Edit tour

Windows Analysis Report
https://nassistenza-online.209-74-64-227.cprapid.com/

Overview

General Information

Sample URL:	https://nassistenza-online.209-74-64-227.cprapid.com/
Analysis ID:	1525996
Tags:	urlscan
Infos:

Detection

Phisher

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected Phisher

HTML body with high number of embedded images detected

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1376 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2328 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 --field-trial-handle=1948,i,10456648438625575124,8140751002299283661,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 732 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6336 --field-trial-handle=1948,i,10456648438625575124,8140751002299283661,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3696 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6660 --field-trial-handle=1948,i,10456648438625575124,8140751002299283661,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5432 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://nassistenza-online.209-74-64-227.cprapid.com/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_551	JoeSecurity_Phisher_2	Yara detected Phisher	Joe Security

HTTP traffic detected: POST /youtubei/v1/player?prettyPrint=false HTTP/1.1Host: www.youtube.comConnection: keep-aliveContent-Length: 3301sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Youtube-Bootstrap-Logged-In: falsesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonX-Youtube-Client-Name: 56X-Youtube-Client-Version: 1.20241001.01.00X-Goog-Visitor-Id: CgthV3JIdHVNSFVmcyjCiIC4BjIKCgJVUxIEGgAgRg%3D%3Dsec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.youtube.comX-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlKHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/embed/5FrhtahQiRc?autoplay=1&enablejsapi=1&origin=https://www.bing.com&rel=0&mute=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=A6waU8Y0Qqg; VISITOR_INFO1_LIVE=aWrHtuMHUfs; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgRg%3D%3D

Source: https://www.bing.com/videos/onecolumn/landing?form=Z9LH1	HTTP Parser: No favicon
Source: https://www.bing.com/videos/onecolumn/landing?form=Z9LH1	HTTP Parser: No favicon
Source: https://www.bing.com/videos/onecolumn/landing?form=Z9LH1	HTTP Parser: No favicon
Source: https://www.bing.com/videos/onecolumn/landing?form=Z9LH1	HTTP Parser: No favicon
Source: https://www.bing.com/videos/onecolumn/landing?form=Z9LH1	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.8:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.8:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.8:50455 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.8:51230 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_744.2.dr, chromecache_571.2.dr	String found in binary or memory: (g.sk(c,"redirector.googlevideo.com"),d=c.toString()):c.j.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.sk(c,"www.youtube.com"),d=c.toString()):(c=nwa(d),xE(c)&&(d=c));c=new g.kM(d);c.set("cmo=pf","1");e&&c.set("cmo=td","a1.googlevideo.com");return c}; equals www.youtube.com (Youtube)
Source: chromecache_744.2.dr, chromecache_571.2.dr	String found in binary or memory: 0?"http":"https";this.Ca=wE((b?b.customBaseYoutubeUrl:a.BASE_YT_URL)\|\|"")\|\|wE(this.nf)\|\|this.protocol+"://www.youtube.com/";h=b?b.eventLabel:a.el;d="detailpage";h==="adunit"?d=this.D?"embedded":"detailpage":h==="embedded"\|\|this.N?d=xs(d,h,MJa):h&&(d="embedded");this.Ja=d;Vqa();h=null;d=b?b.playerStyle:a.ps;f=g.Vb(NJa,d);!d\|\|f&&!this.N\|\|(h=d);this.playerStyle=h;this.K=g.Vb(NJa,this.playerStyle);this.houseBrandUserStatus=b==null?void 0:b.houseBrandUserStatus;this.qa=this.K&&this.playerStyle!=="play"&& equals www.youtube.com (Youtube)
Source: chromecache_571.2.dr	String found in binary or memory: Jo.prototype.Ia=function(){return this.C};var pna=(new Date).getTime();var ula="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),vla=/\bocr\b/;var xla=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;var abb=0,bbb=0,cbb=0;var So;g.Lo=null;g.No=!1;g.To=1;So=Symbol("SIGNAL");g.Uo={version:0,r_:0,Qm:!1,fg:void 0,Ry:void 0,Dn:void 0,KL:0,ij:void 0,Ru:void 0,ZE:!1,oP:!1,O1:function(){return!1}, equals www.youtube.com (Youtube)
Source: chromecache_571.2.dr	String found in binary or memory: RIa=function(a,b){if(!a.j["0"]){var c=new iG("0","fakesb",{video:new eG(0,0,0,void 0,void 0,"auto")});a.j["0"]=b?new CN(new g.kM("http://www.youtube.com/videoplayback"),c,"fake"):new TN(new g.kM("http://www.youtube.com/videoplayback"),c,new nN(0,0),new nN(0,0))}}; equals www.youtube.com (Youtube)
Source: chromecache_571.2.dr	String found in binary or memory: a))):this.api.U().L("enable_adb_handling_in_sabr")&&c==="BROWSER_OR_EXTENSION_ERROR"&&!d.K?(d=d.hostLanguage,a="//support.google.com/youtube/answer/3037019#zippy=%2Cupdate-your-browser-and-check-your-extensions",d&&(a=g.Vi(a,{hl:d})),this.Dd(DY(this,"BROWSER_OR_EXTENSION_ERROR",a))):this.Dd(g.BY(a.errorMessage)):this.Dd(DY(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(a=d.hostLanguage,c="//support.google.com/youtube/?p=player_error1",a&&(c=g.Vi(c, equals www.youtube.com (Youtube)
Source: chromecache_744.2.dr, chromecache_571.2.dr	String found in binary or memory: a.details.rc!=="429"?a.errorCode==="ump.spsrejectfailure"&&(e="HTML5_SPS_UMP_STATUS_REJECTED"):(e="TOO_MANY_REQUESTS",f="6");this.ea.Qf(a.errorCode,a.severity,e,RF(a.details),f)}else this.ea.publish("nonfatalerror",a),d=/^pp/.test(this.videoData.clientPlaybackNonce),this.Gd(a.errorCode,a.details),d&&a.errorCode==="manifest.net.connect"&&(a="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.Wt)(),uT(a,"manifest",function(h){b.K=!0;b.ma("pathprobe",h)},function(h){b.Gd(h.errorCode, equals www.youtube.com (Youtube)
Source: chromecache_571.2.dr	String found in binary or memory: a.ismb);this.cq?(r=a.vss_host\|\|"s.youtube.com",r==="s.youtube.com"&&(r=GP(this.Ca)\|\|"www.youtube.com")):r="video.google.com";this.Tn=r;HP(this,a,!0);this.La=new bP;g.P(this,this.La);q=b?b.innertubeApiKey:zs("",a.innertube_api_key);p=b?b.innertubeApiVersion:zs("",a.innertube_api_version);r=b?b.innertubeContextClientVersion:zs("",a.innertube_context_client_version);q=g.nr("INNERTUBE_API_KEY")\|\|q;p=g.nr("INNERTUBE_API_VERSION")\|\|p;l=g.nr("INNERTUBE_CONTEXT_CLIENT_CONFIG_INFO");m=VO(this);n=typeof this.j.c=== equals www.youtube.com (Youtube)
Source: chromecache_744.2.dr, chromecache_571.2.dr	String found in binary or memory: b=this.api.U();a=this.api.getVideoData();var c="";b.C\|\|(b=g.LP(b),b.indexOf("www.")===0&&(b=b.substring(4)),c=g.RR(a)?"Watch on YouTube Music":b==="youtube.com"?"Watch on YouTube":g.OE("Watch on $WEBSITE",{WEBSITE:b}));this.updateValue("title",c)}; equals www.youtube.com (Youtube)
Source: chromecache_1190.2.dr, chromecache_826.2.dr	String found in binary or memory: function X(a,b){this.v={};this.playerInfo={};this.videoTitle="";this.j=this.g=null;this.h=0;this.m=!1;this.l=[];this.i=null;this.A={};this.options=null;if(!a)throw Error("YouTube player element ID required.");this.id=ra(this);b=Object.assign({title:"video player",videoId:"",width:640,height:360},b\|\|{});var c=document;if(a=typeof a==="string"?c.getElementById(a):a){W.yt_embedsEnableRsaforFromIframeApi&&tb();c=a.tagName.toLowerCase()==="iframe";b.host\|\|(b.host=c?mb(a.src):"https://www.youtube.com");this.options= equals www.youtube.com (Youtube)
Source: chromecache_1190.2.dr, chromecache_826.2.dr	String found in binary or memory: function tb(){var a=new rb,b=["https://www.youtube.com"];b=b===void 0?qb:b;pa(function(c){switch(c.g){case 1:return C(c,sb(),2);case 2:if(!c.m){c.g=3;break}return C(c,Promise.all(b.map(function(d){var g;return pa(function(k){if(k.g==1)return k.l=2,C(k,navigator.permissions.query({name:"top-level-storage-access",requestedOrigin:d}),4);k.g!=2?(g=k.m,g.state==="prompt"&&a.g.push(d),k.g=0,k.l=0):(k.l=0,k.i=null,k.g=0)})})),4); equals www.youtube.com (Youtube)
Source: chromecache_744.2.dr, chromecache_571.2.dr	String found in binary or memory: g.LP=function(a){a=GP(a.Ca);return a==="www.youtube-nocookie.com"?"www.youtube.com":a}; equals www.youtube.com (Youtube)
Source: chromecache_744.2.dr, chromecache_571.2.dr	String found in binary or memory: g.YP=function(a){var b=g.LP(a);XJa.includes(b)&&(b="www.youtube.com");return a.protocol+"://"+b}; equals www.youtube.com (Youtube)
Source: chromecache_571.2.dr	String found in binary or memory: g.k.getVideoUrl=function(a,b,c,d,e,f,h){b={list:b};c&&(e?b.time_continue=c:b.t=c);c=h?"music.youtube.com":g.LP(this);e=c==="www.youtube.com";!f&&d&&e?f="https://youtu.be/"+a:g.CP(this)?(f="https://"+c+"/fire",b.v=a):(f&&e?(f=this.protocol+"://"+c+"/shorts/"+a,d&&(b.feature="share")):(f=this.protocol+"://"+c+"/watch",b.v=a),ou&&(a=fna())&&(b.ebc=a));return g.Vi(f,b)}; equals www.youtube.com (Youtube)
Source: chromecache_744.2.dr, chromecache_571.2.dr	String found in binary or memory: this.Y.Aa&&(a.authuser=this.Y.Aa);this.Y.pageId&&(a.pageid=this.Y.pageId);isNaN(this.cryptoPeriodIndex)\|\|(a.cpi=this.cryptoPeriodIndex.toString());var e=(e=/_(TV\|STB\|GAME\|OTT\|ATV\|BDP)_/.exec(g.Bb()))?e[1]:"";e==="ATV"&&(a.cdt=e);this.G=a;this.G.session_id=d;this.oa=!0;this.B.flavor==="widevine"&&(this.G.hdr="1");this.B.flavor==="playready"&&(b=Number(XO(b.experiments,"playready_first_play_expiration")),!isNaN(b)&&b>=0&&(this.G.mfpe=""+b),this.oa=!1);b="";g.zO(this.B)?yO(this.B)?(d=c.B)&&(b="https://www.youtube.com/api/drm/fps?ek="+ equals www.youtube.com (Youtube)
Source: chromecache_744.2.dr, chromecache_571.2.dr	String found in binary or memory: var Q2={};var beb={Gs:[{Fs:/Unable to load player module/,weight:20},{Fs:/Failed to fetch/,weight:500},{Fs:/XHR API fetch failed/,weight:10},{Fs:/JSON parsing failed after XHR fetch/,weight:10},{Fs:/Retrying OnePlatform request/,weight:10},{Fs:/CSN Missing or undefined during playback association/,weight:100},{Fs:/Non-recoverable error. Do not retry./,weight:0},{Fs:/Internal Error. Retry with an exponential backoff./,weight:0},{Fs:/API disabled by application./,weight:0}],Mr:[{callback:U7a,weight:500}]};var g8a=/[&\?]action_proxy=1/,f8a=/[&\?]token=([\w-])/,h8a=/[&\?]video_id=([\w-])/,i8a=/[&\?]index=([\d-])/,j8a=/[&\?]m_pos_ms=([\d-])/,l8a=/[&\?]vvt=([\w-]*)/,Y7a="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),k8a="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "),a8a={android:"ANDROID", equals www.youtube.com (Youtube)
Source: chromecache_434.2.dr	String found in binary or memory: var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/96d06116\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"}; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: nassistenza-online.209-74-64-227.cprapid.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: aefd.nelreports.net
Source: global traffic	DNS traffic detected: DNS query: assets.msn.com
Source: global traffic	DNS traffic detected: DNS query: www.msn.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: browser.events.data.msn.com
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: tse1.mm.bing.net
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: c.msn.com
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: static.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: yt3.ggpht.com
Source: global traffic	DNS traffic detected: DNS query: rr1---sn-ab5sznze.googlevideo.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: t.ssl.ak.dynamic.tiles.virtualearth.net
Source: global traffic	DNS traffic detected: DNS query: t.ssl.ak.tiles.virtualearth.net

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 --field-trial-handle=1948,i,10456648438625575124,8140751002299283661,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://nassistenza-online.209-74-64-227.cprapid.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6336 --field-trial-handle=1948,i,10456648438625575124,8140751002299283661,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6660 --field-trial-handle=1948,i,10456648438625575124,8140751002299283661,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 --field-trial-handle=1948,i,10456648438625575124,8140751002299283661,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6336 --field-trial-handle=1948,i,10456648438625575124,8140751002299283661,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6660 --field-trial-handle=1948,i,10456648438625575124,8140751002299283661,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	0%	URL Reputation	safe
https://admin.youtube.com	0%	URL Reputation	safe
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	0%	URL Reputation	safe
https://yurt.corp.google.com	0%	URL Reputation	safe
http://tools.ietf.org/html/rfc1950	0%	URL Reputation	safe
https://support.google.com/youtube/?p=report_playback	0%	URL Reputation	safe
https://angular.dev/license	0%	URL Reputation	safe
https://developers.google.com/youtube/iframe_api_reference#Events	0%	URL Reputation	safe
https://youtu.be/	0%	URL Reputation	safe
https://login.microsoftonline.com	0%	URL Reputation	safe
https://reactjs.org/docs/error-decoder.html?invariant=	0%	URL Reputation	safe
https://i.ytimg.com/vi/	0%	URL Reputation	safe

IP	Domain	Country	ASN	ASN Name	Malicious
216.58.212.142	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.185.102	unknown	United States	15169	GOOGLEUS	false
74.125.172.198	rr1.sn-ab5sznze.googlevideo.com	United States	15169	GOOGLEUS	false
142.250.184.225	unknown	United States	15169	GOOGLEUS	false
142.250.186.36	www.google.com	United States	15169	GOOGLEUS	false
142.250.184.194	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.185.110	unknown	United States	15169	GOOGLEUS	false
13.107.253.72	s-part-0044.t-0009.fb-t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.186.142	unknown	United States	15169	GOOGLEUS	false
142.250.184.238	unknown	United States	15169	GOOGLEUS	false
172.217.18.14	play.google.com	United States	15169	GOOGLEUS	false
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
13.107.246.60	s-part-0032.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
216.58.206.36	unknown	United States	15169	GOOGLEUS	false
150.171.28.10	ax-0001.ax-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.186.54	i.ytimg.com	United States	15169	GOOGLEUS	false
142.250.74.196	unknown	United States	15169	GOOGLEUS	false
209.74.64.227	nassistenza-online.209-74-64-227.cprapid.com	United States	31744	MULTIBAND-NEWHOPEUS	false
150.171.27.10	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.181.225	photos-ugc.l.googleusercontent.com	United States	15169	GOOGLEUS	false
142.250.185.130	unknown	United States	15169	GOOGLEUS	false
142.250.186.166	static.doubleclick.net	United States	15169	GOOGLEUS	false
172.217.18.22	unknown	United States	15169	GOOGLEUS	false

IP
192.168.2.8
192.168.2.7
192.168.2.11
192.168.2.12

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1525996
Start date and time:	2024-10-04 17:03:33 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 47s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://nassistenza-online.209-74-64-227.cprapid.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@35/1218@84/29
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.bing.com/chat?q=Microsoft+Copilot&FORM=hpcodx Browse: https://www.bing.com/shop?FORM=Z9LHS4 Browse: https://www.bing.com/videos?FORM=Z9LH1 Browse: https://www.bing.com/maps?FORM=Z9LH2

Input	Output
URL: https://www.bing.com/?toWww=1&redig=394B4607226D4A8A80A189072AD918BF Model: jbxai	{ "brand":["Copilot"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.bing.com/videos/onecolumn/landing?form=Z9LH1 Model: jbxai	{ "brand":["Microsoft Bing"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Feedback", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.bing.com/videos/onecolumn/landing?form=Z9LH1 Model: jbxai	{ "brand":["Microsoft Bing"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Feedback", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.bing.com/videos/onecolumn/landing?form=Z9LH1 Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.bing.com/videos/onecolumn/landing?form=Z9LH1 Model: jbxai	{ "brand":["Microsoft Bing"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Feedback", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.bing.com/videos/onecolumn/landing?form=Z9LH1 Model: jbxai	{ "brand":["Microsoft Bing"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Feedback", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Name	IP	Active	Malicious	Reputation
s-part-0044.t-0009.fb-t-msedge.net	13.107.253.72	true	false	unknown
i.ytimg.com	142.250.186.54	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
rr1.sn-ab5sznze.googlevideo.com	74.125.172.198	true	false	unknown
ax-0001.ax-msedge.net	150.171.28.10	true	false	unknown
static.doubleclick.net	142.250.186.166	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
nassistenza-online.209-74-64-227.cprapid.com	209.74.64.227	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
youtube-ui.l.google.com	216.58.212.142	true	false	unknown
googleads.g.doubleclick.net	142.250.184.194	true	false	unknown
play.google.com	172.217.18.14	true	false	unknown
challenges.cloudflare.com	104.18.94.41	true	false	unknown
photos-ugc.l.googleusercontent.com	142.250.181.225	true	false	unknown
www.google.com	142.250.186.36	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
assets.msn.com	unknown	unknown	false	unknown
yt3.ggpht.com	unknown	unknown	false	unknown
www.msn.com	unknown	unknown	false	unknown
c.msn.com	unknown	unknown	false	unknown
t.ssl.ak.tiles.virtualearth.net	unknown	unknown	false	unknown
tse1.mm.bing.net	unknown	unknown	false	unknown
aefd.nelreports.net	unknown	unknown	false	unknown
t.ssl.ak.dynamic.tiles.virtualearth.net	unknown	unknown	false	unknown
rr1---sn-ab5sznze.googlevideo.com	unknown	unknown	false	unknown
login.microsoftonline.com	unknown	unknown	false	unknown
www.youtube.com	unknown	unknown	false	unknown
browser.events.data.msn.com	unknown	unknown	false	unknown

Name	Malicious	Reputation
https://yt3.ggpht.com/EmVENJLcfQVmgerwvZSR10265FZpAoF1e2i6oWex-RctEUEpwjuTokYiDK0CWjtyd3nbYAYHXA=s88-c-k-c0x00ffffff-no-rj	false	unknown
https://www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8	false	unknown
https://googleads.g.doubleclick.net/pagead/id?slf_rd=1	false	unknown
https://i.ytimg.com/vi/HYsz1hP0BFo/hqdefault.jpg	false	unknown
https://i.ytimg.com/vi_webp/Q1NTpGm22JU/maxresdefault.webp	false	unknown
https://yt3.ggpht.com/EmVENJLcfQVmgerwvZSR10265FZpAoF1e2i6oWex-RctEUEpwjuTokYiDK0CWjtyd3nbYAYHXA=s68-c-k-c0x00ffffff-no-rj	false	unknown
https://i.ytimg.com/vi/F5tSoaJ93ac/hqdefault.jpg	false	unknown
https://i.ytimg.com/vi_webp/i1IKnWDecwA/hqdefault.webp	false	unknown
https://www.youtube.com/s/player/96d06116/www-player.css	false	unknown
https://www.youtube.com/s/player/96d06116/www-embed-player.vflset/www-embed-player.js	false	unknown
https://i.ytimg.com/vi/hsffPST-x1k/hqdefault.jpg	false	unknown
https://challenges.cloudflare.com/turnstile/v0/g/ec4b873d446c/api.js	false	unknown
https://tse1.mm.bing.net/th?&id=OVP.yGKXIlRU65z_E0t1P4tm-gHgFo&w=780&h=440&c=7&pid=1.7&rs=1	false	unknown
https://i.ytimg.com/vi_webp/GuMrFy5YPI0/maxresdefault.webp	false	unknown
https://www.youtube.com/ptracking?html5=1&video_id=5FrhtahQiRc&cpn=zg_BFmy6QWz4tS58&ei=RwQAZ8mIGaq36dsP96GokQI&ptk=youtube_single&oid=YbGWGCIUCoaUePqGy_acMw&pltype=contentugc	false	unknown
https://tse1.mm.bing.net/th?&id=OVP.tyiczOEt6AWk92IIUdgV7wHgFo&w=780&h=440&c=7&pid=1.7&rs=1	false	unknown
https://www.youtube.com/s/player/96d06116/player_ias.vflset/en_US/embed.js	false	unknown
https://play.google.com/log?format=json&hasfast=true&authuser=0	false	unknown
https://i.ytimg.com/vi/xdfVomq3lAc/hqdefault.jpg	false	unknown
https://tse1.mm.bing.net/th?&id=OVF.vs4IlJ4wQEoej3uo9xl6yQ&w=780&h=440&c=7&pid=1.7&rs=1	false	unknown
https://www.google.com/js/th/KZ9qBfv2Fvj8--thF3jkrqmjFIXwxVfodGy5wvrcirQ.js	false	unknown
https://www.youtube.com/s/player/96d06116/www-widgetapi.vflset/www-widgetapi.js	false	unknown
https://yt3.ggpht.com/EmVENJLcfQVmgerwvZSR10265FZpAoF1e2i6oWex-RctEUEpwjuTokYiDK0CWjtyd3nbYAYHXA=s400-c-k-c0x00ffffff-no-rj	false	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	chromecache_744.2.dr, chromecache_571.2.dr	false	URL Reputation: safe	unknown
https://people.com/adam-lambert-honors-freddie-mercury-final-queen-show-north-american-tour-2023-840	chromecache_772.2.dr	false		unknown
https://www.delish.com/cooking/g1092/wrap-recipes/	chromecache_1145.2.dr	false		unknown
https://www.delish.com/cooking/recipe-ideas/a37826606/kabocha-squash-recipe/	chromecache_772.2.dr, chromecache_1145.2.dr	false		unknown
https://msasg.visualstudio.com/Bing_Ads/_workitems/edit/3905327	chromecache_722.2.dr, chromecache_754.2.dr	false		unknown
https://timeline.rodstewart.com/1962	chromecache_772.2.dr	false		unknown
https://www.msn.com/$	chromecache_722.2.dr, chromecache_754.2.dr	false		unknown
https://www.youtube.com	chromecache_826.2.dr, chromecache_941.2.dr, chromecache_434.2.dr	false		unknown
https://login.microsoftonline.us	chromecache_833.2.dr, chromecache_1056.2.dr	false		unknown
https://stacker.com/music/10-popular-90s-artists-tour-2024	chromecache_772.2.dr	false		unknown
https://admin.youtube.com	chromecache_744.2.dr, chromecache_571.2.dr	false	URL Reputation: safe	unknown
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	chromecache_744.2.dr, chromecache_571.2.dr	false	URL Reputation: safe	unknown
https://msasg.visualstudio.com/ContentServices/_workitems/edit/3620803	chromecache_722.2.dr, chromecache_754.2.dr	false		unknown
http://www.contoso.com/specificpage.html)	chromecache_429.2.dr	false		unknown
https://bugs.chromium.org/p/v8/issues/detail?id=4118	chromecache_504.2.dr, chromecache_418.2.dr	false		unknown
https://github.com/microsoft/clarity	chromecache_861.2.dr, chromecache_1139.2.dr	false		unknown
https://login.microsoftonline.de	chromecache_833.2.dr, chromecache_1056.2.dr	false		unknown
https://yurt.corp.google.com	chromecache_744.2.dr, chromecache_571.2.dr	false	URL Reputation: safe	unknown
https://www.delish.com/cooking/recipe-ideas/recipes/a50228/holiday-roasted-vegetables-recipe/	chromecache_772.2.dr, chromecache_1145.2.dr	false		unknown
https://www.dailymail.co.uk/tvshowbiz/article-13088077/Sir-Rod-Stewart-sells-music-catalogue-80milli	chromecache_772.2.dr	false		unknown
https://assets.msn.com/weathermapdata/1/static/weatherEplant/animation/greeting_once_cv3.gif	chromecache_730.2.dr, chromecache_672.2.dr	false		unknown
https://www.delish.com/cooking/recipe-ideas/recipes/a49850/cheesy-garlic-pull-apart-bread-recipe/	chromecache_1145.2.dr	false		unknown
https://www.imdb.com/title/tt1727824/	chromecache_772.2.dr	false		unknown
https://www.youtube.com/generate_204?cpn=	chromecache_744.2.dr, chromecache_571.2.dr	false		unknown
https://ultimateclassicrock.com/upcoming-rock-biopics-and-films/	chromecache_772.2.dr	false		unknown
https://api.msn.com/news/feed/pages/binghp?activityId=D1F995E5-05D8-4003-930C-794D86F645F7&timeOut=2	chromecache_772.2.dr, chromecache_1145.2.dr	false		unknown
https://www.delish.com/cooking/recipe-ideas/a46148640/italian-antipasto-brussels-sprouts-salad-recip	chromecache_772.2.dr, chromecache_1145.2.dr	false		unknown
https://moonandspoonandyum.com/warming-beet-pea-and-lentil-winter-soup-gluten-free-vegan/?utm_source	chromecache_1145.2.dr	false		unknown
https://www.delish.com/cooking/recipe-ideas/a41835827/parmesan-roasted-green-beans-recipe/	chromecache_1145.2.dr	false		unknown
https://www.delish.com/cooking/menus/g2761/pineapple-desserts-for-summer/	chromecache_772.2.dr, chromecache_1145.2.dr	false		unknown
https://littlebitrecipes.com/shrimp-corn-bisque/?utm_source=msn&utm_medium=page&utm_campaign=msn	chromecache_772.2.dr	false		unknown
https://www.delish.com/cooking/g1341/pasta-salad/	chromecache_772.2.dr, chromecache_1145.2.dr	false		unknown
http://tools.ietf.org/html/rfc1950	chromecache_1171.2.dr, chromecache_744.2.dr, chromecache_571.2.dr, chromecache_996.2.dr	false	URL Reputation: safe	unknown
https://dev.virtualearth.net/REST/v1/Imagery/Map/	chromecache_910.2.dr, chromecache_1155.2.dr	false		unknown
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13goyh	chromecache_772.2.dr, chromecache_1145.2.dr	false		unknown
https://www.delish.com/cooking/recipe-ideas/a37548612/roasted-turnips-recipe/	chromecache_772.2.dr, chromecache_1145.2.dr	false		unknown
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gowI	chromecache_772.2.dr, chromecache_1145.2.dr	false		unknown
https://www.delish.com/entertaining/g2360/potato-salad-recipes/	chromecache_772.2.dr, chromecache_1145.2.dr	false		unknown
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13fcaT	chromecache_772.2.dr, chromecache_1145.2.dr	false		unknown
https://support.google.com/youtube/?p=report_playback	chromecache_744.2.dr, chromecache_571.2.dr	false	URL Reputation: safe	unknown
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gowI-dark	chromecache_772.2.dr, chromecache_1145.2.dr	false		unknown
https://login.chinacloudapi.cn	chromecache_833.2.dr, chromecache_1056.2.dr	false		unknown
https://angular.dev/license	chromecache_744.2.dr, chromecache_571.2.dr	false	URL Reputation: safe	unknown
https://login.windows-ppe.net	chromecache_833.2.dr, chromecache_1056.2.dr	false		unknown
https://developers.google.com/youtube/iframe_api_reference#Events	chromecache_1190.2.dr, chromecache_826.2.dr	false	URL Reputation: safe	unknown
https://www.msn.com/en-us/news/politics/donald-trump-tries-to-blunt-democrats-momentum-in-north-caro	chromecache_772.2.dr, chromecache_1145.2.dr	false		unknown
http://youtube.com/streaming/metadata/segment/102015	chromecache_744.2.dr, chromecache_571.2.dr	false		unknown
https://www.msn.com/en-us/weather/topstories/hurricane-center-issues-warning-as-two-storms-could-mer	chromecache_1145.2.dr	false		unknown
https://youtu.be/	chromecache_744.2.dr, chromecache_571.2.dr	false	URL Reputation: safe	unknown
https://littlebitrecipes.com/navy-bean-and-ham-soup/?utm_source=msn&utm_medium=page&utm_campaign=msn	chromecache_772.2.dr	false		unknown
https://ecn.dev.virtualearth.net/REST/v1/Imagery/Map/roadondemandfull/	chromecache_672.2.dr	false		unknown
https://github.com/maplibre/maplibre-gl-js/blob/v4.5.2/LICENSE.txt	chromecache_1159.2.dr, chromecache_1152.2.dr	false		unknown
https://login.microsoftonline.com	chromecache_833.2.dr, chromecache_1056.2.dr	false	URL Reputation: safe	unknown
https://www.delish.com/cooking/recipe-ideas/g3496/fall-appetizers/	chromecache_1145.2.dr	false		unknown
https://www.msn.com/en-us/foodanddrink/recipes/15-soups-and-stews-that-are-perfect-for-chilly-evenin	chromecache_772.2.dr	false		unknown
https://www.delish.com/holiday-recipes/g248/easy-thanksgiving-side-dishes/	chromecache_772.2.dr, chromecache_1145.2.dr	false		unknown
https://www.msn.com/en-us/sports/nba/one-of-the-guys-on-their-bench-tried-to-give-larry-a-high-five-	chromecache_772.2.dr	false		unknown
https://littlebitrecipes.com/slow-cooker-vegetable-soup/?utm_source=msn&utm_medium=page&utm_campaign	chromecache_772.2.dr	false		unknown
https://www.forbes.com/advisor/?utm_source=synd&utm_medium=rss&utm_campaign=msnadvisorgallery	chromecache_1145.2.dr	false		unknown
https://youtube.com/api/drm/fps?ek=uninitialized	chromecache_571.2.dr	false		unknown
https://reactjs.org/docs/error-decoder.html?invariant=	chromecache_480.2.dr	false	URL Reputation: safe	unknown
https://docs.google.com/get_video_info	chromecache_744.2.dr, chromecache_571.2.dr	false		unknown
https://www.msn.com/en-us/lifestyle/pets/top-10-most-behaved-dog-breeds/ss-AA1psDWs	chromecache_1145.2.dr	false		unknown
https://www.delish.com/holiday-recipes/thanksgiving/	chromecache_772.2.dr, chromecache_1145.2.dr	false		unknown
https://www.msn.com/en-us/news/world/who-is-hashem-safieddine-rumored-to-be-the-next-hezbollah-chief	chromecache_772.2.dr, chromecache_1145.2.dr	false		unknown
https://savemetrust.co.uk/	chromecache_772.2.dr	false		unknown
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13goyh-dark	chromecache_772.2.dr, chromecache_1145.2.dr	false		unknown
https://bugs.chromium.org/p/v8/issues/detail?id=3056	chromecache_504.2.dr, chromecache_418.2.dr	false		unknown
https://www.msn.com/en-us/sports/mlb/mets-star-who-helped-fuel-wild-9th-inning-win-lost-his-grandmot	chromecache_772.2.dr, chromecache_1145.2.dr	false		unknown
https://stacker.com/stories	chromecache_772.2.dr, chromecache_1145.2.dr	false		unknown
http://youtube.com/drm/2012/10/10	chromecache_744.2.dr, chromecache_571.2.dr	false		unknown
https://www.msn.com/en-us/tv/news/pat-sajak-takes-a-final-spin-hosting-celebrity-wheel-of-fortune/vi	chromecache_772.2.dr, chromecache_1145.2.dr	false		unknown
https://i.ytimg.com/vi/	chromecache_744.2.dr, chromecache_571.2.dr	false	URL Reputation: safe	unknown
https://www.delish.com/cooking/g2021/fall-dessert-recipes/	chromecache_1145.2.dr	false		unknown
https://www.msn.com/en-us/weather/topstories/satellite-images-show-antarctica-is-turning-green-faste	chromecache_772.2.dr	false		unknown
https://www.delish.com/holiday-recipes/thanksgiving/g28931840/thanksgiving-ham-recipe/	chromecache_772.2.dr, chromecache_1145.2.dr	false		unknown
https://www.delish.com/holiday-recipes/thanksgiving/a55340/easy-homemade-classic-green-bean-casserol	chromecache_772.2.dr, chromecache_1145.2.dr	false		unknown

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 4 14:04:40 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9751297755142305
Encrypted:	false
SSDEEP:	48:8L0drTz/eEHOidAKZdA1oehwiZUklqehTy+3:8LYHeEsy
MD5:	1477EA8B0FF0E0FF4E283C2C8EAA1BAE
SHA1:	DEA8D8ED33487D87DF35280067E3F5525EF7A215
SHA-256:	8BEAF38B1595BA720F697655E138687F117669EDDDF8102F3EFCD9EC18245A9F
SHA-512:	D4ECD49BF6C230EBF267D6C52CE5D0E9E217A63B8B1F2A46363949EF3ECE683988B2A54D42282AC6B0986653C57844364324010AF891FDBC200CC394A09E140D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......n...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IDY.x....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VDY.x....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VDY.x....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VDY.x..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDY.x...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........).)......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 4, 2024 17:04:40.978540897 CEST	192.168.2.8	1.1.1.1	0x8213	Standard query (0)	nassistenza-online.209-74-64-227.cprapid.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:04:40.978686094 CEST	192.168.2.8	1.1.1.1	0x81f3	Standard query (0)	nassistenza-online.209-74-64-227.cprapid.com	65	IN (0x0001)	false
Oct 4, 2024 17:04:44.244942904 CEST	192.168.2.8	1.1.1.1	0x9cf1	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:04:44.245107889 CEST	192.168.2.8	1.1.1.1	0x96cd	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 4, 2024 17:04:44.388708115 CEST	192.168.2.8	1.1.1.1	0xc51	Standard query (0)	aefd.nelreports.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:04:44.389410019 CEST	192.168.2.8	1.1.1.1	0xa529	Standard query (0)	aefd.nelreports.net	65	IN (0x0001)	false
Oct 4, 2024 17:04:57.693166018 CEST	192.168.2.8	1.1.1.1	0x4e93	Standard query (0)	assets.msn.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:04:57.693658113 CEST	192.168.2.8	1.1.1.1	0xb1dd	Standard query (0)	assets.msn.com	65	IN (0x0001)	false
Oct 4, 2024 17:04:59.539983988 CEST	192.168.2.8	1.1.1.1	0xae1b	Standard query (0)	assets.msn.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:04:59.540458918 CEST	192.168.2.8	1.1.1.1	0x4e49	Standard query (0)	assets.msn.com	65	IN (0x0001)	false
Oct 4, 2024 17:05:00.913583040 CEST	192.168.2.8	1.1.1.1	0xf315	Standard query (0)	www.msn.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:05:00.913827896 CEST	192.168.2.8	1.1.1.1	0xa52e	Standard query (0)	www.msn.com	65	IN (0x0001)	false
Oct 4, 2024 17:05:02.186636925 CEST	192.168.2.8	1.1.1.1	0xf70b	Standard query (0)	www.msn.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:05:02.186786890 CEST	192.168.2.8	1.1.1.1	0xb109	Standard query (0)	www.msn.com	65	IN (0x0001)	false
Oct 4, 2024 17:05:11.216912985 CEST	192.168.2.8	1.1.1.1	0x5fc7	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:05:11.217104912 CEST	192.168.2.8	1.1.1.1	0xfcdd	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Oct 4, 2024 17:05:12.870742083 CEST	192.168.2.8	1.1.1.1	0x9e12	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:05:12.871191025 CEST	192.168.2.8	1.1.1.1	0x2471	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Oct 4, 2024 17:05:23.527302027 CEST	192.168.2.8	1.1.1.1	0xc1bd	Standard query (0)	browser.events.data.msn.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:05:23.527806997 CEST	192.168.2.8	1.1.1.1	0xe4ce	Standard query (0)	browser.events.data.msn.com	65	IN (0x0001)	false
Oct 4, 2024 17:05:33.017092943 CEST	192.168.2.8	1.1.1.1	0x5de7	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:05:33.017273903 CEST	192.168.2.8	1.1.1.1	0x2ab1	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Oct 4, 2024 17:05:37.071089029 CEST	192.168.2.8	1.1.1.1	0xf0a2	Standard query (0)	tse1.mm.bing.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:05:37.071394920 CEST	192.168.2.8	1.1.1.1	0x4443	Standard query (0)	tse1.mm.bing.net	65	IN (0x0001)	false
Oct 4, 2024 17:05:37.900264025 CEST	192.168.2.8	1.1.1.1	0x7672	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:05:37.900430918 CEST	192.168.2.8	1.1.1.1	0x25e7	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Oct 4, 2024 17:05:38.084739923 CEST	192.168.2.8	1.1.1.1	0xa1a9	Standard query (0)	c.msn.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:05:38.084917068 CEST	192.168.2.8	1.1.1.1	0xdb22	Standard query (0)	c.msn.com	65	IN (0x0001)	false
Oct 4, 2024 17:05:39.203252077 CEST	192.168.2.8	1.1.1.1	0xc181	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:05:39.203336000 CEST	192.168.2.8	1.1.1.1	0xa8f3	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Oct 4, 2024 17:05:40.881557941 CEST	192.168.2.8	1.1.1.1	0x61c	Standard query (0)	tse1.mm.bing.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:05:40.881716013 CEST	192.168.2.8	1.1.1.1	0x4be2	Standard query (0)	tse1.mm.bing.net	65	IN (0x0001)	false
Oct 4, 2024 17:05:40.919400930 CEST	192.168.2.8	1.1.1.1	0x7d6e	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:05:40.919670105 CEST	192.168.2.8	1.1.1.1	0x4fe8	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Oct 4, 2024 17:05:42.354460955 CEST	192.168.2.8	1.1.1.1	0xae75	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:05:42.354639053 CEST	192.168.2.8	1.1.1.1	0x373d	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 4, 2024 17:05:42.367255926 CEST	192.168.2.8	1.1.1.1	0xb458	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:05:42.367578983 CEST	192.168.2.8	1.1.1.1	0x1c9f	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Oct 4, 2024 17:05:42.542570114 CEST	192.168.2.8	1.1.1.1	0x2ca2	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:05:42.542752028 CEST	192.168.2.8	1.1.1.1	0xed95	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Oct 4, 2024 17:05:43.893034935 CEST	192.168.2.8	1.1.1.1	0x1eb3	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:05:43.893171072 CEST	192.168.2.8	1.1.1.1	0xf186	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 4, 2024 17:05:43.925807953 CEST	192.168.2.8	1.1.1.1	0xc58c	Standard query (0)	rr1---sn-ab5sznze.googlevideo.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:05:43.926235914 CEST	192.168.2.8	1.1.1.1	0x386c	Standard query (0)	rr1---sn-ab5sznze.googlevideo.com	65	IN (0x0001)	false
Oct 4, 2024 17:05:44.386495113 CEST	192.168.2.8	1.1.1.1	0x15b7	Standard query (0)	aefd.nelreports.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:05:44.386665106 CEST	192.168.2.8	1.1.1.1	0x1bbc	Standard query (0)	aefd.nelreports.net	65	IN (0x0001)	false
Oct 4, 2024 17:05:44.733006001 CEST	192.168.2.8	1.1.1.1	0x2464	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:05:44.733175993 CEST	192.168.2.8	1.1.1.1	0x56c	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 4, 2024 17:05:46.744488955 CEST	192.168.2.8	1.1.1.1	0x1551	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:05:46.744685888 CEST	192.168.2.8	1.1.1.1	0xa5b4	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Oct 4, 2024 17:05:47.292551994 CEST	192.168.2.8	1.1.1.1	0xb0f4	Standard query (0)	c.msn.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:05:47.292716980 CEST	192.168.2.8	1.1.1.1	0x823	Standard query (0)	c.msn.com	65	IN (0x0001)	false
Oct 4, 2024 17:05:48.073174953 CEST	192.168.2.8	1.1.1.1	0xbbdc	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:05:48.073246956 CEST	192.168.2.8	1.1.1.1	0xdc3b	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Oct 4, 2024 17:05:48.074673891 CEST	192.168.2.8	1.1.1.1	0x569e	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:05:48.074831009 CEST	192.168.2.8	1.1.1.1	0xa3bd	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Oct 4, 2024 17:05:48.245691061 CEST	192.168.2.8	1.1.1.1	0x1504	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:05:48.247404099 CEST	192.168.2.8	1.1.1.1	0xe130	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 4, 2024 17:05:49.999631882 CEST	192.168.2.8	1.1.1.1	0x5fb2	Standard query (0)	rr1---sn-ab5sznze.googlevideo.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:05:49.999783993 CEST	192.168.2.8	1.1.1.1	0xba64	Standard query (0)	rr1---sn-ab5sznze.googlevideo.com	65	IN (0x0001)	false
Oct 4, 2024 17:05:50.104911089 CEST	192.168.2.8	1.1.1.1	0xf03c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:05:50.105242968 CEST	192.168.2.8	1.1.1.1	0xfdb9	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 4, 2024 17:05:53.419261932 CEST	192.168.2.8	1.1.1.1	0xd18a	Standard query (0)	t.ssl.ak.dynamic.tiles.virtualearth.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:05:53.419646978 CEST	192.168.2.8	1.1.1.1	0x465b	Standard query (0)	t.ssl.ak.dynamic.tiles.virtualearth.net	65	IN (0x0001)	false
Oct 4, 2024 17:05:53.421386003 CEST	192.168.2.8	1.1.1.1	0x3a62	Standard query (0)	t.ssl.ak.tiles.virtualearth.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:05:53.421681881 CEST	192.168.2.8	1.1.1.1	0x5dd8	Standard query (0)	t.ssl.ak.tiles.virtualearth.net	65	IN (0x0001)	false
Oct 4, 2024 17:05:53.502116919 CEST	192.168.2.8	1.1.1.1	0xfcc0	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:05:53.502620935 CEST	192.168.2.8	1.1.1.1	0x36c5	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 4, 2024 17:05:59.801192999 CEST	192.168.2.8	1.1.1.1	0xaefe	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:05:59.803617954 CEST	192.168.2.8	1.1.1.1	0x2c33	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Oct 4, 2024 17:05:59.815916061 CEST	192.168.2.8	1.1.1.1	0xf697	Standard query (0)	assets.msn.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:05:59.817014933 CEST	192.168.2.8	1.1.1.1	0x9fff	Standard query (0)	assets.msn.com	65	IN (0x0001)	false
Oct 4, 2024 17:06:02.166495085 CEST	192.168.2.8	1.1.1.1	0x2c4f	Standard query (0)	assets.msn.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:06:02.168407917 CEST	192.168.2.8	1.1.1.1	0xcf85	Standard query (0)	assets.msn.com	65	IN (0x0001)	false
Oct 4, 2024 17:06:02.272336960 CEST	192.168.2.8	1.1.1.1	0xa56c	Standard query (0)	assets.msn.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:06:02.274296999 CEST	192.168.2.8	1.1.1.1	0x9de3	Standard query (0)	assets.msn.com	65	IN (0x0001)	false
Oct 4, 2024 17:06:02.425112009 CEST	192.168.2.8	1.1.1.1	0x3ac6	Standard query (0)	assets.msn.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:06:09.417421103 CEST	192.168.2.8	1.1.1.1	0xc5d4	Standard query (0)	t.ssl.ak.dynamic.tiles.virtualearth.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:06:09.417792082 CEST	192.168.2.8	1.1.1.1	0x6e76	Standard query (0)	t.ssl.ak.dynamic.tiles.virtualearth.net	65	IN (0x0001)	false
Oct 4, 2024 17:06:10.263772011 CEST	192.168.2.8	1.1.1.1	0x9144	Standard query (0)	www.msn.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:06:10.263772011 CEST	192.168.2.8	1.1.1.1	0x3b25	Standard query (0)	www.msn.com	65	IN (0x0001)	false
Oct 4, 2024 17:06:20.341428041 CEST	192.168.2.8	1.1.1.1	0x6476	Standard query (0)	assets.msn.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:06:23.231291056 CEST	192.168.2.8	1.1.1.1	0xc407	Standard query (0)	www.msn.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 17:06:23.231714010 CEST	192.168.2.8	1.1.1.1	0xbf34	Standard query (0)	www.msn.com	65	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:04:41 UTC	687	OUT	GET / HTTP/1.1 Host: nassistenza-online.209-74-64-227.cprapid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 15:04:42 UTC	182	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:04:41 GMT Server: Apache Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-10-04 15:04:42 UTC	68	IN	Data Raw: 33 65 0d 0a 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 62 69 6e 67 2e 63 6f 6d 27 0a 3c 2f 73 63 72 69 70 74 3e 0d 0a Data Ascii: 3e<script> window.location.href='https://bing.com'</script>
2024-10-04 15:04:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:04:46 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-04 15:04:47 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=178827 Date: Fri, 04 Oct 2024 15:04:46 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:04:49 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-04 15:04:49 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=178899 Date: Fri, 04 Oct 2024 15:04:49 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-04 15:04:49 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:04:58 UTC	583	OUT	GET /bundle-cmc/assets/styles.css HTTP/1.1 Host: studiostaticassetsprod.azureedge.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://copilot.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 15:04:58 UTC	372	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:04:58 GMT Content-Length: 0 Connection: close Vary: Origin x-ms-request-id: 656b18c8-b01e-0047-546e-16b1e2000000 x-ms-version: 2009-09-19 x-azure-ref: 20241004T150458Z-15767c5fc55fdfx81a30vtr1fw0000000d2g000000006ncd Cache-Control: public, max-age=120 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:04:58 UTC	604	OUT	GET /bundle-cmc/assets/bundle.js HTTP/1.1 Host: studiostaticassetsprod.azureedge.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://copilot.microsoft.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://copilot.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 15:04:59 UTC	880	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:04:59 GMT Content-Type: application/x-javascript Content-Length: 1500700 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 03 Oct 2024 19:32:27 GMT ETag: 0x8DCE3E21DA91ECC Vary: Origin x-ms-request-id: ccd3686e-c01e-0072-796e-16ddf6000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true x-azure-ref: 20241004T150458Z-15767c5fc55whfstvfw43u8fp40000000cug00000000ck4d Cache-Control: public, max-age=120 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-04 15:04:59 UTC	15504	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 72 79 7b 69 66 28 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 3c 22 75 22 29 7b 76 61 72 20 6f 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 74 79 6c 65 22 29 3b 6f 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 27 2a 2c 3a 62 65 66 6f 72 65 2c 3a 61 66 74 65 72 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 7d 3a 62 65 66 6f 72 65 2c 3a 61 66 74 65 72 7b 2d 2d 74 77 2d 63 6f 6e 74 65 6e Data Ascii: (function(){"use strict";try{if(typeof document<"u"){var o=document.createElement("style");o.appendChild(document.createTextNode('*,:before,:after{box-sizing:border-box;border-width:0;border-style:solid;border-color:currentColor}:before,:after{--tw-conten
2024-10-04 15:04:59 UTC	16384	IN	Data Raw: 72 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 32 34 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 32 34 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 38 30 70 78 29 7b 2e 5c 5c 21 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 78 2d 77 69 64 74 68 3a 31 32 38 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 78 2d 77 69 64 74 68 3a 31 32 38 30 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 35 33 36 70 78 29 7b 2e 5c 5c 21 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 78 2d 77 69 64 74 68 3a 31 35 33 36 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 78 2d 77 69 64 74 68 3a 31 35 33 36 70 78 7d 7d 2e 74 2d Data Ascii: r{max-width:1024px!important}.container{max-width:1024px}}@media (min-width: 1280px){.\\!container{max-width:1280px!important}.container{max-width:1280px}}@media (min-width: 1536px){.\\!container{max-width:1536px!important}.container{max-width:1536px}}.t-
2024-10-04 15:04:59 UTC	16384	IN	Data Raw: 61 64 69 75 73 3a 31 2e 37 35 72 65 6d 7d 2e 72 6f 75 6e 64 65 64 2d 62 2d 5c 5c 5b 33 36 70 78 5c 5c 5d 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 33 36 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 33 36 70 78 7d 2e 72 6f 75 6e 64 65 64 2d 62 2d 78 6c 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 2e 37 35 72 65 6d 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 2e 37 35 72 65 6d 7d 2e 72 6f 75 6e 64 65 64 2d 74 2d 33 78 6c 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 31 2e 32 35 72 65 6d 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 31 2e 32 35 72 Data Ascii: adius:1.75rem}.rounded-b-\\[36px\\]{border-bottom-right-radius:36px;border-bottom-left-radius:36px}.rounded-b-xl{border-bottom-right-radius:.75rem;border-bottom-left-radius:.75rem}.rounded-t-3xl{border-top-left-radius:1.25rem;border-top-right-radius:1.25r
2024-10-04 15:04:59 UTC	16384	IN	Data Raw: 72 6f 70 2d 62 6c 75 72 3a 20 62 6c 75 72 28 31 32 70 78 29 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 64 72 6f 70 2d 66 69 6c 74 65 72 3a 76 61 72 28 2d 2d 74 77 2d 62 61 63 6b 64 72 6f 70 2d 62 6c 75 72 29 20 76 61 72 28 2d 2d 74 77 2d 62 61 63 6b 64 72 6f 70 2d 62 72 69 67 68 74 6e 65 73 73 29 20 76 61 72 28 2d 2d 74 77 2d 62 61 63 6b 64 72 6f 70 2d 63 6f 6e 74 72 61 73 74 29 20 76 61 72 28 2d 2d 74 77 2d 62 61 63 6b 64 72 6f 70 2d 67 72 61 79 73 63 61 6c 65 29 20 76 61 72 28 2d 2d 74 77 2d 62 61 63 6b 64 72 6f 70 2d 68 75 65 2d 72 6f 74 61 74 65 29 20 76 61 72 28 2d 2d 74 77 2d 62 61 63 6b 64 72 6f 70 2d 69 6e 76 65 72 74 29 20 76 61 72 28 2d 2d 74 77 2d 62 61 63 6b 64 72 6f 70 2d 6f 70 61 63 69 74 79 29 20 76 61 72 28 2d 2d 74 77 2d 62 61 63 6b 64 72 6f Data Ascii: rop-blur: blur(12px);-webkit-backdrop-filter:var(--tw-backdrop-blur) var(--tw-backdrop-brightness) var(--tw-backdrop-contrast) var(--tw-backdrop-grayscale) var(--tw-backdrop-hue-rotate) var(--tw-backdrop-invert) var(--tw-backdrop-opacity) var(--tw-backdro
2024-10-04 15:04:59 UTC	16384	IN	Data Raw: 6f 6c 20 75 6c 2c 75 6c 20 75 6c 2c 75 6c 20 6f 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 33 37 35 72 65 6d 3b 67 61 70 3a 2e 33 37 35 72 65 6d 7d 6f 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 64 65 63 69 6d 61 6c 7d 6f 6c 20 6f 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6c 6f 77 65 72 2d 61 6c 70 68 61 7d 6f 6c 20 6f 6c 20 6f 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 64 69 73 63 7d 6f 6c 20 6f 6c 20 6f 6c 20 6f 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 63 69 72 63 6c 65 7d 75 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 64 69 73 63 7d 75 6c 20 75 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 63 69 72 63 6c 65 7d 2e 63 6f 64 65 2d Data Ascii: ol ul,ul ul,ul ol{margin-bottom:.5rem;margin-top:.375rem;gap:.375rem}ol{list-style-type:decimal}ol ol{list-style:lower-alpha}ol ol ol{margin-bottom:0;list-style-type:disc}ol ol ol ol{list-style:circle}ul{list-style-type:disc}ul ul{list-style:circle}.code-
2024-10-04 15:04:59 UTC	16384	IN	Data Raw: 28 2d 2d 74 77 2d 62 67 2d 6f 70 61 63 69 74 79 29 29 7d 2e 64 61 72 6b 5c 5c 3a 62 67 2d 6d 69 64 6e 69 67 68 74 2d 39 30 30 5c 5c 2f 38 30 3a 69 73 28 5b 64 61 74 61 2d 74 68 65 6d 65 3d 64 61 72 6b 5d 20 2a 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 63 31 30 31 63 63 63 7d 2e 64 61 72 6b 5c 5c 3a 62 67 2d 6e 65 75 74 72 61 6c 2d 38 30 30 3a 69 73 28 5b 64 61 74 61 2d 74 68 65 6d 65 3d 64 61 72 6b 5d 20 2a 29 7b 2d 2d 74 77 2d 62 67 2d 6f 70 61 63 69 74 79 3a 20 31 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 28 33 38 20 33 38 20 33 38 20 2f 20 76 61 72 28 2d 2d 74 77 2d 62 67 2d 6f 70 61 63 69 74 79 29 29 7d 2e 64 61 72 6b 5c 5c 3a 62 67 2d 73 61 64 64 6c 65 2d 32 35 30 3a 69 73 28 5b 64 61 74 61 2d 74 68 65 6d 65 Data Ascii: (--tw-bg-opacity))}.dark\\:bg-midnight-900\\/80:is([data-theme=dark] ){background-color:#0c101ccc}.dark\\:bg-neutral-800:is([data-theme=dark] ){--tw-bg-opacity: 1;background-color:rgb(38 38 38 / var(--tw-bg-opacity))}.dark\\:bg-saddle-250:is([data-theme
2024-10-04 15:04:59 UTC	16384	IN	Data Raw: 6f 75 72 63 65 3a 21 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 4c 34 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 2c 69 3d 7b 7d 2c 6f 3d 6e 75 6c 6c 2c 73 3d 6e 75 6c 6c 3b 69 66 28 65 21 3d 6e 75 6c 6c 29 66 6f 72 28 72 20 69 6e 20 65 2e 72 65 66 21 3d 3d 76 6f 69 64 20 30 26 26 28 73 3d 65 2e 72 65 66 29 2c 65 2e 6b 65 79 21 3d 3d 76 6f 69 64 20 30 26 26 28 6f 3d 22 22 2b 65 2e 6b 65 79 29 2c 65 29 4e 34 2e 63 61 6c 6c 28 65 2c 72 29 26 26 21 4d 34 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 72 29 26 26 28 69 5b 72 5d 3d 65 5b 72 5d 29 3b 76 61 72 20 61 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2d 32 3b 69 66 28 61 3d 3d 3d 31 29 69 2e 63 68 69 6c 64 72 65 6e 3d 6e 3b 65 6c 73 65 20 69 66 28 31 3c 61 29 7b 66 6f 72 28 76 61 72 20 63 3d 41 72 72 61 79 Data Ascii: ource:!0};function L4(t,e,n){var r,i={},o=null,s=null;if(e!=null)for(r in e.ref!==void 0&&(s=e.ref),e.key!==void 0&&(o=""+e.key),e)N4.call(e,r)&&!M4.hasOwnProperty(r)&&(i[r]=e[r]);var a=arguments.length-2;if(a===1)i.children=n;else if(1<a){for(var c=Array
2024-10-04 15:04:59 UTC	16384	IN	Data Raw: 69 70 73 65 22 2c 22 66 69 6c 74 65 72 22 2c 22 66 6f 6e 74 22 2c 22 67 22 2c 22 67 6c 79 70 68 22 2c 22 67 6c 79 70 68 72 65 66 22 2c 22 68 6b 65 72 6e 22 2c 22 69 6d 61 67 65 22 2c 22 6c 69 6e 65 22 2c 22 6c 69 6e 65 61 72 67 72 61 64 69 65 6e 74 22 2c 22 6d 61 72 6b 65 72 22 2c 22 6d 61 73 6b 22 2c 22 6d 65 74 61 64 61 74 61 22 2c 22 6d 70 61 74 68 22 2c 22 70 61 74 68 22 2c 22 70 61 74 74 65 72 6e 22 2c 22 70 6f 6c 79 67 6f 6e 22 2c 22 70 6f 6c 79 6c 69 6e 65 22 2c 22 72 61 64 69 61 6c 67 72 61 64 69 65 6e 74 22 2c 22 72 65 63 74 22 2c 22 73 74 6f 70 22 2c 22 73 74 79 6c 65 22 2c 22 73 77 69 74 63 68 22 2c 22 73 79 6d 62 6f 6c 22 2c 22 74 65 78 74 22 2c 22 74 65 78 74 70 61 74 68 22 2c 22 74 69 74 6c 65 22 2c 22 74 72 65 66 22 2c 22 74 73 70 61 6e 22 Data Ascii: ipse","filter","font","g","glyph","glyphref","hkern","image","line","lineargradient","marker","mask","metadata","mpath","path","pattern","polygon","polyline","radialgradient","rect","stop","style","switch","symbol","text","textpath","title","tref","tspan"
2024-10-04 15:04:59 UTC	16384	IN	Data Raw: 6e 68 28 43 72 2c 54 32 2c 22 20 22 29 7d 29 3b 63 6f 6e 73 74 20 53 32 3d 53 65 28 47 2e 6e 6f 64 65 4e 61 6d 65 29 3b 69 66 28 52 6e 28 53 32 2c 65 68 2c 43 72 29 29 7b 69 66 28 66 74 26 26 28 65 68 3d 3d 3d 22 69 64 22 7c 7c 65 68 3d 3d 3d 22 6e 61 6d 65 22 29 26 26 28 49 63 28 59 6e 2c 47 29 2c 43 72 3d 6f 74 2b 43 72 29 2c 45 26 26 74 79 70 65 6f 66 20 70 3d 3d 22 6f 62 6a 65 63 74 22 26 26 74 79 70 65 6f 66 20 70 2e 67 65 74 41 74 74 72 69 62 75 74 65 54 79 70 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 21 44 72 29 73 77 69 74 63 68 28 70 2e 67 65 74 41 74 74 72 69 62 75 74 65 54 79 70 65 28 53 32 2c 65 68 29 29 7b 63 61 73 65 22 54 72 75 73 74 65 64 48 54 4d 4c 22 3a 7b 43 72 3d 45 2e 63 72 65 61 74 65 48 54 4d 4c 28 43 72 29 3b 62 72 65 61 6b 7d Data Ascii: nh(Cr,T2," ")});const S2=Se(G.nodeName);if(Rn(S2,eh,Cr)){if(ft&&(eh==="id"\|\|eh==="name")&&(Ic(Yn,G),Cr=ot+Cr),E&&typeof p=="object"&&typeof p.getAttributeType=="function"&&!Dr)switch(p.getAttributeType(S2,eh)){case"TrustedHTML":{Cr=E.createHTML(Cr);break}
2024-10-04 15:04:59 UTC	16384	IN	Data Raw: 74 68 69 73 2c 73 29 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 2c 7b 67 65 74 56 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 2c 73 65 74 56 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 73 29 7b 72 3d 22 22 2b 73 7d 2c 73 74 6f 70 54 72 61 63 6b 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 5f 76 61 6c 75 65 54 72 61 63 6b 65 72 3d 6e 75 6c 6c 2c 64 65 6c 65 74 65 20 74 5b 65 5d 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 4f 67 28 74 29 7b 74 2e 5f 76 61 6c 75 65 54 72 61 63 6b 65 72 7c 7c 28 74 2e 5f 76 61 6c 75 65 54 72 61 63 6b 65 72 3d 76 7a 28 74 29 29 7d 66 75 6e 63 74 69 6f 6e 20 58 34 28 74 29 7b Data Ascii: this,s)}}),Object.defineProperty(t,e,{enumerable:n.enumerable}),{getValue:function(){return r},setValue:function(s){r=""+s},stopTracking:function(){t._valueTracker=null,delete t[e]}}}}function Og(t){t._valueTracker\|\|(t._valueTracker=vz(t))}function X4(t){

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://nassistenza-online.209-74-64-227.cprapid.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 1000

Chrome Cache Entry: 1001

Chrome Cache Entry: 1002

Chrome Cache Entry: 1003

Chrome Cache Entry: 1004

Chrome Cache Entry: 1005

Chrome Cache Entry: 1006

Chrome Cache Entry: 1007

Chrome Cache Entry: 1008

Chrome Cache Entry: 1009

Chrome Cache Entry: 1010

Chrome Cache Entry: 1011

Chrome Cache Entry: 1012

Chrome Cache Entry: 1013

Chrome Cache Entry: 1014

Chrome Cache Entry: 1015

Chrome Cache Entry: 1016

Chrome Cache Entry: 1017

Chrome Cache Entry: 1018

Chrome Cache Entry: 1019

Windows Analysis Report
https://nassistenza-online.209-74-64-227.cprapid.com/

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:05:01 UTC	387	OUT	GET /bundle-cmc/assets/bundle.js HTTP/1.1 Host: studiostaticassetsprod.azureedge.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 15:05:02 UTC	928	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:05:01 GMT Content-Type: application/x-javascript Content-Length: 1500700 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 03 Oct 2024 19:32:27 GMT ETag: 0x8DCE3E21DA91ECC Vary: Origin x-ms-request-id: ccd3686e-c01e-0072-796e-16ddf6000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: https://copilot.microsoft.com Access-Control-Allow-Credentials: true x-azure-ref: 20241004T150501Z-15767c5fc554wklc0x4mc5pq0w0000000d0000000000g8wd Cache-Control: public, max-age=120 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-04 15:05:02 UTC	15456	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 72 79 7b 69 66 28 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 3c 22 75 22 29 7b 76 61 72 20 6f 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 74 79 6c 65 22 29 3b 6f 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 27 2a 2c 3a 62 65 66 6f 72 65 2c 3a 61 66 74 65 72 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 7d 3a 62 65 66 6f 72 65 2c 3a 61 66 74 65 72 7b 2d 2d 74 77 2d 63 6f 6e 74 65 6e Data Ascii: (function(){"use strict";try{if(typeof document<"u"){var o=document.createElement("style");o.appendChild(document.createTextNode('*,:before,:after{box-sizing:border-box;border-width:0;border-style:solid;border-color:currentColor}:before,:after{--tw-conten
2024-10-04 15:05:02 UTC	16384	IN	Data Raw: 68 3a 37 36 38 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 30 32 34 70 78 29 7b 2e 5c 5c 21 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 32 34 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 32 34 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 38 30 70 78 29 7b 2e 5c 5c 21 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 78 2d 77 69 64 74 68 3a 31 32 38 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 78 2d 77 69 64 74 68 3a 31 32 38 30 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 35 33 36 70 78 29 7b 2e 5c 5c 21 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 78 2d 77 69 64 74 68 3a 31 Data Ascii: h:768px}}@media (min-width: 1024px){.\\!container{max-width:1024px!important}.container{max-width:1024px}}@media (min-width: 1280px){.\\!container{max-width:1280px!important}.container{max-width:1280px}}@media (min-width: 1536px){.\\!container{max-width:1
2024-10-04 15:05:02 UTC	16384	IN	Data Raw: 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 31 2e 37 35 72 65 6d 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 31 2e 37 35 72 65 6d 7d 2e 72 6f 75 6e 64 65 64 2d 62 2d 5c 5c 5b 33 36 70 78 5c 5c 5d 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 33 36 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 33 36 70 78 7d 2e 72 6f 75 6e 64 65 64 2d 62 2d 78 6c 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 2e 37 35 72 65 6d 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 2e 37 35 72 65 6d 7d 2e 72 6f 75 6e 64 65 64 2d 74 2d 33 78 6c 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c Data Ascii: bottom-right-radius:1.75rem;border-bottom-left-radius:1.75rem}.rounded-b-\\[36px\\]{border-bottom-right-radius:36px;border-bottom-left-radius:36px}.rounded-b-xl{border-bottom-right-radius:.75rem;border-bottom-left-radius:.75rem}.rounded-t-3xl{border-top-l
2024-10-04 15:05:02 UTC	16384	IN	Data Raw: 2d 74 77 2d 62 61 63 6b 64 72 6f 70 2d 73 65 70 69 61 29 7d 2e 62 61 63 6b 64 72 6f 70 2d 62 6c 75 72 2d 6d 64 7b 2d 2d 74 77 2d 62 61 63 6b 64 72 6f 70 2d 62 6c 75 72 3a 20 62 6c 75 72 28 31 32 70 78 29 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 64 72 6f 70 2d 66 69 6c 74 65 72 3a 76 61 72 28 2d 2d 74 77 2d 62 61 63 6b 64 72 6f 70 2d 62 6c 75 72 29 20 76 61 72 28 2d 2d 74 77 2d 62 61 63 6b 64 72 6f 70 2d 62 72 69 67 68 74 6e 65 73 73 29 20 76 61 72 28 2d 2d 74 77 2d 62 61 63 6b 64 72 6f 70 2d 63 6f 6e 74 72 61 73 74 29 20 76 61 72 28 2d 2d 74 77 2d 62 61 63 6b 64 72 6f 70 2d 67 72 61 79 73 63 61 6c 65 29 20 76 61 72 28 2d 2d 74 77 2d 62 61 63 6b 64 72 6f 70 2d 68 75 65 2d 72 6f 74 61 74 65 29 20 76 61 72 28 2d 2d 74 77 2d 62 61 63 6b 64 72 6f 70 2d 69 6e 76 Data Ascii: -tw-backdrop-sepia)}.backdrop-blur-md{--tw-backdrop-blur: blur(12px);-webkit-backdrop-filter:var(--tw-backdrop-blur) var(--tw-backdrop-brightness) var(--tw-backdrop-contrast) var(--tw-backdrop-grayscale) var(--tw-backdrop-hue-rotate) var(--tw-backdrop-inv
2024-10-04 15:05:02 UTC	16384	IN	Data Raw: 74 65 2d 39 30 30 29 7d 6f 6c 2c 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 37 35 72 65 6d 3b 67 61 70 3a 2e 35 72 65 6d 7d 6f 6c 20 6f 6c 2c 6f 6c 20 75 6c 2c 75 6c 20 75 6c 2c 75 6c 20 6f 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 33 37 35 72 65 6d 3b 67 61 70 3a 2e 33 37 35 72 65 6d 7d 6f 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 64 65 63 69 6d 61 6c 7d 6f 6c 20 6f 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6c 6f 77 65 72 2d 61 6c 70 68 61 7d 6f 6c 20 6f 6c 20 6f 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 64 69 73 63 7d 6f 6c 20 6f 6c 20 6f 6c 20 6f 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 63 69 72 63 6c 65 7d 75 6c 7b 6c 69 73 Data Ascii: te-900)}ol,ul{margin-top:.75rem;gap:.5rem}ol ol,ol ul,ul ul,ul ol{margin-bottom:.5rem;margin-top:.375rem;gap:.375rem}ol{list-style-type:decimal}ol ol{list-style:lower-alpha}ol ol ol{margin-bottom:0;list-style-type:disc}ol ol ol ol{list-style:circle}ul{lis
2024-10-04 15:05:02 UTC	16384	IN	Data Raw: 67 2d 6f 70 61 63 69 74 79 3a 20 31 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 28 31 32 20 31 36 20 32 38 20 2f 20 76 61 72 28 2d 2d 74 77 2d 62 67 2d 6f 70 61 63 69 74 79 29 29 7d 2e 64 61 72 6b 5c 5c 3a 62 67 2d 6d 69 64 6e 69 67 68 74 2d 39 30 30 5c 5c 2f 38 30 3a 69 73 28 5b 64 61 74 61 2d 74 68 65 6d 65 3d 64 61 72 6b 5d 20 2a 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 63 31 30 31 63 63 63 7d 2e 64 61 72 6b 5c 5c 3a 62 67 2d 6e 65 75 74 72 61 6c 2d 38 30 30 3a 69 73 28 5b 64 61 74 61 2d 74 68 65 6d 65 3d 64 61 72 6b 5d 20 2a 29 7b 2d 2d 74 77 2d 62 67 2d 6f 70 61 63 69 74 79 3a 20 31 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 28 33 38 20 33 38 20 33 38 20 2f 20 76 61 72 28 2d 2d 74 77 2d 62 Data Ascii: g-opacity: 1;background-color:rgb(12 16 28 / var(--tw-bg-opacity))}.dark\\:bg-midnight-900\\/80:is([data-theme=dark] ){background-color:#0c101ccc}.dark\\:bg-neutral-800:is([data-theme=dark] ){--tw-bg-opacity: 1;background-color:rgb(38 38 38 / var(--tw-b
2024-10-04 15:05:02 UTC	16384	IN	Data Raw: 78 3d 7b 63 75 72 72 65 6e 74 3a 6e 75 6c 6c 7d 2c 4d 34 3d 7b 6b 65 79 3a 21 30 2c 72 65 66 3a 21 30 2c 5f 5f 73 65 6c 66 3a 21 30 2c 5f 5f 73 6f 75 72 63 65 3a 21 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 4c 34 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 2c 69 3d 7b 7d 2c 6f 3d 6e 75 6c 6c 2c 73 3d 6e 75 6c 6c 3b 69 66 28 65 21 3d 6e 75 6c 6c 29 66 6f 72 28 72 20 69 6e 20 65 2e 72 65 66 21 3d 3d 76 6f 69 64 20 30 26 26 28 73 3d 65 2e 72 65 66 29 2c 65 2e 6b 65 79 21 3d 3d 76 6f 69 64 20 30 26 26 28 6f 3d 22 22 2b 65 2e 6b 65 79 29 2c 65 29 4e 34 2e 63 61 6c 6c 28 65 2c 72 29 26 26 21 4d 34 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 72 29 26 26 28 69 5b 72 5d 3d 65 5b 72 5d 29 3b 76 61 72 20 61 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2d 32 3b 69 66 Data Ascii: x={current:null},M4={key:!0,ref:!0,__self:!0,__source:!0};function L4(t,e,n){var r,i={},o=null,s=null;if(e!=null)for(r in e.ref!==void 0&&(s=e.ref),e.key!==void 0&&(o=""+e.key),e)N4.call(e,r)&&!M4.hasOwnProperty(r)&&(i[r]=e[r]);var a=arguments.length-2;if
2024-10-04 15:05:02 UTC	16384	IN	Data Raw: 72 61 6e 73 66 6f 72 6d 22 2c 22 63 69 72 63 6c 65 22 2c 22 63 6c 69 70 70 61 74 68 22 2c 22 64 65 66 73 22 2c 22 64 65 73 63 22 2c 22 65 6c 6c 69 70 73 65 22 2c 22 66 69 6c 74 65 72 22 2c 22 66 6f 6e 74 22 2c 22 67 22 2c 22 67 6c 79 70 68 22 2c 22 67 6c 79 70 68 72 65 66 22 2c 22 68 6b 65 72 6e 22 2c 22 69 6d 61 67 65 22 2c 22 6c 69 6e 65 22 2c 22 6c 69 6e 65 61 72 67 72 61 64 69 65 6e 74 22 2c 22 6d 61 72 6b 65 72 22 2c 22 6d 61 73 6b 22 2c 22 6d 65 74 61 64 61 74 61 22 2c 22 6d 70 61 74 68 22 2c 22 70 61 74 68 22 2c 22 70 61 74 74 65 72 6e 22 2c 22 70 6f 6c 79 67 6f 6e 22 2c 22 70 6f 6c 79 6c 69 6e 65 22 2c 22 72 61 64 69 61 6c 67 72 61 64 69 65 6e 74 22 2c 22 72 65 63 74 22 2c 22 73 74 6f 70 22 2c 22 73 74 79 6c 65 22 2c 22 73 77 69 74 63 68 22 2c 22 Data Ascii: ransform","circle","clippath","defs","desc","ellipse","filter","font","g","glyph","glyphref","hkern","image","line","lineargradient","marker","mask","metadata","mpath","path","pattern","polygon","polyline","radialgradient","rect","stop","style","switch","
2024-10-04 15:05:02 UTC	16384	IN	Data Raw: 2f 69 2c 43 72 29 29 7b 49 63 28 59 6e 2c 47 29 3b 63 6f 6e 74 69 6e 75 65 7d 48 26 26 49 67 28 5b 7a 2c 4e 2c 6a 5d 2c 54 32 3d 3e 7b 43 72 3d 6e 68 28 43 72 2c 54 32 2c 22 20 22 29 7d 29 3b 63 6f 6e 73 74 20 53 32 3d 53 65 28 47 2e 6e 6f 64 65 4e 61 6d 65 29 3b 69 66 28 52 6e 28 53 32 2c 65 68 2c 43 72 29 29 7b 69 66 28 66 74 26 26 28 65 68 3d 3d 3d 22 69 64 22 7c 7c 65 68 3d 3d 3d 22 6e 61 6d 65 22 29 26 26 28 49 63 28 59 6e 2c 47 29 2c 43 72 3d 6f 74 2b 43 72 29 2c 45 26 26 74 79 70 65 6f 66 20 70 3d 3d 22 6f 62 6a 65 63 74 22 26 26 74 79 70 65 6f 66 20 70 2e 67 65 74 41 74 74 72 69 62 75 74 65 54 79 70 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 21 44 72 29 73 77 69 74 63 68 28 70 2e 67 65 74 41 74 74 72 69 62 75 74 65 54 79 70 65 28 53 32 2c 65 68 Data Ascii: /i,Cr)){Ic(Yn,G);continue}H&&Ig([z,N,j],T2=>{Cr=nh(Cr,T2," ")});const S2=Se(G.nodeName);if(Rn(S2,eh,Cr)){if(ft&&(eh==="id"\|\|eh==="name")&&(Ic(Yn,G),Cr=ot+Cr),E&&typeof p=="object"&&typeof p.getAttributeType=="function"&&!Dr)switch(p.getAttributeType(S2,eh
2024-10-04 15:05:02 UTC	16384	IN	Data Raw: 75 72 6e 20 69 2e 63 61 6c 6c 28 74 68 69 73 29 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 73 29 7b 72 3d 22 22 2b 73 2c 6f 2e 63 61 6c 6c 28 74 68 69 73 2c 73 29 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 2c 7b 67 65 74 56 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 2c 73 65 74 56 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 73 29 7b 72 3d 22 22 2b 73 7d 2c 73 74 6f 70 54 72 61 63 6b 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 5f 76 61 6c 75 65 54 72 61 63 6b 65 72 3d 6e 75 6c 6c 2c 64 65 6c 65 74 65 20 74 5b 65 5d 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 4f 67 28 74 29 7b 74 2e 5f 76 61 6c 75 65 Data Ascii: urn i.call(this)},set:function(s){r=""+s,o.call(this,s)}}),Object.defineProperty(t,e,{enumerable:n.enumerable}),{getValue:function(){return r},setValue:function(s){r=""+s},stopTracking:function(){t._valueTracker=null,delete t[e]}}}}function Og(t){t._value

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:05:02 UTC	659	OUT	GET /bundle-cmc/assets/index.lazy-CP8h7ri6.js HTTP/1.1 Host: studiostaticassetsprod.azureedge.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://copilot.microsoft.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://studiostaticassetsprod.azureedge.net/bundle-cmc/assets/bundle.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 15:05:02 UTC	787	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:05:02 GMT Content-Type: application/x-javascript Content-Length: 89 Connection: close Last-Modified: Thu, 03 Oct 2024 19:32:27 GMT ETag: 0x8DCE3E21DA662C0 Vary: Origin x-ms-request-id: 595fab5d-c01e-00e4-0f6e-16d427000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true x-azure-ref: 20241004T150502Z-15767c5fc5546rn6ch9zv310e000000005h000000000vkwe Cache-Control: public, max-age=2592000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-04 15:05:02 UTC	89	IN	Data Raw: 69 6d 70 6f 72 74 7b 63 20 61 73 20 6f 2c 61 20 61 73 20 65 7d 66 72 6f 6d 22 2e 2f 62 75 6e 64 6c 65 2e 6a 73 22 3b 63 6f 6e 73 74 20 61 3d 6f 28 22 2f 22 29 28 7b 63 6f 6d 70 6f 6e 65 6e 74 3a 65 7d 29 3b 65 78 70 6f 72 74 7b 61 20 61 73 20 52 6f 75 74 65 7d 3b 0a Data Ascii: import{c as o,a as e}from"./bundle.js";const a=o("/")({component:e});export{a as Route};

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:05:03 UTC	400	OUT	GET /bundle-cmc/assets/index.lazy-CP8h7ri6.js HTTP/1.1 Host: studiostaticassetsprod.azureedge.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 15:05:03 UTC	835	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:05:03 GMT Content-Type: application/x-javascript Content-Length: 89 Connection: close Last-Modified: Thu, 03 Oct 2024 19:32:27 GMT ETag: 0x8DCE3E21DA662C0 Vary: Origin x-ms-request-id: 595fab5d-c01e-00e4-0f6e-16d427000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: https://copilot.microsoft.com Access-Control-Allow-Credentials: true x-azure-ref: 20241004T150503Z-15767c5fc55lghvzbxktxfqntw0000000cf0000000003rha Cache-Control: public, max-age=2592000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-04 15:05:03 UTC	89	IN	Data Raw: 69 6d 70 6f 72 74 7b 63 20 61 73 20 6f 2c 61 20 61 73 20 65 7d 66 72 6f 6d 22 2e 2f 62 75 6e 64 6c 65 2e 6a 73 22 3b 63 6f 6e 73 74 20 61 3d 6f 28 22 2f 22 29 28 7b 63 6f 6d 70 6f 6e 65 6e 74 3a 65 7d 29 3b 65 78 70 6f 72 74 7b 61 20 61 73 20 52 6f 75 74 65 7d 3b 0a Data Ascii: import{c as o,a as e}from"./bundle.js";const a=o("/")({component:e});export{a as Route};

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:05:04 UTC	656	OUT	GET /bundle-cmc/assets/strings-1ROHQX2c.js HTTP/1.1 Host: studiostaticassetsprod.azureedge.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://copilot.microsoft.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://studiostaticassetsprod.azureedge.net/bundle-cmc/assets/bundle.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 15:05:04 UTC	882	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:05:04 GMT Content-Type: application/x-javascript Content-Length: 30603 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 03 Oct 2024 19:32:26 GMT ETag: 0x8DCE3E21CEE41D3 Vary: Origin x-ms-request-id: b25e1c79-701e-0058-626e-1602e6000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true x-azure-ref: 20241004T150504Z-15767c5fc55qkvj6n60pxm9mbw00000001y00000000035a7 Cache-Control: public, max-age=2592000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-04 15:05:04 UTC	15502	IN	Data Raw: 63 6f 6e 73 74 20 65 3d 7b 62 61 63 6b 54 65 78 74 3a 22 42 61 63 6b 22 2c 22 5f 62 61 63 6b 54 65 78 74 2e 63 6f 6d 6d 65 6e 74 22 3a 22 42 75 74 74 6f 6e 20 74 65 78 74 20 74 6f 20 67 6f 20 62 61 63 6b 22 2c 63 6c 6f 73 65 54 65 78 74 3a 22 43 6c 6f 73 65 22 2c 22 5f 63 6c 6f 73 65 54 65 78 74 2e 63 6f 6d 6d 65 6e 74 22 3a 22 42 75 74 74 6f 6e 20 74 65 78 74 20 74 6f 20 63 6c 6f 73 65 20 73 69 64 65 20 70 61 6e 65 6c 22 2c 63 61 6e 63 65 6c 3a 22 43 61 6e 63 65 6c 22 2c 22 5f 63 61 6e 63 65 6c 2e 63 6f 6d 6d 65 6e 74 22 3a 22 42 75 74 74 6f 6e 20 74 65 78 74 20 74 6f 20 63 61 6e 63 65 6c 20 73 69 67 6e 69 6e 20 70 72 6f 63 65 73 73 22 2c 63 6f 70 69 6c 6f 74 54 65 78 74 3a 22 43 6f 70 69 6c 6f 74 22 2c 22 5f 63 6f 70 69 6c 6f 74 54 65 78 74 2e 63 6f 6d Data Ascii: const e={backText:"Back","_backText.comment":"Button text to go back",closeText:"Close","_closeText.comment":"Button text to close side panel",cancel:"Cancel","_cancel.comment":"Button text to cancel signin process",copilotText:"Copilot","_copilotText.com
2024-10-04 15:05:05 UTC	15101	IN	Data Raw: 20 6d 65 20 61 20 66 65 77 20 69 6e 74 65 72 65 73 74 69 6e 67 20 66 61 63 74 73 20 72 65 6c 61 74 65 64 20 74 6f 20 74 68 65 20 69 6e 66 6f 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 2c 22 5f 73 75 67 67 65 73 74 51 75 65 73 74 69 6f 6e 73 50 72 6f 6d 70 74 2e 63 6f 6d 6d 65 6e 74 22 3a 22 50 72 6f 6d 70 74 20 66 6f 72 20 74 68 65 20 63 61 72 64 20 61 62 6f 75 74 20 67 65 74 74 69 6e 67 20 69 6e 74 65 72 65 73 74 69 6e 67 20 66 61 63 74 73 20 61 62 6f 75 74 20 74 68 65 20 63 75 72 72 65 6e 74 20 70 61 67 65 22 7d 7d 7d 2c 64 3d 7b 77 61 72 6e 69 6e 67 3a 22 4d 69 63 72 6f 73 6f 66 74 20 75 73 65 73 20 41 49 20 74 6f 20 67 65 6e 65 72 61 74 65 20 64 61 69 6c 79 20 75 70 64 61 74 65 73 2e 20 54 68 65 72 65 20 6d 61 79 20 62 65 20 6d 69 73 74 61 6b 65 73 2e Data Ascii: me a few interesting facts related to the info on this page","_suggestQuestionsPrompt.comment":"Prompt for the card about getting interesting facts about the current page"}}},d={warning:"Microsoft uses AI to generate daily updates. There may be mistakes.

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:05:06 UTC	397	OUT	GET /bundle-cmc/assets/strings-1ROHQX2c.js HTTP/1.1 Host: studiostaticassetsprod.azureedge.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 15:05:06 UTC	930	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:05:06 GMT Content-Type: application/x-javascript Content-Length: 30603 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 03 Oct 2024 19:32:26 GMT ETag: 0x8DCE3E21CEE41D3 Vary: Origin x-ms-request-id: b25e1c79-701e-0058-626e-1602e6000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: https://copilot.microsoft.com Access-Control-Allow-Credentials: true x-azure-ref: 20241004T150506Z-15767c5fc55tsfp92w7yna557w0000000cs00000000078x5 Cache-Control: public, max-age=2592000 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-04 15:05:06 UTC	15454	IN	Data Raw: 63 6f 6e 73 74 20 65 3d 7b 62 61 63 6b 54 65 78 74 3a 22 42 61 63 6b 22 2c 22 5f 62 61 63 6b 54 65 78 74 2e 63 6f 6d 6d 65 6e 74 22 3a 22 42 75 74 74 6f 6e 20 74 65 78 74 20 74 6f 20 67 6f 20 62 61 63 6b 22 2c 63 6c 6f 73 65 54 65 78 74 3a 22 43 6c 6f 73 65 22 2c 22 5f 63 6c 6f 73 65 54 65 78 74 2e 63 6f 6d 6d 65 6e 74 22 3a 22 42 75 74 74 6f 6e 20 74 65 78 74 20 74 6f 20 63 6c 6f 73 65 20 73 69 64 65 20 70 61 6e 65 6c 22 2c 63 61 6e 63 65 6c 3a 22 43 61 6e 63 65 6c 22 2c 22 5f 63 61 6e 63 65 6c 2e 63 6f 6d 6d 65 6e 74 22 3a 22 42 75 74 74 6f 6e 20 74 65 78 74 20 74 6f 20 63 61 6e 63 65 6c 20 73 69 67 6e 69 6e 20 70 72 6f 63 65 73 73 22 2c 63 6f 70 69 6c 6f 74 54 65 78 74 3a 22 43 6f 70 69 6c 6f 74 22 2c 22 5f 63 6f 70 69 6c 6f 74 54 65 78 74 2e 63 6f 6d Data Ascii: const e={backText:"Back","_backText.comment":"Button text to go back",closeText:"Close","_closeText.comment":"Button text to close side panel",cancel:"Cancel","_cancel.comment":"Button text to cancel signin process",copilotText:"Copilot","_copilotText.com
2024-10-04 15:05:06 UTC	15149	IN	Data Raw: 74 20 74 68 65 20 63 75 72 72 65 6e 74 20 70 61 67 65 22 2c 73 75 67 67 65 73 74 51 75 65 73 74 69 6f 6e 73 50 72 6f 6d 70 74 3a 22 47 69 76 65 20 6d 65 20 61 20 66 65 77 20 69 6e 74 65 72 65 73 74 69 6e 67 20 66 61 63 74 73 20 72 65 6c 61 74 65 64 20 74 6f 20 74 68 65 20 69 6e 66 6f 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 2c 22 5f 73 75 67 67 65 73 74 51 75 65 73 74 69 6f 6e 73 50 72 6f 6d 70 74 2e 63 6f 6d 6d 65 6e 74 22 3a 22 50 72 6f 6d 70 74 20 66 6f 72 20 74 68 65 20 63 61 72 64 20 61 62 6f 75 74 20 67 65 74 74 69 6e 67 20 69 6e 74 65 72 65 73 74 69 6e 67 20 66 61 63 74 73 20 61 62 6f 75 74 20 74 68 65 20 63 75 72 72 65 6e 74 20 70 61 67 65 22 7d 7d 7d 2c 64 3d 7b 77 61 72 6e 69 6e 67 3a 22 4d 69 63 72 6f 73 6f 66 74 20 75 73 65 73 20 41 49 20 74 Data Ascii: t the current page",suggestQuestionsPrompt:"Give me a few interesting facts related to the info on this page","_suggestQuestionsPrompt.comment":"Prompt for the card about getting interesting facts about the current page"}}},d={warning:"Microsoft uses AI t

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:05:11 UTC	565	OUT	GET /turnstile/v0/api.js?render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://copilot.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 15:05:11 UTC	356	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 15:05:11 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/g/ec4b873d446c/api.js Server: cloudflare CF-RAY: 8cd61198ac440f97-EWR

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:05:11 UTC	1199	OUT	GET /bat.js HTTP/1.1 Host: bat.bing.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://copilot.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MUID=203E704BD0C66F6728A46545D1B46ED9; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=FC81B417F4A143FB89AC14085A1C663D&dmnchg=1; SRCHUSR=DOB=20241004; _SS=SID=3F0A0C0D2F436EEF159D19032E316F66; SRCHHPGUSR=SRCHLANG=en&IG=B0BC510672BC4FF1BA17172617D63D82&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1280&SCH=907&DPR=1.0&UTC=-240&PV=10.0.0; _UR=QS=0&TQS=0&Pn=0; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyNC0xMC0wNFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIlRucyI6MCwiRGZ0IjpudWxsLCJNdnMiOjAsIkZsdCI6MCwiSW1wIjozLCJUb2JuIjowfQ==
2024-10-04 15:05:12 UTC	651	IN	HTTP/1.1 200 OK Cache-Control: private,max-age=1800 Content-Length: 50523 Content-Type: application/javascript Last-Modified: Thu, 19 Sep 2024 15:43:41 GMT Accept-Ranges: bytes ETag: "803483b3aaadb1:0" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: D1AF0A07F6BE429BB724F9C582DD434E Ref B: EWR30EDGE0317 Ref C: 2024-10-04T15:05:11Z Date: Fri, 04 Oct 2024 15:05:11 GMT Connection: close
2024-10-04 15:05:12 UTC	1986	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 55 45 54 28 6f 29 7b 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 26 26 6e 2e 6c 65 6e 67 74 68 3e 30 7d 3b 74 68 69 73 2e 64 6f 6d 61 69 6e 3d 22 62 61 74 2e 62 69 6e 67 2e 63 6f 6d 22 3b 74 68 69 73 2e 64 6f 6d 61 69 6e 43 6c 3d 22 62 61 74 2e 62 69 6e 67 2e 6e 65 74 22 3b 74 68 69 73 2e 55 52 4c 4c 45 4e 47 54 48 4c 49 4d 49 54 3d 34 30 39 36 3b 74 68 69 73 2e 70 61 67 65 4c 6f 61 64 45 76 74 3d 22 70 61 67 65 4c 6f 61 64 22 3b 74 68 69 73 2e 63 75 73 74 6f 6d 45 76 74 3d 22 63 75 73 74 6f 6d 22 3b 74 68 69 73 2e 70 61 67 65 56 69 65 77 45 76 74 3d 22 70 61 67 65 5f 76 69 65 77 22 3b 6f 2e 56 65 72 3d 6f 2e 56 65 72 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 Data Ascii: function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&
2024-10-04 15:05:12 UTC	8192	IN	Data Raw: 75 6c 74 73 22 2c 22 6f 66 66 65 72 64 65 74 61 69 6c 22 2c 22 63 6f 6e 76 65 72 73 69 6f 6e 69 6e 74 65 6e 74 22 2c 22 63 6f 6e 76 65 72 73 69 6f 6e 22 2c 22 70 72 6f 70 65 72 74 79 22 2c 22 63 61 72 74 22 2c 22 70 75 72 63 68 61 73 65 22 2c 22 63 61 6e 63 65 6c 22 2c 22 6f 74 68 65 72 22 5d 7d 2c 74 72 61 76 65 6c 5f 64 65 73 74 69 64 3a 7b 7d 2c 74 72 61 76 65 6c 5f 6f 72 69 67 69 6e 69 64 3a 7b 7d 2c 74 72 61 76 65 6c 5f 70 61 67 65 74 79 70 65 3a 7b 74 79 70 65 3a 22 65 6e 75 6d 22 2c 76 61 6c 75 65 73 3a 5b 22 68 6f 6d 65 22 2c 22 73 65 61 72 63 68 72 65 73 75 6c 74 73 22 2c 22 6f 66 66 65 72 64 65 74 61 69 6c 22 2c 22 63 6f 6e 76 65 72 73 69 6f 6e 69 6e 74 65 6e 74 22 2c 22 63 6f 6e 76 65 72 73 69 6f 6e 22 2c 22 63 61 6e 63 65 6c 22 2c 22 6f 74 68 Data Ascii: ults","offerdetail","conversionintent","conversion","property","cart","purchase","cancel","other"]},travel_destid:{},travel_originid:{},travel_pagetype:{type:"enum",values:["home","searchresults","offerdetail","conversionintent","conversion","cancel","oth
2024-10-04 15:05:12 UTC	5830	IN	Data Raw: 79 70 65 6f 66 20 6f 2e 63 6f 6f 6b 69 65 46 6c 61 67 73 3d 3d 22 73 74 72 69 6e 67 22 26 26 28 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 63 6f 6f 6b 69 65 46 6c 61 67 73 3d 6f 2e 63 6f 6f 6b 69 65 46 6c 61 67 73 29 3b 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 6e 61 76 54 69 6d 69 6e 67 41 70 69 3d 21 31 3b 6f 2e 6e 61 76 54 69 6d 69 6e 67 41 70 69 3d 3d 3d 21 30 26 26 28 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 6e 61 76 54 69 6d 69 6e 67 41 70 69 3d 21 30 29 3b 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 65 72 72 6f 72 42 65 61 63 6f 6e 4c 65 76 65 6c 3d 30 3b 6f 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 65 72 72 6f 72 42 65 61 63 6f 6e 4c 65 76 65 6c 22 29 26 26 28 75 3d 6f 2e 65 72 72 6f 72 42 65 61 63 6f 6e 4c 65 76 65 6c 2c 74 79 Data Ascii: ypeof o.cookieFlags=="string"&&(this.uetConfig.cookieFlags=o.cookieFlags);this.uetConfig.navTimingApi=!1;o.navTimingApi===!0&&(this.uetConfig.navTimingApi=!0);this.uetConfig.errorBeaconLevel=0;o.hasOwnProperty("errorBeaconLevel")&&(u=o.errorBeaconLevel,ty
2024-10-04 15:05:12 UTC	8192	IN	Data Raw: 75 6e 64 65 66 69 6e 65 64 29 72 65 74 75 72 6e 3b 68 3d 75 3d 3d 3d 74 68 69 73 2e 70 61 67 65 56 69 65 77 45 76 74 3f 74 68 69 73 2e 70 61 67 65 4c 6f 61 64 45 76 74 3a 74 68 69 73 2e 63 75 73 74 6f 6d 45 76 74 3b 74 68 69 73 2e 65 76 74 28 68 2c 75 2c 73 2c 6e 5b 32 5d 29 7d 65 6c 73 65 20 69 66 28 6e 5b 30 5d 3d 3d 3d 22 73 65 74 22 29 7b 69 66 28 74 79 70 65 6f 66 20 6e 5b 31 5d 5b 30 5d 21 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 3b 66 6f 72 28 69 20 69 6e 20 6e 5b 31 5d 5b 30 5d 29 74 68 69 73 2e 6b 6e 6f 77 6e 50 61 72 61 6d 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 69 29 26 26 28 74 68 69 73 2e 70 61 67 65 4c 65 76 65 6c 50 61 72 61 6d 73 5b 69 5d 3d 6e 5b 31 5d 5b 30 5d 5b 69 5d 2c 69 3d 3d 3d 22 70 69 64 22 26 26 74 68 69 73 2e Data Ascii: undefined)return;h=u===this.pageViewEvt?this.pageLoadEvt:this.customEvt;this.evt(h,u,s,n[2])}else if(n[0]==="set"){if(typeof n[1][0]!="object")return;for(i in n[1][0])this.knownParams.hasOwnProperty(i)&&(this.pageLevelParams[i]=n[1][0][i],i==="pid"&&this.
2024-10-04 15:05:12 UTC	8192	IN	Data Raw: 6e 2e 6d 74 70 3d 6e 61 76 69 67 61 74 6f 72 2e 6d 61 78 54 6f 75 63 68 50 6f 69 6e 74 73 29 2c 6e 7d 3b 74 68 69 73 2e 72 65 6d 6f 76 65 54 72 61 69 6c 69 6e 67 41 6d 70 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 6e 2e 63 68 61 72 41 74 28 6e 2e 6c 65 6e 67 74 68 2d 31 29 3b 72 65 74 75 72 6e 28 74 3d 3d 3d 22 26 22 7c 7c 74 3d 3d 3d 22 3f 22 29 26 26 28 6e 3d 6e 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 6e 2e 6c 65 6e 67 74 68 2d 31 29 29 2c 6e 7d 3b 74 68 69 73 2e 68 65 6c 70 65 72 45 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 74 79 70 65 6f 66 20 43 75 73 74 6f 6d 45 76 65 6e 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 76 61 72 20 74 3d 7b 65 72 72 4d 73 67 3a 6e 2c 74 61 67 49 64 3a 74 68 69 73 2e 62 65 61 63 6f 6e 50 61 Data Ascii: n.mtp=navigator.maxTouchPoints),n};this.removeTrailingAmp=function(n){var t=n.charAt(n.length-1);return(t==="&"\|\|t==="?")&&(n=n.substring(0,n.length-1)),n};this.helperError=function(n){if(typeof CustomEvent=="function"){var t={errMsg:n,tagId:this.beaconPa
2024-10-04 15:05:12 UTC	8192	IN	Data Raw: 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 70 61 67 65 74 79 70 65 22 29 3e 30 3f 28 74 2e 70 61 67 65 74 79 70 65 3d 74 68 69 73 2e 76 61 6c 69 64 61 74 65 50 61 67 65 54 79 70 65 28 74 2e 70 61 67 65 74 79 70 65 2c 74 68 69 73 2e 76 61 6c 69 64 52 65 74 61 69 6c 50 61 67 65 54 79 70 65 56 61 6c 75 65 73 29 2c 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 70 72 6f 64 69 64 22 29 3e 30 26 26 28 74 2e 70 72 6f 64 69 64 3d 74 68 69 73 2e 76 61 6c 69 64 61 74 65 50 72 6f 64 49 64 28 74 2e 70 72 6f 64 69 64 29 29 29 3a 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 70 72 6f 64 69 64 22 29 3e 30 26 26 74 68 69 73 2e 74 68 72 6f 77 45 72 72 6f 72 28 74 68 69 73 2e 6d 69 73 73 69 6e 67 50 61 67 65 54 79 70 65 45 78 63 65 70 74 69 6f 6e Data Ascii: t.hasOwnProperty("pagetype")>0?(t.pagetype=this.validatePageType(t.pagetype,this.validRetailPageTypeValues),t.hasOwnProperty("prodid")>0&&(t.prodid=this.validateProdId(t.prodid))):t.hasOwnProperty("prodid")>0&&this.throwError(this.missingPageTypeException
2024-10-04 15:05:12 UTC	8192	IN	Data Raw: 75 3c 3d 33 3f 74 5b 69 5d 3d 22 22 3a 64 65 6c 65 74 65 20 74 5b 69 5d 2c 72 3d 74 68 69 73 2e 73 74 72 69 6e 67 69 66 79 54 6f 52 65 71 75 65 73 74 28 74 29 2c 66 3d 74 68 69 73 2e 72 65 6d 6f 76 65 54 72 61 69 6c 69 6e 67 41 6d 70 28 65 2b 72 29 29 3b 74 68 69 73 2e 66 69 72 65 42 65 61 63 6f 6e 49 6d 67 28 66 29 3b 74 68 69 73 2e 73 6e 69 70 70 65 74 45 76 65 6e 74 51 75 65 75 65 2e 70 75 73 68 28 72 29 3b 74 68 69 73 2e 73 6e 69 70 70 65 74 45 76 65 6e 74 51 75 65 75 65 2e 6c 65 6e 67 74 68 3e 32 30 26 26 74 68 69 73 2e 73 6e 69 70 70 65 74 45 76 65 6e 74 51 75 65 75 65 2e 73 68 69 66 74 28 29 3b 74 72 79 7b 74 79 70 65 6f 66 20 43 75 73 74 6f 6d 45 76 65 6e 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 73 3d 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 Data Ascii: u<=3?t[i]="":delete t[i],r=this.stringifyToRequest(t),f=this.removeTrailingAmp(e+r));this.fireBeaconImg(f);this.snippetEventQueue.push(r);this.snippetEventQueue.length>20&&this.snippetEventQueue.shift();try{typeof CustomEvent=="function"&&(s=new CustomEve
2024-10-04 15:05:12 UTC	1747	IN	Data Raw: 28 21 74 68 69 73 2e 69 73 41 64 53 74 6f 72 61 67 65 41 6c 6c 6f 77 65 64 28 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 69 3d 6e 3d 3d 3d 30 3f 74 68 69 73 2e 73 65 73 73 69 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3a 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 76 69 64 43 6f 6f 6b 69 65 2c 74 3d 74 68 69 73 2e 67 65 74 43 6f 6f 6b 69 65 28 69 2c 22 22 2c 74 68 69 73 2e 69 6e 73 69 67 68 74 73 43 6f 6f 6b 69 65 4d 61 78 4c 65 6e 67 74 68 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 28 74 29 7c 7c 28 74 3d 74 68 69 73 2e 67 65 74 4c 6f 63 61 6c 53 74 6f 72 61 67 65 42 61 63 6b 75 70 28 69 2c 74 68 69 73 2e 69 6e 73 69 67 68 74 73 43 6f 6f 6b 69 65 4d 61 78 4c 65 6e 67 74 68 29 29 2c 74 68 69 73 2e 69 6e 73 69 67 68 Data Ascii: (!this.isAdStorageAllowed())return null;var i=n===0?this.sessionCookieName:this.uetConfig.vidCookie,t=this.getCookie(i,"",this.insightsCookieMaxLength);return this.stringExists(t)\|\|(t=this.getLocalStorageBackup(i,this.insightsCookieMaxLength)),this.insigh

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:05:11 UTC	628	OUT	GET /bundle-cmc/fonts/Ginto-Copilot-Upright-Variable.woff2 HTTP/1.1 Host: studiostaticassetsprod.azureedge.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://copilot.microsoft.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://copilot.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 15:05:12 UTC	736	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:05:11 GMT Content-Type: font/woff2 Content-Length: 111812 Connection: close Last-Modified: Tue, 01 Oct 2024 19:29:27 GMT ETag: 0x8DCE24F5D827362 Vary: Origin x-ms-request-id: d20deedd-a01e-00af-75e5-142874000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true x-azure-ref: 20241004T150511Z-15767c5fc55852fxfeh7csa2dn0000000ck000000000kwvn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 15:05:12 UTC	15648	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 b4 c4 00 11 00 00 00 04 e0 34 00 01 b4 5a 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a e1 26 1b 88 fb 44 1c a5 3a 06 60 3f 53 54 41 54 81 34 27 2e 00 8e 06 2f 7e 0a 82 d8 10 82 93 1f 0b 8b 16 00 30 85 ef 64 01 36 02 24 03 96 28 04 20 05 92 70 07 ad 04 5b 02 b7 94 07 a5 43 76 7d cb 43 b7 4d 81 64 46 3f 87 db 4a 11 3d c0 bf 97 01 25 22 db dd d7 25 19 76 14 d1 2d 19 dd 14 18 da be 6a f5 c1 0d 54 af e5 bb 00 e7 09 c1 fe dd 5a f5 05 b2 ff ff ff ff ff ff 9d c9 24 74 7a 92 e1 4e fa b7 cd 58 61 34 a1 05 42 c8 20 64 b5 05 3d 11 e1 30 41 14 82 82 20 a2 2a da 0e 3d 46 a5 8c 3b 04 c7 ca 98 c4 04 65 5a a6 98 69 9e b3 85 49 9a e5 ca ea 2e 13 6b 8f 03 58 7a 44 78 ac 2e 27 e1 f7 1b 67 ab 6d 29 69 98 d9 2d 8a 59 Data Ascii: wOF24Z&D:`?STAT4'./~0d6$( p[Cv}CMdF?J=%"%v-jTZ$tzNXa4B d=0A *=F;eZiI.kXzDx.'gm)i-Y
2024-10-04 15:05:12 UTC	16384	IN	Data Raw: 8d b9 e4 35 b2 07 81 d1 6f 1f 0e 06 22 02 2c 53 a0 4b 06 47 06 f9 f0 ed 03 65 77 d0 fa 33 34 c0 5f 01 d7 05 08 00 b9 88 41 cc 03 19 04 4a e7 a0 09 40 ed 83 a0 b3 3d 37 66 b3 00 f5 76 37 c6 15 c3 47 80 c7 e0 bc 6e bc 47 0e fe ba 10 6a e3 c1 1e 41 d4 b8 af 4d ff 97 67 e1 b3 6b 27 87 d6 20 05 42 56 09 05 57 50 f6 3b a8 c6 9e 16 b9 12 e1 c9 d6 d8 7f 34 cc c5 d2 95 ef ff 43 fb ce 19 fa 2f f4 96 cd 3f c2 30 2e d7 bf 60 52 f8 b9 c1 3b 98 f7 3a b2 f2 2a 57 c0 6a cf 9a c3 36 2b c4 c5 f2 96 70 08 3e 61 65 76 c6 05 99 6d 17 bd 7f 36 66 6d 55 18 9b 89 f3 d1 94 9d 05 ce d1 2d 35 46 be c1 e4 f7 f0 28 f3 b3 f5 05 bc 4a ef 63 15 84 9a 66 cc 59 3f ab 1d ac 29 a9 0f 48 e8 9f 25 9d 56 83 f4 5b a3 42 70 17 11 b8 49 e2 54 0f 8f 85 9f dd 0d c2 0a ee e0 a3 71 92 61 ed 7e 7b 8e Data Ascii: 5o",SKGew34_AJ@=7fv7GnGjAMgk' BVWP;4C/?0.`R;:*Wj6+p>aevm6fmU-5F(JcfY?)H%V[BpITqa~{
2024-10-04 15:05:12 UTC	16384	IN	Data Raw: 7a 1a e5 e8 e4 cc 53 e0 b2 86 62 05 cf 58 85 30 7f c3 85 15 54 18 e7 5d 60 57 42 3d 20 56 42 e5 2d 72 a9 5c 2a a5 52 26 e5 a5 2a 04 51 23 75 a2 5e ea 44 bd 68 14 8d f2 e8 4b 3c 52 5c 95 f2 2f f3 d0 2b fe b0 e0 05 d9 b0 8a ec ac fe b3 2c bf 36 dd c4 da 61 14 91 35 f8 c8 21 a3 f7 7e f3 55 a1 a0 68 57 ff 3b ca 35 22 d0 5d 1c df ea f2 c7 6a 88 d7 23 00 54 39 d2 c5 10 17 3b c1 e3 a2 ae 69 b7 3b 42 05 2a 5a 56 44 0e 37 95 6c 53 29 90 11 f6 1c cb 5e b6 61 ad a6 bb d0 e1 a2 2e 51 b9 91 e7 eb 08 e2 0d f3 ce bd d4 a0 40 9e 17 6e a1 94 7a 21 d2 3d 4f 41 c2 68 df bd 4f 20 85 1d 10 16 e0 02 a2 02 9b 81 28 1a c7 8d 5d d0 74 fe ba 25 f5 f8 f0 c1 3a cd 15 66 3d db 38 4b 57 bd 82 74 97 9d d5 c4 a4 20 28 85 81 5c 71 fd e8 8c e9 e2 a3 06 4b fe e8 31 7b 4c ad 3a b5 5a 7e 8d Data Ascii: zSbX0T]`WB= VB-r\R&Q#u^DhK<R\/+,6a5!~UhW;5"]j#T9;i;B*ZVD7lS)^a.Q@nz!=OAhO (]t%:f=8KWt (\qK1{L:Z~
2024-10-04 15:05:12 UTC	16384	IN	Data Raw: 11 10 1d 32 43 6f 72 3a 9a e6 b5 47 cf 0f c7 24 22 68 de f5 79 65 1b 2c 7c 85 e8 7b 67 89 0d 0c db 18 35 63 5e 2b b4 e1 e0 00 44 0f 99 e1 65 6f 91 33 8c db 58 62 8a 04 a0 39 fd 8a 39 7e f7 a0 07 05 8a d4 36 06 4d 15 ce 45 39 63 eb 95 06 6d d4 03 f7 f5 29 10 72 a3 05 c0 55 2b b8 30 de 89 56 bc 22 0c 1a c2 53 70 ef 4f c6 e8 a2 21 22 69 6f 11 f1 0b a2 f5 a3 b7 83 4b 7c 78 4d e8 54 0c 1a fa 3b 41 40 10 d6 30 55 9c 0e 3f 23 07 3b 6a 28 36 cd 4b f7 21 3b 47 da fe 7c 68 b7 a8 dc f9 ae b7 cb aa 57 b3 da d5 ad 7e 0d 6b ec 5e 8d 74 b2 3f 22 f4 92 67 4e 3c c3 19 92 ac 79 ed a4 09 c6 8f 7b 7e f7 9b 6a ae a5 d6 70 3d a8 ad 87 b5 d7 51 67 5d e1 eb 8e d0 a3 7a ea 8d 38 c3 35 af 65 ad c3 ed c1 da f6 70 ed 28 30 40 40 80 e2 47 0a 78 ba 3c ca 67 06 24 ab 5e 53 9a 97 6a 43 Data Ascii: 2Cor:G$"hye,\|{g5c^+Deo3Xb99~6ME9cm)rU+0V"SpO!"ioK\|xMT;A@0U?#;j(6K!;G\|hW~k^t?"gN<y{~jp=Qg]z85ep(0@@Gx<g$^SjC
2024-10-04 15:05:12 UTC	16384	IN	Data Raw: 6f b9 4b fe 89 61 b3 c1 17 86 39 e3 63 46 95 e6 7f 5b 17 5b bf 77 7d c1 72 7c 84 3f f7 14 47 c4 d9 cf 5d c4 bd 93 67 e5 7d c5 3f 23 e8 13 ce 16 5e 17 39 45 5d a2 ed a2 b7 c5 b0 78 4a 7c 52 32 5b f2 05 c9 97 d2 80 f4 84 cc 2d 7b 52 5e 2f 5f 2b ff 40 51 52 fc a6 bc 45 79 5c 79 59 a5 53 5d af 9e a5 d6 a9 b7 6b da 34 d7 6b 1e d7 fc aa b5 68 ef d7 7e a7 13 e8 0e e9 2e e8 f9 fa 95 fa 37 0d 7c 43 c9 b0 ce d8 62 54 1a 71 63 ce 38 69 dc 6a dc 6f 3c 69 7c cb f8 8d 69 86 89 6b ae 35 1f b3 b0 2d 26 4b d0 f2 96 d5 6c 0d 59 7b ac d7 58 77 5a ef b7 c9 6d 4f 43 04 54 80 ae c0 29 f0 06 78 17 fc 10 fc 02 fc 01 fe 83 a8 22 1c c4 6c af b0 37 d8 7b 36 d8 b1 d8 91 71 8c 1c 51 47 bf 63 d3 d8 c6 b1 df 9d 17 2d a3 ab d1 5b fc fb fc e7 dc 27 8e a3 bf 9c 2a 4e 96 53 e7 24 9d 1d ce Data Ascii: oKa9cF[[w}r\|?G]g}?#^9E]xJ\|R2[-{R^/_+@QREy\yYS]k4kh~.7\|CbTqc8ijo<i\|ik5-&KlY{XwZmOCT)x"l7{6qQGc-['*NS$
2024-10-04 15:05:12 UTC	16384	IN	Data Raw: 82 2e f6 34 ea 90 bd 81 79 2e ca fa 6c d4 33 5d b7 6b 1a 9e 64 89 c9 ba aa 62 ac 2e 34 73 fa f2 c2 78 36 b0 36 9d 9e 9e 4e 2d 8e 15 3c 47 5a 57 0c 49 c1 a0 8a 69 90 c5 f0 3c e1 a0 68 a0 6a d3 55 e3 da 0f 68 4a 09 cb f4 d3 3a 51 b4 9d 29 ab 13 ff 63 e9 fa 51 80 b3 56 9f f9 74 a8 83 2c 24 02 9d e0 5b 15 e1 8a 11 c4 86 41 56 78 d9 35 2a 5d 67 4f 38 9a 32 b3 57 9f 3f ea f9 76 dc fc 6e 6e c5 6d 69 ac bc 1e 32 d9 ed a0 a4 2c b0 ac 62 b3 65 70 6d 01 45 7e 6f cc 04 2f f4 7a 3d 85 78 16 15 d6 19 fd a9 e1 c4 c4 f4 44 5a b6 4e 34 3b df 65 7c 91 84 f9 c1 a1 8d 74 2a c5 33 f3 a5 fe ee de de c1 9e 2c 8f ec 3e 8c 8f 0b 91 49 a2 fc 37 2e 21 7c 9d fd c7 ab ae 72 81 10 d6 fc 39 38 7b 98 d5 c8 05 1b 0f c9 09 00 c1 aa 99 8e dd db 4c 0c 18 f6 1a 13 1f c8 9a 1f 2e 16 43 11 60 Data Ascii: .4y.l3]kdb.4sx66N-<GZWIi<hjUhJ:Q)cQVt,$[AVx5]gO82W?vnnmi2,bepmE~o/z=xDZN4;e\|t3,>I7.!\|r98{L.C`
2024-10-04 15:05:12 UTC	14244	IN	Data Raw: a7 a8 55 be 30 91 3a 2d e3 01 e7 d4 e9 74 4f 41 82 62 3e cb f8 26 ef 56 1d 9f 96 c1 e0 ec af 27 64 0b ff 82 20 15 2a 1f 7a f7 e2 d4 a1 b9 d3 69 9d 1c 03 63 c9 6a 10 25 76 73 e7 fc da 7c a3 6e 3b c2 19 bf 26 fd 72 b9 cc 3f 5f a2 36 27 a0 88 a8 e9 51 1c 61 2f 7b e1 b8 89 f2 01 86 27 c1 e4 b2 90 d3 8e f9 c0 70 5a 84 56 d0 96 7d 77 d1 9f dd f3 43 b7 71 08 e0 80 e9 d3 91 82 98 4f dc b8 10 22 8c 97 5d c8 a6 42 44 5e e9 06 96 df 6d 3a 64 7e a1 b5 fd d6 ad 20 aa 7d 5e 9e 2c 9e 23 97 98 6f 31 0c 6b c8 16 65 9a 61 74 2a bc 79 40 5f 0b 41 86 f2 4a af d7 9e fc f2 7b f2 4a e9 5a c4 9f ea b2 ae eb 22 ab 17 c4 34 47 2e c3 47 95 21 23 2b 3e 0f 9e 97 30 ee 2c 8c a2 87 4c fc 0e 3a 35 f1 c4 56 ac c7 b7 7d de 53 a3 56 70 65 5f fb c2 a3 ef 36 f8 47 9f 15 dc 20 3d b4 70 76 66 Data Ascii: U0:-tOAb>&V'd zicj%vs\|n;&r?_6'Qa/{'pZV}wCqO"]BD^m:d~ }^,#o1keaty@_AJ{JZ"4G.G!#+>0,L:5V}SVpe_6G =pvf

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:05:12 UTC	564	OUT	GET /turnstile/v0/g/ec4b873d446c/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://copilot.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 15:05:12 UTC	441	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 15:05:12 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47262 Connection: close accept-ranges: bytes last-modified: Tue, 17 Sep 2024 16:06:37 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8cd6119e09301902-EWR
2024-10-04 15:05:12 UTC	928	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 56 74 28 65 2c 72 2c 61 2c 6f 2c 63 2c 6c 2c 67 29 7b 74 72 79 7b 76 61 72 20 66 3d 65 5b 6c 5d 28 67 29 2c 70 3d 66 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 73 29 7b 61 28 73 29 3b 72 65 74 75 72 6e 7d 66 2e 64 6f 6e 65 3f 72 28 70 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 70 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 72 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Vt(e,r,a,o,c,l,g){try{var f=e[l](g),p=f.value}catch(s){a(s);return}f.done?r(p):Promise.resolve(p).then(o,c)}function Wt(e){return function(){var r=this,a=arguments;return new Promise(function(o,c){var l=e.apply(r,a);funct
2024-10-04 15:05:12 UTC	1369	IN	Data Raw: 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 74 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 6c 6c 3f 72 3a 7b 7d 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 Data Ascii: ct.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function tt(e,r){return r=r!=null?r:{},Object.getOwnPropertyD
2024-10-04 15:05:12 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 48 74 28 65 29 7c 7c 42 74 28 65 2c 72 29 7c 7c 71 74 28 65 2c 72 29 7c 7c 6a 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 50 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 44 65 28 65 2c 72 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 5d 26 31 29 74 68 72 6f 77 20 6c 5b 31 5d 3b 72 65 74 75 72 6e 20 6c 5b 31 5d 7d 2c 74 72 Data Ascii: function Ae(e,r){return Ht(e)\|\|Bt(e,r)\|\|qt(e,r)\|\|jt()}function P(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function De(e,r){var a={label:0,sent:function(){if(l[0]&1)throw l[1];return l[1]},tr
2024-10-04 15:05:12 UTC	1369	IN	Data Raw: 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 47 74 3d 33 30 30 30 32 30 3b 76 61 72 20 50 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4d 41 4e 41 47 45 44 3d 22 6d 61 6e 61 67 65 64 22 2c Data Ascii: oaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Gt=300020;var Pe=300030;var Ue=300031;var q;(function(e){e.MANAGED="managed",
2024-10-04 15:05:12 UTC	1369	IN	Data Raw: 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 45 4e 44 45 52 3d 22 72 65 6e 64 65 72 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 7d 29 28 70 65 7c 7c 28 70 65 3d 7b 7d 29 29 3b 76 61 72 20 6f 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 7d 29 Data Ascii: al",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(function(e){e.RENDER="render",e.EXECUTE="execute"})(pe\|\|(pe={}));var oe;(function(e){e.EXECUTE="execute"})
2024-10-04 15:05:12 UTC	1369	IN	Data Raw: 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e Data Ascii: archParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clearance_level!=="default"&&r.set("clearance_level",e.params.
2024-10-04 15:05:12 UTC	1369	IN	Data Raw: 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 6c 2c 67 3d 4c 28 43 72 2c 28 6c 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 6c 21 3d 3d 76 6f 69 64 20 30 3f 6c 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 66 2c 70 3d 4c 28 4e 72 2c 28 66 3d 28 61 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 61 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 66 21 3d 3d 76 6f 69 64 20 30 3f 66 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 Data Ascii: ===Se.FAILURE_HAVING_TROUBLES,l,g=L(Cr,(l=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&l!==void 0?l:"nonexistent"),f,p=L(Nr,(f=(a=e.displayLanguage)===null\|\|a===void 0?void 0:a.toLowerCase())!==null&&f!==void 0?f:"nonexistent")
2024-10-04 15:05:12 UTC	1369	IN	Data Raw: 75 63 74 3a 49 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 67 29 7b 76 61 72 20 66 3d 5b 6e 75 6c 6c 5d 3b 66 2e 70 75 73 68 2e 61 70 70 6c 79 28 66 2c 6c 29 3b 76 61 72 20 70 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 66 29 2c 73 3d 6e 65 77 20 70 3b 72 65 74 75 72 6e 20 67 26 26 4a 28 73 2c 67 2e 70 72 6f 74 6f 74 79 70 65 29 2c 73 7d 2c 49 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 72 65 74 75 72 6e 20 63 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 Data Ascii: uct:Ie=function(c,l,g){var f=[null];f.push.apply(f,l);var p=Function.bind.apply(c,f),s=new p;return g&&J(s,g.prototype),s},Ie.apply(null,arguments)}function ce(e){return ce=Object.setPrototypeOf?Object.getPrototypeOf:function(a){return a.__proto__\|\|Object
2024-10-04 15:05:12 UTC	1369	IN	Data Raw: 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 71 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 57 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 57 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 57 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 54 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 69 66 28 55 28 72 2c 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 72 Data Ascii: flare Turnstile] ".concat(e))}function qe(e){return e.startsWith(We)?e.substring(We.length):null}function K(e){return"".concat(We).concat(e)}function Tt(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,r=document.currentScript;if(U(r,HTMLScriptElement)&&e.test(r
2024-10-04 15:05:12 UTC	1369	IN	Data Raw: 66 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b 76 61 72 20 73 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 73 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 66 65 65 64 62 61 63 6b 22 2c 73 2e 69 64 3d Data Ascii: f.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";var s=document.createElement("div");s.className="cf-turnstile-feedback",s.id=

Timestamp	Bytes transferred	Direction	Data
2024-10-04 15:05:13 UTC	1079	OUT	GET /bat.js HTTP/1.1 Host: bat.bing.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MUID=203E704BD0C66F6728A46545D1B46ED9; _EDGE_S=F=1&SID=3F0A0C0D2F436EEF159D19032E316F66; _EDGE_V=1; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=FC81B417F4A143FB89AC14085A1C663D&dmnchg=1; SRCHUSR=DOB=20241004; _SS=SID=3F0A0C0D2F436EEF159D19032E316F66; SRCHHPGUSR=SRCHLANG=en&IG=B0BC510672BC4FF1BA17172617D63D82&DM=0&BRW=M&BRH=M&CW=1280&CH=907&SCW=1280&SCH=907&DPR=1.0&UTC=-240&PV=10.0.0; _UR=QS=0&TQS=0&Pn=0; _HPVN=CS=eyJQbiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiUCJ9LCJTYyI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiSCJ9LCJReiI6eyJDbiI6MSwiU3QiOjAsIlFzIjowLCJQcm9kIjoiVCJ9LCJBcCI6dHJ1ZSwiTXV0ZSI6dHJ1ZSwiTGFkIjoiMjAyNC0xMC0wNFQwMDowMDowMFoiLCJJb3RkIjowLCJHd2IiOjAsIlRucyI6MCwiRGZ0IjpudWxsLCJNdnMiOjAsIkZsdCI6MCwiSW1wIjozLCJUb2JuIjowfQ==
2024-10-04 15:05:13 UTC	651	IN	HTTP/1.1 200 OK Cache-Control: private,max-age=1800 Content-Length: 50523 Content-Type: application/javascript Last-Modified: Thu, 19 Sep 2024 15:43:41 GMT Accept-Ranges: bytes ETag: "803483b3aaadb1:0" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: EB781764C6FB467D8F5548A6BA003504 Ref B: EWR30EDGE0415 Ref C: 2024-10-04T15:05:13Z Date: Fri, 04 Oct 2024 15:05:13 GMT Connection: close
2024-10-04 15:05:13 UTC	439	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 55 45 54 28 6f 29 7b 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 26 26 6e 2e 6c 65 6e 67 74 68 3e 30 7d 3b 74 68 69 73 2e 64 6f 6d 61 69 6e 3d 22 62 61 74 2e 62 69 6e 67 2e 63 6f 6d 22 3b 74 68 69 73 2e 64 6f 6d 61 69 6e 43 6c 3d 22 62 61 74 2e 62 69 6e 67 2e 6e 65 74 22 3b 74 68 69 73 2e 55 52 4c 4c 45 4e 47 54 48 4c 49 4d 49 54 3d 34 30 39 36 3b 74 68 69 73 2e 70 61 67 65 4c 6f 61 64 45 76 74 3d 22 70 61 67 65 4c 6f 61 64 22 3b 74 68 69 73 2e 63 75 73 74 6f 6d 45 76 74 3d 22 63 75 73 74 6f 6d 22 3b 74 68 69 73 2e 70 61 67 65 56 69 65 77 45 76 74 3d 22 70 61 67 65 5f 76 69 65 77 22 3b 6f 2e 56 65 72 3d 6f 2e 56 65 72 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 Data Ascii: function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&
2024-10-04 15:05:13 UTC	8192	IN	Data Raw: 65 6e 61 62 6c 65 64 3a 21 31 2c 76 65 6e 64 6f 72 49 64 3a 31 31 32 36 2c 68 61 73 4c 6f 61 64 65 64 3a 21 31 2c 74 69 6d 65 6f 75 74 49 64 3a 6e 75 6c 6c 2c 67 64 70 72 41 70 70 6c 69 65 73 3a 75 6e 64 65 66 69 6e 65 64 2c 61 64 53 74 6f 72 61 67 65 41 6c 6c 6f 77 65 64 3a 75 6e 64 65 66 69 6e 65 64 2c 6d 65 61 73 75 72 65 6d 65 6e 74 41 6c 6c 6f 77 65 64 3a 75 6e 64 65 66 69 6e 65 64 2c 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 41 6c 6c 6f 77 65 64 3a 75 6e 64 65 66 69 6e 65 64 7d 3b 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 63 75 73 69 67 3d 7b 68 61 73 4c 6f 61 64 65 64 3a 21 31 2c 74 69 6d 65 6f 75 74 49 64 3a 6e 75 6c 6c 2c 62 6c 6f 62 3a 7b 7d 7d 3b 74 68 69 73 2e 62 65 61 63 6f 6e 50 61 72 61 6d 73 3d 7b 7d 3b 74 68 69 73 2e 73 75 70 70 6f Data Ascii: enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.uetConfig.cusig={hasLoaded:!1,timeoutId:null,blob:{}};this.beaconParams={};this.suppo
2024-10-04 15:05:13 UTC	7377	IN	Data Raw: 73 63 6c 6b 69 64 29 7d 7d 63 61 74 63 68 28 72 29 7b 7d 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 74 63 66 2e 68 61 73 4c 6f 61 64 65 64 7c 7c 28 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 74 63 66 2e 68 61 73 4c 6f 61 64 65 64 3d 21 30 2c 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 74 63 66 2e 74 69 6d 65 6f 75 74 49 64 29 2c 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 74 63 66 2e 74 69 6d 65 6f 75 74 49 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 75 65 74 4c 6f 61 64 65 64 21 3d 3d 21 30 26 26 74 68 69 73 2e 63 68 65 63 6b 75 65 74 48 6f 73 74 64 6f 63 75 6d 65 6e 74 6c 6f 61 64 28 29 29 7d 7d 3b 74 68 69 73 2e 67 65 74 43 6c 55 72 6c 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 75 65 Data Ascii: sclkid)}}catch(r){}this.uetConfig.tcf.hasLoaded\|\|(this.uetConfig.tcf.hasLoaded=!0,clearTimeout(this.uetConfig.tcf.timeoutId),this.uetConfig.tcf.timeoutId=null,this.uetLoaded!==!0&&this.checkuetHostdocumentload())}};this.getClUrl=function(n){return this.ue
2024-10-04 15:05:13 UTC	8192	IN	Data Raw: 75 6e 64 65 66 69 6e 65 64 29 72 65 74 75 72 6e 3b 68 3d 75 3d 3d 3d 74 68 69 73 2e 70 61 67 65 56 69 65 77 45 76 74 3f 74 68 69 73 2e 70 61 67 65 4c 6f 61 64 45 76 74 3a 74 68 69 73 2e 63 75 73 74 6f 6d 45 76 74 3b 74 68 69 73 2e 65 76 74 28 68 2c 75 2c 73 2c 6e 5b 32 5d 29 7d 65 6c 73 65 20 69 66 28 6e 5b 30 5d 3d 3d 3d 22 73 65 74 22 29 7b 69 66 28 74 79 70 65 6f 66 20 6e 5b 31 5d 5b 30 5d 21 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 3b 66 6f 72 28 69 20 69 6e 20 6e 5b 31 5d 5b 30 5d 29 74 68 69 73 2e 6b 6e 6f 77 6e 50 61 72 61 6d 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 69 29 26 26 28 74 68 69 73 2e 70 61 67 65 4c 65 76 65 6c 50 61 72 61 6d 73 5b 69 5d 3d 6e 5b 31 5d 5b 30 5d 5b 69 5d 2c 69 3d 3d 3d 22 70 69 64 22 26 26 74 68 69 73 2e Data Ascii: undefined)return;h=u===this.pageViewEvt?this.pageLoadEvt:this.customEvt;this.evt(h,u,s,n[2])}else if(n[0]==="set"){if(typeof n[1][0]!="object")return;for(i in n[1][0])this.knownParams.hasOwnProperty(i)&&(this.pageLevelParams[i]=n[1][0][i],i==="pid"&&this.
2024-10-04 15:05:13 UTC	8192	IN	Data Raw: 6e 2e 6d 74 70 3d 6e 61 76 69 67 61 74 6f 72 2e 6d 61 78 54 6f 75 63 68 50 6f 69 6e 74 73 29 2c 6e 7d 3b 74 68 69 73 2e 72 65 6d 6f 76 65 54 72 61 69 6c 69 6e 67 41 6d 70 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 6e 2e 63 68 61 72 41 74 28 6e 2e 6c 65 6e 67 74 68 2d 31 29 3b 72 65 74 75 72 6e 28 74 3d 3d 3d 22 26 22 7c 7c 74 3d 3d 3d 22 3f 22 29 26 26 28 6e 3d 6e 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 6e 2e 6c 65 6e 67 74 68 2d 31 29 29 2c 6e 7d 3b 74 68 69 73 2e 68 65 6c 70 65 72 45 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 74 79 70 65 6f 66 20 43 75 73 74 6f 6d 45 76 65 6e 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 76 61 72 20 74 3d 7b 65 72 72 4d 73 67 3a 6e 2c 74 61 67 49 64 3a 74 68 69 73 2e 62 65 61 63 6f 6e 50 61 Data Ascii: n.mtp=navigator.maxTouchPoints),n};this.removeTrailingAmp=function(n){var t=n.charAt(n.length-1);return(t==="&"\|\|t==="?")&&(n=n.substring(0,n.length-1)),n};this.helperError=function(n){if(typeof CustomEvent=="function"){var t={errMsg:n,tagId:this.beaconPa
2024-10-04 15:05:13 UTC	8192	IN	Data Raw: 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 70 61 67 65 74 79 70 65 22 29 3e 30 3f 28 74 2e 70 61 67 65 74 79 70 65 3d 74 68 69 73 2e 76 61 6c 69 64 61 74 65 50 61 67 65 54 79 70 65 28 74 2e 70 61 67 65 74 79 70 65 2c 74 68 69 73 2e 76 61 6c 69 64 52 65 74 61 69 6c 50 61 67 65 54 79 70 65 56 61 6c 75 65 73 29 2c 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 70 72 6f 64 69 64 22 29 3e 30 26 26 28 74 2e 70 72 6f 64 69 64 3d 74 68 69 73 2e 76 61 6c 69 64 61 74 65 50 72 6f 64 49 64 28 74 2e 70 72 6f 64 69 64 29 29 29 3a 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 70 72 6f 64 69 64 22 29 3e 30 26 26 74 68 69 73 2e 74 68 72 6f 77 45 72 72 6f 72 28 74 68 69 73 2e 6d 69 73 73 69 6e 67 50 61 67 65 54 79 70 65 45 78 63 65 70 74 69 6f 6e Data Ascii: t.hasOwnProperty("pagetype")>0?(t.pagetype=this.validatePageType(t.pagetype,this.validRetailPageTypeValues),t.hasOwnProperty("prodid")>0&&(t.prodid=this.validateProdId(t.prodid))):t.hasOwnProperty("prodid")>0&&this.throwError(this.missingPageTypeException
2024-10-04 15:05:13 UTC	8192	IN	Data Raw: 75 3c 3d 33 3f 74 5b 69 5d 3d 22 22 3a 64 65 6c 65 74 65 20 74 5b 69 5d 2c 72 3d 74 68 69 73 2e 73 74 72 69 6e 67 69 66 79 54 6f 52 65 71 75 65 73 74 28 74 29 2c 66 3d 74 68 69 73 2e 72 65 6d 6f 76 65 54 72 61 69 6c 69 6e 67 41 6d 70 28 65 2b 72 29 29 3b 74 68 69 73 2e 66 69 72 65 42 65 61 63 6f 6e 49 6d 67 28 66 29 3b 74 68 69 73 2e 73 6e 69 70 70 65 74 45 76 65 6e 74 51 75 65 75 65 2e 70 75 73 68 28 72 29 3b 74 68 69 73 2e 73 6e 69 70 70 65 74 45 76 65 6e 74 51 75 65 75 65 2e 6c 65 6e 67 74 68 3e 32 30 26 26 74 68 69 73 2e 73 6e 69 70 70 65 74 45 76 65 6e 74 51 75 65 75 65 2e 73 68 69 66 74 28 29 3b 74 72 79 7b 74 79 70 65 6f 66 20 43 75 73 74 6f 6d 45 76 65 6e 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 73 3d 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 Data Ascii: u<=3?t[i]="":delete t[i],r=this.stringifyToRequest(t),f=this.removeTrailingAmp(e+r));this.fireBeaconImg(f);this.snippetEventQueue.push(r);this.snippetEventQueue.length>20&&this.snippetEventQueue.shift();try{typeof CustomEvent=="function"&&(s=new CustomEve
2024-10-04 15:05:13 UTC	1747	IN	Data Raw: 28 21 74 68 69 73 2e 69 73 41 64 53 74 6f 72 61 67 65 41 6c 6c 6f 77 65 64 28 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 69 3d 6e 3d 3d 3d 30 3f 74 68 69 73 2e 73 65 73 73 69 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3a 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 76 69 64 43 6f 6f 6b 69 65 2c 74 3d 74 68 69 73 2e 67 65 74 43 6f 6f 6b 69 65 28 69 2c 22 22 2c 74 68 69 73 2e 69 6e 73 69 67 68 74 73 43 6f 6f 6b 69 65 4d 61 78 4c 65 6e 67 74 68 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 28 74 29 7c 7c 28 74 3d 74 68 69 73 2e 67 65 74 4c 6f 63 61 6c 53 74 6f 72 61 67 65 42 61 63 6b 75 70 28 69 2c 74 68 69 73 2e 69 6e 73 69 67 68 74 73 43 6f 6f 6b 69 65 4d 61 78 4c 65 6e 67 74 68 29 29 2c 74 68 69 73 2e 69 6e 73 69 67 68 Data Ascii: (!this.isAdStorageAllowed())return null;var i=n===0?this.sessionCookieName:this.uetConfig.vidCookie,t=this.getCookie(i,"",this.insightsCookieMaxLength);return this.stringExists(t)\|\|(t=this.getLocalStorageBackup(i,this.insightsCookieMaxLength)),this.insigh