Windows Analysis Report
https://ascmiami.sharepoint.com/:f:/s/ASCMiami/EnZkVOJg1ZlAgu5SBwQGHckBxo1H_z4nHojmvCDnQJFG4A?e=5%3am8TN7j&at=9

{
    "typosquatting": false,
    "unusual_query_string": false,
    "suspicious_tld": false,
    "ip_in_url": false,
    "long_subdomain": false,
    "malicious_keywords": false,
    "encoded_characters": false,
    "redirection": false,
    "contains_email_address": false,
    "known_domain": true,
    "brand_spoofing_attempt": false,
    "third_party_hosting": false,
    "reasoning": "This is a legitimate Microsoft SharePoint URL using a company subdomain (ascmiami). SharePoint is Microsoft's document management and collaboration platform, and this follows their standard URL format for organizational SharePoint sites."
}

URL: https://ascmiami.sharepoint.com

{
    "risk_score": 2,
    "reasoning": "The provided JavaScript snippet appears to be a legitimate function for setting the image URL of an HTML element. It uses standard DOM manipulation techniques and attempts to load an appropriate file type icon using the `@uifabric/file-type-icons` library. The fallback to a default folder icon is a common practice when the desired icon is not available. Overall, this script does not exhibit any high-risk behaviors and is likely part of a legitimate application."
}

// <![CDATA[ 

function setImageUrl() {  
var image = document.getElementById('imgSharingLinkTargetIcon'); 
image.style.opacity = '0'; 
image.onerror = function() {image.src = 'https://ascmiami.sharepoint.com/sites/ASCMiami/_layouts/15/images/folder.png'; image.style.opacity = '1'}; 
try { 
require(['@uifabric/file-type-icons/lib/initializeFileTypeIcons', '@uifabric/file-type-icons/lib/getFileTypeIconProps', '@uifabric/styling/lib/utilities/icons'], function( initialize, getFileTypeIconProps, icons) {
initialize.initializeFileTypeIcons(); 
var props = getFileTypeIconProps.getFileTypeIconProps({ extension: '', size: 32, imageFileType: 'png', type: 2 }); 
image.src = icons.getIcon(props.iconName).code.props.src; image.style.opacity = '1';});
} catch(e) { image.src ='https://ascmiami.sharepoint.com/sites/ASCMiami/_layouts/15/images/folder.png'; image.style.opacity = '1'}}
//   

{
    "risk_score": 2,
    "reasoning": "The provided JavaScript snippet appears to be a common pattern for handling form submissions in ASP.NET applications. It does not exhibit any high-risk behaviors, such as dynamic code execution, data exfiltration, or obfuscation. The script is primarily responsible for managing form submission events and does not demonstrate any suspicious or malicious activities. Therefore, it is assessed as a low-risk script."
}

//<![CDATA[
var theForm = document.forms['inputForm'];
	if (!theForm) {
    theForm = document.inputForm;
}
	function __doPostBack(eventTarget, eventArgument) {
    if (!theForm.onsubmit || (theForm.onsubmit() != false)) {
        theForm.__EVENTTARGET.value = eventTarget;
        theForm.__EVENTARGUMENT.value = eventArgument;
        theForm.submit();
    }
}
	//  

{
    "risk_score": 1,
    "reasoning": "The provided JavaScript snippet appears to be a legitimate implementation of form validation, including required field and email format validation. It does not exhibit any high-risk behaviors such as dynamic code execution, data exfiltration, or obfuscation. The script is focused on client-side validation, which is a common and expected practice for web applications. Overall, this script poses a low risk and is likely part of a benign web application."
}

//<![CDATA[
var ReqTOAAEMail = document.all ? document.all["ReqTOAAEMail"] : document.getElementById("ReqTOAAEMail");
	ReqTOAAEMail.controltovalidate = "txtTOAAEmail";
	ReqTOAAEMail.focusOnError = "t";
	ReqTOAAEMail.errormessage = "Your email address is required";
	ReqTOAAEMail.display = "Dynamic";
	ReqTOAAEMail.evaluationfunction = "RequiredFieldValidatorEvaluateIsValid";
	ReqTOAAEMail.initialvalue = "";
	var ValidateTOAAEMail = document.all ? document.all["ValidateTOAAEMail"] : document.getElementById("ValidateTOAAEMail");
	ValidateTOAAEMail.controltovalidate = "txtTOAAEmail";
	ValidateTOAAEMail.focusOnError = "t";
	ValidateTOAAEMail.errormessage = "Your email address must be in the correct email format (e.g. \"user@contoso.com\")";
	ValidateTOAAEMail.display = "Dynamic";
	ValidateTOAAEMail.evaluationfunction = "RegularExpressionValidatorEvaluateIsValid";
	ValidateTOAAEMail.validationexpression = "^[^ \\r\\t\\n\\f@]+@[^ \\r\\t\\n\\f@]+$";
	var IncorrectTOAAEMail = document.all ? document.all["IncorrectTOAAEMail"] : document.getElementById("IncorrectTOAAEMail");
	IncorrectTOAAEMail.controltovalidate = "txtTOAAEmail";
	IncorrectTOAAEMail.focusOnError = "t";
	IncorrectTOAAEMail.errormessage = "Sorry, this email address isn\'t associated with this secure link. Please contact the person who shared it with you.";
	IncorrectTOAAEMail.display = "Dynamic";
	IncorrectTOAAEMail.evaluationfunction = "CustomValidatorEvaluateIsValid";
	//  

{
    "risk_score": 1,
    "reasoning": "The provided JavaScript snippet appears to be a legitimate implementation of form validation logic, including required field validation and email format validation. It does not exhibit any high-risk behaviors such as dynamic code execution, data exfiltration, or obfuscation. The script is focused on client-side validation and does not demonstrate any suspicious activities, so it is considered a low-risk script."
}

//<![CDATA[
var ReqTOAAEMail = document.all ? document.all["ReqTOAAEMail"] : document.getElementById("ReqTOAAEMail");
	ReqTOAAEMail.controltovalidate = "txtTOAAEmail";
	ReqTOAAEMail.focusOnError = "t";
	ReqTOAAEMail.errormessage = "Your email address is required";
	ReqTOAAEMail.display = "Dynamic";
	ReqTOAAEMail.evaluationfunction = "RequiredFieldValidatorEvaluateIsValid";
	ReqTOAAEMail.initialvalue = "";
	var ValidateTOAAEMail = document.all ? document.all["ValidateTOAAEMail"] : document.getElementById("ValidateTOAAEMail");
	ValidateTOAAEMail.controltovalidate = "txtTOAAEmail";
	ValidateTOAAEMail.focusOnError = "t";
	ValidateTOAAEMail.errormessage = "Your email address must be in the correct email format (e.g. \"user@contoso.com\")";
	ValidateTOAAEMail.display = "Dynamic";
	ValidateTOAAEMail.evaluationfunction = "RegularExpressionValidatorEvaluateIsValid";
	ValidateTOAAEMail.validationexpression = "^[^ \\r\\t\\n\\f@]+@[^ \\r\\t\\n\\f@]+$";
	var IncorrectTOAAEMail = document.all ? document.all["IncorrectTOAAEMail"] : document.getElementById("IncorrectTOAAEMail");
	IncorrectTOAAEMail.controltovalidate = "txtTOAAEmail";
	IncorrectTOAAEMail.focusOnError = "t";
	IncorrectTOAAEMail.errormessage = "Sorry, this email address isn\'t associated with this secure link. Please contact the person who shared it with you.";
	IncorrectTOAAEMail.display = "Dynamic";
	IncorrectTOAAEMail.isvalid = "False";
	IncorrectTOAAEMail.evaluationfunction = "CustomValidatorEvaluateIsValid";
	//  

{
    "risk_score": 2,
    "reasoning": "The provided JavaScript snippet appears to be a part of the ASP.NET WebForms framework, which is a legitimate and widely used web development technology. The code does not contain any high-risk indicators such as dynamic code execution, data exfiltration, or obfuscated code/URLs. The behaviors observed, such as form submission handling and client-side validation, are common and expected in web applications. While the code uses some legacy APIs like `XDomainRequest`, these pose minor risks and are not inherently malicious. Overall, the script seems to be a standard implementation of WebForms functionality and does not exhibit any suspicious or malicious behavior."
}

function WebForm_PostBackOptions(eventTarget, eventArgument, validation, validationGroup, actionUrl, trackFocus, clientSubmit) {
    this.eventTarget = eventTarget;
    this.eventArgument = eventArgument;
    this.validation = validation;
    this.validationGroup = validationGroup;
    this.actionUrl = actionUrl;
    this.trackFocus = trackFocus;
    this.clientSubmit = clientSubmit;
}
function WebForm_DoPostBackWithOptions(options) {
    var validationResult = true;
    if (options.validation) {
        if (typeof(Page_ClientValidate) == 'function') {
            validationResult = Page_ClientValidate(options.validationGroup);
        }
    }
    if (validationResult) {
        if ((typeof(options.actionUrl) != "undefined") && (options.actionUrl != null) && (options.actionUrl.length > 0)) {
            theForm.action = options.actionUrl;
        }
        if (options.trackFocus) {
            var lastFocus = theForm.elements["__LASTFOCUS"];
            if ((typeof(lastFocus) != "undefined") && (lastFocus != null)) {
                if (typeof(document.activeElement) == "undefined") {
                    lastFocus.value = options.eventTarget;
                }
                else {
                    var active = document.activeElement;
                    if ((typeof(active) != "undefined") && (active != null)) {
                        if ((typeof(active.id) != "undefined") && (active.id != null) && (active.id.length > 0)) {
                            lastFocus.value = active.id;
                        }
                        else if (typeof(active.name) != "undefined") {
                            lastFocus.value = active.name;
                        }
                    }
                }
            }
        }
    }
    if (options.clientSubmit) {
        __doPostBack(options.eventTarget, options.eventArgument);
    }
}
var __pendingCallbacks = new Array();
var __synchronousCallBackIndex = -1;
function WebForm_DoCallback(eventTarget, eventArgument, eventCallback, context, errorCallback, useAsync) {
    var postData = __theFormPostData +
                "__CALLBACKID=" + WebForm_EncodeCallback(eventTarget) +
                "&__CALLBACKPARAM=" + WebForm_EncodeCallback(eventArgument);
    if (theForm["__EVENTVALIDATION"]) {
        postData += "&__EVENTVALIDATION=" + WebForm_EncodeCallback(theForm["__EVENTVALIDATION"].value);
    }
    var xmlRequest,e;
    try {
        xmlRequest = new XMLHttpRequest();
    }
    catch(e) {
        try {
            xmlRequest = new ActiveXObject("Microsoft.XMLHTTP");
        }
        catch(e) {
        }
    }
    var setRequestHeaderMethodExists = true;
    try {
        setRequestHeaderMethodExists = (xmlRequest && xmlRequest.setRequestHeader);
    }
    catch(e) {}
    var callback = new Object();
    callback.eventCallback = eventCallback;
    callback.context = context;
    callback.errorCallback = errorCallback;
    callback.async = useAsync;
    var callbackIndex = WebForm_FillFirstAvailableSlot(__pendingCallbacks, callback);
    if (!useAsync) {
        if (__synchronousCallBackIndex != -1) {
            __pendingCallbacks[__synchronousCallBackIndex] = null;
        }
        __synchronousCallBackIndex = callbackIndex;
    }
    if (setRequestHeaderMethodExists) {
        xmlRequest.onreadystatechange = WebForm_CallbackComplete;
        callback.xmlRequest = xmlRequest;
        // e.g. http:
        var action = theForm.action || document.location.pathname, fragmentIndex = action.indexOf('#');
        if (fragmentIndex !== -1) {
            action = action.substr(0, fragmentIndex);
        }
        if (!__nonMSDOMBrowser) {
            var domain = "";
            var path = action;
            var query = "";
            var queryIndex = action.indexOf('?');
            if (queryIndex !== -1) {
                query = action.substr(queryIndex);
                path = action.s

{
    "risk_score": 3,
    "reasoning": "The provided JavaScript code appears to be a part of a client-side validation framework, which is a common and legitimate practice in web development. The code does not contain any high-risk indicators, such as dynamic code execution, data exfiltration, or obfuscated code/URLs. The behaviors observed, such as DOM manipulation, error reporting, and tracking, are typical for a validation framework and do not pose significant security risks. While the code uses some legacy practices, such as the `XDomainRequest` API, the overall risk is low, and the script is likely to be part of a legitimate application."
}

var Page_ValidationVer = "125";
var Page_IsValid = true;
var Page_BlockSubmit = false;
var Page_InvalidControlToBeFocused = null;
var Page_TextTypes = /^(text|password|file|search|tel|url|email|number|range|color|datetime|date|month|week|time|datetime-local)$/i;
function ValidatorUpdateDisplay(val) {
    if (typeof(val.display) == "string") {
        if (val.display == "None") {
            return;
        }
        if (val.display == "Dynamic") {
            val.style.display = val.isvalid ? "none" : "inline";
            return;
        }
    }
    if ((navigator.userAgent.indexOf("Mac") > -1) &&
        (navigator.userAgent.indexOf("MSIE") > -1)) {
        val.style.display = "inline";
    }
    val.style.visibility = val.isvalid ? "hidden" : "visible";
}
function ValidatorUpdateIsValid() {
    Page_IsValid = AllValidatorsValid(Page_Validators);
}
function AllValidatorsValid(validators) {
    if ((typeof(validators) != "undefined") && (validators != null)) {
        var i;
        for (i = 0; i < validators.length; i++) {
            if (!validators[i].isvalid) {
                return false;
            }
        }
    }
    return true;
}
function ValidatorHookupControlID(controlID, val) {
    if (typeof(controlID) != "string") {
        return;
    }
    var ctrl = document.getElementById(controlID);
    if ((typeof(ctrl) != "undefined") && (ctrl != null)) {
        ValidatorHookupControl(ctrl, val);
    }
    else {
        val.isvalid = true;
        val.enabled = false;
    }
}
function ValidatorHookupControl(control, val) {
    if (typeof(control.tagName) != "string") {
        return;  
    }
    if (control.tagName != "INPUT" && control.tagName != "TEXTAREA" && control.tagName != "SELECT") {
        var i;
        for (i = 0; i < control.childNodes.length; i++) {
            ValidatorHookupControl(control.childNodes[i], val);
        }
        return;
    }
    else {
        if (typeof(control.Validators) == "undefined") {
            control.Validators = new Array;
            var eventType;
            if (control.type == "radio") {
                eventType = "onclick";
            } else {
                eventType = "onchange";
                if (typeof(val.focusOnError) == "string" && val.focusOnError == "t") {
                    ValidatorHookupEvent(control, "onblur", "ValidatedControlOnBlur(event); ");
                }
            }
            ValidatorHookupEvent(control, eventType, "ValidatorOnChange(event); ");
            if (Page_TextTypes.test(control.type)) {
                ValidatorHookupEvent(control, "onkeypress", 
                    "event = event || window.event; if (!ValidatedTextBoxOnKeyPress(event)) { event.cancelBubble = true; if (event.stopPropagation) event.stopPropagation(); return false; } ");
            }
        }
        control.Validators[control.Validators.length] = val;
    }
}
function ValidatorHookupEvent(control, eventType, functionPrefix) {
    var ev = control[eventType];
    if (typeof(ev) == "function") {
        ev = ev.toString();
        ev = ev.substring(ev.indexOf("{") + 1, ev.lastIndexOf("}"));
    }
    else {
        ev = "";
    }
    control[eventType] = new Function("event", functionPrefix + " " + ev);
}
function ValidatorGetValue(id) {
    var control;
    control = document.getElementById(id);
    if (typeof(control.value) == "string") {
        return control.value;
    }
    return ValidatorGetValueRecursive(control);
}
function ValidatorGetValueRecursive(control)
{
    if (typeof(control.value) == "string" && (control.type != "radio" || control.checked == true)) {
        return control.value;
    }
    var i, val;
    for (i = 0; i<control.childNodes.length; i++) {
        val = ValidatorGetValueRecursive(control.childNodes[i]);
        if (val != "") return val;
    }
    return "";
}
function Page_ClientValidate(validationGroup) {
    Page_In