Edit tour

Windows Analysis Report
https://mycurricula.com/p/track/metrics?u=127564-2be71574dd8e8f55948dc23456d791d3eee6f2fc6e4617c7f74924a9177e2a90

Overview

General Information

Sample URL:	https://mycurricula.com/p/track/metrics?u=127564-2be71574dd8e8f55948dc23456d791d3eee6f2fc6e4617c7f74924a9177e2a90
Analysis ID:	1674486
Infos:

Detection

Score:	1
Range:	0 - 100
Confidence:	80%

Signatures

Javascript checks online IP of machine

Queries the volume information (name, serial number etc) of a device

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5116 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 5692 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1924,i,1896986603102136494,5714007840036234206,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=1956 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6212 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mycurricula.com/p/track/metrics?u=127564-2be71574dd8e8f55948dc23456d791d3eee6f2fc6e4617c7f74924a9177e2a90" MD5: E81F54E6C1129887AEA47E7D092680BF)

HxOutlook.exe (PID: 6384 cmdline: "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe" -ServerName:microsoft.windowslive.mail.AppXfbjsbkxvprcgqg6q4c9jfr0pn3kv9x5s.mca MD5: 6F8EAC2C377C8F16D91CB5AC8B8DBF5F)

HxAccounts.exe (PID: 6276 cmdline: "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe" -ServerName:microsoft.windowslive.manageaccounts.AppXdbf3yp5apt3t7q877db3gnz5zqpf71zj.mca MD5: 6FEB00C9A2C3FF66230658B3012BAB6A)

cleanup

Joe Sandbox Signatures

• Phishing
• Compliance
• Software Vulnerabilities
• Networking
• System Summary
• Hooking and other Techniques for Hiding and Protection
• Malware Analysis System Evasion
• Language, Device and Operating System Detection

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/laravel-tel-input-4TOiLt58.js

HTTP Parser: (function(){function p(o,n,r=null,d=null,t=null){let s=`${o}=${n};`;if(r){const h=new date;h.settime(h.gettime()+r*24*60*60*1e3),s+=`expires=${h.toutcstring()};`}d&&(s+=`path=${d};`),t&&(s+=`domain=${t};`),document.cookie=s}function f(o){let n=o+"=",r=document.cookie.split(";");for(let d=0;d<r.length;d++){let t=r[d];for(;t.charat(0)==" ";)t=t.substring(1);if(t.indexof(n)==0)return t.substring(n.length,t.length)}return""}function g(o,n={}){var m;const r=`intltelinputselectedcountry_${o.dataset.phoneinputid}`;window.intltelinputglobals.autocountry=f(r)||window.intltelinputglobals.autocountry;let d=o.closest("form");if(d&&d.setattribute("autocomplete","off"),n.geoiplookup==null)delete n.geoiplookup;else if(n.geoiplookup==="ipinfo")n.geoiplookup=function(i,u){let c=f(r);c?i(c):fetch("https://ipinfo.io/json").then(l=>l.json()).then(l=>l).then(l=>{var a;let e=(a=l.country)==null?void 0:a.touppercase();i(e),p(r,e)}).catch(l=>i("us"))};else if(typeof window[n.geoiplookup]=="function")n.geoiplookup=window[n.geoiplooku...

Source: unknown	HTTPS traffic detected: 142.250.69.4:443 -> 192.168.2.7:49692 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.8.115:443 -> 192.168.2.7:49693 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.8.115:443 -> 192.168.2.7:49694 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.7:49695 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.58.14:443 -> 192.168.2.7:49697 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.154.149.105:443 -> 192.168.2.7:49700 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.154.149.105:443 -> 192.168.2.7:49699 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.154.149.105:443 -> 192.168.2.7:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.154.149.105:443 -> 192.168.2.7:49702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.154.149.105:443 -> 192.168.2.7:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.154.149.105:443 -> 192.168.2.7:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.154.149.105:443 -> 192.168.2.7:49701 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.58.14:443 -> 192.168.2.7:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.58.14:443 -> 192.168.2.7:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.154.149.105:443 -> 192.168.2.7:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.218.5.187:443 -> 192.168.2.7:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.233.158.24:443 -> 192.168.2.7:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.233.158.24:443 -> 192.168.2.7:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.233.158.24:443 -> 192.168.2.7:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.223.103.208:443 -> 192.168.2.7:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.233.158.24:443 -> 192.168.2.7:49752 version: TLS 1.2

Source: chrome.exe

Memory has grown: Private usage: 10MB later: 59MB

Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.98.62
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.215.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.215.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.98.62
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /p/track/metrics?u=127564-2be71574dd8e8f55948dc23456d791d3eee6f2fc6e4617c7f74924a9177e2a90 HTTP/1.1Host: mycurricula.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1Host: mycurricula.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mycurricula.com/p/track/metrics?u=127564-2be71574dd8e8f55948dc23456d791d3eee6f2fc6e4617c7f74924a9177e2a90Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkYvMXBYRVg0VGx4KzNmY3V4NVdUL2c9PSIsInZhbHVlIjoiQmQyMTliOUJ2WE5BUTRyd3I4ckEyL0V5R1paUXozMlJablQ3ZGxMMS9yeC96UEU0YnhzNlM5dFFZOGRHZFd1cWV2MWZocGFHWmFOUjJMbUUrRFI3TDVVZWxSOXFQVFc0MlNWTEV6bVZHMHRNdVcycUhEZmpiN1FXNlFSVTBYZFIiLCJtYWMiOiI5OWM4N2Y5ZDNmODY5ZDYxMmZkMGVkYzQ3MWY4NmE2NTRlZmMxMDEwOTYzOTExZDYxZDBmYWM3NTg0NGRiNmI5IiwidGFnIjoiIn0%3D; curricula_session=eyJpdiI6Ik5qUkhWMEhNY3pKeUZIM0gxWHhYOUE9PSIsInZhbHVlIjoiVmtlWlpFT3pNYVU0Mm8zRDByTGJXaTBJVGk4SUxKajYyZjZLcEtySGwrNThKUTUrNHh6REMwTWk1S2VLQ0Z2dlBncjRlUkpMOEhCZU55SjFCcGt6MFZCdHVTdHl1azFydEhjTnlKQUEyRXFnbk5NaFBlZ2hhVm81RlhoOExSa2UiLCJtYWMiOiJiYWUzOTkwMDVkYTFjNTMzZmNkNjcyNjc3ZThjMTJhMDYyYmU0YjI0YTg2NDM0YTEyODg2OTQ0NTJjMTFhYzQxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /inter/inter.css HTTP/1.1Host: rsms.meConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://mycurricula.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/app-cuMgshCs.js HTTP/1.1Host: d2v8pn2kg220hg.cloudfront.netConnection: keep-aliveOrigin: https://mycurricula.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://mycurricula.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/@simplewebauthn-CLvCXoCH.js HTTP/1.1Host: d2v8pn2kg220hg.cloudfront.netConnection: keep-aliveOrigin: https://mycurricula.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://mycurricula.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/@fortawesome-DMKKry78.js HTTP/1.1Host: d2v8pn2kg220hg.cloudfront.netConnection: keep-aliveOrigin: https://mycurricula.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://mycurricula.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/intl-TV5EZGiN.js HTTP/1.1Host: d2v8pn2kg220hg.cloudfront.netConnection: keep-aliveOrigin: https://mycurricula.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://mycurricula.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/pluralize-CKy8wjKl.js HTTP/1.1Host: d2v8pn2kg220hg.cloudfront.netConnection: keep-aliveOrigin: https://mycurricula.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://mycurricula.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/app-BYPDacsU.css HTTP/1.1Host: d2v8pn2kg220hg.cloudfront.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://mycurricula.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/apexcharts-CR0lJPIS.js HTTP/1.1Host: d2v8pn2kg220hg.cloudfront.netConnection: keep-aliveOrigin: https://mycurricula.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://mycurricula.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/easymde-BkQbLd_p.js HTTP/1.1Host: d2v8pn2kg220hg.cloudfront.netConnection: keep-aliveOrigin: https://mycurricula.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://mycurricula.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/laravel-echo-jsk6XGuY.js HTTP/1.1Host: d2v8pn2kg220hg.cloudfront.netConnection: keep-aliveOrigin: https://mycurricula.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://mycurricula.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/pusher-js-Cs7BQr1n.js HTTP/1.1Host: d2v8pn2kg220hg.cloudfront.netConnection: keep-aliveOrigin: https://mycurricula.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://mycurricula.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/livewire-6F915w2D.js HTTP/1.1Host: d2v8pn2kg220hg.cloudfront.netConnection: keep-aliveOrigin: https://mycurricula.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://mycurricula.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/tippy-D04_KDLT.css HTTP/1.1Host: d2v8pn2kg220hg.cloudfront.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://mycurricula.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/images/syncing/robo-bernie-loop.gif HTTP/1.1Host: d2v8pn2kg220hg.cloudfront.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mycurricula.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /inter/font-files/Inter-SemiBold.woff2?v=4.1 HTTP/1.1Host: rsms.meConnection: keep-aliveOrigin: https://mycurricula.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://rsms.me/inter/inter.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /inter/font-files/InterVariable.woff2?v=4.1 HTTP/1.1Host: rsms.meConnection: keep-aliveOrigin: https://mycurricula.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://rsms.me/inter/inter.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/@ryangjchandler-DB4gAPbQ.js HTTP/1.1Host: d2v8pn2kg220hg.cloudfront.netConnection: keep-aliveOrigin: https://mycurricula.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://mycurricula.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/moment-timezone-ZsDSEs_D.js HTTP/1.1Host: d2v8pn2kg220hg.cloudfront.netConnection: keep-aliveOrigin: https://mycurricula.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://mycurricula.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/pikaday-D84Fc82I.js HTTP/1.1Host: d2v8pn2kg220hg.cloudfront.netConnection: keep-aliveOrigin: https://mycurricula.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://mycurricula.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/@jaames-DqG6q-J1.js HTTP/1.1Host: d2v8pn2kg220hg.cloudfront.netConnection: keep-aliveOrigin: https://mycurricula.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://mycurricula.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/vanilla-picker-DZ-25AGV.js HTTP/1.1Host: d2v8pn2kg220hg.cloudfront.netConnection: keep-aliveOrigin: https://mycurricula.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://mycurricula.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/ace-builds-Yv6jyLXb.js HTTP/1.1Host: d2v8pn2kg220hg.cloudfront.netConnection: keep-aliveOrigin: https://mycurricula.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://mycurricula.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/codemirror-CHs1P-aq.js HTTP/1.1Host: d2v8pn2kg220hg.cloudfront.netConnection: keep-aliveOrigin: https://mycurricula.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://mycurricula.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/codemirror-spell-checker-DAx1oG0u.js HTTP/1.1Host: d2v8pn2kg220hg.cloudfront.netConnection: keep-aliveOrigin: https://mycurricula.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://mycurricula.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/typo-js-CA1DZ0vR.js HTTP/1.1Host: d2v8pn2kg220hg.cloudfront.netConnection: keep-aliveOrigin: https://mycurricula.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://mycurricula.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/marked-B-c5sAHk.js HTTP/1.1Host: d2v8pn2kg220hg.cloudfront.netConnection: keep-aliveOrigin: https://mycurricula.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://mycurricula.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/moment-DVlmW3bi.js HTTP/1.1Host: d2v8pn2kg220hg.cloudfront.netConnection: keep-aliveOrigin: https://mycurricula.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://mycurricula.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/images/syncing/robo-bernie-loop.gif HTTP/1.1Host: d2v8pn2kg220hg.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/datadog-rum-DcBh80Y_.js HTTP/1.1Host: d2v8pn2kg220hg.cloudfront.netConnection: keep-aliveOrigin: https://mycurricula.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://mycurricula.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/@datadog-DeVISv2C.js HTTP/1.1Host: d2v8pn2kg220hg.cloudfront.netConnection: keep-aliveOrigin: https://mycurricula.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://mycurricula.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/laravel-tel-input-4TOiLt58.js HTTP/1.1Host: d2v8pn2kg220hg.cloudfront.netConnection: keep-aliveOrigin: https://mycurricula.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://mycurricula.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/browser/favicon.ico?v=alQM8nEzwo HTTP/1.1Host: d2v8pn2kg220hg.cloudfront.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mycurricula.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app/e4269812c912a8b3a19d?protocol=7&client=js&version=8.3.0&flash=false HTTP/1.1Host: ws-us2.pusher.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://mycurricula.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: 4BE/CX5fN+9phGq4JmScGA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/browser/favicon.ico?v=alQM8nEzwo HTTP/1.1Host: d2v8pn2kg220hg.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: mycurricula.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: rsms.me
Source: global traffic	DNS traffic detected: DNS query: d2v8pn2kg220hg.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: ws-us2.pusher.com
Source: global traffic	DNS traffic detected: DNS query: browser-intake-datadoghq.com
Source: global traffic	DNS traffic detected: DNS query: sockjs-us2.pusher.com

Source: unknown

HTTP traffic detected: POST /report/v4?s=YLOM7AxOdgpD7U%2BiByak%2BzzNwRhqLujqzk%2BS%2BvAzIoTqR38bxWkYHNLsjZxX0tWsfH%2BykSRVkIDBONddyUxWFRVh6fzWey%2Fa1xrPdVGMYOS7jxcYdeKDuwD7p63Ufrs%2BIg%3D%3D HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 474Content-Type: application/reports+jsonOrigin: https://mycurricula.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: http://b.c2r.ts.cdn.office.net/pr
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: http://f.c2r.ts.cdn.office.net/pr
Source: chromecache_93.1.dr	String found in binary or memory: http://github.com/jrburke/requirejs
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: http://olkflt.edog.officeapps.live.com/olkflt/outlookflighting.svc/api/glides
Source: HxAccounts.exe, 00000013.00000002.1689256793.000001DB2FC2B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://test-exp-s2s.msedge.net/ab/
Source: HxAccounts.exe, 00000013.00000002.1689256793.000001DB2FC2B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://test-exp-s2s.msedge.net/ab/cacheFileFullNotificationPercentage
Source: HxAccounts.exe, 00000013.00000002.1689256793.000001DB2FC2B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://test-exp-s2s.msedge.net/ab/ge780dddc8-18a1-5781-895a-a690464fa89chttp://test-exp-s2s.msedge.n
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: http://weather.service.msn.com/data.aspx
Source: chromecache_93.1.dr	String found in binary or memory: http://www.sproutcore.com
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://addinsinstallation.store.office.com/app/acquisitionlogging
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://addinsinstallation.store.office.com/app/download
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/authenticated
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/preinstalled
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/unauthenticated
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://addinsinstallation.store.office.com/orgid/appinstall/authenticated
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://addinslicensing.store.office.com/apps/remove
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://addinslicensing.store.office.com/commerce/query
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://addinslicensing.store.office.com/entitlement/query
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://addinslicensing.store.office.com/orgid/apps/remove
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://addinslicensing.store.office.com/orgid/entitlement/query
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://analysis.windows.net/powerbi/api
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://api.aadrm.com
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://api.aadrm.com/
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://api.addins.omex.office.net/api/addins/search
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://api.addins.omex.office.net/appinfo/query
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://api.addins.omex.office.net/appstate/query
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://api.addins.store.office.com/addinstemplate
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://api.addins.store.office.com/app/query
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://api.addins.store.officeppe.com/addinstemplate
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://api.cortana.ai
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://api.diagnostics.office.com
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://api.diagnosticssdf.office.com
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://api.diagnosticssdf.office.com/v2/feedback
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://api.diagnosticssdf.office.com/v2/file
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://api.microsoftstream.com
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://api.microsoftstream.com/api/
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://api.office.net
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://api.officescripts.microsoftusercontent.com/api
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://api.onedrive.com
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://api.powerbi.com/beta/myorg/imports
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://api.powerbi.com/v1.0/myorg/datasets
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://api.powerbi.com/v1.0/myorg/groups
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://api.scheduler.
Source: HxAccounts.exe, 00000013.00000002.1689256793.000001DB2FC2B000.00000004.00000020.00020000.00000000.sdmp, 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://apis.live.net/v5.0/
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://apis.mobile.m365.svc.cloud.microsoft
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://app.powerbi.com
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://arc.msn.com/v4/api/selection
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://asgsmsproxyapi.azurewebsites.net/
Source: chromecache_113.1.dr	String found in binary or memory: https://atomiks.github.io/tippyjs/v6/accessibility/#interactivity
Source: chromecache_113.1.dr	String found in binary or memory: https://atomiks.github.io/tippyjs/v6/all-props/
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://augloop.office.com
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://augloop.office.com/v2
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://augloop.office.com;https://augloop-int.officeppe.com;https://augloop-dogfood.officeppe.com;h
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://autodiscover-s.outlook.com/
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
Source: HxAccounts.exe, 00000013.00000002.1689012961.000001DB2FC00000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://az804205.vo.msecnd.net/
Source: HxAccounts.exe, 00000013.00000002.1689012961.000001DB2FC00000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://az804205.vo.msecnd.net/f
Source: HxAccounts.exe, 00000013.00000002.1689012961.000001DB2FC00000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://az815563.vo.msecnd.net/
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://canary.designerapp.
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designer-mobile
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/create-module
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/fonts
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/mobile-assets
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/mobile-dynamic-strings
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/mobile-home-screen
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/mobile-toolbar
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://cdn.entity.
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://cdn.hubblecontent.osi.office.net/
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://cdn.int.designerapp.osi.office.net/fonts
Source: chromecache_102.1.dr	String found in binary or memory: https://cdn.jsdelivr.net/codemirror.spell-checker/latest/en_US.aff
Source: chromecache_102.1.dr	String found in binary or memory: https://cdn.jsdelivr.net/codemirror.spell-checker/latest/en_US.dic
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://client-office365-tas.msedge.net/ab
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://clients.config.office.net
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://clients.config.office.net/
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://clients.config.office.net/c2r/v1.0/DeltaAdvisory
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://clients.config.office.net/c2r/v1.0/InteractiveInstallation
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/android/policies
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/ios
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/mac
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/tenantassociationkey
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://cloudfiles.onenote.com/upload.aspx
Source: HxAccounts.exe, 00000013.00000002.1689256793.000001DB2FC2B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://config.edge.skype.com/config/v1/
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://config.edge.skype.com/config/v1/Office
Source: HxAccounts.exe, 00000013.00000002.1689256793.000001DB2FC2B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://config.edge.skype.com/config/v1/arbitrarycodeguardhttps://config.edge.skype.net/config/v1/co
Source: HxAccounts.exe, 00000013.00000002.1689256793.000001DB2FC2B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://config.edge.skype.com/config/v1/https://config.edge.skype.com/config/v1/http://test-exp-s2s.
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://config.edge.skype.com/config/v2/Office
Source: HxAccounts.exe, 00000013.00000002.1689256793.000001DB2FC2B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://config.edge.skype.net/config/v1/
Source: HxAccounts.exe, 00000013.00000002.1689256793.000001DB2FC2B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://config.edge.skype.net/config/v1/blockremoteimageloads
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://consent.config.office.com/consentcheckin/v1.0/consents
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://consent.config.office.com/consentweb/v1.0/consents
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://cortana.ai
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://cortana.ai/api
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://cr.office.com
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://d.docs.live.net
Source: chromecache_128.1.dr	String found in binary or memory: https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/browser/apple-touch-icon.
Source: chromecache_128.1.dr	String found in binary or memory: https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/browser/browserconfig.xml
Source: chromecache_128.1.dr	String found in binary or memory: https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/browser/favicon-16x16.png
Source: chromecache_128.1.dr	String found in binary or memory: https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/browser/favicon-32x32.png
Source: chromecache_128.1.dr	String found in binary or memory: https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/browser/favicon.ico?v=alQ
Source: chromecache_128.1.dr	String found in binary or memory: https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/browser/safari-pinned-tab
Source: chromecache_128.1.dr	String found in binary or memory: https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/
Source: chromecache_128.1.dr	String found in binary or memory: https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/ace-builds-Y
Source: chromecache_128.1.dr	String found in binary or memory: https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/apexcharts-C
Source: chromecache_128.1.dr	String found in binary or memory: https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/app-BYPDacsU
Source: chromecache_128.1.dr	String found in binary or memory: https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/app-cuMgshCs
Source: chromecache_128.1.dr	String found in binary or memory: https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/codemirror-C
Source: chromecache_128.1.dr	String found in binary or memory: https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/codemirror-s
Source: chromecache_128.1.dr	String found in binary or memory: https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/datadog-rum-
Source: chromecache_128.1.dr	String found in binary or memory: https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/easymde-BkQb
Source: chromecache_128.1.dr	String found in binary or memory: https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/intl-TV5EZGi
Source: chromecache_128.1.dr	String found in binary or memory: https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/laravel-echo
Source: chromecache_128.1.dr	String found in binary or memory: https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/laravel-tel-
Source: chromecache_128.1.dr	String found in binary or memory: https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/livewire-6F9
Source: chromecache_128.1.dr	String found in binary or memory: https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/marked-B-c5s
Source: chromecache_128.1.dr	String found in binary or memory: https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/moment-DVlmW
Source: chromecache_128.1.dr	String found in binary or memory: https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/moment-timez
Source: chromecache_128.1.dr	String found in binary or memory: https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/pikaday-D84F
Source: chromecache_128.1.dr	String found in binary or memory: https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/pluralize-CK
Source: chromecache_128.1.dr	String found in binary or memory: https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/pusher-js-Cs
Source: chromecache_128.1.dr	String found in binary or memory: https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/tippy-D04_KD
Source: chromecache_128.1.dr	String found in binary or memory: https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/typo-js-CA1D
Source: chromecache_128.1.dr	String found in binary or memory: https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/vanilla-pick
Source: chromecache_128.1.dr	String found in binary or memory: https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/images/syncing/robo-berni
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://dataservice.o365filtering.com
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://dataservice.o365filtering.com/
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
Source: chromecache_112.1.dr	String found in binary or memory: https://dbushell.com/
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://designerapp.azurewebsites.net
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://designerappservice.officeapps.live.com
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://dev.cortana.ai
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://dev0-api.acompli.net/autodetect
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://devnull.onenote.com
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://directory.services.
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://ecs.office.com
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://ecs.office.com/config/v1/Designer
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://ecs.office.com/config/v2/Office
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://edge.skype.com/registrar/prod
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://edge.skype.com/rps
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://enrichment.osi.office.net/
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Refresh/v1
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Resolve/v1
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Search/v1
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/StockHistory/v1
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/ipcheck/v1
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/Metadata/
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/Metadata/metadata.json
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/view/desktop/main.cshtml
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/view/web/main.cshtml
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://entitlement.diagnostics.office.com
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://entitlement.diagnosticssdf.office.com
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://excel.uservoice.com/forums/304936-excel-for-mobile-devices-tablets-phones-android
Source: chromecache_100.1.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_100.1.dr	String found in binary or memory: https://fontawesome.com/license
Source: chromecache_128.1.dr	String found in binary or memory: https://fonts.googleapis.com
Source: chromecache_128.1.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Press
Source: chromecache_128.1.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_123.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/jetbrainsmono/v20/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR
Source: chromecache_123.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/pressstart2p/v15/e3t4euO8T-267oIAQAu6jDQyK3nRivN04w.woff2)
Source: chromecache_123.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/pressstart2p/v15/e3t4euO8T-267oIAQAu6jDQyK3nVivM.woff2)
Source: chromecache_123.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/pressstart2p/v15/e3t4euO8T-267oIAQAu6jDQyK3nWivN04w.woff2)
Source: chromecache_123.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/pressstart2p/v15/e3t4euO8T-267oIAQAu6jDQyK3nYivN04w.woff2)
Source: chromecache_123.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/pressstart2p/v15/e3t4euO8T-267oIAQAu6jDQyK3nbivN04w.woff2)
Source: chromecache_123.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/silkscreen/v4/m8JUjfVPf62XiF7kO-i9aAhAfmKi2Oud.woff2)
Source: chromecache_123.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/silkscreen/v4/m8JUjfVPf62XiF7kO-i9aAhAfmyi2A.woff2)
Source: chromecache_123.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/silkscreen/v4/m8JXjfVPf62XiF7kO-i9YL1la1OD.woff2)
Source: chromecache_123.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/silkscreen/v4/m8JXjfVPf62XiF7kO-i9YLNlaw.woff2)
Source: chromecache_122.1.dr	String found in binary or memory: https://github.com/Pikaday/Pikaday
Source: chromecache_117.1.dr	String found in binary or memory: https://github.com/Sphinxxxx)
Source: chromecache_93.1.dr	String found in binary or memory: https://github.com/ajaxorg/ace/issues/2312
Source: chromecache_117.1.dr	String found in binary or memory: https://github.com/dissimulate)
Source: chromecache_125.1.dr	String found in binary or memory: https://github.com/focus-trap/focus-trap/blob/master/LICENSE
Source: chromecache_125.1.dr	String found in binary or memory: https://github.com/focus-trap/tabbable/blob/master/LICENSE
Source: chromecache_112.1.dr	String found in binary or memory: https://github.com/ionaru/easy-markdown-editor
Source: chromecache_103.1.dr	String found in binary or memory: https://github.com/jackocnr/intl-tel-input).
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://globaldisco.crm.dynamics.com
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://graph.ppe.windows.net
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://graph.ppe.windows.net/
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://graph.windows.net
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://graph.windows.net/
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/api/pivots/
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/api/telemetry
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/browse?cp=remix3d
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/browse?secureurl=1
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=icons&premium=1
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=stockimages&premium=1
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=stockvideos&premium=1
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsofticon?
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://ic3.teams.office.com
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://incidents.diagnostics.office.com
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://incidents.diagnosticssdf.office.com
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://inclient.store.office.com/gyro/client
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://inclient.store.office.com/gyro/clientstore
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=ClipArt
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Facebook
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://insertmedia.bing.office.net/odc/insertmedia
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://invites.office.com/
Source: chromecache_103.1.dr	String found in binary or memory: https://ipinfo.io/json
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://learningtools.onenote.com/learningtoolsapi/v2.0/GetFreeformSpeech
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://learningtools.onenote.com/learningtoolsapi/v2.0/Getvoices
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://lifecycle.office.com
Source: HxAccounts.exe, 00000013.00000002.1693660072.000001DB35E13000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com
Source: HxAccounts.exe, 00000013.00000002.1693660072.000001DB35E13000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://login.microsoftonline.com
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://login.microsoftonline.com/
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://login.microsoftonline.com/organizations
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://login.windows-ppe.net/common/oauth2/authorize
Source: HxAccounts.exe, 00000013.00000002.1693730239.000001DB35E34000.00000004.00000020.00020000.00000000.sdmp, 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://login.windows.local
Source: HxAccounts.exe, 00000013.00000002.1693730239.000001DB35E34000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.windows.local/
Source: HxAccounts.exe, 00000013.00000002.1693730239.000001DB35E34000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.windows.localP
Source: HxAccounts.exe, 00000013.00000002.1693730239.000001DB35E34000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.windows.net
Source: HxAccounts.exe, 00000013.00000002.1693730239.000001DB35E34000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.windows.net/
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://login.windows.net/common/oauth2/authorize
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://loki.delve.office.com/api/v1/configuration/officewin32/
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://lookup.onenote.com/lookup/geolocation/v1
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://make.powerautomate.com
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://management.azure.com
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://management.azure.com/
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://management.core.windows.net/
Source: chromecache_118.1.dr	String found in binary or memory: https://marked.js.org/#/USING_ADVANCED.md#options
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://messagebroker.mobile.m365.svc.cloud.microsoft
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://messaging.action.office.com/
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://messaging.action.office.com/setcampaignaction
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://messaging.action.office.com/setuseraction16
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://messaging.engagement.office.com/
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://messaging.engagement.office.com/campaignmetadataaggregator
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://messaging.lifecycle.office.com/
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://messaging.lifecycle.office.com/getcustommessage16
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://messaging.office.com/
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://metadata.templates.cdn.office.net/client/log
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://mss.office.com
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://my.microsoftpersonalcontent.com
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://ncus.contentsync.
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://ncus.pagecontentsync.
Source: HxAccounts.exe, 00000013.00000002.1689096794.000001DB2FC13000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://nexus.officeapps.live.com
Source: HxAccounts.exe, 00000013.00000002.1689096794.000001DB2FC13000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://nexusrules.officeapps.live.com
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://notification.m365.svc.cloud.microsoft/
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://notification.m365.svc.cloud.microsoft/PushNotifications.Register
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://o365auditrealtimeingestion.manage.office.com/api/userauditrecord
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://ocos-office365-s2s.msedge.net/ab
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://odc.officeapps.live.com/odc/stat/images/OneDriveUpsell.png
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://odc.officeapps.live.com/odc/xml?resource=OneDriveSignUpUpsell
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://odc.officeapps.live.com/odc/xml?resource=OneDriveSyncClientUpsell
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://ods-diagnostics-ppe.trafficmanager.net
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://ofcrecsvcapi-int.azurewebsites.net/
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://officeapps.live.com
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://officeci.azurewebsites.net/api/
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://officepyservice.office.net/
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://officepyservice.office.net/service.functionality
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://officesetup.getmicrosoftkey.com
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://ogma.osi.office.net/TradukoApi/api/v1.0/
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officeentities
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officeentitiesupdated
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officesharedentities
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officesharedentitiesupdated
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://onedrive.live.com
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://onedrive.live.com/embed?
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://otelrules.svc.static.microsoft
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://outlook.office.com
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://outlook.office.com/
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://outlook.office.com/autosuggest/api/v1/init?cvid=
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://outlook.office365.com
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://outlook.office365.com/
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://outlook.office365.com/api/v1.0/me/Activities
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://outlook.office365.com/autodiscover/autodiscover.json
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://outlook.office365.com/connectors
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://ovisualuiapp.azurewebsites.net/pbiagave/
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://pages.store.office.com/appshome.aspx?productgroup=Outlook
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://pages.store.office.com/review/query
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://pages.store.office.com/webapplandingpage.aspx
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://partnerservices.getmicrosoftkey.com/PartnerProvisioning.svc/v1/subscriptions
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://planner.cloud.microsoft
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://portal.office.com/account/?ref=ClientMeControl
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://posarprodcssservice.accesscontrol.windows.net/v2/OAuth2-13
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://powerlift-user.acompli.net
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://powerlift.acompli.net
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://prod-global-autodetect.acompli.net/autodetect
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://prod.api.loop.cloud.microsoft/
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://prod.mds.office.com/mds/api/v1.0/clientmodeldirectory
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://prod.support.office.com/InAppHelp
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://pushchannel.1drv.ms
Source: chromecache_96.1.dr	String found in binary or memory: https://pusher.com/
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://res.cdn.office.net
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://res.cdn.office.net/mro1cdnstorage/fonts/prod/4.41
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://res.cdn.office.net/polymer/models
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://res.getmicrosoftkey.com/api/redemptionevents
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://rpsticket.partnerservices.getmicrosoftkey.com
Source: chromecache_128.1.dr	String found in binary or memory: https://rsms.me/
Source: chromecache_128.1.dr	String found in binary or memory: https://rsms.me/inter/inter.css
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://safelinks.protection.outlook.com/api/GetPolicy
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://service.officepy.microsoftusercontent.com/
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://service.powerapps.com
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://settings.outlook.com
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://shell.suite.office.com:1443
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://skyapi.live.net/Activity/
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://sr.outlook.office.net/ws/speech/recognize/assistant/work
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://staging.cortana.ai
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://statics.teams.cdn.office.net/evergreen-assets/illustrations/win32/m365-device-desktop-dark-1
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://statics.teams.cdn.office.net/evergreen-assets/illustrations/win32/m365-device-desktop-dark-2
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://statics.teams.cdn.office.net/evergreen-assets/illustrations/win32/m365-device-desktop-hc-100
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://statics.teams.cdn.office.net/evergreen-assets/illustrations/win32/m365-device-desktop-hc-150
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://statics.teams.cdn.office.net/evergreen-assets/illustrations/win32/m365-device-desktop-hc-200
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://statics.teams.cdn.office.net/evergreen-assets/illustrations/win32/m365-device-desktop-light-
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://storage.azure.com/
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://storage.live.com/clientlogs/uploadlocation
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://store.office.cn/addinstemplate
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://store.office.de/addinstemplate
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://substrate.office.com
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://substrate.office.com/Notes-Internal.ReadWrite
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://substrate.office.com/search/api/v1/SearchHistory
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://substrate.office.com/search/api/v2/init
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://syncservice.o365syncservice.com/"
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://teams.cloud.microsoft/ups/global/
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://templatesmetadata.office.net/
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://uci.cdn.office.net/mirrored/smartlookup/current/
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://uci.officeapps.live.com/OfficeInsights/web/views/insights.desktop.html
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://uci.officeapps.live.com/OfficeInsights/web/views/insights.immersive.html
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://useraudit.o365auditrealtimeingestion.manage.office.com
Source: chromecache_117.1.dr	String found in binary or memory: https://vanilla-picker.js.org
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://visio.uservoice.com/forums/368202-visio-on-devices
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://web.microsoftstream.com/video/
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://webshell.suite.office.com
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://word-edit.officeapps.live.com/we/rrdiscovery.ashx
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://wus2.contentsync.
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://wus2.pagecontentsync.
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://www.bingapis.com/api/v7/urlpreview/search?appid=E93048236FE27D972F67C5AF722136866DF65FA2
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://www.odwebp.svc.ms
Source: 15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	String found in binary or memory: https://www.yammer.com
Source: HxAccounts.exe, 00000013.00000002.1693730239.000001DB35E50000.00000004.00000020.00020000.00000000.sdmp, HxAccounts.exe, 00000013.00000002.1693730239.000001DB35E34000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://xsts.auth.xboxlive.com
Source: HxAccounts.exe, 00000013.00000002.1693730239.000001DB35E34000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://xsts.auth.xboxlive.com/

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49695 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49697
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49695
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49694
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49693
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49692
Source: unknown	Network traffic detected: HTTP traffic on port 49692 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747

Source: unknown	HTTPS traffic detected: 142.250.69.4:443 -> 192.168.2.7:49692 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.8.115:443 -> 192.168.2.7:49693 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.8.115:443 -> 192.168.2.7:49694 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.7:49695 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.58.14:443 -> 192.168.2.7:49697 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.154.149.105:443 -> 192.168.2.7:49700 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.154.149.105:443 -> 192.168.2.7:49699 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.154.149.105:443 -> 192.168.2.7:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.154.149.105:443 -> 192.168.2.7:49702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.154.149.105:443 -> 192.168.2.7:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.154.149.105:443 -> 192.168.2.7:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.154.149.105:443 -> 192.168.2.7:49701 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.58.14:443 -> 192.168.2.7:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.58.14:443 -> 192.168.2.7:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.154.149.105:443 -> 192.168.2.7:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.218.5.187:443 -> 192.168.2.7:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.233.158.24:443 -> 192.168.2.7:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.233.158.24:443 -> 192.168.2.7:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.233.158.24:443 -> 192.168.2.7:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.223.103.208:443 -> 192.168.2.7:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.233.158.24:443 -> 192.168.2.7:49752 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@25/78@18/9

Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe

File created: C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\AppData

Jump to behavior

Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1924,i,1896986603102136494,5714007840036234206,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=1956 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mycurricula.com/p/track/metrics?u=127564-2be71574dd8e8f55948dc23456d791d3eee6f2fc6e4617c7f74924a9177e2a90"
Source: unknown	Process created: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe" -ServerName:microsoft.windowslive.mail.AppXfbjsbkxvprcgqg6q4c9jfr0pn3kv9x5s.mca
Source: unknown	Process created: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe" -ServerName:microsoft.windowslive.manageaccounts.AppXdbf3yp5apt3t7q877db3gnz5zqpf71zj.mca
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1924,i,1896986603102136494,5714007840036234206,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=1956 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: microsoft.applications.telemetry.windows.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msoimm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mso40uiimm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mso30imm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mso20imm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: office.ui.xaml.core.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: office.ui.xaml.word.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vccorlib140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vccorlib140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mso20imm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vccorlib140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mso98imm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mso50imm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mso20imm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mso98imm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: hxoutlook.model.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.storage.applicationdata.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: hxcomm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.applicationmodel.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.globalization.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: bcp47mrm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.staterepositorycore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.networking.connectivity.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.networking.hostname.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.energy.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: rmclient.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: rometadata.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.system.diagnostics.telemetry.platformtelemetryclient.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: hxoutlook.view.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: office.ui.xaml.hxshared.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: hxoutlook.viewmodel.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: clipc.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: hxoutlook.resources.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: logoncli.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.ui.xaml.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: dcomp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.ui.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windowmanagementapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: inputhost.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mrmcorer.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.staterepositoryclient.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: d3d10warp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: dxcore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: d2d1.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: execmodelproxy.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: uiamanager.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.ui.core.textinput.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.ui.immersive.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: dataexchange.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: profext.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: office.ui.xaml.hx.mail.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: threadpoolwinrt.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.graphics.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: twinapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: office.ui.xaml.hxcalendar.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.system.remotedesktop.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.ui.xaml.controls.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: directmanipulation.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.system.profile.systemid.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.system.profile.retailinfo.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msxml6.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: winrttracing.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: ploptin.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: photometadatahandler.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: webservices.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: userdataaccountapis.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: userdataplatformhelperutil.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.accountscontrol.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: accountsrt.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: aphostclient.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: execmodelclient.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: oartim.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: globinputhost.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: gfxim.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: cryptowinrt.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: windows.applicationmodel.datatransfer.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: hxoutlook.model.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: microsoft.applications.telemetry.windows.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: mso20imm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vccorlib140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: mso30imm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: mso20imm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vccorlib140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vccorlib140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: msvcp140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: mso20imm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vcruntime140_app.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.ui.xaml.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: dcomp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.staterepositorycore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.ui.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windowmanagementapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: inputhost.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: office.ui.xaml.hxaccounts.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.storage.applicationdata.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: d3d10warp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: dxcore.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: d2d1.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: hxcomm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.applicationmodel.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.globalization.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: bcp47mrm.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.networking.connectivity.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.networking.hostname.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.energy.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: rmclient.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: rometadata.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.system.diagnostics.telemetry.platformtelemetryclient.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: mrmcorer.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.staterepositoryclient.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: execmodelproxy.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: uiamanager.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.ui.core.textinput.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.ui.immersive.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: dataexchange.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.accountscontrol.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.security.authentication.web.core.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.ui.xaml.controls.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: vaultcli.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: directmanipulation.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: profext.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: winrttracing.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: hxoutlook.resources.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: msftedit.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: globinputhost.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: windows.graphics.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: wuceffects.dll	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Section loaded: threadpoolwinrt.dll	Jump to behavior

Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A6FF50C0-56C0-71CA-5732-BED303A59628}\InProcServer32

Jump to behavior

Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe

File opened: C:\Windows\SYSTEM32\msftedit.dll

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe

Key opened: \REGISTRY\A\{5a5f355c-eafe-4cfe-e6da-dae387f63552}\LocalState\HKEY_CURRENT_USER\Software\Microsoft\Office Test\Special\PerfImm

Jump to behavior

Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: settings.dat.8.dr

Binary or memory string: VMware, Inc. VMware20,1

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 DLL Side-Loading	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 DLL Side-Loading	1 Process Injection	LSASS Memory	12 System Information Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 Extra Window Memory Injection	1 DLL Side-Loading	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Extra Window Memory Injection	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://mycurricula.com/p/track/metrics?u=127564-2be71574dd8e8f55948dc23456d791d3eee6f2fc6e4617c7f74924a9177e2a90	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://atomiks.github.io/tippyjs/v6/all-props/	0%	Avira URL Cloud	safe
https://atomiks.github.io/tippyjs/v6/accessibility/#interactivity	0%	Avira URL Cloud	safe
https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/pusher-js-Cs	0%	Avira URL Cloud	safe
https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/codemirror-CHs1P-aq.js	0%	Avira URL Cloud	safe
https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/browser/browserconfig.xml	0%	Avira URL Cloud	safe
https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/intl-TV5EZGi	0%	Avira URL Cloud	safe
https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/browser/favicon-16x16.png	0%	Avira URL Cloud	safe
https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/livewire-6F915w2D.js	0%	Avira URL Cloud	safe
https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/moment-timezone-ZsDSEs_D.js	0%	Avira URL Cloud	safe
https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/datadog-rum-DcBh80Y_.js	0%	Avira URL Cloud	safe
https://login.windows.localP	0%	Avira URL Cloud	safe
https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/browser/safari-pinned-tab	0%	Avira URL Cloud	safe
https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/codemirror-C	0%	Avira URL Cloud	safe
https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/pikaday-D84Fc82I.js	0%	Avira URL Cloud	safe
https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/marked-B-c5sAHk.js	0%	Avira URL Cloud	safe
https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/images/syncing/robo-bernie-loop.gif	0%	Avira URL Cloud	safe
https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/intl-TV5EZGiN.js	0%	Avira URL Cloud	safe
https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/vanilla-picker-DZ-25AGV.js	0%	Avira URL Cloud	safe
https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/	0%	Avira URL Cloud	safe
https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/laravel-echo-jsk6XGuY.js	0%	Avira URL Cloud	safe
https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/laravel-tel-input-4TOiLt58.js	0%	Avira URL Cloud	safe
https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/moment-timez	0%	Avira URL Cloud	safe
https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/browser/favicon.ico?v=alQM8nEzwo	0%	Avira URL Cloud	safe
https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/codemirror-s	0%	Avira URL Cloud	safe
https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/app-BYPDacsU	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	high
socket-us2-ingress-1392515755.us-east-2.elb.amazonaws.com	18.218.5.187	true	false	high
mycurricula.com	104.26.8.115	true	false	high
rsms.me	104.21.58.14	true	false	high
www.google.com	142.250.69.4	true	false	high
d2v8pn2kg220hg.cloudfront.net	18.154.149.105	true	false	high
ingress-sticky-haproxy-us2-43bf4e41e061fa0f.elb.us-east-2.amazonaws.com	18.223.103.208	true	false	high
browser-intake-datadoghq.com	3.233.158.24	true	false	high
ws-us2.pusher.com	unknown	unknown	false	high
sockjs-us2.pusher.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/livewire-6F915w2D.js	false	Avira URL Cloud: safe	unknown
https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/moment-timezone-ZsDSEs_D.js	false	Avira URL Cloud: safe	unknown
https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/codemirror-CHs1P-aq.js	false	Avira URL Cloud: safe	unknown
https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/datadog-rum-DcBh80Y_.js	false	Avira URL Cloud: safe	unknown
https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/pikaday-D84Fc82I.js	false	Avira URL Cloud: safe	unknown
https://browser-intake-datadoghq.com/api/v2/replay?ddsource=browser&ddtags=sdk_version%3A6.5.1%2Capi%3Afetch%2Cenv%3Aproduction%2Cservice%3Amycurricula.com&dd-api-key=pub25901b0d84b378df7d3f28cf558ca52f&dd-evp-origin-version=6.5.1&dd-evp-origin=browser&dd-request-id=a212e3aa-9859-472f-a533-d4646f88e9d1	false		high
https://mycurricula.com/p/track/metrics?u=127564-2be71574dd8e8f55948dc23456d791d3eee6f2fc6e4617c7f74924a9177e2a90	false		unknown
https://rsms.me/inter/font-files/Inter-SemiBold.woff2?v=4.1	false		high
https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/marked-B-c5sAHk.js	false	Avira URL Cloud: safe	unknown
https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/intl-TV5EZGiN.js	false	Avira URL Cloud: safe	unknown
https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/images/syncing/robo-bernie-loop.gif	false	Avira URL Cloud: safe	unknown
https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/vanilla-picker-DZ-25AGV.js	false	Avira URL Cloud: safe	unknown
https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/laravel-echo-jsk6XGuY.js	false	Avira URL Cloud: safe	unknown
https://browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A6.5.1%2Capi%3Afetch%2Cenv%3Aproduction%2Cservice%3Amycurricula.com&dd-api-key=pub25901b0d84b378df7d3f28cf558ca52f&dd-evp-origin-version=6.5.1&dd-evp-origin=browser&dd-request-id=e40e7faf-cc50-445f-b5ef-18a7a0030108&batch_time=1745612600224	false		high
https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/browser/favicon.ico?v=alQM8nEzwo	false	Avira URL Cloud: safe	unknown
https://browser-intake-datadoghq.com/api/v2/replay?ddsource=browser&ddtags=sdk_version%3A6.5.1%2Capi%3Afetch%2Cenv%3Aproduction%2Cservice%3Amycurricula.com&dd-api-key=pub25901b0d84b378df7d3f28cf558ca52f&dd-evp-origin-version=6.5.1&dd-evp-origin=browser&dd-request-id=34d58b9a-ad05-4d91-bd21-a4958658560f	false		high
https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/laravel-tel-input-4TOiLt58.js	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://atomiks.github.io/tippyjs/v6/accessibility/#interactivity	chromecache_113.1.dr	false	Avira URL Cloud: safe	unknown
https://shell.suite.office.com:1443	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://designerapp.azurewebsites.net	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://autodiscover-s.outlook.com/	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://useraudit.o365auditrealtimeingestion.manage.office.com	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://cdn.jsdelivr.net/codemirror.spell-checker/latest/en_US.dic	chromecache_102.1.dr	false		high
https://outlook.office365.com/connectors	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/pusher-js-Cs	chromecache_128.1.dr	false	Avira URL Cloud: safe	unknown
https://github.com/Pikaday/Pikaday	chromecache_122.1.dr	false		high
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://cdn.entity.	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://rpsticket.partnerservices.getmicrosoftkey.com	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://lookup.onenote.com/lookup/geolocation/v1	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://atomiks.github.io/tippyjs/v6/all-props/	chromecache_113.1.dr	false	Avira URL Cloud: safe	unknown
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://api.aadrm.com/	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/browser/browserconfig.xml	chromecache_128.1.dr	false	Avira URL Cloud: safe	unknown
https://fontawesome.com	chromecache_100.1.dr	false		high
https://canary.designerapp.	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
http://github.com/jrburke/requirejs	chromecache_93.1.dr	false		high
https://www.yammer.com	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/intl-TV5EZGi	chromecache_128.1.dr	false	Avira URL Cloud: safe	unknown
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://api.microsoftstream.com/api/	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://cr.office.com	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://ipinfo.io/json	chromecache_103.1.dr	false		high
https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/browser/favicon-16x16.png	chromecache_128.1.dr	false	Avira URL Cloud: safe	unknown
https://messagebroker.mobile.m365.svc.cloud.microsoft	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://otelrules.svc.static.microsoft	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://edge.skype.com/registrar/prod	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://login.windows.localP	HxAccounts.exe, 00000013.00000002.1693730239.000001DB35E34000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://res.getmicrosoftkey.com/api/redemptionevents	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://officeci.azurewebsites.net/api/	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/browser/safari-pinned-tab	chromecache_128.1.dr	false	Avira URL Cloud: safe	unknown
https://my.microsoftpersonalcontent.com	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://store.office.cn/addinstemplate	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://edge.skype.com/rps	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://messaging.engagement.office.com/	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://www.odwebp.svc.ms	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://api.powerbi.com/v1.0/myorg/groups	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://web.microsoftstream.com/video/	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://api.addins.store.officeppe.com/addinstemplate	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://graph.windows.net	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/codemirror-C	chromecache_128.1.dr	false	Avira URL Cloud: safe	unknown
https://consent.config.office.com/consentcheckin/v1.0/consents	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://learningtools.onenote.com/learningtoolsapi/v2.0/Getvoices	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://notification.m365.svc.cloud.microsoft/PushNotifications.Register	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://d.docs.live.net	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://safelinks.protection.outlook.com/api/GetPolicy	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://ncus.contentsync.	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
http://weather.service.msn.com/data.aspx	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/	chromecache_128.1.dr	false	Avira URL Cloud: safe	unknown
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://mss.office.com	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://pushchannel.1drv.ms	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://xsts.auth.xboxlive.com/	HxAccounts.exe, 00000013.00000002.1693730239.000001DB35E34000.00000004.00000020.00020000.00000000.sdmp	false		high
https://wus2.contentsync.	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://clients.config.office.net/user/v1.0/ios	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://api.addins.omex.office.net/api/addins/search	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://xsts.auth.xboxlive.com	HxAccounts.exe, 00000013.00000002.1693730239.000001DB35E50000.00000004.00000020.00020000.00000000.sdmp, HxAccounts.exe, 00000013.00000002.1693730239.000001DB35E34000.00000004.00000020.00020000.00000000.sdmp	false		high
https://outlook.office365.com/api/v1.0/me/Activities	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://clients.config.office.net/user/v1.0/android/policies	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://entitlement.diagnostics.office.com	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://outlook.office.com/	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://storage.live.com/clientlogs/uploadlocation	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/moment-timez	chromecache_128.1.dr	false	Avira URL Cloud: safe	unknown
https://login.microsoftonline.com	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://substrate.office.com/search/api/v1/SearchHistory	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://cdn.jsdelivr.net/codemirror.spell-checker/latest/en_US.aff	chromecache_102.1.dr	false		high
https://fontawesome.com/license	chromecache_100.1.dr	false		high
https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/app-BYPDacsU	chromecache_128.1.dr	false	Avira URL Cloud: safe	unknown
https://github.com/ionaru/easy-markdown-editor	chromecache_112.1.dr	false		high
https://clients.config.office.net/c2r/v1.0/InteractiveInstallation	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://prod.api.loop.cloud.microsoft/	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://service.powerapps.com	15CE1714-5873-43FE-AEF4-0F79F5DF6163.8.dr	false		high
https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/codemirror-s	chromecache_128.1.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.26.8.115	mycurricula.com	United States	13335	CLOUDFLARENETUS	false
3.233.158.24	browser-intake-datadoghq.com	United States	14618	AMAZON-AESUS	false
142.250.69.4	www.google.com	United States	15169	GOOGLEUS	false
104.21.58.14	rsms.me	United States	13335	CLOUDFLARENETUS	false
18.218.5.187	socket-us2-ingress-1392515755.us-east-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
18.223.103.208	ingress-sticky-haproxy-us2-43bf4e41e061fa0f.elb.us-east-2.amazonaws.com	United States	16509	AMAZON-02US	false
18.154.149.105	d2v8pn2kg220hg.cloudfront.net	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.7

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1674486
Start date and time:	2025-04-25 22:21:13 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 56s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://mycurricula.com/p/track/metrics?u=127564-2be71574dd8e8f55948dc23456d791d3eee6f2fc6e4617c7f74924a9177e2a90
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@25/78@18/9

Warnings

Exclude process from analysis (whitelisted): BackgroundTransferHost.exe, sppsvc.exe, HxTsr.exe, RuntimeBroker.exe, SIHClient.exe, SgrmBroker.exe, svchost.exe, ApplicationFrameHost.exe
Excluded IPs from analysis (whitelisted): 192.178.49.174, 142.250.68.227, 142.250.101.84, 192.178.49.206, 142.250.68.234, 192.178.49.195, 199.232.214.172, 52.109.0.91, 13.107.42.16, 192.178.49.163, 52.111.229.19, 4.245.163.56, 184.29.183.29, 13.107.5.88, 52.167.249.196
Excluded domains from analysis (whitelisted): config.edge.skype.com.trafficmanager.net, slscr.update.microsoft.com, clientservices.googleapis.com, dns.msftncsi.com, clients2.google.com, redirector.gvt1.com, config-edge-skype.l-0007.l-msedge.net, wus-azsc-config.officeapps.live.com, update.googleapis.com, officeclient.microsoft.com, l-0007.l-msedge.net, c.pki.goog, config.edge.skype.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, fonts.gstatic.com, prod.configsvc1.live.com.akadns.net, ctldl.windowsupdate.com, prod.nexusrules.live.com.akadns.net, fe3cr.delivery.mp.microsoft.com, outlookmobile-office365-tas.msedge.net, edgedl.me.gvt1.com, l-0007.config.skype.com, config.officeapps.live.com, us.configsvc1.live.com.akadns.net, settings.data.microsoft.com, clients.l.google.com, nexusrules.officeapps.live.com
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKey calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://mycurricula.com/p/track/metrics?u=127564-2be71574dd8e8f55948dc23456d791d3eee6f2fc6e4617c7f74924a9177e2a90

Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsym.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsym.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\en-gb\locimages\offsym.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\en-gb\locimages\offsym.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsymsb.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsymsb.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\en-gb\locimages\offsymsb.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\en-gb\locimages\offsymsb.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsymsl.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsymsl.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\en-gb\locimages\offsymsl.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsymsl.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsymsl.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Windows\Fonts\segoeuil.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsym.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\offsym.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Windows\Fonts\segoeuisl.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\fonts\symbol.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\fonts\symbol.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\fonts\symbol.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Windows\Fonts\arialbd.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\en-gb\officons.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\en-gb\officons.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\en-us\officons.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\en-us\officons.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\en-gb\officons.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\en-us\officons.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe	Queries volume information: C:\Windows\Fonts\segoeuib.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxAccounts.exe	Queries volume information: C:\Windows\Fonts\segmdl2.ttf VolumeInformation	Jump to behavior

Process:	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	180780
Entropy (8bit):	5.2964194914086296
Encrypted:	false
SSDEEP:	1536:KrVSPRAcqbz4wgxEbhe7HWKQjj/hMpcAZl1p5ihs7gXXLEVJnaOkIY1YdGVF8S7z:Fge7HWKQjj//X412z
MD5:	BD4DD8824E5807600823BF86E8426846
SHA1:	A3728C5C971A58467226CC3EA15DFB0B50781309
SHA-256:	8A029335691CB66CCE3F80B0CCB178CC5AA240D91AB96388BD0B93B48ECC5C71
SHA-512:	7F415CDB0760BD9086E7B646F550FFCDC7897825BAF53BAEF5C02302265C807B64E6EAEFB6D79330700656F803413403876DA178DAEA8D6234B77BB1A78A88A8
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<o:OfficeConfig xmlns:o="urn:schemas-microsoft-com:office:office">.. <o:services o:GenerationTime="2025-04-25T20:22:50">.. Build: 16.0.18413.40127-->.. <o:default>.. <o:ticket o:headerName="Authorization" o:headerValue="{}" />.. </o:default>.. <o:service o:name="Research">.. <o:url>https://word-edit.officeapps.live.com/we/rrdiscovery.ashx</o:url>.. </o:service>.. <o:service o:name="ORedir">.. <o:url>https://o15.officeredir.microsoft.com/r</o:url>.. </o:service>.. <o:service o:name="ORedirSSL">.. <o:url>https://o15.officeredir.microsoft.com/r</o:url>.. </o:service>.. <o:service o:name="ClViewClientHelpId" o:authentication="1">.. <o:url>https://[MAX.BaseHost]/client/results?fullframe=yes</o:url>.. <o:ticket o:policy="DELEGATION" o:idprovider="1" o:target="[MAX.AuthHost]" o:headerValue="Bearer {}" />.. <o:ticket o:idprovider="3" o:headerValue="Bearer {}" o:resourceId="[MAX.Resourc

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65364)
Category:	downloaded
Size (bytes):	13673808
Entropy (8bit):	4.1299283330696515
Encrypted:	false
SSDEEP:	24576:x4wDNUYnXbgUQyCUKMqnUz2Ba9yf+zYR/n18Ck4w:KilbuRW07Jw
MD5:	C11EC015136C56BE0697D875D09C0D63
SHA1:	0F9C9846EFDE852B723988844A9A59679640F34E
SHA-256:	9D6936E139668F407306CD3C93E8873437E100D78B2BEA4DA0AAC1AA06AC640E
SHA-512:	BAA516E1CEADB55C7ADF9D9980D505538A6C84DCDE5BB470DBC65009D9E0EE309C0CB26F80F17CF716E17F723F41354382693B7058A6725682AEFE628BC2834B
Malicious:	false
Reputation:	low
URL:	https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/@fortawesome-DMKKry78.js
Preview:	/!. Font Awesome Pro 6.7.2 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license (Commercial License). * Copyright 2024 Fonticons, Inc.. */(()=>{let Z={},E={};try{typeof window<"u"&&(Z=window),typeof document<"u"&&(E=document)}catch{}var{userAgent:u=""}=Z.navigator\|\|{},o=Z,w=E;function _(a,L,e){var C;(L=typeof(C=((i,I)=>{if(typeof i!="object"\|\|!i)return i;var H=i[Symbol.toPrimitive];if(H===void 0)return(I==="string"?String:Number)(i);if(typeof(H=H.call(i,I\|\|"default"))!="object")return H;throw new TypeError("@@toPrimitive must return a primitive value.")})(L,"string"))=="symbol"?C:C+"")in a?Object.defineProperty(a,L,{value:e,enumerable:!0,configurable:!0,writable:!0}):a[L]=e}function N(a,L){var e,C=Object.keys(a);return Object.getOwnPropertySymbols&&(e=Object.getOwnPropertySymbols(a),L&&(e=e.filter(function(i){return Object.getOwnPropertyDescriptor(a,i).enumerable})),C.push.apply(C,e)),C}function t(a){for(var L=1;L<arguments.length;L++){var e=argumen

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 25, 2025 22:22:09.782090902 CEST	53	51327	1.1.1.1	192.168.2.7
Apr 25, 2025 22:22:09.851463079 CEST	53	50045	1.1.1.1	192.168.2.7
Apr 25, 2025 22:22:10.939090967 CEST	53	54743	1.1.1.1	192.168.2.7
Apr 25, 2025 22:22:11.216197014 CEST	53	58036	1.1.1.1	192.168.2.7
Apr 25, 2025 22:22:14.135097027 CEST	64672	53	192.168.2.7	1.1.1.1
Apr 25, 2025 22:22:14.135211945 CEST	58526	53	192.168.2.7	1.1.1.1
Apr 25, 2025 22:22:14.275804043 CEST	53	64672	1.1.1.1	192.168.2.7
Apr 25, 2025 22:22:14.275949001 CEST	53	58526	1.1.1.1	192.168.2.7
Apr 25, 2025 22:22:15.459724903 CEST	51266	53	192.168.2.7	1.1.1.1
Apr 25, 2025 22:22:15.459865093 CEST	64433	53	192.168.2.7	1.1.1.1
Apr 25, 2025 22:22:15.609879017 CEST	53	51266	1.1.1.1	192.168.2.7
Apr 25, 2025 22:22:15.637567043 CEST	53	64433	1.1.1.1	192.168.2.7
Apr 25, 2025 22:22:16.933865070 CEST	61468	53	192.168.2.7	1.1.1.1
Apr 25, 2025 22:22:16.934206009 CEST	55358	53	192.168.2.7	1.1.1.1
Apr 25, 2025 22:22:16.957606077 CEST	62024	53	192.168.2.7	1.1.1.1
Apr 25, 2025 22:22:16.957792044 CEST	64926	53	192.168.2.7	1.1.1.1
Apr 25, 2025 22:22:16.982594967 CEST	49409	53	192.168.2.7	1.1.1.1
Apr 25, 2025 22:22:16.982764006 CEST	64862	53	192.168.2.7	1.1.1.1
Apr 25, 2025 22:22:17.074320078 CEST	53	61468	1.1.1.1	192.168.2.7
Apr 25, 2025 22:22:17.074419022 CEST	53	55358	1.1.1.1	192.168.2.7
Apr 25, 2025 22:22:17.096321106 CEST	53	62386	1.1.1.1	192.168.2.7
Apr 25, 2025 22:22:17.098130941 CEST	53	62024	1.1.1.1	192.168.2.7
Apr 25, 2025 22:22:17.098208904 CEST	53	64926	1.1.1.1	192.168.2.7
Apr 25, 2025 22:22:17.142180920 CEST	53	64862	1.1.1.1	192.168.2.7
Apr 25, 2025 22:22:17.151777029 CEST	53	49409	1.1.1.1	192.168.2.7
Apr 25, 2025 22:22:20.417860985 CEST	52481	53	192.168.2.7	1.1.1.1
Apr 25, 2025 22:22:20.419708967 CEST	62629	53	192.168.2.7	1.1.1.1
Apr 25, 2025 22:22:20.559498072 CEST	53	52481	1.1.1.1	192.168.2.7
Apr 25, 2025 22:22:20.563414097 CEST	53	62629	1.1.1.1	192.168.2.7
Apr 25, 2025 22:22:22.264636993 CEST	54889	53	192.168.2.7	1.1.1.1
Apr 25, 2025 22:22:22.264887094 CEST	60644	53	192.168.2.7	1.1.1.1
Apr 25, 2025 22:22:22.404880047 CEST	53	54889	1.1.1.1	192.168.2.7
Apr 25, 2025 22:22:22.405225992 CEST	53	60644	1.1.1.1	192.168.2.7
Apr 25, 2025 22:22:22.559201956 CEST	63962	53	192.168.2.7	1.1.1.1
Apr 25, 2025 22:22:22.559446096 CEST	56741	53	192.168.2.7	1.1.1.1
Apr 25, 2025 22:22:22.699667931 CEST	53	56741	1.1.1.1	192.168.2.7
Apr 25, 2025 22:22:22.700774908 CEST	53	63962	1.1.1.1	192.168.2.7
Apr 25, 2025 22:22:24.283128023 CEST	57925	53	192.168.2.7	1.1.1.1
Apr 25, 2025 22:22:24.283860922 CEST	64954	53	192.168.2.7	1.1.1.1
Apr 25, 2025 22:22:24.424649000 CEST	53	64954	1.1.1.1	192.168.2.7
Apr 25, 2025 22:22:24.424808025 CEST	53	57925	1.1.1.1	192.168.2.7
Apr 25, 2025 22:22:28.100235939 CEST	53	53393	1.1.1.1	192.168.2.7
Apr 25, 2025 22:22:47.187508106 CEST	53	58227	1.1.1.1	192.168.2.7
Apr 25, 2025 22:23:09.558943987 CEST	53	64652	1.1.1.1	192.168.2.7
Apr 25, 2025 22:23:10.166409016 CEST	53	64724	1.1.1.1	192.168.2.7
Apr 25, 2025 22:23:12.884033918 CEST	53	57763	1.1.1.1	192.168.2.7

Timestamp	Bytes transferred	Direction	Data
2025-04-25 20:22:15 UTC	754	OUT	GET /p/track/metrics?u=127564-2be71574dd8e8f55948dc23456d791d3eee6f2fc6e4617c7f74924a9177e2a90 HTTP/1.1 Host: mycurricula.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 20:22:16 UTC	1359	IN	HTTP/1.1 418 I'm a teapot Date: Fri, 25 Apr 2025 20:22:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-amzn-remapped-date: Fri, 25 Apr 2025 20:22:16 GMT x-amzn-requestid: a22e3bd0-3d05-4131-a848-fde560b00df9 Set-Cookie: XSRF-TOKEN=eyJpdiI6IkYvMXBYRVg0VGx4KzNmY3V4NVdUL2c9PSIsInZhbHVlIjoiQmQyMTliOUJ2WE5BUTRyd3I4ckEyL0V5R1paUXozMlJablQ3ZGxMMS9yeC96UEU0YnhzNlM5dFFZOGRHZFd1cWV2MWZocGFHWmFOUjJMbUUrRFI3TDVVZWxSOXFQVFc0MlNWTEV6bVZHMHRNdVcycUhEZmpiN1FXNlFSVTBYZFIiLCJtYWMiOiI5OWM4N2Y5ZDNmODY5ZDYxMmZkMGVkYzQ3MWY4NmE2NTRlZmMxMDEwOTYzOTExZDYxZDBmYWM3NTg0NGRiNmI5IiwidGFnIjoiIn0%3D; expires=Fri, 25 Apr 2025 22:22:16 GMT; Max-Age=7200; path=/; secure; samesite=lax Set-Cookie: curricula_session=eyJpdiI6Ik5qUkhWMEhNY3pKeUZIM0gxWHhYOUE9PSIsInZhbHVlIjoiVmtlWlpFT3pNYVU0Mm8zRDByTGJXaTBJVGk4SUxKajYyZjZLcEtySGwrNThKUTUrNHh6REMwTWk1S2VLQ0Z2dlBncjRlUkpMOEhCZU55SjFCcGt6MFZCdHVTdHl1azFydEhjTnlKQUEyRXFnbk5NaFBlZ2hhVm81RlhoOExSa2UiLCJtYWMiOiJiYWUzOTkwMDVkYTFjNTMzZmNkNjcyNjc3ZThjMTJhMDYyYmU0YjI0YTg2NDM0YTEyODg2OTQ0NTJjMTFhYzQxIiwidGFnIjoiIn0%3D; expires=Fri, 25 Apr 2025 22:22:16 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax x-amz-apigw-id: JmJG3Gt3oAMEmDw= Cache-Control: no-cache, private x-amzn-trace-id: Root=1-680beef8-7a3a4ce0665b0aec06863fa6;Parent=6d6dcfff75882f94;Sampled=0;Lineage=1:499f168b:0
2025-04-25 20:22:16 UTC	901	IN	Data Raw: 78 2d 63 61 63 68 65 3a 20 45 72 72 6f 72 20 66 72 6f 6d 20 63 6c 6f 75 64 66 72 6f 6e 74 0d 0a 76 69 61 3a 20 31 2e 31 20 65 37 35 38 65 36 35 31 32 62 34 63 30 38 64 32 38 61 66 31 32 31 39 36 32 63 63 37 32 32 63 65 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 20 28 43 6c 6f 75 64 46 72 6f 6e 74 29 0d 0a 78 2d 61 6d 7a 2d 63 66 2d 70 6f 70 3a 20 53 46 4f 35 2d 50 31 0d 0a 78 2d 61 6d 7a 2d 63 66 2d 69 64 3a 20 68 49 43 38 2d 57 35 55 46 38 6d 72 77 6e 33 74 6f 79 69 39 76 52 6e 47 48 48 52 54 75 72 35 75 62 72 66 48 54 74 51 51 2d 30 51 45 64 36 71 51 50 51 68 33 44 41 3d 3d 0d 0a 63 66 2d 63 61 63 68 65 2d 73 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a Data Ascii: x-cache: Error from cloudfrontvia: 1.1 e758e6512b4c08d28af121962cc722ce.cloudfront.net (CloudFront)x-amz-cf-pop: SFO5-P1x-amz-cf-id: hIC8-W5UF8mrwn3toyi9vRnGHHRTur5ubrfHTtQQ-0QEd6qQPQh3DA==cf-cache-status: DYNAMICReport-To: {"endpoints":[{"url":
2025-04-25 20:22:16 UTC	478	IN	Data Raw: 34 39 34 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 74 65 Data Ascii: 4940<!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8" /> <meta http-equiv="X-UA-Compatible" content="IE=edge" /> <meta name="robots" content="noindex" /> <meta name="viewport" conte
2025-04-25 20:22:16 UTC	1369	IN	Data Raw: 38 70 6e 32 6b 67 32 32 30 68 67 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 31 63 62 62 66 64 33 62 2d 31 33 35 34 2d 34 32 65 64 2d 39 62 33 62 2d 66 35 64 34 66 32 33 35 39 61 62 65 2f 62 72 6f 77 73 65 72 2f 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 2e 70 6e 67 3f 76 3d 61 6c 51 4d 38 6e 45 7a 77 6f 22 0a 2f 3e 0a 3c 6c 69 6e 6b 0a 20 20 20 20 72 65 6c 3d 22 69 63 6f 6e 22 0a 20 20 20 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 70 6e 67 22 0a 20 20 20 20 73 69 7a 65 73 3d 22 33 32 78 33 32 22 0a 20 20 20 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 32 76 38 70 6e 32 6b 67 32 32 30 68 67 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 31 63 62 62 66 64 33 62 2d 31 33 35 34 2d 34 32 65 64 2d 39 62 33 62 2d 66 35 64 34 66 32 33 35 39 61 62 65 2f Data Ascii: 8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/browser/apple-touch-icon.png?v=alQM8nEzwo"/><link rel="icon" type="image/png" sizes="32x32" href="https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/
2025-04-25 20:22:16 UTC	1369	IN	Data Raw: 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 73 6d 73 2e 6d 65 2f 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 50 72 65 73 73 2b 53 74 61 72 74 2b 32 50 26 66 61 6d 69 6c 79 3d 53 69 6c 6b 73 63 72 65 65 6e 3a 77 67 68 74 40 34 30 30 3b 37 30 30 26 66 61 6d 69 6c 79 3d 4a 65 74 42 72 61 69 6e 73 2b 4d 6f 6e 6f 3a 77 67 68 74 40 34 30 30 3b 37 30 30 26 64 69 73 70 6c 61 79 3d Data Ascii: t" href="https://fonts.gstatic.com" crossorigin><link rel="preconnect" href="https://rsms.me/" /><link rel="preload" href="https://fonts.googleapis.com/css2?family=Press+Start+2P&family=Silkscreen:wght@400;700&family=JetBrains+Mono:wght@400;700&display=
2025-04-25 20:22:16 UTC	1369	IN	Data Raw: 61 79 5c 2e 73 68 6f 72 74 65 73 74 5d 5b 77 69 72 65 5c 3a 6c 6f 61 64 69 6e 67 5c 2e 64 65 6c 61 79 5c 2e 73 68 6f 72 74 65 73 74 5d 2c 20 5b 77 69 72 65 5c 3a 6c 6f 61 64 69 6e 67 5c 2e 64 65 6c 61 79 5c 2e 73 68 6f 72 74 65 72 5d 5b 77 69 72 65 5c 3a 6c 6f 61 64 69 6e 67 5c 2e 64 65 6c 61 79 5c 2e 73 68 6f 72 74 65 72 5d 2c 20 5b 77 69 72 65 5c 3a 6c 6f 61 64 69 6e 67 5c 2e 64 65 6c 61 79 5c 2e 73 68 6f 72 74 5d 5b 77 69 72 65 5c 3a 6c 6f 61 64 69 6e 67 5c 2e 64 65 6c 61 79 5c 2e 73 68 6f 72 74 5d 2c 20 5b 77 69 72 65 5c 3a 6c 6f 61 64 69 6e 67 5c 2e 64 65 6c 61 79 5c 2e 64 65 66 61 75 6c 74 5d 5b 77 69 72 65 5c 3a 6c 6f 61 64 69 6e 67 5c 2e 64 65 6c 61 79 5c 2e 64 65 66 61 75 6c 74 5d 2c 20 5b 77 69 72 65 5c 3a 6c 6f 61 64 69 6e 67 5c 2e 64 65 6c 61 Data Ascii: ay\.shortest][wire\:loading\.delay\.shortest], [wire\:loading\.delay\.shorter][wire\:loading\.delay\.shorter], [wire\:loading\.delay\.short][wire\:loading\.delay\.short], [wire\:loading\.delay\.default][wire\:loading\.delay\.default], [wire\:loading\.dela
2025-04-25 20:22:16 UTC	1369	IN	Data Raw: 77 2d 32 2f 33 20 66 6c 65 78 2d 63 6f 6c 20 69 74 65 6d 73 2d 73 74 61 72 74 20 6a 75 73 74 69 66 79 2d 73 74 61 72 74 20 67 61 70 2d 36 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6c 65 78 20 66 6c 65 78 2d 63 6f 6c 20 69 74 65 6d 73 2d 73 74 61 72 74 20 6a 75 73 74 69 66 79 2d 73 74 61 72 74 20 67 61 70 2d 70 78 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 5b 27 49 6e 74 65 72 27 5d 20 74 65 78 74 2d 6c 67 20 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 20 6c 65 61 64 69 6e 67 2d 37 20 74 65 78 74 2d 67 72 61 79 2d 37 30 30 22 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: w-2/3 flex-col items-start justify-start gap-6"> <div class="flex flex-col items-start justify-start gap-px"> <div class="font-['Inter'] text-lg font-semibold leading-7 text-gray-700"
2025-04-25 20:22:16 UTC	1369	IN	Data Raw: 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 6d 74 2d 34 20 62 6f 72 64 65 72 2d 6c 2d 34 20 62 6f 72 64 65 72 2d 79 65 6c 6c 6f 77 2d 35 30 30 20 62 67 2d 79 65 6c 6c 6f 77 2d 31 30 30 20 70 2d 34 20 74 65 78 74 2d 79 65 6c 6c 6f 77 2d 37 30 30 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 66 6f 6e 74 2d 62 6f 6c 64 Data Ascii: </a> </span> </div> <div class="mt-4 border-l-4 border-yellow-500 bg-yellow-100 p-4 text-yellow-700" > <p class="font-bold
2025-04-25 20:22:16 UTC	1369	IN	Data Raw: 22 0a 20 20 20 20 20 20 20 20 78 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6c 65 61 76 65 3d 22 74 72 61 6e 73 69 74 69 6f 6e 20 65 61 73 65 2d 69 6e 20 64 75 72 61 74 69 6f 6e 2d 31 30 30 22 0a 20 20 20 20 20 20 20 20 78 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6c 65 61 76 65 2d 73 74 61 72 74 3d 22 6f 70 61 63 69 74 79 2d 31 30 30 22 0a 20 20 20 20 20 20 20 20 78 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6c 65 61 76 65 2d 65 6e 64 3d 22 6f 70 61 63 69 74 79 2d 30 22 0a 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 66 69 78 65 64 20 72 69 67 68 74 2d 31 30 20 6d 61 78 2d 77 2d 73 6d 20 77 2d 66 75 6c 6c 20 62 67 2d 77 68 69 74 65 20 73 68 61 64 6f 77 2d 6c 67 20 72 6f 75 6e 64 65 64 2d 6c 67 20 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 2d 61 75 74 6f 20 72 69 6e 67 2d 31 Data Ascii: " x-transition:leave="transition ease-in duration-100" x-transition:leave-start="opacity-100" x-transition:leave-end="opacity-0" class="fixed right-10 max-w-sm w-full bg-white shadow-lg rounded-lg pointer-events-auto ring-1
2025-04-25 20:22:16 UTC	1369	IN	Data Raw: 6f 63 75 73 3a 72 69 6e 67 2d 32 20 66 6f 63 75 73 3a 72 69 6e 67 2d 6f 66 66 73 65 74 2d 32 20 66 6f 63 75 73 3a 72 69 6e 67 2d 67 72 61 79 2d 35 30 30 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 72 2d 6f 6e 6c 79 22 3e 43 6c 6f 73 65 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 20 63 6c 61 73 73 3d 22 66 61 2d 73 6f 6c 69 64 20 66 61 2d 78 6d 61 72 6b 20 77 2d 35 20 68 2d 35 22 3e 3c 2f 69 3e 0a 0a 0a 0a 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 20 Data Ascii: ocus:ring-2 focus:ring-offset-2 focus:ring-gray-500"> <span class="sr-only">Close</span> <i class="fa-solid fa-xmark w-5 h-5"></i> </button> </div> </div> </div></div>
2025-04-25 20:22:16 UTC	1369	IN	Data Raw: 33 62 2d 66 35 64 34 66 32 33 35 39 61 62 65 2f 62 75 69 6c 64 2f 61 73 73 65 74 73 2f 70 6c 75 72 61 6c 69 7a 65 2d 43 4b 79 38 77 6a 4b 6c 2e 6a 73 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 6f 64 75 6c 65 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 32 76 38 70 6e 32 6b 67 32 32 30 68 67 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 31 63 62 62 66 64 33 62 2d 31 33 35 34 2d 34 32 65 64 2d 39 62 33 62 2d 66 35 64 34 66 32 33 35 39 61 62 65 2f 62 75 69 6c 64 2f 61 73 73 65 74 73 2f 61 70 65 78 63 68 61 72 74 73 2d 43 52 30 6c 4a 50 49 53 2e 6a 73 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 6f 64 75 6c 65 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 32 76 38 70 6e 32 6b 67 32 32 30 68 67 2e Data Ascii: 3b-f5d4f2359abe/build/assets/pluralize-CKy8wjKl.js" /><link rel="modulepreload" href="https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/apexcharts-CR0lJPIS.js" /><link rel="modulepreload" href="https://d2v8pn2kg220hg.

Timestamp	Bytes transferred	Direction	Data
2025-04-25 20:22:16 UTC	1398	OUT	GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1 Host: mycurricula.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mycurricula.com/p/track/metrics?u=127564-2be71574dd8e8f55948dc23456d791d3eee6f2fc6e4617c7f74924a9177e2a90 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IkYvMXBYRVg0VGx4KzNmY3V4NVdUL2c9PSIsInZhbHVlIjoiQmQyMTliOUJ2WE5BUTRyd3I4ckEyL0V5R1paUXozMlJablQ3ZGxMMS9yeC96UEU0YnhzNlM5dFFZOGRHZFd1cWV2MWZocGFHWmFOUjJMbUUrRFI3TDVVZWxSOXFQVFc0MlNWTEV6bVZHMHRNdVcycUhEZmpiN1FXNlFSVTBYZFIiLCJtYWMiOiI5OWM4N2Y5ZDNmODY5ZDYxMmZkMGVkYzQ3MWY4NmE2NTRlZmMxMDEwOTYzOTExZDYxZDBmYWM3NTg0NGRiNmI5IiwidGFnIjoiIn0%3D; curricula_session=eyJpdiI6Ik5qUkhWMEhNY3pKeUZIM0gxWHhYOUE9PSIsInZhbHVlIjoiVmtlWlpFT3pNYVU0Mm8zRDByTGJXaTBJVGk4SUxKajYyZjZLcEtySGwrNThKUTUrNHh6REMwTWk1S2VLQ0Z2dlBncjRlUkpMOEhCZU55SjFCcGt6MFZCdHVTdHl1azFydEhjTnlKQUEyRXFnbk5NaFBlZ2hhVm81RlhoOExSa2UiLCJtYWMiOiJiYWUzOTkwMDVkYTFjNTMzZmNkNjcyNjc3ZThjMTJhMDYyYmU0YjI0YTg2NDM0YTEyODg2OTQ0NTJjMTFhYzQxIiwidGFnIjoiIn0%3D
2025-04-25 20:22:17 UTC	821	IN	HTTP/1.1 200 OK Date: Fri, 25 Apr 2025 20:22:17 GMT Content-Type: application/javascript Content-Length: 1239 Connection: close Last-Modified: Fri, 18 Apr 2025 14:27:47 GMT ETag: "68026163-4d7" Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HtE9pU86UKJJhsWYw28INwoQciLpjeySwpiGnc4w0qRZ0TYRIn6qngQwewayjgJUJA0Kiw5M8P4No8qQqri64U1awN10cBeFyhSqFiBcymCu4HaXr%2BfwQfdX7ed0SvGSfA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Server: cloudflare CF-RAY: 93608d349ef4cb9e-LAX X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Sun, 27 Apr 2025 20:22:17 GMT Cache-Control: max-age=172800 Cache-Control: public Accept-Ranges: bytes
2025-04-25 20:22:17 UTC	548	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 74 72 79 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 29 72 65 74 75 72 6e 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 3f 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 65 29 3a 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 20 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 27 3c 61 20 68 72 65 66 3d 22 27 2b 65 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2b 27 22 3e 3c 2f 61 3e 27 2c 64 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 30 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 Data Ascii: !function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href
2025-04-25 20:22:17 UTC	691	IN	Data Raw: 2b 2b 29 74 72 79 7b 76 61 72 20 6f 3d 72 5b 63 5d 2c 61 3d 6f 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 6c 29 3b 61 3e 2d 31 26 26 28 6f 2e 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 22 2b 6e 28 6f 2e 68 72 65 66 2c 61 2b 6c 2e 6c 65 6e 67 74 68 29 29 7d 63 61 74 63 68 28 69 29 7b 65 28 69 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 75 29 2c 63 3d 30 3b 63 3c 72 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 74 72 79 7b 76 61 72 20 6f 3d 72 5b 63 5d 2c 61 3d 6f 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 69 3d 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 66 29 3b 69 66 28 69 29 7b 76 61 72 20 6c 3d 6e 28 69 2c 30 29 2c 64 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e Data Ascii: ++)try{var o=r[c],a=o.href.indexOf(l);a>-1&&(o.href="mailto:"+n(o.href,a+l.length))}catch(i){e(i)}}function o(t){for(var r=t.querySelectorAll(u),c=0;c<r.length;c++)try{var o=r[c],a=o.parentNode,i=o.getAttribute(f);if(i){var l=n(i,0),d=document.createTextN

Timestamp	Bytes transferred	Direction	Data
2025-04-25 20:22:17 UTC	552	OUT	OPTIONS /report/v4?s=YLOM7AxOdgpD7U%2BiByak%2BzzNwRhqLujqzk%2BS%2BvAzIoTqR38bxWkYHNLsjZxX0tWsfH%2BykSRVkIDBONddyUxWFRVh6fzWey%2Fa1xrPdVGMYOS7jxcYdeKDuwD7p63Ufrs%2BIg%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://mycurricula.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 20:22:17 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Fri, 25 Apr 2025 20:22:17 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-04-25 20:22:17 UTC	576	OUT	GET /inter/inter.css HTTP/1.1 Host: rsms.me Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://mycurricula.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 20:22:17 UTC	738	IN	HTTP/1.1 200 OK Date: Fri, 25 Apr 2025 20:22:17 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: cloudflare X-Origin-Cache: HIT Last-Modified: Sat, 16 Nov 2024 01:00:53 GMT Access-Control-Allow-Origin: * Etag: W/"6737eec5-2ce9" Expires: Fri, 11 Apr 2025 19:12:35 GMT Cache-Control: max-age=14400 X-Proxy-Cache: HIT X-Github-Request-Id: DD72:19A824:3BAD3F2:3D4CFC5:6760A6CF Via: 1.1 varnish Age: 24 X-Served-By: cache-lax-kwhp1940124-LAX X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1735385229.529902,VS0,VE1 Vary: Accept-Encoding X-Fastly-Request-Id: 2c597612f2bf46e0669dbb68f1bbc542e93f5734 Cf-Cache-Status: HIT CF-RAY: 93608d386a76cba7-LAX alt-svc: h3=":443"; ma=86400
2025-04-25 20:22:17 UTC	631	IN	Data Raw: 32 63 65 39 0d 0a 2f 2a 0a 46 6f 6e 74 20 66 61 6d 69 6c 69 65 73 20 64 65 66 69 6e 65 64 20 62 79 20 74 68 69 73 20 43 53 53 3a 0a 20 20 2d 20 49 6e 74 65 72 56 61 72 69 61 62 6c 65 20 20 76 61 72 69 61 62 6c 65 20 66 6f 6e 74 20 66 6f 72 20 6d 6f 64 65 72 6e 20 77 65 62 20 62 72 6f 77 73 65 72 73 0a 20 20 2d 20 49 6e 74 65 72 20 20 20 20 20 20 20 20 20 20 73 74 61 74 69 63 20 66 6f 6e 74 73 20 66 6f 72 20 6f 6c 64 65 72 20 77 65 62 20 62 72 6f 77 73 65 72 73 20 28 73 6d 61 6c 6c 20 6f 70 74 69 63 61 6c 20 73 69 7a 65 29 0a 20 20 2d 20 49 6e 74 65 72 44 69 73 70 6c 61 79 20 20 20 73 74 61 74 69 63 20 66 6f 6e 74 73 20 66 6f 72 20 6f 6c 64 65 72 20 77 65 62 20 62 72 6f 77 73 65 72 73 20 28 6c 61 72 67 65 20 6f 70 74 69 63 61 6c 20 73 69 7a 65 29 0a 0a 55 Data Ascii: 2ce9/*Font families defined by this CSS: - InterVariable variable font for modern web browsers - Inter static fonts for older web browsers (small optical size) - InterDisplay static fonts for older web browsers (large optical size)U
2025-04-25 20:22:17 UTC	1369	IN	Data Raw: 20 49 6e 74 65 72 56 61 72 69 61 62 6c 65 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 69 74 61 6c 69 63 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 31 30 30 20 39 30 30 3b 0a 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 66 6f 6e 74 2d 66 69 6c 65 73 2f 49 6e 74 65 72 56 61 72 69 61 62 6c 65 2d 49 74 61 6c 69 63 2e 77 6f 66 66 32 3f 76 3d 34 2e 31 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 7d 0a 2f 2a 20 6c 65 67 61 63 79 20 6e 61 6d 65 20 22 49 6e 74 65 72 20 76 61 72 22 20 28 4f 63 74 20 32 30 32 33 29 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 49 6e 74 65 72 20 76 61 72 27 3b 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d Data Ascii: InterVariable; font-style: italic; font-weight: 100 900; font-display: swap; src: url('font-files/InterVariable-Italic.woff2?v=4.1') format('woff2');}/* legacy name "Inter var" (Oct 2023) */@font-face { font-family:'Inter var'; font-style:norm
2025-04-25 20:22:17 UTC	1369	IN	Data Raw: 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 20 73 72 63 3a 75 72 6c 28 22 66 6f 6e 74 2d 66 69 6c 65 73 2f 49 6e 74 65 72 2d 4c 69 67 68 74 49 74 61 6c 69 63 2e 77 6f 66 66 32 3f 76 3d 34 2e 31 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 20 7d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 49 6e 74 65 72 3b 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 20 73 72 63 3a 75 72 6c 28 22 66 6f 6e 74 2d 66 69 6c 65 73 2f 49 6e 74 65 72 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 32 3f 76 Data Ascii: font-style:italic; font-weight:300; font-display:swap; src:url("font-files/Inter-LightItalic.woff2?v=4.1") format("woff2"); }@font-face { font-family:Inter; font-style:normal; font-weight:400; font-display:swap; src:url("font-files/Inter-Regular.woff2?v
2025-04-25 20:22:17 UTC	1369	IN	Data Raw: 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 49 6e 74 65 72 3b 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 38 30 30 3b 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 20 73 72 63 3a 75 72 6c 28 22 66 6f 6e 74 2d 66 69 6c 65 73 2f 49 6e 74 65 72 2d 45 78 74 72 61 42 6f 6c 64 2e 77 6f 66 66 32 3f 76 3d 34 2e 31 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 20 7d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 49 6e 74 65 72 3b 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 38 30 30 3b 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 20 73 72 63 3a 75 72 6c 28 22 66 6f Data Ascii: @font-face { font-family:Inter; font-style:normal; font-weight:800; font-display:swap; src:url("font-files/Inter-ExtraBold.woff2?v=4.1") format("woff2"); }@font-face { font-family:Inter; font-style:italic; font-weight:800; font-display:swap; src:url("fo
2025-04-25 20:22:17 UTC	1369	IN	Data Raw: 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 20 73 72 63 3a 75 72 6c 28 22 66 6f 6e 74 2d 66 69 6c 65 73 2f 49 6e 74 65 72 44 69 73 70 6c 61 79 2d 4c 69 67 68 74 2e 77 6f 66 66 32 3f 76 3d 34 2e 31 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 20 7d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 49 6e 74 65 72 44 69 73 70 6c 61 79 3b 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 20 73 72 63 3a 75 72 6c 28 22 66 6f 6e 74 2d 66 69 6c 65 73 2f 49 6e 74 65 72 44 69 73 70 6c 61 79 2d 4c 69 67 68 74 49 74 61 6c 69 63 2e 77 6f 66 66 32 3f Data Ascii: ; font-weight:300; font-display:swap; src:url("font-files/InterDisplay-Light.woff2?v=4.1") format("woff2"); }@font-face { font-family:InterDisplay; font-style:italic; font-weight:300; font-display:swap; src:url("font-files/InterDisplay-LightItalic.woff2?
2025-04-25 20:22:17 UTC	1369	IN	Data Raw: 74 3a 37 30 30 3b 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 20 73 72 63 3a 75 72 6c 28 22 66 6f 6e 74 2d 66 69 6c 65 73 2f 49 6e 74 65 72 44 69 73 70 6c 61 79 2d 42 6f 6c 64 2e 77 6f 66 66 32 3f 76 3d 34 2e 31 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 20 7d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 49 6e 74 65 72 44 69 73 70 6c 61 79 3b 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 20 73 72 63 3a 75 72 6c 28 22 66 6f 6e 74 2d 66 69 6c 65 73 2f 49 6e 74 65 72 44 69 73 70 6c 61 79 2d 42 6f 6c 64 49 74 61 6c 69 63 2e 77 6f 66 66 32 3f 76 3d 34 2e 31 22 29 20 66 6f 72 6d 61 74 Data Ascii: t:700; font-display:swap; src:url("font-files/InterDisplay-Bold.woff2?v=4.1") format("woff2"); }@font-face { font-family:InterDisplay; font-style:italic; font-weight:700; font-display:swap; src:url("font-files/InterDisplay-BoldItalic.woff2?v=4.1") format
2025-04-25 20:22:17 UTC	1369	IN	Data Raw: 2f 2a 20 4f 70 65 6e 20 6e 69 6e 65 20 2a 2f 0a 20 20 20 20 20 20 20 20 6c 63 2d 6c 2d 77 69 74 68 2d 74 61 69 6c 3a 20 20 20 35 3b 20 2f 2a 20 4c 6f 77 65 72 2d 63 61 73 65 20 4c 20 77 69 74 68 20 74 61 69 6c 20 2a 2f 0a 20 20 20 20 20 20 20 20 73 69 6d 70 6c 69 66 69 65 64 2d 75 3a 20 20 20 20 20 36 3b 20 2f 2a 20 53 69 6d 70 6c 69 66 69 65 64 20 75 20 2a 2f 0a 20 20 20 20 20 20 20 20 61 6c 74 2d 64 6f 75 62 6c 65 2d 73 3a 20 20 20 20 20 37 3b 20 2f 2a 20 41 6c 74 65 72 6e 61 74 65 20 47 65 72 6d 61 6e 20 64 6f 75 62 6c 65 20 73 20 2a 2f 0a 20 20 20 20 20 20 20 20 75 63 2d 69 2d 77 69 74 68 2d 73 65 72 69 66 3a 20 20 38 3b 20 2f 2a 20 55 70 70 65 72 2d 63 61 73 65 20 69 20 77 69 74 68 20 73 65 72 69 66 20 2a 2f 0a 20 20 20 20 20 20 20 20 75 63 2d 67 2d Data Ascii: /* Open nine / lc-l-with-tail: 5; / Lower-case L with tail / simplified-u: 6; / Simplified u / alt-double-s: 7; / Alternate German double s / uc-i-with-serif: 8; / Upper-case i with serif */ uc-g-
2025-04-25 20:22:17 UTC	1369	IN	Data Raw: 6e 2d 34 3a 20 20 20 20 20 20 20 20 20 20 20 32 3b 20 2f 2a 20 4f 70 65 6e 20 66 6f 75 72 20 2a 2f 0a 20 20 20 20 20 20 20 20 6f 70 65 6e 2d 36 3a 20 20 20 20 20 20 20 20 20 20 20 33 3b 20 2f 2a 20 4f 70 65 6e 20 73 69 78 20 2a 2f 0a 20 20 20 20 20 20 20 20 6f 70 65 6e 2d 39 3a 20 20 20 20 20 20 20 20 20 20 20 34 3b 20 2f 2a 20 4f 70 65 6e 20 6e 69 6e 65 20 2a 2f 0a 20 20 20 20 20 20 20 20 6c 63 2d 6c 2d 77 69 74 68 2d 74 61 69 6c 3a 20 20 20 35 3b 20 2f 2a 20 4c 6f 77 65 72 2d 63 61 73 65 20 4c 20 77 69 74 68 20 74 61 69 6c 20 2a 2f 0a 20 20 20 20 20 20 20 20 73 69 6d 70 6c 69 66 69 65 64 2d 75 3a 20 20 20 20 20 36 3b 20 2f 2a 20 53 69 6d 70 6c 69 66 69 65 64 20 75 20 2a 2f 0a 20 20 20 20 20 20 20 20 61 6c 74 2d 64 6f 75 62 6c 65 2d 73 3a 20 20 20 20 20 Data Ascii: n-4: 2; /* Open four / open-6: 3; / Open six / open-9: 4; / Open nine / lc-l-with-tail: 5; / Lower-case L with tail / simplified-u: 6; / Simplified u */ alt-double-s:
2025-04-25 20:22:17 UTC	1296	IN	Data Raw: 31 33 3b 0a 20 20 20 20 20 20 20 20 61 6c 74 2d 31 3a 20 20 20 20 20 20 20 20 20 20 20 20 31 3b 20 2f 2a 20 41 6c 74 65 72 6e 61 74 65 20 6f 6e 65 20 2a 2f 0a 20 20 20 20 20 20 20 20 61 6c 74 2d 33 3a 20 20 20 20 20 20 20 20 20 20 20 20 39 3b 20 2f 2a 20 46 6c 61 74 2d 74 6f 70 20 74 68 72 65 65 20 2a 2f 0a 20 20 20 20 20 20 20 20 6f 70 65 6e 2d 34 3a 20 20 20 20 20 20 20 20 20 20 20 32 3b 20 2f 2a 20 4f 70 65 6e 20 66 6f 75 72 20 2a 2f 0a 20 20 20 20 20 20 20 20 6f 70 65 6e 2d 36 3a 20 20 20 20 20 20 20 20 20 20 20 33 3b 20 2f 2a 20 4f 70 65 6e 20 73 69 78 20 2a 2f 0a 20 20 20 20 20 20 20 20 6f 70 65 6e 2d 39 3a 20 20 20 20 20 20 20 20 20 20 20 34 3b 20 2f 2a 20 4f 70 65 6e 20 6e 69 6e 65 20 2a 2f 0a 20 20 20 20 20 20 20 20 6c 63 2d 6c 2d 77 69 74 68 2d Data Ascii: 13; alt-1: 1; /* Alternate one / alt-3: 9; / Flat-top three / open-4: 2; / Open four / open-6: 3; / Open six / open-9: 4; / Open nine */ lc-l-with-

Timestamp	Bytes transferred	Direction	Data
2025-04-25 20:22:17 UTC	630	OUT	GET /1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/app-cuMgshCs.js HTTP/1.1 Host: d2v8pn2kg220hg.cloudfront.net Connection: keep-alive Origin: https://mycurricula.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://mycurricula.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 20:22:18 UTC	663	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 5782 Connection: close Date: Fri, 25 Apr 2025 20:22:18 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: HEAD, GET, PUT, POST Last-Modified: Thu, 24 Apr 2025 19:37:49 GMT ETag: "b56b28d7bb656895650712b8ec69432a" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Expires: Sat, 24 May 2025 00:40:22 GMT Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 34dd87875785e0ee116e7e29b2ad6cc4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P4 X-Amz-Cf-Id: 7B7O13WcXL2by00MrJe2lCDuxuGVbgaX2rgGPPY2KCQyaPbCLB3rSw==
2025-04-25 20:22:18 UTC	3198	IN	Data Raw: 69 6d 70 6f 72 74 7b 73 20 61 73 20 70 2c 61 20 61 73 20 77 7d 66 72 6f 6d 22 2e 2f 40 73 69 6d 70 6c 65 77 65 62 61 75 74 68 6e 2d 43 4c 76 43 58 6f 43 48 2e 6a 73 22 3b 69 6d 70 6f 72 74 22 2e 2f 40 66 6f 72 74 61 77 65 73 6f 6d 65 2d 44 4d 4b 4b 72 79 37 38 2e 6a 73 22 3b 69 6d 70 6f 72 74 7b 69 20 61 73 20 66 7d 66 72 6f 6d 22 2e 2f 69 6e 74 6c 2d 54 56 35 45 5a 47 69 4e 2e 6a 73 22 3b 69 6d 70 6f 72 74 7b 70 20 61 73 20 67 7d 66 72 6f 6d 22 2e 2f 70 6c 75 72 61 6c 69 7a 65 2d 43 4b 79 38 77 6a 4b 6c 2e 6a 73 22 3b 69 6d 70 6f 72 74 7b 41 20 61 73 20 76 7d 66 72 6f 6d 22 2e 2f 61 70 65 78 63 68 61 72 74 73 2d 43 52 30 6c 4a 50 49 53 2e 6a 73 22 3b 69 6d 70 6f 72 74 7b 45 20 61 73 20 79 7d 66 72 6f 6d 22 2e 2f 65 61 73 79 6d 64 65 2d 42 6b 51 62 4c 64 Data Ascii: import{s as p,a as w}from"./@simplewebauthn-CLvCXoCH.js";import"./@fortawesome-DMKKry78.js";import{i as f}from"./intl-TV5EZGiN.js";import{p as g}from"./pluralize-CKy8wjKl.js";import{A as v}from"./apexcharts-CR0lJPIS.js";import{E as y}from"./easymde-BkQbLd
2025-04-25 20:22:18 UTC	2584	IN	Data Raw: 72 79 7b 64 3d 61 77 61 69 74 20 77 28 7b 6f 70 74 69 6f 6e 73 4a 53 4f 4e 3a 61 2c 75 73 65 42 72 6f 77 73 65 72 41 75 74 6f 66 69 6c 6c 3a 69 2c 76 65 72 69 66 79 42 72 6f 77 73 65 72 41 75 74 6f 66 69 6c 6c 49 6e 70 75 74 3a 21 31 7d 29 7d 63 61 74 63 68 28 68 29 7b 69 66 28 69 29 72 65 74 75 72 6e 3b 74 68 72 6f 77 20 68 7d 63 6f 6e 73 74 20 63 3d 61 77 61 69 74 28 61 77 61 69 74 20 66 65 74 63 68 28 22 2f 61 75 74 68 2f 70 61 73 73 6b 65 79 2f 76 65 72 69 66 79 2d 6c 6f 67 69 6e 22 2c 7b 6d 65 74 68 6f 64 3a 22 50 4f 53 54 22 2c 68 65 61 64 65 72 73 3a 7b 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 2c 22 58 2d 43 53 52 46 2d 54 4f 4b 45 4e 22 3a 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c Data Ascii: ry{d=await w({optionsJSON:a,useBrowserAutofill:i,verifyBrowserAutofillInput:!1})}catch(h){if(i)return;throw h}const c=await(await fetch("/auth/passkey/verify-login",{method:"POST",headers:{"Content-Type":"application/json","X-CSRF-TOKEN":document.querySel

Timestamp	Bytes transferred	Direction	Data
2025-04-25 20:22:18 UTC	527	OUT	POST /report/v4?s=YLOM7AxOdgpD7U%2BiByak%2BzzNwRhqLujqzk%2BS%2BvAzIoTqR38bxWkYHNLsjZxX0tWsfH%2BykSRVkIDBONddyUxWFRVh6fzWey%2Fa1xrPdVGMYOS7jxcYdeKDuwD7p63Ufrs%2BIg%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 474 Content-Type: application/reports+json Origin: https://mycurricula.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 20:22:18 UTC	474	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 31 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 34 36 33 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 36 2e 38 2e 31 31 35 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 31 38 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 79 63 75 72 72 69 63 75 6c 61 2e 63 6f 6d 2f Data Ascii: [{"age":1,"body":{"elapsed_time":1463,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.26.8.115","status_code":418,"type":"http.error"},"type":"network-error","url":"https://mycurricula.com/
2025-04-25 20:22:18 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Fri, 25 Apr 2025 20:22:18 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-04-25 20:22:18 UTC	635	OUT	GET /1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/livewire-6F915w2D.js HTTP/1.1 Host: d2v8pn2kg220hg.cloudfront.net Connection: keep-alive Origin: https://mycurricula.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://mycurricula.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 20:22:19 UTC	665	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 219764 Connection: close Date: Fri, 25 Apr 2025 20:22:19 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: HEAD, GET, PUT, POST Last-Modified: Thu, 24 Apr 2025 19:37:52 GMT ETag: "458e8ad861020f1d5c61219425d98951" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Expires: Sat, 24 May 2025 00:40:22 GMT Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 36f12098fddc7fdb77c0cc81ee436d86.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P4 X-Amz-Cf-Id: bsEsKodTZKM_eYczAd8XA-6oqo3OfmNhhBfMprkH43BbYHGPbDP4iQ==
2025-04-25 20:22:19 UTC	15719	IN	Data Raw: 76 61 72 20 5a 61 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 2c 67 73 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 65 6c 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 2c 6d 73 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 2c 74 6c 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 72 6c 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 7a 74 3d 28 65 2c 72 29 3d 3e 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7c 7c 28 30 2c 65 5b 6d 73 28 65 29 5b 30 5d 5d 29 28 28 72 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 29 2e 65 78 70 6f 72 74 73 2c 72 29 2c 72 2e 65 78 70 6f 72 74 73 Data Ascii: var Za=Object.create,gs=Object.defineProperty,el=Object.getOwnPropertyDescriptor,ms=Object.getOwnPropertyNames,tl=Object.getPrototypeOf,rl=Object.prototype.hasOwnProperty,zt=(e,r)=>function(){return r\|\|(0,e[ms(e)[0]])((r={exports:{}}).exports,r),r.exports
2025-04-25 20:22:19 UTC	1037	IN	Data Raw: 22 63 6c 65 61 72 22 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 4b 29 2c 79 65 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 64 2c 48 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 79 65 2c 61 65 29 7b 63 6f 6e 73 74 20 50 65 3d 74 68 69 73 2c 48 65 3d 50 65 2e 5f 5f 76 5f 72 61 77 2c 75 74 3d 6a 28 48 65 29 2c 78 74 3d 48 3f 74 6e 3a 64 3f 65 6e 3a 5a 72 3b 72 65 74 75 72 6e 21 64 26 26 71 65 28 75 74 2c 22 69 74 65 72 61 74 65 22 2c 78 29 2c 48 65 2e 66 6f 72 45 61 63 68 28 28 61 6e 2c 76 74 29 3d 3e 79 65 2e 63 61 6c 6c 28 61 65 2c 78 74 28 61 6e 29 2c 78 74 28 76 74 29 2c 50 65 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 72 28 64 2c 48 2c 4b 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 2e 2e 2e 79 65 29 7b 63 6f 6e 73 74 20 61 65 3d 74 68 69 Data Ascii: "clear",void 0,void 0,K),ye}function Rt(d,H){return function(ye,ae){const Pe=this,He=Pe.__v_raw,ut=j(He),xt=H?tn:d?en:Zr;return!d&&qe(ut,"iterate",x),He.forEach((an,vt)=>ye.call(ae,xt(an),xt(vt),Pe))}}function lr(d,H,K){return function(...ye){const ae=thi
2025-04-25 20:22:19 UTC	16384	IN	Data Raw: 20 50 72 28 74 68 69 73 2c 50 65 2c 21 30 29 7d 2c 67 65 74 20 73 69 7a 65 28 29 7b 72 65 74 75 72 6e 20 54 72 28 74 68 69 73 2c 21 30 29 7d 2c 68 61 73 28 50 65 29 7b 72 65 74 75 72 6e 20 4d 72 2e 63 61 6c 6c 28 74 68 69 73 2c 50 65 2c 21 30 29 7d 2c 61 64 64 3a 46 74 28 22 61 64 64 22 29 2c 73 65 74 3a 46 74 28 22 73 65 74 22 29 2c 64 65 6c 65 74 65 3a 46 74 28 22 64 65 6c 65 74 65 22 29 2c 63 6c 65 61 72 3a 46 74 28 22 63 6c 65 61 72 22 29 2c 66 6f 72 45 61 63 68 3a 52 74 28 21 30 2c 21 31 29 7d 2c 79 65 3d 7b 67 65 74 28 50 65 29 7b 72 65 74 75 72 6e 20 50 72 28 74 68 69 73 2c 50 65 2c 21 30 2c 21 30 29 7d 2c 67 65 74 20 73 69 7a 65 28 29 7b 72 65 74 75 72 6e 20 54 72 28 74 68 69 73 2c 21 30 29 7d 2c 68 61 73 28 50 65 29 7b 72 65 74 75 72 6e 20 4d 72 Data Ascii: Pr(this,Pe,!0)},get size(){return Tr(this,!0)},has(Pe){return Mr.call(this,Pe,!0)},add:Ft("add"),set:Ft("set"),delete:Ft("delete"),clear:Ft("clear"),forEach:Rt(!0,!1)},ye={get(Pe){return Pr(this,Pe,!0,!0)},get size(){return Tr(this,!0)},has(Pe){return Mr
2025-04-25 20:22:19 UTC	8949	IN	Data Raw: 74 2c 69 29 7d 66 75 6e 63 74 69 6f 6e 20 74 61 28 74 2c 69 29 7b 6c 65 74 20 61 3d 7b 7d 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 69 29 2e 66 6f 72 45 61 63 68 28 28 5b 68 2c 5f 5d 29 3d 3e 7b 61 5b 68 5d 3d 74 2e 73 74 79 6c 65 5b 68 5d 2c 68 2e 73 74 61 72 74 73 57 69 74 68 28 22 2d 2d 22 29 7c 7c 28 68 3d 6e 61 28 68 29 29 2c 74 2e 73 74 79 6c 65 2e 73 65 74 50 72 6f 70 65 72 74 79 28 68 2c 5f 29 7d 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 28 29 3d 3e 7b 74 2e 73 74 79 6c 65 2e 6c 65 6e 67 74 68 3d 3d 3d 30 26 26 74 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 73 74 79 6c 65 22 29 7d 29 2c 28 29 3d 3e 7b 62 6e 28 74 2c 61 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 61 28 74 2c 69 29 7b 6c 65 74 20 61 3d 74 2e 67 65 74 41 Data Ascii: t,i)}function ta(t,i){let a={};return Object.entries(i).forEach(([h,_])=>{a[h]=t.style[h],h.startsWith("--")\|\|(h=na(h)),t.style.setProperty(h,_)}),setTimeout(()=>{t.style.length===0&&t.removeAttribute("style")}),()=>{bn(t,a)}}function ra(t,i){let a=t.getA
2025-04-25 20:22:19 UTC	8949	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 4f 61 28 29 7b 72 65 74 75 72 6e 20 61 72 7d 76 61 72 20 77 6f 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 43 61 28 74 2c 69 29 7b 6c 65 74 20 61 3d 74 79 70 65 6f 66 20 69 21 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 28 29 3d 3e 69 3a 69 3b 72 65 74 75 72 6e 20 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 6c 65 6d 65 6e 74 3f 45 6f 28 74 2c 61 28 29 29 3a 28 77 6f 5b 74 5d 3d 61 2c 28 29 3d 3e 7b 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 41 61 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 77 6f 29 2e 66 6f 72 45 61 63 68 28 28 5b 69 2c 61 5d 29 3d 3e 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2c 7b 67 65 74 28 29 7b 72 65 74 75 72 6e 28 2e 2e 2e 68 29 3d 3e 61 28 2e 2e 2e 68 29 7d Data Ascii: function Oa(){return ar}var wo={};function Ca(t,i){let a=typeof i!="function"?()=>i:i;return t instanceof Element?Eo(t,a()):(wo[t]=a,()=>{})}function Aa(t){return Object.entries(wo).forEach(([i,a])=>{Object.defineProperty(t,i,{get(){return(...h)=>a(...h)}
2025-04-25 20:22:19 UTC	16384	IN	Data Raw: 63 74 65 64 4f 70 74 69 6f 6e 73 29 2e 6d 61 70 28 5f 3d 3e 7b 6c 65 74 20 78 3d 5f 2e 76 61 6c 75 65 7c 7c 5f 2e 74 65 78 74 3b 72 65 74 75 72 6e 20 5f 6e 28 78 29 7d 29 3a 41 72 72 61 79 2e 66 72 6f 6d 28 61 2e 74 61 72 67 65 74 2e 73 65 6c 65 63 74 65 64 4f 70 74 69 6f 6e 73 29 2e 6d 61 70 28 5f 3d 3e 5f 2e 76 61 6c 75 65 7c 7c 5f 2e 74 65 78 74 29 3b 7b 6c 65 74 20 5f 3b 72 65 74 75 72 6e 20 6d 6f 28 74 29 3f 61 2e 74 61 72 67 65 74 2e 63 68 65 63 6b 65 64 3f 5f 3d 61 2e 74 61 72 67 65 74 2e 76 61 6c 75 65 3a 5f 3d 68 3a 5f 3d 61 2e 74 61 72 67 65 74 2e 76 61 6c 75 65 2c 69 2e 69 6e 63 6c 75 64 65 73 28 22 6e 75 6d 62 65 72 22 29 3f 75 69 28 5f 29 3a 69 2e 69 6e 63 6c 75 64 65 73 28 22 62 6f 6f 6c 65 61 6e 22 29 3f 5f 6e 28 5f 29 3a 69 2e 69 6e 63 6c Data Ascii: ctedOptions).map(_=>{let x=_.value\|\|_.text;return _n(x)}):Array.from(a.target.selectedOptions).map(_=>_.value\|\|_.text);{let _;return mo(t)?a.target.checked?_=a.target.value:_=h:_=a.target.value,i.includes("number")?ui(_):i.includes("boolean")?_n(_):i.incl
2025-04-25 20:22:19 UTC	3880	IN	Data Raw: 68 65 5b 41 65 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 41 65 5d 3b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 67 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 67 65 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 68 65 29 3a 67 65 7d 2c 44 65 3d 66 75 6e 63 74 69 6f 6e 28 67 65 29 7b 72 65 74 75 72 6e 20 67 65 2e 74 61 72 67 65 74 2e 73 68 61 64 6f 77 52 6f 6f 74 26 26 74 79 70 65 6f 66 20 67 65 2e 63 6f 6d 70 6f 73 65 64 50 61 74 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 67 65 2e 63 6f 6d 70 6f 73 65 64 50 61 74 68 28 29 5b 30 5d 3a 67 65 2e 74 61 72 67 65 74 7d 2c 49 65 3d 66 75 6e 63 74 69 6f 6e 28 67 65 2c 5f 65 29 7b 76 61 72 20 68 65 3d 28 5f 65 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 5f 65 2e 64 6f 63 75 6d 65 6e 74 29 7c 7c 64 6f 63 75 6d 65 6e 74 2c 41 Data Ascii: he[Ae-1]=arguments[Ae];return typeof ge=="function"?ge.apply(void 0,he):ge},De=function(ge){return ge.target.shadowRoot&&typeof ge.composedPath=="function"?ge.composedPath()[0]:ge.target},Ie=function(ge,_e){var he=(_e==null?void 0:_e.document)\|\|document,A
2025-04-25 20:22:19 UTC	16384	IN	Data Raw: 2c 44 74 3e 3d 30 29 7b 76 61 72 20 6f 72 3d 44 74 3d 3d 3d 69 65 2e 74 61 62 62 61 62 6c 65 47 72 6f 75 70 73 2e 6c 65 6e 67 74 68 2d 31 3f 30 3a 44 74 2b 31 2c 4f 74 3d 69 65 2e 74 61 62 62 61 62 6c 65 47 72 6f 75 70 73 5b 6f 72 5d 3b 4f 65 3d 4f 74 2e 66 69 72 73 74 54 61 62 62 61 62 6c 65 4e 6f 64 65 7d 7d 7d 65 6c 73 65 20 4f 65 3d 70 65 28 22 66 61 6c 6c 62 61 63 6b 46 6f 63 75 73 22 29 3b 4f 65 26 26 28 51 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 6b 65 28 4f 65 29 29 7d 2c 56 3d 66 75 6e 63 74 69 6f 6e 28 51 29 7b 69 66 28 42 28 51 29 26 26 6c 65 28 41 65 2e 65 73 63 61 70 65 44 65 61 63 74 69 76 61 74 65 73 2c 51 29 21 3d 3d 21 31 29 7b 51 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 56 65 2e 64 65 61 63 74 69 76 61 74 65 28 Data Ascii: ,Dt>=0){var or=Dt===ie.tabbableGroups.length-1?0:Dt+1,Ot=ie.tabbableGroups[or];Oe=Ot.firstTabbableNode}}}else Oe=pe("fallbackFocus");Oe&&(Q.preventDefault(),ke(Oe))},V=function(Q){if(B(Q)&&le(Ae.escapeDeactivates,Q)!==!1){Q.preventDefault(),Ve.deactivate(
2025-04-25 20:22:19 UTC	16384	IN	Data Raw: 65 7d 66 75 6e 63 74 69 6f 6e 20 74 65 28 70 29 7b 72 65 74 75 72 6e 20 70 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 6c 65 6d 65 6e 74 7c 7c 70 20 69 6e 73 74 61 6e 63 65 6f 66 20 69 65 28 70 29 2e 45 6c 65 6d 65 6e 74 7d 66 75 6e 63 74 69 6f 6e 20 70 65 28 70 29 7b 72 65 74 75 72 6e 20 70 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 7c 7c 70 20 69 6e 73 74 61 6e 63 65 6f 66 20 69 65 28 70 29 2e 48 54 4d 4c 45 6c 65 6d 65 6e 74 7d 66 75 6e 63 74 69 6f 6e 20 6a 65 28 70 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 53 68 61 64 6f 77 52 6f 6f 74 3e 22 75 22 3f 21 31 3a 70 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 68 61 64 6f 77 52 6f 6f 74 7c 7c 70 20 69 6e 73 74 61 6e 63 65 6f 66 20 69 65 28 70 29 2e 53 68 61 64 6f 77 52 6f 6f 74 7d 66 Data Ascii: e}function te(p){return p instanceof Element\|\|p instanceof ie(p).Element}function pe(p){return p instanceof HTMLElement\|\|p instanceof ie(p).HTMLElement}function je(p){return typeof ShadowRoot>"u"?!1:p instanceof ShadowRoot\|\|p instanceof ie(p).ShadowRoot}f
2025-04-25 20:22:19 UTC	16384	IN	Data Raw: 3b 66 6f 72 28 3b 21 53 65 26 26 45 65 3b 29 45 65 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 31 26 26 6d 65 2e 69 73 45 71 75 61 6c 4e 6f 64 65 28 45 65 29 26 26 28 53 65 3d 21 30 2c 6d 65 3d 6f 74 28 74 65 2c 6b 65 2c 6d 65 29 2c 55 3d 69 65 28 6d 65 29 29 2c 45 65 3d 4f 28 70 65 2c 45 65 29 7d 69 66 28 75 65 21 3d 3d 55 29 7b 69 66 28 21 75 65 26 26 55 29 7b 24 65 5b 55 5d 3d 6d 65 2c 6d 65 3d 6f 74 28 74 65 2c 6b 65 2c 6d 65 29 2c 24 65 5b 55 5d 2e 72 65 6d 6f 76 65 28 29 2c 6d 65 3d 4f 28 74 65 2c 6d 65 29 2c 6b 65 3d 4f 28 70 65 2c 6b 65 29 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 75 65 26 26 21 55 26 26 6a 65 5b 75 65 5d 26 26 28 6d 65 2e 72 65 70 6c 61 63 65 57 69 74 68 28 6a 65 5b 75 65 5d 29 2c 6d 65 3d 6a 65 5b 75 65 5d 2c 55 3d 69 65 28 6d 65 29 29 2c Data Ascii: ;for(;!Se&&Ee;)Ee.nodeType===1&&me.isEqualNode(Ee)&&(Se=!0,me=ot(te,ke,me),U=ie(me)),Ee=O(pe,Ee)}if(ue!==U){if(!ue&&U){$e[U]=me,me=ot(te,ke,me),$e[U].remove(),me=O(te,me),ke=O(pe,ke);continue}if(ue&&!U&&je[ue]&&(me.replaceWith(je[ue]),me=je[ue],U=ie(me)),

Timestamp	Bytes transferred	Direction	Data
2025-04-25 20:22:18 UTC	591	OUT	GET /inter/font-files/Inter-SemiBold.woff2?v=4.1 HTTP/1.1 Host: rsms.me Connection: keep-alive Origin: https://mycurricula.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://rsms.me/inter/inter.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 20:22:19 UTC	745	IN	HTTP/1.1 200 OK Date: Fri, 25 Apr 2025 20:22:19 GMT Content-Type: font/woff2 Content-Length: 114812 Connection: close Server: cloudflare Accept-Ranges: bytes X-Origin-Cache: HIT Last-Modified: Sat, 16 Nov 2024 01:00:53 GMT Access-Control-Allow-Origin: * Etag: "6737eec5-1c07c" Expires: Wed, 16 Apr 2025 09:58:49 GMT Cache-Control: max-age=2678400 X-Proxy-Cache: HIT X-Github-Request-Id: 11A8:33137:2D0702C:2EC22CD:67FF7D17 Via: 1.1 varnish Age: 6988 X-Served-By: cache-bur-kbur8200083-BUR X-Cache: HIT X-Cache-Hits: 5 X-Timer: S1745421789.905715,VS0,VE0 Vary: Accept-Encoding X-Fastly-Request-Id: b1680c7cd57cfd0e77862c119e5180cf01dede8c Cf-Cache-Status: HIT CF-RAY: 93608d4199dccb9e-LAX alt-svc: h3=":443"; ma=86400
2025-04-25 20:22:19 UTC	624	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 c0 7c 00 0d 00 00 00 05 14 98 00 01 c0 1e 00 04 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 88 0c 1b 85 bb 34 1c 81 be 56 06 60 00 81 ca 2c 0a 88 92 04 86 f0 31 01 36 02 24 03 db 64 0b db 68 00 04 20 05 8f 42 07 82 80 05 5b f7 94 b4 d8 6a d8 dc 3d 82 4c 82 44 7c d2 31 d7 08 a6 a4 be 55 db 7f fa 35 a2 e6 ff 02 20 d4 66 97 09 65 63 d8 5e 4c 82 28 22 b4 aa 9d 7f 1b 87 34 75 57 45 b0 f9 67 ee 20 f3 fe 22 60 d8 39 5a 9b 8a ba fb 07 d9 66 ff ff ff ff ff ff ff ff ff ff ff ff ff ff 77 95 2c 9e dc fc dd 79 77 f3 ca 5d a7 0a d2 54 50 c0 d2 a2 d1 88 05 d3 4c 31 a6 fd 24 1f d3 3a f1 0c 12 92 90 66 49 5e 94 55 dd d0 cd 96 f7 5e 53 ac 58 dd 6a 17 35 a5 55 55 79 27 e9 4a b2 21 3d 9f f7 a8 3a 3d eb 09 52 2b 65 d5 97 Data Ascii: wOF2\|B4V`,16$dh B[j=LD\|1U5 fec^L("4uWEg "`9Zfw,yw]TPL1$:fI^U^SXj5UUy'J!=:=R+e
2025-04-25 20:22:19 UTC	1369	IN	Data Raw: 9c f0 83 41 c1 0c b4 5e 43 5e e2 24 fa d5 32 05 76 b1 5c ec aa 34 c4 3b 44 fa 31 9a 5b f8 59 e6 ba 53 0d 65 a8 5d 11 d5 7e 14 5f 5e 53 7d 55 cf f2 ed c5 ea 54 36 10 e1 18 33 1e df 51 be 03 ce d7 f0 d8 c0 aa 4a 3e 7f 37 1c ca 0e 6a eb 77 bd bd 3d c5 f9 d2 51 2f 85 9e a0 47 b9 d3 74 84 19 61 41 71 94 44 75 de 6f 88 ff 8c 36 7e e8 a9 6e 74 8c 86 06 0e 7d c4 cf 06 3f 9f 84 06 af 74 4a e3 7b b1 71 7a 81 6b c6 e3 8b f9 46 5b 1a 24 47 84 87 94 91 a2 a4 54 81 ea 86 c6 cf cc bc 45 dd a7 9b 49 a9 12 95 28 62 0e 2d cc 2a 8b 02 83 d0 59 2b de 02 2b 9b b4 14 aa 54 aa 3b bf d0 97 01 d5 f6 4d 98 fe aa da d7 a9 85 34 ff 8a 19 dd 22 93 66 aa 7f c3 84 f1 39 c3 59 27 01 1f 1c bc 62 6c 16 9d 50 0a 35 d9 a7 a5 58 4b d2 da 9f 56 9c e6 26 95 55 fc 2f 58 a7 a9 02 13 36 83 1c 5a Data Ascii: A^C^$2v\4;D1[YSe]~_^S}UT63QJ>7jw=Q/GtaAqDuo6~nt}?tJ{qzkF[$GTEI(b-*Y++T;M4"f9Y'blP5XKV&U/X6Z
2025-04-25 20:22:19 UTC	1369	IN	Data Raw: b5 37 cb 80 30 16 10 65 0e 53 66 80 ed 7f 8c b9 01 ef e3 1e aa 58 d4 eb da 32 49 1b c3 67 e6 98 6a 83 4d 53 ff 9b 79 d2 ae 24 4b d6 4f a1 29 3c 44 22 88 12 20 81 f6 aa ab 93 7e ca 7e be 80 95 0d 46 b2 d3 7b 6b 51 18 a3 a0 0a 4e 3c fb 59 a1 90 04 24 c0 f5 12 a6 0b d2 eb cf 6d 26 7a 82 68 29 69 55 d8 c4 19 26 3c d5 74 0b 20 00 65 63 4f c2 0c 4a a8 1a 28 ed 97 98 9c 5b a0 d3 52 b0 c6 44 3f b1 09 dd c2 8c 70 21 f6 c3 f9 f5 6b 7b 5c 24 14 52 17 8b d7 d1 f4 1b 25 5b 3a cb 1b 8f 4d b8 44 66 36 74 a6 93 16 4f 78 7b 25 52 c5 0e 01 64 a2 f3 7a 20 65 b6 3f 40 ff ff 01 bd dd ef 28 94 7b 01 a0 20 e0 bd 39 ed 47 c9 7e 92 36 45 46 41 60 5f 5c 4a 8a b0 b6 e6 7a fd 78 62 b4 43 bd 00 4d ad b5 0f 6d 77 cf cc 31 69 4c 27 54 92 7b e8 84 48 29 c4 44 45 47 82 5a 97 fe 30 3a 6b Data Ascii: 70eSfX2IgjMSy$KO)<D" ~~F{kQN<Y$m&zh)iU&<t ecOJ([RD?p!k{\$R%[:MDf6tOx{%Rdz e?@({ 9G~6EFA`_\JzxbCMmw1iL'T{H)DEGZ0:k
2025-04-25 20:22:19 UTC	1369	IN	Data Raw: 73 ed 25 9d 4c ca 5d bb 6f 45 f8 9a 61 7a aa d6 e8 6b 45 70 c8 5d 7d eb 2c 53 7d ae 02 9e ff 1a d6 cf be f3 49 f3 20 0b 47 cb 71 7f 84 23 4b dd bb f9 d6 2c 61 14 85 70 b4 a2 56 ae 24 47 a7 11 5a 86 2c 43 86 ff ff df 9b 4a 23 fd b3 c7 ed de b4 0e 50 03 dc 85 05 c5 2c 08 3a f3 e7 bd 14 fd 3b 4e 3c 73 5d ff 4f 93 15 f7 92 b8 22 4b c8 12 92 82 9c 00 16 18 9c 65 68 16 88 42 94 6e 64 3b 8e be d2 15 42 f0 f2 60 cd 26 74 12 48 44 f3 64 c4 c1 99 76 3c 8e 00 c3 80 38 82 74 32 4b 53 9e 93 08 67 bb c1 f7 43 ba a5 da 42 34 39 fd ed 77 10 a0 a7 61 3c 9f 2e 7a 3f ea a3 ff 9f 54 b6 16 b1 2d 00 c0 78 82 dc 7d 03 1c 65 c1 f2 a0 4d de a2 7d b2 47 4a 83 b0 87 73 47 b7 0b 9a 8e c1 5f e9 10 61 67 1c 5d f8 60 c3 40 2c e0 83 05 fd bb 6d fd b8 b1 19 8a b5 da 32 1f f6 8a 34 6a d0 Data Ascii: s%L]oEazkEp]},S}I Gq#K,apV$GZ,CJ#P,:;N<s]O"KehBnd;B`&tHDdv<8t2KSgCB49wa<.z?T-x}eM}GJsG_ag]`@,m24j
2025-04-25 20:22:19 UTC	1369	IN	Data Raw: 4c 8c 91 06 49 06 2a 47 bb e1 de f6 43 08 28 b1 46 83 6b 43 b3 c4 ee 53 25 f9 37 9e 63 04 1d c3 bd 6a fe 9e 09 ec dc 52 4a 4f 76 b5 ff f5 db 61 f9 38 70 a6 fb 99 26 38 f9 ef c4 79 0e c0 3e 02 b6 1f 3e 14 d0 7a ef f5 80 1a e7 bd a8 dc fa 52 f3 e8 5d 12 d4 06 27 3e eb 5a e9 c3 95 99 ac 70 52 20 a5 ce a4 41 ba 1a b6 b8 ec 2f e3 43 8c 29 b2 d5 f3 58 57 73 5e c8 ea 9a 30 c2 7c e0 aa e8 90 9c 05 83 08 b3 d8 b4 cd 43 ed d9 1c 73 35 49 35 09 31 76 09 1b f1 09 f5 a1 50 1a 58 3b d1 65 2e 43 c9 85 9e b3 9d 02 e8 1c 1a 64 94 87 aa 4c 2a 09 a2 1c a0 0b 4a 98 03 e6 41 07 30 84 30 37 2b c9 af fd 1f fa af 03 b3 63 dd e7 9d da a4 97 b3 fb 59 31 ad 16 d5 9b a3 3b 5a a7 60 ee c5 fd a8 4f bc 0f 4d 25 f7 d1 e9 c5 16 e5 46 fd ea 45 86 4b 55 a1 b7 65 6d 0c 9f 4b 7b 14 41 ec e5 Data Ascii: LIGC(FkCS%7cjRJOva8p&8y>>zR]'>ZpR A/C)XWs^0\|Cs5I51vPX;e.CdLJA007+cY1;Z`OM%FEKUemK{A
2025-04-25 20:22:19 UTC	1369	IN	Data Raw: 53 3a ca 08 06 12 ee 4a c6 cd 5e 04 35 01 e6 c8 22 84 1e 21 72 11 97 2c 84 fe 07 f6 02 d1 df 84 0c 0c f3 5f 97 47 e9 87 21 ac 61 a5 da bc 72 93 23 d0 5c 80 ce 61 88 81 84 1b 6f 6a f3 2e b2 67 35 f6 a6 46 65 02 cc 91 4d 30 05 2c f7 84 1e 20 12 71 b8 d9 a9 5d 32 f1 cb 82 91 f6 0f 65 20 ac 7e 17 22 2e 74 45 d9 39 8c 36 16 01 89 4e 53 1f 4d cf 8b 12 4b 69 5e 91 ac ae 47 f1 d7 f8 46 e9 c7 8f f9 22 d3 7f 3d 99 b2 65 ac 79 9a 3e 49 3f ca 18 a2 6c 5a 3c aa f5 c7 0b 44 9f 6d 88 86 32 d1 28 76 5a 6a cf 3e 35 6a 9a fa 2c 15 60 72 a5 75 13 b7 66 5d 1c 79 2c b1 5c 7c ae df cd ba 0a 56 cf 5d 23 58 6b 0a 65 f3 e2 38 1b 35 01 36 b1 99 2d ba 75 87 16 49 fc 90 d7 10 8d 67 79 93 c2 5b 53 da 1c 33 bc 64 21 b4 2e ac 41 83 b0 a7 9f 2b f6 93 4a 37 a2 c6 eb 03 94 7a 4d 96 79 ad Data Ascii: S:J^5"!r,_G!ar#\aoj.g5FeM0, q]2e ~".tE96NSMKi^GF"=ey>I?lZ<Dm2(vZj>5j,`ruf]y,\\|V]#Xke856-uIgy[S3d!.A+J7zMy
2025-04-25 20:22:19 UTC	1369	IN	Data Raw: e4 9f d4 e7 e7 0b 6c c0 17 68 13 d2 1b 3b 62 db 27 8d 91 3c 7d 50 a6 f6 23 e8 20 57 db c0 f5 f1 87 cb b5 06 3d f7 3f f1 04 de ff 6a bc 0e 1d 8d 14 83 11 53 09 ca fb 9e c1 59 de e1 82 9b ca 5c 2c d3 ad 2e 35 f8 f0 d0 cf b9 42 33 2d f1 da 4a 82 f6 1f 24 51 27 7b dc 2a 46 b5 91 0e d9 6d ec a3 9f 49 6e 46 fc 8f 4f 7b c1 63 f5 6e 1d 99 15 89 ce 8a 37 cb fd f7 65 1e 36 12 d1 b2 fe 09 b1 a0 92 5b c2 4a 78 12 85 b6 59 72 ac 38 ac 3c 76 67 d8 03 6b ac 6e 4b bb 8c 0d 6f e5 49 46 9b 1f 19 db 9a b4 8c 6f ad 64 62 47 26 b7 3e 2d 53 db 28 99 76 56 23 33 3b 90 e4 40 55 25 87 44 92 3f 92 6a 0d 63 81 f9 9f bc 22 e6 b7 1a cf d9 ec c6 73 37 6f 21 e3 ec 5c 2e 84 08 e4 b7 04 54 64 ba a9 82 b9 cc 80 9d f0 83 30 12 3c af 42 ea 54 14 dd 54 d4 ab 65 72 1e 3f 4d f2 99 44 8a 7b bf Data Ascii: lh;b'<}P# W=?jSY\,.5B3-J$Q'{*FmInFO{cn7e6[JxYr8<vgknKoIFodbG&>-S(vV#3;@U%D?jc"s7o!\.Td0<BTTer?MD{
2025-04-25 20:22:19 UTC	1369	IN	Data Raw: 58 5d 68 96 fc 0a dc a4 a9 c0 db 4d 11 3c 67 be ed 37 73 c1 14 a0 0f 89 50 f5 06 d4 e4 0c ea b5 97 5c 96 e6 06 d0 89 8a 3e 17 52 9c b5 c2 2b 9b 18 d1 32 c7 4b 75 13 d7 41 88 33 34 99 ac 55 17 fa 1c 10 17 d1 b8 74 40 d7 05 d2 35 10 bd 1c 74 f1 ce e8 1b 46 5f 72 d9 b2 38 fd 2c 00 03 89 0a 87 30 7c d6 7d 15 3f a8 f1 c9 10 02 23 22 c4 19 dd a7 88 71 71 c6 99 35 c7 6b 29 d3 c7 63 8a 59 59 5d 16 ee e6 40 9b c9 31 41 5e 61 95 89 1c 5c a1 a5 aa ac d0 9b 90 23 44 43 89 e9 e9 c5 d5 1c 19 2b ac 06 5d 21 18 ab 6d 04 d2 e6 ea f4 7b d9 bd b8 b8 fe e2 7b a3 39 e1 9c 6d c7 bd ba c4 ce 8f b7 7a 57 9f bb ef be ba aa 7a 5f 3f 5d bf 38 3f ac c4 87 e3 a1 fd 84 c8 20 e5 be 49 f3 23 2b cd bf 69 4b a8 10 84 a8 a0 75 53 00 b8 07 0b 11 bf 2a e8 c7 3e 49 f8 27 c2 93 4b 24 b7 40 c6 Data Ascii: X]hM<g7sP\>R+2KuA34Ut@5tF_r8,0\|}?#"qq5k)cYY]@1A^a\#DC+]!m{{9mzWz_?]8? I#+iKuS*>I'K$@
2025-04-25 20:22:19 UTC	1369	IN	Data Raw: cf ca fa fa 76 ef c3 f6 6d 72 8d f1 be 61 48 2d 33 65 0d 6d 7e 3d f3 53 69 a1 78 db a8 f0 ad 6e 1d 34 55 68 b5 7b ed cd 6f ef 8c 8b 13 e0 d1 d0 3a 39 d3 0f a8 8e fd 50 0f 0b 9d bb ca 8c c4 e9 c9 8a 43 27 20 34 86 7a 6e a7 1b 1c 08 c0 16 a8 96 df c5 8a 19 95 53 a3 09 01 b6 31 e3 94 e8 5a be 82 99 df a8 7a 95 65 dd ec 8e cd b3 b6 5f 7b d0 43 dd 33 b6 b6 ea aa 3d ed 05 45 bb 81 bf 18 02 63 39 d9 eb 05 ec a0 bf 5c 29 03 c6 e3 94 08 66 d2 ab 03 c0 0f 55 12 5e 6b 76 26 1e 53 77 9f 81 a7 aa 5f c7 4c 11 ae c6 02 39 94 50 83 eb 48 dd 03 90 0b 7b 1d 7e 52 b9 77 70 cf 3a 3a c2 3b 35 23 e8 b9 f0 31 a6 4f c0 7c e4 05 f3 69 22 79 8d 23 d4 ce 78 38 64 76 83 fc 78 9b ff 2d 08 9e 85 1a 2c f7 de d5 87 3a 5a 34 c2 78 39 7e ec f9 01 40 14 69 35 05 90 97 71 62 bf 39 6c 88 36 Data Ascii: vmraH-3em~=Sixn4Uh{o:9PC' 4znS1Zze_{C3=Ec9\)fU^kv&Sw_L9PH{~Rwp::;5#1O\|i"y#x8dvx-,:Z4x9~@i5qb9l6
2025-04-25 20:22:19 UTC	1369	IN	Data Raw: 38 d3 90 dd 65 e4 03 48 77 24 c0 4c 4a 48 77 aa 8c 2f 32 2b 67 80 85 55 47 11 df 4b 8c 06 aa 1b 03 52 13 0c ad 84 c1 eb c6 46 c6 b8 e8 cd f8 d0 1a c1 a4 82 10 7f c3 c4 e4 f2 a8 76 f5 61 4f a8 66 92 55 e3 da a4 d6 6d 75 90 50 4f ab bc 93 96 34 f8 df e8 db 17 7c b2 ae ce c9 69 38 1e 13 8e 82 ef 58 45 43 93 d6 46 49 4b e3 04 df 89 09 9e 9f c9 3f 16 de e3 53 7d b6 78 33 a9 60 e1 f2 e8 75 a7 2f ef a1 f3 da 5b cc 9c 54 81 1f 91 8a 87 14 d0 ca bf e2 46 94 ff 03 b6 72 0d 96 72 03 7f 1b 90 c1 72 80 9c b1 ec c3 ca 7e 2f a0 35 2f 0f 13 d1 ac 36 68 cd 1a c4 97 36 0a 88 96 b2 a5 c2 68 a9 0b ec 2d 0a 32 ca 34 ba 19 2d ca 06 5d 4b bf 50 87 5d 25 42 83 d9 13 68 c5 0b 8e 0f a3 73 04 b7 af 31 75 a4 b0 13 54 44 93 cd 1e 6c ea d4 d9 61 18 af a8 76 d2 5b bc d4 56 e1 8d 66 7d Data Ascii: 8eHw$LJHw/2+gUGKRFvaOfUmuPO4\|i8XECFIK?S}x3`u/[TFrrr~/5/6h6h-24-]KP]%Bhs1uTDlav[Vf}

Timestamp	Bytes transferred	Direction	Data
2025-04-25 20:22:18 UTC	590	OUT	GET /inter/font-files/InterVariable.woff2?v=4.1 HTTP/1.1 Host: rsms.me Connection: keep-alive Origin: https://mycurricula.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://rsms.me/inter/inter.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 20:22:19 UTC	745	IN	HTTP/1.1 200 OK Date: Fri, 25 Apr 2025 20:22:19 GMT Content-Type: font/woff2 Content-Length: 352240 Connection: close Server: cloudflare Accept-Ranges: bytes X-Origin-Cache: HIT Last-Modified: Sat, 16 Nov 2024 01:00:53 GMT Access-Control-Allow-Origin: * Etag: "6737eec5-55ff0" Expires: Mon, 21 Apr 2025 16:55:25 GMT Cache-Control: max-age=2678400 X-Proxy-Cache: MISS X-Github-Request-Id: E733:2EAC6F:C865AC:CD0BBA:68067625 Via: 1.1 varnish Age: 1129 X-Served-By: cache-lax-kwhp1940065-LAX X-Cache: HIT X-Cache-Hits: 2 X-Timer: S1745498418.518801,VS0,VE0 Vary: Accept-Encoding X-Fastly-Request-Id: 91a86f1639b361e3328e0be8040a63db067174ed Cf-Cache-Status: HIT CF-RAY: 93608d419d0d090c-LAX alt-svc: h3=":443"; ma=86400
2025-04-25 20:22:19 UTC	624	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 05 5f f0 00 13 00 00 00 0d 75 b8 00 05 5f 75 00 04 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a c1 02 1b 89 b3 0a 1c 81 be 56 3f 48 56 41 52 d7 67 3f 4d 56 41 52 81 28 06 60 3f 53 54 41 54 81 5c 27 34 00 81 ca 2c 2f 81 36 0a 88 cb 68 87 b0 04 30 9b ef 2c 01 36 02 24 03 db 64 0b db 68 00 04 20 05 9a 4c 07 82 80 05 5b a1 f8 dc 86 5f d2 3b 7d 7b b6 14 f0 c4 ef 8e 3a 28 b1 d9 13 29 dd 80 da cd 22 8a cb b4 cc 85 a6 d7 9f 7f 3f 9e ff 6f fd 77 61 83 2a d5 99 a9 ba 0c be 78 64 b3 f7 77 82 0b 15 2a 35 91 e0 60 d7 70 fc 94 8a 77 a7 63 8c 72 b0 01 a8 56 75 ff 66 36 94 ca d8 fd d8 2a c0 00 0c ad 16 45 ed 1a de 0a a9 bc 1a 12 48 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 7f cb c9 8f a7 dc ea 55 75 52 f5 7f 5f Data Ascii: wOF2_u_uBV?HVARg?MVAR(`?STAT\'4,/6h0,6$dh L[_;}{:()"?owaxdw5`pwcrVuf6*EHUuR_
2025-04-25 20:22:19 UTC	1369	IN	Data Raw: 2a 29 48 24 18 2c 76 7b f6 1d 31 1e 96 26 dc 3f 16 95 78 02 1f 59 c5 a6 20 05 a3 f6 bd 3d ed 6f 91 69 e2 0f 3d 62 8c 35 ee 30 4d 5c 57 4f 73 45 d2 21 e6 fd 21 b3 07 ad b2 85 52 c9 14 60 60 25 3b 58 d5 c8 2d 67 ca cc eb c2 4e 10 42 60 60 54 2b 42 8d 94 c4 13 18 1f 81 c0 c0 54 5d d4 61 61 8b 08 ad da 39 3f 45 da 6d bd b9 3d bb ab d2 53 09 d6 94 2f e3 1d 59 f8 d3 22 a4 ba 76 76 c5 6c 96 f7 13 d5 bd 2f 7c 60 3e 9e dc e9 03 dd 1b a1 25 d8 80 90 8e 30 57 41 c0 5c 3e 1a c3 8a 38 56 76 5b 38 8f 5b c4 5f 6a 42 65 34 f1 1f 33 6d 8c 4f e3 68 7d 36 75 39 b7 a6 fd 19 cc 32 02 9d aa 53 e3 fc b9 f0 67 09 68 b0 af 4a 48 b5 03 ea 3a 38 16 65 c6 f9 6e 02 1a ec a7 1e 73 70 6c cc 09 2e 89 b5 d6 a2 47 8d 61 45 58 39 75 d8 c6 f1 9a 40 6f d7 b5 e7 ee 3e eb c3 43 d0 a8 e7 05 45 Data Ascii: *)H$,v{1&?xY =oi=b50M\WOsE!!R``%;X-gNB``T+BT]aa9?Em=S/Y"vvl/\|`>%0WA\>8Vv[8[_jBe43mOh}6u92SghJH:8enspl.GaEX9u@o>CE
2025-04-25 20:22:19 UTC	1369	IN	Data Raw: 4e bb d3 f0 3c cf 5f eb dc 3f 88 2b 2b 91 8b 6a 55 0b 0a f3 e0 ff 3f 5b 55 dd f7 cd cc dd 03 33 2b b3 a0 9b 63 08 96 48 ea 88 5c 66 69 8f 8e 82 6a 2f cc 07 80 a5 06 a0 1a 44 70 48 6b 90 5a 5a c9 be 9f 30 96 09 0d 2a 63 65 05 98 74 78 de 6e ef fe dd c6 59 e7 8c d9 b2 52 29 b2 32 e6 b1 b3 32 76 48 94 95 8c b1 8b 8c 79 56 56 43 42 9a 28 63 67 9c d9 12 42 d6 0e e1 86 60 6e dd 46 f4 1a 96 8c 55 b1 b1 51 23 e3 41 14 91 b0 0a 6d de 6a 30 be ca c4 e6 31 09 89 94 1e 51 3d 62 a3 d2 91 c2 00 cd ad 33 10 45 54 44 a4 4b d8 06 1b 8b 0e 56 41 8f 6d 8c 15 03 46 b6 12 82 08 06 a8 58 89 f1 fa fa a9 ef fb 7e b4 fa ed 77 0f d0 dc ba 6d 54 08 2a 26 3e 2a 56 bc fa c6 87 0e c1 e8 7f f5 ab 7d bf fd b4 3f 16 55 ac 8a 15 db 18 1b b0 22 2a 24 4a 04 01 51 10 a9 0d 4f 4b b5 7f 2b 36 Data Ascii: N<_?++jU?[U3+cH\fij/DpHkZZ0cetxnYR)22vHyVVCB(cgB`nFUQ#Amj01Q=b3ETDKVAmFX~wmT&>V}?U"$JQOK+6
2025-04-25 20:22:19 UTC	1369	IN	Data Raw: 8c 8a c8 6a 7b 77 4c 98 20 eb 59 c9 10 6c b3 33 63 da 9b 33 66 e6 9c 4e 9d 09 46 13 da 88 20 8a 62 a0 20 22 2a a2 94 36 58 89 05 d6 9c 3d 75 33 36 5d 95 ab 72 95 bf fd fa f7 bf b7 48 97 ff 55 8f 56 5a 7f 20 4e f1 28 02 a0 90 30 be cb 5d d3 92 d7 87 90 5d 4a e9 45 80 19 20 f8 3f 60 ef 0a 66 ba e0 ff e1 ff ca 7e ed aa 64 92 91 5d dd 91 38 c4 4d e7 41 5f f4 17 35 24 5f 9f 05 cf e7 de be bc 49 d2 7b 9d 7f c8 4e 31 20 33 73 17 4f c8 f0 aa d5 3b b6 d9 96 39 0a 09 19 20 d7 b2 19 9d fe 01 c8 81 0c 95 4d 36 d9 5c 3e 9f ab a9 44 1a 10 e8 a7 08 8b 70 a4 d4 4c a0 80 79 f7 6b 93 21 24 fc 44 fb dc f7 a7 aa fb fa 78 6c 42 20 98 ae 2a f0 7c f7 9b 6b df 1e e0 ad 99 c3 73 d4 42 e2 33 7e 45 5b ca d4 a4 b1 c0 66 93 81 dc 15 98 5d 15 b1 90 24 2c 4b 56 ad 71 68 64 85 22 57 96 Data Ascii: j{wL Yl3c3fNF b "6X=u36]rHUVZ N(0]]JE ?`f~d]8MA_5$_I{N1 3sO;9 M6\>DpLyk!$DxlB \|ksB3~E[f]$,KVqhd"W
2025-04-25 20:22:19 UTC	1369	IN	Data Raw: ec 4a c9 15 92 2b 03 a4 5d 0d 90 76 1b a4 4a 56 b0 6b 94 2a 38 74 92 2a 25 bb 52 74 e8 94 82 ab 57 aa 5a 55 ef 7a 76 53 8b dd 2c fb cc aa 5c 13 42 d8 ad f2 62 5f bd 9c d5 32 a4 b0 9a e5 fc ff 65 a9 f5 db f7 92 84 26 8a ed 12 68 f7 8a a4 e6 bc a2 c6 dc a4 c6 04 d8 6e 4b cc 7c e3 ec 4e bd d8 45 be a8 02 22 23 ab c8 c8 48 80 8c 8c 04 a8 57 51 80 3a 2a 8b 60 bf 8c 02 d8 51 91 20 06 a4 80 62 81 a2 70 48 49 ad c3 e9 a6 d0 8e e4 a1 da 50 9e a3 1e a3 73 23 12 a0 5e 65 91 ea a8 2a a2 95 2c 4a 73 20 70 8c 33 52 1b 8e e3 18 e3 56 df 2e b6 7f f7 17 cb 59 f6 ac b6 df ac f7 7f b1 d8 7c f8 ff 5a fa 49 f5 ea 38 69 9c d4 8e b7 8c 56 65 9c a6 ca c5 e5 40 a8 09 9f 9e 4d 3d ea 4d 9a 76 e8 ff e5 20 e7 f9 fb 1d 34 8e 1b 32 72 4c 84 1a b0 71 48 6c 03 da 65 66 2e 13 42 97 20 62 Data Ascii: J+]vJVk8t%RtWZUzvS,\Bb_2e&hnK\|NE"#HWQ:`Q bpHIPs#^e,Js p3RV.Y\|ZI8iVe@M=Mv 42rLqHlef.B b
2025-04-25 20:22:19 UTC	1369	IN	Data Raw: 63 e9 b7 26 3b ad b9 a4 fc d2 a7 64 4b a6 e9 d7 29 6d 98 b2 0d 19 c6 f8 8f a6 99 2d 40 60 28 8a a3 38 94 8e 8a 47 c7 d0 b9 26 1c 79 aa be 54 4d 55 ce 62 f0 f5 28 12 c3 55 e2 85 18 db 1d 8e 03 40 3a 70 e9 34 ce 6b 17 55 ac ce 4d 69 02 d9 a5 71 62 d1 30 e0 81 1d 46 1e 8c 62 18 d8 e3 83 11 37 dd 6c 7f 57 e0 65 45 1a 73 3c fc b7 d7 32 3a f5 ff 55 7d f7 77 96 8d 66 2c 53 13 aa 30 6f c2 e1 0e 08 da 72 48 e5 10 37 a2 10 09 9b d3 55 dd 93 4a 02 78 11 5c 0c 23 5c c8 7b 16 e9 34 0f f5 d3 4a aa 7e bf 65 55 2d ba 33 61 26 6c 42 af 16 d2 8b 19 3a 12 60 40 d2 d7 cc 26 8d 01 b1 09 e2 29 b6 06 13 10 d3 4e a8 a7 bd ce 66 52 9f 8a 44 ba 18 c9 37 9a 52 53 9a a4 1b dd ca 1d fd 5c 84 84 be 0f ba c4 aa 38 8f b2 9f 40 c0 aa 39 6d a2 5d c1 3a 00 34 2a ba ee 0f f6 66 b6 04 4e 3f Data Ascii: c&;dK)m-@`(8G&yTMUb(U@:p4kUMiqb0Fb7lWeEs<2:U}wf,S0orH7UJx\#\{4J~eU-3a&lB:`@&)NfRD7RS\8@9m]:4*fN?
2025-04-25 20:22:19 UTC	1369	IN	Data Raw: d0 1a de 80 d6 0b 05 64 00 3f 20 4f 30 06 e4 1d b6 80 7c ac 34 c0 8f fe 04 38 6b 29 c0 45 9b 41 6e 08 07 b9 29 0b 0b e0 01 47 e2 80 d0 21 e9 80 30 c4 9d 30 25 98 b0 24 99 b0 a7 9e 08 64 99 88 e4 9c 5c ce 37 11 ab 6c 22 55 64 22 53 72 a2 50 76 44 33 d6 88 76 9c 91 9b 09 46 0c 12 8f 98 a7 1a b1 4c 3d e2 5c d5 88 7b f5 23 45 c9 c7 54 a5 1b 8b 8d 6c ea 1c c3 94 80 dc 28 35 8c 51 46 a4 a3 cc 18 46 d9 6b 18 e5 cb 37 2a 1a 7a ac 44 c4 b1 52 d1 c6 2a a3 1c ab 92 6e ac 26 be a9 56 d1 a9 76 f1 a9 3e d9 a9 41 c5 a9 11 e4 d4 2f fc d4 12 b1 dc 04 ae 29 9e 03 30 3d b7 33 01 a6 b7 75 09 80 f4 a9 2e 19 90 56 ba 27 80 b4 bf cb 04 a4 3f e9 ba 80 e9 db 5d 2f 30 fd b8 1b 06 a6 9f 76 23 c0 34 ee 0e 80 e9 b2 ee 10 91 70 83 c4 38 c1 8c 8b fb 60 66 ca 53 30 33 eb bf 70 b3 ec 55 Data Ascii: d? O0\|48k)EAn)G!00%$d\7l"Ud"SrPvD3vFL=\{#ETl(5QFFk7zDRn&Vv>A/)0=3u.V'?]/0v#4p8`fS03pU
2025-04-25 20:22:19 UTC	1369	IN	Data Raw: d4 62 82 e1 07 32 1c 8a 51 98 ed 7a 7e e1 04 77 7f 68 e9 fe de 39 a5 47 b2 46 d3 47 1f b3 66 1c 8f 4f 99 21 22 d6 7c a1 2c 2e 18 87 e0 d2 3d 7d 92 7b a7 f5 04 4f ec 1d 73 ab 3c c1 c6 c8 8e 66 b3 69 a0 a6 a6 f5 f5 ca ea d6 44 e5 48 c7 63 7c f3 58 cf a4 b6 ae ae 29 25 ca 25 ae c8 ca 6a 07 38 4b e7 98 d3 41 34 a8 71 f5 be 76 ff 0f 55 fc cd 65 72 0c bd 9e a5 5c e4 86 91 19 9f d7 bc 9c b2 e6 b7 20 d8 7f 3c 05 7f af 43 a6 86 a0 76 70 04 83 23 e4 4d d4 b1 21 cd 60 e7 94 43 f0 87 c1 0f bf c7 88 6e fa 11 da e5 11 63 5d 3a 60 88 b4 3f cb a8 26 b3 27 fe 95 26 26 31 c1 d8 1c b1 a2 90 8c 5b 32 4f 52 a8 38 2f 99 e4 16 57 65 1d 1d 65 65 03 81 b4 6c 28 10 57 76 50 d9 f8 7c 15 b7 4a a9 35 c5 17 0b e8 d2 be 25 d3 b6 6f 0f cb 10 85 fd 03 c5 b2 29 e2 9c 6d 3b 0e b7 da 48 39 Data Ascii: b2Qz~wh9GFGfO!"\|,.=}{Os<fiDHc\|X)%%j8KA4qvUer\ <Cvp#M!`Cnc]:`?&'&&1[2OR8/Weeel(WvP\|J5%o)m;H9
2025-04-25 20:22:19 UTC	1369	IN	Data Raw: dc 0b ab c0 7a 8d ee f1 88 fb be b2 39 b2 be 5f a9 78 4e df 50 05 ef ea 9b 5c 33 21 e9 0b 1b 1e 28 ee ff 84 d6 2c e8 6f 2e 0f d4 b0 b9 59 fd 51 31 1f 06 fe 8d 36 6b 07 ee ac 90 d3 d7 bb ea e5 14 f5 96 ea 2b f3 1a 06 86 ca 9c 32 fb 0f 85 d7 55 7d 4b 2a 7f 73 90 f3 c8 81 09 b5 d7 3c 10 36 dc 5f 38 c0 2f 40 c4 80 e6 e2 85 9b 27 6e 4d f7 cf 1c 6c d9 41 4b 06 db e7 7a f4 83 c3 d5 50 7e c3 52 42 ba 07 39 12 5c 24 58 1a 87 2e 72 37 74 43 57 b9 6b f4 b7 1b 73 e1 d0 60 e9 98 1e 2a 73 9b 86 86 17 78 b4 aa 8b 3d aa 21 4b f5 64 d7 72 54 47 3d ea cd ad b1 31 fb 24 70 d5 b8 bb aa a7 da 21 6e d8 51 43 d4 72 5b 36 94 9c af eb 86 af 3f cd 52 61 11 3d dc b4 23 99 18 be b5 23 11 c7 6a ad db 4f 59 6d dd 11 d9 dd f6 5c 82 be a0 e9 98 eb ca 1c ee a9 ee 12 0e f7 96 bb b4 88 05 Data Ascii: z9_xNP\3!(,o.YQ16k+2U}Ks<6_8/@'nMlAKzP~RB9\$X.r7tCWks`sx=!KdrTG=1$p!nQCr[6?Ra=##jOYm\
2025-04-25 20:22:19 UTC	1369	IN	Data Raw: 18 e6 bc 1b 33 26 ee c5 0c 2c 82 a6 c8 ad 4f 61 1a 7e 4f 0b a6 2a ee dc 53 a1 93 bb fd 08 c5 72 03 d9 e2 29 8e 03 18 f7 22 3b 2a f2 eb 73 51 d4 5f 18 d1 62 fc fb e5 b8 38 5c aa 45 40 60 e3 88 30 44 31 8e 3a 04 d2 a8 0d a0 63 9d 1d 4d 46 45 84 44 da 72 9b 35 aa e3 da c4 19 8d e4 0b 27 00 6b b2 42 c0 39 f3 2f 7c 42 9f be 72 6e a8 35 25 42 b4 83 42 4c 03 c3 f9 48 a5 bd 4b 85 ba 32 1c 08 b6 54 27 18 2c d1 89 3f 12 e8 66 92 61 c0 0d 14 18 96 3a 87 95 45 d8 a4 a0 6b c5 25 4c a3 7b 4f 1b 25 88 7c 28 44 05 a9 b1 42 fc 68 cb 3d 3f ce 08 82 6f 32 8a 60 9b 58 cb 69 e1 d4 b2 bb 41 61 f8 23 cd a8 10 c6 8e 6e 83 8b e7 6b 69 88 18 15 09 ce 27 62 e4 b7 83 92 42 f2 97 a0 5d 03 55 22 95 bc e2 3b 32 ee b4 6b 7c cd a4 2f 5e e8 92 f1 7d 5d e3 b4 5b 15 98 b5 05 61 4b 2f 89 21 Data Ascii: 3&,Oa~OSr)";sQ_b8\E@`0D1:cMFEDr5'kB9/\|Brn5%BBLHK2T',?fa:Ek%L{O%\|(DBh=?o2`XiAa#nki'bB]U";2k\|/^}][aK/!

Timestamp	Bytes transferred	Direction	Data
2025-04-25 20:22:19 UTC	634	OUT	GET /1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/@jaames-DqG6q-J1.js HTTP/1.1 Host: d2v8pn2kg220hg.cloudfront.net Connection: keep-alive Origin: https://mycurricula.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://mycurricula.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 20:22:20 UTC	664	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 28694 Connection: close Date: Fri, 25 Apr 2025 20:22:20 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: HEAD, GET, PUT, POST Last-Modified: Thu, 24 Apr 2025 19:37:48 GMT ETag: "ac23e873212c7e2f9345c0d6c43dc715" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Expires: Fri, 02 May 2025 01:02:51 GMT Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 8f3bb39c605410c9587becca8d929d9e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P4 X-Amz-Cf-Id: mbMzHE3YGkSpIAHjy18xTgG9O4lvs0VajLl_Pfa6_Jzpjfx3pFp8GA==
2025-04-25 20:22:20 UTC	16384	IN	Data Raw: 2f 2a 21 0a 20 2a 20 69 72 6f 2e 6a 73 20 76 35 2e 35 2e 32 0a 20 2a 20 32 30 31 36 2d 32 30 32 31 20 4a 61 6d 65 73 20 44 61 6e 69 65 6c 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 50 4c 20 32 2e 30 0a 20 2a 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6a 61 61 6d 65 73 2f 69 72 6f 2e 6a 73 0a 20 2a 2f 76 61 72 20 5f 2c 4c 2c 75 65 2c 71 2c 64 65 2c 41 3d 7b 7d 2c 51 3d 5b 5d 2c 41 65 3d 2f 61 63 69 74 7c 65 78 28 3f 3a 73 7c 67 7c 6e 7c 70 7c 24 29 7c 72 70 68 7c 67 72 69 64 7c 6f 77 73 7c 6d 6e 63 7c 6e 74 77 7c 69 6e 65 5b 63 68 5d 7c 7a 6f 6f 7c 5e 6f 72 64 7c 5e 2d 2d 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 43 28 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 72 29 65 5b 6e 5d 3d 72 5b 6e 5d 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 Data Ascii: /! iro.js v5.5.2 * 2016-2021 James Daniel * Licensed under MPL 2.0 * github.com/jaames/iro.js */var _,L,ue,q,de,A={},Q=[],Ae=/acit\|ex(?:s\|g\|n\|p\|$)\|rph\|grid\|ows\|mnc\|ntw\|ine[ch]\|zoo\|^ord\|^--/i;function C(e,r){for(var n in r)e[n]=r[n];return e}functi
2025-04-25 20:22:20 UTC	919	IN	Data Raw: 62 28 22 2b 74 2e 72 2b 22 2c 22 2b 74 2e 67 2b 22 2c 22 2b 74 2e 62 2b 22 29 22 5d 5d 3b 63 61 73 65 22 6b 65 6c 76 69 6e 22 3a 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 61 3d 65 2e 6d 69 6e 54 65 6d 70 65 72 61 74 75 72 65 2c 6f 3d 65 2e 6d 61 78 54 65 6d 70 65 72 61 74 75 72 65 2c 73 3d 38 2c 68 3d 6f 2d 61 2c 75 3d 61 2c 63 3d 30 3b 75 3c 6f 3b 75 2b 3d 68 2f 73 2c 63 2b 3d 31 29 7b 76 61 72 20 6c 3d 44 2e 6b 65 6c 76 69 6e 54 6f 52 67 62 28 75 29 2c 64 3d 6c 2e 72 2c 66 3d 6c 2e 67 2c 79 3d 6c 2e 62 3b 69 2e 70 75 73 68 28 5b 31 30 30 2f 73 2a 63 2c 22 72 67 62 28 22 2b 64 2b 22 2c 22 2b 66 2b 22 2c 22 2b 79 2b 22 29 22 5d 29 7d 72 65 74 75 72 6e 20 69 3b 63 61 73 65 22 68 75 65 22 3a 72 65 74 75 72 6e 5b 5b 30 2c 22 23 66 30 30 22 5d 2c 5b 31 36 2e 36 Data Ascii: b("+t.r+","+t.g+","+t.b+")"]];case"kelvin":for(var i=[],a=e.minTemperature,o=e.maxTemperature,s=8,h=o-a,u=a,c=0;u<o;u+=h/s,c+=1){var l=D.kelvinToRgb(u),d=l.r,f=l.g,y=l.b;i.push([100/s*c,"rgb("+d+","+f+","+y+")"])}return i;case"hue":return[[0,"#f00"],[16.6
2025-04-25 20:22:20 UTC	11391	IN	Data Raw: 74 68 2c 72 61 64 69 75 73 3a 72 2d 65 2e 62 6f 72 64 65 72 57 69 64 74 68 2c 63 78 3a 72 2c 63 79 3a 72 7d 7d 66 75 6e 63 74 69 6f 6e 20 45 65 28 65 2c 72 2c 6e 29 7b 76 61 72 20 74 3d 65 2e 77 68 65 65 6c 41 6e 67 6c 65 2c 69 3d 65 2e 77 68 65 65 6c 44 69 72 65 63 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 26 26 69 3d 3d 3d 22 63 6c 6f 63 6b 77 69 73 65 22 3f 72 3d 74 2b 72 3a 69 3d 3d 3d 22 63 6c 6f 63 6b 77 69 73 65 22 3f 72 3d 33 36 30 2d 74 2b 72 3a 6e 26 26 69 3d 3d 3d 22 61 6e 74 69 63 6c 6f 63 6b 77 69 73 65 22 3f 72 3d 74 2b 31 38 30 2d 72 3a 69 3d 3d 3d 22 61 6e 74 69 63 6c 6f 63 6b 77 69 73 65 22 26 26 28 72 3d 74 2d 72 29 2c 74 74 28 72 2c 33 36 30 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 76 61 72 20 6e 3d 72 2e 68 73 76 2c 74 3d Data Ascii: th,radius:r-e.borderWidth,cx:r,cy:r}}function Ee(e,r,n){var t=e.wheelAngle,i=e.wheelDirection;return n&&i==="clockwise"?r=t+r:i==="clockwise"?r=360-t+r:n&&i==="anticlockwise"?r=t+180-r:i==="anticlockwise"&&(r=t-r),tt(r,360)}function nt(e,r){var n=r.hsv,t=

Timestamp	Bytes transferred	Direction	Data
2025-04-25 20:22:20 UTC	634	OUT	GET /1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/typo-js-CA1DZ0vR.js HTTP/1.1 Host: d2v8pn2kg220hg.cloudfront.net Connection: keep-alive Origin: https://mycurricula.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://mycurricula.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 20:22:21 UTC	663	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 8437 Connection: close Date: Fri, 25 Apr 2025 20:22:22 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: HEAD, GET, PUT, POST Last-Modified: Thu, 24 Apr 2025 19:37:55 GMT ETag: "d056be18f1a290ee31321f58af42dc6e" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Expires: Fri, 02 May 2025 01:02:51 GMT Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 da2461b9060bf6aac3082da0d5161794.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P4 X-Amz-Cf-Id: RN83X-1HRIeJw0TEX6mAxZRqMpgPrreKB0xKbvs3F5HYZ9TrPDOSAQ==
2025-04-25 20:22:21 UTC	8437	IN	Data Raw: 69 6d 70 6f 72 74 7b 63 20 61 73 20 53 7d 66 72 6f 6d 22 2e 2f 70 6c 75 72 61 6c 69 7a 65 2d 43 4b 79 38 77 6a 4b 6c 2e 6a 73 22 3b 69 6d 70 6f 72 74 7b 61 20 61 73 20 4d 7d 66 72 6f 6d 22 2e 2f 61 63 65 2d 62 75 69 6c 64 73 2d 59 76 36 6a 79 4c 58 62 2e 6a 73 22 3b 76 61 72 20 4e 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 63 6f 6e 73 74 20 6b 3d 7b 7d 2c 79 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 6e 75 6c 6c 2c 64 65 66 61 75 6c 74 3a 6b 7d 2c 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 2c 7b 76 61 6c 75 65 3a 22 4d 6f 64 75 6c 65 22 7d 29 29 2c 44 3d 4d 28 79 29 3b 28 66 75 6e 63 74 69 6f 6e 28 50 29 7b 76 61 72 20 4c 3b 28 66 75 6e 63 74 69 Data Ascii: import{c as S}from"./pluralize-CKy8wjKl.js";import{a as M}from"./ace-builds-Yv6jyLXb.js";var N={exports:{}};const k={},y=Object.freeze(Object.defineProperty({__proto__:null,default:k},Symbol.toStringTag,{value:"Module"})),D=M(y);(function(P){var L;(functi

Timestamp	Bytes transferred	Direction	Data
2025-04-25 20:22:21 UTC	635	OUT	GET /1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/assets/@datadog-DeVISv2C.js HTTP/1.1 Host: d2v8pn2kg220hg.cloudfront.net Connection: keep-alive Origin: https://mycurricula.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://mycurricula.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 20:22:22 UTC	665	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 163488 Connection: close Date: Fri, 25 Apr 2025 20:22:22 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: HEAD, GET, PUT, POST Last-Modified: Thu, 24 Apr 2025 19:37:44 GMT ETag: "cc860efd13e72de204d7c165f17d39a9" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Expires: Sat, 24 May 2025 19:37:41 GMT Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 49ab2a39f8fab50c85ba2e21a835c49c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P4 X-Amz-Cf-Id: 21Xkr3JdikoONt67tYUppfprFyru_b8haPnSVjuBxRAzDfxh4LYxxg==
2025-04-25 20:22:22 UTC	15719	IN	Data Raw: 63 6f 6e 73 74 20 6e 6f 3d 22 6d 6f 64 75 6c 65 70 72 65 6c 6f 61 64 22 2c 72 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 68 74 74 70 73 3a 2f 2f 64 32 76 38 70 6e 32 6b 67 32 32 30 68 67 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 31 63 62 62 66 64 33 62 2d 31 33 35 34 2d 34 32 65 64 2d 39 62 33 62 2d 66 35 64 34 66 32 33 35 39 61 62 65 2f 62 75 69 6c 64 2f 22 2b 74 7d 2c 75 72 3d 7b 7d 2c 73 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 29 7b 6c 65 74 20 73 3d 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 3b 69 66 28 6e 26 26 6e 2e 6c 65 6e 67 74 68 3e 30 29 7b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 6c 69 6e 6b 22 29 3b 63 6f 6e 73 74 20 6f 3d 64 6f 63 75 6d 65 6e 74 2e Data Ascii: const no="modulepreload",ro=function(t){return"https://d2v8pn2kg220hg.cloudfront.net/1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/build/"+t},ur={},so=function(e,n,r){let s=Promise.resolve();if(n&&n.length>0){document.getElementsByTagName("link");const o=document.
2025-04-25 20:22:22 UTC	271	IN	Data Raw: 69 6f 6e 53 74 6f 72 65 53 74 72 61 74 65 67 79 54 79 70 65 3a 71 6f 28 74 29 2c 73 65 73 73 69 6f 6e 53 61 6d 70 6c 65 52 61 74 65 3a 28 65 3d 74 2e 73 65 73 73 69 6f 6e 53 61 6d 70 6c 65 52 61 74 65 29 21 3d 3d 6e 75 6c 6c 26 26 65 21 3d 3d 76 6f 69 64 20 30 3f 65 3a 31 30 30 2c 74 65 6c 65 6d 65 74 72 79 53 61 6d 70 6c 65 52 61 74 65 3a 28 6e 3d 74 2e 74 65 6c 65 6d 65 74 72 79 53 61 6d 70 6c 65 52 61 74 65 29 21 3d 3d 6e 75 6c 6c 26 26 6e 21 3d 3d 76 6f 69 64 20 30 3f 6e 3a 32 30 2c 74 65 6c 65 6d 65 74 72 79 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 53 61 6d 70 6c 65 52 61 74 65 3a 28 72 3d 74 2e 74 65 6c 65 6d 65 74 72 79 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 53 61 6d 70 6c 65 52 61 74 65 29 21 3d 3d 6e 75 6c 6c 26 26 72 21 3d 3d 76 6f 69 64 20 30 3f Data Ascii: ionStoreStrategyType:qo(t),sessionSampleRate:(e=t.sessionSampleRate)!==null&&e!==void 0?e:100,telemetrySampleRate:(n=t.telemetrySampleRate)!==null&&n!==void 0?n:20,telemetryConfigurationSampleRate:(r=t.telemetryConfigurationSampleRate)!==null&&r!==void 0?
2025-04-25 20:22:22 UTC	766	IN	Data Raw: 67 65 53 61 6d 70 6c 65 52 61 74 65 3a 28 73 3d 74 2e 74 65 6c 65 6d 65 74 72 79 55 73 61 67 65 53 61 6d 70 6c 65 52 61 74 65 29 21 3d 3d 6e 75 6c 6c 26 26 73 21 3d 3d 76 6f 69 64 20 30 3f 73 3a 35 2c 73 65 72 76 69 63 65 3a 74 2e 73 65 72 76 69 63 65 7c 7c 76 6f 69 64 20 30 2c 73 69 6c 65 6e 74 4d 75 6c 74 69 70 6c 65 49 6e 69 74 3a 21 21 74 2e 73 69 6c 65 6e 74 4d 75 6c 74 69 70 6c 65 49 6e 69 74 2c 61 6c 6c 6f 77 55 6e 74 72 75 73 74 65 64 45 76 65 6e 74 73 3a 21 21 74 2e 61 6c 6c 6f 77 55 6e 74 72 75 73 74 65 64 45 76 65 6e 74 73 2c 74 72 61 63 6b 69 6e 67 43 6f 6e 73 65 6e 74 3a 28 69 3d 74 2e 74 72 61 63 6b 69 6e 67 43 6f 6e 73 65 6e 74 29 21 3d 3d 6e 75 6c 6c 26 26 69 21 3d 3d 76 6f 69 64 20 30 3f 69 3a 4c 6e 2e 47 52 41 4e 54 45 44 2c 74 72 61 63 Data Ascii: geSampleRate:(s=t.telemetryUsageSampleRate)!==null&&s!==void 0?s:5,service:t.service\|\|void 0,silentMultipleInit:!!t.silentMultipleInit,allowUntrustedEvents:!!t.allowUntrustedEvents,trackingConsent:(i=t.trackingConsent)!==null&&i!==void 0?i:Ln.GRANTED,trac
2025-04-25 20:22:22 UTC	16384	IN	Data Raw: 62 65 66 6f 72 65 5f 73 65 6e 64 3a 21 21 74 2e 62 65 66 6f 72 65 53 65 6e 64 2c 75 73 65 5f 70 61 72 74 69 74 69 6f 6e 65 64 5f 63 72 6f 73 73 5f 73 69 74 65 5f 73 65 73 73 69 6f 6e 5f 63 6f 6f 6b 69 65 3a 74 2e 75 73 65 50 61 72 74 69 74 69 6f 6e 65 64 43 72 6f 73 73 53 69 74 65 53 65 73 73 69 6f 6e 43 6f 6f 6b 69 65 2c 75 73 65 5f 73 65 63 75 72 65 5f 73 65 73 73 69 6f 6e 5f 63 6f 6f 6b 69 65 3a 74 2e 75 73 65 53 65 63 75 72 65 53 65 73 73 69 6f 6e 43 6f 6f 6b 69 65 2c 75 73 65 5f 70 72 6f 78 79 3a 21 21 74 2e 70 72 6f 78 79 2c 73 69 6c 65 6e 74 5f 6d 75 6c 74 69 70 6c 65 5f 69 6e 69 74 3a 74 2e 73 69 6c 65 6e 74 4d 75 6c 74 69 70 6c 65 49 6e 69 74 2c 74 72 61 63 6b 5f 73 65 73 73 69 6f 6e 5f 61 63 72 6f 73 73 5f 73 75 62 64 6f 6d 61 69 6e 73 3a 74 2e Data Ascii: before_send:!!t.beforeSend,use_partitioned_cross_site_session_cookie:t.usePartitionedCrossSiteSessionCookie,use_secure_session_cookie:t.useSecureSessionCookie,use_proxy:!!t.proxy,silent_multiple_init:t.silentMultipleInit,track_session_across_subdomains:t.
2025-04-25 20:22:22 UTC	6396	IN	Data Raw: 58 74 2e 41 47 45 4e 54 2c 73 74 61 72 74 43 6c 6f 63 6b 73 3a 46 28 29 7d 29 2c 65 2e 71 75 65 75 65 46 75 6c 6c 52 65 70 6f 72 74 65 64 3d 21 30 29 3b 63 6f 6e 73 74 20 69 3d 65 2e 71 75 65 75 65 64 50 61 79 6c 6f 61 64 73 3b 66 6f 72 28 65 2e 71 75 65 75 65 64 50 61 79 6c 6f 61 64 73 3d 7a 73 28 29 3b 69 2e 73 69 7a 65 28 29 3e 30 3b 29 44 73 28 69 2e 64 65 71 75 65 75 65 28 29 2c 65 2c 6e 2c 72 2c 73 29 7d 66 75 6e 63 74 69 6f 6e 20 53 63 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 74 79 70 65 21 3d 3d 22 6f 70 61 71 75 65 22 26 26 28 74 2e 73 74 61 74 75 73 3d 3d 3d 30 26 26 21 6e 61 76 69 67 61 74 6f 72 2e 6f 6e 4c 69 6e 65 7c 7c 74 2e 73 74 61 74 75 73 3d 3d 3d 34 30 38 7c 7c 74 2e 73 74 61 74 75 73 3d 3d 3d 34 32 39 7c 7c 6d 63 28 74 2e 73 74 61 74 75 Data Ascii: Xt.AGENT,startClocks:F()}),e.queueFullReported=!0);const i=e.queuedPayloads;for(e.queuedPayloads=zs();i.size()>0;)Ds(i.dequeue(),e,n,r,s)}function Sc(t){return t.type!=="opaque"&&(t.status===0&&!navigator.onLine\|\|t.status===408\|\|t.status===429\|\|mc(t.statu
2025-04-25 20:22:22 UTC	11012	IN	Data Raw: 29 7d 29 7d 66 69 6e 61 6c 6c 79 7b 73 3d 21 31 7d 7d 72 65 74 75 72 6e 21 30 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 58 6e 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3d 3d 3d 65 7c 7c 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3d 3d 3d 22 63 6f 6d 70 6c 65 74 65 22 3f 28 6e 28 29 2c 7b 73 74 6f 70 3a 49 7d 29 3a 52 28 74 2c 77 69 6e 64 6f 77 2c 65 3d 3d 3d 22 63 6f 6d 70 6c 65 74 65 22 3f 22 6c 6f 61 64 22 3a 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 6e 2c 7b 6f 6e 63 65 3a 21 30 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 4d 63 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 6e 3d 3e 7b 58 6e 28 74 2c 65 2c 6e 29 7d 29 7d 6c 65 74 20 62 6e 3b 63 6f 6e Data Ascii: )})}finally{s=!1}}return!0}}}function Xn(t,e,n){return document.readyState===e\|\|document.readyState==="complete"?(n(),{stop:I}):R(t,window,e==="complete"?"load":"DOMContentLoaded",n,{once:!0})}function Mc(t,e){return new Promise(n=>{Xn(t,e,n)})}let bn;con
2025-04-25 20:22:22 UTC	6396	IN	Data Raw: 74 2e 74 72 61 63 65 53 61 6d 70 6c 65 52 61 74 65 29 21 3d 3d 6e 75 6c 6c 26 26 6e 21 3d 3d 76 6f 69 64 20 30 3f 6e 3a 31 30 30 2c 72 75 6c 65 50 73 72 3a 5f 65 28 74 2e 74 72 61 63 65 53 61 6d 70 6c 65 52 61 74 65 29 3f 74 2e 74 72 61 63 65 53 61 6d 70 6c 65 52 61 74 65 2f 31 30 30 3a 76 6f 69 64 20 30 2c 61 6c 6c 6f 77 65 64 54 72 61 63 69 6e 67 55 72 6c 73 3a 61 2c 65 78 63 6c 75 64 65 64 41 63 74 69 76 69 74 79 55 72 6c 73 3a 28 72 3d 74 2e 65 78 63 6c 75 64 65 64 41 63 74 69 76 69 74 79 55 72 6c 73 29 21 3d 3d 6e 75 6c 6c 26 26 72 21 3d 3d 76 6f 69 64 20 30 3f 72 3a 5b 5d 2c 77 6f 72 6b 65 72 55 72 6c 3a 74 2e 77 6f 72 6b 65 72 55 72 6c 2c 63 6f 6d 70 72 65 73 73 49 6e 74 61 6b 65 52 65 71 75 65 73 74 73 3a 21 21 74 2e 63 6f 6d 70 72 65 73 73 49 6e Data Ascii: t.traceSampleRate)!==null&&n!==void 0?n:100,rulePsr:_e(t.traceSampleRate)?t.traceSampleRate/100:void 0,allowedTracingUrls:a,excludedActivityUrls:(r=t.excludedActivityUrls)!==null&&r!==void 0?r:[],workerUrl:t.workerUrl,compressIntakeRequests:!!t.compressIn
2025-04-25 20:22:22 UTC	2553	IN	Data Raw: 76 69 65 77 2d 63 6f 6e 74 65 78 74 2d 70 72 6f 70 65 72 74 79 22 7d 29 2c 75 2e 67 65 74 56 69 65 77 43 6f 6e 74 65 78 74 28 29 29 29 2c 73 65 74 47 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 3a 79 28 70 3d 3e 7b 73 2e 73 65 74 43 6f 6e 74 65 78 74 28 70 29 2c 4c 28 7b 66 65 61 74 75 72 65 3a 22 73 65 74 2d 67 6c 6f 62 61 6c 2d 63 6f 6e 74 65 78 74 22 7d 29 7d 29 2c 67 65 74 47 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 3a 79 28 28 29 3d 3e 73 2e 67 65 74 43 6f 6e 74 65 78 74 28 29 29 2c 73 65 74 47 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 50 72 6f 70 65 72 74 79 3a 79 28 28 70 2c 68 29 3d 3e 7b 73 2e 73 65 74 43 6f 6e 74 65 78 74 50 72 6f 70 65 72 74 79 28 70 2c 68 29 2c 4c 28 7b 66 65 61 74 75 72 65 3a 22 73 65 74 2d 67 6c 6f 62 61 6c 2d 63 6f 6e 74 65 78 74 22 7d 29 7d Data Ascii: view-context-property"}),u.getViewContext())),setGlobalContext:y(p=>{s.setContext(p),L({feature:"set-global-context"})}),getGlobalContext:y(()=>s.getContext()),setGlobalContextProperty:y((p,h)=>{s.setContextProperty(p,h),L({feature:"set-global-context"})}
2025-04-25 20:22:22 UTC	8459	IN	Data Raw: 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 29 29 7b 63 6f 6e 73 74 20 6e 3d 6e 65 77 20 65 2e 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 49 29 2c 72 3d 6d 74 28 6e 2c 22 6f 72 69 67 69 6e 61 6c 49 6e 73 74 61 6e 63 65 22 29 3b 74 3d 72 26 26 72 2e 63 6f 6e 73 74 72 75 63 74 6f 72 7d 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 65 2e 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 7a 75 28 29 7b 63 6f 6e 73 74 20 74 3d 6e 65 77 20 41 2c 7b 73 74 6f 70 3a 65 7d 3d 24 28 77 69 6e 64 6f 77 2c 22 6f 70 65 6e 22 2c 28 29 3d 3e 74 2e 6e 6f 74 69 66 79 28 29 29 3b 72 65 74 75 72 6e 7b 6f 62 73 65 72 76 61 62 6c 65 3a 74 2c 73 74 6f 70 3a 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 46 75 28 74 2c 65 2c 6e 29 7b 63 6f 6e 73 74 20 72 3d Data Ascii: ationObserver)){const n=new e.MutationObserver(I),r=mt(n,"originalInstance");t=r&&r.constructor}return t\|\|(t=e.MutationObserver),t}function zu(){const t=new A,{stop:e}=$(window,"open",()=>t.notify());return{observable:t,stop:e}}function Fu(t,e,n){const r=
2025-04-25 20:22:22 UTC	1024	IN	Data Raw: 63 65 73 73 69 6e 67 53 74 61 72 74 3a 59 28 29 2c 70 72 6f 63 65 73 73 69 6e 67 45 6e 64 3a 59 28 29 2c 73 74 61 72 74 54 69 6d 65 3a 61 2e 74 69 6d 65 53 74 61 6d 70 2c 64 75 72 61 74 69 6f 6e 3a 30 2c 6e 61 6d 65 3a 22 22 2c 63 61 6e 63 65 6c 61 62 6c 65 3a 21 31 2c 74 61 72 67 65 74 3a 6e 75 6c 6c 2c 74 6f 4a 53 4f 4e 3a 28 29 3d 3e 28 7b 7d 29 7d 3b 61 2e 74 79 70 65 3d 3d 3d 22 70 6f 69 6e 74 65 72 64 6f 77 6e 22 3f 69 28 74 2c 63 29 3a 6f 28 63 29 7d 2c 7b 70 61 73 73 69 76 65 3a 21 30 2c 63 61 70 74 75 72 65 3a 21 30 7d 29 3b 72 65 74 75 72 6e 7b 73 74 6f 70 3a 73 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 61 2c 63 29 7b 48 28 61 2c 77 69 6e 64 6f 77 2c 5b 22 70 6f 69 6e 74 65 72 75 70 22 2c 22 70 6f 69 6e 74 65 72 63 61 6e 63 65 6c 22 5d 2c 6c 3d 3e Data Ascii: cessingStart:Y(),processingEnd:Y(),startTime:a.timeStamp,duration:0,name:"",cancelable:!1,target:null,toJSON:()=>({})};a.type==="pointerdown"?i(t,c):o(c)},{passive:!0,capture:!0});return{stop:s};function i(a,c){H(a,window,["pointerup","pointercancel"],l=>

Timestamp	Bytes transferred	Direction	Data
2025-04-25 20:22:22 UTC	698	OUT	GET /1cbbfd3b-1354-42ed-9b3b-f5d4f2359abe/browser/favicon.ico?v=alQM8nEzwo HTTP/1.1 Host: d2v8pn2kg220hg.cloudfront.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://mycurricula.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 20:22:23 UTC	584	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Content-Length: 15086 Connection: close Date: Fri, 25 Apr 2025 20:22:24 GMT Last-Modified: Thu, 24 Apr 2025 19:37:47 GMT ETag: "3716b0e2ab1655a7d36d28a31614e351" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Expires: Fri, 02 May 2025 01:02:51 GMT Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 b0cf88fce5b426f643a724856a8060ea.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P4 X-Amz-Cf-Id: XhMzIEOv6VeA5HmwhITQDbcwX42YjD6cEV5xi1AKxZHTDffT9SFvAQ== Vary: Origin
2025-04-25 20:22:23 UTC	15086	IN	Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 00 %6 % h6(0` $

Timestamp	Bytes transferred	Direction	Data
2025-04-25 20:22:23 UTC	573	OUT	GET /app/e4269812c912a8b3a19d?protocol=7&client=js&version=8.3.0&flash=false HTTP/1.1 Host: ws-us2.pusher.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://mycurricula.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: 4BE/CX5fN+9phGq4JmScGA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2025-04-25 20:22:23 UTC	128	IN	HTTP/1.1 426 Upgrade Required Date: Fri, 25 Apr 2025 20:22:23 GMT Content-Length: 0 Connection: close Upgrade: websocket

Timestamp	Bytes transferred	Direction	Data
2025-04-25 20:22:23 UTC	915	OUT	POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A6.5.1%2Capi%3Afetch%2Cenv%3Aproduction%2Cservice%3Amycurricula.com&dd-api-key=pub25901b0d84b378df7d3f28cf558ca52f&dd-evp-origin-version=6.5.1&dd-evp-origin=browser&dd-request-id=915c3d7c-7af0-4fe1-883f-54b07b1ada7b&batch_time=1745612542087 HTTP/1.1 Host: browser-intake-datadoghq.com Connection: keep-alive Content-Length: 15437 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-mobile: ?0 Accept: / Origin: https://mycurricula.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mycurricula.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 20:22:23 UTC	15437	OUT	Data Raw: 7b 22 5f 64 64 22 3a 7b 22 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 64 72 69 66 74 22 3a 2d 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 73 65 73 73 69 6f 6e 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 31 30 30 2c 22 73 65 73 73 69 6f 6e 5f 72 65 70 6c 61 79 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 32 30 7d 2c 22 64 69 73 63 61 72 64 65 64 22 3a 66 61 6c 73 65 7d 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 61 65 64 35 37 37 37 35 2d 39 35 64 32 2d 34 66 31 61 2d 62 62 38 30 2d 38 32 30 61 38 64 31 61 35 65 39 38 22 7d 2c 22 64 61 74 65 22 3a 31 37 34 35 36 31 32 35 33 35 30 31 31 2c 22 73 6f 75 72 63 65 22 3a 22 62 72 6f 77 73 65 72 22 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 39 61 35 35 63 Data Ascii: {"_dd":{"format_version":2,"drift":-1,"configuration":{"session_sample_rate":100,"session_replay_sample_rate":20},"discarded":false},"application":{"id":"aed57775-95d2-4f1a-bb80-820a8d1a5e98"},"date":1745612535011,"source":"browser","session":{"id":"9a55c
2025-04-25 20:22:23 UTC	430	IN	HTTP/1.1 202 Accepted content-type: application/json content-length: 53 dd-request-id: 915c3d7c-7af0-4fe1-883f-54b07b1ada7b cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload date: Fri, 25 Apr 2025 20:22:23 GMT connection: close
2025-04-25 20:22:23 UTC	53	IN	Data Raw: 7b 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 39 31 35 63 33 64 37 63 2d 37 61 66 30 2d 34 66 65 31 2d 38 38 33 66 2d 35 34 62 30 37 62 31 61 64 61 37 62 22 7d Data Ascii: {"request_id":"915c3d7c-7af0-4fe1-883f-54b07b1ada7b"}

Timestamp	Bytes transferred	Direction	Data
2025-04-25 20:22:24 UTC	625	OUT	OPTIONS /pusher/app/e4269812c912a8b3a19d/484/0grcl6tj/xhr_streaming?protocol=7&client=js&version=8.3.0&t=1745612543835&n=1 HTTP/1.1 Host: sockjs-us2.pusher.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://mycurricula.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://mycurricula.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 20:22:25 UTC	463	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://mycurricula.com vary: Origin access-control-allow-headers: content-type access-control-allow-credentials: true cache-control: public, max-age=31536000 expires: Sat, 25 Apr 2026 20:22:25 GMT access-control-allow-methods: OPTIONS, POST access-control-max-age: 31536000 date: Fri, 25 Apr 2025 20:22:25 GMT keep-alive: timeout=5 strict-transport-security: max-age=15768000 connection: close

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://mycurricula.com/p/track/metrics?u=127564-2be71574dd8e8f55948dc23456d791d3eee6f2fc6e4617c7f74924a9177e2a90

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\AppData\Local\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\15CE1714-5873-43FE-AEF4-0F79F5DF6163

C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\AppData\Local\Office\16.0\hxoutlook.exe_Rules.xml

C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\AppData\Roaming\Office\MSO2057.acl

C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\HxAccountsAlwaysOnLog.etl

C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\HxmAlwaysOnLog.etl

C:\Users\user\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\settings.dat

C:\Users\user\AppData\Local\Publishers\8wekyb3d8bbwe\Fonts\FontCache\4\Catalog\ListAll.Json

C:\Users\user\AppData\Local\Publishers\8wekyb3d8bbwe\Fonts\FontCache\4\PreviewFont\flat_officeFontsPreview.ttf

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Windows Analysis Report
https://mycurricula.com/p/track/metrics?u=127564-2be71574dd8e8f55948dc23456d791d3eee6f2fc6e4617c7f74924a9177e2a90

Timestamp	Bytes transferred	Direction	Data
2025-04-25 20:22:25 UTC	721	OUT	POST /pusher/app/e4269812c912a8b3a19d/484/0grcl6tj/xhr_streaming?protocol=7&client=js&version=8.3.0&t=1745612543835&n=1 HTTP/1.1 Host: sockjs-us2.pusher.com Connection: keep-alive Content-Length: 0 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/json sec-ch-ua-mobile: ?0 Accept: / Origin: https://mycurricula.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mycurricula.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 20:22:25 UTC	395	IN	HTTP/1.1 200 OK cache-control: no-store, no-cache, must-revalidate, max-age=0 access-control-allow-origin: https://mycurricula.com vary: Origin access-control-allow-credentials: true content-type: application/javascript; charset=UTF-8 date: Fri, 25 Apr 2025 20:22:25 GMT keep-alive: timeout=5 transfer-encoding: chunked strict-transport-security: max-age=15768000 connection: close
2025-04-25 20:22:25 UTC	2060	IN	Data Raw: 38 30 35 0d 0a 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 68 Data Ascii: 805hhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhh
2025-04-25 20:22:25 UTC	142	IN	Data Raw: 38 38 0d 0a 61 5b 22 7b 5c 22 65 76 65 6e 74 5c 22 3a 5c 22 70 75 73 68 65 72 3a 63 6f 6e 6e 65 63 74 69 6f 6e 5f 65 73 74 61 62 6c 69 73 68 65 64 5c 22 2c 5c 22 64 61 74 61 5c 22 3a 5c 22 7b 5c 5c 5c 22 73 6f 63 6b 65 74 5f 69 64 5c 5c 5c 22 3a 5c 5c 5c 22 35 30 35 39 31 38 2e 34 37 30 35 38 35 32 5c 5c 5c 22 2c 5c 5c 5c 22 61 63 74 69 76 69 74 79 5f 74 69 6d 65 6f 75 74 5c 5c 5c 22 3a 31 32 30 7d 5c 22 7d 22 5d 0a 0d 0a Data Ascii: 88a["{\"event\":\"pusher:connection_established\",\"data\":\"{\\\"socket_id\\\":\\\"505918.4705852\\\",\\\"activity_timeout\\\":120}\"}"]
2025-04-25 20:22:50 UTC	7	IN	Data Raw: 32 0d 0a 68 0a 0d 0a Data Ascii: 2h
2025-04-25 20:23:15 UTC	9	IN	Data Raw: 34 0d 0a 61 5b 5d 0a 0d 0a Data Ascii: 4a[]
2025-04-25 20:23:17 UTC	7	IN	Data Raw: 32 0d 0a 68 0a 0d 0a Data Ascii: 2h

Timestamp	Bytes transferred	Direction	Data
2025-04-25 20:22:27 UTC	936	OUT	POST /api/v2/replay?ddsource=browser&ddtags=sdk_version%3A6.5.1%2Capi%3Afetch%2Cenv%3Aproduction%2Cservice%3Amycurricula.com&dd-api-key=pub25901b0d84b378df7d3f28cf558ca52f&dd-evp-origin-version=6.5.1&dd-evp-origin=browser&dd-request-id=34d58b9a-ad05-4d91-bd21-a4958658560f HTTP/1.1 Host: browser-intake-datadoghq.com Connection: keep-alive Content-Length: 9004 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryT71Rv6u3I9ZduTaa sec-ch-ua-mobile: ?0 Accept: / Origin: https://mycurricula.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mycurricula.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 20:22:27 UTC	9004	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 54 37 31 52 76 36 75 33 49 39 5a 64 75 54 61 61 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 73 65 67 6d 65 6e 74 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 39 61 35 35 63 30 31 35 2d 62 31 30 33 2d 34 62 63 66 2d 39 65 35 64 2d 31 63 66 32 63 62 37 34 65 64 31 66 2d 31 37 34 35 36 31 32 35 34 32 30 32 37 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 78 9c 0c 8c d1 8a c3 20 10 00 ff 65 9f 73 67 dc aa ab 42 e9 87 dc 93 a7 6b 0d 3d 69 30 1b 4a 09 fd f7 cb db 30 03 73 c0 e0 fc 1c 65 83 f8 73 40 49 92 20 1e d0 78 b9 37 81 e8 03 4d Data Ascii: ------WebKitFormBoundaryT71Rv6u3I9ZduTaaContent-Disposition: form-data; name="segment"; filename="9a55c015-b103-4bcf-9e5d-1cf2cb74ed1f-1745612542027"Content-Type: application/octet-streamx esgBk=i0J0ses@I x7M
2025-04-25 20:22:28 UTC	430	IN	HTTP/1.1 202 Accepted content-type: application/json content-length: 53 dd-request-id: 34d58b9a-ad05-4d91-bd21-a4958658560f cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload date: Fri, 25 Apr 2025 20:22:28 GMT connection: close
2025-04-25 20:22:28 UTC	53	IN	Data Raw: 7b 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 33 34 64 35 38 62 39 61 2d 61 64 30 35 2d 34 64 39 31 2d 62 64 32 31 2d 61 34 39 35 38 36 35 38 35 36 30 66 22 7d Data Ascii: {"request_id":"34d58b9a-ad05-4d91-bd21-a4958658560f"}

Timestamp	Bytes transferred	Direction	Data
2025-04-25 20:22:34 UTC	936	OUT	POST /api/v2/replay?ddsource=browser&ddtags=sdk_version%3A6.5.1%2Capi%3Afetch%2Cenv%3Aproduction%2Cservice%3Amycurricula.com&dd-api-key=pub25901b0d84b378df7d3f28cf558ca52f&dd-evp-origin-version=6.5.1&dd-evp-origin=browser&dd-request-id=bd4d6b84-31fe-4599-ab93-9289627a59c8 HTTP/1.1 Host: browser-intake-datadoghq.com Connection: keep-alive Content-Length: 1134 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: multipart/form-data; boundary=----WebKitFormBoundary6Bech0xw14lbkXti sec-ch-ua-mobile: ?0 Accept: / Origin: https://mycurricula.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mycurricula.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 20:22:34 UTC	1134	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 36 42 65 63 68 30 78 77 31 34 6c 62 6b 58 74 69 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 73 65 67 6d 65 6e 74 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 39 61 35 35 63 30 31 35 2d 62 31 30 33 2d 34 62 63 66 2d 39 65 35 64 2d 31 63 66 32 63 62 37 34 65 64 31 66 2d 31 37 34 35 36 31 32 35 34 38 37 31 30 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 78 9c 24 cc 4b 0a c3 20 14 46 e1 bd fc 63 07 31 f5 11 ee 26 ba 80 d2 81 44 03 0e 52 c5 7b 0b 0d e2 de 2b 64 7a f8 38 1d 2d ed a5 45 06 bd 3a 62 90 00 ea e0 f2 6d 7b 02 69 85 5a 38 Data Ascii: ------WebKitFormBoundary6Bech0xw14lbkXtiContent-Disposition: form-data; name="segment"; filename="9a55c015-b103-4bcf-9e5d-1cf2cb74ed1f-1745612548710"Content-Type: application/octet-streamx$K Fc1&DR{+dz8-E:bm{iZ8
2025-04-25 20:22:35 UTC	430	IN	HTTP/1.1 202 Accepted content-type: application/json content-length: 53 dd-request-id: bd4d6b84-31fe-4599-ab93-9289627a59c8 cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload date: Fri, 25 Apr 2025 20:22:34 GMT connection: close
2025-04-25 20:22:35 UTC	53	IN	Data Raw: 7b 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 62 64 34 64 36 62 38 34 2d 33 31 66 65 2d 34 35 39 39 2d 61 62 39 33 2d 39 32 38 39 36 32 37 61 35 39 63 38 22 7d Data Ascii: {"request_id":"bd4d6b84-31fe-4599-ab93-9289627a59c8"}

Timestamp	Bytes transferred	Direction	Data
2025-04-25 20:22:40 UTC	936	OUT	POST /api/v2/replay?ddsource=browser&ddtags=sdk_version%3A6.5.1%2Capi%3Afetch%2Cenv%3Aproduction%2Cservice%3Amycurricula.com&dd-api-key=pub25901b0d84b378df7d3f28cf558ca52f&dd-evp-origin-version=6.5.1&dd-evp-origin=browser&dd-request-id=6a61428b-7c4b-4ac8-a8e0-000e0ede90db HTTP/1.1 Host: browser-intake-datadoghq.com Connection: keep-alive Content-Length: 1136 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryrFMcQiSM01gQF3O0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://mycurricula.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mycurricula.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 20:22:40 UTC	1136	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 72 46 4d 63 51 69 53 4d 30 31 67 51 46 33 4f 30 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 73 65 67 6d 65 6e 74 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 39 61 35 35 63 30 31 35 2d 62 31 30 33 2d 34 62 63 66 2d 39 65 35 64 2d 31 63 66 32 63 62 37 34 65 64 31 66 2d 31 37 34 35 36 31 32 35 35 34 39 39 31 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 78 9c 24 cc 41 0a c3 20 10 85 e1 bb bc b5 8b da 68 8a 73 89 1e a0 74 21 d1 80 8b 54 71 a6 d0 20 de bd 03 59 be c7 c7 3f d0 f3 56 7b 62 d0 6b 20 45 89 a0 01 ae df be 65 90 35 68 95 Data Ascii: ------WebKitFormBoundaryrFMcQiSM01gQF3O0Content-Disposition: form-data; name="segment"; filename="9a55c015-b103-4bcf-9e5d-1cf2cb74ed1f-1745612554991"Content-Type: application/octet-streamx$A hst!Tq Y?V{bk Ee5h
2025-04-25 20:22:41 UTC	430	IN	HTTP/1.1 202 Accepted content-type: application/json content-length: 53 dd-request-id: 6a61428b-7c4b-4ac8-a8e0-000e0ede90db cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload date: Fri, 25 Apr 2025 20:22:40 GMT connection: close
2025-04-25 20:22:41 UTC	53	IN	Data Raw: 7b 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 36 61 36 31 34 32 38 62 2d 37 63 34 62 2d 34 61 63 38 2d 61 38 65 30 2d 30 30 30 65 30 65 64 65 39 30 64 62 22 7d Data Ascii: {"request_id":"6a61428b-7c4b-4ac8-a8e0-000e0ede90db"}

Timestamp	Bytes transferred	Direction	Data
2025-04-25 20:22:48 UTC	953	OUT	POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A6.5.1%2Capi%3Abeacon%2Cenv%3Aproduction%2Cservice%3Amycurricula.com&dd-api-key=pub25901b0d84b378df7d3f28cf558ca52f&dd-evp-origin-version=6.5.1&dd-evp-origin=browser&dd-request-id=7af01d4b-9eff-42d6-b7cd-98ae19cde8eb&batch_time=1745612567173 HTTP/1.1 Host: browser-intake-datadoghq.com Connection: keep-alive Content-Length: 13007 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-mobile: ?0 Accept: / Origin: https://mycurricula.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://mycurricula.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 20:22:48 UTC	13007	OUT	Data Raw: 7b 22 5f 64 64 22 3a 7b 22 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 64 72 69 66 74 22 3a 30 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 73 65 73 73 69 6f 6e 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 31 30 30 2c 22 73 65 73 73 69 6f 6e 5f 72 65 70 6c 61 79 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 32 30 7d 2c 22 64 69 73 63 61 72 64 65 64 22 3a 66 61 6c 73 65 7d 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 61 65 64 35 37 37 37 35 2d 39 35 64 32 2d 34 66 31 61 2d 62 62 38 30 2d 38 32 30 61 38 64 31 61 35 65 39 38 22 7d 2c 22 64 61 74 65 22 3a 31 37 34 35 36 31 32 35 33 36 35 30 39 2c 22 73 6f 75 72 63 65 22 3a 22 62 72 6f 77 73 65 72 22 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 39 61 35 35 63 30 Data Ascii: {"_dd":{"format_version":2,"drift":0,"configuration":{"session_sample_rate":100,"session_replay_sample_rate":20},"discarded":false},"application":{"id":"aed57775-95d2-4f1a-bb80-820a8d1a5e98"},"date":1745612536509,"source":"browser","session":{"id":"9a55c0
2025-04-25 20:22:48 UTC	430	IN	HTTP/1.1 202 Accepted content-type: application/json content-length: 53 dd-request-id: 7af01d4b-9eff-42d6-b7cd-98ae19cde8eb cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload date: Fri, 25 Apr 2025 20:22:48 GMT connection: close
2025-04-25 20:22:48 UTC	53	IN	Data Raw: 7b 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 37 61 66 30 31 64 34 62 2d 39 65 66 66 2d 34 32 64 36 2d 62 37 63 64 2d 39 38 61 65 31 39 63 64 65 38 65 62 22 7d Data Ascii: {"request_id":"7af01d4b-9eff-42d6-b7cd-98ae19cde8eb"}

Timestamp	Bytes transferred	Direction	Data
2025-04-25 20:22:51 UTC	585	OUT	OPTIONS /pusher/app/e4269812c912a8b3a19d/484/0grcl6tj/xhr_send?t=1745612570539&n=2 HTTP/1.1 Host: sockjs-us2.pusher.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://mycurricula.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://mycurricula.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 20:22:51 UTC	463	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://mycurricula.com vary: Origin access-control-allow-headers: content-type access-control-allow-credentials: true cache-control: public, max-age=31536000 expires: Sat, 25 Apr 2026 20:22:51 GMT access-control-allow-methods: OPTIONS, POST access-control-max-age: 31536000 date: Fri, 25 Apr 2025 20:22:51 GMT keep-alive: timeout=5 strict-transport-security: max-age=15768000 connection: close

Timestamp	Bytes transferred	Direction	Data
2025-04-25 20:22:52 UTC	681	OUT	POST /pusher/app/e4269812c912a8b3a19d/484/0grcl6tj/xhr_send?t=1745612570539&n=2 HTTP/1.1 Host: sockjs-us2.pusher.com Connection: keep-alive Content-Length: 2 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/json sec-ch-ua-mobile: ?0 Accept: / Origin: https://mycurricula.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mycurricula.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 20:22:52 UTC	2	OUT	Data Raw: 5b 5d Data Ascii: []
2025-04-25 20:22:52 UTC	363	IN	HTTP/1.1 204 No Content cache-control: no-store, no-cache, must-revalidate, max-age=0 access-control-allow-origin: https://mycurricula.com vary: Origin access-control-allow-credentials: true content-type: text/plain; charset=UTF-8 date: Fri, 25 Apr 2025 20:22:52 GMT keep-alive: timeout=5 strict-transport-security: max-age=15768000 connection: close

Timestamp	Bytes transferred	Direction	Data
2025-04-25 20:23:18 UTC	585	OUT	OPTIONS /pusher/app/e4269812c912a8b3a19d/484/0grcl6tj/xhr_send?t=1745612597221&n=3 HTTP/1.1 Host: sockjs-us2.pusher.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://mycurricula.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://mycurricula.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 20:23:18 UTC	463	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://mycurricula.com vary: Origin access-control-allow-headers: content-type access-control-allow-credentials: true cache-control: public, max-age=31536000 expires: Sat, 25 Apr 2026 20:23:18 GMT access-control-allow-methods: OPTIONS, POST access-control-max-age: 31536000 date: Fri, 25 Apr 2025 20:23:18 GMT keep-alive: timeout=5 strict-transport-security: max-age=15768000 connection: close

Timestamp	Bytes transferred	Direction	Data
2025-04-25 20:23:21 UTC	914	OUT	POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A6.5.1%2Capi%3Afetch%2Cenv%3Aproduction%2Cservice%3Amycurricula.com&dd-api-key=pub25901b0d84b378df7d3f28cf558ca52f&dd-evp-origin-version=6.5.1&dd-evp-origin=browser&dd-request-id=e40e7faf-cc50-445f-b5ef-18a7a0030108&batch_time=1745612600224 HTTP/1.1 Host: browser-intake-datadoghq.com Connection: keep-alive Content-Length: 2968 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-mobile: ?0 Accept: / Origin: https://mycurricula.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mycurricula.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 20:23:21 UTC	2968	OUT	Data Raw: 7b 22 5f 64 64 22 3a 7b 22 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 64 72 69 66 74 22 3a 30 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 73 65 73 73 69 6f 6e 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 31 30 30 2c 22 73 65 73 73 69 6f 6e 5f 72 65 70 6c 61 79 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 32 30 2c 22 73 74 61 72 74 5f 73 65 73 73 69 6f 6e 5f 72 65 70 6c 61 79 5f 72 65 63 6f 72 64 69 6e 67 5f 6d 61 6e 75 61 6c 6c 79 22 3a 66 61 6c 73 65 7d 2c 22 70 61 67 65 5f 73 74 61 74 65 73 22 3a 5b 7b 22 73 74 61 74 65 22 3a 22 61 63 74 69 76 65 22 2c 22 73 74 61 72 74 22 3a 37 30 32 36 39 30 30 30 30 30 7d 5d 2c 22 64 6f 63 75 6d 65 6e 74 5f 76 65 72 73 69 6f 6e 22 3a 34 2c 22 72 65 70 6c 61 79 5f 73 74 61 74 73 22 3a 7b 22 72 65 Data Ascii: {"_dd":{"format_version":2,"drift":0,"configuration":{"session_sample_rate":100,"session_replay_sample_rate":20,"start_session_replay_recording_manually":false},"page_states":[{"state":"active","start":7026900000}],"document_version":4,"replay_stats":{"re
2025-04-25 20:23:21 UTC	430	IN	HTTP/1.1 202 Accepted content-type: application/json content-length: 53 dd-request-id: e40e7faf-cc50-445f-b5ef-18a7a0030108 cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload date: Fri, 25 Apr 2025 20:23:21 GMT connection: close
2025-04-25 20:23:21 UTC	53	IN	Data Raw: 7b 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 65 34 30 65 37 66 61 66 2d 63 63 35 30 2d 34 34 35 66 2d 62 35 65 66 2d 31 38 61 37 61 30 30 33 30 31 30 38 22 7d Data Ascii: {"request_id":"e40e7faf-cc50-445f-b5ef-18a7a0030108"}

Target ID:	0
Start time:	16:22:07
Start date:	25/04/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff778810000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false