Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Sep 27 20:53:41 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Sep 27 20:53:41 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Sep 27 20:53:40 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Sep 27 20:53:41 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Sep 27 20:53:40 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
|
Chrome Cache Entry: 154
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
|
dropped
|
||
|
Chrome Cache Entry: 155
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 190152
|
downloaded
|
||
|
Chrome Cache Entry: 156
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
|
dropped
|
||
|
Chrome Cache Entry: 157
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 141866
|
dropped
|
||
|
Chrome Cache Entry: 158
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
|
downloaded
|
||
|
Chrome Cache Entry: 159
|
HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 160
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 190152
|
dropped
|
||
|
Chrome Cache Entry: 161
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 449703
|
dropped
|
||
|
Chrome Cache Entry: 162
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
|
downloaded
|
||
|
Chrome Cache Entry: 163
|
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
|
downloaded
|
||
|
Chrome Cache Entry: 164
|
ASCII text, with very long lines (65439)
|
downloaded
|
||
|
Chrome Cache Entry: 165
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
|
dropped
|
||
|
Chrome Cache Entry: 166
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113401
|
downloaded
|
||
|
Chrome Cache Entry: 167
|
ASCII text, with very long lines (12836)
|
dropped
|
||
|
Chrome Cache Entry: 168
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
|
downloaded
|
||
|
Chrome Cache Entry: 169
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57443
|
dropped
|
||
|
Chrome Cache Entry: 170
|
ASCII text, with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 171
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
|
dropped
|
||
|
Chrome Cache Entry: 172
|
ASCII text, with very long lines (12836)
|
downloaded
|
||
|
Chrome Cache Entry: 173
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 90677
|
downloaded
|
||
|
Chrome Cache Entry: 174
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
|
downloaded
|
||
|
Chrome Cache Entry: 175
|
ASCII text, with very long lines (65470)
|
downloaded
|
||
|
Chrome Cache Entry: 176
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
|
downloaded
|
||
|
Chrome Cache Entry: 177
|
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
|
dropped
|
||
|
Chrome Cache Entry: 178
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57443
|
downloaded
|
||
|
Chrome Cache Entry: 179
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 644076
|
downloaded
|
||
|
Chrome Cache Entry: 180
|
ASCII text, with very long lines (65470)
|
dropped
|
||
|
Chrome Cache Entry: 181
|
ASCII text, with very long lines (65439)
|
dropped
|
||
|
Chrome Cache Entry: 182
|
SVG Scalable Vector Graphics image
|
dropped
|
||
|
Chrome Cache Entry: 183
|
ASCII text, with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 184
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 141866
|
downloaded
|
||
|
Chrome Cache Entry: 185
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
|
dropped
|
||
|
Chrome Cache Entry: 186
|
ASCII text, with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 187
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
|
dropped
|
||
|
Chrome Cache Entry: 188
|
HTML document, ASCII text, with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 189
|
GIF image data, version 89a, 352 x 3
|
dropped
|
||
|
Chrome Cache Entry: 190
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 644076
|
dropped
|
||
|
Chrome Cache Entry: 191
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 449703
|
downloaded
|
||
|
Chrome Cache Entry: 192
|
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
|
downloaded
|
||
|
Chrome Cache Entry: 193
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
|
downloaded
|
||
|
Chrome Cache Entry: 194
|
GIF image data, version 89a, 352 x 3
|
dropped
|
||
|
Chrome Cache Entry: 195
|
JSON data
|
dropped
|
||
|
Chrome Cache Entry: 196
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
|
downloaded
|
||
|
Chrome Cache Entry: 197
|
SVG Scalable Vector Graphics image
|
downloaded
|
||
|
Chrome Cache Entry: 198
|
HTML document, ASCII text, with very long lines (2625), with CRLF line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 199
|
GIF image data, version 89a, 352 x 3
|
downloaded
|
||
|
Chrome Cache Entry: 200
|
SVG Scalable Vector Graphics image
|
downloaded
|
||
|
Chrome Cache Entry: 201
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 90677
|
dropped
|
||
|
Chrome Cache Entry: 202
|
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
|
downloaded
|
||
|
Chrome Cache Entry: 203
|
JSON data
|
dropped
|
||
|
Chrome Cache Entry: 204
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
|
dropped
|
||
|
Chrome Cache Entry: 205
|
GIF image data, version 89a, 352 x 3
|
downloaded
|
||
|
Chrome Cache Entry: 206
|
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
|
dropped
|
||
|
Chrome Cache Entry: 207
|
ASCII text, with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 208
|
SVG Scalable Vector Graphics image
|
dropped
|
||
|
Chrome Cache Entry: 209
|
ASCII text, with no line terminators
|
downloaded
|
There are 53 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US
--service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=1952,i,3575760107684391540,14792378179534548501,262144
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
/prefetch:8
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2Fsubscriptions&p=bT0yNzlhNjA0ZS05MTMyLTQyNDYtYjQwOC1kZTQzOWFlMmRmNTMmcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l"
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2Fsubscriptions&p=bT0yNzlhNjA0ZS05MTMyLTQyNDYtYjQwOC1kZTQzOWFlMmRmNTMmcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l
|
|||
|
https://login.microsoftonline.com
|
unknown
|
||
|
https://logincdn.msftauth.net/shared/5/chunks/oneds-analytics-js_077217740c853b5d4fe8.js
|
152.199.21.175
|
||
|
https://logincdn.msftauth.net/shared/5/js/login_en_aPH1MdAMytMMq1WvwJPhJA2.js
|
152.199.21.175
|
||
|
https://login.windows-ppe.net
|
unknown
|
||
|
https://logincdn.msftauth.net/shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg
|
152.199.21.175
|
||
|
http://fb.me/use-check-prop-types
|
unknown
|
||
|
https://localcdn.centro-dev.com:5555/inline.bundle.js.map
|
unknown
|
||
|
https://logincdn.msftauth.net/shared/5/images/2_bc3d32a696895f78c19d.svg
|
152.199.21.175
|
||
|
https://logincdn.msftauth.net/16.000.30374.3/images/favicon.ico
|
152.199.21.175
|
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
sni1gl.wpc.alphacdn.net
|
152.199.21.175
|
||
|
s-part-0017.t-0009.t-msedge.net
|
13.107.246.45
|
||
|
sni1gl.wpc.omegacdn.net
|
152.199.21.175
|
||
|
www.google.com
|
142.250.184.196
|
||
|
s-part-0032.t-0009.t-msedge.net
|
13.107.246.60
|
||
|
nam.safelink.emails.azure.net
|
unknown
|
||
|
identity.nel.measure.office.net
|
unknown
|
||
|
aadcdn.msftauth.net
|
unknown
|
||
|
logincdn.msftauth.net
|
unknown
|
||
|
login.microsoftonline.com
|
unknown
|
||
|
fpt.live.com
|
unknown
|
||
|
account.live.com
|
unknown
|
||
|
acctcdn.msftauth.net
|
unknown
|
There are 3 hidden domains, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
13.107.246.45
|
s-part-0017.t-0009.t-msedge.net
|
United States
|
||
|
192.168.2.16
|
unknown
|
unknown
|
||
|
13.107.246.60
|
s-part-0032.t-0009.t-msedge.net
|
United States
|
||
|
142.250.184.196
|
www.google.com
|
United States
|
||
|
239.255.255.250
|
unknown
|
Reserved
|
||
|
152.199.21.175
|
sni1gl.wpc.alphacdn.net
|
United States
|
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DpWdY_La98SL5S3YBdzZjTyEiDBzCtTv9kp8Go3LkXk2orFc9lY5SKnCqDpzvW1lO-Mb8rvW_VyRZmDm2oiMRYKJ8R79xio1HHMxNJgSk4RJiYGSGozIYI6zWC7X4f0Tj6WGow_3XGKexCyWX5OLd6fQnd_gWsOwhEKJmiE0uhwirX267kB3EwtkqnZLzROCG&response_mode=form_post&nonce=638630708229418802.NGU5ZjM1OTYtODFhMy00ZjI2LWE3MDEtMWU3ZWVmMTYxYjBlMmUyMTk3YzUtNmYzOS00NDM3LWE2ZWItYjQ0NzI1YzIwOTBl&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=3d90045f-99d5-477f-8d64-6f39ea9b8305&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0
|
||
|
https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DpWdY_La98SL5S3YBdzZjTyEiDBzCtTv9kp8Go3LkXk2orFc9lY5SKnCqDpzvW1lO-Mb8rvW_VyRZmDm2oiMRYKJ8R79xio1HHMxNJgSk4RJiYGSGozIYI6zWC7X4f0Tj6WGow_3XGKexCyWX5OLd6fQnd_gWsOwhEKJmiE0uhwirX267kB3EwtkqnZLzROCG&response_mode=form_post&nonce=638630708229418802.NGU5ZjM1OTYtODFhMy00ZjI2LWE3MDEtMWU3ZWVmMTYxYjBlMmUyMTk3YzUtNmYzOS00NDM3LWE2ZWItYjQ0NzI1YzIwOTBl&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=3d90045f-99d5-477f-8d64-6f39ea9b8305&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0&sso_reload=true
|
||
|
https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000006-0000-0ff1-ce00-000000000000&response_type=code%20id_token&scope=openid%20profile&state=OpenIdConnect.AuthenticationProperties%3DpWdY_La98SL5S3YBdzZjTyEiDBzCtTv9kp8Go3LkXk2orFc9lY5SKnCqDpzvW1lO-Mb8rvW_VyRZmDm2oiMRYKJ8R79xio1HHMxNJgSk4RJiYGSGozIYI6zWC7X4f0Tj6WGow_3XGKexCyWX5OLd6fQnd_gWsOwhEKJmiE0uhwirX267kB3EwtkqnZLzROCG&response_mode=form_post&nonce=638630708229418802.NGU5ZjM1OTYtODFhMy00ZjI2LWE3MDEtMWU3ZWVmMTYxYjBlMmUyMTk3YzUtNmYzOS00NDM3LWE2ZWItYjQ0NzI1YzIwOTBl&redirect_uri=https%3A%2F%2Fadmin.microsoft.com%2Flanding&ui_locales=en-US&mkt=en-US&client-request-id=3d90045f-99d5-477f-8d64-6f39ea9b8305&x-client-SKU=ID_NET472&x-client-ver=7.6.2.0&sso_reload=true
|
||
|
https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAAjZIxjNtUHMbt5C53F5U2ahHqeBIdEJDk2c45zkmHRGI358SOL7FTx5aQlcb2-cX2ez773SXxUkE7sCDdhjg2xi5UXUBMzDd1gKUTCyo6qQgxVWLhoi6MfMOnT_p_y1_fr7zVrPE1tgY-LDI1Zv8eeCu-uvYq8H2mOvPW6T9Kb5crzsb5wa_fPOp-5eLW1bePNy_oHSeCZ15thuOn9PsBIUm2X69P3RiiWgxnKc6wT9bXejRFLkTHP9L0C5r-g6YvCpseqo71p4WM5wSeA00gsGyrwQgCYGuD7njPnquMZlhEE-8H6goAey6ziilxqigR1RxztvkgVg1rac3bkRqPV6oRclY-JoPYyjUdgIGoctd91jZlYs2HYJDLjJXLC81oRy8Lt7RPT0nArg2nMPf-Luz4OI2dBGfkoviK1hIPyW4HI-TNSG1d8xCBsymBGB2lOPFSAr3sIDFdy1GmLUFX9nTOaru5PTdWEhTbeYcYZ60wEbqYU8JJyOL0_qwVWXt6H3VOxCQ_M5lIq6oPhfTMdB6sRnYsxiyG6sjq94RRs7WEmDk8VJeD3rEeNkY9aHX1Ls5lS-Zzs9OcNHxgzHmzixcON-n2vWVnZU72NMXl_SFynWMz0xaB1O_FUAKnwQKmE5Zvhm1OWpDwBNlKPtI63efF0vU6MUaXxZvXTyHo7iYp9mHkvdigrzbe296qlO4WdqkP3gXF_e3tcoW6S-1Sbzbo7zaveWCa_3z2-us70u
|
||
|
https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAAjZIxjNtUHMbt5C53F5U2ahHqeBIdEJDk2c45zkmHRGI358SOL7FTx5aQlcb2-cX2ez773SXxUkE7sCDdhjg2xi5UXUBMzDd1gKUTCyo6qQgxVWLhoi6MfMOnT_p_y1_fr7zVrPE1tgY-LDI1Zv8eeCu-uvYq8H2mOvPW6T9Kb5crzsb5wa_fPOp-5eLW1bePNy_oHSeCZ15thuOn9PsBIUm2X69P3RiiWgxnKc6wT9bXejRFLkTHP9L0C5r-g6YvCpseqo71p4WM5wSeA00gsGyrwQgCYGuD7njPnquMZlhEE-8H6goAey6ziilxqigR1RxztvkgVg1rac3bkRqPV6oRclY-JoPYyjUdgIGoctd91jZlYs2HYJDLjJXLC81oRy8Lt7RPT0nArg2nMPf-Luz4OI2dBGfkoviK1hIPyW4HI-TNSG1d8xCBsymBGB2lOPFSAr3sIDFdy1GmLUFX9nTOaru5PTdWEhTbeYcYZ60wEbqYU8JJyOL0_qwVWXt6H3VOxCQ_M5lIq6oPhfTMdB6sRnYsxiyG6sjq94RRs7WEmDk8VJeD3rEeNkY9aHX1Ls5lS-Zzs9OcNHxgzHmzixcON-n2vWVnZU72NMXl_SFynWMz0xaB1O_FUAKnwQKmE5Zvhm1OWpDwBNlKPtI63efF0vU6MUaXxZvXTyHo7iYp9mHkvdigrzbe296qlO4WdqkP3gXF_e3tcoW6S-1Sbzbo7zaveWCa_3z2-us70u
|
||
|
https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAAjZIxjNtUHMbt5C53F5U2ahHqeBIdEJDk2c45zkmHRGI358SOL7FTx5aQlcb2-cX2ez773SXxUkE7sCDdhjg2xi5UXUBMzDd1gKUTCyo6qQgxVWLhoi6MfMOnT_p_y1_fr7zVrPE1tgY-LDI1Zv8eeCu-uvYq8H2mOvPW6T9Kb5crzsb5wa_fPOp-5eLW1bePNy_oHSeCZ15thuOn9PsBIUm2X69P3RiiWgxnKc6wT9bXejRFLkTHP9L0C5r-g6YvCpseqo71p4WM5wSeA00gsGyrwQgCYGuD7njPnquMZlhEE-8H6goAey6ziilxqigR1RxztvkgVg1rac3bkRqPV6oRclY-JoPYyjUdgIGoctd91jZlYs2HYJDLjJXLC81oRy8Lt7RPT0nArg2nMPf-Luz4OI2dBGfkoviK1hIPyW4HI-TNSG1d8xCBsymBGB2lOPFSAr3sIDFdy1GmLUFX9nTOaru5PTdWEhTbeYcYZ60wEbqYU8JJyOL0_qwVWXt6H3VOxCQ_M5lIq6oPhfTMdB6sRnYsxiyG6sjq94RRs7WEmDk8VJeD3rEeNkY9aHX1Ls5lS-Zzs9OcNHxgzHmzixcON-n2vWVnZU72NMXl_SFynWMz0xaB1O_FUAKnwQKmE5Zvhm1OWpDwBNlKPtI63efF0vU6MUaXxZvXTyHo7iYp9mHkvdigrzbe296qlO4WdqkP3gXF_e3tcoW6S-1Sbzbo7zaveWCa_3z2-us70u
|
||
|
https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAAjZIxjNtUHMbt5C53F5U2ahHqeBIdEJDk2c45zkmHRGI358SOL7FTx5aQlcb2-cX2ez773SXxUkE7sCDdhjg2xi5UXUBMzDd1gKUTCyo6qQgxVWLhoi6MfMOnT_p_y1_fr7zVrPE1tgY-LDI1Zv8eeCu-uvYq8H2mOvPW6T9Kb5crzsb5wa_fPOp-5eLW1bePNy_oHSeCZ15thuOn9PsBIUm2X69P3RiiWgxnKc6wT9bXejRFLkTHP9L0C5r-g6YvCpseqo71p4WM5wSeA00gsGyrwQgCYGuD7njPnquMZlhEE-8H6goAey6ziilxqigR1RxztvkgVg1rac3bkRqPV6oRclY-JoPYyjUdgIGoctd91jZlYs2HYJDLjJXLC81oRy8Lt7RPT0nArg2nMPf-Luz4OI2dBGfkoviK1hIPyW4HI-TNSG1d8xCBsymBGB2lOPFSAr3sIDFdy1GmLUFX9nTOaru5PTdWEhTbeYcYZ60wEbqYU8JJyOL0_qwVWXt6H3VOxCQ_M5lIq6oPhfTMdB6sRnYsxiyG6sjq94RRs7WEmDk8VJeD3rEeNkY9aHX1Ls5lS-Zzs9OcNHxgzHmzixcON-n2vWVnZU72NMXl_SFynWMz0xaB1O_FUAKnwQKmE5Zvhm1OWpDwBNlKPtI63efF0vU6MUaXxZvXTyHo7iYp9mHkvdigrzbe296qlO4WdqkP3gXF_e3tcoW6S-1Sbzbo7zaveWCa_3z2-us70u
|
||
|
https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAAjZIxjNtUHMbt5C53F5U2ahHqeBIdEJDk2c45zkmHRGI358SOL7FTx5aQlcb2-cX2ez773SXxUkE7sCDdhjg2xi5UXUBMzDd1gKUTCyo6qQgxVWLhoi6MfMOnT_p_y1_fr7zVrPE1tgY-LDI1Zv8eeCu-uvYq8H2mOvPW6T9Kb5crzsb5wa_fPOp-5eLW1bePNy_oHSeCZ15thuOn9PsBIUm2X69P3RiiWgxnKc6wT9bXejRFLkTHP9L0C5r-g6YvCpseqo71p4WM5wSeA00gsGyrwQgCYGuD7njPnquMZlhEE-8H6goAey6ziilxqigR1RxztvkgVg1rac3bkRqPV6oRclY-JoPYyjUdgIGoctd91jZlYs2HYJDLjJXLC81oRy8Lt7RPT0nArg2nMPf-Luz4OI2dBGfkoviK1hIPyW4HI-TNSG1d8xCBsymBGB2lOPFSAr3sIDFdy1GmLUFX9nTOaru5PTdWEhTbeYcYZ60wEbqYU8JJyOL0_qwVWXt6H3VOxCQ_M5lIq6oPhfTMdB6sRnYsxiyG6sjq94RRs7WEmDk8VJeD3rEeNkY9aHX1Ls5lS-Zzs9OcNHxgzHmzixcON-n2vWVnZU72NMXl_SFynWMz0xaB1O_FUAKnwQKmE5Zvhm1OWpDwBNlKPtI63efF0vU6MUaXxZvXTyHo7iYp9mHkvdigrzbe296qlO4WdqkP3gXF_e3tcoW6S-1Sbzbo7zaveWCa_3z2-us70u
|
||
|
https://login.live.com/ppsecure/post.srf?mkt=en-US&username=cheese1&client_id=51483342-085c-4d86-bf88-cf50c7252078&contextid=78E186C1D25663E1&opid=7ED6D70942355491&bk=1727474117&uaid=3d90045f99d5477f8d646f39ea9b8305&pid=15216
|
||
|
https://login.live.com/ppsecure/post.srf?mkt=en-US&username=cheese1&client_id=51483342-085c-4d86-bf88-cf50c7252078&contextid=78E186C1D25663E1&opid=7ED6D70942355491&bk=1727474117&uaid=3d90045f99d5477f8d646f39ea9b8305&pid=15216
|
||
|
https://login.live.com/ppsecure/post.srf?mkt=en-US&username=cheese1&client_id=51483342-085c-4d86-bf88-cf50c7252078&contextid=78E186C1D25663E1&opid=7ED6D70942355491&bk=1727474117&uaid=3d90045f99d5477f8d646f39ea9b8305&pid=15216
|
||
|
https://account.live.com/ResetPassword.aspx?wreply=https://login.live.com/oauth20_authorize.srf%3fusername%3dcheese1%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3den-US%26username%3dcheese1%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26uaid%3d3d90045f99d5477f8d646f39ea9b8305%26contextid%3d78E186C1D25663E1%26opid%3d7ED6D70942355491%26bk%3d1727474130&id=293577&uiflavor=web&client_id=1E00004417ACAE&uaid=3d90045f99d5477f8d646f39ea9b8305&mkt=EN-US&lc=1033&bk=1727474130
|
There are 2 hidden doms, click here to show them.