"rotateYPos":15,"scaleX":100,"scaleY":100,"al
2025-03-24 15:32:03 UTC	4624	IN	Data Raw: 54 35 6c 48 69 76 67 44 64 31 22 2c 22 74 79 70 65 22 3a 22 73 74 72 69 6e 67 22 2c 22 76 61 6c 75 65 22 3a 22 22 2c 22 72 65 73 75 6d 65 22 3a 74 72 75 65 7d 2c 7b 22 6b 69 6e 64 22 3a 22 76 61 72 69 61 62 6c 65 22 2c 22 6e 61 6d 65 22 3a 22 50 72 69 6e 74 50 72 6f 6d 70 74 55 73 65 72 6e 61 6d 65 5f 36 54 35 6c 48 69 76 67 44 64 31 22 2c 22 74 79 70 65 22 3a 22 73 74 72 69 6e 67 22 2c 22 76 61 6c 75 65 22 3a 22 22 2c 22 72 65 73 75 6d 65 22 3a 74 72 75 65 7d 5d 2c 22 61 63 74 69 6f 6e 47 72 6f 75 70 73 22 3a 7b 22 41 63 74 47 72 70 4f 6e 50 72 65 76 42 75 74 74 6f 6e 43 6c 69 63 6b 22 3a 7b 22 6b 69 6e 64 22 3a 22 61 63 74 69 6f 6e 67 72 6f 75 70 22 2c 22 61 63 74 69 6f 6e 73 22 3a 5b 7b 22 6b 69 6e 64 22 3a 22 74 72 69 67 67 65 72 5f 70 72 65 76 5f 73 Data Ascii: T5lHivgDd1","type":"string","value":"","resume":true},{"kind":"variable","name":"PrintPromptUsername_6T5lHivgDd1","type":"string","value":"","resume":true}],"actionGroups":{"ActGrpOnPrevButtonClick":{"kind":"actiongroup","actions":[{"kind":"trigger_prev_s

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:32:04 UTC	752	OUT	GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/html5/lib/stylesheets/mobile-fonts/open-sans-light.woff HTTP/1.1 Host: cdn.arcticwolfsat.com Connection: keep-alive Origin: https://cdn.arcticwolfsat.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/html5/lib/stylesheets/desktop.min.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:32:04 UTC	568	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 15:32:04 GMT Content-Type: application/octet-stream Content-Length: 20848 Connection: close Last-Modified: Thu, 23 Jan 2025 14:49:04 GMT ETag: 0x8DD3BBD152A6B56 x-ms-request-id: 49dc7c0f-901e-0005-2fd1-9cf904000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20250324T153204Z-17cccd5449bhkn97hC1EWRp7ew0000000b3g0000000051y0 x-fd-int-roxy-purgeid: 82233142 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Strict-Transport-Security: max-age=3600 Accept-Ranges: bytes
2025-03-24 15:32:04 UTC	15816	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 51 70 00 12 00 00 00 00 8a 0c 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 44 45 46 00 00 01 94 00 00 00 16 00 00 00 16 00 10 00 dd 47 50 4f 53 00 00 01 ac 00 00 00 0c 00 00 00 0c 00 15 00 0a 47 53 55 42 00 00 01 b8 00 00 00 59 00 00 00 74 dd ce de 9b 4f 53 2f 32 00 00 02 14 00 00 00 5d 00 00 00 60 a0 d5 9b 51 63 6d 61 70 00 00 02 74 00 00 00 98 00 00 00 cc af 0d b3 9d 63 76 74 20 00 00 03 0c 00 00 00 5d 00 00 00 aa 12 eb 13 a9 66 70 67 6d 00 00 03 6c 00 00 04 9b 00 00 07 b4 7e 61 b6 11 67 61 73 70 00 00 08 08 00 00 00 10 00 00 00 10 00 1e 00 23 67 6c 79 66 00 00 08 18 00 00 37 a7 00 00 55 bc 30 58 cc f2 68 65 61 64 00 00 3f c0 00 00 00 36 00 00 00 36 f7 3b c5 a2 68 68 65 61 00 00 3f f8 00 00 00 Data Ascii: wOFFQpGDEFGPOSGSUBYtOS/2]`Qcmaptcvt ]fpgml~agasp#glyf7U0Xhead?66;hhea?
2025-03-24 15:32:04 UTC	5032	IN	Data Raw: 19 00 c9 47 01 70 7f 16 e5 e4 09 1b 09 f0 08 63 2d c8 09 b1 09 b4 30 7a 5e 56 ff b6 57 ea 48 6e ec bc 2c 04 15 74 5d 1f cf 5f 84 6e 70 4b 78 94 99 88 19 29 a2 8f 37 da bd be f4 ae e2 0d b9 42 7a 20 7d 64 35 09 28 4c 51 c0 13 a6 d3 81 77 64 b5 79 80 a7 d9 73 c8 43 9a 3d 1b 3c cf 79 be f6 74 78 78 f0 48 1e ac 27 1e 4f 52 66 26 8c a8 ce 14 93 a4 eb 9d 07 54 bb 90 cd f3 9e 64 e9 ff e4 16 c6 d9 d7 a2 21 78 28 83 21 2f a2 cb e9 0e a8 b3 ba 8a 29 01 a1 36 b7 ac 50 09 7d b7 b3 79 5f cc 22 c1 83 1f e5 a0 9f 64 cc 71 94 c0 1b ea fb e2 df 7f 5d 37 7a dd 1f 3e 92 3f ef 76 74 3f c7 ed ff 77 36 4a 7f 63 fc 9f 2b b3 6f e7 9b ae 7c 1d 99 95 3c 30 29 f2 fa f7 03 eb 32 52 94 f8 92 48 56 e5 8c 08 92 50 61 46 d7 b1 65 c0 98 aa 47 b8 20 6e 03 02 39 e1 54 75 3e 89 54 77 b2 2d Data Ascii: Gpc-0z^VWHn,t]_npKx)7Bz }d5(LQwdysC=<ytxxH'ORf&Td!x(!/)6P}y_"dq]7z>?vt?w6Jc+o\|<0)2RHVPaFeG n9Tu>Tw-

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:32:04 UTC	686	OUT	OPTIONS /api/activities/state?stateId=resume&activityId=http%3A%2F%2Fx0x&agent=%7B%22objectType%22%3A%22Agent%22%7D&attemptid=22993130&tracking=true HTTP/1.1 Host: mail-donotreply.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: authorization,x-experience-api-version Origin: https://cdn.arcticwolfsat.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://cdn.arcticwolfsat.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:32:04 UTC	609	IN	HTTP/1.1 204 No Content Connection: close Date: Mon, 24 Mar 2025 15:32:04 GMT Server: Microsoft-IIS/10.0 Access-Control-Allow-Headers: authorization,x-experience-api-version Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: https://cdn.arcticwolfsat.com Set-Cookie: TiPMix=0.19195011174596432; path=/; HttpOnly; Domain=mail-donotreply.com; Max-Age=3600; Secure; SameSite=None Set-Cookie: x-ms-routing-name=self; path=/; HttpOnly; Domain=mail-donotreply.com; Max-Age=3600; Secure; SameSite=None Request-Context: appId=cid-v1:f9583db6-1b2a-423f-ac31-5f5f20737515 X-Powered-By: ASP.NET

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:32:05 UTC	1012	OUT	GET /favicon.ico HTTP/1.1 Host: cdn.arcticwolfsat.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=true Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:32:05 UTC	395	IN	HTTP/1.1 400 One of the request inputs is out of range. Date: Mon, 24 Mar 2025 15:32:05 GMT Content-Type: application/xml Content-Length: 226 Connection: close x-ms-request-id: b45a3851-401e-0074-0ad1-9c1f2f000000 x-azure-ref: 20250324T153205Z-17cccd5449bmwjbphC1EWRnfmw000000062g00000000390c x-fd-int-roxy-purgeid: 82233142 X-Cache: TCP_MISS Strict-Transport-Security: max-age=3600
2025-03-24 15:32:05 UTC	226	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4f 75 74 4f 66 52 61 6e 67 65 49 6e 70 75 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 4f 6e 65 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 20 69 6e 70 75 74 73 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 0a 52 65 71 75 65 73 74 49 64 3a 62 34 35 61 33 38 35 31 2d 34 30 31 65 2d 30 30 37 34 2d 30 61 64 31 2d 39 63 31 66 32 66 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 35 2d 30 33 2d 32 34 54 31 35 3a 33 32 3a 30 35 2e 34 31 38 35 32 37 38 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range.RequestId:b45a3851-401e-0074-0ad1-9c1f2f000000Time:2025-03-24T15:32:05.4185278Z</Message></Error>

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:32:05 UTC	813	OUT	GET /api/activities/state?stateId=resume&activityId=http%3A%2F%2Fx0x&agent=%7B%22objectType%22%3A%22Agent%22%7D&attemptid=22993130&tracking=true HTTP/1.1 Host: mail-donotreply.com Connection: keep-alive sec-ch-ua-platform: "Windows" Authorization: Basic OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ== User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 X-Experience-API-Version: 1.0.2 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://cdn.arcticwolfsat.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cdn.arcticwolfsat.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:32:05 UTC	502	IN	HTTP/1.1 204 No Content Connection: close Date: Mon, 24 Mar 2025 15:32:04 GMT Server: Microsoft-IIS/10.0 Access-Control-Allow-Origin: https://cdn.arcticwolfsat.com Set-Cookie: TiPMix=99.99883522119029; path=/; HttpOnly; Domain=mail-donotreply.com; Max-Age=3600; Secure; SameSite=None Set-Cookie: x-ms-routing-name=self; path=/; HttpOnly; Domain=mail-donotreply.com; Max-Age=3600; Secure; SameSite=None Request-Context: appId=cid-v1:f9583db6-1b2a-423f-ac31-5f5f20737515 X-Powered-By: ASP.NET

Timestamp	Bytes transferred	Direction	Data
2025-03-24 15:32:05 UTC	1015	OUT	GET /sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/html5/data/js/5jaSt9Sp1Ff.js HTTP/1.1 Host: cdn.arcticwolfsat.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cdn.arcticwolfsat.com/sessions/8fa2ace1-7492-4d1f-bc38-d0b734ebddf7/index_lms.html?actor={%22_ObjectType%22:%22Agent%22,%22Name%22:%22Xew23QWRT%20QztrgYunm%22,%22Account%22:{%22HomePage%22:null,%22Name%22:%22zwqeuhgf@dhrgt.com%22,%22HashString%22:null}}&auth=Basic%20OmJhNjYxZTc2LWFlM2MtNDg1ZC04MzI2LWFhMGIwNDZhZWVmMQ==&endpoint=https://mail-donotreply.com/api/&activity_id=http://x0x&attemptid=22993130&tracking=true&tincan=true Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 15:32:06 UTC	555	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 15:32:06 GMT Content-Type: application/javascript Content-Length: 14487 Connection: close Vary: Accept-Encoding Last-Modified: Thu, 23 Jan 2025 14:49:04 GMT ETag: 0x8DD3BBD152B7B95 x-ms-request-id: 4523b0b0-c01e-0018-3bd1-9cf4b8000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20250324T153205Z-17cccd5449bhkn97hC1EWRp7ew0000000b3g00000000521r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Strict-Transport-Security: max-age=3600 Accept-Ranges: bytes
2025-03-24 15:32:06 UTC	14487	IN	Data Raw: ef bb bf 77 69 6e 64 6f 77 2e 67 6c 6f 62 61 6c 50 72 6f 76 69 64 65 44 61 74 61 28 27 73 6c 69 64 65 27 2c 20 27 7b 22 74 69 74 6c 65 22 3a 22 53 65 63 74 69 6f 6e 20 54 69 74 6c 65 22 2c 22 74 72 61 63 6b 56 69 65 77 73 22 3a 74 72 75 65 2c 22 73 68 6f 77 4d 65 6e 75 52 65 73 75 6c 74 49 63 6f 6e 22 3a 66 61 6c 73 65 2c 22 76 69 65 77 47 72 6f 75 70 49 64 22 3a 22 22 2c 22 68 69 73 74 6f 72 79 47 72 6f 75 70 49 64 22 3a 22 22 2c 22 76 69 64 65 6f 5a 6f 6f 6d 22 3a 22 22 2c 22 73 63 72 6f 6c 6c 69 6e 67 22 3a 66 61 6c 73 65 2c 22 74 72 61 6e 73 69 74 69 6f 6e 22 3a 22 61 70 70 65 61 72 22 2c 22 74 72 61 6e 73 44 75 72 61 74 69 6f 6e 22 3a 30 2c 22 74 72 61 6e 73 44 69 72 22 3a 31 2c 22 77 69 70 65 54 72 61 6e 73 22 3a 66 61 6c 73 65 2c 22 73 6c 69 64 65 Data Ascii: window.globalProvideData('slide', '{"title":"Section Title","trackViews":true,"showMenuResultIcon":false,"viewGroupId":"","historyGroupId":"","videoZoom":"","scrolling":false,"transition":"appear","transDuration":0,"transDir":1,"wipeTrans":false,"slide