Windows Analysis Report
https://url.us.m.mimecastprotect.com/s/kCCtC5yEz0tWp5ANrfz_KPV?domain=paplastics365-my.sharepoint.com

Overview

General Information

Sample URL: https://url.us.m.mimecastprotect.com/s/kCCtC5yEz0tWp5ANrfz_KPV?domain=paplastics365-my.sharepoint.com
Analysis ID: 1428887
Infos:

Detection

Score: 0
Range: 0 - 100
Whitelisted: false
Confidence: 100%

Signatures

No high impact signatures.

Classification

There are no high impact signatures.

Source: unknown HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 96.7.245.41
Source: unknown TCP traffic detected without corresponding DNS query: 23.40.205.73
Source: unknown TCP traffic detected without corresponding DNS query: 23.40.205.73
Source: unknown TCP traffic detected without corresponding DNS query: 96.7.245.41
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: global traffic HTTP traffic detected: GET /s/kCCtC5yEz0tWp5ANrfz_KPV?domain=paplastics365-my.sharepoint.com HTTP/1.1Host: url.us.m.mimecastprotect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /r/IDfwlpRsWmREHFrbI5qLYfBuuEaM9LGKIBiepEOjV7kLjfrVnHQTY1rZMPXl4VHWAOHtxhBBBf-76COZF22t6aUBCO5AARscnpXGR7hoozAtjxNJdjD-Ldmu-ruXNtn7bWmGC9idB1UmxN7ld_HM5LSwM5YGkYWw5uZ178R7NKLzhB7fZyax7RHt_lEbGXuUCzei-PX4XB3mAVbc5Njv4uiJdcszk6GE9tSHpJl8Vd4aJIBOvRiBE7QJC8fJwNFC148650twsIYaxV3ezrNTKfKR56ZM7fYlkNyOz-wnzwwQM4JBHpnVkPGX7r9MWMXtLFOIumwblzuRHatgWK9QxweV6to6PRd4mM6Y1bQVUaRLuK0E8-3-2h5Zv7mlTOaNd8OD7ROws6cfZbk4-BDWV9Xl396-VPy7fP-edzE4_Xtpi3TR1lo5hJx42Apy78-khliUQ6uqnmUTQFjhVaCgYok8ka4nxKz9xxitY4T3mZEufjfe85NCZ8R6dzQiKk0nOpEnxxz1493-nKHYHUT2PelUbPFzuLzeZz1Q0-ubWBlT0KG4YO3WYDWqCCKMTEuogrid6xzxVPGuH5BHZkr-ghuvJwhq4UPdzIAfTkANHf_KmLYNvtSz0DZflJQ0jnhyL3x97hvYaGem9pqZFm13T2j2V1kE9Ze-N7H5J3SFXPyd8jjFogbbU2NRyGAebW5xBcIeMpifGgL4s7nlrC3eZGJh4scrUbdo3z-XTZZ9rYstF9TK9AMzi3qxtsJIkdglw8cVxzM3L8xajhCsobgx1sNETGPhA_jSPJIxL-gnRfoWbPW12dsq90jbo2A_QMx-5RFecjUKbemwH9QY2ybtnrpwuVHDiP-ZcIJX8kQ9ls3BHv6-jTkm5HWsxVTCaFZ0JgEM8KT6WqoCl4UoHewA2eVVR7VPc04B6lY_vGRar625J3T4f2FgMVq3dzbiuOYJPoMWlsgcspbmH7aRgvcC8s34Pt2oLAzY-Ved5FTiuG5wKSBc6g5czq3ngsUrZN-hPb7pXBqxcOOOOq6P23s7KVSObH6ROQpp3OABww88GOsHH-eCZZEbrNB_6Q2-g0H7MSL2xP3ma8usEWduVrBj5eeShC0cfSxt7d3RFCkG_FbHXYnbpCxL2dopdEpaBIjS5Xy1ZBP6X5mLqz0pbtZwgKz4kxkcCrBSWYlkgGAvFMclbcVnv7NlEiluGkS77pmPLs4oVUDjsCeiPqFNzh8QFCiGNSYbI5PBHE7VWek7uYxCwhNAEFWJtkin12QHBHlTdr1PfwxgyBMHZ85GH5TdqElKaMVECS-lMx4-ClMDgpgpvr9CDYr1t8aYVHdFK36t480B31yKkwhdr7cOK2UVSufE02vSb9dyz1xGx-t1wqC1aU4KvQKHAdAxNgaSiE50AnHGMJQ3cXU1W18_fAEoWEU4frUkXTAXpVytJpafyItnYftMpuJpzNnpDDunQ43WHmOpRcglYL_Llu7W42sSreASvDWEuEQmBKLR2pqfEZYqLqf5aoSgpzjcAg043GVF9EV0JPp3IrVtTMsdZZ0RE18IKheJ2cc7-p4jnT0ZAOAc_GK-OveksmRXxc49aV0bY-Ws4_imoLs2ffI69zm2f2OnRYPPx6FzfBUBb73XGRFdBlX-ldXV9yqBHCVSJn7HYvVBHWzBLxhc50MQug4aSGIv2_jGYtzPHSIMTOfOU0TvMPIcIlkDibDHXwQ-nQQtI1-mmmgxHJWZCWKVFgCYZjD_pB3FPwQr2YUONA3A3eSKTJyHlw_HGrHmdZxZF70IVUmPqh4rOpA2N0uGDSudxWAiB3bsvTajsdzN87tSP9UE5x05sPPl4OoCIqHZCXFw1vqk2sUchnGkk7a9PSGMbGxBoEsUKSZRzXAZsvGE9vXvxnt3TZpzQmA86VE1MAxLiA94qhiAgszV4GFTEhMlPMyGnRkuCu9JrFSvkHpKY77AxY3KL0xE4Y3xKAH1Vu3tkywvnXHiU-m8bwfAmqywL9TjOonhlWpdRJ_MT1a7VrNq96pw47MSDr08dZ8qZHEjBM0r4sHhFxdM22jDmCR9xQfx4cj1Z8FN8MC440dvSMXaTKfiJdB-dye958n4ybhq7LjKilfLAPBW7kvx4PkwvH4p29Q-OrEMDJ00njTqOQU HTTP/1.1Host: url.us.m.mimecastprotect.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: */*Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic HTTP traffic detected: GET /:f:/g/personal/kbistas_paplastics_com/EjYXLu0ui1ROmLqNaw-_RFsBr9HwE1hP6_D5o3Rsmmapow?e=PgulaK HTTP/1.1Host: paplastics365-my.sharepoint.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /personal/kbistas_paplastics_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fkbistas%5Fpaplastics%5Fcom%2FDocuments%2FSeadar%20Builders%20%2D%20Request%20For%20Proposal&ga=1 HTTP/1.1Host: paplastics365-my.sharepoint.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic HTTP traffic detected: GET /_layouts/15/spwebworkerproxy.ashx HTTP/1.1Host: paplastics365-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic HTTP traffic detected: GET /_layouts/15/spwebworkerproxy.ashx HTTP/1.1Host: paplastics365-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic HTTP traffic detected: GET /personal/kbistas_paplastics_com/_api/v2.1/graphql HTTP/1.1Host: paplastics365-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic HTTP traffic detected: GET /_layouts/15/images/odbfavicon.ico?rev=47 HTTP/1.1Host: paplastics365-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://paplastics365-my.sharepoint.com/personal/kbistas_paplastics_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fkbistas%5Fpaplastics%5Fcom%2FDocuments%2FSeadar%20Builders%20%2D%20Request%20For%20Proposal&ga=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=77u/PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48U1A+VjEzLDBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzA5NWI4MWQ3MGEyZjk5ZDFmODgxNGJiN2VjYTlmMDkwNjRlNjNjZjZjM2UzYmFjOTZiM2IyM2I4MjFlOWUxMjQsMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jMDk1YjgxZDcwYTJmOTlkMWY4ODE0YmI3ZWNhOWYwOTA2NGU2M2NmNmMzZTNiYWM5NmIzYjIzYjgyMWU5ZTEyNCwxMzM1ODAyMTA1NDAwMDAwMDAsMCwxMzM1ODEwNzE1NDQ1NTU0NzYsMC4wLjAuMCwyNTgsNzZmZDdlYmItMDNkYy00ZjMyLWE4M2UtNDBkMTI0Njc2NjIzLCwsYjY5ODIwYTEtYzBiNC01MDAwLTU5YTAtN2VmYjk5OGU4OWZmLGI2OTgyMGExLWMwYjQtNTAwMC01OWEwLTdlZmI5OThlODlmZixTMWcvbkJ6OFZFeWpNTm9wUHUyVVVRLDAsMCwwLCwsLDI2NTA0Njc3NDM5OTk5OTk5OTksMCwsLCwsLCwwLCwxOTI0MTIsRGFEQWZqUVFtcHlPWHgyUnJLX1c1bHZvTFo0LE9xaCtaTmZ1THpDRFJDSS9MaHplSktwMHBNMFN5dlRuVHhyOVpIYURZUjlZQTNzMC9HNnNsK2tTUE9xOUQ4RG4vRFNaNWowc050RlY3b1o2YncwQVhJcDFtSXdMaEJIanMrNkxqMSsvVk5XMW10Tms5SEdaS0d6K2xJcHcwQ0tETW96YVBWalRHT1c4Rjh3VCtNanVRQmZ5TFh2dVZHeDFlSDJjZUJrNzdJTzRDY0xueXNLYU1VcnZ2WEU5NG5DUzBwZE1jcDdXT0ZzMlpIOHI2Y0hSeHMxY0FONXRjNnNZNys2Y1VpK0hOYWZzQ2ROOG9NWDdRVnNlMWZBakhpbDM5UGZ3Tml1YjMwY1g1aUN2dnBPZng0TURRaDh3Vmt1bmk0eUpkVVppU2YzZUVvRzMvY3Q0VWt3UTFsTlp5WjY5R0tNVE9raGRyZTZWbnAraUsrNlY0UT09PC9TUD4=
Source: global traffic HTTP traffic detected: GET /_layouts/15/images/odbfavicon.ico?rev=47 HTTP/1.1Host: paplastics365-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=77u/PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48U1A+VjEzLDBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzA5NWI4MWQ3MGEyZjk5ZDFmODgxNGJiN2VjYTlmMDkwNjRlNjNjZjZjM2UzYmFjOTZiM2IyM2I4MjFlOWUxMjQsMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jMDk1YjgxZDcwYTJmOTlkMWY4ODE0YmI3ZWNhOWYwOTA2NGU2M2NmNmMzZTNiYWM5NmIzYjIzYjgyMWU5ZTEyNCwxMzM1ODAyMTA1NDAwMDAwMDAsMCwxMzM1ODEwNzE1NDQ1NTU0NzYsMC4wLjAuMCwyNTgsNzZmZDdlYmItMDNkYy00ZjMyLWE4M2UtNDBkMTI0Njc2NjIzLCwsYjY5ODIwYTEtYzBiNC01MDAwLTU5YTAtN2VmYjk5OGU4OWZmLGI2OTgyMGExLWMwYjQtNTAwMC01OWEwLTdlZmI5OThlODlmZixTMWcvbkJ6OFZFeWpNTm9wUHUyVVVRLDAsMCwwLCwsLDI2NTA0Njc3NDM5OTk5OTk5OTksMCwsLCwsLCwwLCwxOTI0MTIsRGFEQWZqUVFtcHlPWHgyUnJLX1c1bHZvTFo0LE9xaCtaTmZ1THpDRFJDSS9MaHplSktwMHBNMFN5dlRuVHhyOVpIYURZUjlZQTNzMC9HNnNsK2tTUE9xOUQ4RG4vRFNaNWowc050RlY3b1o2YncwQVhJcDFtSXdMaEJIanMrNkxqMSsvVk5XMW10Tms5SEdaS0d6K2xJcHcwQ0tETW96YVBWalRHT1c4Rjh3VCtNanVRQmZ5TFh2dVZHeDFlSDJjZUJrNzdJTzRDY0xueXNLYU1VcnZ2WEU5NG5DUzBwZE1jcDdXT0ZzMlpIOHI2Y0hSeHMxY0FONXRjNnNZNys2Y1VpK0hOYWZzQ2ROOG9NWDdRVnNlMWZBakhpbDM5UGZ3Tml1YjMwY1g1aUN2dnBPZng0TURRaDh3Vmt1bmk0eUpkVVppU2YzZUVvRzMvY3Q0VWt3UTFsTlp5WjY5R0tNVE9raGRyZTZWbnAraUsrNlY0UT09PC9TUD4=
Source: global traffic HTTP traffic detected: GET /personal/kbistas_paplastics_com/_api/web/GetListUsingPath(DecodedUrl=@a1)/RenderListDataAsStream?@a1=%27%2Fpersonal%2Fkbistas%5Fpaplastics%5Fcom%2FDocuments%27&TryNewExperienceSingle=TRUE HTTP/1.1Host: paplastics365-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic HTTP traffic detected: GET /personal/kbistas_paplastics_com/_api/web/GetListUsingPath(DecodedUrl=@a1)/RenderListDataAsStream?@a1=%27%2Fpersonal%2Fkbistas%5Fpaplastics%5Fcom%2FDocuments%27&RootFolder=%2Fpersonal%2Fkbistas%5Fpaplastics%5Fcom%2FDocuments%2FSeadar%20Builders%20%2D%20Request%20For%20Proposal&TryNewExperienceSingle=TRUE HTTP/1.1Host: paplastics365-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic HTTP traffic detected: GET /_layouts/15/odspserviceworkerproxy.aspx?swManifestName=spserviceworker&debug=false&bypass=false&applications=%5B%7B%22id%22%3A%22STS%22%2C%22swPrefetchManifestName%22%3A%22stsserviceworkerprefetch%22%7D%2C%7B%22id%22%3A%22SPHome%22%7D%2C%7B%22id%22%3A%22SitePages%22%7D%2C%7B%22id%22%3A%22Embed%22%7D%2C%7B%22id%22%3A%22CreateGroup%22%7D%2C%7B%22id%22%3A%22SingleWebPart%22%7D%2C%7B%22id%22%3A%22VivaHome%22%7D%2C%7B%22id%22%3A%22BrokerLogon%22%7D%2C%7B%22id%22%3A%22Clipchamp%22%7D%2C%7B%22id%22%3A%22MeeBridge%22%7D%5D&defaultBrotli=true&authenticateFast=true&wwData=true&prefetchFilebrowserPageInTeams=true&FUIV9Flights=[-83099649,3]&spStartApplicationWebBundle=true&enableIntegrities=true HTTP/1.1Host: paplastics365-my.sharepoint.comConnection: keep-aliveCache-Control: max-age=0Accept: */*Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://paplastics365-my.sharepoint.com/personal/kbistas_paplastics_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fkbistas%5Fpaplastics%5Fcom%2FDocuments%2FSeadar%20Builders%20%2D%20Request%20For%20Proposal&ga=1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic HTTP traffic detected: GET /_vti_bin/afdcache.ashx/_userprofile/userphoto.jpg?_oat_=1713605332_8bf6359185ba37f4df12cb40524f109c9a664d0b476e3c34eab8e99bacf1bac4&P1=1713552195&P2=1878891387&P3=1&P4=rQFupUDJ5r850TXXRP4%2FDmIuGjNbwWXRkrvTbSp6jnDs9JjUSoCvxUBZQBdw3TKL0Lfg7wKhAyi4aoNbUHYC7oI7YWckv6xabiHca5hBHnaPjcjFL0RE6UhVu%2BccAnd%2Bg10Hx5U1P7axqdgaTkx0kymS7eByI8wovSb8i%2BtWFR8nxRA9UGBEO1r6VP730tDILL0wp5d7Yvf6zrglaUxnPttQp8j3eS7scgtXAgS%2FODwVIjr2DT1IBxNcLuqT8iUGWUyKs%2FrrQqLMz6%2FSkg5EvbB2dUr3V0PVKiCK4AEx3yaNTNcwnFPISXbANYvSmcLVgb2brhPBLDuAHCv6K4o5CA%3D%3D&size=M&accountname=kbistas%40paplastics.com HTTP/1.1Host: paplastics365.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://paplastics365-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /_vti_bin/afdcache.ashx/_userprofile/userphoto.jpg?_oat_=1713605332_8bf6359185ba37f4df12cb40524f109c9a664d0b476e3c34eab8e99bacf1bac4&P1=1713552195&P2=1878891387&P3=1&P4=rQFupUDJ5r850TXXRP4%2FDmIuGjNbwWXRkrvTbSp6jnDs9JjUSoCvxUBZQBdw3TKL0Lfg7wKhAyi4aoNbUHYC7oI7YWckv6xabiHca5hBHnaPjcjFL0RE6UhVu%2BccAnd%2Bg10Hx5U1P7axqdgaTkx0kymS7eByI8wovSb8i%2BtWFR8nxRA9UGBEO1r6VP730tDILL0wp5d7Yvf6zrglaUxnPttQp8j3eS7scgtXAgS%2FODwVIjr2DT1IBxNcLuqT8iUGWUyKs%2FrrQqLMz6%2FSkg5EvbB2dUr3V0PVKiCK4AEx3yaNTNcwnFPISXbANYvSmcLVgb2brhPBLDuAHCv6K4o5CA%3D%3D&size=M&accountname=kbistas%40paplastics.com HTTP/1.1Host: paplastics365.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /personal/kbistas_paplastics_com/_layouts/15/undefined/_layouts/15/onedrive.aspx?view=1 HTTP/1.1Host: paplastics365-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic HTTP traffic detected: GET /_layouts/15/1033/styles/corev15.css?rev=34APf%2FlfLRHu1iumf2MGdw%3D%3DTAG455 HTTP/1.1Host: paplastics365-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://paplastics365-my.sharepoint.com/personal/kbistas_paplastics_com/_layouts/15/undefined/_layouts/15/onedrive.aspx?view=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic HTTP traffic detected: GET /_layouts/15/1033/styles/error.css?rev=tF7fyfzbaQzNoASoSDlV4A%3D%3DTAG455 HTTP/1.1Host: paplastics365-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://paplastics365-my.sharepoint.com/personal/kbistas_paplastics_com/_layouts/15/undefined/_layouts/15/onedrive.aspx?view=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic HTTP traffic detected: GET /ScriptResource.axd?d=Lz3UE4vJBCZCUxb_U2p8oU-nwQZpOJpp9lxAt1nNXg_X8sdATXEZTVTmCDr8DGI4nDqTSWH2gU64qTbSDjme4RXLEDJNFrU3SipnXybvJJ1M_3ToAbT1qOFquaknIAvfD7O473HV6UCjvae52mHpLVGqYckfyLozEWkpuecIugOZSKTp9LOJmigyhPMz3kWS0&t=722fe453 HTTP/1.1Host: paplastics365-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://paplastics365-my.sharepoint.com/personal/kbistas_paplastics_com/_layouts/15/undefined/_layouts/15/onedrive.aspx?view=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic HTTP traffic detected: GET /ScriptResource.axd?d=AIopCmepig6o_Uuv-DmGnHdWq0xi84X9G3crub9EZ2YsZHGIQafcuHVs_FCqhVFl22GrfZhL_s-qLkO5zmC3bj8JZMM7-bYZN3XYifFGmXVE-JNsNgQvyGeIf0TDnVa5UimxFBAjzJXPUVxE5WQPWK9kZZg_bhtUeVssyqAtc4Vx-LLdhAVxt_f1PA0LvW9t0&t=722fe453 HTTP/1.1Host: paplastics365-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://paplastics365-my.sharepoint.com/personal/kbistas_paplastics_com/_layouts/15/undefined/_layouts/15/onedrive.aspx?view=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic HTTP traffic detected: GET /WebResource.axd?d=WQmdwAvtQoaUoxnTV7CwZnfO3zXPzvUXBRKxnljVLRbYJRk9rdWiNIWEHZADXab1_XiGzttQwUehV3VpZO6hYM0N7bT_0B4iapS11_GDyuo1&t=638449966421100877 HTTP/1.1Host: paplastics365-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://paplastics365-my.sharepoint.com/personal/kbistas_paplastics_com/_layouts/15/undefined/_layouts/15/onedrive.aspx?view=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic HTTP traffic detected: GET /apc/trans.gif?ddecad33467b5462ce7648faee901519 HTTP/1.1Host: tr-ofc-afdwac.office.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://paplastics365-my.sharepoint.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://paplastics365-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /_layouts/15/images/favicon.ico?rev=47 HTTP/1.1Host: paplastics365-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://paplastics365-my.sharepoint.com/personal/kbistas_paplastics_com/_layouts/15/undefined/_layouts/15/onedrive.aspx?view=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=77u/PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48U1A+VjEzLDBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzA5NWI4MWQ3MGEyZjk5ZDFmODgxNGJiN2VjYTlmMDkwNjRlNjNjZjZjM2UzYmFjOTZiM2IyM2I4MjFlOWUxMjQsMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jMDk1YjgxZDcwYTJmOTlkMWY4ODE0YmI3ZWNhOWYwOTA2NGU2M2NmNmMzZTNiYWM5NmIzYjIzYjgyMWU5ZTEyNCwxMzM1ODAyMTA1NDAwMDAwMDAsMCwxMzM1ODEwNzE1NDQ1NTU0NzYsMC4wLjAuMCwyNTgsNzZmZDdlYmItMDNkYy00ZjMyLWE4M2UtNDBkMTI0Njc2NjIzLCwsYjY5ODIwYTEtYzBiNC01MDAwLTU5YTAtN2VmYjk5OGU4OWZmLGI2OTgyMGExLWMwYjQtNTAwMC01OWEwLTdlZmI5OThlODlmZixTMWcvbkJ6OFZFeWpNTm9wUHUyVVVRLDAsMCwwLCwsLDI2NTA0Njc3NDM5OTk5OTk5OTksMCwsLCwsLCwwLCwxOTI0MTIsRGFEQWZqUVFtcHlPWHgyUnJLX1c1bHZvTFo0LE9xaCtaTmZ1THpDRFJDSS9MaHplSktwMHBNMFN5dlRuVHhyOVpIYURZUjlZQTNzMC9HNnNsK2tTUE9xOUQ4RG4vRFNaNWowc050RlY3b1o2YncwQVhJcDFtSXdMaEJIanMrNkxqMSsvVk5XMW10Tms5SEdaS0d6K2xJcHcwQ0tETW96YVBWalRHT1c4Rjh3VCtNanVRQmZ5TFh2dVZHeDFlSDJjZUJrNzdJTzRDY0xueXNLYU1VcnZ2WEU5NG5DUzBwZE1jcDdXT0ZzMlpIOHI2Y0hSeHMxY0FONXRjNnNZNys2Y1VpK0hOYWZzQ2ROOG9NWDdRVnNlMWZBakhpbDM5UGZ3Tml1YjMwY1g1aUN2dnBPZng0TURRaDh3Vmt1bmk0eUpkVVppU2YzZUVvRzMvY3Q0VWt3UTFsTlp5WjY5R0tNVE9raGRyZTZWbnAraUsrNlY0UT09PC9TUD4=
Source: global traffic HTTP traffic detected: GET /apc/trans.gif?7bebbf0dd7e2252647311a4c5c1168f3 HTTP/1.1Host: tr-ofc-afdwac.office.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://paplastics365-my.sharepoint.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://paplastics365-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /apc/trans.gif?ddecad33467b5462ce7648faee901519 HTTP/1.1Host: tr-ofc-afdwac.office.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /_layouts/15/images/favicon.ico?rev=47 HTTP/1.1Host: paplastics365-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=77u/PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48U1A+VjEzLDBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzA5NWI4MWQ3MGEyZjk5ZDFmODgxNGJiN2VjYTlmMDkwNjRlNjNjZjZjM2UzYmFjOTZiM2IyM2I4MjFlOWUxMjQsMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jMDk1YjgxZDcwYTJmOTlkMWY4ODE0YmI3ZWNhOWYwOTA2NGU2M2NmNmMzZTNiYWM5NmIzYjIzYjgyMWU5ZTEyNCwxMzM1ODAyMTA1NDAwMDAwMDAsMCwxMzM1ODEwNzE1NDQ1NTU0NzYsMC4wLjAuMCwyNTgsNzZmZDdlYmItMDNkYy00ZjMyLWE4M2UtNDBkMTI0Njc2NjIzLCwsYjY5ODIwYTEtYzBiNC01MDAwLTU5YTAtN2VmYjk5OGU4OWZmLGI2OTgyMGExLWMwYjQtNTAwMC01OWEwLTdlZmI5OThlODlmZixTMWcvbkJ6OFZFeWpNTm9wUHUyVVVRLDAsMCwwLCwsLDI2NTA0Njc3NDM5OTk5OTk5OTksMCwsLCwsLCwwLCwxOTI0MTIsRGFEQWZqUVFtcHlPWHgyUnJLX1c1bHZvTFo0LE9xaCtaTmZ1THpDRFJDSS9MaHplSktwMHBNMFN5dlRuVHhyOVpIYURZUjlZQTNzMC9HNnNsK2tTUE9xOUQ4RG4vRFNaNWowc050RlY3b1o2YncwQVhJcDFtSXdMaEJIanMrNkxqMSsvVk5XMW10Tms5SEdaS0d6K2xJcHcwQ0tETW96YVBWalRHT1c4Rjh3VCtNanVRQmZ5TFh2dVZHeDFlSDJjZUJrNzdJTzRDY0xueXNLYU1VcnZ2WEU5NG5DUzBwZE1jcDdXT0ZzMlpIOHI2Y0hSeHMxY0FONXRjNnNZNys2Y1VpK0hOYWZzQ2ROOG9NWDdRVnNlMWZBakhpbDM5UGZ3Tml1YjMwY1g1aUN2dnBPZng0TURRaDh3Vmt1bmk0eUpkVVppU2YzZUVvRzMvY3Q0VWt3UTFsTlp5WjY5R0tNVE9raGRyZTZWbnAraUsrNlY0UT09PC9TUD4=
Source: global traffic HTTP traffic detected: GET /apc/trans.gif?7bebbf0dd7e2252647311a4c5c1168f3 HTTP/1.1Host: tr-ofc-afdwac.office.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /personal/kbistas_paplastics_com/_layouts/15/undefined/_layouts/15/onedrive.aspx?view=1 HTTP/1.1Host: paplastics365-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=77u/PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48U1A+VjEzLDBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzA5NWI4MWQ3MGEyZjk5ZDFmODgxNGJiN2VjYTlmMDkwNjRlNjNjZjZjM2UzYmFjOTZiM2IyM2I4MjFlOWUxMjQsMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jMDk1YjgxZDcwYTJmOTlkMWY4ODE0YmI3ZWNhOWYwOTA2NGU2M2NmNmMzZTNiYWM5NmIzYjIzYjgyMWU5ZTEyNCwxMzM1ODAyMTA1NDAwMDAwMDAsMCwxMzM1ODEwNzE1NDQ1NTU0NzYsMC4wLjAuMCwyNTgsNzZmZDdlYmItMDNkYy00ZjMyLWE4M2UtNDBkMTI0Njc2NjIzLCwsYjY5ODIwYTEtYzBiNC01MDAwLTU5YTAtN2VmYjk5OGU4OWZmLGI2OTgyMGExLWMwYjQtNTAwMC01OWEwLTdlZmI5OThlODlmZixTMWcvbkJ6OFZFeWpNTm9wUHUyVVVRLDAsMCwwLCwsLDI2NTA0Njc3NDM5OTk5OTk5OTksMCwsLCwsLCwwLCwxOTI0MTIsRGFEQWZqUVFtcHlPWHgyUnJLX1c1bHZvTFo0LE9xaCtaTmZ1THpDRFJDSS9MaHplSktwMHBNMFN5dlRuVHhyOVpIYURZUjlZQTNzMC9HNnNsK2tTUE9xOUQ4RG4vRFNaNWowc050RlY3b1o2YncwQVhJcDFtSXdMaEJIanMrNkxqMSsvVk5XMW10Tms5SEdaS0d6K2xJcHcwQ0tETW96YVBWalRHT1c4Rjh3VCtNanVRQmZ5TFh2dVZHeDFlSDJjZUJrNzdJTzRDY0xueXNLYU1VcnZ2WEU5NG5DUzBwZE1jcDdXT0ZzMlpIOHI2Y0hSeHMxY0FONXRjNnNZNys2Y1VpK0hOYWZzQ2ROOG9NWDdRVnNlMWZBakhpbDM5UGZ3Tml1YjMwY1g1aUN2dnBPZng0TURRaDh3Vmt1bmk0eUpkVVppU2YzZUVvRzMvY3Q0VWt3UTFsTlp5WjY5R0tNVE9raGRyZTZWbnAraUsrNlY0UT09PC9TUD4=; WSS_FullScreenMode=false
Source: global traffic HTTP traffic detected: GET /personal/kbistas_paplastics_com HTTP/1.1Host: paplastics365-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; WSS_FullScreenMode=false
Source: global traffic HTTP traffic detected: GET /personal/kbistas_paplastics_com/_layouts/15/AccessDenied.aspx?Source=https%3A%2F%2Fpaplastics365%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fkbistas%5Fpaplastics%5Fcom&correlation=c39820a1%2D9064%2D5000%2D59a0%2D7c20e4b08f9a HTTP/1.1Host: paplastics365-my.sharepoint.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; WSS_FullScreenMode=false
Source: global traffic HTTP traffic detected: GET /_layouts/15/1033/styles/errordisplay.css?rev=0exfFR1nIzLRO1bRiOlTVA%3D%3DTAG455 HTTP/1.1Host: paplastics365-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://paplastics365-my.sharepoint.com/personal/kbistas_paplastics_com/_layouts/15/AccessDenied.aspx?Source=https%3A%2F%2Fpaplastics365%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fkbistas%5Fpaplastics%5Fcom&correlation=c39820a1%2D9064%2D5000%2D59a0%2D7c20e4b08f9aAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; WSS_FullScreenMode=false
Source: global traffic HTTP traffic detected: GET /_layouts/15/images/BlueArrow.gif HTTP/1.1Host: paplastics365-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://paplastics365-my.sharepoint.com/personal/kbistas_paplastics_com/_layouts/15/AccessDenied.aspx?Source=https%3A%2F%2Fpaplastics365%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fkbistas%5Fpaplastics%5Fcom&correlation=c39820a1%2D9064%2D5000%2D59a0%2D7c20e4b08f9aAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; WSS_FullScreenMode=false
Source: global traffic HTTP traffic detected: GET /_layouts/15/images/BlueArrow.gif HTTP/1.1Host: paplastics365-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; WSS_FullScreenMode=false
Source: global traffic HTTP traffic detected: GET /personal/kbistas_paplastics_com HTTP/1.1Host: paplastics365-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; WSS_FullScreenMode=false
Source: global traffic HTTP traffic detected: GET /personal/kbistas_paplastics_com/_layouts/15/AccessDenied.aspx?Source=https%3A%2F%2Fpaplastics365%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fkbistas%5Fpaplastics%5Fcom&correlation=c69820a1%2Da07e%2D5000%2D59a0%2D704aabae116f HTTP/1.1Host: paplastics365-my.sharepoint.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=77u/PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48U1A+VjEzLDBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzA5NWI4MWQ3MGEyZjk5ZDFmODgxNGJiN2VjYTlmMDkwNjRlNjNjZjZjM2UzYmFjOTZiM2IyM2I4MjFlOWUxMjQsMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jMDk1YjgxZDcwYTJmOTlkMWY4ODE0YmI3ZWNhOWYwOTA2NGU2M2NmNmMzZTNiYWM5NmIzYjIzYjgyMWU5ZTEyNCwxMzM1ODAyMTA1NDAwMDAwMDAsMCwxMzM1ODEwNzE1NDQ1NTU0NzYsMC4wLjAuMCwyNTgsNzZmZDdlYmItMDNkYy00ZjMyLWE4M2UtNDBkMTI0Njc2NjIzLCwsYjY5ODIwYTEtYzBiNC01MDAwLTU5YTAtN2VmYjk5OGU4OWZmLGI2OTgyMGExLWMwYjQtNTAwMC01OWEwLTdlZmI5OThlODlmZixTMWcvbkJ6OFZFeWpNTm9wUHUyVVVRLDAsMCwwLCwsLDI2NTA0Njc3NDM5OTk5OTk5OTksMCwsLCwsLCwwLCwxOTI0MTIsRGFEQWZqUVFtcHlPWHgyUnJLX1c1bHZvTFo0LE9xaCtaTmZ1THpDRFJDSS9MaHplSktwMHBNMFN5dlRuVHhyOVpIYURZUjlZQTNzMC9HNnNsK2tTUE9xOUQ4RG4vRFNaNWowc050RlY3b1o2YncwQVhJcDFtSXdMaEJIanMrNkxqMSsvVk5XMW10Tms5SEdaS0d6K2xJcHcwQ0tETW96YVBWalRHT1c4Rjh3VCtNanVRQmZ5TFh2dVZHeDFlSDJjZUJrNzdJTzRDY0xueXNLYU1VcnZ2WEU5NG5DUzBwZE1jcDdXT0ZzMlpIOHI2Y0hSeHMxY0FONXRjNnNZNys2Y1VpK0hOYWZzQ2ROOG9NWDdRVnNlMWZBakhpbDM5UGZ3Tml1YjMwY1g1aUN2dnBPZng0TURRaDh3Vmt1bmk0eUpkVVppU2YzZUVvRzMvY3Q0VWt3UTFsTlp5WjY5R0tNVE9raGRyZTZWbnAraUsrNlY0UT09PC9TUD4=; WSS_FullScreenMode=false
Source: global traffic HTTP traffic detected: GET /personal/kbistas_paplastics_com/_layouts/15/AccessDenied.aspx?correlation=c89820a1%2D7063%2D5000%2D59a0%2D73215872f620 HTTP/1.1Host: paplastics365-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; WSS_FullScreenMode=false
Source: unknown DNS traffic detected: queries for: url.us.m.mimecastprotect.com
Source: unknown HTTP traffic detected: POST /personal/kbistas_paplastics_com/_api/v2.1/graphql HTTP/1.1Host: paplastics365-my.sharepoint.comConnection: keep-aliveContent-Length: 507sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/json;odata=verboseContent-Type: application/json;odata=verboseX-ServiceWorker-Strategy: CacheFirstsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://paplastics365-my.sharepoint.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://paplastics365-my.sharepoint.com/personal/kbistas_paplastics_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fkbistas%5Fpaplastics%5Fcom%2FDocuments%2FSeadar%20Builders%20%2D%20Request%20For%20Proposal&ga=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: chromecache_265.2.dr, chromecache_490.2.dr String found in binary or memory: http://fb.me/use-check-prop-types
Source: chromecache_353.2.dr, chromecache_286.2.dr, chromecache_257.2.dr, chromecache_495.2.dr, chromecache_441.2.dr, chromecache_282.2.dr, chromecache_557.2.dr, chromecache_434.2.dr, chromecache_446.2.dr, chromecache_259.2.dr, chromecache_499.2.dr String found in binary or memory: http://www.contoso.com
Source: chromecache_487.2.dr, chromecache_428.2.dr, chromecache_564.2.dr, chromecache_330.2.dr, chromecache_461.2.dr String found in binary or memory: https://1drv.com/
Source: chromecache_664.2.dr, chromecache_351.2.dr String found in binary or memory: https://200.hc.com/the-harpercollins-200/moby-dick/
Source: chromecache_487.2.dr, chromecache_428.2.dr, chromecache_564.2.dr, chromecache_330.2.dr, chromecache_461.2.dr String found in binary or memory: https://centralus1-mediad.svc.ms
Source: chromecache_409.2.dr String found in binary or memory: https://lists.live.com/
Source: chromecache_487.2.dr, chromecache_428.2.dr, chromecache_564.2.dr, chromecache_330.2.dr, chromecache_461.2.dr String found in binary or memory: https://livefilestore.com/
Source: chromecache_392.2.dr String found in binary or memory: https://make.powerautomate.com
Source: chromecache_268.2.dr, chromecache_392.2.dr String found in binary or memory: https://make.preprod.powerautomate.com
Source: chromecache_268.2.dr, chromecache_392.2.dr String found in binary or memory: https://make.test.powerautomate.com
Source: chromecache_487.2.dr, chromecache_428.2.dr, chromecache_653.2.dr, chromecache_564.2.dr, chromecache_330.2.dr, chromecache_461.2.dr String found in binary or memory: https://media.cloudapp.net
Source: chromecache_487.2.dr, chromecache_428.2.dr, chromecache_653.2.dr, chromecache_564.2.dr, chromecache_330.2.dr, chromecache_461.2.dr String found in binary or memory: https://northcentralus1-medias.svc.ms
Source: chromecache_640.2.dr String found in binary or memory: https://odspwebdevdeploy.blob.core.windows.net
Source: chromecache_640.2.dr String found in binary or memory: https://onedrive.live.com/?gologin=1
Source: chromecache_552.2.dr, chromecache_436.2.dr, chromecache_284.2.dr, chromecache_392.2.dr, chromecache_300.2.dr, chromecache_533.2.dr String found in binary or memory: https://outlook.office.com/search
Source: chromecache_358.2.dr, chromecache_463.2.dr, chromecache_436.2.dr, chromecache_428.2.dr, chromecache_284.2.dr, chromecache_392.2.dr, chromecache_602.2.dr, chromecache_300.2.dr, chromecache_564.2.dr, chromecache_464.2.dr, chromecache_576.2.dr, chromecache_330.2.dr, chromecache_461.2.dr String found in binary or memory: https://portal.office.com/
Source: chromecache_461.2.dr String found in binary or memory: https://reactjs.org/link/react-polyfills
Source: chromecache_264.2.dr String found in binary or memory: https://res-1.cdn.office.net/bld/_layouts/15/16.0.24803.12007/1033/initstrings.js
Source: chromecache_264.2.dr String found in binary or memory: https://res-1.cdn.office.net/bld/_layouts/15/16.0.24803.12007/blank.js
Source: chromecache_264.2.dr String found in binary or memory: https://res-1.cdn.office.net/bld/_layouts/15/16.0.24803.12007/init.js
Source: chromecache_264.2.dr String found in binary or memory: https://res-1.cdn.office.net/bld/_layouts/15/16.0.24803.12007/theming.js
Source: chromecache_270.2.dr String found in binary or memory: https://res-1.cdn.office.net/files/odsp-web-prod_2024-04-05.007/
Source: chromecache_270.2.dr String found in binary or memory: https://res-1.cdn.office.net/files/odsp-web-prod_2024-04-05.007/spwebworker.js
Source: chromecache_653.2.dr String found in binary or memory: https://sharepoint.uservoice.com/forums/329214-sites-and-collaboration
Source: chromecache_487.2.dr, chromecache_602.2.dr, chromecache_653.2.dr String found in binary or memory: https://shellppe.msocdn.com
Source: chromecache_487.2.dr, chromecache_602.2.dr, chromecache_653.2.dr String found in binary or memory: https://shellprod.msocdn.com
Source: chromecache_505.2.dr, chromecache_428.2.dr, chromecache_564.2.dr String found in binary or memory: https://substrate.office.com
Source: chromecache_366.2.dr String found in binary or memory: https://support.office.com/en-us/article/Manage-lists-and-libraries-with-many-items-b8588dae-9387-48
Source: chromecache_664.2.dr, chromecache_351.2.dr String found in binary or memory: https://www.littlebrown.com/titles/j-d-salinger/the-catcher-in-the-rye/9780316769488/
Source: chromecache_640.2.dr String found in binary or memory: https://www.office.com/login?prompt=select_account&ru=%2Flaunch%2F$
Source: chromecache_640.2.dr String found in binary or memory: https://www.office.com/login?ru=%2Flaunch%2F$
Source: chromecache_664.2.dr, chromecache_351.2.dr String found in binary or memory: https://www.peachpit.com/store/dont-make-me-think-revisited-a-common-sense-approach-9780321965516
Source: chromecache_664.2.dr, chromecache_351.2.dr String found in binary or memory: https://www.penguinrandomhouse.com/books/196330/great-tales-and-poems-of-edgar-allan-poe-by-edgar-al
Source: chromecache_664.2.dr, chromecache_351.2.dr String found in binary or memory: https://www.simonandschuster.com/books/The-Great-Gatsby/F-Scott-Fitzgerald/9781982146702#:~:text=The
Source: chromecache_664.2.dr, chromecache_351.2.dr String found in binary or memory: https://www.simonandschuster.com/books/The-Sun-Also-Rises/Ernest-Hemingway/9781982199524#:~:text=The
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50139
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50149 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50139 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50149
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50098 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown Network traffic detected: HTTP traffic on port 50097 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: classification engine Classification label: clean0.win@21/819@48/8
Source: unknown Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2128 --field-trial-handle=1932,i,5450131637799418713,8826743877005019965,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://url.us.m.mimecastprotect.com/s/kCCtC5yEz0tWp5ANrfz_KPV?domain=paplastics365-my.sharepoint.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2128 --field-trial-handle=1932,i,5450131637799418713,8826743877005019965,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: Window Recorder Window detected: More than 3 window changes detected
Source: chromecache_596.2.dr Binary or memory string: ",ConnectVirtualMachine:"
Source: chromecache_596.2.dr Binary or memory string: ",DisconnectVirtualMachine:"
  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs