Edit tour

Windows Analysis Report
https://protection.greathorn.com/services/v2/lookupUrl/265c2f26-b2f2-4c55-98b6-7c843543c873/1555/e4b7c92c418487f88397bfe7b40ac0fc48a5c297

Overview

General Information

Sample URL:	https://protection.greathorn.com/services/v2/lookupUrl/265c2f26-b2f2-4c55-98b6-7c843543c873/1555/e4b7c92c418487f88397bfe7b40ac0fc48a5c297
Analysis ID:	890426
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML body contains low number of good links

Found iframes

HTML title does not match URL

Submit button contains javascript call

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6064 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank MD5: 0FEC2748F363150DC54C1CAFFB1A9408)

chrome.exe (PID: 3116 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1964 --field-trial-handle=1752,i,17283964871328473641,9489084191923334333,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8 MD5: 0FEC2748F363150DC54C1CAFFB1A9408)

chrome.exe (PID: 6432 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" "https://protection.greathorn.com/services/v2/lookupUrl/265c2f26-b2f2-4c55-98b6-7c843543c873/1555/e4b7c92c418487f88397bfe7b40ac0fc48a5c297 MD5: 0FEC2748F363150DC54C1CAFFB1A9408)

cleanup

Joe Sandbox Signatures

• Phishing
• Compliance
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DL6oNmmC545xjoJGu2xin9cmkPauVevS-SsimmWWiS2jyqBJ0q3lHxpYl2nTfTVpo6JW-YPE2kHfHeW3EbDpT-RhoP-yy2MzZhqtMBynDH2YI8UQmjYDiUbKwR4MGj4S5LU8VPYB6CFJMjRzUqm_tMhIKTIEn62gqz5EJ-7pwDjNJQSxfhe4LujgHZVIxXapi&response_mode=form_post&nonce=638227777716276745.YzFmYmE5ZDAtNjU5MS00MTQzLTg3YWYtYTc5MTk3YzBiMmE4MTkwMzIxNGItN2Q3Ni00YjQxLWFlMmItN2RlZGQ3YzU0NjY2&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=01e81919-67bf-45ba-85be-caa1b1263442&x-client-SKU=ID_NET472&x-client-ver=6.26.1.0&sso_reload=true	HTTP Parser: Number of links: 0
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3d392E27E905D60C54%26opidt%3d1687180992%26uaid%3d01e8191967bf45ba85becaa1b1263442%26contextid%3d1DE52BD209789540%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=01e8191967bf45ba85becaa1b1263442&suc=00000006-0000-0ff1-ce00-000000000000&lic=1	HTTP Parser: Number of links: 0
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3dE767A81BBE603D51%26opidt%3d1687181003%26uaid%3d01e8191967bf45ba85becaa1b1263442%26contextid%3d1EBC13AF5C22E80A%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=01e8191967bf45ba85becaa1b1263442&suc=00000006-0000-0ff1-ce00-000000000000&lic=1	HTTP Parser: Number of links: 0

Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3d392E27E905D60C54%26opidt%3d1687180992%26uaid%3d01e8191967bf45ba85becaa1b1263442%26contextid%3d1DE52BD209789540%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=01e8191967bf45ba85becaa1b1263442&suc=00000006-0000-0ff1-ce00-000000000000&lic=1	HTTP Parser: Iframe src: https://fpt.live.com/?session_id=01e8191967bf45ba85becaa1b1263442&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SU&mkt=EN-US
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3d392E27E905D60C54%26opidt%3d1687180992%26uaid%3d01e8191967bf45ba85becaa1b1263442%26contextid%3d1DE52BD209789540%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=01e8191967bf45ba85becaa1b1263442&suc=00000006-0000-0ff1-ce00-000000000000&lic=1	HTTP Parser: Iframe src: https://fpt.live.com/?session_id=01e8191967bf45ba85becaa1b1263442&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SU&mkt=EN-US
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3dE767A81BBE603D51%26opidt%3d1687181003%26uaid%3d01e8191967bf45ba85becaa1b1263442%26contextid%3d1EBC13AF5C22E80A%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=01e8191967bf45ba85becaa1b1263442&suc=00000006-0000-0ff1-ce00-000000000000&lic=1	HTTP Parser: Iframe src: https://fpt.live.com/?session_id=01e8191967bf45ba85becaa1b1263442&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SU&mkt=EN-US
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3dE767A81BBE603D51%26opidt%3d1687181003%26uaid%3d01e8191967bf45ba85becaa1b1263442%26contextid%3d1EBC13AF5C22E80A%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=01e8191967bf45ba85becaa1b1263442&suc=00000006-0000-0ff1-ce00-000000000000&lic=1	HTTP Parser: Iframe src: https://fpt.live.com/?session_id=01e8191967bf45ba85becaa1b1263442&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SU&mkt=EN-US

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DL6oNmmC545xjoJGu2xin9cmkPauVevS-SsimmWWiS2jyqBJ0q3lHxpYl2nTfTVpo6JW-YPE2kHfHeW3EbDpT-RhoP-yy2MzZhqtMBynDH2YI8UQmjYDiUbKwR4MGj4S5LU8VPYB6CFJMjRzUqm_tMhIKTIEn62gqz5EJ-7pwDjNJQSxfhe4LujgHZVIxXapi&response_mode=form_post&nonce=638227777716276745.YzFmYmE5ZDAtNjU5MS00MTQzLTg3YWYtYTc5MTk3YzBiMmE4MTkwMzIxNGItN2Q3Ni00YjQxLWFlMmItN2RlZGQ3YzU0NjY2&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=01e81919-67bf-45ba-85be-caa1b1263442&x-client-SKU=ID_NET472&x-client-ver=6.26.1.0&sso_reload=true	HTTP Parser: Title: Sign in to your account does not match URL
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3d392E27E905D60C54%26opidt%3d1687180992%26uaid%3d01e8191967bf45ba85becaa1b1263442%26contextid%3d1DE52BD209789540%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=01e8191967bf45ba85becaa1b1263442&suc=00000006-0000-0ff1-ce00-000000000000&lic=1	HTTP Parser: Title: Create account does not match URL
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3dE767A81BBE603D51%26opidt%3d1687181003%26uaid%3d01e8191967bf45ba85becaa1b1263442%26contextid%3d1EBC13AF5C22E80A%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=01e8191967bf45ba85becaa1b1263442&suc=00000006-0000-0ff1-ce00-000000000000&lic=1	HTTP Parser: Title: Create account does not match URL

Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3d392E27E905D60C54%26opidt%3d1687180992%26uaid%3d01e8191967bf45ba85becaa1b1263442%26contextid%3d1DE52BD209789540%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=01e8191967bf45ba85becaa1b1263442&suc=00000006-0000-0ff1-ce00-000000000000&lic=1	HTTP Parser: On click: OnBack(); return false;
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3d392E27E905D60C54%26opidt%3d1687180992%26uaid%3d01e8191967bf45ba85becaa1b1263442%26contextid%3d1DE52BD209789540%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=01e8191967bf45ba85becaa1b1263442&suc=00000006-0000-0ff1-ce00-000000000000&lic=1	HTTP Parser: On click: HOSTUI.evt_inlineBack_onclick();
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3d392E27E905D60C54%26opidt%3d1687180992%26uaid%3d01e8191967bf45ba85becaa1b1263442%26contextid%3d1DE52BD209789540%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=01e8191967bf45ba85becaa1b1263442&suc=00000006-0000-0ff1-ce00-000000000000&lic=1	HTTP Parser: On click: HOSTUI.evt_inlineBack_onclick();
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3d392E27E905D60C54%26opidt%3d1687180992%26uaid%3d01e8191967bf45ba85becaa1b1263442%26contextid%3d1DE52BD209789540%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=01e8191967bf45ba85becaa1b1263442&suc=00000006-0000-0ff1-ce00-000000000000&lic=1	HTTP Parser: On click: OnBack(); return false;
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3d392E27E905D60C54%26opidt%3d1687180992%26uaid%3d01e8191967bf45ba85becaa1b1263442%26contextid%3d1DE52BD209789540%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=01e8191967bf45ba85becaa1b1263442&suc=00000006-0000-0ff1-ce00-000000000000&lic=1	HTTP Parser: On click: HOSTUI.evt_inlineBack_onclick();
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3d392E27E905D60C54%26opidt%3d1687180992%26uaid%3d01e8191967bf45ba85becaa1b1263442%26contextid%3d1DE52BD209789540%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=01e8191967bf45ba85becaa1b1263442&suc=00000006-0000-0ff1-ce00-000000000000&lic=1	HTTP Parser: On click: HOSTUI.evt_inlineBack_onclick();
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3dE767A81BBE603D51%26opidt%3d1687181003%26uaid%3d01e8191967bf45ba85becaa1b1263442%26contextid%3d1EBC13AF5C22E80A%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=01e8191967bf45ba85becaa1b1263442&suc=00000006-0000-0ff1-ce00-000000000000&lic=1	HTTP Parser: On click: OnBack(); return false;
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3dE767A81BBE603D51%26opidt%3d1687181003%26uaid%3d01e8191967bf45ba85becaa1b1263442%26contextid%3d1EBC13AF5C22E80A%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=01e8191967bf45ba85becaa1b1263442&suc=00000006-0000-0ff1-ce00-000000000000&lic=1	HTTP Parser: On click: HOSTUI.evt_inlineBack_onclick();
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3dE767A81BBE603D51%26opidt%3d1687181003%26uaid%3d01e8191967bf45ba85becaa1b1263442%26contextid%3d1EBC13AF5C22E80A%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=01e8191967bf45ba85becaa1b1263442&suc=00000006-0000-0ff1-ce00-000000000000&lic=1	HTTP Parser: On click: HOSTUI.evt_inlineBack_onclick();
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3dE767A81BBE603D51%26opidt%3d1687181003%26uaid%3d01e8191967bf45ba85becaa1b1263442%26contextid%3d1EBC13AF5C22E80A%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=01e8191967bf45ba85becaa1b1263442&suc=00000006-0000-0ff1-ce00-000000000000&lic=1	HTTP Parser: On click: OnBack(); return false;
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3dE767A81BBE603D51%26opidt%3d1687181003%26uaid%3d01e8191967bf45ba85becaa1b1263442%26contextid%3d1EBC13AF5C22E80A%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=01e8191967bf45ba85becaa1b1263442&suc=00000006-0000-0ff1-ce00-000000000000&lic=1	HTTP Parser: On click: HOSTUI.evt_inlineBack_onclick();
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3dE767A81BBE603D51%26opidt%3d1687181003%26uaid%3d01e8191967bf45ba85becaa1b1263442%26contextid%3d1EBC13AF5C22E80A%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=01e8191967bf45ba85becaa1b1263442&suc=00000006-0000-0ff1-ce00-000000000000&lic=1	HTTP Parser: On click: HOSTUI.evt_inlineBack_onclick();

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DL6oNmmC545xjoJGu2xin9cmkPauVevS-SsimmWWiS2jyqBJ0q3lHxpYl2nTfTVpo6JW-YPE2kHfHeW3EbDpT-RhoP-yy2MzZhqtMBynDH2YI8UQmjYDiUbKwR4MGj4S5LU8VPYB6CFJMjRzUqm_tMhIKTIEn62gqz5EJ-7pwDjNJQSxfhe4LujgHZVIxXapi&response_mode=form_post&nonce=638227777716276745.YzFmYmE5ZDAtNjU5MS00MTQzLTg3YWYtYTc5MTk3YzBiMmE4MTkwMzIxNGItN2Q3Ni00YjQxLWFlMmItN2RlZGQ3YzU0NjY2&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=01e81919-67bf-45ba-85be-caa1b1263442&x-client-SKU=ID_NET472&x-client-ver=6.26.1.0&sso_reload=true

HTTP Parser: <input type="password" .../> found

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DL6oNmmC545xjoJGu2xin9cmkPauVevS-SsimmWWiS2jyqBJ0q3lHxpYl2nTfTVpo6JW-YPE2kHfHeW3EbDpT-RhoP-yy2MzZhqtMBynDH2YI8UQmjYDiUbKwR4MGj4S5LU8VPYB6CFJMjRzUqm_tMhIKTIEn62gqz5EJ-7pwDjNJQSxfhe4LujgHZVIxXapi&response_mode=form_post&nonce=638227777716276745.YzFmYmE5ZDAtNjU5MS00MTQzLTg3YWYtYTc5MTk3YzBiMmE4MTkwMzIxNGItN2Q3Ni00YjQxLWFlMmItN2RlZGQ3YzU0NjY2&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=01e81919-67bf-45ba-85be-caa1b1263442&x-client-SKU=ID_NET472&x-client-ver=6.26.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DL6oNmmC545xjoJGu2xin9cmkPauVevS-SsimmWWiS2jyqBJ0q3lHxpYl2nTfTVpo6JW-YPE2kHfHeW3EbDpT-RhoP-yy2MzZhqtMBynDH2YI8UQmjYDiUbKwR4MGj4S5LU8VPYB6CFJMjRzUqm_tMhIKTIEn62gqz5EJ-7pwDjNJQSxfhe4LujgHZVIxXapi&response_mode=form_post&nonce=638227777716276745.YzFmYmE5ZDAtNjU5MS00MTQzLTg3YWYtYTc5MTk3YzBiMmE4MTkwMzIxNGItN2Q3Ni00YjQxLWFlMmItN2RlZGQ3YzU0NjY2&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=01e81919-67bf-45ba-85be-caa1b1263442&x-client-SKU=ID_NET472&x-client-ver=6.26.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DL6oNmmC545xjoJGu2xin9cmkPauVevS-SsimmWWiS2jyqBJ0q3lHxpYl2nTfTVpo6JW-YPE2kHfHeW3EbDpT-RhoP-yy2MzZhqtMBynDH2YI8UQmjYDiUbKwR4MGj4S5LU8VPYB6CFJMjRzUqm_tMhIKTIEn62gqz5EJ-7pwDjNJQSxfhe4LujgHZVIxXapi&response_mode=form_post&nonce=638227777716276745.YzFmYmE5ZDAtNjU5MS00MTQzLTg3YWYtYTc5MTk3YzBiMmE4MTkwMzIxNGItN2Q3Ni00YjQxLWFlMmItN2RlZGQ3YzU0NjY2&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=01e81919-67bf-45ba-85be-caa1b1263442&x-client-SKU=ID_NET472&x-client-ver=6.26.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DL6oNmmC545xjoJGu2xin9cmkPauVevS-SsimmWWiS2jyqBJ0q3lHxpYl2nTfTVpo6JW-YPE2kHfHeW3EbDpT-RhoP-yy2MzZhqtMBynDH2YI8UQmjYDiUbKwR4MGj4S5LU8VPYB6CFJMjRzUqm_tMhIKTIEn62gqz5EJ-7pwDjNJQSxfhe4LujgHZVIxXapi&response_mode=form_post&nonce=638227777716276745.YzFmYmE5ZDAtNjU5MS00MTQzLTg3YWYtYTc5MTk3YzBiMmE4MTkwMzIxNGItN2Q3Ni00YjQxLWFlMmItN2RlZGQ3YzU0NjY2&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=01e81919-67bf-45ba-85be-caa1b1263442&x-client-SKU=ID_NET472&x-client-ver=6.26.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DL6oNmmC545xjoJGu2xin9cmkPauVevS-SsimmWWiS2jyqBJ0q3lHxpYl2nTfTVpo6JW-YPE2kHfHeW3EbDpT-RhoP-yy2MzZhqtMBynDH2YI8UQmjYDiUbKwR4MGj4S5LU8VPYB6CFJMjRzUqm_tMhIKTIEn62gqz5EJ-7pwDjNJQSxfhe4LujgHZVIxXapi&response_mode=form_post&nonce=638227777716276745.YzFmYmE5ZDAtNjU5MS00MTQzLTg3YWYtYTc5MTk3YzBiMmE4MTkwMzIxNGItN2Q3Ni00YjQxLWFlMmItN2RlZGQ3YzU0NjY2&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=01e81919-67bf-45ba-85be-caa1b1263442&x-client-SKU=ID_NET472&x-client-ver=6.26.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DL6oNmmC545xjoJGu2xin9cmkPauVevS-SsimmWWiS2jyqBJ0q3lHxpYl2nTfTVpo6JW-YPE2kHfHeW3EbDpT-RhoP-yy2MzZhqtMBynDH2YI8UQmjYDiUbKwR4MGj4S5LU8VPYB6CFJMjRzUqm_tMhIKTIEn62gqz5EJ-7pwDjNJQSxfhe4LujgHZVIxXapi&response_mode=form_post&nonce=638227777716276745.YzFmYmE5ZDAtNjU5MS00MTQzLTg3YWYtYTc5MTk3YzBiMmE4MTkwMzIxNGItN2Q3Ni00YjQxLWFlMmItN2RlZGQ3YzU0NjY2&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=01e81919-67bf-45ba-85be-caa1b1263442&x-client-SKU=ID_NET472&x-client-ver=6.26.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3d392E27E905D60C54%26opidt%3d1687180992%26uaid%3d01e8191967bf45ba85becaa1b1263442%26contextid%3d1DE52BD209789540%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=01e8191967bf45ba85becaa1b1263442&suc=00000006-0000-0ff1-ce00-000000000000&lic=1	HTTP Parser: No <meta name="author".. found
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3d392E27E905D60C54%26opidt%3d1687180992%26uaid%3d01e8191967bf45ba85becaa1b1263442%26contextid%3d1DE52BD209789540%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=01e8191967bf45ba85becaa1b1263442&suc=00000006-0000-0ff1-ce00-000000000000&lic=1	HTTP Parser: No <meta name="author".. found
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3dE767A81BBE603D51%26opidt%3d1687181003%26uaid%3d01e8191967bf45ba85becaa1b1263442%26contextid%3d1EBC13AF5C22E80A%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=01e8191967bf45ba85becaa1b1263442&suc=00000006-0000-0ff1-ce00-000000000000&lic=1	HTTP Parser: No <meta name="author".. found
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3dE767A81BBE603D51%26opidt%3d1687181003%26uaid%3d01e8191967bf45ba85becaa1b1263442%26contextid%3d1EBC13AF5C22E80A%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=01e8191967bf45ba85becaa1b1263442&suc=00000006-0000-0ff1-ce00-000000000000&lic=1	HTTP Parser: No <meta name="author".. found

Source: https://fpt.live.com/?session_id=01e8191967bf45ba85becaa1b1263442&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SU&mkt=EN-US	HTTP Parser: No favicon
Source: https://fpt.live.com/?session_id=01e8191967bf45ba85becaa1b1263442&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SU&mkt=EN-US	HTTP Parser: No favicon

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DL6oNmmC545xjoJGu2xin9cmkPauVevS-SsimmWWiS2jyqBJ0q3lHxpYl2nTfTVpo6JW-YPE2kHfHeW3EbDpT-RhoP-yy2MzZhqtMBynDH2YI8UQmjYDiUbKwR4MGj4S5LU8VPYB6CFJMjRzUqm_tMhIKTIEn62gqz5EJ-7pwDjNJQSxfhe4LujgHZVIxXapi&response_mode=form_post&nonce=638227777716276745.YzFmYmE5ZDAtNjU5MS00MTQzLTg3YWYtYTc5MTk3YzBiMmE4MTkwMzIxNGItN2Q3Ni00YjQxLWFlMmItN2RlZGQ3YzU0NjY2&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=01e81919-67bf-45ba-85be-caa1b1263442&x-client-SKU=ID_NET472&x-client-ver=6.26.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DL6oNmmC545xjoJGu2xin9cmkPauVevS-SsimmWWiS2jyqBJ0q3lHxpYl2nTfTVpo6JW-YPE2kHfHeW3EbDpT-RhoP-yy2MzZhqtMBynDH2YI8UQmjYDiUbKwR4MGj4S5LU8VPYB6CFJMjRzUqm_tMhIKTIEn62gqz5EJ-7pwDjNJQSxfhe4LujgHZVIxXapi&response_mode=form_post&nonce=638227777716276745.YzFmYmE5ZDAtNjU5MS00MTQzLTg3YWYtYTc5MTk3YzBiMmE4MTkwMzIxNGItN2Q3Ni00YjQxLWFlMmItN2RlZGQ3YzU0NjY2&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=01e81919-67bf-45ba-85be-caa1b1263442&x-client-SKU=ID_NET472&x-client-ver=6.26.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DL6oNmmC545xjoJGu2xin9cmkPauVevS-SsimmWWiS2jyqBJ0q3lHxpYl2nTfTVpo6JW-YPE2kHfHeW3EbDpT-RhoP-yy2MzZhqtMBynDH2YI8UQmjYDiUbKwR4MGj4S5LU8VPYB6CFJMjRzUqm_tMhIKTIEn62gqz5EJ-7pwDjNJQSxfhe4LujgHZVIxXapi&response_mode=form_post&nonce=638227777716276745.YzFmYmE5ZDAtNjU5MS00MTQzLTg3YWYtYTc5MTk3YzBiMmE4MTkwMzIxNGItN2Q3Ni00YjQxLWFlMmItN2RlZGQ3YzU0NjY2&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=01e81919-67bf-45ba-85be-caa1b1263442&x-client-SKU=ID_NET472&x-client-ver=6.26.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DL6oNmmC545xjoJGu2xin9cmkPauVevS-SsimmWWiS2jyqBJ0q3lHxpYl2nTfTVpo6JW-YPE2kHfHeW3EbDpT-RhoP-yy2MzZhqtMBynDH2YI8UQmjYDiUbKwR4MGj4S5LU8VPYB6CFJMjRzUqm_tMhIKTIEn62gqz5EJ-7pwDjNJQSxfhe4LujgHZVIxXapi&response_mode=form_post&nonce=638227777716276745.YzFmYmE5ZDAtNjU5MS00MTQzLTg3YWYtYTc5MTk3YzBiMmE4MTkwMzIxNGItN2Q3Ni00YjQxLWFlMmItN2RlZGQ3YzU0NjY2&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=01e81919-67bf-45ba-85be-caa1b1263442&x-client-SKU=ID_NET472&x-client-ver=6.26.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DL6oNmmC545xjoJGu2xin9cmkPauVevS-SsimmWWiS2jyqBJ0q3lHxpYl2nTfTVpo6JW-YPE2kHfHeW3EbDpT-RhoP-yy2MzZhqtMBynDH2YI8UQmjYDiUbKwR4MGj4S5LU8VPYB6CFJMjRzUqm_tMhIKTIEn62gqz5EJ-7pwDjNJQSxfhe4LujgHZVIxXapi&response_mode=form_post&nonce=638227777716276745.YzFmYmE5ZDAtNjU5MS00MTQzLTg3YWYtYTc5MTk3YzBiMmE4MTkwMzIxNGItN2Q3Ni00YjQxLWFlMmItN2RlZGQ3YzU0NjY2&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=01e81919-67bf-45ba-85be-caa1b1263442&x-client-SKU=ID_NET472&x-client-ver=6.26.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DL6oNmmC545xjoJGu2xin9cmkPauVevS-SsimmWWiS2jyqBJ0q3lHxpYl2nTfTVpo6JW-YPE2kHfHeW3EbDpT-RhoP-yy2MzZhqtMBynDH2YI8UQmjYDiUbKwR4MGj4S5LU8VPYB6CFJMjRzUqm_tMhIKTIEn62gqz5EJ-7pwDjNJQSxfhe4LujgHZVIxXapi&response_mode=form_post&nonce=638227777716276745.YzFmYmE5ZDAtNjU5MS00MTQzLTg3YWYtYTc5MTk3YzBiMmE4MTkwMzIxNGItN2Q3Ni00YjQxLWFlMmItN2RlZGQ3YzU0NjY2&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=01e81919-67bf-45ba-85be-caa1b1263442&x-client-SKU=ID_NET472&x-client-ver=6.26.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3d392E27E905D60C54%26opidt%3d1687180992%26uaid%3d01e8191967bf45ba85becaa1b1263442%26contextid%3d1DE52BD209789540%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=01e8191967bf45ba85becaa1b1263442&suc=00000006-0000-0ff1-ce00-000000000000&lic=1	HTTP Parser: No <meta name="copyright".. found
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3d392E27E905D60C54%26opidt%3d1687180992%26uaid%3d01e8191967bf45ba85becaa1b1263442%26contextid%3d1DE52BD209789540%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=01e8191967bf45ba85becaa1b1263442&suc=00000006-0000-0ff1-ce00-000000000000&lic=1	HTTP Parser: No <meta name="copyright".. found
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3dE767A81BBE603D51%26opidt%3d1687181003%26uaid%3d01e8191967bf45ba85becaa1b1263442%26contextid%3d1EBC13AF5C22E80A%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=01e8191967bf45ba85becaa1b1263442&suc=00000006-0000-0ff1-ce00-000000000000&lic=1	HTTP Parser: No <meta name="copyright".. found
Source: https://signup.live.com/signup?sru=https%3a%2f%2flogin.live.com%2foauth20_authorize.srf%3flc%3d1033%26mkt%3den-US%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26opid%3dE767A81BBE603D51%26opidt%3d1687181003%26uaid%3d01e8191967bf45ba85becaa1b1263442%26contextid%3d1EBC13AF5C22E80A%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=01e8191967bf45ba85becaa1b1263442&suc=00000006-0000-0ff1-ce00-000000000000&lic=1	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\GoogleUpdater

Jump to behavior

Source: unknown

DNS traffic detected: queries for: accounts.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49697
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=104.0.5112.81&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-104.0.5112.81Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /services/v2/lookupUrl/265c2f26-b2f2-4c55-98b6-7c843543c873/1555/e4b7c92c418487f88397bfe7b40ac0fc48a5c297 HTTP/1.1Host: protection.greathorn.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_ahL_5J0Eb4L3dLRuUdtwwA2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_xs4q-enqjizb-pd0ha63sw2.css HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_jwXJcl7KHqlMtnJOv3KF8g2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_4igf7t_y-vausy29_42lqw2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_874fbd009ff3ccf3c249.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_dcb837d1e6d50e7bc9c2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_presetpasswordsplitter_e2629cd8878dc80efd70.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /converged_ux_v2_nBE5FSqn9KpH44ZlTc3VqQ2.css?v=1 HTTP/1.1Host: acctcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://signup.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jqueryshim_hlu0tTfjWJFWYNt1WZrVqg2.js?v=1 HTTP/1.1Host: acctcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://signup.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /knockout_3.3.0_X1BYS2jZMbi7hfUj8VuqFA2.js?v=1 HTTP/1.1Host: acctcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://signup.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lwsignupstringscountrybirthdate_en-us_gdxUIqa3ijrOefuBnwhTKg2.js?v=1 HTTP/1.1Host: acctcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://signup.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lightweightsignuppackage_jNkXroqISf47gk0BZKXaXQ2.js?v=1 HTTP/1.1Host: acctcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://signup.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg HTTP/1.1Host: acctcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dropdown_caret_KXSZjGsyILZaoTf0sI9X-A2.svg HTTP/1.1Host: acctcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /datarequestpackage_h-_7C7UzwdefXJT9njDBTQ2.js HTTP/1.1Host: acctcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://signup.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg HTTP/1.1Host: acctcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/favicon.ico?v=2 HTTP/1.1Host: acctcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg HTTP/1.1Host: acctcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dropdown_caret_KXSZjGsyILZaoTf0sI9X-A2.svg HTTP/1.1Host: acctcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg HTTP/1.1Host: acctcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /oneds_MC5gQfpbTUjLu60sQCwU1w2.js?v=1 HTTP/1.1Host: acctcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/favicon.ico?v=2 HTTP/1.1Host: acctcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_158.1.dr	String found in binary or memory: http://fb.me/use-check-prop-types
Source: chromecache_171.1.dr	String found in binary or memory: http://feross.org
Source: chromecache_139.1.dr, chromecache_185.1.dr, chromecache_149.1.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_139.1.dr	String found in binary or memory: http://opensource.org/licenses/mit-license.php)
Source: chromecache_139.1.dr	String found in binary or memory: http://www.json.org/json2.js
Source: chromecache_139.1.dr, chromecache_185.1.dr, chromecache_149.1.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_146.1.dr, chromecache_172.1.dr, chromecache_171.1.dr, chromecache_185.1.dr, chromecache_149.1.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js
Source: chromecache_158.1.dr	String found in binary or memory: https://localcdn.centro-dev.com:5555/inline.bundle.js.map
Source: chromecache_140.1.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_140.1.dr	String found in binary or memory: https://login.windows-ppe.net

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+904; SOCS=CAISHAgCEhJnd3NfMjAyMjA4MDgtMF9SQzEaAmVuIAEaBgiAvOuXBg

Source: classification engine

Classification label: clean2.win@29/49@14/8

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1964 --field-trial-handle=1752,i,17283964871328473641,9489084191923334333,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "https://protection.greathorn.com/services/v2/lookupUrl/265c2f26-b2f2-4c55-98b6-7c843543c873/1555/e4b7c92c418487f88397bfe7b40ac0fc48a5c297
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1964 --field-trial-handle=1752,i,17283964871328473641,9489084191923334333,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\GoogleUpdater

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\GoogleUpdater

Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
1 Drive-by Compromise	1 Scripting	Path Interception	1 Process Injection	2 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	3 Non-Application Layer Protocol	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	1 Scripting	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	4 Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	1 Ingress Tool Transfer	SIM Card Swap		Carrier Billing Fraud

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://protection.greathorn.com/services/v2/lookupUrl/265c2f26-b2f2-4c55-98b6-7c843543c873/1555/e4b7c92c418487f88397bfe7b40ac0fc48a5c297	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
https://acctcdn.msftauth.net/images/dropdown_caret_KXSZjGsyILZaoTf0sI9X-A2.svg	0%	URL Reputation	safe
https://acctcdn.msftauth.net/images/favicon.ico?v=2	0%	URL Reputation	safe
https://acctcdn.msftauth.net/jqueryshim_hlu0tTfjWJFWYNt1WZrVqg2.js?v=1	0%	URL Reputation	safe
https://acctcdn.msftauth.net/datarequestpackage_h-_7C7UzwdefXJT9njDBTQ2.js	0%	URL Reputation	safe
https://acctcdn.msftauth.net/images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg	0%	URL Reputation	safe
https://acctcdn.msftauth.net/knockout_3.3.0_X1BYS2jZMbi7hfUj8VuqFA2.js?v=1	0%	URL Reputation	safe
https://acctcdn.msftauth.net/images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	0%	URL Reputation	safe
https://acctcdn.msftauth.net/converged_ux_v2_nBE5FSqn9KpH44ZlTc3VqQ2.css?v=1	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_jwXJcl7KHqlMtnJOv3KF8g2.js	1%	Virustotal		Browse
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_xs4q-enqjizb-pd0ha63sw2.css	0%	Virustotal		Browse
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	0%	Avira URL Cloud	safe
https://localcdn.centro-dev.com:5555/inline.bundle.js.map	0%	Avira URL Cloud	safe
https://acctcdn.msftauth.net/oneds_MC5gQfpbTUjLu60sQCwU1w2.js?v=1	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_xs4q-enqjizb-pd0ha63sw2.css	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_jwXJcl7KHqlMtnJOv3KF8g2.js	0%	Avira URL Cloud	safe
https://acctcdn.msftauth.net/lwsignupstringscountrybirthdate_en-us_gdxUIqa3ijrOefuBnwhTKg2.js?v=1	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_presetpasswordsplitter_e2629cd8878dc80efd70.js	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_dcb837d1e6d50e7bc9c2.js	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif	0%	Avira URL Cloud	safe
https://acctcdn.msftauth.net/lightweightsignuppackage_jNkXroqISf47gk0BZKXaXQ2.js?v=1	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_4igf7t_y-vausy29_42lqw2.js	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_874fbd009ff3ccf3c249.js	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_ahL_5J0Eb4L3dLRuUdtwwA2.js	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
d2rzsaos5pdse6.cloudfront.net	99.84.88.45	true	false	high
cs1100.wpc.omegacdn.net	152.199.23.37	true	false	unknown
accounts.google.com	142.250.203.109	true	false	high
sni1gl.wpc.alphacdn.net	152.199.21.175	true	false	unknown
part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
www.google.com	142.250.203.100	true	false	high
clients.l.google.com	142.250.203.110	true	false	high
aka.ms	23.40.228.61	true	false	high
nam.safelink.emails.azure.net	unknown	unknown	false	high
signup.live.com	unknown	unknown	false	high
clients2.google.com	unknown	unknown	false	high
identity.nel.measure.office.net	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	unknown
login.microsoftonline.com	unknown	unknown	false	high
fpt.live.com	unknown	unknown	false	high
protection.greathorn.com	unknown	unknown	false	unknown
acctcdn.msftauth.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://acctcdn.msftauth.net/images/dropdown_caret_KXSZjGsyILZaoTf0sI9X-A2.svg	false	URL Reputation: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg	false	Avira URL Cloud: safe	unknown
https://acctcdn.msftauth.net/images/favicon.ico?v=2	false	URL Reputation: safe	unknown
https://fpt.live.com/?session_id=01e8191967bf45ba85becaa1b1263442&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SU&mkt=EN-US	false		high
https://acctcdn.msftauth.net/jqueryshim_hlu0tTfjWJFWYNt1WZrVqg2.js?v=1	false	URL Reputation: safe	unknown
https://acctcdn.msftauth.net/oneds_MC5gQfpbTUjLu60sQCwU1w2.js?v=1	false	Avira URL Cloud: safe	unknown
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard	false		high
https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_jwXJcl7KHqlMtnJOv3KF8g2.js	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_xs4q-enqjizb-pd0ha63sw2.css	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://acctcdn.msftauth.net/datarequestpackage_h-_7C7UzwdefXJT9njDBTQ2.js	false	URL Reputation: safe	unknown
https://acctcdn.msftauth.net/lwsignupstringscountrybirthdate_en-us_gdxUIqa3ijrOefuBnwhTKg2.js?v=1	false	Avira URL Cloud: safe	unknown
https://acctcdn.msftauth.net/images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg	false	URL Reputation: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_presetpasswordsplitter_e2629cd8878dc80efd70.js	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_dcb837d1e6d50e7bc9c2.js	false	Avira URL Cloud: safe	unknown
https://acctcdn.msftauth.net/knockout_3.3.0_X1BYS2jZMbi7hfUj8VuqFA2.js?v=1	false	URL Reputation: safe	unknown
https://acctcdn.msftauth.net/lightweightsignuppackage_jNkXroqISf47gk0BZKXaXQ2.js?v=1	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif	false	Avira URL Cloud: safe	unknown
https://acctcdn.msftauth.net/images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg	false	URL Reputation: safe	unknown
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_4igf7t_y-vausy29_42lqw2.js	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_874fbd009ff3ccf3c249.js	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif	false	Avira URL Cloud: safe	unknown
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=104.0.5112.81&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1	false		high
https://protection.greathorn.com/services/v2/lookupUrl/265c2f26-b2f2-4c55-98b6-7c843543c873/1555/e4b7c92c418487f88397bfe7b40ac0fc48a5c297	false		unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	false	URL Reputation: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_ahL_5J0Eb4L3dLRuUdtwwA2.js	false	Avira URL Cloud: safe	unknown
https://acctcdn.msftauth.net/converged_ux_v2_nBE5FSqn9KpH44ZlTc3VqQ2.css?v=1	false	URL Reputation: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://knockoutjs.com/	chromecache_139.1.dr, chromecache_185.1.dr, chromecache_149.1.dr	false		high
https://github.com/douglascrockford/JSON-js	chromecache_146.1.dr, chromecache_172.1.dr, chromecache_171.1.dr, chromecache_185.1.dr, chromecache_149.1.dr	false		high
https://login.windows-ppe.net	chromecache_140.1.dr	false		high
http://fb.me/use-check-prop-types	chromecache_158.1.dr	false		high
http://opensource.org/licenses/mit-license.php)	chromecache_139.1.dr	false		high
https://localcdn.centro-dev.com:5555/inline.bundle.js.map	chromecache_158.1.dr	false	Avira URL Cloud: safe	unknown
http://www.json.org/json2.js	chromecache_139.1.dr	false		high
https://login.microsoftonline.com	chromecache_140.1.dr	false		high
http://www.opensource.org/licenses/mit-license.php)	chromecache_139.1.dr, chromecache_185.1.dr, chromecache_149.1.dr	false		high
http://feross.org	chromecache_171.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.203.100	www.google.com	United States	15169	GOOGLEUS	false
142.250.203.110	clients.l.google.com	United States	15169	GOOGLEUS	false
99.84.88.45	d2rzsaos5pdse6.cloudfront.net	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
152.199.21.175	sni1gl.wpc.alphacdn.net	United States	15133	EDGECASTUS	false
152.199.23.37	cs1100.wpc.omegacdn.net	United States	15133	EDGECASTUS	false
142.250.203.109	accounts.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.1

General Information

Joe Sandbox Version:	37.1.0 Beryl
Analysis ID:	890426
Start date and time:	2023-06-19 15:21:46 +02:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 5m 46s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://protection.greathorn.com/services/v2/lookupUrl/265c2f26-b2f2-4c55-98b6-7c843543c873/1555/e4b7c92c418487f88397bfe7b40ac0fc48a5c297
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 104, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@29/49@14/8
EGA Information:	Failed
HDC Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAAjZJPTNNgGMZXBgMWRALGgCcSjSFqt-5b2w0SEhkd-8M6urX7012W0bXb1_X72q4d-3PWxCNXuemRi2A8GA7qTcMJr8SrkRBJ1BNHt3Dx6HN48uR9n8ub9-efYgOADYQC1CNvKBBae0DdiCVHTlKaFiIVdZT-UXveP7e0dEF8bJzEn384fXX8kI4dENNVA-6pAcVEh8T9putazlowWKsjiAMIKm3TMTV3tA0aNVyHuPGeIM4I4oIgDsYmVEwWxMMxhw1HAYiMFGJBhI3QTEAebCEZxZkKt-Fm9QLDixTFS7lBRmqE5ZLsypLC8FIrLA9ikEdxepi7_CDVyyZSbhbkwllIUbKe62VKWwaPRrO8UUnkhv0CldVlcD52e2ej4zbByMw2HKh_xqY1s42qlum4B94fxI6l4lR908RYVdzAqKZiFyo1F5pYaJuW2nah6qxnWDOL0CZDMz3dTCc6oAfxqoJaQq1TVPdEUnQgQqUSFIHet2Npyg4byZ4lGwBLmlS0TDZdImUhDlpJLamWwvFdzpLIfNMUyH4f8INK03b5WB9zSSCnooUc0mUOFna3u3maT-i0yGQK0aIgx9jNrTSv5wcFG1VdvpnallJxzIKGPWDiaTJidTk9m86JPa2p0pmO3khWiqleuWbBt17f8DvIxKfe2eFRGNaXrbapQUM9Gycux-9O-ebuLRLLnpU7lHdtaso_51n0LHuux4nXE0MeCkdfF4zJn0_fXX3-famteE4nghvgcTm_WWwlkJ5sOUHOEcsO4AS5K4VLzbRoW8gW3Hy9Vuai68xaaN9H7Pt8p77pFFfNxiU6An75iBeTnpPp_6HpaIY4n1nw-zuwaphKzVCd-RuqPt3yXM--Of7-5dnLb1fJy9tPgrygwaiq2DGXaZf1VcHawQncoprbrMb307RUVvOwFe1Sdmv9Lw2&estsfed=1&uaid=01e8191967bf45ba85becaa1b1263442&signup=1&lw=1&fl=easi2&fci=00000006-0000-0ff1-ce00-000000000000&mkt=en-US Browse: https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAAjZJPTNNgGMZXBgMWRALGgCcSjSFqt-5b2w0SEhkd-8M6urX7012W0bXb1_X72q4d-3PWxCNXuemRi2A8GA7qTcMJr8SrkRBJ1BNHt3Dx6HN48uR9n8ub9-efYgOADYQC1CNvKBBae0DdiCVHTlKaFiIVdZT-UXveP7e0dEF8bJzEn384fXX8kI4dENNVA-6pAcVEh8T9putazlowWKsjiAMIKm3TMTV3tA0aNVyHuPGeIM4I4oIgDsYmVEwWxMMxhw1HAYiMFGJBhI3QTEAebCEZxZkKt-Fm9QLDixTFS7lBRmqE5ZLsypLC8FIrLA9ikEdxepi7_CDVyyZSbhbkwllIUbKe62VKWwaPRrO8UUnkhv0CldVlcD52e2ej4zbByMw2HKh_xqY1s42qlum4B94fxI6l4lR908RYVdzAqKZiFyo1F5pYaJuW2nah6qxnWDOL0CZDMz3dTCc6oAfxqoJaQq1TVPdEUnQgQqUSFIHet2Npyg4byZ4lGwBLmlS0TDZdImUhDlpJLamWwvFdzpLIfNMUyH4f8INK03b5WB9zSSCnooUc0mUOFna3u3maT-i0yGQK0aIgx9jNrTSv5wcFG1VdvpnallJxzIKGPWDiaTJidTk9m86JPa2p0pmO3khWiqleuWbBt17f8DvIxKfe2eFRGNaXrbapQUM9Gycux-9O-ebuLRLLnpU7lHdtaso_51n0LHuux4nXE0MeCkdfF4zJn0_fXX3-famteE4nghvgcTm_WWwlkJ5sOUHOEcsO4AS5K4VLzbRoW8gW3Hy9Vuai68xaaN9H7Pt8p77pFFfNxiU6An75iBeTnpPp_6HpaIY4n1nw-zuwaphKzVCd-RuqPt3yXM--Of7-5dnLb1fJy9tPgrygwaiq2DGXaZf1VcHawQncoprbrMb307RUVvOwFe1Sdmv9Lw2&estsfed=1&uaid=01e8191967bf45ba85becaa1b1263442&signup=1&lw=1&fl=easi2&fci=00000006-0000-0ff1-ce00-000000000000&mkt=en-US

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, WMIADAP.exe, conhost.exe
Excluded IPs from analysis (whitelisted): 142.250.203.99, 34.104.35.123, 20.119.8.0, 52.109.68.34, 84.53.132.121, 2.17.211.83, 20.190.177.149, 20.190.177.83, 20.190.177.148, 20.190.177.23, 20.190.177.146, 20.190.177.85, 20.190.177.82, 20.190.177.84, 2.16.244.43, 2.16.244.33, 40.126.32.73, 20.190.160.12, 40.126.32.132, 40.126.32.69, 40.126.32.75, 40.126.32.67, 20.190.160.13, 20.190.160.15, 142.250.203.106, 172.217.168.42, 104.92.153.146, 23.36.225.122, 13.107.42.22, 95.100.53.90, 52.167.30.171, 20.42.73.24, 23.10.249.144, 23.0.174.11
Excluded domains from analysis (whitelisted): res-h3.public.cdn.office.net, greenid-prod-pme.eastus2.cloudapp.azure.com, pme-greenid-prod.trafficmanager.net, e13678.dscb.akamaiedge.net, onedscolprdeus03.eastus.cloudapp.azure.com, clientservices.googleapis.com, browser.events.data.trafficmanager.net, ak.privatelink.msidentity.com, e11290.dspg.akamaiedge.net, www.microsoft.com-c-3.edgekey.net, login.live.com, akamai.portal.office.akadns.net, update.googleapis.com, waws-prod-blu-315-02a8.eastus.cloudapp.azure.com, acctcdnvzeuno.azureedge.net, acctcdnvzeuno.ec.azureedge.net, res-prod-h3.trafficmanager.net, e40491.dscg.akamaiedge.net, fpt2.microsoft.com, acctcdnmsftuswe2.azureedge.net, content-autofill.googleapis.com, aadcdnoriginwus2.azureedge.net, aadcdn.msauth.net, edgedl.me.gvt1.com, owamail.public.cdn.office.net.edgekey.net, nel.measure.office.net.edgesuite.net, owamail.public.cdn.office.net.edgekey.net.globalredir.akadns.net, aadcdnoriginwus2.afd.azureedge.net, account.msa.msidentity.com, meo-traf-nam.traffi
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	224
Entropy (8bit):	5.066130335315081
Encrypted:	false
SSDEEP:	6:tI9mc4slz2lWjVRqtmd9QA0ZcTKhqnR40Y:t44lWjVRqtnA0Zcq6R40Y
MD5:	2974998C6B3220B65AA137F4B08F57F8
SHA1:	F4F08DA689179DE68EE40CD12ECDCC5AC54B3979
SHA-256:	96D52BD03E244A44931A541A807067792D638DD29EC14A87A78F2BE85D12D19A
SHA-512:	6B4F2439CA99109A7C97828E5972A8E7C7FCA3745B2FB4738EBD9329A99234A8CD3BC4C0C48B5BAA917D4BAA64CDAEB5D74456DEFDDDA3E07FAA803283BE0287
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"><title>assets</title><path d="M18,22.484l-8-8,.969-.968L18,20.547l7.031-7.031.969.968-8,8Z"/><rect width="36" height="36" fill="none"/></svg>

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jun 19, 2023 15:22:43.972007036 CEST	56924	53	192.168.2.3	8.8.8.8
Jun 19, 2023 15:22:43.972551107 CEST	60625	53	192.168.2.3	8.8.8.8
Jun 19, 2023 15:22:44.000416040 CEST	53	56924	8.8.8.8	192.168.2.3
Jun 19, 2023 15:22:44.004848003 CEST	53	60625	8.8.8.8	192.168.2.3
Jun 19, 2023 15:22:46.421319962 CEST	60582	53	192.168.2.3	8.8.8.8
Jun 19, 2023 15:22:46.470580101 CEST	53	60582	8.8.8.8	192.168.2.3
Jun 19, 2023 15:22:47.281291962 CEST	57134	53	192.168.2.3	8.8.8.8
Jun 19, 2023 15:22:47.446048021 CEST	56042	53	192.168.2.3	8.8.8.8
Jun 19, 2023 15:22:47.461111069 CEST	53	56042	8.8.8.8	192.168.2.3
Jun 19, 2023 15:22:51.676156044 CEST	65107	53	192.168.2.3	8.8.8.8
Jun 19, 2023 15:22:52.060918093 CEST	53848	53	192.168.2.3	8.8.8.8
Jun 19, 2023 15:22:52.094397068 CEST	53	53848	8.8.8.8	192.168.2.3
Jun 19, 2023 15:22:52.602129936 CEST	57571	53	192.168.2.3	8.8.8.8
Jun 19, 2023 15:23:12.687820911 CEST	58708	53	192.168.2.3	8.8.8.8
Jun 19, 2023 15:23:13.462481022 CEST	53049	53	192.168.2.3	8.8.8.8
Jun 19, 2023 15:23:14.088510990 CEST	59820	53	192.168.2.3	8.8.8.8
Jun 19, 2023 15:23:14.112020016 CEST	53	59820	8.8.8.8	192.168.2.3
Jun 19, 2023 15:23:14.730633974 CEST	52079	53	192.168.2.3	8.8.8.8
Jun 19, 2023 15:23:47.506709099 CEST	62431	53	192.168.2.3	8.8.8.8
Jun 19, 2023 15:23:47.530714035 CEST	53	62431	8.8.8.8	192.168.2.3
Jun 19, 2023 15:23:53.854289055 CEST	55244	53	192.168.2.3	8.8.8.8

Timestamp	kBytes transferred	Direction	Data
2023-06-19 13:22:44 UTC	0	OUT	GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=104.0.5112.81&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1 Host: clients2.google.com Connection: keep-alive X-Goog-Update-Interactivity: fg X-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda X-Goog-Update-Updater: chromecrx-104.0.5112.81 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-06-19 13:22:44 UTC	1	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-WcGHWUGoW_OnYgZ8bjmDDA' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 19 Jun 2023 13:22:44 GMT Content-Type: text/xml; charset=UTF-8 X-Daynum: 6013 X-Daystart: 22964 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-06-19 13:22:44 UTC	1	IN	Data Raw: 32 63 39 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 36 30 31 33 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 32 32 39 36 34 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 Data Ascii: 2c9<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="6013" elapsed_seconds="22964"/><app appid="nmmhkkegccagdldgiimedpiccmgmieda" cohort="1::" cohortname=""
2023-06-19 13:22:44 UTC	2	IN	Data Raw: 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 7a 65 3d 22 32 34 38 35 33 31 22 20 73 74 61 74 75 73 3d 22 6f 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 2e 30 2e 36 22 2f 3e 3c 2f 61 70 70 3e 3c 2f 67 75 70 64 61 74 65 3e 0d 0a Data Ascii: 723f56b8717175c536685c5450122b30789464ad82" hash_sha256="81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" protected="0" size="248531" status="ok" version="1.0.0.6"/></app></gupdate>
2023-06-19 13:22:44 UTC	2	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	kBytes transferred	Direction	Data
2023-06-19 13:22:44 UTC	0	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+904; SOCS=CAISHAgCEhJnd3NfMjAyMjA4MDgtMF9SQzEaAmVuIAEaBgiAvOuXBg
2023-06-19 13:22:44 UTC	1	OUT	Data Raw: 20 Data Ascii:
2023-06-19 13:22:44 UTC	2	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: https://www.google.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 19 Jun 2023 13:22:44 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/IdentityListAccountsHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-lEjTVhlH2XqXL_hja8J4mA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdentityListAccountsHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdentityListAccountsHttp/cspreport/allowlist Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-06-19 13:22:44 UTC	4	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2023-06-19 13:22:44 UTC	4	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	kBytes transferred	Direction	Data
2023-06-19 13:22:53 UTC	841	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-06-19 13:22:53 UTC	841	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2043764 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Mon, 19 Jun 2023 13:22:53 GMT Etag: 0x8DB5C3F495F4B8C Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (muc/333F) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 740fcbed-201e-0019-451a-90b88f000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2023-06-19 13:22:53 UTC	843	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Timestamp	kBytes transferred	Direction	Data
2023-06-19 13:22:53 UTC	848	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_dcb837d1e6d50e7bc9c2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-06-19 13:22:53 UTC	849	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1570204 Cache-Control: public, max-age=31536000 Content-MD5: BRdhFhTta4XPxgVgRcs0iA== Content-Type: application/x-javascript Date: Mon, 19 Jun 2023 13:22:53 GMT Etag: 0x8DB5D83893DACCF Last-Modified: Fri, 26 May 2023 00:52:52 GMT Server: ECAcc (muc/3351) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 65bf34f3-a01e-001a-4369-944bef000000 x-ms-version: 2009-09-19 Content-Length: 113577 Connection: close
2023-06-19 13:22:53 UTC	850	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2023-06-19 13:22:53 UTC	866	IN	Data Raw: 7b 72 3d 72 2e 63 6f 6e 63 61 74 28 74 68 69 73 5b 74 5d 2e 72 75 6c 65 72 2e 65 6e 61 62 6c 65 28 65 2c 21 30 29 29 7d 29 2c 74 68 69 73 29 2c 72 3d 72 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 69 6e 6c 69 6e 65 2e 72 75 6c 65 72 32 2e 65 6e 61 62 6c 65 28 65 2c 21 30 29 29 3b 76 61 72 20 6e 3d 65 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 72 2e 69 6e 64 65 78 4f 66 28 65 29 3c 30 7d 29 29 3b 69 66 28 6e 2e 6c 65 6e 67 74 68 26 26 21 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 4d 61 72 6b 64 6f 77 6e 49 74 2e 20 46 61 69 6c 65 64 20 74 6f 20 65 6e 61 62 6c 65 20 75 6e 6b 6e 6f 77 6e 20 72 75 6c 65 28 73 29 3a 20 22 2b 6e 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 62 2e 70 72 6f 74 6f 74 79 70 65 2e 64 Data Ascii: {r=r.concat(this[t].ruler.enable(e,!0))}),this),r=r.concat(this.inline.ruler2.enable(e,!0));var n=e.filter((function(e){return r.indexOf(e)<0}));if(n.length&&!t)throw new Error("MarkdownIt. Failed to enable unknown rule(s): "+n);return this},b.prototype.d
2023-06-19 13:22:53 UTC	882	IN	Data Raw: 75 30 Data Ascii: u0
2023-06-19 13:22:53 UTC	882	IN	Data Raw: 33 39 62 22 2c 22 6c 61 6d 62 64 61 22 3a 22 5c 75 30 33 62 62 22 2c 22 6c 61 6e 67 22 3a 22 5c 75 32 37 65 38 22 2c 22 4c 61 6e 67 22 3a 22 5c 75 32 37 65 61 22 2c 22 6c 61 6e 67 64 22 3a 22 5c 75 32 39 39 31 22 2c 22 6c 61 6e 67 6c 65 22 3a 22 5c 75 32 37 65 38 22 2c 22 6c 61 70 22 3a 22 5c 75 32 61 38 35 22 2c 22 4c 61 70 6c 61 63 65 74 72 66 22 3a 22 5c 75 32 31 31 32 22 2c 22 6c 61 71 75 6f 22 3a 22 5c 78 61 62 22 2c 22 6c 61 72 72 62 22 3a 22 5c 75 32 31 65 34 22 2c 22 6c 61 72 72 62 66 73 22 3a 22 5c 75 32 39 31 66 22 2c 22 6c 61 72 72 22 3a 22 5c 75 32 31 39 30 22 2c 22 4c 61 72 72 22 3a 22 5c 75 32 31 39 65 22 2c 22 6c 41 72 72 22 3a 22 5c 75 32 31 64 30 22 2c 22 6c 61 72 72 66 73 22 3a 22 5c 75 32 39 31 64 22 2c 22 6c 61 72 72 68 6b 22 3a 22 5c Data Ascii: 39b","lambda":"\u03bb","lang":"\u27e8","Lang":"\u27ea","langd":"\u2991","langle":"\u27e8","lap":"\u2a85","Laplacetrf":"\u2112","laquo":"\xab","larrb":"\u21e4","larrbfs":"\u291f","larr":"\u2190","Larr":"\u219e","lArr":"\u21d0","larrfs":"\u291d","larrhk":"\
2023-06-19 13:22:53 UTC	898	IN	Data Raw: 22 3a 22 5c 75 32 31 64 38 22 2c 22 73 65 61 72 72 6f 77 22 3a 22 5c 75 32 31 39 38 22 2c 22 73 65 63 74 22 3a 22 5c 78 61 37 22 2c 22 73 65 6d 69 22 3a 22 3b 22 2c 22 73 65 73 77 61 72 22 3a 22 5c 75 32 39 32 39 22 2c 22 73 65 74 6d 69 6e 75 73 22 3a 22 5c 75 32 32 31 36 22 2c 22 73 65 74 6d 6e 22 3a 22 5c 75 32 32 31 36 22 2c 22 73 65 78 74 22 3a 22 5c 75 32 37 33 36 22 2c 22 53 66 72 22 3a 22 5c 75 64 38 33 35 5c 75 64 64 31 36 22 2c 22 73 66 72 22 3a 22 5c 75 64 38 33 35 5c 75 64 64 33 30 22 2c 22 73 66 72 6f 77 6e 22 3a 22 5c 75 32 33 32 32 22 2c 22 73 68 61 72 70 22 3a 22 5c 75 32 36 36 66 22 2c 22 53 48 43 48 63 79 22 3a 22 5c 75 30 34 32 39 22 2c 22 73 68 63 68 63 79 22 3a 22 5c 75 30 34 34 39 22 2c 22 53 48 63 79 22 3a 22 5c 75 30 34 32 38 22 2c Data Ascii: ":"\u21d8","searrow":"\u2198","sect":"\xa7","semi":";","seswar":"\u2929","setminus":"\u2216","setmn":"\u2216","sext":"\u2736","Sfr":"\ud835\udd16","sfr":"\ud835\udd30","sfrown":"\u2322","sharp":"\u266f","SHCHcy":"\u0429","shchcy":"\u0449","SHcy":"\u0428",
2023-06-19 13:22:53 UTC	914	IN	Data Raw: 4f 75 74 3f 22 3c 62 72 20 2f 3e 5c 6e 22 3a 22 3c 62 72 3e 5c 6e 22 7d 2c 69 2e 73 6f 66 74 62 72 65 61 6b 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 72 2e 62 72 65 61 6b 73 3f 72 2e 78 68 74 6d 6c 4f 75 74 3f 22 3c 62 72 20 2f 3e 5c 6e 22 3a 22 3c 62 72 3e 5c 6e 22 3a 22 5c 6e 22 7d 2c 69 2e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6f 28 65 5b 74 5d 2e 63 6f 6e 74 65 6e 74 29 7d 2c 69 2e 68 74 6d 6c 5f 62 6c 6f 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 5b 74 5d 2e 63 6f 6e 74 65 6e 74 7d 2c 69 2e 68 74 6d 6c 5f 69 6e 6c 69 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 5b 74 5d 2e 63 6f 6e 74 65 6e 74 7d 2c 61 2e 70 72 6f 74 6f Data Ascii: Out?"<br />\n":"<br>\n"},i.softbreak=function(e,t,r){return r.breaks?r.xhtmlOut?"<br />\n":"<br>\n":"\n"},i.text=function(e,t){return o(e[t].content)},i.html_block=function(e,t){return e[t].content},i.html_inline=function(e,t){return e[t].content},a.proto
2023-06-19 13:22:53 UTC	930	IN	Data Raw: 2c 73 3d 65 2e 6c 65 76 65 6c 2b 32 3b 66 6f 72 28 72 3d 74 2b 32 2c 6e 3d 65 2e 74 6f 6b 65 6e 73 2e 6c 65 6e 67 74 68 2d 32 3b 72 3c 6e 3b 72 2b 2b 29 65 2e 74 6f 6b 65 6e 73 5b 72 5d 2e 6c 65 76 65 6c 3d 3d 3d 73 26 26 22 70 61 72 61 67 72 61 70 68 5f 6f 70 65 6e 22 3d 3d 3d 65 2e 74 6f 6b 65 6e 73 5b 72 5d 2e 74 79 70 65 26 26 28 65 2e 74 6f 6b 65 6e 73 5b 72 2b 32 5d 2e 68 69 64 64 65 6e 3d 21 30 2c 65 2e 74 6f 6b 65 6e 73 5b 72 5d 2e 68 69 64 64 65 6e 3d 21 30 2c 72 2b 3d 32 29 7d 28 65 2c 67 29 2c 21 30 7d 7d 2c 37 34 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 30 33 29 2e 6e 6f 72 6d 61 6c 69 7a 65 52 65 66 65 72 65 6e 63 65 2c 73 3d 72 28 35 30 33 29 2e 69 73 53 70 61 63 Data Ascii: ,s=e.level+2;for(r=t+2,n=e.tokens.length-2;r<n;r++)e.tokens[r].level===s&&"paragraph_open"===e.tokens[r].type&&(e.tokens[r+2].hidden=!0,e.tokens[r].hidden=!0,r+=2)}(e,g),!0}},748:function(e,t,r){"use strict";var n=r(503).normalizeReference,s=r(503).isSpac
2023-06-19 13:22:53 UTC	946	IN	Data Raw: 2c 74 2c 72 2c 6e 29 7b 74 68 69 73 2e 73 72 63 3d 65 2c 74 68 69 73 2e 65 6e 76 3d 72 2c 74 68 69 73 2e 6d 64 3d 74 2c 74 68 69 73 2e 74 6f 6b 65 6e 73 3d 6e 2c 74 68 69 73 2e 74 6f 6b 65 6e 73 5f 6d 65 74 61 3d 41 72 72 61 79 28 6e 2e 6c 65 6e 67 74 68 29 2c 74 68 69 73 2e 70 6f 73 3d 30 2c 74 68 69 73 2e 70 6f 73 4d 61 78 3d 74 68 69 73 2e 73 72 63 2e 6c 65 6e 67 74 68 2c 74 68 69 73 2e 6c 65 76 65 6c 3d 30 2c 74 68 69 73 2e 70 65 6e 64 69 6e 67 3d 22 22 2c 74 68 69 73 2e 70 65 6e 64 69 6e 67 4c 65 76 65 6c 3d 30 2c 74 68 69 73 2e 63 61 63 68 65 3d 7b 7d 2c 74 68 69 73 2e 64 65 6c 69 6d 69 74 65 72 73 3d 5b 5d 2c 74 68 69 73 2e 5f 70 72 65 76 5f 64 65 6c 69 6d 69 74 65 72 73 3d 5b 5d 2c 74 68 69 73 2e 62 61 63 6b 74 69 63 6b 73 3d 7b 7d 2c 74 68 69 73 Data Ascii: ,t,r,n){this.src=e,this.env=r,this.md=t,this.tokens=n,this.tokens_meta=Array(n.length),this.pos=0,this.posMax=this.src.length,this.level=0,this.pending="",this.pendingLevel=0,this.cache={},this.delimiters=[],this._prev_delimiters=[],this.backticks={},this

Timestamp	kBytes transferred	Direction	Data
2023-06-19 13:22:54 UTC	961	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-06-19 13:22:54 UTC	961	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2043765 Cache-Control: public, max-age=31536000 Content-MD5: R2FAVxfpONfnQAuxVxXbHg== Content-Type: image/svg+xml Date: Mon, 19 Jun 2023 13:22:54 GMT Etag: 0x8DB5C3F4BB4F03C Last-Modified: Wed, 24 May 2023 10:11:52 GMT Server: ECAcc (muc/335C) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: cbc6669b-801e-004d-411a-9010a9000000 x-ms-version: 2009-09-19 Content-Length: 1592 Connection: close
2023-06-19 13:22:54 UTC	962	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 2c 30 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,

Timestamp	kBytes transferred	Direction	Data
2023-06-19 13:23:01 UTC	963	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-06-19 13:23:01 UTC	964	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 3342772 Cache-Control: public, max-age=31536000 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Content-Type: image/x-icon Date: Mon, 19 Jun 2023 13:23:01 GMT Etag: 0x8D8731240E548EB Last-Modified: Sun, 18 Oct 2020 03:02:30 GMT Server: ECAcc (muc/3374) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: b17a79dc-401e-006d-1c4a-846ef8000000 x-ms-version: 2009-09-19 Content-Length: 17174 Connection: close
2023-06-19 13:23:01 UTC	964	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2023-06-19 13:23:01 UTC	980	IN	Data Raw: 01 80 00 00 01 80 00 28 00 00 00 18 00 00 00 30 00 00 00 01 00 04 00 00 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 Data Ascii: (0"P""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330

Timestamp	kBytes transferred	Direction	Data
2023-06-19 13:23:01 UTC	981	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-06-19 13:23:01 UTC	982	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1706433 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Mon, 19 Jun 2023 13:23:01 GMT Etag: 0x8DB5C3F466DE917 Last-Modified: Wed, 24 May 2023 10:11:43 GMT Server: ECAcc (muc/3382) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: ebd448c7-f01e-0098-3f2c-93bec7000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2023-06-19 13:23:01 UTC	983	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Timestamp	kBytes transferred	Direction	Data
2023-06-19 13:23:01 UTC	990	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-06-19 13:23:01 UTC	1003	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2043755 Cache-Control: public, max-age=31536000 Content-MD5: Fm3lNHEmUlOrOkVt7+baIw== Content-Type: image/gif Date: Mon, 19 Jun 2023 13:23:01 GMT Etag: 0x8DB5C3F4982FD30 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (muc/3328) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: a6823e61-b01e-0072-191a-90ee33000000 x-ms-version: 2009-09-19 Content-Length: 2672 Connection: close
2023-06-19 13:23:01 UTC	1004	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Timestamp	kBytes transferred	Direction	Data
2023-06-19 13:22:46 UTC	4	OUT	GET /services/v2/lookupUrl/265c2f26-b2f2-4c55-98b6-7c843543c873/1555/e4b7c92c418487f88397bfe7b40ac0fc48a5c297 HTTP/1.1 Host: protection.greathorn.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-06-19 13:22:47 UTC	5	IN	HTTP/1.1 302 Moved Temporarily Content-Type: application/json Content-Length: 17 Connection: close Date: Mon, 19 Jun 2023 13:22:47 GMT Location: https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2FAdminPortal%2FHome%3Fref%3Dsubscriptions&p=bT1hNjdmMTI1Mi1iZDU0LTQ2NzktYWVjZC1iNzc3MWE3OTZmNTgmcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1Ib21l Strict-Transport-Security: max-age=15724800; includeSubDomains Content-Security-Policy: default-src 'none'; script-src 'self' apis.google.com static.zdassets.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.googleapis.com; img-src 'self' *.amazonaws.com; connect-src 'self' greathorn.statuscast.com; frame-src accounts.google.com X-Content-Type-Options: nosniff X-Frame-Options: deny X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 a7322dae74179db004d6fbdc1e7dc03e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-C1 X-Amz-Cf-Id: 3BKub0XKXrKQw3ThzRaMtdjTgpk8b6b-QfYfHD28ZJYh5z5mDkavMw== Referrer-Policy: strict-origin-when-cross-origin Vary: Origin
2023-06-19 13:22:47 UTC	6	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 20 74 72 75 65 7d Data Ascii: {"success": true}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
URL:	https://acctcdn.msftauth.net/images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4786), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	80144
Entropy (8bit):	5.421376219099593
Encrypted:	false
SSDEEP:	1536:vZ2N4/PzS0zdqm4NVmVtfB6aTJDIO5XxV7FyTDQIp8a+fNNnbt:Ay+0LmmBt7c1+Rfbt
MD5:	5F50584B68D931B8BB85F523F15BAA14
SHA1:	FAF4BD348F40016BCE0ABF54F167C7923B303ABB
SHA-256:	3C829DCF48768082A6177B77AE4E499337ED4C8BD056705CDB1E979F7B6EFCE5
SHA-512:	EB01573B9152D93400C7BCDC0C3746B58E8F5F8BA7A4C033D3A30D688E307543979402CAD4A19249391BA3113466F562D20A521BBEFFB7864AEBEB18FDB79BC1
Malicious:	false
Reputation:	low
URL:	https://acctcdn.msftauth.net/knockout_3.3.0_X1BYS2jZMbi7hfUj8VuqFA2.js?v=1
Preview:	/!------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------....This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise. .... Knockout JavaScript library v3.3.0.. * (c) Steven Sanderson - http://knockoutjs.com/.. * License: MIT (http://www.opensource.org/licenses/mit-license.php)....Provided for Informational Purposes Only....MIT License ....Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the Software)

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2345), with CRLF line terminators
Category:	downloaded
Size (bytes):	2347
Entropy (8bit):	5.290031538794594
Encrypted:	false
SSDEEP:	48:gCgF0+kNL5iQ6+GhB+SYWzGuesAFcsGJOzgO6FIEv+sj+M++sx+suse+swsosmC0:gC3Na5+GX+Ti2XsYE2sqAsosushswsoB
MD5:	E86EF8B6111E5FB1D1665BCDC90888C9
SHA1:	994BF7651CB967CD9053056AF2D69ACB74DB7F29
SHA-256:	3410242720DE50B090D07A23AEE2DAD879B31D36F2615732962EC4CFA8A9D458
SHA-512:	2486B491681EE91A9CD1ECC9AA011A3FB34B48358C5D7A4D503A5357BC5CE4CA22999F918D40AC60A3063940D5F326FC7E4E5713D89D5C102DE68824E371B3AB
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(n,t){for(var e in t)n[e]=t[e]}(this,function(n){function t(i){if(e[i])return e[i].exports;var s=e[i]={exports:{},id:i,loaded:!1};return n[i].call(s.exports,s,s.exports,t),s.loaded=!0,s.exports}var e={};return t.m=n,t.c=e,t.p="",t(0)}([function(n,t){function e(n){for(var t=g[c],e=0,i=t.length;e<i;++e)if(t[e]===n)return!0;return!1}function i(n){if(!n)return null;for(var t=n+"=",e=document.cookie.split(";"),i=0,s=e.length;i<s;i++){var o=e[i].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===o.indexOf(t))return o.substring(t.length)}return null}function s(n,t,e){if(n)for(var i=n.split(":"),s=null,o=0,a=i.length;o<a;++o){var l=null,c=i[o].split("$");if(0===o&&(s=parseInt(c.shift()),!s))return;var p=c.length;if(p>=1){var f=r(s,c[0]);if(!f\|\|e[f])continue;l={signInName:f,idp:"msa",isSignedIn:!0}}if(p>=3&&(l.firstName=r(s,c[1]),l.lastName=r(s,c[2])),p>=4){var g=c[3],m=g.split("\|");l.otherHashedAliases=m}if(p>=5){var h=parseInt(c[4],16);h&&(l.

Timestamp	kBytes transferred	Direction	Data
2023-06-19 13:23:01 UTC	1006	OUT	GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-06-19 13:23:01 UTC	1008	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1568720 Cache-Control: public, max-age=31536000 Content-MD5: b2jpiB3xj44lGrV9V4Yjmw== Content-Type: image/svg+xml Date: Mon, 19 Jun 2023 13:23:01 GMT Etag: 0x8DB5C3F4A04A56D Last-Modified: Wed, 24 May 2023 10:11:49 GMT Server: ECAcc (muc/3322) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: ee7ebb11-a01e-0059-556c-94442d000000 x-ms-version: 2009-09-19 Content-Length: 1378 Connection: close
2023-06-19 13:23:01 UTC	1008	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 23 65 36 65 36 65 36 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 63 69 72 63 6c 65 20 63 6c 61 73 73 3d 22 61 22 20 63 78 3d 22 32 34 22 20 63 79 3d 22 32 34 22 20 72 3d 22 32 34 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 33 32 2e 35 2c 31 34 41 31 2e 34 39 32 2c 31 2e 34 39 32 2c 30 2c 30 2c 31 2c 33 34 2c 31 35 2e 35 56 33 38 2e 35 41 31 2e 34 39 34 2c 31 2e 34 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:#e6e6e6;}.b{fill:#404040;}</style></defs><circle class="a" cx="24" cy="24" r="24"/><path class="b" d="M32.5,14A1.492,1.492,0,0,1,34,15.5V38.5A1.494,1.4

Timestamp	kBytes transferred	Direction	Data
2023-06-19 13:23:01 UTC	1007	OUT	GET /shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-06-19 13:23:01 UTC	1010	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 646281 Cache-Control: public, max-age=31536000 Content-MD5: hHpCErmbkHbuOTKLJM0wrw== Content-Type: image/svg+xml Date: Mon, 19 Jun 2023 13:23:01 GMT Etag: 0x8DB5C3F4A4E2B5D Last-Modified: Wed, 24 May 2023 10:11:50 GMT Server: ECAcc (muc/334C) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 956aafd3-701e-0030-3cd0-9c1ffc000000 x-ms-version: 2009-09-19 Content-Length: 379 Connection: close
2023-06-19 13:23:01 UTC	1010	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 32 34 22 20 63 79 3d 22 32 34 22 20 72 3d 22 32 34 22 20 66 69 6c 6c 3d 22 23 65 36 65 36 65 36 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 33 2e 34 34 2c 33 36 68 31 2e 39 32 61 38 2e 36 34 2c 38 2e 36 34 2c 30 2c 31 2c 31 2c 31 37 2e 32 38 2c 30 68 31 2e 39 32 61 31 30 2e 35 37 33 2c 31 30 2e 35 37 33 2c 30 2c 30 2c 30 2d 36 2e 35 36 39 2d 39 2e 37 37 31 2c 37 2e 36 38 2c 37 2e 36 38 2c 30 2c 31 2c 30 2d 37 2e 39 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><circle cx="24" cy="24" r="24" fill="#e6e6e6"/><path d="M13.44,36h1.92a8.64,8.64,0,1,1,17.28,0h1.92a10.573,10.573,0,0,0-6.569-9.771,7.68,7.68,0,1,0-7.9

Timestamp	kBytes transferred	Direction	Data
2023-06-19 13:23:01 UTC	1011	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-06-19 13:23:01 UTC	1011	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2043755 Cache-Control: public, max-age=31536000 Content-MD5: Fm3lNHEmUlOrOkVt7+baIw== Content-Type: image/gif Date: Mon, 19 Jun 2023 13:23:01 GMT Etag: 0x8DB5C3F4982FD30 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (muc/3328) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: a6823e61-b01e-0072-191a-90ee33000000 x-ms-version: 2009-09-19 Content-Length: 2672 Connection: close
2023-06-19 13:23:01 UTC	1012	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Timestamp	kBytes transferred	Direction	Data
2023-06-19 13:23:02 UTC	1015	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-06-19 13:23:02 UTC	1015	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2043756 Cache-Control: public, max-age=31536000 Content-MD5: tUCo5RgDcZLjLE/li/Lbqw== Content-Type: image/gif Date: Mon, 19 Jun 2023 13:23:02 GMT Etag: 0x8DB5C3F492F3EE5 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (muc/3363) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: d4eba91b-e01e-007c-431a-902fdd000000 x-ms-version: 2009-09-19 Content-Length: 3620 Connection: close
2023-06-19 13:23:02 UTC	1016	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`9

Timestamp	kBytes transferred	Direction	Data
2023-06-19 13:23:02 UTC	1019	OUT	GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-06-19 13:23:02 UTC	1020	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1568721 Cache-Control: public, max-age=31536000 Content-MD5: b2jpiB3xj44lGrV9V4Yjmw== Content-Type: image/svg+xml Date: Mon, 19 Jun 2023 13:23:02 GMT Etag: 0x8DB5C3F4A04A56D Last-Modified: Wed, 24 May 2023 10:11:49 GMT Server: ECAcc (muc/3322) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: ee7ebb11-a01e-0059-556c-94442d000000 x-ms-version: 2009-09-19 Content-Length: 1378 Connection: close
2023-06-19 13:23:02 UTC	1021	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 23 65 36 65 36 65 36 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 63 69 72 63 6c 65 20 63 6c 61 73 73 3d 22 61 22 20 63 78 3d 22 32 34 22 20 63 79 3d 22 32 34 22 20 72 3d 22 32 34 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 33 32 2e 35 2c 31 34 41 31 2e 34 39 32 2c 31 2e 34 39 32 2c 30 2c 30 2c 31 2c 33 34 2c 31 35 2e 35 56 33 38 2e 35 41 31 2e 34 39 34 2c 31 2e 34 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:#e6e6e6;}.b{fill:#404040;}</style></defs><circle class="a" cx="24" cy="24" r="24"/><path class="b" d="M32.5,14A1.492,1.492,0,0,1,34,15.5V38.5A1.494,1.4

Timestamp	kBytes transferred	Direction	Data
2023-06-19 13:23:13 UTC	1023	OUT	GET /converged_ux_v2_nBE5FSqn9KpH44ZlTc3VqQ2.css?v=1 HTTP/1.1 Host: acctcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://signup.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-06-19 13:23:13 UTC	1025	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 496318 Cache-Control: public, max-age=604800 Content-MD5: XlkY6UOibS5AN710GAdhEA== Content-Type: text/css Date: Mon, 19 Jun 2023 13:23:13 GMT Etag: 0x8DB6BCA8DB0917F Last-Modified: Tue, 13 Jun 2023 04:56:30 GMT Server: ECAcc (muc/3329) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: c902c035-801e-0029-6c2d-9e79f6000000 x-ms-version: 2009-09-19 Content-Length: 95910 Connection: close
2023-06-19 13:23:13 UTC	1026	IN	Data Raw: 2f 2a 21 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2a 2f 2f 2a 21 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 Data Ascii: /! Copyright (C) Microsoft Corporation. All rights reserved. //*!------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------This file is based on or incorporates material from the projects listed
2023-06-19 13:23:13 UTC	1042	IN	Data Raw: 2d Data Ascii: -
2023-06-19 13:23:13 UTC	1042	IN	Data Raw: 65 72 72 6f 72 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 74 65 78 74 22 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 74 65 78 74 22 5d 2e 68 61 73 2d 65 72 72 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 65 38 31 31 32 33 7d 69 6e 70 75 74 3a 3a 2d 6d 73 2d 63 6c 65 61 72 2c 69 6e 70 75 74 3a 3a 2d 6d 73 2d 72 65 76 65 61 6c 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 34 70 78 20 38 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 38 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 70 78 3b 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 36 29 7d 69 6e 70 75 74 3a 3a 2d 6d 73 2d 63 6c 65 61 72 3a 68 6f 76 65 72 2c 69 6e 70 75 74 3a 3a 2d 6d 73 2d 72 65 76 65 61 6c 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 30 30 37 38 64 37 7d Data Ascii: error input[type="text"],input[type="text"].has-error{border-color:#e81123}input::-ms-clear,input::-ms-reveal{height:100%;padding:4px 8px;margin-right:-8px;margin-left:4px;color:rgba(0,0,0,0.6)}input::-ms-clear:hover,input::-ms-reveal:hover{color:#0078d7}
2023-06-19 13:23:13 UTC	1058	IN	Data Raw: 2c 22 4d 69 63 72 6f 73 6f 66 74 20 54 61 69 20 4c 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 69 20 42 61 69 74 69 22 2c 22 4d 6f 6e 67 6f 6c 69 61 6e 20 42 61 69 74 69 22 2c 22 4d 56 20 42 6f 6c 69 22 2c 22 4d 79 61 6e 6d 61 72 20 54 65 78 74 22 2c 22 43 61 6d 62 72 69 61 20 4d 61 74 68 22 7d 2e 49 45 5f 4d 37 20 2e 63 5f 69 6e 6d 69 64 64 6c 65 5f 61 72 65 61 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 7d 2e 49 45 5f 4d 37 20 2e 72 6f 77 2c 2e 49 45 5f 4d 37 20 64 69 76 23 69 53 68 6f 77 53 65 6e 64 48 6f 6c 64 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 49 45 5f 4d 37 20 75 6c 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 49 45 5f 4d 37 20 2e 6d 6f 64 61 6c 20 2e 6d 6f 64 61 6c 2d 63 6f 6e 74 65 6e 74 7b 70 61 64 64 69 6e 67 2d 62 Data Ascii: ,"Microsoft Tai Le","Microsoft Yi Baiti","Mongolian Baiti","MV Boli","Myanmar Text","Cambria Math"}.IE_M7 .c_inmiddle_area{padding-bottom:20px}.IE_M7 .row,.IE_M7 div#iShowSendHolder{clear:both}.IE_M7 ul{margin-left:0}.IE_M7 .modal .modal-content{padding-b
2023-06-19 13:23:13 UTC	1074	IN	Data Raw: 22 64 61 74 65 22 5d 2c 62 6f 64 79 2e 63 62 2e 63 62 54 68 65 6d 65 5f 53 6b 79 70 65 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 64 61 74 65 74 69 6d 65 22 5d 2c 62 6f 64 79 2e 63 62 2e 63 62 54 68 65 6d 65 5f 53 6b 79 70 65 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 64 61 74 65 74 69 6d 65 2d 6c 6f 63 61 6c 22 5d 2c 62 6f 64 79 2e 63 62 2e 63 62 54 68 65 6d 65 5f 53 6b 79 70 65 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 65 6d 61 69 6c 22 5d 2c 62 6f 64 79 2e 63 62 2e 63 62 54 68 65 6d 65 5f 53 6b 79 70 65 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 6d 6f 6e 74 68 22 5d 2c 62 6f 64 79 2e 63 62 2e 63 62 54 68 65 6d 65 5f 53 6b 79 70 65 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 6e 75 6d 62 65 72 22 5d 2c 62 6f 64 79 2e 63 62 2e 63 62 54 68 65 6d 65 5f 53 6b 79 70 65 20 69 6e Data Ascii: "date"],body.cb.cbTheme_Skype input[type="datetime"],body.cb.cbTheme_Skype input[type="datetime-local"],body.cb.cbTheme_Skype input[type="email"],body.cb.cbTheme_Skype input[type="month"],body.cb.cbTheme_Skype input[type="number"],body.cb.cbTheme_Skype in
2023-06-19 13:23:13 UTC	1090	IN	Data Raw: 61 28 30 2c 30 2c 30 2c 30 2e 36 29 3b 66 69 6c 74 65 72 3a 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 47 72 61 64 69 65 6e 74 54 79 70 65 3d 30 2c 20 73 74 61 72 74 43 6f 6c 6f 72 73 74 72 3d 27 23 39 39 30 30 30 30 30 30 27 2c 20 65 6e 64 43 6f 6c 6f 72 73 74 72 3d 27 23 39 39 30 30 30 30 30 30 27 29 7d 2e 66 6f 6f 74 65 72 2e 64 65 66 61 75 6c 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 66 6f 6f 74 65 72 2e 64 65 66 61 75 6c 74 20 64 69 76 2e 66 6f 6f 74 65 72 4e 6f 64 65 20 61 2c 2e 66 6f 6f 74 65 72 2e 64 65 66 61 75 6c 74 20 64 69 76 2e 66 6f 6f 74 65 72 4e 6f 64 65 20 73 70 61 6e 7b 63 6f 6c 6f 72 3a 23 30 30 30 7d 2e 6f 75 74 65 Data Ascii: a(0,0,0,0.6);filter:progid:DXImageTransform.Microsoft.gradient(GradientType=0, startColorstr='#99000000', endColorstr='#99000000')}.footer.default{background:transparent}.footer.default div.footerNode a,.footer.default div.footerNode span{color:#000}.oute
2023-06-19 13:23:13 UTC	1107	IN	Data Raw: 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 7d 62 6f 64 79 2e 63 62 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 74 65 78 74 22 5d 2e 68 69 70 7b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 77 69 64 74 68 3a 31 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 7d 73 65 6c 65 63 74 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 77 69 64 74 68 3a 30 3b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 77 69 64 74 68 3a 30 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 77 69 64 74 68 3a 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 30 7d 73 65 6c 65 63 74 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 73 65 6c 65 63 74 3a Data Ascii: adding-left:0}body.cb input[type="text"].hip{border-width:0 !important;border-bottom-width:1px !important;padding:6px 0 !important}select{border-top-width:0;border-left-width:0;border-right-width:0;padding:6px 0}select:hover{background:transparent}select:

Timestamp	kBytes transferred	Direction	Data
2023-06-19 13:23:13 UTC	1024	OUT	GET /jqueryshim_hlu0tTfjWJFWYNt1WZrVqg2.js?v=1 HTTP/1.1 Host: acctcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://signup.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-06-19 13:23:13 UTC	1106	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 402150 Cache-Control: public, max-age=604800 Content-MD5: tZ45+ZIcr8oUnrloW1H2Vg== Content-Type: application/javascript Date: Mon, 19 Jun 2023 13:23:13 GMT Etag: 0x8DB6D1509A990E0 Last-Modified: Wed, 14 Jun 2023 20:22:12 GMT Server: ECAcc (muc/3316) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: c723fab8-f01e-0051-4508-9f6302000000 x-ms-version: 2009-09-19 Content-Length: 22961 Connection: close
2023-06-19 13:23:13 UTC	1121	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 65 2c 74 2c 6e 29 7b 65 26 26 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6e 29 3a 65 26 26 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 26 26 65 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 65 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 74 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 67 65 74 4f 72 53 65 74 50 72 6f 70 73 4f 6e 45 6c 65 6d 65 6e 74 73 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 29 7b 5f 66 6f 72 45 61 63 68 4b 65 79 28 74 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 6f 72 28 76 61 72 20 73 3d 30 2c 69 3d 65 Data Ascii: function _addEventListener(e,t,n){e&&e.addEventListener?e.addEventListener(t,n):e&&e instanceof HTMLElement&&e.attachEvent&&e.attachEvent("on"+t,n)}function _getOrSetPropsOnElements(e,t,n,r){if("object"==typeof t){_forEachKey(t,function(n){for(var s=0,i=e
2023-06-19 13:23:13 UTC	1137	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 68 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 5f 69 73 48 74 6d 6c 45 6c 65 6d 65 6e 74 4c 69 73 74 28 74 68 69 73 2e 65 6c 65 6d 73 29 29 7b 74 68 72 6f 77 22 55 6e 73 75 70 70 6f 72 74 65 64 22 7d 66 6f 72 28 76 61 72 20 65 3d 30 2c 74 3d 74 68 69 73 2e 65 6c 65 6d 73 3b 65 3c 74 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 6e 3d 74 5b 65 5d 3b 5f 73 65 74 43 61 63 68 65 56 61 6c 75 65 28 6e 2c 63 5f 64 69 73 70 6c 61 79 2c 6e 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 29 2c 6e 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 63 5f 6e 6f 6e 65 7d 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 68 6f 77 Data Ascii: function(){return this},e.prototype.hide=function(){if(!_isHtmlElementList(this.elems)){throw"Unsupported"}for(var e=0,t=this.elems;e<t.length;e++){var n=t[e];_setCacheValue(n,c_display,n.style.display),n.style.display=c_none}return this},e.prototype.show

Timestamp	kBytes transferred	Direction	Data
2023-06-19 13:23:13 UTC	1024	OUT	GET /knockout_3.3.0_X1BYS2jZMbi7hfUj8VuqFA2.js?v=1 HTTP/1.1 Host: acctcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://signup.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-06-19 13:23:13 UTC	1143	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 25083321 Cache-Control: public, max-age=31536000 Content-MD5: o3vbuPQYpAFMmawTk+WKWA== Content-Type: application/javascript Date: Mon, 19 Jun 2023 13:23:13 GMT Etag: 0x8DA8CA485C3C48A Last-Modified: Fri, 02 Sep 2022 05:32:27 GMT Server: ECAcc (muc/334D) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: b34b2f7a-c01e-000a-238f-bef4c7000000 x-ms-version: 2009-09-19 Content-Length: 80144 Connection: close
2023-06-19 13:23:13 UTC	1144	IN	Data Raw: 2f 2a 21 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 0d 0a 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 6e 64 20 74 68 65 20 6c Data Ascii: /*!------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the l
2023-06-19 13:23:13 UTC	1160	IN	Data Raw: 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 51 2e 66 6e 3d 7a 3b 61 2e 48 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 2e 55 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 7d 3b 61 2e 62 28 22 73 75 62 73 63 72 69 62 61 62 6c 65 22 2c 61 2e 51 29 3b 61 2e 62 28 22 69 73 53 75 62 73 63 72 69 62 61 62 6c 65 22 2c 61 2e 48 62 29 3b 61 2e 5a 3d 61 2e 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 61 29 7b 63 2e 70 75 73 68 28 65 29 3b 65 3d 61 7d 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 65 3d 63 2e 70 6f 70 28 29 7d 76 61 72 20 63 3d 5b 5d 2c Data Ascii: unction.prototype);a.Q.fn=z;a.Hb=function(a){return null!=a&&"function"==typeof a.U&&"function"==typeof a.notifySubscribers};a.b("subscribable",a.Q);a.b("isSubscribable",a.Hb);a.Z=a.k=function(){function b(a){c.push(e);e=a}function d(){e=c.pop()}var c=[],
2023-06-19 13:23:13 UTC	1176	IN	Data Raw: 63 65 Data Ascii: ce
2023-06-19 13:23:13 UTC	1176	IN	Data Raw: 6f 66 20 61 2e 4e 3f 62 3a 6e 65 77 20 61 2e 4e 28 62 29 7d 61 2e 64 3d 7b 7d 3b 76 61 72 20 78 3d 7b 73 63 72 69 70 74 3a 21 30 2c 74 65 78 74 61 72 65 61 3a 21 30 7d 3b 61 2e 67 65 74 42 69 6e 64 69 6e 67 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 61 2e 64 5b 62 5d 7d 3b 0d 0a 61 2e 4e 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 2c 67 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 66 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 21 61 2e 46 28 62 29 2c 6d 2c 6c 3d 61 2e 6a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6d 3d 66 3f 62 28 29 3a 62 2c 68 3d 61 2e 61 2e 63 28 6d 29 3b 63 3f 28 63 2e 4b 26 26 63 2e 4b 28 29 2c 61 2e 61 2e 65 78 74 65 6e 64 28 65 2c 63 29 2c 6c 26 26 28 65 2e 4b 3d 6c 29 Data Ascii: of a.N?b:new a.N(b)}a.d={};var x={script:!0,textarea:!0};a.getBindingHandler=function(b){return a.d[b]};a.N=function(b,c,d,g){var e=this,f="function"==typeof b&&!a.F(b),m,l=a.j(function(){var m=f?b():b,h=a.a.c(m);c?(c.K&&c.K(),a.a.extend(e,c),l&&(e.K=l)
2023-06-19 13:23:13 UTC	1192	IN	Data Raw: 74 61 28 22 69 73 52 65 77 72 69 74 74 65 6e 22 2c 21 30 29 7d 3b 61 2e 62 28 22 74 65 6d 70 6c 61 74 65 45 6e 67 69 6e 65 22 2c 61 2e 4a 29 3b 61 2e 6b 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 2c 63 2c 64 2c 68 29 7b 62 3d 61 2e 68 2e 62 62 28 62 29 3b 66 6f 72 28 76 61 72 20 6c 3d 61 2e 68 2e 6b 61 2c 67 3d 30 3b 67 3c 62 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 7b 76 61 72 20 6d 3d 62 5b 67 5d 2e 6b 65 79 3b 69 66 28 6c 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6d 29 29 7b 76 61 72 20 78 3d 6c 5b 6d 5d 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 78 29 7b 69 66 28 6d 3d 0d 0a 78 28 62 5b 67 5d 2e 76 61 6c 75 65 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6d 29 3b 7d 65 6c 73 65 20 69 66 28 21 Data Ascii: ta("isRewritten",!0)};a.b("templateEngine",a.J);a.kb=function(){function b(b,c,d,h){b=a.h.bb(b);for(var l=a.h.ka,g=0;g<b.length;g++){var m=b[g].key;if(l.hasOwnProperty(m)){var x=l[m];if("function"===typeof x){if(m=x(b[g].value))throw Error(m);}else if(!
2023-06-19 13:23:13 UTC	1208	IN	Data Raw: 68 28 62 29 2c 63 2e 6f 70 74 69 6f 6e 73 2e 6c 69 76 65 26 26 6e 2e 69 73 4f 62 73 65 72 76 61 62 6c 65 41 72 72 61 79 28 62 29 26 26 63 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 73 2e 70 75 73 68 28 62 2e 73 75 62 73 63 72 69 62 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 2e 67 72 61 70 68 4d 6f 6e 69 74 6f 72 2e 76 61 6c 75 65 48 61 73 4d 75 74 61 74 65 64 28 29 7d 29 29 29 2c 67 26 26 21 67 2e 5f 64 65 73 74 72 6f 79 26 26 28 6e 2e 69 73 41 72 72 61 79 28 67 29 3f 66 3d 67 3a 6e 2e 69 73 4f 62 6a 65 63 74 28 67 29 26 26 28 66 3d 6e 2e 76 61 6c 75 65 73 28 67 29 29 29 2c 30 21 3d 3d 64 26 26 6e 2e 66 6f 72 45 61 63 68 28 66 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 21 62 7c 7c 62 2e 6e 6f 64 65 54 79 70 65 7c 7c 61 2e 69 73 43 6f 6d 70 75 74 65 64 28 62 29 26 Data Ascii: h(b),c.options.live&&n.isObservableArray(b)&&c.subscriptions.push(b.subscribe(function(){c.graphMonitor.valueHasMutated()}))),g&&!g._destroy&&(n.isArray(g)?f=g:n.isObject(g)&&(f=n.values(g))),0!==d&&n.forEach(f,function(b){!b\|\|b.nodeType\|\|a.isComputed(b)&

Timestamp	kBytes transferred	Direction	Data
2023-06-19 13:23:13 UTC	1058	OUT	GET /lwsignupstringscountrybirthdate_en-us_gdxUIqa3ijrOefuBnwhTKg2.js?v=1 HTTP/1.1 Host: acctcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://signup.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-06-19 13:23:13 UTC	1222	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 331317 Cache-Control: public, max-age=604800 Content-MD5: 4Ta/akFj3682LuM6XM4hQQ== Content-Type: application/javascript Date: Mon, 19 Jun 2023 13:23:13 GMT Etag: 0x8DB6DA58BEFBC04 Last-Modified: Thu, 15 Jun 2023 13:36:38 GMT Server: ECAcc (muc/332B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 444adb82-f01e-009e-04ad-9f5806000000 x-ms-version: 2009-09-19 Content-Length: 28981 Connection: close
2023-06-19 13:23:13 UTC	1223	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 67 69 73 74 65 72 4e 61 6d 65 73 70 61 63 65 28 22 24 43 6f 6e 66 69 67 22 29 2c 24 43 6f 6e 66 69 67 2e 73 68 61 72 65 64 53 74 72 69 6e 67 73 3d 7b 22 65 72 72 6f 72 73 22 3a 7b 22 72 65 71 75 69 72 65 64 22 3a 22 54 68 69 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 73 20 72 65 71 75 69 72 65 64 2e 22 2c 22 65 6d 61 69 6c 52 65 71 75 69 72 65 64 22 3a 22 41 6e 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 20 69 73 20 72 65 71 75 69 72 65 64 22 2c 22 70 68 6f 6e 65 52 65 71 75 69 72 65 64 22 3a 22 41 20 70 68 6f 6e 65 20 6e 75 6d 62 65 72 20 69 73 20 72 65 71 75 69 72 65 64 22 2c 22 70 61 73 73 77 6f 72 64 52 65 71 75 69 72 65 64 22 3a 22 41 20 70 61 73 73 77 6f 72 64 20 69 73 20 72 65 71 75 69 72 65 64 22 2c 22 69 Data Ascii: !function(){registerNamespace("$Config"),$Config.sharedStrings={"errors":{"required":"This information is required.","emailRequired":"An email address is required","phoneRequired":"A phone number is required","passwordRequired":"A password is required","i
2023-06-19 13:23:13 UTC	1239	IN	Data Raw: 61 Data Ascii: a
2023-06-19 13:23:13 UTC	1239	IN	Data Raw: 6c 62 61 72 64 22 2c 22 69 73 6f 22 3a 22 53 4a 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 32 36 38 22 2c 22 6e 61 6d 65 22 3a 22 53 77 61 7a 69 6c 61 6e 64 22 2c 22 69 73 6f 22 3a 22 53 5a 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 34 36 22 2c 22 6e 61 6d 65 22 3a 22 53 77 65 64 65 6e 22 2c 22 69 73 6f 22 3a 22 53 45 22 2c 22 69 6e 45 55 22 3a 21 30 7d 2c 7b 22 63 6f 64 65 22 3a 22 34 31 22 2c 22 6e 61 6d 65 22 3a 22 53 77 69 74 7a 65 72 6c 61 6e 64 22 2c 22 69 73 6f 22 3a 22 43 48 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 39 36 33 22 2c 22 6e 61 6d 65 22 3a 22 53 79 72 69 61 22 2c 22 69 73 6f 22 3a 22 53 59 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 38 38 36 22 2c 22 6e 61 6d 65 22 3a 22 54 61 69 77 61 6e 22 2c 22 69 73 6f 22 3a 22 54 57 22 7d 2c 7b 22 63 6f 64 65 22 3a 22 39 39 Data Ascii: lbard","iso":"SJ"},{"code":"268","name":"Swaziland","iso":"SZ"},{"code":"46","name":"Sweden","iso":"SE","inEU":!0},{"code":"41","name":"Switzerland","iso":"CH"},{"code":"963","name":"Syria","iso":"SY"},{"code":"886","name":"Taiwan","iso":"TW"},{"code":"99

Timestamp	kBytes transferred	Direction	Data
2023-06-19 13:22:52 UTC	6	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_ahL_5J0Eb4L3dLRuUdtwwA2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-06-19 13:22:52 UTC	6	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2316370 Cache-Control: public, max-age=31536000 Content-MD5: 1Allk9XHj1vwOVU9IsiC0g== Content-Type: application/x-javascript Date: Mon, 19 Jun 2023 13:22:52 GMT Etag: 0x8DB5ADCD4BF8392 Last-Modified: Mon, 22 May 2023 15:54:31 GMT Server: ECAcc (muc/3377) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: aa04b5bd-d01e-0064-129f-8db7da000000 x-ms-version: 2009-09-19 Content-Length: 137923 Connection: close
2023-06-19 13:22:52 UTC	7	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2023-06-19 13:22:52 UTC	22	IN	Data Raw: 29 2c 72 3d 75 2e 64 6f 75 62 6c 65 53 70 6c 69 74 28 65 2e 73 75 62 73 74 72 69 6e 67 28 6f 2b 31 29 2c 22 26 22 2c 22 3d 22 29 29 3a 2d 31 21 3d 3d 69 26 26 2d 31 3d 3d 3d 6f 3f 28 6e 3d 65 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 69 29 2c 74 3d 75 2e 64 6f 75 62 6c 65 53 70 6c 69 74 28 65 2e 73 75 62 73 74 72 69 6e 67 28 69 2b 31 29 2c 22 26 22 2c 22 3d 22 29 29 3a 2d 31 21 3d 3d 69 26 26 2d 31 21 3d 3d 6f 26 26 28 6e 3d 65 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 69 29 2c 74 3d 75 2e 64 6f 75 62 6c 65 53 70 6c 69 74 28 65 2e 73 75 62 73 74 72 69 6e 67 28 69 2b 31 2c 6f 29 2c 22 26 22 2c 22 3d 22 29 2c 72 3d 75 2e 64 6f 75 62 6c 65 53 70 6c 69 74 28 65 2e 73 75 62 73 74 72 69 6e 67 28 6f 2b 31 29 2c 22 26 22 2c 22 3d 22 29 29 7d 72 65 74 75 72 6e 7b 6f 72 Data Ascii: ),r=u.doubleSplit(e.substring(o+1),"&","=")):-1!==i&&-1===o?(n=e.substring(0,i),t=u.doubleSplit(e.substring(i+1),"&","=")):-1!==i&&-1!==o&&(n=e.substring(0,i),t=u.doubleSplit(e.substring(i+1,o),"&","="),r=u.doubleSplit(e.substring(o+1),"&","="))}return{or
2023-06-19 13:22:52 UTC	38	IN	Data Raw: 35 35 22 2c 49 6e 76 61 6c 69 64 50 61 73 73 77 6f 72 64 4e 75 6c 6c 50 61 73 73 77 6f 72 64 3a 22 35 30 30 35 36 22 2c 55 73 65 72 44 69 73 61 62 6c 65 64 3a 22 35 30 30 35 37 22 2c 47 75 65 73 74 55 73 65 72 44 69 73 61 62 6c 65 64 3a 22 35 30 30 35 37 31 22 2c 46 6c 6f 77 54 6f 6b 65 6e 45 78 70 69 72 65 64 3a 22 35 30 30 38 39 22 2c 49 6e 76 61 6c 69 64 55 73 65 72 4e 61 6d 65 4f 72 50 61 73 73 77 6f 72 64 3a 22 35 30 31 32 36 22 2c 49 6e 76 61 6c 69 64 44 6f 6d 61 69 6e 4e 61 6d 65 3a 22 35 30 31 32 38 22 2c 50 72 6f 74 65 63 74 65 64 4b 65 79 4d 69 73 75 73 65 3a 22 35 30 31 34 31 22 2c 4d 69 73 73 69 6e 67 43 75 73 74 6f 6d 53 69 67 6e 69 6e 67 4b 65 79 3a 22 35 30 31 34 36 22 2c 49 64 70 4c 6f 6f 70 44 65 74 65 63 74 65 64 3a 22 35 30 31 37 34 22 Data Ascii: 55",InvalidPasswordNullPassword:"50056",UserDisabled:"50057",GuestUserDisabled:"500571",FlowTokenExpired:"50089",InvalidUserNameOrPassword:"50126",InvalidDomainName:"50128",ProtectedKeyMisuse:"50141",MissingCustomSigningKey:"50146",IdpLoopDetected:"50174"
2023-06-19 13:22:52 UTC	54	IN	Data Raw: 72 65 74 75 72 6e 20 73 65 74 54 69 6d 65 6f 75 74 28 53 2e 61 2e 41 63 28 65 29 2c 6e 29 7d 2c 47 63 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 53 2e 6f 6e 45 72 72 6f 72 26 26 53 2e 6f 6e 45 72 72 6f 72 28 65 29 2c 65 7d 29 2c 30 29 7d 2c 42 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 72 3d 53 2e 61 2e 41 63 28 74 29 3b 69 66 28 74 3d 76 5b 6e 5d 2c 53 2e 6f 70 74 69 6f 6e 73 2e 75 73 65 4f 6e 6c 79 4e 61 74 69 76 65 45 76 65 6e 74 73 7c 7c 74 7c 7c 21 6c 29 69 66 28 74 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f Data Ascii: return setTimeout(S.a.Ac(e),n)},Gc:function(e){setTimeout((function(){throw S.onError&&S.onError(e),e}),0)},B:function(e,n,t){var r=S.a.Ac(t);if(t=v[n],S.options.useOnlyNativeEvents\|\|t\|\|!l)if(t\|\|"function"!=typeof e.addEventListener){if("undefined"==typeo
2023-06-19 13:22:52 UTC	70	IN	Data Raw: 2e 76 28 29 7c 7c 5b 5d 29 3b 65 2e 57 61 28 22 61 72 72 61 79 43 68 61 6e 67 65 22 29 26 26 28 28 21 75 7c 7c 31 3c 63 29 26 26 28 75 3d 53 2e 61 2e 50 62 28 6f 2c 74 2c 65 2e 4f 62 29 29 2c 6e 3d 75 29 2c 6f 3d 74 2c 75 3d 6e 75 6c 6c 2c 63 3d 30 2c 6e 26 26 6e 2e 6c 65 6e 67 74 68 26 26 65 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 28 6e 2c 22 61 72 72 61 79 43 68 61 6e 67 65 22 29 7d 7d 73 3f 6e 28 29 3a 28 73 3d 21 30 2c 69 3d 65 2e 73 75 62 73 63 72 69 62 65 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2b 2b 63 7d 29 2c 6e 75 6c 6c 2c 22 73 70 65 63 74 61 74 65 22 29 2c 6f 3d 5b 5d 2e 63 6f 6e 63 61 74 28 65 2e 76 28 29 7c 7c 5b 5d 29 2c 75 3d 6e 75 6c 6c 2c 72 3d 65 2e 73 75 62 73 63 72 69 62 65 28 6e 29 29 7d 69 66 28 65 2e 4f 62 3d 7b 7d 2c Data Ascii: .v()\|\|[]);e.Wa("arrayChange")&&((!u\|\|1<c)&&(u=S.a.Pb(o,t,e.Ob)),n=u),o=t,u=null,c=0,n&&n.length&&e.notifySubscribers(n,"arrayChange")}}s?n():(s=!0,i=e.subscribe((function(){++c}),null,"spectate"),o=[].concat(e.v()\|\|[]),u=null,r=e.subscribe(n))}if(e.Ob={},
2023-06-19 13:22:52 UTC	86	IN	Data Raw: 3b 76 61 72 20 79 3d 7b 7d 3b 53 2e 66 61 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 2c 72 2c 69 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 76 61 72 20 65 3d 64 3f 6c 28 29 3a 6c 2c 69 3d 53 2e 61 2e 66 28 65 29 3b 72 65 74 75 72 6e 20 6e 3f 28 53 2e 61 2e 65 78 74 65 6e 64 28 75 2c 6e 29 2c 76 20 69 6e 20 6e 26 26 28 75 5b 76 5d 3d 6e 5b 76 5d 29 29 3a 28 75 2e 24 70 61 72 65 6e 74 73 3d 5b 5d 2c 75 2e 24 72 6f 6f 74 3d 69 2c 75 2e 6b 6f 3d 53 29 2c 75 5b 67 5d 3d 73 2c 63 3f 69 3d 75 2e 24 64 61 74 61 3a 28 75 2e 24 72 61 77 44 61 74 61 3d 65 2c 75 2e 24 64 61 74 61 3d 69 29 2c 74 26 26 28 75 5b 74 5d 3d 69 29 2c 72 26 26 72 28 75 2c 6e 2c 69 29 2c 6e 26 26 6e 5b 67 5d 26 26 21 53 2e 53 2e 6f 28 29 2e 56 62 28 6e 5b 67 5d 29 26 26 6e 5b 67 5d 28 29 Data Ascii: ;var y={};S.fa=function(e,n,t,r,i){function o(){var e=d?l():l,i=S.a.f(e);return n?(S.a.extend(u,n),v in n&&(u[v]=n[v])):(u.$parents=[],u.$root=i,u.ko=S),u[g]=s,c?i=u.$data:(u.$rawData=e,u.$data=i),t&&(u[t]=i),r&&r(u,n,i),n&&n[g]&&!S.S.o().Vb(n[g])&&n[g]()
2023-06-19 13:22:52 UTC	102	IN	Data Raw: 70 7c 7c 28 68 3d 6f 2e 76 61 6c 75 65 2c 70 3d 53 2e 61 2e 73 65 74 54 69 6d 65 6f 75 74 28 64 2c 34 29 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 70 29 2c 68 3d 70 3d 61 3b 76 61 72 20 65 3d 6f 2e 76 61 6c 75 65 3b 67 21 3d 3d 65 26 26 28 67 3d 65 2c 53 2e 6d 2e 65 62 28 73 28 29 2c 75 2c 22 74 65 78 74 49 6e 70 75 74 22 2c 65 29 29 7d 76 61 72 20 70 2c 68 2c 67 3d 6f 2e 76 61 6c 75 65 2c 76 3d 39 3d 3d 53 2e 61 2e 57 3f 6c 3a 64 2c 6d 3d 21 31 3b 72 26 26 63 28 22 6b 65 79 70 72 65 73 73 22 2c 64 29 2c 31 31 3e 72 26 26 63 28 22 70 72 6f 70 65 72 74 79 63 68 61 6e 67 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6d 7c 7c 22 76 61 6c 75 65 22 21 3d 3d 65 2e 70 72 6f 70 65 72 74 79 4e 61 6d 65 7c 7c 76 28 65 29 Data Ascii: p\|\|(h=o.value,p=S.a.setTimeout(d,4))}function d(){clearTimeout(p),h=p=a;var e=o.value;g!==e&&(g=e,S.m.eb(s(),u,"textInput",e))}var p,h,g=o.value,v=9==S.a.W?l:d,m=!1;r&&c("keypress",d),11>r&&c("propertychange",(function(e){m\|\|"value"!==e.propertyName\|\|v(e)
2023-06-19 13:22:52 UTC	118	IN	Data Raw: 6e 74 72 6f 6c 73 44 65 73 63 65 6e 64 61 6e 74 42 69 6e 64 69 6e 67 73 3a 21 30 7d 7d 7d 2c 65 2e 62 69 6e 64 69 6e 67 48 61 6e 64 6c 65 72 73 2e 61 75 74 6f 53 75 62 6d 69 74 3d 7b 75 70 64 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 76 61 72 20 72 3d 74 28 29 3b 65 2e 75 6e 77 72 61 70 28 72 29 26 26 28 65 2e 69 73 57 72 69 74 61 62 6c 65 4f 62 73 65 72 76 61 62 6c 65 28 72 29 26 26 72 28 21 31 29 2c 6e 2e 73 75 62 6d 69 74 28 29 29 7d 7d 2c 65 2e 62 69 6e 64 69 6e 67 48 61 6e 64 6c 65 72 73 2e 70 6f 73 74 52 65 64 69 72 65 63 74 46 6f 72 6d 3d 7b 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6d 65 74 68 6f 64 22 2c 22 50 4f 53 54 22 29 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 Data Ascii: ntrolsDescendantBindings:!0}}},e.bindingHandlers.autoSubmit={update:function(n,t){var r=t();e.unwrap(r)&&(e.isWritableObservable(r)&&r(!1),n.submit())}},e.bindingHandlers.postRedirectForm={init:function(e){e.setAttribute("method","POST"),e.setAttribute("a
2023-06-19 13:22:52 UTC	134	IN	Data Raw: 64 64 28 63 2c 75 29 3b 66 2e 74 61 72 67 65 74 55 72 6c 3d 67 7d 7d 69 2e 48 61 6e 64 6c 65 72 2e 63 61 6c 6c 28 6e 2c 66 29 2c 6e 2e 73 65 6e 64 52 65 71 75 65 73 74 28 29 7d 2c 6e 2e 42 65 61 63 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 69 2c 6f 29 7b 76 61 72 20 61 3d 5b 5d 2c 73 3d 6d 28 21 30 29 3b 66 2e 66 6f 72 45 61 63 68 28 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 61 2e 70 75 73 68 28 5b 65 2c 6e 5d 29 7d 29 29 3b 76 61 72 20 75 3d 65 2e 75 72 6c 3b 69 66 28 75 3d 70 2e 61 64 64 28 75 2c 61 29 2c 65 2e 75 72 6c 3d 75 2c 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 29 7b 76 61 72 20 63 3d 7b 7d 3b 53 28 63 2c 65 2c 22 42 65 61 63 6f 6e 22 2c 6f 2c 6e 75 6c 6c 2c 21 31 29 3b 76 61 72 20 6c 3d 62 28 74 29 2c 64 Data Ascii: dd(c,u);f.targetUrl=g}}i.Handler.call(n,f),n.sendRequest()},n.Beacon=function(e,t,r,i,o){var a=[],s=m(!0);f.forEach(s,(function(e,n){a.push([e,n])}));var u=e.url;if(u=p.add(u,a),e.url=u,navigator.sendBeacon){var c={};S(c,e,"Beacon",o,null,!1);var l=b(t),d

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://protection.greathorn.com/services/v2/lookupUrl/265c2f26-b2f2-4c55-98b6-7c843543c873/1555/e4b7c92c418487f88397bfe7b40ac0fc48a5c297

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Chrome Cache Entry: 164

Chrome Cache Entry: 165

Windows Analysis Report
https://protection.greathorn.com/services/v2/lookupUrl/265c2f26-b2f2-4c55-98b6-7c843543c873/1555/e4b7c92c418487f88397bfe7b40ac0fc48a5c297

Timestamp	kBytes transferred	Direction	Data
2023-06-19 13:23:13 UTC	1251	OUT	GET /lightweightsignuppackage_jNkXroqISf47gk0BZKXaXQ2.js?v=1 HTTP/1.1 Host: acctcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://signup.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-06-19 13:23:13 UTC	1252	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 382861 Cache-Control: public, max-age=604800 Content-MD5: JkvoiaF4Do79xSBz4cd1+g== Content-Type: application/javascript Date: Mon, 19 Jun 2023 13:23:13 GMT Etag: 0x8DB66D2B07D3542 Last-Modified: Tue, 06 Jun 2023 21:12:09 GMT Server: ECAcc (muc/337A) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: f03ee7b9-f01e-0035-0635-9f0a5d000000 x-ms-version: 2009-09-19 Content-Length: 204090 Connection: close
2023-06-19 13:23:13 UTC	1252	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 45 6e 63 72 79 70 74 28 65 2c 74 2c 6e 2c 61 29 7b 76 61 72 20 6f 3d 5b 5d 3b 73 77 69 74 63 68 28 6e 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7b 63 61 73 65 22 63 68 67 73 71 73 61 22 3a 69 66 28 6e 75 6c 6c 3d 3d 65 7c 7c 6e 75 6c 6c 3d 3d 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 6f 3d 50 61 63 6b 61 67 65 53 41 44 61 74 61 28 65 2c 74 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 63 68 67 70 77 64 22 3a 69 66 28 6e 75 6c 6c 3d 3d 65 7c 7c 6e 75 6c 6c 3d 3d 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 6f 3d 50 61 63 6b 61 67 65 4e 65 77 41 6e 64 4f 6c 64 50 77 64 28 65 2c 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 70 77 64 22 3a 69 66 28 6e 75 6c 6c 3d 3d 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 6f 3d 50 61 63 6b 61 67 65 Data Ascii: function Encrypt(e,t,n,a){var o=[];switch(n.toLowerCase()){case"chgsqsa":if(null==e\|\|null==t){return null}o=PackageSAData(e,t);break;case"chgpwd":if(null==e\|\|null==a){return null}o=PackageNewAndOldPwd(e,a);break;case"pwd":if(null==e){return null}o=Package
2023-06-19 13:23:13 UTC	1268	IN	Data Raw: 6e Data Ascii: n
2023-06-19 13:23:13 UTC	1268	IN	Data Raw: 67 22 29 29 2c 6e 3d 6e 7c 7c 24 66 2e 6c 6f 61 64 69 6e 67 54 79 70 65 2e 73 70 69 6e 6e 69 6e 67 2c 61 3d 61 7c 7c 22 32 30 70 78 22 2c 6f 3d 6f 7c 7c 61 2c 69 3d 69 7c 7c 22 33 70 78 22 2c 72 3d 72 26 26 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7c 7c 22 23 36 36 36 22 2c 6c 3d 6c 7c 7c 22 22 3b 0a 76 61 72 20 75 2c 70 3d 22 63 5f 73 70 69 6e 6e 69 6e 67 44 6f 74 73 22 2c 6d 3d 28 24 43 6f 6e 66 69 67 2e 69 6d 67 73 42 61 73 65 7c 7c 22 2f 69 6d 61 67 65 73 22 29 2b 22 2f 63 6f 6d 6d 6f 6e 2f 22 3b 6e 3d 3d 24 66 2e 6c 6f 61 64 69 6e 67 54 79 70 65 2e 66 6c 79 69 6e 67 3f 28 70 3d 22 63 5f 66 6c 79 69 6e 67 44 6f 74 73 22 2c 75 3d 22 66 6c 79 69 6e 67 64 6f 74 73 2e 67 69 66 22 29 3a 28 75 3d 22 73 70 69 6e 6e 65 72 5f 22 2c 75 2b 3d 22 23 66 66 66 Data Ascii: g")),n=n\|\|$f.loadingType.spinning,a=a\|\|"20px",o=o\|\|a,i=i\|\|"3px",r=r&&r.toLowerCase()\|\|"#666",l=l\|\|"";var u,p="c_spinningDots",m=($Config.imgsBase\|\|"/images")+"/common/";n==$f.loadingType.flying?(p="c_flyingDots",u="flyingdots.gif"):(u="spinner_",u+="#fff
2023-06-19 13:23:13 UTC	1284	IN	Data Raw: 74 2e 70 61 67 65 54 69 74 6c 65 3f 7b 22 61 72 69 61 2d 6c 61 62 65 6c 22 3a 65 74 2e 70 61 67 65 54 69 74 6c 65 7d 3a 7b 22 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 22 3a 22 69 50 61 67 65 54 69 74 6c 65 20 44 69 61 6c 6f 67 55 73 65 72 54 69 74 6c 65 22 7d 3a 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 29 7b 76 61 72 20 65 3d 24 50 61 67 65 48 65 6c 70 65 72 2e 67 65 74 28 65 74 2e 76 69 65 77 54 65 6d 70 6c 61 74 65 29 2e 63 6c 6f 6e 65 28 29 2c 74 3d 65 74 2e 76 69 65 77 43 6f 6e 74 65 78 74 54 6f 6b 65 6e 73 3b 69 66 28 74 26 26 74 2e 6c 65 6e 67 74 68 3e 30 29 7b 66 6f 72 28 76 61 72 20 6e 3d 65 2e 68 74 6d 6c 28 29 2c 61 3d 30 3b 61 3c 74 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 76 61 72 20 6f 3d 74 5b 61 5d 2c 72 3d 57 28 6f 29 3b 76 6f 69 64 20 Data Ascii: t.pageTitle?{"aria-label":et.pageTitle}:{"aria-labelledby":"iPageTitle DialogUserTitle"}:{}}function j(){var e=$PageHelper.get(et.viewTemplate).clone(),t=et.viewContextTokens;if(t&&t.length>0){for(var n=e.html(),a=0;a<t.length;a++){var o=t[a],r=W(o);void
2023-06-19 13:23:13 UTC	1300	IN	Data Raw: 6f 67 72 65 73 73 2d 69 6e 64 69 63 61 74 6f 72 22 3e 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 6b 6f 20 69 66 3a 20 69 73 43 53 53 41 6e 69 6d 61 74 69 6f 6e 53 75 70 70 6f 72 74 65 64 20 2d 2d 3e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 3e 3c 2f 64 69 76 3e 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 2f 6b 6f 20 2d 2d 3e 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 6b 6f 20 69 66 6e 6f 74 3a 20 69 73 43 53 53 41 6e 69 6d 61 74 69 6f 6e 53 75 70 70 6f 72 74 65 64 20 2d 2d 3e 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 72 6f 6c 65 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 61 74 74 72 3a 20 7b 20 73 72 63 3a 20 6d 61 72 63 68 69 6e 67 41 6e 74 73 49 6d 61 67 65 20 7d 22 20 2f 3e 20 Data Ascii: ogress-indicator"> ... ko if: isCSSAnimationSupported --> <div></div> ... /ko --> ... ko ifnot: isCSSAnimationSupported --> <img role="presentation" data-bind="attr: { src: marchingAntsImage }" />
2023-06-19 13:23:13 UTC	1316	IN	Data Raw: 69 6e 64 Data Ascii: ind
2023-06-19 13:23:13 UTC	1316	IN	Data Raw: 69 6e 67 48 61 6e 64 6c 65 72 73 2e 76 61 6c 69 64 61 74 6f 72 45 72 72 6f 72 3d 7b 22 69 6e 69 74 22 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 22 63 6f 6e 74 72 6f 6c 73 44 65 73 63 65 6e 64 61 6e 74 42 69 6e 64 69 6e 67 73 22 3a 21 30 7d 7d 2c 22 75 70 64 61 74 65 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 61 2c 6f 29 7b 7b 76 61 72 20 69 3d 6e 75 6c 6c 2c 72 3d 74 28 29 3b 6b 6f 2e 75 74 69 6c 73 2e 75 6e 77 72 61 70 4f 62 73 65 72 76 61 62 6c 65 28 72 29 7d 69 66 28 72 2e 69 73 4d 6f 64 69 66 69 65 64 28 29 26 26 21 72 2e 69 73 56 61 6c 69 64 28 29 26 26 28 69 3d 72 2e 65 72 72 6f 72 29 2c 21 72 2e 69 73 4d 6f 64 69 66 69 65 64 28 29 26 26 72 2e 73 65 72 76 65 72 45 72 72 6f 72 26 26 28 69 3d 72 2e 73 65 72 76 65 72 45 72 72 6f Data Ascii: ingHandlers.validatorError={"init":function(){return{"controlsDescendantBindings":!0}},"update":function(e,t,n,a,o){{var i=null,r=t();ko.utils.unwrapObservable(r)}if(r.isModified()&&!r.isValid()&&(i=r.error),!r.isModified()&&r.serverError&&(i=r.serverErro
2023-06-19 13:23:13 UTC	1332	IN	Data Raw: 6d 65 6d 62 65 72 4e 61 6d 65 22 2c 22 70 61 73 73 77 6f 72 64 22 5d 3a 5b 22 6d 65 6d 62 65 72 4e 61 6d 65 22 5d 3a 5b 22 6d 65 6d 62 65 72 4e 61 6d 65 22 2c 22 70 61 73 73 77 6f 72 64 22 2c 22 61 64 64 69 74 69 6f 6e 61 6c 4c 65 67 61 6c 54 65 78 74 22 2c 22 6f 70 74 69 6e 45 6d 61 69 6c 43 68 65 63 6b 62 6f 78 22 2c 22 73 65 63 6f 6e 64 4f 70 74 69 6e 45 6d 61 69 6c 43 68 65 63 6b 62 6f 78 22 5d 2c 22 73 74 65 70 43 6f 75 6e 74 65 72 22 3a 47 2e 63 72 65 64 65 6e 74 69 61 6c 73 53 74 65 70 2c 22 74 6f 74 61 6c 53 74 65 70 73 22 3a 47 2e 74 6f 74 61 6c 53 74 65 70 7d 2c 22 66 6f 63 75 73 46 69 72 73 74 49 6e 70 75 74 22 3a 31 2c 22 6f 70 74 49 6e 45 6d 61 69 6c 49 64 22 3a 22 69 4f 70 74 69 6e 45 6d 61 69 6c 22 2c 22 73 65 63 6f 6e 64 4f 70 74 69 6e 45 Data Ascii: memberName","password"]:["memberName"]:["memberName","password","additionalLegalText","optinEmailCheckbox","secondOptinEmailCheckbox"],"stepCounter":G.credentialsStep,"totalSteps":G.totalStep},"focusFirstInput":1,"optInEmailId":"iOptinEmail","secondOptinE
2023-06-19 13:23:13 UTC	1348	IN	Data Raw: 2c 22 63 61 6e 63 65 6c 22 3a 4d 2c 22 70 72 69 76 61 63 79 22 3a 67 2c 22 74 6f 75 22 3a 66 2c 22 69 6d 70 72 65 73 73 75 6d 22 3a 53 2c 22 61 31 31 79 43 6f 6e 66 6f 72 6d 65 22 3a 6b 2c 22 62 61 63 6b 53 74 61 63 6b 22 3a 5b 4d 2c 44 5d 7d 7d 2c 22 63 68 69 6e 61 50 49 50 4c 43 6f 6e 73 65 6e 74 22 3a 7b 22 70 61 67 65 49 64 22 3a 52 2e 53 69 67 6e 75 70 5f 43 68 69 6e 61 50 49 50 4c 43 6f 6e 73 65 6e 74 5f 43 6c 69 65 6e 74 2c 22 73 65 63 74 69 6f 6e 49 64 22 3a 22 43 68 69 6e 61 50 49 50 4c 43 6f 6e 73 65 6e 74 22 2c 22 63 6f 6e 74 72 6f 6c 22 3a 22 53 69 67 6e 75 70 43 72 65 61 74 65 43 6f 6e 74 72 6f 6c 22 2c 22 6f 70 74 69 6f 6e 73 22 3a 7b 22 76 69 65 77 4d 6f 64 65 6c 22 3a 22 53 69 67 6e 75 70 56 69 65 77 4d 6f 64 65 6c 22 2c 22 70 61 67 65 42 Data Ascii: ,"cancel":M,"privacy":g,"tou":f,"impressum":S,"a11yConforme":k,"backStack":[M,D]}},"chinaPIPLConsent":{"pageId":R.Signup_ChinaPIPLConsent_Client,"sectionId":"ChinaPIPLConsent","control":"SignupCreateControl","options":{"viewModel":"SignupViewModel","pageB
2023-06-19 13:23:13 UTC	1365	IN	Data Raw: 6d 62 65 72 4e 61 6d 65 54 79 70 65 28 67 2e 45 41 53 49 29 2c 6a 28 65 29 29 3a 74 2e 6d 65 6d 62 65 72 4e 61 6d 65 54 79 70 65 28 67 2e 45 41 53 49 29 7d 65 6c 73 65 7b 69 66 28 6e 3d 3d 3d 67 2e 4c 69 76 65 29 7b 76 61 72 20 61 3d 65 2e 73 70 6c 69 74 28 22 40 22 29 3b 41 3f 28 74 2e 73 77 69 74 63 68 4d 65 6d 62 65 72 4e 61 6d 65 54 79 70 65 28 67 2e 4c 69 76 65 29 2c 74 2e 6d 65 6d 62 65 72 4e 61 6d 65 49 6e 70 75 74 28 61 5b 30 5d 29 29 3a 28 74 2e 64 6f 6d 61 69 6e 28 61 5b 31 5d 29 2c 74 2e 6d 65 6d 62 65 72 4e 61 6d 65 49 6e 70 75 74 28 61 5b 30 5d 29 2c 74 2e 6d 65 6d 62 65 72 4e 61 6d 65 54 79 70 65 28 67 2e 4c 69 76 65 29 29 7d 7d 7d 65 6c 73 65 7b 70 2e 76 69 65 77 43 6f 6e 74 65 78 74 2e 64 61 74 61 2e 69 6e 70 75 74 5b 79 2e 76 65 72 69 66 Data Ascii: mberNameType(g.EASI),j(e)):t.memberNameType(g.EASI)}else{if(n===g.Live){var a=e.split("@");A?(t.switchMemberNameType(g.Live),t.memberNameInput(a[0])):(t.domain(a[1]),t.memberNameInput(a[0]),t.memberNameType(g.Live))}}}else{p.viewContext.data.input[y.verif
2023-06-19 13:23:13 UTC	1381	IN	Data Raw: 6f 72 64 21 3d 77 28 29 3b 72 65 74 75 72 6e 20 65 26 26 28 70 2e 76 69 65 77 43 6f 6e 74 65 78 74 2e 64 61 74 61 2e 70 72 65 76 69 6f 75 73 6c 79 43 68 65 63 6b 65 64 50 61 73 73 77 6f 72 64 3d 77 28 29 29 2c 65 7d 2c 22 70 61 72 61 6d 73 22 3a 7b 22 75 72 6c 22 3a 24 55 74 69 6c 69 74 79 2e 67 65 6e 65 72 61 74 65 55 72 6c 28 75 2e 75 72 6c 73 2e 62 61 73 65 44 6f 6d 61 69 6e 2c 76 2e 62 61 6e 6e 65 64 50 77 64 2c 21 30 29 2c 22 73 6b 69 22 3a 53 4b 49 7c 7c 22 22 2c 22 6f 62 73 65 72 76 61 62 6c 65 22 3a 77 7d 2c 22 6d 65 73 73 61 67 65 22 3a 43 2e 62 61 6e 6e 65 64 50 61 73 73 77 6f 72 64 7d 7d 29 2c 77 2e 73 75 62 73 63 72 69 62 65 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 61 2e 70 61 73 73 77 6f 72 64 2e 73 75 70 70 72 65 73 73 4d 65 73 73 61 Data Ascii: ord!=w();return e&&(p.viewContext.data.previouslyCheckedPassword=w()),e},"params":{"url":$Utility.generateUrl(u.urls.baseDomain,v.bannedPwd,!0),"ski":SKI\|\|"","observable":w},"message":C.bannedPassword}}),w.subscribe(function(t){if(a.password.suppressMessa
2023-06-19 13:23:13 UTC	1397	IN	Data Raw: 6f 6e 74 65 78 74 3d 65 2c 75 2e 74 72 69 67 67 65 72 3d 28 69 7c 7c 7b 7d 29 2e 74 72 69 67 67 65 72 2c 6c 3d 72 2e 73 74 72 69 6e 67 73 2c 64 3d 6c 2e 65 72 72 6f 72 73 3b 76 61 72 20 62 3d 76 2e 6c 65 6e 67 74 68 3b 75 2e 76 61 6c 69 64 61 74 69 6f 6e 4f 72 64 65 72 3d 6e 65 77 20 41 72 72 61 79 28 62 29 3b 66 6f 72 28 76 61 72 20 68 3d 30 3b 62 3e 68 3b 68 2b 2b 29 7b 76 61 72 20 43 3d 76 5b 68 5d 3b 6d 69 78 28 75 2c 66 28 43 2c 6d 5b 43 5d 2c 67 5b 43 5d 29 29 2c 75 2e 76 61 6c 69 64 61 74 69 6f 6e 4f 72 64 65 72 5b 68 5d 3d 75 5b 43 5d 7d 69 66 28 6d 69 78 28 75 2c 7b 22 73 74 72 69 6e 67 73 22 3a 6c 2c 22 63 6f 6e 66 69 67 22 3a 73 7d 29 2c 63 29 7b 76 61 72 20 77 3d 24 50 61 67 65 48 65 6c 70 65 72 2e 62 79 49 64 28 22 53 70 69 6e 6e 65 72 22 29 Data Ascii: ontext=e,u.trigger=(i\|\|{}).trigger,l=r.strings,d=l.errors;var b=v.length;u.validationOrder=new Array(b);for(var h=0;b>h;h++){var C=v[h];mix(u,f(C,m[C],g[C])),u.validationOrder[h]=u[C]}if(mix(u,{"strings":l,"config":s}),c){var w=$PageHelper.byId("Spinner")
2023-06-19 13:23:13 UTC	1413	IN	Data Raw: 70 74 69 6f 6e 73 2e 73 68 6f 77 49 64 65 6e 74 69 74 79 42 61 6e 6e 65 72 26 26 65 3f 28 61 2e 69 73 42 61 63 6b 42 75 74 74 6f 6e 56 69 73 69 62 6c 65 28 6e 2e 66 74 72 56 69 65 77 4d 6f 64 65 6c 48 61 6e 64 6c 65 2e 62 75 74 74 6f 6e 73 2e 62 61 63 6b 42 75 74 74 6f 6e 2e 76 69 73 69 62 6c 65 28 29 29 2c 61 2e 73 68 6f 77 49 64 65 6e 74 69 74 79 42 61 6e 6e 65 72 28 21 30 29 29 3a 61 2e 73 68 6f 77 49 64 65 6e 74 69 74 79 42 61 6e 6e 65 72 28 21 31 29 29 7d 7d 2c 22 5f 68 61 6e 64 6c 65 50 69 70 6c 4c 65 61 72 6e 4d 6f 72 65 56 69 65 77 22 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 73 65 63 74 69 6f 6e 49 64 3d 3d 3d 7a 2c 74 3d 74 68 69 73 2e 5f 73 65 63 74 69 6f 6e 49 64 3d 3d 3d 71 2c 61 3d 28 65 7c 7c 74 29 26 26 79 3b Data Ascii: ptions.showIdentityBanner&&e?(a.isBackButtonVisible(n.ftrViewModelHandle.buttons.backButton.visible()),a.showIdentityBanner(!0)):a.showIdentityBanner(!1))}},"_handlePiplLearnMoreView":function(){var e=this._sectionId===z,t=this._sectionId===q,a=(e\|\|t)&&y;
2023-06-19 13:23:13 UTC	1429	IN	Data Raw: 2e 75 72 6c 73 2e 61 74 6c 61 73 2e 63 72 65 61 74 65 4c 69 76 65 29 2e 61 70 70 65 6e 64 54 6f 28 68 29 3a 6d 2e 75 72 6c 73 2e 61 74 6c 61 73 2e 63 72 65 61 74 65 45 61 73 69 26 26 24 50 61 67 65 48 65 6c 70 65 72 2e 63 72 65 61 74 65 53 68 69 6d 28 22 69 6d 67 22 29 2e 61 74 74 72 28 22 73 72 63 22 2c 6d 2e 75 72 6c 73 2e 61 74 6c 61 73 26 26 6d 2e 75 72 6c 73 2e 61 74 6c 61 73 2e 63 72 65 61 74 65 45 61 73 69 29 2e 61 70 70 65 6e 64 54 6f 28 68 29 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 2e 73 65 74 50 72 6f 70 65 72 74 79 28 22 49 73 53 69 67 6e 55 70 22 2c 22 31 22 29 2c 61 29 7b 76 61 72 20 6f 3d 6e 2e 46 69 65 6c 64 48 65 6c 70 65 72 2e 67 65 74 4d 65 6d 62 65 72 4e 61 6d 65 54 79 70 65 28 61 2e 73 69 67 Data Ascii: .urls.atlas.createLive).appendTo(h):m.urls.atlas.createEasi&&$PageHelper.createShim("img").attr("src",m.urls.atlas&&m.urls.atlas.createEasi).appendTo(h)),setTimeout(function(){if(i.setProperty("IsSignUp","1"),a){var o=n.FieldHelper.getMemberNameType(a.sig
2023-06-19 13:23:13 UTC	1445	IN	Data Raw: 65 2c 73 2e 48 46 49 64 3d 63 2e 75 72 6c 46 69 64 2c 73 2e 48 53 49 64 3d 63 2e 75 72 6c 49 64 2c 63 2e 76 65 72 69 66 79 28 66 75 6e 63 74 69 6f 6e 28 65 2c 61 29 7b 69 66 28 63 2e 63 6c 69 65 6e 74 56 61 6c 69 64 61 74 69 6f 6e 28 29 2c 22 22 21 3d 3d 63 2e 67 65 74 45 72 72 6f 72 28 29 29 7b 69 66 28 22 73 6d 73 22 3d 3d 3d 63 2e 74 79 70 65 29 7b 72 65 74 75 72 6e 0a 7d 6e 2e 76 69 65 77 4d 6f 64 65 6c 48 61 6e 64 6c 65 2e 68 69 70 2e 76 61 6c 75 65 48 61 73 4d 75 74 61 74 65 64 28 29 7d 73 2e 48 49 64 3d 61 2c 73 2e 48 53 6f 6c 3d 65 2c 74 2e 5f 63 72 65 61 74 65 41 63 63 6f 75 6e 74 28 73 29 7d 2c 6e 75 6c 6c 29 29 3a 74 2e 24 2e 74 72 69 67 67 65 72 48 61 6e 64 6c 65 72 28 48 2c 7b 22 61 63 74 69 6f 6e 4e 61 6d 65 22 3a 22 68 69 70 22 2c 22 63 6f Data Ascii: e,s.HFId=c.urlFid,s.HSId=c.urlId,c.verify(function(e,a){if(c.clientValidation(),""!==c.getError()){if("sms"===c.type){return}n.viewModelHandle.hip.valueHasMutated()}s.HId=a,s.HSol=e,t._createAccount(s)},null)):t.$.triggerHandler(H,{"actionName":"hip","co

Timestamp	kBytes transferred	Direction	Data
2023-06-19 13:23:13 UTC	1364	OUT	GET /images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg HTTP/1.1 Host: acctcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-06-19 13:23:13 UTC	1452	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 30976734 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Mon, 19 Jun 2023 13:23:13 GMT Etag: 0x8DA566CA9AE3551 Last-Modified: Sat, 25 Jun 2022 05:36:32 GMT Server: ECAcc (muc/337D) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: e8fe0a54-701e-0036-61f5-88f93d000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2023-06-19 13:23:13 UTC	1453	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Timestamp	kBytes transferred	Direction	Data
2023-06-19 13:23:14 UTC	1456	OUT	GET /images/dropdown_caret_KXSZjGsyILZaoTf0sI9X-A2.svg HTTP/1.1 Host: acctcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-06-19 13:23:14 UTC	1457	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 353961 Cache-Control: public, max-age=604800 Content-MD5: 5h8LmH5/oEhH5cNR2+nY3g== Content-Type: image/svg+xml Date: Mon, 19 Jun 2023 13:23:14 GMT Etag: 0x8DB6D5DC5AE09A5 Last-Modified: Thu, 15 Jun 2023 05:02:51 GMT Server: ECAcc (muc/3349) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1744b90d-301e-0015-4f79-9f740c000000 x-ms-version: 2009-09-19 Content-Length: 224 Connection: close
2023-06-19 13:23:14 UTC	1458	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 31 38 2c 32 32 2e 34 38 34 6c 2d 38 2d 38 2c 2e 39 36 39 2d 2e 39 36 38 4c 31 38 2c 32 30 2e 35 34 37 6c 37 2e 30 33 31 2d 37 2e 30 33 31 2e 39 36 39 2e 39 36 38 2d 38 2c 38 5a 22 2f 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"><title>assets</title><path d="M18,22.484l-8-8,.969-.968L18,20.547l7.031-7.031.969.968-8,8Z"/><rect width="36" height="36" fill="none"/></svg>

Timestamp	kBytes transferred	Direction	Data
2023-06-19 13:23:14 UTC	1458	OUT	GET /datarequestpackage_h-_7C7UzwdefXJT9njDBTQ2.js HTTP/1.1 Host: acctcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://signup.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-06-19 13:23:14 UTC	1459	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 21493853 Cache-Control: public, max-age=31536000 Content-MD5: GpB463eVzCq5vobQLSGoUw== Content-Type: application/javascript Date: Mon, 19 Jun 2023 13:23:14 GMT Etag: 0x8DAACDCE2C5B473 Last-Modified: Thu, 13 Oct 2022 05:36:32 GMT Server: ECAcc (muc/3326) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 786e0b20-b01e-0010-1334-df61ad000000 x-ms-version: 2009-09-19 Content-Length: 8111 Connection: close
2023-06-19 13:23:14 UTC	1459	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 73 74 61 74 65 3d 3d 6c 26 26 28 65 2e 70 72 65 76 26 26 28 65 2e 70 72 65 76 2e 6e 65 78 74 3d 65 2e 6e 65 78 74 29 2c 65 2e 6e 65 78 74 26 26 28 65 2e 6e 65 78 74 2e 70 72 65 76 3d 65 2e 70 72 65 76 29 2c 44 3d 3d 65 26 26 28 44 3d 65 2e 6e 65 78 74 29 2c 24 3d 3d 65 26 26 28 24 3d 65 2e 70 72 65 76 29 2c 65 2e 73 74 61 74 65 3d 75 2c 65 2e 70 72 65 76 3d 65 2e 6e 65 78 74 3d 6e 75 6c 6c 2c 79 2d 2d 29 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 69 66 28 65 26 26 65 2e 73 74 61 74 65 3d 3d 75 29 7b 76 61 72 20 72 3d 24 3b 72 3f 28 72 2e 6e 65 78 74 3d 65 2c 65 2e 70 72 65 76 3d 72 29 3a 44 3d Data Ascii: !function(){function e(e){function t(e){return e&&e.state==l&&(e.prev&&(e.prev.next=e.next),e.next&&(e.next.prev=e.prev),D==e&&(D=e.next),$==e&&($=e.prev),e.state=u,e.prev=e.next=null,y--),e}function a(e){if(e&&e.state==u){var r=$;r?(r.next=e,e.prev=r):D=

Timestamp	kBytes transferred	Direction	Data
2023-06-19 13:23:14 UTC	1467	OUT	GET /images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg HTTP/1.1 Host: acctcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-06-19 13:23:14 UTC	1468	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 30975689 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Mon, 19 Jun 2023 13:23:14 GMT Etag: 0x8DA566CA04AF903 Last-Modified: Sat, 25 Jun 2022 05:36:17 GMT Server: ECAcc (muc/331E) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 3f6308d3-d01e-0062-1ef8-88511b000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2023-06-19 13:23:14 UTC	1469	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Timestamp	kBytes transferred	Direction	Data
2023-06-19 13:23:14 UTC	1470	OUT	GET /images/favicon.ico?v=2 HTTP/1.1 Host: acctcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-06-19 13:23:14 UTC	1471	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 353051 Cache-Control: public, max-age=604800 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Content-Type: image/x-icon Date: Mon, 19 Jun 2023 13:23:14 GMT Etag: 0x8DB6D5DC5EA1F69 Last-Modified: Thu, 15 Jun 2023 05:02:52 GMT Server: ECAcc (muc/3349) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: eae8e421-a01e-0059-7f7b-9f442d000000 x-ms-version: 2009-09-19 Content-Length: 17174 Connection: close
2023-06-19 13:23:14 UTC	1472	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2023-06-19 13:23:14 UTC	1488	IN	Data Raw: 01 80 00 00 01 80 00 28 00 00 00 18 00 00 00 30 00 00 00 01 00 04 00 00 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 Data Ascii: (0"P""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330

Timestamp	kBytes transferred	Direction	Data
2023-06-19 13:23:14 UTC	1493	OUT	GET /images/dropdown_caret_KXSZjGsyILZaoTf0sI9X-A2.svg HTTP/1.1 Host: acctcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-06-19 13:23:14 UTC	1494	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 353961 Cache-Control: public, max-age=604800 Content-MD5: 5h8LmH5/oEhH5cNR2+nY3g== Content-Type: image/svg+xml Date: Mon, 19 Jun 2023 13:23:14 GMT Etag: 0x8DB6D5DC5AE09A5 Last-Modified: Thu, 15 Jun 2023 05:02:51 GMT Server: ECAcc (muc/3349) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1744b90d-301e-0015-4f79-9f740c000000 x-ms-version: 2009-09-19 Content-Length: 224 Connection: close
2023-06-19 13:23:14 UTC	1495	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 31 38 2c 32 32 2e 34 38 34 6c 2d 38 2d 38 2c 2e 39 36 39 2d 2e 39 36 38 4c 31 38 2c 32 30 2e 35 34 37 6c 37 2e 30 33 31 2d 37 2e 30 33 31 2e 39 36 39 2e 39 36 38 2d 38 2c 38 5a 22 2f 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"><title>assets</title><path d="M18,22.484l-8-8,.969-.968L18,20.547l7.031-7.031.969.968-8,8Z"/><rect width="36" height="36" fill="none"/></svg>

Timestamp	kBytes transferred	Direction	Data
2023-06-19 13:23:14 UTC	1495	OUT	GET /oneds_MC5gQfpbTUjLu60sQCwU1w2.js?v=1 HTTP/1.1 Host: acctcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-06-19 13:23:14 UTC	1498	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 589561 Cache-Control: public, max-age=604800 Content-MD5: aLM4Wm3/yNZOAZgyrMkY7Q== Content-Type: application/javascript Date: Mon, 19 Jun 2023 13:23:14 GMT Etag: 0x8DB6B3A0E4255CC Last-Modified: Mon, 12 Jun 2023 11:42:09 GMT Server: ECAcc (muc/331D) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 7863ca55-b01e-0010-4154-9d61ad000000 x-ms-version: 2009-09-19 Content-Length: 273170 Connection: close
2023-06-19 13:23:14 UTC	1499	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 31 44 53 20 4a 53 20 53 44 4b 20 43 6f 72 65 2c 20 33 2e 32 2e 36 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0d 0a 20 2a 2f 0d 0a 76 61 72 20 6e 3d 74 68 69 73 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 50 3d 22 66 75 6e 63 74 69 6f 6e 22 2c 75 3d 22 6f 62 6a 65 63 74 22 2c 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 2c 73 3d 22 70 72 6f 74 6f 74 79 70 65 22 2c 45 3d 22 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 22 2c 74 3d 4f 62 6a 65 63 74 Data Ascii: /! 1DS JS SDK Core, 3.2.6 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */var n=this,e=function(n){"use strict";var P="function",u="object",e="undefined",s="prototype",E="hasOwnProperty",t=Object
2023-06-19 13:23:14 UTC	1515	IN	Data Raw: 30 3c 28 65 3d 57 65 28 29 2b 31 65 33 2a 74 29 26 26 28 28 72 3d 6e 65 77 20 44 61 74 65 29 2e 73 65 74 54 69 6d 65 28 65 29 2c 4a 65 28 6f 2c 72 69 2c 43 69 28 72 2c 61 3f 6e 69 3a 65 69 29 7c 7c 43 69 28 72 2c 61 3f 6e 69 3a 65 69 29 7c 7c 67 2c 24 65 29 29 2c 61 7c 7c 4a 65 28 6f 2c 22 6d 61 78 2d 61 67 65 22 2c 67 2b 74 2c 6e 75 6c 6c 2c 68 29 29 2c 28 65 3d 65 72 28 29 29 26 26 22 68 74 74 70 73 3a 22 3d 3d 3d 65 2e 70 72 6f 74 6f 63 6f 6c 26 26 28 4a 65 28 6f 2c 22 73 65 63 75 72 65 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 68 29 2c 28 6c 69 3d 6e 75 6c 6c 3d 3d 3d 6c 69 3f 21 49 69 28 28 59 74 28 29 7c 7c 7b 7d 29 5b 45 6e 5d 29 3a 6c 69 29 26 26 4a 65 28 6f 2c 22 53 61 6d 65 53 69 74 65 22 2c 22 4e 6f 6e 65 22 2c 6e 75 6c 6c 2c 68 29 29 2c 4a 65 28 6f Data Ascii: 0<(e=We()+1e3*t)&&((r=new Date).setTime(e),Je(o,ri,Ci(r,a?ni:ei)\|\|Ci(r,a?ni:ei)\|\|g,$e)),a\|\|Je(o,"max-age",g+t,null,h)),(e=er())&&"https:"===e.protocol&&(Je(o,"secure",null,null,h),(li=null===li?!Ii((Yt()\|\|{})[En]):li)&&Je(o,"SameSite","None",null,h)),Je(o
2023-06-19 13:23:14 UTC	1531	IN	Data Raw: 6c 72 65 61 64 79 20 6c 6f 61 64 65 64 21 22 29 29 3a 28 6f 3d 7b 72 65 61 73 6f 6e 3a 31 36 7d 2c 69 3f 66 28 75 3d 5b 69 2e 70 6c 75 67 69 6e 5d 2c 7b 72 65 61 73 6f 6e 3a 32 2c 69 73 41 73 79 6e 63 3a 21 21 74 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 3f 28 6f 2e 72 65 6d 6f 76 65 64 3d 75 2c 6f 2e 72 65 61 73 6f 6e 7c 3d 33 32 2c 61 28 29 29 3a 72 26 26 72 28 21 31 29 7d 29 3a 61 28 29 29 3a 28 72 26 26 72 28 21 31 29 2c 64 28 6a 6f 29 29 7d 2c 70 2e 65 76 74 4e 61 6d 65 73 70 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 7d 2c 70 5b 73 6e 5d 3d 73 2c 70 2e 67 65 74 54 72 61 63 65 43 74 78 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 20 41 7c 7c 28 65 3d 7b 7d 2c 41 3d 7b 67 65 74 4e 61 6d 65 3a Data Ascii: lready loaded!")):(o={reason:16},i?f(u=[i.plugin],{reason:2,isAsync:!!t},function(n){n?(o.removed=u,o.reason\|=32,a()):r&&r(!1)}):a()):(r&&r(!1),d(jo))},p.evtNamespace=function(){return n},p[sn]=s,p.getTraceCtx=function(n){var e;return A\|\|(e={},A={getName:
2023-06-19 13:23:14 UTC	1547	IN	Data Raw: 65 64 75 Data Ascii: edu
2023-06-19 13:23:14 UTC	1547	IN	Data Raw: 6c 65 72 3d 47 2c 6e 2e 45 76 65 6e 74 48 65 6c 70 65 72 3d 64 65 2c 6e 2e 45 76 65 6e 74 4c 61 74 65 6e 63 79 3d 69 75 2c 6e 2e 45 76 65 6e 74 50 65 72 73 69 73 74 65 6e 63 65 3d 72 75 2c 6e 2e 45 76 65 6e 74 50 72 6f 70 65 72 74 79 54 79 70 65 3d 6e 75 2c 6e 2e 45 76 65 6e 74 73 44 69 73 63 61 72 64 65 64 52 65 61 73 6f 6e 3d 67 65 2c 6e 2e 46 75 6c 6c 56 65 72 73 69 6f 6e 53 74 72 69 6e 67 3d 76 75 2c 6e 2e 49 6e 74 65 72 6e 61 6c 41 70 70 49 6e 73 69 67 68 74 73 43 6f 72 65 3d 24 6f 2c 6e 2e 49 6e 74 65 72 6e 61 6c 42 61 73 65 43 6f 72 65 3d 4b 6f 2c 6e 2e 4c 6f 67 67 69 6e 67 53 65 76 65 72 69 74 79 3d 63 75 2c 6e 2e 4d 69 6e 43 68 61 6e 6e 65 6c 50 72 69 6f 72 74 79 3d 31 30 30 2c 6e 2e 4e 6f 74 69 66 69 63 61 74 69 6f 6e 4d 61 6e 61 67 65 72 3d 4a Data Ascii: ler=G,n.EventHelper=de,n.EventLatency=iu,n.EventPersistence=ru,n.EventPropertyType=nu,n.EventsDiscardedReason=ge,n.FullVersionString=vu,n.InternalAppInsightsCore=$o,n.InternalBaseCore=Ko,n.LoggingSeverity=cu,n.MinChannelPriorty=100,n.NotificationManager=J
2023-06-19 13:23:14 UTC	1563	IN	Data Raw: 76 65 28 72 2c 22 74 72 69 64 65 6e 74 2f 22 29 29 2c 48 65 29 29 7b 69 66 28 21 68 74 29 74 72 79 7b 76 61 72 20 69 3d 32 31 34 37 34 38 33 36 34 37 26 43 65 28 29 3b 28 65 3d 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 64 74 5e 69 29 2b 69 29 3c 30 26 26 28 65 3e 3e 3e 3d 30 29 2c 70 74 3d 31 32 33 34 35 36 37 38 39 2b 65 26 76 74 2c 79 74 3d 39 38 37 36 35 34 33 32 31 2d 65 26 76 74 2c 68 74 3d 21 30 7d 63 61 74 63 68 28 6f 29 7b 7d 72 3d 28 28 79 74 3d 33 36 39 36 39 2a 28 36 35 35 33 35 26 79 74 29 2b 28 79 74 3e 3e 31 36 29 26 76 74 29 3c 3c 31 36 29 2b 28 36 35 35 33 35 26 28 70 74 3d 31 38 65 33 2a 28 36 35 35 33 35 26 70 74 29 2b 28 70 74 3e 3e 31 36 29 26 76 74 29 29 3e 3e 3e 30 26 76 74 7c 30 2c 74 3d 28 72 3e 3e 3e 3d 30 29 26 76 74 7d 72 65 Data Ascii: ve(r,"trident/")),He)){if(!ht)try{var i=2147483647&Ce();(e=(Math.random()dt^i)+i)<0&&(e>>>=0),pt=123456789+e&vt,yt=987654321-e&vt,ht=!0}catch(o){}r=((yt=36969(65535&yt)+(yt>>16)&vt)<<16)+(65535&(pt=18e3*(65535&pt)+(pt>>16)&vt))>>>0&vt\|0,t=(r>>>=0)&vt}re
2023-06-19 13:23:14 UTC	1579	IN	Data Raw: 6f 75 74 2c 61 3d 21 30 2c 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 21 31 29 2c 73 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2c 61 26 26 66 28 73 2c 22 4d 69 63 72 6f 73 6f 66 74 5f 41 70 70 6c 69 63 61 74 69 6f 6e 49 6e 73 69 67 68 74 73 5f 42 79 70 61 73 73 41 6a 61 78 49 6e 73 74 72 75 6d 65 6e 74 61 74 69 6f 6e 22 2c 61 29 2c 69 26 26 66 28 73 2c 73 72 2c 69 29 2c 73 2e 6f 70 65 6e 28 22 50 4f 53 54 22 2c 74 2c 21 65 29 2c 69 26 26 66 28 73 2c 73 72 2c 69 29 2c 21 65 26 26 63 26 26 66 28 73 2c 22 74 69 6d 65 6f 75 74 22 2c 63 29 3b 76 61 72 20 69 2c 61 2c 63 2c 73 2c 6c 3d 73 3b 66 75 6e 63 74 69 6f 6e 20 66 28 6e 2c 65 2c 74 29 7b 74 72 79 7b 6e 5b 65 5d 3d 74 7d 63 61 74 63 68 28 72 29 7b 7d 7d 65 6e 28 6e 2e 68 65 61 64 65 72 73 Data Ascii: out,a=!0,void 0===e&&(e=!1),s=new XMLHttpRequest,a&&f(s,"Microsoft_ApplicationInsights_BypassAjaxInstrumentation",a),i&&f(s,sr,i),s.open("POST",t,!e),i&&f(s,sr,i),!e&&c&&f(s,"timeout",c);var i,a,c,s,l=s;function f(n,e,t){try{n[e]=t}catch(r){}}en(n.headers
2023-06-19 13:23:14 UTC	1595	IN	Data Raw: 22 3b 76 61 72 20 75 3d 22 66 75 6e 63 74 69 6f 6e 22 2c 73 3d 22 6f 62 6a 65 63 74 22 2c 66 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 2c 66 3d 22 70 72 6f 74 6f 74 79 70 65 22 2c 6c 3d 22 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 22 2c 67 3d 4f 62 6a 65 63 74 2c 76 3d 67 5b 66 5d 2c 79 3d 67 2e 61 73 73 69 67 6e 2c 54 3d 67 2e 63 72 65 61 74 65 2c 49 3d 67 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 43 3d 76 5b 6c 5d 2c 62 3d 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 45 28 65 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 21 30 29 2c 62 26 26 65 7c 7c 28 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 66 65 26 26 67 6c 6f 62 61 6c 54 68 69 73 26 26 28 62 3d 67 6c 6f 62 61 6c 54 68 69 73 29 2c 74 79 70 65 6f 66 20 73 Data Ascii: ";var u="function",s="object",fe="undefined",f="prototype",l="hasOwnProperty",g=Object,v=g[f],y=g.assign,T=g.create,I=g.defineProperty,C=v[l],b=null;function E(e){return void 0===e&&(e=!0),b&&e\|\|(typeof globalThis!==fe&&globalThis&&(b=globalThis),typeof s
2023-06-19 13:23:14 UTC	1611	IN	Data Raw: 3f 21 43 72 28 28 72 69 28 29 7c 7c 7b 7d 29 5b 78 65 5d 29 3a 75 72 29 26 26 4a 74 28 61 2c 22 53 61 6d 65 53 69 74 65 22 2c 22 4e 6f 6e 65 22 2c 6e 75 6c 6c 2c 6a 29 29 2c 4a 74 28 61 2c 22 70 61 74 68 22 2c 72 7c 7c 6c 2c 6e 75 6c 6c 2c 6a 29 2c 28 73 2e 73 65 74 43 6f 6f 6b 69 65 7c 7c 49 72 29 28 65 2c 54 72 28 6f 2c 61 29 29 2c 75 3d 21 30 29 2c 75 7d 2c 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 70 3b 72 65 74 75 72 6e 20 70 72 28 64 29 3f 28 73 2e 67 65 74 43 6f 6f 6b 69 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 70 3b 72 65 74 75 72 6e 20 6c 72 26 26 28 74 3d 6c 72 5b 74 72 5d 7c 7c 70 2c 73 72 21 3d 3d 74 26 26 28 66 72 3d 68 72 28 74 29 2c 73 72 3d 74 29 2c 6e 3d 51 28 66 72 5b 65 5d 7c 7c Data Ascii: ?!Cr((ri()\|\|{})[xe]):ur)&&Jt(a,"SameSite","None",null,j)),Jt(a,"path",r\|\|l,null,j),(s.setCookie\|\|Ir)(e,Tr(o,a)),u=!0),u},e.get=function(e){var t=p;return pr(d)?(s.getCookie\|\|function(e){var t,n=p;return lr&&(t=lr[tr]\|\|p,sr!==t&&(fr=hr(t),sr=t),n=Q(fr[e]\|\|
2023-06-19 13:23:14 UTC	1627	IN	Data Raw: 43 62 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 7d 2c 22 61 64 64 22 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 42 61 28 65 2c 6e 2c 69 2c 72 29 7b 74 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 26 26 65 5b 6e 5d 29 69 66 28 69 29 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 28 65 29 7d 2c 30 29 3b 65 6c 73 65 20 74 72 79 7b 72 28 65 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 29 7d 48 61 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 46 61 3d 48 61 3b 66 75 6e 63 74 69 6f 6e 20 48 61 28 65 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 5b 5d 3b 76 61 72 20 6e 3d 21 21 28 65 7c 7c 7b 7d 29 2e 70 65 72 66 45 76 74 73 53 65 6e 64 41 6c 6c 3b 69 65 28 48 61 2c 74 68 69 73 2c 66 75 6e Data Ascii: Cb",function(){return w},"add")})}function Ba(e,n,i,r){te(e,function(e){if(e&&e[n])if(i)setTimeout(function(){return r(e)},0);else try{r(e)}catch(t){}})}Ha.__ieDyn=1;var Fa=Ha;function Ha(e){this.listeners=[];var n=!!(e\|\|{}).perfEvtsSendAll;ie(Ha,this,fun
2023-06-19 13:23:14 UTC	1643	IN	Data Raw: 6d 65 6f 75 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 68 28 74 2c 35 30 30 2c 7b 7d 29 7d 2c 69 2e 6f 6e 70 72 6f 67 72 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 6e 3f 69 2e 73 65 6e 64 28 65 2e 64 61 74 61 29 3a 66 2e 73 65 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 2e 73 65 6e 64 28 65 2e 64 61 74 61 29 7d 2c 30 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 72 2c 74 29 7b 76 61 72 20 6e 2c 69 3d 65 2e 75 72 6c 53 74 72 69 6e 67 2c 61 3d 21 31 2c 6f 3d 21 31 3b 28 6e 3d 7b 62 6f 64 79 3a 65 2e 64 61 74 61 2c 6d 65 74 68 6f 64 3a 22 50 4f 53 54 22 7d 29 2e 4d 69 63 72 6f 73 6f 66 74 5f 41 70 70 6c 69 63 61 74 69 6f 6e 49 6e 73 69 67 68 74 73 5f 42 79 70 61 73 73 41 6a 61 78 49 6e 73 74 72 75 6d 65 6e 74 61 74 69 6f 6e 3d 21 30 3b 74 26 26 28 6e 2e 6b Data Ascii: meout=function(){h(t,500,{})},i.onprogress=function(){},n?i.send(e.data):f.set(function(){i.send(e.data)},0)}function c(e,r,t){var n,i=e.urlString,a=!1,o=!1;(n={body:e.data,method:"POST"}).Microsoft_ApplicationInsights_BypassAjaxInstrumentation=!0;t&&(n.k
2023-06-19 13:23:14 UTC	1659	IN	Data Raw: 28 41 63 2c 43 63 3d 67 74 29 2c 41 63 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 77 63 2c 50 63 3d 41 63 2c 51 61 3d 22 6e 61 6d 65 22 2c 5f 63 3d 63 6e 28 7b 55 73 65 72 45 78 74 3a 5b 30 2c 22 75 73 65 72 22 5d 2c 44 65 76 69 63 65 45 78 74 3a 5b 31 2c 22 64 65 76 69 63 65 22 5d 2c 54 72 61 63 65 45 78 74 3a 5b 32 2c 22 74 72 61 63 65 22 5d 2c 57 65 62 45 78 74 3a 5b 33 2c 22 77 65 62 22 5d 2c 41 70 70 45 78 74 3a 5b 34 2c 22 61 70 70 22 5d 2c 4f 53 45 78 74 3a 5b 35 2c 22 6f 73 22 5d 2c 53 64 6b 45 78 74 3a 5b 36 2c 22 73 64 6b 22 5d 2c 49 6e 74 57 65 62 45 78 74 3a 5b 37 2c 22 69 6e 74 77 65 62 22 5d 2c 55 74 63 45 78 74 3a 5b 38 2c 22 75 74 63 22 5d 2c 4c 6f 63 45 78 74 3a 5b 39 2c 22 6c 6f 63 22 5d 2c 43 6c 6f 75 64 45 78 74 3a 5b 31 30 2c 22 63 Data Ascii: (Ac,Cc=gt),Ac.__ieDyn=1;var wc,Pc=Ac,Qa="name",_c=cn({UserExt:[0,"user"],DeviceExt:[1,"device"],TraceExt:[2,"trace"],WebExt:[3,"web"],AppExt:[4,"app"],OSExt:[5,"os"],SdkExt:[6,"sdk"],IntWebExt:[7,"intweb"],UtcExt:[8,"utc"],LocExt:[9,"loc"],CloudExt:[10,"c
2023-06-19 13:23:14 UTC	1675	IN	Data Raw: 69 73 2e 5f 74 69 6d 65 72 73 3d 5b 5d 7d 4b 75 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 72 65 63 6f 72 64 54 69 6d 65 53 70 61 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 3b 69 66 28 74 29 72 65 74 75 72 6e 20 6e 2d 74 68 69 73 2e 5f 74 69 6d 65 72 73 5b 65 5d 3b 74 68 69 73 2e 5f 74 69 6d 65 72 73 5b 65 5d 3d 6e 7d 3b 76 61 72 20 7a 75 3d 4b 75 2c 57 75 3d 22 6e 6f 74 5f 73 70 65 63 69 66 69 65 64 22 2c 71 75 3d 22 69 4b 65 79 22 3b 66 75 6e 63 74 69 6f 6e 20 47 75 28 65 29 7b 76 61 72 20 74 2c 6e 3d 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 47 28 45 76 65 6e 74 29 3f 6e 3d 6e 65 77 20 45 76 65 6e 74 28 65 29 3a 28 74 3d 6f 65 28 29 29 26 26 74 2e 63 72 65 61 74 65 45 76 65 6e 74 26 Data Ascii: is._timers=[]}Ku.prototype._recordTimeSpan=function(e,t){var n=(new Date).getTime();if(t)return n-this._timers[e];this._timers[e]=n};var zu=Ku,Wu="not_specified",qu="iKey";function Gu(e){var t,n=null;return G(Event)?n=new Event(e):(t=oe())&&t.createEvent&
2023-06-19 13:23:14 UTC	1691	IN	Data Raw: 28 65 2c 74 29 7d 63 61 74 63 68 28 69 29 7b 77 69 28 63 2c 22 43 61 6c 6c 20 74 6f 20 72 65 73 74 61 72 74 20 66 61 69 6c 65 64 3a 20 22 2b 5a 28 69 29 29 2c 6e 3d 6e 75 6c 6c 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 74 72 79 7b 76 61 72 20 6e 2c 69 3b 50 73 28 29 26 26 28 6e 75 6c 6c 21 3d 5f 73 28 63 2c 73 29 26 26 24 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 73 74 61 72 74 50 61 67 65 56 69 73 69 74 20 63 6f 6e 73 65 63 75 74 69 76 65 6c 79 20 77 69 74 68 6f 75 74 20 66 69 72 73 74 20 63 61 6c 6c 69 6e 67 20 73 74 6f 70 50 61 67 65 56 69 73 69 74 22 29 2c 6e 3d 6e 65 77 20 5f 66 28 65 2c 74 29 2c 69 3d 73 69 28 29 2e 73 74 72 69 6e 67 69 66 79 28 6e 29 2c 44 73 28 63 2c 73 2c 69 29 29 7d 63 61 74 63 68 28 72 29 7b Data Ascii: (e,t)}catch(i){wi(c,"Call to restart failed: "+Z(i)),n=null}return n}function a(e,t){try{var n,i;Ps()&&(null!=_s(c,s)&&$("Cannot call startPageVisit consecutively without first calling stopPageVisit"),n=new _f(e,t),i=si().stringify(n),Ds(c,s,i))}catch(r){
2023-06-19 13:23:14 UTC	1707	IN	Data Raw: 2c 24 66 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 67 65 74 42 65 68 61 76 69 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 65 26 26 75 65 28 65 2e 62 65 68 61 76 69 6f 72 29 3f 74 3d 65 2e 62 65 68 61 76 69 6f 72 3a 75 65 28 74 68 69 73 2e 5f 62 65 68 61 76 69 6f 72 4d 65 74 61 54 61 67 29 26 26 28 74 3d 74 68 69 73 2e 5f 62 65 68 61 76 69 6f 72 4d 65 74 61 54 61 67 29 2c 74 68 69 73 2e 5f 67 65 74 56 61 6c 69 64 42 65 68 61 76 69 6f 72 28 74 29 7d 2c 24 66 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 67 65 74 56 61 6c 69 64 42 65 68 61 76 69 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 75 65 28 65 29 29 7b 76 61 72 20 74 3d 70 61 72 73 65 49 6e 74 28 65 29 3b 69 66 28 28 65 3d 69 73 4e 61 4e 28 74 29 3f 6e 2e 42 65 68 61 Data Ascii: ,$f.prototype._getBehavior=function(e){var t;return e&&ue(e.behavior)?t=e.behavior:ue(this._behaviorMetaTag)&&(t=this._behaviorMetaTag),this._getValidBehavior(t)},$f.prototype._getValidBehavior=function(e){if(ue(e)){var t=parseInt(e);if((e=isNaN(t)?n.Beha
2023-06-19 13:23:14 UTC	1723	IN	Data Raw: 29 7b 76 61 72 20 67 2c 76 2c 6d 2c 68 2c 79 2c 54 2c 49 2c 43 2c 62 2c 45 2c 53 2c 4e 2c 41 3d 53 64 2e 63 61 6c 6c 28 74 68 69 73 29 7c 7c 74 68 69 73 2c 72 3d 28 41 2e 69 64 65 6e 74 69 66 69 65 72 3d 22 57 65 62 41 6e 61 6c 79 74 69 63 73 50 6c 75 67 69 6e 22 2c 21 28 41 2e 76 65 72 73 69 6f 6e 3d 22 33 2e 32 2e 36 22 29 29 3b 72 65 74 75 72 6e 20 69 65 28 41 64 2c 41 2c 66 75 6e 63 74 69 6f 6e 28 66 2c 64 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 72 3d 21 28 43 3d 7b 68 3a 30 2c 76 3a 30 7d 29 2c 4e 3d 53 3d 45 3d 62 3d 49 3d 54 3d 79 3d 68 3d 6d 3d 76 3d 67 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 70 28 65 29 7b 53 26 26 28 65 26 26 28 4e 2e 70 61 67 65 56 69 65 77 26 26 53 2e 70 61 67 65 56 69 65 77 28 29 2c 4e 2e 6f 6e 4c 6f 61 64 26 26 53 Data Ascii: ){var g,v,m,h,y,T,I,C,b,E,S,N,A=Sd.call(this)\|\|this,r=(A.identifier="WebAnalyticsPlugin",!(A.version="3.2.6"));return ie(Ad,A,function(f,d){function n(){r=!(C={h:0,v:0}),N=S=E=b=I=T=y=h=m=v=g=null}function p(e){S&&(e&&(N.pageView&&S.pageView(),N.onLoad&&S
2023-06-19 13:23:14 UTC	1739	IN	Data Raw: 3d 3d 6e 3f 22 43 72 69 74 69 63 61 6c 22 3a 22 57 61 72 6e 69 6e 67 22 29 2c 65 29 3a 28 6f 3f 28 72 3d 2b 65 5b 54 6e 5d 2c 21 70 5b 72 5d 26 26 6e 3c 3d 63 26 26 28 69 5b 74 5d 28 65 5b 44 6e 5d 29 2c 70 5b 72 5d 3d 21 30 29 29 3a 6e 3c 3d 63 26 26 69 5b 74 5d 28 65 5b 44 6e 5d 29 2c 61 28 6e 2c 65 29 29 7d 2c 69 5b 5a 6e 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6f 74 28 22 77 61 72 6e 22 2c 6e 29 2c 75 28 22 77 61 72 6e 69 6e 67 22 2c 6e 29 7d 2c 69 5b 59 6e 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6f 74 28 22 65 72 72 6f 72 22 2c 6e 29 2c 75 28 22 65 72 72 6f 72 22 2c 6e 29 7d 2c 69 2e 72 65 73 65 74 49 6e 74 65 72 6e 61 6c 4d 65 73 73 61 67 65 43 6f 75 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 3d 30 2c 70 3d 7b 7d 7d 2c 69 2e 6c 6f 67 49 6e 74 Data Ascii: ==n?"Critical":"Warning"),e):(o?(r=+e[Tn],!p[r]&&n<=c&&(i[t](e[Dn]),p[r]=!0)):n<=c&&i[t](e[Dn]),a(n,e))},i[Zn]=function(n){ot("warn",n),u("warning",n)},i[Yn]=function(n){ot("error",n),u("error",n)},i.resetInternalMessageCount=function(){d=0,p={}},i.logInt
2023-06-19 13:23:14 UTC	1755	IN	Data Raw: 70 65 2c 22 6d 73 66 70 63 22 2c 66 75 Data Ascii: pe,"msfpc",fu
2023-06-19 13:23:14 UTC	1755	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 4d 73 66 70 63 28 29 7d 29 2c 76 6f 69 64 20 75 28 6f 2c 22 61 6e 69 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 41 6e 69 64 28 29 7d 29 29 3b 76 61 72 20 71 72 3d 6a 72 3b 66 75 6e 63 74 69 6f 6e 20 6a 72 28 65 2c 6e 29 7b 76 61 72 20 74 3d 57 74 28 6e 29 3b 6d 28 6a 72 2c 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 65 2e 73 65 72 76 69 63 65 4e 61 6d 65 26 26 28 6e 2e 73 65 72 76 69 63 65 4e 61 6d 65 3d 65 2e 73 65 72 76 69 63 65 4e 61 6d 65 29 2c 6e 2e 67 65 74 4d 73 66 70 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 72 28 74 2c 22 4d 53 46 50 43 22 29 7d 2c 6e 2e 67 65 74 41 6e 69 64 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: nction(){return this.getMsfpc()}),void u(o,"anid",function(){return this.getAnid()}));var qr=jr;function jr(e,n){var t=Wt(n);m(jr,this,function(n){e.serviceName&&(n.serviceName=e.serviceName),n.getMsfpc=function(){return sr(t,"MSFPC")},n.getAnid=function(

Timestamp	kBytes transferred	Direction	Data
2023-06-19 13:22:52 UTC	142	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_xs4q-enqjizb-pd0ha63sw2.css HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-06-19 13:22:52 UTC	142	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2746527 Cache-Control: public, max-age=31536000 Content-MD5: 51nXYTkRfeACFNqVw7bA7Q== Content-Type: text/css Date: Mon, 19 Jun 2023 13:22:52 GMT Etag: 0x8DB57106C9FE01F Last-Modified: Wed, 17 May 2023 19:53:45 GMT Server: ECAcc (muc/330B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 77bc699d-301e-0099-11b6-8940ca000000 x-ms-version: 2009-09-19 Content-Length: 111100 Connection: close
2023-06-19 13:22:52 UTC	143	IN	Data Raw: 2f 2a 21 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2a 2f 2f 2a 21 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 Data Ascii: /! Copyright (C) Microsoft Corporation. All rights reserved. //*!------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------This file is based on or incorporates material from the projects listed
2023-06-19 13:22:52 UTC	159	IN	Data Raw: 73 Data Ascii: s
2023-06-19 13:22:52 UTC	159	IN	Data Raw: 2d 31 2c 2e 63 6f 6c 2d 78 73 2d 32 2c 2e 63 6f 6c 2d 78 73 2d 33 2c 2e 63 6f 6c 2d 78 73 2d 34 2c 2e 63 6f 6c 2d 78 73 2d 35 2c 2e 63 6f 6c 2d 78 73 2d 36 2c 2e 63 6f 6c 2d 78 73 2d 37 2c 2e 63 6f 6c 2d 78 73 2d 38 2c 2e 63 6f 6c 2d 78 73 2d 39 2c 2e 63 6f 6c 2d 78 73 2d 31 30 2c 2e 63 6f 6c 2d 78 73 2d 31 31 2c 2e 63 6f 6c 2d 78 73 2d 31 32 2c 2e 63 6f 6c 2d 78 73 2d 31 33 2c 2e 63 6f 6c 2d 78 73 2d 31 34 2c 2e 63 6f 6c 2d 78 73 2d 31 35 2c 2e 63 6f 6c 2d 78 73 2d 31 36 2c 2e 63 6f 6c 2d 78 73 2d 31 37 2c 2e 63 6f 6c 2d 78 73 2d 31 38 2c 2e 63 6f 6c 2d 78 73 2d 31 39 2c 2e 63 6f 6c 2d 78 73 2d 32 30 2c 2e 63 6f 6c 2d 78 73 2d 32 31 2c 2e 63 6f 6c 2d 78 73 2d 32 32 2c 2e 63 6f 6c 2d 78 73 2d 32 33 2c 2e 63 6f 6c 2d 78 73 2d 32 34 7b 66 6c 6f 61 74 3a 6c Data Ascii: -1,.col-xs-2,.col-xs-3,.col-xs-4,.col-xs-5,.col-xs-6,.col-xs-7,.col-xs-8,.col-xs-9,.col-xs-10,.col-xs-11,.col-xs-12,.col-xs-13,.col-xs-14,.col-xs-15,.col-xs-16,.col-xs-17,.col-xs-18,.col-xs-19,.col-xs-20,.col-xs-21,.col-xs-22,.col-xs-23,.col-xs-24{float:l
2023-06-19 13:22:52 UTC	175	IN	Data Raw: 67 69 6e 2d 6c 65 66 74 3a 39 35 2e 38 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 32 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 30 25 7d 7d 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 62 6f 72 64 65 72 3a 30 3b 6d 69 6e 2d 77 69 64 74 68 3a 30 7d 6c 65 67 65 6e 64 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 30 7d 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 65 61 72 63 68 22 5d 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f Data Ascii: gin-left:95.83333%}.col-xl-offset-24{margin-left:100%}}fieldset{padding:0;margin:0;border:0;min-width:0}legend{display:block;width:100%;padding:0;border:0}label{display:inline-block;max-width:100%}input[type="search"]{-webkit-box-sizing:border-box;-moz-bo
2023-06-19 13:22:52 UTC	191	IN	Data Raw: 6c 6f 77 2d 78 3a 61 75 74 6f 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 2e 30 31 25 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 35 33 39 70 78 29 7b 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 68 69 64 64 65 6e 3b 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 3a 2d 6d 73 2d 61 75 74 6f 68 69 64 69 6e 67 2d 73 63 72 6f 6c 6c 62 61 72 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 68 2c 2e 74 61 62 Data Ascii: low-x:auto;min-height:.01%}@media screen and (max-width:539px){.table-responsive{width:100%;margin-bottom:15px;overflow-y:hidden;-ms-overflow-style:-ms-autohiding-scrollbar}.table-responsive>.table{margin-bottom:0}.table-responsive>.table>thead>tr>th,.tab
2023-06-19 13:22:52 UTC	207	IN	Data Raw: 49 22 2c Data Ascii: I",
2023-06-19 13:22:52 UTC	207	IN	Data Raw: 22 54 75 6e 67 61 22 2c 22 4c 61 6f 20 55 49 22 2c 22 52 61 61 76 69 22 2c 22 49 73 6b 6f 6f 6c 61 20 50 6f 74 61 22 2c 22 4c 61 74 68 61 22 2c 22 4c 65 65 6c 61 77 61 64 65 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 61 48 65 69 20 55 49 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4a 68 65 6e 67 48 65 69 20 55 49 22 2c 22 4d 61 6c 67 75 6e 20 47 6f 74 68 69 63 22 2c 22 45 73 74 72 61 6e 67 65 6c 6f 20 45 64 65 73 73 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 48 69 6d 61 6c 61 79 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4e 65 77 20 54 61 69 20 4c 75 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 50 68 61 67 73 50 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 54 61 69 20 4c 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 69 20 42 61 69 74 69 22 2c 22 4d 6f 6e 67 6f 6c 69 Data Ascii: "Tunga","Lao UI","Raavi","Iskoola Pota","Latha","Leelawadee","Microsoft YaHei UI","Microsoft JhengHei UI","Malgun Gothic","Estrangelo Edessa","Microsoft Himalaya","Microsoft New Tai Lue","Microsoft PhagsPa","Microsoft Tai Le","Microsoft Yi Baiti","Mongoli
2023-06-19 13:22:52 UTC	223	IN	Data Raw: 61 72 79 3a 61 63 74 69 76 65 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 61 63 74 69 76 65 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 65 73 65 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 61 63 74 69 76 65 7b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 39 38 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 39 38 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 39 38 29 7d 2e 62 75 74 74 6f 6e 2e 73 65 63 6f 6e 64 61 72 79 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 69 6e 2d 77 69 64 74 68 3a 31 30 30 70 78 3b 70 Data Ascii: ary:active,input[type="submit"].btn-primary:active,input[type="reset"].btn-primary:active{outline:none;text-decoration:none;-ms-transform:scale(.98);-webkit-transform:scale(.98);transform:scale(.98)}.button.secondary{display:inline-block;min-width:100px;p
2023-06-19 13:22:52 UTC	239	IN	Data Raw: 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 39 33 37 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 35 72 65 6d 7d 2e 74 65 78 74 2d 74 69 74 6c 65 20 70 2c 2e 63 75 73 74 6f 6d 2d 64 65 73 63 72 69 70 74 69 6f 6e 20 70 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 73 65 63 6f 6e 64 61 72 79 2d 74 65 78 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 35 72 65 6d 7d 2e 61 6c 65 72 74 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 7d 2e 61 6c 65 72 74 2e 61 6c 65 72 74 2d 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 32 70 78 7d 2e 61 6c 65 72 74 2d 67 72 6f 75 70 2d 74 6f 70 7b 6d Data Ascii: 0;margin-bottom:0;font-size:.9375rem;line-height:1.25rem}.text-title p,.custom-description p{margin-top:0;margin-bottom:0}.secondary-text{font-size:.85rem}.alert{margin-bottom:0;margin-top:0}.alert.alert-margin-bottom{margin-bottom:12px}.alert-group-top{m

Timestamp	kBytes transferred	Direction	Data
2023-06-19 13:23:15 UTC	1765	OUT	GET /images/favicon.ico?v=2 HTTP/1.1 Host: acctcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-06-19 13:23:15 UTC	1766	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 353052 Cache-Control: public, max-age=604800 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Content-Type: image/x-icon Date: Mon, 19 Jun 2023 13:23:15 GMT Etag: 0x8DB6D5DC5EA1F69 Last-Modified: Thu, 15 Jun 2023 05:02:52 GMT Server: ECAcc (muc/3349) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: eae8e421-a01e-0059-7f7b-9f442d000000 x-ms-version: 2009-09-19 Content-Length: 17174 Connection: close
2023-06-19 13:23:15 UTC	1766	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2023-06-19 13:23:15 UTC	1782	IN	Data Raw: 01 80 00 00 01 80 00 28 00 00 00 18 00 00 00 30 00 00 00 01 00 04 00 00 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 Data Ascii: (0"P""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330