Edit tour

Windows Analysis Report
https://netorgft3546691-my.sharepoint.com/:b:/g/personal/nicole_felthaus_mmclippers_com/EfUF1hXkwfZNuGJhx43KV34BvAUaxh5xTDD3cQCuhCEK1w?e=yOS03G

Overview

General Information

Sample URL:	https://netorgft3546691-my.sharepoint.com/:b:/g/personal/nicole_felthaus_mmclippers_com/EfUF1hXkwfZNuGJhx43KV34BvAUaxh5xTDD3cQCuhCEK1w?e=yOS03G
Analysis ID:	1430335
Infos:

Detection

HTMLPhisher

Score:	76
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Phishing site detected (based on favicon image match)

Yara detected HtmlPhish10

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

Phishing site or detected (based on various text indicators)

Drops files with a non-matching file extension (content does not match file extension)

HTML body contains low number of good links

HTML body contains password input but no form action

HTML body with high number of embedded images detected

HTML page contains hidden URLs or javascript code

HTML title does not match URL

Invalid 'forgot password' link found

Phishing site detected (based on OCR NLP Model)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3752 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5328 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2304 --field-trial-handle=2232,i,9595836000843130607,644757419757623085,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6500 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://netorgft3546691-my.sharepoint.com/:b:/g/personal/nicole_felthaus_mmclippers_com/EfUF1hXkwfZNuGJhx43KV34BvAUaxh5xTDD3cQCuhCEK1w?e=yOS03G" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
2.11.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.10.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.8.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.7.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.9.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://netorgft3546691-my.sharepoint.com/:b:/g/personal/nicole_felthaus_mmclippers_com/EfUF1hXkwfZNuGJhx43KV34BvAUaxh5xTDD3cQCuhCEK1w?e=yOS03G

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Phishing

Phishing site detected (based on favicon image match)

Source: https://simplicitycontsruction-fold051submission-explorerechdinnovation.id-cgk-1.linodeobjects.com/OneDriveN.html	Matcher: Template: microsoft matched with high similarity
Source: https://simplicitycontsruction-fold051submission-explorerechdinnovation.id-cgk-1.linodeobjects.com/OneDriveN.html#	Matcher: Template: microsoft matched with high similarity

Yara detected HtmlPhish10

Source: Yara match	File source: 2.11.pages.csv, type: HTML
Source: Yara match	File source: 1.10.pages.csv, type: HTML
Source: Yara match	File source: 1.8.pages.csv, type: HTML
Source: Yara match	File source: 1.7.pages.csv, type: HTML
Source: Yara match	File source: 1.9.pages.csv, type: HTML

Phishing site detected (based on image similarity)

Source: https://simplicitycontsruction-fold051submission-explorerechdinnovation.id-cgk-1.linodeobjects.com/OneDriveN.html

Matcher: Found strong image similarity, brand: MICROSOFT

Phishing site detected (based on logo match)

Source: https://simplicitycontsruction-fold051submission-explorerechdinnovation.id-cgk-1.linodeobjects.com/OneDriveN.html	Matcher: Template: microsoft matched
Source: https://simplicitycontsruction-fold051submission-explorerechdinnovation.id-cgk-1.linodeobjects.com/OneDriveN.html	Matcher: Template: microsoft matched
Source: https://simplicitycontsruction-fold051submission-explorerechdinnovation.id-cgk-1.linodeobjects.com/OneDriveN.html	Matcher: Template: microsoft matched
Source: https://simplicitycontsruction-fold051submission-explorerechdinnovation.id-cgk-1.linodeobjects.com/OneDriveN.html#	Matcher: Template: microsoft matched

Phishing site or detected (based on various text indicators)

Source: Chrome DOM: 0.4

OCR Text: View and Print Online.pdf Info 1/1 OneDrive for Business Jalia Dennis shared a folder with Here- s the folder Jalia Dennis shared with you. This was to to Date created: 04/06/2024 09:30 AM Ref: Review 9-ared from Jalia Dennis "Click View and Print Online" DOWnload the app for Windows

Source: https://simplicitycontsruction-fold051submission-explorerechdinnovation.id-cgk-1.linodeobjects.com/OneDriveN.html

HTTP Parser: Number of links: 0

Source: https://simplicitycontsruction-fold051submission-explorerechdinnovation.id-cgk-1.linodeobjects.com/OneDriveN.html

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://simplicitycontsruction-fold051submission-explorerechdinnovation.id-cgk-1.linodeobjects.com/OneDriveN.html

HTTP Parser: Total embedded image size: 31111

Source: https://simplicitycontsruction-fold051submission-explorerechdinnovation.id-cgk-1.linodeobjects.com/OneDriveN.html

HTTP Parser: Base64 decoded: https://topfloor-llc.com/salesorder/f15b81b.php

Source: https://simplicitycontsruction-fold051submission-explorerechdinnovation.id-cgk-1.linodeobjects.com/OneDriveN.html

HTTP Parser: Title: Sign in to Best Productivity Provider! does not match URL

Source: https://simplicitycontsruction-fold051submission-explorerechdinnovation.id-cgk-1.linodeobjects.com/OneDriveN.html

HTTP Parser: Invalid link: Forgot my password

Source: Chrome DOM: 0.4

ML Model on OCR Text: Matched 96.9% probability on "View and Print Online.pdf Info 1/1 OneDrive for Business Jalia Dennis shared a folder with Here- s the folder Jalia Dennis shared with you. This was to to Date created: 04/06/2024 09:30 AM Ref: Review 9-ared from Jalia Dennis "Click View and Print Online" DOWnload the app for Windows "

Source: https://simplicitycontsruction-fold051submission-explorerechdinnovation.id-cgk-1.linodeobjects.com/OneDriveN.html

HTTP Parser: <input type="password" .../> found

Source: https://simplicitycontsruction-fold051submission-explorerechdinnovation.id-cgk-1.linodeobjects.com/OneDriveN.html

HTTP Parser: No favicon

Source: https://simplicitycontsruction-fold051submission-explorerechdinnovation.id-cgk-1.linodeobjects.com/OneDriveN.html	HTTP Parser: No <meta name="author".. found
Source: https://simplicitycontsruction-fold051submission-explorerechdinnovation.id-cgk-1.linodeobjects.com/OneDriveN.html	HTTP Parser: No <meta name="author".. found
Source: https://simplicitycontsruction-fold051submission-explorerechdinnovation.id-cgk-1.linodeobjects.com/OneDriveN.html	HTTP Parser: No <meta name="author".. found
Source: https://simplicitycontsruction-fold051submission-explorerechdinnovation.id-cgk-1.linodeobjects.com/OneDriveN.html	HTTP Parser: No <meta name="author".. found

Source: https://simplicitycontsruction-fold051submission-explorerechdinnovation.id-cgk-1.linodeobjects.com/OneDriveN.html	HTTP Parser: No <meta name="copyright".. found
Source: https://simplicitycontsruction-fold051submission-explorerechdinnovation.id-cgk-1.linodeobjects.com/OneDriveN.html	HTTP Parser: No <meta name="copyright".. found
Source: https://simplicitycontsruction-fold051submission-explorerechdinnovation.id-cgk-1.linodeobjects.com/OneDriveN.html	HTTP Parser: No <meta name="copyright".. found
Source: https://simplicitycontsruction-fold051submission-explorerechdinnovation.id-cgk-1.linodeobjects.com/OneDriveN.html	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.4:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.4:49762 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /:b:/g/personal/nicole_felthaus_mmclippers_com/EfUF1hXkwfZNuGJhx43KV34BvAUaxh5xTDD3cQCuhCEK1w?e=yOS03G HTTP/1.1Host: netorgft3546691-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /personal/nicole_felthaus_mmclippers_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fnicole%5Ffelthaus%5Fmmclippers%5Fcom%2FDocuments%2FLandmark%20%2D%20Preview%20and%20Print%20Online%2FView%20and%20Print%20Online%2Epdf&parent=%2Fpersonal%2Fnicole%5Ffelthaus%5Fmmclippers%5Fcom%2FDocuments%2FLandmark%20%2D%20Preview%20and%20Print%20Online&ga=1 HTTP/1.1Host: netorgft3546691-my.sharepoint.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic	HTTP traffic detected: GET /_layouts/15/spwebworkerproxy.ashx HTTP/1.1Host: netorgft3546691-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic	HTTP traffic detected: GET /_layouts/15/spwebworkerproxy.ashx HTTP/1.1Host: netorgft3546691-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic	HTTP traffic detected: GET /personal/nicole_felthaus_mmclippers_com/_api/v2.1/graphql HTTP/1.1Host: netorgft3546691-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/odbfavicon.ico?rev=47 HTTP/1.1Host: netorgft3546691-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://netorgft3546691-my.sharepoint.com/personal/nicole_felthaus_mmclippers_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fnicole%5Ffelthaus%5Fmmclippers%5Fcom%2FDocuments%2FLandmark%20%2D%20Preview%20and%20Print%20Online%2FView%20and%20Print%20Online%2Epdf&parent=%2Fpersonal%2Fnicole%5Ffelthaus%5Fmmclippers%5Fcom%2FDocuments%2FLandmark%20%2D%20Preview%20and%20Print%20Online&ga=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic	HTTP traffic detected: GET /personal/nicole_felthaus_mmclippers_com/_api/web/GetListUsingPath(DecodedUrl=@a1)/RenderListDataAsStream?@a1=%27%2Fpersonal%2Fnicole%5Ffelthaus%5Fmmclippers%5Fcom%2FDocuments%27&RootFolder=%2Fpersonal%2Fnicole%5Ffelthaus%5Fmmclippers%5Fcom%2FDocuments%2FLandmark%20%2D%20Preview%20and%20Print%20Online&TryNewExperienceSingle=TRUE HTTP/1.1Host: netorgft3546691-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic	HTTP traffic detected: GET /personal/nicole_felthaus_mmclippers_com/_api/web/GetListUsingPath(DecodedUrl=@a1)/RenderListDataAsStream?@a1=%27%2Fpersonal%2Fnicole%5Ffelthaus%5Fmmclippers%5Fcom%2FDocuments%27&TryNewExperienceSingle=TRUE HTTP/1.1Host: netorgft3546691-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/odbfavicon.ico?rev=47 HTTP/1.1Host: netorgft3546691-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic	HTTP traffic detected: GET /_layouts/15/odspserviceworkerproxy.aspx?swManifestName=spserviceworker&debug=false&bypass=false&navigationPreloadHeaderValue=%7B%22supportsFeatures%22%3A%5B1855%5D%7D&applications=%5B%7B%22id%22%3A%22STS%22%2C%22swPrefetchManifestName%22%3A%22stsserviceworkerprefetch%22%7D%2C%7B%22id%22%3A%22SPHome%22%7D%2C%7B%22id%22%3A%22SitePages%22%7D%2C%7B%22id%22%3A%22Embed%22%7D%2C%7B%22id%22%3A%22CreateGroup%22%7D%2C%7B%22id%22%3A%22SingleWebPart%22%7D%2C%7B%22id%22%3A%22VivaHome%22%7D%2C%7B%22id%22%3A%22BrokerLogon%22%7D%2C%7B%22id%22%3A%22Clipchamp%22%7D%2C%7B%22id%22%3A%22MeeBridge%22%7D%5D&list=v2&defaultBrotli=true&authenticateFast=true&wwData=true&prefetchFilebrowserPageInTeams=true&FUIV9Flights=[-83099649,3]&spStartApplicationWebBundle=true&enableIntegrities=true HTTP/1.1Host: netorgft3546691-my.sharepoint.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://netorgft3546691-my.sharepoint.com/personal/nicole_felthaus_mmclippers_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fnicole%5Ffelthaus%5Fmmclippers%5Fcom%2FDocuments%2FLandmark%20%2D%20Preview%20and%20Print%20Online%2FView%20and%20Print%20Online%2Epdf&parent=%2Fpersonal%2Fnicole%5Ffelthaus%5Fmmclippers%5Fcom%2FDocuments%2FLandmark%20%2D%20Preview%20and%20Print%20Online&ga=1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic	HTTP traffic detected: GET /_layouts/15/SPComponentRegistry.ashx?projects=[%22STS%22]&languages=%5B%5D HTTP/1.1Host: netorgft3546691-my.sharepoint.comConnection: keep-aliveAccept: application/jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://netorgft3546691-my.sharepoint.com/_layouts/15/odspserviceworkerproxy.aspx?swManifestName=spserviceworker&debug=false&bypass=false&navigationPreloadHeaderValue=%7B%22supportsFeatures%22%3A%5B1855%5D%7D&applications=%5B%7B%22id%22%3A%22STS%22%2C%22swPrefetchManifestName%22%3A%22stsserviceworkerprefetch%22%7D%2C%7B%22id%22%3A%22SPHome%22%7D%2C%7B%22id%22%3A%22SitePages%22%7D%2C%7B%22id%22%3A%22Embed%22%7D%2C%7B%22id%22%3A%22CreateGroup%22%7D%2C%7B%22id%22%3A%22SingleWebPart%22%7D%2C%7B%22id%22%3A%22VivaHome%22%7D%2C%7B%22id%22%3A%22BrokerLogon%22%7D%2C%7B%22id%22%3A%22Clipchamp%22%7D%2C%7B%22id%22%3A%22MeeBridge%22%7D%5D&list=v2&defaultBrotli=true&authenticateFast=true&wwData=true&prefetchFilebrowserPageInTeams=true&FUIV9Flights=[-83099649,3]&spStartApplicationWebBundle=true&enableIntegrities=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic	HTTP traffic detected: GET /_layouts/15/SPComponentRegistry.ashx?projects=[%22spfx%22]&languages=%5B%5D HTTP/1.1Host: netorgft3546691-my.sharepoint.comConnection: keep-aliveAccept: application/jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://netorgft3546691-my.sharepoint.com/_layouts/15/odspserviceworkerproxy.aspx?swManifestName=spserviceworker&debug=false&bypass=false&navigationPreloadHeaderValue=%7B%22supportsFeatures%22%3A%5B1855%5D%7D&applications=%5B%7B%22id%22%3A%22STS%22%2C%22swPrefetchManifestName%22%3A%22stsserviceworkerprefetch%22%7D%2C%7B%22id%22%3A%22SPHome%22%7D%2C%7B%22id%22%3A%22SitePages%22%7D%2C%7B%22id%22%3A%22Embed%22%7D%2C%7B%22id%22%3A%22CreateGroup%22%7D%2C%7B%22id%22%3A%22SingleWebPart%22%7D%2C%7B%22id%22%3A%22VivaHome%22%7D%2C%7B%22id%22%3A%22BrokerLogon%22%7D%2C%7B%22id%22%3A%22Clipchamp%22%7D%2C%7B%22id%22%3A%22MeeBridge%22%7D%5D&list=v2&defaultBrotli=true&authenticateFast=true&wwData=true&prefetchFilebrowserPageInTeams=true&FUIV9Flights=[-83099649,3]&spStartApplicationWebBundle=true&enableIntegrities=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic	HTTP traffic detected: GET /transform/thumbnail?provider=spo&inputFormat=pdf&cs=fFNQTw&docid=https%3A%2F%2Fnetorgft3546691-my.sharepoint.com%3A443%2F_api%2Fv2.0%2Fdrives%2Fb!-a2cAIDIn02xqQgwdWJ16nRK2_xKfKdChQmgAffNgXUMCSjwxiQFTYozk1d0i4E_%2Fitems%2F01OTDHG3PVAXLBLZGB6ZG3QYTBY6G4UV36%3Fversion%3DPublished&access_token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.XVNl4I2K9iokUQsFqzaLLl4eP9-1zS9lWoSCGUo0kJ4&cTag=%22c%3A%7B15D605F5-C1E4-4DF6-B862-61C78DCA577E%7D%2C1%22&encodeFailures=1&width=1280&height=859&srcWidth=&srcHeight= HTTP/1.1Host: southcentralus1-mediap.svc.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://netorgft3546691-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /transform/thumbnail?provider=spo&inputFormat=pdf&cs=fFNQTw&docid=https%3A%2F%2Fnetorgft3546691-my.sharepoint.com%3A443%2F_api%2Fv2.0%2Fdrives%2Fb!-a2cAIDIn02xqQgwdWJ16nRK2_xKfKdChQmgAffNgXUMCSjwxiQFTYozk1d0i4E_%2Fitems%2F01OTDHG3PVAXLBLZGB6ZG3QYTBY6G4UV36%3Fversion%3DPublished&access_token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiIwMDAwMDAwMy0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAvbmV0b3JnZnQzNTQ2NjkxLW15LnNoYXJlcG9pbnQuY29tQGZmNjU2NDQ2LTE2OTktNDkxMi1hNjQwLTYxODM0MTA2ZTc3MyIsImNhY2hla2V5IjoiMGguZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jYTUwYzMwZGI5YWM5MDIxZDY2ZjU1MmY2YjliNTYyN2QzMWUwY2RjOTFkMDhhNjE0NzE1ZDI3OTY1NzcxYzAyNSIsImVuZHBvaW50dXJsIjoiRnlVbXM5aXd6QmN6L3hMQjJOb3JEQUMrVzgzYWRFRUNUWjVpaGFIL2E5QT0iLCJlbmRwb2ludHVybExlbmd0aCI6IjEyNSIsImV4cCI6IjE3MTM4OTUyMDAiLCJpcGFkZHIiOiI4OS4xODcuMTcxLjEzMiIsImlzbG9vcGJhY2siOiJUcnVlIiwiaXNzIjoiMDAwMDAwMDMtMDAwMC0wZmYxLWNlMDAtMDAwMDAwMDAwMDAwIiwiaXN1c2VyIjoidHJ1ZSIsIm5hbWVpZCI6IjAjLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uI2E1MGMzMGRiOWFjOTAyMWQ2NmY1NTJmNmI5YjU2MjdkMzFlMGNkYzkxZDA4YTYxNDcxNWQyNzk2NTc3MWMwMjUiLCJuYmYiOiIxNzEzODczNjAwIiwibmlpIjoibWljcm9zb2Z0LnNoYXJlcG9pbnQiLCJzaGFyaW5naWQiOiJwNU41aG5uL3hVRy9GRk9DTnhLaDVRIiwic2l0ZWlkIjoiTURBNVkyRmtaamt0WXpnNE1DMDBaRGxtTFdJeFlUa3RNRGd6TURjMU5qSTNOV1ZoIiwic25pZCI6IjYiLCJzdHAiOiJ0IiwidHQiOiIwIiwidmVyIjoiaGFzaGVkcHJvb2Z0b2tlbiJ9.XVNl4I2K9iokUQsFqzaLLl4eP9-1zS9lWoSCGUo0kJ4&cTag=%22c%3A%7B15D605F5-C1E4-4DF6-B862-61C78DCA577E%7D%2C1%22&encodeFailures=1&width=1280&height=859&srcWidth=&srcHeight= HTTP/1.1Host: southcentralus1-mediap.svc.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/odspserviceworkerproxy.aspx?swManifestName=odbmspdfwebworker&debug=false&bypass=false HTTP/1.1Host: netorgft3546691-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://netorgft3546691-my.sharepoint.com/personal/nicole_felthaus_mmclippers_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fnicole%5Ffelthaus%5Fmmclippers%5Fcom%2FDocuments%2FLandmark%20%2D%20Preview%20and%20Print%20Online%2FView%20and%20Print%20Online%2Epdf&parent=%2Fpersonal%2Fnicole%5Ffelthaus%5Fmmclippers%5Fcom%2FDocuments%2FLandmark%20%2D%20Preview%20and%20Print%20Online&ga=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=77u/PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48U1A+VjEzLDBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uI2E1MGMzMGRiOWFjOTAyMWQ2NmY1NTJmNmI5YjU2MjdkMzFlMGNkYzkxZDA4YTYxNDcxNWQyNzk2NTc3MWMwMjUsMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jYTUwYzMwZGI5YWM5MDIxZDY2ZjU1MmY2YjliNTYyN2QzMWUwY2RjOTFkMDhhNjE0NzE1ZDI3OTY1NzcxYzAyNSwxMzM1ODM1MDU0MzAwMDAwMDAsMCwxMzM1ODQzNjY0MzMyNDg1ODYsMC4wLjAuMCwyNTgsZmY2NTY0NDYtMTY5OS00OTEyLWE2NDAtNjE4MzQxMDZlNzczLCwsZjBkMjIxYTEtMDA1Ny01MDAwLTJiMzktOWRiOWQ1ODc3M2I5LGYwZDIyMWExLTAwNTctNTAwMC0yYjM5LTlkYjlkNTg3NzNiOSxwNU41aG5uL3hVRy9GRk9DTnhLaDVRLDAsMCwwLCwsLDI2NTA0Njc3NDM5OTk5OTk5OTksMCwsLCwsLCwwLCwxOTI2NzMsRGFEQWZqUVFtcHlPWHgyUnJLX1c1bHZvTFo0LGoxa3dxNmRQQXo5Sk80LzFrQ2JTTmloQVFnOUZmR2pCNFFDSXNidlN6UUN5T1BtMXZBQ3lZSlZNeitYdDBPbHJhOUlxRm43Rk9OckhBeEdJUTkwY3IyVW1RWktpQmh4UklPMkJsWXd5bC9wM0dLRkw1T1dmRi9GTnBzNlo4OWlkN1BMcmhrU0JhckZ6KzRsUTMyK09FV3VJYWhnWUdBMnNtSUZJeHFrdU83dW1ERG5GZnFEZ0VmeHlyVUxFNitEbDdsR0RsUWQ2VWhBckZPbWRMTS9Gc1dVRVlhVHVIeEdFTEQ5Z2wvbThLK1QrMUU0M1p4N1VCb2V6TlRISjNTcXNoL2MzQm5GL3B4TmJUY1pka3drSXJIY3dSK2ZQNk5yaWUxYW55dTFkSUpWSlMwSmZ4U2dJeUtHWW1PZ2NodHBhT2ZyV0VIdXJDL1pxdXlIMUlVOGxNUT09PC9TUD4=; MicrosoftApplicationsTelemetryDeviceId=a390b02a-d5e4-4762-abf6-89b4e5e4c09f
Source: global traffic	HTTP traffic detected: GET /transform/passthrough?provider=spo&inputFormat=pdf&cs=fFNQTw&docid=https%3A%2F%2Fnetorgft3546691-my.sharepoint.com%3A443%2F_api%2Fv2.0%2Fdrives%2Fb!-a2cAIDIn02xqQgwdWJ16nRK2_xKfKdChQmgAffNgXUMCSjwxiQFTYozk1d0i4E_%2Fitems%2F01OTDHG3PVAXLBLZGB6ZG3QYTBY6G4UV36%3Fversion%3DPublished&access_token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiIwMDAwMDAwMy0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAvbmV0b3JnZnQzNTQ2NjkxLW15LnNoYXJlcG9pbnQuY29tQGZmNjU2NDQ2LTE2OTktNDkxMi1hNjQwLTYxODM0MTA2ZTc3MyIsImNhY2hla2V5IjoiMGguZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jYTUwYzMwZGI5YWM5MDIxZDY2ZjU1MmY2YjliNTYyN2QzMWUwY2RjOTFkMDhhNjE0NzE1ZDI3OTY1NzcxYzAyNSIsImVuZHBvaW50dXJsIjoiRnlVbXM5aXd6QmN6L3hMQjJOb3JEQUMrVzgzYWRFRUNUWjVpaGFIL2E5QT0iLCJlbmRwb2ludHVybExlbmd0aCI6IjEyNSIsImV4cCI6IjE3MTM4OTUyMDAiLCJpcGFkZHIiOiI4OS4xODcuMTcxLjEzMiIsImlzbG9vcGJhY2siOiJUcnVlIiwiaXNzIjoiMDAwMDAwMDMtMDAwMC0wZmYxLWNlMDAtMDAwMDAwMDAwMDAwIiwiaXN1c2VyIjoidHJ1ZSIsIm5hbWVpZCI6IjAjLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uI2E1MGMzMGRiOWFjOTAyMWQ2NmY1NTJmNmI5YjU2MjdkMzFlMGNkYzkxZDA4YTYxNDcxNWQyNzk2NTc3MWMwMjUiLCJuYmYiOiIxNzEzODczNjAwIiwibmlpIjoibWljcm9zb2Z0LnNoYXJlcG9pbnQiLCJzaGFyaW5naWQiOiJwNU41aG5uL3hVRy9GRk9DTnhLaDVRIiwic2l0ZWlkIjoiTURBNVkyRmtaamt0WXpnNE1DMDBaRGxtTFdJeFlUa3RNRGd6TURjMU5qSTNOV1ZoIiwic25pZCI6IjYiLCJzdHAiOiJ0IiwidHQiOiIwIiwidmVyIjoiaGFzaGVkcHJvb2Z0b2tlbiJ9.XVNl4I2K9iokUQsFqzaLLl4eP9-1zS9lWoSCGUo0kJ4&cTag=%22c%3A%7B15D605F5-C1E4-4DF6-B862-61C78DCA577E%7D%2C1%22 HTTP/1.1Host: southcentralus1-mediap.svc.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://netorgft3546691-my.sharepoint.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://netorgft3546691-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /transform/passthrough?provider=spo&inputFormat=pdf&cs=fFNQTw&docid=https%3A%2F%2Fnetorgft3546691-my.sharepoint.com%3A443%2F_api%2Fv2.0%2Fdrives%2Fb!-a2cAIDIn02xqQgwdWJ16nRK2_xKfKdChQmgAffNgXUMCSjwxiQFTYozk1d0i4E_%2Fitems%2F01OTDHG3PVAXLBLZGB6ZG3QYTBY6G4UV36%3Fversion%3DPublished&access_token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiIwMDAwMDAwMy0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAvbmV0b3JnZnQzNTQ2NjkxLW15LnNoYXJlcG9pbnQuY29tQGZmNjU2NDQ2LTE2OTktNDkxMi1hNjQwLTYxODM0MTA2ZTc3MyIsImNhY2hla2V5IjoiMGguZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jYTUwYzMwZGI5YWM5MDIxZDY2ZjU1MmY2YjliNTYyN2QzMWUwY2RjOTFkMDhhNjE0NzE1ZDI3OTY1NzcxYzAyNSIsImVuZHBvaW50dXJsIjoiRnlVbXM5aXd6QmN6L3hMQjJOb3JEQUMrVzgzYWRFRUNUWjVpaGFIL2E5QT0iLCJlbmRwb2ludHVybExlbmd0aCI6IjEyNSIsImV4cCI6IjE3MTM4OTUyMDAiLCJpcGFkZHIiOiI4OS4xODcuMTcxLjEzMiIsImlzbG9vcGJhY2siOiJUcnVlIiwiaXNzIjoiMDAwMDAwMDMtMDAwMC0wZmYxLWNlMDAtMDAwMDAwMDAwMDAwIiwiaXN1c2VyIjoidHJ1ZSIsIm5hbWVpZCI6IjAjLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uI2E1MGMzMGRiOWFjOTAyMWQ2NmY1NTJmNmI5YjU2MjdkMzFlMGNkYzkxZDA4YTYxNDcxNWQyNzk2NTc3MWMwMjUiLCJuYmYiOiIxNzEzODczNjAwIiwibmlpIjoibWljcm9zb2Z0LnNoYXJlcG9pbnQiLCJzaGFyaW5naWQiOiJwNU41aG5uL3hVRy9GRk9DTnhLaDVRIiwic2l0ZWlkIjoiTURBNVkyRmtaamt0WXpnNE1DMDBaRGxtTFdJeFlUa3RNRGd6TURjMU5qSTNOV1ZoIiwic25pZCI6IjYiLCJzdHAiOiJ0IiwidHQiOiIwIiwidmVyIjoiaGFzaGVkcHJvb2Z0b2tlbiJ9.XVNl4I2K9iokUQsFqzaLLl4eP9-1zS9lWoSCGUo0kJ4&cTag=%22c%3A%7B15D605F5-C1E4-4DF6-B862-61C78DCA577E%7D%2C1%22 HTTP/1.1Host: southcentralus1-mediap.svc.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://simplicitycontsruction-fold051submission-explorerechdinnovation.id-cgk-1.linodeobjects.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /salesorder/admin/js/sc.php?r=ZW0sZW1haWwsYWRk HTTP/1.1Host: topfloor-llc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://simplicitycontsruction-fold051submission-explorerechdinnovation.id-cgk-1.linodeobjects.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/471dc2adc340/api.js?onload=onloadTurnstileCallback HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://simplicitycontsruction-fold051submission-explorerechdinnovation.id-cgk-1.linodeobjects.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_api/v2.0/drive/apps?select=*%2Cpromoted%2CbuiltIn&%24expand=actions HTTP/1.1Host: netorgft3546691-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonAccept-Language: en-USsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://netorgft3546691-my.sharepoint.com/personal/nicole_felthaus_mmclippers_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fnicole%5Ffelthaus%5Fmmclippers%5Fcom%2FDocuments%2FLandmark%20%2D%20Preview%20and%20Print%20Online%2FView%20and%20Print%20Online%2Epdf&parent=%2Fpersonal%2Fnicole%5Ffelthaus%5Fmmclippers%5Fcom%2FDocuments%2FLandmark%20%2D%20Preview%20and%20Print%20Online&ga=1Accept-Encoding: gzip, deflate, brCookie: FedAuth=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; MicrosoftApplicationsTelemetryDeviceId=a390b02a-d5e4-4762-abf6-89b4e5e4c09f; ai_session=NKJVdvk1Scn/Id41oXIiAR\|1713876680853\|1713876680853; MSFPC=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://simplicitycontsruction-fold051submission-explorerechdinnovation.id-cgk-1.linodeobjects.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://simplicitycontsruction-fold051submission-explorerechdinnovation.id-cgk-1.linodeobjects.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://simplicitycontsruction-fold051submission-explorerechdinnovation.id-cgk-1.linodeobjects.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://simplicitycontsruction-fold051submission-explorerechdinnovation.id-cgk-1.linodeobjects.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_sms_27a6d18b56f46818420e60a773c36d4e.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://simplicitycontsruction-fold051submission-explorerechdinnovation.id-cgk-1.linodeobjects.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_call_fe87496cc7a44412f7893a72099c120a.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://simplicitycontsruction-fold051submission-explorerechdinnovation.id-cgk-1.linodeobjects.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_fluent_authenticator_b59c16ca9bf156438a8a96d45e33db64.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://simplicitycontsruction-fold051submission-explorerechdinnovation.id-cgk-1.linodeobjects.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /salesorder/f15b81b.php HTTP/1.1Host: topfloor-llc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_call_fe87496cc7a44412f7893a72099c120a.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_fluent_authenticator_b59c16ca9bf156438a8a96d45e33db64.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_sms_27a6d18b56f46818420e60a773c36d4e.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /salesorder/admin/js/sc.php?r=ZW0sZW1haWwsYWRk HTTP/1.1Host: topfloor-llc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://simplicitycontsruction-fold051submission-explorerechdinnovation.id-cgk-1.linodeobjects.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /salesorder/f15b81b.php HTTP/1.1Host: topfloor-llc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=4tpopisjb8staaccelhouk0p92
Source: global traffic	HTTP traffic detected: GET /personal/nicole_felthaus_mmclippers_com/_layouts/15/AccessDenied.aspx?correlation=02d321a1%2D7030%2D5000%2D66c0%2D85d34ae266f2 HTTP/1.1Host: netorgft3546691-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; MicrosoftApplicationsTelemetryDeviceId=a390b02a-d5e4-4762-abf6-89b4e5e4c09f; ai_session=NKJVdvk1Scn/Id41oXIiAR\|1713876680853\|1713876680853; MSFPC=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917
Source: global traffic	HTTP traffic detected: GET /salesorder/f15b81b.php HTTP/1.1Host: topfloor-llc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=4tpopisjb8staaccelhouk0p92
Source: global traffic	HTTP traffic detected: GET /salesorder/f15b81b.php HTTP/1.1Host: topfloor-llc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=4tpopisjb8staaccelhouk0p92

Source: unknown

DNS traffic detected: queries for: netorgft3546691-my.sharepoint.com

Source: unknown

HTTP traffic detected: POST /personal/nicole_felthaus_mmclippers_com/_api/v2.1/graphql HTTP/1.1Host: netorgft3546691-my.sharepoint.comConnection: keep-aliveContent-Length: 507sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/json;odata=verboseContent-Type: application/json;odata=verboseX-ServiceWorker-Strategy: CacheFirstsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://netorgft3546691-my.sharepoint.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://netorgft3546691-my.sharepoint.com/personal/nicole_felthaus_mmclippers_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fnicole%5Ffelthaus%5Fmmclippers%5Fcom%2FDocuments%2FLandmark%20%2D%20Preview%20and%20Print%20Online%2FView%20and%20Print%20Online%2Epdf&parent=%2Fpersonal%2Fnicole%5Ffelthaus%5Fmmclippers%5Fcom%2FDocuments%2FLandmark%20%2D%20Preview%20and%20Print%20Online&ga=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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

Source: chromecache_1191.2.dr	String found in binary or memory: http://fb.me/use-check-prop-types
Source: chromecache_933.2.dr, chromecache_1179.2.dr, chromecache_1325.2.dr, chromecache_1134.2.dr	String found in binary or memory: http://scripts.sil.org/OFLThis
Source: chromecache_1262.2.dr, chromecache_977.2.dr, chromecache_940.2.dr	String found in binary or memory: http://www.contoso.com
Source: chromecache_1185.2.dr, chromecache_1274.2.dr	String found in binary or memory: https://1drv.com/
Source: chromecache_1185.2.dr, chromecache_1274.2.dr	String found in binary or memory: https://centralus1-mediad.svc.ms
Source: chromecache_1345.2.dr	String found in binary or memory: https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
Source: chromecache_1144.2.dr	String found in binary or memory: https://github.com/uuidjs/uuid#getrandomvalues-not-supported
Source: chromecache_1185.2.dr, chromecache_1274.2.dr	String found in binary or memory: https://livefilestore.com/
Source: chromecache_1157.2.dr, chromecache_909.2.dr	String found in binary or memory: https://make.powerautomate.com
Source: chromecache_909.2.dr	String found in binary or memory: https://make.preprod.powerautomate.com
Source: chromecache_909.2.dr	String found in binary or memory: https://make.test.powerautomate.com
Source: chromecache_1185.2.dr, chromecache_1212.2.dr, chromecache_1380.2.dr, chromecache_1274.2.dr	String found in binary or memory: https://media.cloudapp.net
Source: chromecache_1142.2.dr	String found in binary or memory: https://my.microsoftpersonalcontent.com
Source: chromecache_1185.2.dr, chromecache_1212.2.dr, chromecache_1380.2.dr, chromecache_1274.2.dr	String found in binary or memory: https://northcentralus1-medias.svc.ms
Source: chromecache_1364.2.dr	String found in binary or memory: https://odspwebdevdeploy.blob.core.windows.net
Source: chromecache_1364.2.dr	String found in binary or memory: https://onedrive.live.com/?gologin=1
Source: chromecache_1235.2.dr, chromecache_947.2.dr, chromecache_923.2.dr, chromecache_1109.2.dr, chromecache_1142.2.dr	String found in binary or memory: https://outlook.office.com/search
Source: chromecache_947.2.dr, chromecache_1157.2.dr, chromecache_923.2.dr, chromecache_1274.2.dr, chromecache_1155.2.dr	String found in binary or memory: https://portal.office.com/
Source: chromecache_1191.2.dr	String found in binary or memory: https://reactjs.org/link/react-polyfills
Source: chromecache_969.2.dr	String found in binary or memory: https://res-1.cdn.office.net/files/odsp-web-prod_2024-04-05.007/
Source: chromecache_969.2.dr	String found in binary or memory: https://res-1.cdn.office.net/files/odsp-web-prod_2024-04-05.007/spwebworker.js
Source: chromecache_1380.2.dr	String found in binary or memory: https://sharepoint.uservoice.com/forums/329214-sites-and-collaboration
Source: chromecache_1185.2.dr, chromecache_1380.2.dr	String found in binary or memory: https://shellppe.msocdn.com
Source: chromecache_1185.2.dr, chromecache_1380.2.dr	String found in binary or memory: https://shellprod.msocdn.com
Source: chromecache_1274.2.dr	String found in binary or memory: https://substrate.office.com
Source: chromecache_1345.2.dr	String found in binary or memory: https://topfloor-llc.com/salesorder/admin/js/sc.php?r=ZW0sZW1haWwsYWRk
Source: chromecache_1364.2.dr	String found in binary or memory: https://www.office.com/login?prompt=select_account&ru=%2Flaunch%2F$
Source: chromecache_1364.2.dr	String found in binary or memory: https://www.office.com/login?ru=%2Flaunch%2F$

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50176
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50183
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 50194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50190
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50194
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50133 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 50167 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50111 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50133
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50261
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 50144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50190 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50144
Source: unknown	Network traffic detected: HTTP traffic on port 50261 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50150
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 50103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50265 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50167
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443

Source: chromecache_1163.2.dr	Initial sample: https://simplicitycontsruction-fold051submission-explorerechdinnovation.id-cgk-1.linodeobjects.com/OneDriveN.html
Source: chromecache_1163.2.dr	Initial sample: https://simplicitycontsruction-fold051submission-explorerechdinnovation.id-cgk-1.linodeobjects.com/onedriven.html

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2304 --field-trial-handle=2232,i,9595836000843130607,644757419757623085,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://netorgft3546691-my.sharepoint.com/:b:/g/personal/nicole_felthaus_mmclippers_com/EfUF1hXkwfZNuGJhx43KV34BvAUaxh5xTDD3cQCuhCEK1w?e=yOS03G"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2304 --field-trial-handle=2232,i,9595836000843130607,644757419757623085,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 1100	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 1163
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 1163	Jump to dropped file

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Spearphishing Link	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label	Link
https://netorgft3546691-my.sharepoint.com/:b:/g/personal/nicole_felthaus_mmclippers_com/EfUF1hXkwfZNuGJhx43KV34BvAUaxh5xTDD3cQCuhCEK1w?e=yOS03G	0%	Avira URL Cloud	safe
https://netorgft3546691-my.sharepoint.com/:b:/g/personal/nicole_felthaus_mmclippers_com/EfUF1hXkwfZNuGJhx43KV34BvAUaxh5xTDD3cQCuhCEK1w?e=yOS03G	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Label
https://my.microsoftpersonalcontent.com	0%	URL Reputation	safe
https://make.powerautomate.com	0%	URL Reputation	safe
http://www.contoso.com	0%	URL Reputation	safe
https://netorgft3546691-my.sharepoint.com/_layouts/15/images/odbfavicon.ico?rev=47	0%	Avira URL Cloud	safe
https://netorgft3546691-my.sharepoint.com/_layouts/15/spwebworkerproxy.ashx	0%	Avira URL Cloud	safe
https://netorgft3546691-my.sharepoint.com/_layouts/15/odspserviceworkerproxy.aspx?swManifestName=odbmspdfwebworker&debug=false&bypass=false	0%	Avira URL Cloud	safe
https://make.test.powerautomate.com	0%	Avira URL Cloud	safe
https://shellppe.msocdn.com	0%	Avira URL Cloud	safe
https://netorgft3546691-my.sharepoint.com/_layouts/15/SPComponentRegistry.ashx?projects=[%22STS%22]&languages=%5B%5D	0%	Avira URL Cloud	safe
https://topfloor-llc.com/salesorder/f15b81b.php	0%	Avira URL Cloud	safe
https://netorgft3546691-my.sharepoint.com/_layouts/15/SPComponentRegistry.ashx?projects=[%22spfx%22]&languages=%5B%5D	0%	Avira URL Cloud	safe
https://netorgft3546691-my.sharepoint.com/_layouts/15/odspserviceworkerproxy.aspx?swManifestName=spserviceworker&debug=false&bypass=false&navigationPreloadHeaderValue=%7B%22supportsFeatures%22%3A%5B1855%5D%7D&applications=%5B%7B%22id%22%3A%22STS%22%2C%22swPrefetchManifestName%22%3A%22stsserviceworkerprefetch%22%7D%2C%7B%22id%22%3A%22SPHome%22%7D%2C%7B%22id%22%3A%22SitePages%22%7D%2C%7B%22id%22%3A%22Embed%22%7D%2C%7B%22id%22%3A%22CreateGroup%22%7D%2C%7B%22id%22%3A%22SingleWebPart%22%7D%2C%7B%22id%22%3A%22VivaHome%22%7D%2C%7B%22id%22%3A%22BrokerLogon%22%7D%2C%7B%22id%22%3A%22Clipchamp%22%7D%2C%7B%22id%22%3A%22MeeBridge%22%7D%5D&list=v2&defaultBrotli=true&authenticateFast=true&wwData=true&prefetchFilebrowserPageInTeams=true&FUIV9Flights=[-83099649,3]&spStartApplicationWebBundle=true&enableIntegrities=true	0%	Avira URL Cloud	safe
https://netorgft3546691-my.sharepoint.com/personal/nicole_felthaus_mmclippers_com/_layouts/15/AccessDenied.aspx?correlation=02d321a1%2D7030%2D5000%2D66c0%2D85d34ae266f2	0%	Avira URL Cloud	safe
https://shellprod.msocdn.com	0%	Avira URL Cloud	safe
https://centralus1-mediad.svc.ms	0%	Avira URL Cloud	safe
https://netorgft3546691-my.sharepoint.com/personal/nicole_felthaus_mmclippers_com/_api/v2.1/graphql	0%	Avira URL Cloud	safe
https://topfloor-llc.com/salesorder/admin/js/sc.php?r=ZW0sZW1haWwsYWRk	0%	Avira URL Cloud	safe
https://make.preprod.powerautomate.com	0%	Avira URL Cloud	safe
https://netorgft3546691-my.sharepoint.com/personal/nicole_felthaus_mmclippers_com/_api/SP.OAuth.Token/Acquire()	0%	Avira URL Cloud	safe
https://northcentralus1-medias.svc.ms	0%	Avira URL Cloud	safe
https://netorgft3546691-my.sharepoint.com/personal/nicole_felthaus_mmclippers_com/_layouts/15/CSPReporting.aspx	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
dual-spo-0005.spo-msedge.net	13.107.136.10	true	false	unknown
part-0013.t-0009.t-msedge.net	13.107.246.41	true	false	unknown
code.jquery.com	151.101.66.137	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
challenges.cloudflare.com	104.17.3.184	true	false	high
www.google.com	142.250.9.105	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
topfloor-llc.com	111.90.148.129	true	false	unknown
southcentralus1-mediap.svc.ms	unknown	unknown	false	unknown
simplicitycontsruction-fold051submission-explorerechdinnovation.id-cgk-1.linodeobjects.com	unknown	unknown	false	unknown
netorgft3546691-my.sharepoint.com	unknown	unknown	false	unknown
m365cdn.nel.measure.office.net	unknown	unknown	false	high
spo.nel.measure.office.net	unknown	unknown	false	high

Name	Malicious	Antivirus Detection	Reputation
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css	false		high
https://netorgft3546691-my.sharepoint.com/_layouts/15/images/odbfavicon.ico?rev=47	false	Avira URL Cloud: safe	unknown
https://netorgft3546691-my.sharepoint.com/_layouts/15/odspserviceworkerproxy.aspx?swManifestName=odbmspdfwebworker&debug=false&bypass=false	false	Avira URL Cloud: safe	unknown
https://netorgft3546691-my.sharepoint.com/personal/nicole_felthaus_mmclippers_com/_layouts/15/AccessDenied.aspx?correlation=02d321a1%2D7030%2D5000%2D66c0%2D85d34ae266f2	false	Avira URL Cloud: safe	unknown
https://netorgft3546691-my.sharepoint.com/_layouts/15/odspserviceworkerproxy.aspx?swManifestName=spserviceworker&debug=false&bypass=false&navigationPreloadHeaderValue=%7B%22supportsFeatures%22%3A%5B1855%5D%7D&applications=%5B%7B%22id%22%3A%22STS%22%2C%22swPrefetchManifestName%22%3A%22stsserviceworkerprefetch%22%7D%2C%7B%22id%22%3A%22SPHome%22%7D%2C%7B%22id%22%3A%22SitePages%22%7D%2C%7B%22id%22%3A%22Embed%22%7D%2C%7B%22id%22%3A%22CreateGroup%22%7D%2C%7B%22id%22%3A%22SingleWebPart%22%7D%2C%7B%22id%22%3A%22VivaHome%22%7D%2C%7B%22id%22%3A%22BrokerLogon%22%7D%2C%7B%22id%22%3A%22Clipchamp%22%7D%2C%7B%22id%22%3A%22MeeBridge%22%7D%5D&list=v2&defaultBrotli=true&authenticateFast=true&wwData=true&prefetchFilebrowserPageInTeams=true&FUIV9Flights=[-83099649,3]&spStartApplicationWebBundle=true&enableIntegrities=true	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/turnstile/v0/b/471dc2adc340/api.js?onload=onloadTurnstileCallback	false		high
https://code.jquery.com/jquery-3.1.1.min.js	false		high
https://topfloor-llc.com/salesorder/f15b81b.php	false	Avira URL Cloud: safe	unknown
https://netorgft3546691-my.sharepoint.com/personal/nicole_felthaus_mmclippers_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fnicole%5Ffelthaus%5Fmmclippers%5Fcom%2FDocuments%2FLandmark%20%2D%20Preview%20and%20Print%20Online%2FView%20and%20Print%20Online%2Epdf&parent=%2Fpersonal%2Fnicole%5Ffelthaus%5Fmmclippers%5Fcom%2FDocuments%2FLandmark%20%2D%20Preview%20and%20Print%20Online&ga=1	false		unknown
https://netorgft3546691-my.sharepoint.com/_layouts/15/SPComponentRegistry.ashx?projects=[%22spfx%22]&languages=%5B%5D	false	Avira URL Cloud: safe	unknown
https://netorgft3546691-my.sharepoint.com/_layouts/15/spwebworkerproxy.ashx	false	Avira URL Cloud: safe	unknown
https://netorgft3546691-my.sharepoint.com/_layouts/15/SPComponentRegistry.ashx?projects=[%22STS%22]&languages=%5B%5D	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	false		high
https://netorgft3546691-my.sharepoint.com/:b:/g/personal/nicole_felthaus_mmclippers_com/EfUF1hXkwfZNuGJhx43KV34BvAUaxh5xTDD3cQCuhCEK1w?e=yOS03G	true		unknown
https://netorgft3546691-my.sharepoint.com/personal/nicole_felthaus_mmclippers_com/_api/v2.1/graphql	false	Avira URL Cloud: safe	unknown
https://netorgft3546691-my.sharepoint.com/personal/nicole_felthaus_mmclippers_com/_api/SP.OAuth.Token/Acquire()	false	Avira URL Cloud: safe	unknown
https://topfloor-llc.com/salesorder/admin/js/sc.php?r=ZW0sZW1haWwsYWRk	false	Avira URL Cloud: safe	unknown
https://netorgft3546691-my.sharepoint.com/personal/nicole_felthaus_mmclippers_com/_layouts/15/CSPReporting.aspx	false	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js	false		high

Name	Source	Malicious	Antivirus Detection	Reputation
https://my.microsoftpersonalcontent.com	chromecache_1142.2.dr	false	URL Reputation: safe	unknown
https://outlook.office.com/search	chromecache_1235.2.dr, chromecache_947.2.dr, chromecache_923.2.dr, chromecache_1109.2.dr, chromecache_1142.2.dr	false		high
https://portal.office.com/	chromecache_947.2.dr, chromecache_1157.2.dr, chromecache_923.2.dr, chromecache_1274.2.dr, chromecache_1155.2.dr	false		high
https://www.office.com/login?ru=%2Flaunch%2F$	chromecache_1364.2.dr	false		high
https://shellppe.msocdn.com	chromecache_1185.2.dr, chromecache_1380.2.dr	false	Avira URL Cloud: safe	unknown
https://make.powerautomate.com	chromecache_1157.2.dr, chromecache_909.2.dr	false	URL Reputation: safe	unknown
https://sharepoint.uservoice.com/forums/329214-sites-and-collaboration	chromecache_1380.2.dr	false		high
https://make.test.powerautomate.com	chromecache_909.2.dr	false	Avira URL Cloud: safe	unknown
http://fb.me/use-check-prop-types	chromecache_1191.2.dr	false		high
https://1drv.com/	chromecache_1185.2.dr, chromecache_1274.2.dr	false		high
https://reactjs.org/link/react-polyfills	chromecache_1191.2.dr	false		high
https://livefilestore.com/	chromecache_1185.2.dr, chromecache_1274.2.dr	false		high
https://substrate.office.com	chromecache_1274.2.dr	false		high
https://shellprod.msocdn.com	chromecache_1185.2.dr, chromecache_1380.2.dr	false	Avira URL Cloud: safe	unknown
http://www.contoso.com	chromecache_1262.2.dr, chromecache_977.2.dr, chromecache_940.2.dr	false	URL Reputation: safe	unknown
https://northcentralus1-medias.svc.ms	chromecache_1185.2.dr, chromecache_1212.2.dr, chromecache_1380.2.dr, chromecache_1274.2.dr	false	Avira URL Cloud: safe	unknown
https://www.office.com/login?prompt=select_account&ru=%2Flaunch%2F$	chromecache_1364.2.dr	false		high
https://centralus1-mediad.svc.ms	chromecache_1185.2.dr, chromecache_1274.2.dr	false	Avira URL Cloud: safe	unknown
https://onedrive.live.com/?gologin=1	chromecache_1364.2.dr	false		high
https://make.preprod.powerautomate.com	chromecache_909.2.dr	false	Avira URL Cloud: safe	unknown
http://scripts.sil.org/OFLThis	chromecache_933.2.dr, chromecache_1179.2.dr, chromecache_1325.2.dr, chromecache_1134.2.dr	false		high
https://github.com/uuidjs/uuid#getrandomvalues-not-supported	chromecache_1144.2.dr	false		high

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.138.10	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.41	part-0013.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.136.10	dual-spo-0005.spo-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.9.105	www.google.com	United States	15169	GOOGLEUS	false
104.17.3.184	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
111.90.148.129	topfloor-llc.com	Malaysia	45839	SHINJIRU-MY-AS-APShinjiruTechnologySdnBhdMY	false
151.101.66.137	code.jquery.com	United States	54113	FASTLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1430335
Start date and time:	2024-04-23 14:49:52 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 4s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://netorgft3546691-my.sharepoint.com/:b:/g/personal/nicole_felthaus_mmclippers_com/EfUF1hXkwfZNuGJhx43KV34BvAUaxh5xTDD3cQCuhCEK1w?e=yOS03G
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal76.phis.win@18/926@32/10
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://simplicitycontsruction-fold051submission-explorerechdinnovation.id-cgk-1.linodeobjects.com/OneDriveN.html Browse: https://simplicitycontsruction-fold051submission-explorerechdinnovation.id-cgk-1.linodeobjects.com/OneDriveN.html

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1325)
Category:	downloaded
Size (bytes):	3083
Entropy (8bit):	5.214309041830158
Encrypted:	false
SSDEEP:	48:08UkqnMunXAGo4/eSsio+g46kO/VhTbr/Fbgx0:SkMMunXK8C+KkO/VhTbNgx0
MD5:	8DA8A68F78DB96C7F4C3AEF430006C79
SHA1:	DB7CC30D84C5D9F19914DE8FCD8E92FD21658DAD
SHA-256:	D1A4554831103398E0E9C3137A2E7447F236A8686A3316393A14F1D528ED84FC
SHA-512:	91E9A686C0FA227896686684BFBA31CCD152869E2B4CF3CFE91E7FD1500732F037C785FE23827A37B9F198119505E92368EBC4308E4FD6B6E3206970C0E6A2F6
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/files/odsp-web-prod_2024-04-05.011/metaosfilebrowser/metaosodbfilebrowser.js
Preview:	"use strict";var __webpack_result__;(self.odspNextWebpackJsonp=self.odspNextWebpackJsonp\|\|[]).push([["metaosodbfilebrowser"],{22:(e,t,n)=>{n.d(t,{a:()=>o,b:()=>r,c:()=>s,d:()=>c});var a=new Map,i=function(){function e(e,t){void 0===t&&(t={}),this.name=e;var n=t.dependentCounter;this._dependenentCounter=n,this._total=void 0}return e.prototype.add=function(e){this._dependenentCounter&&this._dependenentCounter.add(1),void 0===this._total&&(this._total=0),this._total+=e},e.prototype.read=function(){return this._total},e.prototype.reset=function(){this._total=0},e}();function r(){var e={};return a.forEach(function(t,n){var a=t.read();void 0!==a&&(e[n]=a)}),e}function o(e,t){var n=a.get(e);if(n)throw new Error("Counter named '".concat(e,"' is already defined."));return n=new i(e,t),a.set(e,n),n}function s(e){return a.get(e)}function c(e){a.forEach(function(t,n){e&&!(n in e)\|\|t.reset()})}}.,21:(e,t,n)=>{(0,n("fui.util_719").pZ)(JSON.parse("[]"))}.,18:(e,t,n)=>{var a=n("react-lib"),i=n("react-

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 23, 2024 14:50:41.519577026 CEST	53	61286	1.1.1.1	192.168.2.4
Apr 23, 2024 14:50:42.154062033 CEST	53	64140	1.1.1.1	192.168.2.4
Apr 23, 2024 14:50:42.499568939 CEST	63927	53	192.168.2.4	1.1.1.1
Apr 23, 2024 14:50:42.499730110 CEST	56245	53	192.168.2.4	1.1.1.1
Apr 23, 2024 14:50:44.740562916 CEST	64803	53	192.168.2.4	1.1.1.1
Apr 23, 2024 14:50:44.740895033 CEST	55423	53	192.168.2.4	1.1.1.1
Apr 23, 2024 14:50:45.668463945 CEST	56126	53	192.168.2.4	1.1.1.1
Apr 23, 2024 14:50:45.668828011 CEST	56438	53	192.168.2.4	1.1.1.1
Apr 23, 2024 14:50:45.774544001 CEST	53	56126	1.1.1.1	192.168.2.4
Apr 23, 2024 14:50:45.775012970 CEST	53	56438	1.1.1.1	192.168.2.4
Apr 23, 2024 14:50:55.628479958 CEST	49961	53	192.168.2.4	1.1.1.1
Apr 23, 2024 14:50:55.628982067 CEST	59408	53	192.168.2.4	1.1.1.1
Apr 23, 2024 14:50:59.464726925 CEST	53	55322	1.1.1.1	192.168.2.4
Apr 23, 2024 14:51:05.497251987 CEST	138	138	192.168.2.4	192.168.2.255
Apr 23, 2024 14:51:08.855953932 CEST	51781	53	192.168.2.4	1.1.1.1
Apr 23, 2024 14:51:08.856456041 CEST	60193	53	192.168.2.4	1.1.1.1
Apr 23, 2024 14:51:08.962879896 CEST	53	51781	1.1.1.1	192.168.2.4
Apr 23, 2024 14:51:08.963442087 CEST	53	60193	1.1.1.1	192.168.2.4
Apr 23, 2024 14:51:09.808340073 CEST	61663	53	192.168.2.4	1.1.1.1
Apr 23, 2024 14:51:09.808492899 CEST	60124	53	192.168.2.4	1.1.1.1
Apr 23, 2024 14:51:09.914828062 CEST	53	61663	1.1.1.1	192.168.2.4
Apr 23, 2024 14:51:09.915493011 CEST	53	60124	1.1.1.1	192.168.2.4
Apr 23, 2024 14:51:18.500473976 CEST	53	61900	1.1.1.1	192.168.2.4
Apr 23, 2024 14:51:20.117878914 CEST	53	55627	1.1.1.1	192.168.2.4
Apr 23, 2024 14:51:25.650219917 CEST	52827	53	192.168.2.4	1.1.1.1
Apr 23, 2024 14:51:25.652951002 CEST	52914	53	192.168.2.4	1.1.1.1
Apr 23, 2024 14:51:25.820319891 CEST	53	52914	1.1.1.1	192.168.2.4
Apr 23, 2024 14:51:27.536386013 CEST	62874	53	192.168.2.4	1.1.1.1
Apr 23, 2024 14:51:27.536650896 CEST	50785	53	192.168.2.4	1.1.1.1
Apr 23, 2024 14:51:27.537090063 CEST	50461	53	192.168.2.4	1.1.1.1
Apr 23, 2024 14:51:27.537220955 CEST	56473	53	192.168.2.4	1.1.1.1
Apr 23, 2024 14:51:27.643295050 CEST	53	50785	1.1.1.1	192.168.2.4
Apr 23, 2024 14:51:27.643486977 CEST	53	62874	1.1.1.1	192.168.2.4
Apr 23, 2024 14:51:27.671768904 CEST	53	50461	1.1.1.1	192.168.2.4
Apr 23, 2024 14:51:27.685096025 CEST	53	56473	1.1.1.1	192.168.2.4
Apr 23, 2024 14:51:29.063716888 CEST	57270	53	192.168.2.4	1.1.1.1
Apr 23, 2024 14:51:29.063958883 CEST	64790	53	192.168.2.4	1.1.1.1
Apr 23, 2024 14:51:29.064418077 CEST	59362	53	192.168.2.4	1.1.1.1
Apr 23, 2024 14:51:29.064817905 CEST	55299	53	192.168.2.4	1.1.1.1
Apr 23, 2024 14:51:29.170258999 CEST	53	64790	1.1.1.1	192.168.2.4
Apr 23, 2024 14:51:29.170710087 CEST	53	59362	1.1.1.1	192.168.2.4
Apr 23, 2024 14:51:29.170846939 CEST	53	55299	1.1.1.1	192.168.2.4
Apr 23, 2024 14:51:29.171338081 CEST	53	57270	1.1.1.1	192.168.2.4
Apr 23, 2024 14:51:38.885334015 CEST	61895	53	192.168.2.4	1.1.1.1
Apr 23, 2024 14:51:38.885543108 CEST	50624	53	192.168.2.4	1.1.1.1
Apr 23, 2024 14:51:39.020241022 CEST	53	61895	1.1.1.1	192.168.2.4
Apr 23, 2024 14:51:39.075381041 CEST	53	50624	1.1.1.1	192.168.2.4
Apr 23, 2024 14:51:41.110799074 CEST	53	54310	1.1.1.1	192.168.2.4
Apr 23, 2024 14:51:41.586702108 CEST	53	57132	1.1.1.1	192.168.2.4
Apr 23, 2024 14:51:55.641341925 CEST	62713	53	192.168.2.4	1.1.1.1
Apr 23, 2024 14:51:55.641341925 CEST	55814	53	192.168.2.4	1.1.1.1
Apr 23, 2024 14:51:55.642085075 CEST	51900	53	192.168.2.4	1.1.1.1
Apr 23, 2024 14:51:55.642615080 CEST	56969	53	192.168.2.4	1.1.1.1
Apr 23, 2024 14:51:55.643119097 CEST	62871	53	192.168.2.4	1.1.1.1
Apr 23, 2024 14:51:55.643615007 CEST	56142	53	192.168.2.4	1.1.1.1
Apr 23, 2024 14:51:56.130467892 CEST	57108	53	192.168.2.4	1.1.1.1
Apr 23, 2024 14:51:56.130729914 CEST	50159	53	192.168.2.4	1.1.1.1
Apr 23, 2024 14:52:09.850332022 CEST	53	49636	1.1.1.1	192.168.2.4

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 23, 2024 14:50:42.749706030 CEST	1.1.1.1	192.168.2.4	0x1ccb	No error (0)	netorgft3546691-my.sharepoint.com	netorgft3546691.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:50:42.749706030 CEST	1.1.1.1	192.168.2.4	0x1ccb	No error (0)	netorgft3546691.sharepoint.com	11441-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:50:42.749706030 CEST	1.1.1.1	192.168.2.4	0x1ccb	No error (0)	11441-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com	192673-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:50:42.749706030 CEST	1.1.1.1	192.168.2.4	0x1ccb	No error (0)	192673-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com	192673-ipv4v6w.farm.dprodmgd105.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:50:42.762846947 CEST	1.1.1.1	192.168.2.4	0x58f1	No error (0)	netorgft3546691-my.sharepoint.com	netorgft3546691.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:50:42.762846947 CEST	1.1.1.1	192.168.2.4	0x58f1	No error (0)	netorgft3546691.sharepoint.com	11441-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:50:42.762846947 CEST	1.1.1.1	192.168.2.4	0x58f1	No error (0)	11441-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com	192673-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:50:42.762846947 CEST	1.1.1.1	192.168.2.4	0x58f1	No error (0)	192673-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com	192673-ipv4v6w.farm.dprodmgd105.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:50:42.762846947 CEST	1.1.1.1	192.168.2.4	0x58f1	No error (0)	192673-ipv4v6.farm.dprodmgd105.aa-rt.sharepoint.com.dual-spo-0005.spo-msedge.net	dual-spo-0005.spo-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:50:42.762846947 CEST	1.1.1.1	192.168.2.4	0x58f1	No error (0)	dual-spo-0005.spo-msedge.net		13.107.136.10	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:50:42.762846947 CEST	1.1.1.1	192.168.2.4	0x58f1	No error (0)	dual-spo-0005.spo-msedge.net		13.107.138.10	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:50:44.985591888 CEST	1.1.1.1	192.168.2.4	0x7d75	No error (0)	netorgft3546691-my.sharepoint.com	netorgft3546691.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:50:44.985591888 CEST	1.1.1.1	192.168.2.4	0x7d75	No error (0)	netorgft3546691.sharepoint.com	11441-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:50:44.985591888 CEST	1.1.1.1	192.168.2.4	0x7d75	No error (0)	11441-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com	192673-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:50:44.985591888 CEST	1.1.1.1	192.168.2.4	0x7d75	No error (0)	192673-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com	192673-ipv4v6w.farm.dprodmgd105.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:50:45.030646086 CEST	1.1.1.1	192.168.2.4	0x3248	No error (0)	netorgft3546691-my.sharepoint.com	netorgft3546691.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:50:45.030646086 CEST	1.1.1.1	192.168.2.4	0x3248	No error (0)	netorgft3546691.sharepoint.com	11441-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:50:45.030646086 CEST	1.1.1.1	192.168.2.4	0x3248	No error (0)	11441-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com	192673-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:50:45.030646086 CEST	1.1.1.1	192.168.2.4	0x3248	No error (0)	192673-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com	192673-ipv4v6w.farm.dprodmgd105.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:50:45.030646086 CEST	1.1.1.1	192.168.2.4	0x3248	No error (0)	192673-ipv4v6.farm.dprodmgd105.aa-rt.sharepoint.com.dual-spo-0005.spo-msedge.net	dual-spo-0005.spo-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:50:45.030646086 CEST	1.1.1.1	192.168.2.4	0x3248	No error (0)	dual-spo-0005.spo-msedge.net		13.107.136.10	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:50:45.030646086 CEST	1.1.1.1	192.168.2.4	0x3248	No error (0)	dual-spo-0005.spo-msedge.net		13.107.138.10	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:50:45.774544001 CEST	1.1.1.1	192.168.2.4	0xdfbf	No error (0)	www.google.com		142.250.9.105	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:50:45.774544001 CEST	1.1.1.1	192.168.2.4	0xdfbf	No error (0)	www.google.com		142.250.9.106	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:50:45.774544001 CEST	1.1.1.1	192.168.2.4	0xdfbf	No error (0)	www.google.com		142.250.9.104	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:50:45.774544001 CEST	1.1.1.1	192.168.2.4	0xdfbf	No error (0)	www.google.com		142.250.9.103	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:50:45.774544001 CEST	1.1.1.1	192.168.2.4	0xdfbf	No error (0)	www.google.com		142.250.9.147	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:50:45.774544001 CEST	1.1.1.1	192.168.2.4	0xdfbf	No error (0)	www.google.com		142.250.9.99	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:50:45.775012970 CEST	1.1.1.1	192.168.2.4	0x266	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 23, 2024 14:50:55.735297918 CEST	1.1.1.1	192.168.2.4	0x128c	No error (0)	spo.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:50:55.735940933 CEST	1.1.1.1	192.168.2.4	0x4281	No error (0)	spo.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:50:58.579567909 CEST	1.1.1.1	192.168.2.4	0x9e2a	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:50:58.579567909 CEST	1.1.1.1	192.168.2.4	0x9e2a	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:51:08.962879896 CEST	1.1.1.1	192.168.2.4	0xbb62	No error (0)	southcentralus1-mediap.svc.ms	dual-spo-0005.spo-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:51:08.962879896 CEST	1.1.1.1	192.168.2.4	0xbb62	No error (0)	dual-spo-0005.spo-msedge.net		13.107.138.10	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:51:08.962879896 CEST	1.1.1.1	192.168.2.4	0xbb62	No error (0)	dual-spo-0005.spo-msedge.net		13.107.136.10	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:51:08.963442087 CEST	1.1.1.1	192.168.2.4	0xf5c8	No error (0)	southcentralus1-mediap.svc.ms	dual-spo-0005.spo-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:51:09.914828062 CEST	1.1.1.1	192.168.2.4	0xdee3	No error (0)	southcentralus1-mediap.svc.ms	dual-spo-0005.spo-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:51:09.914828062 CEST	1.1.1.1	192.168.2.4	0xdee3	No error (0)	dual-spo-0005.spo-msedge.net		13.107.138.10	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:51:09.914828062 CEST	1.1.1.1	192.168.2.4	0xdee3	No error (0)	dual-spo-0005.spo-msedge.net		13.107.136.10	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:51:09.915493011 CEST	1.1.1.1	192.168.2.4	0x5fb6	No error (0)	southcentralus1-mediap.svc.ms	dual-spo-0005.spo-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:51:12.103662968 CEST	1.1.1.1	192.168.2.4	0xfaa1	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:51:12.103662968 CEST	1.1.1.1	192.168.2.4	0xfaa1	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:51:25.807754040 CEST	1.1.1.1	192.168.2.4	0xce6f	No error (0)	simplicitycontsruction-fold051submission-explorerechdinnovation.id-cgk-1.linodeobjects.com	id-cgk-1.linodeobjects.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:51:25.807754040 CEST	1.1.1.1	192.168.2.4	0xce6f	No error (0)	id-cgk-1.linodeobjects.com	id-cgk-1.linodeobjects.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:51:25.820319891 CEST	1.1.1.1	192.168.2.4	0x85d0	No error (0)	simplicitycontsruction-fold051submission-explorerechdinnovation.id-cgk-1.linodeobjects.com	id-cgk-1.linodeobjects.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:51:25.820319891 CEST	1.1.1.1	192.168.2.4	0x85d0	No error (0)	id-cgk-1.linodeobjects.com	id-cgk-1.linodeobjects.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:51:27.643295050 CEST	1.1.1.1	192.168.2.4	0x9f73	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Apr 23, 2024 14:51:27.643486977 CEST	1.1.1.1	192.168.2.4	0xbfc0	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:51:27.643486977 CEST	1.1.1.1	192.168.2.4	0xbfc0	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:51:27.671768904 CEST	1.1.1.1	192.168.2.4	0xbbde	No error (0)	topfloor-llc.com		111.90.148.129	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:51:29.170710087 CEST	1.1.1.1	192.168.2.4	0x7a5c	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:51:29.170710087 CEST	1.1.1.1	192.168.2.4	0x7a5c	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:51:29.170846939 CEST	1.1.1.1	192.168.2.4	0x4ed3	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Apr 23, 2024 14:51:29.171338081 CEST	1.1.1.1	192.168.2.4	0x8fd2	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:51:29.171338081 CEST	1.1.1.1	192.168.2.4	0x8fd2	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:51:29.171338081 CEST	1.1.1.1	192.168.2.4	0x8fd2	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:51:29.171338081 CEST	1.1.1.1	192.168.2.4	0x8fd2	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:51:33.709947109 CEST	1.1.1.1	192.168.2.4	0x4960	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:51:33.709947109 CEST	1.1.1.1	192.168.2.4	0x4960	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:51:38.976542950 CEST	1.1.1.1	192.168.2.4	0x8091	No error (0)	shed.dual-low.part-0013.t-0009.t-msedge.net	part-0013.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:51:38.976542950 CEST	1.1.1.1	192.168.2.4	0x8091	No error (0)	part-0013.t-0009.t-msedge.net		13.107.246.41	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:51:38.976542950 CEST	1.1.1.1	192.168.2.4	0x8091	No error (0)	part-0013.t-0009.t-msedge.net		13.107.213.41	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:51:39.020241022 CEST	1.1.1.1	192.168.2.4	0xc05c	No error (0)	topfloor-llc.com		111.90.148.129	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:51:39.665766954 CEST	1.1.1.1	192.168.2.4	0x69b6	No error (0)	shed.dual-low.part-0013.t-0009.t-msedge.net	part-0013.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:51:39.665766954 CEST	1.1.1.1	192.168.2.4	0x69b6	No error (0)	part-0013.t-0009.t-msedge.net		13.107.246.41	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:51:39.665766954 CEST	1.1.1.1	192.168.2.4	0x69b6	No error (0)	part-0013.t-0009.t-msedge.net		13.107.213.41	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:51:54.061824083 CEST	1.1.1.1	192.168.2.4	0x87c1	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:51:54.061824083 CEST	1.1.1.1	192.168.2.4	0x87c1	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:51:55.748842955 CEST	1.1.1.1	192.168.2.4	0xd1db	No error (0)	spo.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:51:55.750010967 CEST	1.1.1.1	192.168.2.4	0xbd52	No error (0)	m365cdn.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:51:55.750252962 CEST	1.1.1.1	192.168.2.4	0xa160	No error (0)	spo.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:51:55.751044989 CEST	1.1.1.1	192.168.2.4	0x7f76	No error (0)	m365cdn.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:51:55.870088100 CEST	1.1.1.1	192.168.2.4	0xce1c	No error (0)	netorgft3546691-my.sharepoint.com	netorgft3546691.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:51:55.870088100 CEST	1.1.1.1	192.168.2.4	0xce1c	No error (0)	netorgft3546691.sharepoint.com	11441-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:51:55.870088100 CEST	1.1.1.1	192.168.2.4	0xce1c	No error (0)	11441-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com	192673-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:51:55.870088100 CEST	1.1.1.1	192.168.2.4	0xce1c	No error (0)	192673-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com	192673-ipv4v6w.farm.dprodmgd105.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:51:55.887089014 CEST	1.1.1.1	192.168.2.4	0xb2e1	No error (0)	netorgft3546691-my.sharepoint.com	netorgft3546691.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:51:55.887089014 CEST	1.1.1.1	192.168.2.4	0xb2e1	No error (0)	netorgft3546691.sharepoint.com	11441-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:51:55.887089014 CEST	1.1.1.1	192.168.2.4	0xb2e1	No error (0)	11441-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com	192673-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:51:55.887089014 CEST	1.1.1.1	192.168.2.4	0xb2e1	No error (0)	192673-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com	192673-ipv4v6w.farm.dprodmgd105.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:51:55.887089014 CEST	1.1.1.1	192.168.2.4	0xb2e1	No error (0)	192673-ipv4v6.farm.dprodmgd105.aa-rt.sharepoint.com.dual-spo-0005.spo-msedge.net	dual-spo-0005.spo-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:51:55.887089014 CEST	1.1.1.1	192.168.2.4	0xb2e1	No error (0)	dual-spo-0005.spo-msedge.net		13.107.136.10	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:51:55.887089014 CEST	1.1.1.1	192.168.2.4	0xb2e1	No error (0)	dual-spo-0005.spo-msedge.net		13.107.138.10	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:51:56.237751007 CEST	1.1.1.1	192.168.2.4	0xeae9	No error (0)	spo.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:51:56.239535093 CEST	1.1.1.1	192.168.2.4	0xae2b	No error (0)	spo.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:52:24.943130016 CEST	1.1.1.1	192.168.2.4	0x33ee	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:52:24.943130016 CEST	1.1.1.1	192.168.2.4	0x33ee	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:50:43 UTC	777	OUT	GET /:b:/g/personal/nicole_felthaus_mmclippers_com/EfUF1hXkwfZNuGJhx43KV34BvAUaxh5xTDD3cQCuhCEK1w?e=yOS03G HTTP/1.1 Host: netorgft3546691-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 12:50:43 UTC	3458	IN	HTTP/1.1 302 Found Cache-Control: private Content-Length: 509 Content-Type: text/html; charset=utf-8 Location: https://netorgft3546691-my.sharepoint.com/personal/nicole_felthaus_mmclippers_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fnicole%5Ffelthaus%5Fmmclippers%5Fcom%2FDocuments%2FLandmark%20%2D%20Preview%20and%20Print%20Online%2FView%20and%20Print%20Online%2Epdf&parent=%2Fpersonal%2Fnicole%5Ffelthaus%5Fmmclippers%5Fcom%2FDocuments%2FLandmark%20%2D%20Preview%20and%20Print%20Online&ga=1 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: FedAuth=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; path=/; SameSite=None; secure; HttpOnly X-NetworkStatistics: 0,2102272,24,141,2654968,0,2102272 X-SharePointHealthScore: 1 X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: f0d221a1-0057-5000-2b39-9db9d58773b9 request-id: f0d221a1-0057-5000-2b39-9db9d58773b9 MS-CV: oSHS8FcAAFArOZ251YdzuQ.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=ff656446-1699-4912-a640-61834106e773&destinationEndpoint=Edge-Prod-ATL33r5b&frontEnd=AFD&RemoteIP=89.187.171.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com .office365.com .powerapps.com .yammer.com engage.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 175 SPIisLatency: 3 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.24803 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: CCAB41A460264B4C8B174313EF05135D Ref B: ATL331000103019 Ref C: 2024-04-23T12:50:43Z Date: Tue, 23 Apr 2024 12:50:42 GMT Connection: close
2024-04-23 12:50:43 UTC	509	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6e 65 74 6f 72 67 66 74 33 35 34 36 36 39 31 2d 6d 79 2e 73 68 61 72 65 70 6f 69 6e 74 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c 2f 6e 69 63 6f 6c 65 5f 66 65 6c 74 68 61 75 73 5f 6d 6d 63 6c 69 70 70 65 72 73 5f 63 6f 6d 2f 5f 6c 61 79 6f 75 74 73 2f 31 35 2f 6f 6e 65 64 72 69 76 65 2e 61 73 70 78 3f 69 64 3d 25 32 46 70 65 72 73 6f 6e 61 6c 25 32 46 6e 69 63 6f 6c 65 25 35 46 66 65 6c 74 68 61 75 73 25 35 46 6d 6d 63 6c 69 70 70 65 72 73 25 35 46 63 6f 6d 25 32 46 44 6f 63 75 6d 65 6e 74 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://netorgft3546691-my.sharepoint.com/personal/nicole_felthaus_mmclippers_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fnicole%5Ffelthaus%5Fmmclippers%5Fcom%2FDocument

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:50:44 UTC	1559	OUT	GET /_layouts/15/spwebworkerproxy.ashx HTTP/1.1 Host: netorgft3546691-my.sharepoint.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: FedAuth=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
2024-04-23 12:50:44 UTC	3035	IN	HTTP/1.1 200 OK Cache-Control: max-age=600 Transfer-Encoding: chunked Content-Type: text/javascript; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: FedAuth=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; path=/; SameSite=None; secure; HttpOnly X-NetworkStatistics: 0,1051136,22,65,10172715,0,1051136 X-SharePointHealthScore: 3 X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: f0d221a1-80b1-5000-148f-ecad33bed580 request-id: f0d221a1-80b1-5000-148f-ecad33bed580 MS-CV: oSHS8LGAAFAUj+ytM77VgA.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=ff656446-1699-4912-a640-61834106e773&destinationEndpoint=Edge-Prod-ATL33r5a&frontEnd=AFD&RemoteIP=89.187.171.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com .office365.com .powerapps.com .yammer.com engage.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.24803 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 696DF329320A41198CB44BAD3236BA9F Ref B: ATL331000101027 Ref C: 2024-04-23T12:50:44Z Date: Tue, 23 Apr 2024 12:50:44 GMT Connection: close
2024-04-23 12:50:44 UTC	706	IN	Data Raw: 32 62 62 0d 0a 73 65 6c 66 2e 5f 70 65 72 66 4d 61 72 6b 73 20 3d 20 7b 7d 3b 0a 73 65 6c 66 2e 5f 6d 61 72 6b 50 65 72 66 53 74 61 67 65 3d 66 75 6e 63 74 69 6f 6e 28 6b 65 79 29 20 7b 69 66 28 73 65 6c 66 2e 70 65 72 66 6f 72 6d 61 6e 63 65 20 26 26 20 74 79 70 65 6f 66 20 73 65 6c 66 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 7b 73 65 6c 66 2e 5f 70 65 72 66 4d 61 72 6b 73 5b 6b 65 79 5d 3d 73 65 6c 66 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 7d 20 65 6c 73 65 7b 73 65 6c 66 2e 5f 70 65 72 66 4d 61 72 6b 73 5b 6b 65 79 5d 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 7d 20 69 66 20 28 73 65 6c 66 2e 70 65 72 66 6f 72 6d 61 6e 63 65 20 26 26 20 74 79 70 65 6f 66 20 73 65 6c 66 2e 70 65 72 66 6f Data Ascii: 2bbself._perfMarks = {};self._markPerfStage=function(key) {if(self.performance && typeof self.performance.now === 'function'){self._perfMarks[key]=self.performance.now();} else{self._perfMarks[key]=Date.now();} if (self.performance && typeof self.perfo
2024-04-23 12:50:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:50:45 UTC	1552	OUT	GET /_layouts/15/spwebworkerproxy.ashx HTTP/1.1 Host: netorgft3546691-my.sharepoint.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: FedAuth=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
2024-04-23 12:50:45 UTC	3031	IN	HTTP/1.1 200 OK Cache-Control: max-age=600 Transfer-Encoding: chunked Content-Type: text/javascript; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: FedAuth=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; path=/; SameSite=None; secure; HttpOnly X-NetworkStatistics: 0,525568,0,22,1707147,0,525568 X-SharePointHealthScore: 2 X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: f0d221a1-40e5-5000-148f-e87703012d62 request-id: f0d221a1-40e5-5000-148f-e87703012d62 MS-CV: oSHS8OVAAFAUj+h3AwEtYg.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=ff656446-1699-4912-a640-61834106e773&destinationEndpoint=Edge-Prod-ATL33r5b&frontEnd=AFD&RemoteIP=89.187.171.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com .office365.com .powerapps.com .yammer.com engage.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.24803 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: BFD86D5FCB694BAFB937EB4E6FB00E26 Ref B: ATL331000103037 Ref C: 2024-04-23T12:50:45Z Date: Tue, 23 Apr 2024 12:50:45 GMT Connection: close
2024-04-23 12:50:45 UTC	706	IN	Data Raw: 32 62 62 0d 0a 73 65 6c 66 2e 5f 70 65 72 66 4d 61 72 6b 73 20 3d 20 7b 7d 3b 0a 73 65 6c 66 2e 5f 6d 61 72 6b 50 65 72 66 53 74 61 67 65 3d 66 75 6e 63 74 69 6f 6e 28 6b 65 79 29 20 7b 69 66 28 73 65 6c 66 2e 70 65 72 66 6f 72 6d 61 6e 63 65 20 26 26 20 74 79 70 65 6f 66 20 73 65 6c 66 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 7b 73 65 6c 66 2e 5f 70 65 72 66 4d 61 72 6b 73 5b 6b 65 79 5d 3d 73 65 6c 66 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 7d 20 65 6c 73 65 7b 73 65 6c 66 2e 5f 70 65 72 66 4d 61 72 6b 73 5b 6b 65 79 5d 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 7d 20 69 66 20 28 73 65 6c 66 2e 70 65 72 66 6f 72 6d 61 6e 63 65 20 26 26 20 74 79 70 65 6f 66 20 73 65 6c 66 2e 70 65 72 66 6f Data Ascii: 2bbself._perfMarks = {};self._markPerfStage=function(key) {if(self.performance && typeof self.performance.now === 'function'){self._perfMarks[key]=self.performance.now();} else{self._perfMarks[key]=Date.now();} if (self.performance && typeof self.perfo
2024-04-23 12:50:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://netorgft3546691-my.sharepoint.com/:b:/g/personal/nicole_felthaus_mmclippers_com/EfUF1hXkwfZNuGJhx43KV34BvAUaxh5xTDD3cQCuhCEK1w?e=yOS03G

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Persistence and Installation Behavior

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 1000

Chrome Cache Entry: 1001

Chrome Cache Entry: 1002

Chrome Cache Entry: 1003

Chrome Cache Entry: 1004

Chrome Cache Entry: 1005

Chrome Cache Entry: 1006

Chrome Cache Entry: 1007

Chrome Cache Entry: 1008

Chrome Cache Entry: 1009

Chrome Cache Entry: 1010

Chrome Cache Entry: 1011

Chrome Cache Entry: 1012

Chrome Cache Entry: 1013

Chrome Cache Entry: 1014

Chrome Cache Entry: 1015

Chrome Cache Entry: 1016

Chrome Cache Entry: 1017

Chrome Cache Entry: 1018

Chrome Cache Entry: 1019

Chrome Cache Entry: 1020

Chrome Cache Entry: 1021

Chrome Cache Entry: 1022

Chrome Cache Entry: 1023

Chrome Cache Entry: 1024

Chrome Cache Entry: 1025

Windows Analysis Report
https://netorgft3546691-my.sharepoint.com/:b:/g/personal/nicole_felthaus_mmclippers_com/EfUF1hXkwfZNuGJhx43KV34BvAUaxh5xTDD3cQCuhCEK1w?e=yOS03G

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:50:45 UTC	2292	OUT	POST /personal/nicole_felthaus_mmclippers_com/_api/v2.1/graphql HTTP/1.1 Host: netorgft3546691-my.sharepoint.com Connection: keep-alive Content-Length: 507 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json;odata=verbose Content-Type: application/json;odata=verbose X-ServiceWorker-Strategy: CacheFirst sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://netorgft3546691-my.sharepoint.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://netorgft3546691-my.sharepoint.com/personal/nicole_felthaus_mmclippers_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fnicole%5Ffelthaus%5Fmmclippers%5Fcom%2FDocuments%2FLandmark%20%2D%20Preview%20and%20Print%20Online%2FView%20and%20Print%20Online%2Epdf&parent=%2Fpersonal%2Fnicole%5Ffelthaus%5Fmmclippers%5Fcom%2FDocuments%2FLandmark%20%2D%20Preview%20and%20Print%20Online&ga=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: FedAuth=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
2024-04-23 12:50:45 UTC	507	OUT	Data Raw: 7b 22 71 75 65 72 79 22 3a 22 71 75 65 72 79 20 28 5c 6e 20 20 20 20 20 20 20 20 24 73 70 6f 53 75 69 74 65 4c 69 6e 6b 73 51 75 65 72 79 53 74 72 69 6e 67 3a 20 53 74 72 69 6e 67 21 5c 6e 20 20 20 20 20 20 20 20 29 5c 6e 20 20 20 20 20 20 7b 5c 6e 20 20 20 20 20 20 5c 6e 20 20 20 20 20 20 6c 65 67 61 63 79 20 7b 5c 6e 20 20 20 20 20 20 73 70 6f 53 75 69 74 65 4c 69 6e 6b 73 28 5c 6e 20 20 20 20 20 20 71 75 65 72 79 53 74 72 69 6e 67 3a 20 24 73 70 6f 53 75 69 74 65 4c 69 6e 6b 73 51 75 65 72 79 53 74 72 69 6e 67 5c 6e 20 20 20 20 20 20 29 20 20 20 20 20 20 20 20 20 20 5c 6e 20 20 20 20 20 20 5c 6e 20 20 20 20 7d 5c 6e 20 20 20 20 20 20 5c 6e 20 20 20 20 20 20 5c 6e 20 20 70 65 72 66 20 7b 5c 6e 20 20 20 20 65 78 65 63 75 74 69 6f 6e 54 69 6d 65 5c 6e 20 Data Ascii: {"query":"query (\n $spoSuiteLinksQueryString: String!\n )\n {\n \n legacy {\n spoSuiteLinks(\n queryString: $spoSuiteLinksQueryString\n ) \n \n }\n \n \n perf {\n executionTime\n
2024-04-23 12:50:46 UTC	3008	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 17755 Content-Type: application/json P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: FedAuth=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; path=/; SameSite=None; secure; HttpOnly X-NetworkStatistics: 0,525568,0,41,1125912,0,525568 X-SharePointHealthScore: 3 X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: f1d221a1-a008-5000-66c0-8af52927bc85 request-id: f1d221a1-a008-5000-66c0-8af52927bc85 MS-CV: oSHS8QigAFBmwIr1KSe8hQ.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=ff656446-1699-4912-a640-61834106e773&destinationEndpoint=Edge-Prod-ATL33r5c&frontEnd=AFD&RemoteIP=89.187.171.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com .office365.com .powerapps.com .yammer.com engage.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.24803 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: E96FA39888E143B494927BD7DF5C5FF7 Ref B: ATL331000105047 Ref C: 2024-04-23T12:50:46Z Date: Tue, 23 Apr 2024 12:50:45 GMT Connection: close
2024-04-23 12:50:46 UTC	1155	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 6c 65 67 61 63 79 22 3a 7b 22 73 70 6f 53 75 69 74 65 4c 69 6e 6b 73 22 3a 7b 0a 20 22 53 50 53 75 69 74 65 56 65 72 73 69 6f 6e 22 3a 32 2c 0a 20 22 53 50 49 73 4d 6f 62 69 6c 65 22 3a 66 61 6c 73 65 2c 0a 20 22 43 73 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 72 65 73 2d 31 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 73 68 65 6c 6c 75 78 2f 73 75 69 74 65 75 78 2e 73 68 65 6c 6c 2e 73 68 61 72 65 64 2e 33 38 34 61 61 63 65 35 66 39 38 61 38 36 32 32 66 34 32 31 63 66 35 39 39 33 35 37 62 36 38 64 2e 63 73 73 22 2c 0a 20 22 4a 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 72 65 73 2d 31 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 73 68 65 6c 6c 75 78 2f 73 75 69 74 65 75 78 2e 73 68 65 6c 6c 2e 62 6f 6f 74 73 74 72 Data Ascii: {"data":{"legacy":{"spoSuiteLinks":{ "SPSuiteVersion":2, "SPIsMobile":false, "CssUrl":"https://res-1.cdn.office.net/shellux/suiteux.shell.shared.384aace5f98a8622f421cf599357b68d.css", "JsUrl":"https://res-1.cdn.office.net/shellux/suiteux.shell.bootstr
2024-04-23 12:50:46 UTC	8192	IN	Data Raw: 65 72 76 65 72 52 65 71 75 65 73 74 49 6e 66 6c 75 78 43 6f 6e 74 72 6f 6c 5c 22 3a 35 2c 5c 22 41 72 69 61 54 65 6c 65 6d 65 74 72 79 54 65 6e 61 6e 74 54 6f 6b 65 6e 5c 22 3a 5c 22 63 36 63 31 39 30 61 31 62 37 33 63 34 61 36 33 62 62 61 38 39 38 33 35 64 35 34 36 63 66 32 38 2d 66 32 61 30 34 38 32 66 2d 61 30 30 64 2d 34 38 64 39 2d 38 32 32 65 2d 65 38 39 63 63 38 39 65 62 36 34 64 2d 37 36 38 38 5c 22 2c 5c 22 41 72 69 61 54 65 6c 65 6d 65 74 72 79 55 72 69 5c 22 3a 5c 22 5c 22 2c 5c 22 41 75 74 68 41 62 74 45 6e 61 62 6c 65 64 5c 22 3a 74 72 75 65 2c 5c 22 43 4c 53 49 44 5c 22 3a 5c 22 65 38 36 38 35 63 62 31 2d 33 32 65 64 2d 34 36 39 32 2d 62 65 64 37 2d 33 33 64 35 36 62 65 34 65 38 32 61 5c 22 2c 5c 22 43 50 4e 49 50 69 6e 45 6e 61 62 6c 65 64 Data Ascii: erverRequestInfluxControl\":5,\"AriaTelemetryTenantToken\":\"c6c190a1b73c4a63bba89835d546cf28-f2a0482f-a00d-48d9-822e-e89cc89eb64d-7688\",\"AriaTelemetryUri\":\"\",\"AuthAbtEnabled\":true,\"CLSID\":\"e8685cb1-32ed-4692-bed7-33d56be4e82a\",\"CPNIPinEnabled
2024-04-23 12:50:46 UTC	4151	IN	Data Raw: 63 38 30 63 35 64 63 34 63 39 36 31 38 39 61 65 2e 6a 73 5c 22 2c 5c 22 73 65 61 72 63 68 75 78 5c 22 3a 5c 22 68 74 74 70 73 3a 2f 2f 72 65 73 2d 31 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 73 68 65 6c 6c 75 78 2f 73 75 69 74 65 75 78 2e 73 68 65 6c 6c 2e 73 65 61 72 63 68 75 78 2e 66 34 65 37 37 33 30 64 30 33 36 32 38 30 63 32 38 62 61 36 2e 6a 73 5c 22 2c 5c 22 73 68 65 6c 6c 72 65 61 63 74 63 6f 6e 74 72 6f 6c 5c 22 3a 5c 22 68 74 74 70 73 3a 2f 2f 72 65 73 2d 31 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 73 68 65 6c 6c 75 78 2f 73 75 69 74 65 75 78 2e 73 68 65 6c 6c 2e 73 68 65 6c 6c 72 65 61 63 74 63 6f 6e 74 72 6f 6c 2e 39 62 34 63 63 31 38 36 31 39 34 31 33 32 30 33 37 35 38 62 2e 6a 73 5c 22 2c 5c 22 73 74 61 74 69 63 73 68 65 6c 6c Data Ascii: c80c5dc4c96189ae.js\",\"searchux\":\"https://res-1.cdn.office.net/shellux/suiteux.shell.searchux.f4e7730d036280c28ba6.js\",\"shellreactcontrol\":\"https://res-1.cdn.office.net/shellux/suiteux.shell.shellreactcontrol.9b4cc18619413203758b.js\",\"staticshell
2024-04-23 12:50:46 UTC	4257	IN	Data Raw: 72 65 6e 74 4d 61 69 6e 4c 69 6e 6b 45 6c 65 6d 65 6e 74 49 44 22 3a 22 53 68 65 6c 6c 53 68 61 72 65 70 6f 69 6e 74 22 2c 22 43 75 72 72 65 6e 74 57 6f 72 6b 6c 6f 61 64 48 65 6c 70 53 75 62 4c 69 6e 6b 73 22 3a 6e 75 6c 6c 2c 22 43 75 72 72 65 6e 74 57 6f 72 6b 6c 6f 61 64 53 65 74 74 69 6e 67 73 4c 69 6e 6b 22 3a 6e 75 6c 6c 2c 22 43 75 72 72 65 6e 74 57 6f 72 6b 6c 6f 61 64 53 65 74 74 69 6e 67 73 53 75 62 4c 69 6e 6b 73 22 3a 6e 75 6c 6c 2c 22 43 75 72 72 65 6e 74 57 6f 72 6b 6c 6f 61 64 55 73 65 72 53 75 62 4c 69 6e 6b 73 22 3a 6e 75 6c 6c 2c 22 44 69 6d 65 6e 73 69 6f 6e 73 22 3a 7b 22 54 6f 70 22 3a 35 30 7d 2c 22 44 6f 77 6e 41 72 72 6f 77 49 6d 61 67 65 22 3a 6e 75 6c 6c 2c 22 44 6f 77 6e 57 68 69 74 65 41 72 72 6f 77 49 6d 61 67 65 22 3a 6e 75 Data Ascii: rentMainLinkElementID":"ShellSharepoint","CurrentWorkloadHelpSubLinks":null,"CurrentWorkloadSettingsLink":null,"CurrentWorkloadSettingsSubLinks":null,"CurrentWorkloadUserSubLinks":null,"Dimensions":{"Top":50},"DownArrowImage":null,"DownWhiteArrowImage":nu

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:50:46 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-23 12:50:46 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/079C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=47649 Date: Tue, 23 Apr 2024 12:50:46 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:50:46 UTC	1576	OUT	GET /personal/nicole_felthaus_mmclippers_com/_api/v2.1/graphql HTTP/1.1 Host: netorgft3546691-my.sharepoint.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: FedAuth=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
2024-04-23 12:50:46 UTC	3007	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 87 Content-Type: application/json P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: FedAuth=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; path=/; SameSite=None; secure; HttpOnly X-NetworkStatistics: 0,2102272,35,18,1576416,0,742013 X-SharePointHealthScore: 2 X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: f1d221a1-7037-5000-583b-0800f986ee85 request-id: f1d221a1-7037-5000-583b-0800f986ee85 MS-CV: oSHS8TdwAFBYOwgA+YbuhQ.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=00000000-0000-0000-0000-000000000000&destinationEndpoint=Edge-Prod-ATL33r5c&frontEnd=AFD&RemoteIP=89.187.171.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com .office365.com .powerapps.com .yammer.com engage.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.24803 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: DF809CE7436C4FB6848EDF2C014570CF Ref B: ATL331000106021 Ref C: 2024-04-23T12:50:46Z Date: Tue, 23 Apr 2024 12:50:45 GMT Connection: close
2024-04-23 12:50:46 UTC	87	IN	Data Raw: 7b 22 65 72 72 6f 72 73 22 3a 5b 7b 22 6d 65 73 73 61 67 65 22 3a 22 41 20 71 75 65 72 79 20 69 73 20 72 65 71 75 69 72 65 64 2e 22 2c 22 65 78 74 65 6e 73 69 6f 6e 73 22 3a 7b 22 63 6f 64 65 22 3a 22 45 58 45 43 55 54 49 4f 4e 5f 45 52 52 4f 52 22 7d 7d 5d 7d Data Ascii: {"errors":[{"message":"A query is required.","extensions":{"code":"EXECUTION_ERROR"}}]}

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:50:46 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-23 12:50:47 UTC	773	IN	HTTP/1.1 200 OK Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-CID: 7 X-CCC: US X-Azure-Ref-OriginShield: Ref A: 8BFC17DD061B46CAAD2B2AEB7B19C3D8 Ref B: CH1AA2040901011 Ref C: 2023-07-21T06:04:00Z X-MSEdge-Ref: Ref A: 1421F39FA7224BE199CC2F2C3DD24574 Ref B: CHI30EDGE0415 Ref C: 2023-07-21T06:04:00Z Content-Type: application/octet-stream X-Azure-Ref: 0DMGnYgAAAACXaXykPZuVRq4aV6pCkeO8U0pDRURHRTAzMTgAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=47652 Date: Tue, 23 Apr 2024 12:50:47 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-23 12:50:47 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:50:52 UTC	2828	OUT	POST /personal/nicole_felthaus_mmclippers_com/_api/web/GetListUsingPath(DecodedUrl=@a1)/RenderListDataAsStream?@a1=%27%2Fpersonal%2Fnicole%5Ffelthaus%5Fmmclippers%5Fcom%2FDocuments%27&TryNewExperienceSingle=TRUE HTTP/1.1 Host: netorgft3546691-my.sharepoint.com Connection: keep-alive Content-Length: 821 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" ScenarioType: AUO sec-ch-ua-mobile: ?0 Authorization: Bearer User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CollectSPPerfMetrics: SPSQLQueryCount Content-Type: application/json;odata=verbose accept: application/json;odata=verbose X-ClientService-ClientTag: ODB Web X-SP-REQUESTRESOURCES: listUrl=%2Fpersonal%2Fnicole%5Ffelthaus%5Fmmclippers%5Fcom%2FDocuments X-ServiceWorker-Strategy: CacheFirst x-requestdigest: 0x3C3C62983DE8BE3E7DC956994E0B1875D6BCB01F1124BAAADB361E5A95420B13B2347A354F9560FC3ACF134856080CC0E8E9ED18226248861DA978C8B804F1CD,23 Apr 2024 12:50:43 -0000 sec-ch-ua-platform: "Windows" Origin: https://netorgft3546691-my.sharepoint.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://netorgft3546691-my.sharepoint.com/personal/nicole_felthaus_mmclippers_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fnicole%5Ffelthaus%5Fmmclippers%5Fcom%2FDocuments%2FLandmark%20%2D%20Preview%20and%20Print%20Online%2FView%20and%20Print%20Online%2Epdf&parent=%2Fpersonal%2Fnicole%5Ffelthaus%5Fmmclippers%5Fcom%2FDocuments%2FLandmark%20%2D%20Preview%20and%20Print%20Online&ga=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: FedAuth=77u/PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48U1A+VjEzLDBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uI2E1MGMzMGRiOWFjOTAyMWQ2NmY1NTJmNmI5YjU2MjdkMzFlMGNkYzkxZDA4YTYxNDcxNWQyNzk2NTc3MWMwMjUsMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jYTUwYzMwZGI5YWM5MDIxZDY2ZjU1MmY2YjliNTYyN2QzMWUwY2RjOTFkMDhhNjE0NzE1ZDI3OTY1NzcxYzAyNSwxMzM1ODM1MDU0MzAwMDAwMDAsMCwxMzM1ODQzNjY0MzMyNDg1ODYsMC4wLjAuMCwyNTgsZmY2NTY0NDYtMTY5OS00OTEyLWE2NDAtNjE4MzQxMDZlNzczLCwsZjBkMjIxYTEtMDA1Ny01MDAwLTJiMzktOWRiOWQ1ODc3M2I5LGYwZDIyMWExLTAwNTctNTAwMC0yYjM5LTlkYjlkNTg3NzNiOSxwNU41aG5uL3hVRy9GRk9DTnhLaDVRLDAsMCwwLCwsLDI2NTA0Njc3NDM5OTk5OTk5OTksMCwsLCwsLCwwLCwxOTI2NzMsRGFEQWZqUVFtcHlPWHgyUnJLX1c1bHZvTFo0LGoxa3dxNmRQQXo5Sk80LzFrQ2JTTmloQVFnOUZmR2pCNFFDSXNidlN6UUN5T1BtMXZBQ3lZSlZNeitYdDBPbHJhOUlxRm43Rk9OckhBeEdJUTkwY3IyVW1RWktpQmh4UklPMkJsWXd5bC9wM0dLRkw1T1dmRi9GTnBzNlo4OWlkN1BMcmhrU0JhckZ6KzRsUTMyK09FV3VJYWhnWUdBMnNtSUZJeHFrdU83dW1ERG5GZnFEZ0VmeHlyVUxFNitEbDdsR0RsUWQ2VWhBckZPbWRMTS9Gc1dVRVlhVHVIeEdFTEQ5Z2wvbThLK1QrMUU0M1p4N1VCb2V6TlRISjNTcXNoL2MzQm5GL3B4TmJUY1pka3drSXJIY3dSK2ZQNk5yaWUxYW55dTFkSUpWSlMwSmZ4U2dJeUtHWW1PZ2NodHBhT2ZyV0VIdXJDL1pxdXlIMUlVOGxNUT09PC9TUD4=
2024-04-23 12:50:52 UTC	821	OUT	Data Raw: 7b 22 70 61 72 61 6d 65 74 65 72 73 22 3a 7b 22 5f 5f 6d 65 74 61 64 61 74 61 22 3a 7b 22 74 79 70 65 22 3a 22 53 50 2e 52 65 6e 64 65 72 4c 69 73 74 44 61 74 61 50 61 72 61 6d 65 74 65 72 73 22 7d 2c 22 52 65 6e 64 65 72 4f 70 74 69 6f 6e 73 22 3a 31 30 35 32 36 37 39 2c 22 56 69 65 77 58 6d 6c 22 3a 22 3c 56 69 65 77 20 3e 3c 51 75 65 72 79 3e 3c 2f 51 75 65 72 79 3e 3c 56 69 65 77 46 69 65 6c 64 73 3e 3c 46 69 65 6c 64 52 65 66 20 4e 61 6d 65 3d 5c 22 44 6f 63 49 63 6f 6e 5c 22 2f 3e 3c 46 69 65 6c 64 52 65 66 20 4e 61 6d 65 3d 5c 22 4c 69 6e 6b 46 69 6c 65 6e 61 6d 65 5c 22 2f 3e 3c 46 69 65 6c 64 52 65 66 20 4e 61 6d 65 3d 5c 22 4d 6f 64 69 66 69 65 64 5c 22 2f 3e 3c 46 69 65 6c 64 52 65 66 20 4e 61 6d 65 3d 5c 22 45 64 69 74 6f 72 5c 22 2f 3e 3c 46 Data Ascii: {"parameters":{"__metadata":{"type":"SP.RenderListDataParameters"},"RenderOptions":1052679,"ViewXml":"<View ><Query></Query><ViewFields><FieldRef Name=\"DocIcon\"/><FieldRef Name=\"LinkFilename\"/><FieldRef Name=\"Modified\"/><FieldRef Name=\"Editor\"/><F
2024-04-23 12:50:52 UTC	3254	IN	HTTP/1.1 200 OK Cache-Control: private, max-age=0 Transfer-Encoding: chunked Content-Type: application/json; charset=utf-8 Expires: Mon, 08 Apr 2024 12:50:52 GMT Last-Modified: Tue, 23 Apr 2024 12:50:52 GMT Vary: Origin P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: FedAuth=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; path=/; SameSite=None; secure; HttpOnly X-NetworkStatistics: 0,1051136,20,0,5963850,0,832371 X-SharePointHealthScore: 1 X-SP-SERVERSTATE: ReadOnly=0 DATASERVICEVERSION: 3.0 SPClientServiceRequestDuration: 56 SPRequestDuration: 57 X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: f2d221a1-30a3-5000-2b39-91a881a2fb84 request-id: f2d221a1-30a3-5000-2b39-91a881a2fb84 MS-CV: oSHS8qMwAFArOZGogaL7hA.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=ff656446-1699-4912-a640-61834106e773&destinationEndpoint=Edge-Prod-ATL33r5b&frontEnd=AFD&RemoteIP=89.187.171.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com .office365.com .powerapps.com .yammer.com engage.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.24803 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: F3EBEA505D7048B598E4725F371106F2 Ref B: ATL331000104045 Ref C: 2024-04-23T12:50:52Z Date: Tue, 23 Apr 2024 12:50:52 GMT Connection: close
2024-04-23 12:50:52 UTC	3971	IN	Data Raw: 66 37 63 0d 0a 7b 22 77 70 71 22 3a 22 22 2c 22 54 65 6d 70 6c 61 74 65 73 22 3a 7b 7d 2c 22 4c 69 73 74 44 61 74 61 22 3a 7b 20 22 52 6f 77 22 20 3a 20 0a 5b 5d 2c 22 46 69 72 73 74 52 6f 77 22 20 3a 20 31 2c 0d 0a 22 46 6f 6c 64 65 72 50 65 72 6d 69 73 73 69 6f 6e 73 22 20 3a 20 22 30 78 33 30 30 38 30 31 31 30 30 30 22 0d 0a 2c 22 4c 61 73 74 52 6f 77 22 20 3a 20 30 2c 0d 0a 22 52 6f 77 4c 69 6d 69 74 22 20 3a 20 31 0d 0a 2c 22 46 69 6c 74 65 72 4c 69 6e 6b 22 20 3a 20 22 3f 22 0a 2c 22 46 6f 72 63 65 4e 6f 48 69 65 72 61 72 63 68 79 22 20 3a 20 22 31 22 0a 2c 22 48 69 65 72 61 72 63 68 79 48 61 73 49 6e 64 65 6e 74 69 6f 6e 22 20 3a 20 22 22 0a 2c 22 43 75 72 72 65 6e 74 46 6f 6c 64 65 72 50 72 69 6e 63 69 70 61 6c 43 6f 75 6e 74 22 20 3a 20 22 30 22 Data Ascii: f7c{"wpq":"","Templates":{},"ListData":{ "Row" : [],"FirstRow" : 1,"FolderPermissions" : "0x3008011000","LastRow" : 0,"RowLimit" : 1,"FilterLink" : "?","ForceNoHierarchy" : "1","HierarchyHasIndention" : "","CurrentFolderPrincipalCount" : "0"
2024-04-23 12:50:52 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 45 22 2c 0a 22 72 6f 6c 65 22 3a 20 22 4c 6f 6f 6b 75 70 22 2c 0a 22 61 72 69 61 4c 61 62 65 6c 22 3a 20 22 46 6f 6c 64 65 72 20 43 68 69 6c 64 20 43 6f 75 6e 74 22 2c 0a 22 46 72 6f 6d 42 61 73 65 54 79 70 65 22 3a 20 22 54 52 55 45 22 2c 0a 22 48 61 73 50 72 65 66 69 78 22 3a 20 22 54 52 55 45 22 2c 0a 22 54 79 70 65 22 3a 20 22 4c 6f 6f 6b 75 70 22 2c 0a 22 41 6c 6c 6f 77 47 72 69 64 45 64 69 74 69 6e 67 22 3a 20 22 46 41 4c 53 45 22 2c 0a 22 43 6c 69 65 6e 74 53 69 64 65 43 6f 6d 70 6f 6e 65 6e 74 49 64 22 3a 20 22 30 30 30 30 30 30 30 30 2d 30 30 30 30 2d 30 30 30 30 2d 30 30 30 30 2d 30 30 30 30 30 30 30 30 30 30 30 30 22 2c 0a 22 50 69 6e 6e 65 64 54 6f 46 69 6c 74 65 72 73 50 61 6e 65 22 3a 20 22 46 41 4c 53 45 22 2c 0a 22 53 68 Data Ascii: 2000E","role": "Lookup","ariaLabel": "Folder Child Count","FromBaseType": "TRUE","HasPrefix": "TRUE","Type": "Lookup","AllowGridEditing": "FALSE","ClientSideComponentId": "00000000-0000-0000-0000-000000000000","PinnedToFiltersPane": "FALSE","Sh
2024-04-23 12:50:52 UTC	1097	IN	Data Raw: 34 34 32 0d 0a 6d 5c 75 30 30 32 66 4f 66 66 69 63 65 42 75 6e 64 6c 65 3f 70 72 6f 76 69 64 65 72 3d 73 70 6f 26 69 6e 70 75 74 46 6f 72 6d 61 74 3d 7b 2e 66 69 6c 65 54 79 70 65 7d 26 63 73 3d 7b 2e 63 61 6c 6c 65 72 53 74 61 63 6b 7d 26 64 6f 63 69 64 3d 7b 2e 73 70 49 74 65 6d 55 72 6c 7d 26 7b 2e 64 72 69 76 65 41 63 63 65 73 73 54 6f 6b 65 6e 7d 22 0d 0a 2c 20 22 2e 6f 66 66 69 63 65 42 75 6e 64 6c 65 47 65 74 46 72 61 67 6d 65 6e 74 22 20 3a 20 22 7b 2e 6d 65 64 69 61 42 61 73 65 55 72 6c 7d 5c 75 30 30 32 66 74 72 61 6e 73 66 6f 72 6d 5c 75 30 30 32 66 4f 66 66 69 63 65 42 75 6e 64 6c 65 46 72 61 67 6d 65 6e 74 3f 70 72 6f 76 69 64 65 72 3d 73 70 6f 26 69 6e 70 75 74 46 6f 72 6d 61 74 3d 7b 2e 66 69 6c 65 54 79 70 65 7d 26 63 73 3d 7b 2e 63 61 6c Data Ascii: 442m\u002fOfficeBundle?provider=spo&inputFormat={.fileType}&cs={.callerStack}&docid={.spItemUrl}&{.driveAccessToken}", ".officeBundleGetFragment" : "{.mediaBaseUrl}\u002ftransform\u002fOfficeBundleFragment?provider=spo&inputFormat={.fileType}&cs={.cal
2024-04-23 12:50:52 UTC	2452	IN	Data Raw: 39 38 64 0d 0a 3a 7b 22 4d 61 6e 61 67 65 4c 69 73 74 73 22 3a 20 66 61 6c 73 65 2c 20 22 4d 61 6e 61 67 65 50 65 72 73 6f 6e 61 6c 56 69 65 77 73 22 3a 20 66 61 6c 73 65 2c 20 22 4f 70 65 6e 49 74 65 6d 73 22 3a 20 66 61 6c 73 65 2c 20 22 55 73 65 43 6c 69 65 6e 74 49 6e 74 65 67 72 61 74 69 6f 6e 22 3a 20 74 72 75 65 7d 2c 22 4c 69 73 74 50 65 72 6d 69 73 73 69 6f 6e 73 22 3a 22 33 30 30 38 30 31 31 30 30 30 22 2c 22 43 72 65 61 74 65 64 46 72 6f 6d 45 78 63 65 6c 22 3a 66 61 6c 73 65 2c 22 43 72 65 61 74 65 64 46 72 6f 6d 45 78 69 73 74 69 6e 67 22 3a 66 61 6c 73 65 2c 22 43 75 72 72 65 6e 74 55 73 65 72 49 73 53 69 74 65 41 64 6d 69 6e 22 3a 66 61 6c 73 65 2c 22 49 73 41 70 70 57 65 62 22 3a 66 61 6c 73 65 2c 22 41 6c 6c 6f 77 47 72 69 64 4d 6f 64 65 Data Ascii: 98d:{"ManageLists": false, "ManagePersonalViews": false, "OpenItems": false, "UseClientIntegration": true},"ListPermissions":"3008011000","CreatedFromExcel":false,"CreatedFromExisting":false,"CurrentUserIsSiteAdmin":false,"IsAppWeb":false,"AllowGridMode
2024-04-23 12:50:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:50:52 UTC	2943	OUT	POST /personal/nicole_felthaus_mmclippers_com/_api/web/GetListUsingPath(DecodedUrl=@a1)/RenderListDataAsStream?@a1=%27%2Fpersonal%2Fnicole%5Ffelthaus%5Fmmclippers%5Fcom%2FDocuments%27&RootFolder=%2Fpersonal%2Fnicole%5Ffelthaus%5Fmmclippers%5Fcom%2FDocuments%2FLandmark%20%2D%20Preview%20and%20Print%20Online&TryNewExperienceSingle=TRUE HTTP/1.1 Host: netorgft3546691-my.sharepoint.com Connection: keep-alive Content-Length: 201 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" ScenarioType: AUO Accept-Language: en-US sec-ch-ua-mobile: ?0 Authorization: Bearer User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;odata=verbose CollectSPPerfMetrics: SPSQLQueryCount accept: application/json;odata=verbose X-ClientService-ClientTag: ODB Web X-SP-REQUESTRESOURCES: listUrl=%2Fpersonal%2Fnicole%5Ffelthaus%5Fmmclippers%5Fcom%2FDocuments X-ServiceWorker-Strategy: CacheFirst x-requestdigest: 0x3C3C62983DE8BE3E7DC956994E0B1875D6BCB01F1124BAAADB361E5A95420B13B2347A354F9560FC3ACF134856080CC0E8E9ED18226248861DA978C8B804F1CD,23 Apr 2024 12:50:43 -0000 sec-ch-ua-platform: "Windows" Origin: https://netorgft3546691-my.sharepoint.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://netorgft3546691-my.sharepoint.com/personal/nicole_felthaus_mmclippers_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fnicole%5Ffelthaus%5Fmmclippers%5Fcom%2FDocuments%2FLandmark%20%2D%20Preview%20and%20Print%20Online%2FView%20and%20Print%20Online%2Epdf&parent=%2Fpersonal%2Fnicole%5Ffelthaus%5Fmmclippers%5Fcom%2FDocuments%2FLandmark%20%2D%20Preview%20and%20Print%20Online&ga=1 Accept-Encoding: gzip, deflate, br Cookie: FedAuth=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
2024-04-23 12:50:52 UTC	201	OUT	Data Raw: 7b 22 70 61 72 61 6d 65 74 65 72 73 22 3a 7b 22 5f 5f 6d 65 74 61 64 61 74 61 22 3a 7b 22 74 79 70 65 22 3a 22 53 50 2e 52 65 6e 64 65 72 4c 69 73 74 44 61 74 61 50 61 72 61 6d 65 74 65 72 73 22 7d 2c 22 52 65 6e 64 65 72 4f 70 74 69 6f 6e 73 22 3a 35 34 34 35 33 38 33 2c 22 41 6c 6c 6f 77 4d 75 6c 74 69 70 6c 65 56 61 6c 75 65 46 69 6c 74 65 72 46 6f 72 54 61 78 6f 6e 6f 6d 79 46 69 65 6c 64 73 22 3a 74 72 75 65 2c 22 41 64 64 52 65 71 75 69 72 65 64 46 69 65 6c 64 73 22 3a 74 72 75 65 2c 22 52 65 71 75 69 72 65 46 6f 6c 64 65 72 43 6f 6c 6f 72 69 6e 67 46 69 65 6c 64 73 22 3a 74 72 75 65 7d 7d Data Ascii: {"parameters":{"__metadata":{"type":"SP.RenderListDataParameters"},"RenderOptions":5445383,"AllowMultipleValueFilterForTaxonomyFields":true,"AddRequiredFields":true,"RequireFolderColoringFields":true}}
2024-04-23 12:50:52 UTC	3255	IN	HTTP/1.1 200 OK Cache-Control: private, max-age=0 Transfer-Encoding: chunked Content-Type: application/json; charset=utf-8 Expires: Mon, 08 Apr 2024 12:50:52 GMT Last-Modified: Tue, 23 Apr 2024 12:50:52 GMT Vary: Origin P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: FedAuth=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; path=/; SameSite=None; secure; HttpOnly X-NetworkStatistics: 0,4204800,1,82,1524477,0,1252088 X-SharePointHealthScore: 2 X-SP-SERVERSTATE: ReadOnly=0 DATASERVICEVERSION: 3.0 SPClientServiceRequestDuration: 63 SPRequestDuration: 63 X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: f2d221a1-00ad-5000-2b39-92cf2b972f69 request-id: f2d221a1-00ad-5000-2b39-92cf2b972f69 MS-CV: oSHS8q0AAFArOZLPK5cvaQ.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=ff656446-1699-4912-a640-61834106e773&destinationEndpoint=Edge-Prod-ATL33r5b&frontEnd=AFD&RemoteIP=89.187.171.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com .office365.com .powerapps.com .yammer.com engage.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.24803 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 43BA90F6089E40F19BE7270354C39E05 Ref B: ATL331000103045 Ref C: 2024-04-23T12:50:52Z Date: Tue, 23 Apr 2024 12:50:52 GMT Connection: close
2024-04-23 12:50:52 UTC	3077	IN	Data Raw: 62 66 65 0d 0a 7b 22 77 70 71 22 3a 22 22 2c 22 54 65 6d 70 6c 61 74 65 73 22 3a 7b 7d 2c 22 4c 69 73 74 44 61 74 61 22 3a 7b 20 22 52 6f 77 22 20 3a 20 0a 5b 7b 0d 0a 22 49 44 22 3a 20 22 34 35 39 39 22 2c 0d 0a 22 50 65 72 6d 4d 61 73 6b 22 3a 20 22 30 78 31 30 30 33 30 30 38 30 33 31 30 30 31 22 2c 0d 0a 22 46 53 4f 62 6a 54 79 70 65 22 3a 20 22 30 22 2c 0d 0a 22 48 54 4d 4c 5f 78 30 30 32 30 5f 46 69 6c 65 5f 78 30 30 32 30 5f 54 79 70 65 22 3a 20 22 22 2c 0d 0a 22 55 6e 69 71 75 65 49 64 22 3a 20 22 7b 31 35 44 36 30 35 46 35 2d 43 31 45 34 2d 34 44 46 36 2d 42 38 36 32 2d 36 31 43 37 38 44 43 41 35 37 37 45 7d 22 2c 0d 0a 22 50 72 6f 67 49 64 22 3a 20 22 22 2c 0d 0a 22 4e 6f 45 78 65 63 75 74 65 22 3a 20 22 31 22 2c 0d 0a 22 43 6f 6e 74 65 6e 74 54 Data Ascii: bfe{"wpq":"","Templates":{},"ListData":{ "Row" : [{"ID": "4599","PermMask": "0x1003008031001","FSObjType": "0","HTML_x0020_File_x0020_Type": "","UniqueId": "{15D605F5-C1E4-4DF6-B862-61C78DCA577E}","ProgId": "","NoExecute": "1","ContentT
2024-04-23 12:50:52 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 6c 64 43 6f 75 6e 74 22 3a 20 22 30 22 2c 0d 0a 22 41 32 4f 44 4d 6f 75 6e 74 43 6f 75 6e 74 22 3a 20 22 22 2c 0d 0a 22 5f 53 74 75 62 46 69 6c 65 22 3a 20 22 30 22 2c 0d 0a 22 5f 45 78 70 69 72 61 74 69 6f 6e 44 61 74 65 22 3a 20 22 22 2c 0d 0a 22 5f 45 78 70 69 72 61 74 69 6f 6e 44 61 74 65 2e 22 3a 20 22 22 2c 0d 0a 22 5f 61 63 74 69 76 69 74 79 22 3a 20 22 7b 5c 22 46 69 6c 65 41 63 74 69 76 69 74 79 54 79 70 65 5c 22 3a 5c 22 39 5c 22 2c 5c 22 46 69 6c 65 41 63 74 69 76 69 74 79 54 69 6d 65 53 74 61 6d 70 5c 22 3a 5c 22 32 30 32 34 2d 30 34 2d 31 38 54 31 35 3a 35 37 3a 33 39 2e 34 37 37 5a 5c 22 2c 5c 22 46 69 6c 65 41 63 74 69 76 69 74 79 55 73 65 72 73 4f 6e 50 61 67 65 5c 22 3a 5b 7b 5c 22 44 69 73 70 6c 61 79 4e 61 6d 65 5c 22 Data Ascii: 2000ldCount": "0","A2ODMountCount": "","_StubFile": "0","_ExpirationDate": "","_ExpirationDate.": "","_activity": "{\"FileActivityType\":\"9\",\"FileActivityTimeStamp\":\"2024-04-18T15:57:39.477Z\",\"FileActivityUsersOnPage\":[{\"DisplayName\"
2024-04-23 12:50:52 UTC	1990	IN	Data Raw: 37 62 66 0d 0a 72 53 74 61 63 6b 7d 26 64 6f 63 69 64 3d 7b 2e 73 70 49 74 65 6d 55 72 6c 7d 26 7b 2e 64 72 69 76 65 41 63 63 65 73 73 54 6f 6b 65 6e 7d 22 0d 0a 2c 20 22 2e 6f 66 66 69 63 65 42 75 6e 64 6c 65 47 65 6e 65 72 61 74 65 22 20 3a 20 22 7b 2e 6d 65 64 69 61 42 61 73 65 55 72 6c 7d 5c 75 30 30 32 66 74 72 61 6e 73 66 6f 72 6d 5c 75 30 30 32 66 4f 66 66 69 63 65 42 75 6e 64 6c 65 3f 70 72 6f 76 69 64 65 72 3d 73 70 6f 26 69 6e 70 75 74 46 6f 72 6d 61 74 3d 7b 2e 66 69 6c 65 54 79 70 65 7d 26 63 73 3d 7b 2e 63 61 6c 6c 65 72 53 74 61 63 6b 7d 26 64 6f 63 69 64 3d 7b 2e 73 70 49 74 65 6d 55 72 6c 7d 26 7b 2e 64 72 69 76 65 41 63 63 65 73 73 54 6f 6b 65 6e 7d 22 0d 0a 2c 20 22 2e 6f 66 66 69 63 65 42 75 6e 64 6c 65 47 65 74 46 72 61 67 6d 65 6e 74 Data Ascii: 7bfrStack}&docid={.spItemUrl}&{.driveAccessToken}", ".officeBundleGenerate" : "{.mediaBaseUrl}\u002ftransform\u002fOfficeBundle?provider=spo&inputFormat={.fileType}&cs={.callerStack}&docid={.spItemUrl}&{.driveAccessToken}", ".officeBundleGetFragment
2024-04-23 12:50:52 UTC	4643	IN	Data Raw: 31 32 31 62 0d 0a 61 63 68 6d 65 6e 74 73 22 3a 20 22 66 61 6c 73 65 22 2c 22 53 70 6f 74 6c 69 67 68 74 49 6e 66 6f 22 3a 20 7b 22 49 74 65 6d 73 22 3a 20 7b 7d 2c 20 22 4f 72 64 65 72 22 3a 20 5b 5d 7d 2c 22 56 69 65 77 4d 65 74 61 64 61 74 61 22 3a 7b 22 49 64 22 3a 22 63 31 66 32 32 66 62 30 2d 61 31 30 38 2d 34 30 30 31 2d 61 61 33 32 2d 36 65 62 38 32 36 35 33 36 37 30 65 22 2c 22 4c 69 73 74 56 69 65 77 58 6d 6c 22 3a 22 5c 75 30 30 33 63 56 69 65 77 20 4e 61 6d 65 3d 5c 22 7b 43 31 46 32 32 46 42 30 2d 41 31 30 38 2d 34 30 30 31 2d 41 41 33 32 2d 36 45 42 38 32 36 35 33 36 37 30 45 7d 5c 22 20 44 65 66 61 75 6c 74 56 69 65 77 3d 5c 22 54 52 55 45 5c 22 20 4d 6f 62 69 6c 65 56 69 65 77 3d 5c 22 54 52 55 45 5c 22 20 4d 6f 62 69 6c 65 44 65 66 61 75 Data Ascii: 121bachments": "false","SpotlightInfo": {"Items": {}, "Order": []},"ViewMetadata":{"Id":"c1f22fb0-a108-4001-aa32-6eb82653670e","ListViewXml":"\u003cView Name=\"{C1F22FB0-A108-4001-AA32-6EB82653670E}\" DefaultView=\"TRUE\" MobileView=\"TRUE\" MobileDefau
2024-04-23 12:50:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:50:52 UTC	2155	OUT	GET /_layouts/15/images/odbfavicon.ico?rev=47 HTTP/1.1 Host: netorgft3546691-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://netorgft3546691-my.sharepoint.com/personal/nicole_felthaus_mmclippers_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fnicole%5Ffelthaus%5Fmmclippers%5Fcom%2FDocuments%2FLandmark%20%2D%20Preview%20and%20Print%20Online%2FView%20and%20Print%20Online%2Epdf&parent=%2Fpersonal%2Fnicole%5Ffelthaus%5Fmmclippers%5Fcom%2FDocuments%2FLandmark%20%2D%20Preview%20and%20Print%20Online&ga=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: FedAuth=77u/PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48U1A+VjEzLDBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uI2E1MGMzMGRiOWFjOTAyMWQ2NmY1NTJmNmI5YjU2MjdkMzFlMGNkYzkxZDA4YTYxNDcxNWQyNzk2NTc3MWMwMjUsMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jYTUwYzMwZGI5YWM5MDIxZDY2ZjU1MmY2YjliNTYyN2QzMWUwY2RjOTFkMDhhNjE0NzE1ZDI3OTY1NzcxYzAyNSwxMzM1ODM1MDU0MzAwMDAwMDAsMCwxMzM1ODQzNjY0MzMyNDg1ODYsMC4wLjAuMCwyNTgsZmY2NTY0NDYtMTY5OS00OTEyLWE2NDAtNjE4MzQxMDZlNzczLCwsZjBkMjIxYTEtMDA1Ny01MDAwLTJiMzktOWRiOWQ1ODc3M2I5LGYwZDIyMWExLTAwNTctNTAwMC0yYjM5LTlkYjlkNTg3NzNiOSxwNU41aG5uL3hVRy9GRk9DTnhLaDVRLDAsMCwwLCwsLDI2NTA0Njc3NDM5OTk5OTk5OTksMCwsLCwsLCwwLCwxOTI2NzMsRGFEQWZqUVFtcHlPWHgyUnJLX1c1bHZvTFo0LGoxa3dxNmRQQXo5Sk80LzFrQ2JTTmloQVFnOUZmR2pCNFFDSXNidlN6UUN5T1BtMXZBQ3lZSlZNeitYdDBPbHJhOUlxRm43Rk9OckhBeEdJUTkwY3IyVW1RWktpQmh4UklPMkJsWXd5bC9wM0dLRkw1T1dmRi9GTnBzNlo4OWlkN1BMcmhrU0JhckZ6KzRsUTMyK09FV3VJYWhnWUdBMnNtSUZJeHFrdU83dW1ERG5GZnFEZ0VmeHlyVUxFNitEbDdsR0RsUWQ2VWhBckZPbWRMTS9Gc1dVRVlhVHVIeEdFTEQ5Z2wvbThLK1QrMUU0M1p4N1VCb2V6TlRISjNTcXNoL2MzQm5GL3B4TmJUY1pka3drSXJIY3dSK2ZQNk5yaWUxYW55dTFkSUpWSlMwSmZ4U2dJeUtHWW1PZ2NodHBhT2ZyV0VIdXJDL1pxdXlIMUlVOGxNUT09PC9TUD4=
2024-04-23 12:50:52 UTC	1886	IN	HTTP/1.1 200 OK Cache-Control: max-age=31536000 Content-Length: 7886 Content-Type: image/x-icon Last-Modified: Sat, 13 Apr 2024 02:47:19 GMT Accept-Ranges: bytes ETag: "80d5cbe64c8dda1:0" P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: FedAuth=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; path=/; SameSite=None; secure; HttpOnly SPRequestDuration: 6 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.24803 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: E10810DC60AE44809CCD1B536D88B0B0 Ref B: ATL331000101033 Ref C: 2024-04-23T12:50:52Z Date: Tue, 23 Apr 2024 12:50:51 GMT Connection: close
2024-04-23 12:50:52 UTC	2261	IN	Data Raw: 00 00 01 00 03 00 20 20 00 00 01 00 20 00 a8 10 00 00 36 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 de 10 00 00 10 10 00 00 01 00 20 00 68 04 00 00 66 1a 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 6 hf( @
2024-04-23 12:50:52 UTC	5625	IN	Data Raw: ff df 90 14 cf 00 00 00 00 d4 78 00 60 d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff cf 74 01 ff bf 69 02 ff bf 6c 06 ff d0 80 0e ff df 90 14 ff df 90 14 ff df 90 14 ff df 90 14 ff df 90 14 ff df 90 14 ff df 90 14 ff df 90 14 ff df 90 14 cf df 90 14 10 00 00 00 00 00 00 00 00 d4 78 00 cf d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d4 78 00 ff d2 77 00 ff c4 6d 02 ff b8 64 03 ff b8 64 03 ff b8 64 03 ff b8 64 03 ff ba 67 04 ff c9 77 0a ff da 8b 12 ff df 90 14 ff df 90 14 ff df 90 14 ff df 90 14 df df 90 14 80 00 00 Data Ascii: x`xxxxxxxxxxxxxxxxtilxxxxxxxxxxxxxxwmddddgw

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:50:55 UTC	1848	OUT	GET /personal/nicole_felthaus_mmclippers_com/_api/web/GetListUsingPath(DecodedUrl=@a1)/RenderListDataAsStream?@a1=%27%2Fpersonal%2Fnicole%5Ffelthaus%5Fmmclippers%5Fcom%2FDocuments%27&RootFolder=%2Fpersonal%2Fnicole%5Ffelthaus%5Fmmclippers%5Fcom%2FDocuments%2FLandmark%20%2D%20Preview%20and%20Print%20Online&TryNewExperienceSingle=TRUE HTTP/1.1 Host: netorgft3546691-my.sharepoint.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: FedAuth=77u/PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48U1A+VjEzLDBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uI2E1MGMzMGRiOWFjOTAyMWQ2NmY1NTJmNmI5YjU2MjdkMzFlMGNkYzkxZDA4YTYxNDcxNWQyNzk2NTc3MWMwMjUsMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jYTUwYzMwZGI5YWM5MDIxZDY2ZjU1MmY2YjliNTYyN2QzMWUwY2RjOTFkMDhhNjE0NzE1ZDI3OTY1NzcxYzAyNSwxMzM1ODM1MDU0MzAwMDAwMDAsMCwxMzM1ODQzNjY0MzMyNDg1ODYsMC4wLjAuMCwyNTgsZmY2NTY0NDYtMTY5OS00OTEyLWE2NDAtNjE4MzQxMDZlNzczLCwsZjBkMjIxYTEtMDA1Ny01MDAwLTJiMzktOWRiOWQ1ODc3M2I5LGYwZDIyMWExLTAwNTctNTAwMC0yYjM5LTlkYjlkNTg3NzNiOSxwNU41aG5uL3hVRy9GRk9DTnhLaDVRLDAsMCwwLCwsLDI2NTA0Njc3NDM5OTk5OTk5OTksMCwsLCwsLCwwLCwxOTI2NzMsRGFEQWZqUVFtcHlPWHgyUnJLX1c1bHZvTFo0LGoxa3dxNmRQQXo5Sk80LzFrQ2JTTmloQVFnOUZmR2pCNFFDSXNidlN6UUN5T1BtMXZBQ3lZSlZNeitYdDBPbHJhOUlxRm43Rk9OckhBeEdJUTkwY3IyVW1RWktpQmh4UklPMkJsWXd5bC9wM0dLRkw1T1dmRi9GTnBzNlo4OWlkN1BMcmhrU0JhckZ6KzRsUTMyK09FV3VJYWhnWUdBMnNtSUZJeHFrdU83dW1ERG5GZnFEZ0VmeHlyVUxFNitEbDdsR0RsUWQ2VWhBckZPbWRMTS9Gc1dVRVlhVHVIeEdFTEQ5Z2wvbThLK1QrMUU0M1p4N1VCb2V6TlRISjNTcXNoL2MzQm5GL3B4TmJUY1pka3drSXJIY3dSK2ZQNk5yaWUxYW55dTFkSUpWSlMwSmZ4U2dJeUtHWW1PZ2NodHBhT2ZyV0VIdXJDL1pxdXlIMUlVOGxNUT09PC9TUD4=
2024-04-23 12:50:55 UTC	3268	IN	HTTP/1.1 405 Method Not Allowed Cache-Control: private, max-age=0 Transfer-Encoding: chunked Content-Type: application/xml;charset=utf-8 Expires: Mon, 08 Apr 2024 12:50:55 GMT Last-Modified: Tue, 23 Apr 2024 12:50:55 GMT Vary: Origin P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: FedAuth=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; path=/; SameSite=None; secure; HttpOnly X-NetworkStatistics: 0,1051136,1,64,1098678,0,715630 X-SharePointHealthScore: 1 X-SP-SERVERSTATE: ReadOnly=0 DATASERVICEVERSION: 3.0 SPClientServiceRequestDuration: 18 SPRequestDuration: 18 X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: f3d221a1-9059-5000-148f-e78d8b7fbddf request-id: f3d221a1-9059-5000-148f-e78d8b7fbddf MS-CV: oSHS81mQAFAUj+eNi3+93w.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=ff656446-1699-4912-a640-61834106e773&destinationEndpoint=Edge-Prod-ATL33r5d&frontEnd=AFD&RemoteIP=89.187.171.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com .office365.com .powerapps.com .yammer.com engage.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.24803 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 5D376B8BD5BC465AB79BB4A990C4F5A7 Ref B: ATL331000108025 Ref C: 2024-04-23T12:50:55Z Date: Tue, 23 Apr 2024 12:50:54 GMT Connection: close
2024-04-23 12:50:55 UTC	450	IN	Data Raw: 31 62 62 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 6d 3a 65 72 72 6f 72 20 78 6d 6c 6e 73 3a 6d 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 61 64 6f 2f 32 30 30 37 2f 30 38 2f 64 61 74 61 73 65 72 76 69 63 65 73 2f 6d 65 74 61 64 61 74 61 22 3e 3c 6d 3a 63 6f 64 65 3e 2d 31 2c 20 4d 69 63 72 6f 73 6f 66 74 2e 53 68 61 72 65 50 6f 69 6e 74 2e 43 6c 69 65 6e 74 2e 43 6c 69 65 6e 74 53 65 72 76 69 63 65 45 78 63 65 70 74 69 6f 6e 3c 2f 6d 3a 63 6f 64 65 3e 3c 6d 3a 6d 65 73 73 61 67 65 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 48 54 54 50 20 6d 65 74 68 6f 64 20 27 47 45 54 27 20 63 61 6e 6e 6f 74 20 62 65 Data Ascii: 1bb<?xml version="1.0" encoding="utf-8"?><m:error xmlns:m="http://schemas.microsoft.com/ado/2007/08/dataservices/metadata"><m:code>-1, Microsoft.SharePoint.Client.ClientServiceException</m:code><m:message xml:lang="en-US">The HTTP method 'GET' cannot be
2024-04-23 12:50:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:50:55 UTC	1724	OUT	GET /personal/nicole_felthaus_mmclippers_com/_api/web/GetListUsingPath(DecodedUrl=@a1)/RenderListDataAsStream?@a1=%27%2Fpersonal%2Fnicole%5Ffelthaus%5Fmmclippers%5Fcom%2FDocuments%27&TryNewExperienceSingle=TRUE HTTP/1.1 Host: netorgft3546691-my.sharepoint.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: FedAuth=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
2024-04-23 12:50:55 UTC	3266	IN	HTTP/1.1 405 Method Not Allowed Cache-Control: private, max-age=0 Transfer-Encoding: chunked Content-Type: application/xml;charset=utf-8 Expires: Mon, 08 Apr 2024 12:50:55 GMT Last-Modified: Tue, 23 Apr 2024 12:50:55 GMT Vary: Origin P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: FedAuth=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; path=/; SameSite=None; secure; HttpOnly X-NetworkStatistics: 0,525568,0,15,274991,0,264489 X-SharePointHealthScore: 2 X-SP-SERVERSTATE: ReadOnly=0 DATASERVICEVERSION: 3.0 SPClientServiceRequestDuration: 19 SPRequestDuration: 20 X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: f3d221a1-705a-5000-2b39-940731f82d96 request-id: f3d221a1-705a-5000-2b39-940731f82d96 MS-CV: oSHS81pwAFArOZQHMfgtlg.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=ff656446-1699-4912-a640-61834106e773&destinationEndpoint=Edge-Prod-ATL33r5b&frontEnd=AFD&RemoteIP=89.187.171.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com .office365.com .powerapps.com .yammer.com engage.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.24803 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 6744FB5E6B4E4306955A044BC9371972 Ref B: ATL331000103031 Ref C: 2024-04-23T12:50:55Z Date: Tue, 23 Apr 2024 12:50:54 GMT Connection: close
2024-04-23 12:50:55 UTC	450	IN	Data Raw: 31 62 62 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 6d 3a 65 72 72 6f 72 20 78 6d 6c 6e 73 3a 6d 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 61 64 6f 2f 32 30 30 37 2f 30 38 2f 64 61 74 61 73 65 72 76 69 63 65 73 2f 6d 65 74 61 64 61 74 61 22 3e 3c 6d 3a 63 6f 64 65 3e 2d 31 2c 20 4d 69 63 72 6f 73 6f 66 74 2e 53 68 61 72 65 50 6f 69 6e 74 2e 43 6c 69 65 6e 74 2e 43 6c 69 65 6e 74 53 65 72 76 69 63 65 45 78 63 65 70 74 69 6f 6e 3c 2f 6d 3a 63 6f 64 65 3e 3c 6d 3a 6d 65 73 73 61 67 65 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 48 54 54 50 20 6d 65 74 68 6f 64 20 27 47 45 54 27 20 63 61 6e 6e 6f 74 20 62 65 Data Ascii: 1bb<?xml version="1.0" encoding="utf-8"?><m:error xmlns:m="http://schemas.microsoft.com/ado/2007/08/dataservices/metadata"><m:code>-1, Microsoft.SharePoint.Client.ClientServiceException</m:code><m:message xml:lang="en-US">The HTTP method 'GET' cannot be
2024-04-23 12:50:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:50:56 UTC	2757	OUT	GET /_layouts/15/odspserviceworkerproxy.aspx?swManifestName=spserviceworker&debug=false&bypass=false&navigationPreloadHeaderValue=%7B%22supportsFeatures%22%3A%5B1855%5D%7D&applications=%5B%7B%22id%22%3A%22STS%22%2C%22swPrefetchManifestName%22%3A%22stsserviceworkerprefetch%22%7D%2C%7B%22id%22%3A%22SPHome%22%7D%2C%7B%22id%22%3A%22SitePages%22%7D%2C%7B%22id%22%3A%22Embed%22%7D%2C%7B%22id%22%3A%22CreateGroup%22%7D%2C%7B%22id%22%3A%22SingleWebPart%22%7D%2C%7B%22id%22%3A%22VivaHome%22%7D%2C%7B%22id%22%3A%22BrokerLogon%22%7D%2C%7B%22id%22%3A%22Clipchamp%22%7D%2C%7B%22id%22%3A%22MeeBridge%22%7D%5D&list=v2&defaultBrotli=true&authenticateFast=true&wwData=true&prefetchFilebrowserPageInTeams=true&FUIV9Flights=[-83099649,3]&spStartApplicationWebBundle=true&enableIntegrities=true HTTP/1.1 Host: netorgft3546691-my.sharepoint.com Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://netorgft3546691-my.sharepoint.com/personal/nicole_felthaus_mmclippers_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fnicole%5Ffelthaus%5Fmmclippers%5Fcom%2FDocuments%2FLandmark%20%2D%20Preview%20and%20Print%20Online%2FView%20and%20Print%20Online%2Epdf&parent=%2Fpersonal%2Fnicole%5Ffelthaus%5Fmmclippers%5Fcom%2FDocuments%2FLandmark%20%2D%20Preview%20and%20Print%20Online&ga=1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: FedAuth=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
2024-04-23 12:50:56 UTC	1905	IN	HTTP/1.1 200 OK Cache-Control: max-age=600 Content-Length: 897 Content-Type: text/javascript; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: FedAuth=77u/PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48U1A+VjEzLDBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uI2E1MGMzMGRiOWFjOTAyMWQ2NmY1NTJmNmI5YjU2MjdkMzFlMGNkYzkxZDA4YTYxNDcxNWQyNzk2NTc3MWMwMjUsMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jYTUwYzMwZGI5YWM5MDIxZDY2ZjU1MmY2YjliNTYyN2QzMWUwY2RjOTFkMDhhNjE0NzE1ZDI3OTY1NzcxYzAyNSwxMzM1ODM1MDU0MzAwMDAwMDAsMCwxMzM1ODQzNjY0MzMyNDg1ODYsMC4wLjAuMCwyNTgsZmY2NTY0NDYtMTY5OS00OTEyLWE2NDAtNjE4MzQxMDZlNzczLCwsZjBkMjIxYTEtMDA1Ny01MDAwLTJiMzktOWRiOWQ1ODc3M2I5LGYwZDIyMWExLTAwNTctNTAwMC0yYjM5LTlkYjlkNTg3NzNiOSxwNU41aG5uL3hVRy9GRk9DTnhLaDVRLDAsMCwwLCwsLDI2NTA0Njc3NDM5OTk5OTk5OTksMCwsLCwsLCwwLCwxOTI2NzMsRGFEQWZqUVFtcHlPWHgyUnJLX1c1bHZvTFo0LGoxa3dxNmRQQXo5Sk80LzFrQ2JTTmloQVFnOUZmR2pCNFFDSXNidlN6UUN5T1BtMXZBQ3lZSlZNeitYdDBPbHJhOUlxRm43Rk9OckhBeEdJUTkwY3IyVW1RWktpQmh4UklPMkJsWXd5bC9wM0dLRkw1T1dmRi9GTnBzNlo4OWlkN1BMcmhrU0JhckZ6KzRsUTMyK09FV3VJYWhnWUdBMnNtSUZJeHFrdU83dW1ERG5GZnFEZ0VmeHlyVUxFNitEbDdsR0RsUWQ2VWhBckZPbWRMTS9Gc1dVRVlhVHVIeEdFTEQ5Z2wvbThLK1QrMUU0M1p4N1VCb2V6TlRISjNTcXNoL2MzQm5GL3B4TmJUY1pka3drSXJIY3dSK2ZQNk5yaWUxYW55dTFkSUpWSlMwSmZ4U2dJeUtHWW1PZ2NodHBhT2ZyV0VIdXJDL1pxdXlIMUlVOGxNUT09PC9TUD4=; path=/; SameSite=None; secure; HttpOnly Service-Worker-Allowed: / Strict-Transport-Security: max-age=31536000 X-AspNet-Version: 4.0.30319 SPRequestDuration: 17 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.24803 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: F02502FA82A4494780A5AAADC8C03DEA Ref B: ATL331000105011 Ref C: 2024-04-23T12:50:56Z Date: Tue, 23 Apr 2024 12:50:56 GMT Connection: close
2024-04-23 12:50:56 UTC	897	IN	Data Raw: 0d 0a 76 61 72 20 5f 73 74 61 72 74 54 69 6d 65 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 2c 5f 73 74 61 72 74 54 69 6d 65 54 69 63 6b 73 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 0a 76 61 72 20 5f 73 68 6f 75 6c 64 42 79 70 61 73 73 3d 66 61 6c 73 65 3b 0a 76 61 72 20 5f 63 64 6e 42 61 73 65 55 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 72 65 73 2d 31 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 66 69 6c 65 73 2f 6f 64 73 70 2d 77 65 62 2d 70 72 6f 64 5f 32 30 32 34 2d 30 34 2d 30 35 2e 30 30 37 2f 27 3b 0a 76 61 72 20 5f 73 77 42 75 69 6c 64 4e 75 6d 62 65 72 3d 27 6f 64 73 70 2d 77 65 62 2d 70 72 6f 64 5f 32 30 32 34 2d 30 34 2d 30 35 2e 30 30 37 27 3b 0a 76 61 72 20 5f 77 77 42 75 69 6c 64 4e 75 6d 62 65 72 3d 27 6f 64 73 70 2d 77 65 62 2d 70 72 6f Data Ascii: var _startTime=performance.now(),_startTimeTicks=Date.now();var _shouldBypass=false;var _cdnBaseUrl='https://res-1.cdn.office.net/files/odsp-web-prod_2024-04-05.007/';var _swBuildNumber='odsp-web-prod_2024-04-05.007';var _wwBuildNumber='odsp-web-pro